Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 15 updates#21

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-69d78065aa
Open

chore(deps): bump the production-dependencies group across 1 directory with 15 updates#21
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-69d78065aa

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 5, 2026 •
edited
Loading

Bumps the production-dependencies group with 15 updates in the / directory:

Package From To
@modelcontextprotocol/sdk 1.25.3 1.26.0
cheerio 1.1.0 1.2.0
dotenv 16.6.1 17.2.3
express 4.22.1 5.2.1
marked 12.0.2 17.0.1
mime-types 2.1.35 3.0.2
open 8.4.2 11.0.0
turndown 7.2.1 7.2.2
zod 3.25.76 4.3.6
@typescript-eslint/eslint-plugin 6.21.0 8.54.0
@typescript-eslint/parser 6.21.0 8.54.0
audit-ci 6.6.1 7.1.0
jest 29.7.0 30.2.0
ts-jest 29.4.5 29.4.6
tsx 4.20.4 4.21.0

Updates @modelcontextprotocol/sdk from 1.25.3 to 1.26.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.26.0

Addresses "Sharing server/transport instances can leak cross-client response data" in this GHSA GHSA-345p-7cg4-v4c7

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.25.3...v1.26.0

Commits
  • fe9c07b chore: bump version to 1.26.0 (#1479)
  • 4f01e7e fix: add non-null assertions for optional setupServer fields in stateful test
  • a05be17 Merge commit from fork
  • 50d9fa3 Fix #1430: Client Credentials providers scopes support (backported) (#1442)
  • aa81a66 fix(deps): resolve npm audit vulnerabilities and bump dependencies (v1.x back...
  • 6aba065 chore: bump v1.25.3 for backport fixes (#1412)
  • See full diff in compare view

Updates cheerio from 1.1.0 to 1.2.0

Release notes

Sourced from cheerio's releases.

v1.2.0

What's Changed

New Contributors

Full Changelog: cheeriojs/cheerio@v1.1.2...v1.2.0

v1.1.2

What's Changed

Full Changelog: cheeriojs/cheerio@v1.1.1...v1.1.2

v1.1.1

  • Fix Undici issues (#4689) 91a2b3d7

cheeriojs/cheerio@v1.1.0...v1.1.1

Commits
  • e3c7aaf 1.2.0
  • 96bfd3e chore(package): Exclude tests from published bundle
  • 08d396c docs(readme): Update Sponsors (#5014)
  • bd9d3dd build(deps-dev): bump eslint-plugin-jsdoc from 62.3.0 to 62.3.1 (#5022)
  • f4c8a58 build(deps): bump unist-util-visit from 5.0.0 to 5.1.0 in /website (#5027)
  • 8fa46d5 build(deps): bump astro from 5.16.12 to 5.16.14 in /website (#5026)
  • 8e132a6 build(deps-dev): bump @​vitest/coverage-v8 from 4.0.17 to 4.0.18 (#5023)
  • 6d31bfc build(deps-dev): bump globals from 17.0.0 to 17.1.0 (#5025)
  • 65aa6c8 build(deps): bump @​docsearch/css from 4.5.0 to 4.5.3 in /website (#5020)
  • 5567e65 build(deps): bump astro from 5.16.11 to 5.16.12 in /website (#5021)
  • Additional commits viewable in compare view

Updates dotenv from 16.6.1 to 17.2.3

Changelog

Sourced from dotenv's changelog.

17.2.3 (2025-09-29)

Changed

  • Fixed typescript error definition (#912)

17.2.2 (2025-09-02)

Added

  • 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

17.2.1 (2025-07-24)

Changed

  • Fix clickable tip links by removing parentheses (#897)

17.2.0 (2025-07-09)

Added

  • Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#889)
  • Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})
# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"
// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)
$ node index.js
Hello World
or
$ DOTENV_CONFIG_QUIET=true node index.js

17.1.0 (2025-07-07)

Added

  • Add additional security and configuration tips to the runtime log (#884)
  • Dim the tips text from the main injection information text

... (truncated)

Commits

Updates express from 4.22.1 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

What's Changed

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

  • Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
    • The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

5.1.0 / 2025-03-31

  • Add support for Uint8Array in res.send()
  • Add support for ETag option in res.sendFile()
  • Add support for multiple links with the same rel in res.links()
  • Add funding field to package.json
  • perf: use loop for acceptParams
  • refactor: prefix built-in node module imports
  • deps: remove setprototypeof
  • deps: remove safe-buffer
  • deps: remove utils-merge
  • deps: remove methods
  • deps: remove depd
  • deps: debug@^4.4.0
  • deps: body-parser@^2.2.0
  • deps: router@^2.2.0
  • deps: content-type@^1.0.5
  • deps: finalhandler@^2.1.0
  • deps: qs@^6.14.0
  • deps: server-static@2.2.0
  • deps: type-is@2.0.1

5.0.1 / 2024-10-08

5.0.0 / 2024-09-10

  • remove:
    • path-is-absolute dependency - use path.isAbsolute instead
  • breaking:
    • res.status() accepts only integers, and input must be greater than 99 and less than 1000
      • will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range
      • will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs
    • deps: send@1.0.0

... (truncated)

Commits

Updates marked from 12.0.2 to 17.0.1

Release notes

Sourced from marked's releases.

v17.0.1

17.0.1 (2025-11-20)

Bug Fixes

v17.0.0

17.0.0 (2025-11-07)

Bug Fixes

BREAKING CHANGES

  • Change how consecutive text tokens work in lists
  • Simplify listItem renderer
  • Checkbox token is added in list tokenizer
  • Checkbox token add type and raw property
  • Change loose list text tokens to paragraph type in the list tokenizer

v16.4.2

16.4.2 (2025-11-06)

Bug Fixes

v16.4.1

16.4.1 (2025-10-17)

Bug Fixes

v16.4.0

16.4.0 (2025-10-07)

Bug Fixes

... (truncated)

Commits
  • 16209f5 chore(release): 17.0.1 [skip ci]
  • 921ee22 fix: fix block elements in task item (#3828)
  • 1e47df2 chore(deps-dev): Bump @​semantic-release/npm from 13.1.1 to 13.1.2 (#3841)
  • 8a355d1 chore(deps-dev): Bump @​markedjs/eslint-config from 1.0.13 to 1.0.14 (#3835)
  • c43a67e chore(deps-dev): Bump eslint from 9.39.0 to 9.39.1 (#3834)
  • de635d8 chore(deps-dev): Bump esbuild from 0.25.12 to 0.27.0 (#3833)
  • 554cd8d chore(deps-dev): Bump marked-highlight from 2.2.2 to 2.2.3 (#3832)
  • 1711dbb chore(deps-dev): Bump @​semantic-release/github from 12.0.1 to 12.0.2 (#3831)
  • 23b9d01 docs: Modernize Docs UI with Tailwind, Dark Mode, and Improved Layout (#3814)
  • 9657f0b chore(release): 17.0.0 [skip ci]
  • Additional commits viewable in compare view

Updates mime-types from 2.1.35 to 3.0.2

Release notes

Sourced from mime-types's releases.

v3.0.2

What's Changed

New Contributors

Full Changelog: jshttp/mime-types@v3.0.1...v3.0.2

v3.0.1

What's Changed

New Contributors

Full Changelog: jshttp/mime-types@v3.0.0...v3.0.1

v3.0.0

What's Changed

... (truncated)

Changelog

Sourced from mime-types's changelog.

3.0.2 / 2025-11-20

  • Fix: update JSDoc to reflect that functions return only false or string, not boolean|string.
  • Fix: refined mime-score logic so .mp4 resolves correctly
  • Fix:reflect the current Node.js version supported to ≥ 18 (See 3.0.0 for more details).

3.0.1 / 2025-03-26

  • deps: mime-db@1.54.0

3.0.0 / 2024-08-31

  • Drop support for node <18
  • deps: mime-db@1.53.0
  • resolve extension conflicts with mime-score (#119)
    • asc -> application/pgp-signature is now application/pgp-keys
    • mpp -> application/vnd.ms-project is now application/dash-patch+xml
    • ac -> application/vnd.nokia.n-gage.ac+xml is now application/pkix-attr-cert
    • bdoc -> application/x-bdoc is now application/bdoc
    • wmz -> application/x-msmetafile is now application/x-ms-wmz
    • xsl -> application/xslt+xml is now application/xml
    • wav -> audio/wave is now audio/wav
    • rtf -> text/rtf is now application/rtf
    • xml -> text/xml is now application/xml
    • mp4 -> video/mp4 is now application/mp4
    • mpg4 -> video/mp4 is now application/mp4
Commits
  • 29a0302 3.0.2 (#169)
  • c3ebfb1 build(deps-dev): bump eslint-plugin-import from 2.27.5 to 2.32.0 (#155)
  • 02e8eb2 fix: update JSDoc to convey only false return (#152)
  • ef03e6a build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 (#147)
  • 636cd1b build(deps-dev): bump mocha from 10.2.0 to 10.8.2 (#149)
  • c02166b build(deps-dev): bump eslint-plugin-markdown from 3.0.0 to 3.0.1 (#148)
  • 44956c6 build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#144)
  • 5e3bb15 build(deps-dev): bump eslint-plugin-promise from 6.1.1 to 6.6.0 (#150)
  • 53f720c build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#167)
  • eac806f build(deps): bump github/codeql-action from 3.30.0 to 3.30.5 (#168)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for mime-types since your current version.


Updates open from 8.4.2 to 11.0.0

Release notes

Sourced from open's releases.

v11.0.0

Breaking

  • Require Node.js 20 e789eec

Improvements

  • Automatically detect whether PowerShell is accessible in WSL 67109f8
  • Add chromium-browser fallback for Linux b40f4b8
  • Throw AggregateError instead of only latest error (#364) 2778ac6

Fixes

  • Fix app launch failure detection for fallback support ce31b94
  • Fix WSL access via remote SSH 8821bf7
  • Fix handling of import.meta.url not being available 8ce0f7d
  • Fix: Suppress PowerShell progress messages on Windows 2283000
  • Fix: Ignore stdio on Windows when not waiting for process e1af0ee
  • Fix WSL2 local file opening 269b5fd
  • Fix spawn handling 966239c
  • Fix PowerShell argument escaping 274d704

sindresorhus/open@v10.2.0...v11.0.0

v10.2.0

  • Add support for Brave browser (#362) b62b99e

sindresorhus/open@v10.1.2...v10.2.0

v10.1.2

  • Fix detection of Windows default browser from WSL (#358) 6187a82

sindresorhus/open@v10.1.1...v10.1.2

v10.1.1

  • Fix: Use correct bundle ID for Microsoft Edge (#356) 55537f1

sindresorhus/open@v10.1.0...v10.1.1

v10.1.0

  • Linux: Update xdg-open to 1.2.1 (#338) c702c66

... (truncated)

Commits
  • 8815330 11.0.0
  • b8d8107 Refactor
  • ce31b94 Fix app launch failure detection for fallback support
  • b40f4b8 Add chromium-browser fallback for Linux
  • e789eec Require Node.js 20
  • 67109f8 Automatically detect PowerShell accessibility in WSL
  • 8821bf7 Fix WSL access via remote SSH
  • 8ce0f7d Fix handling of import.meta.url not being available
  • 2283000 Suppress PowerShell progress messages on Windows
  • e1af0ee Ignore stdio on Windows when not waiting for process
  • Additional commits viewable in compare view

Updates turndown from 7.2.1 to 7.2.2

Release notes

Sourced from turndown's releases.

v7.2.2

  • Merge pull request #504 from pavelhoral/fix-regexp-trim 8ed0499
  • Replace regexp trim (#501) e26cc81

mixmark-io/turndown@v7.2.1...v7.2.2

Commits

Updates zod from 3.25.76 to 4.3.6

Release notes

Sourced from zod's releases.

v4.3.6

Commits:

  • 9977fb0868432461de265a773319e80a90ba3e37 Add brand.dev to sponsors
  • f4b7bae3468f6188b8f004e007d722148fc91d77 Update pullfrog.yml (#5634)
  • 251d7163a0ac7740fee741428d913e3c55702ace Clean up workflow_call
  • edd4132466da0f5065a8e051b599d01fdd1081d8 fix: add missing User-agent to robots.txt and allow all (#5646)
  • 85db85e9091d0706910d60c7eb2e9c181edd87bd fix: typo in codec.test.ts file (#5628)
  • cbf77bb12bdfda2e054818e79001f5cb3798ce76 Avoid non null assertion (#5638)
  • dfbbf1c1ae0c224b8131d80ddf0a264262144086 Avoid re-exported star modules (#5656)
  • 762e911e5773f949452fd6dd4e360f2362110e8e Generalize numeric key handling
  • ca3c8629c0c2715571f70b44c2433cad3db7fe4e v4.3.6

v4.3.5

Commits:

  • 21afffdb42ccab554036312e33fed0ea3cb8f982 [Docs] Update migration guide docs for deprecation of message (#5595)
  • e36743e513aadb307b29949a80d6eb0dcc8fc278 Improve mini treeshaking
  • 0cdc0b8597999fd9ca99767b912c1e82c1ff2d6c 4.3.5

v4.3.4

Commits:

  • 1a8bea3b474eada6f219c163d0d3ad09fadabe72 Add integration tests
  • e01cd02b2f23d7e9078d3813830b146f8a2258b4 Support patternProperties for looserecord (#5592)
  • 089e5fbb0f58ce96d2c4fb34cd91724c78df4af5 Improve looseRecord docs
  • decef9c418d9a598c3f1bada06891ba5d922c5cd Fix lint
  • 9443aab00d44d5d5f4a7eada65fc0fc851781042 Drop iso time in fromJSONSchema
  • 66bda7491a1b9eab83bdeec0c12f4efc7290bd48 Remove .refine() from ZodMiniType
  • b4ab94ca608cd5b581bfc12b20dd8d95b35b3009 4.3.4

v4.3.3

Commits:

  • f3b2151959d215d405f54dff3c7ab3bf1fd887ca v4.3.3

v4.3.2

Commits:

  • bf96635d243118de6e4f260077aa137453790bf6 Loosen strictObjectinside intersection (#5587)
  • f71dc0182ab0f0f9a6be6295b07faca269e10179 Remove Juno (#5590)
  • 0f41e5a12a43e6913c9dcb501b2b5136ea86500d 4.3.2

v4.3.1

Commits:

  • 0fe88407a4149c907929b757dc6618d8afe998fc allow non-overwriting extends with refinements. 4.3.1

v4.3.0

This is Zod's biggest release since 4.0. It addresses several of Zod's longest-standing feature requests.

... (truncated)

Commits

Updates @typescript-eslint/eslint-plugin from 6.21.0 to 8.54.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.54.0

8.54.0 (2026-01-26)

🚀 Features

  • eslint-plugin-internal: add prefer-tsutils-methods rule (#11974, #11625)
  • scope-manager: support ScopeManager#addGlobals (#11914)
  • typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#11965, #11955)

🩹 Fixes

  • eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#11785)
  • eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#11967, #11559)
  • scope-manager: fix catch clause scopes def.name (#11982)
  • scope-manager: prevent misidentification of "use strict" directives (#11995)
  • utils: handle missing FlatESLint and LegacyESLint (#11958)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

  • eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#11951)
  • utils: make RuleCreator root defaultOptions optional (#11956)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.54.0 (2026-01-26)

🚀 Features

  • eslint-plugin-internal: add prefer-tsutils-methods rule (#11974, #11625)
  • typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#11965, #11955)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#11967, #11559)
  • deps: update dependency prettier to v3.8.0 (#11991)
  • scope-manager: fix catch clause scopes def.name (#11982)
  • eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#11785)

❤️ Thank You

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
971ad67 
…y with 15 updates

Bumps the production-dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.25.3` | `1.26.0` |
| [cheerio](https://github.com/cheeriojs/cheerio) | `1.1.0` | `1.2.0` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.2.3` |
| [express](https://github.com/expressjs/express) | `4.22.1` | `5.2.1` |
| [marked](https://github.com/markedjs/marked) | `12.0.2` | `17.0.1` |
| [mime-types](https://github.com/jshttp/mime-types) | `2.1.35` | `3.0.2` |
| [open](https://github.com/sindresorhus/open) | `8.4.2` | `11.0.0` |
| [turndown](https://github.com/mixmark-io/turndown) | `7.2.1` | `7.2.2` |
| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.3.6` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `6.21.0` | `8.54.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `6.21.0` | `8.54.0` |
| [audit-ci](https://github.com/IBM/audit-ci) | `6.6.1` | `7.1.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.2.0` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.5` | `29.4.6` |
| [tsx](https://github.com/privatenumber/tsx) | `4.20.4` | `4.21.0` |



Updates `@modelcontextprotocol/sdk` from 1.25.3 to 1.26.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.25.3...v1.26.0)

Updates `cheerio` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/cheeriojs/cheerio/releases)
- [Commits](cheeriojs/cheerio@v1.1.0...v1.2.0)

Updates `dotenv` from 16.6.1 to 17.2.3
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.6.1...v17.2.3)

Updates `express` from 4.22.1 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v4.22.1...v5.2.1)

Updates `marked` from 12.0.2 to 17.0.1
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v12.0.2...v17.0.1)

Updates `mime-types` from 2.1.35 to 3.0.2
- [Release notes](https://github.com/jshttp/mime-types/releases)
- [Changelog](https://github.com/jshttp/mime-types/blob/master/HISTORY.md)
- [Commits](jshttp/mime-types@2.1.35...v3.0.2)

Updates `open` from 8.4.2 to 11.0.0
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v8.4.2...v11.0.0)

Updates `turndown` from 7.2.1 to 7.2.2
- [Release notes](https://github.com/mixmark-io/turndown/releases)
- [Commits](mixmark-io/turndown@v7.2.1...v7.2.2)

Updates `zod` from 3.25.76 to 4.3.6
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.3.6)

Updates `@typescript-eslint/eslint-plugin` from 6.21.0 to 8.54.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 6.21.0 to 8.54.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/parser)

Updates `audit-ci` from 6.6.1 to 7.1.0
- [Release notes](https://github.com/IBM/audit-ci/releases)
- [Commits](IBM/audit-ci@v6.6.1...v7.1.0)

Updates `jest` from 29.7.0 to 30.2.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest)

Updates `ts-jest` from 29.4.5 to 29.4.6
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.4.5...v29.4.6)

Updates `tsx` from 4.20.4 to 4.21.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.20.4...v4.21.0)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: cheerio
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 17.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: marked
  dependency-version: 17.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: mime-types
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: open
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: turndown
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.3.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.54.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.54.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: audit-ci
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: jest
  dependency-version: 30.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: ts-jest
  dependency-version: 29.4.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tsx
  dependency-version: 4.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants