chore(deps): bump the npm_and_yarn group across 4 directories with 8 updates#3
chore(deps): bump the npm_and_yarn group across 4 directories with 8 updates#3dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
…updates Bumps the npm_and_yarn group with 4 updates in the / directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte), [js-yaml](https://github.com/nodeca/js-yaml) and [lodash](https://github.com/lodash/lodash). Bumps the npm_and_yarn group with 1 update in the /packages/playwright-core/bundles/mcp directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk). Bumps the npm_and_yarn group with 1 update in the /packages/playwright-core/bundles/utils directory: [diff](https://github.com/kpdecker/jsdiff). Bumps the npm_and_yarn group with 2 updates in the /utils/flakiness-dashboard directory: [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [jws](https://github.com/brianloveswords/node-jws). Updates `@modelcontextprotocol/sdk` from 1.17.5 to 1.26.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.17.5...v1.26.0) Updates `svelte` from 5.42.3 to 5.51.5 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.51.5/packages/svelte) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `qs` from 6.14.0 to 6.15.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.0...v6.15.0) Updates `@modelcontextprotocol/sdk` from 1.24.2 to 1.26.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.17.5...v1.26.0) Updates `qs` from 6.14.0 to 6.15.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.0...v6.15.0) Updates `diff` from 7.0.0 to 8.0.3 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@7.0.0...v8.0.3) Updates `fast-xml-parser` from 5.2.5 to 5.3.7 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.2.5...v5.3.7) Updates `jws` from 3.2.2 to 3.2.3 - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v3.2.2...v3.2.3) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.26.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: svelte dependency-version: 5.51.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.26.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: diff dependency-version: 8.0.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
Test results for "MCP"3 failed 2711 passed, 116 skipped Merge workflow run. |
Test results for "tests 1"10 failed 6 flaky34352 passed, 688 skipped Merge workflow run. |
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
Test results for "tests others"2 fatal errors, not part of any test 1 interrupted17333 passed, 449 skipped, 852 did not run Merge workflow run. |
Test results for "tests 2"3 fatal errors, not part of any test 110 flaky247188 passed, 9550 skipped Merge workflow run. |
Bumps the npm_and_yarn group with 4 updates in the / directory: @modelcontextprotocol/sdk, svelte, js-yaml and lodash.
Bumps the npm_and_yarn group with 1 update in the /packages/playwright-core/bundles/mcp directory: @modelcontextprotocol/sdk.
Bumps the npm_and_yarn group with 1 update in the /packages/playwright-core/bundles/utils directory: diff.
Bumps the npm_and_yarn group with 2 updates in the /utils/flakiness-dashboard directory: fast-xml-parser and jws.
Updates
@modelcontextprotocol/sdkfrom 1.17.5 to 1.26.0Release notes
Sourced from
@modelcontextprotocol/sdk's releases.... (truncated)
Commits
fe9c07bchore: bump version to 1.26.0 (#1479)4f01e7efix: add non-null assertions for optional setupServer fields in stateful testa05be17Merge commit from fork50d9fa3Fix #1430: Client Credentials providers scopes support (backported) (#1442)aa81a66fix(deps): resolve npm audit vulnerabilities and bump dependencies (v1.x back...6aba065chore: bump v1.25.3 for backport fixes (#1412)6e8f7e1fix: prevent Hono from overriding global Response object (v1.x) (#1411)12ae856[v1.x backport] Use correct schema for client sampling validation when tools ...b392f02fix: prevent ReDoS in UriTemplate regex patterns (v1.x backport) (#1365)a0c9b13fix: README badges links destinations (#907)Maintainer changes
This version was pushed to npm by pcarleton, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
sveltefrom 5.42.3 to 5.51.5Release notes
Sourced from svelte's releases.
... (truncated)
Changelog
Sourced from svelte's changelog.
... (truncated)
Commits
8ea33bfVersion Packages (#17740)f855a0bfix: misc option escaping and backwards compatibility (#17741)781052echore: upgradedevalue(#17739)f7c80daMerge commit from forka0c7f28Merge commit from fork73098bbMerge commit from forkf89c7ddMerge commit from forkb8f2b86Version Packages (#17733)c83aa06chore: proactively defer effects in pending boundary (#17734)2287ad0fix: detect and error on non-idempotent each block keys in dev mode (#17732)Updates
js-yamlfrom 4.1.0 to 4.1.1Changelog
Sourced from js-yaml's changelog.
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)Updates
lodashfrom 4.17.21 to 4.17.23Commits
dec55b7Bump main to v4.17.23 (#6088)19c9251fix: setCacheHas JSDoc return type should be boolean (#6071)b5e6729jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)edadd45Prevent prototype pollution on baseUnset function4879a7adoc: fix autoLink function, conversion of source links (#6056)9648f69chore: removeyarn.lockfile (#6053)dfa407dci: remove legacy configuration files (#6052)156e196feat: add renovate setup (#6039)933e106ci: add pipeline for Bun (#6023)072a807docs: update links related to Open JS Foundation (#5968)Updates
qsfrom 6.14.0 to 6.15.0Changelog
Sourced from qs's changelog.
Commits
d9b4c66v6.15.0cb41a54[New]parse: addstrictMergeoption to wrap object/primitive conflicts in...88e1563[Fix]duplicatesoption should not apply to bracket notation keys9d441d2Merge backport release tags v6.0.6–v6.13.3 into main85cc8cav6.12.5ffc12aav6.11.40506b11[actions] update reusable workflows6a37faf[actions] update reusable workflows8e8df5a[Fix] fix regressions from robustness refactord60bab3v6.10.7Updates
@modelcontextprotocol/sdkfrom 1.24.2 to 1.26.0Release notes
Sourced from
@modelcontextprotocol/sdk's releases.... (truncated)
Commits
fe9c07bchore: bump version to 1.26.0 (#1479)4f01e7efix: add non-null assertions for optional setupServer fields in stateful testa05be17Merge commit from fork50d9fa3Fix #1430: Client Credentials providers scopes support (backported) (#1442)aa81a66fix(deps): resolve npm audit vulnerabilities and bump dependencies (v1.x back...6aba065chore: bump v1.25.3 for backport fixes (#1412)6e8f7e1fix: prevent Hono from overriding global Response object (v1.x) (#1411)12ae856[v1.x backport] Use correct schema for client sampling validation when tools ...b392f02fix: prevent ReDoS in UriTemplate regex patterns (v1.x backport) (#1365)a0c9b13fix: README badges links destinations (#907)Maintainer changes
This version was pushed to npm by pcarleton, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
qsfrom 6.14.0 to 6.15.0Changelog
Sourced from qs's changelog.
Commits
d9b4c66v6.15.0cb41a54[New]parse: addstrictMergeoption to wrap object/primitive conflicts in...88e1563[Fix]duplicatesoption should not apply to bracket notation keys9d441d2Merge backport release tags v6.0.6–v6.13.3 into main85cc8cav6.12.5ffc12aav6.11.40506b11[actions] update reusable workflows6a37faf[actions] update reusable workflows8e8df5a[Fix] fix regressions from robustness refactord60bab3v6.10.7Updates
difffrom 7.0.0 to 8.0.3Changelog
Sourced from diff's changelog.
Commits
13576bf8.0.3 release (#652)1179ccbIgnore .zed (#651)949d6e2Add test for the vuln I just fixed (#650)15a1585Fix the second denial-of-service vulnerability in parsePatch (#649)de95ccaFix potentially cubic-time regex in parsePatch (#647)b9aeedeAllow more customisation of file headers in patches (#641)43c716cMerge pull request #636 from kpdecker/dependabot/npm_and_yarn/node-forge-1.3.2b8162c7Bump node-forge from 1.3.1 to 1.3.2ad6dc17Fix some bugs in the diffWords regex (and errors & ambiguities in the comment...3e1774aFix a comment typo (#633)Updates
fast-xml-parserfrom 5.2.5 to 5.3.7Release notes
Sourced from fast-xml-parser's releases.
Changelog
Sourced from fast-xml-parser's changelog.
... (truncated)
Commits
fc97a55update relese infob9aef04UnexportX2jOptionsat declaration site (#787)c20fbd6remove unused codeecb2ca1update release info910dae5fix entities performance & security issuesfe9a852update strnum and release detail943ef0efix: Escape regex char in entity nameddcd0acEscape regex char in entity name341b582Add missing exports to fxp commonjs types (#782)753e770update release detailsUpdates
jwsfrom 3.2.2 to 3.2.3Release notes
Sourced from jws's releases.
Changelog
Sourced from jws's changelog.