Skip to content

chore(deps): bump the production-minor-patch group across 1 directory with 6 updates#492

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-14688f052c
Open

chore(deps): bump the production-minor-patch group across 1 directory with 6 updates#492
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-patch-14688f052c

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 26, 2026

Bumps the production-minor-patch group with 6 updates in the / directory:

Package From To
pg 8.20.0 8.21.0
posthog-node 5.34.2 5.34.6
@anthropic-ai/claude-agent-sdk 0.3.143 0.3.144
@clerk/nextjs 7.3.5 7.3.7
next 15.5.10 15.5.18
tsx 4.22.1 4.22.2

Updates pg from 8.20.0 to 8.21.0

Changelog

Sourced from pg's changelog.

pg@8.21.0

Commits
  • 544b1ce Publish
  • cc03fa5 Add scramMaxIterations option to limit SCRAM iteration count (#3677)
  • f776327 Remove compatibility code for unsupported versions of Node (<16) (#3678)
  • f252870 cleanup: pg utils (#3675)
  • c8da6ab Assorted test cleanup (#3673)
  • fa47e73 fix: Client#end callback being called multiple times when first is no-op (#...
  • 88a7e60 cleanup: Move declaration to more natural place
  • 2095247 cleanup: Combine duplicated code in Client#query and avoid unneeded early n...
  • 0ac3edd fix: apply SASLprep (RFC 4013) to passwords before SCRAM-SHA-256 PBKDF2 (#3669)
  • be880d4 Assorted test fixes and cleanup (#3672)
  • Additional commits viewable in compare view

Updates posthog-node from 5.34.2 to 5.34.6

Release notes

Sourced from posthog-node's releases.

posthog-node@5.34.6

5.34.6

Patch Changes

  • #3623 e119eec Thanks @​richardsolomou! - Fix six edge cases in local feature flag evaluation. gt/gte/lt/lte now compare numerically when both sides parse as finite numbers — previously a string override like "10" against numeric value 9 slipped into lexicographic comparison and returned false, and parseFloat's NaN return value leaked through the old != null guard. is_not_set now resolves locally — true when the property key is absent, false when present — instead of always throwing InconclusiveMatchError and forcing the flag to return undefined. Flag-level condition properties with negation: true are now correctly inverted, matching the existing cohort-path behavior in matchPropertyGroup. An inactive flag (active: false) now short-circuits to false even when ensure_experience_continuity: true — previously it threw InconclusiveMatchError and resolved to undefined. is_set now returns true for properties whose value is null or undefined as long as the key is present — is_set is about key presence, not value. Cohort property groups containing a flag-type property no longer silently skip the dependency; the cohort eval is now marked inconclusive so the flag returns undefined instead of a wrong definitive answer. (2026-05-19)

posthog-node@5.34.5

5.34.5

Patch Changes

  • Updated dependencies []:
    • @​posthog/core@​1.29.5

posthog-node@5.34.4

5.34.4

Patch Changes

  • Updated dependencies []:
    • @​posthog/core@​1.29.4

posthog-node@5.34.3

5.34.3

Patch Changes

  • Updated dependencies []:
    • @​posthog/core@​1.29.3
Changelog

Sourced from posthog-node's changelog.

5.34.6

Patch Changes

  • #3623 e119eec Thanks @​richardsolomou! - Fix six edge cases in local feature flag evaluation. gt/gte/lt/lte now compare numerically when both sides parse as finite numbers — previously a string override like "10" against numeric value 9 slipped into lexicographic comparison and returned false, and parseFloat's NaN return value leaked through the old != null guard. is_not_set now resolves locally — true when the property key is absent, false when present — instead of always throwing InconclusiveMatchError and forcing the flag to return undefined. Flag-level condition properties with negation: true are now correctly inverted, matching the existing cohort-path behavior in matchPropertyGroup. An inactive flag (active: false) now short-circuits to false even when ensure_experience_continuity: true — previously it threw InconclusiveMatchError and resolved to undefined. is_set now returns true for properties whose value is null or undefined as long as the key is present — is_set is about key presence, not value. Cohort property groups containing a flag-type property no longer silently skip the dependency; the cohort eval is now marked inconclusive so the flag returns undefined instead of a wrong definitive answer. (2026-05-19)

5.34.5

Patch Changes

  • Updated dependencies []:
    • @​posthog/core@​1.29.5

5.34.4

Patch Changes

  • Updated dependencies []:
    • @​posthog/core@​1.29.4

5.34.3

Patch Changes

  • Updated dependencies []:
    • @​posthog/core@​1.29.3
Commits
  • 5f95335 chore: update versions and lockfile [version bump]
  • e119eec fix(node): correct edge cases in local feature flag evaluation (#3623)
  • 44b9d2a chore: update versions and lockfile [version bump]
  • 6fbda2e chore: update versions and lockfile [version bump]
  • 5b4eda1 chore: update versions and lockfile [version bump]
  • See full diff in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.143 to 0.3.144

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.144

What's changed

  • Assistant messages and StopFailure hooks now report error: 'model_not_found' when the selected model doesn't exist or isn't available, instead of the generic 'invalid_request'. The api_error_status field on result messages is now documented.
  • Added @anthropic-ai/claude-agent-sdk/extract export for bun build --compile consumers: import the platform native binary with with { type: 'file' }, call extractFromBunfs(binPath) to copy it out of the compiled executable's virtual filesystem, and pass the result to options.pathToClaudeCodeExecutable

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.144
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.144
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.144
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.144
Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.144

  • Assistant messages and StopFailure hooks now report error: 'model_not_found' when the selected model doesn't exist or isn't available, instead of the generic 'invalid_request'. The api_error_status field on result messages is now documented.
  • Added @anthropic-ai/claude-agent-sdk/extract export for bun build --compile consumers: import the platform native binary with with { type: 'file' }, call extractFromBunfs(binPath) to copy it out of the compiled executable's virtual filesystem, and pass the result to options.pathToClaudeCodeExecutable
Commits

Updates @clerk/nextjs from 7.3.5 to 7.3.7

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.3.7

Patch Changes

Changelog

Sourced from @​clerk/nextjs's changelog.

7.3.7

Patch Changes

7.3.6

Patch Changes

  • Updated dependencies [4fc38a0]:
    • @​clerk/shared@​4.12.1
    • @​clerk/react@​6.6.5
    • @​clerk/backend@​3.4.10
Commits

Updates next from 15.5.10 to 15.5.18

Release notes

Sourced from next's releases.

v15.5.18

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

v15.5.16

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

v15.5.15

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summary-of-cve-2026-23869

v15.5.14

[!NOTE]

... (truncated)

Commits
  • 9ff92ce v15.5.18
  • 00ebe23 [backport] Disable build caches for production/staging/force-preview deploys ...
  • 62c97ab v15.5.17
  • 423623a Turbopack: Match proxy matchers with webpack implementation (#93594)
  • fa78739 Turbopack: Fix middleware matcher suffix (#93590)
  • 36e62c6 [backport] Turbopack: more strict vergen setup (#93588)
  • 36589b5 [backport][test] Pin package manager to patch versions (#93596)
  • ad6fd4e v15.5.16
  • 79d7dff Ignore malformed CSP nonce headers (#103)
  • c4f6908 router-server: guard upgrade proxy against absolute-url SSRF (#77) (#102)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.


Updates tsx from 4.22.1 to 4.22.2

Release notes

Sourced from tsx's releases.

v4.22.2

4.22.2 (2026-05-18)

Bug Fixes

  • preserve CJS JSON require in ESM hooks (35b700b)
  • preserve named exports from CommonJS TypeScript (11de737)
  • support module.exports require(esm) interop (cf8f199)

This release is also available on:

Commits
  • 35b700b fix: preserve CJS JSON require in ESM hooks
  • ef807db chore: update testing dependencies
  • 3917090 test: document compatibility test taxonomy
  • de8113f refactor: centralize Node capability facts
  • c1f62db test: consolidate tsconfig path edge coverage
  • 4e08174 test: consolidate loader hook coverage
  • 674bb30 test: consolidate tsImport commonjs mts coverage
  • e6972ac test: stabilize process interaction tests
  • 9736a80 test: safely decode stdout stream tex
  • 11de737 fix: preserve named exports from CommonJS TypeScript
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the production-minor-patch group across 1 directory…
9818319 
… with 6 updates

Bumps the production-minor-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.20.0` | `8.21.0` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.34.2` | `5.34.6` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.143` | `0.3.144` |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `7.3.5` | `7.3.7` |
| [next](https://github.com/vercel/next.js) | `15.5.10` | `15.5.18` |
| [tsx](https://github.com/privatenumber/tsx) | `4.22.1` | `4.22.2` |



Updates `pg` from 8.20.0 to 8.21.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.21.0/packages/pg)

Updates `posthog-node` from 5.34.2 to 5.34.6
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.34.6/packages/node)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.143 to 0.3.144
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.143...v0.3.144)

Updates `@clerk/nextjs` from 7.3.5 to 7.3.7
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@7.3.7/packages/nextjs)

Updates `next` from 15.5.10 to 15.5.18
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.10...v15.5.18)

Updates `tsx` from 4.22.1 to 4.22.2
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.22.1...v4.22.2)

---
updated-dependencies:
- dependency-name: pg
  dependency-version: 8.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: posthog-node
  dependency-version: 5.34.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.144
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: "@clerk/nextjs"
  dependency-version: 7.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: next
  dependency-version: 15.5.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: tsx
  dependency-version: 4.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 26, 2026

Labels

The following labels could not be found: supply-chain. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 26, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 26, 2026 02:18
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented May 26, 2026

⚠️ No Changeset found

Latest commit: 9818319

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants