Skip to content

Set up a basic dependabot.yml #749

Open
temotskipa wants to merge 21 commits intomindcraft-bots:developfrom
temotskipa:develop
Open

Set up a basic dependabot.yml #749
temotskipa wants to merge 21 commits intomindcraft-bots:developfrom
temotskipa:develop

Conversation

@temotskipa
Copy link
Copy Markdown

No description provided.

temotskipa and others added 18 commits March 30, 2026 16:25
Bumps the pip group with 1 update in the / directory: [tqdm](https://github.com/tqdm/tqdm).


Updates `tqdm` from 4.62.3 to 4.66.3
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.62.3...v4.66.3)

---
updated-dependencies:
- dependency-name: tqdm
  dependency-version: 4.66.3
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [open](https://github.com/sindresorhus/open) from 10.2.0 to 11.0.0.
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v10.2.0...v11.0.0)

---
updated-dependencies:
- dependency-name: open
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [yargs](https://github.com/yargs/yargs) from 17.7.2 to 18.0.0.
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v17.7.2...v18.0.0)

---
updated-dependencies:
- dependency-name: yargs
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [groq-sdk](https://github.com/groq/groq-typescript) from 0.15.0 to 1.1.2.
- [Release notes](https://github.com/groq/groq-typescript/releases)
- [Changelog](https://github.com/groq/groq-typescript/blob/main/CHANGELOG.md)
- [Commits](groq/groq-typescript@v0.15.0...v1.1.2)

---
updated-dependencies:
- dependency-name: groq-sdk
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [mineflayer-auto-eat](https://github.com/linkle69/mineflayer-auto-eat) from 3.3.6 to 5.0.3.
- [Release notes](https://github.com/linkle69/mineflayer-auto-eat/releases)
- [Commits](linkle69/mineflayer-auto-eat@3.3.6...5.0.3)

---
updated-dependencies:
- dependency-name: mineflayer-auto-eat
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bump tqdm from 4.62.3 to 4.66.3 in the pip group across 1 directory
…yer-auto-eat-5.0.3

Bump mineflayer-auto-eat from 3.3.6 to 5.0.3
…k-1.1.2

Bump groq-sdk from 0.15.0 to 1.1.2
Bumps [eslint](https://github.com/eslint/eslint) from 9.39.4 to 10.1.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.4...v10.1.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Add groups configuration for all dependencies in Dependabot.
…10.1.0

Bump eslint from 9.39.4 to 10.1.0
Bumps the all-dependencies group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.17.2` | `0.80.0` |
| [@huggingface/inference](https://github.com/huggingface/huggingface.js) | `2.8.1` | `4.13.15` |
| [@mistralai/mistralai](https://github.com/mistralai/client-ts) | `1.15.1` | `2.1.2` |
| [express](https://github.com/expressjs/express) | `4.22.1` | `5.2.1` |
| [openai](https://github.com/openai/openai-node) | `4.104.0` | `6.33.0` |
| [replicate](https://github.com/replicate/replicate-javascript) | `0.29.4` | `1.4.0` |
| [three](https://github.com/mrdoob/three.js) | `0.128.0` | `0.183.2` |
| [vec3](https://github.com/PrismarineJS/node-vec3) | `0.1.10` | `0.2.0` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `10.0.1` |
| [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.1.0` |
| [globals](https://github.com/sindresorhus/globals) | `15.15.0` | `17.4.0` |


Updates `@anthropic-ai/sdk` from 0.17.2 to 0.80.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.17.2...sdk-v0.80.0)

Updates `@huggingface/inference` from 2.8.1 to 4.13.15
- [Release notes](https://github.com/huggingface/huggingface.js/releases)
- [Commits](https://github.com/huggingface/huggingface.js/commits/inference-v4.13.15)

Updates `@mistralai/mistralai` from 1.15.1 to 2.1.2
- [Release notes](https://github.com/mistralai/client-ts/releases)
- [Changelog](https://github.com/mistralai/client-ts/blob/main/RELEASES.md)
- [Commits](mistralai/client-ts@v1.15.1...v2.1.2)

Updates `express` from 4.22.1 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v4.22.1...v5.2.1)

Updates `openai` from 4.104.0 to 6.33.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v4.104.0...v6.33.0)

Updates `replicate` from 0.29.4 to 1.4.0
- [Release notes](https://github.com/replicate/replicate-javascript/releases)
- [Commits](replicate/replicate-javascript@v0.29.4...v1.4.0)

Updates `three` from 0.128.0 to 0.183.2
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

Updates `vec3` from 0.1.10 to 0.2.0
- [Release notes](https://github.com/PrismarineJS/node-vec3/releases)
- [Changelog](https://github.com/PrismarineJS/node-vec3/blob/master/HISTORY.md)
- [Commits](PrismarineJS/node-vec3@0.1.10...0.2.0)

Updates `@eslint/js` from 9.39.4 to 10.0.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

Updates `eslint` from 9.39.4 to 10.1.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.4...v10.1.0)

Updates `globals` from 15.15.0 to 17.4.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v15.15.0...v17.4.0)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@huggingface/inference"
  dependency-version: 4.13.15
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@mistralai/mistralai"
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: openai
  dependency-version: 6.33.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: replicate
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: three
  dependency-version: 0.183.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: vec3
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: eslint
  dependency-version: 10.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: globals
  dependency-version: 17.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
…pendencies-6ec48c033f

Bump the all-dependencies group with 11 updates
@Sweaterdog
Copy link
Copy Markdown
Contributor

I don't think this would be useful since we have to patch mineflayer nearly every update, so pushing new packages could break these patches. I'll leave it to @MaxRobinsonTheGreat

@temotskipa
Copy link
Copy Markdown
Author

I don't think this would be useful since we have to patch mineflayer nearly every update, so pushing new packages could break these patches. I'll leave it to @MaxRobinsonTheGreat

However, some dependencies are extremely outdated and have potential security and usability issues. NPM even warns about this during install. Dependabot is a good way to address that.

@Sweaterdog
Copy link
Copy Markdown
Contributor

I don't think this would be useful since we have to patch mineflayer nearly every update, so pushing new packages could break these patches. I'll leave it to @MaxRobinsonTheGreat

However, some dependencies are extremely outdated and have potential security and usability issues. NPM even warns about this during install. Dependabot is a good way to address that.

Can you verify the project installs without a hitch on your current device? I can test on Linux later. If it works, it works.

dependabot bot and others added 2 commits April 1, 2026 03:18
Bumps the all-dependencies group with 1 update: [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript).


Updates `@anthropic-ai/sdk` from 0.80.0 to 0.81.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.80.0...sdk-v0.81.0)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@temotskipa
Copy link
Copy Markdown
Author

Can you verify the project installs without a hitch on your current device? I can test on Linux later. If it works, it works.

2026-04-01T08_03_51_802Z-debug-0.log
Here's the log. I have VS 2026 installed but npm doesn't detect it for some reason. And here's the shorter terminal output:

PS C:\Users\ttski\Projects\mindcraft> npm i
npm warn deprecated whatwg-encoding@3.1.1: Use @exodus/bytes instead for a more spec-conformant and faster implementation
npm warn deprecated prebuild-install@7.1.3: No longer maintained. Please contact the author of the relevant native addon; alternatives are available.
npm warn deprecated tar@6.2.1: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
npm warn deprecated node-domexception@1.0.0: Use your platform's native DOMException instead
npm warn deprecated glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
npm warn cleanup Failed to remove some directories [
npm warn cleanup   [
npm warn cleanup     '\\\\?\\C:\\Users\\ttski\\Projects\\mindcraft\\node_modules\\prismarine-viewer',
npm warn cleanup     [Error: EPERM: operation not permitted, rmdir 'C:\Users\ttski\Projects\mindcraft\node_modules\prismarine-viewer'] {
npm warn cleanup       errno: -4048,
npm warn cleanup       code: 'EPERM',
npm warn cleanup       syscall: 'rmdir',
npm warn cleanup       path: 'C:\\Users\\ttski\\Projects\\mindcraft\\node_modules\\prismarine-viewer'
npm warn cleanup     }
npm warn cleanup   ]
npm warn cleanup ]
npm error code 1
npm error path C:\Users\ttski\Projects\mindcraft\node_modules\node-canvas-webgl\node_modules\gl
npm error command failed
npm error command C:\Windows\system32\cmd.exe /d /s /c prebuild-install || node-gyp rebuild
npm error prebuild-install warn install No prebuilt binaries found (target=25.6.1 runtime=node arch=x64 libc= platform=win32)
npm error gyp info it worked if it ends with ok
npm error gyp info using node-gyp@10.3.1
npm error gyp info using node@25.6.1 | win32 | x64
npm error (node:18916) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
npm error (Use `node --trace-deprecation ...` to show where the warning was created)
npm error gyp info find Python using Python version 3.14.3 found at "C:\Users\ttski\AppData\Local\Python\pythoncore-3.14-64\python.exe"
npm error gyp ERR! find VS
npm error gyp ERR! find VS msvs_version not set from command line or npm config
npm error gyp ERR! find VS VCINSTALLDIR not set, not running in VS Command Prompt
npm error gyp ERR! find VS could not use PowerShell to find Visual Studio 2017 or newer, try re-running with '--loglevel silly' for more details.
npm error gyp ERR! find VS
npm error gyp ERR! find VS Failure details: undefined
npm error gyp ERR! find VS unknown version "undefined" found at "C:\Program Files\Microsoft Visual Studio\18\Community"
npm error gyp ERR! find VS could not find a version of Visual Studio 2017 or newer to use
npm error gyp ERR! find VS not looking for VS2017 as it is only supported up to Node.js 21
npm error gyp ERR! find VS not looking for VS2017 as it is only supported up to Node.js 21
npm error gyp ERR! find VS not looking for VS2017 as it is only supported up to Node.js 21
npm error gyp ERR! find VS not looking for VS2015 as it is only supported up to Node.js 18
npm error gyp ERR! find VS not looking for VS2013 as it is only supported up to Node.js 8
npm error gyp ERR! find VS
npm error gyp ERR! find VS **************************************************************
npm error gyp ERR! find VS You need to install the latest version of Visual Studio
npm error gyp ERR! find VS including the "Desktop development with C++" workload.
npm error gyp ERR! find VS For more information consult the documentation at:
npm error gyp ERR! find VS https://github.com/nodejs/node-gyp#on-windows
npm error gyp ERR! find VS **************************************************************
npm error gyp ERR! find VS
npm error gyp ERR! configure error
npm error gyp ERR! stack Error: Could not find any Visual Studio installation to use
npm error gyp ERR! stack at VisualStudioFinder.fail (C:\Users\ttski\Projects\mindcraft\node_modules\node-gyp\lib\find-visualstudio.js:118:11)
npm error gyp ERR! stack at VisualStudioFinder.findVisualStudio (C:\Users\ttski\Projects\mindcraft\node_modules\node-gyp\lib\find-visualstudio.js:74:17)
npm error gyp ERR! stack at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
npm error gyp ERR! stack at async createBuildDir (C:\Users\ttski\Projects\mindcraft\node_modules\node-gyp\lib\configure.js:112:18)
npm error gyp ERR! stack at async run (C:\Users\ttski\Projects\mindcraft\node_modules\node-gyp\bin\node-gyp.js:81:18)
npm error gyp ERR! System Windows_NT 10.0.26200
npm error gyp ERR! command "C:\\Program Files\\nodejs\\node.exe" "C:\\Users\\ttski\\Projects\\mindcraft\\node_modules\\node-gyp\\bin\\node-gyp.js" "rebuild"
npm error gyp ERR! cwd C:\Users\ttski\Projects\mindcraft\node_modules\node-canvas-webgl\node_modules\gl
npm error gyp ERR! node -v v25.6.1
npm error gyp ERR! node-gyp -v v10.3.1
npm error gyp ERR! not ok
npm error A complete log of this run can be found in: C:\Users\ttski\AppData\Local\npm-cache\_logs\2026-04-01T08_03_51_802Z-debug-0.log

@temotskipa
Copy link
Copy Markdown
Author

I don't exactly know how to fix this error, but I do see it isn't related to dependencies. Should I install an old version of VS/node? Though that would indicate even deeper version support problems for this repo.

…pendencies-2530e77876

Bump @anthropic-ai/sdk from 0.80.0 to 0.81.0 in the all-dependencies group
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants