Skip to content

chore(deps): bump ip-address from 10.2.0 to 10.4.0 - #568

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ip-address-10.4.0
Closed

chore(deps): bump ip-address from 10.2.0 to 10.4.0#568
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ip-address-10.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown

Bumps ip-address from 10.2.0 to 10.4.0.

Release notes

Sourced from ip-address's releases.

v10.4.0

What's Changed

Full Changelog: beaugunderson/ip-address@v10.3.1...v10.4.0

v10.3.1

Full Changelog: beaugunderson/ip-address@v10.3.0...v10.3.1

v10.3.0

Full Changelog: beaugunderson/ip-address@v10.2.2...v10.3.0

v10.2.2

Full Changelog: beaugunderson/ip-address@v10.2.1...v10.2.2

v10.2.1

Full Changelog: beaugunderson/ip-address@v10.2.0...v10.2.1

Commits
  • fbb8db2 10.4.0
  • 45a2b11 Validate the byte arrays Address6 is given (#217)
  • bac8810 Keep the package loadable on node 12, and enforce it (#216)
  • 9b3d848 Add a security policy and a README section on security posture
  • e84a7b3 Order the README API reference Address4, Address6, AddressError
  • 015160b Collapse each class in the README API reference
  • 34061a8 Pin checkout and setup-node to commits in the release job
  • c5fae5d Pin action-gh-release to a commit and move it to 3.0.2
  • e0ef048 Replace CircleCI with GitHub Actions
  • 5e3ceb7 Add GitHub Actions CI across Node 20, 22, 24 and 25 (#213)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ip-address since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.2.0 to 10.4.0.
- [Release notes](https://github.com/beaugunderson/ip-address/releases)
- [Commits](beaugunderson/ip-address@v10.2.0...v10.4.0)

---
updated-dependencies:
- dependency-name: ip-address
  dependency-version: 10.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 4, 2026
@sonarqubecloud

sonarqubecloud Bot commented Aug 4, 2026

Copy link
Copy Markdown

@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown

Test Coverage Report

Overall Coverage: 96.84%

Metric Percentage
Statements 96.2%
Branches 87.97%
Functions 94.83%
Lines 96.84%

View detailed coverage report

@polaz

polaz commented Aug 8, 2026

Copy link
Copy Markdown
Member

Superseded by #571, which applies all pending dependency updates in one pass.

@polaz polaz closed this Aug 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/ip-address-10.4.0 branch August 8, 2026 18:26
polaz added a commit that referenced this pull request Aug 8, 2026
* fix(logging): never write logs to stdout in stdio mode

- LOG_JSON=true previously created a bare pino instance that wrote
  NDJSON log lines to stdout, corrupting the MCP JSON-RPC channel in
  stdio transport mode; logs are now forced to stderr whenever the
  server runs on stdio, for both plain and JSON formats
- add LOG_DESTINATION=stdout|stderr override for HTTP mode; defaults
  keep the container convention (pretty to stderr, NDJSON to stdout)
- fix LOG_FORMAT rendering: messageFormat crossed the worker-thread
  transport boundary, duplicating the prefix and printing 'undefined'
  for the level; format tokens now drive field visibility via ignore
  list only
- document LOG_FORMAT and LOG_DESTINATION plus a destination matrix
  in the configuration guide

Closes #563

* chore(deps): update all dependencies across workspaces

Applies every pending Dependabot update in one pass:

- @cloudflare/workers-types 4.20260623.1 -> 5.20260808.1 (major)
- vitepress 2.0.0-alpha.17 -> 2.0.0-alpha.19
- undici ^8.5.0 -> ^8.10.0
- @modelcontextprotocol/sdk, @clack/prompts, eslint, prettier,
  @typescript-eslint/*, ts-jest, graphql, picomatch, xstate minor/patch
- prisma + @prisma/client 7.8.0 -> 7.9.1
- nx 23.0.0 -> 23.1.1
- lockfile-only transitive bumps: hono 4.13.1, postcss 8.5.26,
  ip-address 10.4.0, brace-expansion 1.1.18, js-yaml 3.15.1,
  fast-uri 3.1.5, tar 7.5.22, body-parser 2.3.0

typescript 7 and @types/node 26 majors are intentionally skipped:
@types/node major is on the Dependabot ignore list and the native
tsc migration is a separate effort.

Supersedes Dependabot PRs #543, #544, #545, #546, #551, #556, #557,
#559, #560, #561, #566, #568, #569, #570

* chore(ci): bump actions/setup-node to v7 and pin codeql-action to v4.37.4

Supersedes Dependabot PRs #549 and #567

* test(runners): pass statuses as an array in list_jobs schema check

The list_jobs statuses filter became an array of CiJobStatus in
c1b37f9, but the integration schema test still passed a bare string
and failed against the current schema.

* style: reformat union types per prettier 3.9

prettier 3.9 collapses short union types onto one line; reformat the
9 affected files so lint passes on the updated toolchain.

* docs(logging): describe LOG_FORMAT tokens as visibility switches

- LOG_FORMAT tokens toggle field visibility; the line always renders in
  pino-pretty's fixed order, so stop advertising custom layouts in the
  docstring and configuration guide
- add unit test for LOG_DESTINATION=stdout with the pretty transport in
  HTTP mode
- drop issue references from code comments and test names; ticket
  numbers belong in commits and PRs, not in source

* docs(troubleshooting): add JSONRPC parse error spam diagnosis

Startup 'Failed to parse JSONRPC message' bursts mean an outdated
build (stale npx cache) logging to stdout; document the symptom,
cause, and cache-refresh fix with a quick-diagnosis row.

* docs(logging): state that the log message is always rendered

The %msg token cannot suppress the message: a log line without its
message is useless, so only %time, %level, and %name act as
visibility switches. Make the docstring and configuration guide say
so explicitly instead of implying %msg is toggleable.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant