deps(deps): bump the minor-and-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #95 · VibeTensor/vibemcp

dependabot · 2026-08-17T03:35:46Z

Bumps the minor-and-patch group with 6 updates in the / directory:

Package	From	To
@azure/msal-node	`5.2.2`	`5.5.0`
dotenv	`17.3.1`	`17.4.2`
open	`11.0.0`	`11.0.1`
mermaid	`11.15.0`	`11.16.1`
prettier	`3.8.1`	`3.9.6`
tsx	`4.21.0`	`4.23.12`

Updates @azure/msal-node from 5.2.2 to 5.5.0

Release notes

Sourced from @azure/msal-node's releases.

@azure/msal-react v5.5.0

5.5.0

Tue, 23 Jun 2026 22:19:30 GMT

Minor changes

Match the updated msal-browser AuthError signature #8609 (sameera.gajjarapu@microsoft.com)

Bump @azure/msal-browser to v5.15.0 (beachball)

@azure/msal-node v5.5.0

5.5.0

Tue, 04 Aug 2026 20:17:38 GMT

Minor changes

Add claimsFromClient request parameter to forward client-originated claims to IDP #8686 (rginsburg@microsoft.com)

Bump @azure/msal-common to v16.12.0 (beachball)

Patches

Add attribute-tokens support #8700 (spingale@microsoft.com)

Use length-prefix encoding for the additional cache key hash to prevent credential cache-key collisions #8713 (nichoudhary@microsoft.com)

@azure/msal-react v5.4.5

5.4.5

Tue, 16 Jun 2026 19:46:35 GMT

Patches

Bump @azure/msal-browser to v5.14.0 (beachball)

@azure/msal-react v5.4.4

5.4.4

Wed, 10 Jun 2026 22:41:34 GMT

Patches

Bump @azure/msal-browser to v5.13.0 (beachball)

@azure/msal-react v5.4.3

5.4.3

Fri, 05 Jun 2026 22:24:23 GMT

Patches

... (truncated)

Commits

5c53ac6 feat: add AttributeToken request and cache partition support (#8700)
7d10e6c [NAA/PWB One Bridge] PR 1/6: webBrokerBridge scaffold — shared interfaces, e...
529fdd3 fix(msal-node): use length-prefix encoding for additional cache key hash to p...
006de72 Add clientClaims request parameter for confidential client (#8686)
2796e9b Bump uuid from 8.3.2 to 14.0.0 (#8575)
45ac206 Bump immutable from 5.1.7 to 5.1.9 (#8718)
8c1ec2d Bump webpack-dev-server from 5.2.3 to 5.2.6 (#8716)
cd19b1a Bump postcss from 8.5.15 to 8.5.18 (#8730)
86bd093 test(e2e): shared brokering e2e helpers + real KMSI assertion (Foundation PR ...
a6a32af Post-release PR (#8734)
Additional commits viewable in compare view

Updates dotenv from 17.3.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

Tighten up logs: ◇ injecting env (14) from .env (#1003)

Commits

f116f70 17.4.2
3a81612 fix visual order of faq
13f55a8 Merge branch 'skill'
4bbbf73 reorganize faq
c3da64b Merge pull request #1009 from motdotla/skill
6f743b1 update source
fc2c624 update skill
972315b Tighten up skill
2795fce reorganize faq
d5495d4 adjust skill
Additional commits viewable in compare view

Updates open from 11.0.0 to 11.0.1

Release notes

Sourced from open's releases.

v11.0.1

Fix WSL failure when the working directory is unreachable from Windows 6ac3fe4

sindresorhus/open@v11.0.0...v11.0.1

Commits

f38acc8 11.0.1
6ac3fe4 Fix WSL failure when the working directory is unreachable from Windows
a30acc7 Meta tweaks
See full diff in compare view

Updates mermaid from 11.15.0 to 11.16.1

Release notes

Sourced from mermaid's releases.

mermaid@11.16.1

Patch Changes

#8022 12d472c Thanks @aloisklink! - fix: handle CSS sibling combinators in compileCSS

#8022 2cd6dcf Thanks @aloisklink! - fix: increase protections against prototype pollution

User-controlled input already has protections against prototype pollution.

Fixes: GHSA-c4c3-pg64-4m4v

#8022 99af3fc Thanks @aloisklink! - fix(architecture): use Maps and Sets to store groups/services

Services are now rendered in the order they are defined and more service IDs are now supported.

#8022 2cd6dcf Thanks @aloisklink! - deprecate: Deprecate the mermaidAPI.setConfig() function

Calling this function has no observable effect, as the next time a render() or parse() is called, the currentConfig is cleared.

#8022 630aa7e Thanks @aloisklink! - fix(xychart): support zero-width x-axis ranges

#8022 59b22fa Thanks @aloisklink! - fix(radar): limit number of ticks to 32

Setting a ticks value higher than this would only show 32 ticks.

mermaid@11.16.0

Minor Changes

#7535 ea1c48f Thanks @ragelink! - feat(cynefin): Adds the Cynefin framework as a new diagram type (beta) to Mermaid (available as cynefin-beta). The Cynefin framework, created by Dave Snowden, is a decision-making framework that categorizes problems into five complexity domains, widely used in agile, incident management, strategy, and organizational design.

#7721 f45cc2c Thanks @notionparallax! - feat(treeView): add box-drawing character input support for treeView diagrams

#7550 f1f4d45 Thanks @DominicBurkart! - feat(xychart): add per-point text labels for xychart line plots

#7527 b4d0442 Thanks @notionparallax! - feat(treeView): Extends the existing treeView-beta diagram with features useful for representing file/directory structures.

#7793 a6f097d Thanks @SSDWGG! - feat(er): support optional ER attribute types with a ? suffix

#7772 37f2e36 Thanks @devareddy05! - feat(gantt): support multiple excludes / includes lines so long exclusion lists can be split into commented groups (#6270)

#7708 4e63e9d Thanks @txmxthy! - feat(architecture): add align row|column {ids…} directive to architecture-beta diagrams so authors can declare horizontal or vertical alignment of services explicitly.

#7760 05223be Thanks @ngdaniels! - feat(pie): Enhance Pie Chart - Enable donut chart, Set legend position, and highlight slice

#7251 216e4e9 Thanks @ydah! - feat(railroad): Add support for Railroad Diagrams (Syntax Diagrams) with four input syntaxes: IR (railroad-beta), EBNF (railroad-ebnf-beta), ABNF (railroad-abnf-beta), and PEG (railroad-peg-beta).

#7774 e5c75e6 Thanks @ngdaniels! - feat(xychart): enable rotate label on X-axis

... (truncated)

Commits

7ecca0c Version Packages (#8023)
95b1b9c docs: change mermaidAPI.setConfig() changeset (#8024)
acc69f1 Merge pull request #8022 from mermaid-js/release/11.16.1
eba7287 docs: point changesets to correct commit hashes
12d472c Merge commit from fork
2cd6dcf Merge commit from fork
630aa7e Merge commit from fork
59b22fa Merge commit from fork
99af3fc Merge commit from fork
2337f7e Merge branch 'test/improve-example.html' into release/11.16.1
Additional commits viewable in compare view

Updates prettier from 3.8.1 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

Preserve quotes for methods named new (prettier/prettier#19621 by @kovsu)

Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @fisker)

Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @fisker)

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @fisker)

🔗 Changelog

3.9.3

Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @seiyab)

TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @evoactivity)

🔗 Changelog

3.9.1

CLI: Fix ignored file has been cached incorrectly (#19483 by @kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

Fix Flow variance annotation print (#19022 by @marcoww6)

🔗 Changelog

3.8.4

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @byplayer)

🔗 Changelog

3.8.3

SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @kovsu)

🔗 Changelog

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @kovsu)
// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}
TypeScript: Support import defer (#19624, #19675 by @fisker)
// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";
JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:
Install the plugin:
yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

8f0c950 Release 3.9.6
e910764 Update changelog
ec3f1c7 Update typescript-eslint to v8.65.0 (#19675)
73d2efc Update Yuku parser to v0.7.0 (#19664)
dd5e24e Preserve quotes for TSMethodSignature nodes named new (#19621)
c03ab4e Update dependency eslint-plugin-unicorn to v72 (#19633)
b74dd53 Update Yuku parser to v0.6.5 (#19654)
f1b594e Update dependency eslint-plugin-simple-import-sort to v14 (#19655)
0d9dfb6 Update Yuku parser to v0.6.4 (#19650)
3bbb815 Remove typescript-only directory (#19636)
Additional commits viewable in compare view

Updates tsx from 4.21.0 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

npm package (@latest dist-tag)

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

preserve async ESM require fallback (55cbece)

This release is also available on:

npm package (@latest dist-tag)

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

support nyc coverage discovery (#710) (ec1bcd5)

This release is also available on:

npm package (@latest dist-tag)

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

map Node test locations (2f55884)

support data URLs in tsImport (b94f46f)

This release is also available on:

npm package (@latest dist-tag)

v4.23.8

... (truncated)

Commits

ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
651f5be test: cover CommonJS TypeScript import.meta paths
bd3bc64 test: cover CommonJS loader source fallback
55cbece fix: preserve async ESM require fallback
6c5ba85 docs: document CommonJS default interop
ec1bcd5 fix: support nyc coverage discovery (#710)
b6e5b48 docs: clarify CommonJS default imports
2f55884 fix: map Node test locations
de935d5 docs: document Node source-map stack formatting
b94f46f fix: support data URLs in tsImport
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Bumps the minor-and-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.2.2` | `5.5.0` | | [dotenv](https://github.com/motdotla/dotenv) | `17.3.1` | `17.4.2` | | [open](https://github.com/sindresorhus/open) | `11.0.0` | `11.0.1` | | [mermaid](https://github.com/mermaid-js/mermaid) | `11.15.0` | `11.16.1` | | [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.9.6` | | [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.12` | Updates `@azure/msal-node` from 5.2.2 to 5.5.0 - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases) - [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v5.2.2...msal-node-v5.5.0) Updates `dotenv` from 17.3.1 to 17.4.2 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.3.1...v17.4.2) Updates `open` from 11.0.0 to 11.0.1 - [Release notes](https://github.com/sindresorhus/open/releases) - [Commits](sindresorhus/open@v11.0.0...v11.0.1) Updates `mermaid` from 11.15.0 to 11.16.1 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.15.0...mermaid@11.16.1) Updates `prettier` from 3.8.1 to 3.9.6 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.1...3.9.6) Updates `tsx` from 4.21.0 to 4.23.12 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.21.0...v4.23.12) --- updated-dependencies: - dependency-name: "@azure/msal-node" dependency-version: 5.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: dotenv dependency-version: 17.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: open dependency-version: 11.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: mermaid dependency-version: 11.16.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tsx dependency-version: 4.23.12 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-17T03:35:46Z

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

cloudflare-workers-and-pages · 2026-08-17T03:35:48Z

Deploying vibemcp with Cloudflare Pages

Latest commit:	`1cb9e64`
Status:	✅ Deploy successful!
Preview URL:	https://6925cbbd.vibemcp.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-mino-ujre.vibemcp.pages.dev

View logs

Navigation Menu

Uh oh!

Uh oh!

deps(deps): bump the minor-and-patch group across 1 directory with 6 updates - #95

deps(deps): bump the minor-and-patch group across 1 directory with 6 updates#95
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-f439095ffb

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

cloudflare-workers-and-pages Bot commented Aug 17, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​azure/msal-react v5.5.0

5.5.0

Minor changes

@​azure/msal-node v5.5.0

5.5.0

Minor changes

Patches

@​azure/msal-react v5.4.5

5.4.5

Patches

@​azure/msal-react v5.4.4

5.4.4

Patches

@​azure/msal-react v5.4.3

5.4.3

Patches

17.4.2 (2026-04-12)

Changed

17.4.1 (2026-04-05)

Changed

17.4.0 (2026-04-01)

Added

Changed

v11.0.1

mermaid@11.16.1

Patch Changes

mermaid@11.16.0

Minor Changes

3.9.6

What's Changed

3.9.5

3.9.4

3.9.3

3.9.1

3.9.0

3.8.5

3.8.4

3.8.3

3.9.6

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

TypeScript: Support import defer (#19624, #19675 by @​fisker)

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

v4.23.8

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Labels

Uh oh!

cloudflare-workers-and-pages Bot commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying vibemcp with Cloudflare Pages

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading

`@azure/msal-react` v5.5.0

`@azure/msal-node` v5.5.0

`@azure/msal-react` v5.4.5

`@azure/msal-react` v5.4.4

`@azure/msal-react` v5.4.3

TypeScript: Preserve quotes for methods named `new` (#19621 by `@kovsu`)

TypeScript: Support `import defer` (#19624, #19675 by `@fisker`)

JavaScript: Added a new official plugin `@prettier/plugin-yuku` (#19628, #19629 by `@fisker`)

cloudflare-workers-and-pages Bot commented Aug 17, 2026 •

edited

Loading