Skip to content

Bump the minor-and-patch group in /functions with 10 updates#3

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/functions/minor-and-patch-267caa75cb
Closed

Bump the minor-and-patch group in /functions with 10 updates#3
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/functions/minor-and-patch-267caa75cb

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 24, 2026

Bumps the minor-and-patch group in /functions with 10 updates:

Package From To
@anthropic-ai/sdk 0.30.1 0.80.0
@google-cloud/vertexai 1.10.0 1.10.2
@simplewebauthn/server 13.2.2 13.3.0
firebase-functions 7.0.2 7.2.2
mailparser 3.9.1 3.9.5
otplib 13.1.1 13.4.0
pdf-to-png-converter 3.11.0 3.14.0
puppeteer-core 24.36.1 24.40.0
soap 1.6.4 1.8.0
stripe 20.3.1 20.4.1

Updates @anthropic-ai/sdk from 0.30.1 to 0.80.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.80.0

0.80.0 (2026-03-18)

Full Changelog: sdk-v0.79.0...sdk-v0.80.0

Features

Chores

  • internal: tweak CI branches (4a5819e)

sdk: v0.79.0

0.79.0 (2026-03-16)

Full Changelog: sdk-v0.78.0...sdk-v0.79.0

Features

  • add support for filesystem memory tools (#599) (1064199)
  • api: chore(config): clean up model enum list (#31) (07727a6)
  • api: GA thinking-display-setting (4dc8df4)
  • tests: update mock server (e5c3be9)

Bug Fixes

  • docs/contributing: correct pnpm link command (16bf66c)
  • internal: skip tests that depend on mock server (07417e5)
  • zod: use v4 import path for Zod ^3.25 compatibility (#925) (c6c0ac8)

Chores

  • client: remove unused import (3827ab5)
  • internal: codegen related update (2c1fc10)
  • internal: improve import alias names (5b9615b)
  • internal: move stringifyQuery implementation to internal function (16239f3)
  • internal: update dependencies to address dependabot vulnerabilities (6fdea5e)
  • mcp-server: improve instructions (66e5363)
  • remove accidentally committed file (#929) (0989113)
  • tests: unskip tests that are now supported in steady (616a98a)

Documentation

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.80.0 (2026-03-18)

Full Changelog: sdk-v0.79.0...sdk-v0.80.0

Features

Chores

  • internal: tweak CI branches (4a5819e)

0.79.0 (2026-03-16)

Full Changelog: sdk-v0.78.0...sdk-v0.79.0

Features

  • add support for filesystem memory tools (#599) (1064199)
  • api: chore(config): clean up model enum list (#31) (07727a6)
  • api: GA thinking-display-setting (4dc8df4)
  • tests: update mock server (e5c3be9)

Bug Fixes

  • docs/contributing: correct pnpm link command (16bf66c)
  • internal: skip tests that depend on mock server (07417e5)
  • zod: use v4 import path for Zod ^3.25 compatibility (#925) (c6c0ac8)

Chores

  • client: remove unused import (3827ab5)
  • internal: codegen related update (2c1fc10)
  • internal: improve import alias names (5b9615b)
  • internal: move stringifyQuery implementation to internal function (16239f3)
  • internal: update dependencies to address dependabot vulnerabilities (6fdea5e)
  • mcp-server: improve instructions (66e5363)
  • remove accidentally committed file (#929) (0989113)
  • tests: unskip tests that are now supported in steady (616a98a)

Documentation

0.78.0 (2026-02-19)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by packy-anthropic, a new releaser for @​anthropic-ai/sdk since your current version.


Updates @google-cloud/vertexai from 1.10.0 to 1.10.2

Release notes

Sourced from @​google-cloud/vertexai's releases.

v1.10.2

1.10.2 (2026-03-19)

Miscellaneous Chores

v1.10.1

1.10.1 (2026-03-18)

Miscellaneous Chores

Changelog

Sourced from @​google-cloud/vertexai's changelog.

1.10.2 (2026-03-19)

Miscellaneous Chores

1.10.1 (2026-03-18)

Miscellaneous Chores

Commits
  • c125a61 chore(main): release 1.10.2 (#570)
  • 431950d chore: release 1.10.2
  • 15ab52b chore: add files array to package.json
  • 6ebb2d2 chore(main): release 1.10.1 (#563)
  • 3c7a6e6 chore: release 1.10.1
  • aad9635 chore: Add AE session events module
  • 97b509c chore: Add namespaced types support to GenAI modules
  • 44c2e38 chore: Add warning log for agentEnginesInternal module
  • 0d77bc1 chore: improve replay tests for Agent Engine modules
  • 247a185 chore: Add initial implementation of Agent Engine GenAI module
  • Additional commits viewable in compare view

Updates @simplewebauthn/server from 13.2.2 to 13.3.0

Release notes

Sourced from @​simplewebauthn/server's releases.

v13.3.0

  • [browser] startRegistration() and startAuthentication() will recognize punycode domains as valid domains when trying to identify why an error occurred (#750)
  • [server] A new verifyMDSBlob() helper method has been added to verify and extract metadata statements from FIDO MDS blobs. See the docs here for more info (#752)

v13.2.3

Changes

  • [server] Dependencies have been updated to fix a "Cannot get schema" error that may occur when verifying responses after upgrading to v13.2.0+ (#747)
Changelog

Sourced from @​simplewebauthn/server's changelog.

v13.3.0

Changes:

  • [browser] startRegistration() and startAuthentication() will recognize punycode domains when trying to identify why an error occurred (#750)
  • [server] A new verifyMDSBlob() helper method has been added to verify and extract metadata statements from FIDO MDS blobs. See the docs here for more info (#752)

v13.2.3

Changes

  • [server] Dependencies have been updated to fix a "Cannot get schema" error that may occur when verifying responses after upgrading to v13.2.0+ (#747)
Commits
  • 48e19ab Update version to 13.3.0
  • 6bf921e Export as a helper
  • 65e87a9 Rename method to verifyMDSBlob()
  • 31d8314 Clean up from mdsBlobs removal
  • adf33d3 Remove mdsBlobs argument
  • 2a6b4f0 Extract blob verification into new exported helper
  • 972713b (Unrelated) Fix a docstring typo
  • 8798082 Tweak data staleness warning message
  • 08381fe Add test for loading offline MDS blob
  • ab8566a Reset metadata cache on initialization
  • Additional commits viewable in compare view

Updates firebase-functions from 7.0.2 to 7.2.2

Release notes

Sourced from firebase-functions's releases.

v7.2.2

  • Allow v2 auth blocking functions to use run.app or cloudfunctions.net URLs (#1831)

v7.2.1

  • Fix issue where v1 firestore paths would not handle literals with leading or trailing slashes (#1829)
  • transformed string exprssions (currenlty an internal tool) now propagate across interpolated strings (#1829)

V7.2.0

  • All V1 configuration (e.g. pubsub topics) can be set with params. (#1820)
  • String expressions can now be used in string interpolation with the expr tag. (#1820) E.g.
    const schedule = expr`every ${intervalParam} minutes`;
  • Secret params now support a label and/or description. (#1820)
  • Add support for VPC direct connect (network interfaces) (#1823)
  • Realtime database events in the v2 SDK now provide auth context (#1770)

V7.1.1

-Internal Docgen improvements

v7.1.0

v7.0.6

Internal improvements (#1814)

v7.0.5

  • Fixed issue with missing dependency on graphql. (#1795)
  • Internal improvements (#1800)

v7.0.3

  • Internal improvements.
Commits
  • de6e483 7.2.2
  • 13d7569 Allow v2 auth blocking functions to use run.app or cf.net URLs (#1831)
  • 7a01b59 [firebase-release] Removed change log and reset repo after 7.2.1 release
  • 7354493 7.2.1
  • bc967cb migrate GitHub release auth to Secret Manager (#1821)
  • fdd7aaa Fix a regression in v1 Firestore functions (#1829)
  • bfdc022 Fix: Data conect graphql nest issue in docgen (#1828)
  • c96e1ce [firebase-release] Removed change log and reset repo after 7.2.0 release
  • da9cfba 7.2.0
  • fb503db Adds missing Params support in v1 configurability (#1820)
  • Additional commits viewable in compare view

Updates mailparser from 3.9.1 to 3.9.5

Changelog

Sourced from mailparser's changelog.

3.9.5 (2026-03-23)

Bug Fixes

3.9.4 (2026-03-09)

Bug Fixes

  • bump nodemailer to 8.0.2 for unquoted comma-in-display-name parsing (dd71f08)
  • filter false values from empty References headers (9884e5d), closes #385
  • prevent RFC 2047 encoded-word address fabrication in decodeAddresses (08b800c)

3.9.3 (2026-01-28)

Bug Fixes

  • escape URLs and link text in textToHtml to prevent XSS (921a67d), closes #412

3.9.2 (2026-01-28)

Bug Fixes

Commits
  • 0aadbc8 chore(master): release 3.9.5 [skip-ci]
  • 1556b84 fix: Bumped deps
  • db781d3 chore(master): release 3.9.4 [skip-ci]
  • 9884e5d fix: filter false values from empty References headers
  • dd71f08 fix: bump nodemailer to 8.0.2 for unquoted comma-in-display-name parsing
  • 08b800c fix: prevent RFC 2047 encoded-word address fabrication in decodeAddresses
  • 05db224 chore(master): release 3.9.3 [skip-ci]
  • 921a67d fix: escape URLs and link text in textToHtml to prevent XSS
  • bb325f1 chore(master): release 3.9.2 [skip-ci]
  • 508bcf7 fix: Bumpe deps
  • Additional commits viewable in compare view

Updates otplib from 13.1.1 to 13.4.0

Release notes

Sourced from otplib's releases.

v13.4.0

What's Changed

New Contributors

Full Changelog: yeojz/otplib@v13.3.0...v13.4.0

v13.3.0

What's Changed

... (truncated)

Commits
  • e5490bb release(packages): v13.4.0 (#819)
  • 3352eeb docs(totp): add string secrets and authenticator compatibility notes to READM...
  • 9038272 feat: add IIFE/CDN build support to otplib (#810)
  • 4fd86b5 chore: update readme tip/important blocks
  • 6c9ed1c docs: improve package READMEs with accurate API context and usage examples (#...
  • fe462ac release(packages): v13.3.0 (#796)
  • 09f301f feat: add OTPHooks for custom token encoding and validation (#790)
  • 476f345 fix: harden OTP validation and URI parsing; bubble up TOTP replay controls th...
  • 972d355 Pin GitHub Actions to commit SHAs and update dependencies (#787)
  • ada9445 feat(test): add distribution tests package for cross-runtime testing (#778)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for otplib since your current version.


Updates pdf-to-png-converter from 3.11.0 to 3.14.0

Release notes

Sourced from pdf-to-png-converter's releases.

v3.14.0

What's Changed

New Contributors

Full Changelog: dichovsky/pdf-to-png-converter@release/v3.7.0...release/v3.14.0

Commits

Updates puppeteer-core from 24.36.1 to 24.40.0

Release notes

Sourced from puppeteer-core's releases.

puppeteer-core: v24.40.0

24.40.0 (2026-03-19)

🎉 Features

  • support PUPPETEER_DANGEROUS_NO_SANDBOX environment variable (#14756) (2a8276e)

🛠️ Fixes

puppeteer-core: v24.39.1

24.39.1 (2026-03-13)

🛠️ Fixes

puppeteer-core: v24.39.0

24.39.0 (2026-03-10)

🎉 Features

🛠️ Fixes

puppeteer-core: v24.38.0

24.38.0 (2026-03-04)

🎉 Features

🛠️ Fixes

  • consider browsingContext.navigationCommitted to dispose an existing navigation (#14724) (b4e92c6)

... (truncated)

Changelog

Sourced from puppeteer-core's changelog.

24.40.0 (2026-03-19)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.39.1 to 24.40.0

🎉 Features

  • support PUPPETEER_DANGEROUS_NO_SANDBOX environment variable (#14756) (2a8276e)

🛠️ Fixes

24.39.1 (2026-03-13)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.39.0 to 24.39.1

🛠️ Fixes

24.39.0 (2026-03-10)

... (truncated)

Commits

Updates soap from 1.6.4 to 1.8.0

Release notes

Sourced from soap's releases.

Version 1.8.0

  • [ENHANCEMENT] Add serverless mode (#1449)
  • [MAINTENANCE] Bump minimatch (#1455)
  • [MAINTENANCE] Bump glob from 13.0.0 to 13.0.3 (#1457)
  • [MAINTENANCE] Bump typescript-eslint from 8.54.0 to 8.55.0 (#1458)
  • [MAINTENANCE] Bump eslint to v10 and make it compatible with the project (#1456)
  • [MAINTENANCE] Bump semver from 7.7.3 to 7.7.4 (#1451)
  • [MAINTENANCE] Bump axion to 1.13.6 and sax to 1.5.0 (#1459)

Version 1.7.1

  • [FIX] Rebuild to update stale references

Version 1.7.0

  • [ENHANCEMENT] Replace get-stream and strip-bom with local impl (#1447)
  • [ENHANCEMENT] Remove lodash dependency (#1444)
  • [MAINTENANCE] Bump typescript-eslint from 8.53.1 to 8.54.0 (#1445)

Version 1.6.5

  • [ENHANCEMENT] honor httpAgent/httpsAgent when setting ntlm (#1336)
  • [FIX] Handle undefined toXml() (#1435)
  • [MAINTENANCE] Bump axios to 1.13.5 (#1442)
  • [MAINTENANCE] Bump typescript-eslint to 8.53.1 (#1439)
  • [MAINTENANCE] Bump prettier to 3.8.1 (#1437)
  • [MAINTENANCE] Bump brace-expansion to 5.0.1 (#1440)
  • [MAINTENANCE] Bump strip-bom and get-stream (#1394)
Changelog

Sourced from soap's changelog.

1.8.0 / 2026-03-07

  • [ENHANCEMENT] Add serverless mode (#1449)
  • [MAINTENANCE] Bump minimatch (#1455)
  • [MAINTENANCE] Bump glob from 13.0.0 to 13.0.3 (#1457)
  • [MAINTENANCE] Bump typescript-eslint from 8.54.0 to 8.55.0 (#1458)
  • [MAINTENANCE] Bump eslint to v10 and make it compatible with the project (#1456)
  • [MAINTENANCE] Bump semver from 7.7.3 to 7.7.4 (#1451)
  • [MAINTENANCE] Bump axion to 1.13.6 and sax to 1.5.0 (#1459)

1.7.1 / 2026-02-18

  • [FIX] Rebuild to update stale references

1.7.0 / 2026-02-18

  • [ENHANCEMENT] Replace get-stream and strip-bom with local impl (#1447)
  • [ENHANCEMENT] Remove lodash dependency (#1444)
  • [MAINTENANCE] Bump typescript-eslint from 8.53.1 to 8.54.0 (#1445)

1.6.5 / 2026-02-13

  • [ENHANCEMENT] honor httpAgent/httpsAgent when setting ntlm (#1336)
  • [FIX] Handle undefined toXml() (#1435)
  • [MAINTENANCE] Bump axios to 1.13.5 (#1442)
  • [MAINTENANCE] Bump typescript-eslint to 8.53.1 (#1439)
  • [MAINTENANCE] Bump prettier to 3.8.1 (#1437)
  • [MAINTENANCE] Bump brace-expansion to 5.0.1 (#1440)
  • [MAINTENANCE] Bump strip-bom and get-stream (#1394)
Commits

Updates stripe from 20.3.1 to 20.4.1

Release notes

Sourced from stripe's releases.

v20.4.1

  • #2590 Add Stripe-Request-Trigger header
  • #2588 Add agent information to UserAgent

See the changelog for more details.

v20.4.0

This release changes the pinned API version to 2026-02-25.c...

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 24, 2026
Bumps the minor-and-patch group in /functions with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.30.1` | `0.80.0` |
| [@google-cloud/vertexai](https://github.com/googleapis/nodejs-vertexai) | `1.10.0` | `1.10.2` |
| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.2.2` | `13.3.0` |
| [firebase-functions](https://github.com/firebase/firebase-functions) | `7.0.2` | `7.2.2` |
| [mailparser](https://github.com/nodemailer/mailparser) | `3.9.1` | `3.9.5` |
| [otplib](https://github.com/yeojz/otplib/tree/HEAD/packages/otplib) | `13.1.1` | `13.4.0` |
| [pdf-to-png-converter](https://github.com/dichovsky/pdf-to-png-converter) | `3.11.0` | `3.14.0` |
| [puppeteer-core](https://github.com/puppeteer/puppeteer) | `24.36.1` | `24.40.0` |
| [soap](https://github.com/vpulim/node-soap) | `1.6.4` | `1.8.0` |
| [stripe](https://github.com/stripe/stripe-node) | `20.3.1` | `20.4.1` |


Updates `@anthropic-ai/sdk` from 0.30.1 to 0.80.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.30.1...sdk-v0.80.0)

Updates `@google-cloud/vertexai` from 1.10.0 to 1.10.2
- [Release notes](https://github.com/googleapis/nodejs-vertexai/releases)
- [Changelog](https://github.com/googleapis/nodejs-vertexai/blob/main/CHANGELOG.md)
- [Commits](googleapis/nodejs-vertexai@v1.10.0...v1.10.2)

Updates `@simplewebauthn/server` from 13.2.2 to 13.3.0
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases)
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.0/packages/server)

Updates `firebase-functions` from 7.0.2 to 7.2.2
- [Release notes](https://github.com/firebase/firebase-functions/releases)
- [Commits](firebase/firebase-functions@v7.0.2...v7.2.2)

Updates `mailparser` from 3.9.1 to 3.9.5
- [Release notes](https://github.com/nodemailer/mailparser/releases)
- [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md)
- [Commits](nodemailer/mailparser@v3.9.1...v3.9.5)

Updates `otplib` from 13.1.1 to 13.4.0
- [Release notes](https://github.com/yeojz/otplib/releases)
- [Commits](https://github.com/yeojz/otplib/commits/v13.4.0/packages/otplib)

Updates `pdf-to-png-converter` from 3.11.0 to 3.14.0
- [Release notes](https://github.com/dichovsky/pdf-to-png-converter/releases)
- [Commits](https://github.com/dichovsky/pdf-to-png-converter/commits/release/v3.14.0)

Updates `puppeteer-core` from 24.36.1 to 24.40.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-core-v24.36.1...puppeteer-core-v24.40.0)

Updates `soap` from 1.6.4 to 1.8.0
- [Release notes](https://github.com/vpulim/node-soap/releases)
- [Changelog](https://github.com/vpulim/node-soap/blob/master/History.md)
- [Commits](vpulim/node-soap@v1.6.4...v1.8.0)

Updates `stripe` from 20.3.1 to 20.4.1
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v20.3.1...v20.4.1)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@google-cloud/vertexai"
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@simplewebauthn/server"
  dependency-version: 13.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: firebase-functions
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mailparser
  dependency-version: 3.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: otplib
  dependency-version: 13.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pdf-to-png-converter
  dependency-version: 3.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: puppeteer-core
  dependency-version: 24.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: soap
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: stripe
  dependency-version: 20.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/functions/minor-and-patch-267caa75cb branch from 1e1e7e8 to cd4c4f2 Compare March 24, 2026 05:46
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Mar 31, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 31, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/functions/minor-and-patch-267caa75cb branch March 31, 2026 05:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants