build(deps): bump the dependencies group across 1 directory with 11 updates by dependabot[bot] · Pull Request #256 · ant-design/ant-design-cli · GitHub
Skip to content

build(deps): bump the dependencies group across 1 directory with 11 updates - #256

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-8468931413
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-8468931413

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 18, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 11 updates in the / directory:

Package From To
oxc-parser 0.144.0 0.155.0
string-width 8.2.2 8.3.0
@modelcontextprotocol/sdk 1.30.0 1.32.1
@types/node 26.2.0 26.6.5
@vitest/coverage-v8 4.1.9 5.0.5
conf 15.1.0 16.0.0
tsup 8.5.1 9.0.0
tsx 4.23.12 4.23.15
typescript 6.0.3 7.0.2
vitest 4.1.9 5.0.5
yaml 2.9.0 2.9.1

Updates oxc-parser from 0.144.0 to 0.155.0

Release notes

Sourced from oxc-parser's releases.

oxc crates_v0.155.0

💥 BREAKING CHANGES

  • c7d229b transformer: [BREAKING] Decode JSX entities to lone surrogates (#26712) (Dunqing)
  • e3c1b11 ast: [BREAKING] Preserve lone surrogates in static property names (#27095) (Dunqing)
  • a0a987c ast: [BREAKING] Preserve lone surrogates in static member names (#26677) (Dunqing)

🚀 Features

  • 7bb2697 minifier: Minimize array join expression (#27905) (Armano)
  • 5d91db8 ast: Generate node ID setters for enums (#27500) (camc314)
  • 6b5057b minifier: Add de morgan optimization for void expressions (#27375) (Armano)

🐛 Bug Fixes

  • ce6a088 minifier: Fold string indices by UTF-16 code unit (#27096) (Dunqing)
  • 7c47246 linter: Check module specifiers and string values that contain lone surrogates (#26717) (Dunqing)
  • 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
  • a5d8184 jsdoc: Parse code spans after quotes in descriptions (#27955) (leaysgur)
  • bd37e78 ecmascript: Look through sequence expressions in to_primitive (#27837) (baltasarblanco)
  • d92789d minifier: Drop debugger statements in unbraced bodies (#27867) (camc314)
  • 863b359 ecmascript: Correct parseFloat decimal prefix scanning (#27695) (camc314)
  • a2534c6 minifier: Preserve lexical initializers in dead for loops (#27676) (camc314)
  • 3543672 ecmascript: Do not fold Number.isInteger / isSafeInteger of tiny non-integers to true (#27622) (Baltasar Blanco)
  • 6987a61 ecmascript: BigInt loose equality folding (unknown operands and StringToBigInt) (#27656) (Baltasar Blanco)
  • 40e5644 minifier: Preserve indirect access when folding into call targets (#27082) (waltu)
  • 022306f ecmascript: Do not fold Math.cbrt of a negative number to NaN (#27621) (Baltasar Blanco)

⚡ Performance

  • faa75d8 transformer: Remove redundant scratch vectors (#27922) (camc314)
  • 88b5c35 minifier: Reduce code branches when evaluating roots (#27906) (Armano)
  • fe1d367 codegen: Remove branches from loops printing arrays (#27840) (overlookmotel)
  • 7bb6b62 codegen: Reduce hashmap lookups in print_annotation_comment (#27845) (overlookmotel)
  • 31ffd08 codegen: Avoid unnecessary comment clone (#27843) (overlookmotel)
  • a6456b7 codegen: Remove branch from print_space_before_identifier (#27842) (overlookmotel)
  • eeff416 codegen: Simplify print_space_before_identifier (#27841) (overlookmotel)
  • 5d877b8 diagnostics: Speed up zero-context span lookups (#27770) (camc314)
  • 2ab6b63 packages/codegen: Remove redundant printSpaceBeforeIdentifier and last updates in printParams (#27652) (overlookmotel)
  • e533278 codegen: Reduce writes in printDecorators (#27651) (overlookmotel)

📚 Documentation

  • 29caafd codegen: Format table in doc comment (#27839) (overlookmotel)
  • 3de03c1 packages/codegen: Correct outdated comments (#27838) (overlookmotel)

oxc crates_v0.154.0

💥 BREAKING CHANGES

  • 7730e14 ast: [BREAKING] Refactor comment attachment storage (#27512) (camc314)

... (truncated)

Changelog

Sourced from oxc-parser's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[0.154.0] - 2026-10-13

💥 BREAKING CHANGES

  • 7730e14 ast: [BREAKING] Refactor comment attachment storage (#27512) (camc314)
  • c904b61 ast: [BREAKING] Add comment attachment storage (#27393) (camc314)

[0.153.0] - 2026-10-05

🐛 Bug Fixes

  • b2793fa parser: Reject module syntax in script (#27220) (leaysgur)

[0.152.0] - 2026-09-28

🚀 Features

  • f585cb4 napi: Add threadless WASI builds (#26898) (Boshen)

🐛 Bug Fixes

  • 5186328 parser: Handle HTML comment values (#22933) (Boshen)

📚 Documentation

  • d775315 parser: Document AST property order (#27038) (Boshen)

[0.151.0] - 2026-09-21

🚀 Features

  • 1fac655 coverage: Support new TypeScript fixture layout (#26226) (camc314)

[0.149.0] - 2026-09-07

🐛 Bug Fixes

  • c966aca parser: Do not omit < token opening type argument list (#26328) (overlookmotel)

[0.147.0] - 2026-08-24

🐛 Bug Fixes

  • 8a9bdbd estree: Include decorators in FormalParameterRest spans (#26021) (camc314)

... (truncated)

Commits

Updates string-width from 8.2.2 to 8.3.0

Release notes

Sourced from string-width's releases.

v8.3.0

  • Improve performance 31ae8b8

sindresorhus/string-width@v8.2.2...v8.3.0

Commits

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.32.1

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1

1.32.0

Upgrade notes

  • Redirects: the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets redirectPolicy: 'follow' on StreamableHTTPClientTransport or SSEClientTransport. In browsers, a redirected request fails unless that option is set.
  • New options, both off unless you set them: maxToolInputElements on McpServer limits the number of array elements and object members in a tool call's arguments. expectedResource on requireBearerAuth accepts only tokens issued for this server (the token's audience).

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0

1.31.0

Upgrade notes

  • Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.
  • Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.1...1.31.0

1.30.1

What's Changed

New Contributors

... (truncated)

Commits
  • ff07b00 chore: bump version to 1.32.1 (#2954)
  • 8a74d50 [v1.x] docs: point the README at v2 and say what v1.x supports (#2942)
  • a8cf503 [v1.x] docs: state the principles in CLAUDE.md (#2939)
  • 32549b0 chore: bump version to 1.32.0 (#2935)
  • 588d51d [v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)
  • 5a0724d [v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)
  • 0ca0b62 [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...
  • fd26801 [v1.x] feat(server): add maxToolInputElements option to limit the number of e...
  • 727075b [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...
  • 0ff6377 [v1.x] examples: close idle sessions and cap the session map (#2914)
  • Additional commits viewable in compare view

Updates @types/node from 26.2.0 to 26.6.5

Commits

Updates @vitest/coverage-v8 from 4.1.9 to 5.0.5

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates conf from 15.1.0 to 16.0.0

Release notes

Sourced from conf's releases.

v16.0.0

Breaking

  • Require Node.js 22 473ff89
  • Migration changes
    • Migrations no longer run for a config file that does not exist yet d22f423
    • Migrations run in version order, whatever order they are defined in 473ff89
    • The recorded migration version never moves backwards 473ff89
  • .get() throws when given a non-string key 54829ff
  • The rootSchema option throws when it contains a properties key 7240281
  • With clearInvalidConfig, the cleared store is now written to the config file 473ff89
  • Stricter validation 473ff89
    • projectVersion must be a full semantic version when using migrations.
    • configName must not point outside cwd.
    • An empty encryptionKey is refused.
    • With dot notation, a key that is not a valid path (for example, a[x) throws.

New

  • Add cache option d5748fc
  • Allow serialize to return a Uint8Array 473ff89
  • Make .reset() work with dot-notation keys f9b13df
  • Improve the TypeScript types 473ff89

Fixes

  • Fix a migration with a semver range making the store impossible to open after a failed migration f957559

sindresorhus/conf@v15.1.0...v16.0.0

Commits
  • 4b48955 16.0.0
  • 473ff89 Refactor
  • 83e2671 Document how to get types out of the schema option
  • d22f423 Do not run migrations for a store that does not exist yet
  • 3e04d61 Stop exposing the internal key through the public API
  • 7240281 Throw when rootSchema contains a properties key
  • 916809f Fix docs
  • f957559 Stop migration ranges from bricking the store
  • f9b13df Make reset() work with dot-notation keys
  • 54829ff Throw when get() is called with a non-string key
  • Additional commits viewable in compare view

Updates tsup from 8.5.1 to 9.0.0

Release notes

Sourced from tsup's releases.

v9.0.0

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 198479b chore: release v9.0.0
  • 3079ea3 feat(type): expose the Plugin type (#1264)
  • 13f68eb ci: enable npm stage publishing
  • 380e94e test: fix failing tests
  • b601adf chore: merge test lockfile into the root as a pnpm workspace
  • 00139a4 chore: cleanup lockfile
  • 6cec950 chore: build tsup with its own source via tsx
  • 6705d39 chore: upgrade deps, replace source-map with source-map-js
  • a2c0810 feat: upgrade esbuild & chokidar
  • 980525e fix: remove baseUrl in tsconfig (#1390)
  • Additional commits viewable in compare view

Updates tsx from 4.23.12 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

  • exclude bare builtins from namespace inheritance (38e1588)
  • expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
  • make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

  • restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

Commits
  • ca66105 test: fix drive-less file URLs in ESM resolver fixtures
  • 2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
  • 38e1588 fix: exclude bare builtins from namespace inheritance
  • 562c434 fix: make namespaced register() overloads portable for declaration emit
  • edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
  • 70e7828 test: upgrade tinyspy for disposable API
  • 9ed2022 ci: avoid duplicate release notifications
  • 872e77f refactor: use disposables for cleanup
  • 6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
  • 28e1f12 fix(cache): bound shared transform cache memory (#835)
  • See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates vitest from 4.1.9 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 18, 2026
@coderabbitai

coderabbitai Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 7bd0f90f-871e-4d9d-be89-a416bfc81c88

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@socket-security

socket-security Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

…pdates

Bumps the dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.144.0` | `0.155.0` |
| [string-width](https://github.com/sindresorhus/string-width) | `8.2.2` | `8.3.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.32.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.5` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `5.0.5` |
| [conf](https://github.com/sindresorhus/conf) | `15.1.0` | `16.0.0` |
| [tsup](https://github.com/egoist/tsup) | `8.5.1` | `9.0.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.15` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `5.0.5` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |



Updates `oxc-parser` from 0.144.0 to 0.155.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/parser/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.155.0/napi/parser)

Updates `string-width` from 8.2.2 to 8.3.0
- [Release notes](https://github.com/sindresorhus/string-width/releases)
- [Commits](sindresorhus/string-width@v8.2.2...v8.3.0)

Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.32.1
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.32.1)

Updates `@types/node` from 26.2.0 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.9 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `conf` from 15.1.0 to 16.0.0
- [Release notes](https://github.com/sindresorhus/conf/releases)
- [Commits](sindresorhus/conf@v15.1.0...v16.0.0)

Updates `tsup` from 8.5.1 to 9.0.0
- [Release notes](https://github.com/egoist/tsup/releases)
- [Commits](egoist/tsup@v8.5.1...v9.0.0)

Updates `tsx` from 4.23.12 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.15)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `vitest` from 4.1.9 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: conf
  dependency-version: 16.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: oxc-parser
  dependency-version: 0.154.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: string-width
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tsup
  dependency-version: 9.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dependencies-8468931413 branch from cf0296d to 069a1e1 Compare October 25, 2026 17:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants