Skip to content

Conversation

@angular-robot
Copy link
Contributor

@angular-robot angular-robot commented Dec 3, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@modelcontextprotocol/sdk (source) 1.23.0 -> 1.24.0 age adoption passing confidence
@typescript-eslint/eslint-plugin (source) 8.48.0 -> 8.48.1 age adoption passing confidence
@typescript-eslint/parser (source) 8.48.0 -> 8.48.1 age adoption passing confidence
express (source) 5.1.0 -> 5.2.1 age adoption passing confidence
jasmine (source) ~5.12.0 -> ~5.13.0 age adoption passing confidence
jasmine-core (source) ~5.12.0 -> ~5.13.0 age adoption passing confidence
vite (source) 7.2.4 -> 7.2.6 age adoption passing confidence

Release Notes

modelcontextprotocol/typescript-sdk (@​modelcontextprotocol/sdk)

v1.24.0

Compare Source

Summary

This release brings us up to speed with the latest MCP spec 2025-11-25. Take a look at the latest spec as well as the release blog post.

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.23.0...1.24.0

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.48.1

Compare Source

🩹 Fixes
  • eslint-plugin: [restrict-template-expressions] check base types in allow list (#​11764, #​11759)
  • eslint-plugin: honor ignored base types on generic classes (#​11767)
  • eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#​11769)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.48.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

expressjs/express (express)

v5.2.1

Compare Source

=======================

v5.2.0

Compare Source

========================

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.
jasmine/jasmine-npm (jasmine)

v5.13.0

Compare Source

Please see the release notes.

jasmine/jasmine (jasmine-core)

v5.13.0

Compare Source

Please see the release notes.

vitejs/vite (vite)

v7.2.6

Compare Source

7.2.6 (2025-12-01)


Configuration

📅 Schedule: Branch creation - "after 6am and before 10am on Monday, Wednesday, Friday" in timezone Europe/Rome, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@angular-robot angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Dec 3, 2025
@angular-robot angular-robot force-pushed the ng-renovate/main-all-non-major-dependencies branch 2 times, most recently from cb68303 to 6d279dd Compare December 3, 2025 09:07
@alan-agius4 alan-agius4 linked an issue Dec 3, 2025 that may be closed by this pull request
1 task
See associated pull request for more information.
@angular-robot angular-robot force-pushed the ng-renovate/main-all-non-major-dependencies branch from 6d279dd to fde6b65 Compare December 3, 2025 13:49
@alan-agius4 alan-agius4 merged commit fe631c0 into angular:main Dec 3, 2025
34 checks passed
@alan-agius4
Copy link
Collaborator

This PR was merged into the repository. The changes were merged into the following branches:

@alan-agius4 alan-agius4 deleted the ng-renovate/main-all-non-major-dependencies branch December 3, 2025 14:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CVE-2025-66414 - @modelcontextprotocol/sdk

2 participants