Skip to content

chore(deps-dev): bump the dev-minor-and-patch group across 1 directory with 9 updates - #390

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dev-minor-and-patch-065906153f
Open

chore(deps-dev): bump the dev-minor-and-patch group across 1 directory with 9 updates#390
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dev-minor-and-patch-065906153f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-minor-and-patch group with 9 updates in the / directory:

Package From To
@browserbasehq/stagehand 3.7.0 3.7.1
@clerk/backend 3.11.7 3.14.0
@clerk/testing 2.2.10 2.2.15
@types/node 26.1.1 26.1.2
eslint-config-next 16.2.10 16.2.12
happy-dom 20.10.6 20.11.1
prettier 3.9.5 3.9.6
promptfoo 0.121.19 0.121.20
semantic-release 25.0.7 25.0.8

Updates @browserbasehq/stagehand from 3.7.0 to 3.7.1

Changelog

Sourced from @​browserbasehq/stagehand's changelog.

3.7.1

Patch Changes

  • #2359 2cd1edf Thanks @​shrey150! - Remove the noisy AI SDK "system message in messages" warning from act(), extract(), and observe() (including when the agent's own tools call them internally).

  • #2347 84197d8 Thanks @​miguelg719! - Allow OpenAI-compatible models to select the Chat Completions API with openaiEndpointFormat: "chat"

Commits

Updates @clerk/backend from 3.11.7 to 3.14.0

Release notes

Sourced from @​clerk/backend's releases.

@​clerk/backend@​3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @​manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

@​clerk/backend@​3.13.2

Patch Changes

  • Correct two Dashboard labels referenced in the instance restrictions documentation. blockDisposableEmailDomains bolded "Block sign-ups that use disposable email domains", but the toggle in the Clerk Dashboard is "Block sign-ups that use disposable email addresses". ignoreDotsForGmailAddresses bolded "Ignore dots for Gmail addresses" as a Dashboard toggle, but no such control exists — the wording now matches the equivalent comment on UpdateRestrictionsParams. Property names are unchanged. (#9253) by @​manovotny

@​clerk/backend@​3.13.1

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8
Changelog

Sourced from @​clerk/backend's changelog.

3.14.0

Minor Changes

  • Align the EnterpriseConnection response resource with what the Backend API actually returns: (#9156) by @​manovotny
    • EnterpriseConnection now exposes provider, logoPublicUrl, allowOrganizationAccountLinking, authenticatable, disableJitProvisioning, and customAttributes.
    • EnterpriseConnectionSamlConnection now exposes active, forceAuthn, and loginHint.
    • EnterpriseConnectionOauthConfig now exposes providerKey, authUrl, tokenUrl, userInfoUrl, and requiresPkce.
    • Deprecated properties the Backend API never returns, which were always undefined despite their declared types: allowSubdomains on EnterpriseConnection (use samlConnection.allowSubdomains), and idpMetadata and syncUserAttributes on EnterpriseConnectionSamlConnection (use the top-level syncUserAttributes).
    • organizationId is now normalized to null when the Backend API omits it, matching its declared string | null type. Properties backed by optional API fields (for example oauthConfig.clientId and the SAML IdP fields) are now typed as possibly undefined to match runtime behavior.

Patch Changes

3.13.2

Patch Changes

  • Correct two Dashboard labels referenced in the instance restrictions documentation. blockDisposableEmailDomains bolded "Block sign-ups that use disposable email domains", but the toggle in the Clerk Dashboard is "Block sign-ups that use disposable email addresses". ignoreDotsForGmailAddresses bolded "Ignore dots for Gmail addresses" as a Dashboard toggle, but no such control exists — the wording now matches the equivalent comment on UpdateRestrictionsParams. Property names are unchanged. (#9253) by @​manovotny

3.13.1

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8

3.13.0

Minor Changes

  • Add an fapiUrl option to Frontend API proxy helpers so requests can target a custom Clerk Frontend API URL. (#9223) by @​thiskevinwang

Patch Changes

  • Updated dependencies [097432d]:
    • @​clerk/shared@​4.25.7

3.12.0

Minor Changes

  • Fix a cross-origin handshake bypass where isKnownClerkReferrer() trusted overly broad referrer hosts as Clerk-owned: any accounts.* host (e.g. accounts.attacker.com), plus dev account-portal domains (*.accounts.dev and legacy suffixes) on production instances. These let unrelated origins skip the handshake and its session-freshness check. The referrer is now trusted only for the accounts portal derived from the instance's frontend API, plus dev account-portal domains on non-production instances. (#9145) by @​dominic-clerk

  • Add an optional orgId parameter to createSignInToken() for activating an Organization when the token is redeemed. (#9192) by @​swolfand

Patch Changes

... (truncated)

Commits
  • c86b4bc ci(repo): Version packages (#9262)
  • 23071bd fix(backend): Align EnterpriseConnection resource with the Backend API respon...
  • 8c9d061 ci(repo): Version packages (#9251)
  • 6f5fde9 docs(backend): Correct Dashboard labels in instance restrictions (#9253)
  • 9081534 ci(repo): Version packages (#9240)
  • acef8a1 ci(repo): Version packages (#9219)
  • 848eefe feat(backend): support configurable Frontend API proxy URLs (#9223)
  • 430ae23 ci(repo): Version packages (#9195)
  • 858a689 docs(repo): Add trailing comma after e.g. and i.e. in JSDoc (#9201)
  • a009d91 fix(backend): Align enterprise connection create and update params with the B...
  • Additional commits viewable in compare view

Updates @clerk/testing from 2.2.10 to 2.2.15

Release notes

Sourced from @​clerk/testing's releases.

@​clerk/testing@​2.2.15

Patch Changes

@​clerk/testing@​2.2.14

Patch Changes

  • Updated dependencies [6f5fde9]:
    • @​clerk/backend@​3.13.2

@​clerk/testing@​2.2.13

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8
    • @​clerk/backend@​3.13.1

@​clerk/testing@​2.2.12

Patch Changes

Changelog

Sourced from @​clerk/testing's changelog.

2.2.15

Patch Changes

2.2.14

Patch Changes

  • Updated dependencies [6f5fde9]:
    • @​clerk/backend@​3.13.2

2.2.13

Patch Changes

  • Updated dependencies [01f2c12]:
    • @​clerk/shared@​4.25.8
    • @​clerk/backend@​3.13.1

2.2.12

Patch Changes

2.2.11

Patch Changes

Commits

Updates @types/node from 26.1.1 to 26.1.2

Commits

Updates eslint-config-next from 16.2.10 to 16.2.12

Release notes

Sourced from eslint-config-next's releases.

v16.2.12

What's Changed

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

Moderate:

Commits

Updates happy-dom from 20.10.6 to 20.11.1

Release notes

Sourced from happy-dom's releases.

v20.11.1

👷‍♂️ Patch fixes

  • Improve performance of query selectors by avoiding construction of DOMException when not needed - By @@​cyfung1031 in task #2228

v20.11.0

🎨 Features

Commits

Updates prettier from 3.9.5 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

  1. Install the plugin:

    yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

Updates promptfoo from 0.121.19 to 0.121.20

Release notes

Sourced from promptfoo's releases.

0.121.20

0.121.20 (2026-07-30)

Features

Bug Fixes

  • assertions: default conversation-relevance threshold to 0.5 (#10142) (2812d76)
  • azure: avoid crash on empty completion choices (#10124) (17d8d03)
  • deps: align Renovate npm registry (#10115) (688a905)
  • deps: update anthropic packages (#10146) (cfa9bee)
  • deps: update anthropic packages (#10199) (2d3f3f1)
  • deps: update anthropic packages (#10229) (2834215)
  • deps: update dependency js-yaml to v5.2.2 [security] (#10218) (18ea879)
  • eval: avoid prompt index collisions for duplicate providers (#10208) (5aa0958)
  • eval: isolate conversation history by result column (#10212) (a377bb7)
  • integrations: migrate Langfuse prompts to SDK v5 (#10131) (08b3f50)
  • providers: align OpenAI models and capabilities (#10125) (e17ce87)
  • providers: preserve WebSocket retries for certificate-like URLs (#10197) (85e0710)
  • providers: reject Vertex Omni passthrough follow-ups (#10135) (8482570)
  • providers: restore secret-safe WebSocket retries (#10176) (6d89cbb)
  • python: keep worker control markers on their own line (#10097) (6bc2b95)
  • redteam: harden risk reports and WebSocket timeout tests (#10211) (9ab178e)
  • redteam: improve risk-category report row accessibility (b163738)
  • redteam: preserve generation provider selection (#10133) (ac8971f)
  • site: repair stale event pages, dead links, and hydration mismatches (#10215) (b0e3c25)
Changelog

Sourced from promptfoo's changelog.

0.121.20 (2026-07-30)

Features

Bug Fixes

  • assertions: default conversation-relevance threshold to 0.5 (#10142) (2812d76)
  • azure: avoid crash on empty completion choices (#10124) (17d8d03)
  • deps: align Renovate npm registry (#10115) (688a905)
  • deps: update anthropic packages (#10146) (cfa9bee)
  • deps: update anthropic packages (#10199) (2d3f3f1)
  • deps: update anthropic packages (#10229) (2834215)
  • deps: update dependency js-yaml to v5.2.2 [security] (#10218) (18ea879)
  • eval: avoid prompt index collisions for duplicate providers (#10208) (5aa0958)
  • eval: isolate conversation history by result column (#10212) (a377bb7)
  • integrations: migrate Langfuse prompts to SDK v5 (#10131) (08b3f50)
  • providers: align OpenAI models and capabilities (#10125) (e17ce87)
  • providers: preserve WebSocket retries for certificate-like URLs (#10197) (85e0710)
  • providers: reject Vertex Omni passthrough follow-ups (#10135) (8482570)
  • providers: restore secret-safe WebSocket retries (#10176) (6d89cbb)
  • python: keep worker control markers on their own line (#10097) (6bc2b95)
  • redteam: harden risk reports and WebSocket timeout tests (#10211) (9ab178e)
  • redteam: improve risk-category report row accessibility (b163738)
  • redteam: preserve generation provider selection (#10133) (ac8971f)
  • site: repair stale event pages, dead links, and hydration mismatches (#10215) (b0e3c25)
Commits
  • 82ca3c2 chore(main): release 0.121.20 (#10119)
  • ea63e1c chore(deps): update dependency @​asteasolutions/zod-to-openapi to v9.1.0 (#10238)
  • ac8971f fix(redteam): preserve generation provider selection (#10133)
  • 249ee33 docs(site): publish Vegas conference booth hours (#10225)
  • 76d49f9 docs(site): retire announcement bars after long timer delays (#10228)
  • 2834215 fix(deps): update anthropic packages (#10229)
  • 9ab178e fix(redteam): harden risk reports and WebSocket timeout tests (#10211)
  • a377bb7 fix(eval): isolate conversation history by result column (#10212)
  • 4545347 chore(deps): update dependency read-excel-file to v9.3.2 (#10226)
  • ff84f13 feat(providers): add Claude Opus 5 support (#10210)
  • Additional commits viewable in compare view

Updates semantic-release from 25.0.7 to 25.0.8

Release notes

Sourced from semantic-release's releases.

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

  • handle potential null values in commit message and gitTags trimming (0a60004)
  • hide-sensitive: mask key/auth/webhook env vars (973d763)
  • mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)
  • prevent template evaluation syntax in branch expansion and tag formatting (f121540)
Commits
  • 1bfdc52 fix: mask sensitive environment variables and improve commit handling (#4252)
  • 0a60004 fix: handle potential null values in commit message and gitTags trimming
  • f121540 fix: prevent template evaluation syntax in branch expansion and tag formatting
  • 973d763 fix(hide-sensitive): mask key/auth/webhook env vars
  • 474e5a3 ci(action): update github/codeql-action action to v4.37.1 (#4254)
  • fc9382c docs: fix issue template links (#4251)
  • e34c52d ci(action): update actions/setup-node action to v7 (#4250)
  • 8020ec6 ci(action): update actions/setup-node action to v6.5.0 (#4249)
  • 956baf4 chore(deps): update npm to v12.0.1 (#4247)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dev-minor-and-patch group across 1 director…
1baa9c2 
…y with 9 updates

Bumps the dev-minor-and-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@browserbasehq/stagehand](https://github.com/browserbase/stagehand/tree/HEAD/packages/core) | `3.7.0` | `3.7.1` |
| [@clerk/backend](https://github.com/clerk/javascript/tree/HEAD/packages/backend) | `3.11.7` | `3.14.0` |
| [@clerk/testing](https://github.com/clerk/javascript/tree/HEAD/packages/testing) | `2.2.10` | `2.2.15` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.1` | `26.1.2` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.10` | `16.2.12` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.10.6` | `20.11.1` |
| [prettier](https://github.com/prettier/prettier) | `3.9.5` | `3.9.6` |
| [promptfoo](https://github.com/promptfoo/promptfoo) | `0.121.19` | `0.121.20` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `25.0.7` | `25.0.8` |



Updates `@browserbasehq/stagehand` from 3.7.0 to 3.7.1
- [Release notes](https://github.com/browserbase/stagehand/releases)
- [Changelog](https://github.com/browserbase/stagehand/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/browserbase/stagehand/commits/stagehand-server-v3/v3.7.1/packages/core)

Updates `@clerk/backend` from 3.11.7 to 3.14.0
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/backend/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/backend@3.14.0/packages/backend)

Updates `@clerk/testing` from 2.2.10 to 2.2.15
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/testing/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/testing@2.2.15/packages/testing)

Updates `@types/node` from 26.1.1 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint-config-next` from 16.2.10 to 16.2.12
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.2.12/packages/eslint-config-next)

Updates `happy-dom` from 20.10.6 to 20.11.1
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.10.6...v20.11.1)

Updates `prettier` from 3.9.5 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.5...3.9.6)

Updates `promptfoo` from 0.121.19 to 0.121.20
- [Release notes](https://github.com/promptfoo/promptfoo/releases)
- [Changelog](https://github.com/promptfoo/promptfoo/blob/main/CHANGELOG.md)
- [Commits](promptfoo/promptfoo@0.121.19...0.121.20)

Updates `semantic-release` from 25.0.7 to 25.0.8
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v25.0.7...v25.0.8)

---
updated-dependencies:
- dependency-name: "@browserbasehq/stagehand"
  dependency-version: 3.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: "@clerk/backend"
  dependency-version: 3.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch
- dependency-name: "@clerk/testing"
  dependency-version: 2.2.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: eslint-config-next
  dependency-version: 16.2.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: happy-dom
  dependency-version: 20.11.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: promptfoo
  dependency-version: 0.121.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: semantic-release
  dependency-version: 25.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm npm/pnpm ecosystem dependency updates labels Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file npm npm/pnpm ecosystem dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants