An open index of dependabot pull requests across open source projects.

build(deps): bump the dependencies group across 1 directory with 16 updates

Open
Number: #79
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: None
Comments: 3
Created: May 29, 2025 at 03:08 PM UTC
(3 months ago)
Updated: June 09, 2025 at 01:46 PM UTC
(3 months ago)
Labels:
dependencies security
Description:

Bumps the dependencies group with 16 updates in the /packages/onegrep-sdk directory:

Package From To
@modelcontextprotocol/sdk 1.11.0 1.12.1
cache-manager 6.4.2 6.4.3
cacheable 1.8.10 1.9.0
eventsource 3.0.5 4.0.0
zod 3.24.2 3.25.36
yaml 2.7.1 2.8.0
@rollup/plugin-commonjs 28.0.2 28.0.3
@rollup/plugin-node-resolve 16.0.0 16.0.1
@types/node 22.13.4 22.15.24
dotenv 16.4.7 16.5.0
eslint 8.57.1 9.27.0
@types/eslint 8.56.12 9.6.1
rollup 4.34.9 4.41.1
rollup-plugin-dts 6.1.1 6.2.1
tsup 8.3.6 8.5.0
vitest 3.0.5 3.1.4

Updates @modelcontextprotocol/sdk from 1.11.0 to 1.12.1

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.12.1

What's Changed

New Contributors

Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.12.0...1.12.1

1.12.0

Authorization spec: DRAFT-2025-v2 🔐 🚀

Other changes

New Contributors

Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.11.4...1.12.0

1.11.5

What's Changed

Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.11.4...1.11.5

1.11.4

What's Changed

Full Changelog: https://github.com/modelcontextprotocol/typescript-sdk/compare/1.11.3...1.11.4

... (truncated)

Commits
  • 590d484 Merge pull request #561 from modelcontextprotocol/ihrpr/1.12.1
  • d46d488 bump version
  • b2b426f Merge pull request #560 from daidi/main
  • cdcb009 fix build and add tests
  • 49777d5 fix: Ensure _meta object is not lost when onprogress option is passed
  • df0d9c4 Merge pull request #538 from danielgek/add-request-init-headers-to-sse-start
  • d5c996b Merge pull request #315 from Skn0tt/patch-1
  • d38a597 Add request init headers defined on the sse transport to the start
  • 0c4b308 Merge pull request #537 from modelcontextprotocol/ihrpr/1.12.0
  • c69168c Merge pull request #534 from modelcontextprotocol/ihrpr/fix-example-shttp
  • Additional commits viewable in compare view

Updates cache-manager from 6.4.2 to 6.4.3

Commits

Updates cacheable from 1.8.10 to 1.9.0

Commits

Updates eventsource from 3.0.5 to 4.0.0

Release notes

Sourced from eventsource's releases.

v4.0.0

4.0.0 (2025-05-13)

⚠ BREAKING CHANGES

  • FetchLikeInit is now removed. Use EventSourceFetchInit.
  • Drop support for Node.js v18, as it is end-of-life.

Features

  • require node.js v20 or higher (91a3a48)

Bug Fixes

  • drop FetchLikeInit type. Use EventSourceFetchInit instead. (6786e46)

This release is also available on:

v3.0.7

3.0.7 (2025-05-09)

Bug Fixes

  • mark fetch init properties required in typings (1282872)

This release is also available on:

v3.0.6

3.0.6 (2025-03-27)

Bug Fixes

  • upgrade parser to latest version, improving performance (59a5ddd)

This release is also available on:

Changelog

Sourced from eventsource's changelog.

4.0.0 (2025-05-13)

⚠ BREAKING CHANGES

  • FetchLikeInit is now removed. Use EventSourceFetchInit.
  • Drop support for Node.js v18, as it is end-of-life.

Features

  • require node.js v20 or higher (91a3a48)

Bug Fixes

  • drop FetchLikeInit type. Use EventSourceFetchInit instead. (6786e46)

3.0.7 (2025-05-09)

Bug Fixes

  • mark fetch init properties required in typings (1282872)

3.0.6 (2025-03-27)

Bug Fixes

  • upgrade parser to latest version, improving performance (59a5ddd)
Commits
  • d4385cb chore(release): 4.0.0 [skip ci]
  • 3057f3a docs: update migration guide
  • 6786e46 fix!: drop FetchLikeInit type. Use EventSourceFetchInit instead.
  • 91a3a48 feat!: require node.js v20 or higher
  • 54fbb3e chore(deps): upgrade dev dependencies to latest versions
  • 270e7f2 chore(release): 3.0.7 [skip ci]
  • 1282872 fix: mark fetch init properties required in typings
  • 20869db chore(release): 3.0.6 [skip ci]
  • 55b870d chore: upgrade deno lockfile
  • fae8c99 test: silence write-after-close errors in bun/deno
  • Additional commits viewable in compare view

Updates zod from 3.24.2 to 3.25.36

Release notes

Sourced from zod's releases.

v3.25.36

Commits:

  • c5d9e7ce3b2190ea8776a75dad35c445b99cf3b1 Allow arbitary strings for JWT alg
  • 99e232927bc40ce278052434170089545288131a 3.25.36

v3.25.35

Commits:

  • 5e31fd09c8131709288d4c980d45a92483a4b6e7 Update readme
  • fe75806cbb64683f237ed0e4ee93b67a2c5e976d Improve discriminated union implementation (#4556)
  • caee693225f51b3b895edc679a186901aefa6683 Tweak readme
  • 02f2389feeba7f3ab6715b11123865be5a508677 Fix lint
  • 056e3f81f5b2829ad9b3d0c47fa20f2af2e05029 Improve homepage
  • 33495d51f2c5ca48311e68fd25db331b81e7cf75 Fix isPlainObject
  • 3a424694a049014e13e735c97babb4bc2cca49d1 Remove defaults from JSON Schema for transforming schemas (#4557)
  • edc347785d87ae24c2c48e4cf3383fc8bb995cba 3.25.35

v3.25.34

Commits:

  • e8a84912926a497e0b95fbc7aef3697314a89ce6 docs: fix mini-v4 docs related to min/max validation (#4547)
  • fdb63da8cea1ecc9b055e18d3c067bcef858ee03 chore: fix typos (#4543)
  • 2437ec0af3e15af293ccfd90c432878cb70dc5c6 fix: basics.mdx typo (#4542)
  • 103f69becde4ae535b0e93449c07d74a24066eac Use output type for preprocess (#4552)
  • 3a8edd7470a550b55aeefa365c6d3ebbd6583910 Revert "Use output type for preprocess (#4552)"
  • 5bdeee4fee037f62f6b5f0d7f8b8f97ea2c17bed Abort further processing when transform is skipped (#4554)
  • 182dc4907b038d188be9d6c0f6d0f3ebce0f3cb8 Abort further processing when transform is skipped (#4555)
  • 7f5a76f0025d00cbfaf51ffc720be5539e0b90ec Use output type for preprocess (#4553)
  • 78f285ba83adab260b8cccc51a7a932c05c10a5d Remove usage of private fields in Zod 3
  • b4b3d6cb0a7dcb1ec980fedeb5bea8177f6e17ed Symlink README
  • 1a977573351797008422ffff7f4c935cd6c71383 3.25.34
  • 6cfead2a7ade64b09ec28921208b971c8dade6c1 Move symlink to outer
  • 151242a42ce4f295a048b6fb047a2ed40bd16488 Update readme

v3.25.33

Commits:

  • 80cfd3a14cb53471783c75f9e4b341ed7e569f0f Improve runtime error for non-schema values in shape
  • 741be37ef5e3c19410741efc50f183ee4d8b34b9 chore: fix comment for packages/docs/content/v4/index.mdx (#4533)
  • 74662e367cfda8267bd4053b7e9b3def5718986f chore: Update README to specify TypeScript syntax highlighting for schema example (#4443)
  • 3c5ffd24887e7ae2ffa9fb9fe12cd661cc40d873 Add Khmer locale support to Zod and update documentation (#4447)
  • 8e827b1517c6ba224bc63fed057d61959b91ddb8 docs: Add conform to the ecosystem page (#4415)
  • 7918973408e85767143a779c26044108f776350f add Swedish locale (#4451)
  • 33d3bb9bd73c7f5ce7336af72a290548ff9a9d59 Fix issue #4454: Updating the contribution.md file (#4455)
  • 4d8cb5d733b957a56546c8d2406cfdbc64aa691c Update bronze.tsx (#4472)
  • bc15379d0c92b9c6df94e4cbf1e5e45674e20b45 Fix typo in changelog (#4496)
  • 010bbe419f99da2da4c8a638d4c6f4b61fb44bcf type in error-customization.mdx (#4514)
  • f3b4630141c2eda74bf8f5852f44a8933fa66027 Add inheritance diagram to docs
  • b97e218c4dd3a0923db0a50f5161f3c89b5c0f8d fix: Add check for requiredKeys before assigning to json.required (#4525)

... (truncated)

Commits

Updates yaml from 2.7.1 to 2.8.0

Release notes

Sourced from yaml's releases.

v2.8.0

  • Add node cache for faster alias resolution (#612)
  • Re-introduce compatibility with Node.js 14.6 (#614)
  • Add --merge option to CLI tool (#611)
  • Improve error for tag resolution error on null value (#616)
  • Allow empty string as plain scalar representation, for failsafe schema (#616)
  • docs: include cli example (#617)
Commits
  • c000eb7 2.8.0
  • 1e85fc8 style: Apply updated lint rules
  • 02f7d5f chore: Refresh lockfile
  • 389ca7c docs: include cli example (#617)
  • 0f29ce6 feat: Add --merge option to CLI tool (#611)
  • e00cab9 fix: Improve error for tag resolution error on null value (#616)
  • 2a841cc fix: Allow empty string as plain scalar representation, for failsafe schema (...
  • 55c5ef4 feat: Add node cache for faster alias resolution (#612)
  • ab17552 Merge pull request #614 from eemeli/engines-compat
  • b27c124 ci: Re-introduce tests for Node.js 14.6 and later
  • Additional commits viewable in compare view

Updates @rollup/plugin-commonjs from 28.0.2 to 28.0.3

Changelog

Sourced from @​rollup/plugin-commonjs's changelog.

v28.0.3

2025-03-06

Bugfixes

  • fix: fix error when bundle contains require() of module with falsy __esModule export (#1850)
Commits
  • 8b5fb98 chore(release): commonjs v28.0.3
  • f873993 fix(commonjs): fix error when bundle contains require() of module with falsy ...
  • See full diff in compare view

Updates @rollup/plugin-node-resolve from 16.0.0 to 16.0.1

Changelog

Sourced from @​rollup/plugin-node-resolve's changelog.

v16.0.1

2025-03-11

Bugfixes

  • fix: add ignoreSideEffectsForRoot to exported interface (#1841)
Commits
  • e1a5ef9 chore(release): node-resolve v16.0.1
  • d455fff fix(node-resolve): add ignoreSideEffectsForRoot to exported interface (#1841)
  • d64f8d6 chore(release): node-resolve v16.0.0
  • ebd0969 feat(node-resolve)!: set development or production condition (#1823)
  • f89ca92 chore(release): node-resolve v15.3.1
  • 4cfc1c3 refactor(pluginutils,node-resolve): replace test with includes (#1787)
  • a8e326d chore(release): node-resolve v15.3.0
  • 032055b feat(node-resolve): allow preferBuiltins to be a function (#1694)
  • 6d4bb6b chore(release): node-resolve v15.2.4
  • 190aa21 chore(node-resolve): remove is-builtin-module (#1735)
  • Additional commits viewable in compare view

Updates @types/node from 22.13.4 to 22.15.24

Commits

Updates dotenv from 16.4.7 to 16.5.0

Changelog

Sourced from dotenv's changelog.

16.5.0 (2025-04-07)

Added

  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP] Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

  • Remove _log method. Use _debug #862
Commits

Updates eslint from 8.57.1 to 9.27.0

Release notes

Sourced from eslint's releases.

v9.27.0

Features

  • d71e37f feat: Allow flags to be set in ESLINT_FLAGS env variable (#19717) (Nicholas C. Zakas)
  • ba456e0 feat: Externalize MCP server (#19699) (Nicholas C. Zakas)
  • 07c1a7e feat: add allowRegexCharacters to no-useless-escape (#19705) (sethamus)
  • 7bc6c71 feat: add no-unassigned-vars rule (#19618) (Jacob Bandes-Storch)
  • ee40364 feat: convert no-array-constructor suggestions to autofixes (#19621) (sethamus)
  • 32957cd feat: support TS syntax in max-params (#19557) (Nitin Kumar)

Bug Fixes

  • 5687ce7 fix: correct mismatched removed rules (#19734) (루밀LuMir)
  • dc5ed33 fix: correct types and tighten type definitions in SourceCode class (#19731) (루밀LuMir)
  • de1b5de fix: correct service property name in Linter.ESLintParseResult type (#19713) (Francesco Trotta)
  • 60c3e2c fix: sort keys in eslint-suppressions.json to avoid git churn (#19711) (Ron Waldon-Howe)
  • 9da90ca fix: add allowReserved to Linter.ParserOptions type (#19710) (Francesco Trotta)
  • fbb8be9 fix: add info to ESLint.DeprecatedRuleUse type (#19701) (Francesco Trotta)

Documentation

  • 25de550 docs: Update description of frozen rules to mention TypeScript (#19736) (Nicholas C. Zakas)
  • bd5def6 docs: Clean up configuration files docs (#19735) (Nicholas C. Zakas)
  • 4d0c60d docs: Add Neovim to editor integrations (#19729) (Maria José Solano)
  • 71317eb docs: Update README (GitHub Actions Bot)
  • 4c289e6 docs: Update README (GitHub Actions Bot)
  • f0f0d46 docs: clarify that unused suppressions cause non-zero exit code (#19698) (Milos Djermanovic)
  • 8ed3273 docs: fix internal usages of ConfigData type (#19688) (Francesco Trotta)
  • eb316a8 docs: add fmt and check sections to Package.json Conventions (#19686) (루밀LuMir)
  • a3a2559 docs: fix wording in Combine Configs (#19685) (Milos Djermanovic)
  • c8d17e1 docs: Update README (GitHub Actions Bot)

Chores

  • f8f1560 chore: upgrade @​eslint/js@​9.27.0 (#19739) (Milos Djermanovic)
  • ecaef73 chore: package.json update for @​eslint/js release (Jenkins)
  • 596fdc6 chore: update dependency @​arethetypeswrong/cli to ^0.18.0 (#19732) (renovate[bot])
  • f791da0 chore: remove unbalanced curly brace from .editorconfig (#19730) (Maria José Solano)
  • e86edee refactor: Consolidate Config helpers (#19675) (Nicholas C. Zakas)
  • cf36352 chore: remove shared types (#19718) (Francesco Trotta)
  • f60f276 refactor: Easier RuleContext creation (#19709) (Nicholas C. Zakas)
  • 58a171e chore: update dependency @​eslint/plugin-kit to ^0.3.1 (#19712) (renovate[bot])
  • 3a075a2 chore: update dependency @​eslint/core to ^0.14.0 (#19715) (renovate[bot])
  • 44bac9d ci: run tests in Node.js 24 (#19702) (Francesco Trotta)
  • 35304dd chore: add missing funding field to packages (#19684) (루밀LuMir)
  • f305beb test: mock process.emitWarning to prevent output disruption (#19687) (Francesco Trotta)

v9.26.0

Features

  • e9754e7 feat: add reportGlobalThis to no-shadow-restricted-names (#19670) (sethamus)
  • 0fa2b7a feat: add suggestions for eqeqeq rule (#19640) (Nitin Kumar)
  • dcbdcc9 feat: Add MCP server (#19592) (Nicholas C. Zakas)
  • 2dfd83e feat: add ignoreDirectives option in no-unused-expressions (#19645) (sethamus)

... (truncated)

Changelog

Sourced from eslint's changelog.

v9.27.0 - May 16, 2025

  • f8f1560 chore: upgrade @​eslint/js@​9.27.0 (#19739) (Milos Djermanovic)
  • ecaef73 chore: package.json update for @​eslint/js release (Jenkins)
  • 25de550 docs: Update description of frozen rules to mention TypeScript (#19736) (Nicholas C. Zakas)
  • bd5def6 docs: Clean up configuration files docs (#19735) (Nicholas C. Zakas)
  • d71e37f feat: Allow flags to be set in ESLINT_FLAGS env variable (#19717) (Nicholas C. Zakas)
  • 5687ce7 fix: correct mismatched removed rules (#19734) (루밀LuMir)
  • 596fdc6 chore: update dependency @​arethetypeswrong/cli to ^0.18.0 (#19732) (renovate[bot])
  • ba456e0 feat: Externalize MCP server (#19699) (Nicholas C. Zakas)
  • dc5ed33 fix: correct types and tighten type definitions in SourceCode class (#19731) (루밀LuMir)
  • 4d0c60d docs: Add Neovim to editor integrations (#19729) (Maria José Solano)
  • f791da0 chore: remove unbalanced curly brace from .editorconfig (#19730) (Maria José Solano)
  • e86edee refactor: Consolidate Config helpers (#19675) (Nicholas C. Zakas)
  • 07c1a7e feat: add allowRegexCharacters to no-useless-escape (#19705) (sethamus)
  • cf36352 chore: remove shared types (#19718) (Francesco Trotta)
  • f60f276 refactor: Easier RuleContext creation (#19709) (Nicholas C. Zakas)
  • 71317eb docs: Update README (GitHub Actions Bot)
  • de1b5de fix: correct service property name in Linter.ESLintParseResult type (#19713) (Francesco Trotta)
  • 58a171e chore: update dependency @​eslint/plugin-kit to ^0.3.1 (#19712) (renovate[bot])
  • 3a075a2 chore: update dependency @​eslint/core to ^0.14.0 (#19715) (renovate[bot])
  • 60c3e2c fix: sort keys in eslint-suppressions.json to avoid git churn (#19711) (Ron Waldon-Howe)
  • 4c289e6 docs: Update README (GitHub Actions Bot)
  • 9da90ca fix: add allowReserved to Linter.ParserOptions type (#19710) (Francesco Trotta)
  • 7bc6c71 feat: add no-unassigned-vars rule (#19618) (Jacob Bandes-Storch)
  • ee40364 feat: convert no-array-constructor suggestions to autofixes (#19621) (sethamus)
  • fbb8be9 fix: add info to ESLint.DeprecatedRuleUse type (#19701) (Francesco Trotta)
  • f0f0d46 docs: clarify that unused suppressions cause non-zero exit code (#19698) (Milos Djermanovic)
  • 44bac9d ci: run tests in Node.js 24 (#19702) (Francesco Trotta)
  • 32957cd feat: support TS syntax in max-params (#19557) (Nitin Kumar)
  • 35304dd chore: add missing funding field to packages (#19684) (루밀LuMir)
  • 8ed3273 docs: fix internal usages of ConfigData type (#19688) (Francesco Trotta)
  • f305beb test: mock process.emitWarning to prevent output disruption (#19687) (Francesco Trotta)
  • eb316a8 docs: add fmt and check sections to Package.json Conventions (#19686) (루밀LuMir)
  • a3a2559 docs: fix wording in Combine Configs (#19685) (Milos Djermanovic)
  • c8d17e1 docs: Update README (GitHub Actions Bot)

v9.26.0 - May 2, 2025

  • 5b247c8 chore: upgrade to @eslint/js@9.26.0 (#19681) (Francesco Trotta)
  • d6fa4ac chore: package.json update for @​eslint/js release (Jenkins)
  • e9754e7 feat: add reportGlobalThis to no-shadow-restricted-names (#19670) (sethamus)
  • 0fa2b7a feat: add suggestions for eqeqeq rule (#19640) (Nitin Kumar)
  • dd98d63 docs: Update README (GitHub Actions Bot)
  • 96e84de fix: check cache file existence before deletion (#19648) (sethamus)
  • c25e858 docs: Update README (GitHub Actions Bot)
  • 0958690 chore: disambiguate internal types LanguageOptions and Rule (#19669) (Francesco Trotta)
  • dcbdcc9 feat: Add MCP server (#19592) (Nicholas C. Zakas)
  • b2397e9 docs: Update README (GitHub Actions Bot)
  • d683aeb fix: don't crash on tests with circular references in RuleTester (#19664) (Milos Djermanovic)

... (truncated)

Commits

Updates @types/eslint from 8.56.12 to 9.6.1

Commits

Updates rollup from 4.34.9 to 4.41.1

Release notes

Sourced from rollup's releases.

v4.41.1

4.41.1

2025-05-24

Bug Fixes

  • If a plugin calls this.resolve with skipSelf: true, subsequent calls when handling this by the same plugin with same parameters will return null to avoid infinite recursions (#5945)

Pull Requests

v4.41.0

4.41.0

2025-05-18

Features

  • Detect named exports in more dynamic import scenarios (#5954)

Pull Requests

v4.40.2

4.40.2

2025-05-06

Bug Fixes

  • Create correct IIFE/AMD/UMD bundles when using a mutable default export (#5934)
  • Fix execution order when using top-level await for dynamic imports with inlineDynamicImports (#5937)
  • Throw when the output is watched in watch mode (#5939)

Pull Requests

  • #5934: fix(exports): avoid "exports is not defined" ReferenceError (@​dasa)

... (truncated)

Changelog

Sourced from rollup's changelogDescription has been truncated

Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Ecosystem:
npm
Version Change:
3.0.5 → 3.1.4
Update Type:
Minor
Package:
zod
Ecosystem:
npm
Version Change:
3.24.2 → 3.25.36
Update Type:
Minor
Package:
eslint
Ecosystem:
npm
Version Change:
8.57.1 → 9.27.0
Update Type:
Major
Package:
@types/node
Ecosystem:
npm
Version Change:
22.13.4 → 22.15.24
Update Type:
Minor
Package:
yaml
Ecosystem:
npm
Version Change:
2.7.1 → 2.8.0
Update Type:
Minor
Package:
eventsource
Ecosystem:
npm
Version Change:
3.0.5 → 4.0.0
Update Type:
Major
Package:
rollup
Ecosystem:
npm
Version Change:
4.34.9 → 4.41.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
28.0.2 → 28.0.3
Update Type:
Patch
Package:
dotenv
Ecosystem:
npm
Version Change:
16.4.7 → 16.5.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
16.0.0 → 16.0.1
Update Type:
Patch
Package:
tsup
Ecosystem:
npm
Version Change:
8.3.6 → 8.5.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
8.56.12 → 9.6.1
Update Type:
Major
Ecosystem:
npm
Version Change:
1.11.0 → 1.12.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
6.4.2 → 6.4.3
Update Type:
Patch
Package:
cacheable
Ecosystem:
npm
Version Change:
1.8.10 → 1.9.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
6.1.1 → 6.2.1
Update Type:
Minor
Technical Details
ID: 815570
UUID: 3100637586
Node ID: PR_kwDON5upic6YI4et
Host: GitHub
Repository: OneGrep/typescript-sdk