build(deps): bump the dependencies group across 1 directory with 54 updates

[dependabot]

Bumps the dependencies group with 54 updates in the / directory:

Package	From	To
@changesets/cli	2.28.1	2.29.7
@commitlint/cli	19.7.1	20.1.0
@commitlint/config-conventional	19.7.1	20.0.0
dotenv-cli	8.0.0	11.0.0
dotenv-mono	1.3.14	1.5.1
lint-staged	15.4.3	16.2.6
prettier	3.5.1	3.6.2
pretty-quick	4.0.0	4.2.2
rimraf	6.0.1	6.1.0
turbo	2.4.2	2.6.0
typescript	5.7.3	5.9.3
vitest	3.0.7	4.0.6
@eslint/js	9.21.0	9.39.0
@next/eslint-plugin-next	15.2.1	16.0.1
eslint	9.21.0	9.39.0
@types/eslint	8.56.12	9.6.1
eslint-config-prettier	10.0.2	10.1.8
eslint-plugin-react	7.37.4	7.37.5
eslint-plugin-react-hooks	5.2.0	7.0.1
eslint-plugin-turbo	2.4.4	2.6.0
eslint-plugin-unused-imports	4.1.4	4.3.0
globals	15.15.0	16.5.0
typescript-eslint	8.26.0	8.46.2
zod	3.24.2	4.1.12
@hey-api/openapi-ts	0.77.0	0.86.11
@types/node	22.13.4	24.10.0
dotenv	16.4.7	17.2.3
@blaxel/core	0.2.0	0.2.46
@composio/mcp	1.0.7	1.0.9
@modelcontextprotocol/sdk	1.13.2	1.20.2
@smithery/sdk	1.5.2	1.7.4
cache-manager	6.4.3	7.2.4
cacheable	1.10.0	2.1.1
chalk	5.4.1	5.6.2
eventsource	3.0.7	4.0.0
keyv	5.3.4	5.5.3
uuid	11.1.0	13.0.0
yaml	2.8.0	2.8.1
@rollup/plugin-alias	5.1.1	6.0.0
@rollup/plugin-commonjs	28.0.2	29.0.0
@rollup/plugin-node-resolve	16.0.0	16.0.3
@rollup/plugin-typescript	12.1.2	12.3.0
rollup	4.34.9	4.52.5
rollup-plugin-dts	6.1.1	6.2.3
tsx	4.20.3	4.20.6
@blaxel/langgraph	0.2.0	0.2.46
@langchain/core	0.3.51	1.0.2
@langchain/langgraph	0.2.68	1.0.1
@opentelemetry/instrumentation-fastify	0.45.0	0.52.0
fastify	5.4.0	5.6.1
@types/express	5.0.3	5.0.5
@langchain/openai	0.5.10	1.0.0
inquirer	12.6.3	12.10.0
ora	8.2.0	9.0.0

Updates @changesets/cli from 2.28.1 to 2.29.7

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.29.7

Patch Changes

• Updated dependencies [957f24e]:
  • @​changesets/apply-release-plan@​7.0.13

@​changesets/cli@​2.29.6

Patch Changes

• #1712 a3563b0 Thanks @​benmccann! - Switch to maintained fork of external-editor

@​changesets/cli@​2.29.5

Patch Changes

• #1693 6352819 Thanks @​Andarist! - Fixed an issue with workspace:^ and workspace:~ dependency ranges not being semantically treated as, respectively, ^CURRENT_VERSION and ~CURRENT_VERSION. This led to dependent packages being, at times, bumped too often when their dependencies with those ranges were bumped.

• Updated dependencies [6352819]:

  • @​changesets/assemble-release-plan@​6.0.9
  • @​changesets/get-release-plan@​4.0.13

@​changesets/cli@​2.29.4

Patch Changes

• #1668 65d6632 Thanks @​Andarist! - Fixed a crash in pre mode when trying to version private packages when tagging for private package is disabled

• Updated dependencies [65d6632]:

  • @​changesets/assemble-release-plan@​6.0.8
  • @​changesets/get-release-plan@​4.0.12

@​changesets/cli@​2.29.3

Patch Changes

• #1589 de8bebc Thanks @​remorses, @​vzt7! - Fixed a crash in prerelease mode when a package misses the version field in its package.json

• #1619 c1e8a78 Thanks @​manucorporat! - Support ../ in publishConfig.directory when publishing packages

• Updated dependencies [de8bebc]:

  • @​changesets/assemble-release-plan@​6.0.7
  • @​changesets/get-release-plan@​4.0.11

@​changesets/cli@​2.29.2

Patch Changes

• #1636 f73f84a Thanks @​Netail! - Correctly resolve new changesets with since option when the .changeset directory is not directly in the git root

• Updated dependencies [f73f84a]:

  • @​changesets/read@​0.6.5
  • @​changesets/git@​3.0.4
  • @​changesets/get-release-plan@​4.0.10
  • @​changesets/apply-release-plan@​7.0.12

... (truncated)

Commits

• 8c065c4 Version Packages (#1726)
• 957f24e Fix an issue that caused an incorrect CHANGELOG to be generated when a chan...
• ca0be26 Version Packages (#1713)
• a3563b0 Switch to maintained fork of external-editor (#1712)
• 283f654 Document privatePackages option (#1644)
• c7b6832 docs(readme): updated leftover (#1701)
• b57c77f Version Packages (#1694)
• 6352819 Fixed an issue with workspace:^ and workspace:~ dependency ranges not bei...
• 9ce98a5 Align used function name with import in the docs (#1673)
• b962929 Version Packages (#1669)
• Additional commits viewable in compare view

Updates @commitlint/cli from 19.7.1 to 20.1.0

Release notes

Sourced from @​commitlint/cli's releases.

v20.1.0

20.1.0 (2025-09-30)

Features

• feat(config-pnpm-scopes): allow global scope by @​ya2s in conventional-changelog/commitlint#4553

Bug Fixes

• fix(resolve-extends): add import attribute for JSON config files by @​macieklamberski in conventional-changelog/commitlint#4551

New Contributors

• @​ya2s made their first contribution in conventional-changelog/commitlint#4553
• @​macieklamberski made their first contribution in conventional-changelog/commitlint#4551

Full Changelog: conventional-changelog/commitlint@v20.0.0...v20.1.0

v20.0.0

20.0.0 (2025-09-25)

Features

• feat(rules)!: make body-max-line-length ignore lines with URLs (#4486) (2f37a88), closes #4486 by @​aspiers

BREAKING CHANGES

• when lines contain URLs exceeding the maximum line length body-max-line-length will be ignored

Full Changelog: conventional-changelog/commitlint@v19.9.1...v20.0.0

v19.9.1

19.9.1 (2025-08-29)

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

20.1.0 (2025-09-30)

Note: Version bump only for package @​commitlint/cli

20.0.0 (2025-09-25)

Note: Version bump only for package @​commitlint/cli

19.8.1 (2025-05-08)

Bug Fixes

• update dependency tinyexec to v1 (#4332) (e49449f)

19.8.0 (2025-03-07)

Performance Improvements

• use node: prefix to bypass require.cache call for builtins (#4302) (0cd8f41)

Commits

• a8e86d2 v20.1.0
• 407be6c v20.0.0
• 3c30200 v19.8.1
• e49449f fix: update dependency tinyexec to v1 (#4332)
• e2e3b67 Chore/deps prettier v3 3 (#4320)
• b92f072 chore: update gitHead after failed publish (#4315)
• e82f05a v19.8.0
• e685618 chore: add missing 'use strict' directives (#4301)
• 0cd8f41 perf: use node: prefix to bypass require.cache call for builtins (#4302)
• See full diff in compare view

Updates @commitlint/config-conventional from 19.7.1 to 20.0.0

Release notes

Sourced from @​commitlint/config-conventional's releases.

v20.0.0

20.0.0 (2025-09-25)

Features

• feat(rules)!: make body-max-line-length ignore lines with URLs (#4486) (2f37a88), closes #4486 by @​aspiers

BREAKING CHANGES

• when lines contain URLs exceeding the maximum line length body-max-line-length will be ignored

Full Changelog: conventional-changelog/commitlint@v19.9.1...v20.0.0

v19.9.1

19.9.1 (2025-08-29)

Bug Fixes

• fix: add TypeScript support and configuration for pnpm scopes by @​alsmadi99 in conventional-changelog/commitlint#4544

Full Changelog: conventional-changelog/commitlint@v19.9.0...v19.9.1

v19.9.0

19.9.0 (2025-08-26)

Features

• bug(config-pnpm-scopes): migrate package to TypeScript by @​alsmadi99 in conventional-changelog/commitlint#4541 (type got messed up)

Chore, docs, etc.

• docs: add a note about configuration under node24 by @​sodle in conventional-changelog/commitlint#4406
• chore: add Ubuntu 24.04 and Windows 2025 to CI by @​Marukome0743 in conventional-changelog/commitlint#4435
• docs: refactor CI setup example of GitHub Actions by @​Marukome0743 in conventional-changelog/commitlint#4439
• ci: use tags for immutable github actions by @​Fdawgs in conventional-changelog/commitlint#4458
• chore: migrate eslint-plugin-import to eslint-plugin-import-x by @​JounQin in conventional-changelog/commitlint#4473
• ci: add commitlint GitHub Actions by @​Marukome0743 in conventional-changelog/commitlint#4440

... (truncated)

Changelog

Sourced from @​commitlint/config-conventional's changelog.

20.0.0 (2025-09-25)

Note: Version bump only for package @​commitlint/config-conventional

19.8.1 (2025-05-08)

Note: Version bump only for package @​commitlint/config-conventional

19.8.0 (2025-03-07)

Performance Improvements

• use node: prefix to bypass require.cache call for builtins (#4302) (0cd8f41)

Commits

• 407be6c v20.0.0
• 3c30200 v19.8.1
• e2e3b67 Chore/deps prettier v3 3 (#4320)
• b92f072 chore: update gitHead after failed publish (#4315)
• e82f05a v19.8.0
• 0cd8f41 perf: use node: prefix to bypass require.cache call for builtins (#4302)
• See full diff in compare view

Updates dotenv-cli from 8.0.0 to 11.0.0

Release notes

Sourced from dotenv-cli's releases.

v11.0.0: Bump dotenv-expand to ^12

No release notes provided.

v10.0.0: bump dotenv-expand

Fixes entropitor/dotenv-cli#121

v9.0.0 Bump dotenv and be quiet by default

entropitor/dotenv-cli#129

Commits

• 5ddbe98 v11.0.0
• 04aa586 chore: bump dotenv-expand to ^12
• a4b18d9 chore: prettify README.md
• a979e9a chore: update README.md
• 0bf0073 10.0.0
• d4a3509 chore: bump dotenv-expand
• 6c510a3 9.0.0
• 8d377b1 Add quiet flag to suppress dotenv debug output by default (#129)
• 0da11b9 Update LICENSE with copyright information
• See full diff in compare view

Updates dotenv-mono from 1.3.14 to 1.5.1

Release notes

Sourced from dotenv-mono's releases.

Release 1.5.0

Features

• add quiet mode option to suppress console output (693778c), closes #150

Release 1.4.0

Features

• CLI implementation and enhance command-line features (6e77d1d)

Release 1.3.17

• Changed license to BSD-2-Clause
• Improved tests for some edge cases

Changelog

Sourced from dotenv-mono's changelog.

1.5.1 (2025-09-02)

Bug Fixes

• add dotenv-mono to bin (aca630b), closes #152

1.5.0 (2025-08-03)

Features

• add quiet mode option to suppress console output (693778c), closes #150

1.4.0 (2025-07-17)

Features

• CLI implementation and enhance command-line features (6e77d1d)

1.3.17 (2025-07-16)

• Changed license to BSD-2-Clause
• Improved tests for some edge cases

Bug Fixes

• improve code structure for improved readability and maintainability (76e2de8)

Commits

• deeaf07 chore(release): 1.5.1
• aca630b fix: add dotenv-mono to bin
• d559d70 chore(release): 1.5.0
• 693778c feat: add quiet mode option to suppress console output
• a475d82 chore(release): 1.4.0
• 6e77d1d feat: CLI implementation and enhance command-line features
• 80cdf9a ci: update Node.js versions and upgrade setup-node action
• c731e90 ci: remove package-lock.json from clean install step
• 3aac4a6 ci: add step to clean install environment before installing dependencies
• 2d8d1fe refactor: replace yarn actions with npm commands for dependency management an...
• Additional commits viewable in compare view

Updates lint-staged from 15.4.3 to 16.2.6

Release notes

Sourced from lint-staged's releases.

v16.2.6

Patch Changes

• #1693 33d4502 Thanks @​Adrian-Baran-GY! - Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

v16.2.5

Patch Changes

• #1687 9e02d9d Thanks @​iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

v16.2.4

Patch Changes

• #1682 0176038 Thanks @​iiroj! - Update dependencies, including [email protected] with bug fixes.

• #1671 581a54e Thanks @​iiroj! - Speed up execution by only importing the yaml depedency if using YAML configuration files.

v16.2.3

Patch Changes

• #1669 27cd541 Thanks @​iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

v16.2.2

Patch Changes

• #1667 699f95d Thanks @​iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

  Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

  % npx lint-staged --fail-on-changes
  ✔ Backed up original state in git stash (c18d55a3)
  ✔ Running tasks for staged files...
  ✖ Tasks modified files and --fail-on-changes was used!
  ↓ Cleaning up temporary files...
  ✖ lint-staged failed because --fail-on-changes was used.
  Any lost modifications can be restored from a git stash:
  > git stash list --format="%h %s"
  c18d55a3 On main: lint-staged automatic backup
  > git apply --index c18d55a3

v16.2.1

Patch Changes

• #1664 8277b3b Thanks @​iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions is readonly string[] and can't be mutated. Thanks @​outslept!

... (truncated)

Changelog

Sourced from lint-staged's changelog.

16.2.6

Patch Changes

• #1693 33d4502 Thanks @​Adrian-Baran-GY! - Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

16.2.5

Patch Changes

• #1687 9e02d9d Thanks @​iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

16.2.4

Patch Changes

• #1682 0176038 Thanks @​iiroj! - Update dependencies, including [email protected] with bug fixes.

• #1671 581a54e Thanks @​iiroj! - Speed up execution by only importing the yaml depedency if using YAML configuration files.

16.2.3

Patch Changes

• #1669 27cd541 Thanks @​iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

16.2.2

Patch Changes

• #1667 699f95d Thanks @​iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

  Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

  % npx lint-staged --fail-on-changes
  ✔ Backed up original state in git stash (c18d55a3)
  ✔ Running tasks for staged files...
  ✖ Tasks modified files and --fail-on-changes was used!
  ↓ Cleaning up temporary files...
  ✖ lint-staged failed because --fail-on-changes was used.
  Any lost modifications can be restored from a git stash:
  > git stash list --format="%h %s"
  c18d55a3 On main: lint-staged automatic backup
  > git apply --index c18d55a3

... (truncated)

Commits

• a1ec972 chore(changeset): release
• ddd5340 build(deps): regenerate package-lock.json
• ceb253a build(deps): update Vitest 4
• 58cc126 build(deps): update listr2
• 33d4502 fix: run all tasks when --continue-on-error=true
• 54ba9eb test: fix test usage for --continue-on-error
• b1715d9 test: fix test assertions for --continue-on-error to reveal incorrect behavior
• 1f6a326 chore(changeset): release
• 6ab937c ci: use separate caches for MSYS2 and Cygwin
• 6d71384 fix: catch errors when calling spawn
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lint-staged since your current version.

Updates prettier from 3.5.1 to 3.6.2

Release notes

Sourced from prettier's releases.

3.6.2

What's Changed

• Add missing blank line around code block by @​fisker in prettier/prettier#17675

🔗 Changelog

3.6.1

• Fix "Warning: File descriptor 39 closed but not opened in unmanaged mode" error when running --experimental-cli

🔗 Changelog

3.6.0

diff

🔗 Release note "Prettier 3.6: Experimental fast CLI and new OXC and Hermes plugins!"

3.5.3

🔗 Changelog

3.5.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.6.2

diff

Markdown: Add missing blank line around code block (#17675 by @​fisker)

<!-- Input -->
1. Some text, and code block below, with newline after code block
---
foo: bar


Another
List

<!-- Prettier 3.6.1 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List



<!-- Prettier 3.6.2 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List

3.6.1

diff

TypeScript: Allow const without initializer (#17650, #17654 by @​fisker)

// Input
</tr></table> 

... (truncated)

Commits

• 7a8b05f Release 3.6.2
• 46526b4 Add missing blank line around code block (#17675)
• a04ec11 chore(deps): update babel to v7.27.7 (#17684)
• 32be5b6 chore(deps): update dependency flow-parser to v0.274.1 (#17676)
• b55e777 Update docs about "TypeScript Configuration Files" (#17677)
• b197c99 chore(deps): update dependency @​vitejs/plugin-react to v4.6.0 (#17674)
• 1185f83 chore(deps): update dependency @​angular/compiler to v20.0.5 (#17680)
• aa1316f chore(deps): update dependency browserslist to v4.25.1 (#17671)
• c468d33 chore(deps): update dependency oxc-parser to v0.75.0 (#17672)
• 3f46d91 chore(deps): update dependency vite to v7 (#17673)
• Additional commits viewable in compare view

Updates pretty-quick from 4.0.0 to 4.2.2

Release notes

Sourced from pretty-quick's releases.

v4.2.2

Patch Changes

• #214 25ff3be Thanks @​JounQin! - fix: v4 should use latest npm tag

Full Changelog: prettier/pretty-quick@v4.2.1...v4.2.2

v4.2.1

Patch Changes

• #212 827ac86 Thanks @​JounQin! - fix: tinyexec v1 is esm only, use 0.x instead

Full Changelog: prettier/pretty-quick@v4.2.0...v4.2.1

v4.2.0

Minor Changes

• #206 f52440e Thanks @​JounQin! - chore(deps): cleanup dependencies by migrating find-up to findUp from @pkgr/core

Full Changelog: prettier/pretty-quick@v4.1.1...v4.2.0

v4.1.1

Patch Changes

• #200 40b2e55 Thanks @​ConradHughes! - fix: directory symlink handling - close #196

New Contributors

• @​ConradHughes made their first contribution in prettier/pretty-quick#200

Full Changelog: prettier/pretty-quick@v4.1.0...v4.1.1

v4.1.0

Minor Changes

• #195 dcf5da4 Thanks @​pralkarz! - feat: replace execa with tinyexec

• #198 76c5371 Thanks @​JounQin! - chore: bump upgradable deps without breaking changes

New Contributors

• @​swwind made their first contribution in prettier/pretty-quick#191
• @​pralkarz made their first contribution in prettier/pretty-quick#195

Full Changelog: prettier/pretty-quick@v4.0.0...v4.1.0

Changelog

Sourced from pretty-quick's changelog.

4.2.2

Patch Changes

• #214 25ff3be Thanks @​JounQin! - fix: v4 should use latest npm tag

4.2.1

Patch Changes

• #212 827ac86 Thanks @​JounQin! - fix: tinyexec v1 is esm only, use 0.x instead

4.2.0

Minor Changes

• #206 f52440e Thanks @​JounQin! - chore(deps): cleanup dependencies by migrating find-up to findUp from @pkgr/core

4.1.1

Patch Changes

• #200 40b2e55 Thanks @​ConradHughes! - fix: directory symlink handling - close #196

4.1.0

Minor Changes

• #195 dcf5da4 Thanks @​pralkarz! - feat: replace execa with tinyexec

• #198 76c5371 Thanks @​JounQin! - chore: bump upgradable deps without breaking changes

Commits

• aa0165d chore: release pretty-quick (#215)
• 25ff3be fix: v4 should use latest npm tag (#214)
• 689ccf2 chore: release pretty-quick (#213)
• 827ac86 fix: tinyexec v1 is esm only, use 0.x instead (#212)
• 87771dd chore: release pretty-quick (#207)
• f52440e chore: bump all (dev)Dependencies and fix related usage issues (#206)
• f8b9eb8 chore: add renovate preset
• d74a71f chore: release pretty-quick (#201)
• 40b2e55 fix: directory symlink handling (#200)
• 5bc6618 chore: release pretty-quick (#199)
• Additional commits viewable in compare view

Updates rimraf from 6.0.1 to 6.1.0

Changelog

Sourced from rimraf's changelog.

6.1

• Move to native fs/promises usage instead of promisifying manually.

6.0

• Drop support for nodes before v20
• Add --version to CLI

5.0

• No default export, only named exports

4.4

• Provide Dirent or Stats object as second argument to filter

4.3

• Return boolean indicating whether the path was fully removed
• Add filter option
• bin: add --verbose, -v to print files as they are deleted
• bin: add --no-verbose, -V to not print files as they are deleted
• bin: add -i --interactive to be prompted on each deletion
• bin: add -I --no-interactive to not be prompted on each deletion
• 4.3.1 Fixed inappropriately following symbolic links to directories

v4.2

• Brought back glob support, using the new and improved glob v9

v4.1

• Improved hybrid module with no need to look at the .default dangly bit. .default preserved as a reference to rimraf for compatibility with anyone who came to rely on it in v4.0.
• Accept and ignore -rf and -fr arguments to the bin.

v4.0

• Remove glob dependency entirely. This library now only accepts actual file and folder names to delete.
• Accept array of paths or single path.
• Windows performance and reliability improved.
• All strategies separated into explicitly exported methods.
• Drop support for Node.js below version 14
• rewrite in TypeScript

... (truncated)

Commits

• 18dc77a 6.1.0
• 2bd2e62 changelog 6.1
• 19311cf refactor: switch to native fs.promises
• 0c437d4 Create separate dir for integration tests
• 65a3b8a Do not pass unnecessary rest args to fs functions
• 02b31b7 Use the same ignoreENOENT and fixEPERM utils everywhere
• c012f4f Mock process.platform with t.intercept
• c72278a Use tap.intercept to test bin
• 549d1e8 Configure tap coverage-map
• a76970b benchmark: add options to filter and compare benchmarks
• Additional commits viewable in compare view

Updates turbo from 2.4.2 to 2.6.0

Release notes

Sourced from turbo's releases.

Turborepo v2.6.0

What's Changed

Docs

• docs: clarification on Transit Nodes docs by @​maschwenk in vercel/turborepo#9181
• docs: add GitHub Actions reusable workflow documentation for remote caching by @​anthonyshew in vercel/turborepo#10923
• docs: ge...

  Description has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.