Repository navigation
chore(deps): Bump the minor-and-patch group across 1 directory with 7 updates - #32
dependabot[bot] wants to merge 1 commit into
Conversation
… updates Bumps the minor-and-patch group with 7 updates in the /source directory: | Package | From | To | | --- | --- | --- | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.31.0` | `1.32.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `5.4.2` | `5.4.3` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.49.0` | `1.55.0` | | [next](https://github.com/vercel/next.js) | `16.3.8` | `16.4.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.19` | `22.20.5` | | [globals](https://github.com/sindresorhus/globals) | `17.12.0` | `17.13.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.0` | `8.71.1` | Updates `@modelcontextprotocol/sdk` from 1.31.0 to 1.32.1 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.31.0...1.32.1) Updates `js-yaml` from 5.4.2 to 5.4.3 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.4.2...5.4.3) Updates `lucide-react` from 1.49.0 to 1.55.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.55.0/packages/lucide-react) Updates `next` from 16.3.8 to 16.4.0 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.8...v16.4.0) Updates `@types/node` from 22.19.19 to 22.20.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `globals` from 17.12.0 to 17.13.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.12.0...v17.13.0) Updates `typescript-eslint` from 8.71.0 to 8.71.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.32.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: js-yaml dependency-version: 5.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: next dependency-version: 16.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 22.20.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: globals dependency-version: 17.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.71.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
dependabot
Bot
added
the
dependencies
ECC Tools / Security EvidenceCommit: Security evidence gate passed (success) No security-sensitive scanner-evidence gap detected. Mode: enforce Scanned 2 changed file(s). No missing scanner-evidence signal was detected. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / PR Risk TaxonomyCommit: PR taxonomy review recommended (neutral) Detected 2 PR taxonomy bucket(s): Install Manifest Integrity, CI/CD Recommendation. Scanned 2 changed file(s). Roadmap taxonomy buckets: Install Manifest IntegrityInstall manifests, plugin metadata, and shipped skills should stay synchronized with user-facing setup guidance. Signals:
Paths:
CI/CD RecommendationCI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work. Signals:
Paths:
Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / Reference Set ReadinessCommit: Reference set readiness gaps detected (neutral) Reference evidence present for 0/7 areas (0%) across 2 changed file(s). This check is based on files changed in this PR. Repository-level readiness is still reported by
Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
ECC Tools / Hosted Promotion ReadinessCommit: Hosted promotion readiness passed (success) No hosted promotion evidence gaps detected across 2 changed file(s); 0 corpus scenarios had matching evidence. This check compares PR file changes against the evaluator/RAG promotion corpus in No evaluator corpus scenarios matched this PR. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
![graphify-labs[bot]](https://avatars.githubusercontent.com/in/4356270?s=60&v=4){kind=small}
There was a problem hiding this comment.
Graphify reviewed this change.
Code graph out of date: Health delta baseline was built by an older engine whose node ids do not match this review's — delta is approximate. Impact and hotspot numbers below may be wrong.
No verdict: the code graph is out of date. Static checks found no blocking issues, but they compared against an outdated graph. The next push after the repository re-indexes gets a full review.
Not checked: tests were not run; no formal proof of the changed code.
Graphify review — findings
Bumps runtime dependencies to next 16.4.0 (with matching SWC binaries, now tagged with libc so npm installs only the glibc or musl build the host needs), @modelcontextprotocol/sdk 1.32.1, lucide-react 1.55.0 and js-yaml 5.4.3. On the dev side, typescript-eslint moves to 8.71.1, globals to 17.13.0 and @types/node to 22.20.5.
No blocking issues surfaced. 1 lower-confidence candidate did not survive cross-model review.
Analysis details — impact, health, verification
Impact & health
Graphify review
Impact — 78 functions depend on the 78 functions this change touches.
Health — grade A; no new coupling hotspots.
Verification — 78 functions in the blast radius were not formally verified this run (proofs are advisory here).
Health delta baseline was built by an older engine whose node ids do not match this review's — delta is approximate.
Gate & verification
graphify gate
PASS — objectively clean (no health regressions, tests not run — proofs not run this pass (advisory)). Grounded, not self-assessed.
Advisory (not blocking):
- verification_scope: 78 function(s) in the blast radius were not formally verified this run
Bumps the minor-and-patch group with 7 updates in the /source directory:
1.31.01.32.15.4.25.4.31.49.01.55.016.3.816.4.022.19.1922.20.517.12.017.13.08.71.08.71.1Updates
@modelcontextprotocol/sdkfrom 1.31.0 to 1.32.1Release notes
Sourced from @modelcontextprotocol/sdk's releases.
Commits
ff07b00chore: bump version to 1.32.1 (#2954)8a74d50[v1.x] docs: point the README at v2 and say what v1.x supports (#2942)a8cf503[v1.x] docs: state the principles in CLAUDE.md (#2939)32549b0chore: bump version to 1.32.0 (#2935)588d51d[v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)5a0724d[v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)0ca0b62[v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...fd26801[v1.x] feat(server): add maxToolInputElements option to limit the number of e...727075b[v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...0ff6377[v1.x] examples: close idle sessions and cap the session map (#2914)Updates
js-yamlfrom 5.4.2 to 5.4.3Changelog
Sourced from js-yaml's changelog.
Commits
78326245.4.3 released0cbb471Fix whitespace-only block scalar followed by a less indented line, close #80230108ccParse the first block mapping key once (#800)Updates
lucide-reactfrom 1.49.0 to 1.55.0Release notes
Sourced from lucide-react's releases.
... (truncated)
Commits
949bc6dtest(lucide-react): add tests for DynamicIcon fallback and ref forwarding (#4...98331e2chore(deps): bump the react-deps group across 1 directory with 3 updates (#4951)09aa9c5chore(deps): Upgrade to vite 8 (#4950)Updates
nextfrom 16.3.8 to 16.4.0Release notes
Sourced from next's releases.
... (truncated)
Commits
e273d5bv16.4.0fdf41d6[ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...c3e76adv16.4.0-canary.6347c6cc8Document next analyze export in the package bundling guide (#99735)5b10604Revert stabilization offorbidden()andunauthorized()(#99734)f3a6f97Preserve configured output directories during static export (#99507)b22e5a2Rename skill to next-bundle-optimizer and document its usage (#99731)74dc549[turbo-tasks-backend] Clean up task state before publishing execution complet...ccf8c15v16.4.0-canary.62b8c7c7fImprove static route error guidance (#99724)Updates
@types/nodefrom 22.19.19 to 22.20.5Commits
Updates
globalsfrom 17.12.0 to 17.13.0Release notes
Sourced from globals's releases.
Commits
ce512bc17.13.0b007369Update globals (2026-10-01) (#354)16cb1feMeta tweaksUpdates
typescript-eslintfrom 8.71.0 to 8.71.1Release notes
Sourced from typescript-eslint's releases.
Changelog
Sourced from typescript-eslint's changelog.
Commits
d57b8dachore(release): publish 8.71.1Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions