Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 16, 2025

Bumps the production-dependencies group with 3 updates: @modelcontextprotocol/sdk, fastmcp and zod.

Updates @modelcontextprotocol/sdk from 1.12.1 to 1.12.3

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.12.3

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.12.2...1.12.3

1.12.2

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.12.1...1.12.2

Commits
  • dd69efa Merge pull request #623 from modelcontextprotocol/ihrpr/1.12.3
  • ea6d97d 1.12.3
  • b6f0273 Merge pull request #621 from modelcontextprotocol/carlpeaslee/fix-resource-te...
  • 9d3374c Merge pull request #574 from loopwork-ai/carlpeaslee/fix-resource-template-li...
  • bc53129 adding tests to prevent regressions
  • 2cf4f0c Merge pull request #546 from fredericbarthelet/register-completions-capabilities
  • 1878143 bump version
  • 6cf0345 updates listed resources from resource templates to favor their own metadata
  • 7e05215 Add tests for completions capability registration on template resource with c...
  • 269c8ca Remove server-specific capabilities definition from Client constructor in mcp...
  • Additional commits viewable in compare view

Updates fastmcp from 3.0.0 to 3.3.0

Release notes

Sourced from fastmcp's releases.

v3.3.0

3.3.0 (2025-06-13)

Features

  • Add support to change http server endpoint (#111) (1eb1b2c)

v3.2.0

3.2.0 (2025-06-13)

Features

  • Support full MCP SDK schema for Prompt Result. (#113) (4dce6c0)

v3.1.1

3.1.1 (2025-06-11)

Bug Fixes

v3.1.0

3.1.0 (2025-06-11)

Features

  • optimize memory management and enhance CLI tooling (#108) (64f0394)

v3.0.1

3.0.1 (2025-06-10)

Bug Fixes

  • upgrade mcp proxy and add async to on close (#105) (16bc256)
Commits

Updates zod from 3.25.56 to 3.25.64

Release notes

Sourced from zod's releases.

v3.25.64

Commits:

  • b142ea8fbb9e41f8251a36ba687b90a316f65fa4 Fix $strip
  • b6e59c37a0a463f90e91453a4d6b2b3db8cdbc53 Check for existence of Error.captureStackTrace
  • 0c686afdc95a324330a60315c59189fa09d8c497 Remove type from mime issue path
  • af88d743a7f6b8c1f5a2d43e3282c976833eeee7 Fix test

v3.25.63

Commits:

  • 7ed0c3694d324f5c02d5b224e7e3163d2fd84c52 Allow hours-only offsets. Normalize. (#4676)
  • 112fff6b7866f909583cd6f62c43fb639420b069 Fix iso tests
  • 6176dcb570186c4945223fa83bcf3221cbfa1af5 Improve ISO second handling (#4680)
  • 8e20a2018df854734a09e81e3dfbe598c42911e3 Use consistent variable names for IP examples (#4679)
  • 29e4973b065476b09f69e83c9e9ff4c6908c8a8c refactor: remove unnecessary assertion (#4672)
  • c626fe100eb79fd95e557d8091a111306ecb6045 chore: update husky from v7 to v9 (#4682)
  • f350a693aec24a5b70a37992df3b9e7ea36525b2 3.25.63

v3.25.62

Commits:

  • c568dea33ac42382070580687410ee47e83609c4 Drop | undefined from json schema types
  • 1614fd891b40cc9d23b249abad528e38ca718065 3.25.62

v3.25.61

Commits:

  • 1c2ad877120566adc9db3a8d99c1a575bc58d216 Loose signature for index signature shapes
  • afa7e672f4be0fc37ec9d35d281221ceb153baba 3.25.61
  • 82b43fa9ff832b80e249b944fefb8177827136e6 Fix test

v3.25.60

  • no changes

v3.25.59

Commits:

  • aec5c4ad036cb7a2ccbda744486f48c4047316dd Fix formatting
  • d3389cbfa1888ac45634a185d4aaa2df7de0aef5 refactor: change if in else to else if (#4664)
  • ffc41bd9f9e5f33627112baf19247bb95d83dd13 Improve JSON Schema typing

v3.25.58

Commits:

  • 21ee3f6fceb504069ef91899248239c59e2189b9 Add Zod Sockets to Ecosystem (#4655)
  • 6707ebb14c885b1c577ce64a240475e26e3ff182 v4: Preserve function types in .meta() (#4636)
  • 3cecd986a4092de509bde195c7021b8871d28ea0 Added Superforms for SvelteKit (#4635)
  • 305399f878450cf3f0a2b05975b58774d5226244 Fix adjectives in Japanese (#4648)
  • 04dc83ea8a4e63abf424090efb23d3bc9f31a3ad feat(locale): Add Pashto (ps) locale support (#4594)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 3 updates: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [fastmcp](https://github.com/punkpeye/fastmcp) and [zod](https://github.com/colinhacks/zod).


Updates `@modelcontextprotocol/sdk` from 1.12.1 to 1.12.3
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.12.1...1.12.3)

Updates `fastmcp` from 3.0.0 to 3.3.0
- [Release notes](https://github.com/punkpeye/fastmcp/releases)
- [Commits](punkpeye/fastmcp@v3.0.0...v3.3.0)

Updates `zod` from 3.25.56 to 3.25.64
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.56...v3.25.64)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: fastmcp
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 3.25.64
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 16, 2025
Copy link

changeset-bot bot commented Jun 16, 2025

⚠️ No Changeset found

Latest commit: 6242daa

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@cswkim cswkim merged commit e2303ad into main Jun 16, 2025
1 check passed
@cswkim cswkim deleted the dependabot/npm_and_yarn/production-dependencies-cc0fddc30d branch June 16, 2025 17:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant