build(deps): bump the npm_and_yarn group across 3 directories with 4 updates#2625
Closed
dependabot[bot] wants to merge 1 commit intomainfrom
Closed
build(deps): bump the npm_and_yarn group across 3 directories with 4 updates#2625dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
…updates Bumps the npm_and_yarn group with 3 updates in the / directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) and [js-yaml](https://github.com/nodeca/js-yaml). Bumps the npm_and_yarn group with 3 updates in the /apps/sim directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) and [js-yaml](https://github.com/nodeca/js-yaml). Bumps the npm_and_yarn group with 1 update in the /scripts directory: [glob](https://github.com/isaacs/node-glob). Updates `@modelcontextprotocol/sdk` from 1.20.2 to 1.24.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.20.2...1.24.0) Updates `better-auth` from 1.3.12 to 1.4.5 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Commits](https://github.com/better-auth/better-auth/commits/v1.4.5/packages/better-auth) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `@modelcontextprotocol/sdk` from 1.20.2 to 1.24.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.20.2...1.24.0) Updates `better-auth` from 1.3.12 to 1.4.5 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Commits](https://github.com/better-auth/better-auth/commits/v1.4.5/packages/better-auth) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `@modelcontextprotocol/sdk` from 1.20.2 to 1.24.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.20.2...1.24.0) Updates `better-auth` from 1.3.12 to 1.4.5 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Commits](https://github.com/better-auth/better-auth/commits/v1.4.5/packages/better-auth) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `@modelcontextprotocol/sdk` from 1.20.2 to 1.24.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.20.2...1.24.0) Updates `better-auth` from 1.3.12 to 1.4.5 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Commits](https://github.com/better-auth/better-auth/commits/v1.4.5/packages/better-auth) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `glob` from 11.0.2 to 11.1.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v11.0.2...v11.1.0) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.24.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: better-auth dependency-version: 1.4.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.24.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: better-auth dependency-version: 1.4.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.24.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: better-auth dependency-version: 1.4.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.24.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: better-auth dependency-version: 1.4.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 11.1.0 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Contributor
Greptile SummaryThis PR updates four npm dependencies across the monorepo, automatically generated by Dependabot: Security Updates:
Feature Updates:
All updates appear to be non-breaking and include improvements and bug fixes. The Confidence Score: 5/5
Important Files Changed
Sequence DiagramsequenceDiagram
participant Dependabot
participant npm_registry as NPM Registry
participant root as Root package.json
participant sim as apps/sim/package.json
participant scripts as scripts/package.json
participant lock as scripts/package-lock.json
Dependabot->>npm_registry: Check for updates in npm_and_yarn group
npm_registry-->>Dependabot: Return available updates
Note over Dependabot: Found 4 updates:<br/>@modelcontextprotocol/sdk 1.24.0<br/>better-auth 1.4.5<br/>js-yaml 4.1.1<br/>glob 11.1.0
Dependabot->>sim: Update @modelcontextprotocol/sdk: 1.20.2 → 1.24.0
Note right of sim: Adds MCP spec 2025-11-25<br/>Tasks API, SSE improvements
Dependabot->>sim: Update better-auth: 1.3.12 → 1.4.5
Note right of sim: Cookie chunking fixes<br/>Multi-session improvements
Dependabot->>sim: Update js-yaml: 4.1.0 → 4.1.1
Note right of sim: SECURITY FIX:<br/>Prototype pollution patch
Dependabot->>scripts: Update glob: 11.0.3 → 11.1.0
Note right of scripts: Minor version bump
Dependabot->>lock: Regenerate package-lock.json
Note right of lock: Update transitive dependencies<br/>Add yaml 2.8.1
Dependabot->>Dependabot: Create PR #2625
Note over Dependabot: All updates non-breaking<br/>Ready for review
|
| @@ -854,17 +819,15 @@ | |||
| "version": "1.3.6", | |||
| "resolved": "https://registry.npmjs.org/make-error/-/make-error-1.3.6.tgz", | |||
| "integrity": "sha512-s8UhlNe7vPKomQhC1qFelMokr/Sc3AgNbso3n74mVPA5LTZwkB9NlXf4XPamLxJE8h0gh73rM94xvwRT2CVInw==", | |||
Contributor
Author
|
Superseded by #2982. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/npm_and_yarn-2c2ab1488e
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 3 updates in the / directory: @modelcontextprotocol/sdk, better-auth and js-yaml.
Bumps the npm_and_yarn group with 3 updates in the /apps/sim directory: @modelcontextprotocol/sdk, better-auth and js-yaml.
Bumps the npm_and_yarn group with 1 update in the /scripts directory: glob.
Updates
@modelcontextprotocol/sdkfrom 1.20.2 to 1.24.0Release notes
Sourced from
@modelcontextprotocol/sdk's releases.... (truncated)
Commits
356b7e6chore: bump version for release (#1215)09623e2Merge commit from forkcf51343feat: backwards-compatible createMessage overloads for SEP-1577 (#1212)8204126fix: allow zod 4 transformations (#1213)6083600Modify Origin header validation in validateRequestHeaders (streamableHttp.ts ...a6ee2cbfix: normalize null to undefined in ElicitResultSchema content field (#1204)4b651b8feat: add closeStandaloneSSEStream for GET stream polling (#1203)5ceabfbfix: normalize headers in sse transport (#856)f67fc2ffix: improve SSE reconnection behavior (#1191)fab7e1efeat: add closeSSEStream callback to RequestHandlerExtra (#1166)Maintainer changes
This version was pushed to npm by pcarleton, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
better-authfrom 1.3.12 to 1.4.5Release notes
Sourced from better-auth's releases.
... (truncated)
Commits
2000fd6chore: release v1.4.5fcab5a8fix: add helper types to exports (#6479)c666670chore: release v1.4.5-beta.1fd72560fix(db-adapter): string[] and number[] fieldTypes incorrectly parsed for plug...189deddchore: release v1.4.4-beta.36269a33chore: release v1.4.4-beta.252c15d4chore: fix validation errors in unit tests (#6466)a25fb65fix: preserve user ID in cookie cache during stateless sessions (#6452)5cbe0a5chore: enforce imports to usenode:protocol (#6461)fbe51c8chore: add spell checker (#6319)Updates
js-yamlfrom 4.1.0 to 4.1.1Changelog
Sourced from js-yaml's changelog.
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)Updates
@modelcontextprotocol/sdkfrom 1.20.2 to 1.24.0Release notes
Sourced from
@modelcontextprotocol/sdk's releases.... (truncated)
Commits
356b7e6chore: bump version for release (#1215)09623e2Merge commit from forkcf51343feat: backwards-compatible createMessage overloads for SEP-1577 (#1212)8204126fix: allow zod 4 transformations (#1213)6083600Modify Origin header validation in validateRequestHeaders (streamableHttp.ts ...a6ee2cbfix: normalize null to undefined in ElicitResultSchema content field (#1204)4b651b8feat: add closeStandaloneSSEStream for GET stream polling (#1203)5ceabfbfix: normalize headers in sse transport (#856)f67fc2ffix: improve SSE reconnection behavior (#1191)fab7e1efeat: add closeSSEStream callback to RequestHandlerExtra (#1166)Maintainer changes
This version was pushed to npm by pcarleton, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
better-authfrom 1.3.12 to 1.4.5Release notes
Sourced from better-auth's releases.
... (truncated)
Commits
2000fd6chore: release v1.4.5fcab5a8fix: add helper types to exports (#6479)c666670chore: release v1.4.5-beta.1fd72560fix(db-adapter): string[] and number[] fieldTypes incorrectly parsed for plug...189deddchore: release v1.4.4-beta.36269a33chore: release v1.4.4-beta.252c15d4chore: fix validation errors in unit tests (#6466)a25fb65fix: preserve user ID in cookie cache during stateless sessions (#6452)5cbe0a5chore: enforce imports to usenode:protocol (#6461)fbe51c8chore: add spell checker (#6319)Updates
js-yamlfrom 4.1.0 to 4.1.1Changelog
Sourced from js-yaml's changelog.
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)Updates
@modelcontextprotocol/sdkfrom 1.20.2 to 1.24.0Release notes
Sourced from
@modelcontextprotocol/sdk's releases.