chore(deps): update all non-major dependencies

[github-actions]

This PR contains the following updates:

Package Updates Summary

Type	Count
📦 NPM Packages	41
🔧 System Dependencies	4
Total	45

📦 npm Dependencies

41 packages will be updated

Package	Change	Age	Adoption	Passing	Confidence
@anthropic-ai/claude-agent-sdk (source)	0.2.141 -> 0.3.269
@stripe/stripe-js (source)	9.10.0 -> 9.16.0
@vscode/vsce (source)	3.7.2-12 -> 3.9.2
cz-git (source)	1.13.1 -> 1.14.0
meilisearch (source)	0.59.0 -> 0.62.0
stripe (source)	22.3.2 -> 22.6.2
@iconify-json/hugeicons	1.2.27 -> 1.2.34
@loghq/stacks (source)	0.2.3 -> 0.2.6
@stacksjs/bumpx (source)	0.2.6 -> 0.2.17
@stacksjs/bunpress (source)	0.2.8 -> 0.2.14
@stacksjs/clapp (source)	0.2.12 -> 0.2.16
@stacksjs/components (source)	0.2.246 -> 0.2.286
@stacksjs/desktop (source)	0.2.197 -> 0.2.286
@stacksjs/httx (source)	0.1.10 -> 0.1.11
@stacksjs/logsmith (source)	0.2.3 -> 0.2.11
@stacksjs/mail (source)	0.3.6 -> 0.3.8
@stacksjs/sanitizer (source)	0.2.113 -> 0.2.286
@stacksjs/ts-auth (source)	0.4.4 -> 0.4.5
@stacksjs/ts-cache (source)	0.1.5 -> 0.1.7
@stacksjs/ts-css (source)	0.3.2 -> 0.3.6
@stacksjs/ts-faker (source)	0.1.7 -> 0.1.8
@stacksjs/ts-i18n (source)	0.1.9 -> 0.1.11
@stacksjs/ts-xml (source)	0.1.0 -> 0.1.2
@ts-audio/core (source)	0.1.1 -> 0.1.2
@ts-charts/format (source)	0.2.6 -> 0.2.7
@ts-charts/scale (source)	0.2.6 -> 0.2.7
@ts-charts/shape (source)	0.2.6 -> 0.2.7
better-dx (source)	0.2.24 -> 0.2.25
bun-query-builder (source)	0.2.68 -> 0.2.69
craft-native (source)	=0.0.72 -> 0.0.90
dynamodb-tooling (source)	0.3.2 -> 0.3.6
fastify (source)	5.12.3 -> 5.12.4
filesize (source)	11.0.22 -> 11.0.23
pickier (source)	0.1.58 -> 0.1.65
ts-broadcasting (source)	0.0.9 -> 0.0.10
ts-error-handling (source)	0.1.1 -> 0.1.3
ts-images (source)	0.2.11 -> 0.2.17
ts-pantry (source)	0.11.35 -> 0.11.60
ts-slug (source)	0.1.0 -> 0.1.2
ts-spreadsheets (source)	0.2.0 -> 0.2.5
ts-syntax-highlighter (source)	0.2.1 -> 0.2.17

🔧 System Dependencies

4 packages will be updated across 1 file(s): deps.yml

Package	Change	Type	File
git	^2.47.0 → ^2.53.0	🟡 minor	deps.yml
gnu.org/gettext	^0.21 → ^0.26	🟡 minor	deps.yml
sqlite	^3.47.2 → ^3.53.4	🟡 minor	deps.yml
zlib.net	^1.2.11 → ^1.3.2	🟡 minor	deps.yml

---

Release Notes

anthropics/claude-agent-sdk-typescript (@anthropic-ai/claude-agent-sdk)

0.2.141 -> 0.3.269

v0.3.269

Compare Source

What's changed

• Changed user_message_uuid, user_message_uuids and resume_reason to be stamped on a turn's first complete assistant message as well as its first stream event when partial messages are on
• Fixed result.permission_denials omitting Read, Edit and Write calls blocked by a path-scoped deny rule
• Fixed interrupts and permission responses being delayed while a host-started MCP server OAuth sign-in waited on a slow authorization server
• Fixed missing tool_use_id on task_started / task_notification when the CLI resumes a background subagent on its own; they now carry the agent's last call id
• Changed plan mode to route writes through canUseTool even when allowDangerouslySkipPermissions is set; the flag now only enables switching to bypassPermissions later
• Updated to parity with Claude Code v2.1.269

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.269
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.269
# or
pnpm add @anthropic-ai/cla...

*[View full release notes]*

*Released by [ashwin-ant](https://github.com/ashwin-ant) on 9/11/2026*

### [`v0.3.268`](https://github.com/anthropics/claude-agent-sdk-typescript/releases/tag/v0.3.268)

[Compare Source](https://github.com/anthropics/claude-agent-sdk-typescript/compare/v0.2.141...v0.3.269)

## What's changed

- Added `result_index` to result messages: the result's position in delivery order within the run, from 0
- Added `local_command` to the result message of a turn that ran a slash command without entering the model loop, carrying the command's name
- Added `hold_on_cache_impact` to the `reload_plugins` control request (`Query.reloadPlugins({ holdOnCacheImpact: true })`): holds a reload that would invalidate the session's prompt cache
- Added `resume_reason` to assistant, stream-event and result messages, set only on the automatic re-run of a turn a host restart interrupted
- Added `kind` (used, free, buffer, deferred) to each category in the `get_context_usage` control response, matching the `/context` result's `context_usage` rows
- Added optional `defaultToNo` and `suppressAlwaysAllowRule` hints to `canUseTool` options: the prompt should open on its decline option, or offer no persistent "always allow" choice
- Changed `setModel()` to confirm a model id the CLI does...

*[View full release notes]*

*Released by [ashwin-ant](https://github.com/ashwin-ant) on 9/10/2026*

### [`v0.3.267`](https://github.com/anthropics/claude-agent-sdk-typescript/releases/tag/v0.3.267)

[Compare Source](https://github.com/anthropics/claude-agent-sdk-typescript/compare/v0.2.141...v0.3.269)

## What's changed

- Added `getCcrEvent(query, message)` and `getSseLastSequenceNum(query)` to the browser SDK's SSE transport, plus `fromSequenceNum`, `onCatchUpTruncated` and `onDeliveryUpdate` SSE options
- Changed `systemPrompt` recording to default on for custom prompts and appends (a mid-session prompt change takes effect at the next compaction); pass `snapshot: false` to keep per-request rendering
- Updated to parity with Claude Code v2.1.267

## Update

```sh
npm install @anthropic-ai/claude-agent-sdk@0.3.267
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.267
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.267
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.267

Released by ashwin-ant on 9/9/2026

stripe/stripe-js (@stripe/stripe-js)

9.10.0 -> 9.16.0

v9.16.0

Compare Source

• Add Link Signup Element types (#969)
• Add Custom Checkout tiered and package pricing types (#966)

New features

Fixes

Changed

Released by cbala-stripe on 9/9/2026

v9.15.0

Compare Source

New features

• Add types for stripe.createConfirmationToken params.metadata (#963)
• Add buttonBoxShadow appearance variable type (#964)

Released by alaycock-stripe on 8/31/2026

v9.14.0

Compare Source

• CPM in ECE - Update API types (#959)
• Add types for new walletOptions top-level parameter for PE create/update (#952)
• Add deprecation tag to onShippingDetailsChange for Embedded Checkout (#960)
• Bump js-yaml from 3.15.0 to 3.15.1 (#958)

New features

Fixes

Changed

Released by cbala-stripe on 8/20/2026

Microsoft/vsce (@vscode/vsce)

3.7.2-12 -> 3.9.2

v3.9.2

Compare Source

Changes:

• #1283: fix: skip APIScan
• #1282: chore: bump CI to Node 22 and fix build
• #1279: Bump the uuid test fixture version to 100.0.0
• #1278: Bump tmp from 0.2.4 to 0.2.6
• #1277: Bump qs from 6.14.2 to 6.15.2
• #1276: Bump uuid and azure/msal-node
• #1274: Run npm audit fix
• #1272: Bump fast-uri from 3.0.6 to 3.1.2
• #1267: Bump minimatch from 10.2.2 to 10.2.3
• #1247: Update minimatch dependency to v10

This list of changes was auto generated.

Released by joaomoreno on 6/3/2026

v3.9.2-4

Compare Source

Changes:

• #1283: fix: skip APIScan
• #1282: chore: bump CI to Node 22 and fix build
• #1279: Bump the uuid test fixture version to 100.0.0
• #1278: Bump tmp from 0.2.4 to 0.2.6
• #1277: Bump qs from 6.14.2 to 6.15.2
• #1276: Bump uuid and azure/msal-node

This list of changes was auto generated.

Released by joaomoreno on 6/3/2026

v3.9.2-3

Compare Source

Changes:

• #1274: Run npm audit fix

This list of changes was auto generated.

Released by joaomoreno on 5/14/2026

Zhengqbbb/cz-git (cz-git)

1.13.1 -> 1.14.0

v1.14.0

Compare Source

Please refer to CHANGELOG.md for details.

Released by github-actions[bot] on 8/22/2026

v1.13.2

Compare Source

Please refer to CHANGELOG.md for details.

Released by github-actions[bot] on 8/11/2026

meilisearch/meilisearch-js (meilisearch)

0.59.0 -> 0.62.0

v0.62.0

Compare Source

🚀 Enhancements

• Add index size fields to stats responses (#2221) Haruka-Kaya
• Add get and delete methods for individual chat workspaces (#2226) guillaume-flambard, Strift

🐛 Bug Fixes

• Fix tenant token generation for non-ASCII search rules (#2230) soroush5, Strift

🔒 Security

• Redact Authorization header in request timeout error cause (#2229) soroush5, Strift

⚙️ Maintenance/misc

• Use meili bot PAT for bump workflow pushes (#2225) Strift, cursoragent
• Test request timeout abort deterministically with a mocked fetch (#2227) guillaume-flambard, Strift
• build(deps): bump js-yaml from 4.3.0 to 4.3.1 ...

[View full release notes]

Released by meili-bot on 9/9/2026

v0.61.0

Compare Source

🚀 Enhancements

• Add compact() method for index compaction (#2133) mixelburg
• Add filter condition to Dynamic Search Rules (#2212) Strift, cursoragent

⚙️ Maintenance/misc

• Bump Meilisearch to v1.51 (#2213) github-merge-queue

Thanks again to mixelburg, Strift, cursoragent and github-merge-queue! 🎉

Released by meili-bot on 8/11/2026

v0.60.0

Compare Source

🚀 Enhancements

• Update dynamic search rules for Meilisearch v1.50 (#2209) Strift

⚙️ Maintenance/misc

• build(deps): bump brace-expansion from 1.1.15 to 1.1.16 (#2207) dependabot[bot]
• build(deps-dev): bump typedoc from 0.28.18 to 0.28.20 (#2182) dependabot[bot]

Thanks again to Strift and dependabot[bot]! 🎉

Released by meili-bot on 7/22/2026

stripe/stripe-node (stripe)

22.3.2 -> 22.6.2

v22.6.2

Compare Source

• #2841 Validate that webhook secrets are non-empty

See the changelog for more details.

Released by xavdid on 9/9/2026

v22.6.1

Compare Source

• #2831 Use cryptographically secure boundaries for multipart file uploads
• #2836 update OtherString docstring
• #2835 Fix request coercion for GET and DELETE parameters
  • Fixes serialization of schema-coerced values, including Decimal, in GET and DELETE query parameters.
• #2829 Harden API requestor code against malicious URLs

See the changelog for more details.

Released by zacchua-stripe on 9/1/2026

v22.6.0

Compare Source

This release changes the pinned API version to 2026-08-26.dahlia.

• #2801 Add discriminatedUnion kind to V2RuntimeSchema coercion

  • Adds runtime support for coercing int64/decimal fields within discriminated union variants in V2 API requests and responses.
  • ⚠️ Throws when serializing a discriminated union parameter whose discriminator is missing or is not a string. This avoids skipping coercion entirely which could silently truncate int64 fields above Number.MAX_SAFE_INTEGER.

• #2818 Add new EventNotificationHandler class for better thin event management

  • We've been putting a lot of time into rethinking the event handling experience in the SDKs. This new class is the culmination of that effort.
  • They're designed for a tight coupling with both StripeClient and the fully-typed nature of [thin events](https://docs.stripe.com/event-desti...

[View full release notes]

Released by xavdid on 8/27/2026

@iconify-json/hugeicons

1.2.27 -> 1.2.34

Huge Icons icon set in Iconify JSON format

📦 View on npm

loghqorg/loghq-stacks (@loghq/stacks)

0.2.3 -> 0.2.6

v0.2.6

Compare Source

Released by github-actions[bot] on 9/1/2026

v0.2.5

Compare Source

Released by github-actions[bot] on 8/31/2026

v0.2.4

Compare Source

Released by github-actions[bot] on 8/31/2026

stacksjs/bumpx (@stacksjs/bumpx)

0.2.6 -> 0.2.17

v0.2.17

Compare Source

Released by github-actions[bot] on 8/19/2026

v0.2.16

Compare Source

Released by github-actions[bot] on 8/7/2026

v0.2.15

Compare Source

Released by github-actions[bot] on 8/6/2026

stacksjs/bunpress (@stacksjs/bunpress)

0.2.8 -> 0.2.14

v0.2.14

Compare Source

Released by github-actions[bot] on 8/25/2026

v0.2.13

Compare Source

Released by github-actions[bot] on 8/19/2026

v0.2.12

Compare Source

Released by github-actions[bot] on 8/19/2026

---

Note: This PR body was truncated due to GitHub's character limit. View the full details in the individual commits.

This PR was generated by Buddy 🤖

[what-the-diff]

PR Summary

• Upgraded SQLite Version
  We have updated the version of SQLite (our database package) in deps.yml file for better stability and performance.

• Refined Dependencies in Numerous Packages
  We've altered numerous packages for improved compatibility and efficiency, like @stacksjs/config, @stacksjs/dns, @stacksjs/validation, @stacksjs/bumpx, @stacksjs/logsmith, @anthropic-ai/claude-agent-sdk, ts-pantry, @stacksjs/stx, and @stripe/stripe-js.

• Advanced devDependencies Across Packages
  We've upgraded several development dependencies across different packages. This helps our developers with their tasks and unifies them to use the same workspace:*0.70.229 version of dependencies.

• Updated better-dx Version Across Multiple Packages
  We made sure that better-dx, a package that improves developer experience, is updated across various packages.

• Fixed Latest Library Versions in Package.json Files
  We refreshed the versions of certain libraries like meilisearch, dotenv, bun-query-builder in package.json files which dictates the version of dependencies our project needs to run.

• Overall Improvement
  Taken together, this pull request is a significant step forward, focusing primarily on package version updates. This contributes to a more robust, efficient, and high performance codebase.