Bump the npm group across 3 directories with 13 updates by dependabot[bot] · Pull Request #18 · poad/aws-lambda-mcp-server

dependabot · 2025-11-16T18:35:51Z

Bumps the npm group with 6 updates in the / directory:

Package	From	To
@modelcontextprotocol/sdk	`1.21.1`	`1.22.0`
hono	`4.10.5`	`4.10.6`
@eslint/compat	`1.4.1`	`2.0.0`
vitest	`4.0.8`	`4.0.9`
aws-cdk-lib	`2.223.0`	`2.224.0`
@vitest/coverage-v8	`4.0.8`	`4.0.9`

Bumps the npm group with 6 updates in the /example directory:

Package	From	To
@modelcontextprotocol/sdk	`1.21.1`	`1.22.0`
hono	`4.10.5`	`4.10.6`
@eslint/compat	`1.4.1`	`2.0.0`
vitest	`4.0.8`	`4.0.9`
aws-cdk-lib	`2.223.0`	`2.224.0`
@vitest/coverage-v8	`4.0.8`	`4.0.9`

Bumps the npm group with 1 update in the /package directory: @eslint/compat.

Updates @modelcontextprotocol/sdk from 1.21.1 to 1.22.0

Release notes

Sourced from @modelcontextprotocol/sdk's releases.

Commits

324d471 chore: bump version for release (#1110)
8019972 [auth] Fix march spec fallback for metadata discovery (#1108)
29cb080 Implementation of SEP-986: Specify Format for Tool Names (#900)
9f06b6b SEP-1330: Compatibility with SEP-1034 (#1100)
ce420f8 DRAFT: SEP-1034: Default values for Elicitation Schemas (#1096)
2da89db change step name (#1089)
6f20663 Upgrade to Node LTS (#1072)
5e735c1 add pkg-pr-new bot (#1088)
f59996a SEP-1319: Decouple Request Payloads, Remove passthrough iteration, Typecheck ...
806d7cf registerTool: accept ZodType<object> for input and output schema (#816)
See full diff in compare view

Maintainer changes

This version was pushed to npm by pcarleton, a new releaser for @modelcontextprotocol/sdk since your current version.

Updates hono from 4.10.5 to 4.10.6

Release notes

Sourced from hono's releases.

Commits

4960c06 4.10.6
96d2a89 feat: Improve auth middlewares (#4485)
279184b feat(secure-headers): support CSP TrustedTypePolicy (#4500)
cea3fb0 feat(aws-lambda): handle AWS Lattice events (#4451)
See full diff in compare view

Updates @eslint/compat from 1.4.1 to 2.0.0

Release notes

Sourced from @eslint/compat's releases.

... (truncated)

Changelog

Sourced from @eslint/compat's changelog.

Commits

c368656 chore: release main (#317)
50c6da8 docs: Update README sponsors
acc623c feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#297)
a40d8c6 feat: patch missing context and SourceCode methods for v10 (#311)
d9a760d docs: Update README sponsors
d274789 docs: Update README sponsors
b7eff4a docs: Update README sponsors
See full diff in compare view

Updates vitest from 4.0.8 to 4.0.9

Release notes

Sourced from vitest's releases.

Commits

62fab24 chore: release v4.0.9
5e750f4 fix(forks): increase worker start timeout (#9027)
506a9fd fix(jsdom): cloned request is an instance of Request (#8985)
See full diff in compare view

Updates aws-cdk-lib from 2.223.0 to 2.224.0

Release notes

Sourced from aws-cdk-lib's releases.

Changelog

Sourced from aws-cdk-lib's changelog.

... (truncated)

Commits

efe936c chore: update analytics metadata blueprints
2eee0a9 chore: exclude test and config files from minification (#36038)
35f8e46 feat(apigateway): add option for consolidating lambda permissions for rest an...
47a9a20 feat: update L1 CloudFormation resource definitions (#35994)
96d4e81 chore(interfaces): submodule names for interface submodules are incorrect (#3...
1e4dfe6 fix: move reference interfaces to their own submodules (#35971)
76e0fa0 chore: enable isolatedModules in TypeScript configs (#36024)
60096ac feat(eks): add support for Kubernetes version 1.34 (#36016)
667de25 chore(core): introduce DetachedConstruct base class (#36015)
f96e94c chore: centralize storage of submodule names (#36018)
Additional commits viewable in compare view

Updates @vitest/coverage-v8 from 4.0.8 to 4.0.9

Release notes

Sourced from @vitest/coverage-v8's releases.

Commits

62fab24 chore: release v4.0.9
See full diff in compare view

Updates @vitest/expect from 4.0.8 to 4.0.9

Release notes

Sourced from @vitest/expect's releases.

Commits

62fab24 chore: release v4.0.9
a415d03 feat(expect): add Set support to toBeOneOf (#8906)
See full diff in compare view

Updates @vitest/mocker from 4.0.8 to 4.0.9

Release notes

Sourced from @vitest/mocker's releases.

Commits

62fab24 chore: release v4.0.9
See full diff in compare view

Updates @vitest/pretty-format from 4.0.8 to 4.0.9

Release notes

Sourced from @vitest/pretty-format's releases.

Commits

62fab24 chore: release v4.0.9
See full diff in compare view

Updates @vitest/runner from 4.0.8 to 4.0.9

Release notes

Sourced from @vitest/runner's releases.

Commits

62fab24 chore: release v4.0.9
See full diff in compare view

Updates @vitest/snapshot from 4.0.8 to 4.0.9

Release notes

Sourced from @vitest/snapshot's releases.

Commits

62fab24 chore: release v4.0.9
See full diff in compare view

Updates @vitest/spy from 4.0.8 to 4.0.9

Release notes

Sourced from @vitest/spy's releases.

Commits

62fab24 chore: release v4.0.9
See full diff in compare view

Updates @vitest/utils from 4.0.8 to 4.0.9

Release notes

Sourced from @vitest/utils's releases.

Commits

62fab24 chore: release v4.0.9
See full diff in compare view

Updates @modelcontextprotocol/sdk from 1.21.1 to 1.22.0

Release notes

Sourced from @modelcontextprotocol/sdk's releases.

Commits

324d471 chore: bump version for release (#1110)
8019972 [auth] Fix march spec fallback for metadata discovery (#1108)
29cb080 Implementation of SEP-986: Specify Format for Tool Names (#900)
9f06b6b SEP-1330: Compatibility with SEP-1034 (#1100)
ce420f8 DRAFT: SEP-1034: Default values for Elicitation Schemas (#1096)
2da89db change step name (#1089)
6f20663 Upgrade to Node LTS (#1072)
5e735c1 add pkg-pr-new bot (#1088)
f59996a SEP-1319: Decouple Request Payloads, Remove passthrough iteration, Typecheck ...
806d7cf registerTool: accept ZodType<object> for input and output schema (#816)
See full diff in compare view

Maintainer changes

This version was pushed to npm by pcarleton, a new releaser for @modelcontextprotocol/sdk since your current version.

Updates hono from 4.10.5 to 4.10.6

Release notes

Sourced from hono's releases.

Commits

4960c06 4.10.6
96d2a89 feat: Improve auth middlewares (#4485)

Bumps the npm group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.21.1` | `1.22.0` | | [hono](https://github.com/honojs/hono) | `4.10.5` | `4.10.6` | | [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `1.4.1` | `2.0.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.8` | `4.0.9` | | [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.223.0` | `2.224.0` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.8` | `4.0.9` | Bumps the npm group with 6 updates in the /example directory: | Package | From | To | | --- | --- | --- | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.21.1` | `1.22.0` | | [hono](https://github.com/honojs/hono) | `4.10.5` | `4.10.6` | | [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `1.4.1` | `2.0.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.8` | `4.0.9` | | [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.223.0` | `2.224.0` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.8` | `4.0.9` | Bumps the npm group with 1 update in the /package directory: [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat). Updates `@modelcontextprotocol/sdk` from 1.21.1 to 1.22.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.21.1...1.22.0) Updates `hono` from 4.10.5 to 4.10.6 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.10.5...v4.10.6) Updates `@eslint/compat` from 1.4.1 to 2.0.0 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.0/packages/compat) Updates `vitest` from 4.0.8 to 4.0.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.9/packages/vitest) Updates `aws-cdk-lib` from 2.223.0 to 2.224.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](https://github.com/aws/aws-cdk/commits/v2.224.0/packages/aws-cdk-lib) Updates `@vitest/coverage-v8` from 4.0.8 to 4.0.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.9/packages/coverage-v8) Updates `@vitest/expect` from 4.0.8 to 4.0.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.9/packages/expect) Updates `@vitest/mocker` from 4.0.8 to 4.0.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.9/packages/mocker) Updates `@vitest/pretty-format` from 4.0.8 to 4.0.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.9/packages/pretty-format) Updates `@vitest/runner` from 4.0.8 to 4.0.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.9/packages/runner) Updates `@vitest/snapshot` from 4.0.8 to 4.0.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.9/packages/snapshot) Updates `@vitest/spy` from 4.0.8 to 4.0.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.9/packages/spy) Updates `@vitest/utils` from 4.0.8 to 4.0.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.9/packages/utils) Updates `@modelcontextprotocol/sdk` from 1.21.1 to 1.22.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.21.1...1.22.0) Updates `hono` from 4.10.5 to 4.10.6 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.10.5...v4.10.6) Updates `@eslint/compat` from 1.4.1 to 2.0.0 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.0/packages/compat) Updates `vitest` from 4.0.8 to 4.0.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.9/packages/vitest) Updates `aws-cdk-lib` from 2.223.0 to 2.224.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](https://github.com/aws/aws-cdk/commits/v2.224.0/packages/aws-cdk-lib) Updates `@vitest/coverage-v8` from 4.0.8 to 4.0.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.9/packages/coverage-v8) Updates `@eslint/compat` from 1.4.1 to 2.0.0 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.0/packages/compat) --- updated-dependencies: - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: hono dependency-version: 4.10.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@eslint/compat" dependency-version: 2.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: vitest dependency-version: 4.0.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: aws-cdk-lib dependency-version: 2.224.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@vitest/coverage-v8" dependency-version: 4.0.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/expect" dependency-version: 4.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/mocker" dependency-version: 4.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/pretty-format" dependency-version: 4.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/runner" dependency-version: 4.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/snapshot" dependency-version: 4.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/spy" dependency-version: 4.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vitest/utils" dependency-version: 4.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: hono dependency-version: 4.10.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@eslint/compat" dependency-version: 2.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: vitest dependency-version: 4.0.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: aws-cdk-lib dependency-version: 2.224.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@vitest/coverage-v8" dependency-version: 4.0.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@eslint/compat" dependency-version: 2.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2025-11-16T18:36:03Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@eslint/compat

^2.0.0

Unknown

npm/@modelcontextprotocol/sdk

^1.22.0

Unknown

npm/@vitest/coverage-v8

^4.0.9

Unknown

npm/aws-cdk-lib

^2.224.0

🟢 4.8

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	⚠️ 0	dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	🟢 8	5 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy	🟢 10	security policy file detected
SAST	🟢 9	SAST tool detected but not run on all commits
Binary-Artifacts	⚠️ 0	binaries present in source code
Fuzzing	🟢 10	project is fuzzed
Vulnerabilities	⚠️ 0	19 existing vulnerabilities detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0

npm/hono

^4.10.6

Unknown

npm/vitest

^4.0.9

Unknown

npm/zod

^3.25.76

🟢 4.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	🟢 4	Found 12/30 approved changesets -- score normalized to 4
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities	⚠️ 0	13 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@eslint/compat

^2.0.0

Unknown

npm/@modelcontextprotocol/sdk

^1.22.0

Unknown

npm/hono

^4.10.6

Unknown

npm/vitest

^4.0.9

Unknown

npm/@emnapi/core

1.7.1

🟢 4.3

Details

Check	Score	Reason
Maintained	🟢 10	18 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Code-Review	⚠️ 0	Found 1/30 approved changesets -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Packaging	🟢 10	packaging workflow detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@emnapi/runtime

1.7.1

🟢 4.3

Details

Check	Score	Reason
Maintained	🟢 10	18 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Code-Review	⚠️ 0	Found 1/30 approved changesets -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Packaging	🟢 10	packaging workflow detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@eslint/compat

2.0.0

Unknown

npm/@eslint/core

1.0.0

Unknown

npm/@modelcontextprotocol/sdk

1.22.0

Unknown

npm/@vitest/coverage-v8

4.0.9

Unknown

npm/@vitest/expect

4.0.9

Unknown

npm/@vitest/mocker

4.0.9

Unknown

npm/@vitest/pretty-format

4.0.9

Unknown

npm/@vitest/runner

4.0.9

Unknown

npm/@vitest/snapshot

4.0.9

Unknown

npm/@vitest/spy

4.0.9

Unknown

npm/@vitest/utils

4.0.9

Unknown

npm/aws-cdk-lib

2.224.0

🟢 4.8

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	⚠️ 0	dangerous workflow patterns detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	🟢 8	5 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy	🟢 10	security policy file detected
SAST	🟢 9	SAST tool detected but not run on all commits
Binary-Artifacts	⚠️ 0	binaries present in source code
Fuzzing	🟢 10	project is fuzzed
Vulnerabilities	⚠️ 0	19 existing vulnerabilities detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0

npm/hono

4.10.6

Unknown

npm/vitest

4.0.9

Unknown

Scanned Files

example/package.json
package/package.json
pnpm-lock.yaml

dependabot Bot assigned poad Nov 16, 2025

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 16, 2025

github-actions Bot approved these changes Nov 16, 2025

View reviewed changes

github-actions Bot enabled auto-merge (squash) November 16, 2025 18:36

Fix the errors

992b7ec

github-actions Bot approved these changes Nov 16, 2025

View reviewed changes

github-actions Bot merged commit 5c942af into main Nov 16, 2025
4 checks passed

github-actions Bot deleted the dependabot/npm_and_yarn/npm-eaf71faaa5 branch November 16, 2025 23:44

github-actions Bot mentioned this pull request Nov 24, 2025

Release v1.0.0 #29

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm group across 3 directories with 13 updates - #18

Bump the npm group across 3 directories with 13 updates#18
github-actions[bot] merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-eaf71faaa5

dependabot Bot commented on behalf of github Nov 16, 2025

Uh oh!

github-actions Bot commented Nov 16, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 16, 2025

1.22.0

What's Changed

New Contributors

1.21.2

What's changed

v4.10.6

Deperecated

bearer-auth options

What's Changed

New Contributors

compat: v2.0.0

2.0.0 (2025-11-14)

⚠ BREAKING CHANGES

Features

Dependencies

migrate-config: v2.0.0

2.0.0 (2025-11-14)

⚠ BREAKING CHANGES

Features

Dependencies

migrate-config: v1.6.1

1.6.1 (2025-10-27)

Dependencies

2.0.0 (2025-11-14)

⚠ BREAKING CHANGES

Features

Dependencies

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

v2.224.0

⚠ BREAKING CHANGES

Features

Bug Fixes

Alpha modules (2.224.0-alpha.0)

Features

Changelog

2.224.0-alpha.0 (2025-11-13)

Features

2.223.0-alpha.0 (2025-11-10)

2.222.0-alpha.0 (2025-11-04)

Features

Bug Fixes

2.221.1-alpha.0 (2025-10-29)

2.221.0-alpha.0 (2025-10-24)

Features

Bug Fixes

2.220.0-alpha.0 (2025-10-14)

Bug Fixes

2.219.0-alpha.0 (2025-10-01)

2.218.0-alpha.0 (2025-09-29)

2.217.0-alpha.0 (2025-09-25)

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

v4.0.9

🚀 Experimental Features

🐞 Bug Fixes

1.22.0

What's Changed

github-actions Bot commented Nov 16, 2025 •

edited

Loading