Skip to content

build(deps): Bump the minor-and-patch group across 1 directory with 12 updates - #517

Closed
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/development/minor-and-patch-2907f50e73
Closed

build(deps): Bump the minor-and-patch group across 1 directory with 12 updates#517
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/development/minor-and-patch-2907f50e73

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 12 updates in the / directory:

Package From To
@anthropic-ai/sdk 0.82.0 0.131.0
@modelcontextprotocol/sdk 1.29.0 1.32.1
node-cron 4.2.1 4.6.0
pino 10.3.1 10.4.0
pizzip 3.2.0 3.3.0
undici 7.24.5 7.30.0
zod 4.3.6 4.6.5
@typescript-eslint/eslint-plugin 8.58.0 8.71.1
@typescript-eslint/parser 8.58.0 8.71.1
eslint 10.2.0 10.12.0
prettier 3.8.1 3.9.9
mammoth 1.12.0 1.13.0

Updates @anthropic-ai/sdk from 0.82.0 to 0.131.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.131.0

0.131.0 (2026-09-30)

Full Changelog: sdk-v0.130.0...sdk-v0.131.0

Features

  • api: add list spend limits endpoint (cfb78c8)

Chores

  • client: deprecate sonnet 4.5 (d72cfaf)

sdk: v0.130.0

0.130.0 (2026-09-30)

Full Changelog: sdk-v0.129.0...sdk-v0.130.0

Features

  • api: add a refusal stop reason and stop_details to Managed Agents session idle events (5cd6910)
  • api: add Claude Enterprise analytics, spend limits, and RBAC groups and roles to the Admin API (109c766)
  • api: add per-user usage and cost reports to the Admin API analytics (0a74a28)
  • api: add Plugins and Plugin Marketplaces to the Admin API (40c2160)
  • api: add repository error types to Managed Agents session errors (6735615)
  • api: allow removing a plugin's org-wide installation setting (c7d120f)
  • api: MCP tunnels beta: add read-only transport object to Tunnel and return the one-time relay token in the create response (b0e57ce)
  • api: Organization API endpoints are now GA (1a1fd8f)

Bug Fixes

  • api: make memory store description, metadata, archived_at required (ed68900)
  • api: type admin plugin preference and marketplace fields as enums (942ae01)
  • pagination: auto-paging continues past an empty page while next_page is set (2d75266)
  • tool-runner: only send API fields for runnable tools (#404) (a62c2a2)
  • tools: stop the session tool runner after any idle that ends the turn (#878) (cab32f8)

Chores

  • api: update MCP Tunnels types and descriptions (394d60c)
  • docs: remove placeholder enum descriptions (04f0812)
  • tests: fixture update (#381) (9cfe4d4)

sdk: v0.129.0

0.129.0 (2026-09-28)

Full Changelog: sdk-v0.128.0...sdk-v0.129.0

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.131.0 (2026-09-30)

Full Changelog: sdk-v0.130.0...sdk-v0.131.0

Features

  • api: add list spend limits endpoint (cfb78c8)

Chores

  • client: deprecate sonnet 4.5 (d72cfaf)

0.130.0 (2026-09-30)

Full Changelog: sdk-v0.129.0...sdk-v0.130.0

Features

  • api: add a refusal stop reason and stop_details to Managed Agents session idle events (5cd6910)
  • api: add Claude Enterprise analytics, spend limits, and RBAC groups and roles to the Admin API (109c766)
  • api: add per-user usage and cost reports to the Admin API analytics (0a74a28)
  • api: add Plugins and Plugin Marketplaces to the Admin API (40c2160)
  • api: add repository error types to Managed Agents session errors (6735615)
  • api: allow removing a plugin's org-wide installation setting (c7d120f)
  • api: MCP tunnels beta: add read-only transport object to Tunnel and return the one-time relay token in the create response (b0e57ce)
  • api: Organization API endpoints are now GA (1a1fd8f)

Bug Fixes

  • api: make memory store description, metadata, archived_at required (ed68900)
  • api: type admin plugin preference and marketplace fields as enums (942ae01)
  • pagination: auto-paging continues past an empty page while next_page is set (2d75266)
  • tool-runner: only send API fields for runnable tools (#404) (a62c2a2)
  • tools: stop the session tool runner after any idle that ends the turn (#878) (cab32f8)

Chores

  • api: update MCP Tunnels types and descriptions (394d60c)
  • docs: remove placeholder enum descriptions (04f0812)
  • tests: fixture update (#381) (9cfe4d4)

0.129.0 (2026-09-28)

Full Changelog: sdk-v0.128.0...sdk-v0.129.0

Features

... (truncated)

Commits
  • d49bdab Merge pull request #1230 from anthropics/release-please--branches--main--chan...
  • 4759f20 chore: release main
  • 9ded9f3 codegen metadata
  • d72cfaf chore(client): deprecate sonnet 4.5
  • cfb78c8 feat(api): add list spend limits endpoint
  • e8f4c28 Merge branch 'main' into next
  • e6ca605 Merge pull request #1229 from anthropics/release-please--branches--main--chan...
  • 2dd6192 chore: release main
  • cab32f8 fix(tools): stop the session tool runner after any idle that ends the turn (#...
  • 0a74a28 feat(api): add per-user usage and cost reports to the Admin API analytics
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/sdk since your current version.


Updates @modelcontextprotocol/sdk from 1.29.0 to 1.32.1

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1

1.32.0

Upgrade notes

  • Redirects: the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets redirectPolicy: 'follow' on StreamableHTTPClientTransport or SSEClientTransport. In browsers, a redirected request fails unless that option is set.
  • New options, both off unless you set them: maxToolInputElements on McpServer limits the number of array elements and object members in a tool call's arguments. expectedResource on requireBearerAuth accepts only tokens issued for this server (the token's audience).

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0

1.31.0

Upgrade notes

  • Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.
  • Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.1...1.31.0

1.30.1

What's Changed

New Contributors

... (truncated)

Commits
  • ff07b00 chore: bump version to 1.32.1 (#2954)
  • 8a74d50 [v1.x] docs: point the README at v2 and say what v1.x supports (#2942)
  • a8cf503 [v1.x] docs: state the principles in CLAUDE.md (#2939)
  • 32549b0 chore: bump version to 1.32.0 (#2935)
  • 588d51d [v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)
  • 5a0724d [v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)
  • 0ca0b62 [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...
  • fd26801 [v1.x] feat(server): add maxToolInputElements option to limit the number of e...
  • 727075b [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...
  • 0ff6377 [v1.x] examples: close idle sessions and cap the session map (#2914)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates node-cron from 4.2.1 to 4.6.0

Release notes

Sourced from node-cron's releases.

v4.6.0

4.6.0 (2026-07-04)

Added

  • add cron.shutdown(timeout?) for graceful process teardown (#589) (35f1a61)
  • add unref option for heartbeat timers (#588) (35cb140)
  • day-of-month: Quartz-style W, L-n and ? modifiers (#570) (cbe379b)
  • emit task:failed when a background daemon exits unexpectedly (7bd91d6)
  • support cron expression nicknames (@​yearly, @​daily, etc.) (#579) (6a6e14e)

Fixed

  • background task state transition on stop/destroy without fork (#584) (9dbc6de)
  • clear jitter timeout on runner stop (#583) (28b8146)
  • CommonJS type resolution (#608) (ee9d294)
  • correct falied->failed typo in daemon task error log (#594) (66c6961)
  • correct shutdown listener typing that broke the build (#595) (7aac3ad)
  • correlate execute() by id, isolate event hooks, and stop counting manual runs toward maxExecutions (#607) (0f039a9)
  • daemon serialized task state with wrong field name (#587) (688d465)
  • expand inverted ranges with wrap-around instead of silently swapping (#602) (a10ae53)
  • harden cron.shutdown() teardown (#598) (a0b0d1f)
  • kill orphan child process on background task stop/destroy timeout (#582) (8179e10)
  • make concurrent background start() await the daemon and time out coordinator lookups (#605) (446f03a)
  • make lifecycle calls on a destroyed task safe no-ops (#600) (7fa9795)
  • prevent double destroy on registry remove (#585) (8ae9f06)
  • release-please: match existing v-prefixed tags (#575) (e43c152)
  • runner promise bugs that could hang scheduling or crash process (#581) (0ae62be)
  • unref the IPC channel so background tasks let the process exit (#599) (534e593)
  • validate the cron expression when scheduling a task (#603) (196e6cd)
  • validate() consistency and multi-asterisk expansion (#606) (8cf41c4)
  • weekday 7-to-0 conversion corrupting ranges (#580) (c8a3943)

Changed

  • replace chai and sinon with native vitest assertions (#590) (d29d07a)

v4.5.0

Added

  • lastRun() introspection getter on ScheduledTask: returns { date, result } after a successful execution, { date, error } after a failed one, or null before the first run.
  • Extended day-of-week tokens: <weekday>#<nth> (nth weekday of the month, e.g. 1#1 for the first Monday) and <weekday>L (last weekday of the month, e.g. 5L for the last Friday).

Performance

  • Cache Intl.DateTimeFormat instances per timezone instead of rebuilding on every call.
  • Parse the cron expression once per TimeMatcher instead of re-parsing in MatcherWalker.
  • Compute the GMT offset lazily (only when formatting ISO strings, not during the next-run search).
  • Replace crypto.randomBytes with crypto.randomUUID for internal ID generation.

... (truncated)

Changelog

Sourced from node-cron's changelog.

4.6.0 (2026-07-04)

Added

  • add cron.shutdown(timeout?) for graceful process teardown (#589) (35f1a61)
  • add unref option for heartbeat timers (#588) (35cb140)
  • day-of-month: Quartz-style W, L-n and ? modifiers (#570) (cbe379b)
  • emit task:failed when a background daemon exits unexpectedly (7bd91d6)
  • support cron expression nicknames (@​yearly, @​daily, etc.) (#579) (6a6e14e)

Fixed

  • background task state transition on stop/destroy without fork (#584) (9dbc6de)
  • clear jitter timeout on runner stop (#583) (28b8146)
  • CommonJS type resolution (#608) (ee9d294)
  • correct falied->failed typo in daemon task error log (#594) (66c6961)
  • correct shutdown listener typing that broke the build (#595) (7aac3ad)
  • correlate execute() by id, isolate event hooks, and stop counting manual runs toward maxExecutions (#607) (0f039a9)
  • daemon serialized task state with wrong field name (#587) (688d465)
  • expand inverted ranges with wrap-around instead of silently swapping (#602) (a10ae53)
  • harden cron.shutdown() teardown (#598) (a0b0d1f)
  • kill orphan child process on background task stop/destroy timeout (#582) (8179e10)
  • make concurrent background start() await the daemon and time out coordinator lookups (#605) (446f03a)
  • make lifecycle calls on a destroyed task safe no-ops (#600) (7fa9795)
  • prevent double destroy on registry remove (#585) (8ae9f06)
  • release-please: match existing v-prefixed tags (#575) (e43c152)
  • runner promise bugs that could hang scheduling or crash process (#581) (0ae62be)
  • unref the IPC channel so background tasks let the process exit (#599) (534e593)
  • validate the cron expression when scheduling a task (#603) (196e6cd)
  • validate() consistency and multi-asterisk expansion (#606) (8cf41c4)
  • weekday 7-to-0 conversion corrupting ranges (#580) (c8a3943)

Changed

  • replace chai and sinon with native vitest assertions (#590) (d29d07a)

[4.5.0] - 2026-06-21

Added

  • lastRun() introspection getter on ScheduledTask: returns { date, result } after a successful execution, { date, error } after a failed one, or null before the first run. (#557)
  • Extended day-of-week tokens: <weekday>#<nth> (nth weekday of the month, e.g. 1#1 for the first Monday) and <weekday>L (last weekday of the month, e.g. 5L for the last Friday). (#560)

Performance

... (truncated)

Commits
  • 0be2ca0 chore(main): release 4.6.0 (#576)
  • 813ab08 docs: note bundlers must keep node-cron external for background tasks (#610)
  • ee9d294 fix: CommonJS type resolution (#608)
  • 0f039a9 fix: correlate execute() by id, isolate event hooks, and stop counting manual...
  • 8cf41c4 fix: validate() consistency and multi-asterisk expansion (#606)
  • 446f03a fix: make concurrent background start() await the daemon and time out coordin...
  • 88647a6 docs: note DST fall-back behavior for sub-hourly schedules and the UTC workar...
  • 196e6cd fix: validate the cron expression when scheduling a task (#603)
  • 7bd91d6 feat: emit task:failed when a background daemon exits unexpectedly (#601)
  • a10ae53 fix: expand inverted ranges with wrap-around instead of silently swapping (#602)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for node-cron since your current version.


Updates pino from 10.3.1 to 10.4.0

Release notes

Sourced from pino's releases.

v10.4.0

What's Changed

... (truncated)

Commits
  • b29dbe9 Bumped v10.4.0
  • 6ba157b docs: fix the pino-pretty flush explanation after thread-stream#198 (#2524)
  • 6429c14 docs: Note that serializers run on child bindings at creation time (#2518)
  • 6c71bc9 Add bindings method to browser logger (#2504)
  • b557f72 ci: pin lock-threads to upstream v6.0.2 to fix token validation failure (#2525)
  • 1de1212 docs: document the APIs that are unavailable in the browser (#2521)
  • af2fe10 Delete .github/dependabot.yml (#2517)
  • 5aa6230 build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 (#2515)
  • 6f5af07 build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 (#2513)
  • 2ffe576 ci: check pull requests target main (#2500)
  • Additional commits viewable in compare view

Updates pizzip from 3.2.0 to 3.3.0

Changelog

Sourced from pizzip's changelog.

v3.3.0

  • Add generateNodeStream() for streaming ZIP generation in Node.js, with backpressure support, STORE and DEFLATE compression, and fileOrder.
  • Add loadFile() to load ZIP archives directly from disk, including support for filesystem-backed storage via storage: { type: "filesystem" }.
  • Process filesystem-backed entry data incrementally during loading, compression, checksum validation, and streaming generation.
  • Add a chunkSize option, defaulting to 1 MiB, to control the amount of file data buffered at a time. chunkSize is not a global or total memory limit.
  • Add dispose() to release open file readers and temporary filesystem storage.
  • Add TypeScript declarations and documentation for the new APIs.
  • generateNodeStream(), loadFile(), and filesystem-backed storage are Node.js-only. The browser build (dist/pizzip.js) continues to use the in-memory load() and generate() APIs.

Streaming generation supports classic ZIP archives and rejects sizes, offsets, and entry counts that require ZIP64. Synchronous generate() and extraction helpers still return complete in-memory results.

Commits
  • 69ae14c 3.3.0
  • 0d61943 Add chunked ZIP loading and streaming generation
  • 564bbe9 Update eslint dependencies
  • cfd1dcd Merge pull request #70 from open-xml-templating/dependabot/npm_and_yarn/babel...
  • ce87c93 Merge pull request #69 from open-xml-templating/dependabot/npm_and_yarn/js-ya...
  • e4cf431 Bump @​babel/core from 7.27.1 to 7.29.6
  • 06a2312 Bump js-yaml from 4.1.1 to 4.2.0
  • ae00bee Merge pull request #68 from open-xml-templating/dependabot/npm_and_yarn/hono-...
  • a8b1c6e Bump hono from 4.12.23 to 4.12.26
  • ea1b41b Merge pull request #67 from open-xml-templating/dependabot/npm_and_yarn/hono-...
  • Additional commits viewable in compare view

Updates undici from 7.24.5 to 7.30.0

Release notes

Sourced from undici's releases.

v7.30.0

What's Changed

Full Changelog: nodejs/undici@v7.29.1...v7.30.0

v7.29.1

⚠️ Security fixes

High severity

  • GHSA-w293-vg96-wgc3: BalancedPool could drop function-valued connection options while cloning its configuration, including custom TLS certificate validation callbacks. Undici now preserves connect and legacy tls options when creating upstreams. Fixed by f690157d.
  • GHSA-rfgv-xxqx-mfg5: a WebSocket server could select a subprotocol when none was requested, causing an uncaught TypeError that could terminate the process. Undici now rejects the handshake with protocol error 1002. Fixed by 6615e017.

Medium severity

  • GHSA-3wwx-pv8p-q78v: a malformed permessage-deflate payload exceeding the configured decompression limit could emit an unhandled zlib error and terminate the process. Undici now destroys the inflater after reaching the limit. Fixed by 63cf698b.
  • GHSA-rx4f-c7p8-82vq: an unclean WebSocketStream close could create an unobserved rejected promise when its writable stream was locked, potentially terminating the process. Undici now propagates the failure through the retained writable stream controller. Fixed by 1858656e.
  • GHSA-2jfj-6hjv-fm6j: shared caches could store and replay responses containing Set-Cookie, disclosing one user's cookies to another caller. Undici now excludes these responses from shared caches, including existing entries and revalidation paths. Fixed by b6c5a002.
  • GHSA-3xpg-4rpp-hhhm: the decompression interceptor did not bound decoded output, allowing compressed responses to consume excessive memory. Undici now limits every decompression stage to 64 MiB by default and supports a configurable maxSize. Fixed by 2c7d7e12.

@dependabot
build(deps): Bump the minor-and-patch group across 1 directory with 1…
d40350d 
…2 updates

Bumps the minor-and-patch group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.82.0` | `0.131.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.32.1` |
| [node-cron](https://github.com/node-cron/node-cron) | `4.2.1` | `4.6.0` |
| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |
| [pizzip](https://github.com/open-xml-templating/pizzip) | `3.2.0` | `3.3.0` |
| [undici](https://github.com/nodejs/undici) | `7.24.5` | `7.30.0` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.6.5` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.58.0` | `8.71.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.58.0` | `8.71.1` |
| [eslint](https://github.com/eslint/eslint) | `10.2.0` | `10.12.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.9.9` |
| [mammoth](https://github.com/mwilliamson/mammoth.js) | `1.12.0` | `1.13.0` |



Updates `@anthropic-ai/sdk` from 0.82.0 to 0.131.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.131.0)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.32.1
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.32.1)

Updates `node-cron` from 4.2.1 to 4.6.0
- [Release notes](https://github.com/node-cron/node-cron/releases)
- [Changelog](https://github.com/node-cron/node-cron/blob/main/CHANGELOG.md)
- [Commits](node-cron/node-cron@v4.2.1...v4.6.0)

Updates `pino` from 10.3.1 to 10.4.0
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v10.3.1...v10.4.0)

Updates `pizzip` from 3.2.0 to 3.3.0
- [Changelog](https://github.com/open-xml-templating/pizzip/blob/master/CHANGES.md)
- [Commits](open-xml-templating/pizzip@v3.2.0...v3.3.0)

Updates `undici` from 7.24.5 to 7.30.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.24.5...v7.30.0)

Updates `zod` from 4.3.6 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.6.5)

Updates `@typescript-eslint/eslint-plugin` from 8.58.0 to 8.71.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.58.0 to 8.71.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/parser)

Updates `eslint` from 10.2.0 to 10.12.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.2.0...v10.12.0)

Updates `prettier` from 3.8.1 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.9.9)

Updates `mammoth` from 1.12.0 to 1.13.0
- [Release notes](https://github.com/mwilliamson/mammoth.js/releases)
- [Changelog](https://github.com/mwilliamson/mammoth.js/blob/master/NEWS)
- [Commits](mwilliamson/mammoth.js@1.12.0...1.13.0)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.131.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: node-cron
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pino
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pizzip
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: undici
  dependency-version: 7.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.71.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.71.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint
  dependency-version: 10.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mammoth
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 8, 2026
@vercel

vercel Bot commented Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
libscope Ignored Ignored Oct 8, 2026 7:07pm UTC

@sonarqubecloud

sonarqubecloud Bot commented Oct 8, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@RobertLD RobertLD mentioned this pull request Oct 8, 2026
Merged
@RobertLD

RobertLD commented Oct 8, 2026

Copy link
Copy Markdown
Owner

Superseded: all updates except @anthropic-ai/sdk are on main via #516, and @anthropic-ai/sdk 0.131 is in #519. This PR targeted the unused development branch; Dependabot now targets main (#519).

@RobertLD RobertLD closed this Oct 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/development/minor-and-patch-2907f50e73 branch October 8, 2026 19:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@RobertLD