Repository navigation
chore(deps): Update npm-deps - #713
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
|
Important Review skippedAuto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
renovate
Bot
force-pushed
the
renovate/npm-deps
branch
from
October 7, 2026 17:13
7bb5147 to
6a9620c
Compare
renovate
Bot
force-pushed
the
renovate/npm-deps
branch
11 times, most recently
from
October 14, 2026 01:03
e0f9f03 to
a2be215
Compare
renovate
Bot
force-pushed
the
renovate/npm-deps
branch
from
October 14, 2026 17:25
a2be215 to
d67cd17
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
1.31.0→1.32.11.0.9→1.0.102.55.0→2.60.024.19.0→24.19.15.0.2→5.0.39.8.1→9.9.018.0.5→18.0.68.7.0→8.7.16.3.289→6.4.2998.23.0→8.23.110.3.1→10.4.013.1.3→13.2.08.71.0→8.71.15.0.2→5.0.3Release Notes
modelcontextprotocol/typescript-sdk (@modelcontextprotocol/sdk)
v1.32.1Compare Source
What's Changed
Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1
v1.32.0Compare Source
Upgrade notes
redirectPolicy: 'follow'onStreamableHTTPClientTransportorSSEClientTransport. In browsers, a redirected request fails unless that option is set.maxToolInputElementsonMcpServerlimits the number of array elements and object members in a tool call's arguments.expectedResourceonrequireBearerAuthaccepts only tokens issued for this server (the token's audience).What's Changed
New Contributors
Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0
Brooooooklyn/canvas (@napi-rs/canvas)
v1.0.10Compare Source
Bug Fixes
Features
Redocly/redocly-cli (@redocly/cli)
v2.60.0Compare Source
Minor Changes
--file-name-conflicts-severityoption for thesplitcommand to control how file name conflicts are reported.Patch Changes
Fixed an issue where
splitlost content when two components, paths, webhooks, channels, operations, or code samples got the same file name.Warning:
splitoutput may differ from older releases: when several names would share one file, each later file now gets a-nsuffix, wherenis its order, for exampleuser-2.yamlnext toUser.yaml.v2.59.0Compare Source
Minor Changes
Improved
redocly recheckto lint thedescriptionfields of API descriptions.Findings report the source line and column.
You can suppress the findings by file, rule, and pointer, or adjust rules for descriptions only.
Note:
ResolvedRecheckConfiggains a requireddescriptionRulesfield.Library code that builds that object by hand must set it.
Patch Changes
brace-expansionto2.1.7and5.0.12,dompurifyto3.4.16,fast-urito3.1.8, andjs-yamlto5.4.3to resolveCVE-2026-102276,CVE-2026-102277,CVE-2026-102278,CVE-2026-86472,GHSA-p98j-92pf-mc4p, andGHSA-r3ph-w7gj-g6xm.oxfmtto0.72.0andtinypoolto2.2.0to resolveCVE-2026-104848andCVE-2026-104849.proxy-addrto2.0.8andsource-map-jsto1.2.2to resolveCVE-2026-90711andCVE-2026-93749.v2.58.2Compare Source
Patch Changes
Undefined constant "OPERATIONS"when OPcache preload was enabled.v2.58.1Compare Source
Patch Changes
no-invalid-media-type-examples,no-invalid-schema-examples, andno-invalid-parameter-examplesrules by reusing validators for schemas that are referenced or repeated.v2.58.0Compare Source
v2.57.0Compare Source
Minor Changes
Added
constchecking to theno-enum-type-mismatchrule: aconstvalue must conform to the schema'stype, the same way everyenumvalue does.Note: linting output may include new errors for schemas whose
constvalue doesn't match theirtype.Patch Changes
no-enum-type-mismatchdropped violations and reported a wrong location whentypewas written as an array.v2.56.1Compare Source
Patch Changes
v2.56.0Compare Source
Minor Changes
bundlecommand output.Pass overlays with the new
--overlayoption or list them underoverlaysfor an API inredocly.yaml.copyaction field, the$selffield, and reusable actions incomponents.actions.The
spec-ref-siblingsrule now checks the fields next to a reusable action$refin Overlay documents.Patch Changes
respectfailed with an unexpected error when a step used anoperationIdwithout the$sourceDescriptions.<name>.prefix and the Arazzo file also listed anarazzosource description.Such
operationIds are looked up in theopenapisource descriptions only.undicito the6.29.0version.vitest-dev/vitest (@vitest/coverage-v8)
v5.0.3Compare Source
🐞 Bug Fixes
result.statusbetweenrepeatsruns - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #11218 (5dbeb)test.failsexpectedly failed - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #11219 (b2458)listenuntil tests start running - by @sheremet-va in #11366 (7d8ed)toMatchScreenshotuses wrong reference on retried tests - by @macarie in #11393 (c22ab)why-is-node-runningto3.2.1to avoid users running intoERR_PNPM_TRUST_DOWNGRADE- by @AriPerkkio in #11403 (f6c9a)expect.extendasymmetric matchers - by @hi-ogawa, Hiroshi Ogawa and Claude in #11401 (3e794)groupOrderis set - by @mtorp in #11392 (50312)View changes on GitHub
dolanmiu/docx (docx)
v9.9.0Compare Source
What's Changed
New:
docx/layout— lay out documents as Word doesA new
docx/layoutentry point that works out where everything lands on the page, the way Word does. It writes the page numbers of tables of contents, page references (including\pand their own formats),PAGE/SECTIONfields and caption numbers (SEQ) "clean", so Word opens the document without asking to update fields. It can read an existing .docx (to fill in a template's page numbers or check Word's own pages), and it returns the pages of a document and what is on each. Where it meets something it doesn't follow yet, it stops and says so, or it makes a best guess if you ask it to.What it covers:
suppressTopSpacing,useFELayout, HTML divisions, and imported documents (w:altChunk).scripts/layout-probes, and every line of each demo is checked against Word's own output.All layout PRs
#3591, #3592, #3593, #3595, #3596, #3600, #3602, #3603, #3604, #3605, #3606, #3607, #3608, #3609, #3610, #3611, #3612, #3613, #3614, #3615, #3616, #3617, #3618, #3619, #3620, #3621, #3622, #3625, #3626, #3627, #3628, #3629, #3630, #3631, #3632, #3633, #3634, #3635, #3636, #3637, #3638, #3639, #3640, #3641, #3648, #3649, #3650, #3651, #3652, #3653, #3654, #3655, #3656, #3658, #3659, #3660, #3661, #3662, #3663, #3664, #3665, #3666, #3667, #3668, #3669, #3670, #3671, #3672, #3673, #3674, #3675, #3676, #3677, #3678, #3679, #3680, #3681, #3682, #3683, #3684, #3685, #3686, #3687, #3688, #3689, #3690, #3700, #3701, #3702, #3703, #3704, #3705, #3706, #3707, #3708, #3709, #3710, #3711, #3712, #3723, #3724, #3725, #3726, #3727, #3728, #3729, #3730
Other changes
New Contributors
Full Changelog: dolanmiu/docx@9.8.1...9.9.0
motdotla/dotenv (dotenv)
v18.0.6Compare Source
Changed
parseBooleannot Boolean() to fix override (#1069)express-rate-limit/express-rate-limit (express-rate-limit)
v8.7.1Compare Source
You can view the changelog here.
mozilla/pdf.js (pdfjs-dist)
v6.4.299Compare Source
This release contains improvements for annotation rendering, font conversion, form handling, pattern rendering, performance, text selection and the viewer.
Changes since v6.3.289
pdfjs.configby @timvandermeij in #21843src/core/xml_parser.jsby @timvandermeij in #21848catchmethods by @Snuffleupagus in #21849infologging from the "GetOperatorList"/"GetTextContent" handlers (issue 21836) by @Snuffleupagus in #21840PDFDocumentProperties.prototype.#parsePageSizeby @Snuffleupagus in #21856ScreenAnnotation.#isPlayActionmethod by @Snuffleupagus in #21862fallbackparameter fromL10n.prototype.getby @Snuffleupagus in #21857collectActionsfunction by @Snuffleupagus in #21863operatorListto theoperationsFiltercallback function (issue 20399) by @Snuffleupagus in #21868deployment: falseon thecode-coverageenvironment jobs by @calixteman in #218532057608) by @calixteman in #21874MediaAnnotation.prototype._getContentTypeby @Snuffleupagus in #21887seacMapandseacsstructures into Maps by @Snuffleupagus in #21884MessageHandlerclass by @Snuffleupagus in #21883CmdCache,NameCache, andRefCacheto use Maps by @Snuffleupagus in #21888@babel/runtimedependency by @calixteman in #21894kleurwithutil.styleTextby @calixteman in #21895@napi-rs/canvasfor PNG decoding in integration tests by @calixteman in #218962069428) by @calixteman in #21889Ref.fromStringmore strict, by not accepting "bad" arguments by @Snuffleupagus in #21898interpolatehelper, such that it can be re-used more insrc/core/function.jscode by @Snuffleupagus in #21905CFFOffsetTrackeroffsets into a Map by @Snuffleupagus in #21910missingGlyphs, used in theFontclass, into a Set by @Snuffleupagus in #21911Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.