Skip to content

chore(deps): bump the npm-production group across 1 directory with 8 updates - #652

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-d528984633
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-d528984633

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the npm-production group with 8 updates in the / directory:

Package From To
@hono/mcp 0.2.5 0.3.2
@1password/sdk 0.4.1 0.5.0
uuid 14.0.0 14.0.2
@gilbarbara/deep-equal 0.3.1 0.4.1
@tanstack/react-router 1.170.34 1.170.35
codemirror-json-schema 0.6.1 0.8.1
hexy 0.3.5 0.4.0
js-md5 0.8.3 0.9.2

Updates @hono/mcp from 0.2.5 to 0.3.2

Release notes

Sourced from @​hono/mcp's releases.

@​hono/mcp@​0.3.2

Patch Changes

@​hono/mcp@​0.3.1

Patch Changes

@​hono/mcp@​0.3.0

Minor Changes

  • #1774 9575cbc4b8b32bb1605a465a414a9728f1a6ef9b Thanks @​bookernath! - relax Accept header validation to accept application/json, text/event-stream, or */* individually, improving compatibility with Gemini CLI, Java MCP SDK, Open WebUI, and curl. Add strictAcceptHeader option for strict MCP spec compliance.
Changelog

Sourced from @​hono/mcp's changelog.

0.3.2

Patch Changes

0.3.1

Patch Changes

0.3.0

Minor Changes

  • #1774 9575cbc4b8b32bb1605a465a414a9728f1a6ef9b Thanks @​bookernath! - relax Accept header validation to accept application/json, text/event-stream, or */* individually, improving compatibility with Gemini CLI, Java MCP SDK, Open WebUI, and curl. Add strictAcceptHeader option for strict MCP spec compliance.
Commits

Updates @1password/sdk from 0.4.1 to 0.5.0

Updates uuid from 14.0.0 to 14.0.2

Release notes

Sourced from uuid's releases.

v14.0.2

14.0.2 (2026-08-18)

Bug Fixes

  • v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
  • v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
  • v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)
Changelog

Sourced from uuid's changelog.

14.0.2 (2026-08-18)

Bug Fixes

  • v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
  • v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
  • v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)
Commits
  • fd59f02 chore(main): release 14.0.2 (#967)
  • f3c564e docs: point the Node support permalink at the CI version matrix (#974)
  • b1da338 fix(v1): set the multicast bit on v1Bytes's own randomly-generated node (#973)
  • 6adcc1d fix(v1): carry nsecs overflow into the timestamp's high bits (#972)
  • ea83515 docs: cleanup API summary (#968)
  • ac36860 chore: pin publint version in CI (#966)
  • a67db57 fix(v7): align default seq formula in v7Bytes with updateV7State (#965)
  • 7017780 chore(main): release 14.0.1 (#964)
  • f2c3e4b chore: fix release-please workflow (#963)
  • 27ffae5 fix: add types condition to node export for moduleResolution bundler (#961)
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @gilbarbara/deep-equal from 0.3.1 to 0.4.1

Release notes

Sourced from @​gilbarbara/deep-equal's releases.

0.4.1

  • Add equality checks for errors and WeakMap/WeakSet: e38051fa703095ce214a70a03f26e8a707d977b0
  • Fix CI build for publish: 0179a146b375d7211410ef03f7abb6fb44d3fef3
  • Refactor main functions for clarity: a9a2dcd0c17008fc20236e17efd4f2c278c1b1a4

0.4.0

  • Upgrade dependencies: dc69b4f70aeadc1cdf19f8b0dd320c9ef51347ce
  • Update CI configuration: e78247df028d3ada61ce8c1c367187d2bdf65130
  • Fix equality checks for circular references: 803f6e0bc38d44c1c8856aec9a378cc1935cfbf2
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​gilbarbara/deep-equal since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @tanstack/react-router from 1.170.34 to 1.170.35

Release notes

Sourced from @​tanstack/react-router's releases.

@​tanstack/react-router@​1.170.35

Patch Changes

  • #7824 8c43c71 - Upgrade TanStack Store to 0.11 and migrate router subscriptions to useSelector, preserving selector comparisons and Vue subscription cleanup.
Changelog

Sourced from @​tanstack/react-router's changelog.

1.170.35

Patch Changes

  • #7824 8c43c71 - Upgrade TanStack Store to 0.11 and migrate router subscriptions to useSelector, preserving selector comparisons and Vue subscription cleanup.
Commits

Updates codemirror-json-schema from 0.6.1 to 0.8.1

Release notes

Sourced from codemirror-json-schema's releases.

v0.8.1

Patch Changes

  • #151 d360a86 Thanks @​skrabe! - Fixed validation bugs: single objects incorrectly passed array schemas, invalid YAML caused errors after root-level change(now skipped if unparseable), and added tests ensuring non-array values(object, boolean, string, number) are correctly rejected.

v0.8.0

Minor Changes

v0.7.9

Patch Changes

v0.7.8

Patch Changes

v0.7.7

Patch Changes

v0.7.6

Patch Changes

  • #115 c8d2594 Thanks @​acao! - set @​codemirror/autocomplete as an optional peer, at a fix version for a bug with curly braces

v0.7.5

Patch Changes

  • #112 ccffa61 Thanks @​acao! - fixes bundling - remove .js imports and remains as moduleResolution: 'Node' to match cm6

v0.7.4

Patch Changes

... (truncated)

Changelog

Sourced from codemirror-json-schema's changelog.

0.8.1

Patch Changes

  • #151 d360a86 Thanks @​skrabe! - Fixed validation bugs: single objects incorrectly passed array schemas, invalid YAML caused errors after root-level change(now skipped if unparseable), and added tests ensuring non-array values(object, boolean, string, number) are correctly rejected.

0.8.0

Minor Changes

0.7.9

Patch Changes

0.7.8

Patch Changes

0.7.7

Patch Changes

0.7.6

Patch Changes

  • #115 c8d2594 Thanks @​acao! - set @​codemirror/autocomplete as an optional peer, at a fix version for a bug with curly braces

0.7.5

Patch Changes

... (truncated)

Commits
  • 806504f Version Packages (#156)
  • d360a86 Enforce array schema (#151)
  • 5586190 Version Packages (#147)
  • aa27ad7 Much more robust auto-completion suggestions for conditional types (even when...
  • 07c8b3a Version Packages (#134)
  • ef7f336 updated to use fine grained shiki bundle (#144)
  • 29e2da5 Fix description markdown rendering in completion (#137)
  • bfbe613 chore: Move non runtime packages to dev dependencies (#139)
  • 5806807 Revert "added limited support for conditional property values" (#141)
  • 917333e added limited support for conditional property values (#135)
  • Additional commits viewable in compare view

Updates hexy from 0.3.5 to 0.4.0

Changelog

Sourced from hexy's changelog.

[0.4.0] - 2026-02-07

Fixed

  • Issue #24: Fixed incorrect spacing and zero-padding on last line when displaying data with incomplete byte groups (dangling bytes)
    • Hex and binary radixes now show correct width (e.g., 7d instead of 007d)
    • Octal and decimal radixes now properly calculate width based on actual byte count
    • ASCII column is now properly aligned on lines with dangling bytes
  • Improved alignment for all radixes (hex, binary, octal, decimal) when handling incomplete groups

Deprecation - possibly upcoming ... BREAKING CHANGES

  • API Parameter Renaming - Parameters have been renamed for consistency:
    • widthbytesPerLine (numeric)
    • formatbytesPerGroup (numeric: 0, 1, 2, 4, 8)
    • numberingshowAddress (boolean)
    • display_offsetdisplayOffset (camelCase)
  • String-based format removed - format parameter no longer accepts string values like "twos", "fours", etc. Use numeric bytesPerGroup instead
  • maxnumberlen export deprecated - maxnumberlen is an internal helper and will be removed in a future release

Added

  • ES Module Support - Converted to native ES modules (ESM) for universal compatibility:
    • Works in Node.js 14+ (with "type": "module")
    • Works natively in Deno
    • Works in modern browsers with <script type="module">
    • No wrapper files needed - direct imports from hexy.js
  • Backward Compatibility Layer - Old parameter names are still supported and automatically mapped to new ones:
    • width (deprecated, use bytesPerLine)
    • format (deprecated, use bytesPerGroup)
    • numbering (deprecated, use showAddress)
    • display_offset (deprecated, use displayOffset)
  • TypeScript definitions include @deprecated annotations for old parameters
  • Documentation clearly marks deprecated parameters
  • 25 new test cases (92 total tests, up from 67)
  • Test cases specifically for issue #24 with hex, octal, decimal, and binary radixes
  • Better Uint8Array handling in buffer conversion

Documentation

  • Updated README with new API parameter names
  • Added deprecated parameter documentation
  • Synchronized README and hexy.js inline documentation
  • Added rom-p to contributors for fixing issue #24

Internal

  • Improved code structure and consistency
  • Enhanced view.html hex viewer
  • Updated CLI tool (hexy_cmd.js)
Commits
  • f150599 Convert to ES modules for universal compatibility
  • b30dc77 revert to xxd format of grouping bytes in 2's
  • 0d1d10f fix dangling bytes for the general case
  • b39dbab made PR backwards compatible
  • 09dc116 Merge PR #25: Fix issue #24 - incorrect spacing on last line
  • b5d06c4 new semi-major version: 0.4.0 (API change towards more scalar params).
  • 4d5bb41 fixing issue #24 -- misaligned last line when incomplete group is displayed
  • d385237 Merge branch 'a2800276:main' into master
  • f1415a4 bumped version to 0.3.5
  • 6e44a25 preventing (sometimes) slow spellchecking in the view.html
  • See full diff in compare view

Updates js-md5 from 0.8.3 to 0.9.2

Release notes

Sourced from js-md5's releases.

v0.9.2

Full Changelog: emn178/js-md5@v0.9.1...v0.9.2

v0.9.1

Changed

  • web worker detection. #44

Full Changelog: emn178/js-md5@v0.9.0...v0.9.1

v0.9.0

Added

  • Modern and lite builds generated from the same source. #44
  • support ESM.
  • Set up GitHub release action / provenance

Fixed

  • Fix uploading coverage to coveralls
  • fix recognize environment is node when use browserfs

What's Changed

New Contributors

Full Changelog: emn178/js-md5@v0.8.3...v0.9.0

Changelog

Sourced from js-md5's changelog.

v0.9.2 / 2026-07-20

Fixed

  • CI test.

v0.9.1 / 2026-07-20

Changed

  • web worker detection. #44

v0.9.0 / 2026-07-20

Added

  • Modern and lite builds generated from the same source. #44
  • support ESM.
  • Set up GitHub release action / provenance

Fixed

  • Fix uploading coverage to coveralls
  • fix recognize environment is node when use browserfs
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for js-md5 since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates

Bumps the npm-production group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@hono/mcp](https://github.com/honojs/middleware/tree/HEAD/packages/mcp) | `0.2.5` | `0.3.2` |
| @1password/sdk | `0.4.1` | `0.5.0` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.0` | `14.0.2` |
| [@gilbarbara/deep-equal](https://github.com/gilbarbara/deep-equal) | `0.3.1` | `0.4.1` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) | `1.170.34` | `1.170.35` |
| [codemirror-json-schema](https://github.com/acao/codemirror-json-schema) | `0.6.1` | `0.8.1` |
| [hexy](https://github.com/a2800276/hexy.js) | `0.3.5` | `0.4.0` |
| [js-md5](https://github.com/emn178/js-md5) | `0.8.3` | `0.9.2` |



Updates `@hono/mcp` from 0.2.5 to 0.3.2
- [Release notes](https://github.com/honojs/middleware/releases)
- [Changelog](https://github.com/honojs/middleware/blob/main/packages/mcp/CHANGELOG.md)
- [Commits](https://github.com/honojs/middleware/commits/@hono/mcp@0.3.2/packages/mcp)

Updates `@1password/sdk` from 0.4.1 to 0.5.0

Updates `uuid` from 14.0.0 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.0...v14.0.2)

Updates `@gilbarbara/deep-equal` from 0.3.1 to 0.4.1
- [Release notes](https://github.com/gilbarbara/deep-equal/releases)
- [Commits](gilbarbara/deep-equal@v0.3.1...v0.4.1)

Updates `@tanstack/react-router` from 1.170.34 to 1.170.35
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.35/packages/react-router)

Updates `codemirror-json-schema` from 0.6.1 to 0.8.1
- [Release notes](https://github.com/acao/codemirror-json-schema/releases)
- [Changelog](https://github.com/jsonnext/codemirror-json-schema/blob/main/CHANGELOG.md)
- [Commits](jsonnext/codemirror-json-schema@v0.6.1...v0.8.1)

Updates `hexy` from 0.3.5 to 0.4.0
- [Changelog](https://github.com/a2800276/hexy.js/blob/main/CHANGELOG.md)
- [Commits](a2800276/hexy.js@0.3.5...v0.4.0)

Updates `js-md5` from 0.8.3 to 0.9.2
- [Release notes](https://github.com/emn178/js-md5/releases)
- [Changelog](https://github.com/emn178/js-md5/blob/master/CHANGELOG.md)
- [Commits](emn178/js-md5@v0.8.3...v0.9.2)

---
updated-dependencies:
- dependency-name: "@hono/mcp"
  dependency-version: 0.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@1password/sdk"
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@gilbarbara/deep-equal"
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@tanstack/react-router"
  dependency-version: 1.170.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: codemirror-json-schema
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: hexy
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: js-md5
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 14, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 15, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-production-d528984633 branch September 15, 2026 20:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants