chore(deps): bump the npm-dependencies group with 73 updates by dependabot[bot] · Pull Request #28849 · google-gemini/gemini-cli

dependabot · 2026-08-17T00:32:22Z

Bumps the npm-dependencies group with 73 updates:

Package	From	To
simple-git	`3.28.0`	`3.36.0`
@modelcontextprotocol/sdk	`1.23.0`	`1.30.0`
@octokit/rest	`22.0.0`	`22.0.1`
@vitest/eslint-plugin	`1.3.4`	`1.6.26`
esbuild	`0.25.0`	`0.28.2`
eslint-config-prettier	`10.1.2`	`10.1.8`
eslint-plugin-headers	`1.3.3`	`1.3.4`
express	`5.1.0`	`5.2.1`
@types/express	`5.0.3`	`5.0.6`
google-artifactregistry-auth	`3.4.0`	`3.5.0`
memfs	`4.42.0`	`4.68.0`
mnemonist	`0.40.3`	`0.40.4`
msw	`2.3.4`	`2.15.0`
prettier	`3.5.3`	`3.9.6`
react-dom	`19.2.4`	`19.2.8`
@types/react-dom	`19.2.0`	`19.2.4`
semver	`7.7.2`	`7.8.5`
@types/semver	`7.7.0`	`7.8.0`
strip-ansi	`7.1.0`	`7.2.0`
tsx	`4.20.3`	`4.23.11`
typescript-eslint	`8.30.1`	`8.66.0`
node-pty	`1.0.0`	`1.1.0`
@google-cloud/storage	`7.19.0`	`7.21.0`
fs-extra	`11.3.0`	`11.4.0`
tar	`7.5.11`	`7.5.22`
@types/tar	`6.1.13`	`7.0.87`
winston	`3.17.0`	`3.19.0`
supertest	`7.1.4`	`7.2.2`
@types/supertest	`6.0.3`	`7.2.1`
clipboardy	`5.2.1`	`5.3.2`
react	`19.2.4`	`19.2.8`
@types/react	`19.2.0`	`19.2.18`
shell-quote	`1.8.3`	`1.10.0`
string-width	`8.1.0`	`8.2.2`
ws	`8.16.0`	`8.21.3`
@types/ws	`8.5.10`	`8.18.1`
@types/hast	`3.0.4`	`3.0.5`
@bufbuild/protobuf	`2.11.0`	`2.13.0`
@grpc/grpc-js	`1.14.3`	`1.14.4`
@opentelemetry/api	`1.9.0`	`1.9.1`
@opentelemetry/api-logs	`0.218.0`	`0.221.0`
@opentelemetry/core	`2.7.1`	`2.10.0`
@opentelemetry/exporter-logs-otlp-grpc	`0.218.0`	`0.221.0`
@opentelemetry/exporter-logs-otlp-http	`0.218.0`	`0.221.0`
@opentelemetry/exporter-metrics-otlp-grpc	`0.218.0`	`0.221.0`
@opentelemetry/exporter-metrics-otlp-http	`0.218.0`	`0.221.0`
@opentelemetry/exporter-trace-otlp-grpc	`0.218.0`	`0.221.0`
@opentelemetry/exporter-trace-otlp-http	`0.218.0`	`0.221.0`
@opentelemetry/instrumentation-http	`0.218.0`	`0.221.0`
@opentelemetry/otlp-exporter-base	`0.218.0`	`0.221.0`
@opentelemetry/resources	`2.7.1`	`2.10.0`
@opentelemetry/sdk-logs	`0.218.0`	`0.221.0`
@opentelemetry/sdk-metrics	`2.7.1`	`2.10.0`
@opentelemetry/sdk-node	`0.218.0`	`0.221.0`
@opentelemetry/sdk-trace-base	`2.7.1`	`2.10.0`
@opentelemetry/sdk-trace-node	`2.7.1`	`2.10.0`
@opentelemetry/semantic-conventions	`1.39.0`	`1.43.0`
ajv	`8.17.1`	`8.20.0`
fdir	`6.4.6`	`6.5.0`
ignore	`7.0.0`	`7.0.6`
mime	`4.0.7`	`4.1.0`
picomatch	`4.0.1`	`4.0.5`
@types/picomatch	`4.0.1`	`4.0.3`
systeminformation	`5.25.11`	`5.33.1`
tree-sitter-bash	`0.25.0`	`0.25.1`
web-tree-sitter	`0.25.10`	`0.26.12`
zod-to-json-schema	`3.25.1`	`3.25.2`
@types/json-stable-stringify	`1.1.0`	`1.2.0`
cors	`2.8.5`	`2.8.6`
@types/vscode	`1.99.0`	`1.125.0`
@typescript-eslint/eslint-plugin	`8.31.1`	`8.66.0`
@typescript-eslint/parser	`8.31.1`	`8.66.0`
@vscode/vsce	`3.6.0`	`3.9.2`

Updates simple-git from 3.28.0 to 3.36.0

Release notes

Sourced from simple-git's releases.

[email protected]

Minor Changes

89a2294: Extend known exploitable configuration keys and per-task environment variables.

Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

Thanks to @zebbern for identifying the need to block core.fsmonitor. Thanks to @kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

1ad57e8: Remove conflicting node:buffer import

Updated dependencies [89a2294]

Updated dependencies [675570a]

@simple-git/argv-parser@1.1.0

@simple-git/args-pathspec@1.0.3

[email protected]

Patch Changes

0cf9d8c: Improvements for mono-repo publishing pipeline

Updated dependencies [0cf9d8c]

@simple-git/args-pathspec@1.0.2

@simple-git/argv-parser@1.0.3

[email protected]

Patch Changes

0de400e: Update monorepo version handling during publish

Updated dependencies [0de400e]

@simple-git/argv-parser@1.0.2

[email protected]

Minor Changes

a263635: Use pathspec wrappers for remote and local paths when running either git.clone or git.mirror to avoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.

Patch Changes

e253a0d: Enhanced git -c checks in unsafe plugin.

Thanks to @JohannesLks for identifying the issue

[email protected]

Patch Changes

f704208: Enhanced protocol.allow checks in allowUnsafeExtProtocol handling.

... (truncated)

Changelog

Sourced from simple-git's changelog.

3.36.0

Minor Changes

89a2294: Extend known exploitable configuration keys and per-task environment variables.

Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

Thanks to @zebbern for identifying the need to block core.fsmonitor. Thanks to @kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

1ad57e8: Remove conflicting node:buffer import

Updated dependencies [89a2294]

Updated dependencies [675570a]

@simple-git/argv-parser@1.1.0

@simple-git/args-pathspec@1.0.3

3.35.2

Patch Changes

0cf9d8c: Improvements for mono-repo publishing pipeline

Updated dependencies [0cf9d8c]

@simple-git/args-pathspec@1.0.2

@simple-git/argv-parser@1.0.3

3.35.1

Patch Changes

0de400e: Update monorepo version handling during publish

Updated dependencies [0de400e]

@simple-git/argv-parser@1.0.2

3.35.0

Minor Changes

3d8708b: Updating publish config

Patch Changes

Updated dependencies [3d8708b]

@simple-git/args-pathspec@1.0.1

@simple-git/argv-parser@1.0.1

3.34.0

... (truncated)

Commits

7dc1a53 Version Packages
76f5376 Merge pull request #1061 from Vinzent03/fix/buffer-import
89a2294 Environment Parsing (#1156)
1b91b76 fix: remove explicit node:buffer import
e390685 Version Packages
3c9e4b8 Pin version of @simple-git/args-pathspec
94ee21f Export pathspec types through simple-git for backward compatibility
6d7cb51 Version Packages
0de400e Switch to semver from workspace revisions
2264722 Version Packages
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for simple-git since your current version.

Updates @modelcontextprotocol/sdk from 1.23.0 to 1.30.0

Release notes

Sourced from @modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

fix(server): prioritize zod issues and format them by @mozmo15 in modelcontextprotocol/typescript-sdk#1503

chore(ci): switch publish to OIDC trusted publishing by @felixweinberger in modelcontextprotocol/typescript-sdk#1839

Add end-to-end test suite by @felixweinberger in modelcontextprotocol/typescript-sdk#2167

v1 stdio buffer limit by @KKonstantinov in modelcontextprotocol/typescript-sdk#2239

fix: support Zod 3.25 method literals by @mattzcarey in modelcontextprotocol/typescript-sdk#2368

Validate Content-Type by parsed media type instead of substring match (v1.x) by @felixweinberger in modelcontextprotocol/typescript-sdk#2444

fix: send SSE keep-alive comment frames from Streamable HTTP server transport (v1.x) by @mattzcarey in modelcontextprotocol/typescript-sdk#2538

fix(deps): widen @hono/node-server past GHSA-frvp-7c67-39w9 by @arimu1 in modelcontextprotocol/typescript-sdk#2549

Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x) by @felixweinberger in modelcontextprotocol/typescript-sdk#2547

chore: bump version to 1.30.0 by @felixweinberger in modelcontextprotocol/typescript-sdk#2563

New Contributors

@mozmo15 made their first contribution in modelcontextprotocol/typescript-sdk#1503

@arimu1 made their first contribution in modelcontextprotocol/typescript-sdk#2549

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

v1.29.0

What's Changed

fix: treat v1.x as primary branch for npm latest tag (backport #1577) by @felixweinberger in modelcontextprotocol/typescript-sdk#1749

[v1.x] fix: disallow null (infinite) requested TTL by @LucaButBoring in modelcontextprotocol/typescript-sdk#1339

[v1.x] fix: add missing size field to ResourceSchema by @olaservo in modelcontextprotocol/typescript-sdk#1575

Add typings exports by @tdraier in modelcontextprotocol/typescript-sdk#1623

v1.x npm audit fix by @KKonstantinov in modelcontextprotocol/typescript-sdk#1780

v1.x #1623 follow up -add missing types to package.json by @KKonstantinov in modelcontextprotocol/typescript-sdk#1773

[v1.x backport] Allow servers / clients to advertise extensions in the capability object by @localden in modelcontextprotocol/typescript-sdk#1811

fix(stdio): always set windowsHide on Windows, not just in Electron by @jnMetaCode in modelcontextprotocol/typescript-sdk#1640

chore: bump version to 1.29.0 by @felixweinberger in modelcontextprotocol/typescript-sdk#1820

New Contributors

@tdraier made their first contribution in modelcontextprotocol/typescript-sdk#1623

@jnMetaCode made their first contribution in modelcontextprotocol/typescript-sdk#1640

Full Changelog: modelcontextprotocol/typescript-sdk@v1.28.0...v1.29.0

v1.28.0

What's Changed

feat: use scopes_supported from resource metadata by default (fixes #580) by @antogyn in modelcontextprotocol/typescript-sdk#757

[v1.x backport] Default to client_secret_basic when server omits token_endpoint_auth_methods_supported by @pcarleton in modelcontextprotocol/typescript-sdk#1611

fix: reject plain JSON Schema objects passed as inputSchema by @tiluckdave in modelcontextprotocol/typescript-sdk#1596

fix: clear _timeoutInfo in _onclose() and scope .finally() abort controller cleanup by @pcarleton in modelcontextprotocol/typescript-sdk#1462

fix(server/auth): RFC 8252 loopback port relaxation by @poteat in modelcontextprotocol/typescript-sdk#1738

chore: bump version to 1.28.0 by @felixweinberger in modelcontextprotocol/typescript-sdk#1746

New Contributors

@antogyn made their first contribution in modelcontextprotocol/typescript-sdk#757

@tiluckdave made their first contribution in modelcontextprotocol/typescript-sdk#1596

@poteat made their first contribution in modelcontextprotocol/typescript-sdk#1738

... (truncated)

Commits

2d889f2 chore: bump version to 1.30.0 (#2563)
e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
bb5a718 fix(deps): widen @hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
369513d fix: support Zod 3.25 method literals (#2368)
e7ee57c v1 stdio buffer limit (#2239)
c36e1ef Add end-to-end test suite (#2167)
bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
9edbab7 fix(server): prioritize zod issues and format them (#1503)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @modelcontextprotocol/sdk since your current version.

Updates @octokit/rest from 22.0.0 to 22.0.1

Release notes

Sourced from @octokit/rest's releases.

v22.0.1

22.0.1 (2025-10-31)

Bug Fixes

deps: update octokit monorepo (major) (#538) (ded2f17)

Commits

daa3ec9 ci(action): update actions/setup-node action to v6 (#534)
1dec0c7 ci(action): update peter-evans/create-or-update-comment action to v5 (#531)
ded2f17 fix(deps): update octokit monorepo (major) (#538)
0e0eaea chore(deps): update dependency @types/node to v24 (#537)
c04acc8 chore(deps): update vitest monorepo to v4 (major) (#536)
e6dd306 chore(deps): update dependency undici to v7 (#474)
5f380d0 build(deps-dev): Bump form-data from 4.0.2 to 4.0.4 in /docs (#520)
dc6827d build(deps-dev): Bump tar-fs from 2.1.2 to 2.1.3 in /docs (#516)
See full diff in compare view

Updates @vitest/eslint-plugin from 1.3.4 to 1.6.26

Release notes

Sourced from @vitest/eslint-plugin's releases.

v1.6.26

   🐞 Bug Fixes

Detect test modes in options objects - by @Guflly in vitest-dev/eslint-plugin-vitest#937 (68454)

    View changes on GitHub

v1.6.25

   🐞 Bug Fixes

valid-expect: Support expect.assert members - by @happykawayigt and Guan Tong in vitest-dev/eslint-plugin-vitest#936 (bc37d)

    View changes on GitHub

v1.6.24

   🐞 Bug Fixes

valid-expect: Fix poll and element taking 1 or 2 arguments - by @julienw in vitest-dev/eslint-plugin-vitest#931 (57e53)

    View changes on GitHub

v1.6.23

   🚀 Features

prefer-expect-assertions: Add disallowHasAssertions option - by @ssssota in vitest-dev/eslint-plugin-vitest#929 (5e1e1)

   🐞 Bug Fixes

8 warnings for unexpected node version input - by @hirehamir in vitest-dev/eslint-plugin-vitest#928 (394dd)

valid-expect: Handle static expect APIs - by @w3lld1 in vitest-dev/eslint-plugin-vitest#930 (79232)

    View changes on GitHub

v1.6.22

   🐞 Bug Fixes

Handle expect.any separately from Chai any flag - by @nami8824 in vitest-dev/eslint-plugin-vitest#925 (34157)

    View changes on GitHub

v1.6.21

   🐞 Bug Fixes

Support Chai-style expect chains - by @nami8824 in vitest-dev/eslint-plugin-vitest#920 (52692)

prefer-called-with: Map calledOnce matcher to exact once with - by @nami8824 in vitest-dev/eslint-plugin-vitest#918 (8f671)

    View changes on GitHub

v1.6.20

   🐞 Bug Fixes

... (truncated)

Commits

96f6bfd chore: release v1.6.26
684545f fix: detect test modes in options objects (#937)
48abf8d chore: release v1.6.25
bc37d2d fix(valid-expect): support expect.assert members (#936)
1a0fdaf chore: release v1.6.24
57e5389 fix(valid-expect): fix poll and element taking 1 or 2 arguments (#931)
8ce9857 chore: release v1.6.23
5e1e140 feat(prefer-expect-assertions): add disallowHasAssertions option (#929)
792320a fix(valid-expect): handle static expect APIs (#930)
394ddb6 fix: 8 warnings for unexpected node version input (#928)
Additional commits viewable in compare view

Updates esbuild from 0.25.0 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2
Fix tree shaking bug due to TypeScript import alias (#4507)

This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:
import Base from './dep.js';
import Alias = Base.SomeType;
Fix CSS minification bug involving & (#4497)

This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:
/* Original code */
.a .b {
 & .b:not(& .c) {
 color: red;
 }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}
This should match yes but not no. The old output incorrectly matched both.
Avoid overwriting input files without --allow-overwrite (#4484)

For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

Fix incorrect code generated when using top-level await (#4498)

Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.
Fix a minification bug with lowered logical assignment operators (#4508)

This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:
// Original code
function foo() {
 let x
 bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2025

This changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).

0.27.2
Allow import path specifiers starting with #/ (#4361)

Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

This change was contributed by @hybrist.
Automatically add the -webkit-mask prefix (#4357, #4358)

This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:
/* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}
/* Old output (with --target=chrome110) */
main {
mask: url(x.png) center/5rem no-repeat;
}
/* New output (with --target=chrome110) */
main {
-webkit-mask: url(x.png) center/5rem no-repeat;
mask: url(x.png) center/5rem no-repeat;
}
This change was contributed by @BPJEnnova.
Additional minification of switch statements (#4176, #4359)

This release contains additional minification patterns for reducing switch statements. Here is an example:
// Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}

... (truncated)

Commits

609683d publish 0.28.2 to npm
11b1fe4 add to release notes
ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
04627b6 fix #4498: async TLA checks need a worklist
5c15177 disable gopls in the go folder
fc2ee9b css: adjust parser to allow --foo: {...}
209db54 release notes for css nesting bugfix
c625d31 fix #4497: preserve nested ampersands during minification (#4500)
34474e2 better isolation of current part in js parser
07f6e8c fix #4507: import assignment tree-shaking bug
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for esbuild since your current version.

Updates eslint-config-prettier from 10.1.2 to 10.1.8

Release notes

Sourced from eslint-config-prettier's releases.

v10.1.8

republish latest version

Full Changelog: prettier/eslint-config-prettier@v10.1.5...v10.1.8

v10.1.5

Patch Changes

#332 60fef02 Thanks @JounQin! - chore: add funding field into package.json

Full Changelog: prettier/eslint-config-prettier@v10.1.4...v10.1.5

v10.1.4

Patch Changes

#328 94b4799 Thanks @silvenon! - fix(cli): do not crash on no rules configured

Full Changelog: prettier/eslint-config-prettier@v10.1.3...v10.1.4

v10.1.3

Patch Changes

#325 4e95a1d Thanks @pilikan! - fix: this package is commonjs, align its types correctly

New Contributors

@pilikan made their first contribution in prettier/eslint-config-prettier#325

Full Changelog: prettier/eslint-config-prettier@v10.1.2...v10.1.3

Changelog

Sourced from eslint-config-prettier's changelog.

eslint-config-prettier

10.1.5

Patch Changes

#332 60fef02 Thanks @JounQin! - chore: add funding field into package.json

10.1.4

Patch Changes

#328 94b4799 Thanks @silvenon! - fix(cli): do not crash on no rules configured

10.1.3

Patch Changes

#325 4e95a1d Thanks @pilikan! - fix: this package is commonjs, align its types correctly

Commits

9b0b0a4 fix: release a new latest version
4c94893 chore: release eslint-config-prettier (#333)
60fef02 chore: add funding field into package.json (#332)
f55501f chore: release eslint-config-prettier (#329)
50a8a22 chore(deps): update all dependencies (#330)
94b4799 fix(cli): do not crash on no rules configured (#328)
cdc4a5c chore: release eslint-config-prettier (#326)
4e95a1d fix: this package is commonjs, align its types correctly (#325)
See full diff in compare view

Updates eslint-plugin-headers from 1.3.3 to 1.3.4

Release notes

Sourced from eslint-plugin-headers's releases.

v1.3.4

Support ESLint 10.

Full Changelog: robmisasi/eslint-plugin-headers@v1.3.3...v1.3.4

Commits

c8f8537 1.3.4
7a1f7a0 Tweak AST traversal to support ESLint 10. Update dev dependencies.
d31dee9 Update dev dependencies.
See full diff in compare view

Updates express from 5.1.0 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Release: 5.2.1 by @UlisesGascon in expressjs/express#6933

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

What's Changed

build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 by @dependabot[bot] in expressjs/express#6429

Refactor: simplify acceptsLanguages implementation using spread operator by @Ayoub-Mabrouk in expressjs/express#6137

increased code coverage of utils.js file by @ashish3011 in expressjs/express#6386

chore: remove duplicate word by @dufucun in expressjs/express#6456

build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 by @dependabot[bot] in expressjs/express#6498

build(deps): bump actions/setup-node from 4.3.0 to 4.4.0 by @dependabot[bot] in expressjs/express#6497

build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in expressjs/express#6496

ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/express#6504

ci: update codeql config by @Phillip9587 in expressjs/express#6488

chore: wider range for query test skip by @jonchurch in expressjs/express#6512

chore: fix typos in test by @noritaka1166 in expressjs/express#6535

ci: disable credential persistence for checkout actions by @mertssmnoglu in expressjs/express#6522

ci: allow manual triggering of workflow by @shivarm in expressjs/express#6515

test: add coverage for app.listen() variants by @kgarg1 in expressjs/express#6476

docs: move documentation and charters to the discussions and .github … by @bjohansebas in expressjs/express#6427

build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in expressjs/express#6549

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in expressjs/express#6548

chore: enforce explicit Buffer import and add lint rule by @shivarm in expressjs/express#6525

chore: use node protocol for querystring by @shivarm in expressjs/express#6520

chore: fix typo by @mountdisk in expressjs/express#6609

build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by @dependabot[bot] in expressjs/express#6618

add deprecation warnings for redirect arguments undefined by @bjohansebas in expressjs/express#6405

ci: run CI when the markdown changes by @bjohansebas in expressjs/express#6632

doc: fix CONTRIBUTING link by @jonchurch in expressjs/express#6653

doc: update contributing guidelines and code of conduct links by @ShubhamOulkar in expressjs/express#6601

build(deps-dev): bump morgan from 1.10.0 to 1.10.1 by @dependabot[bot] in expressjs/express#6679

build(deps-dev): bump cookie-session from 2.1.0 to 2.1.1 by @dependabot[bot] in expressjs/express#6678

lint: add --fix flag to automatic fix linting issue by @shivarm in expressjs/express#6644

chore: ignore yarn.lock file and update example by @shivarm in expressjs/express#6588

lib: use req.socket over deprecated req.connection by @bjohansebas in expressjs/express#6705

doc: update express app example by @shivarm in expressjs/express#6718

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by @dependabot[bot] in expressjs/express#6675

Remove history.md from being packaged on publish by @sheplu in expressjs/express#6780

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

deps: body-parser@^2.2.1

A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.
Description has been truncated

Bumps the npm-dependencies group with 73 updates: | Package | From | To | | --- | --- | --- | | [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.28.0` | `3.36.0` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.23.0` | `1.30.0` | | [@octokit/rest](https://github.com/octokit/rest.js) | `22.0.0` | `22.0.1` | | [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.3.4` | `1.6.26` | | [esbuild](https://github.com/evanw/esbuild) | `0.25.0` | `0.28.2` | | [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `10.1.2` | `10.1.8` | | [eslint-plugin-headers](https://github.com/robmisasi/eslint-plugin-headers) | `1.3.3` | `1.3.4` | | [express](https://github.com/expressjs/express) | `5.1.0` | `5.2.1` | | [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `5.0.3` | `5.0.6` | | [google-artifactregistry-auth](https://github.com/GoogleCloudPlatform/artifact-registry-npm-tools) | `3.4.0` | `3.5.0` | | [memfs](https://github.com/streamich/memfs) | `4.42.0` | `4.68.0` | | [mnemonist](https://github.com/yomguithereal/mnemonist) | `0.40.3` | `0.40.4` | | [msw](https://github.com/mswjs/msw) | `2.3.4` | `2.15.0` | | [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.9.6` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.8` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.0` | `19.2.4` | | [semver](https://github.com/npm/node-semver) | `7.7.2` | `7.8.5` | | [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.0` | `7.8.0` | | [strip-ansi](https://github.com/chalk/strip-ansi) | `7.1.0` | `7.2.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.20.3` | `4.23.11` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.30.1` | `8.66.0` | | [node-pty](https://github.com/microsoft/node-pty) | `1.0.0` | `1.1.0` | | [@google-cloud/storage](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/storage) | `7.19.0` | `7.21.0` | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.0` | `11.4.0` | | [tar](https://github.com/isaacs/node-tar) | `7.5.11` | `7.5.22` | | [@types/tar](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/tar) | `6.1.13` | `7.0.87` | | [winston](https://github.com/winstonjs/winston) | `3.17.0` | `3.19.0` | | [supertest](https://github.com/ladjs/supertest) | `7.1.4` | `7.2.2` | | [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) | `6.0.3` | `7.2.1` | | [clipboardy](https://github.com/sindresorhus/clipboardy) | `5.2.1` | `5.3.2` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.8` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.0` | `19.2.18` | | [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.10.0` | | [string-width](https://github.com/sindresorhus/string-width) | `8.1.0` | `8.2.2` | | [ws](https://github.com/websockets/ws) | `8.16.0` | `8.21.3` | | [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.5.10` | `8.18.1` | | [@types/hast](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/hast) | `3.0.4` | `3.0.5` | | [@bufbuild/protobuf](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protobuf) | `2.11.0` | `2.13.0` | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.3` | `1.14.4` | | [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` | | [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.221.0` | | [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.10.0` | | [@opentelemetry/exporter-logs-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.221.0` | | [@opentelemetry/exporter-logs-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.221.0` | | [@opentelemetry/exporter-metrics-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.221.0` | | [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.221.0` | | [@opentelemetry/exporter-trace-otlp-grpc](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.221.0` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.221.0` | | [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.221.0` | | [@opentelemetry/otlp-exporter-base](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.221.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.10.0` | | [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.221.0` | | [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.10.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.218.0` | `0.221.0` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.10.0` | | [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `2.7.1` | `2.10.0` | | [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.39.0` | `1.43.0` | | [ajv](https://github.com/ajv-validator/ajv) | `8.17.1` | `8.20.0` | | [fdir](https://github.com/thecodrr/fdir) | `6.4.6` | `6.5.0` | | [ignore](https://github.com/kaelzhang/node-ignore) | `7.0.0` | `7.0.6` | | [mime](https://github.com/broofa/mime) | `4.0.7` | `4.1.0` | | [picomatch](https://github.com/micromatch/picomatch) | `4.0.1` | `4.0.5` | | [@types/picomatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/picomatch) | `4.0.1` | `4.0.3` | | [systeminformation](https://github.com/sebhildebrandt/systeminformation) | `5.25.11` | `5.33.1` | | [tree-sitter-bash](https://github.com/tree-sitter/tree-sitter-bash) | `0.25.0` | `0.25.1` | | [web-tree-sitter](https://github.com/tree-sitter/tree-sitter/tree/HEAD/lib/binding_web) | `0.25.10` | `0.26.12` | | [zod-to-json-schema](https://github.com/StefanTerdell/zod-to-json-schema) | `3.25.1` | `3.25.2` | | [@types/json-stable-stringify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/json-stable-stringify) | `1.1.0` | `1.2.0` | | [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` | | [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) | `1.99.0` | `1.125.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.31.1` | `8.66.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.31.1` | `8.66.0` | | [@vscode/vsce](https://github.com/Microsoft/vsce) | `3.6.0` | `3.9.2` | Updates `simple-git` from 3.28.0 to 3.36.0 - [Release notes](https://github.com/steveukx/git-js/releases) - [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md) - [Commits](https://github.com/steveukx/git-js/commits/[email protected]/simple-git) Updates `@modelcontextprotocol/sdk` from 1.23.0 to 1.30.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.23.0...1.30.0) Updates `@octokit/rest` from 22.0.0 to 22.0.1 - [Release notes](https://github.com/octokit/rest.js/releases) - [Commits](octokit/rest.js@v22.0.0...v22.0.1) Updates `@vitest/eslint-plugin` from 1.3.4 to 1.6.26 - [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases) - [Commits](vitest-dev/eslint-plugin-vitest@v1.3.4...v1.6.26) Updates `esbuild` from 0.25.0 to 0.28.2 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md) - [Commits](evanw/esbuild@v0.25.0...v0.28.2) Updates `eslint-config-prettier` from 10.1.2 to 10.1.8 - [Release notes](https://github.com/prettier/eslint-config-prettier/releases) - [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-config-prettier@v10.1.2...v10.1.8) Updates `eslint-plugin-headers` from 1.3.3 to 1.3.4 - [Release notes](https://github.com/robmisasi/eslint-plugin-headers/releases) - [Commits](robmisasi/eslint-plugin-headers@v1.3.3...v1.3.4) Updates `express` from 5.1.0 to 5.2.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@v5.1.0...v5.2.1) Updates `@types/express` from 5.0.3 to 5.0.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) Updates `google-artifactregistry-auth` from 3.4.0 to 3.5.0 - [Release notes](https://github.com/GoogleCloudPlatform/artifact-registry-npm-tools/releases) - [Commits](GoogleCloudPlatform/artifact-registry-npm-tools@v3.4.0...v3.5.0) Updates `memfs` from 4.42.0 to 4.68.0 - [Release notes](https://github.com/streamich/memfs/releases) - [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md) - [Commits](streamich/memfs@v4.42.0...v4.68.0) Updates `mnemonist` from 0.40.3 to 0.40.4 - [Release notes](https://github.com/yomguithereal/mnemonist/releases) - [Changelog](https://github.com/Yomguithereal/mnemonist/blob/master/CHANGELOG.md) - [Commits](Yomguithereal/mnemonist@0.40.3...0.40.4) Updates `msw` from 2.3.4 to 2.15.0 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v2.3.4...v2.15.0) Updates `prettier` from 3.5.3 to 3.9.6 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.5.3...3.9.6) Updates `react-dom` from 19.2.4 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `@types/react-dom` from 19.2.0 to 19.2.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `semver` from 7.7.2 to 7.8.5 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.7.2...v7.8.5) Updates `@types/semver` from 7.7.0 to 7.8.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) Updates `strip-ansi` from 7.1.0 to 7.2.0 - [Release notes](https://github.com/chalk/strip-ansi/releases) - [Commits](chalk/strip-ansi@v7.1.0...v7.2.0) Updates `tsx` from 4.20.3 to 4.23.11 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.20.3...v4.23.11) Updates `typescript-eslint` from 8.30.1 to 8.66.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/typescript-eslint) Updates `node-pty` from 1.0.0 to 1.1.0 - [Release notes](https://github.com/microsoft/node-pty/releases) - [Commits](microsoft/node-pty@1.0.0...v1.1.0) Updates `@google-cloud/storage` from 7.19.0 to 7.21.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/handwritten/storage/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/storage-v7.21.0/handwritten/storage) Updates `fs-extra` from 11.3.0 to 11.4.0 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-fs-extra@11.3.0...11.4.0) Updates `tar` from 7.5.11 to 7.5.22 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.11...v7.5.22) Updates `@types/tar` from 6.1.13 to 7.0.87 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/tar) Updates `winston` from 3.17.0 to 3.19.0 - [Release notes](https://github.com/winstonjs/winston/releases) - [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md) - [Commits](winstonjs/winston@v3.17.0...v3.19.0) Updates `@types/tar` from 6.1.13 to 7.0.87 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/tar) Updates `supertest` from 7.1.4 to 7.2.2 - [Release notes](https://github.com/ladjs/supertest/releases) - [Commits](forwardemail/supertest@v7.1.4...v7.2.2) Updates `@types/supertest` from 6.0.3 to 7.2.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/supertest) Updates `clipboardy` from 5.2.1 to 5.3.2 - [Release notes](https://github.com/sindresorhus/clipboardy/releases) - [Commits](sindresorhus/clipboardy@v5.2.1...v5.3.2) Updates `react` from 19.2.4 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `@types/react` from 19.2.0 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `shell-quote` from 1.8.3 to 1.10.0 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.3...v1.10.0) Updates `string-width` from 8.1.0 to 8.2.2 - [Release notes](https://github.com/sindresorhus/string-width/releases) - [Commits](sindresorhus/string-width@v8.1.0...v8.2.2) Updates `ws` from 8.16.0 to 8.21.3 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.16.0...8.21.3) Updates `@types/ws` from 8.5.10 to 8.18.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws) Updates `@types/hast` from 3.0.4 to 3.0.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/hast) Updates `@types/semver` from 7.7.0 to 7.8.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) Updates `@bufbuild/protobuf` from 2.11.0 to 2.13.0 - [Release notes](https://github.com/bufbuild/protobuf-es/releases) - [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.13.0/packages/protobuf) Updates `@grpc/grpc-js` from 1.14.3 to 1.14.4 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected]) Updates `@opentelemetry/api` from 1.9.0 to 1.9.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.9.0...v1.9.1) Updates `@opentelemetry/api-logs` from 0.218.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.221.0) Updates `@opentelemetry/core` from 2.7.1 to 2.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.7.1...v2.10.0) Updates `@opentelemetry/exporter-logs-otlp-grpc` from 0.218.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.221.0) Updates `@opentelemetry/exporter-logs-otlp-http` from 0.218.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.221.0) Updates `@opentelemetry/exporter-metrics-otlp-grpc` from 0.218.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.221.0) Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.218.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.221.0) Updates `@opentelemetry/exporter-trace-otlp-grpc` from 0.218.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.221.0) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.218.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.221.0) Updates `@opentelemetry/instrumentation-http` from 0.218.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.221.0) Updates `@opentelemetry/otlp-exporter-base` from 0.218.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.221.0) Updates `@opentelemetry/resources` from 2.7.1 to 2.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.7.1...v2.10.0) Updates `@opentelemetry/sdk-logs` from 0.218.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.221.0) Updates `@opentelemetry/sdk-metrics` from 2.7.1 to 2.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.7.1...v2.10.0) Updates `@opentelemetry/sdk-node` from 0.218.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.218.0...experimental/v0.221.0) Updates `@opentelemetry/sdk-trace-base` from 2.7.1 to 2.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.7.1...v2.10.0) Updates `@opentelemetry/sdk-trace-node` from 2.7.1 to 2.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.7.1...v2.10.0) Updates `@opentelemetry/semantic-conventions` from 1.39.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@semconv/v1.39.0...semconv/v1.43.0) Updates `ajv` from 8.17.1 to 8.20.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v8.17.1...v8.20.0) Updates `fdir` from 6.4.6 to 6.5.0 - [Release notes](https://github.com/thecodrr/fdir/releases) - [Commits](thecodrr/fdir@v6.4.6...v6.5.0) Updates `ignore` from 7.0.0 to 7.0.6 - [Release notes](https://github.com/kaelzhang/node-ignore/releases) - [Commits](kaelzhang/node-ignore@7.0.0...7.0.6) Updates `mime` from 4.0.7 to 4.1.0 - [Release notes](https://github.com/broofa/mime/releases) - [Changelog](https://github.com/broofa/mime/blob/main/CHANGELOG.md) - [Commits](broofa/mime@v4.0.7...v4.1.0) Updates `picomatch` from 4.0.1 to 4.0.5 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@4.0.1...4.0.5) Updates `@types/picomatch` from 4.0.1 to 4.0.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/picomatch) Updates `systeminformation` from 5.25.11 to 5.33.1 - [Release notes](https://github.com/sebhildebrandt/systeminformation/releases) - [Changelog](https://github.com/sebhildebrandt/systeminformation/blob/master/CHANGELOG.md) - [Commits](sebhildebrandt/systeminformation@v5.25.11...v5.33.1) Updates `tree-sitter-bash` from 0.25.0 to 0.25.1 - [Release notes](https://github.com/tree-sitter/tree-sitter-bash/releases) - [Commits](tree-sitter/tree-sitter-bash@v0.25.0...v0.25.1) Updates `web-tree-sitter` from 0.25.10 to 0.26.12 - [Release notes](https://github.com/tree-sitter/tree-sitter/releases) - [Commits](https://github.com/tree-sitter/tree-sitter/commits/v0.26.12/lib/binding_web) Updates `zod-to-json-schema` from 3.25.1 to 3.25.2 - [Release notes](https://github.com/StefanTerdell/zod-to-json-schema/releases) - [Changelog](https://github.com/StefanTerdell/zod-to-json-schema/blob/master/changelog.md) - [Commits](https://github.com/StefanTerdell/zod-to-json-schema/commits) Updates `@types/json-stable-stringify` from 1.1.0 to 1.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/json-stable-stringify) Updates `@types/picomatch` from 4.0.1 to 4.0.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/picomatch) Updates `cors` from 2.8.5 to 2.8.6 - [Release notes](https://github.com/expressjs/cors/releases) - [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md) - [Commits](expressjs/cors@v2.8.5...v2.8.6) Updates `@types/vscode` from 1.99.0 to 1.125.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode) Updates `@typescript-eslint/eslint-plugin` from 8.31.1 to 8.66.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.31.1 to 8.66.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/parser) Updates `@vscode/vsce` from 3.6.0 to 3.9.2 - [Release notes](https://github.com/Microsoft/vsce/releases) - [Commits](microsoft/vscode-vsce@v3.6.0...v3.9.2) --- updated-dependencies: - dependency-name: simple-git dependency-version: 3.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@octokit/rest" dependency-version: 22.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@vitest/eslint-plugin" dependency-version: 1.6.26 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: esbuild dependency-version: 0.28.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: eslint-config-prettier dependency-version: 10.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: eslint-plugin-headers dependency-version: 1.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: express dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/express" dependency-version: 5.0.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: google-artifactregistry-auth dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: memfs dependency-version: 4.68.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: mnemonist dependency-version: 0.40.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: msw dependency-version: 2.15.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: prettier dependency-version: 3.9.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: semver dependency-version: 7.8.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/semver" dependency-version: 7.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: strip-ansi dependency-version: 7.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: tsx dependency-version: 4.23.11 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: typescript-eslint dependency-version: 8.66.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: node-pty dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@google-cloud/storage" dependency-version: 7.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: fs-extra dependency-version: 11.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: tar dependency-version: 7.5.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/tar" dependency-version: 7.0.87 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: winston dependency-version: 3.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/tar" dependency-version: 7.0.87 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: supertest dependency-version: 7.2.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/supertest" dependency-version: 7.2.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: clipboardy dependency-version: 5.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: shell-quote dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: string-width dependency-version: 8.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: ws dependency-version: 8.21.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/ws" dependency-version: 8.18.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/hast" dependency-version: 3.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/semver" dependency-version: 7.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@bufbuild/protobuf" dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@grpc/grpc-js" dependency-version: 1.14.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@opentelemetry/api" dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@opentelemetry/api-logs" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/core" dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/exporter-logs-otlp-grpc" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/exporter-logs-otlp-http" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/exporter-metrics-otlp-grpc" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/exporter-metrics-otlp-http" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-grpc" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/instrumentation-http" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/otlp-exporter-base" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/resources" dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/sdk-logs" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/sdk-metrics" dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/sdk-trace-node" dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@opentelemetry/semantic-conventions" dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: ajv dependency-version: 8.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: fdir dependency-version: 6.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: ignore dependency-version: 7.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: mime dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: picomatch dependency-version: 4.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/picomatch" dependency-version: 4.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: systeminformation dependency-version: 5.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: tree-sitter-bash dependency-version: 0.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: web-tree-sitter dependency-version: 0.26.12 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: zod-to-json-schema dependency-version: 3.25.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/json-stable-stringify" dependency-version: 1.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/picomatch" dependency-version: 4.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: cors dependency-version: 2.8.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/vscode" dependency-version: 1.125.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.66.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.66.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@vscode/vsce" dependency-version: 3.9.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2026-08-17T00:32:32Z

📊 PR Size: size/XL

Lines changed: 6614
Additions: +3689
Deletions: -2925
Files changed: 9

github-actions · 2026-08-17T00:32:35Z

You already have 7 pull requests open. Please work on getting existing PRs merged before opening more.

dependabot · 2026-08-17T00:32:38Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 17, 2026

dependabot Bot requested review from a team as code owners August 17, 2026 00:32

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 17, 2026

github-actions Bot added the size/xl An extra large PR label Aug 17, 2026

github-actions Bot closed this Aug 17, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-79f096a622 branch August 17, 2026 00:32

github-actions Bot mentioned this pull request Aug 17, 2026

📊 AI CLI 工具社区动态日报 2026-08-17 96loveslife/big_model_radar#337

Open

Navigation Menu

Repository navigation

chore(deps): bump the npm-dependencies group with 73 updates - #28849

chore(deps): bump the npm-dependencies group with 73 updates#28849
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-79f096a622

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

github-actions Bot commented Aug 17, 2026

Uh oh!

github-actions Bot commented Aug 17, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

3.36.0

Minor Changes

Patch Changes

3.35.2

Patch Changes

3.35.1

Patch Changes

3.35.0

Minor Changes

Patch Changes

3.34.0

1.30.0

What's Changed

New Contributors

v1.29.0

What's Changed

New Contributors

v1.28.0

What's Changed

New Contributors

v22.0.1

22.0.1 (2025-10-31)

Bug Fixes

v1.6.26

🐞 Bug Fixes

v1.6.25

🐞 Bug Fixes

v1.6.24

🐞 Bug Fixes

v1.6.23

🚀 Features

🐞 Bug Fixes

v1.6.22

🐞 Bug Fixes

v1.6.21

🐞 Bug Fixes

v1.6.20

🐞 Bug Fixes

v0.28.2

Changelog: 2025

0.27.2

v10.1.8

v10.1.5

Patch Changes

v10.1.4

Patch Changes

v10.1.3

Patch Changes

New Contributors

eslint-config-prettier

10.1.5

Patch Changes

10.1.4

Patch Changes

10.1.3

Patch Changes

v1.3.4

v5.2.1

What's Changed

v5.2.0

Important: Security

What's Changed

5.2.1 / 2025-12-01

5.2.0 / 2025-12-01

Uh oh!

github-actions Bot commented Aug 17, 2026

Uh oh!

github-actions Bot commented Aug 17, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!