Skip to content

chore(deps): batch dependabot updates (9 safe + 1 type-compat fix) #175

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tomber merged 21 commits into from
May 5, 2026
Merged

chore(deps): batch dependabot updates (9 safe + 1 type-compat fix) #175

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
21 commits
Select commit Hold shift + click to select a range
1f1e6b3
chore(deps): bump dotenv from 17.4.1 to 17.4.2
dependabot[bot] Apr 30, 2026
dde3144
chore(deps): bump @modelcontextprotocol/ext-apps from 1.5.0 to 1.7.1
dependabot[bot] Apr 30, 2026
4bb8ba0
chore(deps): bump react-dom from 19.2.4 to 19.2.5
dependabot[bot] Apr 30, 2026
bea9071
chore(deps): bump react from 19.2.4 to 19.2.5
dependabot[bot] Apr 30, 2026
462a081
chore(deps): bump @supabase/supabase-js from 2.102.1 to 2.105.1
dependabot[bot] Apr 30, 2026
a844c45
chore(deps): bump inquirer from 13.4.0 to 13.4.2
dependabot[bot] Apr 30, 2026
16ccbeb
chore(deps): bump next from 16.2.2 to 16.2.4
dependabot[bot] Apr 30, 2026
f343995
ci(deps): bump actions/create-github-app-token from 2 to 3
dependabot[bot] May 2, 2026
85ff171
ci(deps): bump pnpm/action-setup from 4 to 6
dependabot[bot] May 2, 2026
f342e3d
Merge remote-tracking branch 'origin/dependabot/github_actions/dev/pn…
tomber May 5, 2026
09931dc
Merge remote-tracking branch 'origin/dependabot/github_actions/dev/ac…
tomber May 5, 2026
3bf0eff
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/dev/supa…
tomber May 5, 2026
af07e2c
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/dev/next…
tomber May 5, 2026
c368b9e
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/dev/inqu…
tomber May 5, 2026
3844af1
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/dev/mode…
tomber May 5, 2026
48c32e0
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/dev/reac…
tomber May 5, 2026
ff61dc7
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/dev/dote…
tomber May 5, 2026
7965e7c
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/dev/reac…
tomber May 5, 2026
b85e3f0
chore(deps): regenerate lockfile after dependabot batch merge
tomber May 5, 2026
da9766f
fix(react): relax event listener type for ext-apps 1.7+ compat (cherr…
tomber May 5, 2026
616bbea
chore(deps): patch missed bumps after batch merge -X theirs
tomber May 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ jobs:
node-version: '20'

- name: Setup pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@v6
with:
version: 9.6.0

Expand Down Expand Up @@ -88,7 +88,7 @@ jobs:
node-version: '20'

- name: Setup pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@v6
with:
version: 9.6.0

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/publish-preview.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ jobs:
registry-url: 'https://registry.npmjs.org'

- name: Setup pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@v6
with:
version: 9.6.0

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ jobs:
# restriction, which only governs the default `GITHUB_TOKEN`.
- name: Generate release-bot token
id: app-token
uses: actions/create-github-app-token@v2
uses: actions/create-github-app-token@v3

@cursor cursor Bot May 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Deprecated app-id input used with create-github-app-token@v3

Low Severity

The bump from actions/create-github-app-token@v2 to @v3 means the workflow now resolves to v3.1.0+, which deprecated the app-id input in favor of client-id. While app-id still works as a fallback today, it may be removed in a future v3.x release, potentially breaking the publish workflow without warning.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 616bbea. Configure here.

with:
app-id: ${{ secrets.RELEASE_APP_ID }}
private-key: ${{ secrets.RELEASE_APP_KEY }}
Expand All @@ -69,7 +69,7 @@ jobs:
registry-url: 'https://registry.npmjs.org'

- name: Setup pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@v6
with:
version: 9.6.0

Expand Down
8 changes: 4 additions & 4 deletions examples/checkout-demo/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,11 +16,11 @@
"@solvapay/react-supabase": "workspace:*",
"@solvapay/server": "workspace:*",
"@stripe/react-stripe-js": "^6.0.0",
"@supabase/supabase-js": "^2.100.1",
"@supabase/supabase-js": "^2.105.1",
"jose": "^6.2.2",
"next": "^16.2.1",
"react": "^19.2.4",
"react-dom": "^19.2.4"
"next": "^16.2.4",
"react": "^19.2.5",
"react-dom": "^19.2.5"
},
"devDependencies": {
"@tailwindcss/postcss": "^4.2.2",
Expand Down
6 changes: 3 additions & 3 deletions examples/cloudflare-workers-mcp/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
},
"devDependencies": {
"@cloudflare/workers-types": "^4.20251124.0",
"@modelcontextprotocol/ext-apps": "^1.5.0",
"@modelcontextprotocol/ext-apps": "^1.7.1",
"@modelcontextprotocol/sdk": "^1.29.0",
"@solvapay/mcp": "workspace:*",
"@solvapay/mcp-core": "workspace:*",
Expand All @@ -23,8 +23,8 @@
"@types/react-dom": "^19.2.3",
"@vitejs/plugin-react": "^6.0.1",
"cross-env": "^10.1.0",
"react": "^19.2.4",
"react-dom": "^19.2.4",
"react": "^19.2.5",
"react-dom": "^19.2.5",
"typescript": "^5.9.2",
"vite": "^8.0.6",
"vite-plugin-singlefile": "^2.3.2",
Expand Down
2 changes: 1 addition & 1 deletion examples/express-basic/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
"@solvapay/core": "workspace:*",
"@solvapay/demo-services": "workspace:*",
"@solvapay/server": "workspace:*",
"dotenv": "^17.4.1",
"dotenv": "^17.4.2",
"express": "^5.2.1"
},
"devDependencies": {
Expand Down
8 changes: 4 additions & 4 deletions examples/hosted-checkout-demo/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,11 +16,11 @@
"@solvapay/react-supabase": "workspace:*",
"@solvapay/server": "workspace:*",
"@stripe/react-stripe-js": "^6.0.0",
"@supabase/supabase-js": "^2.100.1",
"@supabase/supabase-js": "^2.105.1",
"jose": "^6.2.2",
"next": "^16.2.1",
"react": "^19.2.4",
"react-dom": "^19.2.4"
"next": "^16.2.4",
"react": "^19.2.5",
"react-dom": "^19.2.5"
},
"devDependencies": {
"@tailwindcss/postcss": "^4.2.2",
Expand Down
8 changes: 4 additions & 4 deletions examples/mcp-checkout-app/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,18 +8,18 @@
"dev": "concurrently \"cross-env INPUT=mcp-app.html vite build --watch\" \"nodemon --watch src --watch .env --watch dist/mcp-app.html --watch ../../packages/core/src --watch ../../packages/server/src --watch ../../packages/mcp-core/src --watch ../../packages/mcp/src --ext ts,tsx,css,html,env --exec \\\"tsx src/index.ts\\\"\""
},
"dependencies": {
"@modelcontextprotocol/ext-apps": "^1.5.0",
"@modelcontextprotocol/ext-apps": "^1.7.1",
"@modelcontextprotocol/sdk": "^1.29.0",
"@solvapay/core": "workspace:*",
"@solvapay/mcp": "workspace:*",
"@solvapay/mcp-core": "workspace:*",
"@solvapay/react": "workspace:*",
"@solvapay/server": "workspace:*",
"@stripe/stripe-js": "^9.0.0",
"dotenv": "^17.4.1",
"dotenv": "^17.4.2",
"express": "^5.2.1",
"react": "^19.2.4",
"react-dom": "^19.2.4",
"react": "^19.2.5",
"react-dom": "^19.2.5",
"zod": "^4.3.6"
},
"devDependencies": {
Expand Down
2 changes: 1 addition & 1 deletion examples/mcp-oauth-bridge/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
"@solvapay/demo-services": "workspace:*",
"@solvapay/mcp": "workspace:*",
"@solvapay/server": "workspace:*",
"dotenv": "^17.4.1",
"dotenv": "^17.4.2",
"express": "^5.2.1",
"zod": "^4.1.11"
},
Expand Down
4 changes: 2 additions & 2 deletions examples/mcp-time-app/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,13 +8,13 @@
"dev": "concurrently \"cross-env INPUT=mcp-app.html vite build --watch\" \"nodemon --watch src --watch dist/mcp-app.html --watch ../../packages/server/dist --watch ../../packages/core/dist --ext ts,css,html --exec \\\"tsx src/index.ts\\\"\""
},
"dependencies": {
"@modelcontextprotocol/ext-apps": "^1.5.0",
"@modelcontextprotocol/ext-apps": "^1.7.1",
"@modelcontextprotocol/sdk": "^1.29.0",
"@solvapay/core": "workspace:*",
"@solvapay/mcp": "workspace:*",
"@solvapay/mcp-core": "workspace:*",
"@solvapay/server": "workspace:*",
"dotenv": "^17.4.1",
"dotenv": "^17.4.2",
"express": "^5.2.1",
"zod": "^4.3.6"
},
Expand Down
6 changes: 3 additions & 3 deletions examples/shadcn-checkout/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,9 +24,9 @@
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"lucide-react": "^0.469.0",
"next": "^16.2.1",
"react": "^19.2.4",
"react-dom": "^19.2.4",
"next": "^16.2.4",
"react": "^19.2.5",
"react-dom": "^19.2.5",
"tailwind-merge": "^2.6.0"
},
"devDependencies": {
Expand Down
2 changes: 1 addition & 1 deletion examples/shared/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,6 @@
"devDependencies": {
"@solvapay/next": "workspace:*",
"@solvapay/server": "workspace:*",
"next": "*"
"next": "^16.2.4"
}
}
6 changes: 3 additions & 3 deletions examples/supabase-edge-mcp/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
"serve:local": "supabase functions serve mcp --import-map=supabase/functions/mcp/deno.local.json"
},
"devDependencies": {
"@modelcontextprotocol/ext-apps": "^1.5.0",
"@modelcontextprotocol/ext-apps": "^1.7.1",
"@solvapay/mcp": "workspace:*",
"@solvapay/mcp-core": "workspace:*",
"@solvapay/react": "workspace:*",
Expand All @@ -21,8 +21,8 @@
"@types/react-dom": "^19.2.3",
"@vitejs/plugin-react": "^6.0.1",
"cross-env": "^10.1.0",
"react": "^19.2.4",
"react-dom": "^19.2.4",
"react": "^19.2.5",
"react-dom": "^19.2.5",
"vite": "^8.0.6",
"vite-plugin-singlefile": "^2.3.2",
"zod": "^4.3.6"
Expand Down
6 changes: 3 additions & 3 deletions examples/tailwind-checkout/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,9 +18,9 @@
"@solvapay/server": "workspace:*",
"@stripe/react-stripe-js": "^6.0.0",
"@stripe/stripe-js": "^9.0.0",
"next": "^16.2.1",
"react": "^19.2.4",
"react-dom": "^19.2.4"
"next": "^16.2.4",
"react": "^19.2.5",
"react-dom": "^19.2.5"
},
"devDependencies": {
"@tailwindcss/postcss": "^4.2.2",
Expand Down
2 changes: 1 addition & 1 deletion packages/cli/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@
"commander": "^14.0.3",
"detect-package-manager": "^3.0.2",
"fs-extra": "^11.3.4",
"inquirer": "^13.3.2",
"inquirer": "^13.4.2",
"open": "^11.0.0",
"ora": "^9.3.0"
},
Expand Down
4 changes: 2 additions & 2 deletions packages/mcp/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@
"lint:fix": "eslint src --fix"
},
"peerDependencies": {
"@modelcontextprotocol/ext-apps": "^1.5.0",
"@modelcontextprotocol/ext-apps": "^1.7.1",
"@modelcontextprotocol/sdk": "^1.28.0",
"@solvapay/mcp-core": "workspace:*",
"@solvapay/server": "workspace:^",
Expand All @@ -61,7 +61,7 @@
}
},
"devDependencies": {
"@modelcontextprotocol/ext-apps": "^1.5.0",
"@modelcontextprotocol/ext-apps": "^1.7.1",
"@modelcontextprotocol/sdk": "^1.29.0",
"@solvapay/mcp-core": "workspace:*",
"@solvapay/server": "workspace:*",
Expand Down
2 changes: 1 addition & 1 deletion packages/next/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@
},
"devDependencies": {
"@solvapay/test-utils": "workspace:*",
"next": "^16.2.1",
"next": "^16.2.4",
"tsup": "^8.5.1",
"typescript": "^5.9.3",
"vitest": "^4.1.2"
Expand Down
4 changes: 2 additions & 2 deletions packages/react/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -88,8 +88,8 @@
"@vitejs/plugin-react": "^6.0.1",
"@vitest/coverage-v8": "^4.1.2",
"jsdom": "^29.0.1",
"react": "^19.2.4",
"react-dom": "^19.2.4",
"react": "^19.2.5",
"react-dom": "^19.2.5",
"typescript": "^5.9.3",
"vitest": "^4.1.2"
}
Expand Down
4 changes: 2 additions & 2 deletions packages/react/src/mcp/McpApp.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,9 +83,9 @@
* back to the legacy `ontoolresult` setter.
*/
// eslint-disable-next-line @typescript-eslint/no-explicit-any
addEventListener?: (evt: string, handler: (params: any) => void) => void
addEventListener?: (evt: any, handler: (params: any) => void) => void
// eslint-disable-next-line @typescript-eslint/no-explicit-any
removeEventListener?: (evt: string, handler: (params: any) => void) => void
removeEventListener?: (evt: any, handler: (params: any) => void) => void
// eslint-disable-next-line @typescript-eslint/no-explicit-any
ontoolresult?: any
/**
Expand Down Expand Up @@ -285,7 +285,7 @@
// the intent-tool fetch path is the one that decides mount
// outcomes.
if (typeof console !== 'undefined') {
console.debug('[solvapay] non-bootstrap tool-result notification:', err)

Check warning on line 288 in packages/react/src/mcp/McpApp.tsx

View workflow job for this annotation

GitHub Actions / Lint, Build & Test 

Unexpected console statement. Only these console methods are allowed: warn, error

Check warning on line 288 in packages/react/src/mcp/McpApp.tsx

View workflow job for this annotation

GitHub Actions / Lint, Build & Test 

Unexpected console statement. Only these console methods are allowed: warn, error

Check warning on line 288 in packages/react/src/mcp/McpApp.tsx

View workflow job for this annotation

GitHub Actions / Lint, Build & Test 

Unexpected console statement. Only these console methods are allowed: warn, error

Check warning on line 288 in packages/react/src/mcp/McpApp.tsx

View workflow job for this annotation

GitHub Actions / Documentation Validation 

Unexpected console statement. Only these console methods are allowed: warn, error
}
}
}
Expand Down
2 changes: 1 addition & 1 deletion packages/server/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,7 @@
"@solvapay/auth": "workspace:*",
"@solvapay/demo-services": "workspace:*",
"@solvapay/test-utils": "workspace:^",
"dotenv": "^17.3.1",
"dotenv": "^17.4.2",
"openapi-typescript": "^7.13.0",
"stripe": "^21.0.1",
"tsup": "^8.5.1",
Expand Down
Loading
Loading