Repository navigation
chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates - #143
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…pdates Bumps the npm_and_yarn group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.27.1` | `1.32.0` | | [hono](https://github.com/honojs/hono) | `4.12.16` | `4.13.11` | | [zod](https://github.com/colinhacks/zod) | `4.3.4` | `4.6.6` | | [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `4.0.18` | `5.0.5` | | [body-parser](https://github.com/expressjs/body-parser) | `2.2.2` | `2.4.0` | | [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.9` | | [nanoid](https://github.com/ai/nanoid) | `3.3.11` | `3.3.20` | | [postcss](https://github.com/postcss/postcss) | `8.5.12` | `8.5.32` | | [proxy-addr](https://github.com/jshttp/proxy-addr) | `2.0.7` | `2.0.8` | | [qs](https://github.com/ljharb/qs) | `6.14.2` | `6.17.1` | | [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` | Updates `@modelcontextprotocol/sdk` from 1.27.1 to 1.32.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@v1.27.1...1.32.0) Updates `hono` from 4.12.16 to 4.13.11 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.16...v4.13.11) Updates `zod` from 4.3.4 to 4.6.6 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.3.4...v4.6.6) Updates `@vitest/mocker` from 4.0.18 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/mocker) Updates `body-parser` from 2.2.2 to 2.4.0 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@v2.2.2...v2.4.0) Updates `fast-uri` from 3.1.0 to 3.1.9 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.9) Updates `nanoid` from 3.3.11 to 3.3.20 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.11...3.3.20) Updates `postcss` from 8.5.12 to 8.5.32 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.12...8.5.32) Updates `proxy-addr` from 2.0.7 to 2.0.8 - [Release notes](https://github.com/jshttp/proxy-addr/releases) - [Changelog](https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md) - [Commits](jshttp/proxy-addr@v2.0.7...v2.0.8) Updates `qs` from 6.14.2 to 6.17.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.2...v6.17.1) Updates `source-map-js` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/7rulnik/source-map-js/releases) - [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md) - [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.32.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: hono dependency-version: 4.13.11 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: zod dependency-version: 4.6.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@vitest/mocker" dependency-version: 5.0.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-version: 2.4.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-uri dependency-version: 3.1.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-version: 3.3.20 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.32 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: proxy-addr dependency-version: 2.0.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.17.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: source-map-js dependency-version: 1.2.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
 [Medium impact] The updates reach both the running server dependency tree and the development test workflow. The PR appears safe to merge, with a non-blocking Node types mismatch to clean up. Findings
SummaryUpdates runtime dependencies and moves
Reviews (1) · Last reviewed commit: "chore(deps): bump the npm_and_yarn group..." · Reviewed by Greptile |
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
| "tsx": "^4.21.0", | ||
| "typescript-eslint": "^8.51.0", | ||
| "vitest": "^4.0.18" | ||
| "vitest": "^5.0.5" |
Contributor
There was a problem hiding this comment.
vitest 5 requires @types/node 22 or newer, but this project still declares @types/node ^20.11.24 and locks 20.19.25. This introduces an unmet peer requirement and install warnings. Update @types/node to a supported version and regenerate the lockfile so the test runner and Node types stay compatible.
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/npm_and_yarn-9f98af0898
branch
October 30, 2026 05:25
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 11 updates in the / directory:
1.27.11.32.04.12.164.13.114.3.44.6.64.0.185.0.52.2.22.4.03.1.03.1.93.3.113.3.208.5.128.5.322.0.72.0.86.14.26.17.11.2.11.2.2Updates
@modelcontextprotocol/sdkfrom 1.27.1 to 1.32.0Release notes
Sourced from @modelcontextprotocol/sdk's releases.
... (truncated)
Commits
32549b0chore: bump version to 1.32.0 (#2935)588d51d[v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)5a0724d[v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)0ca0b62[v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...fd26801[v1.x] feat(server): add maxToolInputElements option to limit the number of e...727075b[v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...0ff6377[v1.x] examples: close idle sessions and cap the session map (#2914)c2ce003docs: point SECURITY.md at GitHub Security Advisories (v1.x) (#2910)30bfe51[v1.x] fix(client): follow redirects only within the endpoint's origin (#2902)4b0051fchore: bump version to 1.31.0 (#2890)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
honofrom 4.12.16 to 4.13.11Release notes
Sourced from hono's releases.
... (truncated)
Commits
37ce0694.13.111e1207ctest(serve-static): fix the test (#5479)8b05c77Merge commit from fork18331a9chore(adapters): release@hono/netlify@1.0.16cd583bchore(adapters): release@hono/deno@1.0.2271dd0bci: write the tag version into deno.json before publishing to JSR (#5469)ae93026chore(adapters): release@hono/deno@1.0.172f0d8dfeat(adapters/netlify): publish to JSR (#5468)f3d5e884.13.10645ddd6test: move adapter runtime tests intoadapters/*(#5466)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for hono since your current version.
Updates
zodfrom 4.3.4 to 4.6.6Release notes
Sourced from zod's releases.
... (truncated)
Commits
9c21983ci: stage at verbose so a failed OIDC token exchange says why529f78d4.6.6a0ebf97fix(v4): check array, set and map size bounds before parsing elements (#6652)a2ba4a6fix(types): declare record output and input as members, not base type argumen...c42596brelease: hold the run on the release-approval environment until the staged ve...bacad51docs: square the Code for Japan logo to match the other bronze tiles8fb2fafdocs: crop the Code for Japan logo and list it first in bronzeb2ef983docs: add Code for Japan to bronze sponsors74304cerelease: stage npm versions instead of publishing them (#6622)34a626fdocs: tighten the z.locales tree-shaking noteMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for zod since your current version.
Updates
@vitest/mockerfrom 4.0.18 to 5.0.5Release notes
Sourced from @vitest/mocker's releases.
... (truncated)
Commits
7a825dbchore: release v5.0.5 (#11609)6a11cf6chore: release v5.0.4 (#11554)58c86edchore(deps): update all non-major dependencies (#11550)5c95521fix(browser): clean up unmocked and pending mocks (#11537)cd423bafix(mocker): fix native loader mocking edge cases (#11540)36d19cbfix: wrap module mocks during in-source testing (#11505)fe025b2chore(deps): update dependency msw to v3 (#11482)b0f2b3bfix: track project files and mocks with --changed (#11432)33cadeachore: release v5.0.3 (#11409)15cc006fix: don't print an interceptor warning in browser mode (#11377)Updates
body-parserfrom 2.2.2 to 2.4.0Release notes
Sourced from body-parser's releases.
... (truncated)
Changelog
Sourced from body-parser's changelog.
Commits
b4744d72.4.0 (#777)f7075eafix: prevent process crash from trailing bytes after a compressed body185ff1dchore: update dependencies (#778)73713f7docs: fix depth error description (#776)2dcc826docs: improve readability (#756)402dbdcdocs: note that req.body may be undefined in v2 (#752)9883a1eperf: inline content stream setup (#750)02101dafix(test): pin supertest to 7.3.0 to avoid 7.3.1 regression (#773)822a0fdbuild(deps): bump the github-actions group with 3 updates (#771)aa9889bci: trigger npm publish on release published and set dist-tag (#768)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for body-parser since your current version.
Updates
fast-urifrom 3.1.0 to 3.1.9Release notes
Sourced from fast-uri's releases.
... (truncated)
Commits
0def703Bumped v3.1.9a1d0da2test: generate only relative path references9eb8759fix: preserve relative paths in suffix and relative resolution54c30f7docs: note suffix-reference authority ambiguity39e6493fix: escape a first-segment colon in suffix references745183ctest: cover first-segment colon in suffix referencesddfc6a5fix(SEC-03): reject non reg-name characters in domain hostsd86a8d2fix: keep a colon-first segment behind "./" in relative normalizationeb483b5test: cover colon-first relative references in normalizationb110a35fix(SEC-02): preserve meaning of relative references during normalizationMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for fast-uri since your current version.
Updates
nanoidfrom 3.3.11 to 3.3.20Release notes
Sourced from nanoid's releases.
Changelog
Sourced from