build(deps): Bump the npm_and_yarn group across 1 directory with 4 updates by dependabot[bot] · Pull Request #8890 · thirdweb-dev/js

dependabot · 2026-08-13T19:28:15Z

Bumps the npm_and_yarn group with 3 updates in the / directory: @hey-api/openapi-ts, vitest and vite.

Updates @hey-api/openapi-ts from 0.76.0 to 0.97.3

Release notes

Sourced from @hey-api/openapi-ts's releases.

@hey-api/openapi-ts@0.95.0

Minor Changes

plugin(valibot): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Valibot plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "valibot",
    },
    {
      name: "valibot",
      requests: {
        shouldExtract: true,
      },
    },
  ],
};
internal: remove plugin.getSymbol() function (#3671) (96f60ad) by @mrlubos

Removed plugin.getSymbol() function

This function has been removed. You can use plugin.querySymbol() instead. It accepts the same arguments and returns the same result.

plugin(zod): remove request data schema (#3671) (96f60ad) by @mrlubos

Validator request schemas

Zod plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:
export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "zod",
</tr></table> 

... (truncated)

Changelog

Sourced from @hey-api/openapi-ts's changelog.

0.97.3

Patch Changes

plugin(@hey-api/client-axios): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ofetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/svelte-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/angular-query-experimental): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@tanstack/react-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-fetch): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/react-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-ky): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/solid-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-next): fix: correct return type in SSE (#3919) (a19b3a4) by @kitlangton

plugin(@tanstack/preact-query): add useGetQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(@hey-api/client-angular): fix: correct return type in SSE (#3919) (58962a0) by @kitlangton

plugin(@hey-api/transformers): add support for Temporal API via temporal-polyfill in dates (#3916) (bfa457a) by @OptoCloud

plugin(@tanstack/vue-query): add getQueryData option (#3827) (1aa4785) by @inas-sirhan

plugin(zod): fix: avoid invalid .extend() on z.record() when a discriminated union member is an empty object (#3915) (8fa9f3a) by @pullfrog

Updated Dependencies:

@hey-api/shared@0.4.5

@hey-api/codegen-core@0.8.2

0.97.2

Patch Changes

plugin(zod): use enums from TypeScript if available (#3884) (abc8ceb) by @mrlubos

plugin(@hey-api/client-next): fix: preserve query auth when when there are no other query parameters (#3853) (a6ee7eb) by @copilot-swe-agent

plugin(@hey-api/sdk): support valibot as response transformer (#3847) (6770f78) by @SukkaW

... (truncated)

Commits

d833f73 ci: release
4987bc3 docs: add changesets
30498ce Merge branch 'main' of https://github.com/hey-api/openapi-ts into feat/tansta...
9be7e7f chore: one more try
4c5916d chore: one more try
83b4464 chore: one more try
597e151 Merge branch 'main' into pullfrog/3914-zod-discriminated-union-empty-object
462c2e9 Merge branch 'main' into feat/transformers-temporal
3367e64 Merge branch 'main' into fix/sse-iterator-treturn-miswiring
e6d4416 refactor: valibot plugin
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @hey-api/openapi-ts since your current version.

Updates vitest from 3.2.4 to 3.2.6

Release notes

Sourced from vitest's releases.

v3.2.6

   🐞 Bug Fixes

Pin last supported vite-node version - by @sheremet-va (16f12)

    View changes on GitHub

v3.2.5

   🚀 Features

api: Add allowWrite and allowExec options to api [backport to v3] - by @hi-ogawa and Codex in vitest-dev/vitest#10445 (af88b)

   🐞 Bug Fixes

browser: Disable client cdp API when allowWrite/allowExec: false [backport to v3] - by @hi-ogawa and Codex in vitest-dev/vitest#10456 (385a1)

    View changes on GitHub

Commits

b6d56f8 chore: release v3.2.6
16f120d fix: pin last supported vite-node version
2cbad0a chore: release v3.2.5
385a1ae fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
af88b1f feat(api): add allowWrite and allowExec options to api [backport to v3]...
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.

Updates vite from 7.1.7 to 7.3.5

Release notes

Sourced from vite's releases.

v7.3.5

Please refer to CHANGELOG.md for details.

v7.3.3

Please refer to CHANGELOG.md for details.

v7.3.2

Please refer to CHANGELOG.md for details.

v7.3.1

Please refer to CHANGELOG.md for details.

v7.3.0

Please refer to CHANGELOG.md for details.

v7.2.7

Please refer to CHANGELOG.md for details.

v7.2.6

Please refer to CHANGELOG.md for details.

v7.2.5

Please refer to CHANGELOG.md for details.

Note: 7.2.5 failed to publish so it is skipped on npm

v7.2.4

Please refer to CHANGELOG.md for details.

v7.2.3

Please refer to CHANGELOG.md for details.

v7.2.2

Please refer to CHANGELOG.md for details.

v7.2.1

Please refer to CHANGELOG.md for details.

v7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0-beta.1

Please refer to CHANGELOG.md for details.

v7.2.0-beta.0

Please refer to CHANGELOG.md for details.

v7.1.12

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.3.5 (2026-06-01)

Bug Fixes

backport #22572, reject windows alternate paths (#22574) (8c18556)

deps: backport #22571, reject UNC paths for launch-editor-middleware (#22573) (f20d64b)

Miscellaneous Chores

skip v7.3.4 release (8a6a0c9)

7.3.4 (2026-06-01)

Bug Fixes

backport #22572, reject windows alternate paths (#22574) (8c18556)

deps: backport #22571, reject UNC paths for launch-editor-middleware (#22573) (f20d64b)

7.3.3 (2026-05-07)

Bug Fixes

avoid destructure lowering for newer safari (#22346) (5ab51c0)

7.3.2 (2026-04-06)

Bug Fixes

avoid path traversal with optimize deps sourcemap handler (#22161) (09d8c90)

backport #22159, apply server.fs check to env transport (#22162) (19db0f2)

check server.fs after stripping query as well (#22160) (f8103cc)

7.3.1 (2026-01-07)

Features

add ignoreOutdatedRequests option to optimizeDeps (#21364) (9d39d37)

7.3.0 (2025-12-15)

Features

deps: update esbuild from ^0.25.0 to ^0.27.0 (#21183) (cff26ec)

7.2.7 (2025-12-08)

Bug Fixes

plugin shortcut support (#21211) (721f163)

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

config: handle shebang properly (#21158) (df5a30d)

deps: update all non-major dependencies (#21146) (a3cd262)

deps: update all non-major dependencies (#21175) (72e398a)

... (truncated)

Commits

077945c release: v7.3.5
8a6a0c9 chore: skip v7.3.4 release
8c18556 fix: backport #22572, reject windows alternate paths (#22574)
f20d64b fix(deps): backport #22571, reject UNC paths for launch-editor-middleware (#2...
ca31424 release: v7.3.3
5ab51c0 fix: avoid destructure lowering for newer safari (#22346)
cc383e0 release: v7.3.2
09d8c90 fix: avoid path traversal with optimize deps sourcemap handler (#22161)
f8103cc fix: check server.fs after stripping query as well (#22160)
19db0f2 fix: backport #22159, apply server.fs check to env transport (#22162)
Additional commits viewable in compare view

Updates js-yaml from 3.14.1 to 3.15.1

Changelog

Sourced from js-yaml's changelog.

3.15.1 - 2026-07-31

Security

[backport] Remove quadratic complexity from !!omap duplicate key detection.

3.15.0 - 2026-06-27

Added

Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one safeLoad() / safeLoadAll() call.

[3.14.2] - 2025-11-15

Security

Fix prototype pollution in merge (<<).

Commits

ab85ae2 3.15.1 released
30a5e76 dist rebuild
22a8071 Backport quadratic complexity fix for !!omap
c34b6c4 3.15.0 released
21e13d3 dist rebuild
4165c62 Add v3-legacy tag for publish
d8ff750 Add package lock
24f13e7 Added maxTotalMergeKeys (10000) loader option (v5 backport)
9963d36 3.14.2 released
10d3c8e dist rebuild
Additional commits viewable in compare view

changeset-bot · 2026-08-13T19:28:24Z

⚠️ No Changeset found

Latest commit: 912e38c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

vercel · 2026-08-13T19:28:25Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs-v2	Error		Aug 13, 2026 7:48pm
nebula	Ready	Preview	Aug 13, 2026 7:48pm
thirdweb_playground	Error		Aug 13, 2026 7:48pm
thirdweb-www	Error		Aug 13, 2026 7:48pm
wallet-ui	Ready	Preview	Aug 13, 2026 7:48pm

socket-security · 2026-08-13T19:30:51Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vitest@3.2.4 ⏵ 3.2.6	⁺¹	⁺⁷⁵	⁺¹
	@hey-api/openapi-ts@0.97.3

View full report

…dates Bumps the npm_and_yarn group with 3 updates in the / directory: [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts), [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `@hey-api/openapi-ts` from 0.76.0 to 0.97.3 - [Release notes](https://github.com/hey-api/hey-api/releases) - [Changelog](https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md) - [Commits](https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.97.3/packages/openapi-ts) Updates `vitest` from 3.2.4 to 3.2.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest) Updates `vite` from 7.1.7 to 7.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite) Updates `js-yaml` from 3.14.1 to 3.15.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.1/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.15.1) --- updated-dependencies: - dependency-name: "@hey-api/openapi-ts" dependency-version: 0.97.3 dependency-type: direct:development - dependency-name: js-yaml dependency-version: 3.15.1 dependency-type: indirect - dependency-name: vite dependency-version: 7.3.5 dependency-type: direct:development - dependency-name: vitest dependency-version: 3.2.6 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-13T19:44:08Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 13, 2026

dependabot Bot requested review from a team as code owners August 13, 2026 19:28

dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 13, 2026

vercel Bot had a problem deploying to Preview – docs-v2 August 13, 2026 19:31 Failure

vercel Bot deployed to Preview – wallet-ui August 13, 2026 19:32 View deployment

vercel Bot deployed to Preview – nebula August 13, 2026 19:34 View deployment

vercel Bot had a problem deploying to Preview – thirdweb_playground August 13, 2026 19:35 Failure

vercel Bot had a problem deploying to Preview – thirdweb-www August 13, 2026 19:36 Failure

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-db26526a83 branch from d5a3bfe to 912e38c Compare August 13, 2026 19:42

0xFirekeeper closed this Aug 13, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm_and_yarn-db26526a83 branch August 13, 2026 19:44

vercel Bot had a problem deploying to Preview – docs-v2 August 13, 2026 19:44 Failure

vercel Bot deployed to Preview – wallet-ui August 13, 2026 19:45 View deployment

vercel Bot deployed to Preview – nebula August 13, 2026 19:45 View deployment

vercel Bot had a problem deploying to Preview – thirdweb_playground August 13, 2026 19:47 Failure

vercel Bot had a problem deploying to Preview – thirdweb-www August 13, 2026 19:48 Failure

Navigation Menu

Uh oh!

build(deps): Bump the npm_and_yarn group across 1 directory with 4 updates - #8890

build(deps): Bump the npm_and_yarn group across 1 directory with 4 updates#8890
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-db26526a83

dependabot Bot commented on behalf of github Aug 13, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Aug 13, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Aug 13, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 13, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​hey-api/openapi-ts@​0.95.0

Minor Changes

Validator request schemas

Removed plugin.getSymbol() function

Validator request schemas

0.97.3

Patch Changes

Updated Dependencies:

0.97.2

Patch Changes

v3.2.6

🐞 Bug Fixes

View changes on GitHub

v3.2.5

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v7.3.5

v7.3.3

v7.3.2

v7.3.1

v7.3.0

v7.2.7

v7.2.6

v7.2.5

v7.2.4

v7.2.3

v7.2.2

v7.2.1

v7.2.0

v7.2.0-beta.1

v7.2.0-beta.0

v7.1.12

7.3.5 (2026-06-01)

Bug Fixes

Miscellaneous Chores

7.3.4 (2026-06-01)

Bug Fixes

7.3.3 (2026-05-07)

Bug Fixes

7.3.2 (2026-04-06)

Bug Fixes

7.3.1 (2026-01-07)

Features

7.3.0 (2025-12-15)

Features

7.2.7 (2025-12-08)

Bug Fixes

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

3.15.1 - 2026-07-31

Security

3.15.0 - 2026-06-27

Added

[3.14.2] - 2025-11-15

Security

Uh oh!

changeset-bot Bot commented Aug 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

vercel Bot commented Aug 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Aug 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Aug 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

dependabot Bot commented on behalf of github Aug 13, 2026 •

edited

Loading

`@hey-api/openapi-ts@0`.95.0

Removed `plugin.getSymbol()` function

changeset-bot Bot commented Aug 13, 2026 •

edited

Loading

vercel Bot commented Aug 13, 2026 •

edited

Loading

socket-security Bot commented Aug 13, 2026 •

edited

Loading