Skip to content

chore(deps): bump @hono/node-server, @gitlawb/openclaude and @modelcontextprotocol/sdk in /web - #266

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/multi-fdedd782b9
Open

chore(deps): bump @hono/node-server, @gitlawb/openclaude and @modelcontextprotocol/sdk in /web#266
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/multi-fdedd782b9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps @hono/node-server to 1.19.17 and updates ancestor dependencies @hono/node-server, @gitlawb/openclaude and @modelcontextprotocol/sdk. These dependencies need to be updated together.

Updates @hono/node-server from 1.19.14 to 1.19.17

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hono/node-server since your current version.


Updates @gitlawb/openclaude from 0.20.1 to 0.28.0

Release notes

Sourced from @​gitlawb/openclaude's releases.

v0.28.0

0.28.0 (2026-08-11)

Features

  • cli: add --yolo alias for --dangerously-skip-permissions (#2097) (95eeb0b)
  • codex: move codexplan default to GPT-5.6 Sol (#2051) (9540946)
  • integrations: add ApiSmart OpenAI-compatible gateway provider (#2109) (ff91642)
  • opengateway: add Ling 3.0 Tiny :free — Day-0 launch, free until August 13 (#2112) (7b03ad1)
  • opengateway: free retirement — paid Ling id, dual Nemotron, Macaron Venti (#2108) (54b9cd8)

Bug Fixes

  • bash: convert BRE interval braces when previewing sed edits (#1955) (eb1de5b)
  • cost: guard model-cost lookup against prototype-member model ids (#2064) (c327805)
  • input: preserve text in DEL-coalesced chunks (#2091) (1bf8076)
  • mcp: serialize OAuth and XAA refresh across processes (#2093) (6465a51)
  • model-picker: eliminate O(n²) catalog rebuild lag in /model (#2078) (248424f)
  • query: use monotonic watchdog deadlines (#2110) (16e332e)
  • release: synchronize web changelog entries (#2088) (7743cf2)
  • repl: make local interactive max-turns configurable (#2086) (b0cbfe1)
  • repomap: resolve file language by real extension, own-property only (#2100) (41d2f3b)
  • session: make transcript replacements crash-safe (#2094) (d834904)
  • web: add v0.27.0 changelog entry and clarify release-data ownership (#2075) (63fda83)

Performance Improvements

v0.27.0

0.27.0 (2026-07-30)

Features

  • auth: opt-in loopback proxy hosts that keep subscription (OAuth) auth (#2050) (3925f27)
  • integrations: add Ling 3.0 Flash free to the Opengateway catalog (#2057) (3c5856a)
  • opengateway: add Macaron V1 Tall to the gateway catalog (#2067) (e636f7d)
  • ui: single-row centered startup logo with ANSI Shadow wordmark (#2053) (12994f2)
  • web: replace favicon/logo with Ember Block O brand mark (#2065) (56a9201)
  • web: v0.26 refresh — buddy page, changelog, partners, provider … (#2060) (0f76b54)

Bug Fixes

  • agents: allow subagents from multi-repo parent sessions (#2063) (8df37c7)
  • minimax: mark MiniMax-M2.7 as text-only input (#2068) (5cac15c)

... (truncated)

Changelog

Sourced from @​gitlawb/openclaude's changelog.

0.28.0 (2026-08-11)

Features

  • cli: add --yolo alias for --dangerously-skip-permissions (#2097) (95eeb0b)
  • codex: move codexplan default to GPT-5.6 Sol (#2051) (9540946)
  • integrations: add ApiSmart OpenAI-compatible gateway provider (#2109) (ff91642)
  • opengateway: add Ling 3.0 Tiny :free — Day-0 launch, free until August 13 (#2112) (7b03ad1)
  • opengateway: free retirement — paid Ling id, dual Nemotron, Macaron Venti (#2108) (54b9cd8)

Bug Fixes

  • bash: convert BRE interval braces when previewing sed edits (#1955) (eb1de5b)
  • cost: guard model-cost lookup against prototype-member model ids (#2064) (c327805)
  • input: preserve text in DEL-coalesced chunks (#2091) (1bf8076)
  • mcp: serialize OAuth and XAA refresh across processes (#2093) (6465a51)
  • model-picker: eliminate O(n²) catalog rebuild lag in /model (#2078) (248424f)
  • query: use monotonic watchdog deadlines (#2110) (16e332e)
  • release: synchronize web changelog entries (#2088) (7743cf2)
  • repl: make local interactive max-turns configurable (#2086) (b0cbfe1)
  • repomap: resolve file language by real extension, own-property only (#2100) (41d2f3b)
  • session: make transcript replacements crash-safe (#2094) (d834904)
  • web: add v0.27.0 changelog entry and clarify release-data ownership (#2075) (63fda83)

Performance Improvements

0.27.0 (2026-07-30)

Features

  • auth: opt-in loopback proxy hosts that keep subscription (OAuth) auth (#2050) (3925f27)
  • integrations: add Ling 3.0 Flash free to the Opengateway catalog (#2057) (3c5856a)
  • opengateway: add Macaron V1 Tall to the gateway catalog (#2067) (e636f7d)
  • ui: single-row centered startup logo with ANSI Shadow wordmark (#2053) (12994f2)
  • web: replace favicon/logo with Ember Block O brand mark (#2065) (56a9201)
  • web: v0.26 refresh — buddy page, changelog, partners, provider … (#2060) (0f76b54)

Bug Fixes

  • agents: allow subagents from multi-repo parent sessions (#2063) (8df37c7)
  • minimax: mark MiniMax-M2.7 as text-only input (#2068) (5cac15c)
  • query: do not trip tool-failure guard on parallel same-turn failures (#2048) (9d5b77d)
  • sdk: report a permission timeout as a timeout (#2028) (580a6b1)

... (truncated)

Commits
  • 6e30b40 chore(main): release 0.28.0 (#2090)
  • 5f8e7d1 Revert "fix(release): synchronize web changelog entries (#2088)" (#2113)
  • 7b03ad1 feat(opengateway): add Ling 3.0 Tiny :free — Day-0 launch, free until August ...
  • 16e332e fix(query): use monotonic watchdog deadlines (#2110)
  • ff91642 feat(integrations): add ApiSmart OpenAI-compatible gateway provider (#2109)
  • 7743cf2 fix(release): synchronize web changelog entries (#2088)
  • 54b9cd8 feat(opengateway): free retirement — paid Ling id, dual Nemotron, Macaron Ven...
  • 93dbc72 refactor(openai-shim): extract Codex dispatch (#2074)
  • 7fae0ff refactor(openai-shim): extract request preparation (#2073)
  • 9540946 feat(codex): move codexplan default to GPT-5.6 Sol (#2051)
  • Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…ntextprotocol/sdk

Bumps [@hono/node-server](https://github.com/honojs/node-server) to 1.19.17 and updates ancestor dependencies [@hono/node-server](https://github.com/honojs/node-server), [@gitlawb/openclaude](https://github.com/Gitlawb/openclaude) and [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk). These dependencies need to be updated together.


Updates `@hono/node-server` from 1.19.14 to 1.19.17
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.14...v1.19.17)

Updates `@gitlawb/openclaude` from 0.20.1 to 0.28.0
- [Release notes](https://github.com/Gitlawb/openclaude/releases)
- [Changelog](https://github.com/Gitlawb/openclaude/blob/main/CHANGELOG.md)
- [Commits](Gitlawb/openclaude@v0.20.1...v0.28.0)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 1.19.17
  dependency-type: indirect
- dependency-name: "@gitlawb/openclaude"
  dependency-version: 0.28.0
  dependency-type: direct:production
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants