chore(deps): bump the production-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the production-dependencies group with 2 updates in the / directory: incur and mppx.

Updates incur from 0.4.8 to 0.4.10

Release notes

Sourced from incur's releases.

incur@0.4.10

Patch Changes

• a94480c: Added mcp doctor command that smoke-tests MCP initialization and tool listing without calling tools.
• f069769: Added MCP tool name and description metadata overrides for commands, including duplicate exposed-name validation.
• 309d566: Added support for non-object MCP output schemas by omitting them from tool registration while preserving JSON text output.

incur@0.4.9

Patch Changes

• 0720a24: Added custom global options support via globals and globalAlias on Cli.create().
• 7e94269: Added destructive command hints to generated skill files.
• a14e41d: Fixed BigInt serialization across JSON, JSONL, MCP, and fetch output paths.
• cb05897: Fixed MCP registration command detection for global, local, and source-launched CLIs.
• 15c9068: Defaulted MCP-over-HTTP to stateless transport behavior and returned 405 for unsupported stateless methods.
• 1c52be9: Lazy-loaded YAML and MCP SDK imports outside plain command runs.
• dc0faff: Added typed MCP command metadata for instructions and annotations.
• 1cbe459: Fixed HTTP and MCP command input validation to return standard validation field errors for object-shaped inputs.
• 43c1551: Added banner option to Cli.create for displaying custom content above root help output with sync/async functions, error swallowing, and mode targeting.
• a0f469f: Fixed streaming command terminal records so HTTP NDJSON responses preserved returned c.ok() CTA metadata, represented returned or yielded c.error() values as terminal errors, included terminal duration metadata, unwound generators on response cancellation, and preserved IncurError.retryable metadata in streaming machine-format errors.
• 9a43129: Surfaced c.ok(..., { cta }) metadata on MCP tool responses under _meta.cta.
• a0f469f: Fixed generated and synced skills to use the same command projection as CLI skill output, avoided duplicate skills for command aliases, preserved output schemas and examples consistently, and included the fetch gateway skill hint for fetch-based commands.
• bffbdf4: Typed the root command hint option on Cli.create.

Changelog

Sourced from incur's changelog.

0.4.10

Patch Changes

• a94480c: Added mcp doctor command that smoke-tests MCP initialization and tool listing without calling tools.
• f069769: Added MCP tool name and description metadata overrides for commands, including duplicate exposed-name validation.
• 309d566: Added support for non-object MCP output schemas by omitting them from tool registration while preserving JSON text output.

0.4.9

Patch Changes

• 0720a24: Added custom global options support via globals and globalAlias on Cli.create().
• 7e94269: Added destructive command hints to generated skill files.
• a14e41d: Fixed BigInt serialization across JSON, JSONL, MCP, and fetch output paths.
• cb05897: Fixed MCP registration command detection for global, local, and source-launched CLIs.
• 15c9068: Defaulted MCP-over-HTTP to stateless transport behavior and returned 405 for unsupported stateless methods.
• 1c52be9: Lazy-loaded YAML and MCP SDK imports outside plain command runs.
• dc0faff: Added typed MCP command metadata for instructions and annotations.
• 1cbe459: Fixed HTTP and MCP command input validation to return standard validation field errors for object-shaped inputs.
• 43c1551: Added banner option to Cli.create for displaying custom content above root help output with sync/async functions, error swallowing, and mode targeting.
• a0f469f: Fixed streaming command terminal records so HTTP NDJSON responses preserved returned c.ok() CTA metadata, represented returned or yielded c.error() values as terminal errors, included terminal duration metadata, unwound generators on response cancellation, and preserved IncurError.retryable metadata in streaming machine-format errors.
• 9a43129: Surfaced c.ok(..., { cta }) metadata on MCP tool responses under _meta.cta.
• a0f469f: Fixed generated and synced skills to use the same command projection as CLI skill output, avoided duplicate skills for command aliases, preserved output schemas and examples consistently, and included the fetch gateway skill hint for fetch-based commands.
• bffbdf4: Typed the root command hint option on Cli.create.

Commits

• a5ccbb0 chore: version packages (#173)
• 21d5ded fix: mark MCP changesets as patch
• 309d566 fix: tolerate non-object MCP output schemas (#170)
• f069769 feat: add MCP tool name metadata (#171)
• a94480c feat: add MCP doctor command (#172)
• 33491cc chore: version packages (#165)
• 15c9068 fix: default /mcp http transport to stateless
• 9a43129 feat(mcp): surface tool cta metadata (#169)
• bffbdf4 fix: type Cli.create root command hint
• 7e94269 feat(skills): add destructive command hints (#166)
• Additional commits viewable in compare view

Updates mppx from 0.7.0 to 0.8.1

Release notes

Sourced from mppx's releases.

mppx@0.8.1

Patch Changes

• 2c4086f: Disabled automatic CLI configuration discovery from local directories.
• 2158a40: Enforced sponsor fee policies before hosted fee-payer signing.
• ca8687b: Validated session open deposit and voucher amounts before sponsored broadcast.

mppx@0.8.0

Minor Changes

• daab9b8: Breaking: Collapsed McpClient.wrap and the in-place wrapClient variant into a single McpClient.wrap API on the mppx/mcp/client entrypoint.

  McpClient.wrap now adds payment handling to an MCP SDK client in place: the client is mutated and the same reference is returned, so surfaces that keep using the original client become payment-aware (e.g. when another SDK owns the client reference, like Cloudflare Agents). The MCP SDK callTool(params, resultSchema?, options?) signature is preserved, payment challenges are handled whether they arrive as payment-required errors or as tool results carrying org.paymentauth/payment-required metadata, and the config accepts orderChallenges and paymentPreferences alongside methods and onPaymentRequired. Calling wrap on the same client again replaces its payment configuration.

  Migration: move per-call options from the second argument to the third — mcp.callTool(params, undefined, { context, timeout }) — and replace the approval-first overload mcp.callTool(onPaymentRequired, params, options) with the onPaymentRequired option: mcp.callTool(params, undefined, { onPaymentRequired }) (pass null to bypass a configured hook). The MCP entrypoints moved to mppx/mcp/client and mppx/mcp/server; the mppx/mcp-sdk/* specifiers remain as aliases.

• e755222: Settled MCP-over-HTTP payment challenges in the same payment-aware fetch as HTTP 402s, so Transport.http() can extract JSON-RPC -32042 challenges and retry with credentials in MCP metadata.

• 18b57cc: Added a pluggable channelStore for persisting reusable payer session channels and removed the client-side authorizedSigner override so voucher authority is derived from the selected account.

Patch Changes

• 4c79a78: Rejected empty Payment challenge IDs during construction and deserialization.
• 7c38c17: Deprecated uppercase asset and chain aliases in favor of lowercase exports.
• 0e88d07: Corrected PaymentRequest documentation examples to use the exported namespace name.
• 8da60b5: Documented explicit server secret key configuration in README examples.
• 7ab4e00: Fixed legacy session manager close amounts when receipts reported per-request spent deltas.
• b5d8657: Updated Hono dependencies to patched versions.
• 5e27ef2: Fixed SSE session accounting so voucher management posts no longer consumed stream charges.
• ec1ad50: Hardened server secret-key validation and capped oversized WWW-Authenticate request parameters.
• 11db0bd: Removed now-unused wallet_authorizeChallenge support.
• a1199b0: Added credential-required Tempo subscription reuse and signed-source lookup support so active subscriptions could be bound to the recovered payer instead of request metadata alone.
• e80feeb: The Tempo fee-payer (sponsor) pre-broadcast simulation now simulates the co-signed transaction the sponsor actually broadcasts — with the concrete fee payer and chosen fee token — instead of the pre-cosign 0x78 envelope, for both local and hosted (feePayerUrl) fee payers. This catches reverts in the exact transaction the sponsor pays gas for, and fails closed (no broadcast) when the simulation reverts.
• c2611f6: Added tempo.common() as an explicit alias for the Tempo charge and session method bundle.
• b84cc06: Added generic Tempo account resolution for charge/session credentials and primitive session voucher signatures.
• 034315e: Updated proxy route examples to use current route handler APIs.
• 4e5abf4: Hardened confirmed Tempo subscription settlement against T6 (TIP-1028) receive policies. Activation and renewal payments that wait for confirmation now verify that a TIP-20 TransferWithMemo log credits the intended recipient for the expected amount with the generated settlement memo, instead of trusting transaction success alone. Transfers held by a receiver's receive policy (redirected to ReceivePolicyGuard) are now rejected rather than treated as paid, and the memo binding excludes unrelated transfer effects in the same receipt. Documented that the optimistic waitForConfirmation: false mode cannot prove recipient credit under T6.
• c15be54: Added wallet_authorizeChallenge support. JSON-RPC accounts now delegate Tempo charge and session challenges to wallets that advertise MPP support via wallet_getCapabilities, falling back to local signing otherwise.
• d14d933: Bound Tempo zero-amount proof credentials to the payer wallet. The EIP-712 Proof typed-data now includes an account field (domain version bumped to 3), so a proof signature commits to a specific payer address and can no longer be replayed against a different account — including across an access key authorized for multiple accounts. Exposed the canonical proof contract via tempo.Proof (types, domain, primaryType, message, typedData, hash) and added deterministic conformance vectors covering the wallet-binding property.

Changelog

Sourced from mppx's changelog.

0.8.1

Patch Changes

• 2c4086f: Disabled automatic CLI configuration discovery from local directories.
• 2158a40: Enforced sponsor fee policies before hosted fee-payer signing.
• ca8687b: Validated session open deposit and voucher amounts before sponsored broadcast.

0.8.0

Minor Changes

• daab9b8: Breaking: Collapsed McpClient.wrap and the in-place wrapClient variant into a single McpClient.wrap API on the mppx/mcp/client entrypoint.

  McpClient.wrap now adds payment handling to an MCP SDK client in place: the client is mutated and the same reference is returned, so surfaces that keep using the original client become payment-aware (e.g. when another SDK owns the client reference, like Cloudflare Agents). The MCP SDK callTool(params, resultSchema?, options?) signature is preserved, payment challenges are handled whether they arrive as payment-required errors or as tool results carrying org.paymentauth/payment-required metadata, and the config accepts orderChallenges and paymentPreferences alongside methods and onPaymentRequired. Calling wrap on the same client again replaces its payment configuration.

  Migration: move per-call options from the second argument to the third — mcp.callTool(params, undefined, { context, timeout }) — and replace the approval-first overload mcp.callTool(onPaymentRequired, params, options) with the onPaymentRequired option: mcp.callTool(params, undefined, { onPaymentRequired }) (pass null to bypass a configured hook). The MCP entrypoints moved to mppx/mcp/client and mppx/mcp/server; the mppx/mcp-sdk/* specifiers remain as aliases.

• e755222: Settled MCP-over-HTTP payment challenges in the same payment-aware fetch as HTTP 402s, so Transport.http() can extract JSON-RPC -32042 challenges and retry with credentials in MCP metadata.

• 18b57cc: Added a pluggable channelStore for persisting reusable payer session channels and removed the client-side authorizedSigner override so voucher authority is derived from the selected account.

Patch Changes

• 4c79a78: Rejected empty Payment challenge IDs during construction and deserialization.
• 7c38c17: Deprecated uppercase asset and chain aliases in favor of lowercase exports.
• 0e88d07: Corrected PaymentRequest documentation examples to use the exported namespace name.
• 8da60b5: Documented explicit server secret key configuration in README examples.
• 7ab4e00: Fixed legacy session manager close amounts when receipts reported per-request spent deltas.
• b5d8657: Updated Hono dependencies to patched versions.
• 5e27ef2: Fixed SSE session accounting so voucher management posts no longer consumed stream charges.
• ec1ad50: Hardened server secret-key validation and capped oversized WWW-Authenticate request parameters.
• 11db0bd: Removed now-unused wallet_authorizeChallenge support.
• a1199b0: Added credential-required Tempo subscription reuse and signed-source lookup support so active subscriptions could be bound to the recovered payer instead of request metadata alone.
• e80feeb: The Tempo fee-payer (sponsor) pre-broadcast simulation now simulates the co-signed transaction the sponsor actually broadcasts — with the concrete fee payer and chosen fee token — instead of the pre-cosign 0x78 envelope, for both local and hosted (feePayerUrl) fee payers. This catches reverts in the exact transaction the sponsor pays gas for, and fails closed (no broadcast) when the simulation reverts.
• c2611f6: Added tempo.common() as an explicit alias for the Tempo charge and session method bundle.
• b84cc06: Added generic Tempo account resolution for charge/session credentials and primitive session voucher signatures.
• 034315e: Updated proxy route examples to use current route handler APIs.
• 4e5abf4: Hardened confirmed Tempo subscription settlement against T6 (TIP-1028) receive policies. Activation and renewal payments that wait for confirmation now verify that a TIP-20 TransferWithMemo log credits the intended recipient for the expected amount with the generated settlement memo, instead of trusting transaction success alone. Transfers held by a receiver's receive policy (redirected to ReceivePolicyGuard) are now rejected rather than treated as paid, and the memo binding excludes unrelated transfer effects in the same receipt. Documented that the optimistic waitForConfirmation: false mode cannot prove recipient credit under T6.
• c15be54: Added wallet_authorizeChallenge support. JSON-RPC accounts now delegate Tempo charge and session challenges to wallets that advertise MPP support via wallet_getCapabilities, falling back to local signing otherwise.
• d14d933: Bound Tempo zero-amount proof credentials to the payer wallet. The EIP-712 Proof typed-data now includes an account field (domain version bumped to 3), so a proof signature commits to a specific payer address and can no longer be replayed against a different account — including across an access key authorized for multiple accounts. Exposed the canonical proof contract via tempo.Proof (types, domain, primaryType, message, typedData, hash) and added deterministic conformance vectors covering the wallet-binding property.

Commits

• 8cac8e0 chore: version packages (#585)
• 2158a40 fix: enforce policy for hosted fee payer (#584)
• 2c4086f fix: require explicit cli config (#581)
• ca8687b fix: precheck session open funding (#583)
• 3057efa chore: version packages (#549)
• a1199b0 Bind subscriptions to signed payer source (#578)
• b84cc06 feat(tempo): add resolveAccount hooks (#579)
• 18b57cc feat(session): add client channel store (#571)
• 7ab4e00 fix: close legacy sessions at accepted cumulative (#577)
• e755222 feat: settle MCP payments in payment-aware fetch (#567)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	incur@​0.4.10
	mppx@​0.8.1

View full report