Skip to content

chore(deps): bump the npm-minor-patch group across 1 directory with 19 updates - #51

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-6049c9cda7
Closed

chore(deps): bump the npm-minor-patch group across 1 directory with 19 updates#51
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-6049c9cda7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 19 updates in the / directory:

Package From To
@inquirer/prompts 8.5.2 8.7.0
@modelcontextprotocol/sdk 1.29.0 1.30.0
@oclif/core 4.11.14 4.14.0
@oclif/plugin-autocomplete 3.2.53 3.3.0
@oclif/plugin-help 6.2.53 6.3.0
@oclif/plugin-plugins 5.4.84 5.5.2
js-yaml 5.2.1 5.4.1
open 11.0.0 11.0.1
tar 7.5.19 7.5.22
undici 8.7.0 8.10.0
zod 4.4.3 4.5.2
@oclif/test 4.1.20 4.2.0
@vitest/coverage-v8 4.1.10 4.1.11
eslint 10.6.0 10.9.1
globals 17.7.0 17.11.0
nock 14.0.16 14.0.17
oclif 4.23.27 4.24.0
prettier 3.9.4 3.9.6
vitest 4.1.10 4.1.11

Updates @inquirer/prompts from 8.5.2 to 8.7.0

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.0

What's new

  • password gains the toggleMask option (ctrl+t to reveal the typed value).
  • confirm now matches localized yes/no answers per-locale.
  • Prettified prompt and theme types for better IDE display.
  • Added inquirer-grouped-checkbox to the community prompts list (#2236).

Included

  • @inquirer/checkbox@^5.2.3
  • @inquirer/confirm@^6.3.0
  • @inquirer/editor@^5.3.1
  • @inquirer/expand@^5.1.3
  • @inquirer/input@^5.1.4
  • @inquirer/number@^4.2.1
  • @inquirer/password@^5.2.0
  • @inquirer/rawlist@^5.3.3
  • @inquirer/search@^4.3.1
  • @inquirer/select@^5.2.3

@​inquirer/prompts@​8.6.0

The all-in-one prompts package, re-exporting every individual prompt at its latest version.

Highlights

This release rides on @inquirer/core@12.0.0, which makes the useState setter accept a reducer/updater function. It also brings a new initialValue option to search, plus fixes for number, confirm, and editor.

What's new

  • @inquirer/search — new initialValue?: string option to pre-fill the search input (#2205)

What's fixed

  • @inquirer/number — avoid floating-point step errors; accept explicit undefined as default (#2166, #2182)
  • @inquirer/confirm — accept explicit undefined as default (#2182)
  • @inquirer/editor — accept explicit undefined as default (#2182)

Included prompts

  • @inquirer/checkbox@5.2.2
  • @inquirer/confirm@6.2.0
  • @inquirer/editor@5.3.0
  • @inquirer/expand@5.1.2
  • @inquirer/input@5.1.3
  • @inquirer/number@4.2.0
  • @inquirer/password@5.1.2
  • @inquirer/rawlist@5.3.2

... (truncated)

Commits
  • 51ac389 chore: Publish new release
  • 0f1718e feat(@​inquirer/password): add ctrl+t toggle to reveal password
  • 5fa76b1 feat: prettify prompt and theme types for better IDE display (#2239)
  • 6730c32 fix(@​inquirer/i18n): mock Intl in auto-detect test to fix Windows flake (#2235)
  • 00ebec7 fix(@​inquirer/i18n): accept the localized yes/no answers each locale hints at
  • 9637a2a chore(deps-dev): Bump globals in the linting group (#2238)
  • 45b1479 docs: add inquirer-grouped-checkbox to community prompts (#2236)
  • 9997067 fix(release): serialize staging with --concurrency 1
  • 2073546 fix(release): disable auto-install hook event in postpack restore
  • 7f00eb7 fix(release): bypass auto-install hook in postpack restore
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​inquirer/prompts since your current version.


Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates @oclif/core from 4.11.14 to 4.14.0

Release notes

Sourced from @​oclif/core's releases.

4.14.0

Features

  • bumping to eslint v10 (W-23473845) (248de04)

4.13.5

Bug Fixes

  • replaced require with dynamic import (W-23807278) (d35e325)

4.13.4

Bug Fixes

  • resolved security vulnerability in powershell path (W-23807278) (911e9d2)

4.13.3

Bug Fixes

  • deps: bump ip-address from 10.2.0 to 10.4.0 (e13240b)

4.13.2

Bug Fixes

  • deps: bump postcss from 8.5.10 to 8.5.23 (169b09a)

4.13.1

Bug Fixes

  • deps: bump tar from 7.5.16 to 7.5.22 (bc0d2d2)

4.13.0

Features

  • expose root help formatter (644c4aa)

4.12.0

Features

  • add Args.option() for typed arg options (93139f7)
Changelog

Sourced from @​oclif/core's changelog.

4.14.0 (2026-08-19)

Features

  • bumping to eslint v10 (W-23473845) (248de04)

4.13.5 (2026-08-14)

Bug Fixes

  • replaced require with dynamic import (W-23807278) (d35e325)

4.13.4 (2026-08-14)

Bug Fixes

  • resolved security vulnerability in powershell path (W-23807278) (911e9d2)

4.13.3 (2026-08-04)

Bug Fixes

  • deps: bump ip-address from 10.2.0 to 10.4.0 (e13240b)

4.13.2 (2026-07-27)

Bug Fixes

  • deps: bump postcss from 8.5.10 to 8.5.23 (169b09a)

4.13.1 (2026-07-27)

Bug Fixes

... (truncated)

Commits
  • 1d2903e chore(release): 4.14.0 [skip ci]
  • 45c7f0a Merge pull request #1635 from oclif/d/W-23473845
  • 395c8bc chore: prune stale eslint suppressions after merge
  • 35ddd2e chore: merge main into d/W-23473845
  • 0d01467 chore(release): 4.13.5 [skip ci]
  • 06949eb Merge pull request #1638 from oclif/d/W-23807278-2
  • d35e325 fix: replaced require with dynamic import (W-23807278)
  • 85370b7 chore(release): 4.13.4 [skip ci]
  • 3318c6e Merge pull request #1636 from oclif/d/W-23807278
  • 911e9d2 fix: resolved security vulnerability in powershell path (W-23807278)
  • Additional commits viewable in compare view

Updates @oclif/plugin-autocomplete from 3.2.53 to 3.3.0

Release notes

Sourced from @​oclif/plugin-autocomplete's releases.

3.3.0

Features

  • bumping eslint to v10 (W-23473845) (1b9e2ba)

3.2.56

Bug Fixes

  • deps: bump @​oclif/core from 4.13.2 to 4.13.3 (#1190) (7fda1ce)

3.2.55

Bug Fixes

  • deps: bump @​oclif/core from 4.13.0 to 4.13.2 (#1186) (a4c731a)

3.2.54

Bug Fixes

  • deps: bump @​oclif/core from 4.11.14 to 4.13.0 (#1182) (b7e1eea)
Changelog

Sourced from @​oclif/plugin-autocomplete's changelog.

3.3.0 (2026-08-24)

Features

  • bumping eslint to v10 (W-23473845) (1b9e2ba)

3.2.56 (2026-08-09)

Bug Fixes

  • deps: bump @​oclif/core from 4.13.2 to 4.13.3 (#1190) (7fda1ce)

3.2.55 (2026-08-02)

Bug Fixes

  • deps: bump @​oclif/core from 4.13.0 to 4.13.2 (#1186) (a4c731a)

3.2.54 (2026-07-26)

Bug Fixes

  • deps: bump @​oclif/core from 4.11.14 to 4.13.0 (#1182) (b7e1eea)
Commits
  • ac4f2fc chore(release): 3.3.0 [skip ci]
  • 4462499 Merge pull request #1192 from oclif/d/W-23473845
  • 0a0cdab chore(dev-deps): bump oclif from 4.23.29 to 4.23.30 (#1193)
  • e5cd757 chore(dev-deps): bump @​oclif/test from 4.1.21 to 4.1.22 (#1194)
  • b1c6bef chore(dev-deps): bump @​oclif/plugin-help from 6.2.56 to 6.2.58 (#1195)
  • 1b9e2ba feat: bumping eslint to v10 (W-23473845)
  • 18d8942 chore(release): 3.2.56 [skip ci]
  • 7fda1ce fix(deps): bump @​oclif/core from 4.13.2 to 4.13.3 (#1190)
  • 4936ec9 chore(dev-deps): bump @​oclif/plugin-help from 6.2.55 to 6.2.56 (#1191)
  • 55cc2f8 chore(release): 3.2.55 [skip ci]
  • Additional commits viewable in compare view

Updates @oclif/plugin-help from 6.2.53 to 6.3.0

Release notes

Sourced from @​oclif/plugin-help's releases.

6.3.0

Features

  • bumping eslint to v10 (W-23473845) (489a2a1)

6.2.58

Bug Fixes

  • deps: bump @​oclif/core from 4.13.2 to 4.13.3 (#1168) (b2b5095)

6.2.57

Bug Fixes

6.2.56

Bug Fixes

  • deps: bump @​oclif/core from 4.13.0 to 4.13.2 (#1167) (eb6c62b)

6.2.55

Bug Fixes

  • deps: bump @​oclif/core from 4.11.14 to 4.13.0 (#1161) (ee83c65)

6.2.54

Bug Fixes

Changelog

Sourced from @​oclif/plugin-help's changelog.

6.3.0 (2026-08-24)

Features

  • bumping eslint to v10 (W-23473845) (489a2a1)

6.2.58 (2026-08-09)

Bug Fixes

  • deps: bump @​oclif/core from 4.13.2 to 4.13.3 (#1168) (b2b5095)

6.2.57 (2026-08-09)

Bug Fixes

6.2.56 (2026-08-01)

Bug Fixes

  • deps: bump @​oclif/core from 4.13.0 to 4.13.2 (#1167) (eb6c62b)

6.2.55 (2026-07-26)

Bug Fixes

  • deps: bump @​oclif/core from 4.11.14 to 4.13.0 (#1161) (ee83c65)

6.2.54 (2026-07-26)

Bug Fixes

Commits
  • 126d20f chore(release): 6.3.0 [skip ci]
  • 30459dc Merge pull request #1171 from oclif/d/W-23473845
  • 489a2a1 feat: bumping eslint to v10 (W-23473845)
  • 6bf0f03 chore(dev-deps): bump oclif from 4.23.29 to 4.23.30 (#1172)
  • 46bb64b chore(dev-deps): bump @​oclif/test from 4.1.21 to 4.1.22 (#1173)
  • 245d1e4 chore(release): 6.2.58 [skip ci]
  • b2b5095 fix(deps): bump @​oclif/core from 4.13.2 to 4.13.3 (#1168)
  • 8c40446 chore(release): 6.2.57 [skip ci]
  • 1511d2f fix(deps): bump js-yaml from 4.3.0 to 4.3.1 (#1170)
  • c423ffc chore(dev-deps): bump mocha from 11.7.6 to 11.8.0 (#1169)
  • Additional commits viewable in compare view

Updates @oclif/plugin-plugins from 5.4.84 to 5.5.2

Release notes

Sourced from @​oclif/plugin-plugins's releases.

5.5.2

Bug Fixes

5.5.1

Bug Fixes

5.5.0

Features

5.4.87

Bug Fixes

5.4.86

Bug Fixes

  • deps: bump @​oclif/core from 4.11.14 to 4.13.0 (#1372) (ff69aa0)

5.4.85

Bug Fixes

Changelog

Sourced from @​oclif/plugin-plugins's changelog.

5.5.2 (2026-08-27)

Bug Fixes

5.5.1 (2026-08-20)

Bug Fixes

5.5.0 (2026-08-19)

Features

5.4.87 (2026-08-14)

Bug Fixes

5.4.86 (2026-07-25)

Bug Fixes

  • deps: bump @​oclif/core from 4.11.14 to 4.13.0 (#1372) (ff69aa0)

5.4.85 (2026-07-25)

Bug Fixes

Commits
  • ef73dec chore(release): 5.5.2 [skip ci]
  • cff2c7c Merge pull request #1388 from oclif/wr/fixSpawnExecPathSpaces
  • 4288372 fix(test): skip symlink-based test on Windows
  • b5b5926 chore: retrigger tests
  • 24a3185 ci: use lts/* instead of latest for integration tests
  • a2784ea fix(test): fix spawn tests for Windows CI
  • e8cf5ad test: add security regression guard for windowsVerbatimArguments
  • c34c18e fix: handle spaces in process.execPath on Windows @​W-23997746@
  • 9ef077f chore(release): 5.5.1 [skip ci]
  • 4f293dd Merge pull request #1383 from oclif/wr/fixSpawnEnoentOnUnixTarballs
  • Additional commits viewable in compare view

Updates js-yaml from 5.2.1 to 5.4.1

Changelog

Sourced from js-yaml's changelog.

[5.4.1] - 2026-08-26

Changed

  • Hard-limit merge sequence size to 100.

Security

  • Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

[5.4.0] - 2026-08-25

Added

  • Added the scalarStyleRules dumper option to customize string formatting. See Scalar styling for details.

Changed

  • [breaking] Flattened the low-level AST node style representation. Scalar and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values; explicit tags use the separate tagged property. Alias nodes now contain only kind and anchor. This only affects code that directly constructs or edits AST nodes.
  • [breaking] The sortKeys option was rewritten using AST mutation to avoid side effects.
  • Reworked scalar style selection. This can change formatting without changing loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

  • Accept a byte order mark at the start of each document in a stream, #791.
  • Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace, including alias and property-only keys, #786.
  • Preserve empty scalar items when converting block sequences to flow style.
  • Do not apply the 1024-character simple-key limit to flow mapping keys.
  • Count Unicode code points, rather than UTF-16 code units, for the 1024-character simple-key limit.
  • Add an explicit document-end marker after keep-chomped block scalars when needed to preserve trailing newlines.

[5.3.0] - 2026-08-14

This release focuses on reworking the documentation and making small architectural improvements before moving forward.

Added

  • Added completely new documentation.
  • Exported DUMP_SCHEMA, the default schema used by the dumper.
  • Added YAMLException.throwAt() for throwing an error at a source position.

Changed

... (truncated)

Commits

Updates open from 11.0.0 to 11.0.1

Release notes

Sourced from open's releases.

v11.0.1

  • Fix WSL failure when the working directory is unreachable from Windows 6ac3fe4

sindresorhus/open@v11.0.0...v11.0.1

Commits

Updates tar from 7.5.19 to 7.5.22

Commits

Updates undici from 8.7.0 to 8.10.0

Release notes

Sourced from undici's releases.

v8.10.0

What's Changed

New Contributors

Full Changelog: nodejs/undici@v8.9.0...v8.10.0

v8.9.0

⚠️ Security fixes

High severity

  • GHSA-4cwx-7wf7-3272: malformed qualified private Cache-Control directives could cause cross-user information disclosure in shared caches or a parse-time crash. The cache parser now treats empty qualified directives conservatively and safely handles mixed qualified and unqualified directives. Fixed by 4fe5bc5f with regression coverage in 9f09b49a.

Medium severity

  • GHSA-m8rv-5g2x-5cg5: a malicious type property on a duck-typed blob-like HTTP/1.1 request body could inject CRLF sequences into the generated content-type header. Undici now coerces and validates the value before adding it to the request. Fixed by 7d3cf924.
  • GHSA-jr45-8vmc-qm54: optional whitespace around = in qualified no-cache and private directives could bypass shared-cache restrictions and disclose authenticated data across users. Cache-Control parsing now normalizes these forms and applies conservative cache decisions. Fixed by c601fff1.
  • GHSA-8xcm-r25x-g524: the retry interceptor could expose a stale Content-Length after resuming a partial response, potentially causing downstream response desynchronization, hangs, or corruption. Undici now rejects partial responses whose Content-Length is inconsistent with Content-Range. Fixed by e11a68ed, with corrected fixtures in 2b3f7493.
  • GHSA-v3r7-h72x-cjcm: unsanitized domain and unparsed values passed to setCookie() could inject cookie attributes. Undici now validates cookie domains, paths, and unparsed attributes more strictly. Fixed by 10d93fc3.

Additional hardening

... (truncated)

Commits
  • c8d80e6 Bumped v8.10.0 (#5644)
  • 66923b4 fix: preserve DNS origin hostname on sockets (#5577)
  • 3926499 fix: retry refused HTTP/2 streams (#5598)
  • 73d6e9e fix(h2): detach upgrade close handler after GOAWAY (#5641)
  • b111adb fix(mock): emit request body lifecycle hooks (#5367)
  • ae4a3e3 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#5636)
  • ec3fbf1 build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 (#5634)
  • 2151720 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#5633)
  • b96a116 fix(interceptors): allow interceptors without opts.origin (#5628)
  • a18ef2d fix(mock): non-string path matchers under ignoreTrailingSlash, and DataView r...
  • Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.5.2

Release notes

Sourced from zod's releases.

v4.5.2

Commits:

  • a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)
  • d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)
  • 212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)
  • e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)
  • fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator
  • 6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)
  • 6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution
  • 019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates
  • 652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller
  • 571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card
  • 9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

  • 2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm
  • 8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.

npm install zod@latest

At a glance:

…9 updates

Bumps the npm-minor-patch group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.5.2` | `8.7.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [@oclif/core](https://github.com/oclif/core) | `4.11.14` | `4.14.0` |
| [@oclif/plugin-autocomplete](https://github.com/oclif/plugin-autocomplete) | `3.2.53` | `3.3.0` |
| [@oclif/plugin-help](https://github.com/oclif/plugin-help) | `6.2.53` | `6.3.0` |
| [@oclif/plugin-plugins](https://github.com/oclif/plugin-plugins) | `5.4.84` | `5.5.2` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.1` | `5.4.1` |
| [open](https://github.com/sindresorhus/open) | `11.0.0` | `11.0.1` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.19` | `7.5.22` |
| [undici](https://github.com/nodejs/undici) | `8.7.0` | `8.10.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.2` |
| [@oclif/test](https://github.com/oclif/test) | `4.1.20` | `4.2.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `4.1.11` |
| [eslint](https://github.com/eslint/eslint) | `10.6.0` | `10.9.1` |
| [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.11.0` |
| [nock](https://github.com/nock/nock) | `14.0.16` | `14.0.17` |
| [oclif](https://github.com/oclif/oclif) | `4.23.27` | `4.24.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.4` | `3.9.6` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |



Updates `@inquirer/prompts` from 8.5.2 to 8.7.0
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.5.2...@inquirer/prompts@8.7.0)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `@oclif/core` from 4.11.14 to 4.14.0
- [Release notes](https://github.com/oclif/core/releases)
- [Changelog](https://github.com/oclif/core/blob/main/CHANGELOG.md)
- [Commits](oclif/core@4.11.14...4.14.0)

Updates `@oclif/plugin-autocomplete` from 3.2.53 to 3.3.0
- [Release notes](https://github.com/oclif/plugin-autocomplete/releases)
- [Changelog](https://github.com/oclif/plugin-autocomplete/blob/main/CHANGELOG.md)
- [Commits](oclif/plugin-autocomplete@3.2.53...3.3.0)

Updates `@oclif/plugin-help` from 6.2.53 to 6.3.0
- [Release notes](https://github.com/oclif/plugin-help/releases)
- [Changelog](https://github.com/oclif/plugin-help/blob/main/CHANGELOG.md)
- [Commits](oclif/plugin-help@6.2.53...6.3.0)

Updates `@oclif/plugin-plugins` from 5.4.84 to 5.5.2
- [Release notes](https://github.com/oclif/plugin-plugins/releases)
- [Changelog](https://github.com/oclif/plugin-plugins/blob/main/CHANGELOG.md)
- [Commits](oclif/plugin-plugins@5.4.84...5.5.2)

Updates `js-yaml` from 5.2.1 to 5.4.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.1...5.4.1)

Updates `open` from 11.0.0 to 11.0.1
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v11.0.0...v11.0.1)

Updates `tar` from 7.5.19 to 7.5.22
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.19...v7.5.22)

Updates `undici` from 8.7.0 to 8.10.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.7.0...v8.10.0)

Updates `zod` from 4.4.3 to 4.5.2
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.2)

Updates `@oclif/test` from 4.1.20 to 4.2.0
- [Release notes](https://github.com/oclif/test/releases)
- [Changelog](https://github.com/oclif/test/blob/main/CHANGELOG.md)
- [Commits](oclif/test@4.1.20...4.2.0)

Updates `@vitest/coverage-v8` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8)

Updates `eslint` from 10.6.0 to 10.9.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.6.0...v10.9.1)

Updates `globals` from 17.7.0 to 17.11.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.7.0...v17.11.0)

Updates `nock` from 14.0.16 to 14.0.17
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v14.0.16...v14.0.17)

Updates `oclif` from 4.23.27 to 4.24.0
- [Release notes](https://github.com/oclif/oclif/releases)
- [Changelog](https://github.com/oclif/oclif/blob/main/CHANGELOG.md)
- [Commits](oclif/oclif@4.23.27...4.24.0)

Updates `prettier` from 3.9.4 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.4...3.9.6)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

---
updated-dependencies:
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@oclif/core"
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@oclif/plugin-autocomplete"
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@oclif/plugin-help"
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@oclif/plugin-plugins"
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: js-yaml
  dependency-version: 5.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: open
  dependency-version: 11.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: tar
  dependency-version: 7.5.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: undici
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: zod
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@oclif/test"
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: eslint
  dependency-version: 10.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: globals
  dependency-version: 17.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: nock
  dependency-version: 14.0.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: oclif
  dependency-version: 4.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
@codecov-commenter

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@dependabot @github

dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 8, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-patch-6049c9cda7 branch September 8, 2026 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant