Skip to content

chore(deps): rolling dependency update - #8

Open
socket-pr-bot[bot] wants to merge 1 commit into
mainfrom
weekly-update
Open

chore(deps): rolling dependency update#8
socket-pr-bot[bot] wants to merge 1 commit into
mainfrom
weekly-update

Conversation

@socket-pr-bot

@socket-pr-bot socket-pr-bot Bot commented Sep 18, 2026 •
edited
Loading

Copy link
Copy Markdown

Rolling dependency update

One long-lived PR, rebuilt from main on every run so it stays
mergeable. Each run appends its dependency delta below, newest first.

2026-10-10 — run · 7 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.288
@modelcontextprotocol/client 2.2.0 2.3.0
portless 0.15.6 0.15.7
shell-quote 1.11.0 1.12.0
typescript 7.1.0-dev.20261001.1 7.1.0-dev.20261003.1
vite 8.3.1 8.3.2
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-10-07 — run · 24 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.285
@mdn/browser-compat-data 8.1.2 8.1.3
@modelcontextprotocol/client 2.0.0 2.2.0
@types/node 26.6.1 26.6.3
@vitest/coverage-v8 5.0.1 5.0.2
@vitest/ui 5.0.1 5.0.2
ast-v8-to-istanbul 1.0.6 1.0.7
ata-validator 1.27.1 1.39.1
chrome-devtools-mcp 1.9.0 1.10.1
fallow 3.27.0 3.30.0
fast-check 4.10.1 4.10.2
magic-string 1.4.1 1.4.2
markdownlint-cli2 0.23.2 0.23.3
mdast-util-to-markdown 2.1.2 2.1.3
micromark 4.0.2 4.0.3
regjsparser 0.13.2 0.13.3
sharp 0.35.4 0.35.5
shell-quote 1.10.0 1.11.0
taze 21.1.0 21.3.0
typebox 1.3.33 1.3.34
typescript 7.1.0-dev.20260917.1 7.1.0-dev.20260930.4
vite 8.3.0 8.3.1
vitest 5.0.1 5.0.2
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-10-06 — run · 24 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.284
@mdn/browser-compat-data 8.1.2 8.1.3
@modelcontextprotocol/client 2.0.0 2.2.0
@types/node 26.6.1 26.6.3
@vitest/coverage-v8 5.0.1 5.0.2
@vitest/ui 5.0.1 5.0.2
ast-v8-to-istanbul 1.0.6 1.0.7
ata-validator 1.27.1 1.38.0
chrome-devtools-mcp 1.9.0 1.10.1
fallow 3.27.0 3.30.0
fast-check 4.10.1 4.10.2
magic-string 1.4.1 1.4.2
markdownlint-cli2 0.23.2 0.23.3
mdast-util-to-markdown 2.1.2 2.1.3
micromark 4.0.2 4.0.3
regjsparser 0.13.2 0.13.3
sharp 0.35.4 0.35.5
shell-quote 1.10.0 1.11.0
taze 21.1.0 21.2.0
typebox 1.3.33 1.3.34
typescript 7.1.0-dev.20260917.1 7.1.0-dev.20260928.1
vite 8.3.0 8.3.1
vitest 5.0.1 5.0.2
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-10-05 — run · 23 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.283
@mdn/browser-compat-data 8.1.2 8.1.3
@modelcontextprotocol/client 2.0.0 2.1.0
@types/node 26.6.1 26.6.3
@vitest/coverage-v8 5.0.1 5.0.2
@vitest/ui 5.0.1 5.0.2
ast-v8-to-istanbul 1.0.6 1.0.7
ata-validator 1.27.1 1.32.3
chrome-devtools-mcp 1.9.0 1.10.1
fallow 3.27.0 3.30.0
fast-check 4.10.1 4.10.2
magic-string 1.4.1 1.4.2
markdownlint-cli2 0.23.2 0.23.3
mdast-util-to-markdown 2.1.2 2.1.3
micromark 4.0.2 4.0.3
regjsparser 0.13.2 0.13.3
sharp 0.35.4 0.35.5
taze 21.1.0 21.2.0
typebox 1.3.33 1.3.34
typescript 7.1.0-dev.20260917.1 7.1.0-dev.20260928.1
vite 8.3.0 8.3.1
vitest 5.0.1 5.0.2
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-10-02 — run · 16 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.282
@mdn/browser-compat-data 8.1.2 8.1.3
@modelcontextprotocol/client 2.0.0 2.1.0
@types/node 26.6.1 26.6.2
ast-v8-to-istanbul 1.0.6 1.0.7
ata-validator 1.27.1 1.30.3
chrome-devtools-mcp 1.9.0 1.10.1
fallow 3.27.0 3.28.0
fast-check 4.10.1 4.10.2
magic-string 1.4.1 1.4.2
markdownlint-cli2 0.23.2 0.23.3
regjsparser 0.13.2 0.13.3
typebox 1.3.33 1.3.34
typescript 7.1.0-dev.20260917.1 7.1.0-dev.20260924.1
vite 8.3.0 8.3.1
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-10-01 — run · 14 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.281
@modelcontextprotocol/client 2.0.0 2.1.0
@types/node 26.6.1 26.6.2
ast-v8-to-istanbul 1.0.6 1.0.7
ata-validator 1.27.1 1.29.0
chrome-devtools-mcp 1.9.0 1.10.1
fallow 3.27.0 3.28.0
fast-check 4.10.1 4.10.2
magic-string 1.4.1 1.4.2
markdownlint-cli2 0.23.2 0.23.3
regjsparser 0.13.2 0.13.3
typebox 1.3.33 1.3.34
typescript 7.1.0-dev.20260917.1 7.1.0-dev.20260924.1
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-09-29 — run · 10 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.278
@types/node 26.6.1 26.6.2
ast-v8-to-istanbul 1.0.6 1.0.7
fallow 3.27.0 3.28.0
fast-check 4.10.1 4.10.2
markdownlint-cli2 0.23.2 0.23.3
regjsparser 0.13.2 0.13.3
typebox 1.3.33 1.3.34
typescript 7.1.0-dev.20260917.1 7.1.0-dev.20260921.1
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-09-28 — run · 8 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.278
@types/node 26.6.1 26.6.2
fast-check 4.10.1 4.10.2
markdownlint-cli2 0.23.2 0.23.3
regjsparser 0.13.2 0.13.3
typebox 1.3.33 1.3.34
typescript 7.1.0-dev.20260917.1 7.1.0-dev.20260921.1
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-09-27 — run · 8 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.278
@types/node 26.6.1 26.6.2
fast-check 4.10.1 4.10.2
markdownlint-cli2 0.23.2 0.23.3
regjsparser 0.13.2 0.13.3
typebox 1.3.33 1.3.34
typescript 7.1.0-dev.20260917.1 7.1.0-dev.20260920.1
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-09-25 — run · 2 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.276
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-09-24 — run · 7 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.274
@socketregistry/packageurl-js-stable npm:@socketregistry/packageurl-js@1.5.2 npm:@socketregistry/packageurl-js@1.5.3
@socketsecurity/sdk-stable npm:@socketsecurity/sdk@4.1.4 npm:@socketsecurity/sdk@4.1.5
rolldown-plugin-dts 0.28.4 0.28.6
typebox 1.3.31 1.3.33
vite 8.2.2 8.3.0
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-09-21 — run · 5 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.270
fast-check 4.9.0 4.10.0
rolldown-plugin-dts 0.28.4 0.28.5
vite 8.2.2 8.3.0
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-09-20 — run · 5 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.270
fast-check 4.9.0 4.10.0
rolldown-plugin-dts 0.28.4 0.28.5
vite 8.2.2 8.3.0
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-09-19 — run · 5 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.269
fast-check 4.9.0 4.10.0
rolldown-plugin-dts 0.28.4 0.28.5
vite 8.2.2 8.3.0
yaml 2.9.0 2.9.1
commits
  • chore(deps): apply weekly update fixes
2026-09-18 — run · 4 updated
package from to
@anthropic-ai/claude-code 2.1.220 2.1.268
fast-check 4.9.0 4.10.0
rolldown-plugin-dts 0.28.4 0.28.5
vite 8.2.2 8.3.0
commits
  • chore(deps): apply weekly update fixes

Note

Low Risk
Tooling and lockfile-only changes with semver-minor bumps; no application runtime or security-sensitive logic is modified.

Overview
This rolling dependency update bumps the fleet Node pin to 26.8.2 and refreshes the pnpm lockfile (including pinning the workspace pnpm binary to 12.4.1).

Catalog / direct bumps in pnpm-workspace.yaml: @anthropic-ai/claude-code (2.1.220 → 2.1.268), vite (8.2.2 → 8.3.0), fast-check (4.9.0 → 4.10.0), and rolldown-plugin-dts (0.28.4 → 0.28.5). The lockfile also picks up aligned override and transitive updates (e.g. magic-string 1.3.1, sharp 0.35.4, protobufjs 7.6.6, picomatch 4.0.7, content-type 2.1.0).

package.json devEngines now declares both npm and pnpm as allowed package managers (each with onFail: "error"), instead of only pnpm.

Reviewed by Cursor Bugbot for commit 7622c01. Configure here.

@socket-pr-bot socket-pr-bot Bot added automation Automated maintenance dependencies Dependency updates labels Sep 18, 2026
@socket-pr-bot
socket-pr-bot Bot force-pushed the weekly-update branch 6 times, most recently from 43e249b to 659f62e Compare September 25, 2026 08:25
@socket-security

socket-security Bot commented Sep 27, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​@​modelcontextprotocol/​client@​2.2.0 ⏵ 2.3.093 +110084 +196 +1100
Updatednpm/​typescript@​7.1.0-dev.20261001.1 ⏵ 7.1.0-dev.20261003.1100 +110089 +110090
Updatednpm/​shell-quote@​1.11.0 ⏵ 1.12.0100 +110010092100
Updatednpm/​portless@​0.15.6 ⏵ 0.15.799 +2100100 +195 -1100

View full report

@socket-security-staging

socket-security-staging Bot commented Sep 27, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​@​modelcontextprotocol/​client@​2.2.0 ⏵ 2.3.093 +110084 +197100
Updatednpm/​typescript@​7.1.0-dev.20261001.1 ⏵ 7.1.0-dev.20261003.1100 +110089 +1100100
Updatednpm/​shell-quote@​1.11.0 ⏵ 1.12.0100 +110010092100
Updatednpm/​portless@​0.15.6 ⏵ 0.15.799 +2100100 +194 -1100

View full report

@socket-pr-bot
socket-pr-bot Bot force-pushed the weekly-update branch 5 times, most recently from 337c34d to ab69fd4 Compare October 2, 2026 08:25
@socket-pr-bot
socket-pr-bot Bot force-pushed the weekly-update branch 4 times, most recently from bbfa1d0 to 6c92fec Compare October 7, 2026 08:31

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

automation Automated maintenance dependencies Dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants