build(deps): bump the production-dependencies group with 8 updates

[dependabot]

Bumps the production-dependencies group with 8 updates:

Package	From	To
@hono/node-server	2.0.12	2.1.0
@opencode-ai/sdk	1.17.11	1.18.15
@pierre/diffs	1.2.10	1.3.5
ai	6.0.206	7.0.56
ai-sdk-provider-claude-code	3.5.0	4.0.1
hono	4.12.32	4.13.1
next-intl	4.13.4	4.13.5
property-information	7.1.0	7.2.0

Updates @hono/node-server from 2.0.12 to 2.1.0

Release notes

Sourced from @​hono/node-server's releases.

v2.1.0

What's Changed

• feat: add Early Hints (HTTP 103) middleware by @​bilal-azam in honojs/node-server#378
• fix(listener): avoid uncaught error when force-closing a non-standard socket by @​mohamedramadan14 in honojs/node-server#383

New Contributors

• @​bilal-azam made their first contribution in honojs/node-server#378
• @​mohamedramadan14 made their first contribution in honojs/node-server#383

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

Commits

• 82ba34e 2.1.0
• 1f2909a fix(listener): avoid uncaught error when force-closing a non-standard socket ...
• 977a242 feat: add Early Hints (HTTP 103) middleware (#378)
• See full diff in compare view

Updates @opencode-ai/sdk from 1.17.11 to 1.18.15

Commits

• See full diff in compare view

Updates @pierre/diffs from 1.2.10 to 1.3.5

Updates ai from 6.0.206 to 7.0.56

Release notes

Sourced from ai's releases.

ai@7.0.56

Patch Changes

• 25c9120: Expose provider metadata on language-model-call end callbacks and telemetry spans.

• 89080c8: fix (ai/gateway): make retried doStart calls idempotent

  generateVideo retries doStart, which creates a billable generation, so a retry after a lost response could start a second one. It now mints one idempotency token per logical start — outside the retry closure — and forwards it as an idempotency-key header, so a provider that deduplicates (the Vercel AI Gateway does) sees the same key on every attempt. GatewayVideoModel simply forwards the caller's headers rather than inferring retry identity from an options object, which would collide across unrelated calls.

• 79d6195: Stop pending and active resumed chat streams after cancellation, and prevent overlapping resumptions from applying stale updates.

• Updated dependencies [89080c8]

• Updated dependencies [89080c8]

  • @​ai-sdk/gateway@​4.0.44

ai@6.0.246

Patch Changes

• Updated dependencies [ee2bf30]
  • @​ai-sdk/provider-utils@​4.0.42
  • @​ai-sdk/gateway@​3.0.166

Changelog

Sourced from ai's changelog.

7.0.56

Patch Changes

• 25c9120: Expose provider metadata on language-model-call end callbacks and telemetry spans.

• 89080c8: fix (ai/gateway): make retried doStart calls idempotent

  generateVideo retries doStart, which creates a billable generation, so a retry after a lost response could start a second one. It now mints one idempotency token per logical start — outside the retry closure — and forwards it as an idempotency-key header, so a provider that deduplicates (the Vercel AI Gateway does) sees the same key on every attempt. GatewayVideoModel simply forwards the caller's headers rather than inferring retry identity from an options object, which would collide across unrelated calls.

• 79d6195: Stop pending and active resumed chat streams after cancellation, and prevent overlapping resumptions from applying stale updates.

• Updated dependencies [89080c8]

• Updated dependencies [89080c8]

  • @​ai-sdk/gateway@​4.0.44

7.0.55

Patch Changes

• 3469d0c: feat: add batch APIs
• Updated dependencies [3469d0c]
  • @​ai-sdk/provider@​4.0.6
  • @​ai-sdk/gateway@​4.0.43
  • @​ai-sdk/provider-utils@​5.0.23

7.0.54

Patch Changes

• a6b17a2: Allow ToolLoopAgent prepareCall callbacks to read and override the top-level reasoning option.
• 5615eb7: Add defaultInstructionsMiddleware for applying default language model instructions while preserving call-level overrides.
• 36a3ff6: Preserve preceding assistant messages when regenerating a response.

7.0.53

Patch Changes

• cd0177b: Filter unresolved tool approval requests and tool parts without state when ignoring incomplete tool calls.
• a09fdef: Release async iterable stream reader locks when source reads fail.
• Updated dependencies [7aeab10]
• Updated dependencies [2b60826]
  • @​ai-sdk/gateway@​4.0.42
  • @​ai-sdk/provider-utils@​5.0.22

... (truncated)

Commits

• 2f04a5e Version Packages (#18560)
• 89080c8 feat (provider/gateway): support async video operations (doStart/doStatus) on...
• 25c9120 feat: expose provider metadata in language model call end callbacks (#18100)
• 79d6195 fix: resumed chat streams updating state after cancellation or a newer resume...
• bb31e6b Version Packages (#18508)
• 3469d0c feat: batch (#18346)
• 46491e9 Version Packages (#18484)
• 36a3ff6 fix: preserve preceding assistant messages when regenerating consecutive assi...
• a6b17a2 fix: allow ToolLoopAgent prepareCall to type top-level reasoning overrides (#...
• d68d496 Version Packages (#18475)
• Additional commits viewable in compare view

Updates ai-sdk-provider-claude-code from 3.5.0 to 4.0.1

Release notes

Sourced from ai-sdk-provider-claude-code's releases.

v4.0.1

Fixed

The Claude Agent SDK's process-exit errors are bare (Claude Code process exited with code <N> — no stderr, no exit code), so when the CLI failed to start or crashed, the real cause sat unseen in error.data.stderr while the visible message stayed generic. (#136)

• Error messages now include the captured stderr. Mapped errors append a single-line excerpt as … | stderr (tail): … (last 5 non-empty lines, ANSI-stripped, 600-character cap), exactly once. The full capture — now bounded at 4000 characters — remains available via getErrorMetadata(error)?.stderr on every mapped path, including timeout errors and stderr-classified authentication failures.
• Classification now reads stderr. Authentication failures whose only evidence is on stderr (e.g. Not authenticated from a hard process exit) now produce a proper LoadAPIKeyError with the login instruction visible, and Request timed out/ETIMEDOUT on stderr classifies as a retryable timeout. Both use deliberately high-precision patterns so incidental stderr noise (a third-party 401 Unauthorized, debug chatter) can't misclassify an unrelated crash.
• Bounded retention. Collected stderr is capped at 4000 characters at the collectors and before any scanning of SDK-provided values, preventing unbounded memory growth on long noisy runs.
• The README gains an Error Diagnostics section documenting all of the above.

Same defect class as ai-sdk-provider-codex-cli#39, fixed there in v2.1.1/v1.3.1.

Full changelog: ben-vargas/ai-sdk-provider-claude-code@v4.0.0...v4.0.1

v4.0.0

Added

• Claude Agent SDK event callbacks - Adds first-class onSdkMessage, onTaskEvent, onHookEvent, onMcpStatusChange, onElicitation, and agent settings so hosts can observe raw SDK messages, task/subagent lifecycle, hook lifecycle, the request's initial MCP server status snapshot, MCP elicitation, and named main-thread agents without reaching through sdkOptions.
• Query controller API - Exports createClaudeCodeQueryController(query) and the ClaudeCodeQueryController type, and adds onQueryControllerCreated for safe live-query controls (interrupt, setPermissionMode, setMcpPermissionModeOverride, setModel, setMaxThinkingTokens, applyFlagSettings, mcpServerStatus, reconnectMcpServer, toggleMcpServer, setMcpServers, getContextUsage, rewindFiles, stopTask, backgroundTasks, and optional streamInput) while keeping the raw SDK Query reachable via controller.rawQuery. Control-protocol calls require the SDK Query to still be live, and most require SDK streaming input/output.
• Expanded provider metadata - Adds taskEvents, hookEvents, initial MCP server-status snapshots in mcpServers, and enriched permissionDenials (agentId, decisionReasonType, and raw when available) under providerMetadata['claude-code'].
• Additional SDK helper re-exports - Re-exports resolveSettings, filterEscalatingDefaultMode, SandboxCredentialsConfig, and SDKFilesPersistedEvent.
• Auto image streaming - With streamingInput: 'auto', supported image payloads now enable the Agent SDK streaming-input path automatically instead of requiring callers to set streamingInput: 'always' only for image prompts; streamingInput: 'off' disables that path and emits a generic type: 'other' image streaming-input warning.

Changed

• AI SDK v7 / LanguageModelV4 port - Updates the provider implementation for the AI SDK v7 provider contract and documents the remaining v7 support boundaries.
• Runtime and package baseline raised - Requires Node.js >=22, ships ESM-only output (CommonJS require() is no longer available), and requires a Zod peer of ^4.1.8.
• Claude Agent SDK pinned at 0.3.205 - Bumps the exact @anthropic-ai/claude-agent-sdk pin to 0.3.205. Upstream fixed the 0.3.198–0.3.202 published .d.ts defect (undeclared SDKControlRequestProgressMessage/SDKConversationResetMessage) in 0.3.203; 0.3.205 also changes Query.interrupt() to return the control-protocol response, which the query controller absorbs so ClaudeCodeQueryController.interrupt() keeps resolving void. The dependency stays an exact pin (not a caret) because upstream releases have repeatedly shipped broken type declarations; the weekly canary gates each pin move.
• Tool-error stream extension removed - Failed tool executions now use the AI SDK spec shape: tool-result with isError: true, replacing the provider-specific tool-error stream extension.
• AI SDK v6 users - Stay on the maintained 3.x line (ai-sdk-v6 dist-tag, ai-sdk-v6 maintenance branch) until adopting AI SDK v7 with the 4.x line.
• Optional-provider feasibility documented - ProviderV4.files() and ProviderV4.skills() remain absent because Claude Agent SDK 0.3.205 has no direct durable provider-reference upload API for files or skill bundles; the README distinguishes inline file data from reusable provider-reference uploads.
• Workflow serialization deferred - Documents that @ai-sdk/provider-utils@5.0.5 exposes WORKFLOW_SERIALIZE, WORKFLOW_DESERIALIZE, and serializeModelOptions() for provider model classes, while this provider defers serialization for provider instances/settings; callback and function settings must be reconstructed by applications.
• Custom/reasoning-file feasibility documented - Documents current V4 behavior for custom and reasoning-file parts: assistant-history replay skips parts Claude Code cannot represent, and the provider does not emit custom output or durable reasoning-file artifacts yet.

Fixed

• SDK peer lockfile fidelity restored - Restores the @anthropic-ai/sdk and @modelcontextprotocol/sdk peer dependency lockfile entries so clean installs get the Agent SDK's full derived type fidelity, and removes the CI --legacy-peer-deps flag now that standard peer resolution succeeds.
• Structured output tool envelope suppressed - JSON-mode structured output now streams and returns only the object text, without leaking the Agent SDK's internal StructuredOutput tool lifecycle as provider-executed tool parts.
• JSON-mode tool argument streaming isolated - Ordinary tool calls in JSON-mode requests no longer leak their argument deltas into response text, emit empty-input tool calls, or produce out-of-order tool-input deltas after the tool call; server/MCP tool blocks (server_tool_use / mcp_tool_use) also no longer leak their argument deltas into response text.
• Assistant history tool-result replay - Replayed assistant history now round-trips tool results correctly under the v7 message/content model instead of losing the result context.
• Non-data image URL schemes rejected safely - Image file parts whose URL uses a scheme other than data: (for example file:// or blob:) now emit the image-URL warning instead of falling through to the base64 fallback, which previously encoded the URL string itself as image data.
• Non-image file parts warn instead of vanishing - Inline file parts with a non-image media type (for example application/pdf) now emit an Unsupported file part call warning instead of being silently dropped from the prompt.
• Prompt-suggestion default documented correctly - The CLI emits prompt_suggestion only when promptSuggestions: true (unset means disabled, verified against Agent SDK 0.3.205); README/JSDoc previously claimed unset meant enabled. validateSettings now warns when onPromptSuggestion is registered without promptSuggestions enabled.

v3.5.3

Maintenance release for the AI SDK v6 line, porting the v4.0.1 fix (#136). The error-construction module is byte-identical across both lines.

Fixed

... (truncated)

Changelog

Sourced from ai-sdk-provider-claude-code's changelog.

[4.0.1] - 2026-07-10

Fixed

• Visible and bounded subprocess diagnostics (#136) - Error messages now carry a trimmed stderr tail, authentication and timeout classification also inspect captured stderr using separate high-precision login/API-key and timeout phrases to avoid incidental matches, and retained stderr stored in mapped error metadata, including timeout errors, is capped at 4000 characters.

[4.0.0] - 2026-07-10

Added

• Claude Agent SDK event callbacks - Adds first-class onSdkMessage, onTaskEvent, onHookEvent, onMcpStatusChange, onElicitation, and agent settings so hosts can observe raw SDK messages, task/subagent lifecycle, hook lifecycle, the request's initial MCP server status snapshot, MCP elicitation, and named main-thread agents without reaching through sdkOptions.
• Query controller API - Exports createClaudeCodeQueryController(query) and the ClaudeCodeQueryController type, and adds onQueryControllerCreated for safe live-query controls (interrupt, setPermissionMode, setMcpPermissionModeOverride, setModel, setMaxThinkingTokens, applyFlagSettings, mcpServerStatus, reconnectMcpServer, toggleMcpServer, setMcpServers, getContextUsage, rewindFiles, stopTask, backgroundTasks, and optional streamInput) while keeping the raw SDK Query reachable via controller.rawQuery. Control-protocol calls require the SDK Query to still be live, and most require SDK streaming input/output.
• Expanded provider metadata - Adds taskEvents, hookEvents, initial MCP server-status snapshots in mcpServers, and enriched permissionDenials (agentId, decisionReasonType, and raw when available) under providerMetadata['claude-code'].
• Additional SDK helper re-exports - Re-exports resolveSettings, filterEscalatingDefaultMode, SandboxCredentialsConfig, and SDKFilesPersistedEvent.
• Auto image streaming - With streamingInput: 'auto', supported image payloads now enable the Agent SDK streaming-input path automatically instead of requiring callers to set streamingInput: 'always' only for image prompts; streamingInput: 'off' disables that path and emits a generic type: 'other' image streaming-input warning.

Changed

• AI SDK v7 / LanguageModelV4 port - Updates the provider implementation for the AI SDK v7 provider contract and documents the remaining v7 support boundaries.
• Runtime and package baseline raised - Requires Node.js >=22, ships ESM-only output (CommonJS require() is no longer available), and requires a Zod peer of ^4.1.8.
• Claude Agent SDK pinned at 0.3.205 - Bumps the exact @anthropic-ai/claude-agent-sdk pin to 0.3.205. Upstream fixed the 0.3.198–0.3.202 published .d.ts defect (undeclared SDKControlRequestProgressMessage/SDKConversationResetMessage) in 0.3.203; 0.3.205 also changes Query.interrupt() to return the control-protocol response, which the query controller absorbs so ClaudeCodeQueryController.interrupt() keeps resolving void. The dependency stays an exact pin (not a caret) because upstream releases have repeatedly shipped broken type declarations; the weekly canary gates each pin move.
• Tool-error stream extension removed - Failed tool executions now use the AI SDK spec shape: tool-result with isError: true, replacing the provider-specific tool-error stream extension.
• AI SDK v6 users - Stay on the maintained 3.x line (ai-sdk-v6 dist-tag, ai-sdk-v6 maintenance branch) until adopting AI SDK v7 with the 4.x line.
• Optional-provider feasibility documented - ProviderV4.files() and ProviderV4.skills() remain absent because Claude Agent SDK 0.3.205 has no direct durable provider-reference upload API for files or skill bundles; the README distinguishes inline file data from reusable provider-reference uploads.
• Workflow serialization deferred - Documents that @ai-sdk/provider-utils@5.0.5 exposes WORKFLOW_SERIALIZE, WORKFLOW_DESERIALIZE, and serializeModelOptions() for provider model classes, while this provider defers serialization for provider instances/settings; callback and function settings must be reconstructed by applications.
• Custom/reasoning-file feasibility documented - Documents current V4 behavior for custom and reasoning-file parts: assistant-history replay skips parts Claude Code cannot represent, and the provider does not emit custom output or durable reasoning-file artifacts yet.

Fixed

• SDK peer lockfile fidelity restored - Restores the @anthropic-ai/sdk and @modelcontextprotocol/sdk peer dependency lockfile entries so clean installs get the Agent SDK's full derived type fidelity, and removes the CI --legacy-peer-deps flag now that standard peer resolution succeeds.
• Structured output tool envelope suppressed - JSON-mode structured output now streams and returns only the object text, without leaking the Agent SDK's internal StructuredOutput tool lifecycle as provider-executed tool parts.
• JSON-mode tool argument streaming isolated - Ordinary tool calls in JSON-mode requests no longer leak their argument deltas into response text, emit empty-input tool calls, or produce out-of-order tool-input deltas after the tool call; server/MCP tool blocks (server_tool_use / mcp_tool_use) also no longer leak their argument deltas into response text.
• Assistant history tool-result replay - Replayed assistant history now round-trips tool results correctly under the v7 message/content model instead of losing the result context.
• Non-data image URL schemes rejected safely - Image file parts whose URL uses a scheme other than data: (for example file:// or blob:) now emit the image-URL warning instead of falling through to the base64 fallback, which previously encoded the URL string itself as image data.
• Non-image file parts warn instead of vanishing - Inline file parts with a non-image media type (for example application/pdf) now emit an Unsupported file part call warning instead of being silently dropped from the prompt.
• Prompt-suggestion default documented correctly - The CLI emits prompt_suggestion only when promptSuggestions: true (unset means disabled, verified against Agent SDK 0.3.205); README/JSDoc previously claimed unset meant enabled. validateSettings now warns when onPromptSuggestion is registered without promptSuggestions enabled.

[3.5.1] - 2026-07-06

Fixed

• Weekly SDK canary triage for SDKMessage collapse - The canary against @anthropic-ai/claude-agent-sdk@0.3.201 failed with two misleading TS7006 errors because that release's published sdk.d.ts references SDKControlRequestProgressMessage and SDKConversationResetMessage in the SDKMessage union without declaring either type (upstream anthropics/claude-agent-sdk-typescript#363, unfixed as of 0.3.201). Under this repository's skipLibCheck setting, those missing names collapse the whole union to any, hiding the real upstream type breakage behind uncontextualized callbacks.
• Result-error filters hardened without runtime changes - The two result-error filter callbacks are now explicitly annotated as (e: unknown): e is string, so collapsed contextual typing cannot surface as TS7006. The filter predicate and runtime behavior are unchanged.
• Self-documenting compile-time guard for broken SDK releases - src/options-coverage.test.ts now fails typecheck with a single named error (SDKMessage_collapsed_to_any__...) whenever the SDKMessage union collapses, keeping the weekly canary red for the real reason and blocking a dependency bump onto a broken SDK release.
• Canary failure guidance split by failure mode - Canary workflow comments and the auto-filed issue text now give separate triage guidance for Options drift versus SDKMessage collapse. The pinned dependency is unchanged (^0.3.170, with lockfile 0.3.170), and this release makes no runtime behavior changes.

Commits

• 0bae2dd fix: surface captured stderr in error messages and classification (#137)
• 836895e feat!: adopt AI SDK v7 (LanguageModelV4) (#134)
• e294bc5 fix: fail canary with a named error on collapsed SDKMessage types (v3.5.1) (#...
• See full diff in compare view

Updates hono from 4.12.32 to 4.13.1

Release notes

Sourced from hono's releases.

v4.13.1

What's Changed

• fix(trie-router): count every slash a pattern consumes by @​Jaybhade in honojs/hono#5189
• fix(utils/stream): re-acquire writer lock when pipe() throws by @​Sriharsha-dev369 in honojs/hono#4988
• fix(etag): skip unsafe methods or error responses on non-* case by @​na-trium-144 in honojs/hono#5196

New Contributors

• @​Jaybhade made their first contribution in honojs/hono#5189
• @​Sriharsha-dev369 made their first contribution in honojs/hono#4988

Full Changelog: honojs/hono@v4.13.0...v4.13.1

v4.13.0

Hono v4.13.0 is now available!

The highlight of this release is performance: a batch of low-level optimizations makes the core request/response path significantly faster — up to 1.25x on common routes in our benchmark. This release also adds first-class support for the HTTP QUERY method, defined in RFC 10008, a new Method Not Allowed middleware, and more.

Performance improvements

This release includes a series of small optimizations: skipping unnecessary Headers allocations, replacing regex tests with indexOf, allocating internal state lazily, and more.

Here is benchmarks/fetch comparing v4.12 and v4.13 (ROUNDS=5 ./compare.sh, Bun 1.4.0, Apple Silicon — each measurement runs in a fresh process, and the variant order is reversed every round to avoid warm-up bias):

Benchmark	v4.12	v4.13	Speedup
ping — GET /	165.83 ns	163.99 ns	1.01x
query — GET /id/1?name=bun	674.40 ns	616.99 ns	1.09x
json — GET /user	528.99 ns	422.44 ns	1.25x
body — POST /json	1.16 µs	1.00 µs	1.15x

The individual changes:

• perf(context): iterate the header record with for..in honojs/hono#5118
• perf(url): replace regex tests with indexOf honojs/hono#5121
• perf(context): skip Headers creation when there are no headers to merge honojs/hono#5122
• perf(urls): refactor tryDecodeURIComponent honojs/hono#5158
• perf(request): allocate #validatedData lazily honojs/hono#5175
• perf(request): probe the body cache without allocating honojs/hono#5176

In addition, the RegExpRouter rewrite described below makes route registration plus the first match roughly 20% faster.

Thanks @​kibertoad for the contributions!

First-class QUERY method support

The QUERY method — a safe, idempotent method that carries a request body — is now a first-class citizen in Hono. You can define QUERY handlers with app.query():

const app = new Hono()
</tr></table>

... (truncated)

Commits

• cf78528 4.13.1
• f6aa913 fix(etag): skip unsafe methods or error responses on non-* case (#5196)
• cd31bc1 fix(utils/stream): re-acquire writer lock when pipe() throws (#4988)
• 569b419 fix(trie-router): count every slash a pattern consumes (#5189)
• 192768f 4.13.0
• b0c2d90 Merge pull request #5154 from honojs/next
• 8f07028 fix(compress): set Vary: Accept-Encoding on negotiated responses (#5137)
• 8a0b18f feat(reg-exp-router): throw UnsupportedPathError during route registration (#...
• 3feb355 fix(jsx): allow a function component to return an array (#5179)
• 5d911d2 feat(utils/headers): add HTTP fields newly registered with IANA (#5153)
• Additional commits viewable in compare view

Updates next-intl from 4.13.4 to 4.13.5

Release notes

Sourced from next-intl's releases.

v4.13.5

4.13.5 (2026-08-04)

Bug Fixes

• Deprecate setRequestLocale and add blog post on next/root-params (#1632) – by @​amannn

Changelog

Sourced from next-intl's changelog.

4.13.5 (2026-08-04)

Bug Fixes

• Deprecate setRequestLocale and add blog post on next/root-params (#1632) (1446d0d) – by @​amannn

Commits

• 672b4b6 v4.13.5
• 1446d0d fix: Deprecate setRequestLocale and add blog post on next/root-params (#1...
• e671f92 docs: Add guidance for messages defined outside of components (#2367)
• a2da470 docs: Add studio link to footer (#2366)
• 14e7406 docs: Update eloqnt/cli links
• 567afd1 ci: Rename root publish script to release (#2365)
• 87b1a2a ci: Fix release recovery to run from release.yml (Trusted Publishing) (#2364)
• 49005db ci: Add manual recovery workflow for partial npm publishes (#2363)
• See full diff in compare view

Updates property-information from 7.1.0 to 7.2.0

Release notes

Sourced from property-information's releases.

7.2.0

Add

• cb86e8b Add new properties

Fix

• 992bfbc Add number for colSpan by @​johanrd in wooorm/property-information#26

Full Changelog: wooorm/property-information@7.1.0...7.2.0

Commits

• f6f547b 7.2.0
• 992bfbc Add number for colSpan
• 0839151 Update dev-dependencies
• cb86e8b Add new properties
• 83ece09 Update actions
• 930b589 Add missing JSDoc description
• a2822cf Update dev-dependencies
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions