chore(deps): bump the production-minor-patch group with 7 updates

[dependabot]

Bumps the production-minor-patch group with 7 updates:

Package	From	To
drizzle-orm	0.45.3	0.45.4
posthog-node	5.55.0	5.55.1
@rollup/rollup-linux-x64-gnu	4.64.2	4.64.3
@anthropic-ai/claude-agent-sdk	0.3.293	0.3.295
@anthropic-ai/sdk	0.132.0	0.132.1
@clerk/nextjs	7.9.12	7.9.13
vite	8.3.3	8.3.4

Updates drizzle-orm from 0.45.3 to 0.45.4

Release notes

Sourced from drizzle-orm's releases.

0.45.4

• Fixed postgres-js not using prepared queries on explicit .prepare(name)

Commits

• eab8bed Fixed postgres-js not using prepared queries on explicit .prepare(name) (...
• See full diff in compare view

Updates posthog-node from 5.55.0 to 5.55.1

Release notes

Sourced from posthog-node's releases.

posthog-node@5.55.1

5.55.1

Patch Changes

• #5134 175413f Thanks @​posthog! - Evict only the least recently used distinct ids from the $feature_flag_called dedupe cache instead of clearing it entirely. distinctIdHasSentFlagCalls now returns a snapshot, so writing or deleting individual keys on it no longer changes deduplication. (2026-10-08)

Changelog

Sourced from posthog-node's changelog.

5.55.1

Patch Changes

• #5134 175413f Thanks @​posthog! - Evict only the least recently used distinct ids from the $feature_flag_called dedupe cache instead of clearing it entirely. distinctIdHasSentFlagCalls now returns a snapshot, so writing or deleting individual keys on it no longer changes deduplication. (2026-10-08)

Commits

• 524cc47 chore: update versions and lockfile [version bump]
• 175413f fix(node): evict LRU distinct ids from the $feature_flag_called dedupe cache ...
• See full diff in compare view

Updates @rollup/rollup-linux-x64-gnu from 4.64.2 to 4.64.3

Release notes

Sourced from @​rollup/rollup-linux-x64-gnu's releases.

v4.64.3

4.64.3

2026-10-08

Bug Fixes

• Fix a performance regression when bundling code with deeply nested property calls (#6565)

Pull Requests

• #6565: Fix path-dependent explosion when including call arguments of reassigned variables (@​lukastaegert)

Changelog

Sourced from @​rollup/rollup-linux-x64-gnu's changelog.

4.64.3

2026-10-08

Bug Fixes

• Fix a performance regression when bundling code with deeply nested property calls (#6565)

Pull Requests

• #6565: Fix path-dependent explosion when including call arguments of reassigned variables (@​lukastaegert)

Commits

• eea952f 4.64.3
• f1f7c4a Fix path-dependent explosion when including call arguments of reassigned vari...
• See full diff in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.293 to 0.3.295

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.295

What's changed

• Added overageEnabled to SDKRateLimitInfo: on usage-limit warnings, whether the account has extra usage turned on
• Fixed an MCP server added with mcp_set_servers sometimes keeping an outdated tool list when another server in the same request connected later
• Fixed assistant text blocks losing their citations in streamed responses
• Fixed Claude being told "disabled by the user" about an in-process MCP server that was switched off with toggleMcpServer()
• Fixed rate_limit_event with status allowed_warning omitting overageStatus, overageResetsAt and overageDisabledReason, which allowed and rejected events already carry
• Changed MCP tool descriptions the model loads through tool search, including those from in-process SDK servers, to be cut at 16,384 characters instead of 2,048
• Changed a permission answer whose updatedPermissions holds over 4,096 updates, rules and directories to count as a denial
• Changed tool_result_meta[].non_execution_kind to be absent when a mod withheld the result of a tool that ran without error; it was permission-rule
• Changed pasted_content on user messages to be ignored when it holds over 1,000 entries and blocks in all
• Changed how the SDK passes option values to Claude Code: the values of its named options are now sent in the same argument as their flag (--flag=value)
• Changed tool_use_result for MCP Apps tools: structuredContent or _meta over 8,388,608 JSON characters is left off, and _meta.ui with no ui:// resource no longer lifts the ordinary caps
• Changed tool_use_result for MCP tools: when a long result is saved to a file, or cut because it could not be, the text kept past 500,000 characters is dropped, with a note of how much
• Changed tool_use_result for MCP tools: a result _meta over 1,048,576 JSON characters is left off, except for SDK-server tools; so is text blocks' _meta that totals over 65,536
• Updated to parity with Claude Code v2.1.295

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.295
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.295
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.295
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.295

v0.3.294

What's changed

• Updated to parity with Claude Code v2.1.294

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.294
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.294
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.294
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.294

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.295

• Added overageEnabled to SDKRateLimitInfo: on usage-limit warnings, whether the account has extra usage turned on
• Fixed an MCP server added with mcp_set_servers sometimes keeping an outdated tool list when another server in the same request connected later
• Fixed assistant text blocks losing their citations in streamed responses
• Fixed Claude being told "disabled by the user" about an in-process MCP server that was switched off with toggleMcpServer()
• Fixed rate_limit_event with status allowed_warning omitting overageStatus, overageResetsAt and overageDisabledReason, which allowed and rejected events already carry
• Changed MCP tool descriptions the model loads through tool search, including those from in-process SDK servers, to be cut at 16,384 characters instead of 2,048
• Changed a permission answer whose updatedPermissions holds over 4,096 updates, rules and directories to count as a denial
• Changed tool_result_meta[].non_execution_kind to be absent when a mod withheld the result of a tool that ran without error; it was permission-rule
• Changed pasted_content on user messages to be ignored when it holds over 1,000 entries and blocks in all
• Changed how the SDK passes option values to Claude Code: the values of its named options are now sent in the same argument as their flag (--flag=value)
• Changed tool_use_result for MCP Apps tools: structuredContent or _meta over 8,388,608 JSON characters is left off, and _meta.ui with no ui:// resource no longer lifts the ordinary caps
• Changed tool_use_result for MCP tools: when a long result is saved to a file, or cut because it could not be, the text kept past 500,000 characters is dropped, with a note of how much
• Changed tool_use_result for MCP tools: a result _meta over 1,048,576 JSON characters is left off, except for SDK-server tools; so is text blocks' _meta that totals over 65,536
• Updated to parity with Claude Code v2.1.295

0.3.294

• Updated to parity with Claude Code v2.1.294

Commits

• da321bb chore: Update CHANGELOG.md
• 799dc78 chore: Update CHANGELOG.md
• See full diff in compare view

Updates @anthropic-ai/sdk from 0.132.0 to 0.132.1

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk-v0.132.1

Bug Fixes

• client: throw before sending a request with an empty path parameter

Chores

• ci: check that pull requests update the changelog
• ci: publish every package from the publish workflow
• docs: note that listing Claude Console spend limits is in early access

Documentation

• split CLAUDE.md into shared, TypeScript, and repository rules

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.132.1 (2026-10-08)

Bug Fixes

• client: throw before sending a request with an empty path parameter

Chores

• ci: check that pull requests update the changelog
• ci: publish every package from the publish workflow
• docs: note that listing Claude Console spend limits is in early access

Documentation

• split CLAUDE.md into shared, TypeScript, and repository rules

Commits

• 0f9fdca release: . 0.132.1, packages/aws-sdk 0.7.9, packages/bedrock-sdk 0.34.4, pack...
• 484f92a Merge pull request #906 from anthropics/synced/published
• da86334 chore(internal): update changelog (#907)
• 1089832 chore(ci): check that pull requests update the changelog
• d510609 fix(client): throw before sending a request with an empty path parameter
• 9296068 docs: split CLAUDE.md into shared, TypeScript, and repository rules
• c0f92c3 chore(ci): publish every package from the publish workflow
• da181fd Merge branch 'main' into next
• 1de9b82 chore(docs): note that listing Claude Console spend limits is in early access
• See full diff in compare view

Updates @clerk/nextjs from 7.9.12 to 7.9.13

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​7.9.13

Patch Changes

• Export <HandleSSOCallback /> from @clerk/nextjs. Previously, importing it from @clerk/nextjs failed, so it could not be used on the SSO callback route of a custom flow. (#10140) by @​manovotny

Changelog

Sourced from @​clerk/nextjs's changelog.

7.9.13

Patch Changes

• Export <HandleSSOCallback /> from @clerk/nextjs. Previously, importing it from @clerk/nextjs failed, so it could not be used on the SSO callback route of a custom flow. (#10140) by @​manovotny

Commits

• b08dd03 ci(repo): Version packages (#10141)
• 4a07953 fix(nextjs): Export HandleSSOCallback from @​clerk/nextjs (#10140)
• See full diff in compare view

Updates vite from 8.3.3 to 8.3.4

Release notes

Sourced from vite's releases.

v8.3.4

Features

• bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

• avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
• build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
• build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
• bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
• client: skip rewriting unchanged adopted styles (#23697) (fa71469)
• css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
• deps: update all non-major dependencies (#23648) (8a4c19c)
• deps: update rolldown-related dependencies (#23649) (794516d)
• dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
• don't treat modules ending with js-like query as js (#23687) (fcb6f12)
• html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
• html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
• optimizer: scan deep imports with custom extensions (#23678) (8579189)
• remove input option unescaping for now (#23694) (facc2fb)
• server: match static aliases on path boundaries (#23643) (b28db28)
• watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

• module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

• bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

Changelog

Sourced from vite's changelog.

8.3.4 (2026-10-08)

Features

• bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

• avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
• build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
• build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
• bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
• client: skip rewriting unchanged adopted styles (#23697) (fa71469)
• css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
• deps: update all non-major dependencies (#23648) (8a4c19c)
• deps: update rolldown-related dependencies (#23649) (794516d)
• dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
• don't treat modules ending with js-like query as js (#23687) (fcb6f12)
• html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
• html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
• optimizer: scan deep imports with custom extensions (#23678) (8579189)
• remove input option unescaping for now (#23694) (facc2fb)
• server: match static aliases on path boundaries (#23643) (b28db28)
• watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

• module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

• bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

Commits

• b6c20f6 release: v8.3.4 (#23702)
• b28db28 fix(server): match static aliases on path boundaries (#23643)
• bc0f21c feat(bundled-dev): support import.meta.hot.acceptExports (#23463)
• fa71469 fix(client): skip rewriting unchanged adopted styles (#23697)
• 2a8c0f0 fix(build): correct preloads when chunkImportMap is enabled with non-root bas...
• 3a7f2ae fix(html): avoid adding filesystem root to watcher (#23689)
• facc2fb fix: remove input option unescaping for now (#23694)
• 70d56ea fix(dev): a restart requested during a restart used to be dropped (fix #23392...
• cf52011 fix(css): resolve imported preprocessors from their file path with lightningc...
• fcb6f12 fix: don't treat modules ending with js-like query as js (#23687)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: supply-chain. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 843fc1f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 04ed0e54-954d-4e55-b07a-911bf8f865e5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}