Skip to content

chore(deps): Bump the npm-minor-and-patch group across 1 directory with 6 updates - #32

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mcp/npm-minor-and-patch-e011d9f381
Open

chore(deps): Bump the npm-minor-and-patch group across 1 directory with 6 updates#32
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mcp/npm-minor-and-patch-e011d9f381

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 4 updates in the /mcp directory: @modelcontextprotocol/sdk, @run402/sdk, viem and tsx.

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates @run402/sdk from 4.8.0 to 4.31.0

Release notes

Sourced from @​run402/sdk's releases.

v4.31.0

Full Changelog: kychee-com/run402@v4.30.0...v4.31.0

v4.30.0

Full Changelog: kychee-com/run402@v4.29.0...v4.30.0

v4.29.0

Full Changelog: kychee-com/run402@v4.28.0...v4.29.0

v4.28.0

Full Changelog: kychee-com/run402@v4.27.0...v4.28.0

v4.27.0

A current organization for the CLI

A wallet has a current wallet. A project has a current project. The organization — which owns your projects, holds your memberships, and scopes rooms, escalations, members, grants, and audit — had no current at all. Every way to name one required a flag, an environment variable, or a deployed project.

That made one case awkward and one case impossible. Awkward: passing --org on every call. Impossible-in-practice: an org that owns no project — two agents coordinating in one repo while hosting nothing on run402 — could only be reached by pasting a UUID into RUN402_ROOM in every shell.

run402 org use

run402 org use <org_id>     # select it for this wallet profile
run402 org current          # what resolves, and which source supplied it
run402 org clear            # drop the selection

The selection is stored per wallet profile, not globally. The chain is wallet → principal → memberships, so a global selection would survive wallets use other and then either 403 or, worse, silently resolve to a valid-but-wrong org when both principals are members. run402 projects use now also stamps that project's org as current, since a project determines its org unambiguously.

.run402.json binds a checkout

The directory binding that already carried wallet now carries org and room:

{ "org": "…", "room": "my-repo" }

Every key is independently optional and resolves at the nearest file carrying it, walking up. Commit it and every agent in that checkout lands in the same room with no flags and no environment variables. (An org id is an identifier, not a credential — authorization stays server-side. .run402.local.json remains the gitignored override.)

One chain, four intent classes

Every org-scoped command now resolves the same way:

flag → environment → binding → profile state

and inside each class, an organization named directly outranks one derived from a project named in that same class. That last rule is what makes run402 rooms who --project X behave: naming a project is naming its organization, so a stale selection must not outrank it.

  • RUN402_ORG disagreeing with a binding file is a hard AMBIGUOUS_ORG error naming both and their sources, resolved by --org — the same rule the wallet tier has had. A binding beats the profile selection silently, because that is what declaring a binding means.
  • Nothing infers your org from having exactly one membership. Membership is server state that changes without you acting; a heuristic that is right today changes meaning the day you are invited elsewhere.
  • Missing entirely is a typed ORG_REQUIRED listing every way to supply one — not the PROJECT_REQUIRED it used to borrow, which named the wrong thing for a caller who has no project by design.

... (truncated)

Commits
  • bac1125 chore: bump version to v4.31.0
  • 74dcdc8 chore: bump version to v4.30.0
  • 2fce748 feat(cli,mcp,sdk)!: rename the developer-feedback channel to feedback
  • e288e6d chore: bump version to v4.29.0
  • b8203dc gitvault(sdk): follow the rev-41 fold in the five file-header protocol citations
  • b846cfe gitvault: protocol rev 41 — the real keystore path, and the vendored vector s...
  • 4fff1be gitvault: pin the §6.5 wire contract itself, not just the lane over it
  • 0d3dac8 gitvault: drop an unused runtime import from the apply lane
  • 343d9dc gitvault: supply the deploy lane, and verify correspondence instead of isolat...
  • 060ea5f chore: bump version to v4.28.0
  • Additional commits viewable in compare view

Updates @x402/evm from 2.18.0 to 2.23.0

Commits

Updates @x402/fetch from 2.18.0 to 2.23.0

Commits

Updates viem from 2.55.1 to 2.55.19

Release notes

Sourced from viem's releases.

viem@2.55.19

Patch Changes

viem@2.55.18

Patch Changes

viem@2.55.17

Patch Changes

viem@2.55.16

Patch Changes

viem@2.55.15

Patch Changes

viem@2.55.13

Patch Changes

viem@2.55.11

Patch Changes

... (truncated)

Commits

Updates tsx from 4.23.1 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

  • shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

  • preserve async ESM require fallback (55cbece)

This release is also available on:

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

This release is also available on:

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

  • map Node test locations (2f55884)
  • support data URLs in tsImport (b94f46f)

This release is also available on:

v4.23.8

... (truncated)

Commits
  • ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
  • 651f5be test: cover CommonJS TypeScript import.meta paths
  • bd3bc64 test: cover CommonJS loader source fallback
  • 55cbece fix: preserve async ESM require fallback
  • 6c5ba85 docs: document CommonJS default interop
  • ec1bcd5 fix: support nyc coverage discovery (#710)
  • b6e5b48 docs: clarify CommonJS default imports
  • 2f55884 fix: map Node test locations
  • de935d5 docs: document Node source-map stack formatting
  • b94f46f fix: support data URLs in tsImport
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the npm-minor-and-patch group across 1 directory wi…
7472042 
…th 6 updates

Bumps the npm-minor-and-patch group with 4 updates in the /mcp directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [@run402/sdk](https://github.com/kychee-com/run402/tree/HEAD/sdk), [viem](https://github.com/wevm/viem) and [tsx](https://github.com/privatenumber/tsx).


Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `@run402/sdk` from 4.8.0 to 4.31.0
- [Release notes](https://github.com/kychee-com/run402/releases)
- [Changelog](https://github.com/kychee-com/run402/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kychee-com/run402/commits/v4.31.0/sdk)

Updates `@x402/evm` from 2.18.0 to 2.23.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/evm@v2.18.0...npm-@x402/evm@v2.23.0)

Updates `@x402/fetch` from 2.18.0 to 2.23.0
- [Commits](https://github.com/x402-foundation/x402/compare/npm-@x402/fetch@v2.18.0...npm-@x402/fetch@v2.23.0)

Updates `viem` from 2.55.1 to 2.55.19
- [Release notes](https://github.com/wevm/viem/releases)
- [Commits](https://github.com/wevm/viem/compare/viem@2.55.1...viem@2.55.19)

Updates `tsx` from 4.23.1 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.1...v4.23.12)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@run402/sdk"
  dependency-version: 4.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@x402/evm"
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@x402/fetch"
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: viem
  dependency-version: 2.55.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants