build(deps): bump the production-dependencies group with 11 updates by dependabot[bot] · Pull Request #142 · posecode-dev/posecode

dependabot · 2026-10-12T18:36:15Z

Bumps the production-dependencies group with 11 updates:

Package	From	To
three	`0.185.1`	`0.186.1`
vscode-languageserver	`10.1.0`	`10.1.2`
vscode-languageserver-textdocument	`1.0.14`	`1.0.15`
@modelcontextprotocol/sdk	`1.30.0`	`1.32.1`
zod	`4.4.3`	`4.6.5`
@codemirror/commands	`6.11.0`	`6.11.1`
@codemirror/language	`6.12.4`	`6.13.1`
@codemirror/state	`6.7.1`	`6.7.6`
@codemirror/view	`6.43.10`	`6.43.14`
@lezer/highlight	`1.2.3`	`1.2.5`
vscode-languageclient	`10.1.0`	`10.1.2`

Updates three from 0.185.1 to 0.186.1

Commits

See full diff in compare view

Updates vscode-languageserver from 10.1.0 to 10.1.2

Commits

d776b6e Prepare new release
87f5872 Expose null progress reporter detection (#1827)
67724c1 Fall back to a full result when previousResult gets an unknown id (#1858)
5351a23 Enable publishing to Azure Artifacts (#1847)
8fe8390 redirect console.info to avoid corrupting stdio (#1841)
a180df4 Release version 3.18.3 and update lock files (#1844)
93d5fe6 feat(server): support document ranges formatting (#1823)
0da5527 Merge latest release into main (#1817)
See full diff in compare view

Updates vscode-languageserver-textdocument from 1.0.14 to 1.0.15

Release notes

Sourced from vscode-languageserver-textdocument's releases.

release/textDocument/1.0.15

Changes:

#1864: Remove publishPackageToAzureArtifacts property

#1854: Include error code and message in the 'Sending response' trace log

#1853: Route jsonrpc connection logging to the output channel instead of console

#1827: Expose null progress reporter detection

#1855: Fix unhandled rejection when writing a JSON-RPC request fails

#1856: Bump js-yaml from 4.3.1 to 4.3.2

#1858: Fall back to a full result when previousResult gets an unknown id

#1846: Fix socket transport when TransportKind.socket uses port 0

#1850: Bump fast-uri from 3.1.5 to 3.1.7

#1851: Bump browserslist from 4.28.1 to 4.28.8

#1852: Bump @humanfs/node from 0.16.7 to 0.16.8

#1848: Align implementation with specification

#1847: Enable publishing to Azure Artifacts

#1841: redirect console.info to avoid corrupting stdio

#1844: Release version 3.18.3 and update lock files

#1843: 3.18.3 release and lock file updates

This list of changes was auto generated.

Commits

See full diff in compare view

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.32.1

Release notes

Sourced from @modelcontextprotocol/sdk's releases.

1.32.1

What's Changed

[v1.x] docs: state the principles in CLAUDE.md by @claude[bot] in modelcontextprotocol/typescript-sdk#2939

[v1.x] docs: point the README at v2 and say what v1.x supports by @claude[bot] in modelcontextprotocol/typescript-sdk#2942

chore: bump version to 1.32.1 by @claude[bot] in modelcontextprotocol/typescript-sdk#2954

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1

1.32.0

Upgrade notes

Redirects: the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets redirectPolicy: 'follow' on StreamableHTTPClientTransport or SSEClientTransport. In browsers, a redirected request fails unless that option is set.

New options, both off unless you set them: maxToolInputElements on McpServer limits the number of array elements and object members in a tool call's arguments. expectedResource on requireBearerAuth accepts only tokens issued for this server (the token's audience).

What's Changed

[v1.x] fix(client): follow redirects only within the endpoint's origin by @claude[bot] in modelcontextprotocol/typescript-sdk#2902

docs: point SECURITY.md at GitHub Security Advisories (v1.x) by @claude[bot] in modelcontextprotocol/typescript-sdk#2910

[v1.x] examples: close idle sessions and cap the session map by @maxisbey in modelcontextprotocol/typescript-sdk#2914

[v1.x] fix(tasks): keep tasks of the in-memory task store within the session that created them by @claude[bot] in modelcontextprotocol/typescript-sdk#2925

[v1.x] feat(server): add maxToolInputElements option to limit the number of elements in tool-call arguments by @claude[bot] in modelcontextprotocol/typescript-sdk#2927

[v1.x] fix(server): accept tools/call and prompts/get requests that omit arguments by @raashish1601 in modelcontextprotocol/typescript-sdk#2045

[v1.x] feat(auth): add expectedResource to requireBearerAuth by @claude[bot] in modelcontextprotocol/typescript-sdk#2930

[v1.x] test(e2e): cover tools/call and prompts/get without arguments by @claude[bot] in modelcontextprotocol/typescript-sdk#2931

chore: bump version to 1.32.0 by @claude[bot] in modelcontextprotocol/typescript-sdk#2935

New Contributors

@raashish1601 made their first contribution in modelcontextprotocol/typescript-sdk#2045

Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0

1.31.0

Upgrade notes

Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.

Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

[v1.x] Bind stored OAuth credentials to the authorization server that issued them by @maxisbey in modelcontextprotocol/typescript-sdk#2888

chore: bump version to 1.31.0 by @claude[bot] in modelcontextprotocol/typescript-sdk#2890

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.1...1.31.0

1.30.1

What's Changed

[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length by @maxisbey in modelcontextprotocol/typescript-sdk#2717

fix(auth): preserve resource URI without trailing slash (#1968) by @MukundaKatta in modelcontextprotocol/typescript-sdk#1972

chore: bump version to 1.30.1 by @claude[bot] in modelcontextprotocol/typescript-sdk#2848

New Contributors

@MukundaKatta made their first contribution in modelcontextprotocol/typescript-sdk#1972

... (truncated)

Commits

ff07b00 chore: bump version to 1.32.1 (#2954)
8a74d50 [v1.x] docs: point the README at v2 and say what v1.x supports (#2942)
a8cf503 [v1.x] docs: state the principles in CLAUDE.md (#2939)
32549b0 chore: bump version to 1.32.0 (#2935)
588d51d [v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)
5a0724d [v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)
0ca0b62 [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...
fd26801 [v1.x] feat(server): add maxToolInputElements option to limit the number of e...
727075b [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...
0ff6377 [v1.x] examples: close idle sessions and cap the session map (#2914)
Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post

f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections

de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)

56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)

ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"

cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""

0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5

59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)

ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)

2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump

f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged

75d63ee1 docs: show only the .properties() method form in the 4.6 post

46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

9446b5cc fix: preserve undefined prefault outputs and object keys (#6587) — closes #6585

0c483c58 docs: the Zod 4.6 announcement post (#6546)

a00c3f34 docs: use Trigger.dev's brand-kit lockups for the platinum card

v4.6.1

A patch on top of 4.6.0.

b12aa523 fix: preserve unique tags with defaulted discriminators (#6582) — closes #6577

dd9c36fa fix(v4): defer recursive object index inference (#6580)

3b154992 feat(lang): add Tajik (tg) locale (#6581) by @ismoil77

2efa8b80 ci: give the npm wait a real budget and drop the back-publish path (#6583)

v4.6.0

Zod 4.6 is now available.
npm install zod@latest
At a glance:

... (truncated)

Commits

59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
0f3f5ee 4.6.5
cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
743aedb 4.6.4
Additional commits viewable in compare view

Updates @codemirror/commands from 6.11.0 to 6.11.1

Commits

See full diff in compare view

Updates @codemirror/language from 6.12.4 to 6.13.1

Commits

See full diff in compare view

Updates @codemirror/state from 6.7.1 to 6.7.6

Commits

See full diff in compare view

Updates @codemirror/view from 6.43.10 to 6.43.14

Commits

See full diff in compare view

Updates @lezer/highlight from 1.2.3 to 1.2.5

Commits

See full diff in compare view

Updates vscode-languageclient from 10.1.0 to 10.1.2

Commits

d776b6e Prepare new release
a7ca284 Route jsonrpc connection logging to the output channel instead of console (#1...
5010cdf Fix socket transport when TransportKind.socket uses port 0 (#1846)
5351a23 Enable publishing to Azure Artifacts (#1847)
a180df4 Release version 3.18.3 and update lock files (#1844)
2ffaa4d Add configurable language server stream handlers (#1839)
d6ff6d0 Preserve diagnostic pull state after quick document reopen (#1835)
f99697b Update dependencies (#1834)
0b6b07c Bump brace-expansion from 5.0.7 to 5.0.9 in /client (#1831)
a9befc8 Bump brace-expansion from 5.0.6 to 5.0.7 in /client (#1824)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [three](https://github.com/mrdoob/three.js) | `0.185.1` | `0.186.1` | | [vscode-languageserver](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/server) | `10.1.0` | `10.1.2` | | [vscode-languageserver-textdocument](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/textDocument) | `1.0.14` | `1.0.15` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.32.1` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` | | [@codemirror/commands](https://github.com/codemirror/commands) | `6.11.0` | `6.11.1` | | [@codemirror/language](https://github.com/codemirror/language) | `6.12.4` | `6.13.1` | | [@codemirror/state](https://github.com/codemirror/state) | `6.7.1` | `6.7.6` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.10` | `6.43.14` | | [@lezer/highlight](https://github.com/lezer-parser/highlight) | `1.2.3` | `1.2.5` | | [vscode-languageclient](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client) | `10.1.0` | `10.1.2` | Updates `three` from 0.185.1 to 0.186.1 - [Release notes](https://github.com/mrdoob/three.js/releases) - [Commits](https://github.com/mrdoob/three.js/commits) Updates `vscode-languageserver` from 10.1.0 to 10.1.2 - [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases) - [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.1.2/server) Updates `vscode-languageserver-textdocument` from 1.0.14 to 1.0.15 - [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases) - [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/textDocument/1.0.15/textDocument) Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.32.1 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.32.1) Updates `zod` from 4.4.3 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.6.5) Updates `@codemirror/commands` from 6.11.0 to 6.11.1 - [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/commands/commits) Updates `@codemirror/language` from 6.12.4 to 6.13.1 - [Changelog](https://github.com/codemirror/language/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/language/commits) Updates `@codemirror/state` from 6.7.1 to 6.7.6 - [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/state/commits) Updates `@codemirror/view` from 6.43.10 to 6.43.14 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@lezer/highlight` from 1.2.3 to 1.2.5 - [Changelog](https://github.com/lezer-parser/highlight/blob/main/CHANGELOG.md) - [Commits](https://github.com/lezer-parser/highlight/commits) Updates `vscode-languageclient` from 10.1.0 to 10.1.2 - [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases) - [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.1.2/client) --- updated-dependencies: - dependency-name: three dependency-version: 0.186.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: vscode-languageserver dependency-version: 10.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: vscode-languageserver-textdocument dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.32.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@codemirror/commands" dependency-version: 6.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@codemirror/language" dependency-version: 6.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@codemirror/state" dependency-version: 6.7.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@codemirror/view" dependency-version: 6.43.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@lezer/highlight" dependency-version: 1.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: vscode-languageclient dependency-version: 10.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-10-12T19:14:12Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
posecode	Ready	Preview	Oct 12, 2026 7:14pm UTC

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 12, 2026

vercel Bot deployed to Preview October 12, 2026 19:14

View deployment

Navigation Menu

Repository navigation

build(deps): bump the production-dependencies group with 11 updates - #142

build(deps): bump the production-dependencies group with 11 updates#142
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-8ba1120c16

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

vercel Bot commented Oct 12, 2026 •

edited

Loading

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026

release/textDocument/1.0.15

Changes:

1.32.1

What's Changed

1.32.0

Upgrade notes

What's Changed

New Contributors

1.31.0

Upgrade notes

What's Changed

1.30.1

What's Changed

New Contributors

v4.6.5

Commits:

v4.6.4

v4.6.3

v4.6.2

v4.6.1

v4.6.0

Uh oh!

vercel Bot commented Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

vercel Bot commented Oct 12, 2026 •

edited

Loading