Skip to content

chore(deps): Bump the production-dependencies group with 6 updates - #118

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-7392bfee8b
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-7392bfee8b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 6 updates:

Package From To
@lucide/svelte 1.51.0 1.54.0
@vercel/blob 2.8.0 2.8.1
dotenv 18.0.6 18.0.7
marked 18.0.14 18.1.0
nanoid 6.0.1 6.0.2
openai 7.27.0 7.32.0

Updates @lucide/svelte from 1.51.0 to 1.54.0

Release notes

Sourced from @​lucide/svelte's releases.

Version 1.54.0

What's Changed

Full Changelog: lucide-icons/lucide@1.53.0...1.54.0

Version 1.53.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.52.0...1.53.0

Version 1.52.0

What's Changed

Full Changelog: lucide-icons/lucide@1.51.0...1.52.0

Commits

Updates @vercel/blob from 2.8.0 to 2.8.1

Release notes

Sourced from @​vercel/blob's releases.

@​vercel/blob@​2.8.1

Patch Changes

  • 59be092: Allow get() to fetch blob URLs from a VERCEL_BLOB_API_URL origin. get() only accepted URLs on *.blob.vercel-storage.com, which blocked local emulators like emulate, since they serve blob content from their own host. When VERCEL_BLOB_API_URL (or NEXT_PUBLIC_VERCEL_BLOB_API_URL) is set, URLs on that same origin are now accepted as well. With no override set the behavior is unchanged, so arbitrary hosts are still rejected in production.
Changelog

Sourced from @​vercel/blob's changelog.

2.8.1

Patch Changes

  • 59be092: Allow get() to fetch blob URLs from a VERCEL_BLOB_API_URL origin. get() only accepted URLs on *.blob.vercel-storage.com, which blocked local emulators like emulate, since they serve blob content from their own host. When VERCEL_BLOB_API_URL (or NEXT_PUBLIC_VERCEL_BLOB_API_URL) is set, URLs on that same origin are now accepted as well. With no override set the behavior is unchanged, so arbitrary hosts are still rejected in production.
Commits

Updates dotenv from 18.0.6 to 18.0.7

Changelog

Sourced from dotenv's changelog.

18.0.7 (2026-10-09)

Changed

  • Treat undefined settings like quiet: true as null rather than falsey (#1070)
  • CLI should honor DOTENV_QUIET setting in .env file (#1071)
Commits
  • 2953207 18.0.7
  • 9944723 make more readable for undefined -> null
  • d455db0 Merge branch 'master' of github.com:motdotla/dotenv
  • e411e02 changelog
  • 6237c35 Merge pull request #1070 from Utkarsh-Singhal-26/fix/ignore-undefined-config-...
  • 9af8c28 Merge pull request #1071 from himanshu748/fix-cli-env-quiet
  • c7161c6 fix(cli): honor quiet settings loaded from .env
  • 3990466 fix: ignore undefined options so they don't mask DOTENV_* env settings
  • See full diff in compare view

Updates marked from 18.0.14 to 18.1.0

Release notes

Sourced from marked's releases.

v18.1.0

18.1.0 (2026-10-05)

Bug Fixes

  • avoid cubic backtracking on unicode whitespace in a link destination (#4106) (0d20220)
  • load CLI configs with top-level await (#4100) (c61543e)
  • reject unbalanced parentheses in link destinations (#4107) (3363c99)

Features

  • add linkParenPossible to lexer state to fail fast for link token generation (#4070) (4ee44f7)
Commits
  • e809386 chore(release): 18.1.0 [skip ci]
  • 3363c99 fix: reject unbalanced parentheses in link destinations (#4107)
  • 0d20220 fix: avoid cubic backtracking on unicode whitespace in a link destination (#4...
  • c18a64f chore(deps): bump undici (#4122)
  • 4ee44f7 feat: add linkParenPossible to lexer state to fail fast for link token genera...
  • c61543e fix: load CLI configs with top-level await (#4100)
  • See full diff in compare view

Updates nanoid from 6.0.1 to 6.0.2

Release notes

Sourced from nanoid's releases.

6.0.2

Changelog

Sourced from nanoid's changelog.

6.0.2

Commits

Updates openai from 7.27.0 to 7.32.0

Release notes

Sourced from openai's releases.

v7.32.0

7.32.0 (2026-10-09)

Features

  • api: add agent environment suspension and expiration (#2904) (6e4ed63)

Bug Fixes

  • deps: bump next from 15.5.25 to 15.5.27 in /ecosystem-tests/vercel-edge (#2896) (88b4c05)
  • runners: preserve detailed token usage in totalUsage (#2900) (88bb984)

Documentation

  • fix migration guide types troubleshooting link (#2901) (690e5d7)

v7.31.0

7.31.0 (2026-10-09)

Features

v7.30.1

7.30.1 (2026-10-08)

Bug Fixes

  • api: correct custom voice creation parameters (#2895) (3edaf0f)
  • deps-dev: bump @​aws-sdk/credential-provider-node from 3.972.83 to 3.972.84 (#2877) (0878349)
  • deps-dev: bump @​smithy/signature-v4 from 5.7.3 to 5.7.4 (#2870) (12ce5f2)
  • deps-dev: bump jest from 30.5.1 to 30.5.2 (#2867) (48b5c2a)
  • deps-dev: bump oxfmt from 0.67.0 to 0.70.0 (#2864) (91a226d)
  • deps-dev: bump puppeteer from 25.11.0 to 25.12.0 in /ecosystem-tests/browser-direct-import (#2863) (89ded6b)
  • deps-dev: bump puppeteer from 25.11.0 to 25.12.0 in /ecosystem-tests/ts-browser-webpack (#2876) (6ef1b6e)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/cloudflare-worker (#2865) (ef61ce0)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/node-ts-cjs (#2869) (5aab61c)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/node-ts-cjs-web (#2871) (285f879)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/node-ts-esm (#2872) (3ea3374)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/node-ts-esm-auto (#2873) (34e0877)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/node-ts-esm-web (#2875) (03342c5)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/vercel-edge (#2878) (1149531)
  • deps-dev: bump yargs from 18.1.0 to 18.2.0 (#2874) (b1916d4)
  • deps: refresh development and ecosystem dependencies (#2889) (68d22b9)
  • responses: parse structured text only in final message phases (#2893) (534e691)

... (truncated)

Changelog

Sourced from openai's changelog.

7.32.0 (2026-10-09)

Features

  • api: add agent environment suspension and expiration (#2904) (6e4ed63)

Bug Fixes

  • deps: bump next from 15.5.25 to 15.5.27 in /ecosystem-tests/vercel-edge (#2896) (88b4c05)
  • runners: preserve detailed token usage in totalUsage (#2900) (88bb984)

Documentation

  • fix migration guide types troubleshooting link (#2901) (690e5d7)

7.31.0 (2026-10-09)

Features

7.30.1 (2026-10-08)

Bug Fixes

  • api: correct custom voice creation parameters (#2895) (3edaf0f)
  • deps-dev: bump @​aws-sdk/credential-provider-node from 3.972.83 to 3.972.84 (#2877) (0878349)
  • deps-dev: bump @​smithy/signature-v4 from 5.7.3 to 5.7.4 (#2870) (12ce5f2)
  • deps-dev: bump jest from 30.5.1 to 30.5.2 (#2867) (48b5c2a)
  • deps-dev: bump oxfmt from 0.67.0 to 0.70.0 (#2864) (91a226d)
  • deps-dev: bump puppeteer from 25.11.0 to 25.12.0 in /ecosystem-tests/browser-direct-import (#2863) (89ded6b)
  • deps-dev: bump puppeteer from 25.11.0 to 25.12.0 in /ecosystem-tests/ts-browser-webpack (#2876) (6ef1b6e)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/cloudflare-worker (#2865) (ef61ce0)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/node-ts-cjs (#2869) (5aab61c)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/node-ts-cjs-web (#2871) (285f879)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/node-ts-esm (#2872) (3ea3374)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/node-ts-esm-auto (#2873) (34e0877)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/node-ts-esm-web (#2875) (03342c5)
  • deps-dev: bump ts-jest from 29.4.12 to 29.4.14 in /ecosystem-tests/vercel-edge (#2878) (1149531)
  • deps-dev: bump yargs from 18.1.0 to 18.2.0 (#2874) (b1916d4)
  • deps: refresh development and ecosystem dependencies (#2889) (68d22b9)
  • responses: parse structured text only in final message phases (#2893) (534e691)
  • uploads: decode inferred URL filenames safely (#2892) (30d50ab)

7.30.0 (2026-10-06)

... (truncated)

Commits
  • 2b12eab release: 7.32.0 (#2903)
  • 6e4ed63 feat(api): add agent environment suspension and expiration (#2904)
  • 37af8fc test: wait for mock daemon exit before fixture cleanup (#2902)
  • 690e5d7 docs: fix migration guide types troubleshooting link (#2901)
  • 88bb984 fix(runners): preserve detailed token usage in totalUsage (#2900)
  • 88b4c05 fix(deps): bump next from 15.5.25 to 15.5.27 in /ecosystem-tests/vercel-edge ...
  • 5e70623 release: 7.31.0 (#2899)
  • 7a0be86 feat(api): add prewarmed hosted environments (#2898)
  • bc6c0bf release: 7.30.1 (#2890)
  • 3edaf0f fix(api): correct custom voice creation parameters (#2895)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@lucide/svelte](https://github.com/lucide-icons/lucide/tree/HEAD/packages/svelte) | `1.51.0` | `1.54.0` |
| [@vercel/blob](https://github.com/vercel/storage/tree/HEAD/packages/blob) | `2.8.0` | `2.8.1` |
| [dotenv](https://github.com/motdotla/dotenv) | `18.0.6` | `18.0.7` |
| [marked](https://github.com/markedjs/marked) | `18.0.14` | `18.1.0` |
| [nanoid](https://github.com/ai/nanoid) | `6.0.1` | `6.0.2` |
| [openai](https://github.com/openai/openai-node) | `7.27.0` | `7.32.0` |


Updates `@lucide/svelte` from 1.51.0 to 1.54.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.54.0/packages/svelte)

Updates `@vercel/blob` from 2.8.0 to 2.8.1
- [Release notes](https://github.com/vercel/storage/releases)
- [Changelog](https://github.com/vercel/storage/blob/main/packages/blob/CHANGELOG.md)
- [Commits](https://github.com/vercel/storage/commits/@vercel/blob@2.8.1/packages/blob)

Updates `dotenv` from 18.0.6 to 18.0.7
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.6...v18.0.7)

Updates `marked` from 18.0.14 to 18.1.0
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.14...v18.1.0)

Updates `nanoid` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@6.0.1...6.0.2)

Updates `openai` from 7.27.0 to 7.32.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.27.0...v7.32.0)

---
updated-dependencies:
- dependency-name: "@lucide/svelte"
  dependency-version: 1.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@vercel/blob"
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 18.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: marked
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: nanoid
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: openai
  dependency-version: 7.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
qa-studio Ready Ready Preview Oct 13, 2026 3:03am UTC

Request Review

@dependabot @github

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@coderabbitai

coderabbitai Bot commented Oct 13, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: QAStudio-Dev/studio/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 65294a01-83d4-40b4-bb23-88aab6d08d14

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

This branch was successfully deployed

1 active deployment
Preview — fbaf410b Deployed Oct 13, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants