Skip to content

chore(deps): Bump the production-dependencies group across 1 directory with 10 updates - #123

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-020e92cffb
Open

chore(deps): Bump the production-dependencies group across 1 directory with 10 updates#123
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-020e92cffb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 10 updates in the / directory:

Package From To
@lucide/svelte 1.51.0 1.57.0
@prisma/adapter-pg 7.10.0 7.10.1
@vercel/blob 2.8.0 2.8.2
@vercel/functions 3.9.11 3.10.1
dotenv 18.0.6 18.0.8
marked 18.0.14 18.1.1
nanoid 6.0.1 6.0.2
nodemailer 10.0.16 10.1.1
openai 7.27.0 7.34.0
swagger-ui-dist 5.33.1 5.33.3

Updates @lucide/svelte from 1.51.0 to 1.57.0

Release notes

Sourced from @​lucide/svelte's releases.

Version 1.57.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.56.0...1.57.0

Version 1.56.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.55.0...1.56.0

Version 1.55.0

What's Changed

... (truncated)

Commits

Updates @prisma/adapter-pg from 7.10.0 to 7.10.1

Commits

Updates @vercel/blob from 2.8.0 to 2.8.2

Release notes

Sourced from @​vercel/blob's releases.

@​vercel/blob@​2.8.2

Patch Changes

  • f11f653: Send blob API version 13, where the server reads keys containing . or .. path segments exactly as they were written instead of resolving them away. Fixes head, copy, rename, del and list on blobs whose pathname has a dot segment.

@​vercel/blob@​2.8.1

Patch Changes

  • 59be092: Allow get() to fetch blob URLs from a VERCEL_BLOB_API_URL origin. get() only accepted URLs on *.blob.vercel-storage.com, which blocked local emulators like emulate, since they serve blob content from their own host. When VERCEL_BLOB_API_URL (or NEXT_PUBLIC_VERCEL_BLOB_API_URL) is set, URLs on that same origin are now accepted as well. With no override set the behavior is unchanged, so arbitrary hosts are still rejected in production.
Changelog

Sourced from @​vercel/blob's changelog.

2.8.2

Patch Changes

  • f11f653: Send blob API version 13, where the server reads keys containing . or .. path segments exactly as they were written instead of resolving them away. Fixes head, copy, rename, del and list on blobs whose pathname has a dot segment.

2.8.1

Patch Changes

  • 59be092: Allow get() to fetch blob URLs from a VERCEL_BLOB_API_URL origin. get() only accepted URLs on *.blob.vercel-storage.com, which blocked local emulators like emulate, since they serve blob content from their own host. When VERCEL_BLOB_API_URL (or NEXT_PUBLIC_VERCEL_BLOB_API_URL) is set, URLs on that same origin are now accepted as well. With no override set the behavior is unchanged, so arbitrary hosts are still rejected in production.
Commits

Updates @vercel/functions from 3.9.11 to 3.10.1

Commits

Updates dotenv from 18.0.6 to 18.0.8

Changelog

Sourced from dotenv's changelog.

18.0.8 (2026-10-14)

Changed

  • Fast parser should strip appended extra quotes (#1073)
  • Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

  • Treat undefined settings like quiet: true as null rather than falsey (#1070)
  • CLI should honor DOTENV_QUIET setting in .env file (#1071)
Commits
  • e2fe95e 18.0.8
  • 7aa712a type detail improvement
  • 53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
  • 0b4843a changelog
  • 55855ab Merge pull request #1073 from xiehuanyi/fix/unicode-unquoting-parity
  • f757811 fix(types): allow undefined values in populate output
  • fde5db2 Keep fast-parser unquoting consistent at Unicode line boundaries
  • 2953207 18.0.7
  • 9944723 make more readable for undefined -> null
  • d455db0 Merge branch 'master' of github.com:motdotla/dotenv
  • Additional commits viewable in compare view

Updates marked from 18.0.14 to 18.1.1

Release notes

Sourced from marked's releases.

v18.1.1

18.1.1 (2026-10-12)

Bug Fixes

  • cli: honor an explicitly empty string input (#4113) (ec3a4e5)
  • end blockquote before a lazy line after a heading, hr or html block (#4115) (9e64a6a)
  • keep a backslash in a code span from hiding emphasis (#4117) (6a57018)
  • keep a decoded character reference from forming a new one (#4111) (6bbac0c), closes #38 #112
  • let indented and type 3-5 html blocks interrupt a paragraph (#4124) (eaa1fff)
  • make walkTokens linear by appending values in place (#4121) (627d9ae), closes #4120
  • match pre, script, style and textarea as whole tag names (#4114) (0db74cb)
  • preserve enclosing link state after parsing images (#4123) (cc07bb9)
  • respect tab stops in list continuation indentation (#4119) (4bd2528)

Performance Improvements

  • avoid repeated raw string copies in nested lists (#4082) (7e8754d)

v18.1.0

18.1.0 (2026-10-05)

Bug Fixes

  • avoid cubic backtracking on unicode whitespace in a link destination (#4106) (0d20220)
  • load CLI configs with top-level await (#4100) (c61543e)
  • reject unbalanced parentheses in link destinations (#4107) (3363c99)

Features

  • add linkParenPossible to lexer state to fail fast for link token generation (#4070) (4ee44f7)
Commits
  • cdbdc01 chore(release): 18.1.1 [skip ci]
  • 2134976 docs: add AGENTS.md (#4125)
  • 699a969 chore(deps-dev): bump handlebars from 4.7.9 to 4.7.10 (#4133)
  • 6a57018 fix: keep a backslash in a code span from hiding emphasis (#4117)
  • eaa1fff fix: let indented and type 3-5 html blocks interrupt a paragraph (#4124)
  • 7e8754d perf: avoid repeated raw string copies in nested lists (#4082)
  • cc07bb9 fix: preserve enclosing link state after parsing images (#4123)
  • 627d9ae fix: make walkTokens linear by appending values in place (#4121)
  • 4bd2528 fix: respect tab stops in list continuation indentation (#4119)
  • 9e64a6a fix: end blockquote before a lazy line after a heading, hr or html block (#4115)
  • Additional commits viewable in compare view

Updates nanoid from 6.0.1 to 6.0.2

Release notes

Sourced from nanoid's releases.

6.0.2

Changelog

Sourced from nanoid's changelog.

6.0.2

Commits

Updates nodemailer from 10.0.16 to 10.1.1

Release notes

Sourced from nodemailer's releases.

v10.1.1

10.1.1 (2026-10-14)

Bug Fixes

  • fetch: strip credentials on any cross-origin redirect (a15360c)

v10.1.0

10.1.0 (2026-10-10)

Behaviour changes

  • Pooled connections are closed after 4 minutes without a message (new idleTimeout pool option, set it to 0 to keep them open). A message whose recipients are rejected no longer closes the pooled connection, it is reset with RSET and reused, and a message is requeued when the server dropped a reused connection before any of it was sent.
  • connectionTimeout covers setting the session up as a whole: the DNS lookup, a proxy handshake, the TCP connection, TLS, the greeting and a STARTTLS upgrade. greetingTimeout still bounds the greeting and the STARTTLS handshake within it.
  • Any 421 reply ends the SMTP session. When the server closes an idle connection, SMTPConnection emits only end, not an ECONNECTION error.
  • A content stream that was already read or destroyed fails the message with ESTREAM instead of producing an empty attachment. Content streams of a message that fails are destroyed.
  • With opportunisticTLS, authentication is skipped on the unencrypted connection after a failed STARTTLS, unless forceAuth is set.
  • The envelope is pipelined (MAIL FROM, RCPT TO and DATA in one batch) when the server announces PIPELINING.
  • Errors carry originalCode (the system error code Nodemailer replaced, such as ECONNREFUSED) and, for ETIMEDOUT, timeoutType.

Features

  • harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

  • do not read the environment or the interface table on import (094179d)
  • end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
  • keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
  • let the proxy handshake and the SMTP connection share one deadline (91ed683)
  • mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
  • mime-node: finish an encoded part only after its output was read (ec97d8f)
  • qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
  • smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
  • smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
  • smtp-connection: refuse a second connect() call (24ba2e0)
  • turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

  • encode base64 and quoted-printable without per-chunk delays (fd377bb)
Changelog

Sourced from nodemailer's changelog.

10.1.1 (2026-10-14)

Bug Fixes

  • fetch: strip credentials on any cross-origin redirect (a15360c)

10.1.0 (2026-10-10)

Features

  • harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

  • do not read the environment or the interface table on import (094179d)
  • end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
  • keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
  • let the proxy handshake and the SMTP connection share one deadline (91ed683)
  • mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
  • mime-node: finish an encoded part only after its output was read (ec97d8f)
  • qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
  • smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
  • smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
  • smtp-connection: refuse a second connect() call (24ba2e0)
  • turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

  • encode base64 and quoted-printable without per-chunk delays (fd377bb)
Commits
  • 9396cca chore(master): release 10.1.1 (#1893)
  • 65d7498 chore(deps): bump dev dependencies
  • 647ee44 test(smtp-connection): pin connectionTimeout across all resolved addresses
  • a15360c fix(fetch): strip credentials on any cross-origin redirect
  • c8671c4 Updated SECURITY.md formatting
  • be6fe72 testing VUlnerability firm
  • 7bdaa77 chore: Updated Security Policy
  • 0780032 chore(master): release 10.1.0 (#1890)
  • 42b91d9 fix(qp): encode a lone CR or LF in binary quoted-printable parts
  • b9b8c84 test(smtp-pool): fail the clear event test with the pool state instead of han...
  • Additional commits viewable in compare view

Updates openai from 7.27.0 to 7.34.0

Release notes

Sourced from openai's releases.

v7.34.0

7.34.0 (2026-10-14)

Features

  • api: add regional processing residency options (#2942) (0f53768)

Bug Fixes

  • deps-dev: bump @​cloudflare/workers-types from 5.20260927.1 to 5.20261005.1 in /ecosystem-tests/cloudflare-worker (#2928) (d8b450e)
  • deps-dev: bump @​types/node from 26.4.1 to 26.6.4 (#2923) (55bfde2)
  • deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts-cjs (#2931) (6f2c0ab)
  • deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts-cjs-auto (#2932) (66c3d52)
  • deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts4.5-jest28 (#2933) (1abf914)
  • deps-dev: bump oxfmt from 0.70.0 to 0.72.0 (#2924) (ca86f0a)
  • deps-dev: bump oxlint from 1.82.0 to 1.87.0 (#2927) (76563b3)
  • deps-dev: bump vitest from 5.0.1 to 5.0.3 (#2925) (475db88)
  • deps-dev: bump wrangler from 4.142.0 to 4.147.0 in /ecosystem-tests/cloudflare-worker (#2929) (6886675)
  • deps: bump undici from 7.29.1 to 7.30.0 in /ecosystem-tests/node-ts-cjs (#2930) (233e488)
  • deps: bump undici from 8.10.2 to 8.11.2 (#2926) (4c4aa8b)

Chores

  • api: clarify Decisions request and response fields (#2940) (9f07cfc)

v7.33.0

7.33.0 (2026-10-14)

Features

  • add browser and computer toolsets (1/4) (#2936) (3811840)
  • api: add beta session spending limits (#2916) (f57c965)
  • api: add billing_not_active session error code (#2911) (ee3f743)
  • api: add OCI external-storage provider support (#2917) (80e210e)
  • api: add organization Decisions usage reporting (#2919) (3f8753e)
  • api: add shida to named Live voices (#2912) (d6d80a1)
  • api: add vault updates and metadata filters (#2906) (1bbc425)
  • api: align beta pagination limits and non-null parameters (#2915) (4ae463a)
  • api: expose image tool error and moderation details (#2935) (0bf85e0)
  • api: support image URLs and detailed safety alert explanations (#2918) (8297332)
  • api: support updating project API key expiry (#2922) (467a082)

Chores

  • api: clarify agent tool limits and environment pagination (#2920) (05b8763)

... (truncated)

Changelog

Sourced from openai's changelog.

7.34.0 (2026-10-14)

Features

  • api: add regional processing residency options (#2942) (0f53768)

Bug Fixes

  • deps-dev: bump @​cloudflare/workers-types from 5.20260927.1 to 5.20261005.1 in /ecosystem-tests/cloudflare-worker (#2928) (d8b450e)
  • deps-dev: bump @​types/node from 26.4.1 to 26.6.4 (#2923) (55bfde2)
  • deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts-cjs (#2931) (6f2c0ab)
  • deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts-cjs-auto (#2932) (66c3d52)
  • deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts4.5-jest28 (#2933) (1abf914)
  • deps-dev: bump oxfmt from 0.70.0 to 0.72.0 (#2924) (ca86f0a)
  • deps-dev: bump oxlint from 1.82.0 to 1.87.0 (#2927) (76563b3)
  • deps-dev: bump vitest from 5.0.1 to 5.0.3 (#2925) (475db88)
  • deps-dev: bump wrangler from 4.142.0 to 4.147.0 in /ecosystem-tests/cloudflare-worker (#2929) (6886675)
  • deps: bump undici from 7.29.1 to 7.30.0 in /ecosystem-tests/node-ts-cjs (#2930) (233e488)
  • deps: bump undici from 8.10.2 to 8.11.2 (#2926) (4c4aa8b)

Chores

  • api: clarify Decisions request and response fields (#2940) (9f07cfc)

7.33.0 (2026-10-14)

Features

  • add browser and computer toolsets (1/4) (#2936) (3811840)
  • api: add beta session spending limits (#2916) (f57c965)
  • api: add billing_not_active session error code (#2911) (ee3f743)
  • api: add OCI external-storage provider support (#2917) (80e210e)
  • api: add organization Decisions usage reporting (#2919) (3f8753e)
  • api: add shida to named Live voices (#2912) (d6d80a1)
  • api: add vault updates and metadata filters (#2906) (1bbc425)
  • api: align beta pagination limits and non-null parameters (#2915) (4ae463a)
  • api: expose image tool error and moderation details (#2935) (0bf85e0)
  • api: support image URLs and detailed safety alert explanations (#2918) (8297332)
  • api: support updating project API key expiry (#2922) (467a082)

Chores

  • api: clarify agent tool limits and environment pagination (#2920) (05b8763)
  • api: clarify decision creation documentation (#2913) (1c380ea)
  • api: clarify Decisions question and answer descriptions (#2910) (b5c7300)

... (truncated)

Commits
  • 85e528a release: 7.34.0 (#2941)
  • 0f53768 feat(api): add regional processing residency options (#2942)
  • 76563b3 fix(deps-dev): bump oxlint from 1.82.0 to 1.87.0 (#2927)
  • 4c4aa8b fix(deps): bump undici from 8.10.2 to 8.11.2 (#2926)
  • 55bfde2 fix(deps-dev): bump @​types/node from 26.4.1 to 26.6.4 (#2923)
  • d8b450e fix(deps-dev): bump @​cloudflare/workers-types from 5.20260927.1 to 5.20261005...
  • ca86f0a fix(deps-dev): bump oxfmt from 0.70.0 to 0.72.0 (#2924)
  • 6886675 fix(deps-dev): bump wrangler from 4.142.0 to 4.147.0 in /ecosystem-tests/clou...
  • 66c3d52 fix(deps-dev): bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-...
  • 233e488 fix(deps): bump undici from 7.29.1 to 7.30.0 in /ecosystem-tests/node-ts-cjs ...
  • Additional commits viewable in compare view

Updates swagger-ui-dist from 5.33.1 to 5.33.3

Release notes

Sourced from swagger-ui-dist's releases.

v5.33.3

5.33.3 (2026-10-15)

Bug Fixes

v5.33.2

5.33.2 (2026-10-12)

Bug Fixes

  • deps: bump dompurify from 3.4.13 to 3.4.16 (#11076) (3beee55)
  • json-schema-5: move early return after useCallback in models (#11082) (7f26236)
Commits
  • 38ca10e chore(release): cut the 5.33.3 release
  • f170383 fix(deps): bump swagger-client to v3.38.3 (#11096)
  • e89a91f chore(release): cut the 5.33.2 release
  • 7f26236 fix(json-schema-5): move early return after useCallback in models (#11082)
  • cfd955e chore(deps): bump postcss-selector-parser from 7.1.5 to 7.1.6 (#11083)
  • 553cf09 chore(deps-dev): bump joi from 17.13.7 to 17.13.8 (#11087)
  • d19e961 chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#11085)
  • 5672801 chore(deps): bump proxy-addr from 2.0.7 to 2.0.8 (#11086)
  • 2addfaf chore(deps): bump shell-quote from 1.10.0 to 1.12.0 (#11084)
  • 121c488 chore(deps): bump aquasecurity/trivy-action (#11079)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the production-dependencies group across 1 director…
d8cb474 
…y with 10 updates

Bumps the production-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@lucide/svelte](https://github.com/lucide-icons/lucide/tree/HEAD/packages/svelte) | `1.51.0` | `1.57.0` |
| [@prisma/adapter-pg](https://github.com/prisma/orm/tree/HEAD/packages/adapter-pg) | `7.10.0` | `7.10.1` |
| [@vercel/blob](https://github.com/vercel/storage/tree/HEAD/packages/blob) | `2.8.0` | `2.8.2` |
| [@vercel/functions](https://github.com/vercel/vercel/tree/HEAD/packages/functions) | `3.9.11` | `3.10.1` |
| [dotenv](https://github.com/motdotla/dotenv) | `18.0.6` | `18.0.8` |
| [marked](https://github.com/markedjs/marked) | `18.0.14` | `18.1.1` |
| [nanoid](https://github.com/ai/nanoid) | `6.0.1` | `6.0.2` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.16` | `10.1.1` |
| [openai](https://github.com/openai/openai-node) | `7.27.0` | `7.34.0` |
| [swagger-ui-dist](https://github.com/swagger-api/swagger-ui) | `5.33.1` | `5.33.3` |



Updates `@lucide/svelte` from 1.51.0 to 1.57.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.57.0/packages/svelte)

Updates `@prisma/adapter-pg` from 7.10.0 to 7.10.1
- [Release notes](https://github.com/prisma/orm/releases)
- [Commits](https://github.com/prisma/orm/commits/7.10.1/packages/adapter-pg)

Updates `@vercel/blob` from 2.8.0 to 2.8.2
- [Release notes](https://github.com/vercel/storage/releases)
- [Changelog](https://github.com/vercel/storage/blob/main/packages/blob/CHANGELOG.md)
- [Commits](https://github.com/vercel/storage/commits/@vercel/blob@2.8.2/packages/blob)

Updates `@vercel/functions` from 3.9.11 to 3.10.1
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/functions/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/go@3.10.1/packages/functions)

Updates `dotenv` from 18.0.6 to 18.0.8
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.6...v18.0.8)

Updates `marked` from 18.0.14 to 18.1.1
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.14...v18.1.1)

Updates `nanoid` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@6.0.1...6.0.2)

Updates `nodemailer` from 10.0.16 to 10.1.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.16...v10.1.1)

Updates `openai` from 7.27.0 to 7.34.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.27.0...v7.34.0)

Updates `swagger-ui-dist` from 5.33.1 to 5.33.3
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.33.1...v5.33.3)

---
updated-dependencies:
- dependency-name: "@lucide/svelte"
  dependency-version: 1.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@prisma/adapter-pg"
  dependency-version: 7.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@vercel/blob"
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@vercel/functions"
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 18.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: marked
  dependency-version: 18.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: nanoid
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: nodemailer
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: openai
  dependency-version: 7.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: swagger-ui-dist
  dependency-version: 5.33.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Oct 18, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
qa-studio Ready Ready Preview Oct 18, 2026 7:51pm UTC

Request Review

@dependabot @github

dependabot Bot commented on behalf of github Oct 18, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@coderabbitai

coderabbitai Bot commented Oct 18, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: QAStudio-Dev/studio/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: c6acb4be-0753-4ff4-b869-c815f3016075

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

This branch was successfully deployed

1 active deployment
Preview — d8cb474d Deployed Oct 18, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants