build(deps): bump the non-major group across 1 directory with 59 updates

[dependabot]

Bumps the non-major group with 59 updates in the / directory:

Package	From	To
@ai-sdk/anthropic	4.0.16	4.0.40
@ai-sdk/fal	3.0.12	3.0.29
@ai-sdk/gateway	4.0.23	4.0.59
@ai-sdk/google	4.0.18	4.0.49
@ai-sdk/mistral	4.0.13	4.0.31
@ai-sdk/openai	4.0.16	4.0.45
@ai-sdk/react	4.0.34	4.0.76
@composio/core	0.14.0	0.17.0
@convex-dev/auth	0.0.94	0.0.95
@convex-dev/resend	0.2.5	0.2.6
@polar-sh/checkout	0.4.0	0.4.1
@polar-sh/sdk	0.48.1	0.49.0
@radix-ui/react-alert-dialog	1.1.20	1.1.23
@radix-ui/react-avatar	1.2.3	1.2.6
@radix-ui/react-checkbox	1.3.8	1.3.11
@radix-ui/react-dialog	1.1.20	1.1.23
@radix-ui/react-dropdown-menu	2.1.21	2.1.24
@radix-ui/react-hover-card	1.1.20	1.1.23
@radix-ui/react-label	2.1.12	2.1.15
@radix-ui/react-popover	1.1.20	1.1.23
@radix-ui/react-progress	1.1.13	1.1.16
@radix-ui/react-radio-group	1.4.4	1.4.7
@radix-ui/react-scroll-area	1.2.15	1.2.18
@radix-ui/react-select	2.3.4	2.3.7
@radix-ui/react-separator	1.1.12	1.1.15
@radix-ui/react-slot	1.3.0	1.3.3
@radix-ui/react-switch	1.3.4	1.3.7
@radix-ui/react-tabs	1.1.18	1.1.21
@radix-ui/react-tooltip	1.2.13	1.2.16
@radix-ui/react-use-controllable-state	1.2.4	1.2.6
@tanstack/react-devtools	0.10.8	0.10.12
@tanstack/react-query	5.101.2	5.101.4
@tanstack/react-query-devtools	5.101.2	5.101.4
@tanstack/react-router	1.170.18	1.170.31
@tanstack/react-router-devtools	1.167.0	1.167.1
@tanstack/react-start	1.168.32	1.168.48
@upstash/redis	1.38.0	1.38.2
ai	7.0.31	7.0.73
convex	1.42.3	1.44.0
dayjs	1.11.21	1.11.23
exa-js	2.16.0	2.18.1
katex	0.18.1	0.18.4
lucide-react	1.25.0	1.33.0
marked	18.0.6	18.0.10
posthog-js	1.404.1	1.418.6
posthog-node	5.45.2	5.49.2
react	19.2.7	19.2.8
@types/react	19.2.17	19.2.18
react-dom	19.2.7	19.2.8
@types/react-dom	19.2.3	19.2.4
sonner	2.0.7	2.0.8
zustand	5.0.14	5.0.15
@tanstack/devtools-vite	0.8.1	0.8.5
@vitejs/plugin-react	6.0.3	6.1.0
lint-staged	17.1.0	17.3.0
oxfmt	0.59.0	0.64.0
oxlint	1.74.0	1.79.0
vite	8.1.5	8.2.2
vitest	4.1.10	4.1.11

Updates @ai-sdk/anthropic from 4.0.16 to 4.0.40

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.40

Patch Changes

• Updated dependencies [e6087c9]
  • @​ai-sdk/provider-utils@​5.0.28

4.0.39

Patch Changes

• 4579b08: Preserve Anthropic server-tool caller metadata in multi-turn conversations.

4.0.38

Patch Changes

• Updated dependencies [7fbfc6d]
  • @​ai-sdk/provider-utils@​5.0.27

4.0.37

Patch Changes

• Updated dependencies [401a4ba]
  • @​ai-sdk/provider-utils@​5.0.26

4.0.36

Patch Changes

• Updated dependencies [ad6a650]
• Updated dependencies [81cd026]
  • @​ai-sdk/provider@​4.0.7
  • @​ai-sdk/provider-utils@​5.0.25

4.0.35

Patch Changes

• Updated dependencies [1937bef]
  • @​ai-sdk/provider-utils@​5.0.24

4.0.34

Patch Changes

• e6415bd: feat(anthropic): add text batch support

4.0.33

... (truncated)

Commits

• 97a9489 Version Packages (#19085)
• 9ce09df Version Packages (#18869)
• 4579b08 fix(anthropic): replay dynamic-filtering callers without reordering (#18887)
• 52eff91 Version Packages (#18698)
• cbdbeee Version Packages (#18645)
• 63db193 Version Packages (#18587)
• ae26160 Version Packages (#18566)
• 2f04a5e Version Packages (#18560)
• e6415bd feat(anthropic): support batch APIs (#18469)
• bb31e6b Version Packages (#18508)
• Additional commits viewable in compare view

Updates @ai-sdk/fal from 3.0.12 to 3.0.29

Changelog

Sourced from @​ai-sdk/fal's changelog.

3.0.29

Patch Changes

• Updated dependencies [e6087c9]
  • @​ai-sdk/provider-utils@​5.0.28

3.0.28

Patch Changes

• Updated dependencies [7fbfc6d]
  • @​ai-sdk/provider-utils@​5.0.27

3.0.27

Patch Changes

• Updated dependencies [401a4ba]
  • @​ai-sdk/provider-utils@​5.0.26

3.0.26

Patch Changes

• Updated dependencies [ad6a650]
• Updated dependencies [81cd026]
  • @​ai-sdk/provider@​4.0.7
  • @​ai-sdk/provider-utils@​5.0.25

3.0.25

Patch Changes

• Updated dependencies [1937bef]
  • @​ai-sdk/provider-utils@​5.0.24

3.0.24

Patch Changes

• Updated dependencies [3469d0c]
  • @​ai-sdk/provider@​4.0.6
  • @​ai-sdk/provider-utils@​5.0.23

3.0.23

Patch Changes

• Updated dependencies [2b60826]

... (truncated)

Commits

• 97a9489 Version Packages (#19085)
• 52eff91 Version Packages (#18698)
• cbdbeee Version Packages (#18645)
• 63db193 Version Packages (#18587)
• ae26160 Version Packages (#18566)
• bb31e6b Version Packages (#18508)
• d68d496 Version Packages (#18475)
• 7b38cc8 Version Packages (#18421)
• 36ab28c chore: enforce konsistent imports of Experimental_VideoModelV4 as unprefixe...
• 22095f4 Version Packages (#18381)
• Additional commits viewable in compare view

Updates @ai-sdk/gateway from 4.0.23 to 4.0.59

Changelog

Sourced from @​ai-sdk/gateway's changelog.

4.0.59

Patch Changes

• f607a12: chore(google): drop support for Imagen models and their integration following API shutdown

4.0.58

Patch Changes

• fdcc814: chore(provider/gateway): update gateway model settings files

4.0.57

Patch Changes

• 936719b: add experimental batch API support (startTextBatch/getBatchStatus/getBatchResults) via the AI Gateway batch routes

4.0.56

Patch Changes

• Updated dependencies [e6087c9]
  • @​ai-sdk/provider-utils@​5.0.28

4.0.55

Patch Changes

• 1f7a464: chore(provider/gateway): update gateway model settings files

4.0.54

Patch Changes

• 257632b: chore(provider/gateway): update gateway model settings files

4.0.53

Patch Changes

• a0b1ffc: chore(provider/gateway): update gateway model settings files

4.0.52

Patch Changes

• 16650e9: feat(google): add gemini-3.7-flash model

4.0.51

... (truncated)

Commits

• eceb32a Version Packages (#19224)
• f607a12 chore(google): drop support for Imagen models and their integration following...
• eac099e Version Packages (#19213)
• fdcc814 chore(provider/gateway): update gateway model settings files (#19184)
• e2aa796 Version Packages (#19186)
• 936719b feat(gateway): experimental batch API support (#19032)
• 97a9489 Version Packages (#19085)
• 65658f3 Version Packages (#19060)
• 1f7a464 chore(provider/gateway): update gateway model settings files (#19075)
• 2174f20 Version Packages (#19022)
• Additional commits viewable in compare view

Updates @ai-sdk/google from 4.0.18 to 4.0.49

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.49

Patch Changes

• f607a12: chore(google): drop support for Imagen models and their integration following API shutdown

4.0.48

Patch Changes

• 6c5a1ed: Inline local JSON Schema references in Google tool and structured-output schemas.

4.0.47

Patch Changes

• e6087c9: fix: handle empty string tool call IDs
• Updated dependencies [e6087c9]
  • @​ai-sdk/provider-utils@​5.0.28

4.0.46

Patch Changes

• f69920a: fix(google): use low as the minimum reasoning level for full Gemini Flash 3.7 and later

4.0.45

Patch Changes

• bb0cf2e: fix(google): coerce minimal reasoning to low for Gemini 3.7 Flash

4.0.44

Patch Changes

• 16650e9: feat(google): add gemini-3.7-flash model

4.0.43

Patch Changes

• 8e90283: Preserve forced tool calls when strict function tools are configured.

4.0.42

Patch Changes

• Updated dependencies [7fbfc6d]
  • @​ai-sdk/provider-utils@​5.0.27

... (truncated)

Commits

• eceb32a Version Packages (#19224)
• f607a12 chore(google): drop support for Imagen models and their integration following...
• e2aa796 Version Packages (#19186)
• 6c5a1ed fix(google): resolve local JSON Schema references (#19141)
• 97a9489 Version Packages (#19085)
• e6087c9 fix: handle empty string tool call IDs (#19091)
• 65658f3 Version Packages (#19060)
• f69920a fix: Gemini Flash aliases and version variants send unsupported minimal think...
• 8a62d5a Version Packages (#18993)
• bb0cf2e fix: prevent Gemini 3.7 Flash errors for minimal reasoning (#18989)
• Additional commits viewable in compare view

Updates @ai-sdk/mistral from 4.0.13 to 4.0.31

Changelog

Sourced from @​ai-sdk/mistral's changelog.

4.0.31

Patch Changes

• b8100f3: fix(mistral): support incremental streaming tool calls

4.0.30

Patch Changes

• Updated dependencies [e6087c9]
  • @​ai-sdk/provider-utils@​5.0.28

4.0.29

Patch Changes

• Updated dependencies [7fbfc6d]
  • @​ai-sdk/provider-utils@​5.0.27

4.0.28

Patch Changes

• Updated dependencies [401a4ba]
  • @​ai-sdk/provider-utils@​5.0.26

4.0.27

Patch Changes

• Updated dependencies [ad6a650]
• Updated dependencies [81cd026]
  • @​ai-sdk/provider@​4.0.7
  • @​ai-sdk/provider-utils@​5.0.25

4.0.26

Patch Changes

• Updated dependencies [1937bef]
  • @​ai-sdk/provider-utils@​5.0.24

4.0.25

Patch Changes

• Updated dependencies [3469d0c]
  • @​ai-sdk/provider@​4.0.6
  • @​ai-sdk/provider-utils@​5.0.23

... (truncated)

Commits

• e2aa796 Version Packages (#19186)
• b8100f3 fix: @​ai-sdk/mistral rejects incremental streaming tool-call arguments (#19181)
• 97a9489 Version Packages (#19085)
• 52eff91 Version Packages (#18698)
• cbdbeee Version Packages (#18645)
• 63db193 Version Packages (#18587)
• ae26160 Version Packages (#18566)
• bb31e6b Version Packages (#18508)
• d68d496 Version Packages (#18475)
• 7b38cc8 Version Packages (#18421)
• Additional commits viewable in compare view

Updates @ai-sdk/openai from 4.0.16 to 4.0.45

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.45

Patch Changes

• 6be0f51: fix(openai): expand internal parallel tool call wrappers from the Responses API while preserving stateful continuation and streaming fallbacks

4.0.44

Patch Changes

• e6087c9: fix: handle empty string tool call IDs
• Updated dependencies [e6087c9]
  • @​ai-sdk/provider-utils@​5.0.28

4.0.43

Patch Changes

• a062795: fix(openai): support built-in and provider-defined tools in the Responses allowedTools option

  allowedTools emitted every allow-list entry as { type: 'function', name }, but OpenAI identifies built-in tools by type. Allow-listing a declared provider-defined tool (web search, image generation, MCP, custom, ...) therefore failed with Tool choice '<name>' not found in 'tools' parameter. Entries are now derived from the declared tool, including the MCP server label and custom tool name.

  Tools that OpenAI cannot allow-list (the tool search tool, deferred tools, and namespaced tools) are dropped from the allow-list with a warning, and an error is thrown if that would leave the allow-list empty rather than silently sending an unrestricted request.

  Ambiguous names are now reported instead of resolved silently. A name that matches both a declared tool and another tool's provider tool name resolves to the declared tool and warns; a provider tool name shared by several tools in the same request (two MCP servers, for example) is dropped with a warning. A name that matches no declared tool keeps its existing behavior and is now warned about.

4.0.42

Patch Changes

• b6fff2e: feat(provider/openai): support explicit Responses compaction triggers

4.0.41

Patch Changes

• 59d6def: Reconstruct provider-executed shell calls when continuing OpenAI Responses with storage disabled.

4.0.40

Patch Changes

... (truncated)

Commits

• e2aa796 Version Packages (#19186)
• 6be0f51 fix(openai): expand Responses API parallel tool call wrappers (#19098)
• 97a9489 Version Packages (#19085)
• e6087c9 fix: handle empty string tool call IDs (#19091)
• 2174f20 Version Packages (#19022)
• a062795 fix(openai): support built-in and provider-defined tools in Responses allowed...
• 1ef231d Version Packages (#18924)
• b6fff2e feat: support explicit OpenAI Responses compaction triggers (#18895)
• a7f0d72 Version Packages (#18749)
• 59d6def fix: allow provider-executed shell follow-ups with response storage disabled ...
• Additional commits viewable in compare view

Updates @ai-sdk/react from 4.0.34 to 4.0.76

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.76

Patch Changes

• ai@7.0.73

4.0.75

Patch Changes

• ai@7.0.72

4.0.74

Patch Changes

• Updated dependencies [9a37469]
  • ai@7.0.71

4.0.73

Patch Changes

• Updated dependencies [e6087c9]
• Updated dependencies [9566914]
• Updated dependencies [b181020]
• Updated dependencies [7054073]
• Updated dependencies [a828527]
• Updated dependencies [d3cc3fe]
  • @​ai-sdk/provider-utils@​5.0.28
  • ai@7.0.70
  • @​ai-sdk/mcp@​2.0.34

4.0.72

Patch Changes

• ai@7.0.69

4.0.71

Patch Changes

• Updated dependencies [1f29230]
• Updated dependencies [0c60a40]
• Updated dependencies [e6a9927]
  • @​ai-sdk/mcp@​2.0.33
  • ai@7.0.68

4.0.70

... (truncated)

Commits

• eceb32a Version Packages (#19224)
• eac099e Version Packages (#19213)
• e2aa796 Version Packages (#19186)
• 97a9489 Version Packages (#19085)
• 65658f3 Version Packages (#19060)
• 2174f20 Version Packages (#19022)
• 8a62d5a Version Packages (#18993)
• 9ce09df Version Packages (#18869)
• d427e3a fix: preserve useObject results when the API URL changes (#18863)
• d76eb85 Version Packages (#18810)
• Additional commits viewable in compare view

Updates @composio/core from 0.14.0 to 0.17.0

Release notes

Sourced from @​composio/core's releases.

@​composio/core@​0.17.0

Minor Changes

• 760f8d0: Allow OpenAI and Anthropic provider tool-call helpers to execute through a supplied Tool Router session. Session meta-tools now retain their session context while provider argument normalization remains intact; existing user-ID calls continue to use direct execution. Anthropic helper failures now preserve their error text in { error } results without changing successful payloads. Custom provider subclasses overriding executeToolCall or handleToolCalls may require updates because these methods now accept session targets.

Patch Changes

• 6ba9179: Validate the URLs that come from API responses before fetching them. Tool-execution downloads (s3Url), S3 presigned uploads (new_presigned_url), Tool Router session file downloads (RemoteFile.buffer() / blob() / text() / save()) and session file uploads (upload_url) now go through the same SSRF guard that already covered user-supplied URLs, so a response naming a private, loopback, or link-local address is refused instead of fetched. Redirect hops are re-validated. Edge runtimes keep their current behavior: session file transfers are not blocked there, since a Worker cannot resolve DNS to check and its fetch does not originate inside the caller's network.

@​composio/core@​0.16.0

Minor Changes

• 5e57815: Keep free-form object roots, patternProperties, and additionalProperties when parsing a tool schema.

  ToolSchema.parse used to reject a bare { "type": "object" } root, drop root patternProperties as an unknown key, and reject a root additionalProperties written as a schema instead of a boolean. Free-form roots now parse successfully, and both constraints survive parsing exactly as written. The public ToolSchema type now makes properties optional to reflect those valid property-less object schemas.

  This matters downstream. Every provider reads inputParameters after parsing, so a tool that declares dynamic keys had those rules stripped before the model ever saw them.

  An omitted additionalProperties still stays omitted. The parser does not invent a value, because each converter decides its own default.

  What no longer works

  Parsing no longer fails on a schema-valued root additionalProperties.

  const tool = ToolSchema.parse({
    slug: 'MY_TOOL',
    inputParameters: {
      type: 'object',
      properties: { name: { type: 'string' } },
      additionalProperties: { type: 'number' },
    },
    // ...
  });
  // before: parsing failed, because only a boolean was accepted
  // now:    tool.inputParameters.additionalProperties is { type: 'number' }

  What to do instead

  Nothing, if you only ever passed boolean values. That case is unchanged.

  If your code assumed inputParameters never carries patternProperties, or that additionalProperties is always a boolean, widen that assumption. Both keywords can now appear, and additionalProperties can be a boolean or a schema object.

Patch Changes

• a2f6b96: Add type: "object" to nested JSON Schema nodes that carry properties without an explicit type, so tool schemas work with strict OpenAPI 3.0 consumers like Google Gemini.
• c625edc: Reuse fetched tool schemas when provider-wrapped tools execute to avoid a redundant retrieval request.
• Updated dependencies [5e57815]

... (truncated)

Changelog

Sourced from @​composio/core's changelog.

0.17.0

Minor Changes

• 760f8d0: Allow OpenAI and Anthropic provider tool-call helpers to execute through a supplied Tool Router session. Session meta-tools now retain their session context while provider argument normalization remains intact; existing user-ID calls continue to use direct execution. Anthropic helper failures now preserve their error text in { error } results without changing successful payloads. Custom provider subclasses overriding executeToolCall or handleToolCalls may require updates because these methods now accept session targets.

Patch Changes

• 6ba9179: Validate the URLs that come from API responses before fetching them. Tool-execution downloads (s3Url), S3 presigned uploads (new_presigned_url), Tool Router session file downloads (RemoteFile.buffer() / blob() / text() / save()) and session file uploads (upload_url) now go through the same SSRF guard that already covered user-supplied URLs, so a response naming a private, loopback, or link-local address is refused instead of fetched. Redirect hops are re-validated. Edge runtimes keep their current behavior: session file transfers are not blocked there, since a Worker cannot resolve DNS to check and its fetch does not originate inside the caller's network.

0.16.0

Minor Changes

• 5e57815: Keep free-form object roots, patternProperties, and additionalProperties when parsing a tool schema.

  ToolSchema.parse used to reject a bare { "type": "object" } root, drop root patternProperties as an unknown key, and reject a root additionalProperties written as a schema instead of a boolean. Free-form roots now parse successfully, and both constraints survive parsing exactly as written. The public ToolSchema type now makes properties optional to reflect those valid property-less object schemas.

  This matters downstream. Every provider reads inputParameters after parsing, so a tool that declares dynamic keys had those rules stripped before the model ever saw them.

  An omitted additionalProperties still stays omitted. The parser does not invent a value, because each converter decides its own default.

  What no longer works

  Parsing no longer fails on a schema-valued root additionalProperties.

  const tool = ToolSchema.parse({
    slug: 'MY_TOOL',
    inputParameters: {
      type: 'object',
      properties: { name: { type: 'string' } },
      additionalProperties: { type: 'number' },
    },
    // ...
  });
  // before: parsing failed, because only a boolean was accepted
  // now:    tool.inputParameters.additionalProperties is { type: 'number' }

  What to do instead

  Nothing, if you only ever passed boolean values. That case is unchanged.

  If your code assumed inputParameters never carries patternProperties, or that additionalProperties is always a boolean, widen that assumption. Both keywords can now appear, and additionalProperties can be a boolean or a schema object.

Patch Changes

• a2f6b96: Add type: "object" to nested JSON Schema nodes that carry properties without an explicit type, so tool schemas work with strict OpenAPI 3.0 consumers like Google Gemini.

... (truncated)

Commits

• f031c27 Release: update version (#4161)
• 760f8d0 fix(sdk): route provider tool calls through sessions (#4098)
• 6ba9179 fix(files): validate URLs from API responses before fetching them (#4146)
• 02196de Release: update version (#4104)
• a2f6b96 fix(json-schema): integrate Google object type normalization
• 1af694b Merge branch 'next' into fix/cross-sdk-json-schema-object-conversion
• c625edc fix(core): reuse fetched schemas for provider execution (#4103)
• 6c08f17 test(json-schema): share one corpus loader across the SDK test suites
• 13cba53 Release: update version (#4038)
• 191d919 fix(python): harden dynamic schema validation
• Additional commits viewable in compare view

Updates @convex-dev/auth from 0.0.94 to 0.0.95

Changelog

Sourced from @​convex-dev/auth's changelog.

0.0.95

• fix: a failed OTP/magic-link sign-in no longer consumes the verification code it rejected
• fix: signIn called with only a code now resolves with { tokens: null } for every failure instead of rejecting for some

Commits

• b58a384 0.0.95
• 84688a7 return null on pre-verification code errors (#439)
• 7f04bc5 Use api.convex.dev, not provision.convex.dev (#444)
• bd68f9b docs: use named imports in provider JSDoc and docs examples (#353)
• 5ad1339 Update dependency valibot to v1 (#348)
• See full diff in compare view

Updates @convex-dev/resend from 0.2.5 to 0.2.6

Changelog

Sourced from @​convex-dev/resend's changelog.

0.2.6

• forward message_id from Resend webhook payloads to onEmailEvent (#101)

Commits

• 26d17f9 0.2.6
• 1823275 audit fix
• 2f6a91d Update Routine updates (#104)
• 95a91e1 Update actions/checkout action to v7 (#99)
• c09b7d5 drop renovate schedule
• 2412b9b Update Routine updates (#96)
• 249fa72 forward message_id from Resend webhook payloads to onEmailEvent (#101)
• See full diff in compare view

Updates @polar-sh/checkout from 0.4.0 to 0.4.1

Release notes

Sourced from @​polar-sh/checkout's releases.

@​polar-sh/checkout@​0.4.1

Patch Changes

• 0a573c3: Prevent smooth-scroll libraries (Lenis) on the embedding page from scrolling behind the checkout overlay

Changelog

Sourced from @​polar-sh/checkout's changelog.

0.4.1

Patch Changes

• 0a573c3: Prevent smooth-scroll libraries (Lenis) on the embedding page from scrolling behind the checkout overlay

Commits

• 69d7673 Version Packages (#13593)
• 55e68aa prevent lenis from hijacking scroll when polar iframe is shown (#13562)
• 30b96df feat(discount): per-customer redemption limits (#13394)
• 030cd3a sync selected payment method to the checkout API (#13298)
• 9ef5d25 accept and enforce payment_method on checkout API (#13297)
• 5bffc3e Fix opaque background in embedded checkouts in dark mode (#13073)
• e97483c Improve UX for already active trial in checkout (#13002)
• 654455e server: remove defaults from output schemas (#12962)
• f86d33d Replace ordinal formatting with plural-aware interval counts (#12915)
• d877958 docs: add processing_failed to EmbedPaymentMethod ErrorCode in README (#11825)
• See full diff in compare view

Updates @polar-sh/sdk from 0.48.1 to 0.49.0

Release notes

Sourced from @​polar-sh/sdk's releases.

typescript - v0.49.0 - 2026-07-20 08:26:30

Generated by Speakeasy CLI

@​polar-sh/sdk 0.49.0

Typescript SDK Changes:

• polar.checkouts.clientUpdate(): response.products[] Changed (Breaking ⚠️)
• polar.checkouts.clientConfirm(): response.products[] Changed (Breaking ⚠️)
• polar.organizations.get(): response Changed (Breaking ⚠️)
• polar.organizations.update():
  • request.organizationUpdate Changed (Breaking ⚠️)
  • response Changed (Breaking ⚠️)
  • error.status[409] Added
• polar.subscriptions.list():
  • request.status Added
  • response.items[] Changed (Breaking ⚠️)
• polar.files.list(): response.items[].union(support_case_attachment) Added (Breaking ⚠️)
• polar.customerMeters.get(): response.customer Changed (Breaking ⚠️)
• polar.customerMeters.list(): response.items[].customer Changed (Breaking ⚠️)
• polar.events.get(): response.union(SystemEvent) Changed (Breaking ⚠️)
• polar.events.list(): response.union(ListResource_Event_).items[].union(SystemEvent) Changed (Breaking ⚠️)
• polar.customerSessions.create(): response.customer Changed (Breaking ⚠️)
• polar.customerPortal.subscriptions.update():
  • request.customerSubscriptionUpdate Changed (Breaking ⚠️)
  • response Changed (Breaking ⚠️)
  • error Changed (Breaking ⚠️)
• polar.customerPortal.subscriptions.cancel(): response Changed (Breaking ⚠️)
• polar.customerPortal.subscriptions.get(): response Changed (Breaking ⚠️)
• polar.customerPortal.subscriptions.list(): response.items[] Changed (Breaking ⚠️)
• polar.customerPortal.organizations.get(): response Changed (Breaking ⚠️)
• polar.customerPortal.orders.generateInvoice(): error Changed (Breaking ⚠️)
• polar.customerPortal.orders.update(): response Changed (Breaking ⚠️)
• polar.customerPortal.orders.get(): response Changed (Breaking ⚠️)
• polar.customerPortal.orders.list(): response.items[] Changed (Breaking ⚠️)
• polar.subscriptions.create(): response Changed (Breaking ⚠️)
• polar.subscriptions.export(): response.status[200] Removed (Breaking ⚠️)
• polar.subscriptions.get(): response Changed (Breaking ⚠️)
• polar.subscriptions.revoke(): response Changed (Breaking ⚠️)
• polar.subscriptions.update():
  • request.subscriptionUpdate Changed
  • response Changed (Breaking ⚠️)
• polar.customerPortal.licenseKeys.activate(): response.licenseKey.customer Changed (Breaking ⚠️)
• polar.customerPortal.licenseKeys.validate(): response.customer Changed (Breaking ⚠️)
• polar.customerPortal.licenseKeys.get(): response.customer Changed (Breaking ⚠️)
• polar.customerPortal.licenseKeys.list(): response.items[].customer Changed (Breaking ⚠️)
• polar.customerPortal.seats.listClaimedSubscriptions(): response.items[] Changed (Breaking ⚠️)
• polar.customerPortal.benefitGrants.update():
  • request.customerBenefitGrantUpdate.union(slack_shared_channel) Added
  • response Changed (Breaking ⚠️)
• polar.customerPortal.benefitGrants.get(): response Changed (Breaking ⚠️)
• polar.oauth2.clients.delete(): response Changed (Breaking ⚠️)
• polar.benefits.list():

... (truncated)

Changelog

Sourced from @​polar-sh/sdk's changelog.

2024-09-02 09:49:03

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.385.0 (2.407.2) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.6.1] .

Releases

• [NPM v0.6.1] https://www.npmjs.com/package/@​polar-sh/sdk/v/0.6.1 - .

2024-09-04 00:24:19

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.390.1 (2.409.0) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.7.0] .

Releases

• [NPM v0.7.0] https://www.npmjs.com/package/@​polar-sh/sdk/v/0.7.0 - .

2024-09-05 00:24:10

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.390.5 (2.409.3) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.7.1] .

Releases

• [NPM v0.7.1] https://www.npmjs.com/package/@​polar-sh/sdk/v/0.7.1 - .

2024-09-13 00:24:28

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.396.6 (2.415.6) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.8.0] .

Releases

• [NPM v0.8.0] https://www.npmjs.com/package/@​polar-sh/sdk/v/0.8.0 - .

2024-09-16 00:26:12

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.396.9 (2.415.7) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.8.1] .

Releases

... (truncated)

Commits

• f35aa54 ## Typescript SDK Changes:
• 6351067 Merge pull request #176 from polarsource/chore/mit-license
• 084b97a Add missing MIT license metadata
• See full diff in compare view

Updates @radix-ui/react-alert-dialog from 1.1.20 to 1.1.23

Changelog

Sourced from @​radix-ui/react-alert-dialog's changelog.

1.1.23

• Reverted breaking changes that caused compatibility issues with React Server Components.
• Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-dialog@1.1.23, @radix-ui/react-primitive@2.1.10

1.1.22

• Updated dependencies: @radix-ui/react-dialog@1.1.22, @radix-ui/react-primitive@2.1.9

1.1.21

• Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
• Updated dep...

  Description has been truncated

  ---

  Summary by cubic

  Bumps 59 dependencies to current non‑major versions to pick up provider fixes/features and tooling updates. Notable changes: Google Imagen support is removed in @ai-sdk/google/@ai-sdk/gateway, OpenAI/Mistral tool‑call handling improves, and @polar-sh/sdk@0.49.0 introduces breaking response type changes.

  • Replace any remaining Imagen model references with supported models (e.g., gemini-3.7-flash) before deploy.
  • Update call sites for @polar-sh/sdk@0.49.0 where response shapes changed (checkouts, organizations, subscriptions, customer portal, files, events). Run a full typecheck to surface required edits.
  • If you override @composio/core provider methods executeToolCall or handleToolCalls, update signatures to accept session targets; error text is now preserved in { error } results.
  • Re‑verify AI tool‑calling flows (OpenAI Responses allowedTools/parallel calls, Mistral incremental tool streaming, Google tool call IDs). No code changes expected.
  • Smoke test UI primitives after Radix bumps (dialogs, popovers, selects) and verify build/dev with react@19.2.8 and vite@8.2.x. Check analytics/event capture after posthog-js/posthog-node updates.

  ^{Written for commit 0e9fc50. Summary will update on new commits.}

  

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
open-chat	Ignored		Aug 24, 2026 8:19am

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.