Skip to content

build(deps): Bump the prod-deps group with 4 updates#20

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/prod-deps-db6263dfb8
Open

build(deps): Bump the prod-deps group with 4 updates#20
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/prod-deps-db6263dfb8

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 1, 2025 •
edited
Loading

Bumps the prod-deps group with 4 updates: @modelcontextprotocol/sdk, dependency-tree, minimatch and zod.

Updates @modelcontextprotocol/sdk from 1.12.1 to 1.13.2

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.13.2

What's Changed

New Contributors 🙏

Full Changelog: modelcontextprotocol/typescript-sdk@1.13.1...1.13.2

1.13.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.13.0...1.13.1

1.13.0

🚀 Implementation for Spec revision 2025-06-18

https://github.com/modelcontextprotocol/modelcontextprotocol/releases/tag/2025-06-18

... (truncated)

Commits
  • 1e52f38 Merge pull request #701 from modelcontextprotocol/ihrpr/1.13.2
  • 9d678ce 1.13.2
  • be845dd Merge pull request #391 from christian-bromann/cb/sse-tests
  • f76652b Update src/server/sse.test.ts
  • 362acfc Update package-lock.json
  • 08c767f Merge branch 'main' into cb/sse-tests
  • 6e0b699 Merge pull request #428 from modelcontextprotocol/dependabot/npm_and_yarn/npm...
  • a783c5a Merge pull request #542 from dhodun/dhodun/add-streamable-http-comments
  • 71d309d Merge pull request #477 from nichtsam/pr/protocol-overwriting-transport-hooks
  • 909fe5d Merge pull request #633 from Achintha444/main
  • Additional commits viewable in compare view

Updates dependency-tree from 11.1.1 to 11.2.0

Release notes

Sourced from dependency-tree's releases.

v11.2.0

What's Changed

New Contributors

Full Changelog: dependents/node-dependency-tree@v11.1.1...v11.2.0

Commits

Updates minimatch from 10.0.1 to 10.0.3

Commits

Updates zod from 3.25.42 to 3.25.67

Release notes

Sourced from zod's releases.

v3.25.67

Commits:

  • 7afe790d0f459278bc18e8197791db280cac341f Make $ZodLiteralDef generic
  • 91274c3e154731205cc6958fd8c2ba5d48503db9 3.25.67
  • c22944b029295cc0d33ee1b2273ea64e889528ff Fix race condition

v3.25.66

Commits:

  • 2b3e87bcdd399b8f99d53641648db5a764861e1b Update api.ts (#4724)
  • 100e9aa874032b49a1091e702213a52decf07521 chore: include zod-validation-error to Ecosystem page (#4722)
  • de3517eeb66fc6d901752ee78d4ec97e7f5d9bc6 fix(docs): prevent FOUC on website homepage logo (#4716)
  • 222a663732f6f605fd47c9c95bcef602e3d1e188 Change ZodObject default to $strip. Set inst.shape in zod mini
  • fb00618f7d2c888fc1a2e207b391619b6d04dc6b 3.25.66

v3.25.65

Commits:

  • 65309948ebcf926ee0570315b6254e06f59d01dd Clean up ecosystem
  • 131fdbd4ea63abf8d4788855c106e51ef7e83077 fix(docs): Use array as argument of templateLiteral (#4701)
  • ed648b132d55a12094b01e1abeae8a6d29b88364 chore: remove deprecated @​types/chalk (#4685)
  • 12dd4890e2310ca798dd4193f15372efc2cfd84b Add catchall to zod-mini
  • fcb722ae09e6190c87f082db4be556c151dea8b7 Add uuid to changelog
  • 8c74035ee6bcf27ab4b4398708b379713cc3eeee 3.25.65

v3.25.64

Commits:

  • b142ea8fbb9e41f8251a36ba687b90a316f65fa4 Fix $strip
  • b6e59c37a0a463f90e91453a4d6b2b3db8cdbc53 Check for existence of Error.captureStackTrace
  • 0c686afdc95a324330a60315c59189fa09d8c497 Remove type from mime issue path
  • af88d743a7f6b8c1f5a2d43e3282c976833eeee7 Fix test

v3.25.63

Commits:

  • 7ed0c3694d324f5c02d5b224e7e3163d2fd84c52 Allow hours-only offsets. Normalize. (#4676)
  • 112fff6b7866f909583cd6f62c43fb639420b069 Fix iso tests
  • 6176dcb570186c4945223fa83bcf3221cbfa1af5 Improve ISO second handling (#4680)
  • 8e20a2018df854734a09e81e3dfbe598c42911e3 Use consistent variable names for IP examples (#4679)
  • 29e4973b065476b09f69e83c9e9ff4c6908c8a8c refactor: remove unnecessary assertion (#4672)
  • c626fe100eb79fd95e557d8091a111306ecb6045 chore: update husky from v7 to v9 (#4682)
  • f350a693aec24a5b70a37992df3b9e7ea36525b2 3.25.63

v3.25.62

Commits:

  • c568dea33ac42382070580687410ee47e83609c4 Drop | undefined from json schema types
  • 1614fd891b40cc9d23b249abad528e38ca718065 3.25.62

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): Bump the prod-deps group with 4 updates
9fa75a9 
Bumps the prod-deps group with 4 updates: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [dependency-tree](https://github.com/dependents/node-dependency-tree), [minimatch](https://github.com/isaacs/minimatch) and [zod](https://github.com/colinhacks/zod).


Updates `@modelcontextprotocol/sdk` from 1.12.1 to 1.13.2
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.12.1...1.13.2)

Updates `dependency-tree` from 11.1.1 to 11.2.0
- [Release notes](https://github.com/dependents/node-dependency-tree/releases)
- [Commits](dependents/node-dependency-tree@v11.1.1...v11.2.0)

Updates `minimatch` from 10.0.1 to 10.0.3
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.0.1...v10.0.3)

Updates `zod` from 3.25.42 to 3.25.67
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.42...v3.25.67)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: dependency-tree
  dependency-version: 11.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: minimatch
  dependency-version: 10.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: zod
  dependency-version: 3.25.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2025
@github-actions
Copy link

github-actions bot commented Aug 1, 2025

This PR has gone 30 days without any activity and meets the project's definition of "stale". This will be auto-closed if there is no new activity over the next 30 days. If the issue is still relevant and active, you can simply comment with a "bump" to keep it open, or add the label "not_stale". Thanks for keeping our repository healthy!

@github-actions
Copy link

github-actions bot commented Sep 1, 2025

This PR has gone 30 days without any activity and meets the project's definition of "stale". This will be auto-closed if there is no new activity over the next 30 days. If the issue is still relevant and active, you can simply comment with a "bump" to keep it open, or add the label "not_stale". Thanks for keeping our repository healthy!

@github-actions
Copy link

github-actions bot commented Nov 1, 2025

This PR has gone 30 days without any activity and meets the project's definition of "stale". This will be auto-closed if there is no new activity over the next 30 days. If the issue is still relevant and active, you can simply comment with a "bump" to keep it open, or add the label "not_stale". Thanks for keeping our repository healthy!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants