build(deps): bump the npm_and_yarn group across 3 directories with 6 updates - #2
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
…updates Bumps the npm_and_yarn group with 2 updates in the /packages/opencode directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) and [diff](https://github.com/kpdecker/jsdiff). Bumps the npm_and_yarn group with 4 updates in the /packages/web directory: [diff](https://github.com/kpdecker/jsdiff), [@astrojs/cloudflare](https://github.com/withastro/astro/tree/HEAD/packages/integrations/cloudflare), [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) and [sharp](https://github.com/lovell/sharp). Bumps the npm_and_yarn group with 1 update in the /sdks/vscode directory: [esbuild](https://github.com/evanw/esbuild). Updates `@modelcontextprotocol/sdk` from 1.15.1 to 1.26.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.15.1...v1.26.0) Updates `diff` from 8.0.2 to 8.0.3 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v8.0.2...v8.0.3) Updates `diff` from 8.0.2 to 8.0.3 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v8.0.2...v8.0.3) Updates `@astrojs/cloudflare` from 12.6.13 to 13.7.0 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/cloudflare/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/cloudflare@13.7.0/packages/integrations/cloudflare) Updates `astro` from 5.7.13 to 6.1.10 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.10/packages/astro) Updates `sharp` from 0.32.5 to 0.32.6 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/v0.32.6/docs/changelog.md) - [Commits](lovell/sharp@v0.32.5...v0.32.6) Updates `esbuild` from 0.25.12 to 0.28.1 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md) - [Commits](evanw/esbuild@v0.25.12...v0.28.1) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.26.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: diff dependency-version: 8.0.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: diff dependency-version: 8.0.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@astrojs/cloudflare" dependency-version: 13.7.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: astro dependency-version: 6.1.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sharp dependency-version: 0.32.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: esbuild dependency-version: 0.28.1 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 2 updates in the /packages/opencode directory: @modelcontextprotocol/sdk and diff.
Bumps the npm_and_yarn group with 4 updates in the /packages/web directory: diff, @astrojs/cloudflare, astro and sharp.
Bumps the npm_and_yarn group with 1 update in the /sdks/vscode directory: esbuild.
Updates
@modelcontextprotocol/sdkfrom 1.15.1 to 1.26.0Release notes
Sourced from @modelcontextprotocol/sdk's releases.
... (truncated)
Commits
fe9c07bchore: bump version to 1.26.0 (#1479)4f01e7efix: add non-null assertions for optional setupServer fields in stateful testa05be17Merge commit from fork50d9fa3Fix #1430: Client Credentials providers scopes support (backported) (#1442)aa81a66fix(deps): resolve npm audit vulnerabilities and bump dependencies (v1.x back...6aba065chore: bump v1.25.3 for backport fixes (#1412)6e8f7e1fix: prevent Hono from overriding global Response object (v1.x) (#1411)12ae856[v1.x backport] Use correct schema for client sampling validation when tools ...b392f02fix: prevent ReDoS in UriTemplate regex patterns (v1.x backport) (#1365)a0c9b13fix: README badges links destinations (#907)Maintainer changes
This version was pushed to npm by pcarleton, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
difffrom 8.0.2 to 8.0.3Changelog
Sourced from diff's changelog.
Commits
13576bf8.0.3 release (#652)1179ccbIgnore .zed (#651)949d6e2Add test for the vuln I just fixed (#650)15a1585Fix the second denial-of-service vulnerability in parsePatch (#649)de95ccaFix potentially cubic-time regex in parsePatch (#647)b9aeedeAllow more customisation of file headers in patches (#641)43c716cMerge pull request #636 from kpdecker/dependabot/npm_and_yarn/node-forge-1.3.2b8162c7Bump node-forge from 1.3.1 to 1.3.2ad6dc17Fix some bugs in the diffWords regex (and errors & ambiguities in the comment...3e1774aFix a comment typo (#633)Updates
difffrom 8.0.2 to 8.0.3Changelog
Sourced from diff's changelog.
Commits
13576bf8.0.3 release (#652)1179ccbIgnore .zed (#651)949d6e2Add test for the vuln I just fixed (#650)15a1585Fix the second denial-of-service vulnerability in parsePatch (#649)de95ccaFix potentially cubic-time regex in parsePatch (#647)b9aeedeAllow more customisation of file headers in patches (#641)43c716cMerge pull request #636 from kpdecker/dependabot/npm_and_yarn/node-forge-1.3.2b8162c7Bump node-forge from 1.3.1 to 1.3.2ad6dc17Fix some bugs in the diffWords regex (and errors & ambiguities in the comment...3e1774aFix a comment typo (#633)Updates
@astrojs/cloudflarefrom 12.6.13 to 13.7.0Release notes
Sourced from @astrojs/cloudflare's releases.
... (truncated)
Changelog
Sourced from @astrojs/cloudflare's changelog.
... (truncated)
Commits
0b879fb[ci] release (#16972)ca26d0e[ci] formatd4b0cd1fix(cloudflare): inject headers for caching the assets folder (#16571)7a5c001fix(cloudflare): defer createApp/setGetEnv in fetch.ts to avoid circular impo...75ae5df[ci] release (#16912)272ca61chore(deps): update pnpm to v11.5.0 (#16903)4bdd240Pre-bundle astro/fetch and astro/hono in Cloudflare optimizeDeps (#16914)17a0fbdchore(deps): update devalue (#16900)9e6edc2fix(docs): replace last occurrences ofwithastro/adapters(#16693)da10b9echore(deps): resolve peer dependency issues (#16894)Updates
astrofrom 5.7.13 to 6.1.10Release notes
Sourced from astro's releases.
Changelog
Sourced from astro's changelog.
... (truncated)
Commits
c1f2e4f[ci] release (#16467)345fb9echore: fix flaky dev toolbar render time test (#16500)5120ecd[ci] format3d82220Add AEAD context binding to server island encryption (#16457)1bcb43bPrebundle dev toolbar entrypoint in client environment (#16480)93101cc[ci] format152700efix: strip sourceMappingURL from dev toolbar entrypoint during dep optimizati...bc83041refactor(astro): migrate test utils to typescript (#16492)5c543c5refactor(astro): add internal entry points for test (#16473)1058428Suppress content config warning for projects without content collections (#16...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.
Updates
sharpfrom 0.32.5 to 0.32.6Changelog
Sourced from sharp's changelog.
Commits
eefaa99Release v0.32.6dbce6faUpgrade to libvips v8.14.5af0fcb3Docs: changelog for #3799c6f54e5Bump devDeps846563eTypeScript: add definitions for block and unblock (#3799)9c217abEnsure withMetadata can add RGB16 profiles #3773e7381e5Alternative fix for 4340d60, uses existing StaySequential4340d60Ensure composite tile images fully decoded #37677f64d46Docs: add missing returns property to raw67e927bDocs: ensure all functions include method signature #3777Updates
esbuildfrom 0.25.12 to 0.28.1Release notes
Sourced from esbuild's releases.
... (truncated)
Changelog
Sourced from esbuild's changelog.
... (truncated)
Commits
bb9db84publish 0.28.1 to npm9ff053esecurity: add integrity checks to the Deno API0a9bf21enforce non-negative size in gzip parsere2a1a71security: forbid\\in local dev server requests83a2cbffix #4482: don't inlineusingdeclarations308ad74fix #4471: renaming of nestedvardeclarationsf013f5ffix some typosaafd6e4chore: fix some minor issues in comments (#4462)15300c3follow up: cjs evaluation fixes1bda0c3fix #4461, fix #4467: esm evaluation fixesMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for esbuild since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.