fix(deps): bump the npm-major group across 1 directory with 12 updates

[dependabot]

Bumps the npm-major group with 12 updates in the / directory:

Package	From	To
verdaccio	6.9.3	6.10.0
@anthropic-ai/claude-agent-sdk	0.3.234	0.3.238
@anthropic-ai/sdk	0.117.1	0.120.0
posthog-node	5.49.1	5.49.2
fumadocs-core	16.14.4	16.14.5
fumadocs-mdx	15.2.3	15.3.0
fumadocs-ui	16.14.4	16.14.5
@vitest/coverage-istanbul	4.1.10	4.1.11
oxfmt	0.63.0	0.64.0
oxlint	1.78.0	1.79.0
tldts	6.1.86	7.4.10
vitest	4.1.10	4.1.11

Updates verdaccio from 6.9.3 to 6.10.0

Release notes

Sourced from verdaccio's releases.

v6.10.0

Minor Changes

• 51c2733: Expose the optional legacy authentication cache for Verdaccio 6.x through server.legacyAuthCache.

  This feature is intended for performance-sensitive installations that still use legacy bearer tokens. When enabled, Verdaccio caches successful legacy token authentication results for a short period of time, so repeated requests using the same token do not need to run password verification through the authentication plugin every time. Concurrent requests for the same legacy token can also share the same in-flight authentication result.

  The cache is disabled by default, so existing installations keep their current authentication behavior unless they explicitly opt in. Basic authentication is not cached. If the cache is enabled, changed or revoked credentials may remain valid until the cached entry expires.

  Enable it in config.yaml:

  server:
    legacyAuthCache:
      enabled: true
      ttlMs: 15000
      maxEntries: 1000

  Options:

  • enabled: enables the legacy token authentication cache. Default: false.
  • ttlMs: time in milliseconds before a cached validation expires. Default: 15000.
  • maxEntries: maximum number of cached legacy tokens. Default: 1000.

  See #6147 and the original 8.x backport in #6143.

Changelog

Sourced from verdaccio's changelog.

6.10.0

Minor Changes

• 51c2733: Update internal Verdaccio types to include the optional server.legacyAuthCache configuration used by the 8.x auth and config packages.

Commits

• dfe2439 chore: release 6.x (#6148)
• 51c2733 feat: expose legacy auth cache config (#6147)
• See full diff in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.234 to 0.3.238

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.238

What's changed

• Added is_backgrounded and spawn_depth to task_started events for subagent tasks (is_backgrounded also on background Bash tasks)
• Added suppressOriginalPrompt to UserPromptExpansion hook output, matching UserPromptSubmit
• Added command_lifecycle state refused: a cross-session peer message the session's receive-side policy declines now reports this terminal state instead of producing no lifecycle frames
• Fixed SDK hook callbacks silently not applying after a host re-sends initialize to an already-running CLI; the response now reports hooks_applied
• Fixed CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION=true not keeping prompt_suggestion messages on when the account is near, but not over, its usage limit
• Changed vcs_state_changed push events to emit one event per pushed branch

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.238
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.238
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.238
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.238

v0.3.237

What's changed

• Updated to parity with Claude Code v2.1.237

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.237
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.237
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.237
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.237

v0.3.236

What's changed

• PostToolUse hooks can return hookSpecificOutput.classifierContext, a short host-asserted note about a tool call's result that the auto mode permission classifier reads alongside that result

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.236
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.236
</tr></table> 

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.238

• Added is_backgrounded and spawn_depth to task_started events for subagent tasks (is_backgrounded also on background Bash tasks)
• Added suppressOriginalPrompt to UserPromptExpansion hook output, matching UserPromptSubmit
• Added command_lifecycle state refused: a cross-session peer message the session's receive-side policy declines now reports this terminal state instead of producing no lifecycle frames
• Fixed SDK hook callbacks silently not applying after a host re-sends initialize to an already-running CLI; the response now reports hooks_applied
• Fixed CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION=true not keeping prompt_suggestion messages on when the account is near, but not over, its usage limit
• Changed vcs_state_changed push events to emit one event per pushed branch

0.3.237

• Updated to parity with Claude Code v2.1.237

0.3.236

• PostToolUse hooks can return hookSpecificOutput.classifierContext, a short host-asserted note about a tool call's result that the auto mode permission classifier reads alongside that result

0.3.235

• Updated to parity with Claude Code v2.1.235

Commits

• c4fdbe3 chore: Update CHANGELOG.md
• 591a180 chore: Update CHANGELOG.md
• d933c99 chore: Update CHANGELOG.md
• 076593f chore: Update CHANGELOG.md
• See full diff in compare view

Updates @anthropic-ai/sdk from 0.117.1 to 0.120.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.120.0

0.120.0 (2026-08-19)

Full Changelog: sdk-v0.119.0...sdk-v0.120.0

Features

• api: managed agents web search config and self hosted sandbox memory (ba8ec50)

Chores

• internal: use a single pnpm workspace lockfile (#359) (3c32145)

sdk: v0.119.0

0.119.0 (2026-08-19)

Full Changelog: sdk-v0.118.0...sdk-v0.119.0

Features

• api: Files and Skills APIs are now GA; add computer use and browser use toolsets (ab41aa3)

sdk: v0.118.0

0.118.0 (2026-08-18)

Full Changelog: sdk-v0.117.1...sdk-v0.118.0

Features

• api: additions to files and memory stores (fdc0379)
• api: updates to skill, files, and user profiles (671e6b1)
• client: add helpers for accessing the workspace ID in response headers (28aa5af)

Bug Fixes

• api: remove unsupported mid_conv_system content block (ae6ca94)
• session-runner: retry tool-result sends for at least the lease TTL (#339) (7dc6325)

Chores

• internal: bump zod to 4.4.3 (#334) (faa5b7b)
• internal: remove leftover prism references (a163b96)
• stop shipping the v0.50 migration guide and migrate CLI (53992d7)

Documentation

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.120.0 (2026-08-19)

Full Changelog: sdk-v0.119.0...sdk-v0.120.0

Features

• api: managed agents web search config and self hosted sandbox memory (ba8ec50)

Chores

• internal: use a single pnpm workspace lockfile (#359) (3c32145)

0.119.0 (2026-08-19)

Full Changelog: sdk-v0.118.0...sdk-v0.119.0

Features

• api: Files and Skills APIs are now GA; add computer use and browser use toolsets (ab41aa3)

0.118.0 (2026-08-18)

Full Changelog: sdk-v0.117.1...sdk-v0.118.0

Features

• api: additions to files and memory stores (fdc0379)
• api: updates to skill, files, and user profiles (671e6b1)
• client: add helpers for accessing the workspace ID in response headers (28aa5af)

Bug Fixes

• api: remove unsupported mid_conv_system content block (ae6ca94)
• session-runner: retry tool-result sends for at least the lease TTL (#339) (7dc6325)

Chores

• internal: bump zod to 4.4.3 (#334) (faa5b7b)
• internal: remove leftover prism references (a163b96)
• stop shipping the v0.50 migration guide and migrate CLI (53992d7)

Documentation

• tools: warn that blocking tool bodies stall the worker heartbeat (#299) (908fdb5)

Commits

• bfa9197 chore: release main
• bc167f3 feat(api): managed agents web search config and self hosted sandbox memory
• 83fd898 chore(internal): use a single pnpm workspace lockfile (#359)
• 7fe6dd5 remove internal ticket references from changelog- #360
• c67e4e2 chore: release main
• 50fc0db feat(api): Files and Skills APIs are now GA; add computer use and browser use...
• 18ea26d chore: release main
• 6ed9ddd feat(api): updates to skill, files, and user profiles
• 91921f5 fix(session-runner): retry tool-result sends for at least the lease TTL (#339)
• 142adcc docs(tools): warn that blocking tool bodies stall the worker heartbeat (#299)
• Additional commits viewable in compare view

Updates posthog-node from 5.49.1 to 5.49.2

Release notes

Sourced from posthog-node's releases.

posthog-node@5.49.2

5.49.2

Patch Changes

• #4578 bae46bf Thanks @​marandaneto! - Drop events when a before-send hook throws instead of sending the unmodified event. (2026-08-20)
• Updated dependencies [bae46bf, aef2f49]:
  • @​posthog/core@​1.48.6

Changelog

Sourced from posthog-node's changelog.

5.49.2

Patch Changes

• #4578 bae46bf Thanks @​marandaneto! - Drop events when a before-send hook throws instead of sending the unmodified event. (2026-08-20)
• Updated dependencies [bae46bf, aef2f49]:
  • @​posthog/core@​1.48.6

Commits

• 960cef8 chore: update versions and lockfile [version bump]
• bae46bf fix: drop events when beforeSend hooks throw (#4578)
• 9e7a421 test(node): add server SDK wire snapshots (#4544)
• See full diff in compare view

Updates fumadocs-core from 16.14.4 to 16.14.5

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.14.5

• @​fumadocs/base-ui@​16.14.5
• fumadocs-core@16.14.5
• fumadocs-ui@16.14.5

Add a main landmark to docs, notebook and flux pages

The page container slot now wraps <article id="nd-page"> in a <main class="contents"> in the docs, notebook and flux layouts. All props, id="nd-page" and the layout classes stay on the <article>, so existing selectors and refs keep working.

Loader: next parameter for custom slugs function

The slugs option now receives a next function as its second argument, which generates the default slugs from the file path. This lets custom slug functions build on the default generation instead of reimplementing it:

loader({
  slugs(file, next) {
    if (file.path.startsWith('blog/')) return ['blog', ...next()];
    // return `undefined` to generate default slugs
  },
});

Behavior change: conflicting cases like dir/index.mdx vs dir.mdx are now resolved for custom slugs functions as well. Index files are always processed after other pages, and receive an index suffix when their slugs (custom or default) collide with an existing page — previously, custom slugs functions that produced such collisions threw a Duplicated slugs error.

Commits

• 3043da2 Version Packages (#3486)
• 671bd83 feat(core): support baseSlugs option
• 2899bc1 fix(ui): add a main landmark to docs, notebook and flux pages (#3483)
• 14f9eaf feat(core): support next param for custom slugs function
• ddccb91 docs: improve local-html section
• 43f4006 Version Packages (#3478)
• d1c99ad chore(local-html): improve DX
• 7fd880d example: add for html content source
• 4d8ac85 feat: add @​fumadocs/local-html content source (#3477)
• 78b6641 Version Packages (#3473)
• Additional commits viewable in compare view

Updates fumadocs-mdx from 15.2.3 to 15.3.0

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.3.0

Sätteri 0.10

@fumadocs/satteri now requires satteri ^0.10.3, and the plugins were rewritten on its new capabilities:

• Exports (frontmatter, toc, structuredData, …) are emitted by an after document hook instead of an anchor marker appended to the source, so plugins no longer see (or need to skip) the anchor node.
• remark-steps, remark-admonition and remark-code-tab still detect their targets through node visitors (so documents without the construct cost nothing), but process each parent exactly once in an after hook, replacing the per-visit dedup workarounds.
• remark-llms stringifies the document root from a before hook instead of subscribing to 19 node types to find it.
• Markdown documents compile through Sätteri's own markdownToJs; the hand-assembled pipeline is gone. Raw HTML in .md files is still dropped, matching the previous behavior.
• rehype-katex parses KaTeX output with Sätteri's htmlToHast, dropping the hast-util-from-html dependency.
• No plugin reads node.position, so Sätteri now skips source-position tracking entirely (~15% faster parse).

Breaking: ExtraPluginHooks.beforeToJs was removed. Seed ctx.data from a Sätteri before hook on the plugin definition instead — it also receives the document root:

import { defineMdastPlugin } from 'satteri';
defineMdastPlugin({
name: 'my-plugin',
before(root, ctx) {
ctx.data.myValue ??= [];
},
});

Commits

• 3cfb127 Merge pull request #3488 from fuma-nama/tegami/version-packages
• e46a700 feat(mdx,satteri): use satteri 0.10
• 3043da2 Version Packages (#3486)
• 671bd83 feat(core): support baseSlugs option
• 2899bc1 fix(ui): add a main landmark to docs, notebook and flux pages (#3483)
• 14f9eaf feat(core): support next param for custom slugs function
• ddccb91 docs: improve local-html section
• 43f4006 Version Packages (#3478)
• d1c99ad chore(local-html): improve DX
• 7fd880d example: add for html content source
• Additional commits viewable in compare view

Updates fumadocs-ui from 16.14.4 to 16.14.5

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.14.5

• @​fumadocs/base-ui@​16.14.5
• fumadocs-core@16.14.5
• fumadocs-ui@16.14.5

Add a main landmark to docs, notebook and flux pages

The page container slot now wraps <article id="nd-page"> in a <main class="contents"> in the docs, notebook and flux layouts. All props, id="nd-page" and the layout classes stay on the <article>, so existing selectors and refs keep working.

Loader: next parameter for custom slugs function

The slugs option now receives a next function as its second argument, which generates the default slugs from the file path. This lets custom slug functions build on the default generation instead of reimplementing it:

loader({
  slugs(file, next) {
    if (file.path.startsWith('blog/')) return ['blog', ...next()];
    // return `undefined` to generate default slugs
  },
});

Behavior change: conflicting cases like dir/index.mdx vs dir.mdx are now resolved for custom slugs functions as well. Index files are always processed after other pages, and receive an index suffix when their slugs (custom or default) collide with an existing page — previously, custom slugs functions that produced such collisions threw a Duplicated slugs error.

Commits

• 3043da2 Version Packages (#3486)
• 671bd83 feat(core): support baseSlugs option
• 2899bc1 fix(ui): add a main landmark to docs, notebook and flux pages (#3483)
• 14f9eaf feat(core): support next param for custom slugs function
• ddccb91 docs: improve local-html section
• 43f4006 Version Packages (#3478)
• d1c99ad chore(local-html): improve DX
• 7fd880d example: add for html content source
• 4d8ac85 feat: add @​fumadocs/local-html content source (#3477)
• 78b6641 Version Packages (#3473)
• Additional commits viewable in compare view

Updates @vitest/coverage-istanbul from 4.1.10 to 4.1.11

Release notes

Sourced from @​vitest/coverage-istanbul's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• See full diff in compare view

Updates oxfmt from 0.63.0 to 0.64.0

Changelog

Sourced from oxfmt's changelog.

[0.64.0] - 2026-08-18

🚀 Features

• c07fe7c oxfmt: Support experimentalOperatorPosition (#25643) (leaysgur)

📚 Documentation

• fed6681 oxfmt: Skip expanding overrides options (#25572) (leaysgur)

[0.62.0] - 2026-08-03

🐛 Bug Fixes

• e6e584b oxfmt: Type jsdoc. enum options (#25008) (leaysgur)

[0.59.0] - 2026-07-13

🐛 Bug Fixes

• 415fe1e oxfmt: Error on ignorePatterns that cannot match files outside the config directory (#24286) (leaysgur)

[0.55.0] - 2026-06-15

🚀 Features

• 9a2788b linter/unicorn: Implement prefer-export-from rule (#22935) (AliceLanniste)

[0.54.0] - 2026-06-08

📚 Documentation

• dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (#22965) (Boshen)
• f88961a oxfmt: Annotate each config option with supported languages (#22953) (leaysgur)

[0.52.0] - 2026-05-26

🚀 Features

• 16b8058 oxfmt: Support vite-plus/resolveConfig for vite.config.ts (#22454) (leaysgur)

[0.50.0] - 2026-05-15

🐛 Bug Fixes

• 43b9978 formatter/sort_imports: Treat subpath imports as internal (#22440) (leaysgur)

[0.49.0] - 2026-05-11

🚀 Features

... (truncated)

Commits

• 0db127c release(apps): oxlint v1.79.0 && oxfmt v0.64.0 (#25866)
• c07fe7c feat(oxfmt): support experimentalOperatorPosition (#25643)
• fed6681 docs(oxfmt): skip expanding overrides options (#25572)
• See full diff in compare view

Updates oxlint from 1.78.0 to 1.79.0

Release notes

Sourced from oxlint's releases.

oxlint v1.79.0 & oxfmt v0.64.0

Table of Contents

• Oxlint v1.79.0
• Oxfmt v0.64.0

Oxlint v1.79.0

💥 BREAKING CHANGES

• 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

See React Compiler Support for details.

🚀 Features

• 9b7394e linter/typescript/no-empty-object-type: Implement suggestion (#25833) (Mikhail Baev)

🐛 Bug Fixes

• 345f981 react_compiler: Skip node_modules by default (#25859) (Boshen)
• 2f40afa linter/unicorn/no-array-callback-reference: Ignore effect library imports (#25857) (Michaël Bitard)
• 7b565a0 linter: Align React Compiler rule categories (#25840) (Boshen)
• 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
• f8e4884 linter/eslint/no-useless-constructor: Allow parameter properties (#25811) (camc314)
• e4b6993 linter: Report exhaustive effect dependencies (#25829) (Boshen)
• 742e25f linter/eslint/no-return-assign: Anchor diagnostic on return stmt (#25803) (camc314)
• b831ca8 react-compiler: Improve derived state diagnostic (#25804) (Boshen)
• 5908c87 linter/jest/prefer-mock-return-shorthand: Preserve implementations using this (#25802) (camc314)
• f6b2265 linter/eslint/no-redeclare: Run in ES modules, skipping only the globals check (#25691) (Hamody We)
• ca9f553 linter/unicorn/prefer-default-parameters: Mark fixer as a suggestion (#25801) (camc314)
• aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
• d5483f8 linter/typescript/no-useless-empty-export: Skip TS declaration files (#25789) (Evyatar Daud)
• 57f2199 linter/typescript/no-useless-empty-export: Report after imports (#25786) (camc314)
• 633bc19 linter/typescript/no-unnecessary-type-conversion: Mark fixer as suggestion (#25787) (camc314)
• dea3339 linter/typescript/explicit-module-boundary-types: Anchor diagnostics on arrows (#25779) (camc314)
• 5cd6f02 linter/eslint/array-callback-return: Anchor diagnostic on callback (#25780) (camc314)
• ef8cebf linter/eslint/preserve-caught-error: Handle AggregateError options (#25775) (camc314)
• c108d5c linter: Improve React Compiler diagnostics (#25742) (Boshen)
• c9ec55e react-compiler: Improve diagnostic spans (#25731) (Boshen)
• 1cbbcb7 linter/unicorn/prefer-string-replace-all: Apply fixes in one pass (#25709) (Mikhail Baev)
• dec0a86 react-compiler: Standardize diagnostics (#25702) (Boshen)
• 5fd77f7 linter/react/display-name: Report curried HOC inner component (#25662) (camc314)
• 4dbb80e linter/import/no-named-as-default: Report local export conflicts (#25658) (camc314)
• e8a7214 linter/react/rules-of-hooks: Report hooks inside try blocks (#25670) (camc314)
• 36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)
• d901d24 linter/react/exhaustive-deps: Handle destructured object dependencies (#25669) (camc314)
• beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)
• fa36f26 linter/react/no-this-in-sfc: Detect this in nested arrow callbacks (#25653) (camc314)
• 44d1be3 linter/typescript/no-var-requires: Run rule on JavaScript (#25664) (camc314)
• 4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

• 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

• 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
• aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
• 36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)
• beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)
• 4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)
• 285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)
• 4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)

Commits

• 0db127c release(apps): oxlint v1.79.0 && oxfmt v0.64.0 (#25866)
• 228e8e0 fix(linter): resolve inactive React compiler rules (#25830)
• aa49d86 fix(linter): allow spread rule options in config types (#25675)
• 8922381 refactor(linter): remove inactive react config rule (#25740)
• 8c4552d feat(linter)!: split react/react-compiler into per-category rules (#25500)
• 36f8451 fix(linter/eslint/no-eval): align indirect default with ESLint (#25656)
• beb724d fix(linter/eslint/no-unused-vars): report bare underscore parameters (#25663)
• 4004c10 fix(linter/eslint/no-irregular-whitespace): check comments by default (#25660)
• 285820e fix(linter/no-large-snapshots): precompile and document allowed snapshot matc...
• 4df5835 fix(linter): allow capitalized built-in calls (#25516)
• See full diff in compare view

Updates tldts from 6.1.86 to 7.4.10

Release notes

Sourced from tldts's releases.

v7.4.10

📜 Update Public Suffix List

• tldts-experimental, tldts-icann, tldts
  • Update upstream public suffix list #2639 (@​remusao)

Authors: 1

• Rémi (@​remusao)

v7.4.9

📜 Update Public Suffix List

• tldts-experimental, tldts-icann, tldts
  • Update upstream public suffix list #2636 (@​remusao)

Authors: 1

• Rémi (@​remusao)

v7.4.8

📜 Update Public Suffix List

• tldts-experimental, tldts
  • Update upstream public suffix list #2632 (@​remusao)

Authors: 1

• Rémi (@​remusao)

v7.4.7

📜 Update Public Suffix List

• tldts-experimental, tldts
  • Update upstream public suffix list #2630 (@​remusao)

Authors: 1

• Rémi (@​remusao)

v7.4.6

📜 Update Public Suffix List

• tldts-experimental, tldts
  • Update upstream public suffix list #2626 (@​remusao)

🔩 Dependencies

• Bump sigstore from 4.1.0 to 4.1.1 #2629 (@​dependabot[bot])
• Bump @​babel/core from 7.24.7 to 7.29.7 #2618 (@​dependabot[bot])

... (truncated)

Changelog

Sourced from tldts's changelog.

v7.4.10 (Thu Jul 30 2026)

📜 Update Public Suffix List

• tldts-experimental, tldts-icann, tldts
  • Update upstream public suffix list #2639 (@​remusao)

Authors: 1

• Rémi (@​remusao)

---

v7.4.9 (Thu Jul 16 2026)

📜 Update Public Suffix List

• tldts-experimental, tldts-icann, tldts
  • Update upstream public suffix list #2636 (@​remusao)

Authors: 1

• Rémi (@​remusao)

---

v7.4.8 (Thu Jul 09 2026)

📜 Update Public Suffix List

• tldts-experimental, tldts
  • Update upstream public suffix list #2632 (@​remusao)

Authors: 1

• Rémi (@​remusao)

---

v7.4.7 (Tue Jul 07 2026)

📜 Update Public Suffix List

• tldts-experimental, tldts
  • Update upstream public suffix list #2630 (@​remusao)

Authors: 1

• Rémi (@​remusao)

... (truncated)

Commits

• e37c43b Bump version to: v7.4.10 [skip ci]
• 308be19 Update CHANGELOG.md [skip ci]
• f23e3c3 Update upstream public suffix list (#2639)
• a6a2c3b Bump version to: v7.4.9 [skip ci]
• 8ff6172 Update CHANGELOG.md [skip ci]
• dd8ccdc Update upstream public suffix list (#2636)
• e46ca7a Bump version to: v7.4.8 [skip ci]
• a4823cd Update CHANGELOG.md [skip ci]
• 86a0a57 Update upstream public suffix list (#2632)
• c43f3f1 Bump version to: v7.4.7 [skip ci]
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tldts since your current version.

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• See full diff in compare view

[github-actions]

Supabase CLI preview

npx --yes https://pkg.pr.new/supabase/cli/supabase@45c6468d84fd8628d20756e506b44b2f1aa3089a

Preview package for commit 45c6468.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.