Skip to content

chore(deps): bump the dsh-deps group across 1 directory with 8 updates - #17

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dsh/dsh-deps-c59f2fbd75
Open

chore(deps): bump the dsh-deps group across 1 directory with 8 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dsh/dsh-deps-c59f2fbd75

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the dsh-deps group with 8 updates in the /dsh directory:

Package From To
@deepseek-ai/schemastery 3.18.1 3.18.4
@biomejs/biome 2.2.0 2.5.14
@deepseek-ai/cordis 4.0.1 4.0.4
@deepseek-ai/dsh-llm 0.1.0-rc.6 0.1.0-rc.8
@deepseek-ai/dsh-session 0.1.0-rc.6 0.1.0-rc.8
@types/node 22.20.1 26.6.2
tsx 4.23.12 4.23.15
typescript 5.9.3 7.0.2

Updates @deepseek-ai/schemastery from 3.18.1 to 3.18.4

Commits

Updates @biomejs/biome from 2.2.0 to 2.5.14

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.14

2.5.14

Patch Changes

  • #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

    // Invalid: return in finally callback
Promise.resolve(1).finally(() => { return 2 })
// Valid: no return in finally callback
Promise.resolve(1).finally(() => { console.log(2) })

    Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

  • #11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

    <!-- Invalid: leftover debugging tag -->
{@debug user}

    The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

  • #11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

  • #11735 9bd70c7 Thanks @​ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

  • #11715 f05a3c3 Thanks @​ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

  • #11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

  • #11461 22e9966 Thanks @​FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

     const value = `
      ${
        condition
          ? "yes"
          : "no"
-}
+     }
 `;

  • #11766 c2542c6 Thanks @​dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.14

Patch Changes

  • #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

    // Invalid: return in finally callback
Promise.resolve(1).finally(() => { return 2 })
// Valid: no return in finally callback
Promise.resolve(1).finally(() => { console.log(2) })

    Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

  • #11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

    <!-- Invalid: leftover debugging tag -->
{@debug user}

    The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

  • #11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

  • #11735 9bd70c7 Thanks @​ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

  • #11715 f05a3c3 Thanks @​ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

  • #11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

  • #11461 22e9966 Thanks @​FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

     const value = `
      ${
        condition
          ? "yes"
          : "no"
-}
+     }
 `;

  • #11766 c2542c6 Thanks @​dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

  • #11790 17d0ff0 Thanks @​ematipico! - Fixed #10248: noUselessFragments now allows fragments with props in Astro files, such as <Fragment slot="name">{text}</Fragment> inside template expressions.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​biomejs/biome since your current version.


Updates @deepseek-ai/cordis from 4.0.1 to 4.0.4

Commits

Updates @deepseek-ai/dsh-llm from 0.1.0-rc.6 to 0.1.0-rc.8

Release notes

Sourced from @​deepseek-ai/dsh-llm's releases.

v0.1.0-rc.8

中文 | English

  • 增强多模态支持度，DeepSeek 模型适配器支持配置启用原生图片请求，/goal、/plan 等命令可接收图文输入，@ 菜单支持引用文件和会话
  • Claude Code 与 Codex 子代理均可作为 Profile Bundle 按需安装，同时支持非交互权限模式和多个命名实例
  • Windows PTY 终端支持持久 PowerShell 会话， 并在极简模式预设中默认支持

问题修复

  • 修复图片尺寸过大或历史图片累计载荷过高导致模型请求失败的问题
  • 修正取消流式生成后已展示的回复前缀未带入后续提问和分叉会话
  • 修复部分自定义 OpenAI 兼容网关因请求格式差异无法调用，以及推理内容回传可能缺失问题

体验优化

  • 优化布局和信息呈现，涉及HOME 目录以 ~ 缩写表示、输入框窄屏布局、反馈界面等
  • 优化界面操作，涉及侧栏搜索焦点响应、工作流面板操作、模型选择器选中操作、打开本地文件失败支持重试等
  • 优化工具调用，web_search 支持并发查询、子代理 reportDelivery 会及时反馈并唤醒父任务
  • 优化安装与启动，改善下载依赖体积、本地运行 dsh web 时会自动打开浏览器
  • 改善大历史会话执行分叉操作上的性能耗时

其他变更

  • 改善 SQLite 后端的读写与分叉性能并降低存储体积，数据结构不兼容
  • 明确品牌使用规范：“DeepSeek Harness”是注册商标，详见 品牌使用规范

SDK

  • Python SDK 依赖配置覆盖 4 个内置 Agent 预设，并包含 rg / glob 搜索和 MCP stdio 工具所需依赖
  • Expand multimodal support with configurable native image requests for DeepSeek adapters, image input for commands such as /goal and /plan, and file and session references in the @ menu by @​LegGasai and @​CreatixChu
  • Make Claude Code and Codex subagents installable on demand as Profile Bundles, with non-interactive permission modes and named instances by @​pku-xht
  • Add persistent PowerShell session support to Windows PTY terminals and enable it by default in the Minimal preset by @​Elevator14B

Bug Fixes

  • Fix model request failures caused by oversized images or excessive accumulated image payloads by @​CreatixChu
  • Preserve displayed response prefixes in follow-up prompts and forks after cancelling streamed generation by @​CreatixChu
  • Fix custom OpenAI-compatible gateway failures caused by request-format differences or missing reasoning content by @​LegGasai

Improvements

... (truncated)

Commits

Updates @deepseek-ai/dsh-session from 0.1.0-rc.6 to 0.1.0-rc.8

Release notes

Sourced from @​deepseek-ai/dsh-session's releases.

v0.1.0-rc.8

中文 | English

  • 增强多模态支持度，DeepSeek 模型适配器支持配置启用原生图片请求，/goal、/plan 等命令可接收图文输入，@ 菜单支持引用文件和会话
  • Claude Code 与 Codex 子代理均可作为 Profile Bundle 按需安装，同时支持非交互权限模式和多个命名实例
  • Windows PTY 终端支持持久 PowerShell 会话， 并在极简模式预设中默认支持

问题修复

  • 修复图片尺寸过大或历史图片累计载荷过高导致模型请求失败的问题
  • 修正取消流式生成后已展示的回复前缀未带入后续提问和分叉会话
  • 修复部分自定义 OpenAI 兼容网关因请求格式差异无法调用，以及推理内容回传可能缺失问题

体验优化

  • 优化布局和信息呈现，涉及HOME 目录以 ~ 缩写表示、输入框窄屏布局、反馈界面等
  • 优化界面操作，涉及侧栏搜索焦点响应、工作流面板操作、模型选择器选中操作、打开本地文件失败支持重试等
  • 优化工具调用，web_search 支持并发查询、子代理 reportDelivery 会及时反馈并唤醒父任务
  • 优化安装与启动，改善下载依赖体积、本地运行 dsh web 时会自动打开浏览器
  • 改善大历史会话执行分叉操作上的性能耗时

其他变更

  • 改善 SQLite 后端的读写与分叉性能并降低存储体积，数据结构不兼容
  • 明确品牌使用规范：“DeepSeek Harness”是注册商标，详见 品牌使用规范

SDK

  • Python SDK 依赖配置覆盖 4 个内置 Agent 预设，并包含 rg / glob 搜索和 MCP stdio 工具所需依赖
  • Expand multimodal support with configurable native image requests for DeepSeek adapters, image input for commands such as /goal and /plan, and file and session references in the @ menu by @​LegGasai and @​CreatixChu
  • Make Claude Code and Codex subagents installable on demand as Profile Bundles, with non-interactive permission modes and named instances by @​pku-xht
  • Add persistent PowerShell session support to Windows PTY terminals and enable it by default in the Minimal preset by @​Elevator14B

Bug Fixes

  • Fix model request failures caused by oversized images or excessive accumulated image payloads by @​CreatixChu
  • Preserve displayed response prefixes in follow-up prompts and forks after cancelling streamed generation by @​CreatixChu
  • Fix custom OpenAI-compatible gateway failures caused by request-format differences or missing reasoning content by @​LegGasai

Improvements

... (truncated)

Commits

Updates @types/node from 22.20.1 to 26.6.2

Commits

Updates tsx from 4.23.12 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

  • exclude bare builtins from namespace inheritance (38e1588)
  • expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
  • make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

  • restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

Commits
  • ca66105 test: fix drive-less file URLs in ESM resolver fixtures
  • 2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
  • 38e1588 fix: exclude bare builtins from namespace inheritance
  • 562c434 fix: make namespaced register() overloads portable for declaration emit
  • edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
  • 70e7828 test: upgrade tinyspy for disposable API
  • 9ed2022 ci: avoid duplicate release notifications
  • 872e77f refactor: use disposables for cleanup
  • 6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
  • 28e1f12 fix(cache): bound shared transform cache memory (#835)
  • See full diff in compare view

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
@dependabot dependabot Bot changed the title build(deps): bump the dsh-deps group across 1 directory with 8 updates chore(deps): bump the dsh-deps group across 1 directory with 8 updates Sep 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dsh/dsh-deps-c59f2fbd75 branch 2 times, most recently from 0d5249d to fc2ea0e Compare September 21, 2026 01:45
@dependabot
chore(deps): bump the dsh-deps group across 1 directory with 8 updates
4562b03 
Bumps the dsh-deps group with 8 updates in the /dsh directory:

| Package | From | To |
| --- | --- | --- |
| [@deepseek-ai/schemastery](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/vendor/schemastery) | `3.18.1` | `3.18.4` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.2.0` | `2.5.14` |
| [@deepseek-ai/cordis](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/vendor/cordis) | `4.0.1` | `4.0.4` |
| [@deepseek-ai/dsh-llm](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/llm/llm) | `0.1.0-rc.6` | `0.1.0-rc.8` |
| [@deepseek-ai/dsh-session](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/core/session) | `0.1.0-rc.6` | `0.1.0-rc.8` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.1` | `26.6.2` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.15` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |



Updates `@deepseek-ai/schemastery` from 3.18.1 to 3.18.4
- [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases)
- [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/HEAD/vendor/schemastery)

Updates `@biomejs/biome` from 2.2.0 to 2.5.14
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.14/packages/@biomejs/biome)

Updates `@deepseek-ai/cordis` from 4.0.1 to 4.0.4
- [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases)
- [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/HEAD/vendor/cordis)

Updates `@deepseek-ai/dsh-llm` from 0.1.0-rc.6 to 0.1.0-rc.8
- [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases)
- [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.0-rc.8/packages/llm/llm)

Updates `@deepseek-ai/dsh-session` from 0.1.0-rc.6 to 0.1.0-rc.8
- [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases)
- [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.1.0-rc.8/packages/core/session)

Updates `@types/node` from 22.20.1 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `tsx` from 4.23.12 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.15)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.12
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dsh-deps
- dependency-name: "@deepseek-ai/cordis"
  dependency-version: 4.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dsh-deps
- dependency-name: "@deepseek-ai/dsh-llm"
  dependency-version: 0.1.0-rc.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dsh-deps
- dependency-name: "@deepseek-ai/dsh-session"
  dependency-version: 0.1.0-rc.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dsh-deps
- dependency-name: "@deepseek-ai/schemastery"
  dependency-version: 3.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dsh-deps
- dependency-name: "@types/node"
  dependency-version: 26.4.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dsh-deps
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dsh-deps
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dsh-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dsh/dsh-deps-c59f2fbd75 branch from fc2ea0e to 4562b03 Compare September 28, 2026 01:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants