Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 3 updates#969

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-1a783b8783
Closed

build(deps): bump the minor-and-patch group across 1 directory with 3 updates#969
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-1a783b8783

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 3 updates in the / directory: @agentclientprotocol/sdk, @powersync/common and @powersync/tanstack-react-query.

Updates @agentclientprotocol/sdk from 0.22.1 to 0.26.0

Release notes

Sourced from @​agentclientprotocol/sdk's releases.

v0.26.0

0.26.0 (2026-06-16)

Features

  • schema: Update to v1.13.7 of the schema (#179) (34885b6)

v0.25.1

0.25.1 (2026-06-13)

Bug Fixes

v0.25.0

0.25.0 (2026-06-05)

Features

v0.24.0

0.24.0 (2026-06-02)

Features

  • Add resilient schema deserialization (#167) (5864e73)
  • schema: Stabilize addl dirs and remove unstable model selectors (#165) (fa6e302)

v0.23.0

0.23.0 (2026-06-01)

Features

  • schema: Stabilize logout and update schema to v0.13.4 (#163) (cfd900a)
Changelog

Sourced from @​agentclientprotocol/sdk's changelog.

0.26.0 (2026-06-16)

Features

  • schema: Update to v1.13.7 of the schema (#179) (34885b6)

0.25.1 (2026-06-13)

Bug Fixes

0.25.0 (2026-06-05)

Features

0.24.0 (2026-06-02)

Features

  • Add resilient schema deserialization (#167) (5864e73)
  • schema: Stabilize addl dirs and remove unstable model selectors (#165) (fa6e302)

0.23.0 (2026-06-01)

Features

  • schema: Stabilize logout and update schema to v0.13.4 (#163) (cfd900a)
Commits
  • 73bc306 chore(main): release 0.26.0 (#180)
  • 34885b6 feat(schema): Update to v1.13.7 of the schema (#179)
  • 284245b chore(deps): bump the minor group with 23 updates (#178)
  • cd8dc79 chore(main): release 0.25.1 (#171)
  • d9fafa2 fix: Zod type inference errors (#177)
  • 04c7fd9 chore(deps): bump esbuild from 0.28.0 to 0.28.1 (#176)
  • 8d9de29 chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#173)
  • 8ca7903 chore(deps): bump crate-ci/typos from 1.47.0 to 1.47.2 (#174)
  • 1c6c0b8 chore(deps-dev): bump @​types/node in the minor group (#175)
  • be44483 fix: cleanup zod generation (#170)
  • Additional commits viewable in compare view

Updates @powersync/common from 1.53.1 to 1.54.0

Release notes

Sourced from @​powersync/common's releases.

@​powersync/common@​1.54.0

Minor Changes

  • 0ee8051: Allow watched attachment items to provide a media type for queued downloads.
  • 17869e7: Fix createDiffTrigger acquiring its own read lock before running setup, even when a setupContext was provided. On platforms where read and write access share a single connection (e.g. web), this deadlocked when createDiffTrigger was called inside a write lock.
  • 93199a7: [Attachments] Added withAttachmentContext helper method which exposes an AttachmentContext for custom attachment logic.

@​powersync/common@​1.53.2

Patch Changes

  • ac183c2: Attempt a CRUD upload everytime connect() is called, even if we're unable to connect.
Commits
  • 33dc860 Version Packages (#982)
  • 17869e7 fix: Fix createDiffTrigger deadlock when called with a setupContext on ...
  • b9cc03d Upgrade shell-quote to fix audit issue
  • 93199a7 feat: expose AttachmentQueue's AttachmentContext (#985)
  • 11cebe8 Adopt API extractor tool for @powersync/common (#984)
  • 0ee8051 feat: support mediaType in watched attachments (#975)
  • 1435c7c Vitest 4 upgrade (#750)
  • 5f65b5f Fix local-linking build
  • 41db2cc Fix missing reference
  • e575340 Fix react-multi-client demo
  • Additional commits viewable in compare view

Updates @powersync/tanstack-react-query from 0.2.7 to 0.2.9

Release notes

Sourced from @​powersync/tanstack-react-query's releases.

@​powersync/tanstack-react-query@​0.2.9

Patch Changes

  • Updated dependencies [0ee8051]
  • Updated dependencies [17869e7]
  • Updated dependencies [93199a7]
    • @​powersync/common@​1.54.0
    • @​powersync/react@​1.10.0

@​powersync/tanstack-react-query@​0.2.8

Patch Changes

  • Updated dependencies [ac183c2]
    • @​powersync/common@​1.53.2
    • @​powersync/react@​1.10.0
Commits
  • 33dc860 Version Packages (#982)
  • 17869e7 fix: Fix createDiffTrigger deadlock when called with a setupContext on ...
  • b9cc03d Upgrade shell-quote to fix audit issue
  • 93199a7 feat: expose AttachmentQueue's AttachmentContext (#985)
  • 11cebe8 Adopt API extractor tool for @powersync/common (#984)
  • 0ee8051 feat: support mediaType in watched attachments (#975)
  • 1435c7c Vitest 4 upgrade (#750)
  • 5f65b5f Fix local-linking build
  • 41db2cc Fix missing reference
  • e575340 Fix react-multi-client demo
  • Additional commits viewable in compare view


Note

Medium Risk
No app code changes, but upgrades touch agent protocol (ACP) and local/sync data paths (PowerSync); regressions would show up in agent connectivity or sync/query behavior rather than in this diff itself.

Overview
Bumps three production dependencies in package.json only—no application source changes.

@agentclientprotocol/sdk moves from ^0.22.1 to ^0.26.0, pulling in newer ACP schema (through v1.13.7), stabilized session/logout/deleteSession behavior, and Zod generation fixes. The app’s ACP client/adapter code will compile and run against the updated SDK types and protocol surface.

@powersync/common goes from 1.53.1 to 1.54.0, including a createDiffTrigger deadlock fix on web, attachment helpers/media type support, and CRUD upload-on-connect() behavior. @powersync/tanstack-react-query is bumped from 0.2.7 to 0.2.9 to stay aligned with that common release for Drizzle-backed useQuery hooks.

Reviewed by Cursor Bugbot for commit add3d60. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 10, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-1a783b8783 branch from 8fddaec to 3872589 Compare June 17, 2026 19:36

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 3872589. Configure here.

Comment thread package.json
"@powersync/drizzle-driver": "0.7.3",
"@powersync/react": "1.10.0",
"@powersync/tanstack-react-query": "0.2.7",
"@powersync/tanstack-react-query": "0.2.9",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PowerSync common web mismatch

Medium Severity

Bumping @powersync/common to 1.54.0 while @powersync/web stays at 1.38.1 (which depends on @powersync/common@1.53.1) can install two copies of @powersync/common. ThunderboltPowerSyncDatabase then mixes @powersync/web with TransformableBucketStorage from the newer common, which risks broken sync or adapter integration.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 3872589. Configure here.

… updates

Bumps the minor-and-patch group with 3 updates in the / directory: [@agentclientprotocol/sdk](https://github.com/agentclientprotocol/typescript-sdk), [@powersync/common](https://github.com/powersync-ja/powersync-js) and [@powersync/tanstack-react-query](https://github.com/powersync-ja/powersync-js).


Updates `@agentclientprotocol/sdk` from 0.22.1 to 0.26.0
- [Release notes](https://github.com/agentclientprotocol/typescript-sdk/releases)
- [Changelog](https://github.com/agentclientprotocol/typescript-sdk/blob/main/CHANGELOG.md)
- [Commits](agentclientprotocol/typescript-sdk@v0.22.1...v0.26.0)

Updates `@powersync/common` from 1.53.1 to 1.54.0
- [Release notes](https://github.com/powersync-ja/powersync-js/releases)
- [Commits](https://github.com/powersync-ja/powersync-js/compare/@powersync/common@1.53.1...@powersync/common@1.54.0)

Updates `@powersync/tanstack-react-query` from 0.2.7 to 0.2.9
- [Release notes](https://github.com/powersync-ja/powersync-js/releases)
- [Commits](https://github.com/powersync-ja/powersync-js/compare/@powersync/tanstack-react-query@0.2.7...@powersync/tanstack-react-query@0.2.9)

---
updated-dependencies:
- dependency-name: "@agentclientprotocol/sdk"
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@powersync/common"
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@powersync/tanstack-react-query"
  dependency-version: 0.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the minor-and-patch group across 1 directory with 3 updates build(deps): bump the minor-and-patch group across 1 directory with 3 updates Jun 24, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-1a783b8783 branch from 3872589 to add3d60 Compare June 24, 2026 19:36
@dependabot @github

dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 1, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-1a783b8783 branch July 1, 2026 19:40
@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown

Preview environment destroyed 🧹

Stack preview-pr-969 and its Cloudflare subdomain have been cleaned up.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants