chore(deps): consolidate pending dependency updates

.changeset/context7-dependency-updates.md

@@ -0,0 +1,6 @@
+---
+"ctx7": patch
+"@upstash/context7-mcp": patch
+---
+
+Update CLI prompt, terminal display, and browser launch dependencies. Update the MCP server JWT dependency.

.github/dependabot.yml

@@ -4,10 +4,6 @@ updates:
     directory: /
     schedule:
       interval: monthly
-  - package-ecosystem: bun
-    directory: /
-    schedule:
-      interval: monthly
   - package-ecosystem: docker
     directory: /
     schedule:

.github/workflows/canary-release.yml

@@ -21,9 +21,9 @@ jobs:
           ref: ${{ inputs.branch || github.ref }}
 
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
-          node-version: "20"
+          node-version: "22"
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4

.github/workflows/mcp-registry.yml

@@ -21,7 +21,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: lts/*
 

.github/workflows/release.yml

@@ -16,15 +16,15 @@ jobs:
       pull-requests: write
     outputs:
       published: ${{ steps.changesets.outputs.published }}
-      publishedPackages: ${{ steps.changesets.outputs.publishedPackages }}
+      published-packages: ${{ steps.changesets.outputs.published-packages }}
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v7
 
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
-          node-version: "20"
+          node-version: "22"
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
@@ -43,19 +43,18 @@ jobs:
 
       - name: Create Release PR or Publish
         id: changesets
-        uses: changesets/action@v1
+        uses: changesets/action@v2
         with:
-          publish: pnpm release
-          commit: "chore(release): version packages"
-          title: "chore(release): version packages"
+          publish-script: pnpm release
+          commit-message: "chore(release): version packages"
+          pr-title: "chore(release): version packages"
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
   publish-mcpb:
     name: Upload mcpb Bundle to GitHub Release
     needs: release
-    if: needs.release.outputs.published == 'true' && contains(needs.release.outputs.publishedPackages, '"@upstash/context7-mcp"')
+    if: needs.release.outputs.published == 'true' && contains(needs.release.outputs.published-packages, '"@upstash/context7-mcp"')
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -64,9 +63,9 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
-          node-version: "20"
+          node-version: "22"
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
@@ -111,7 +110,7 @@ jobs:
     needs: [release, publish-mcpb]
     # changesets pushes tags with GITHUB_TOKEN, which cannot trigger other
     # workflows — so the registry publish must chain off this job directly.
-    if: needs.release.outputs.published == 'true' && contains(needs.release.outputs.publishedPackages, '"@upstash/context7-mcp"')
+    if: needs.release.outputs.published == 'true' && contains(needs.release.outputs.published-packages, '"@upstash/context7-mcp"')
     permissions:
       id-token: write
       contents: read

.github/workflows/test.yml

@@ -30,9 +30,9 @@ jobs:
       - uses: actions/checkout@v7
 
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
-          node-version: "20"
+          node-version: "22"
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4

package.json

@@ -43,19 +43,19 @@
   },
   "homepage": "https://github.com/upstash/context7#readme",
   "devDependencies": {
-    "@changesets/cli": "^2.29.8",
-    "@types/node": "^25.0.3",
-    "@typescript-eslint/eslint-plugin": "^8.28.0",
-    "@typescript-eslint/parser": "^8.28.0",
-    "eslint": "^9.34.0",
+    "@changesets/cli": "^3.0.1",
+    "@types/node": "catalog:",
+    "@typescript-eslint/eslint-plugin": "catalog:",
+    "@typescript-eslint/parser": "catalog:",
+    "eslint": "catalog:",
     "eslint-config-prettier": "^10.1.1",
-    "eslint-plugin-prettier": "^5.5.6",
-    "prettier": "^3.6.2",
-    "typescript": "^5.8.2",
-    "typescript-eslint": "^8.28.0"
+    "eslint-plugin-prettier": "catalog:",
+    "prettier": "catalog:",
+    "typescript": "catalog:",
+    "typescript-eslint": "catalog:"
   },
   "dependencies": {
-    "@inquirer/core": "^11.1.1",
-    "@inquirer/type": "^4.0.3"
+    "@inquirer/core": "^12.0.1",
+    "@inquirer/type": "^4.0.7"
   }
 }

packages/cli/package.json

@@ -22,27 +22,27 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@inquirer/core": "^11.1.1",
+    "@inquirer/core": "^12.0.1",
     "@inquirer/prompts": "^8.2.0",
     "boxen": "^8.0.1",
     "commander": "^15.0.0",
-    "figlet": "^1.9.4",
-    "open": "^10.1.0",
-    "ora": "^9.4.0",
+    "figlet": "^1.11.4",
+    "open": "^11.0.2",
+    "ora": "^9.4.1",
     "picocolors": "^1.1.1"
   },
   "devDependencies": {
     "@types/figlet": "^1.7.0",
-    "@types/node": "^22.19.1",
-    "@typescript-eslint/eslint-plugin": "^8.28.0",
-    "@typescript-eslint/parser": "^8.28.0",
-    "eslint": "^9.34.0",
-    "eslint-plugin-prettier": "^5.5.6",
-    "prettier": "^3.6.2",
-    "tsup": "^8.5.0",
-    "typescript": "^5.8.2",
-    "typescript-eslint": "^8.28.0",
-    "vitest": "^4.1.9"
+    "@types/node": "catalog:",
+    "@typescript-eslint/eslint-plugin": "catalog:",
+    "@typescript-eslint/parser": "catalog:",
+    "eslint": "catalog:",
+    "eslint-plugin-prettier": "catalog:",
+    "prettier": "catalog:",
+    "tsup": "catalog:",
+    "typescript": "catalog:",
+    "typescript-eslint": "catalog:",
+    "vitest": "catalog:"
   },
   "keywords": [
     "context7",

packages/cli/tsup.config.ts

@@ -3,7 +3,10 @@ import { defineConfig } from "tsup";
 export default defineConfig({
   entry: ["src/index.ts"],
   format: ["esm"],
-  dts: true,
+  // tsup forces `baseUrl: compilerOptions.baseUrl || "."` into its dts worker,
+  // which TS 6 reports as TS5101. Scoping the suppression here keeps the
+  // regular typecheck honest. Drop once tsup stops injecting it.
+  dts: { compilerOptions: { ignoreDeprecations: "6.0" } },
   clean: true,
   sourcemap: true,
   banner: {

packages/mcp/package.json

@@ -51,16 +51,16 @@
     "@types/express": "^5.0.4",
     "commander": "^13.1.0",
     "express": "^5.1.0",
-    "jose": "^6.2.3",
+    "jose": "^6.2.10",
     "undici": "^7.0.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
     "@modelcontextprotocol/client": "2.0.0",
-    "@types/node": "^25.0.3",
+    "@types/node": "catalog:",
     "esbuild": "^0.28.2",
-    "typescript": "^5.8.2",
-    "vitest": "^4.1.9"
+    "typescript": "catalog:",
+    "vitest": "catalog:"
   },
   "engines": {
     "node": ">=20.18.1"

packages/pi/package.json

@@ -59,11 +59,11 @@
     "access": "public"
   },
   "devDependencies": {
-    "@earendil-works/pi-coding-agent": "^0.78.0",
-    "@types/node": "^25.9.1",
-    "dotenv": "^17.4.2",
-    "typebox": "^1.1.38",
-    "typescript": "^5.9.3",
-    "vitest": "^4.1.9"
+    "@earendil-works/pi-coding-agent": "^0.84.4",
+    "@types/node": "catalog:",
+    "dotenv": "catalog:",
+    "typebox": "^1.3.8",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
   }
 }

packages/pi/tsconfig.json

@@ -1,18 +1,5 @@
 {
-  "compilerOptions": {
-    "lib": ["ESNext"],
-    "module": "esnext",
-    "target": "esnext",
-    "moduleResolution": "bundler",
-    "moduleDetection": "force",
-    "allowImportingTsExtensions": true,
-    "noEmit": true,
-    "strict": true,
-    "skipLibCheck": true,
-    "allowSyntheticDefaultImports": true,
-    "forceConsistentCasingInFileNames": true,
-    "allowJs": true
-  },
+  "extends": "../../tsconfig.bundler.json",
   "include": [
     "extensions/**/*",
     "lib/**/*",

packages/sdk/package.json

@@ -48,10 +48,10 @@
     "access": "public"
   },
   "devDependencies": {
-    "@types/node": "^25.0.3",
-    "dotenv": "^17.4.2",
-    "tsup": "^8.5.1",
-    "typescript": "^5.8.2",
-    "vitest": "^4.1.9"
+    "@types/node": "catalog:",
+    "dotenv": "catalog:",
+    "tsup": "catalog:",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
   }
 }

packages/sdk/tsconfig.json

@@ -1,17 +1,6 @@
 {
+  "extends": "../../tsconfig.bundler.json",
   "compilerOptions": {
-    "lib": ["ESNext"],
-    "module": "esnext",
-    "target": "esnext",
-    "moduleResolution": "bundler",
-    "moduleDetection": "force",
-    "allowImportingTsExtensions": true,
-    "noEmit": true,
-    "strict": true,
-    "skipLibCheck": true,
-    "allowSyntheticDefaultImports": true,
-    "forceConsistentCasingInFileNames": true,
-    "allowJs": true,
     "paths": {
       "@error": ["./src/error/index.ts"],
       "@http": ["./src/http/index.ts"],

packages/sdk/tsup.config.ts

@@ -4,5 +4,8 @@ export default defineConfig({
   entry: ["./src/client.ts"],
   format: ["cjs", "esm"],
   clean: true,
-  dts: true,
+  // tsup forces `baseUrl: compilerOptions.baseUrl || "."` into its dts worker,
+  // which TS 6 reports as TS5101. Scoping the suppression here keeps the
+  // regular typecheck honest. Drop once tsup stops injecting it.
+  dts: { compilerOptions: { ignoreDeprecations: "6.0" } },
 });

packages/tools-ai-sdk/package.json

@@ -38,11 +38,11 @@
     "ai": "^6.0.5",
     "zod": "^4.4.3",
     "@ai-sdk/amazon-bedrock": "^4.0.9",
-    "@types/node": "^25.0.3",
-    "dotenv": "^17.4.2",
-    "tsup": "^8.5.1",
-    "typescript": "^5.8.2",
-    "vitest": "^4.1.9"
+    "@types/node": "catalog:",
+    "dotenv": "catalog:",
+    "tsup": "catalog:",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
   },
   "repository": {
     "type": "git",

packages/tools-ai-sdk/tsconfig.json

@@ -1,19 +1,6 @@
 {
+  "extends": "../../tsconfig.bundler.json",
   "compilerOptions": {
-    "lib": ["ESNext"],
-    "module": "esnext",
-    "target": "esnext",
-    "moduleResolution": "bundler",
-    "moduleDetection": "force",
-    "allowImportingTsExtensions": true,
-    "noEmit": true,
-    "strict": true,
-    "downlevelIteration": true,
-    "skipLibCheck": true,
-    "allowSyntheticDefaultImports": true,
-    "forceConsistentCasingInFileNames": true,
-    "allowJs": true,
-    "baseUrl": ".",
     "paths": {
       "@tools": ["./src/tools/index.ts"],
       "@agents": ["./src/agents/index.ts"],

packages/tools-ai-sdk/tsup.config.ts

@@ -7,7 +7,10 @@ export default defineConfig({
   },
   format: ["cjs", "esm"],
   clean: true,
-  dts: true,
+  // tsup forces `baseUrl: compilerOptions.baseUrl || "."` into its dts worker,
+  // which TS 6 reports as TS5101. Scoping the suppression here keeps the
+  // regular typecheck honest. Drop once tsup stops injecting it.
+  dts: { compilerOptions: { ignoreDeprecations: "6.0" } },
   esbuildOptions(options) {
     options.alias = {
       "@tools": "./src/tools/index.ts",