Skip to content

chore(deps):(deps): bump the production-patches group across 1 directory with 6 updates#356

Open
dependabot[bot] wants to merge 1 commit intostagingfrom
dependabot/npm_and_yarn/production-patches-56d0b91799
Open

chore(deps):(deps): bump the production-patches group across 1 directory with 6 updates#356
dependabot[bot] wants to merge 1 commit intostagingfrom
dependabot/npm_and_yarn/production-patches-56d0b91799

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 2, 2026

Bumps the production-patches group with 6 updates in the / directory:

Package From To
@ai-sdk/openai 3.0.48 3.0.49
@astrojs/netlify 7.0.5 7.0.6
@astrojs/vercel 10.0.3 10.0.4
@iconify-json/lucide 1.2.100 1.2.101
ai 6.0.141 6.0.142
express-rate-limit 8.3.1 8.3.2

Updates @ai-sdk/openai from 3.0.48 to 3.0.49

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/openai@​3.0.49

Patch Changes

  • bc01093: fix(openai): support file-url parts in tool output content
Commits

Updates @astrojs/netlify from 7.0.5 to 7.0.6

Release notes

Sourced from @​astrojs/netlify's releases.

@​astrojs/netlify@​7.0.6

Patch Changes

  • Updated dependencies [814406d]:
    • @​astrojs/underscore-redirects@​1.0.3
Changelog

Sourced from @​astrojs/netlify's changelog.

7.0.6

Patch Changes

  • Updated dependencies [814406d]:
    • @​astrojs/underscore-redirects@​1.0.3
Commits

Updates @astrojs/vercel from 10.0.3 to 10.0.4

Release notes

Sourced from @​astrojs/vercel's releases.

@​astrojs/vercel@​10.0.4

Patch Changes

  • #16170 d0fe1ec Thanks @​bittoby! - Fixes edge middleware next() dropping the HTTP method and body when forwarding requests to the serverless function, which caused non-GET API routes (POST, PUT, PATCH, DELETE) to return 404
Changelog

Sourced from @​astrojs/vercel's changelog.

10.0.4

Patch Changes

  • #16170 d0fe1ec Thanks @​bittoby! - Fixes edge middleware next() dropping the HTTP method and body when forwarding requests to the serverless function, which caused non-GET API routes (POST, PUT, PATCH, DELETE) to return 404
Commits

Updates @iconify-json/lucide from 1.2.100 to 1.2.101

Commits

Updates ai from 6.0.141 to 6.0.142

Release notes

Sourced from ai's releases.

ai@6.0.142

Patch Changes

  • 6f75953: feat(ai): add new isLoopFinished stop condition helper for unlimited steps
  • Updated dependencies [70322b4]
    • @​ai-sdk/gateway@​3.0.84
Commits
  • 1d18256 Version Packages (#13973)
  • 70322b4 Backport: chore(provider/gateway): update gateway model settings files v6 (#1...
  • 6f75953 Backport: feat(ai): add new isLoopFinished stop condition helper for unlimi...
  • cf15595 Backport: refactor: generalize image and video generation examples (#13960)
  • 62cb3b5 Version Packages (#13954)
  • ff854a2 Backport: fix(amazon-bedrock): add tool search beta for Anthropic (#13951)
  • 58c95db Version Packages (#13948)
  • afb6886 Backport: feat (provider/google-vertex): add support for maas models (#13945)
  • 7372f61 Version Packages (#13936)
  • bc01093 Backport: fix(openai): support file-url parts in tool output content (#13933)
  • Additional commits viewable in compare view

Updates express-rate-limit from 8.3.1 to 8.3.2

Release notes

Sourced from express-rate-limit's releases.

v8.3.2

You can view the changelog here.

Commits
  • c4dbb42 8.3.2
  • 8f1cc66 v8.3.2 changelog
  • 601b87f Fix skipFailedRequests for for connections that close very early (#611)
  • 014c2f3 chore(deps-dev): bump the development-dependencies group with 6 updates (#612)
  • 4e8b18b Remove Zuplo sponsorship details from README (#613)
  • 31dab19 test: use numeric range for reset timestamp assertion (#610)
  • f82ad13 chore(deps-dev): bump the development-dependencies group with 2 updates (#609)
  • fa0b098 docs: fix broken link
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Upgraded six production dependencies to latest patch versions to improve reliability and deployment behavior on Vercel and Netlify.

  • Dependencies
    • @astrojs/vercel 10.0.3 → 10.0.4 — fixes edge middleware forwarding method/body for non-GET routes.
    • @astrojs/netlify 7.0.5 → 7.0.6 — updates redirects to respect trailingSlash.
    • @ai-sdk/openai 3.0.48 → 3.0.49 — supports file-url parts in tool output content.
    • ai 6.0.141 → 6.0.142 — adds isLoopFinished stop condition helper.
    • express-rate-limit 8.3.1 → 8.3.2 — fixes skipFailedRequests for very early closed connections.
    • @iconify-json/lucide 1.2.100 → 1.2.101 — icon set patch update.

Written for commit aed99ca. Summary will update on new commits.

…ory with 6 updates

Bumps the production-patches group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/openai](https://github.com/vercel/ai) | `3.0.48` | `3.0.49` |
| [@astrojs/netlify](https://github.com/withastro/astro/tree/HEAD/packages/integrations/netlify) | `7.0.5` | `7.0.6` |
| [@astrojs/vercel](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vercel) | `10.0.3` | `10.0.4` |
| [@iconify-json/lucide](https://github.com/iconify/icon-sets) | `1.2.100` | `1.2.101` |
| [ai](https://github.com/vercel/ai) | `6.0.141` | `6.0.142` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.3.1` | `8.3.2` |



Updates `@ai-sdk/openai` from 3.0.48 to 3.0.49
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/openai@3.0.48...@ai-sdk/openai@3.0.49)

Updates `@astrojs/netlify` from 7.0.5 to 7.0.6
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/netlify/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/netlify@7.0.6/packages/integrations/netlify)

Updates `@astrojs/vercel` from 10.0.3 to 10.0.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vercel/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/vercel@10.0.4/packages/integrations/vercel)

Updates `@iconify-json/lucide` from 1.2.100 to 1.2.101
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `ai` from 6.0.141 to 6.0.142
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@6.0.141...ai@6.0.142)

Updates `express-rate-limit` from 8.3.1 to 8.3.2
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.3.1...v8.3.2)

---
updated-dependencies:
- dependency-name: "@ai-sdk/openai"
  dependency-version: 3.0.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patches
- dependency-name: "@astrojs/netlify"
  dependency-version: 7.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patches
- dependency-name: "@astrojs/vercel"
  dependency-version: 10.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patches
- dependency-name: "@iconify-json/lucide"
  dependency-version: 1.2.101
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patches
- dependency-name: ai
  dependency-version: 6.0.142
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patches
- dependency-name: express-rate-limit
  dependency-version: 8.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patches
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 2, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 2, 2026

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel
Copy link
Copy Markdown

vercel bot commented Apr 2, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
pixelated Ready Ready Preview, Comment Apr 2, 2026 5:53am

Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants