Skip to content

Bump the npm-minor-patch group across 1 directory with 18 updates - #270

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-74687f6e04
Open

Bump the npm-minor-patch group across 1 directory with 18 updates#270
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-74687f6e04

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 18 updates in the / directory:

Package From To
@modelcontextprotocol/sdk 1.30.0 1.32.1
@remotion/bundler 4.0.508 4.0.535
@remotion/cli 4.0.508 4.0.535
@remotion/renderer 4.0.508 4.0.535
express 5.2.1 5.3.0
lucide-react 1.31.0 1.57.0
multer 2.2.0 2.4.0
@types/multer 2.2.0 2.3.0
react 19.2.8 19.3.0
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.0
@types/react-dom 19.2.4 19.3.0
react-router-dom 7.18.2 7.18.4
remotion 4.0.508 4.0.535
uuid 14.0.1 14.0.3
zod 4.4.3 4.5.4
@types/multer 2.2.0 2.3.0
@types/node 26.2.0 26.6.5
@types/react 19.2.18 19.3.0
@types/react-dom 19.2.4 19.3.0
tsx 4.23.12 4.23.15

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.32.1

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1

1.32.0

Upgrade notes

  • Redirects: the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets redirectPolicy: 'follow' on StreamableHTTPClientTransport or SSEClientTransport. In browsers, a redirected request fails unless that option is set.
  • New options, both off unless you set them: maxToolInputElements on McpServer limits the number of array elements and object members in a tool call's arguments. expectedResource on requireBearerAuth accepts only tokens issued for this server (the token's audience).

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0

1.31.0

Upgrade notes

  • Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.
  • Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.1...1.31.0

1.30.1

What's Changed

New Contributors

... (truncated)

Commits
  • ff07b00 chore: bump version to 1.32.1 (#2954)
  • 8a74d50 [v1.x] docs: point the README at v2 and say what v1.x supports (#2942)
  • a8cf503 [v1.x] docs: state the principles in CLAUDE.md (#2939)
  • 32549b0 chore: bump version to 1.32.0 (#2935)
  • 588d51d [v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)
  • 5a0724d [v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)
  • 0ca0b62 [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...
  • fd26801 [v1.x] feat(server): add maxToolInputElements option to limit the number of e...
  • 727075b [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...
  • 0ff6377 [v1.x] examples: close idle sessions and cap the session map (#2914)
  • Additional commits viewable in compare view

Updates @remotion/bundler from 4.0.508 to 4.0.535

Release notes

Sourced from @​remotion/bundler's releases.

v4.0.535

What's Changed

... (truncated)

Commits
  • 0155f8c v4.0.535
  • 8f22797 Merge pull request #12212 from remotion-dev/codex/studio-premount-defaults
  • 4ccd106 Limit timeline item and caption tooltip length
  • 25f5668 Studio: Optimize premount selection subscriptions
  • f59df80 Merge pull request #12183 from saksham10arora-dotcom/docs/fix-issues-link
  • 2833854 Add internal remotion-new-markup skill
  • 602beb6 Merge pull request #12211 from remotion-dev/codex/scroll-sequence-inspector-h...
  • b4f6e09 Docs: Remove Studio default note from v5 migration guide
  • ae447ae Docs: Simplify default premount option description
  • 67293c1 Docs: Explain postmounting and reverse playback
  • Additional commits viewable in compare view

Updates @remotion/cli from 4.0.508 to 4.0.535

Release notes

Sourced from @​remotion/cli's releases.

v4.0.535

What's Changed

... (truncated)

Commits
  • 0155f8c v4.0.535
  • 8f22797 Merge pull request #12212 from remotion-dev/codex/studio-premount-defaults
  • 4ccd106 Limit timeline item and caption tooltip length
  • 25f5668 Studio: Optimize premount selection subscriptions
  • f59df80 Merge pull request #12183 from saksham10arora-dotcom/docs/fix-issues-link
  • 2833854 Add internal remotion-new-markup skill
  • 602beb6 Merge pull request #12211 from remotion-dev/codex/scroll-sequence-inspector-h...
  • b4f6e09 Docs: Remove Studio default note from v5 migration guide
  • ae447ae Docs: Simplify default premount option description
  • 67293c1 Docs: Explain postmounting and reverse playback
  • Additional commits viewable in compare view

Updates @remotion/renderer from 4.0.508 to 4.0.535

Release notes

Sourced from @​remotion/renderer's releases.

v4.0.535

What's Changed

... (truncated)

Commits
  • 0155f8c v4.0.535
  • 8f22797 Merge pull request #12212 from remotion-dev/codex/studio-premount-defaults
  • 4ccd106 Limit timeline item and caption tooltip length
  • 25f5668 Studio: Optimize premount selection subscriptions
  • f59df80 Merge pull request #12183 from saksham10arora-dotcom/docs/fix-issues-link
  • 2833854 Add internal remotion-new-markup skill
  • 602beb6 Merge pull request #12211 from remotion-dev/codex/scroll-sequence-inspector-h...
  • b4f6e09 Docs: Remove Studio default note from v5 migration guide
  • ae447ae Docs: Simplify default premount option description
  • 67293c1 Docs: Explain postmounting and reverse playback
  • Additional commits viewable in compare view

Updates express from 5.2.1 to 5.3.0

Release notes

Sourced from express's releases.

v5.3.0

Highlights

🐞 Bug fixes

  • Fixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by @​YuryShkoda in #4893

    Fixed the behavior of res.send() to prevent conflicts between Content-Length and Transfer-Encoding HTTP headers in responses. The Content-Length header in res.send() is now only added when a Transfer-Encoding header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a Transfer-Encoding header - by @​cuishuang in #7459

🚀 Improvements

  • Allow conditional revalidation for QUERY requests. req.fresh previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by @​Cherry in #7366

    // QUERY /reports with If-None-Match: "12345"
app.query('/reports', (req, res) => {
  res.set('ETag', '"12345"');
  res.send(results); // now responds 304 Not Modified
});

  • Improve HTML structure in res.redirect() responses when HTML format is accepted by adding <!DOCTYPE html>, <title>, and <body> tags for better browser compatibility - by @​Bernice55231 in #5167

  • When calling app.render with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by AkaHarshit in #6903

    app.render('index', null, callback); // now works as expected

  • Upgrade content-type to ^2.0.0, bringing a faster parser (~1.5x quicker Content-Type parsing/formatting in res.send()) along with a behavior change: res.send() now keeps any existing parameters when adding the charset and no longer throws on a Content-Type that fails to parse. type-is is upgraded to ^2.1.0 as part of the same change - by @​blakeembrey in #7234

    res.set('Content-Type', 'text/plain; foo=bar').send('hey');
// -> Content-Type: text/plain; foo=bar; charset=utf-8

  • The default error handler now logs the full error object instead of only its stack trace, so nested details such as Error.cause and library-specific properties (e.g. Sequelize's parent/original) are no longer swallo...

    Description has been truncated

@dependabot
Bump the npm-minor-patch group across 1 directory with 18 updates
0a1755d 
Bumps the npm-minor-patch group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.32.1` |
| [@remotion/bundler](https://github.com/remotion-dev/remotion) | `4.0.508` | `4.0.535` |
| [@remotion/cli](https://github.com/remotion-dev/remotion) | `4.0.508` | `4.0.535` |
| [@remotion/renderer](https://github.com/remotion-dev/remotion) | `4.0.508` | `4.0.535` |
| [express](https://github.com/expressjs/express) | `5.2.1` | `5.3.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.57.0` |
| [multer](https://github.com/expressjs/multer) | `2.2.0` | `2.4.0` |
| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.2.0` | `2.3.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.2` | `7.18.4` |
| [remotion](https://github.com/remotion-dev/remotion) | `4.0.508` | `4.0.535` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.1` | `14.0.3` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |
| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.2.0` | `2.3.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.5` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.15` |



Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.32.1
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.32.1)

Updates `@remotion/bundler` from 4.0.508 to 4.0.535
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.508...v4.0.535)

Updates `@remotion/cli` from 4.0.508 to 4.0.535
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.508...v4.0.535)

Updates `@remotion/renderer` from 4.0.508 to 4.0.535
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.508...v4.0.535)

Updates `express` from 5.2.1 to 5.3.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.2.1...v5.3.0)

Updates `lucide-react` from 1.31.0 to 1.57.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.57.0/packages/lucide-react)

Updates `multer` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](expressjs/multer@v2.2.0...v2.4.0)

Updates `@types/multer` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-router-dom` from 7.18.2 to 7.18.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.4/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.4/packages/react-router-dom)

Updates `remotion` from 4.0.508 to 4.0.535
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.508...v4.0.535)

Updates `uuid` from 14.0.1 to 14.0.3
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.1...v14.0.3)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

Updates `@types/multer` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer)

Updates `@types/node` from 26.2.0 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `tsx` from 4.23.12 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.15)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@remotion/bundler"
  dependency-version: 4.0.535
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@remotion/cli"
  dependency-version: 4.0.535
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@remotion/renderer"
  dependency-version: 4.0.535
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: express
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: multer
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/multer"
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: react-router-dom
  dependency-version: 7.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: remotion
  dependency-version: 4.0.535
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: uuid
  dependency-version: 14.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/multer"
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from nmbrthirteen as a code owner October 17, 2026 06:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 17, 2026
@coderabbitai

coderabbitai Bot commented Oct 17, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: dfc3fc90-11f3-4e57-9266-55513d839eda

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@socket-security

socket-security Bot commented Oct 17, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​react-router-dom@​7.18.2 ⏵ 7.18.41001006593 -1100
Updatednpm/​@​types/​multer@​2.2.0 ⏵ 2.3.0100 +110073 +188 +7100
Updatednpm/​@​types/​react-dom@​19.2.4 ⏵ 19.3.0100 +110075 +188100
Updatednpm/​@​remotion/​bundler@​4.0.508 ⏵ 4.0.5359810078 +19680
Updatednpm/​@​types/​react@​19.2.18 ⏵ 19.3.01001007990100
Updatednpm/​@​remotion/​cli@​4.0.508 ⏵ 4.0.53596 +310080 +19680
Updatednpm/​@​remotion/​renderer@​4.0.508 ⏵ 4.0.5358810082 +19680
Updatednpm/​remotion@​4.0.508 ⏵ 4.0.53599100100 +19680
Updatednpm/​lucide-react@​1.31.0 ⏵ 1.57.010010098 +196 +180
Updatednpm/​@​types/​node@​26.2.0 ⏵ 26.6.5100 +110081 +196 +2100
Updatednpm/​tsx@​4.23.12 ⏵ 4.23.151001008193100
Updatednpm/​react@​19.2.8 ⏵ 19.3.0100 +110084 +197100
Updatednpm/​uuid@​14.0.1 ⏵ 14.0.3100100100 +192100
Updatednpm/​react-dom@​19.2.8 ⏵ 19.3.010010092 +198100
Updatednpm/​multer@​2.2.0 ⏵ 2.4.0100 +1100 +31100 +192100
Updatednpm/​express@​5.2.1 ⏵ 5.3.097 +110010094 +2100
Updatednpm/​zod@​4.4.3 ⏵ 4.5.410010010096100
Updatednpm/​@​modelcontextprotocol/​sdk@​1.30.0 ⏵ 1.32.199 +1100 +1610097100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@nmbrthirteen nmbrthirteen Awaiting requested review from nmbrthirteen nmbrthirteen is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants