chore(deps): bump the minor-and-patch group across 1 directory with 40 updates

[dependabot]

Bumps the minor-and-patch group with 40 updates in the / directory:

Package	From	To
@anthropic-ai/sdk	0.107.0	0.134.0
@sentry/nextjs	10.62.0	10.76.2
@supabase/ssr	0.12.0	0.12.7
@supabase/supabase-js	2.108.2	2.118.0
@upstash/redis	1.38.0	1.39.0
dompurify	3.4.16	3.4.17
driver.js	1.6.0	1.10.1
groq-sdk	1.3.0	1.6.0
idb-keyval	6.2.6	6.3.0
jspdf-autotable	5.0.8	5.0.9
next	16.3.8	16.4.1
next-intl	4.13.0	4.14.9
sonner	2.0.7	2.0.8
swagger-ui-react	5.32.6	5.33.3
tailwind-merge	3.6.0	3.7.0
@electric-sql/pglite	0.5.8	0.5.10
@emnapi/core	1.11.1	1.11.3
@emnapi/runtime	1.11.1	1.11.3
@next/env	16.3.8	16.4.1
@playwright/test	1.61.1	1.64.1
@testing-library/dom	10.4.1	10.4.2
@testing-library/react	16.3.2	16.3.3
@typescript-eslint/eslint-plugin	8.62.1	8.71.2
@typescript-eslint/parser	8.62.1	8.71.2
@vitest/coverage-v8	4.1.11	4.1.12
autoprefixer	10.5.2	10.6.1
eslint-config-next	16.3.8	16.4.1
lint-staged	17.2.0	17.6.0
postcss	8.5.26	8.5.30
prettier	3.9.6	3.9.10
tree-sitter	0.25.0	0.25.1
vitest	4.1.11	4.1.12
web-tree-sitter	0.26.10	0.27.1
@esbuild/linux-x64	0.28.1	0.28.2
@img/sharp-linux-x64	0.35.2	0.35.5
@parcel/watcher-darwin-arm64	2.5.6	2.6.0
@parcel/watcher-darwin-x64	2.5.6	2.6.0
@parcel/watcher-linux-x64-glibc	2.5.6	2.6.0
@parcel/watcher-linux-x64-musl	2.5.6	2.6.0
@swc/core-linux-x64-gnu	1.15.43	1.16.18

Updates @anthropic-ai/sdk from 0.107.0 to 0.134.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk-v0.134.0

Features

• api: add execution_identity to Managed Agents agents

• api: add organization_type_not_supported error to spend limit lists

• api: add telemetry destination test endpoint

• api: add telemetry destinations to the Admin API

• client: add native support for OpenTelemetry tracing

  If your app registers a global tracer provider, the SDK will create spans with it after upgrading, and they'll be exported with the rest of your traces. Requests will also get trace context headers from the global propagator. To disable, pass openTelemetry: false to the client or set ANTHROPIC_OPEN_TELEMETRY=false. Learn more in the documentation.

Bug Fixes

• api: rename telemetry destination test response model
• client: close an unread stream that was dropped while tracing is on
• client: don't follow redirects on token requests
• client: treat proxy-authorization as a sensitive header

Bug Fixes

• streaming: tolerate unknown event types in MessageStream and BetaMessageStream
• streaming: stop throwing "Unexpected event order" for an event before message_start
• streaming: yield events that arrive before message_start when iterating MessageStream and BetaMessageStream

Chores

• docs: correct prefill, thinking, fallback and model descriptions
• docs: document the scope required to assign the managed role
• docs: update model examples
• include the license files in the published packages
• internal: narrow the tripwire test rule in the contributor guides
• internal: remove @internal tag from a type that public types reference
• internal: remove file-level @internal tags from toolset modules
• internal: strip @internal declarations from published types
• internal: type-check the built declarations in lint

Documentation

• api: clarify when custom tool results can be sent
• api: say is_enabled is always true for user spend limits
• move more shared rules into the shared part of CLAUDE.md
• show examples of streaming-only methods iterating the stream

sdk-v0.133.0

Features

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.134.0 (2026-10-14)

Features

• api: add execution_identity to Managed Agents agents

• api: add organization_type_not_supported error to spend limit lists

• api: add telemetry destination test endpoint

• api: add telemetry destinations to the Admin API

• client: add native support for OpenTelemetry tracing

  If your app registers a global tracer provider, the SDK will create spans with it after upgrading, and they'll be exported with the rest of your traces. Requests will also get trace context headers from the global propagator. To disable, pass openTelemetry: false to the client or set ANTHROPIC_OPEN_TELEMETRY=false. Learn more in the documentation.

Bug Fixes

• api: rename telemetry destination test response model
• client: close an unread stream that was dropped while tracing is on
• client: don't follow redirects on token requests
• client: treat proxy-authorization as a sensitive header

Bug Fixes

• streaming: tolerate unknown event types in MessageStream and BetaMessageStream
• streaming: stop throwing "Unexpected event order" for an event before message_start
• streaming: yield events that arrive before message_start when iterating MessageStream and BetaMessageStream

Chores

• docs: correct prefill, thinking, fallback and model descriptions
• docs: document the scope required to assign the managed role
• docs: update model examples
• include the license files in the published packages
• internal: narrow the tripwire test rule in the contributor guides
• internal: remove @internal tag from a type that public types reference
• internal: remove file-level @internal tags from toolset modules
• internal: strip @internal declarations from published types
• internal: type-check the built declarations in lint

Documentation

• api: clarify when custom tool results can be sent
• api: say is_enabled is always true for user spend limits
• move more shared rules into the shared part of CLAUDE.md
• show examples of streaming-only methods iterating the stream

0.133.0 (2026-10-09)

... (truncated)

Commits

• 034b168 release: 0.134.0, packages/aws-sdk 0.8.0, packages/bedrock-sdk 0.35.0, packag...
• 7167acf Merge pull request #918 from anthropics/synced/published
• ddedaf6 fix(client): close an unread messages.create stream that was dropped while tr...
• b30ce1d fix(api): rename telemetry destination test response model
• 294fd93 feat(api): add telemetry destination test endpoint
• 0827ac8 fix(client): close an unread stream that was dropped while tracing is on
• 1d976d3 feat(api): add telemetry destinations to the Admin API
• d18ddbd feat(client): emit OpenTelemetry spans for API calls and the tool runners (#470)
• 1d5025f feat(client): add OpenTelemetry spans for API calls
• f6d4ef6 docs: move more shared rules into the shared part of CLAUDE.md
• Additional commits viewable in compare view

Updates @sentry/nextjs from 10.62.0 to 10.76.2

Release notes

Sourced from @​sentry/nextjs's releases.

10.76.2

• feat(v10/deps): Bump bundler plugins to 5.4.1 (#25147)
• fix(v10/ai): Normalize token usage and preserve cache breakdowns (#25126)
• fix(v10/core): Exclude attachments from internal exception events (#25167)
• fix(v10/effect): Detect HTTP spans named after the request method (#25169)
• fix(v10/sveltekit): Upload source maps with SvelteKit 3 (#25172)

Bundle size 📦

Path	Size
@​sentry/browser	27.57 KB
@​sentry/browser - with treeshaking flags	26.05 KB
@​sentry/browser (incl. Tracing)	46 KB
@​sentry/browser (incl. Tracing + Span Streaming)	47.76 KB
@​sentry/browser (incl. Tracing, Profiling)	50.68 KB
@​sentry/browser (incl. Tracing, Replay)	84.5 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	74.37 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	89.13 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	101.46 KB
@​sentry/browser (incl. Feedback)	44.34 KB
@​sentry/browser (incl. sendFeedback)	32.25 KB
@​sentry/browser (incl. FeedbackAsync)	37.27 KB
@​sentry/browser (incl. Metrics)	28.64 KB
@​sentry/browser (incl. Logs)	28.86 KB
@​sentry/browser (incl. Metrics & Logs)	29.52 KB
@​sentry/react	29.33 KB
@​sentry/react (incl. Tracing)	48.29 KB
@​sentry/vue	33.24 KB
@​sentry/vue (incl. Tracing)	48.35 KB
@​sentry/svelte	27.59 KB
CDN Bundle	29.88 KB
CDN Bundle (incl. Tracing)	47.92 KB
CDN Bundle (incl. Logs, Metrics)	31.42 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	49.23 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.92 KB
CDN Bundle (incl. Tracing, Replay)	84.74 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	85.99 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	90.4 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	91.67 KB
CDN Bundle - uncompressed	88.84 KB
CDN Bundle (incl. Tracing) - uncompressed	144.5 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	93.44 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	148.39 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	215.85 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	261.51 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	265.38 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	274.89 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	278.75 KB
@​sentry/nextjs (client)	50.76 KB

... (truncated)

Changelog

Sourced from @​sentry/nextjs's changelog.

10.76.2

• feat(v10/deps): Bump bundler plugins to 5.4.1 (#25147)
• fix(v10/ai): Normalize token usage and preserve cache breakdowns (#25126)
• fix(v10/core): Exclude attachments from internal exception events ([(#25167)](getsentry/sentry-javascript#25167))
• fix(v10/effect): Detect HTTP spans named after the request method (#25169)
• fix(v10/sveltekit): Upload source maps with SvelteKit 3 ((#25172)

10.76.1

• chore(v10/deps): Bump rrweb to 2.44.1 (#25101)
• fix(v10/browser-utils): Handle NS_ERROR_NOT_INITIALIZED from setTimeout in Firefox (#25051)
• fix(v10/feedback): Correct overlapping screenshot annotations and drag dimming (#25046)
• fix(v10/nextjs): Include basePath in request url of Pages Router errors (#25064)
• fix(v10/nuxt): Do not inject debug IDs into the SSR build (#25094)
• fix(v10/sveltekit): Export consoleLoggingIntegration from worker entry (#25063)
• fix(v10/sveltekit): Resolve @opentelemetry/api via the SDK on SvelteKit 3 (#25105)
• fix(v10/vue): Share one root render span debounce timer across components (#24887)

• test(v10/e2e): Backport CI fixes for cloudflare and sveltekit-3 e2e tests (#25102)
• test(v10/nuxt): Wait for hydration instead of networkidle in dev-mode (#25103)

10.76.0

• feat(v10/vue,nuxt): Record default UI spans without Options API (mixins) (#24885)
• fix(v10/aws-serverless): Keep Lambda extension polling past 300s (#24828)
• fix(v10/deno): Flush buffered metrics and logs before process exit (#24938)
• fix(v10/nitro): Capture errors only through the Nitro error hook (#24963)
• fix(v10/node-core): Flush buffered metrics on process exit (#24937)
• fix(v10/react-router): Avoid duplicating Vite config arrays (#24936)
• fix(v10/tanstackstart-react): Avoid duplicating Vite config arrays (#24935)

• test(v10/effect): Make effect/http stable (#24942)

10.75.3

• fix(v10/tanstackstart-react): Reject non-POST requests to the managed tunnel route (#24617)

... (truncated)

Commits

• 042e228 fix typo in changelog
• c04d41f release: 10.76.2
• 3810881 meta(changelog): Update changelog for 10.76.2 (#25181)
• 73cb3d0 fix(v10/core): Exclude attachments from internal exception events (#25167)
• 65482d6 fix(v10/sveltekit): Upload source maps with SvelteKit 3 (#25172)
• 485ebb3 feat(v10/deps): Bump bundler plugins to 5.4.1 (#25147)
• a9c5c42 fix(v10/effect): Detect HTTP spans named after the request method (#25169)
• 602f245 fix(v10/ai): Normalize token usage and preserve cache breakdowns (#25126)
• 527414e test(v10/nextjs): Pin nextjs-16-cf-workers latest variant to Next.js 16.3 (#2...
• 910d09d Merge commit 'c2bf38e907c80719bd94bde2ef894bcd0ae018ae' into v10
• Additional commits viewable in compare view

Updates @supabase/ssr from 0.12.0 to 0.12.7

Release notes

Sourced from @​supabase/ssr's releases.

v0.12.7

0.12.7 (2026-09-08)

Bug Fixes

• apply non-browser defaults when cookies only sets encode (#294) (9d6e2a5)

v0.12.7-rc.162

What's Changed

• chore: add workflow for autoclosing stale issues by @​mandarini in supabase/ssr#292
• fix: apply non-browser defaults when cookies only sets encode by @​PhuocOng in supabase/ssr#294

Full Changelog: supabase/ssr@v0.12.6...v0.12.7-rc.162

v0.12.6

0.12.6 (2026-09-04)

Bug Fixes

• avoid duplicate cache headers per server client (#283) (af750e2)

v0.12.6-rc.158

What's Changed

• chore: update @​supabase/supabase-js to v2.114.0 by @​supabase-libs-pr-manager[bot] in supabase/ssr#289
• build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 by @​dependabot[bot] in supabase/ssr#290
• fix: avoid duplicate cache headers per server client by @​dhruvxvaishnav in supabase/ssr#283
• docs: fix typos in tsdoc and design doc by @​PhuocOng in supabase/ssr#288

New Contributors

• @​dhruvxvaishnav made their first contribution in supabase/ssr#283
• @​PhuocOng made their first contribution in supabase/ssr#288

Full Changelog: supabase/ssr@v0.12.5...v0.12.6-rc.158

v0.12.5

0.12.5 (2026-08-24)

Bug Fixes

• warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142

v0.12.5-rc.154

What's Changed

• docs: add React Router middleware example by @​sornapudisuresh in supabase/ssr#274
• build(deps): bump pnpm/action-setup from 6.0.9 to 6.0.10 by @​dependabot[bot] in supabase/ssr#280
• build(deps): bump postcss from 8.5.15 to 8.5.25 in the npm_and_yarn group across 1 directory by @​dependabot[bot] in supabase/ssr#281

... (truncated)

Changelog

Sourced from @​supabase/ssr's changelog.

0.12.7 (2026-09-08)

Bug Fixes

• apply non-browser defaults when cookies only sets encode (#294) (9d6e2a5)

0.12.6 (2026-09-04)

Bug Fixes

• avoid duplicate cache headers per server client (#283) (af750e2)

0.12.5 (2026-08-24)

Bug Fixes

• warn when auth.storage is ignored by createBrowserClient/createServerClient (#284) (c1700f2), closes #142

0.12.4 (2026-07-28)

Bug Fixes

• flush PKCE verifier slot removals on the server (#275) (6df6f03)

0.12.3 (2026-07-14)

Bug Fixes

• cookies: keep domain-scoped deletion in name-keyed cookie stores (#258) (d3a8a98), closes #256

0.12.2 (2026-07-14)

Bug Fixes

• align parseCookieHeader return type with getAll cookie method (#239) (e8fe1d5), closes #115

0.12.1 (2026-07-13)

Bug Fixes

• cookies: deduplicate server cookie writes (#246) (035eabe)

Commits

• 9b28f49 chore(main): release 0.12.7 (#295)
• 9d6e2a5 fix: apply non-browser defaults when cookies only sets encode (#294)
• 4ed9f65 chore: add workflow for autoclosing stale issues (#292)
• 71c33a7 chore(main): release 0.12.6 (#291)
• c7c7e68 docs: fix typos in tsdoc and design doc (#288)
• af750e2 fix: avoid duplicate cache headers per server client (#283)
• 905c7c3 build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 (#290)
• 9e2564d chore: update @​supabase/supabase-js to v2.114.0 (#289)
• c5310fd chore(main): release 0.12.5 (#286)
• c1700f2 fix: warn when auth.storage is ignored by createBrowserClient/createServerCli...
• Additional commits viewable in compare view

Updates @supabase/supabase-js from 2.108.2 to 2.118.0

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.118.0

2.118.0 (2026-10-15)

🚀 Features

• postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)
• storage: add content-encoding support for uploads (#1949)

🩹 Fixes

• ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

• Atharv Gaur @​Athaxv
• Ferhat Elmas
• Lukas Klingsbo

v2.118.0-canary.2

2.118.0-canary.2 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.1

2.118.0-canary.1 (2026-10-12)

This was a version bump only, there were no code changes.

v2.118.0-canary.0

2.118.0-canary.0 (2026-10-09)

🚀 Features

• postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

🩹 Fixes

• ci: patch next and sharp advisories and pin node-browser playwright (#2753)

❤️ Thank You

• Lukas Klingsbo

v2.117.3

2.117.3 (2026-10-07)

🩹 Fixes

• deps: bump next to patch RCE in realtime-js example (#2733)
• functions: send a Blob or File with its own content type (#2714)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.118.0 (2026-10-15)

🚀 Features

• postgrest: leave computed fields out of select('*') and resolve no-argument rpc overloads for postgrest-typegen output (#2730)

❤️ Thank You

• Lukas Klingsbo

2.117.3 (2026-10-07)

🩹 Fixes

• storage: send multipart fields before files (#2736)

❤️ Thank You

• Ferhat Elmas
• Katerina Skroumpelou @​mandarini

2.117.2 (2026-09-25)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.117.1 (2026-09-23)

🩹 Fixes

• auth: return stored session when a refresh loses to another tab (#2698)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

2.117.0 (2026-09-22)

🚀 Features

• auth: enable passkey API by default and deprecate experimental passkey opt-in (#2695)

❤️ Thank You

• fadymak

2.116.0 (2026-09-07)

🚀 Features

• auth: add MFA recovery codes API (#2676)

... (truncated)

Commits

• b9753a1 feat(postgrest): leave computed fields out of select('*') and resolve no-argu...
• 88faa11 fix(ci): patch next and sharp advisories and pin node-browser playwright (#2753)
• aac9d32 chore(release): version 2.117.3 changelogs (#2744)
• 4d23055 fix(storage): send multipart fields before files (#2736)
• a684cf9 chore(release): version 2.117.2 changelogs (#2707)
• 54c225d chore(release): version 2.117.1 changelogs (#2700)
• 739b351 fix(auth): return stored session when a refresh loses to another tab (#2698)
• f34d428 chore(release): version 2.117.0 changelogs (#2697)
• cc45ccf feat(auth): enable passkey API by default and deprecate experimental passkey ...
• c511286 docs(realtime): document relationship of accessToken() and heartbeat (#2680)
• Additional commits viewable in compare view

Updates @upstash/redis from 1.38.0 to 1.39.0

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.39.0

Minor Changes

• 6801501: Add array commands: arset, armset, arget, armget, argetrange, arscan, argrep, ardel, ardelrange, arcount, arlen, arinsert, arring, arlastitems, arnext, arseek, arop and arinfo, available on the client, in pipelines and in transactions.
• 3f6e286: Support search indexes over Redis streams: redis.search.createIndex({ dataType: "stream", stream: "events", schema }) indexes every entry of the stream as a document keyed by its entry ID. describe() reports dataType: "stream" with the stream key in prefixes.
• 33658bc: Add vector index support: redis.vector.createIndex() / redis.vector.index() return a VectorIndex with add, get, query, delete, count, info and drop, backed by the new VECTOR.CREATE, VECTOR.ADD, VECTOR.GET, VECTOR.QUERY, VECTOR.DEL, VECTOR.COUNT, VECTOR.INFO and VECTOR.DROP commands.

@​upstash/redis@​1.39.0-canary-20260826110341-795a33599494ef4034259bd4f7d36db70c44f368

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@1.38.3...@​upstash/redis@1.39.0-canary-20260826110341-795a33599494ef4034259bd4f7d36db70c44f368

@​upstash/redis@​1.38.4

Patch Changes

• 7ac8182: Fix read-your-writes sending a stale upstash-sync-token

  A read issued straight after a write travelled with the token from before that write, so the server was under no obligation to serve the write and readYourWrites silently did not hold.

  HttpClient.request() snapshotted the outgoing headers with mergeHeaders(this.headers, ...) and only afterwards wrote the freshest token into this.headers, so the token learned from response N first shipped with request N+2. The assignment now happens before the merge.

  This regressed in 1.34.5. In 1.34.0–1.34.4 the request options held headers: this.headers by reference, so the late write was still picked up before fetch; 1.34.5 introduced per-request header merging, which turned that reference into a copy without moving the assignment.

@​upstash/redis@​1.38.3

Patch Changes

• f020866: Send an Upstash-Telemetry-Retry header with the retry count on retried requests so retry rates are visible in server-side telemetry
• 777dc30: Trim telemetry header values before deduplicating so whitespace around existing values does not defeat the dedup check

@​upstash/redis@​1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

What's Changed

• DX-2861: trim telemetry dedup values by @​ytkimirti in upstash/redis-js#1442

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@1.38.2...@​upstash/redis@1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

@​upstash/redis@​1.38.2

Patch Changes

• c0f5ad7: Deduplicate telemetry header values so repeated mergeTelemetry calls no longer append the same sdk, platform or runtime tag multiple times

@​upstash/redis@​1.38.1

Patch Changes

... (truncated)

Commits

• 6b27727 chore: version packages (#1456)
• 33658bc DX-2963: add vector index commands and redis.vector namespace (#1446)
• 6801501 DX-3009: add array commands (#1451)
• 3f6e286 DX-3010: support search indexes over redis streams (#1452)
• 73fbe1a chore: version packages (#1448)
• 7ac8182 DX-2995: fix read-your-writes sending a stale upstash-sync-token (#1447)
• 1bec566 ci: poll npm for the ci version instead of a fixed sleep (#1444)
• 74da1df chore: version packages (#1443)
• f020866 DX-2960: send Upstash-Telemetry-Retry header with the attempt number (DX-2960...
• 777dc30 fix: trim telemetry values before dedup and cover distinct-version case (#1442)
• Additional commits viewable in compare view

Updates dompurify from 3.4.16 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

• Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
• Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
• Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
• Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
• Added a purify-edge test runner as a compatibility check, thanks @​anzal1
• Clarified the IN_PLACE documentation in the README about possible risks
• Updated several dependencies

Commits

• a77a3e7 release: 3.4.17 (#1672)
• See full diff in compare view

Updates driver.js from 1.6.0 to 1.10.1

Release notes

Sourced from driver.js's releases.

1.10.1

Added

• Adds launcher: false to disable checklists floating launcher

Fixed

• Hints, and popovers now work with <dialog> (#625)
• Clicking the popover no longer throws when the event's target is a text node. (#626)

1.10.0

Added

• Added support for checklists.
• New reason option on the destroy hooks to distinguish between destroy reasons

Changed

• The popover's close button only darkens for keyboard focus (:focus-visible), so it no longer opens dark after a tour is started with a mouse click.

1.9.0

Added

• closeBtnLabel (driver and step level) to set the close button's aria-label, for translated tours. Defaults to Close. (#623)
• overlayClickBehavior: "none" to ignore overlay clicks while Escape and the close button still close the tour. (#435)

Changed

• Keyboard control follows the popover buttons: arrow keys do nothing when their button is hidden or disabled, and Escape does nothing when the close button is disabled. (#589)
• The current popover is hidden while waitForElement waits for the next step's element, so a stale step no longer stays on screen. (#578)
• Only one instance is on screen at a time. Starting a tour or highlight closes any other active instance; it gets onDeselected and onDestroyed but not onDestroyStarted.

Fixed

• destroy() on an instance that is not active is now a no-op instead of tearing down another instance's tour.

... (truncated)

Commits

• ca44ea0 1.10.1
• 7e33b1d Polish checklist item focus and alignment
• 073c802 Add launcher option to checklist
• 5f2f1b8 Render hints inside open modal dialogs
• cde8235 Fix popover clicks on text node targets
• e741814 1.10.0
• d517628 Add checklist themes, positions and examples
• 9e3f684 Add checklists
• f331f5d Pass destroy reason to destroy hooks
• cc39804 1.9.0
• Additional commits viewable in compare view

Updates groq-sdk from 1.3.0 to 1.6.0

Release notes

Sourced from groq-sdk's releases.

v1.6.0

1.6.0 (2026-08-25)

Full Changelog: v1.5.0...v1.6.0

Features

• chat: add Qwen3.8 reasoning guidance (c2b0264)

Chores

• GitHub Terraform: Create/Update .github/workflows/code-freeze-bypass.yaml [skip ci] (99fc8ef)
• GitHub Terraform: Create/Update .github/workflows/stale.yaml [skip ci] (8d224a0)
• GitHub Terraform: Create/Update .github/workflows/stale.yaml [skip ci] (2c5b7aa)
• internal: allow the mock server port to be set with STAINLESS_MOCK_PORT (90cec2d)

Styles

• chat: format completion params union (91d9de9)

v1.5.0

1.5.0 (2026-07-30)

Full Changelog: v1.4.1...v1.5.0

Features

• api: api update (36eede4)

v1.4.1

1.4.1 (2026-07-29)

Full Changelog: v1.4.0...v1.4.1

Chores

• internal: codegen related update (873736d)

v1.4.0

1.4.0 (2026-07-24)

Full Changelog: v1.3.0...v1.4.0

Features

• stlc: configurable CI runner and private-production-repo support in workflow templates (21fa0b8)

... (truncated)

Changelog

Sourced from groq-sdk's changelog.

1.6.0 (2026-08-25)

Full Changelog: v1.5.0...v1.6.0

Features

• chat: add Qwen3.8 reasoning guidance (c2b0264)

Chores

• GitHub Terraform: Create/Update .github/workflows/code-freeze-bypass.yaml [skip ci] (99fc8ef)
• GitHub Terraform: Create/Update .github/workflows/stale.yaml [skip ci] (8d224a0)
• GitHub Terraform: Create/Update .github/workflows/stale.yaml [skip ci] (2c5b7aa)
• internal: allow the mock server port to be set with STAINLESS_MOCK_PORT (90cec2d)

Styles

• chat: format completion params union (91d9de9)

1.5.0 (2026-07-30)

Full Changelog: v1.4.1...v1.5.0

Features

• api: api update (36eede4)

1.4.1 (2026-07-29)

Full Changelog: v1.4.0...v1.4.1

Chores

• internal: codegen related update (873736d)

1.4.0 (2026-07-24)

Full Changelog: v1.3.0...v1.4.0

Features

• stlc: configurable CI runner and private-production-repo support in workflow templates (21fa0b8)

Bug Fixes

• ci: bump @​arethetypeswrong/cli to ^0.18.0 and run CI workflows on Node 24 (4f98c9b)

... (truncated)

Commits

• 6de8d02 release: 1.6.0 (#273)
• 8d224a0 chore: GitHub Terraform: Create/Update .github/workflows/stale.yaml [skip ci]
• 2c5b7aa chore: GitHub Terraform: Create/Update .github/workflows/stale.yaml [skip ci]
• 99fc8ef chore: GitHub Terraform: Create/Update .github/workflows/code-freeze-bypass.y...
• 9f75436 release: 1.5.0 (#270)
• a4865c3 release: 1.4.1 (#269)
• 709b1ab release: 1.4.0 (#266)
• c6029f3 chore(deps): bump brace-expansion from 2.1.1 to 2.1.2 (#268)
• 02a599a [codex] chore(deps): bump js-yaml patched versions (#265)
• 1ddeb6d chore(deps): bump picomatch from 2.3.1 to 2.3.2 (#261)
• Additional commits viewable in compare view

Updates idb-keyval from 6.2.6 to 6.3.0

Commits

• 17a69a1 6.3.0
• f76e369 fix: resolve documentation error, remove husky, and database caching (#185)
• See full diff in compare view

Updates jspdf-autotable from 5.0.8 to 5.0.9

Release notes

Sourced from jspdf-autotable's rel...

Description has been truncated