Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 5 updates - #149

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-and-patch-93567294f4
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-and-patch-93567294f4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 5 updates in the / directory:

Package From To
@modelcontextprotocol/sdk 1.32.1 1.32.2
vscode-languageserver-types 3.18.4 3.18.5
@pleaseai/eslint-config 0.0.4 0.1.0
@types/bun 1.4.3 1.4.4
nuxt 4.6.2 4.6.3

Updates @modelcontextprotocol/sdk from 1.32.1 to 1.32.2

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.2

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.1...1.32.2

Commits
  • 3b73021 chore: bump version to 1.32.2 (#3089)
  • fa56d81 [v1.x] fix: allow registering after connect() when the capability was declare...
  • 6919e95 fix: add explicit | undefined to Transport optional properties (v1.x backport...
  • See full diff in compare view

Updates vscode-languageserver-types from 3.18.4 to 3.18.5

Commits

Updates @pleaseai/eslint-config from 0.0.4 to 0.1.0

Release notes

Sourced from @​pleaseai/eslint-config's releases.

ast-grep-config: v0.1.0

0.1.0 (2026-10-13)

⚠ BREAKING CHANGES

  • deps: @​pleaseai/eslint-config now requires eslint ^10.4.0. ESLint 9 is no longer supported.

Features

  • add @​pleaseai/ast-grep-config rules and please-style check path checker (#36) (8aadb75)

Bug Fixes

  • cli: close Yarn Plug'n'Play and Kotlin Multiplatform gaps in please-style (#48) (2ef3049)
  • cli: tighten please-style check heuristics deferred from #36 (#42) (42a5f65), closes #37

Miscellaneous Chores

  • deps: update dependencies within semver ranges across workspaces (#41) (1858fcd)

code-style: v0.1.0

0.1.0 (2026-10-13)

⚠ BREAKING CHANGES

  • deps: @​pleaseai/eslint-config now requires eslint ^10.4.0. ESLint 9 is no longer supported.

Features

  • add @​pleaseai/ast-grep-config rules and please-style check path checker (#36) (8aadb75)

Bug Fixes

  • cli: close Yarn Plug'n'Play and Kotlin Multiplatform gaps in please-style (#48) (2ef3049)
  • cli: tighten please-style check heuristics deferred from #36 (#42) (42a5f65), closes #37

Miscellaneous Chores

  • deps: update dependencies within semver ranges across workspaces (#41) (1858fcd)

eslint-config: v0.1.0

0.1.0 (2026-10-13)

... (truncated)

Changelog

Sourced from @​pleaseai/eslint-config's changelog.

0.1.0 (2026-10-13)

⚠ BREAKING CHANGES

  • deps: @​pleaseai/eslint-config now requires eslint ^10.4.0. ESLint 9 is no longer supported.

Miscellaneous Chores

  • deps: update dependencies within semver ranges across workspaces (#41) (1858fcd)
Commits
  • 38ca3fd chore: release main (#38)
  • 1858fcd chore(deps)!: update dependencies within semver ranges across workspaces (#41)
  • a011ad4 chore: apply PassionFactory standards setup (toolchain, Claude Code, OSS) (#40)
  • 509ec9c chore(deps-dev): bump tsdown (#17)
  • 79cc35b chore(deps): bump the production-dependencies group across 1 directory with 2...
  • 3ec62e2 chore: add repository field for npm provenance
  • See full diff in compare view

Updates @types/bun from 1.4.3 to 1.4.4

Commits

Updates nuxt from 4.6.2 to 4.6.3

Release notes

Sourced from nuxt's releases.

v4.6.3

v4.6.3 is the next patch release.

👉 Changelog

compare changes

🚨 Security fixes

🔥 Performance

  • vite: skip compiling plain style blocks in the server build (#36711)
  • nitro,nuxt,rspack,webpack: bundle esm vue + reuse caches (#36710)
  • vite: avoid quadratic nested dir check for fs.allow (#36702)
  • nuxt: server render internal custom links without RouterLink (#36707)
  • nuxt: skip unneeded typed routes generation (#36645)

🩹 Fixes

  • nitro: don't share prerender hints with self-fetched requests (#36705)
  • nuxt: defer app scope cleanup on external navigation (#36713)
  • nuxt: prevent useCookie CookieStore sync from rewriting with refresh (#36673)
  • nuxt: only return redirects from navigateTo while middleware runs (#36650)
  • nuxt: remove purged entries from _asyncData (#36709)
  • vite: skip quoted import.meta keys + limit replace to client dev (#36703)
  • nuxt: hide RouteLocationRaw from navigateTo's public return type (#36691)
  • nuxt: tree-shake auto-imported #app composables (#36696)
  • nuxt: don't treat constrained route rules as covering dynamic pages (#36701)
  • nuxt: include shared/ in build cache hash (#36704)
  • nuxt: hash keyed function ids + page import names relative to rootDir (#36697)
  • nuxt: encode page paths before matching route rule keys (#36683)
  • nuxt: handle rejected updateCallbackDone of aborted view transition (#36639)
  • ui-templates: keep loading shader proportions on narrow screens (#36654)
  • nuxt: reject case-dependent route rule constraints w/ sensitive: false (#36708)
  • nuxt: don't case-fold regex constraints in route rule keys (#36694)
  • nuxt: normalise page prefix when finding route rule exceptions (#36685)
  • vite: mirror ssr invalidations for created and deleted files (634cba64c)
  • nitro: keep noScripts wildcard patterns single-segment (fa323db7d)
  • deps: update unrouting to v0.3.1 (#36663)
  • nuxt: avoid self-referencing nuxt/schema augmentation (#36633)
  • nuxt: let nightly runtime resolve its own nuxt/* imports (#36632)
  • nuxt: don't warn for vite+ vite.config files (#36628)

... (truncated)

Commits
  • 1b09d0c v4.6.3 (#36651)
  • 4fd54ff test: list NUXT_B4023 as main-only
  • 45463f8 fix(nitro,nuxt): handle dot segments in request paths
  • 57da2ae fix(nuxt): apply redirect route rules to page islands
  • c655a32 fix(nuxt): defer app scope cleanup on external navigation (#36713)
  • e2179ce fix(nuxt): prevent useCookie CookieStore sync from rewriting with refresh (#3...
  • f818b2e fix(nuxt): only return redirects from navigateTo while middleware runs (#36...
  • f5ae355 perf(nitro,nuxt,rspack,webpack): bundle esm vue + reuse caches (#36710)
  • 6761ca2 fix(nuxt): remove purged entries from _asyncData (#36709)
  • 8ef5ede fix(nuxt): hide RouteLocationRaw from navigateTo's public return type (#36691)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bumps five dependencies in the minor-and-patch group.

Highlights

  • nuxt 4.6.3 includes several security fixes for the dev server.
  • @pleaseai/eslint-config 0.1.0 now requires eslint ^10.4.0; the repo already uses ^10.6.0, so no migration is needed.

The remaining updates are patch-level fixes to @modelcontextprotocol/sdk, vscode-languageserver-types, and @types/bun.

Written for commit 1c169cc. Summary will update on new commits.

Turn on auto-fix

… updates

Bumps the minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.32.1` | `1.32.2` |
| [vscode-languageserver-types](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/types) | `3.18.4` | `3.18.5` |
| [@pleaseai/eslint-config](https://github.com/pleaseai/code-style/tree/HEAD/packages/eslint-config) | `0.0.4` | `0.1.0` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.3` | `1.4.4` |
| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.6.2` | `4.6.3` |



Updates `@modelcontextprotocol/sdk` from 1.32.1 to 1.32.2
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.32.1...1.32.2)

Updates `vscode-languageserver-types` from 3.18.4 to 3.18.5
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/types/3.18.5/types)

Updates `@pleaseai/eslint-config` from 0.0.4 to 0.1.0
- [Release notes](https://github.com/pleaseai/code-style/releases)
- [Changelog](https://github.com/pleaseai/code-style/blob/main/packages/eslint-config/CHANGELOG.md)
- [Commits](https://github.com/pleaseai/code-style/commits/code-style-v0.1.0/packages/eslint-config)

Updates `@types/bun` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `nuxt` from 4.6.2 to 4.6.3
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.6.3/packages/nuxt)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vscode-languageserver-types
  dependency-version: 3.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@pleaseai/eslint-config"
  dependency-version: 0.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/bun"
  dependency-version: 1.4.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: nuxt
  dependency-version: 4.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 30, 2026
@greptile-apps

greptile-apps Bot commented Oct 30, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@sonarqubecloud

Copy link
Copy Markdown

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​types/​bun@​1.4.3 ⏵ 1.4.41001004892 -2100
Updated@​pleaseai/​eslint-config@​0.0.4 ⏵ 0.1.070 +41009787 -1100
Updatedvscode-languageserver-types@​3.18.4 ⏵ 3.18.510010080 +193 -170
Updatednuxt@​4.6.2 ⏵ 4.6.397100100 +194 -1100
Updated@​modelcontextprotocol/​sdk@​1.32.1 ⏵ 1.32.299 +110010098100

View full report

@codecov

codecov Bot commented Oct 30, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@dependabot @github

dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 6, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/minor-and-patch-93567294f4 branch November 6, 2026 07:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants