Skip to content

chore(deps-dev): bump the bundled group across 1 directory with 4 updates - #32

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/bundled-7f14a69aed
Open

chore(deps-dev): bump the bundled group across 1 directory with 4 updates#32
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/bundled-7f14a69aed

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the bundled group with 4 updates in the / directory: @modelcontextprotocol/sdk, core-js, puppeteer and yargs.

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates core-js from 3.49.0 to 3.50.0

Changelog

Sourced from core-js's changelog.

3.50.0 - 2026.08.05

  • Changes v3.49.0...v3.50.0 (138 commits)
  • Joint iteration proposal:
    • Built-ins:
      • Iterator.zip
      • Iterator.zipKeyed
    • Moved to stable ES, May 2026 TC39 meeting
    • Added es. namespace modules, /es/ and /stable/ namespace entries
  • Iterator chunking proposal:
    • Built-ins:
      • Iterator.prototype.chunks
      • Iterator.prototype.windows
    • Throw a TypeError instead of RangeError on non-integer number chunkSize / windowSize, following [tc39/proposal-iterator-chunking/#30](tc39/proposal-iterator-chunking#30)
    • Moved to stage 3, May 2026 TC39 meeting
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Added Iterator includes stage 3 proposal:
    • Added built-in:
      • Iterator.prototype.includes
  • Added Iterator join stage 3 proposal:
    • Added built-in:
      • Iterator.prototype.join
  • Added Await dictionary of Promises stage 3 proposal:
    • Added built-ins:
      • Promise.allKeyed
      • Promise.allSettledKeyed
  • Throw a RangeError on finite unsafe integer limit in Iterator.prototype.{ drop, take }, following [tc39/ecma262/#3776](tc39/ecma262#3776)
  • Use PromiseResolve semantics in Promise.try, following [tc39/ecma262/#3883](tc39/ecma262#3883)
  • Added detection of missed Webkit ~ Safari < 26.2 Iterator.prototype.flatMap bug case, #1538
  • Deno 2.9+ replaces Object.prototype.__proto__ instead of removing it, so the feature detection updated
  • Fixed JSON.stringify polyfill with an array replacer - keys order now follows the replacer, inherited and non-enumerable properties are no longer ignored, #1539
  • Make URL / URLSearchParams parsing a little more correct (char sets, percent coding, etc)
  • Ensure opaque paths always roundtrip in URL polyfill (still without adding to feature detection), whatwg/url#844
  • Fix URL#toJSON when URL#toString is reassigned after core-js is imported
  • Fixed possible crash on some keys in Symbol.for
  • Some get-iterator / get-iterator-method fixes
  • Fixed String.prototype.{ match, search } polyfills conversion order
  • Added missed MAX_SAFE_INTEGER excess check in Array.from and { Map, Object }.groupBy polyfills
  • Improved the way of inner iterators cleaning in iterator helpers
  • Improved accuracy of Math.{ asinh, cbrt, log1p } polyfills with big and small values
  • Improved performance of Uint8Array base64 methods
  • Improved performance of escape
  • Slight performance improvement for engines with native Array.prototype.fill on ArrayBuffer constructor and %TypedArray%.prototype.fill
  • Clarify supported Node versions in package.json of some missed packages (just to satisfy publint)
  • Compat data improvements:

... (truncated)

Commits
  • 486e8d6 v3.50.0
  • 6a78c6a Cache URL#toString (#1533)
  • 5d4f138 fix: correct Iterator zip entry exports
  • 7e8e1cc rename method for consistency
  • 2507115 fix JSON.stringify polyfill with an array replacerJSON.stringify polyfill...
  • 4036342 make URL / URLSearchParams parsing a little more correct (char sets, perc...
  • 37375ba fix order of detection
  • 276de47 add detection of missed Webkit ~ Safari < 26.2 Iterator.prototype.flatMap b...
  • 6e4a942 use PromiseResolve semantics in Promise.try
  • ff52b9f backport await dictionary stage 3 proposal
  • Additional commits viewable in compare view

Updates puppeteer from 24.43.0 to 25.5.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.5.0

25.5.0 (2026-08-04)

🎉 Features

🛠️ Fixes

  • disable WebUIOmniboxPopup and WebUIOmniboxAimPopup features (#15278) (5dc2964)
  • do not override the user agent when nothing is emulated (#15274) (39c4653)
  • forward headers to browserURL HTTP discovery and WebSocket connection (#15238) (948d870)
  • reject PWA access if network conditions are configured (#15271) (6eb2b8c)
  • roll to Chrome 151.0.7922.71 (#15272) (a7f07db)
  • roll to Firefox 153.0.1 (#15269) (dd365cc)

📄 Documentation

🏗️ Refactor

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.0.6 to 3.1.0

puppeteer: v25.5.0

25.5.0 (2026-08-04)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies

... (truncated)

Changelog

Sourced from puppeteer's changelog.

25.5.0 (2026-08-04)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.0.6 to 3.1.0

🎉 Features

🛠️ Fixes

  • disable WebUIOmniboxPopup and WebUIOmniboxAimPopup features (#15278) (5dc2964)
  • do not override the user agent when nothing is emulated (#15274) (39c4653)
  • forward headers to browserURL HTTP discovery and WebSocket connection (#15238) (948d870)
  • reject PWA access if network conditions are configured (#15271) (6eb2b8c)
  • roll to Chrome 151.0.7922.71 (#15272) (a7f07db)
  • roll to Firefox 153.0.1 (#15269) (dd365cc)

📄 Documentation

🏗️ Refactor

25.4.0 (2026-07-27)

🎉 Features

... (truncated)

Commits

Updates yargs from 18.0.0 to 18.1.0

Changelog

Sourced from yargs's changelog.

18.1.0 (2026-07-26)

Features

  • ignore bun when getting bin name (b77831c)

Bug Fixes

  • lang: 'count' for de locale (#2476) (971e351)
  • local prototype pollution vulnerability in apply-extends (437f3a4)
  • locale: add Georgian translation (#2474) (086aeaa)

17.7.3 (2026-06-19)

Bug Fixes

  • fix: use entry point with file extension for anything that supports exports (#2514) (c7597e3)

16.2.2 (2026-06-19)

Bug Fixes

  • fix: use entry point with .cjs file extension for yargs export (#2546) (6feb819)
Commits
Maintainer changes

This version was pushed to npm by shadowspawn, a new releaser for yargs since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the bundled group across 1 directory with 4 upd…
cbb3577 
…ates

Bumps the bundled group with 4 updates in the / directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js), [puppeteer](https://github.com/puppeteer/puppeteer) and [yargs](https://github.com/yargs/yargs).


Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `core-js` from 3.49.0 to 3.50.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.50.0/packages/core-js)

Updates `puppeteer` from 24.43.0 to 25.5.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.43.0...puppeteer-v25.5.0)

Updates `yargs` from 18.0.0 to 18.1.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v18.0.0...v18.1.0)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundled
- dependency-name: core-js
  dependency-version: 3.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundled
- dependency-name: puppeteer
  dependency-version: 25.5.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bundled
- dependency-name: yargs
  dependency-version: 18.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundled
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants