chore(deps): bump the npm_and_yarn group across 1 directory with 22 updates#1
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): bump the npm_and_yarn group across 1 directory with 22 updates#1dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
…pdates Bumps the npm_and_yarn group with 22 updates in the / directory: | Package | From | To | | --- | --- | --- | | [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.28.0` | `3.36.0` | | [tar](https://github.com/isaacs/node-tar) | `7.5.6` | `7.5.15` | | [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.0` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.25.3` | `1.29.0` | | [undici](https://github.com/nodejs/undici) | `7.19.0` | `7.25.0` | | [ajv](https://github.com/ajv-validator/ajv) | `8.17.1` | `8.18.0` | | [picomatch](https://github.com/micromatch/picomatch) | `4.0.3` | `4.0.4` | | [systeminformation](https://github.com/sebhildebrandt/systeminformation) | `5.30.2` | `5.31.6` | | [@hono/node-server](https://github.com/honojs/node-server) | `1.19.9` | `1.19.14` | | @isaacs/brace-expansion | `5.0.0` | `5.0.1` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.14` | | [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` | | [fast-uri](https://github.com/fastify/fast-uri) | `3.0.6` | `3.1.2` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.5.3` | `5.7.3` | | [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.2` | | [hono](https://github.com/honojs/hono) | `4.11.5` | `4.12.18` | | [lodash](https://github.com/lodash/lodash) | `4.17.23` | `4.18.1` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `8.2.0` | `8.4.2` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.5.3` | `7.5.6` | | [qs](https://github.com/ljharb/qs) | `6.14.1` | `6.15.1` | | [rollup](https://github.com/rollup/rollup) | `4.53.2` | `4.60.3` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.2.2` | `7.3.3` | Updates `simple-git` from 3.28.0 to 3.36.0 - [Release notes](https://github.com/steveukx/git-js/releases) - [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md) - [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.36.0/simple-git) Updates `tar` from 7.5.6 to 7.5.15 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.6...v7.5.15) Updates `uuid` from 13.0.0 to 14.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v13.0.0...v14.0.0) Updates `@modelcontextprotocol/sdk` from 1.25.3 to 1.29.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@v1.25.3...v1.29.0) Updates `undici` from 7.19.0 to 7.25.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v7.19.0...v7.25.0) Updates `ajv` from 8.17.1 to 8.18.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v8.17.1...v8.18.0) Updates `picomatch` from 4.0.3 to 4.0.4 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@4.0.3...4.0.4) Updates `systeminformation` from 5.30.2 to 5.31.6 - [Release notes](https://github.com/sebhildebrandt/systeminformation/releases) - [Changelog](https://github.com/sebhildebrandt/systeminformation/blob/master/CHANGELOG.md) - [Commits](sebhildebrandt/systeminformation@v5.30.2...v5.31.6) Updates `@hono/node-server` from 1.19.9 to 1.19.14 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v1.19.9...v1.19.14) Updates `@isaacs/brace-expansion` from 5.0.0 to 5.0.1 Updates `brace-expansion` from 1.1.12 to 1.1.14 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.14) Updates `minimatch` from 3.1.2 to 3.1.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.1.2...v3.1.5) Updates `fast-uri` from 3.0.6 to 3.1.2 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.0.6...v3.1.2) Updates `fast-xml-parser` from 4.5.3 to 5.7.3 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.5.3...v5.7.3) Updates `flatted` from 3.3.3 to 3.4.2 - [Commits](WebReflection/flatted@v3.3.3...v3.4.2) Updates `hono` from 4.11.5 to 4.12.18 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.11.5...v4.12.18) Updates `lodash` from 4.17.23 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.23...4.18.1) Updates `path-to-regexp` from 8.2.0 to 8.4.2 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v8.2.0...v8.4.2) Updates `protobufjs` from 7.5.3 to 7.5.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.5.6/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.3...protobufjs-v7.5.6) Updates `qs` from 6.14.1 to 6.15.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.1...v6.15.1) Updates `rollup` from 4.53.2 to 4.60.3 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.53.2...v4.60.3) Updates `vite` from 7.2.2 to 7.3.3 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.3/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.3/packages/vite) --- updated-dependencies: - dependency-name: simple-git dependency-version: 3.36.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.15 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.29.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 7.25.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ajv dependency-version: 8.18.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 4.0.4 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: systeminformation dependency-version: 5.31.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@hono/node-server" dependency-version: 1.19.14 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@isaacs/brace-expansion" dependency-version: 5.0.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.14 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.7.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hono dependency-version: 4.12.18 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-version: 8.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.60.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.3.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 22 updates in the / directory:
3.28.03.36.07.5.67.5.1513.0.014.0.01.25.31.29.07.19.07.25.08.17.18.18.04.0.34.0.45.30.25.31.61.19.91.19.145.0.05.0.11.1.121.1.143.1.23.1.53.0.63.1.24.5.35.7.33.3.33.4.24.11.54.12.184.17.234.18.18.2.08.4.27.5.37.5.66.14.16.15.14.53.24.60.37.2.27.3.3Updates
simple-gitfrom 3.28.0 to 3.36.0Release notes
Sourced from simple-git's releases.
... (truncated)
Changelog
Sourced from simple-git's changelog.
... (truncated)
Commits
7dc1a53Version Packages76f5376Merge pull request #1061 from Vinzent03/fix/buffer-import89a2294Environment Parsing (#1156)1b91b76fix: remove explicit node:buffer importe390685Version Packages3c9e4b8Pin version of@simple-git/args-pathspec94ee21fExportpathspectypes throughsimple-gitfor backward compatibility6d7cb51Version Packages0de400eSwitch to semver from workspace revisions2264722Version PackagesMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for simple-git since your current version.
Updates
tarfrom 7.5.6 to 7.5.15Commits
87cc3097.5.157aef486fix: regression in pending links detection6244eb37.5.149704d8cstricter protection against hardlinks preempting their targets700734fupdate workflows and depsd6611ae7.5.13119c401fix(extract): prevent raced symlink writes outside cwd2a294d37.5.1201082a4fix: reject top promise on floating addFilesAsync rejectionsdd1c36alintingMaintainer changes
This version was pushed to npm by isaacs, a new releaser for tar since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
uuidfrom 13.0.0 to 14.0.0Release notes
Sourced from uuid's releases.
Changelog
Sourced from uuid's changelog.
Commits
7c1ea08chore(main): release 14.0.0 (#926)3d2c5b0Merge commit from forkf2c235ffix!: expectcryptoto be global everywhere (requires node@20+) (#935)529ef08chore: upgrade TypeScript and fixup types (#927)086fd79chore: update dependencies (#933)dc4ddb8feat!: drop node@18 support (#934)0f1f9c9chore: switch to Biome for parsing and linting (#932)e2879e6chore: use maintained version of npm-run-all (#930)ffa3138fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)0423d49docs: remove obsolete v1 option notes (#915)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.
Updates
@modelcontextprotocol/sdkfrom 1.25.3 to 1.29.0Release notes
Sourced from @modelcontextprotocol/sdk's releases.
... (truncated)
Commits
e12cbd7chore: bump version to 1.29.0 (#1820)3913fd4fix(stdio): always set windowsHide on Windows, not just in Electron (#1640)5608e78[v1.x backport] Allow servers / clients to advertise extensions in the capabi...7213816v1.x #1623 follow up -add missing types to package.json (#1773)364f38cv1.x npm audit fix (#1780)c95cc09Add typings exports (#1623)ddadaa6[v1.x] fix: add missing size field to ResourceSchema (#1575)2a15851[v1.x] fix: disallow null (infinite) requested TTL (#1339)13e30f1fix: treat v1.x as primary branch for npm latest tag (backport #1577) (#1749)a056569chore: bump version to 1.28.0 (#1746)Updates
undicifrom 7.19.0 to 7.25.0Release notes
Sourced from undici's releases.
... (truncated)
Commits
12d9045Bumped v7.25.0 (#5025)7a6f7feBumped v7.24.8 (#5020)1f85ae4fix: avoid 401 failures for stream-backed request bodies (#4941) (#5006)c661067chore: update v7.x maintenance release flow84f23e2Bumped v7.24.7 (#4947)a770b10ignore AGENTS.md (#4942)6acd19bfix: correctly handle multi-value rawHeaders in fetch (#4938)1da1c74test: skip IPv6 tests when IPv6 is not available (#4939)04cb773fix(types): Fix clone method type declaration to be an instance method rather...5145a7cfix(types): align Response with DOM fetch types (#4867)Updates
ajvfrom 8.17.1 to 8.18.0Release notes
Sourced from ajv's releases.
Commits
142ce848.18.0720a23ffix(pattern): use configured RegExp engine with $data keyword to mitigate ReD...82735a1fix: typos in schema-language.md (#2507)b17ec32fix: small grammatical error in managing-schemas.md (#2508)69568d0fix: #2482 Infinity and NaN serialise to null (#2487)f06766ffeat: allow tree-shaking by adding ``"sideEffects": falsetopackage.json` ...Updates
picomatchfrom 4.0.3 to 4.0.4Release notes
Sourced from picomatch's releases.
Commits
e5474fcPublish 4.0.44516eb5Merge commit from fork5eceecdMerge commit from fork0db7dd7Run benchmark again against latest minimatch version (#161)9500377docs: clarify what brace expansion syntax is and isn't supported (#134)2661f23fix typo in globstars.js test name (#138)1798b07docs: fixmakeReexample (#143)9d76bc5chore: undocument removed options (#146)e4d718bRemove unused time-require (#160)38dffebchore(deps): pin dependencies (#158)Updates
systeminformationfrom 5.30.2 to 5.31.6Release notes
Sourced from systeminformation's releases.
Changelog
Sourced from systeminformation's changelog.
... (truncated)
Commits
da1cbf55.31.687dbb60fix: smaller issues1d1bddffix: smaller issuesf69576ffix: networkInterfaces() ci wip78624d1fix: networkInterfaces() cied1cac55.31.54dd5aa9netStats() netstat command adaption (mac OS)59360e65.31.43ef3f3bdiskLayout() USB tahoe compatibility (mac OS)8edd1305.31.3Updates
@hono/node-serverfrom 1.19.9 to 1.19.14Release notes
Sourced from @hono/node-server's releases.
Commits
b5e63a31.19.14c02d777fix: add custom inspect to lightweight Request/Response to prevent TypeError ...fd64e651.19.13025c30fMerge commit from fork6cdb5a71.19.1270250f7fix: request draining for early 413 responses (#329)cfc08b3chore: ignore claude setting (#314)ecd4d6b1.19.11c944899fix: do not overwrite Content-Length in the fast path pattern if Content-Leng...2f8ca361.19.10Updates
@isaacs/brace-expansionfrom 5.0.0 to 5.0.1Updates
brace-expansionfrom 1.1.12 to 1.1.14Commits
10c05fc1.1.141afa1b2Add opt-in { max } mitigation to v1 legacy line (#103)2fbb6a2Revert "Backport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)" (#102)0d7652eBackport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)6c353ca1.1.137fd684fBackport fix for GHSA-f886-m6hf-6m8v (#95)Updates
minimatchfrom 3.1.2 to 3.1.5Commits
7bba9783.1.5bd25942docs: add warning about ReDoS1a9c27cfix partial matching of globstar patterns1a2e0843.1.4ae24656update lockfileb100374limit recursion for **, improve perf considerably26ffeaalockfile update9eca892lock node version to 1400c323b3.1.330486b2update CI matrix and actionsDescription has been truncated