Skip to content

chore(deps): bump the npm-major group across 1 directory with 14 updates#5915

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/npm-major-d4cbe53ed6
Closed

chore(deps): bump the npm-major group across 1 directory with 14 updates#5915
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/npm-major-d4cbe53ed6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-major group with 14 updates in the / directory:

Package From To
pkg-pr-new 0.0.75 0.0.78
verdaccio 6.7.4 6.8.0
@supabase/supabase-js 2.110.2 2.110.3
@anthropic-ai/claude-agent-sdk 0.3.207 0.3.208
semantic-release 25.0.6 25.0.7
fumadocs-core 16.11.3 16.11.4
fumadocs-mdx 15.1.0 15.1.1
fumadocs-ui 16.11.3 16.11.4
@effect/atom-react 4.0.0-beta.97 4.0.0-beta.98
@effect/platform-bun 4.0.0-beta.97 4.0.0-beta.98
@effect/platform-node 4.0.0-beta.97 4.0.0-beta.98
@effect/sql-pg 4.0.0-beta.97 4.0.0-beta.98
@effect/vitest 4.0.0-beta.97 4.0.0-beta.98
effect 4.0.0-beta.97 4.0.0-beta.98

Updates pkg-pr-new from 0.0.75 to 0.0.78

Commits

Updates verdaccio from 6.7.4 to 6.8.0

Release notes

Sourced from verdaccio's releases.

v6.8.0

Minor Changes

  • 962fba8: feat: add unpublish notification hooks

    Port of #5920 (ref #5328). The notify webhook now also fires when a package is unpublished entirely and when a single version (tarball) is removed, not only on publish. Notification templates can distinguish the event through the new {{ publishType }} (publish | unpublish) and {{ publishedPackage }} variables, and the {{ publisher }} object exposes only name, groups and real_groups, so the remote user auth token can never leak to the notification endpoint (via @verdaccio/hooks 8.0.4).

Patch Changes

  • f0684dc: fix: return 403 to client when uplink responds with 403 for tarball requests

    Previously, any non-200/404 response from an uplink (e.g. a security proxy blocking a package download) would result in a generic 500 error being returned to the client. This change propagates 403 responses from the uplink through to the client, including any error detail from the response body, so callers can distinguish authorization failures from other upstream errors.

  • 3a84578: chore: refactor eslint

  • b7a5db1: fix: rate limit and bound the npm search v1 endpoint

    The /-/v1/search endpoint now applies the userRateLimit rate limiting middleware (matching the login, token and profile endpoints), clamps the size (max 250, like the public npm registry) and from (max 10000) pagination parameters, and stops evaluating package access as soon as the requested page is filled instead of running an auth check over the entire result set. The clamped values are also what gets forwarded to uplink registries (the raw request URL is no longer passed through), so the bounds hold end-to-end. This prevents cheap anonymous requests from triggering unbounded full-catalog scans. As part of this, pagination is fixed: results were sliced with slice(from, size) instead of slice(from, from + size), so pages beyond the first were wrong.

    Search results for local packages also emit npm-search-compatible maintainers ({ username, email }) — npm 11 on Node 24 crashes rendering entries without username (The "str" argument must be of type string. Received undefined) — and the publisher field is now populated from _npmUser when the publishing client provided it, falling back to the first maintainer, so the npm CLI shows the publishing user instead of by ???.

  • 808d916: fix: pick the right uplink for tarballs and heal missing distfile records

    Uplink selection. With several uplinks configured for a package, tarball downloads used the last uplink whose package pattern matched, even when the tarball url belongs to a different one, which could make downloads fail against registries that require authentication. The uplink is now selected by matching the tarball url: the registry recorded on the distfile wins, then the uplink whose url serves the file; when none matches, an autogenerated uplink with default settings is used. Single-uplink setups keep the previous behavior for tarballs hosted on another host (a CDN).

    Missing distfile records. Storages written by other verdaccio versions can carry cached versions without their _distfiles records, which made those tarballs permanently return 404 no such file available. The tarball location is now resolved from the version's dist.tarball metadata when the record is missing, and the record is restored when the tarball is cached.

  • a2de1d5: Update verdaccio dependencies to the latest npm dist-tag (@verdaccio/ui-theme tracks next-9):

    • @verdaccio/ui-theme: 9.0.0-next-9.20 → 9.0.0-next-9.21
Changelog

Sourced from verdaccio's changelog.

6.8.0

Minor Changes

  • 962fba8: feat: add unpublish notification hooks

    Port of #5920 (ref #5328). The notify webhook now also fires when a package is unpublished entirely and when a single version (tarball) is removed, not only on publish. Notification templates can distinguish the event through the new {{ publishType }} (publish | unpublish) and {{ publishedPackage }} variables, and the {{ publisher }} object exposes only name, groups and real_groups, so the remote user auth token can never leak to the notification endpoint (via @verdaccio/hooks 8.0.4).

Patch Changes

  • f0684dc: fix: return 403 to client when uplink responds with 403 for tarball requests

    Previously, any non-200/404 response from an uplink (e.g. a security proxy blocking a package download) would result in a generic 500 error being returned to the client. This change propagates 403 responses from the uplink through to the client, including any error detail from the response body, so callers can distinguish authorization failures from other upstream errors.

  • 3a84578: chore: refactor eslint

  • b7a5db1: fix: rate limit and bound the npm search v1 endpoint

    The /-/v1/search endpoint now applies the userRateLimit rate limiting middleware (matching the login, token and profile endpoints), clamps the size (max 250, like the public npm registry) and from (max 10000) pagination parameters, and stops evaluating package access as soon as the requested page is filled instead of running an auth check over the entire result set. The clamped values are also what gets forwarded to uplink registries (the raw request URL is no longer passed through), so the bounds hold end-to-end. This prevents cheap anonymous requests from triggering unbounded full-catalog scans. As part of this, pagination is fixed: results were sliced with slice(from, size) instead of slice(from, from + size), so pages beyond the first were wrong.

    Search results for local packages also emit npm-search-compatible maintainers ({ username, email }) — npm 11 on Node 24 crashes rendering entries without username (The "str" argument must be of type string. Received undefined) — and the publisher field is now populated from _npmUser when the publishing client provided it, falling back to the first maintainer, so the npm CLI shows the publishing user instead of by ???.

  • 808d916: fix: pick the right uplink for tarballs and heal missing distfile records

    Uplink selection. With several uplinks configured for a package, tarball downloads used the last uplink whose package pattern matched, even when the tarball url belongs to a different one, which could make downloads fail against registries that require authentication. The uplink is now selected by matching the tarball url: the registry recorded on the distfile wins, then the uplink whose url serves the file; when none matches, an autogenerated uplink with default settings is used. Single-uplink setups keep the previous behavior for tarballs hosted on another host (a CDN).

    Missing distfile records. Storages written by other verdaccio versions can carry cached versions without their _distfiles records, which made those tarballs permanently return 404 no such file available. The tarball location is now resolved from the version's dist.tarball metadata when the record is missing, and the record is restored when the tarball is cached.

  • a2de1d5: Update verdaccio dependencies to the latest npm dist-tag (@verdaccio/ui-theme tracks next-9):

    • @verdaccio/ui-theme: 9.0.0-next-9.20 → 9.0.0-next-9.21
Commits

Updates @supabase/supabase-js from 2.110.2 to 2.110.3

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.110.3

2.110.3 (2026-07-13)

🩹 Fixes

  • auth: preserve pkce verifier (#2513)
  • postgrest: pin tstyche target off floating latest (#2509)

❤️ Thank You

v2.110.3-canary.1

2.110.3-canary.1 (2026-07-13)

🩹 Fixes

  • auth: preserve pkce verifier (#2513)

❤️ Thank You

v2.110.3-canary.0

2.110.3-canary.0 (2026-07-10)

🩹 Fixes

  • postgrest: pin tstyche target off floating latest (#2509)

❤️ Thank You

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.110.3 (2026-07-13)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

Commits

Updates @anthropic-ai/claude-agent-sdk from 0.3.207 to 0.3.208

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.208

What's changed

  • Fixed a caller abort during a pending SDK hook callback being converted into hook success, which let PreToolUse-gated tools execute after the abort
  • Fixed a per-query resource leak in the SDK's process tracking when spawning the CLI fails (nonexistent or inaccessible executable path)
  • Fixed an SDK UserPromptSubmit hook callback exceeding its timeout killing the entire query with an empty error; it now blocks the prompt with a clear timeout message and the session continues
  • Fixed extraArgs values that look like flags (e.g. resume: '--version') being parsed as their own CLI flags; dash-leading values are now bound with equals-form argv
  • Fixed an abort-listener leak: streaming queries sharing one AbortController no longer accumulate abort listeners on its signal after each completed query
  • Fixed createSdkMcpServer docs pointing at a nonexistent env var; the MCP tool-call timeout knob is MCP_TOOL_TIMEOUT
  • Fixed an uncaught exception when writing to stdin after the Claude Code subprocess has exited

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.208
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.208
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.208
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.208
Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.208

  • Fixed a caller abort during a pending SDK hook callback being converted into hook success, which let PreToolUse-gated tools execute after the abort
  • Fixed a per-query resource leak in the SDK's process tracking when spawning the CLI fails (nonexistent or inaccessible executable path)
  • Fixed an SDK UserPromptSubmit hook callback exceeding its timeout killing the entire query with an empty error; it now blocks the prompt with a clear timeout message and the session continues
  • Fixed extraArgs values that look like flags (e.g. resume: '--version') being parsed as their own CLI flags; dash-leading values are now bound with equals-form argv
  • Fixed an abort-listener leak: streaming queries sharing one AbortController no longer accumulate abort listeners on its signal after each completed query
  • Fixed createSdkMcpServer docs pointing at a nonexistent env var; the MCP tool-call timeout knob is MCP_TOOL_TIMEOUT
  • Fixed an uncaught exception when writing to stdin after the Claude Code subprocess has exited
Commits

Updates semantic-release from 25.0.6 to 25.0.7

Release notes

Sourced from semantic-release's releases.

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

  • argument Injection via repositoryUrl in package.json (#4245) (c46dbda)
Commits

Updates fumadocs-core from 16.11.3 to 16.11.4

Commits
  • e4d5c00 Merge pull request #3414 from fuma-nama/tegami/version-packages
  • 9e10899 fix(api-docs): remove stale schema resolver APIs
  • a5da935 migrate from broken takumi version
  • 8a280f5 refactor(*): migrate to yaml
  • 06dd35b feat(api-docs): use @scalar/json-magic for dereferencing
  • b3c7fb3 docs: simplify
  • 3958960 fix types
  • See full diff in compare view

Updates fumadocs-mdx from 15.1.0 to 15.1.1

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.1.1

Migrate from js-yaml to yaml

Commits
  • e4d5c00 Merge pull request #3414 from fuma-nama/tegami/version-packages
  • 9e10899 fix(api-docs): remove stale schema resolver APIs
  • a5da935 migrate from broken takumi version
  • 8a280f5 refactor(*): migrate to yaml
  • 06dd35b feat(api-docs): use @scalar/json-magic for dereferencing
  • b3c7fb3 docs: simplify
  • 3958960 fix types
  • 1f9ca9a Merge pull request #3411 from fuma-nama/tegami/version-packages
  • 983d4e9 fix(satteri): workspace range
  • fc69a45 docs: unify sponsors
  • Additional commits viewable in compare view

Updates fumadocs-ui from 16.11.3 to 16.11.4

Commits
  • e4d5c00 Merge pull request #3414 from fuma-nama/tegami/version-packages
  • 9e10899 fix(api-docs): remove stale schema resolver APIs
  • a5da935 migrate from broken takumi version
  • 8a280f5 refactor(*): migrate to yaml
  • 06dd35b feat(api-docs): use @scalar/json-magic for dereferencing
  • b3c7fb3 docs: simplify
  • 3958960 fix types
  • See full diff in compare view

Updates @effect/atom-react from 4.0.0-beta.97 to 4.0.0-beta.98

Changelog

Sourced from @​effect/atom-react's changelog.

4.0.0-beta.98

Patch Changes

Commits

Updates @effect/platform-bun from 4.0.0-beta.97 to 4.0.0-beta.98

Changelog

Sourced from @​effect/platform-bun's changelog.

4.0.0-beta.98

Patch Changes

Commits

Updates @effect/platform-node from 4.0.0-beta.97 to 4.0.0-beta.98

Changelog

Sourced from @​effect/platform-node's changelog.

4.0.0-beta.98

Patch Changes

Commits

Updates @effect/sql-pg from 4.0.0-beta.97 to 4.0.0-beta.98

Commits

Updates @effect/vitest from 4.0.0-beta.97 to 4.0.0-beta.98

Changelog

Sourced from @​effect/vitest's changelog.

4.0.0-beta.98

Patch Changes

Commits

Updates effect from 4.0.0-beta.97 to 4.0.0-beta.98

Changelog

Sourced from effect's changelog.

4.0.0-beta.98

Patch Changes

  • #2587 989603b Thanks @​gcanti! - Expose SchemaError as a public module and re-export Schema.isSchemaError.

    This gives consumers a stable import path and guard for schema failures without depending on the internal schema implementation, while preserving the existing Schema.SchemaError surface.

  • #2592 214c458 Thanks @​gcanti! - Apply transformClient when building an individual HttpApi endpoint client, preserving the supplied client's error and service channels.

  • #2598 a037273 Thanks @​gcanti! - Preserve __proto__ group and endpoint identifiers in HTTP APIs, generated clients, and URL builders.

  • #2578 97fdaa9 Thanks @​tim-smart! - Fix Atom.kvs async mode to retain its AsyncResult value shape after writes.

  • #2612 b24d248 Thanks @​gptguy! - Fix replay of persisted DurableDeferred.raceAll results.

  • #2580 19c222c Thanks @​gcanti! - Fix HttpApi authorization decoding.

    Previously, HttpApiBuilder.securityDecode removed the expected scheme length and one following character from the Authorization header without verifying either value. A Bearer decoder could therefore pass credentials from a different scheme such as Basic, accept a malformed header without a separating space, or retain leading spaces when more than one separator was present.

    The decoder now validates the declared scheme before returning credentials, matches it case-insensitively as required by RFC 9110 section 11.1, and consumes one or more separating spaces. Missing, malformed, or mismatched headers produce the existing empty credential value so security middleware can reject them consistently.

    Basic authentication previously split the decoded user-pass value at every colon, causing otherwise valid passwords containing : to be discarded. It now uses only the first colon as the separator and preserves the rest of the password, following RFC 7617 section 2.

  • #2581 eec85dd Thanks @​gcanti! - Fix HttpApi client error decoding.

    Generated clients previously combined every error schema for a status into one union decoder. When schemas used different encodings, their declaration order could determine the decoded error instead of the response Content-Type; for example, a text decoder could accept a JSON response before the JSON decoder was tried.

    Error responses are now grouped and selected by normalized content type, matching buffered success responses. Normalization happens before grouping, so declarations that differ only by casing or parameters such as charset share one union decoder instead of making later schemas unreachable.

    No-content schemas are represented by a headerless alternative, allowing empty error responses without a Content-Type header to decode correctly. Unsupported content types preserve the existing combination of StatusCodeError and the response decoding failure.

  • #2605 0082f4f Thanks @​gcanti! - Fix Number.remainder for very small and large values formatted in scientific notation.

  • #2611 8849052 Thanks @​tim-smart! - Fix PersistedQueue to count schema decoding and malformed SQL payload failures as processing attempts.

  • #2500 c15e16a Thanks @​hsubra89! - Fix Redis-backed PersistedQueue reset and failed-item handling.

  • #2602 01d00a3 Thanks @​gcanti! - Fix a bug where decoding bracket paths from FormData or URLSearchParams could mutate inherited object prototypes.

  • #2588 8bd4589 Thanks @​gcanti! - Fix SchemaAST.isJson to reject class instances and other non-record objects.

  • #2605 0082f4f Thanks @​gcanti! - Fix JSON Schema allOf imports for tuple intersections and preserve primitive refinements when combining literal constraints.

  • #2604 6e08428 Thanks @​gcanti! - Fix Schema.toFormatter and Schema.toEquivalence indexing for tuples with multiple post-rest elements.

  • #2603 388dcf9 Thanks @​gcanti! - Fix union candidate selection and decoding order so that unions now:

    • consider matches from every sentinel key instead of dropping valid members after the first match;

... (truncated)

Commits
  • 3e4abbc Version Packages (beta) (#2577)
  • 0082f4f Fix JSON Schema tuple allOf intersections (#2605)
  • 72ac585 Add HttpApiError for status 422 (#2613)A
  • b24d248 Fix durable race result replay (#2612)
  • 8849052 Ensure PersistedQueue decoding failures are processing attempts (#2611)
  • c15e16a fix(PersistedQueue): Fix Redis-backed PersistedQueue script handling (#2500)
  • 87bea7e Handle large millis passed to sleep (#2583)
  • 2b7ce2b Fix SQL-backed persisted queues to refresh locks for actively acquired elemen...
  • 5b2a0bc ensure WithTransaction wraps entire rpc handler (#2607)
  • 6e08428 Fix Schema tuple post-rest indexing (#2604)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the npm-major group across 1 directory with 14 updates
6881075 
Bumps the npm-major group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pkg-pr-new](https://github.com/stackblitz-labs/pkg.pr.new/tree/HEAD/packages/cli) | `0.0.75` | `0.0.78` |
| [verdaccio](https://github.com/verdaccio/verdaccio) | `6.7.4` | `6.8.0` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.110.2` | `2.110.3` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.207` | `0.3.208` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `25.0.6` | `25.0.7` |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs) | `16.11.3` | `16.11.4` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `15.1.0` | `15.1.1` |
| [fumadocs-ui](https://github.com/fuma-nama/fumadocs) | `16.11.3` | `16.11.4` |
| [@effect/atom-react](https://github.com/Effect-TS/effect/tree/HEAD/packages/atom/react) | `4.0.0-beta.97` | `4.0.0-beta.98` |
| [@effect/platform-bun](https://github.com/Effect-TS/effect/tree/HEAD/packages/platform-bun) | `4.0.0-beta.97` | `4.0.0-beta.98` |
| [@effect/platform-node](https://github.com/Effect-TS/effect/tree/HEAD/packages/platform-node) | `4.0.0-beta.97` | `4.0.0-beta.98` |
| [@effect/sql-pg](https://github.com/Effect-TS/effect/tree/HEAD/packages/sql-pg) | `4.0.0-beta.97` | `4.0.0-beta.98` |
| [@effect/vitest](https://github.com/Effect-TS/effect/tree/HEAD/packages/vitest) | `4.0.0-beta.97` | `4.0.0-beta.98` |
| [effect](https://github.com/Effect-TS/effect/tree/HEAD/packages/effect) | `4.0.0-beta.97` | `4.0.0-beta.98` |



Updates `pkg-pr-new` from 0.0.75 to 0.0.78
- [Commits](https://github.com/stackblitz-labs/pkg.pr.new/commits/v0.0.78/packages/cli)

Updates `verdaccio` from 6.7.4 to 6.8.0
- [Release notes](https://github.com/verdaccio/verdaccio/releases)
- [Changelog](https://github.com/verdaccio/verdaccio/blob/v6.8.0/CHANGELOG.md)
- [Commits](verdaccio/verdaccio@v6.7.4...v6.8.0)

Updates `@supabase/supabase-js` from 2.110.2 to 2.110.3
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.110.3/packages/core/supabase-js)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.207 to 0.3.208
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.207...v0.3.208)

Updates `semantic-release` from 25.0.6 to 25.0.7
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v25.0.6...v25.0.7)

Updates `fumadocs-core` from 16.11.3 to 16.11.4
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.11.3...fumadocs@16.11.4)

Updates `fumadocs-mdx` from 15.1.0 to 15.1.1
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.1.0...fumadocs-mdx@15.1.1)

Updates `fumadocs-ui` from 16.11.3 to 16.11.4
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs@16.11.3...fumadocs@16.11.4)

Updates `@effect/atom-react` from 4.0.0-beta.97 to 4.0.0-beta.98
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/atom/react/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/atom-react@4.0.0-beta.98/packages/atom/react)

Updates `@effect/platform-bun` from 4.0.0-beta.97 to 4.0.0-beta.98
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/platform-bun/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/platform-bun@4.0.0-beta.98/packages/platform-bun)

Updates `@effect/platform-node` from 4.0.0-beta.97 to 4.0.0-beta.98
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/platform-node/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/platform-node@4.0.0-beta.98/packages/platform-node)

Updates `@effect/sql-pg` from 4.0.0-beta.97 to 4.0.0-beta.98
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/sql-pg@4.0.0-beta.98/packages/sql-pg)

Updates `@effect/vitest` from 4.0.0-beta.97 to 4.0.0-beta.98
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/vitest/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/@effect/vitest@4.0.0-beta.98/packages/vitest)

Updates `effect` from 4.0.0-beta.97 to 4.0.0-beta.98
- [Release notes](https://github.com/Effect-TS/effect/releases)
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/effect/CHANGELOG.md)
- [Commits](https://github.com/Effect-TS/effect/commits/effect@4.0.0-beta.98/packages/effect)

---
updated-dependencies:
- dependency-name: pkg-pr-new
  dependency-version: 0.0.78
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: verdaccio
  dependency-version: 6.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-major
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.110.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.208
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: semantic-release
  dependency-version: 25.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: fumadocs-core
  dependency-version: 16.11.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: fumadocs-mdx
  dependency-version: 15.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: fumadocs-ui
  dependency-version: 16.11.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@effect/atom-react"
  dependency-version: 4.0.0-beta.98
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@effect/platform-bun"
  dependency-version: 4.0.0-beta.98
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@effect/platform-node"
  dependency-version: 4.0.0-beta.98
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@effect/sql-pg"
  dependency-version: 4.0.0-beta.98
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: "@effect/vitest"
  dependency-version: 4.0.0-beta.98
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
- dependency-name: effect
  dependency-version: 4.0.0-beta.98
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
@github-actions

github-actions Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

Supabase CLI preview

npx --yes https://pkg.pr.new/supabase/cli/supabase@688107568529ead4299487d88c2f93679ffa21e4

Preview package for commit 6881075.

chatgpt-codex-connector[bot]
chatgpt-codex-connector Bot reviewed Jul 21, 2026
View reviewed changes

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6881075685

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread pnpm-lock.yaml
dependencies:
'@effect/platform-node-shared': 4.0.0-beta.97(effect@4.0.0-beta.97)
effect: 4.0.0-beta.97
'@effect/platform-node-shared': 4.0.0-beta.97(effect@4.0.0-beta.98)

@chatgpt-codex-connector chatgpt-codex-connector Bot Jul 21, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Bump platform-node-shared with the Effect packages

With the catalog now resolving @effect/platform-bun, @effect/platform-node, and effect to 4.0.0-beta.98, this lock entry still installs @effect/platform-node-shared at 4.0.0-beta.97 because the workspace override in pnpm-workspace.yaml:39 was left behind; the same stale resolution is repeated for @effect/platform-node at pnpm-lock.yaml:7330. The .98 platform packages depend on the shared platform package from the same Effect release, so Bun/Node platform code can end up running beta.98 adapters against beta.97 shared internals. Please update or remove the override so the lock resolves @effect/platform-node-shared to 4.0.0-beta.98 as well.

Useful? React with 👍 / 👎.

@dependabot @github

dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 21, 2026
auto-merge was automatically disabled July 21, 2026 15:22

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-major-d4cbe53ed6 branch July 21, 2026 15:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chatgpt-codex-connector chatgpt-codex-connector[bot] chatgpt-codex-connector[bot] left review comments
@supabase-cli-releaser supabase-cli-releaser[bot] supabase-cli-releaser[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants