Repository navigation
Chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates - #354
Conversation
…dates Bumps the npm_and_yarn group with 3 updates in the / directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [fast-uri](https://github.com/fastify/fast-uri) and [ip-address](https://github.com/beaugunderson/ip-address). Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.32.1 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.32.1) Updates `fast-uri` from 3.1.7 to 3.1.8 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.7...v3.1.8) Updates `ip-address` from 10.7.0 to 10.7.4 - [Release notes](https://github.com/beaugunderson/ip-address/releases) - [Commits](beaugunderson/ip-address@v10.7.0...v10.7.4) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.32.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: fast-uri dependency-version: 3.1.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip-address dependency-version: 10.7.4 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
The npm_and_yarn bump changes package.json and package-lock.json, which the ReplaceRange validation environment pins, so the package-chain job refused the PR before compiling (package.json differs from the validation-environment lock). Same mechanical refresh as #355: the toolchain lock's package and lockfile hashes, the build lock's toolchainLockSha256, the three affected source-closure entries, and the closure digest, recomputed with the input list and algorithm in tests/assert-build-output.mjs. The same computation reproduces main's committed closure digest exactly. No source, compiler, runtime, or executable-subject identity changes; CI's package chain rebuilds through the public compiler and verifies every lock.
Triage (jim-1c)Open Dependabot alerts on
The PR failed only in the ReplaceRange package chain ( |
Bumps the npm_and_yarn group with 3 updates in the / directory: @modelcontextprotocol/sdk, fast-uri and ip-address.
Updates
@modelcontextprotocol/sdkfrom 1.29.0 to 1.32.1Release notes
Sourced from @modelcontextprotocol/sdk's releases.
... (truncated)
Commits
ff07b00chore: bump version to 1.32.1 (#2954)8a74d50[v1.x] docs: point the README at v2 and say what v1.x supports (#2942)a8cf503[v1.x] docs: state the principles in CLAUDE.md (#2939)32549b0chore: bump version to 1.32.0 (#2935)588d51d[v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)5a0724d[v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)0ca0b62[v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...fd26801[v1.x] feat(server): add maxToolInputElements option to limit the number of e...727075b[v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...0ff6377[v1.x] examples: close idle sessions and cap the session map (#2914)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
fast-urifrom 3.1.7 to 3.1.8Release notes
Sourced from fast-uri's releases.
Commits
ead3ab7Bumped v3.1.8c88b59efix: normalize decoded reg-name caseUpdates
ip-addressfrom 10.7.0 to 10.7.4Release notes
Sourced from ip-address's releases.
Commits
651c1dd10.7.4ec80fcdFind an IPv6 zone by index so a rejected zone costs one passe22eb4aCheck generated docs without writing or hiding partial stagingc7f838e10.7.309b8072Reject an in-addr.arpa name longer than 32 characters before splitting it (#228)974b48d10.7.24dfe8e5Accept an arpa suffix in any case and without the root dot in fromArpa (#227)f0c25df10.7.18b34a21Merge commit from fork13b6155Merge commit from forkDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.