Skip to content

chore(deps): Bump the minor-and-patch group with 8 updates - #114

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-d414c2ccd7
Open

chore(deps): Bump the minor-and-patch group with 8 updates#114
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-d414c2ccd7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026

Copy link
Copy Markdown

Bumps the minor-and-patch group with 8 updates:

Package From To
@modelcontextprotocol/sdk 1.30.1 1.32.1
@slack/web-api 8.1.1 8.2.0
@types/node 26.2.0 26.6.4
sharp 0.35.4 0.35.5
vitest 4.1.10 4.1.11
@anthropic-ai/sdk 0.128.0 0.132.1
@anthropic-ai/vertex-sdk 0.19.11 0.20.4
google-auth-library 11.1.0 11.2.0

Updates @modelcontextprotocol/sdk from 1.30.1 to 1.32.1

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1

1.32.0

Upgrade notes

  • Redirects: the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets redirectPolicy: 'follow' on StreamableHTTPClientTransport or SSEClientTransport. In browsers, a redirected request fails unless that option is set.
  • New options, both off unless you set them: maxToolInputElements on McpServer limits the number of array elements and object members in a tool call's arguments. expectedResource on requireBearerAuth accepts only tokens issued for this server (the token's audience).

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0

1.31.0

Upgrade notes

  • Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.
  • Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.1...1.31.0

Commits
  • ff07b00 chore: bump version to 1.32.1 (#2954)
  • 8a74d50 [v1.x] docs: point the README at v2 and say what v1.x supports (#2942)
  • a8cf503 [v1.x] docs: state the principles in CLAUDE.md (#2939)
  • 32549b0 chore: bump version to 1.32.0 (#2935)
  • 588d51d [v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)
  • 5a0724d [v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)
  • 0ca0b62 [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...
  • fd26801 [v1.x] feat(server): add maxToolInputElements option to limit the number of e...
  • 727075b [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...
  • 0ff6377 [v1.x] examples: close idle sessions and cap the session map (#2914)
  • Additional commits viewable in compare view

Updates @slack/web-api from 8.1.1 to 8.2.0

Release notes

Sourced from @​slack/web-api's releases.

@​slack/web-api@​8.2.0

Minor Changes

Patch Changes

  • Updated dependencies [ca6f416]
  • Updated dependencies [abf184e]
  • Updated dependencies [d420d00]
  • Updated dependencies [52eeb05]
    • @​slack/types@​3.2.0
Commits
  • a98047a chore: release (#2726)
  • c523063 feat(web-api): add agents.conversations.* methods (#2748)
  • e22facd fix(socket-mode): route ping/pong diagnostics by identity, not instanceof (#2...
  • 4dfe5eb chore(deps-dev): bump @​biomejs/biome from 2.5.13 to 2.5.14 (#2750)
  • 6d9bad8 chore(deps-dev): bump typedoc-plugin-markdown from 4.13.0 to 4.13.1 (#2749)
  • 334e6a6 feat(socket-mode): support undici v8 as a peer dependency (#2694)
  • 7d415e4 chore(deps-dev): bump @​changesets/cli from 3.0.2 to 3.0.3 (#2746)
  • 600fca5 chore(deps-dev): bump @​biomejs/biome from 2.5.12 to 2.5.13 (#2745)
  • f4c3e7e chore(deps-dev): bump tsx from 4.23.12 to 4.23.13 (#2741)
  • d420d00 feat(types): allow raw_number cells in TableBlock rows (#2737)
  • Additional commits viewable in compare view

Updates @types/node from 26.2.0 to 26.6.4

Commits

Updates sharp from 0.35.4 to 0.35.5

Release notes

Sourced from sharp's releases.

v0.35.5

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4

  • Add upper bounds check on length of linear and GIF delay arrays.

  • Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

  • TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

  • TypeScript: Remove non-existent named export. #4604

  • Increase accepted dimensions when extending an image. #4605

  • Improve gain map support for extract and rotate operations. #4606

  • Tests: Ensure composite tests pass on big endian platforms. #4609

v0.35.5-rc.1

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1

  • Add upper bounds check on length of linear and GIF delay arrays.

  • Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

  • TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

  • TypeScript: Remove non-existent named export. #4604

  • Increase accepted dimensions when extending an image. #4605

  • Improve gain map support for extract operation. #4606

... (truncated)

Commits
  • 51a990f Release v0.35.5
  • 96de105 Upgrade to sharp-libvips v1.3.4
  • 3a61390 CI: Configure Dependabot with all package.json locations
  • 4940c50 Improve gain map support for rotate/flip/flop ops
  • 20654aa Prerelease v0.35.5-rc.1
  • ef4f934 CI: Upgrade to Ubuntu 26.04
  • 358df95 Upgrade to libvips v8.18.7
  • 49f4903 Improve gain map support for rotate-then-extract #4606
  • 0e2e55e Silence a couple of compiler/static analysis warnings
  • cef3b8c Improve gain map support for extract operation #4606
  • Additional commits viewable in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 9bd8d46 chore: release v4.1.11 (#10995)
  • 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
  • See full diff in compare view

Updates @anthropic-ai/sdk from 0.128.0 to 0.132.1

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk-v0.132.1

Bug Fixes

  • client: throw before sending a request with an empty path parameter

Chores

  • ci: check that pull requests update the changelog
  • ci: publish every package from the publish workflow
  • docs: note that listing Claude Console spend limits is in early access

Documentation

  • split CLAUDE.md into shared, TypeScript, and repository rules

sdk: v0.132.0

0.132.0 (2026-10-07)

Full Changelog: sdk-v0.131.0...sdk-v0.132.0

Features

  • api: add claude-haiku-5-5 and typed computer and browser toolset tool calls (1fd8261)
  • api: add disabled to thinking types in model capabilities (2b75b49)
  • api: add display_name to RBAC roles and deprecate name (7735ac3)
  • api: add include_default parameter to list workspaces (c4019df)
  • api: add lifecycle stage fields and filter to /v1/models (fe8a762)
  • api: add line to model objects (018aed4)
  • api: add url_sources to the Managed Agents web_fetch tool config (2b75b49)
  • api: add web search and code execution support to model capabilities (2b75b49)

Bug Fixes

  • api: send the beta header by default when listing spend limits (8f58ca4)
  • client: throw when a JSONL stream is iterated twice (a34266c)
  • tools: keep a local edit made after a memory upload whose response was lost (#893) (2b75b49)

Chores

  • api: mark the Text Completions API as deprecated (2b75b49)
  • docs: correct example groups in rate limit list description (f0e6394)
  • docs: correct when usage and cost report data becomes final (2b75b49)
  • docs: describe a federation rule's target by its type (2b75b49)
  • docs: fix example IDs in sessions, agents and vault credentials (2b75b49)
  • docs: update Managed Agents multiagent and thread descriptions (2b75b49)
  • docs: update the activity summaries endpoint description (24f13f2)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.132.1 (2026-10-08)

Bug Fixes

  • client: throw before sending a request with an empty path parameter

Chores

  • ci: check that pull requests update the changelog
  • ci: publish every package from the publish workflow
  • docs: note that listing Claude Console spend limits is in early access

Documentation

  • split CLAUDE.md into shared, TypeScript, and repository rules

0.132.0 (2026-10-07)

Full Changelog: sdk-v0.131.0...sdk-v0.132.0

Features

  • api: add claude-haiku-5-5 and typed computer and browser toolset tool calls (1fd8261)
  • api: add disabled to thinking types in model capabilities (2b75b49)
  • api: add display_name to RBAC roles and deprecate name (7735ac3)
  • api: add include_default parameter to list workspaces (c4019df)
  • api: add lifecycle stage fields and filter to /v1/models (fe8a762)
  • api: add line to model objects (018aed4)
  • api: add url_sources to the Managed Agents web_fetch tool config (2b75b49)
  • api: add web search and code execution support to model capabilities (2b75b49)

Bug Fixes

  • api: send the beta header by default when listing spend limits (8f58ca4)
  • client: throw when a JSONL stream is iterated twice (a34266c)
  • tools: keep a local edit made after a memory upload whose response was lost (#893) (2b75b49)

Chores

  • api: mark the Text Completions API as deprecated (2b75b49)
  • docs: correct example groups in rate limit list description (f0e6394)
  • docs: correct when usage and cost report data becomes final (2b75b49)
  • docs: describe a federation rule's target by its type (2b75b49)
  • docs: fix example IDs in sessions, agents and vault credentials (2b75b49)
  • docs: update Managed Agents multiagent and thread descriptions (2b75b49)
  • docs: update the activity summaries endpoint description (24f13f2)

... (truncated)

Commits
  • 0f9fdca release: . 0.132.1, packages/aws-sdk 0.7.9, packages/bedrock-sdk 0.34.4, pack...
  • 484f92a Merge pull request #906 from anthropics/synced/published
  • da86334 chore(internal): update changelog (#907)
  • 1089832 chore(ci): check that pull requests update the changelog
  • d510609 fix(client): throw before sending a request with an empty path parameter
  • 9296068 docs: split CLAUDE.md into shared, TypeScript, and repository rules
  • c0f92c3 chore(ci): publish every package from the publish workflow
  • da181fd Merge branch 'main' into next
  • 1de9b82 chore(docs): note that listing Claude Console spend limits is in early access
  • 447e4fd Merge pull request #1257 from anthropics/release-please--branches--main--chan...
  • Additional commits viewable in compare view

Updates @anthropic-ai/vertex-sdk from 0.19.11 to 0.20.4

Release notes

Sourced from @​anthropic-ai/vertex-sdk's releases.

vertex-sdk-v0.20.4

Chores

  • ci: check that pull requests update the changelog

vertex-sdk: v0.20.3

0.20.3 (2026-10-07)

Full Changelog: vertex-sdk-v0.20.2...vertex-sdk-v0.20.3

vertex-sdk: v0.20.2

0.20.2 (2026-09-30)

Full Changelog: vertex-sdk-v0.20.1...vertex-sdk-v0.20.2

Chores

  • client: deprecate sonnet 4.5 (d72cfaf)

vertex-sdk: v0.20.1

0.20.1 (2026-09-30)

Full Changelog: vertex-sdk-v0.20.0...vertex-sdk-v0.20.1

vertex-sdk: v0.20.0

0.20.0 (2026-09-28)

Full Changelog: vertex-sdk-v0.19.11...vertex-sdk-v0.20.0

Features

  • api: add claude-sonnet-5-5 (4e77366)
Changelog

Sourced from @​anthropic-ai/vertex-sdk's changelog.

0.20.4 (2024-04-11)

Full Changelog: sdk-v0.20.3...sdk-v0.20.4

Chores

0.20.3 (2024-04-10)

Full Changelog: sdk-v0.20.2...sdk-v0.20.3

Bug Fixes

  • vertex: correct core client dependency constraint (#384) (de29699)

0.20.2 (2024-04-09)

Full Changelog: sdk-v0.20.1...sdk-v0.20.2

Chores

0.20.1 (2024-04-04)

Full Changelog: sdk-v0.20.0...sdk-v0.20.1

Documentation

0.20.0 (2024-04-04)

Full Changelog: sdk-v0.19.2...sdk-v0.20.0

Features

Bug Fixes

  • types: correctly mark type as a required property in requests (#371) (a04edd8)

Chores

  • types: consistent naming for text block types (#373) (84a6a58)

... (truncated)

Commits

Updates google-auth-library from 11.1.0 to 11.2.0

Changelog

Sourced from google-auth-library's changelog.

11.2.0 (2026-10-07)

Features

  • tools: Add individual CLI flags for Bun monkey patches (#9533) (a5eec89)
Commits
  • d07cb88 chore: release main (#9547)
  • a5eec89 feat(tools): add individual CLI flags for Bun monkey patches (#9533)
  • 4fd60d3 ci: run all unit tests including handwritten libraries in bun runtime with --...
  • 6375767 chore(packages): migrate generated packages to runtime-agnostic test runner (...
  • fff47fb feat(tools): add runtime-agnostic test runner and Bun mocha hooks
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the minor-and-patch group with 8 updates
33fb846 
Bumps the minor-and-patch group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.1` | `1.32.1` |
| [@slack/web-api](https://github.com/slackapi/node-slack-sdk) | `8.1.1` | `8.2.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.4` |
| [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.128.0` | `0.132.1` |
| [@anthropic-ai/vertex-sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.19.11` | `0.20.4` |
| [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `11.1.0` | `11.2.0` |


Updates `@modelcontextprotocol/sdk` from 1.30.1 to 1.32.1
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.30.1...1.32.1)

Updates `@slack/web-api` from 8.1.1 to 8.2.0
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@8.1.1...@slack/web-api@8.2.0)

Updates `@types/node` from 26.2.0 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `sharp` from 0.35.4 to 0.35.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.4...v0.35.5)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

Updates `@anthropic-ai/sdk` from 0.128.0 to 0.132.1
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.128.0...sdk-v0.132.1)

Updates `@anthropic-ai/vertex-sdk` from 0.19.11 to 0.20.4
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@vertex-sdk-v0.19.11...sdk-v0.20.4)

Updates `google-auth-library` from 11.1.0 to 11.2.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v11.2.0/core/packages/google-auth-library-nodejs)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@slack/web-api"
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sharp
  dependency-version: 0.35.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.132.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@anthropic-ai/vertex-sdk"
  dependency-version: 0.20.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: google-auth-library
  dependency-version: 11.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 11, 2026
@vercel

vercel Bot commented Oct 11, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
scriptorium Ready Ready Preview Oct 11, 2026 6:56pm UTC

This branch was successfully deployed

1 active deployment
Preview — 33fb846e Deployed Oct 11, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants