deps(web): bump @qvac/sdk from 0.10.0 to 0.14.0 in /apps/web

[dependabot]

Bumps @qvac/sdk from 0.10.0 to 0.14.0.

Release notes

Sourced from @​qvac/sdk's releases.

QVAC SDK v0.14.0

📦 NPM: https://www.npmjs.com/package/@​qvac/sdk/v/0.14.0

QVAC SDK 0.14.0 makes the SDK quiet by default, replaces the ONNX OCR stack with a GGML backend, and expands the model registry with medical LLMs, multimodal Qwen3.5, and broader multilingual TTS. It also adds finer-grained control over completion reasoning, friendlier validation errors, and per-engine TTS language handling.

Breaking Changes

Logs Are Now Silent by Default

The SDK and its native backends (llama.cpp / ggml) no longer print to the console automatically. Applications get a clean console out of the box and explicitly opt in when they want diagnostics. SDK logs are enabled through the config file, native backend output additionally requires a debug log level, and logs can also be captured programmatically.

Before:

// SDK and native logs printed to the console by default.
await loadModel({ modelSrc: LLAMA_3_2_1B_INST_Q4_0 });
// → console fills with SDK + native output

After:

// Silent by default — no console output.
await loadModel({ modelSrc: LLAMA_3_2_1B_INST_Q4_0 });
// Opt in:
//   qvac.config.json → { "loggerConsoleOutput": true }                          // SDK logs
//   qvac.config.json → { "loggerConsoleOutput": true, "loggerLevel": "debug" }  // + native backend output
//   loggingStream({ id: SDK_LOG_ID })                                           // capture SDK logs programmatically

bare-process Is No Longer Bundled

The bundled bare-process shim has been removed in favor of Bare primitives. Code that relied on process as a global in Bare environments must either use the equivalent Bare primitive or install bare-process explicitly.

Before:

// process available as a global
process.exit(0);

After:

import process from "bare-process";
process.exit(0);

... (truncated)

Changelog

Sourced from @​qvac/sdk's changelog.

[0.14.0]

📦 NPM: https://www.npmjs.com/package/@​qvac/sdk/v/0.14.0

QVAC SDK 0.14.0 makes the SDK quiet by default, replaces the ONNX OCR stack with a GGML backend, and expands the model registry with medical LLMs, multimodal Qwen3.5, and broader multilingual TTS. It also adds finer-grained control over completion reasoning, friendlier validation errors, and per-engine TTS language handling.

Breaking Changes

Logs Are Now Silent by Default

The SDK and its native backends (llama.cpp / ggml) no longer print to the console automatically. Applications get a clean console out of the box and explicitly opt in when they want diagnostics. SDK logs are enabled through the config file, native backend output additionally requires a debug log level, and logs can also be captured programmatically.

Before:

// SDK and native logs printed to the console by default.
await loadModel({ modelSrc: LLAMA_3_2_1B_INST_Q4_0 });
// → console fills with SDK + native output

After:

// Silent by default — no console output.
await loadModel({ modelSrc: LLAMA_3_2_1B_INST_Q4_0 });
// Opt in:
//   qvac.config.json → { "loggerConsoleOutput": true }                          // SDK logs
//   qvac.config.json → { "loggerConsoleOutput": true, "loggerLevel": "debug" }  // + native backend output
//   loggingStream({ id: SDK_LOG_ID })                                           // capture SDK logs programmatically

bare-process Is No Longer Bundled

The bundled bare-process shim has been removed in favor of Bare primitives. Code that relied on process as a global in Bare environments must either use the equivalent Bare primitive or install bare-process explicitly.

Before:

// process available as a global
process.exit(0);

After:

import process from "bare-process";
process.exit(0);

... (truncated)

Commits

• b4e758a chore: release sdk + bare-sdk 0.14.0 (#2914)
• 9fcd0ed fix[notask]: revert expo non-ios close worker teardown (#2639) (#2908)
• fa0bca8 QVAC-21225 fix: HTTP model downloads survive suspend and network drops (#2865)
• 012a6d7 QVAC-21339 fix: skip mobile HTTP embed tests and clean Electron artifacts (#2...
• 15fa9b9 fix: align Electron e2e OCR and TTS config (#2888)
• f3fb093 QVAC-19119 feat[api]: add image_tile_mode SDK config + bump addon deps to new...
• f9584ae fix: normalize GPT-OSS Harmony markers (QVAC-21209) (#2803)
• ae38151 chore: Use q4 models in chatterbox e2e tests (#2867)
• 98b2641 chore[notask]: bump @​qvac/ocr-ggml ^0.6.0 and diffusion-cpp ^0.12.0 (#2868)
• dbc23ef doc: update npm package homepage metadata (#2810)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: security. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
fahdkotb	Ignored	Preview	Jun 30, 2026 7:25am