Skip to content

fix(deps): update all non-major dependencies - #497

Open
renovate-appwrite[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

renovate-appwrite[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate-appwrite

@renovate-appwrite renovate-appwrite Bot commented Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@elevenlabs/elevenlabs-js 2.60.0 → 2.76.0 age confidence dependencies minor 2.77.0
@langchain/core (source) 1.2.4 → 1.3.4 age confidence dependencies minor 1.3.7 (+2)
@langchain/openai (source) 1.5.5 → 1.8.0 age confidence dependencies minor 1.8.3 (+2)
@qdrant/js-client-rest (source) 1.18.0 → 1.20.0 age confidence dependencies minor
@types/node (source) 22.20.4 → 22.20.5 age confidence devDependencies patch
@types/node (source) 22.20.1 → 22.20.5 age confidence devDependencies patch
Appwrite [0.21.2,0.22.0) → [0.21.2,0.27.0] age confidence nuget minor
actions/setup-dotnet v6.0.0 → v6.1.0 age confidence action minor
actions/setup-node v7.0.0 → v7.1.0 age confidence action minor
actions/setup-python v7.0.0 → v7.1.0 age confidence action minor
appwrite 0.4.0 → 0.22.0 age confidence dependencies minor 0.23.0
appwrite '>= 27.0.0', '< 28.0.0' → '>= 27.0.0', '< 28.4.1' age confidence minor
appwrite/sdk-for-swift from: "13.2.2" → from: "13.3.0" age confidence minor
dart-lang/setup-dart v1.7.2 → v1.8.1 age confidence action minor
dodopayments 2.54.0 → 2.61.1 age confidence dependencies minor 2.62.0
dotenv (changelog) '>= 2.8.1', '< 3.0.0' → '>= 2.8.1', '< 3.2.1' age confidence minor
drizzle-orm (source) 0.45.3 → 0.45.4 age confidence dependencies patch
esbuild ^0.25.12 → ^0.28.0 age confidence overrides minor
github.com/appwrite/sdk-for-go v0.13.1 → v0.17.0 age confidence require minor
go 1.26.10 → 1.27.3 age confidence uses-with minor 1.27.4
json (changelog) '>= 2.7.6', '< 3.0.0' → '>= 2.7.6', '< 3.1.1' age confidence minor
langchain (source) 1.5.4 → 1.6.1 age confidence dependencies minor 1.6.4 (+2)
markdown-table 3.0.3 → 3.1.0 age confidence dependencies minor
meilisearch >=0.30.0,<0.31.0 → >=0.43.0,<0.44.0 age confidence minor
meilisearch ^0.40.0 → ^0.62.0 age confidence dependencies minor 0.63.0
meilisearch ^0.35.0 → ^0.62.0 age confidence dependencies minor 0.63.0
mongodb 6.21.0 → 6.22.0 age confidence dependencies minor
node-appwrite (source) 29.0.0 → 29.4.0 age confidence dependencies minor
node-appwrite (source) 29.1.0 → 29.4.0 age confidence dependencies minor
nodemailer (source) 10.2.1 → 10.3.1 age confidence dependencies minor 10.5.0 (+2)
openai >=0.27.8,<0.28.0 → >=0.28.1,<0.29.0 age confidence minor
openai-php/client ^0.6.4 → ^0.22.0 age confidence require minor
prettier (source) 3.9.6 → 3.9.10 age confidence devDependencies patch 3.10.0
prettier (source) 3.9.9 → 3.9.10 age confidence devDependencies patch 3.10.0
python 3.11 → 3.15 age confidence uses-with minor
replicate ^0.29.4 → ^0.34.0 age confidence dependencies minor
ruby (source) 3.1 → 3.4 age confidence uses-with minor
ruby/setup-ruby v1.320.0 → v1.336.0 age confidence action minor v1.338.0 (+1)
serde_json 1.0.149 → 1.0.154 age confidence dependencies patch
shivammathur/setup-php 2.37.2 → 2.40.0 age confidence action minor
tokio (source) 1.53.3 → 1.54.1 age confidence dependencies minor
typescript (source) 5.4.5 → 5.9.3 age confidence dependencies minor
com.google.code.gson:gson 2.10.1 → 2.15.0 age confidence dependencies minor
com.meilisearch.sdk:meilisearch-java 0.11.2 → 0.22.1 age confidence dependencies minor
io.appwrite:sdk-for-kotlin 4.0.0 → 4.1.0 age confidence dependencies minor
io.appwrite:sdk-for-kotlin 12.2.1 → 12.3.0 age confidence dependencies minor

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

elevenlabs/elevenlabs-js (@​elevenlabs/elevenlabs-js)

v2.76.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.75.0...v2.76.0

v2.75.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.74.0...v2.75.0

v2.74.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.73.0...v2.74.0

v2.73.0

Compare Source

What's Changed

New Contributors

Full Changelog: elevenlabs/elevenlabs-js@v2.72.0...v2.73.0

v2.72.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.71.0...v2.72.0

v2.71.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.70.0...v2.71.0

v2.70.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.69.0...v2.70.0

v2.69.0

Compare Source

What's Changed

New Contributors

Full Changelog: elevenlabs/elevenlabs-js@v2.68.0...v2.69.0

v2.68.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.67.0...v2.68.0

v2.67.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.66.0...v2.67.0

v2.66.0

Compare Source

What's Changed

New Contributors

Full Changelog: elevenlabs/elevenlabs-js@v2.65.0...v2.66.0

v2.65.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.64.0...v2.65.0

v2.64.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.63.0...v2.64.0

v2.63.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.62.0...v2.63.0

v2.62.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.61.0...v2.62.0

v2.61.0

Compare Source

What's Changed

Full Changelog: elevenlabs/elevenlabs-js@v2.60.0...v2.61.0

langchain-ai/langchainjs (@​langchain/core)

v1.3.4

Compare Source

Patch Changes
  • #​12104 e006308 Thanks @​hntrl! - Export omitPayload from @langchain/core/tracers/tracer_langchain, a TracePolicy processor that records an empty payload while keeping the run.

  • #​12102 6d157ae Thanks @​hntrl! - LangChainTracer now still sends and ends a run when its trace policy's processInputs or processOutputs throws, with that payload dropped and the error set, instead of skipping the run or leaving it pending in LangSmith.

v1.3.3

Compare Source

Patch Changes
  • #​11567 d92aba6 Thanks @​hntrl! - Add tracePolicy to RunnableSequence. Its processInputs/processOutputs shape only what LangChainTracer sends to LangSmith for the sequence's own run. Batched sequence runs now each record their own output.

v1.3.2

Compare Source

Patch Changes

v1.3.1

Compare Source

Patch Changes
  • #​12026 178af31 Thanks @​eliornl! - fix(core): deliver callbacks once to a handler registered twice by merged configs

    Merging two runnable configs that both carry the same callback handler, as happens when an agent's streamEvents() runs inside a LangGraph node with tracing on, registered that handler twice, so it received every callback twice: every streamed chunk arrived twice. The configured callback manager now keeps each handler once, in order, including a handler passed as a plain object of methods that merged configs wrapped twice.

  • #​12042 50343ba Thanks @​sera-wi! - fix(core): include node metadata in Graph.toJSON() output when set, matching Python

  • #​12048 304d190 Thanks @​sera-wi! - fix(core): escape drawMermaid node metadata labels and leave out object values, so metadata with brackets or objects no longer breaks Mermaid parsing

v1.3.0

Compare Source

Minor Changes
  • #​11986 2caf64d Thanks @​richardscarrott! - feat: stream tool-call args as tool-call-delta slices

    Tool-call and server-tool-call args now stream as tool-call-delta events, which carry only the new slice of the args, instead of block-delta snapshots of the args so far. A large tool call now costs about the same bytes on the wire as the same length of text.

    • This covers the compat bridge (any model that only implements _streamResponseChunks), the OpenAI-compatible converter (OpenAI Completions, Groq, Mistral, IBM, OpenRouter, Perplexity, DeepSeek, Fireworks, Together AI and xAI Completions), OpenAI and xAI Responses, Anthropic (client and server tool calls) and Bedrock Converse. Google and Ollama still send one complete snapshot per call.
    • A tool call's id, name and index go on content-block-start, which carries no args. An id or name that arrives later reaches consumers on content-block-finish.
    • If you read raw events and their block-delta fields.args mid-stream, or write agent stream transformers that do, read tool-call-delta instead. await stream, .toolCalls and the assembled message are unchanged.
    • Upgrade your clients first. Older clients mishandle tool-call-delta. You need @langchain/langgraph-sdk 1.12.6 or later; @langchain/react, @langchain/vue, @langchain/svelte or @langchain/angular 1.2.6 or later; and langchain-core 1.6.13 or later for Python clients.
    • To hold back, pin @langchain/core below 1.3.0. That also keeps you on @langchain/openai, @langchain/anthropic, @langchain/aws and @langchain/xai versions that send snapshots.

v1.2.20

Compare Source

Patch Changes
  • #​11922 d71c542 Thanks @​richardscarrott! - feat(core): add midConversationSystemMessages and midConversationTools to ModelProfile. They say whether a chat model sends a system message after the first turn in place, and whether it can add a tool through a message rather than the request's tool list. Either way the prompt prefix before it stays unchanged.

v1.2.19

Compare Source

Patch Changes
  • #​11982 5af4684 Thanks @​richardscarrott! - feat(core): read tool-call-delta in ChatModelStream

    • ChatModelStream appends tool-call-delta slices to a tool call's args, and still replaces them on block-delta
    • It ignores delta types it doesn't recognize instead of throwing Unknown delta type

v1.2.18

Compare Source

Patch Changes
  • #​11956 93d62b0 Thanks @​hntrl! - Require langsmith >=0.11.0 to include the restored NullableHeaders type declarations.

  • #​11822 d3e6fe6 Thanks @​dqbd! - Add explicit agent address support to LangChainTracer, inherit project and address destinations together, and delegate default destination resolution to the LangSmith SDK.

  • #​11150 cea15cf Thanks @​mdnanocom! - fix(core): defer tool call chunk collapsing in AIMessageChunk to fix O(n²) streaming aggregation

    AIMessageChunk eagerly re-ran collapseToolCallChunks in its constructor on every streamed delta concat, re-parsing all accumulated tool args each time — O(n²) over a stream, which can block the event loop for seconds on long tool-call streams. Collapsing now runs lazily, once, on first read of tool_calls / invalid_tool_calls.

v1.2.17

Compare Source

Patch Changes
  • #​11849 b1d9c7a Thanks @​KyleCodes! - Preserve runtime context in ambient runnable config across tool calls, nested runnables, and streaming.

v1.2.16

Compare Source

Patch Changes

v1.2.14

Compare Source

Patch Changes
  • #​11771 bbed273 Thanks @​thushanth-bengre-langchain! - Add fileMimeTypes to ModelProfile so models can advertise the MIME types they accept as generic file inputs. OpenAI Responses API models now report the file types input_file supports;
    Chat Completions profiles are unchanged.

v1.2.13

Compare Source

Patch Changes
  • #​11714 a83dfb1 Thanks @​ccurme! - Abbreviate long tool-call IDs when formatting chat messages as strings, keeping original messages unchanged.

v1.2.12

Compare Source

Patch Changes

v1.2.11

Compare Source

Patch Changes
  • #​11603 fec9cd8 Thanks @​thushanth-bengre-langchain! - fix(core): build streaming llmOutput.tokenUsage from the fully-accumulated chunk instead of whichever individual chunk's usage_metadata arrived last

    Affects both core streaming paths — .stream()/.streamEvents() (_streamIterator) and .invoke()/.generate() when a streaming-preferring callback is attached (_generateWithCache's hasStreamingHandler branch). Previously, llmOutput.tokenUsage was overwritten by each chunk in turn, so only the last chunk carrying usage_metadata won — correct for providers that emit one cumulative total on a final chunk, but wrong for providers (e.g. @langchain/google, @langchain/anthropic) that emit usage_metadata as a per-chunk delta across multiple chunks, where the values must be summed.

    Note for provider authors: this assumes each streamed chunk's usage_metadata is either a per-chunk delta or appears only on a single final chunk. A provider that instead repeats a cumulative total on every chunk will now see it summed (and inflated) in llmOutput.tokenUsage, matching the existing behavior of the correctly-working message.usage_metadata field.

    Also fixes @langchain/google's invoke({streaming: true}) path (no streaming-preferring callback attached), where llmOutput was never populated at all.

  • #​11590 ffebdc2 Thanks @​thushanth-bengre-langchain! - Fix OpenAI Responses API replay under Zero Data Retention when a response contains more than one reasoning item, for both v0 and v1. In v0, the default replay path now reuses response_metadata.output directly, preserving every reasoning item's id/encrypted_content in original order. In v1, AIMessage.contentBlocks (outputVersion: "v1") is fixed the same way. additional_kwargs.reasoning is unchanged.

v1.2.10

Compare Source

Patch Changes

v1.2.9

Compare Source

Patch Changes

v1.2.8

Compare Source

Patch Changes
  • #​11369 d6ad973 Thanks @​hntrl! - fix(langchain): use unified endpoint for gateway

  • #​11342 3b0e4c4 Thanks @​thushanth-bengre-langchain! - feat(core): mark errors as retryable or not, and stop retrying the ones that aren't

    Retry middleware retried every failure up to maxRetries, including deterministic ones like a bad API key or an unknown model. Retries also nest, so a single such failure could cost dozens of API calls.

    @langchain/core/errors adds stampRetryable(error, retryable) and getRetryable(error). Marking an error leaves its class and shape untouched, so a provider SDK error can be classified without breaking instanceof. getRetryable returns undefined for errors nobody classified, and both are exported so tool authors can mark their own failures.

    modelRetryMiddleware and toolRetryMiddleware now respect the mark by default, and retries stop as soon as one is found rather than each layer spending its own budget. Aborted calls, context overflow, and oversized payloads are marked non-retryable out of the box.
    Models accept a per-call maxRetries so a surrounding retry loop can take over.

    Behavior change: errors marked non-retryable now fail on the first attempt. Unclassified errors — including any from third-party integrations or custom tools — retry exactly as before. Pass retryOn: () => true to restore the old default. A custom onFailedAttempt replaces the built-in handler and opts out of marking.

v1.2.7

Compare Source

Patch Changes

v1.2.6

Compare Source

Patch Changes
  • #​11344 f08e0c6 Thanks @​hntrl! - fix: apply [Symbol.hasInstance] method to all comparable properties using .isInstance()

    We have some internal schemas that rely on z.instanceof(). This uses a strict instanceof check which can conflict if there are multiple versions of core installed. This overrides the Symbol.hasInstance method to use the same logic as .isInstance() to compare objects at runtime.

v1.2.5

Compare Source

Patch Changes
qdrant/qdrant-js (@​qdrant/js-client-rest)

v1.20.0

Compare Source

Minor Changes
  • Qdrant v1.20.0 API
  • BM25 ranking over text indexes: scoring on text index params, and a text query for query/queryBatch/queryGroups (field named by using)
  • substring match condition for keyword fields
  • nested option on payload index params, to index every object of an array as its own entry
  • max, min and acosh formula expressions
  • turbo8 and turbo16 vector datatypes, bits8 TurboQuant bit size
  • Added id_tracker (point id tracker params) to createCollection and recreateCollection; collection info now reports created_at
  • code tokenizer for text indexes (source-code identifier splitting)

v1.19.0

Compare Source

Breaking Changes
  • Removed search, searchBatch, searchPointGroups, recommend, recommendBatch, recommend_batch, recommendPointGroups, discoverPoints and discoverBatchPoints,
    following Qdrant dropping the corresponding endpoints from its OpenAPI spec. Use query, queryBatch and queryGroups instead:

    Removed Replacement
    search query
    searchBatch queryBatch
    searchPointGroups queryGroups
    recommend query with a recommend query
    recommendBatch queryBatch with recommend queries
    recommendPointGroups queryGroups with a recommend query
    discoverPoints query with a discover or context query
    discoverBatchPoints queryBatch with discover or context queries

    The request types that came with them are gone from Schemas as well: SearchRequest, SearchRequestBatch, SearchGroupsRequest, RecommendRequest,
    RecommendRequestBatch, RecommendGroupsRequest, DiscoverRequest, DiscoverRequestBatch, RecommendExample, ContextExamplePair, NamedVector,
    NamedSparseVector, NamedVectorStruct and UsingVector.

    Note that query and friends return {points: [...]} rather than a bare array.

Minor Changes
  • Qdrant v1.19.0 API
  • Added getQuotas and updateQuotas for the cluster-wide quota API
  • Added payload (payload storage params) and metadata parameters to createCollection and recreateCollection
  • max_disk_usage_percent moved off strict_mode_config — it is now a cluster-wide setting on updateQuotas, alongside max_resident_memory_percent and release_margin_percent
appwrite/sdk-for-dotnet (Appwrite)

v0.27.0

Compare Source

  • Added broad new runtime options across multiple languages (Node 23, 24, 25; PHP 8.4; Ruby 3.4 and 4.0; Python 3.13 and 3.14; Python ML 3.13 and 3.14; Deno 2.5 and 2.6; Go 1.23–1.26; Bun 1.2 and 1.3; Java 25; Kotlin 2.3; Swift 6.2; and Dotnet 10).
  • Introduced new API access scopes: schedules.read, schedules.write, and events.read for finer-grained permissions.
  • Encryption support added to text attributes: AttributeLongtext and AttributeMediumtext now include an optional Encrypt boolean property, with mapping to and from API payloads.
  • Minor model/serialization updates to accommodate the new encrypt field across longtext and mediumtext attributes.

v0.26.0

Compare Source

  • Add dart-3.10 and flutter-3.38 to BuildRuntime and Runtime enums
  • Add bytesMax and bytesUsed properties to Collection and Table models
  • Fix Roles enum removed from Teams service; roles parameter now accepts IReadOnlyList<string>
  • Add support for the new Backups service

v0.25.0

Compare Source

  • Add array-based enum parameters (e.g., permissions: IReadOnlyList<BrowserPermission>).
  • Breaking change: Output enum has been removed; use ImageFormat instead.
  • Add getQueueAudits support to Health service.
  • Add longtext/mediumtext/text/varchar attribute and column helpers to Databases and TablesDB services.

v0.24.0

Compare Source

  • Added ability to create columns and indexes synchronously while creating a table

v0.23.0

Compare Source

  • Rename VCSDeploymentType enum to VCSReferenceType
  • Change CreateTemplateDeployment method signature: replace Version parameter with Type (TemplateReferenceType) and Reference parameters
  • Add GetScreenshot method to Avatars service
  • Add Theme, Timezone and Output enums

v0.22.0

Compare Source

  • Add total parameter to list queries allowing skipping counting rows in a table for improved performance
  • Add Operator class for atomic modification of rows via update, bulk update, upsert, and bulk upsert operations
  • Add CreateResendProvider and UpdateResendProvider methods to Messaging service
actions/setup-dotnet

v6.1.0

Compare Source

What's Changed

Enhancements
Documentation
Dependency Updates

[!IMPORTANT]
✂ PR body was truncated to here.

@renovate-appwrite renovate-appwrite Bot added the dependencies Pull requests that update a dependency file label Nov 9, 2026
@appwrite

appwrite Bot commented Nov 9, 2026 •

Copy link
Copy Markdown

🟡 Tier B · Needs changes before merging

The still-open Meilisearch and Qdrant findings reproduce TypeScript build failures, and the LangChain lock introduces a minor Node 20 compatibility regression.

This PR refreshes dependency versions and committed lockfiles across the language templates, including several SDKs and build tools. It also advances pinned GitHub Actions and the language versions used by CI jobs.

Verdict New comments Fixed Still open
💬 Commented 1 0 7
Finding Where
🟡 LangChain OpenAI 1.8.0 drops the declared Node 20 support node/rag-with-langchain/package-lock.json:140
Fix with agent prompt
### Issue 1
node/rag-with-langchain/package-lock.json:140
**LangChain OpenAI 1.8.0 drops the declared Node 20 support**

This lock resolves `@langchain/openai` 1.8.0, whose engine requires Node >=22, while `node/rag-with-langchain/package.json` still declares support for `>=20.0.0` (and its transitive `openai` 7.50.0 has the same Node floor). A deployment using Node 20, which the package manifest permits, is now outside the supported runtime range.

### Issue 2
node-typescript/sync-with-meilisearch/package-lock.json:52
**Meilisearch 0.62 renames the imported constructor**

The 0.62 client exports `Meilisearch`, not `MeiliSearch`: `npm run build` in this template now fails with TS2724. The same stale named import also prevents module loading in `node/sync-with-meilisearch/src/main.js` and `bun/sync-with-meilisearch/src/main.ts`.

### Issue 3
node-typescript/sync-with-qdrant/package-lock.json:25
**Qdrant 1.20 removes the `search` method**

The client removed `search` in 1.19 in favor of `query`, but `node-typescript/sync-with-qdrant/src/main.ts:38` still calls `client.search`. I ran `npm run build` in this template; it fails with TS2339, and the search endpoint cannot work with this client version.

### Issue 4
node-typescript/sync-with-qdrant/package-lock.json:25
**Qdrant 1.20 requires a newer Node runtime**

The locked client requires Node >=22 (and its `undici` dependency requires >=20.18.1), while this template still declares Node >=18.17 in `package.json` and documents Node 18 in its README. The advertised runtime is outside the supported range; raise the runtime requirement or keep a client compatible with Node 18.

### Issue 5
node-typescript/sync-with-meilisearch/package-lock.json:52
**Meilisearch 0.62 excludes the documented Node 18 runtime**

This client declares Node `^20.19.0 || >=22.12.0`, but the template still declares Node >=18.17 in `package.json` and documents Node 18 in its README. The new lock therefore no longer matches the template's advertised runtime; align the runtime requirement or use a compatible client.

### Issue 6
dotnet/starter/StarterTemplate.csproj:9
**Keep the .NET Appwrite range open to compatible patches**

The inclusive upper bound stops at 0.27.0, so compatible patch releases such as 0.27.1 are excluded. The repository dependency rule requires allowing compatible patch/minor updates while excluding the next breaking version.

### Issue 7
ruby/starter/Gemfile:3
**Keep the Ruby Appwrite range open to compatible patches**

`< 28.4.1` excludes 28.4.1 and all later 28.4.x patch releases; the same cap was added in `ruby/sync_with_meilisearch/Gemfile:3`. The repository dependency rule requires allowing compatible patch/minor updates while excluding the next breaking version.

### Issue 8
ruby/whatsapp-with-vonage/Gemfile:3-4
**Ruby json and dotenv ranges exclude the next compatible patches**

These upper bounds exclude the next patch releases (json 3.1.1 and dotenv 3.2.1) rather than the next breaking versions. That prevents compatible fixes from being selected and conflicts with the repository dependency rule.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.
📂 Walkthrough · 9
File Change
.github/workflows/audit.yml, .github/workflows/build.yml Refresh pinned GitHub Actions and selected CI runtimes.
.github/workflows/markdown-table-workflow/package-lock.json Update the markdown-table workflow dependency resolution.
bun/sync-with-meilisearch/package.json, bun/sync-with-meilisearch/bun.lock; node and node-typescript package manifests and package-lock.json files Update template dependencies and lockfile resolutions, including Meilisearch, LangChain, Qdrant, Replicate, Appwrite, and related tools.
dotnet/starter/StarterTemplate.csproj; ruby/starter/Gemfile; ruby/sync_with_meilisearch/Gemfile; ruby/whatsapp-with-vonage/Gemfile Revise .NET and Ruby dependency version constraints.
go/starter/go.mod, go/starter/go.sum Upgrade the Go Appwrite SDK and its recorded checksums.
java/starter/deps.gradle; kotlin/starter/deps.gradle; kotlin/sync-with-meilisearch/deps.gradle Upgrade Kotlin SDK, Meilisearch Java SDK, and Gson Maven coordinates.
php/prompt-chatgpt/composer.json; python/prompt_chatgpt/requirements.txt; python/sync_with_meilisearch/requirements.txt Refresh PHP OpenAI and Python OpenAI/Meilisearch dependency constraints.
rust/starter/Cargo.toml, rust/starter/Cargo.lock Upgrade the Rust Appwrite SDK and refresh Rust lockfile dependencies.
swift/starter/Package.swift Advance the Swift SDK dependency baseline.
⏳ Still open from earlier reviews · 7

Reviewed d3895e5 · Details · Comment @appwrite review to re-run, or mention @appwrite with a question.

@appwrite appwrite Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Tier B · 2 blocking findings to address. Summary

"version": "0.40.0",
"resolved": "https://registry.npmjs.org/meilisearch/-/meilisearch-0.40.0.tgz",
"integrity": "sha512-BoRhQMr2mBFLEeCfsvPluksGb01IaOiWvV3Deu3iEY+yYJ4jdGTu+IQi5FCjKlNQ7/TMWSN2XUToSgvH1tj0BQ==",
"version": "0.62.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Meilisearch 0.62 renames the imported constructor

The 0.62 client exports Meilisearch, not MeiliSearch: npm run build in this template now fails with TS2724. The same stale named import also prevents module loading in node/sync-with-meilisearch/src/main.js and bun/sync-with-meilisearch/src/main.ts.

Prompt To Fix With AI
This is a comment left during a code review.
Path: node-typescript/sync-with-meilisearch/package-lock.json
Line: 52

Comment:
**Meilisearch 0.62 renames the imported constructor**

The 0.62 client exports `Meilisearch`, not `MeiliSearch`: `npm run build` in this template now fails with TS2724. The same stale named import also prevents module loading in `node/sync-with-meilisearch/src/main.js` and `bun/sync-with-meilisearch/src/main.ts`.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

🟠 Major · bug · Reply if this doesn't apply.

"version": "1.18.0",
"resolved": "https://registry.npmjs.org/@qdrant/js-client-rest/-/js-client-rest-1.18.0.tgz",
"integrity": "sha512-/0dqX5uV9chC1DnYSnU4gNMrDqse/pt6hHg3Rqqpl5isH7xl1xSNvffjzBoxycDD79luWn7Ho6Rh/61sOs5DNw==",
"version": "1.20.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Qdrant 1.20 removes the search method

The client removed search in 1.19 in favor of query, but node-typescript/sync-with-qdrant/src/main.ts:38 still calls client.search. I ran npm run build in this template; it fails with TS2339, and the search endpoint cannot work with this client version.

Prompt To Fix With AI
This is a comment left during a code review.
Path: node-typescript/sync-with-qdrant/package-lock.json
Line: 25

Comment:
**Qdrant 1.20 removes the `search` method**

The client removed `search` in 1.19 in favor of `query`, but `node-typescript/sync-with-qdrant/src/main.ts:38` still calls `client.search`. I ran `npm run build` in this template; it fails with TS2339, and the search endpoint cannot work with this client version.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

🟠 Major · bug · Reply if this doesn't apply.

"version": "1.18.0",
"resolved": "https://registry.npmjs.org/@qdrant/js-client-rest/-/js-client-rest-1.18.0.tgz",
"integrity": "sha512-/0dqX5uV9chC1DnYSnU4gNMrDqse/pt6hHg3Rqqpl5isH7xl1xSNvffjzBoxycDD79luWn7Ho6Rh/61sOs5DNw==",
"version": "1.20.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Qdrant 1.20 requires a newer Node runtime

The locked client requires Node >=22 (and its undici dependency requires >=20.18.1), while this template still declares Node >=18.17 in package.json and documents Node 18 in its README. The advertised runtime is outside the supported range; raise the runtime requirement or keep a client compatible with Node 18.

Prompt To Fix With AI
This is a comment left during a code review.
Path: node-typescript/sync-with-qdrant/package-lock.json
Line: 25

Comment:
**Qdrant 1.20 requires a newer Node runtime**

The locked client requires Node >=22 (and its `undici` dependency requires >=20.18.1), while this template still declares Node >=18.17 in `package.json` and documents Node 18 in its README. The advertised runtime is outside the supported range; raise the runtime requirement or keep a client compatible with Node 18.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

🟡 Minor · bug · Reply if this doesn't apply.

"version": "0.40.0",
"resolved": "https://registry.npmjs.org/meilisearch/-/meilisearch-0.40.0.tgz",
"integrity": "sha512-BoRhQMr2mBFLEeCfsvPluksGb01IaOiWvV3Deu3iEY+yYJ4jdGTu+IQi5FCjKlNQ7/TMWSN2XUToSgvH1tj0BQ==",
"version": "0.62.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Meilisearch 0.62 excludes the documented Node 18 runtime

This client declares Node ^20.19.0 || >=22.12.0, but the template still declares Node >=18.17 in package.json and documents Node 18 in its README. The new lock therefore no longer matches the template's advertised runtime; align the runtime requirement or use a compatible client.

Prompt To Fix With AI
This is a comment left during a code review.
Path: node-typescript/sync-with-meilisearch/package-lock.json
Line: 52

Comment:
**Meilisearch 0.62 excludes the documented Node 18 runtime**

This client declares Node `^20.19.0 || >=22.12.0`, but the template still declares Node >=18.17 in `package.json` and documents Node 18 in its README. The new lock therefore no longer matches the template's advertised runtime; align the runtime requirement or use a compatible client.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

🟡 Minor · bug · Reply if this doesn't apply.

</PropertyGroup>
<ItemGroup>
<PackageReference Include="Appwrite" Version="[0.21.2,0.22.0)" />
<PackageReference Include="Appwrite" Version="[0.21.2,0.27.0]" />

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Keep the .NET Appwrite range open to compatible patches

The inclusive upper bound stops at 0.27.0, so compatible patch releases such as 0.27.1 are excluded. The repository dependency rule requires allowing compatible patch/minor updates while excluding the next breaking version.

Prompt To Fix With AI
This is a comment left during a code review.
Path: dotnet/starter/StarterTemplate.csproj
Line: 9

Comment:
**Keep the .NET Appwrite range open to compatible patches**

The inclusive upper bound stops at 0.27.0, so compatible patch releases such as 0.27.1 are excluded. The repository dependency rule requires allowing compatible patch/minor updates while excluding the next breaking version.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

🟡 Minor · maintainability · Reply if this doesn't apply.

Comment thread ruby/starter/Gemfile
source "https://rubygems.org"

gem 'appwrite', '>= 27.0.0', '< 28.0.0'
gem 'appwrite', '>= 27.0.0', '< 28.4.1'

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Keep the Ruby Appwrite range open to compatible patches

< 28.4.1 excludes 28.4.1 and all later 28.4.x patch releases; the same cap was added in ruby/sync_with_meilisearch/Gemfile:3. The repository dependency rule requires allowing compatible patch/minor updates while excluding the next breaking version.

Prompt To Fix With AI
This is a comment left during a code review.
Path: ruby/starter/Gemfile
Line: 3

Comment:
**Keep the Ruby Appwrite range open to compatible patches**

`< 28.4.1` excludes 28.4.1 and all later 28.4.x patch releases; the same cap was added in `ruby/sync_with_meilisearch/Gemfile:3`. The repository dependency rule requires allowing compatible patch/minor updates while excluding the next breaking version.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

🟡 Minor · maintainability · Reply if this doesn't apply.

Comment on lines +3 to +4
gem 'json', '>= 2.7.6', '< 3.1.1'
gem 'dotenv', '>= 2.8.1', '< 3.2.1'

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ruby json and dotenv ranges exclude the next compatible patches

These upper bounds exclude the next patch releases (json 3.1.1 and dotenv 3.2.1) rather than the next breaking versions. That prevents compatible fixes from being selected and conflicts with the repository dependency rule.

Prompt To Fix With AI
This is a comment left during a code review.
Path: ruby/whatsapp-with-vonage/Gemfile
Line: 3-4

Comment:
**Ruby json and dotenv ranges exclude the next compatible patches**

These upper bounds exclude the next patch releases (json 3.1.1 and dotenv 3.2.1) rather than the next breaking versions. That prevents compatible fixes from being selected and conflicts with the repository dependency rule.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

🟡 Minor · maintainability · Reply if this doesn't apply.

@renovate-appwrite
renovate-appwrite Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from ea3f2fa to a4a99a6 Compare November 11, 2026 06:25
@renovate-appwrite
renovate-appwrite Bot force-pushed the renovate/all-minor-patch branch from a4a99a6 to d3895e5 Compare November 11, 2026 14:17

@appwrite appwrite Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Tier B · See the inline comments. Summary

"version": "1.5.5",
"resolved": "https://registry.npmjs.org/@langchain/openai/-/openai-1.5.5.tgz",
"integrity": "sha512-wX7dwb9z4nf5FHXlIl/X2mk08pzonvRHCt1D4+s1zXLP0duYDC95j7dulPIQJ6fmhbyYQc9Ki8mEhY/D1lB8kw==",
"version": "1.8.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LangChain OpenAI 1.8.0 drops the declared Node 20 support

This lock resolves @langchain/openai 1.8.0, whose engine requires Node >=22, while node/rag-with-langchain/package.json still declares support for >=20.0.0 (and its transitive openai 7.50.0 has the same Node floor). A deployment using Node 20, which the package manifest permits, is now outside the supported runtime range.

Prompt To Fix With AI
This is a comment left during a code review.
Path: node/rag-with-langchain/package-lock.json
Line: 140

Comment:
**LangChain OpenAI 1.8.0 drops the declared Node 20 support**

This lock resolves `@langchain/openai` 1.8.0, whose engine requires Node >=22, while `node/rag-with-langchain/package.json` still declares support for `>=20.0.0` (and its transitive `openai` 7.50.0 has the same Node floor). A deployment using Node 20, which the package manifest permits, is now outside the supported runtime range.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

🟡 Minor · bug · Reply if this doesn't apply.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants