chore(deps): update all non-major dependencies

.github/workflows/ai-review.yml

@@ -57,7 +57,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
       - name: Build packages
         run: pnpm exec nx run-many -t build -p @tanstack/ai-grok-build @tanstack/ai-sandbox-docker
       - name: Guard review

.github/workflows/autofix.yml

@@ -26,7 +26,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
       - name: Fix formatting
         run: pnpm format
       - name: Apply fixes

.github/workflows/bun-test.yml

@@ -38,7 +38,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
       - name: Setup Bun
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
         with:

.github/workflows/coverage.yml

@@ -28,7 +28,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
       - name: Run Coverage
         # Keep the args after `--` identical to both runs in pr.yml. Nx puts
         # forwarded args in the task hash, so any difference is a cache miss.

.github/workflows/e2e.yml

@@ -33,7 +33,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
 
       - name: Cache Playwright Browsers
         id: playwright-cache

.github/workflows/maintainer-scorecard.yml

@@ -38,7 +38,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
       - name: Build and post scorecard
         run: pnpm maintainer:scorecard
         env:

.github/workflows/maintainer-sweep.yml

@@ -36,7 +36,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
       - name: Run sweep
         run: pnpm maintainer:sweep
         env:

.github/workflows/pr.yml

@@ -24,7 +24,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
       - name: Get base and head commits for `nx affected`
         uses: nrwl/nx-set-shas@3e9ad7370203c1e93d109be57f3b72eb0eb511b1 # v4.4.0
         with:
@@ -49,7 +49,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
       - name: Get base and head commits for `nx affected`
         uses: nrwl/nx-set-shas@3e9ad7370203c1e93d109be57f3b72eb0eb511b1 # v4.4.0
         with:
@@ -164,7 +164,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
       - name: Build Packages
         run: pnpm run build:all
       - name: Publish Previews

.github/workflows/release.yml

@@ -26,7 +26,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
       - name: Run Tests
         run: pnpm run test:ci
 
@@ -46,15 +46,15 @@ jobs:
           fetch-depth: 0
           persist-credentials: true
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
       - name: Build packages
         # Fresh, cache-bypassing build so dist/ is on disk when changeset
         # publish packs tarballs. A cached build can report success without
         # materializing dist/, shipping src-only packages (see 0.33.0-0.36.0).
         run: pnpm exec nx run-many --targets=build --exclude=examples/**,testing/** --skip-nx-cache
       - name: Run Changesets (version or publish)
         id: changesets
-        uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf # v1.7.0
+        uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0
         with:
           version: pnpm run changeset:version
           publish: pnpm run changeset:publish
@@ -84,6 +84,6 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Comment on PRs about release
         if: steps.changesets.outputs.published == 'true'
-        uses: TanStack/config/.github/comment-on-release@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/comment-on-release@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
         with:
           published-packages: ${{ steps.changesets.outputs.publishedPackages }}

.github/workflows/sync-models.yml

@@ -26,7 +26,7 @@ jobs:
           persist-credentials: true # sync job pushes generated model updates
 
       - name: Setup Tools
-        uses: TanStack/config/.github/setup@190f659075ff0845850e330883eb26d7ffd0671f # main
+        uses: TanStack/config/.github/setup@a041f4eeb8e4d595aee89f8992b20c669288a741 # main
 
       # Each sync runs as its own step so one provider failing does not block
       # the others. Whatever succeeded is still committed, then the job fails.

.github/workflows/zizmor.yml

@@ -18,7 +18,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
+        uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1
         with:
           advanced-security: false
           annotations: true

codemods/package.json

@@ -14,8 +14,8 @@
   "devDependencies": {
     "@types/jscodeshift": "^17.1.1",
     "@types/node": "^24.10.1",
-    "jscodeshift": "^17.1.1",
-    "prettier": "^3.7.4",
+    "jscodeshift": "^17.4.0",
+    "prettier": "^3.9.10",
     "typescript": "5.9.3",
     "vitest": "^4.1.10"
   }

examples/ag-ui/package.json

@@ -29,8 +29,8 @@
     "@types/react": "^19.2.7",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^6.2.1",
-    "concurrently": "^9.1.2",
-    "dotenv": "^17.2.3",
+    "concurrently": "^9.2.5",
+    "dotenv": "^17.4.2",
     "tailwindcss": "^4.1.18",
     "typescript": "5.9.3",
     "vite": "^8.2.1"

examples/ag-ui/servers/go/go.mod

@@ -1,3 +1,3 @@
 module github.com/tanstack/ai/examples/ag-ui/servers/go
 
-go 1.22
+go 1.27.3

examples/ag-ui/servers/rust/Cargo.toml

@@ -4,15 +4,15 @@ version = "0.1.0"
 edition = "2021"
 
 [dependencies]
-async-stream = "0.3"
-axum = "0.8"
-futures-util = "0.3"
-reqwest = { version = "0.12", default-features = false, features = [
+async-stream = "0.3.6"
+axum = "0.8.9"
+futures-util = "0.3.34"
+reqwest = { version = "0.13.5", default-features = false, features = [
   "json",
   "rustls-tls",
   "stream",
 ] }
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
-tokio = { version = "1", features = ["macros", "rt-multi-thread"] }
-tokio-stream = "0.1"
+serde = { version = "1.0.229", features = ["derive"] }
+serde_json = "1.0.154"
+tokio = { version = "1.54.1", features = ["macros", "rt-multi-thread"] }
+tokio-stream = "0.1.19"

examples/harness-cli/package.json

@@ -12,10 +12,10 @@
     "@tanstack/ai-harness": "workspace:*",
     "@tanstack/ai-harness-cli": "workspace:*",
     "@tanstack/ai-openai": "workspace:*",
-    "@tanstack/react-store": "^0.11.1",
+    "@tanstack/react-store": "^0.11.2",
     "ink": "^7.1.1",
     "react": "^19.2.3",
-    "zod": "^4.2.0"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/node": "^24.10.1",

examples/react/basic-chat/package.json

@@ -13,9 +13,9 @@
     "@tanstack/ai": "workspace:*",
     "@tanstack/ai-openrouter": "workspace:*",
     "@tanstack/ai-react": "workspace:*",
-    "@tanstack/react-router": "^1.170.41",
-    "@tanstack/react-start": "^1.168.60",
-    "@tanstack/router-plugin": "^1.168.42",
+    "@tanstack/react-router": "^1.170.46",
+    "@tanstack/react-start": "^1.169.5",
+    "@tanstack/router-plugin": "^1.169.0",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "tailwindcss": "^4.1.18"

examples/react/computer-use/package.json

@@ -14,14 +14,14 @@
     "@tanstack/ai-computer-use": "workspace:*",
     "@tanstack/ai-openai": "workspace:*",
     "@tanstack/ai-react": "workspace:*",
-    "@tanstack/react-router": "^1.170.41",
-    "@tanstack/react-start": "^1.168.60",
-    "@tanstack/router-plugin": "^1.168.42",
-    "playwright-core": "^1.57.0",
+    "@tanstack/react-router": "^1.170.46",
+    "@tanstack/react-start": "^1.169.5",
+    "@tanstack/router-plugin": "^1.169.0",
+    "playwright-core": "^1.65.0",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "tailwindcss": "^4.1.18",
-    "zod": "^4.2.0"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/node": "^24.10.1",

examples/react/effect-chat/package.json

@@ -13,10 +13,10 @@
     "@tanstack/ai-effect": "workspace:*",
     "@tanstack/ai-openai": "workspace:*",
     "@tanstack/ai-react": "workspace:*",
-    "@tanstack/react-router": "^1.170.41",
-    "@tanstack/react-start": "^1.168.60",
-    "@tanstack/router-plugin": "^1.168.42",
-    "effect": "^4.1.0",
+    "@tanstack/react-router": "^1.170.46",
+    "@tanstack/react-start": "^1.169.5",
+    "@tanstack/router-plugin": "^1.169.0",
+    "effect": "^4.1.2",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "tailwindcss": "^4.1.18"

examples/react/evaluate/package.json

@@ -17,9 +17,9 @@
     "@tanstack/ai-openrouter": "workspace:*",
     "@tanstack/ai-typesafe": "workspace:*",
     "@tanstack/ai-vercel-gateway": "workspace:*",
-    "@tanstack/react-router": "^1.170.41",
-    "@tanstack/react-start": "^1.168.60",
-    "@tanstack/router-plugin": "^1.168.42",
+    "@tanstack/react-router": "^1.170.46",
+    "@tanstack/react-start": "^1.169.5",
+    "@tanstack/router-plugin": "^1.169.0",
     "lucide-react": "^0.561.0",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",

examples/react/generate-image/package.json

@@ -12,9 +12,9 @@
     "@tanstack/ai": "workspace:*",
     "@tanstack/ai-openrouter": "workspace:*",
     "@tanstack/ai-react": "workspace:*",
-    "@tanstack/react-router": "^1.170.41",
-    "@tanstack/react-start": "^1.168.60",
-    "@tanstack/router-plugin": "^1.168.42",
+    "@tanstack/react-router": "^1.170.46",
+    "@tanstack/react-start": "^1.169.5",
+    "@tanstack/router-plugin": "^1.169.0",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "tailwindcss": "^4.1.18"

examples/react/mcp-events/package.json

@@ -11,9 +11,9 @@
   "dependencies": {
     "@tailwindcss/vite": "^4.1.18",
     "@tanstack/ai-mcp": "workspace:*",
-    "@tanstack/react-router": "^1.170.41",
-    "@tanstack/react-start": "^1.168.60",
-    "@tanstack/router-plugin": "^1.168.42",
+    "@tanstack/react-router": "^1.170.46",
+    "@tanstack/react-start": "^1.169.5",
+    "@tanstack/router-plugin": "^1.169.0",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "tailwindcss": "^4.1.18"

examples/react/mcp-server/package.json

@@ -12,13 +12,13 @@
     "@tailwindcss/vite": "^4.1.18",
     "@tanstack/ai": "workspace:*",
     "@tanstack/ai-mcp": "workspace:*",
-    "@tanstack/react-router": "^1.170.41",
-    "@tanstack/react-start": "^1.168.60",
-    "@tanstack/router-plugin": "^1.168.42",
+    "@tanstack/react-router": "^1.170.46",
+    "@tanstack/react-start": "^1.169.5",
+    "@tanstack/router-plugin": "^1.169.0",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "tailwindcss": "^4.1.18",
-    "zod": "^4.2.0"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/node": "^24.10.1",

examples/react/streaming-structured-table/package.json

@@ -12,13 +12,13 @@
     "@tanstack/ai": "workspace:*",
     "@tanstack/ai-openrouter": "workspace:*",
     "@tanstack/ai-react": "workspace:*",
-    "@tanstack/react-router": "^1.170.41",
-    "@tanstack/react-start": "^1.168.60",
-    "@tanstack/router-plugin": "^1.168.42",
+    "@tanstack/react-router": "^1.170.46",
+    "@tanstack/react-start": "^1.169.5",
+    "@tanstack/router-plugin": "^1.169.0",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "tailwindcss": "^4.1.18",
-    "zod": "^4.2.0"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/node": "^24.10.1",

examples/react/subagents-persisted/package.json

@@ -14,16 +14,16 @@
     "@tanstack/ai-persistence": "workspace:*",
     "@tanstack/ai-react": "workspace:*",
     "@tanstack/react-ai-devtools": "workspace:*",
-    "@tanstack/react-devtools": "^0.9.10",
-    "@tanstack/react-router": "^1.170.41",
-    "@tanstack/react-start": "^1.168.60",
-    "@tanstack/router-plugin": "^1.168.42",
+    "@tanstack/react-devtools": "^0.10.14",
+    "@tanstack/react-router": "^1.170.46",
+    "@tanstack/react-start": "^1.169.5",
+    "@tanstack/router-plugin": "^1.169.0",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "tailwindcss": "^4.1.18"
   },
   "devDependencies": {
-    "@tanstack/devtools-vite": "^0.5.3",
+    "@tanstack/devtools-vite": "^0.8.6",
     "@types/node": "^24.10.1",
     "@types/react": "^19.2.7",
     "@types/react-dom": "^19.2.3",

examples/react/subagents/package.json

@@ -13,16 +13,16 @@
     "@tanstack/ai-openrouter": "workspace:*",
     "@tanstack/ai-react": "workspace:*",
     "@tanstack/react-ai-devtools": "workspace:*",
-    "@tanstack/react-devtools": "^0.9.10",
-    "@tanstack/react-router": "^1.170.41",
-    "@tanstack/react-start": "^1.168.60",
-    "@tanstack/router-plugin": "^1.168.42",
+    "@tanstack/react-devtools": "^0.10.14",
+    "@tanstack/react-router": "^1.170.46",
+    "@tanstack/react-start": "^1.169.5",
+    "@tanstack/router-plugin": "^1.169.0",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "tailwindcss": "^4.1.18"
   },
   "devDependencies": {
-    "@tanstack/devtools-vite": "^0.5.3",
+    "@tanstack/devtools-vite": "^0.8.6",
     "@types/node": "^24.10.1",
     "@types/react": "^19.2.7",
     "@types/react-dom": "^19.2.3",