Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 4 updates#968

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/minor-and-patch-ca893cc41e
Open

chore(deps): bump the minor-and-patch group across 1 directory with 4 updates#968
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/minor-and-patch-ca893cc41e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 4 updates in the /backend directory: @agentclientprotocol/sdk, @electric-sql/pglite, @electric-sql/pglite-socket and @react-email/ui.

Updates @agentclientprotocol/sdk from 0.22.1 to 0.24.0

Release notes

Sourced from @​agentclientprotocol/sdk's releases.

v0.24.0

0.24.0 (2026-06-02)

Features

  • Add resilient schema deserialization (#167) (5864e73)
  • schema: Stabilize addl dirs and remove unstable model selectors (#165) (fa6e302)

v0.23.0

0.23.0 (2026-06-01)

Features

  • schema: Stabilize logout and update schema to v0.13.4 (#163) (cfd900a)
Changelog

Sourced from @​agentclientprotocol/sdk's changelog.

0.24.0 (2026-06-02)

Features

  • Add resilient schema deserialization (#167) (5864e73)
  • schema: Stabilize addl dirs and remove unstable model selectors (#165) (fa6e302)

0.23.0 (2026-06-01)

Features

  • schema: Stabilize logout and update schema to v0.13.4 (#163) (cfd900a)
Commits
  • 8966c11 chore(main): release 0.24.0 (#166)
  • 5864e73 feat: Add resilient schema deserialization (#167)
  • fa6e302 feat(schema): Stabilize addl dirs and remove unstable model selectors (#165)
  • 0c2e622 chore(main): release 0.23.0 (#164)
  • cfd900a feat(schema): Stabilize logout and update schema to v0.13.4 (#163)
  • 171a253 chore(deps-dev): bump concurrently from 9.2.1 to 10.0.0 (#162)
  • 0ecf001 chore(deps): bump the minor group with 19 updates (#161)
  • ca74103 chore(deps): bump crate-ci/typos from 1.46.2 to 1.47.0 (#160)
  • c6a9c94 chore(deps): bump crate-ci/typos from 1.46.1 to 1.46.2 (#158)
  • c7256e7 chore(deps): bump the minor group with 43 updates (#159)
  • See full diff in compare view

Updates @electric-sql/pglite from 0.4.6 to 0.5.1

Release notes

Sourced from @​electric-sql/pglite's releases.

@​electric-sql/pglite@​0.5.1

Patch Changes

  • 930e2d0: fix PGlite version; redeploy external extensions

@​electric-sql/pglite-prepopulatedfs@​0.5.1

Patch Changes

  • Updated dependencies [930e2d0]
    • @​electric-sql/pglite@​0.5.1

@​electric-sql/pglite@​0.5.0

Minor Changes

  • 93d50aa: Upgrade to Postgres 18.3; move other extensions to their own npm packages;

@​electric-sql/pglite-sync@​0.5.1

Patch Changes

  • Updated dependencies [37fb39e]
    • @​electric-sql/pglite@​0.4.1
Changelog

Sourced from @​electric-sql/pglite's changelog.

0.5.1

Patch Changes

  • 930e2d0: fix PGlite version; redeploy external extensions

0.5.0

Minor Changes

  • 93d50aa: Upgrade to Postgres 18.3; move other extensions to their own npm packages;
Commits

Updates @electric-sql/pglite-socket from 0.1.6 to 0.2.1

Release notes

Sourced from @​electric-sql/pglite-socket's releases.

@​electric-sql/pglite-socket@​0.2.1

Patch Changes

  • Updated dependencies [930e2d0]
    • @​electric-sql/pglite@​0.5.1
    • @​electric-sql/pglite-age@​0.0.2
    • @​electric-sql/pglite-pg_hashids@0.0.2
    • @​electric-sql/pglite-pg_ivm@0.0.2
    • @​electric-sql/pglite-pg_textsearch@0.0.2
    • @​electric-sql/pglite-pg_uuidv7@0.0.2
    • @​electric-sql/pglite-pgtap@​0.0.2
    • @​electric-sql/pglite-pgvector@​0.0.2
Changelog

Sourced from @​electric-sql/pglite-socket's changelog.

0.2.1

Patch Changes

  • Updated dependencies [930e2d0]
    • @​electric-sql/pglite@​0.5.1
    • @​electric-sql/pglite-age@​0.0.2
    • @​electric-sql/pglite-pg_hashids@0.0.2
    • @​electric-sql/pglite-pg_ivm@0.0.2
    • @​electric-sql/pglite-pg_textsearch@0.0.2
    • @​electric-sql/pglite-pg_uuidv7@0.0.2
    • @​electric-sql/pglite-pgtap@​0.0.2
    • @​electric-sql/pglite-pgvector@​0.0.2

0.2.0

Minor Changes

  • 93d50aa: Upgrade to Postgres 18.3; move other extensions to their own npm packages;
  • Updated dependencies [93d50aa]
  • Updated dependencies [93d50aa]
    • @​electric-sql/pglite@​0.5.0
    • @​electric-sql/pglite-age@​0.0.1
    • @​electric-sql/pglite-pg_hashids@0.0.1
    • @​electric-sql/pglite-pg_ivm@0.0.1
    • @​electric-sql/pglite-pg_textsearch@0.0.1
    • @​electric-sql/pglite-pg_uuidv7@0.0.1
    • @​electric-sql/pglite-pgtap@​0.0.1
    • @​electric-sql/pglite-pgvector@​0.0.1
Commits

Updates @react-email/ui from 6.1.5 to 6.5.0

Release notes

Sourced from @​react-email/ui's releases.

@​react-email/ui@​6.5.0

Minor Changes

  • 3875d2a: add a --clients option to email dev and a COMPATIBILITY_EMAIL_CLIENTS environment variable to narrow which email clients trigger compatibility warnings. By default the preview still warns for gmail, apple-mail, outlook, and yahoo. Teams that only target one or two clients can now skip the noise: email dev --clients outlook,apple-mail. The CLI flag wins over the env var; an empty or fully-invalid list falls back to the defaults so warnings can't be silently switched off. Builds on #2797 by @​ReemX.

@​react-email/ui@​6.4.0

No release notes provided.

@​react-email/ui@​6.3.3

Patch Changes

  • 86745ec: reject paths that resolve outside the configured emails directory in renderEmailByPath and getEmailPathFromSlug to close a path-traversal vector in the preview server

@​react-email/ui@​6.3.2

No release notes provided.

@​react-email/ui@​6.3.1

Patch Changes

  • 27587f1: stop accepting the emails directory path as a server-action argument

    The getEmailsDirectoryMetadataAction server action used to take an absolute filesystem path from the client and walk that directory on the server, which allowed any caller of the endpoint to enumerate arbitrary directories on the host. The action now reads the path from the server-only REACT_EMAIL_INTERNAL_EMAILS_DIR_ABSOLUTE_PATH env variable and ignores client input.

@​react-email/ui@​6.3.0

Minor Changes

  • 99cadf3: support previewing HTML email templates

Patch Changes

  • fd140fc: quality of life improvements to the send email flow:
    • infer a proper title based on the file name
    • store preferred subject per email when modified
    • store recipient for testing in local storage as well

@​react-email/ui@​6.2.0

No release notes provided.

Changelog

Sourced from @​react-email/ui's changelog.

6.5.0

Minor Changes

  • 3875d2a: add a --clients option to email dev and a COMPATIBILITY_EMAIL_CLIENTS environment variable to narrow which email clients trigger compatibility warnings. By default the preview still warns for gmail, apple-mail, outlook, and yahoo. Teams that only target one or two clients can now skip the noise: email dev --clients outlook,apple-mail. The CLI flag wins over the env var; an empty or fully-invalid list falls back to the defaults so warnings can't be silently switched off. Builds on #2797 by @​ReemX.

6.4.0

6.3.3

Patch Changes

  • 86745ec: reject paths that resolve outside the configured emails directory in renderEmailByPath and getEmailPathFromSlug to close a path-traversal vector in the preview server

6.3.2

6.3.1

Patch Changes

  • 27587f1: stop accepting the emails directory path as a server-action argument

    The getEmailsDirectoryMetadataAction server action used to take an absolute filesystem path from the client and walk that directory on the server, which allowed any caller of the endpoint to enumerate arbitrary directories on the host. The action now reads the path from the server-only REACT_EMAIL_INTERNAL_EMAILS_DIR_ABSOLUTE_PATH env variable and ignores client input.

6.3.0

Minor Changes

  • 99cadf3: support previewing HTML email templates

Patch Changes

  • fd140fc: quality of life improvements to the send email flow:
    • infer a proper title based on the file name
    • store preferred subject per email when modified
    • store recipient for testing in local storage as well

6.2.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note

Medium Risk
PGlite 0.5 upgrades embedded Postgres for local DB workflows; ACP SDK schema changes may affect agent protocol behavior—verify tests and db:dev after lockfile install.

Overview
Bumps four backend dependency versions in package.json only (no application source changes).

@agentclientprotocol/sdk moves from ^0.22.1 to ^0.24.0, picking up stabilized schema pieces (e.g. logout, additional dirs) and more resilient schema deserialization.

@electric-sql/pglite (^0.4.4^0.5.1) and @electric-sql/pglite-socket (^0.1.4^0.2.1) align the in-process Postgres stack used for db:dev and PGlite-backed dev/tests with Postgres 18.3 and the split extension packaging in 0.5.x.

@react-email/ui (6.1.56.5.0) updates the email preview dev dependency behind email dev --dir src/emails, including upstream preview-server hardening and CLI options such as --clients for compatibility warnings.

Reviewed by Cursor Bugbot for commit 42f34af. Bugbot is set up for automated code reviews on this repo. Configure here.

… updates

Bumps the minor-and-patch group with 4 updates in the /backend directory: [@agentclientprotocol/sdk](https://github.com/agentclientprotocol/typescript-sdk), [@electric-sql/pglite](https://github.com/electric-sql/pglite/tree/HEAD/packages/pglite), [@electric-sql/pglite-socket](https://github.com/electric-sql/pglite/tree/HEAD/packages/pglite-socket) and [@react-email/ui](https://github.com/resend/react-email/tree/HEAD/packages/ui).


Updates `@agentclientprotocol/sdk` from 0.22.1 to 0.24.0
- [Release notes](https://github.com/agentclientprotocol/typescript-sdk/releases)
- [Changelog](https://github.com/agentclientprotocol/typescript-sdk/blob/main/CHANGELOG.md)
- [Commits](agentclientprotocol/typescript-sdk@v0.22.1...v0.24.0)

Updates `@electric-sql/pglite` from 0.4.6 to 0.5.1
- [Release notes](https://github.com/electric-sql/pglite/releases)
- [Changelog](https://github.com/electric-sql/pglite/blob/main/packages/pglite/CHANGELOG.md)
- [Commits](https://github.com/electric-sql/pglite/commits/@electric-sql/pglite@0.5.1/packages/pglite)

Updates `@electric-sql/pglite-socket` from 0.1.6 to 0.2.1
- [Release notes](https://github.com/electric-sql/pglite/releases)
- [Changelog](https://github.com/electric-sql/pglite/blob/main/packages/pglite-socket/CHANGELOG.md)
- [Commits](https://github.com/electric-sql/pglite/commits/@electric-sql/pglite-socket@0.2.1/packages/pglite-socket)

Updates `@react-email/ui` from 6.1.5 to 6.5.0
- [Release notes](https://github.com/resend/react-email/releases)
- [Changelog](https://github.com/resend/react-email/blob/canary/packages/ui/CHANGELOG.md)
- [Commits](https://github.com/resend/react-email/commits/@react-email/ui@6.5.0/packages/ui)

---
updated-dependencies:
- dependency-name: "@agentclientprotocol/sdk"
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@electric-sql/pglite"
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@electric-sql/pglite-socket"
  dependency-version: 0.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@react-email/ui"
  dependency-version: 6.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 10, 2026
@github-actions

Copy link
Copy Markdown

PR Metrics

Metric Value
Lines changed (prod code) +4 / -4
JS bundle size (gzipped) 🟢 732.1 KB → 731.9 KB (-187 B, -0.0%)
Test coverage 🟢 77.17% → 77.17% (+0.0%)
Performance (preview) Preview not ready — Render deploy may have timed out
Accessibility
Best Practices
SEO

Updated Wed, 10 Jun 2026 19:40:54 GMT · run #1840

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants