chore(deps): bump the examples-npm group across 1 directory with 6 updates

[dependabot]

Bumps the examples-npm group with 6 updates in the /examples directory:

Package	From	To
@ai-sdk/openai	4.0.91	4.0.95
@langchain/core	1.2.17	1.2.18
@langchain/langgraph	1.4.21	1.5.0
ai	7.0.137	7.0.142
openai	7.32.0	7.34.0
zod	4.6.6	4.6.7

Updates @ai-sdk/openai from 4.0.91 to 4.0.95

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.95

Patch Changes

• 130e871: Restore raw OpenAI custom-tool input deltas for consumers that forward them to Responses API clients. Mark streamed input with inputEncoding: 'text' so UI clients can display it progressively without JSON parsing. Preserve the encoding when partial UI messages are saved and resumed. Final provider tool-call inputs remain JSON-encoded.
• Updated dependencies [130e871]
  • @​ai-sdk/provider@​4.0.28
  • @​ai-sdk/provider-utils@​5.0.61

4.0.94

Patch Changes

• Updated dependencies [2e89fa4]
  • @​ai-sdk/provider-utils@​5.0.60

4.0.93

Patch Changes

• 216e2c9: fix(openai): send assistant text with content instead of an item reference when its reasoning was removed

  With reasoning models and store: true, pruning reasoning (e.g. pruneMessages({ reasoning: 'all' })) caused follow-up requests to fail with "Item 'msg_...' of type 'message' was provided without its required 'reasoning' item". Assistant text parts are now only sent as item references when they are preceded by reasoning in the same assistant message.

4.0.92

Patch Changes

• 6aedb07: fix(openai): replay web search results when response storage is disabled
• e57803c: Expose complete retrieved web-search URLs and file-search documents as sources, and normalize inline references separately as citations on text parts and text-end events. Preserve citation-derived sources when retrieval data is unavailable, including web-search-preview and Azure responses. Keep raw annotations, citation titles, and text locations available. Deduplicate file-search passages by file ID.
• 1f7e5ad: fix(openai): JSON-encode custom tool input deltas for progressive UI updates
• Updated dependencies [9667bf2]
• Updated dependencies [e57803c]
• Updated dependencies [81663cc]
  • @​ai-sdk/provider-utils@​5.0.59
  • @​ai-sdk/provider@​4.0.27

Commits

• 6e14ffa Version Packages (#23406)
• 130e871 fix(openai): preserve raw custom-tool deltas with explicit UI input encoding ...
• a56e320 Version Packages (#23314)
• 5dec614 Version Packages (#23122)
• 216e2c9 fix(openai): send assistant text with content when its reasoning was removed ...
• 543d42c Version Packages (#22437)
• 1f7e5ad fix(openai): json-encode custom tool input deltas for progressive UI updates ...
• e57803c fix: separate retrieved sources from normalized text citations (#21797)
• 6aedb07 fix: preserve web search context across stateless OpenAI Responses steps (#22...
• See full diff in compare view

Updates @langchain/core from 1.2.17 to 1.2.18

Release notes

Sourced from @​langchain/core's releases.

@​langchain/core@​1.2.18

Patch Changes

• #11956 93d62b0 Thanks @​hntrl! - Require langsmith >=0.11.0 to include the restored NullableHeaders type declarations.

• #11822 d3e6fe6 Thanks @​dqbd! - Add explicit agent address support to LangChainTracer, inherit project and address destinations together, and delegate default destination resolution to the LangSmith SDK.

• #11150 cea15cf Thanks @​mdnanocom! - fix(core): defer tool call chunk collapsing in AIMessageChunk to fix O(n²) streaming aggregation

  AIMessageChunk eagerly re-ran collapseToolCallChunks in its constructor on every streamed delta concat, re-parsing all accumulated tool args each time — O(n²) over a stream, which can block the event loop for seconds on long tool-call streams. Collapsing now runs lazily, once, on first read of tool_calls / invalid_tool_calls.

Commits

• ba363b1 chore: version packages (#11937)
• 93d62b0 fix: require langsmith with restored header declarations (#11956)
• 57d0e02 fix(google): support Argon thinking and preserve streaming usage (#11940)
• 73a739c feat(aws): map Bedrock thinking tokens to output_token_details.reasoning (#11...
• 227f01c feat(langchain): support HITL respond decisions (#11498)
• d3e6fe6 feat(core): add explicit address support to LangChainTracer (#11822)
• cea15cf fix(core): defer tool call chunk collapsing in AIMessageChunk to fix O(n²) st...
• 20c38bf fix: bump vulnerable transitive dependencies (#11920)
• b2c1134 chore: version packages (#11881)
• aa1b519 docs: fix typo in README (#11443)
• Additional commits viewable in compare view

Updates @langchain/langgraph from 1.4.21 to 1.5.0

Release notes

Sourced from @​langchain/langgraph's releases.

@​langchain/langgraph-api@​1.5.0

Minor Changes

• #2850 48245a8 Thanks @​casparb! - Pass a typed ServerRuntime as the second graph factory argument. Runs and resumes receive executionRuntime.context; assistant inspection and thread state operations receive executionRuntime: null. Existing config-only factories remain supported.

Patch Changes

• Updated dependencies []:
  • @​langchain/langgraph-ui@​1.5.0

@​langchain/langgraph-cli@​1.5.0

Patch Changes

• Updated dependencies [48245a8]:
  • @​langchain/langgraph-api@​1.5.0

@​langchain/langgraph-ui@​1.5.0

No changes in this release.

@​langchain/langgraph-checkpoint-mongodb@​1.5.0

Minor Changes

• #2961 1631fd8 Thanks @​soarez! - order parallel writes by task path, like langgraph (Python) — one sort key for live execution and every saver, instead of the task-id order #2544 added for DeltaChannel writes

  When two or more tasks in one superstep write the same DeltaChannel, their writes are now applied and replayed in (task_path, task_id, idx) order — the order Python's langgraph#8544 established — instead of task-id order. Task ids are uuid5 hashes that include the checkpoint id, so the old order permuted parallel writers from run to run and disagreed with Python.

  • BaseCheckpointSaver.putWrites takes an optional taskPath (the serialized task path, taskPathStr), and getTuple/list must return pendingWrites in the new writesSortKey order. writesSortKey and compareWritesSortKeys are new exports of @langchain/langgraph-checkpoint; every saver (memory, SQLite, Postgres, Redis incl. ShallowRedisSaver, MongoDB) stores the path and sorts in JS — no database collation is involved.
  • SQLite and Postgres gain a task_path column (migrated automatically on setup(); read-only pre-column SQLite databases keep reading, with their rows keeping the old order). Redis and MongoDB documents gain a task_path field. Rows written before the upgrade keep their old order.
  • Exit-durability resumes replay delta writes in live order (port of langgraph#9114): the resumed superstep's writes interleave with the loaded ones by task path, later supersteps sort after every real write, and writes loaded with the checkpoint are no longer stored twice.
  • bulkUpdateState seals the first update superstep: DeltaChannels touched by the base checkpoint's pending writes (and whose version moved) snapshot on the update checkpoint, so a finished sibling's writes and the update's can't replay in the wrong order (partial port of langgraph#8548).
  • bulkUpdateState/updateState update tasks carry (__interrupt__, i) task paths, as in langgraph#9128, so several updates in one superstep writing the same DeltaChannel replay in the order given.
  • Send task paths become [PUSH, i, false] and node-error-handler paths become [*failedTask.path[:3], "node_error_handler", false] (the failed task's first three path elements), matching Python's shapes — langgraph_path task metadata changes accordingly, and task ids of functional task() calls under a Send or handler task change with them. The SDK's Send-task detection accepts both the old and new shapes.

  Upgrade notes:

  • PostgresSaver: run setup() once after upgrading, from one process, before the new version serves traffic. The task_path column comes from the first new migration since the saver shipped, and until it runs, reads and writes fail with column "task_path" does not exist. Several processes running setup() at once on a database that still needs the migration can fail with a duplicate key error on checkpoint_migrations.
  • Third-party checkpoint savers remain source-compatible but must now persist the taskPath they are given and return pendingWrites in writesSortKey order; the conformance suite's new base tests enforce this. A saver that ignores the new argument replays in task-id order and can rebuild a different DeltaChannel value than the run produced.
  • An incomplete superstep containing stored delta writes that must interleave with resumed or retried task writes is affected by the upgrade, whether the incompleteness came from an interrupt, a task error, a crash, or a drain: finish such threads with the old runtime before upgrading writers. A single interrupted node with no finished delta-writing siblings is safe to resume. The same applies to resuming work that includes functional task() calls under a Send or error-handler task, whose child task ids change.
  • @langchain/langgraph-checkpoint 1.2.0 must be released before any package requiring its new exports; the consumers' minimum ranges are raised accordingly.

@​langchain/langgraph@​1.5.0

Minor Changes

• #2961 1631fd8 Thanks @​soarez! - order parallel writes by task path, like langgraph (Python) — one sort key for live execution and every saver, instead of the task-id order #2544 added for DeltaChannel writes

  When two or more tasks in one superstep write the same DeltaChannel, their writes are now applied and replayed in (task_path, task_id, idx) order — the order Python's langgraph#8544 established — instead of task-id order. Task ids are uuid5 hashes that include the checkpoint id, so the old order permuted parallel writers from run to run and disagreed with Python.

  • BaseCheckpointSaver.putWrites takes an optional taskPath (the serialized task path, taskPathStr), and getTuple/list must return pendingWrites in the new writesSortKey order. writesSortKey and compareWritesSortKeys are new exports of @langchain/langgraph-checkpoint; every saver (memory, SQLite, Postgres, Redis incl. ShallowRedisSaver, MongoDB) stores the path and sorts in JS — no database collation is involved.
  • SQLite and Postgres gain a task_path column (migrated automatically on setup(); read-only pre-column SQLite databases keep reading, with their rows keeping the old order). Redis and MongoDB documents gain a task_path field. Rows written before the upgrade keep their old order.
  • Exit-durability resumes replay delta writes in live order (port of langgraph#9114): the resumed superstep's writes interleave with the loaded ones by task path, later supersteps sort after every real write, and writes loaded with the checkpoint are no longer stored twice.

... (truncated)

Changelog

Sourced from @​langchain/langgraph's changelog.

1.5.0

Minor Changes

• #2961 1631fd8 Thanks @​soarez! - order parallel writes by task path, like langgraph (Python) — one sort key for live execution and every saver, instead of the task-id order #2544 added for DeltaChannel writes

  When two or more tasks in one superstep write the same DeltaChannel, their writes are now applied and replayed in (task_path, task_id, idx) order — the order Python's langgraph#8544 established — instead of task-id order. Task ids are uuid5 hashes that include the checkpoint id, so the old order permuted parallel writers from run to run and disagreed with Python.

  • BaseCheckpointSaver.putWrites takes an optional taskPath (the serialized task path, taskPathStr), and getTuple/list must return pendingWrites in the new writesSortKey order. writesSortKey and compareWritesSortKeys are new exports of @langchain/langgraph-checkpoint; every saver (memory, SQLite, Postgres, Redis incl. ShallowRedisSaver, MongoDB) stores the path and sorts in JS — no database collation is involved.
  • SQLite and Postgres gain a task_path column (migrated automatically on setup(); read-only pre-column SQLite databases keep reading, with their rows keeping the old order). Redis and MongoDB documents gain a task_path field. Rows written before the upgrade keep their old order.
  • Exit-durability resumes replay delta writes in live order (port of langgraph#9114): the resumed superstep's writes interleave with the loaded ones by task path, later supersteps sort after every real write, and writes loaded with the checkpoint are no longer stored twice.
  • bulkUpdateState seals the first update superstep: DeltaChannels touched by the base checkpoint's pending writes (and whose version moved) snapshot on the update checkpoint, so a finished sibling's writes and the update's can't replay in the wrong order (partial port of langgraph#8548).
  • bulkUpdateState/updateState update tasks carry (__interrupt__, i) task paths, as in langgraph#9128, so several updates in one superstep writing the same DeltaChannel replay in the order given.
  • Send task paths become [PUSH, i, false] and node-error-handler paths become [*failedTask.path[:3], "node_error_handler", false] (the failed task's first three path elements), matching Python's shapes — langgraph_path task metadata changes accordingly, and task ids of functional task() calls under a Send or handler task change with them. The SDK's Send-task detection accepts both the old and new shapes.

  Upgrade notes:

  • PostgresSaver: run setup() once after upgrading, from one process, before the new version serves traffic. The task_path column comes from the first new migration since the saver shipped, and until it runs, reads and writes fail with column "task_path" does not exist. Several processes running setup() at once on a database that still needs the migration can fail with a duplicate key error on checkpoint_migrations.
  • Third-party checkpoint savers remain source-compatible but must now persist the taskPath they are given and return pendingWrites in writesSortKey order; the conformance suite's new base tests enforce this. A saver that ignores the new argument replays in task-id order and can rebuild a different DeltaChannel value than the run produced.
  • An incomplete superstep containing stored delta writes that must interleave with resumed or retried task writes is affected by the upgrade, whether the incompleteness came from an interrupt, a task error, a crash, or a drain: finish such threads with the old runtime before upgrading writers. A single interrupted node with no finished delta-writing siblings is safe to resume. The same applies to resuming work that includes functional task() calls under a Send or error-handler task, whose child task ids change.
  • @langchain/langgraph-checkpoint 1.2.0 must be released before any package requiring its new exports; the consumers' minimum ranges are raised accordingly.

Patch Changes

• #2980 5c81e5f Thanks @​eliornl! - A node served from the node cache now saves its writes like a node that ran. They were applied but never saved, so a DeltaChannel read back without them once the state was loaded again, under every durability. A cache hit is still streamed as cached and isn't written back to the cache.

• #2989 7789c52 Thanks @​eliornl! - An exit-durability run that starts from a checkpoint the thread has moved past, addressed by checkpoint_id, no longer stores its DeltaChannel writes on that checkpoint, where the branch that already grew from it read them too. The run now snapshots the channels it wrote instead.

• #2969 5a4f831 Thanks @​eliornl! - fix(langgraph): a checkpoint save now waits for the DeltaChannel writes the run sent before it and is skipped if one of them failed, so a failed write no longer leaves the channel reading back without it.

• #2974 0dc519c Thanks @​eliornl! - fix(langgraph): a DeltaChannel no longer reads back writes from another branch. The first checkpoint of a new branch snapshots the delta channels its base has pending writes for, an updateState on a checkpoint the thread moved past stores none of its writes there, and a replay of such a checkpoint forks before storing a Command's writes.

• #2981 3f763ae Thanks @​eliornl! - A run's input to a DeltaChannel input channel of a raw Pregel graph reads back only on the checkpoints built from it. With "sync" or "async" durability it was saved as the starting checkpoint's own state: on a new thread the first run's input was lost, the previous run's last checkpoint read the next run's input, and a run from an older checkpoint leaked its input into the branch that already grew from it. Now the input is stored on the starting checkpoint under its own task id, or, on a new thread or an addressed checkpoint, the input checkpoint snapshots the channel. Threads saved before this keep the input already stored on their checkpoints.

• #2983 f9cfb1e Thanks @​eliornl! - A fork from a checkpoint before a DeltaChannel's first write no longer starts the channel's subscribers that never ran. The fork's snapshot gave the channel its first version, and a node subscribed to it ran on the empty value before the node that writes it.

• #2973 800ed57 Thanks @​eliornl! - fix(langgraph): updateState saves counters_since_delta_snapshot on every checkpoint it creates, so the next run keeps counting from it instead of from zero and DeltaChannels snapshot on schedule after an update.

• #2982 7a01526 Thanks @​eliornl! - An Overwrite through updateState snapshots the DeltaChannel it resets on the checkpoint the update saves, as a node's Overwrite does in the loop. The value already read back right; reads of that checkpoint and the ones after it no longer walk back past the reset.

• #3009 f07064c Thanks @​soarez! - A drain requested right before an interruptBefore breakpoint now stops the run at the breakpoint. The run used to drain there instead, and resuming it with invoke(null, config) ran past the breakpoint, since a resume treats the next step's breakpoints as already passed.

• #2968 8aa37d4 Thanks @​eliornl! - fix(langgraph): exit-mode DeltaChannel writes are never stored under the null task id. A run that started at step 0 with a Command update, such as a new thread started with Command({ update, goto }) under durability: "exit", stored the update under NULL_TASK_ID, so reading or replaying that first checkpoint applied it to the DeltaChannel but not to plain channels.

• #2975 f8e2c8b Thanks @​eliornl! - fix(langgraph): channels written in one step share one version again: _applyWrites mints each version once. A saver that adds a random fraction to its versions, as the Postgres and Redis savers now do, gave each channel its own, so updateState without asNode after two parallel nodes applied the update as either one instead of throwing "Ambiguous update".

• #2969 5a4f831 Thanks @​eliornl! - Prevent checkpointer write failures from surfacing as process-level unhandledRejection events before the run boundary reports them.

• #2992 13d848e Thanks @​eliornl! - Give every message written to a DeltaChannel that uses messagesDeltaReducer an id, so RemoveMessage can target it: one saved through updateState, a string, a [role, content] pair, a plain object, one inside an Overwrite, a raw Pregel input, or a Command forked from an older checkpoint.

• Updated dependencies [e827007, 50f1490, 1631fd8, 55902f3]:

... (truncated)

Commits

• 4510774 chore: version packages (#2977)
• 13d848e fix(langgraph): give every message written to a messages DeltaChannel an id (...
• f07064c fix(langgraph): stop at an interruptBefore breakpoint when a drain is request...
• f8e2c8b fix(langgraph-checkpoint-postgres): keep two branches from sharing a channel ...
• 7789c52 fix(langgraph): keep an exit run from a checkpoint the thread moved past out ...
• f9cfb1e fix(langgraph): keep a fork's DeltaChannel snapshot from starting nodes that ...
• 3f763ae fix(langgraph): read a run's DeltaChannel input back only on its own checkpoi...
• 7a01526 fix(langgraph): snapshot a DeltaChannel that an updateState Overwrite resets ...
• 5a4f831 fix(langgraph): don't save a checkpoint past a failed DeltaChannel write (#2969)
• 0dc519c fix(langgraph): keep a DeltaChannel branch from replaying another branch's wr...
• Additional commits viewable in compare view

Updates ai from 7.0.137 to 7.0.142

Changelog

Sourced from ai's changelog.

7.0.142

Patch Changes

• 130e871: Restore raw OpenAI custom-tool input deltas for consumers that forward them to Responses API clients. Mark streamed input with inputEncoding: 'text' so UI clients can display it progressively without JSON parsing. Preserve the encoding when partial UI messages are saved and resumed. Final provider tool-call inputs remain JSON-encoded.
• Updated dependencies [130e871]
• Updated dependencies [5bdb816]
  • @​ai-sdk/provider@​4.0.28
  • @​ai-sdk/gateway@​4.0.115
  • @​ai-sdk/provider-utils@​5.0.61

7.0.141

Patch Changes

• 88ea0d7: fix(workflow): pass runtime context allowed by 'telemetry.includeRuntimeContext'
• Updated dependencies [2e89fa4]
• Updated dependencies [b658e85]
  • @​ai-sdk/provider-utils@​5.0.60
  • @​ai-sdk/gateway@​4.0.114

7.0.140

Patch Changes

• 9523eb0: feat(ai): add configurable tool call execution concurrency
• Updated dependencies [42a2895]
  • @​ai-sdk/gateway@​4.0.113

7.0.139

Patch Changes

• Updated dependencies [685667c]
• Updated dependencies [bdbeba3]
• Updated dependencies [ec2af7b]
  • @​ai-sdk/gateway@​4.0.112

7.0.138

Patch Changes

• eab278a: fix: resume interrupted chat streams when the page becomes visible again

  useChat with resume: true no longer starts a second resume request on mount when the chat is already submitted or streaming, e.g. when remounting with a shared Chat instance mid-stream.

• 26d64e9: fix(ai): update tool outputs in the message containing the matching tool call

• 75b3ea2: fix(ai): prevent duplicate message parts when resuming replayed streams

• 69f4b82: fix(ai): prevent global type conflicts across SDK versions

• e57803c: Add an optional shared citation representation to generated text and text-end stream events, separate from retrieved sources. Preserve citations in core result content and UI message text parts, including validation and persistence, without changing content or stream event discriminants.

... (truncated)

Commits

• 6e14ffa Version Packages (#23406)
• 130e871 fix(openai): preserve raw custom-tool deltas with explicit UI input encoding ...
• a56e320 Version Packages (#23314)
• f6c8710 chore: fix timeout issue for global declaration test (#23346)
• 88ea0d7 fix(workflow): pass runtime context allowed by 'telemetry.includeRuntimeConte...
• dbdbd0c Version Packages (#23269)
• 9523eb0 feat: add configurable concurrency for SDK-executed tool calls (#22135)
• 5dec614 Version Packages (#23122)
• 543d42c Version Packages (#22437)
• 75b3ea2 fix(ai): prevent duplicate message parts when resuming replayed streams (#22560)
• Additional commits viewable in compare view

Updates openai from 7.32.0 to 7.34.0

Release notes

Sourced from openai's releases.

v7.34.0

7.34.0 (2026-10-14)

Features

• api: add regional processing residency options (#2942) (0f53768)

Bug Fixes

• deps-dev: bump @​cloudflare/workers-types from 5.20260927.1 to 5.20261005.1 in /ecosystem-tests/cloudflare-worker (#2928) (d8b450e)
• deps-dev: bump @​types/node from 26.4.1 to 26.6.4 (#2923) (55bfde2)
• deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts-cjs (#2931) (6f2c0ab)
• deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts-cjs-auto (#2932) (66c3d52)
• deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts4.5-jest28 (#2933) (1abf914)
• deps-dev: bump oxfmt from 0.70.0 to 0.72.0 (#2924) (ca86f0a)
• deps-dev: bump oxlint from 1.82.0 to 1.87.0 (#2927) (76563b3)
• deps-dev: bump vitest from 5.0.1 to 5.0.3 (#2925) (475db88)
• deps-dev: bump wrangler from 4.142.0 to 4.147.0 in /ecosystem-tests/cloudflare-worker (#2929) (6886675)
• deps: bump undici from 7.29.1 to 7.30.0 in /ecosystem-tests/node-ts-cjs (#2930) (233e488)
• deps: bump undici from 8.10.2 to 8.11.2 (#2926) (4c4aa8b)

Chores

• api: clarify Decisions request and response fields (#2940) (9f07cfc)

v7.33.0

7.33.0 (2026-10-14)

Features

• add browser and computer toolsets (1/4) (#2936) (3811840)
• api: add beta session spending limits (#2916) (f57c965)
• api: add billing_not_active session error code (#2911) (ee3f743)
• api: add OCI external-storage provider support (#2917) (80e210e)
• api: add organization Decisions usage reporting (#2919) (3f8753e)
• api: add shida to named Live voices (#2912) (d6d80a1)
• api: add vault updates and metadata filters (#2906) (1bbc425)
• api: align beta pagination limits and non-null parameters (#2915) (4ae463a)
• api: expose image tool error and moderation details (#2935) (0bf85e0)
• api: support image URLs and detailed safety alert explanations (#2918) (8297332)
• api: support updating project API key expiry (#2922) (467a082)

Chores

• api: clarify agent tool limits and environment pagination (#2920) (05b8763)

... (truncated)

Changelog

Sourced from openai's changelog.

7.34.0 (2026-10-14)

Features

• api: add regional processing residency options (#2942) (0f53768)

Bug Fixes

• deps-dev: bump @​cloudflare/workers-types from 5.20260927.1 to 5.20261005.1 in /ecosystem-tests/cloudflare-worker (#2928) (d8b450e)
• deps-dev: bump @​types/node from 26.4.1 to 26.6.4 (#2923) (55bfde2)
• deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts-cjs (#2931) (6f2c0ab)
• deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts-cjs-auto (#2932) (66c3d52)
• deps-dev: bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-ts4.5-jest28 (#2933) (1abf914)
• deps-dev: bump oxfmt from 0.70.0 to 0.72.0 (#2924) (ca86f0a)
• deps-dev: bump oxlint from 1.82.0 to 1.87.0 (#2927) (76563b3)
• deps-dev: bump vitest from 5.0.1 to 5.0.3 (#2925) (475db88)
• deps-dev: bump wrangler from 4.142.0 to 4.147.0 in /ecosystem-tests/cloudflare-worker (#2929) (6886675)
• deps: bump undici from 7.29.1 to 7.30.0 in /ecosystem-tests/node-ts-cjs (#2930) (233e488)
• deps: bump undici from 8.10.2 to 8.11.2 (#2926) (4c4aa8b)

Chores

• api: clarify Decisions request and response fields (#2940) (9f07cfc)

7.33.0 (2026-10-14)

Features

• add browser and computer toolsets (1/4) (#2936) (3811840)
• api: add beta session spending limits (#2916) (f57c965)
• api: add billing_not_active session error code (#2911) (ee3f743)
• api: add OCI external-storage provider support (#2917) (80e210e)
• api: add organization Decisions usage reporting (#2919) (3f8753e)
• api: add shida to named Live voices (#2912) (d6d80a1)
• api: add vault updates and metadata filters (#2906) (1bbc425)
• api: align beta pagination limits and non-null parameters (#2915) (4ae463a)
• api: expose image tool error and moderation details (#2935) (0bf85e0)
• api: support image URLs and detailed safety alert explanations (#2918) (8297332)
• api: support updating project API key expiry (#2922) (467a082)

Chores

• api: clarify agent tool limits and environment pagination (#2920) (05b8763)
• api: clarify decision creation documentation (#2913) (1c380ea)
• api: clarify Decisions question and answer descriptions (#2910) (b5c7300)

... (truncated)

Commits

• 85e528a release: 7.34.0 (#2941)
• 0f53768 feat(api): add regional processing residency options (#2942)
• 76563b3 fix(deps-dev): bump oxlint from 1.82.0 to 1.87.0 (#2927)
• 4c4aa8b fix(deps): bump undici from 8.10.2 to 8.11.2 (#2926)
• 55bfde2 fix(deps-dev): bump @​types/node from 26.4.1 to 26.6.4 (#2923)
• d8b450e fix(deps-dev): bump @​cloudflare/workers-types from 5.20260927.1 to 5.20261005...
• ca86f0a fix(deps-dev): bump oxfmt from 0.70.0 to 0.72.0 (#2924)
• 6886675 fix(deps-dev): bump wrangler from 4.142.0 to 4.147.0 in /ecosystem-tests/clou...
• 66c3d52 fix(deps-dev): bump @​types/ws from 8.18.1 to 8.18.2 in /ecosystem-tests/node-...
• 233e488 fix(deps): bump undici from 7.29.1 to 7.30.0 in /ecosystem-tests/node-ts-cjs ...
• Additional commits viewable in compare view

Updates zod from 4.6.6 to 4.6.7

Release notes

Sourced from zod's releases.

v4.6.7

Commits:

• b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7

Commits

• b500a2e 4.6.7
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	bashkit	929b6ba	Commit Preview URL Branch Preview URL	Oct 19 2026, 09:40 AM