chore(deps): bump vercel from 51.7.0 to 58.4.0

[dependabot]

Bumps vercel from 51.7.0 to 58.4.0.

Release notes

Sourced from vercel's releases.

vercel@58.4.0

Minor Changes

• a928d5a: Add vercel ai-gateway budgets defaults (list/set/remove) to manage per-scope AI Gateway budget defaults (project and api-key), each with its own limit and refresh period

Patch Changes

• Updated dependencies [2c75803]
• Updated dependencies [57dec92]
  • @​vercel/build-utils@​13.36.2
  • @​vercel/backends@​0.8.29
  • @​vercel/container@​0.1.0
  • @​vercel/elysia@​0.1.106
  • @​vercel/express@​0.1.120
  • @​vercel/fastify@​0.1.109
  • @​vercel/go@​3.10.2
  • @​vercel/h3@​0.1.115
  • @​vercel/hono@​0.2.109
  • @​vercel/hydrogen@​1.4.0
  • @​vercel/koa@​0.1.89
  • @​vercel/nestjs@​0.2.110
  • @​vercel/next@​4.20.4
  • @​vercel/node@​5.9.2
  • @​vercel/python@​6.54.0
  • @​vercel/redwood@​2.5.0
  • @​vercel/remix-builder@​5.9.1
  • @​vercel/ruby@​2.5.1
  • @​vercel/rust@​1.4.0
  • @​vercel/static-build@​2.11.12

vercel@58.3.0

Minor Changes

• 0f04613: Add vercel vcr permissions subcommands for managing which teams can pull images from a VCR repository: vcr permissions <repository> ls lists teams with access (by team slug), add and rm grant or revoke access for one or more teams (comma-separated team ids or slugs), and clear removes access for every team.

• 17ee736: Replace the vercel-workers integration for Python queue subscribers and workflows with the new vercel-queue SDK:

  • [[tool.vercel.subscribers]] entrypoints are introspected at build time via vercel.queue.get_subscriptions() and served through generated vercel.queue.asgi_app() handler modules, with queue/v2beta triggers carrying the SDK-registered consumer groups and per-subscription tuning.
  • Celery and Dramatiq projects get the matching vercel-celery/vercel-dramatiq integration package injected automatically (bundled variant unless vercel-queue is an explicit dependency), in builds and in vercel dev.
  • [[tool.vercel.workflows]] entrypoints follow the SDK generation: projects on vercel >= 0.8.0 are served through vercel-queue like subscribers; older or undeterminable versions keep the legacy vercel-workers serving (worker env markers, injected pinned vercel-workers).
  • Projects that depend on vercel-workers directly keep the legacy integration wholesale: legacy subscriber schema, direct entrypoint serving, worker env markers.
  • vercel dev serves queue sidecars through vercel.queue.asgi_app() for new-SDK projects, and its queue broker delivers with the SDK-registered consumer groups introspected at sidecar startup (matching production trigger behavior); legacy projects keep the vercel-workers bootstrap.
  • The CLI no longer injects config.hasWorkerServices; the Python builder makes all queue-serving decisions from project metadata.

• 5fc4930: Rename the vc edge-config command to vc global-config, keeping edge-config working as an alias for backwards compatibility.

Patch Changes

• a12044c: Resolve explicit --deployment targets without linking the current directory, reuse existing protection bypass tokens without creating them on cross-project targets, and prevent --scope and --team from leaking into curl arguments.
• Updated dependencies [17ee736]
  • @​vercel/python@​6.54.0

... (truncated)

Changelog

Sourced from vercel's changelog.

58.4.0

Minor Changes

• a928d5a: Add vercel ai-gateway budgets defaults (list/set/remove) to manage per-scope AI Gateway budget defaults (project and api-key), each with its own limit and refresh period

Patch Changes

• Updated dependencies [2c75803]
• Updated dependencies [57dec92]
  • @​vercel/build-utils@​13.36.2
  • @​vercel/backends@​0.8.29
  • @​vercel/container@​0.1.0
  • @​vercel/elysia@​0.1.106
  • @​vercel/express@​0.1.120
  • @​vercel/fastify@​0.1.109
  • @​vercel/go@​3.10.2
  • @​vercel/h3@​0.1.115
  • @​vercel/hono@​0.2.109
  • @​vercel/hydrogen@​1.4.0
  • @​vercel/koa@​0.1.89
  • @​vercel/nestjs@​0.2.110
  • @​vercel/next@​4.20.4
  • @​vercel/node@​5.9.2
  • @​vercel/python@​6.54.0
  • @​vercel/redwood@​2.5.0
  • @​vercel/remix-builder@​5.9.1
  • @​vercel/ruby@​2.5.1
  • @​vercel/rust@​1.4.0
  • @​vercel/static-build@​2.11.12

58.3.0

Minor Changes

• 0f04613: Add vercel vcr permissions subcommands for managing which teams can pull images from a VCR repository: vcr permissions <repository> ls lists teams with access (by team slug), add and rm grant or revoke access for one or more teams (comma-separated team ids or slugs), and clear removes access for every team.

• 17ee736: Replace the vercel-workers integration for Python queue subscribers and workflows with the new vercel-queue SDK:

  • [[tool.vercel.subscribers]] entrypoints are introspected at build time via vercel.queue.get_subscriptions() and served through generated vercel.queue.asgi_app() handler modules, with queue/v2beta triggers carrying the SDK-registered consumer groups and per-subscription tuning.
  • Celery and Dramatiq projects get the matching vercel-celery/vercel-dramatiq integration package injected automatically (bundled variant unless vercel-queue is an explicit dependency), in builds and in vercel dev.
  • [[tool.vercel.workflows]] entrypoints follow the SDK generation: projects on vercel >= 0.8.0 are served through vercel-queue like subscribers; older or undeterminable versions keep the legacy vercel-workers serving (worker env markers, injected pinned vercel-workers).
  • Projects that depend on vercel-workers directly keep the legacy integration wholesale: legacy subscriber schema, direct entrypoint serving, worker env markers.
  • vercel dev serves queue sidecars through vercel.queue.asgi_app() for new-SDK projects, and its queue broker delivers with the SDK-registered consumer groups introspected at sidecar startup (matching production trigger behavior); legacy projects keep the vercel-workers bootstrap.
  • The CLI no longer injects config.hasWorkerServices; the Python builder makes all queue-serving decisions from project metadata.

• 5fc4930: Rename the vc edge-config command to vc global-config, keeping edge-config working as an alias for backwards compatibility.

Patch Changes

• a12044c: Resolve explicit --deployment targets without linking the current directory, reuse existing protection bypass tokens without creating them on cross-project targets, and prevent --scope and --team from leaking into curl arguments.

... (truncated)

Commits

• f445899 Version Packages (#17291)
• a928d5a feat: add ai-gateway budgets defaults set/inspect/remove commands (#17253)
• 689dd7f Version Packages (#17282)
• 5fc4930 [cli] Rename edge-config command to global-config (#17225)
• 0f04613 feat(cli): add vcr permissions commands (#17213)
• a12044c fix(cli): resolve explicit --deployment targets without linking (curl, httpst...
• 17ee736 python: Replace vercel-workers with the new vercel-queue based impl (#17236)
• 73a412c Version Packages (#17266)
• 18585bc [CLI] fixing --json breaking tests (#17270)
• ce19aa5 fix(cli): implement custom environment purchases in buy addon (#17200)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vercel since your current version.

[hasparus]

·@·d·ependabot r·ebase

---

Generated by Claude Code

[hasparus]

Automated approval: all CI checks passing.

---

Generated by Claude Code

[hasparus]

This branch had repeated lockfile merge conflicts against main because #123, #122, #120, and #119 were merged in quick succession, each touching pnpm-lock.yaml. I merged main into this branch and regenerated pnpm-lock.yaml with pnpm install (no other changes). Verified locally with pnpm typecheck and pnpm build — both pass. Will merge once CI is green.

---

Generated by Claude Code