[dependabot]

Bumps the all-dependencies group with 114 updates in the / directory:

Package	From	To
@inquirer/checkbox	5.2.7	5.2.8
@modelcontextprotocol/sdk	1.32.1	1.32.2
es-toolkit	1.52.0	1.53.0
@anthropic-ai/claude-agent-sdk	0.3.307	0.3.312
@openrouter/sdk	1.5.3	1.5.21
@secretlint/secretlint-rule-preset-recommend	13.0.7	13.1.0
@types/node	26.6.5	26.6.6
knip	6.42.1	6.43.0
oxfmt	0.74.0	0.75.0
oxlint	1.89.0	1.90.0
resend	6.34.1	6.35.0
secretlint	13.0.7	13.1.0
tsdown	0.23.1	0.23.4
@anthropic-ai/claude-agent-sdk-darwin-arm64	0.3.307	0.3.312
@anthropic-ai/claude-agent-sdk-darwin-x64	0.3.307	0.3.312
@anthropic-ai/claude-agent-sdk-linux-arm64-musl	0.3.307	0.3.312
@anthropic-ai/claude-agent-sdk-linux-arm64	0.3.307	0.3.312
@anthropic-ai/claude-agent-sdk-linux-x64-musl	0.3.307	0.3.312
@anthropic-ai/claude-agent-sdk-linux-x64	0.3.307	0.3.312
@anthropic-ai/claude-agent-sdk-win32-arm64	0.3.307	0.3.312
@anthropic-ai/claude-agent-sdk-win32-x64	0.3.307	0.3.312
@anthropic-ai/sdk	1.1.0	1.3.0
@iconify-json/simple-icons	1.2.100	1.2.101
@inquirer/ansi	2.0.9	2.0.10
@inquirer/core	12.0.5	12.0.6
@inquirer/figures	2.0.9	2.0.10
@inquirer/type	4.2.0	4.2.1
@napi-rs/wasm-runtime	1.2.5	1.2.6
@oxc-parser/binding-android-arm-eabi	0.154.0	0.155.0
@oxc-parser/binding-android-arm64	0.154.0	0.155.0
@oxc-parser/binding-darwin-arm64	0.154.0	0.155.0
@oxc-parser/binding-darwin-x64	0.154.0	0.155.0
@oxc-parser/binding-freebsd-x64	0.154.0	0.155.0
@oxc-parser/binding-linux-arm-gnueabihf	0.154.0	0.155.0
@oxc-parser/binding-linux-arm-musleabihf	0.154.0	0.155.0
@oxc-parser/binding-linux-arm64-gnu	0.154.0	0.155.0
@oxc-parser/binding-linux-arm64-musl	0.154.0	0.155.0
@oxc-parser/binding-linux-ppc64-gnu	0.154.0	0.155.0
@oxc-parser/binding-linux-riscv64-gnu	0.154.0	0.155.0
@oxc-parser/binding-linux-riscv64-musl	0.154.0	0.155.0
@oxc-parser/binding-linux-s390x-gnu	0.154.0	0.155.0
@oxc-parser/binding-linux-x64-gnu	0.154.0	0.155.0
@oxc-parser/binding-linux-x64-musl	0.154.0	0.155.0
@oxc-parser/binding-openharmony-arm64	0.154.0	0.155.0
@oxc-parser/binding-win32-arm64-msvc	0.154.0	0.155.0
@oxc-parser/binding-win32-ia32-msvc	0.154.0	0.155.0
@oxc-parser/binding-win32-x64-msvc	0.154.0	0.155.0
@oxc-project/types	0.154.0	0.155.0
@oxfmt/binding-android-arm-eabi	0.74.0	0.75.0
@oxfmt/binding-android-arm64	0.74.0	0.75.0
@oxfmt/binding-darwin-arm64	0.74.0	0.75.0
@oxfmt/binding-darwin-x64	0.74.0	0.75.0
@oxfmt/binding-freebsd-x64	0.74.0	0.75.0
@oxfmt/binding-linux-arm-gnueabihf	0.74.0	0.75.0
@oxfmt/binding-linux-arm-musleabihf	0.74.0	0.75.0
@oxfmt/binding-linux-arm64-gnu	0.74.0	0.75.0
@oxfmt/binding-linux-arm64-musl	0.74.0	0.75.0
@oxfmt/binding-linux-ppc64-gnu	0.74.0	0.75.0
@oxfmt/binding-linux-riscv64-gnu	0.74.0	0.75.0
@oxfmt/binding-linux-riscv64-musl	0.74.0	0.75.0
@oxfmt/binding-linux-s390x-gnu	0.74.0	0.75.0
@oxfmt/binding-linux-x64-gnu	0.74.0	0.75.0
@oxfmt/binding-linux-x64-musl	0.74.0	0.75.0
@oxfmt/binding-openharmony-arm64	0.74.0	0.75.0
@oxfmt/binding-win32-arm64-msvc	0.74.0	0.75.0
@oxfmt/binding-win32-ia32-msvc	0.74.0	0.75.0
@oxfmt/binding-win32-x64-msvc	0.74.0	0.75.0
@oxlint/binding-android-arm-eabi	1.89.0	1.90.0
@oxlint/binding-android-arm64	1.89.0	1.90.0
@oxlint/binding-darwin-arm64	1.89.0	1.90.0
@oxlint/binding-darwin-x64	1.89.0	1.90.0
@oxlint/binding-freebsd-x64	1.89.0	1.90.0
@oxlint/binding-linux-arm-gnueabihf	1.89.0	1.90.0
@oxlint/binding-linux-arm-musleabihf	1.89.0	1.90.0
@oxlint/binding-linux-arm64-gnu	1.89.0	1.90.0
@oxlint/binding-linux-arm64-musl	1.89.0	1.90.0
@oxlint/binding-linux-ppc64-gnu	1.89.0	1.90.0
@oxlint/binding-linux-riscv64-gnu	1.89.0	1.90.0
@oxlint/binding-linux-riscv64-musl	1.89.0	1.90.0
@oxlint/binding-linux-s390x-gnu	1.89.0	1.90.0
@oxlint/binding-linux-x64-gnu	1.89.0	1.90.0
@oxlint/binding-linux-x64-musl	1.89.0	1.90.0
@oxlint/binding-openharmony-arm64	1.89.0	1.90.0
@oxlint/binding-win32-arm64-msvc	1.89.0	1.90.0
@oxlint/binding-win32-ia32-msvc	1.89.0	1.90.0
@oxlint/binding-win32-x64-msvc	1.89.0	1.90.0
@secretlint/config-creator	13.0.7	13.1.0
@secretlint/config-loader	13.0.7	13.1.0
@secretlint/core	13.0.7	13.1.0
@secretlint/formatter	13.0.7	13.1.0
@secretlint/node	13.0.7	13.1.0
@secretlint/profiler	13.0.7	13.1.0
@secretlint/resolver	13.0.7	13.1.0
@secretlint/source-creator	13.0.7	13.1.0
@secretlint/types	13.0.7	13.1.0
@secretlint/walker	13.0.7	13.1.0
algoliasearch	5.60.0	5.61.0
body-parser	2.3.0	2.4.0
encodeurl	2.0.0	2.0.1
follow-redirects	1.16.1	1.16.2
hono	4.13.13	4.13.14
ignore	7.0.13	7.0.14
ip-address	10.7.4	10.7.5
jose	6.2.13	6.2.14
on-finished	2.4.1	2.4.2
oxc-parser	0.154.0	0.155.0
postcss	8.5.31	8.5.32
qs	6.16.1	6.17.1
rolldown	1.2.15	1.2.16
rollup	4.64.12	4.66.0
tabbable	6.5.0	6.5.1
unist-util-visit-parents	6.0.2	6.1.0
unist-util-visit	5.1.0	5.2.0
vscode-languageserver-textdocument	1.0.15	1.0.16

Updates @inquirer/checkbox from 5.2.7 to 5.2.8

Commits

• 672b77f chore: Publish new release
• 8e66d58 fix(@​inquirer/password): keep trailing space after message in empty state
• 98f5ad3 fix(turbo): hash nested source files in tsc task cache inputs
• 5239f87 fix(core): don't drop piped stdin answers in first-render deferral
• 69b4eec ci: run windows unit tests on node 26 only (#2358)
• 483e52a test(demo): replace 3s real-time wait with fake timers in slow-validation tes...
• 071edfc ci: overwrite the runner's stale yarn shims instead of reinstalling corepack ...
• e38e706 ci: cancel superseded CI runs with a concurrency group (#2354)
• 629a91d ci: drop 'needs: Compile' from Linting/e2e/deno-pack (#2353)
• 5e9227c ci: run coverage and codecov on the ubuntu node-26 unit cell only (#2351)
• Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.32.1 to 1.32.2

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.2

What's Changed

• fix: add explicit | undefined to Transport optional properties (v1.x backport of #1766) by @​kishormorol in modelcontextprotocol/typescript-sdk#2814
• [v1.x] fix: allow registering after connect() when the capability was declared by @​claude[bot] in modelcontextprotocol/typescript-sdk#2958
• chore: bump version to 1.32.2 by @​claude[bot] in modelcontextprotocol/typescript-sdk#3089

New Contributors

• @​kishormorol made their first contribution in modelcontextprotocol/typescript-sdk#2814

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.1...1.32.2

Commits

• 3b73021 chore: bump version to 1.32.2 (#3089)
• fa56d81 [v1.x] fix: allow registering after connect() when the capability was declare...
• 6919e95 fix: add explicit | undefined to Transport optional properties (v1.x backport...
• See full diff in compare view

Updates es-toolkit from 1.52.0 to 1.53.0

Release notes

Sourced from es-toolkit's releases.

v1.53.0

Released on October 24th, 2026.

• Added serialize to es-toolkit/util, and hash in the new es-toolkit/util/hash entrypoint. ([Follow up deepagents-cli upstream updates: permissions via [shell].allow_list in ~/.deepagents/config.toml #2067], [Follow up Devin Desktop upstream updates: global skills emit legacy .codeium/windsurf path instead of ~/.config/devin/skills #2154])

• Added Queue to es-toolkit/util. ([Follow up AugmentCode upstream updates: project-scope MCP via workspace .augment/settings.json (auggie 0.31.0) #2150], [Follow up JetBrains Junie upstream updates: hook blockOnError/async fields dropped #2153])

• Added stringify to es-toolkit/query-string. ([Follow-ups from PR #2115 review: document empty-array normalization, Reasonix DRY, and ignore-side JSON.parse try/catch #2121])

• Added sentenceCase. ([Follow up GitHub Copilot CLI upstream updates: skill argument-hint frontmatter and preMcpToolCall hook event #2079])

• Added lerp and inverseLerp. ([Follow up Goose upstream updates: project-scoped MCP via open plugins (.agents/plugins/<name>/.mcp.json, v1.39.0) #2078])

• Added the DistributiveOmit type. ([Kilo permissions: tool-specific keys (external_directory, doom_loop, notebook_*, agent_manager, repo_*, etc.) not authorable from the canonical model #2142])

• es-toolkit/compat now runs on Node.js 6 and ES2015 environments without transpilation or polyfills. ([Unquoted $CLAUDE_PROJECT_DIR in generated Claude hook commands breaks on project paths with spaces #2097], [feat(hooks): map deepagents preToolUse/postToolUse to tool.use/tool.result #2161])

• Fixed deepFreeze to freeze symbol and non-enumerable properties. ([Qwen Code permissions: model sandbox/approvalMode/tool-disable and reconcile Read/Grep/Glob/WebSearch alias overlap #2143])

• Fixed Semaphore to keep release fast when many tasks are waiting. ([Follow up Goose upstream updates: hooks emit unsupported SubagentStart/SubagentStop events (and global .gooseignore) #2149])

• Fixed DeepPartial and DeepReadonly to preserve branded primitive types. ([Homebrew formula is behind latest GitHub release #2074])

• Fixed the Merge type to keep the input type when merging a type with itself or a narrower type, and to use the source type when a defined source replaces a nullable or primitive value. ([feat(permissions): support OpenCode-scoped permission override key (#2127) #2148], [Follow up Hermes Agent upstream updates: MCP per-server tool filtering (tools.include/exclude) dropped #2155])

• Fixed the fp intersectionBy to match each mapped value at most once in lazy pipes. ([Vibe permissions: support per-tool sensitive_patterns (ASK-override on an allowed tool) #2146])

The following change results or types that v1.52.0 produced, so review them if you relied on the previous behavior.

• dedent now leaves interpolated values out of the indentation calculation ([fix(codexcli): stop force-writing stale hooks feature flag; preserve granular approval keys #2099]), and throws a TypeError for a malformed template literal, like String.dedent ([fix(hermesagent): emit hooks under Hermes's native VALID_HOOKS event keys #2100]).
• deburr now keeps letters of non-Latin scripts as they are. ([test(e2e): enforce exact partition in assertGenerateMatrixCoversTargets and correct overstated coverage comments #2124])
• orderBy and sortBy now sort NaN in a consistent position. ([Amp permissions: support non-cmd matchers, guardedFiles.allowlist, and dangerouslyAllowAll via a tool-scoped namespace #2133])
• once now calls the function with the caller's this. ([Follow up Qwen Code upstream updates: hooks per-hook fields (async/env/shell/statusMessage/headers/allowedEnvVars/once) #2069])
• findKey and mapKeys now type keys like Object.keys, so numeric keys are strings. ([release: v9.0.2 #2077], [Follow up deepagents-cli upstream updates: hooks missing tool.use/tool.result events (v0.1.32) #2156])
• The fp head, last, maxBy, and minBy now always return T | undefined. ([ci(deps): bump the all-actions group with 4 updates #2113])

The following bring es-toolkit/compat closer to Lodash. Behavior for the affected edge cases now matches Lodash, so results may differ if you relied on the previous output.

• Fixed compat/add, compat/subtract, compat/multiply, and compat/divide to match Lodash on null operands. ([chore: use pnpm dlx instead of npx for ccstatusline statusline command #2056])

• Fixed compat/ceil, compat/floor, and compat/round to coerce arguments like Lodash. ([Follow up Codex CLI upstream updates: granular tool-approval keys (default_tools_approval_mode, approval_policy object) #2064])

• Fixed compat/toString to read sparse array holes as undefined. ([feat(commands): support antigravity-cli workflow commands #2091])

• Fixed compat/dropWhile, compat/dropRightWhile, and compat/some to normalize the predicate. ([Follow up Devin Desktop upstream updates: hooks/mcp still emit legacy .windsurf paths instead of native .devin/config.json #2072])

• Fixed compat/countBy to return a plain object. ([Follow-ups for Takumi Guard npm proxy routing (PR #2083) #2090])

• Fixed compat/pull, compat/pullAll, compat/pullAllBy, and compat/remove to handle nullish inputs. ([feat(mcp): add Takt MCP transport-allowlist adapter #2095])

... (truncated)

Changelog

Sourced from es-toolkit's changelog.

Version v1.53.0

Released on October 24th, 2026.

• Added serialize to es-toolkit/util, and hash in the new es-toolkit/util/hash entrypoint. (#2067, #2154)

• Added Queue to es-toolkit/util. (#2150, #2153)

• Added stringify to es-toolkit/query-string. (#2121)

• Added sentenceCase. (#2079)

• Added lerp and inverseLerp. (#2078)

• Added the DistributiveOmit type. (#2142)

• es-toolkit/compat now runs on Node.js 6 and ES2015 environments without transpilation or polyfills. (#2097, #2161)

• Fixed deepFreeze to freeze symbol and non-enumerable properties. (#2143)

• Fixed Semaphore to keep release fast when many tasks are waiting. (#2149)

• Fixed DeepPartial and DeepReadonly to preserve branded primitive types. (#2074)

• Fixed the Merge type to keep the input type when merging a type with itself or a narrower type, and to use the source type when a defined source replaces a nullable or primitive value. (#2148, #2155)

• Fixed the fp intersectionBy to match each mapped value at most once in lazy pipes. (#2146)

The following change results or types that v1.52.0 produced, so review them if you relied on the previous behavior.

• dedent now leaves interpolated values out of the indentation calculation (#2099), and throws a TypeError for a malformed template literal, like String.dedent (#2100).
• deburr now keeps letters of non-Latin scripts as they are. (#2124)
• orderBy and sortBy now sort NaN in a consistent position. (#2133)
• once now calls the function with the caller's this. (#2069)
• findKey and mapKeys now type keys like Object.keys, so numeric keys are strings. (#2077, #2156)
• The fp head, last, maxBy, and minBy now always return T | undefined. (#2113)

The following bring es-toolkit/compat closer to Lodash. Behavior for the affected edge cases now matches Lodash, so results may differ if you relied on the previous output.

• Fixed compat/add, compat/subtract, compat/multiply, and compat/divide to match Lodash on null operands. (#2056)
• Fixed compat/ceil, compat/floor, and compat/round to coerce arguments like Lodash. (#2064)
• Fixed compat/toString to read sparse array holes as undefined. (#2091)
• Fixed compat/dropWhile, compat/dropRightWhile, and compat/some to normalize the predicate. (#2072)
• Fixed compat/countBy to return a plain object. (#2090)
• Fixed compat/pull, compat/pullAll, compat/pullAllBy, and compat/remove to handle nullish inputs. (#2095)
• Fixed compat/xorBy and compat/xorWith to ignore the iteratee and comparator for

... (truncated)

Commits

• d79f9bb v1.53.0 (#2164)
• c55225c fix: lower only the modules es-toolkit/compat reaches to ES2019 (#2161)
• bf4013a chore: forbid importing the compat barrel from inside the library (#2163)
• f69077d fix[every, findLastIndex]: import iteratee and toInteger directly (#2162)
• 69a4fd1 fix[startCase]: only uppercase the first letter of each word like lodash (#2160)
• 9bdad0f fix[cloneDeep, cloneDeepWith, isMatch, matches]: keep errors uncloned and com...
• 71f68c8 fix[forEach, forEachRight, forIn, forInRight, forOwn, forOwnRight]: treat a n...
• be30b1b fix[merge]: let a defined source replace nullable and primitive target types ...
• cf6fd18 fix[ObjectKeys]: keep string enum keys as the enum type (#2156)
• c64e272 fix[serialize, hash]: sort Set values and Map keys with a total order and det...
• Additional commits viewable in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.307 to 0.3.312

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.312

What's changed

• Added autoMode, skipAutoPermissionPrompt, useAutoModeDuringPlan and permissions.disableAutoMode to the Settings type
• Added unanswered (skipped, replied_in_chat or dismissed) to AskUserQuestion answers' per-question annotations; send it only when system/init lists the ask_user_question_unanswered_v1 capability
• Fixed resolveSettings() returning mistyped managed auto-mode settings, such as permissions.disableAutoMode: true, as written instead of reading them as the CLI does; a user or project settings file whose auto-mode keys hold an invalid value is now skipped, as in the CLI
• Updated to parity with Claude Code v2.1.312

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.312
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.312
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.312
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.312

v0.3.311

What's changed

• Added cacheCreationEphemeral5mInputTokens and cacheCreationEphemeral1hInputTokens to ModelUsage, splitting cacheCreationInputTokens by cache lifetime
• Changed background start-up work to wait until the first model request is sent, for about 10 seconds at most, when the first message arrives during start-up
• Changed the minimum supported Node.js version from 18.0.0 to 18.14.0
• Updated to parity with Claude Code v2.1.311

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.311
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.311
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.311
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.311

v0.3.310

What's changed

• Updated to parity with Claude Code v2.1.310

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.310
# or
</tr></table> 

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.312

• Added autoMode, skipAutoPermissionPrompt, useAutoModeDuringPlan and permissions.disableAutoMode to the Settings type
• Added unanswered (skipped, replied_in_chat or dismissed) to AskUserQuestion answers' per-question annotations; send it only when system/init lists the ask_user_question_unanswered_v1 capability
• Fixed resolveSettings() returning mistyped managed auto-mode settings, such as permissions.disableAutoMode: true, as written instead of reading them as the CLI does; a user or project settings file whose auto-mode keys hold an invalid value is now skipped, as in the CLI
• Updated to parity with Claude Code v2.1.312

0.3.311

• Added cacheCreationEphemeral5mInputTokens and cacheCreationEphemeral1hInputTokens to ModelUsage, splitting cacheCreationInputTokens by cache lifetime
• Changed background start-up work to wait until the first model request is sent, for about 10 seconds at most, when the first message arrives during start-up
• Changed the minimum supported Node.js version from 18.0.0 to 18.14.0
• Updated to parity with Claude Code v2.1.311

0.3.310

• Updated to parity with Claude Code v2.1.310

0.3.309

• Fixed host-supplied managedSettings dropping disableAllHooks, disableSkillShellExecution and empty allowedHttpHookUrls / httpHookAllowedEnvVars lists
• Changed extractFromBunfs() to extract the embedded CLI into its own per-user temp directory (claude-agent-sdk-<uid>, or claude-agent-sdk on Windows) instead of Claude Code's temp root
• Changed extractFromBunfs() to reuse an already-extracted file only when its bytes match the embedded binary, replacing it otherwise
• Updated to parity with Claude Code v2.1.309

0.3.308

• Updated to parity with Claude Code v2.1.308

Commits

• e296380 chore: Update CHANGELOG.md
• a1ae894 chore: Update CHANGELOG.md
• 019515d chore: Update CHANGELOG.md
• 82e441e chore: Update CHANGELOG.md
• c17fea5 chore: Update CHANGELOG.md
• See full diff in compare view

Updates @openrouter/sdk from 1.5.3 to 1.5.21

Release notes

Sourced from @​openrouter/sdk's releases.

typescript - v1.5.21 - 2026-10-29 07:13:22

Generated by Speakeasy CLI

2026-10-29 07:13:22

Changes

Based on:

• OpenAPI Doc 1.0.0
• Speakeasy CLI 1.803.2 (2.950.13) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v1.5.21] .

Releases

• [NPM v1.5.21] https://www.npmjs.com/package/@​openrouter/sdk/v/1.5.21 - .

Publishing Completed

typescript - v1.5.20 - 2026-10-29 02:27:06

Generated by Speakeasy CLI

@​openrouter/sdk 1.5.20

Typescript SDK Changes:

• openrouter.privateProviders.list(): Added
• openrouter.privateProviders.create(): Added
• openrouter.privateProviders.delete(): Added
• openrouter.privateProviders.get(): Added
• openrouter.privateProviders.update(): Added
• openrouter.privateEndpoints.create():
  • request.createPrivateEndpointRequest.settings Added
• openrouter.privateEndpoints.get(): response.data.settings Added
• openrouter.privateEndpoints.update():
  • request.updatePrivateEndpointRequest Changed
  • response.data.settings Added
• openrouter.privateEndpoints.updateParameters(): Deprecated
• openrouter.privateEndpoints.updateParameters(): response.data.settings Added
• openrouter.privateEndpoints.updatePricing(): Deprecated
• openrouter.privateEndpoints.updatePricing(): response.data.settings Added

Generated with Speakeasy CLI 1.803.2

Publishing Completed

typescript - v1.5.19 - 2026-10-28 20:26:15

Generated by Speakeasy CLI

@​openrouter/sdk 1.5.19

Typescript SDK Changes:

• openrouter.guardrails.list(): response.data[].enforceFirstPartyHarnessModels Added
• openrouter.guardrails.create():
  • request.createGuardrailRequest.enforceFirstPartyHarnessModels Added
  • response.data.enforceFirstPartyHarnessModels Added
• openrouter.guardrails.get(): response.data.enforceFirstPartyHarnessModels Added
• openrouter.guardrails.update():

... (truncated)

Changelog

Sourced from @​openrouter/sdk's changelog.

2025-08-22 16:09:25

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.606.2 (2.687.1) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.1.2] .

2025-09-23 21:23:27

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.622.2 (2.711.4) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.0.0-beta.2] .

Releases

• [NPM v0.0.0-beta.2] https://www.npmjs.com/package/@​openrouter/sdk/v/0.0.0-beta.2 - .

2025-10-01 17:53:43

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.631.5 (2.716.16) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.0.0-beta.17] .

Releases

• [NPM v0.0.0-beta.17] https://www.npmjs.com/package/@​openrouter/sdk/v/0.0.0-beta.17 - .

2025-10-18 05:44:43

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.637.0 (2.727.4) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.0.0-beta.41] .

Releases

• [NPM v0.0.0-beta.41] https://www.npmjs.com/package/@​openrouter/sdk/v/0.0.0-beta.41 - .

2025-10-18 19:30:25

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.637.0 (2.727.4) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.0.0-beta.42] .

Releases

• [NPM v0.0.0-beta.42] https://www.npmjs.com/package/@​openrouter/sdk/v/0.0.0-beta.42 - .

... (truncated)

Commits

• f46e6d2 chore: 🐝 Update SDK - Generate (spec change merged) 1.5.21 (#1289)
• a9ed12c chore: update OpenAPI spec from monorepo (#1288)
• 1533265 chore: 🐝 Update SDK - Generate (spec change merged) 1.5.20 (#1287)
• 0687803 chore: update OpenAPI spec from monorepo (#1286)
• c39c30c chore: bump Speakeasy to 1.803.2 (#1283)
• 226ad75 chore: 🐝 Update SDK - Generate (spec change merged) 1.5.19 (#1285)
• 517693e chore: update OpenAPI spec from monorepo (#1284)
• a5be496 chore: 🐝 Update SDK - Generate (spec change merged) 1.5.18 (#1282)
• b2fb745 chore: update OpenAPI spec from monorepo (#1281)
• 77891a7 chore: 🐝 Update SDK - Generate (spec change merged) 1.5.17 (#1280)
• Additional commits viewable in compare view

Updates @secretlint/secretlint-rule-preset-recommend from 13.0.7 to 13.1.0

Release notes

Sourced from @​secretlint/secretlint-rule-preset-recommend's releases.

v13.1.0

What's Changed

Security Fixes

• fix(formatter): strip terminal control characters from file paths and messages by @​azu in secretlint/secretlint#1735
• fix(gcp): lower PKCS#12 MAC iteration cap and hash with node:crypto by @​azu in secretlint/secretlint#1728

Features

• feat(config-loader): report config problems as warning messages by @​azu in secretlint/secretlint#1764

Bug Fixes

• fix(rules): respect allows option in openai, anthropic, linear, secp256k1-privatekey, and gcp by @​azu in secretlint/secretlint#1734
• fix(node): mask secrets by default in createEngine by @​azu in secretlint/secretlint#1727
• fix(core): do not throw when rule data contains null by @​azu in secretlint/secretlint#1729
• fix(secp256k1-privatekey): detect private keys with a leading zero byte by @​azu in secretlint/secretlint#1730
• fix(filter-comments): make bare secretlint-enable close all open disables by @​azu in secretlint/secretlint#1731
• fix(formatter): respect --no-terminalLink option by @​azu in secretlint/secretlint#1732
• fix(node): exit with 0 when only warning or info messages are found by @​azu in secretlint/secretlint#1765

CI

• Update Patch updates by @​renovate[bot] in secretlint/secretlint#1723
• Update github/codeql-action action to v3.38.3 by @​renovate[bot] in secretlint/secretlint#1726
• Update github/codeql-action action to v3.39.0 by @​renovate[bot] in secretlint/secretlint#1749

Dependency Updates

• Update dependency ignore to ^7.0.11 by @​renovate[bot] in secretlint/secretlint#1712
• Update dependency rollup to ^4.63.6 by @​renovate[bot] in secretlint/secretlint#1713
• Update dependency turbo to ^2.11.6 by @​renovate[bot] in secretlint/secretlint#1714
• Update dependency @​types/node to ^25.9.9 by @​renovate[bot] in secretlint/secretlint#1715
• Update dependency turbo to ^2.11.7 by @​renovate[bot] in secretlint/secretlint#1716
• Update Patch updates (patch) by @​renovate[bot] in secretlint/secretlint#1717
• Update dependency rollup to ^4.64.1 by @​renovate[bot] in secretlint/secretlint#1718
• Update dependency rollup to ^4.64.3 by @​renovate[bot] in secretlint/secretlint#1719
• Update dependency p-map to ^7.1.0 by @​renovate[bot] in secretlint/secretlint#1720
• Update dependency rollup to ^4.64.5 by @​renovate[bot] in secretlint/secretlint#1722
• Update dependency p-map to ^7.1.1 by @​renovate[bot] in secretlint/secretlint#1724
• Update Patch updates (patch) by @​renovate[bot] in secretlint/secretlint#1725
• Update dependency rollup to ^4.64.6 by @​renovate[bot] in secretlint/secretlint#1736
• Update dependency turbo to ^2.11.8 by @​renovate[bot] in secretlint/secretlint#1737
• Update dependency rollup to ^4.64.7 by @​renovate[bot] in secretlint/secretlint#1738
• Update dependency vitest to ^4.1.12 by @​renovate[bot] in secretlint/secretlint#1739
• Update dependency turbo to ^2.11.9 by @​renovate[bot] in secretlint/secretlint#1743
• Update dependency rollup to ^4.64.9 by @​renovate[bot] in secretlint/secretlint#1744
• Update dependency rollup to ^4.64.10 by @​renovate[bot] in secretlint/secretlint#1747
• Update dependency ignore to ^7.0.13 by @​renovate[bot] in secretlint/secretlint#1750
• Update dependency rollup to ^4.64.12 by @​renovate[bot] in secretlint/secretlint#1752
• Update dependency turbo to ^2.11.10 by @​renovate[bot] in secretlint/secretlint#1753
• Update dependency @​rollup/plugin-typescript to ^12.3.1 by @​renovate[bot] in secretlint/secretlint#1756
• Update dependency rollup to ^4.65.0 by @​renovate[bot] in secretlint/secretlint#1759

Full Changelog: secretlint/secretlint@v13.0.7...v13.1.0

Commits

• 49dcc41 v13.1.0 (#1766)
• f6c4f5d feat(config-loader): report config problems as warning messages (#1764)
• 03649bf fix(node): exit with 0 when only warning or info messages are found (#1765)
• 4c6d946 Update dependency rollup to ^4.65.0 (#1759)
• 6455140 Update dependency @​rollup/plugin-typescript to ^12.3.1 (#1756)
• f28fc2f Update dependency turbo to ^2.11.10 (#1753)
• 4a1912f Update dependency rollup to ^4.64.12 (#1752)
• d1ac476 Update dependency ignore to ^7.0.13 (#1750)
• 42a0d76 Update github/codeql-action action to v3.39.0 (#1749)
• c35db80 Update dependency rollup to ^4.64.10 (#1747)
• Additional commits viewable in compare view

Updates @types/node from 26.6.5 to 26.6.6

Commits

• See full diff in compare view

Updates knip from 6.42.1 to 6.43.0

Release notes

Sourced from knip's releases.

Release 6.43.0

• Document and pin exports that only keep each other alive (#2160) (39af70abb32523a992a7d6152b8cd95ef317f237)
• Don't add config files without an extension as entry files (resolve #2168) (46a825ddf15d3073b899ed6ef34689e5da5508f2)
• Recognize unscoped ~name workspace packages (resolve #2172) (ba527f7386e7741507f2f18d84864058e02ac907)
• Follow imports and re-exports in ambient modules (resolve #2174) (dbd3a8b8b0429433e5385371c09e805b808a32c2) - thanks @​tlq5l!
• Follow @reference in Tailwind CSS compiler (#2177) (219f16de95e174cdcfd6a90782bcef13cf79bd64) - thanks @​mkantautas!
• Support { find, replacement } array form of Vite alias (#2179) (5d0779bc4cf8c0469c50d5b2cda1a6bd1f053d81) - thanks @​mkantautas!
• fix(expo): treat local config plugins as entry files (#2176) (100ef491509a88b00ea9956ba40dbc1b0ac0c205) - thanks @​Cayan!
• fix(next): detect Turbopack loaders in shared config factories (#2161) (9cf928be5022928a38c12fe8001cec7bf467040c) - thanks @​jakeleventhal!
• Ignore osascript as global binary (#2182) (c301e44c7975442d4d25595f084e6b853f07a434) - thanks @​abrahamguo!
• Skip --fix for exports in multi-declarator variable statements (#2178) (326afd9c1e66eef04d986b83ed829b506f506c48) - thanks @​mkantautas!
• Watch the project directory instead of process.cwd() (#2183) (16d9932d0239f649cf2c1349cc7bc893850cd4f0) - thanks @​abrahamguo!
• Follow directory paths in tsconfig references (#2186) (d741c46e3f2a9caaf6bf4e81e9d4c8cfca48623e) - thanks @​mkantautas!
• Handle @plugin options blocks in Tailwind CSS compiler (#2187) (9fae773eb75bcba03e62f44ce3e9aa0b889bf4ac) - thanks @​mkantautas!
• Remove anonymous default-exported functions and classes in --fix (#2188) (6748259fbb2ea9a5940ea3861626f77677610a86) - thanks @​mkantautas!
• Recognize bun fmt as a built-in command (#2189) (e971b0924bcb7ff8dcab01a180d3016cc08b675d) - thanks @​TomasHubelbauer!
• Add plugin for @​bufbuild/buf (#2142) (90216c261c2273967125669beb611bf763d762c7) - thanks @​ryanquinn3!
• Pass isSsrBuild to Vite config functions (#2191) (d2aa101c55e5d7e8d26548808ce008b214622099) - thanks @​mkantautas!
• Follow src of <script> and <style> blocks in Vue SFCs (#2193) (3d148393d5129a096a182fab36a873b9f710f388) - thanks @​mkantautas!
• Remove import attributes with emptied re-exports in --fix (#2192) (231026cf9c21cc7890f21d048f4af6ea7233d7b8) - thanks @​mkantautas!
• Update npmx.dev snapshot (b2cc439006ec98ff5bbc1c99b99bc1ac5203b6b2)
• Read string parserOptions.parser in ESLint flat configs (#2198) (302f908aa135669d6fe96869ec6452b7570856a4) - thanks @​mkantautas!
• Resolve directory matches in Vitest test.projects to their config (#2195) (4d386138011c27e01e6e910be6d58266e07c9cf1) - thanks @​fixfon!
• Ignore custom elements named script-* when extracting script blocks (#2199) (23e6479b233e1882ddaf29736390309d0f3f040f) - thanks @​mkantautas!
• feat(mcp): add MCP plugin (#2180) (fc92470a9f687e2f1da60b84612ebf3e59a8bbb9) - thanks @​jakeleventhal!
• Handle non-Error plugin config failures (8f21ea2182fac5a96edd7d6d4280a0fa1051e434)
• Update articles list (6569cdcde1a79a6196a35a934b6c0d9d0e23faa4)
• Skip --fix export ranges inside a larger removal (204a8091baf91cb8cfb4e7a9aa70d461cc926baa)
• Detect .travis.yml with a stat instead of a glob (3601c6e32afef3d1d76a3944e540225da5190b9b)
• Mark YAML catalog entries fixed only when their line is removed (#2201) (813fa30e55ef3a8ed749d9d6d5a02a00810cfe72) - thanks @​mkantautas!
• Add Electron Forge plugin (#2158) (12e4355a43ea63c417d3b9ebfbbac1c8510b139e) - thanks @​mehdimirzafaruk!
• Resolve function and promise entries in Vitest test.projects (#2197) (ec293d1a33d30a8b0521725d1148e6e72c6e4220) - thanks @​mkantautas!
• Follow npm lifecycle scripts and run-script aliases (#2202) (89dfdc881e6865aef326c2b9dc700cf5c46b73b4) - thanks @​sushanta-neupane!
• Follow pnpm t, tst and run-script aliases (ce91e230e0823433dfcc1ee4562335c34d2b73ef)
• Treat vitest-environment-nuxt as optional (it comes with @nuxt/test-utils) (db9aa7443c5b3839df5c0fe320d78ea42f0f3446)
• Ignore tool output before the first report section in...

  Description has been truncated