Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 12, 2025

Bumps the dependencies group with 2 updates in the / directory: @modelcontextprotocol/sdk and core-js.

Updates @modelcontextprotocol/sdk from 1.19.1 to 1.20.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.20.0

What's Changed

New Contributors 🙏

Full Changelog: modelcontextprotocol/typescript-sdk@1.19.0...1.20.0

Commits

Updates core-js from 3.45.1 to 3.46.0

Changelog

Sourced from core-js's changelog.

3.46.0 - 2025.10.09

Commits
  • 98d9dc4 v3.46.0
  • 38420bd add homepage field to package.jsons
  • a7aee4c some fixes
  • 12b441d Fix Iterator.zip and Iterator.zipKeyed behavior with mode: 'longest' op...
  • 15d7a7d update copyright
  • 9eaa6ad Merge pull request #1451 from zloirock/iterator-chunking-stage-2-7
  • 686808f clarify versions
  • a21ab8d FF WeakMap.prototype.getOrInsertComputed was fixed
  • 747e648 Fix object property creation for potential Symbol keys
  • 6bfb3cd move Iterator chunking proposal to stage 2.7
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 12, 2025
…dates

Bumps the dependencies group with 2 updates in the / directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) and [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js).


Updates `@modelcontextprotocol/sdk` from 1.19.1 to 1.20.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](https://github.com/modelcontextprotocol/typescript-sdk/commits/1.20.0)

Updates `core-js` from 3.45.1 to 3.46.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.46.0/packages/core-js)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: core-js
  dependency-version: 3.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dependencies-dca797e1ff branch from 85452f6 to 4e8590e Compare October 12, 2025 11:15
@OrKoN OrKoN enabled auto-merge (squash) October 12, 2025 13:54
@OrKoN OrKoN merged commit e83ba0d into main Oct 12, 2025
17 checks passed
@OrKoN OrKoN deleted the dependabot/npm_and_yarn/dependencies-dca797e1ff branch October 12, 2025 13:55
AlinaVarkki pushed a commit that referenced this pull request Oct 13, 2025
…dates (#355)

Bumps the dependencies group with 2 updates in the / directory:
[@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk)
and
[core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js).

Updates `@modelcontextprotocol/sdk` from 1.19.1 to 1.20.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/typescript-sdk/releases"><code>@​modelcontextprotocol/sdk</code>'s
releases</a>.</em></p>
<blockquote>
<h2>1.20.0</h2>
<h2>What's Changed</h2>
<ul>
<li>docs: improve main README with better quick start, include examples
of stateless HTTP, explain tools v resources v prompts by <a
href="https://github.com/domdomegg"><code>@​domdomegg</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/980">modelcontextprotocol/typescript-sdk#980</a></li>
<li>chore: add lint:fix script by <a
href="https://github.com/mattzcarey"><code>@​mattzcarey</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1013">modelcontextprotocol/typescript-sdk#1013</a></li>
<li>Default to S256 code challenge if not specified in authorization
server metadata by <a
href="https://github.com/LucaButBoring"><code>@​LucaButBoring</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/992">modelcontextprotocol/typescript-sdk#992</a></li>
</ul>
<h2>New Contributors 🙏</h2>
<ul>
<li><a
href="https://github.com/mattzcarey"><code>@​mattzcarey</code></a> made
their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1013">modelcontextprotocol/typescript-sdk#1013</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/modelcontextprotocol/typescript-sdk/compare/1.19.0...1.20.0">https://github.com/modelcontextprotocol/typescript-sdk/compare/1.19.0...1.20.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/modelcontextprotocol/typescript-sdk/commits/1.20.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `core-js` from 3.45.1 to 3.46.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/zloirock/core-js/blob/master/CHANGELOG.md">core-js's
changelog</a>.</em></p>
<blockquote>
<h3><a
href="https://github.com/zloirock/core-js/releases/tag/v3.46.0">3.46.0 -
2025.10.09</a></h3>
<ul>
<li>Changes <a
href="https://github.com/zloirock/core-js/compare/v3.45.1...v3.46.0">v3.45.1...v3.46.0</a>
(116 commits)</li>
<li><a href="https://github.com/tc39/proposal-upsert"><code>Map</code>
upsert stage 3 proposal</a>:
<ul>
<li>Fixed <a
href="https://bugzilla.mozilla.org/show_bug.cgi?id=1988369">a FF
<code>WeakMap.prototype.getOrInsertComputed</code> bug with callback
calling before validation a key</a></li>
</ul>
</li>
<li><a
href="https://github.com/tc39/proposal-iterator-chunking"><code>Iterator</code>
chunking proposal</a>:
<ul>
<li>Built-ins:
<ul>
<li><code>Iterator.prototype.chunks</code></li>
<li><code>Iterator.prototype.windows</code></li>
</ul>
</li>
<li>Moved to stage 2.7, <a
href="https://github.com/tc39/proposals/commit/08e583103c6c244c05a26d9fee518ef8145ba2f6">September
2025 TC39 meeting</a></li>
<li><code>Iterator.prototype.sliding</code> method replaced with an
extra parameter of <code>Iterator.prototype.windows</code> method,
[tc39/proposal-iterator-chunking/<a
href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/24">#24</a>](<a
href="https://redirect.github.com/tc39/proposal-iterator-chunking/pull/24">tc39/proposal-iterator-chunking#24</a>),
[tc39/proposal-iterator-chunking/<a
href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/26">#26</a>](<a
href="https://redirect.github.com/tc39/proposal-iterator-chunking/pull/26">tc39/proposal-iterator-chunking#26</a>)</li>
</ul>
</li>
<li>Fixed <a
href="https://github.com/tc39/proposal-joint-iteration"><code>Iterator.zip</code>
and <code>Iterator.zipKeyed</code></a> behavior with <code>mode:
'longest'</code> option, <a
href="https://redirect.github.com/zloirock/core-js/issues/1469">#1469</a>,
thanks <a
href="https://github.com/lionel-rowe"><strong><code>@​lionel-rowe</code></strong></a></li>
<li>Fixed work of <code>Object.groupBy</code> and <a
href="https://github.com/tc39/proposal-joint-iteration"><code>Iterator.zipKeyed</code></a>
together with <code>Symbol</code> polyfill - some cases of symbol keys
on result <code>null</code>-prototype object were able to leak out to
<code>for-in</code></li>
<li>Compat data improvements:
<ul>
<li><a href="https://github.com/tc39/proposal-upsert"><code>Map</code>
upsert proposal</a> features marked as shipped from FF144</li>
<li>Added <a
href="https://redirect.github.com/nodejs/node/pull/59896">Node 25.0</a>
compat data mapping</li>
<li>Added <a
href="https://github.com/denoland/deno/releases/tag/v2.5.0">Deno 2.5</a>
compat data mapping</li>
<li>Updated Electron 39 compat data mapping</li>
<li>Updated Opera 121+ compat data mapping</li>
<li>Added <a
href="https://forums.opera.com/topic/86530/opera-for-android-92">Opera
Android 92</a> compat data mapping</li>
<li>Added Oculus Quest Browser 40 compat data mapping</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/zloirock/core-js/commit/98d9dc499ffa8fe7543b8cb8f613351e5b3ab8de"><code>98d9dc4</code></a>
v3.46.0</li>
<li><a
href="https://github.com/zloirock/core-js/commit/38420bdad4bda36eea0c697bb5cecd62caa53911"><code>38420bd</code></a>
add <code>homepage</code> field to <code>package.json</code>s</li>
<li><a
href="https://github.com/zloirock/core-js/commit/a7aee4c58a7eec4fb5958fcb6ba4f07d14446f1d"><code>a7aee4c</code></a>
some fixes</li>
<li><a
href="https://github.com/zloirock/core-js/commit/12b441d64df944e45bc6d709b6a9e3c2c0ce72ea"><code>12b441d</code></a>
Fix <code>Iterator.zip</code> and <code>Iterator.zipKeyed</code>
behavior with <code>mode: 'longest'</code> op...</li>
<li><a
href="https://github.com/zloirock/core-js/commit/15d7a7da70c80bfa3e7fbc2a618acc8b07ce8034"><code>15d7a7d</code></a>
update copyright</li>
<li><a
href="https://github.com/zloirock/core-js/commit/9eaa6ad79a76c03703ea01bc16beca42ee44e054"><code>9eaa6ad</code></a>
Merge pull request <a
href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/1451">#1451</a>
from zloirock/iterator-chunking-stage-2-7</li>
<li><a
href="https://github.com/zloirock/core-js/commit/686808fb6ade734d86f5dc9443869550b5490759"><code>686808f</code></a>
clarify versions</li>
<li><a
href="https://github.com/zloirock/core-js/commit/a21ab8d81f8ee58e64e0ec5c9279725483315ed5"><code>a21ab8d</code></a>
FF <code>WeakMap.prototype.getOrInsertComputed</code> was fixed</li>
<li><a
href="https://github.com/zloirock/core-js/commit/747e64806ff04a09b5f3d7990dfcd80afcd91656"><code>747e648</code></a>
Fix object property creation for potential Symbol keys</li>
<li><a
href="https://github.com/zloirock/core-js/commit/6bfb3cde052a1ad9ec3666e47ddd97ef6dfcd430"><code>6bfb3cd</code></a>
move <code>Iterator</code> chunking proposal to stage 2.7</li>
<li>Additional commits viewable in <a
href="https://github.com/zloirock/core-js/commits/v3.46.0/packages/core-js">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant