chore(deps): bundle 10 Dependabot bumps (claude-agent-sdk 0.3, dotenv 17, vitest 4, ts 6, types/node 25, react 19.2.6, checkout/setup-node v6)#390
Merged
Conversation
Closes the open Dependabot wave in one PR. Root npm bumps: - @anthropic-ai/claude-agent-sdk ^0.2.56 → ^0.3.142 (closes #389 group) - dotenv ^16.4.7 → ^17.4.2 (closes #356) - @types/node ^22 → ^25.7.0 (closes #357) - typescript ^5.7 → ^6.0.3 (closes #358) - vitest ^3 → ^4.1.6 (closes #359) Website npm bumps: - @types/node 22.10.2 → ^25.7.0 (closes #354) - typescript 5.7.2 → ^6.0.3 (closes #353) - react/react-dom ^19.2.5 → ^19.2.6 (closes #352 group) github-actions bumps: - actions/checkout v4 → v6 (closes #351) - actions/setup-node v4 → v6 (closes #350) Verified: - npm run build clean against new TypeScript 6 + vitest 4 stack - npm test 903 / 903 pass - website npm run build clean (next 16.2.6 + react 19.2.6 + ts 6 stack generates 5 static pages, finalises optimisation) - No source changes were needed for any breaking-version bump — the agent-sdk 0.3.x removal of unstable_v2_createSession etc. is not on any path agentmemory exercises (we use query() + the existing AgentSDKProvider shape). Plus README refresh on the Works-with-every-agent grid: - Added OpenHuman entry (tinyhumansai/openhuman) pointing at the recently-landed Memory trait backend (PR tinyhumansai/openhuman#1743) - Added pi as a native-plugin entry (we already ship integrations/pi/security.ts and the plugin file in-tree) - Reordered the grid so native-plugin agents sit in row 1 and MCP-only / REST-only agents sit in row 2 - Updated sub-text on Claude Code / Codex CLI / OpenClaw / Hermes / pi to consistently say "native plugin" rather than mixing "plugin", "skills", "hooks". Counter on assets/tags/section-agents.svg moved from "16 integrations" to "15 integrations" because we dropped the meta "Any agent" + "Claude SDK" cells that double-counted REST and the AgentSDKProvider path already represented by Claude Code.
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
✅ Files skipped from review due to trivial changes (1)
📝 WalkthroughWalkthroughThis PR bumps GitHub Actions steps to v6, revises the README agent compatibility table, and updates dependency and devtool versions in root and website package.json files. ChangesDependency and Documentation Updates
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~20 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
🧹 Nitpick comments (1)
website/package.json (1)
23-26: ⚡ Quick winAlign Node runtime/type baselines before merge.
Line 23 upgrades
@types/nodeto v25 while the package declares runtime support asengines.node: >=20. This allows Node 25-only APIs to type-check against a package that advertises Node 20 support. Additionally, Next.js 16.2.6 requires Node 20.9+, making the declared>=20looser than the actual framework minimum.Tighten
engines.nodeto>=20.9.0to align with Next.js 16 and consider whether@types/nodeshould match your minimum runtime major version.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@website/package.json` around lines 23 - 26, Update the package.json runtime baseline by changing the engines.node entry to ">=20.9.0" to match Next.js 16.2.6 requirements and ensure consistency with declared support, and align the dev dependency `@types/node` to the same major runtime baseline (e.g., use a ^20.x `@types/node` version) so type definitions don’t permit Node 25-only APIs; modify the "engines.node" field and the "@types/node" dependency in package.json accordingly.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In `@website/package.json`:
- Around line 23-26: Update the package.json runtime baseline by changing the
engines.node entry to ">=20.9.0" to match Next.js 16.2.6 requirements and ensure
consistency with declared support, and align the dev dependency `@types/node` to
the same major runtime baseline (e.g., use a ^20.x `@types/node` version) so type
definitions don’t permit Node 25-only APIs; modify the "engines.node" field and
the "@types/node" dependency in package.json accordingly.
ℹ️ Review info
⚙️ Run configuration
Configuration used: defaults
Review profile: CHILL
Plan: Pro
Run ID: 121e4580-bd7a-4e11-a886-5163cfe0fb72
⛔ Files ignored due to path filters (3)
assets/tags/light/section-agents.svgis excluded by!**/*.svgassets/tags/section-agents.svgis excluded by!**/*.svgwebsite/package-lock.jsonis excluded by!**/package-lock.json
📒 Files selected for processing (5)
.github/workflows/ci.yml.github/workflows/publish.ymlREADME.mdpackage.jsonwebsite/package.json
This was referenced May 15, 2026
Drops the generic GitHub-org avatar for the brand-mark SVG. Lives in assets/agents/ so the README + future grid renders reach it directly.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Closes the open Dependabot wave in one PR — saves ten merge round-trips for one effective change set.
@anthropic-ai/claude-agent-sdk0.2.141 → 0.3.142 (+@anthropic-ai/sdk,tsdown) — root minor-and-patch groupdotenv16.6.1 → 17.4.2@types/node22 → 25.7.0typescript5.9.3 → 6.0.3vitest3.2.4 → 4.1.6@types/node22.10.2 → 25.7.0 in/websitetypescript5.7.2 → 6.0.3 in/websitereact,react-dom19.2.5 → 19.2.6 — website minor-and-patch groupactions/checkoutv4 → v6actions/setup-nodev4 → v6Validation
Root npm:
npm run build— clean against TypeScript 6 + vitest 4 + claude-agent-sdk 0.3.xnpm test— 903 / 903 passWebsite npm:
npm run build— clean (next 16.2.6 + react 19.2.6 + ts 6 stack generates 5 static pages, finalises optimisation)No source changes were needed for any breaking bump. The
agent-sdk 0.3.x removal of
unstable_v2_createSessionet al. is not on any path agentmemory exercises (we use the stablequery()shape viaAgentSDKProvider).Closes
Closes #389, #356, #357, #358, #359, #354, #353, #352, #351, #350.
Plus a small README refresh
Out-of-scope but rides along since the diff lands in the same surface anyway:
integrations/pi/security.ts+ the plugin file in-tree)assets/tags/section-agents.svgmoved from "16 integrations" to "15 integrations" — dropped the meta "Any agent" + "Claude SDK" cells that double-counted REST and the AgentSDKProvider path already represented by Claude CodeTest plan
npm run buildnpm test(903 / 903)npm run buildSummary by CodeRabbit
Documentation
Chores
Website