Repository navigation
chore(deps): bump the npm_and_yarn group across 1 directory with 6 updates - #1135
Merged
ChronosSF merged 2 commits intoOct 30, 2026
Merged
Conversation
dependabot
Bot
added
dependencies
Member
|
@dependabot rebase |
…dates Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.16` | `3.4.17` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.31.0` | `1.32.2` | | [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.2.0` | `4.3.0` | | [ip-address](https://github.com/beaugunderson/ip-address) | `10.7.2` | `10.7.5` | | [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.1` | `8.3.5` | Updates `dompurify` from 3.4.16 to 3.4.17 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.16...3.4.17) Updates `@modelcontextprotocol/sdk` from 1.31.0 to 1.32.2 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.31.0...1.32.2) Updates `http-cache-semantics` from 4.2.0 to 4.3.0 - [Commits](https://github.com/kornelski/http-cache-semantics/commits) Updates `ip-address` from 10.7.2 to 10.7.5 - [Release notes](https://github.com/beaugunderson/ip-address/releases) - [Commits](beaugunderson/ip-address@v10.7.2...v10.7.5) Updates `source-map-js` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/7rulnik/source-map-js/releases) - [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md) - [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2) Updates `vite` from 8.3.1 to 8.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.32.1 dependency-type: indirect - dependency-name: dompurify dependency-version: 3.4.17 dependency-type: direct:production - dependency-name: http-cache-semantics dependency-version: 4.3.0 dependency-type: indirect - dependency-name: ip-address dependency-version: 10.7.4 dependency-type: indirect - dependency-name: source-map-js dependency-version: 1.2.2 dependency-type: indirect - dependency-name: vite dependency-version: 8.3.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/npm_and_yarn-a6157640f8
branch
from
October 29, 2026 20:07
3f6e56a to
8da2199
Compare
Dependabot bumped dompurify in the root package.json only, so update:ig reverted it and the version-sync check failed. Raise the pin in scripts/lib/versions.js and sync the chat sample that declares it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 6 updates in the / directory:
3.4.163.4.171.31.01.32.24.2.04.3.010.7.210.7.51.2.11.2.28.3.18.3.5Updates
dompurifyfrom 3.4.16 to 3.4.17Release notes
Sourced from dompurify's releases.
Commits
a77a3e7release: 3.4.17 (#1672)Updates
@modelcontextprotocol/sdkfrom 1.31.0 to 1.32.2Release notes
Sourced from @modelcontextprotocol/sdk's releases.
Commits
3b73021chore: bump version to 1.32.2 (#3089)fa56d81[v1.x] fix: allow registering after connect() when the capability was declare...6919e95fix: add explicit | undefined to Transport optional properties (v1.x backport...ff07b00chore: bump version to 1.32.1 (#2954)8a74d50[v1.x] docs: point the README at v2 and say what v1.x supports (#2942)a8cf503[v1.x] docs: state the principles in CLAUDE.md (#2939)32549b0chore: bump version to 1.32.0 (#2935)588d51d[v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)5a0724d[v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)0ca0b62[v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...Updates
http-cache-semanticsfrom 4.2.0 to 4.3.0Commits
Updates
ip-addressfrom 10.7.2 to 10.7.5Release notes
Sourced from ip-address's releases.
Commits
db0dbda10.7.582a72d7Read Teredo flags from the bits inspectTeredo names172afddUpdate mocha to 12 and patch vulnerable transitive dev dependencies8c0ec94Test that every parser rejects fullwidth and other non-ASCII digits651c1dd10.7.4ec80fcdFind an IPv6 zone by index so a rejected zone costs one passe22eb4aCheck generated docs without writing or hiding partial stagingc7f838e10.7.309b8072Reject an in-addr.arpa name longer than 32 characters before splitting it (#228)Updates
source-map-jsfrom 1.2.1 to 1.2.2Release notes
Sourced from source-map-js's releases.
Changelog
Sourced from source-map-js's changelog.
Commits
0a1d3341.2.24c6fa26Update changelogcf76580Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)7899a86Fix crash when executing browser with CSP script-src that don't permit unsafe...Updates
vitefrom 8.3.1 to 8.3.5Release notes
Sourced from vite's releases.
... (truncated)
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
981f07frelease: v8.3.5 (#23856)0d86b34fix(resolve): support subpath imports with multiple#(#23631)6a02780perf(ssr): extract inline source maps without a regexp (#23775)8e890e1fix(optimizer): skip patches dir check for yarn.lock fallback (#23725)197daf6fix(bundled-dev): declare utf-8 charset in fallback page (#23846)4d16e7cfix(build): include preload dependencies to chunk import map hashing (#23793)df7b40erefactor(dev): consolidate moduleURL to file path utilities (#23828)a162990refactor(dev): use ModuleURLs throughout HTML transforms (#23815)6116689refactor(dev): separate import resolution from URL conversion (#23791)446954crefactor(dev): share ModuleURL and BrowserURL conversions (#23790)