Skip to content

Bump the npm-production group across 1 directory with 14 updates - #255

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-83b1d7aa39
Open

Bump the npm-production group across 1 directory with 14 updates#255
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-83b1d7aa39

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the npm-production group with 14 updates in the / directory:

Package From To
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8
@codemirror/lang-markdown 6.5.1 6.5.2
@codemirror/view 6.43.7 6.43.8
@noble/hashes 2.2.0 2.3.0
@fastify/formbody 8.0.2 9.0.0
@fastify/rate-limit 11.1.0 11.2.0
@modelcontextprotocol/sdk 1.29.0 1.30.0
fastify 5.10.0 5.11.3
pg 8.22.0 8.23.0
@fastify/static 10.1.2 10.1.3
fastify-raw-body 5.0.0 6.0.1
google-auth-library 10.9.0 11.0.0
ws 8.21.1 8.21.3

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates @codemirror/lang-markdown from 6.5.1 to 6.5.2

Commits

Updates @codemirror/view from 6.43.7 to 6.43.8

Commits

Updates @noble/hashes from 2.2.0 to 2.3.0

Release notes

Sourced from @​noble/hashes's releases.

2.3.0

Improve speed:

  • +10-45% 32b inputs across all hashes
  • +40% SHA-3 / SHAKE, +50% 1mb KT128 / KT256 / TurboSHAKE, +20% kmac
  • 2.2x argon
  • +20% pbkdf2 and hkdf

Other changes:

  • Better error messages and stricter type checks everywhere
  • Bugfix: HMAC _cloneInto now preserves canXOF (#134, ChALkeR); Argon2d typo rename (#135).
  • blake2.compress renamed to _compress (marked internal).
  • Reduce on-disk unpacked size 869kb → 665kb (-204kb) by disabling source maps (they became less relevant).

Full Changelog: paulmillr/noble-hashes@2.2.0...2.3.0

Commits

Updates @fastify/formbody from 8.0.2 to 9.0.0

Release notes

Sourced from @​fastify/formbody's releases.

v9.0.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-formbody@v8.0.2...v9.0.0

Commits
  • b65c99c Bumped v9.0.0
  • 911d7dc chore(.npmrc): add min-release-age
  • da419bd chore: bump c8 from 11.0.0 to 12.0.0 (#202)
  • a6e08a5 ci: pin actions to commit-hash
  • 09adf4d chore: bump @​types/node in the dev-dependencies-typescript group (#200)
  • 591e569 chore(package.json): use https for repo url
  • 6dc5d47 chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#197)
  • 0452500 chore: update depedabot setting
  • 83d0bc0 refactor(types): migrate from tsd to tstyche and others updated
  • d4e232e ci: add lock-threads workflow (#192)
  • Additional commits viewable in compare view

Updates @fastify/rate-limit from 11.1.0 to 11.2.0

Release notes

Sourced from @​fastify/rate-limit's releases.

v11.2.0

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify-rate-limit@v11.1.0...v11.2.0

Commits

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates fastify from 5.10.0 to 5.11.3

Release notes

Sourced from fastify's releases.

v5.11.3

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

v5.11.2

What's Changed

  • fix fastify version in fastify.js

Full Changelog: fastify/fastify@v5.11.1...v5.11.2

v5.11.1

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.11.0...v5.11.1

v5.11.0

What's Changed

... (truncated)

Commits
  • a22cede Bumped v5.11.3
  • 16a74e7 fix: reset lastIndex before testing global/sticky content-type RegExp parsers...
  • 27938ac fix: recognize constructor-assigned built-in properties as decorator dependen...
  • a2f5905 chore: Bump fastify/workflows/.github/workflows/nested-quality.yml (#6917)
  • 22c419a chore: Bump fastify/workflows/.github/workflows/lock-threads.yml (#6916)
  • f5b1400 docs(encapsulation): clarify nested plugin scopes (#6893)
  • 9eaef51 fix: pass null instead of undefined to requestCompleted on success (#6837)
  • 39e87e8 docs(readme): fix grammar and cjs capitalization (#6899)
  • 3f6451c docs(errors): document what the default error handler sends (#6894)
  • f28528f docs: document percent-decoded route params as untrusted input (#6903)
  • Additional commits viewable in compare view

Updates pg from 8.22.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

Commits

Updates @fastify/static from 10.1.2 to 10.1.3

Commits

Updates fastify-raw-body from 5.0.0 to 6.0.1

Release notes

Sourced from fastify-raw-body's releases.

v6.0.1

Full Changelog: Eomm/fastify-raw-body@v6.0.0...v6.0.1

v6.0.0

What's Changed

Full Changelog: Eomm/fastify-raw-body@v5.0.0...v6.0.0

Commits
  • 7c3a537 Bumped v6.0.1
  • 6ad6d81 fix(ci): GH release
  • 4f726e2 fix(ci): release cleanup
  • be244e2 Bumped v6.0.0
  • 6eff229 feat(ci): release automation
  • ad4458c chore(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#95)
  • 9977e1f chore(deps): bump actions/setup-node from 6 to 7 (#94)
  • 0273e94 chore(deps): bump actions/checkout from 6 to 7 (#92)
  • e99ee06 chore(deps-dev): bump @​types/node from 25.9.4 to 26.0.0 (#91)
  • 030517b chore(deps): bump fastify-plugin from 5.1.0 to 6.0.0 (#90)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fastify-raw-body since your current version.


Updates google-auth-library from 10.9.0 to 11.0.0

Changelog

Sourced from google-auth-library's changelog.

11.0.0 (2026-07-29)

⚠ BREAKING CHANGES

  • Update google-auth-library-nodejs to minimum Node version of 22. (#8995)

Features

  • Update google-auth-library-nodejs to minimum Node version of 22. (#8995) (152f686), refs #8985

10.9.1 (2026-07-23)

Bug Fixes

  • auth: Add GOOGLE_APPLICATION_CREDENTIALS context to credential load errors (#8800) (829990f), refs #8799
  • auth: Honor CLOUDSDK_CONFIG when locating the ADC well-known file (#8798) (6e912cf), refs #8797
Commits
  • ad53939 chore: release main (#9012)
  • 152f686 feat!: Update google-auth-library-nodejs to minimum Node version of 22. (#8995)
  • 6b9fd1a chore: release main (#8956)
  • 829990f fix(auth): add GOOGLE_APPLICATION_CREDENTIALS context to credential load erro...
  • 6e912cf fix(auth): honor CLOUDSDK_CONFIG when locating the ADC well-known file (#8798)
  • 5bd6b22 chore: revert "feat(auth): Regional access boundaries main merge (#8665)" (#8...
  • See full diff in compare view

Updates ws from 8.21.1 to 8.21.3

Release notes

Sourced from ws's releases.

8.21.3

Bug fixes

  • The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

8.21.2

Bug fixes

  • Fixed a test for CITGM (2eb3be0b).
Commits
  • c791e70 [dist] 8.21.3
  • e97a20e [fix] Reject offers with client_max_window_bits below config
  • 787ebf2 [dist] 8.21.2
  • b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
  • e4bb883 [security] Use GitHub PVR as main reporting channel
  • 2eb3be0 [test] Skip test on Node.js versions where it does not apply
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
@dependabot
dependabot Bot requested a review from callumalpass as a code owner August 11, 2026 19:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-production-83b1d7aa39 branch 2 times, most recently from 3ae4fbd to ed715f5 Compare August 11, 2026 22:56
@dependabot
Bump the npm-production group across 1 directory with 14 updates
1ef60ec 
Bumps the npm-production group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@codemirror/lang-markdown](https://github.com/codemirror/lang-markdown) | `6.5.1` | `6.5.2` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.7` | `6.43.8` |
| [@noble/hashes](https://github.com/paulmillr/noble-hashes) | `2.2.0` | `2.3.0` |
| [@fastify/formbody](https://github.com/fastify/fastify-formbody) | `8.0.2` | `9.0.0` |
| [@fastify/rate-limit](https://github.com/fastify/fastify-rate-limit) | `11.1.0` | `11.2.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [fastify](https://github.com/fastify/fastify) | `5.10.0` | `5.11.3` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `10.1.2` | `10.1.3` |
| [fastify-raw-body](https://github.com/Eomm/fastify-raw-body) | `5.0.0` | `6.0.1` |
| [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `10.9.0` | `11.0.0` |
| [ws](https://github.com/websockets/ws) | `8.21.1` | `8.21.3` |



Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@codemirror/lang-markdown` from 6.5.1 to 6.5.2
- [Changelog](https://github.com/codemirror/lang-markdown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/lang-markdown/commits)

Updates `@codemirror/view` from 6.43.7 to 6.43.8
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@noble/hashes` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/paulmillr/noble-hashes/releases)
- [Commits](paulmillr/noble-hashes@2.2.0...2.3.0)

Updates `@fastify/formbody` from 8.0.2 to 9.0.0
- [Release notes](https://github.com/fastify/fastify-formbody/releases)
- [Commits](fastify/fastify-formbody@v8.0.2...v9.0.0)

Updates `@fastify/rate-limit` from 11.1.0 to 11.2.0
- [Release notes](https://github.com/fastify/fastify-rate-limit/releases)
- [Commits](fastify/fastify-rate-limit@v11.1.0...v11.2.0)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `fastify` from 5.10.0 to 5.11.3
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.10.0...v5.11.3)

Updates `pg` from 8.22.0 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

Updates `@fastify/static` from 10.1.2 to 10.1.3
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](https://github.com/fastify/fastify-static/commits)

Updates `fastify-raw-body` from 5.0.0 to 6.0.1
- [Release notes](https://github.com/Eomm/fastify-raw-body/releases)
- [Commits](Eomm/fastify-raw-body@v5.0.0...v6.0.1)

Updates `google-auth-library` from 10.9.0 to 11.0.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v11.0.0/core/packages/google-auth-library-nodejs)

Updates `ws` from 8.21.1 to 8.21.3
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.1...8.21.3)

---
updated-dependencies:
- dependency-name: "@codemirror/lang-markdown"
  dependency-version: 6.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@fastify/formbody"
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: "@fastify/rate-limit"
  dependency-version: 11.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@fastify/static"
  dependency-version: 10.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@noble/hashes"
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: fastify
  dependency-version: 5.11.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: fastify-raw-body
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: google-auth-library
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-production
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: ws
  dependency-version: 8.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-production-83b1d7aa39 branch from ed715f5 to 1ef60ec Compare August 12, 2026 06:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@callumalpass callumalpass Awaiting requested review from callumalpass callumalpass is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants