Skip to content

Bump the npm-minor-and-patch group across 1 directory with 9 updates - #26

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-e391c1c531
Open

Bump the npm-minor-and-patch group across 1 directory with 9 updates#26
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-e391c1c531

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 9 updates in the / directory:

Package From To
@changesets/cli 2.31.0 2.31.1
tsx 4.23.1 4.23.13
turbo 2.10.5 2.10.12
@types/node 22.20.1 22.20.2
vitest 4.1.10 4.1.11
@anthropic-ai/sdk 0.111.0 0.125.0
@modelcontextprotocol/sdk 1.29.0 1.30.0
gremlin 3.8.1 3.8.2
mssql 12.7.0 12.7.2

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

  • #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
Changelog

Sourced from @​changesets/cli's changelog.

2.31.1

Patch Changes

  • #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
Commits

Updates tsx from 4.23.1 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

  • shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

  • preserve async ESM require fallback (55cbece)

This release is also available on:

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

This release is also available on:

v4.23.9

4.23.9 (2026-08-06)

... (truncated)

Commits
  • 28e1f12 fix(cache): bound shared transform cache memory (#835)
  • ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
  • 651f5be test: cover CommonJS TypeScript import.meta paths
  • bd3bc64 test: cover CommonJS loader source fallback
  • 55cbece fix: preserve async ESM require fallback
  • 6c5ba85 docs: document CommonJS default interop
  • ec1bcd5 fix: support nyc coverage discovery (#710)
  • b6e5b48 docs: clarify CommonJS default imports
  • 2f55884 fix: map Node test locations
  • de935d5 docs: document Node source-map stack formatting
  • Additional commits viewable in compare view

Updates turbo from 2.10.5 to 2.10.12

Release notes

Sourced from turbo's releases.

Turborepo v2.10.12

What's Changed

Changelog

... (truncated)

Commits

Updates @types/node from 22.20.1 to 22.20.2

Commits

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 9bd8d46 chore: release v4.1.11 (#10995)
  • 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
  • See full diff in compare view

Updates @anthropic-ai/sdk from 0.111.0 to 0.125.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.125.0

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

  • api: add auto mode tool permissions for Managed Agents (7f5e2c6)
  • api: add content_too_large web_fetch tool error code (f06416e)
  • api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
  • api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

  • client: clean up the unused idempotency request option (4ce2772)
  • docs: correct the environment scope field description (835c677)
  • internal: restore package version (b43a7f6)
  • internal: stop stamping the package version into generated files (80ace5e)
  • tests: restore empty test package marker files (4f27519)

sdk: v0.124.0

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.125.0 (2026-09-10)

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

  • api: add auto mode tool permissions for Managed Agents (7f5e2c6)
  • api: add content_too_large web_fetch tool error code (f06416e)
  • api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
  • api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

  • client: clean up the unused idempotency request option (4ce2772)
  • docs: correct the environment scope field description (835c677)
  • internal: restore package version (b43a7f6)
  • internal: stop stamping the package version into generated files (80ace5e)
  • tests: restore empty test package marker files (4f27519)

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

0.123.0 (2026-09-01)

... (truncated)

Commits
  • 135f71e Merge pull request #1184 from anthropics/release-please--branches--main--chan...
  • 415537b chore: release main
  • 7f5e2c6 feat(api): add auto mode tool permissions for Managed Agents
  • 9e2d945 feat(api): support mounting public GitHub repositories without an authorizati...
  • 96ecb87 environments: the worker runs on the work item's session token alone when one...
  • 318d42d feat(api): add the user-profiles-2026-09-04 beta value and external_user_deta...
  • 835c677 chore(docs): correct the environment scope field description
  • 4ce2772 chore(client): clean up the unused idempotency request option
  • f06416e feat(api): add content_too_large web_fetch tool error code
  • b43a7f6 chore(internal): restore package version
  • Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates gremlin from 3.8.1 to 3.8.2

Changelog

Sourced from gremlin's changelog.

=== TinkerPop 3.8.2 (Release Date: September 1, 2026)

This release also includes changes from <<release-3-7-7, 3.7.7>>.

  • Enabled building and running with Java 21 and Java 25 (experimental; spark-gremlin excluded, as Spark 3.3.x only runs on Java 8 through 17).
  • Bumped to Groovy 4.0.32 which adds support for parsing Java 25 bytecode.
  • Bumped Hadoop to 3.4.3 (and Kerby to 2.0.3) to enable hadoop-gremlin to build and run on Java 25.
  • Add missing Configuring interface to GraphStepPlaceholder and VertexStepPlaceholder
  • Fixed bug in group() value traversal where keys were retained with stale barrier state instead of being filtered when steps following a Barrier in the second by() produced no output (e.g. by(values("age").fold().unfold()) or by(__.out().fold().count(local).is(P.gt(0))) for vertices with no out-edges).
  • Corrected numerous inaccuracies in the reference documentation, including wrong default values (connection pool sizes, buffer sizes, ports, timeouts), stale serializer class names, removed options documented as available, and broken code examples across the JVM, Python, .NET, Go, and JavaScript drivers.
  • Fixed bug in gremlin-javascript GraphBinary and GraphSON deserialization where OffsetDateTime values outside the JavaScript Date range were silently returned as invalid Date objects instead of failing deserialization.
  • Added a propertyMap() helper to view an element's properties as a map keyed by property key, on the Element structure API in gremlin-core (inherited by Vertex, Edge, and VertexProperty) and on Vertex, Edge, and VertexProperty in gremlin-javascript, gremlin-python, gremlin-dotnet, and gremlin-go.
  • Fixed a bug in gremlin-go where a VertexProperty deserialized from GraphBinary did not have its Key field populated, causing Vertex.PropertyMap() to group properties under an empty key.
  • Removed final from RepeatStep to allow providers to extend it.
  • Restricted GraphSON 2.0 and 3.0 TraversalStrategy deserialization to registered strategies. (breaking)

==== Bugs

  • TINKERPOP-3185 Ensure consistency of option key constants for with()
  • TINKERPOP-3225 conjoin has incorrect null handling (breaking)
  • TINKERPOP-3270 where(P) throws ClassCastException for non-String predicate values instead of a descriptive validation error
  • TINKERPOP-3271 subgraph() throws ClassCastException instead of a descriptive error for non-Edge input
  • TINKERPOP-3273 V and hasId consistency with collection unrolling
  • TINKERPOP-3275 gremlin-python graphbinary BigInt serializer incorrect for negative boundary values
  • TINKERPOP-3276 gremlin-javascript offsetdatetime silently creates incorrect values
  • TINKERPOP-3277 gremlin-go can't serialize zero in bigdecimal/biginteger
  • TINKERPOP-3278 Gryo IO unsafe Java deserialization
  • TINKERPOP-3279 GraphSON 1.0 embedded types unsafe deserialization (breaking)
  • TINKERPOP-3281 GraphBinary deserializer unbounded pre-allocation from length prefixes

==== Improvements

  • TINKERPOP-2085 Remove dependency on Mono
  • TINKERPOP-3042 Deprecate ProductiveByStrategy
  • TINKERPOP-3151 Allow floats with no leading digits
  • TINKERPOP-3179 Support withComputer() for go
  • TINKERPOP-3238 fail() improvements for remote applications
  • TINKERPOP-3242 Pull Configuring interface into VertexStepContract and GraphStepContract
  • TINKERPOP-3243 Add next(n) batch iteration to gremlin-javascript
  • TINKERPOP-3244 Add next(n) batch iteration to gremlin-go for GLV parity

[[release-3-8-1]]

Commits
  • 952d8d8 TinkerPop 3.8.2 release
  • 1a99f50 Merge branch '3.7-dev' into 3.8-dev
  • 86a495f TinkerPop 3.7.7 release
  • 9ef293d Merge remote-tracking branch 'origin/3.7-dev' into 3.8-dev
  • a97e7d8 CTR update Apache Ivy version in NOTICE files
  • 2718dbb Merge remote-tracking branch 'origin/3.7-dev' into 3.8-dev
  • 76b06f7 Add toy-graph dataset captions to rendered Gremlin examples CTR
  • 99c9153 Merge branch '3.7-dev' into 3.8-dev
  • d429ec0 Cap and expire requests deferred during SASL authentication
  • 0e743cb Fixed P.typeOf()
  • Additional commits viewable in compare view

Updates mssql from 12.7.0 to 12.7.2

Release notes

Sourced from mssql's releases.

v12.7.2

12.7.2 (2026-09-10)

Bug Fixes

  • reject column names that break out of quoted identifiers (aeddce6)
  • reject type metadata that escapes the parameter declaration (451a09c)
  • release the connection when a bulk load's options are rejected (fac0867)
  • remove request listeners when a request is abandoned before it is sent (79550ef)
  • stop bulk insert continuing after an invalid table name (df37324)
  • validate bulk ordering keys (53fdf11)
  • validate parameter names against an allowlist (1ea5a28)
  • validate stored procedure names (b305420), closes Request#execute

v12.7.1

12.7.1 (2026-09-08)

Bug Fixes

  • only invoke close() callback once while pool is connecting (9639b47)
Commits
  • f1cae83 Merge pull request #1902 from dhensby/ci/skip-merge-commit-lint
  • c19323b ci: skip commit linting for merge commits on push
  • 8497f37 Merge commit from fork
  • c784f02 docs: note that backports are decided case by case
  • 6e4de06 Merge branch '11.x' into master
  • a98dce2 Merge branch '10.x' into 11.x
  • 2b169d0 Merge branch '9.3.x' into 10.x
  • 846076c Merge branch '9.2.x' into 9.3.x
  • 14b7083 Merge branch '9.1.x' into 9.2.x
  • c30d5cf test: cover the output parameter type size guards
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-minor-and-patch group across 1 directory with 9 updates
75f60d6 
Bumps the npm-minor-and-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `2.31.0` | `2.31.1` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.13` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.5` | `2.10.12` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.1` | `22.20.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.111.0` | `0.125.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [gremlin](https://github.com/apache/tinkerpop) | `3.8.1` | `3.8.2` |
| [mssql](https://github.com/tediousjs/node-mssql) | `12.7.0` | `12.7.2` |



Updates `@changesets/cli` from 2.31.0 to 2.31.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/@changesets/cli@2.31.1/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@2.31.1/packages/cli)

Updates `tsx` from 4.23.1 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.1...v4.23.13)

Updates `turbo` from 2.10.5 to 2.10.12
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.5...v2.10.12)

Updates `@types/node` from 22.20.1 to 22.20.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

Updates `@anthropic-ai/sdk` from 0.111.0 to 0.125.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.111.0...sdk-v0.125.0)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `gremlin` from 3.8.1 to 3.8.2
- [Changelog](https://github.com/apache/tinkerpop/blob/master/CHANGELOG.asciidoc)
- [Commits](apache/tinkerpop@gremlin-go/v3.8.1...gremlin-go/v3.8.2)

Updates `mssql` from 12.7.0 to 12.7.2
- [Release notes](https://github.com/tediousjs/node-mssql/releases)
- [Changelog](https://github.com/tediousjs/node-mssql/blob/master/CHANGELOG.txt)
- [Commits](tediousjs/node-mssql@v12.7.0...v12.7.2)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: turbo
  dependency-version: 2.10.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 22.20.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.125.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: gremlin
  dependency-version: 3.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: mssql
  dependency-version: 12.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants