Skip to content

Bump the production-dependencies group across 1 directory with 5 updates - #9

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-8f2b2546ee
Open

Bump the production-dependencies group across 1 directory with 5 updates#9
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-8f2b2546ee

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2025 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies group with 5 updates in the / directory:

Package From To
@modelcontextprotocol/sdk 1.14.0 1.17.5
axios 1.10.0 1.11.0
dotenv 16.6.1 17.2.2
p-queue 8.1.0 8.1.1
zod 3.25.71 4.1.5

Updates @modelcontextprotocol/sdk from 1.14.0 to 1.17.5

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.17.5

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.17.4...1.17.5

1.17.4

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.17.3...1.17.4

1.17.3

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.17.2...1.17.3

1.17.2

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.17.1...1.17.2

1.17.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.17.0...1.17.1

... (truncated)

Commits
  • bf81793 bump version (#913)
  • 3dd074f Fix the SDK vs Spec types test that is breaking CI (#908)
  • 79d11dc Automatic handling of logging level (#882)
  • 3bc2235 chore: bump version to 1.17.4 (#894)
  • 1f5950b [auth] OAuth protected-resource-metadata: fallback on 4xx not just 404 (#879)
  • 64f7cdd restrict url schemes allowed in oauth metadata (#877)
  • abb2f0a feature(middleware): Composable fetch middleware for auth and cross‑cutting c...
  • 4a63974 version: patch to 0.17.3 (#878)
  • 65119eb docs: correct parameter schema key in Dynamic Servers documentation (#789)
  • aad33a1 fix: pass fetchfn parameter to registerClient and refreshAuthorizatio… (#850)
  • Additional commits viewable in compare view

Updates axios from 1.10.0 to 1.11.0

Release notes

Sourced from axios's releases.

Release v1.11.0

Release notes:

Bug Fixes

  • form-data npm pakcage (#6970) (e72c193)
  • prevent RangeError when using large Buffers (#6961) (a2214ca)
  • types: resolve type discrepancies between ESM and CJS TypeScript declaration files (#6956) (8517aa1)

Contributors to this release

Changelog

Sourced from axios's changelog.

1.11.0 (2025-07-22)

Bug Fixes

  • form-data npm pakcage (#6970) (e72c193)
  • prevent RangeError when using large Buffers (#6961) (a2214ca)
  • types: resolve type discrepancies between ESM and CJS TypeScript declaration files (#6956) (8517aa1)

Contributors to this release

Commits

Updates dotenv from 16.6.1 to 17.2.2

Changelog

Sourced from dotenv's changelog.

17.2.2 (2025-09-02)

Added

  • 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

17.2.1 (2025-07-24)

Changed

  • Fix clickable tip links by removing parentheses (#897)

17.2.0 (2025-07-09)

Added

  • Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#889)
  • Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})
# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"
// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)
$ node index.js
Hello World
or
$ DOTENV_CONFIG_QUIET=true node index.js

17.1.0 (2025-07-07)

Added

  • Add additional security and configuration tips to the runtime log (#884)
  • Dim the tips text from the main injection information text
const TIPS = [
  '🔐 encrypt with dotenvx: https://dotenvx.com',
  '🔐 prevent committing .env to code: https://dotenvx.com/precommit',
  '🔐 prevent building .env in docker: https://dotenvx.com/prebuild',
</tr></table>

... (truncated)

Commits

Updates p-queue from 8.1.0 to 8.1.1

Release notes

Sourced from p-queue's releases.

v8.1.1

  • Don&#39;t count aborted jobs in intervalCount (#220) 199614e

sindresorhus/p-queue@v8.1.0...v8.1.1

Commits

Updates zod from 3.25.71 to 4.1.5

Release notes

Sourced from zod's releases.

v4.1.5

Commits:

  • 530415f927a8f7fa474c96b667efdad6e771ce4d Update docs
  • b7b081d5cfd6fc19aeb71f9dc1b07bb333c37f9d Update z.function() type to support array input (#5170)
  • 780cf57167cbf3902efab68f19fa21ca09cb9dd6 4.1.5

v4.1.4

Commits:

  • 3291c61fe4bc893901027ea5d50dfc6274e49caa fix(v4): toJSONSchema - wrong tuple with null output when targeting openapi-3.0 (#5156)
  • 23f41c7e0af107026bb1732af6b4c368d82be8d2 test(v4): toJSONSchema - use validateOpenAPI30Schema in all relevant scenarios (#5163)
  • 0a09fd21336202e50565a3e22baaab9a7047fcc9 Update installation instructions
  • 4ea5fec6988eb7260bc63e0eb8b4a6a0b238c414 4.1.4

v4.1.3

Commits:

  • 98ff675c313c15d3fa18b2bd01f844b1e817ee79 Drop stringToBoolean
  • a410616b39eedf3b4654c0c791b0ab1868996bfb Fix typo
  • 0cf45896edf8728b57c8e7f2b5a56536760afac1 fix(v4): toJSONSchema - add missing oneOf inside items in tuple conversion (#5146)
  • 8bf0c1639f0d3700f01fa8aaee2d8fa5d0abbe10 fix(v4): toJSONSchema tuple path handling for draft-7 with metadata IDs (#5152)
  • 5c5fa90e47df934acf6051a3ec30516baeef2eac fix(v4): toJSONSchema - wrong record output when targeting openapi-3.0 (#5141)
  • 87b97ccd556e6d8dc6b4f4455762cc7405b0abc9 docs(codecs): update example to use payloadSchema (#5150)
  • 309f3584fd9a3856c3e0c813196210ba4b11d2a9 fix(v4): toJSONSchema - output numbers with exclusive range correctly when targeting openapi-3.0 (#5139)
  • 1e71ca99b92b94aac8ca45694f28864ae1654135 docs: fix refine fn to encode works properly (#5148)
  • a85ec3c73c6a98a496f5dd3b6fb19ebe07e227f9 fix(docs): correct example to use LooseDog instead of Dog (#5136)
  • 3e982743f3abba6a421abb899670f70e49284af4 4.1.3

v4.1.2

Commits:

  • e45e61b675baf055f4a3ef2ddead21715a1e4fe3 Improve codec docs
  • 25a4c376834db90d3bb3e70d4154e3eb6d4feb7a fix(v4): toJSONSchema - wrong record tuple output when targeting openapi-3.0 (#5145)
  • 0fa4f464e0e679d71b183e8811ef1e4f30aaa06a Use method form in codecs.mdx
  • 940383d0523da41c4e2422b76455da39dddd6c4f Update JSON codec and docs
  • 3009fa8aeb90e00bfc35c7124f3e6f8cad11d290 4.1.2

v4.1.1

Commits:

  • 648eb43c23e31f7d69ef09baba46aef4e9493b13 Remove codecs from sidebare
  • 7e39a99a88a9b7f0c9c3d5fd40fbbab494365c9a Improve codec docs
  • e5085beb2653f1d05a14c07c79b6f3707daf09f6 Add images
  • 028b289a48f5589dca58b0b813a5a9f9e363a40b Add methods
  • 10cc9941daeb28b6be5be7327e034c3388d8e60b 4.1.1

v4.1.0

The first minor version since the introduction of Zod 4 back in May. This version contains a number of features that barely missed the cut for the 4.0 release. With Zod 4 stable and widely adopted, there's more time to resume feature development.

... (truncated)

Commits
  • 780cf57 4.1.5
  • b7b081d Update z.function() type to support array input (#5170)
  • 530415f Update docs
  • 4ea5fec 4.1.4
  • 0a09fd2 Update installation instructions
  • 23f41c7 test(v4): toJSONSchema - use validateOpenAPI30Schema in all relevant scenar...
  • 3291c61 fix(v4): toJSONSchema - wrong tuple with null output when targeting `openap...
  • 3e98274 4.1.3
  • a85ec3c fix(docs): correct example to use LooseDog instead of Dog (#5136)
  • 1e71ca9 docs: fix refine fn to encode works properly (#5148)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the production-dependencies group across 1 directory with 5 updates
0128d12 
Bumps the production-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.14.0` | `1.17.5` |
| [axios](https://github.com/axios/axios) | `1.10.0` | `1.11.0` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.2.2` |
| [p-queue](https://github.com/sindresorhus/p-queue) | `8.1.0` | `8.1.1` |
| [zod](https://github.com/colinhacks/zod) | `3.25.71` | `4.1.5` |



Updates `@modelcontextprotocol/sdk` from 1.14.0 to 1.17.5
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.14.0...1.17.5)

Updates `axios` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.10.0...v1.11.0)

Updates `dotenv` from 16.6.1 to 17.2.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.6.1...v17.2.2)

Updates `p-queue` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/sindresorhus/p-queue/releases)
- [Commits](sindresorhus/p-queue@v8.1.0...v8.1.1)

Updates `zod` from 3.25.71 to 4.1.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.71...v4.1.5)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.17.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: axios
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 17.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: p-queue
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.1.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 8, 2025
@dependabot
dependabot Bot requested a review from RF-D as a code owner September 8, 2025 09:59
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 8, 2025
@coderabbitai

coderabbitai Bot commented Sep 8, 2025

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@RF-D RF-D Awaiting requested review from RF-D RF-D is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants