Skip to content

This week's third round of dependency updates, and /roadmap.md redirects to the capability map - #931

Merged
irparent merged 1 commit into
mainfrom
deps/batch-2026-10-26
Oct 26, 2026
Merged

irparent merged 1 commit into
mainfrom
deps/batch-2026-10-26

Conversation

@irparent

Copy link
Copy Markdown
Member

This week's third round of dependency updates in one change, and a redirect for iris-eval.com/roadmap.md.

Dependency updates

Each comes from Dependabot's own change, so every lockfile was generated on Linux. Compared with main, no package is downgraded or removed in any lockfile, and the workflow pins are Dependabot's.

PR Update Where
#923 @langchain/core 1.2.19 → 1.2.20 packages/langchain
#924 @openai/agents 0.20.0 → 0.21.0 OpenTelemetry JS recipe
#925 vite 8.3.4 → 8.3.5 dashboard
#926 framer-motion 13.5.1 → 14.5.0 website
#927 lucide-react 1.60.0 → 1.61.0 dashboard
#928 actions/setup-python 7.0.0 → 7.1.0 workflows
#929 CodeQL actions 4.39.0 → 4.39.1 workflows
#930 @anthropic-ai/sdk 0.137.0, openai 7.40.0, ai 7.0.148 packages/sdk

framer-motion 14.0.0 removes only internal APIs that 13.5.1 had restored for compatibility; the site imports the public ones (motion, AnimatePresence, useInView, useReducedMotion, useScroll, useSpring).

The LlamaIndex recipe stays on 4.5.2

#921 proposed openinference-instrumentation-llama-index 4.5.4, and its recipe job failed the way 4.6 did: the recipe answers, but Iris receives no matching trace. Run locally against this tree with every other pin unchanged: 4.5.2 passes, 4.5.3 and 4.5.4 fail. The Dependabot hold moves from >=4.6.0 to >=4.5.3; #919 has the details and what 4.5.3 changed.

/roadmap.md

Search engines found iris-eval.com/roadmap.md, the old roadmap file's name at the site root, and it answered 404. It now redirects permanently to /capabilities, as /roadmap already did, and tests/roadmap-is-the-map.test.ts requires both redirects.

🤖 Generated with Claude Code

…rects to the capability map

Dependency updates, each from Dependabot's own change (lockfiles generated
on Linux, no package downgraded or removed):
- #923 @langchain/core 1.2.19 -> 1.2.20 (packages/langchain)
- #924 @openai/agents 0.20.0 -> 0.21.0 (OpenTelemetry JS recipe)
- #925 vite 8.3.4 -> 8.3.5 and #927 lucide-react 1.60.0 -> 1.61.0 (dashboard)
- #926 framer-motion 13.5.1 -> 14.5.0 (website); 14.0.0 removes only
  internal APIs, and the site uses the public ones
- #928 actions/setup-python 7.0.0 -> 7.1.0; #929 CodeQL actions 4.39.0 -> 4.39.1
- #930 @anthropic-ai/sdk 0.137.0, openai 7.40.0, ai 7.0.148 (packages/sdk)

The LlamaIndex recipe's instrumentation stays at 4.5.2: 4.5.3 and 4.5.4
fail its test the way 4.6 does (Iris receives no matching trace; checked
locally against this tree), so the Dependabot hold moves from >=4.6.0 to
>=4.5.3. #919 tracks the cause.

iris-eval.com/roadmap.md answered 404 to search engines; it now redirects
permanently to /capabilities like /roadmap, and the roadmap test requires
both.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@vercel

vercel Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
website Ready Ready Preview Oct 26, 2026 3:29pm UTC

@github-actions

github-actions Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Iris gate — 1 of 2 tripped --fail-on detector_veto

iris-eval ingest: 3 stored, 1 tripped --fail-on detector_veto (2 of 3 evaluated in dataset "release-gate")

Trace Verdict Basis Rules, classes or missing inputs Evidence
b8fbde192f7c971f747732f64f462ce5 failed detector_veto + risk_over_loss no_pii, pii_leak, credential_leak no_pii: AWS Access Key (output 45–65)
Verdict basis Traces
detector_veto 2
clean 1

Unjudged questions: task_completed (3), tool_use_correct (3) — a trace that did not carry what a rule needs.

tests/fixtures/ci-gate/traces.ndjson · 3 evaluated · dataset release-gate: 2 in the gate · exit 1 · what the bases mean

@github-actions

Copy link
Copy Markdown

Iris gate — 1 stored, nothing tripped --fail-on any

iris-eval ingest: 1 stored, 0 tripped --fail-on any

Verdict basis Traces
clean 1

Unjudged questions: task_completed (1), tool_use_correct (1) — a trace that did not carry what a rule needs.

tests/fixtures/ci-gate/clean.ndjson · 1 evaluated · exit 0 · what the bases mean

@irparent
irparent merged commit c956af5 into main Oct 26, 2026
74 of 75 checks passed
@irparent
irparent deleted the deps/batch-2026-10-26 branch October 26, 2026 15:46

This branch was successfully deployed

1 active deployment
Preview — 1cbe0ecf Deployed Oct 26, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant