fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@openrouter/ai-sdk-provider	1.4.1 -> 1.5.3			dependencies	minor	1.5.4
@willbooster/wb (source)	13.0.0 -> 13.0.2			devDependencies	patch
build-ts	17.0.8 -> 17.0.9			devDependencies	patch
bun	1.3.4 -> 1.3.5				patch
lefthook	2.0.9 -> 2.0.11			devDependencies	patch	2.0.12
sort-package-json	3.5.0 -> 3.6.0			devDependencies	minor

---

Release Notes

OpenRouterTeam/ai-sdk-provider (@​openrouter/ai-sdk-provider)

v1.5.3

Patch Changes

• #​294 83c6b41 Thanks @​subtleGradient! - File annotations from FileParserPlugin are now available in streaming responses.
  If you use streamText() with PDFs or other files, you can now access parsed file content via providerMetadata.openrouter.annotations in the finish event.
  This was already available for non-streaming responses.

v1.5.2

Patch Changes

• #​288 0caf9f1 Thanks @​subtleGradient! - Fix Gemini 3 tool-call conversations stopping prematurely when thoughtSignature (encrypted reasoning) is present. Override finishReason from 'stop' to 'tool-calls' when tool calls and encrypted reasoning are detected.

v1.5.1

Patch Changes

• #​295 2fbe4e5 Thanks @​subtleGradient! - Patch transitive security vulnerabilities in glob and js-yaml dev dependencies

v1.5.0

Minor Changes

• #​276 eb7d3a2 Thanks @​jamespsterling! - Add TOON encoding/decoding helper functions for token-efficient data serialization

Patch Changes

• #​291 5f4a9b9 Thanks @​mstykow! - expand supported audio formats

WillBooster/shared (@​willbooster/wb)

v13.0.2

Compare Source

@​willbooster/wb 13.0.2 (2025-12-16)

Bug Fixes

• improve prisma reset command (#​568) (4d2da99)

v13.0.1

Compare Source

@​willbooster/wb 13.0.1 (2025-12-14)

Bug Fixes

• improve getConnectionLevelSqlitePragmas() (#​567) (621f6c8)

WillBooster/build-ts (build-ts)

v17.0.9

Compare Source

Bug Fixes

• deps: update all non-major dependencies (#​445) (eaa7d7b)

oven-sh/bun (bun)

v1.3.5: Bun v1.3.5

Compare Source

To install Bun v1.3.5

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.5:

bun upgrade

Read Bun v1.3.5's release notes on Bun's blog

Thanks to 10 contributors!

• @​alii
• @​cirospaciari
• @​crishoj
• @​dylan-conway
• @​elfayer
• @​hamidrezahanafi
• @​jarred-sumner
• @​kylekz
• @​robobun
• @​ryangst

evilmartians/lefthook (lefthook)

v2.0.11

Compare Source

• feat: refetch and cleanup on ref change (#​1210) by @​mrexox
• ci: npm trusted publishing (#​1234) by @​mrexox
• feat: more rudimentary shell completions (#​1230) by @​scop

v2.0.10

Compare Source

• feat: add no_auto_install to lefthook.yml (#​1231) by @​pavelzw
• fix: skip if empty files template (#​1233) by @​mrexox

keithamus/sort-package-json (sort-package-json)

v3.6.0

Compare Source

Features

• sort dependencies according to detected package manager, support devEngines field (#​382) (e3f2370)

v3.5.2

Compare Source

Bug Fixes

• handle colon-prefixed script names in sorter (#​389) (0b528c2)

v3.5.1

Compare Source

Bug Fixes

• improve-scripts-sorting (#​376) (e6052c4)

---

Configuration

📅 Schedule: Branch creation - "after 5am on Saturday" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.