Skip to content

deps: bump the production group across 1 directory with 12 updates#53

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/production-1b9cfca55f
Open

deps: bump the production group across 1 directory with 12 updates#53
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/production-1b9cfca55f

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps the production group with 12 updates in the / directory:

Package From To
@modelcontextprotocol/sdk 1.26.0 1.29.0
ajv 8.18.0 8.20.0
cosmiconfig 9.0.0 9.0.1
inquirer 13.2.2 13.4.2
ora 9.2.0 9.4.0
tree-sitter 0.21.1 0.25.0
tree-sitter-go 0.21.2 0.25.0
tree-sitter-java 0.21.0 0.23.5
tree-sitter-javascript 0.21.4 0.25.0
tree-sitter-python 0.21.0 0.25.0
tree-sitter-rust 0.21.0 0.24.0
tree-sitter-typescript 0.21.2 0.23.2

Updates @modelcontextprotocol/sdk from 1.26.0 to 1.29.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.29.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.28.0...v1.29.0

v1.28.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0

v1.27.1

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.0...v1.27.1

v1.27.0

What's Changed

... (truncated)

Commits

Updates ajv from 8.18.0 to 8.20.0

Release notes

Sourced from ajv's releases.

v8.20.0

What's Changed

Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0

v8.19.0

What's Changed

Full Changelog: ajv-validator/ajv@v8.18.0...v8.19.0

Commits

Updates cosmiconfig from 9.0.0 to 9.0.1

Changelog

Sourced from cosmiconfig's changelog.

9.0.1

  • Fixed a race condition where multiple instances existing simultaneously could cause cosmiconfig to fail to load TypeScript config files.
  • Fixed an issue on Windows where CWD being a short path (e.g. C:\Users\USERNA~1) would cause cosmiconfig to fail to load ESM config files.
Commits
  • 9a5cda3 9.0.1
  • 2174017 update changelog
  • 536d4a0 Prevent race conditions when running multiple instances of cosmiconfig and ...
  • 4b48611 remove debug log
  • 53d1745 remove more EOL node versions
  • 7c1a1e3 replace resolve with realpath
  • fcc9084 add additional path.resolve for windows short paths
  • 7e995c8 debug
  • 52b6b1c drop node 14 build as it seems to fail for unreachable reasons
  • db45e38 fix tests on windows (3)
  • Additional commits viewable in compare view

Updates inquirer from 13.2.2 to 13.4.2

Release notes

Sourced from inquirer's releases.

inquirer@13.4.2

  • Fix: some Windows terminals would freeze and not react to keypresses.

inquirer@13.4.1

  • Improve expand prompt type inferrence.

inquirer@13.4.0

  • Feat: Added a loading message while validating editor prompt input.
  • Type improvement: Better type inference with checkbox, search and expand prompts.
  • Fix: editor prompt not always properly handling editor path on windows.

inquirer@13.3.2

  • Fix broken 1.3.1 release process.

inquirer@13.2.5

What's Changed

New Contributors

Full Changelog: https://github.com/SBoudrias/Inquirer.js/compare/inquirer@13.2.2...inquirer@13.2.5

inquirer@13.2.4

What's Changed

... (truncated)

Commits
  • 35bda2a chore: Publish new release
  • 98eee29 fix(lint): suppress no-unnecessary-type-parameters on parseJSON helper
  • aba5965 chore(deps-dev): Bump @​types/node in the types group (#2088)
  • db8fbf1 chore(deps-dev): Bump turbo from 2.9.5 to 2.9.6 in the build group (#2087)
  • 3cdecf5 chore(deps-dev): Bump oxfmt in the formatting group (#2086)
  • e370b57 chore(deps-dev): Bump the linting group with 5 updates (#2085)
  • 2787267 chore(deps-dev): Bump the testing group with 3 updates (#2084)
  • 0c55499 chore(deps-dev): Bump the formatting group with 2 updates (#2081)
  • e7115d9 fix(@​inquirer/core): mute output after readline initialization (#2077)
  • e5e14ab chore(deps): Bump dependabot/fetch-metadata from 2 to 3 (#2078)
  • Additional commits viewable in compare view

Updates ora from 9.2.0 to 9.4.0

Release notes

Sourced from ora's releases.

v9.4.0

  • Add successSymbol and failSymbol options to oraPromise 3d2e0a9

sindresorhus/ora@v9.3.0...v9.4.0

v9.3.0

  • Reduce flicker in rendering 2ab4f76

sindresorhus/ora@v9.2.0...v9.3.0

Commits

Updates tree-sitter from 0.21.1 to 0.25.0

Release notes

Sourced from tree-sitter's releases.

v0.22.4

Full Changelog: tree-sitter/node-tree-sitter@v0.22.3...v0.22.4

Commits

Updates tree-sitter-go from 0.21.2 to 0.25.0

Release notes

Sourced from tree-sitter-go's releases.

v0.25.0

NOTE: Download tree-sitter-go.tar.gz for the complete source code.

v0.23.4

NOTE: Download tree-sitter-go.tar.xz for the complete source code.

v0.23.3

NOTE: Download tree-sitter-go.tar.xz for the complete source code.

v0.23.2

NOTE: Download tree-sitter-go.tar.xz for the complete source code.

Commits
  • 1547678 0.25.0
  • 3f912e9 chore: generate
  • 179ca03 feat: expose statement list
  • e25214e fix: allow the terminator to be omitted for the last element
  • edea6bf fix: give index expressions a dynamic precedence of 1
  • e1076e5 feat: support generic type aliases
  • 00a299e ci: update test failures, use macos-15
  • 93c2bb6 build: update bindings
  • 1496eb7 feat: use the new reserved rules api
  • c350fa5 ci: bump actions/checkout from 4 to 5
  • Additional commits viewable in compare view

Updates tree-sitter-java from 0.21.0 to 0.23.5

Release notes

Sourced from tree-sitter-java's releases.

v0.23.5

NOTE: Download tree-sitter-java.tar.xz for the complete source code.

v0.23.4

NOTE: Download tree-sitter-java.tar.xz for the complete source code.

v0.23.3

NOTE: Download tree-sitter-java.tar.xz for the complete source code.

Commits
  • 94703d5 0.23.5
  • de81673 chore: generate
  • 4885576 feat: allow reserved identifiers in element_value_pair
  • 24a58d8 fix: correct floating point literal parsing
  • 33a3868 fix: allow annotations after the ellipsis in a spread parameter
  • e75fda2 fix: give yield in _reserved_identifier a precedence of 0
  • 04a649d feat(highlights): add more keywords
  • a1bbe92 0.23.4
  • 875834d ci(publish): add attestations and generate parser
  • 68dd781 ci: bump tree-sitter/setup-action from 1 to 2
  • Additional commits viewable in compare view

Updates tree-sitter-javascript from 0.21.4 to 0.25.0

Release notes

Sourced from tree-sitter-javascript's releases.

v0.25.0

NOTE: Download tree-sitter-javascript.tar.gz for the complete source code.

v0.23.1

NOTE: Download tree-sitter-javascript.tar.xz for the complete source code.

Commits

Updates tree-sitter-python from 0.21.0 to 0.25.0

Release notes

Sourced from tree-sitter-python's releases.

v0.25.0

NOTE: Download tree-sitter-python.tar.gz for the complete source code.

v0.23.6

NOTE: Download tree-sitter-python.tar.xz for the complete source code.

v0.23.5

NOTE: Download tree-sitter-python.tar.xz for the complete source code.

v0.23.4

NOTE: Download tree-sitter-python.tar.xz for the complete source code.

v0.23.3

NOTE: Download tree-sitter-python.tar.xz for the complete source code.

Commits
  • 293fdc0 0.25.0
  • 34a91a2 chore: generate
  • 8ad8a51 ci: update failing files
  • a0b84ed test: update tests
  • 1b1ca93 fix: give a higher lexical precedence to the * in except*
  • a4c106f feat: allow multiple exception expressions without parenthesis
  • 29e3bc2 refactor!: simplify exceptions
  • d8f9e69 feat: add PEP 750 template string support
  • 7ff26da feat: simplify try statement by accepting missing else/except/finally blocks
  • afdba00 build: update bindings
  • Additional commits viewable in compare view

Updates tree-sitter-rust from 0.21.0 to 0.24.0

Release notes

Sourced from tree-sitter-rust's releases.

v0.24.0

NOTE: Download tree-sitter-rust.tar.gz for the complete source code.

v0.23.3

NOTE: Download tree-sitter-rust.tar.gz for the complete source code.

v0.23.2

NOTE: Download tree-sitter-rust.tar.xz for the complete source code.

v0.23.1

NOTE: Download tree-sitter-rust.tar.xz for the complete source code.

Commits

Updates tree-sitter-typescript from 0.21.2 to 0.23.2

Release notes

Sourced from tree-sitter-typescript's releases.

v0.23.2

NOTE: Download tree-sitter-typescript.tar.xz for the complete source code.

v0.23.1

NOTE: Download tree-sitter-typescript.tar.xz for the complete source code.

Commits
  • f975a62 0.23.2
  • 61e2a77 0.23.1
  • 7bfe051 fix(rust): don't fetch files from node_modules
  • aa6c28f fix: remove glimmer tags
  • 9230875 build: move tree-sitter-javascript to dependencies
  • 14af167 chore: regenerate
  • 31725c1 build: update bindings
  • 89e0420 feat(node): support single-file executables via bun build --compile
  • 73c4447 chore: regenerate
  • 18bb23a build: update bindings
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.26.0` | `1.29.0` |
| [ajv](https://github.com/ajv-validator/ajv) | `8.18.0` | `8.20.0` |
| [cosmiconfig](https://github.com/cosmiconfig/cosmiconfig) | `9.0.0` | `9.0.1` |
| [inquirer](https://github.com/SBoudrias/Inquirer.js) | `13.2.2` | `13.4.2` |
| [ora](https://github.com/sindresorhus/ora) | `9.2.0` | `9.4.0` |
| [tree-sitter](https://github.com/tree-sitter/node-tree-sitter) | `0.21.1` | `0.25.0` |
| [tree-sitter-go](https://github.com/tree-sitter/tree-sitter-go) | `0.21.2` | `0.25.0` |
| [tree-sitter-java](https://github.com/tree-sitter/tree-sitter-java) | `0.21.0` | `0.23.5` |
| [tree-sitter-javascript](https://github.com/tree-sitter/tree-sitter-javascript) | `0.21.4` | `0.25.0` |
| [tree-sitter-python](https://github.com/tree-sitter/tree-sitter-python) | `0.21.0` | `0.25.0` |
| [tree-sitter-rust](https://github.com/tree-sitter/tree-sitter-rust) | `0.21.0` | `0.24.0` |
| [tree-sitter-typescript](https://github.com/tree-sitter/tree-sitter-typescript) | `0.21.2` | `0.23.2` |



Updates `@modelcontextprotocol/sdk` from 1.26.0 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.26.0...v1.29.0)

Updates `ajv` from 8.18.0 to 8.20.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v8.18.0...v8.20.0)

Updates `cosmiconfig` from 9.0.0 to 9.0.1
- [Release notes](https://github.com/cosmiconfig/cosmiconfig/releases)
- [Changelog](https://github.com/cosmiconfig/cosmiconfig/blob/main/CHANGELOG.md)
- [Commits](cosmiconfig/cosmiconfig@v9.0.0...v9.0.1)

Updates `inquirer` from 13.2.2 to 13.4.2
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/inquirer@13.2.2...inquirer@13.4.2)

Updates `ora` from 9.2.0 to 9.4.0
- [Release notes](https://github.com/sindresorhus/ora/releases)
- [Commits](sindresorhus/ora@v9.2.0...v9.4.0)

Updates `tree-sitter` from 0.21.1 to 0.25.0
- [Release notes](https://github.com/tree-sitter/node-tree-sitter/releases)
- [Commits](tree-sitter/node-tree-sitter@v0.21.1...v0.25.0)

Updates `tree-sitter-go` from 0.21.2 to 0.25.0
- [Release notes](https://github.com/tree-sitter/tree-sitter-go/releases)
- [Commits](tree-sitter/tree-sitter-go@v0.21.2...v0.25.0)

Updates `tree-sitter-java` from 0.21.0 to 0.23.5
- [Release notes](https://github.com/tree-sitter/tree-sitter-java/releases)
- [Commits](tree-sitter/tree-sitter-java@v0.21.0...v0.23.5)

Updates `tree-sitter-javascript` from 0.21.4 to 0.25.0
- [Release notes](https://github.com/tree-sitter/tree-sitter-javascript/releases)
- [Commits](tree-sitter/tree-sitter-javascript@v0.21.4...v0.25.0)

Updates `tree-sitter-python` from 0.21.0 to 0.25.0
- [Release notes](https://github.com/tree-sitter/tree-sitter-python/releases)
- [Commits](tree-sitter/tree-sitter-python@v0.21.0...v0.25.0)

Updates `tree-sitter-rust` from 0.21.0 to 0.24.0
- [Release notes](https://github.com/tree-sitter/tree-sitter-rust/releases)
- [Commits](tree-sitter/tree-sitter-rust@v0.21.0...v0.24.0)

Updates `tree-sitter-typescript` from 0.21.2 to 0.23.2
- [Release notes](https://github.com/tree-sitter/tree-sitter-typescript/releases)
- [Commits](tree-sitter/tree-sitter-typescript@v0.21.2...v0.23.2)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: ajv
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: cosmiconfig
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: inquirer
  dependency-version: 13.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: ora
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: tree-sitter
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: tree-sitter-go
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: tree-sitter-java
  dependency-version: 0.23.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: tree-sitter-javascript
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: tree-sitter-python
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: tree-sitter-rust
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: tree-sitter-typescript
  dependency-version: 0.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 27, 2026

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants