chore(deps): bump the demo-npm group across 1 directory with 7 updates#154
Conversation
|
Thanks for the PR! CI will run CERT validation and replay checks. Results will appear in workflow badges and artifacts. |
SBOM Security ReportTotal Packages: 4516 Language Distribution:
License Distribution:
✅ SBOM generated successfully |
0bebd11 to
e8c0865
Compare
|
Thanks for the PR! CI will run CERT validation and replay checks. Results will appear in workflow badges and artifacts. |
SBOM Security ReportTotal Packages: 4516 Language Distribution:
License Distribution:
✅ SBOM generated successfully |
Bumps the demo-npm group with 7 updates in the /demos/verifiable-mcp-fraud directory: | Package | From | To | | --- | --- | --- | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.17.5` | `1.29.0` | | [axios](https://github.com/axios/axios) | `1.11.0` | `1.18.1` | | [express](https://github.com/expressjs/express) | `4.21.2` | `5.2.1` | | [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `4.17.23` | `5.0.6` | | [uuid](https://github.com/uuidjs/uuid) | `9.0.1` | `14.0.1` | | [ws](https://github.com/websockets/ws) | `8.18.3` | `8.21.1` | | [@types/uuid](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/uuid) | `9.0.8` | `11.0.0` | Updates `@modelcontextprotocol/sdk` from 1.17.5 to 1.29.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.17.5...v1.29.0) Updates `axios` from 1.11.0 to 1.18.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.11.0...v1.18.1) Updates `express` from 4.21.2 to 5.2.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.21.2...v5.2.1) Updates `@types/express` from 4.17.23 to 5.0.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) Updates `uuid` from 9.0.1 to 14.0.1 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v9.0.1...v14.0.1) Updates `ws` from 8.18.3 to 8.21.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.18.3...8.21.1) Updates `@types/express` from 4.17.23 to 5.0.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) Updates `@types/uuid` from 9.0.8 to 11.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/uuid) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: demo-npm - dependency-name: "@types/express" dependency-version: 5.0.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: demo-npm - dependency-name: "@types/express" dependency-version: 5.0.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: demo-npm - dependency-name: "@types/uuid" dependency-version: 11.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: demo-npm - dependency-name: axios dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: demo-npm - dependency-name: express dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: demo-npm - dependency-name: uuid dependency-version: 14.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: demo-npm - dependency-name: ws dependency-version: 8.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: demo-npm ... Signed-off-by: dependabot[bot] <support@github.com>
e8c0865 to
695cda9
Compare
|
Thanks for the PR! CI will run CERT validation and replay checks. Results will appear in workflow badges and artifacts. |
SBOM Security ReportTotal Packages: 4518 Language Distribution:
License Distribution:
✅ SBOM generated successfully |
|
Deferred to a dedicated deps wave. This bump is non-trivial (major/minor jump, lockfile churn, and/or grouped updates). Please leave open until a coordinated tip rebase has green CI; do not land opportunistically. |
Bumps the demo-npm group with 7 updates in the /demos/verifiable-mcp-fraud directory:
1.17.51.29.01.11.01.18.14.21.25.2.14.17.235.0.69.0.114.0.18.18.38.21.19.0.811.0.0Updates
@modelcontextprotocol/sdkfrom 1.17.5 to 1.29.0Release notes
Sourced from @modelcontextprotocol/sdk's releases.
... (truncated)
Commits
e12cbd7chore: bump version to 1.29.0 (#1820)3913fd4fix(stdio): always set windowsHide on Windows, not just in Electron (#1640)5608e78[v1.x backport] Allow servers / clients to advertise extensions in the capabi...7213816v1.x #1623 follow up -add missing types to package.json (#1773)364f38cv1.x npm audit fix (#1780)c95cc09Add typings exports (#1623)ddadaa6[v1.x] fix: add missing size field to ResourceSchema (#1575)2a15851[v1.x] fix: disallow null (infinite) requested TTL (#1339)13e30f1fix: treat v1.x as primary branch for npm latest tag (backport #1577) (#1749)a056569chore: bump version to 1.28.0 (#1746)Maintainer changes
This version was pushed to npm by pcarleton, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
axiosfrom 1.11.0 to 1.18.1Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
a209bfbchore(release): prepare release 1.18.1 (#11027)fa6a55echore(deps-dev): bump multer from 2.1.1 to 2.2.0 (#11026)40e7be8docs: clarifies that request data is request-specific in axios (#11025)a446b39fix(AxiosURLSearchParams): use arrow function so encoder.call(this) receives ...cf1306adocs: add Deno to install instructions (#11023)b32880afix: incorrect use of error (#11021)1792edafix: ensure maxBodyLength is explicitly passed to follow-redirects (#10993)30499d6fix: various runtime crashes and type definition mismatches (#10959)20ce9c4fix(http): defer env proxy handling to Node (#10942)e64bcf9chore(deps): merge branch 'v1.x' into tests/module/cjs (#11014)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for axios since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
expressfrom 4.21.2 to 5.2.1Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
dbac7415.2.1697547cRevert "sec: security patch for CVE-2024-51999"4007ad1Release: 5.2.0 (#6920)2f64f68sec: security patch for CVE-2024-51999ed0ba3fbuild(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#6928)8eace46build(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (#6929)30bae81build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (#6930)758d435deps: body-parser@^2.2.1 (#6922)77bcd52docs: update emeritus triagers (#6890)f33caf1Nominate to@efekrsklfor triage team (#6888)Updates
@types/expressfrom 4.17.23 to 5.0.6Commits
Updates
uuidfrom 9.0.1 to 14.0.1Release notes
Sourced from uuid's releases.
... (truncated)
Changelog
Sourced from uuid's changelog.
... (truncated)
Commits
7017780chore(main): release 14.0.1 (#964)f2c3e4bchore: fix release-please workflow (#963)27ffae5fix: add types condition to node export for moduleResolution bundler (#961)664cb31Remove outdated security contact information (#959)d729016fix(ci): checkout PR head commit in browser workflow (#957)89a5ebcWorkflows (#948)196e208chore: fix workflow (#947)95af448chore: update workflows (#946)3b57f95chore: add workflow_dispatch (#944)a433096chore: add 12.x and 13.x maintenance release branches (#941)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
wsfrom 8.18.3 to 8.21.1Release notes
Sourced from ws's releases.
... (truncated)
Commits
ae1de54[dist] 8.21.18e9511b[ci] Trust Coveralls Homebrew tapf197ac6[fix] Lower default values ofmaxBufferedChunksandmaxFragments8df8265[ci] Update actions/checkout action to v7a2f4e7c[fix] Count empty fragments toward the limit (#2329)e79f912[pkg] Approve install scripts for bufferutil and utf-8-validate4ea355d[doc] Document 32-bit signed integer coercion for option values2120f4c[example] Remove uuid dependency4c534a6[security] Add latest vulnerability to SECURITY.mdbca91ad[dist] 8.21.0Updates
@types/expressfrom 4.17.23 to 5.0.6Commits
Updates
@types/uuidfrom 9.0.8 to 11.0.0Commits