Skip to content

build(deps): Bump the minor-and-patch group with 7 updates#501

Closed
dependabot[bot] wants to merge 1 commit intodevelopmentfrom
dependabot/npm_and_yarn/development/minor-and-patch-7cb6c25e7f
Closed

build(deps): Bump the minor-and-patch group with 7 updates#501
dependabot[bot] wants to merge 1 commit intodevelopmentfrom
dependabot/npm_and_yarn/development/minor-and-patch-7cb6c25e7f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 28, 2026

Bumps the minor-and-patch group with 7 updates:

Package From To
@modelcontextprotocol/sdk 1.27.1 1.28.0
openai 6.32.0 6.33.0
undici 7.24.5 7.24.6
@typescript-eslint/eslint-plugin 8.57.1 8.57.2
@typescript-eslint/parser 8.57.1 8.57.2
@vitest/coverage-v8 4.1.0 4.1.2
vitest 4.1.0 4.1.2

Updates @modelcontextprotocol/sdk from 1.27.1 to 1.28.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.28.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0

Commits
  • a056569 chore: bump version to 1.28.0 (#1746)
  • 897bc25 fix(server/auth): RFC 8252 loopback port relaxation (#1738)
  • 398dc70 fix: clear _timeoutInfo in _onclose() and scope .finally() abort controller c...
  • 93640d3 fix: reject plain JSON Schema objects passed as inputSchema (#1596)
  • 4cbcec0 [v1.x backport] Default to client_secret_basic when server omits token_endpoi...
  • c9b58d1 feat: use scopes_supported from resource metadata by default (fixes #580) (#757)
  • 351e124 docs: add links to hosted V1 and V2 API reference docs
  • See full diff in compare view

Updates openai from 6.32.0 to 6.33.0

Release notes

Sourced from openai's releases.

v6.33.0

6.33.0 (2026-03-25)

Full Changelog: v6.32.0...v6.33.0

Features

  • api: add keys field to computer action types (27a850e)
  • client: add async iterator and stream() to WebSocket classes (e1c16ee)

Bug Fixes

  • api: align SDK response types with expanded item schemas (491cd52)
  • types: make type required in ResponseInputMessageItem (2012293)

Chores

  • ci: skip lint on metadata-only changes (74a917f)
  • internal: refactor imports (cfe9c60)
  • internal: update gitignore (71bd114)
  • tests: bump steady to v0.19.4 (f2e9dea)
  • tests: bump steady to v0.19.5 (37c6cf4)
  • tests: bump steady to v0.19.6 (496b3af)
  • tests: bump steady to v0.19.7 (8491eb6)

Refactors

  • tests: switch from prism to steady (47c0581)
Changelog

Sourced from openai's changelog.

6.33.0 (2026-03-25)

Full Changelog: v6.32.0...v6.33.0

Features

  • api: add keys field to computer action types (27a850e)
  • client: add async iterator and stream() to WebSocket classes (e1c16ee)

Bug Fixes

  • api: align SDK response types with expanded item schemas (491cd52)
  • types: make type required in ResponseInputMessageItem (2012293)

Chores

  • ci: skip lint on metadata-only changes (74a917f)
  • internal: refactor imports (cfe9c60)
  • internal: update gitignore (71bd114)
  • tests: bump steady to v0.19.4 (f2e9dea)
  • tests: bump steady to v0.19.5 (37c6cf4)
  • tests: bump steady to v0.19.6 (496b3af)
  • tests: bump steady to v0.19.7 (8491eb6)

Refactors

  • tests: switch from prism to steady (47c0581)
Commits
  • e412414 release: 6.33.0
  • 8ad76b2 fix(api): align SDK response types with expanded item schemas
  • c160eb9 feat(api): add keys field to computer action types
  • 499d71e chore(tests): bump steady to v0.19.7
  • 6170c06 chore(ci): skip lint on metadata-only changes
  • f895852 chore(tests): bump steady to v0.19.6
  • 33baf00 fix(types): make type required in ResponseInputMessageItem
  • 33f69d0 chore(internal): update gitignore
  • 4ddd31b chore(tests): bump steady to v0.19.5
  • 78d2abf feat(client): add async iterator and stream() to WebSocket classes
  • Additional commits viewable in compare view

Updates undici from 7.24.5 to 7.24.6

Release notes

Sourced from undici's releases.

v7.24.6

What's Changed

New Contributors

Full Changelog: nodejs/undici@v7.24.5...v7.24.6

Commits
  • 38eab36 Bumped v7.24.6 (#4931)
  • 993609d test: auto-init WPT submodule (#4930)
  • 1eacc49 build(deps-dev): bump typescript from 5.9.3 to 6.0.2 (#4926)
  • b64e7e4 fix: avoid prototype collisions in parseHeaders (#4923)
  • deba679 Revert "fix: assume http/https scheme for scheme-less proxy env vars (#4914)"
  • feef62b fix: support Connection header with connection-specific header names per RFC ...
  • a613d9a docs: clarify fetch and FormData pairing (#4922)
  • 2ba99a3 fix: wrap kConnector call in try/catch to prevent client hang (#4834)
  • a7398c0 fix(cache): check Authorization on request headers per RFC 9111 §3.5 (#4911)
  • 2b2afbc fix: assume http/https scheme for scheme-less proxy env vars (#4914)
  • Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.57.1 to 8.57.2

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.57.2

8.57.2 (2026-03-23)

🩹 Fixes

  • eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#11865)
  • eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#11971)
  • eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#12120)
  • eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)
  • eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)
  • eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#12127)
  • eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#11954)
  • typescript-estree: skip createIsolatedProgram fallback for projectService (#12066, #12065)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.57.2 (2026-03-23)

🩹 Fixes

  • eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#11954)
  • eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#12127)
  • eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)
  • eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#12120)
  • eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#11971)
  • eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#11865)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • be4d54d chore(release): publish 8.57.2
  • f68c8e4 fix(eslint-plugin): [prefer-readonly-parameter-types] preserve type alias inf...
  • 73acd2e fix(eslint-plugin): [no-useless-default-assignment] skip reporting false posi...
  • 3d21482 fix(eslint-plugin): [no-unsafe-return] false positive on unwrapping generic (...
  • e128548 fix(eslint-plugin): [no-restricted-types] flag banned generics in extends or ...
  • 2b7f63f chore(eslint-plugin): correct tsutils.isTypeFlag usage post-merge
  • 65175cd fix(eslint-plugin): [array-type] ignore Array and ReadonlyArray without type ...
  • 9c9ab5e feat(eslint-plugin): [no-unnecessary-type-arguments] report inferred required...
  • 42a1c89 fix(eslint-plugin): [prefer-optional-chain] remove dangling closing parenthes...
  • 71855ff docs(eslint-plugin): [no-unnecessary-condition] add link to TS handbook (#12131)
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.57.1 to 8.57.2

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.57.2

8.57.2 (2026-03-23)

🩹 Fixes

  • eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#11865)
  • eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#11971)
  • eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#12120)
  • eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)
  • eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)
  • eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#12127)
  • eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#11954)
  • typescript-estree: skip createIsolatedProgram fallback for projectService (#12066, #12065)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.57.2 (2026-03-23)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @vitest/coverage-v8 from 4.1.0 to 4.1.2

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

    View changes on GitHub

v4.1.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates vitest from 4.1.0 to 4.1.2

Release notes

Sourced from vitest's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

    View changes on GitHub

v4.1.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • fc6f482 chore: release v4.1.2
  • 6f97b55 feat: disable colors if agent is detected (#9851)
  • b3c992c fix(coverage): correct coverageConfigDefaults values and types (#9940)
  • 7c06598 fix: ensure sequential mock/unmock resolution (#9830)
  • f54abad chore: add typo-checker skill and fix typos (#9963)
  • 7aa9377 fix: don't resolve setupFiles from parent directory (#9960)
  • 1f2d318 chore: release v4.1.1
  • ebfde79 refactor: rename matchesTagsFilter to matchesTags (#9956)
  • 5611500 feat(experimental): introduce experimental.vcsProvider (#9928)
  • eec53d9 feat(experimental): expose matchesTagsFilter to test if the current filter ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.27.1` | `1.28.0` |
| [openai](https://github.com/openai/openai-node) | `6.32.0` | `6.33.0` |
| [undici](https://github.com/nodejs/undici) | `7.24.5` | `7.24.6` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.57.1` | `8.57.2` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.57.1` | `8.57.2` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.0` | `4.1.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.0` | `4.1.2` |


Updates `@modelcontextprotocol/sdk` from 1.27.1 to 1.28.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0)

Updates `openai` from 6.32.0 to 6.33.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.32.0...v6.33.0)

Updates `undici` from 7.24.5 to 7.24.6
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.24.5...v7.24.6)

Updates `@typescript-eslint/eslint-plugin` from 8.57.1 to 8.57.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.2/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.57.1 to 8.57.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.2/packages/parser)

Updates `@vitest/coverage-v8` from 4.1.0 to 4.1.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/coverage-v8)

Updates `vitest` from 4.1.0 to 4.1.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/vitest)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: openai
  dependency-version: 6.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: undici
  dependency-version: 7.24.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.57.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.57.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 28, 2026
@vercel
Copy link
Copy Markdown

vercel bot commented Mar 28, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
libscope Ignored Ignored Mar 28, 2026 6:03am

@sonarqubecloud
Copy link
Copy Markdown

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 4, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 4, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/development/minor-and-patch-7cb6c25e7f branch April 4, 2026 06:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants