Skip to content

chore(deps): bump the server-deps group in /server/src/home-mind-server with 3 updates - #56

Merged
hoornet merged 1 commit into
masterfrom
dependabot/npm_and_yarn/server/src/home-mind-server/server-deps-7cd7a83508
Aug 7, 2026
Merged

chore(deps): bump the server-deps group in /server/src/home-mind-server with 3 updates#56
hoornet merged 1 commit into
masterfrom
dependabot/npm_and_yarn/server/src/home-mind-server/server-deps-7cd7a83508

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the server-deps group in /server/src/home-mind-server with 3 updates: openai, undici and tsx.

Updates openai from 7.3.0 to 7.4.0

Release notes

Sourced from openai's releases.

v7.4.0

7.4.0 (2026-08-03)

Features

  • api: Add gpt-5.5 model and tool metadata fields (#2049) (6d8fb53)

Bug Fixes

Documentation

Build System

  • deps-dev: bump @​smithy/hash-node from 4.3.5 to 4.4.15 (#2064) (481b325)
  • deps-dev: bump @​types/web from 0.0.194 to 0.0.354 (#2061) (f61f267)
  • deps-dev: bump publint from 0.2.12 to 0.3.22 (#2058) (823d7df)
  • deps: bump dotenv from 16.6.1 to 17.4.2 (#2065) (3576574)
  • deps: bump fast-uri from 3.1.4 to 3.1.5 in /ecosystem-tests/vercel-edge (#2050) (590982f)
  • deps: bump ip-address from 10.2.0 to 10.4.0 in /ecosystem-tests/vercel-edge (#2056) (4d927de)
  • migrate release workflow to upstream release-please (#2048) (d41c272)
Changelog

Sourced from openai's changelog.

7.4.0 (2026-08-03)

Features

  • api: Add gpt-5.5 model and tool metadata fields (#2049) (6d8fb53)

Bug Fixes

Documentation

Build System

  • deps-dev: bump @​smithy/hash-node from 4.3.5 to 4.4.15 (#2064) (481b325)
  • deps-dev: bump @​types/web from 0.0.194 to 0.0.354 (#2061) (f61f267)
  • deps-dev: bump publint from 0.2.12 to 0.3.22 (#2058) (823d7df)
  • deps: bump dotenv from 16.6.1 to 17.4.2 (#2065) (3576574)
  • deps: bump fast-uri from 3.1.4 to 3.1.5 in /ecosystem-tests/vercel-edge (#2050) (590982f)
  • deps: bump ip-address from 10.2.0 to 10.4.0 in /ecosystem-tests/vercel-edge (#2056) (4d927de)
  • migrate release workflow to upstream release-please (#2048) (d41c272)
Commits
  • 83c437f release: 7.4.0 (#2055)
  • a97cbff ci: prepare checks for merge queue (#2066)
  • 481b325 build(deps-dev): bump @​smithy/hash-node from 4.3.5 to 4.4.15 (#2064)
  • 3576574 build(deps): bump dotenv from 16.6.1 to 17.4.2 (#2065)
  • 823d7df build(deps-dev): bump publint from 0.2.12 to 0.3.22 (#2058)
  • f61f267 build(deps-dev): bump @​types/web from 0.0.194 to 0.0.354 (#2061)
  • 85ea6b2 [dependabot] Configure a seven-day npm cooldown (#2054)
  • 4d927de build(deps): bump ip-address from 10.2.0 to 10.4.0 in /ecosystem-tests/vercel...
  • 590982f build(deps): bump fast-uri from 3.1.4 to 3.1.5 in /ecosystem-tests/vercel-edg...
  • 6d8fb53 feat(api): Add gpt-5.5 model and tool metadata fields (#2049)
  • Additional commits viewable in compare view

Updates undici from 8.9.0 to 8.10.0

Release notes

Sourced from undici's releases.

v8.10.0

What's Changed

New Contributors

Full Changelog: nodejs/undici@v8.9.0...v8.10.0

Commits
  • c8d80e6 Bumped v8.10.0 (#5644)
  • 66923b4 fix: preserve DNS origin hostname on sockets (#5577)
  • 3926499 fix: retry refused HTTP/2 streams (#5598)
  • 73d6e9e fix(h2): detach upgrade close handler after GOAWAY (#5641)
  • b111adb fix(mock): emit request body lifecycle hooks (#5367)
  • ae4a3e3 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#5636)
  • ec3fbf1 build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 (#5634)
  • 2151720 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#5633)
  • b96a116 fix(interceptors): allow interceptors without opts.origin (#5628)
  • a18ef2d fix(mock): non-string path matchers under ignoreTrailingSlash, and DataView r...
  • Additional commits viewable in compare view

Updates tsx from 4.23.1 to 4.23.5

Release notes

Sourced from tsx's releases.

v4.23.5

4.23.5 (2026-08-02)

Bug Fixes

  • detect the Node inspector enabled via NODE_OPTIONS (3c1d051)

This release is also available on:

v4.23.4

4.23.4 (2026-08-02)

Bug Fixes

  • cli: allow async process.once() signal handlers to finish (#827) (2afc7bb)

This release is also available on:

v4.23.3

4.23.3 (2026-08-02)

Bug Fixes

  • preserve listenerCount overload semantics (#823) (b6574d4)

This release is also available on:

v4.23.2

4.23.2 (2026-08-02)

Bug Fixes

  • watch: exit with 128 + signal number when interrupted (#820) (0b00bc8)

This release is also available on:

Commits
  • c55004d test: remove legacy PTY retry
  • e368161 chore(deps): update pty-spawn to 1.1.1
  • 8d39496 ci: validate GitHub Actions workflows
  • 6fe724e test: clean up timed-out PTY attempts
  • e0a0536 ci: skip unused Windows Node cache
  • 6d6dd84 ci: remove broken lock automation
  • 3c1d051 fix: detect the Node inspector enabled via NODE_OPTIONS
  • 40380a4 ci: lock down the release toolchain
  • f217b6b ci: restrict releases to public repository
  • 2afc7bb fix(cli): allow async process.once() signal handlers to finish (#827)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the server-deps group in /server/src/home-mind-server with 3 updates: [openai](https://github.com/openai/openai-node), [undici](https://github.com/nodejs/undici) and [tsx](https://github.com/privatenumber/tsx).


Updates `openai` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.3.0...v7.4.0)

Updates `undici` from 8.9.0 to 8.10.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.9.0...v8.10.0)

Updates `tsx` from 4.23.1 to 4.23.5
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.1...v4.23.5)

---
updated-dependencies:
- dependency-name: openai
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-deps
- dependency-name: undici
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-deps
- dependency-name: tsx
  dependency-version: 4.23.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: server-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2026
@hoornet
hoornet merged commit 4f6dc58 into master Aug 7, 2026
3 checks passed
@hoornet
hoornet deleted the dependabot/npm_and_yarn/server/src/home-mind-server/server-deps-7cd7a83508 branch August 7, 2026 17:07
hoornet added a commit that referenced this pull request Aug 7, 2026
PRs #55 and #56 landed on master without a version bump, which is a no-op for
users: the store compares nives/config.yaml, so the updates would never be
offered, and the GHCR 2.4.19 tag would quietly get rebuilt with different
contents than its changelog describes. Same shape as the 2.1.14 no-op.

Contents: docker/login-action 4.5.2 -> 4.6.0 (CI only), openai 7.3.0 -> 7.4.0,
undici 8.9.0 -> 8.10.0, tsx -> 4.23.5. All minors inside majors already
verified in this repo. typecheck clean, 337 tests green, npm audit 0.

#57 (better-sqlite3 12.11.1 -> 13.0.2) closed, not merged. Upstream published
v13.0.2 with ZERO prebuilt binaries (v12.11.1 has 138), so npm ci falls back to
compiling from source and the builder stage has no Python or C++ toolchain -
both arch builds failed on `gyp ERR! Could not find any Python installation`.
Closed rather than ignored, so Dependabot re-offers 13.0.3+ if prebuilds return.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant