Skip to content

build(deps): bump the production-dependencies group across 1 directory with 10 updates - #106

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4256b86d1d
Open

build(deps): bump the production-dependencies group across 1 directory with 10 updates#106
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4256b86d1d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 10 updates in the / directory:

Package From To
@fastify/static 9.3.0 10.1.3
@modelcontextprotocol/sdk 1.29.0 1.30.0
better-sqlite3 12.11.1 13.0.3
fastify 5.10.0 5.11.3
ws 8.21.0 8.21.3
@fontsource/inter 5.2.8 5.3.0
@fontsource/jetbrains-mono 5.2.8 5.3.0
konva 9.3.18 10.3.0
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8

Updates @fastify/static from 9.3.0 to 10.1.3

Release notes

Sourced from @​fastify/static's releases.

v10.1.2

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify-static@v10.1.1...v10.1.2

v10.1.1

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify-static@v10.1.0...v10.1.1

v10.1.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v10.0.0...v10.1.0

v10.0.0

Breaking Changes

  • setHeaders now using FastifyReply instead of Response.

You should refactor your code to use the reply helpers. For example,

// Before
const fastify = require('fastify')({logger: true})
const path = require('node:path')
fastify.register(require('@​fastify/static'), {
root: path.join(__dirname, 'public'),
prefix: '/public/', // optional: default '/',
setHeaders(res) {
res.setHeader('X-Test', 'Foo')
}
})
</tr></table>

... (truncated)

Commits

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates better-sqlite3 from 12.11.1 to 13.0.3

Release notes

Sourced from better-sqlite3's releases.

v13.0.3

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v13.0.2...v13.0.3

v13.0.2

What's Changed

New Contributors

Full Changelog: WiseLibs/better-sqlite3@v13.0.1...v13.0.2

v13.0.1

Full Changelog: WiseLibs/better-sqlite3@v13.0.0...v13.0.1

Fixed a regression in parameter binding where it would be overly strict and reject plain objects from other realms (e.g., in jest tests).

v13.0.0

Version 13.0.0 marks a major milestone, as it's the first version of better-sqlite3 to run on the N-API. This means prebuilt binaries should theoretically work across different versions of Node.js and Electron, and perhaps even other runtimes like Bun. As a result, we've removed the deprecated prebuild-install dependency, and now prebuilt binaries are published directly with the better-sqlite3 code itself. If your platform/architecture doesn't have a prebuilt binary, it should compile during install as before.

What's Changed

New Contributors

Full Changelog: WiseLibs/better-sqlite3@v12.12.0...v13.0.0

v12.12.0

What's Changed

[!WARNING]

BREAKING: Starting with Electron v43, binary assets will require glibc 2.41 or higher on Linux hosts.

... (truncated)

Commits

Updates fastify from 5.10.0 to 5.11.3

Release notes

Sourced from fastify's releases.

v5.11.3

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

v5.11.2

What's Changed

  • fix fastify version in fastify.js

Full Changelog: fastify/fastify@v5.11.1...v5.11.2

v5.11.1

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.11.0...v5.11.1

v5.11.0

What's Changed

... (truncated)

Commits
  • a22cede Bumped v5.11.3
  • 16a74e7 fix: reset lastIndex before testing global/sticky content-type RegExp parsers...
  • 27938ac fix: recognize constructor-assigned built-in properties as decorator dependen...
  • a2f5905 chore: Bump fastify/workflows/.github/workflows/nested-quality.yml (#6917)
  • 22c419a chore: Bump fastify/workflows/.github/workflows/lock-threads.yml (#6916)
  • f5b1400 docs(encapsulation): clarify nested plugin scopes (#6893)
  • 9eaef51 fix: pass null instead of undefined to requestCompleted on success (#6837)
  • 39e87e8 docs(readme): fix grammar and cjs capitalization (#6899)
  • 3f6451c docs(errors): document what the default error handler sends (#6894)
  • f28528f docs: document percent-decoded route params as untrusted input (#6903)
  • Additional commits viewable in compare view

Updates ws from 8.21.0 to 8.21.3

Release notes

Sourced from ws's releases.

8.21.3

Bug fixes

  • The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

8.21.2

Bug fixes

  • Fixed a test for CITGM (2eb3be0b).

8.21.1

Bug fixes

  • Empty fragments are now counted toward the limit (a2f4e7c0).
  • The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).
Commits
  • c791e70 [dist] 8.21.3
  • e97a20e [fix] Reject offers with client_max_window_bits below config
  • 787ebf2 [dist] 8.21.2
  • b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
  • e4bb883 [security] Use GitHub PVR as main reporting channel
  • 2eb3be0 [test] Skip test on Node.js versions where it does not apply
  • ae1de54 [dist] 8.21.1
  • 8e9511b [ci] Trust Coveralls Homebrew tap
  • f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
  • 8df8265 [ci] Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates @fontsource/inter from 5.2.8 to 5.3.0

Commits

Updates @fontsource/jetbrains-mono from 5.2.8 to 5.3.0

Commits

Updates konva from 9.3.18 to 10.3.0

Release notes

Sourced from konva's releases.

v10.3.0

Commits

  • 5b5ed7d: fix readme (Anton Lavrevov)
  • 398f9d3: fix ci (Anton Lavrevov)
  • 3816a51: Added direction property to TextPath shape for better RTL support (Anton Lavrevov)
  • e201727: restore all tests (Anton Lavrevov)
  • ae5bbf7: 10.3.0 (Anton Lavrevov)

10.2.5

Commits

  • 9e34328: fix safari text + shadow + opacity render (Anton Lavrevov)
  • 2315976: update CHANGELOG with new version (Anton Lavrevov)
  • ff7faac: build for 10.2.5 (Anton Lavrevov)
  • 0fe9f92: update cdn link (Anton Lavrevov)

10.2.4

Commits

  • 8c487a1: update CHANGELOG with new version (Anton Lavrevov)
  • 46ac72c: build for 10.2.3 (Anton Lavrevov)
  • 811d62a: update cdn link (Anton Lavrevov)
  • 2528fb0: fixed fire execution order (Anton Lavrevov)
  • 7d704c0: update CHANGELOG with new version (Anton Lavrevov)
  • d69786e: build for 10.2.4 (Anton Lavrevov)
  • 5193253: update cdn link (Anton Lavrevov)

10.2.3

Commits

  • 6f3e7f5: fix possible crash on drag + transformer (Anton Lavrevov)
  • 4fd2712: update CHANGELOG with new version (Anton Lavrevov)
  • 167c30f: build for 10.2.3 (Anton Lavrevov)
  • a537685: update cdn link (Anton Lavrevov)

10.2.2

Commits

  • 60506b5: fix possible incorrect structure (Anton Lavrevov)
  • e3e8618: changes (Anton Lavrevov)
  • c2ff284: update CHANGELOG with new version (Anton Lavrevov)
  • 4dd3e9d: build for 10.2.2 (Anton Lavrevov)
  • c7776f0: update cdn link (Anton Lavrevov)

10.2.1

Bug Fixes

Code Refactoring

Tests

... (truncated)

Changelog

Sourced from konva's changelog.

10.3.0 (2026-04-30)

  • Added direction property to TextPath shape for better RTL support

10.2.5 (2026-04-11)

  • Fixed transparent text with shadow render in Safari

10.2.4 (2026-04-10)

  • Fixed possible event execution order

10.2.3 (2026-03-16)

  • More crash fixes

10.2.1 (2026-03-13)

  • Fix possible crash

10.2.0 (2026-01-15)

  • Added rotateAnchorAngle property to Transformer to control the position of the rotation anchor around the bounding box

10.1.0 (2026-01-14)

  • Added underline offset option and related test for Text Annotation
  • Fixed large memory usage on cache
  • Fix bounding box calculation for bezier lines
  • Fixed cached render with buffer canvas is used

10.0.12 (2025-11-21)

  • Better canvas farbling detection logic

10.0.11 (2025-11-20)

  • Fixed broken release

10.0.10 (2025-11-20)

  • Update hit detection system to handle canvas farbling. Hit detection should work better on Brave browser. Thanks @​wiverson to the idea and implementation idea.

10.0.9 (2025-11-08)

  • Fixed line-through rendering when letter spacing is used

10.0.8 (2025-10-24)

  • Fixed opacity level when a cached shape has opacity, fill and stroke

... (truncated)

Commits

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-4256b86d1d branch 3 times, most recently from cc7d26c to cb186e5 Compare August 13, 2026 19:28
@dependabot
build(deps): bump the production-dependencies group across 1 director…
a9aec91 
…y with 10 updates

Bumps the production-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@fastify/static](https://github.com/fastify/fastify-static) | `9.3.0` | `10.1.3` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `12.11.1` | `13.0.3` |
| [fastify](https://github.com/fastify/fastify) | `5.10.0` | `5.11.3` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.3` |
| [@fontsource/inter](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/inter) | `5.2.8` | `5.3.0` |
| [@fontsource/jetbrains-mono](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/jetbrains-mono) | `5.2.8` | `5.3.0` |
| [konva](https://github.com/konvajs/konva) | `9.3.18` | `10.3.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |



Updates `@fastify/static` from 9.3.0 to 10.1.3
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](https://github.com/fastify/fastify-static/commits)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `better-sqlite3` from 12.11.1 to 13.0.3
- [Release notes](https://github.com/WiseLibs/better-sqlite3/releases)
- [Commits](WiseLibs/better-sqlite3@v12.11.1...v13.0.3)

Updates `fastify` from 5.10.0 to 5.11.3
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.10.0...v5.11.3)

Updates `ws` from 8.21.0 to 8.21.3
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.3)

Updates `@fontsource/inter` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/inter)

Updates `@fontsource/jetbrains-mono` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/jetbrains-mono)

Updates `konva` from 9.3.18 to 10.3.0
- [Release notes](https://github.com/konvajs/konva/releases)
- [Changelog](https://github.com/konvajs/konva/blob/master/CHANGELOG.md)
- [Commits](konvajs/konva@9.3.18...v10.3.0)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

---
updated-dependencies:
- dependency-name: "@fastify/static"
  dependency-version: 10.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@fontsource/inter"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@fontsource/jetbrains-mono"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: better-sqlite3
  dependency-version: 13.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: fastify
  dependency-version: 5.11.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: konva
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ws
  dependency-version: 8.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-4256b86d1d branch from cb186e5 to a9aec91 Compare August 15, 2026 09:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants