Bump the npm_and_yarn group across 1 directory with 22 updates - #1
Closed
dependabot[bot] wants to merge 109 commits into
Closed
Bump the npm_and_yarn group across 1 directory with 22 updates#1dependabot[bot] wants to merge 109 commits into
dependabot[bot] wants to merge 109 commits into
Conversation
Here's a corrected breakdown of the Elysium board's unique
here is the placement for the top row of the Thar
TINYforming Mars is a
There needs to be a sup
depicted here for quick r
- Create src/engine/ with full type system from PRD Section 5 - Add all 14 project cards (28 sides) verified against physical cards - Add both hex maps (Tharsis, Elysium) with adjacency and bonus hexes - Add 5 standard projects with verified costs and tag requirements - Add ParameterReduction type for Insects card mechanic - Add CostReduction/CreditFormula variants for Bushes and Asteroid Mining - Create engine stubs: gameState, rules, actions, income, scoring - Add AI placeholder files: heuristic, minimax, aiController, aiLogger - Mark src/lib/game/ as legacy with LEGACY.md - Smoke tests: 10 passing
- Add comprehensive PRD with game rules, AI architecture, data models - Add phased task tracker (74 tasks across 7 phases) - Add verification checklists for cards (28/28 verified), maps, standard projects (5/5 verified) - Document PRD corrections found during physical card verification
- Migrate src/firebase/ → src/lib/firebase/ with real implementations - Add auth service: signUp, signIn, signInWithGoogle, signOut, resetPassword - Add Firestore re-exports and user document CRUD (create, get, update) - Add AuthContext with real-time profile listener via onSnapshot - Add UserProfile type with game stats tracking - Add Firebase error code → English message mapping
- Create AuthCard with Sign In / Sign Up tab toggle - Inline forgot-password flow (no separate page) - Google sign-in button with OAuth popup - Wrap app with AuthProvider in layout.tsx - Conditional rendering in page.tsx: auth card or game - Add COOP header for Google popup auth compatibility
Core engine (pure TypeScript, no UI dependencies): - gameState.ts: game initialization, research phase, card drafting - rules.ts: tag counting (3 sources), requirement checking (6 cost reduction types, parameter reductions), legal move generation with placement constraint validation - actions.ts: all 9 CardEffect types, 5 standard projects, tile placement with side effects (resource tokens, water adjacency credits) - income.ts: city income, water adjacency, credit cap at 5 - scoring.ts: end-game detection (3 conditions), scoring with tiebreakers - generation.ts: phase transitions, turn management, start player rotation Special card handling: - Comet: conditional water placement at 5+ heat - Aquifer Pumping: bonus credits for isolated water - Methane from Titan: optional extra spend for bonus heat - Insects: parameter reduction by Science tags - All 6 CostReduction variants implemented Tests (147 passing in ~600ms): - Test helpers with state factory and board fixtures - Unit tests for every engine module - Integration test with 10 random complete game simulations
- Revert to default Firestore database (was pointing to named db) - Add sign-out button with user info bar above GameScreen - Auth flow verified: sign out → auth card → sign in → game
New components: - GameScreen: full state machine (setup → research → action → income → game over) - HexGrid + Hexagon: rewritten for shared board with placement highlighting - CardPanel: fan layout of 3 project cards with met/unmet indicators - StandardProjects: compact 5-icon row with tooltips - BottomPanel: cards + standard projects + pass button - DraftingView + CardSideView: research phase card orientation selection - IncomeVisualization: step-by-step animated income breakdown - GameOverScreen: score breakdown with tiebreakers - TopBar: generation, phase, player info - Setup flow: loading → map reveal → color assignment → city placement Supporting code: - usePlacementMode hook for tile/city placement interactions - cardDescriptions.ts: CardEffect → human-readable text - incomeBreakdown.ts: decompose income phase into animation steps - placeholderAI.ts: random legal move picker Deleted legacy components: - ActionPanel, CardDraft, CityPlacement, SetupPhase, MapSelection, GameStatus Verification: 0 TS errors, 147 tests pass, build succeeds
Bug fixes: - Fix AI stuck on "thinking" caused by HMR killing setTimeout (use useRef for timer guard instead of useState) - Fix placement mode race condition (delay request clear) - Replace processActionPhaseStep in UI with executeAction + manual turn rotation to prevent auto-transition through postIncomePhase (was causing "Loading cards..." on gen 2+) Composite effect fixes: - Add Ice Asteroid (4A): water + conditional greenery return - Add Asteroid (13B): heat + optional greenery return - Add Moss (11A): greenery + credits per adjacent water (calculated AFTER placement) Tests: 20 new composite effect tests covering all special cards (water triggers, Power Grid, Comet, Fusion Power, Research Outpost, Methane from Titan, Asteroid Mining, Moss, Aquifer Pumping, Ice Asteroid, Asteroid, Lava Flows, Bushes) Total: 167 tests passing
- Add complete game rulebook (docs/rulebook.md) - Remove CLAUDE.md from git tracking (local-only dev config) - Add CLAUDE.md to .gitignore
Heuristic evaluation (src/ai/heuristic.ts): - evaluate(state, playerId) scores game state using 12 weighted factors - Heat personal VP, greenery/water adjacency (exclusive vs shared), heat map penalties, credits, bonus hexes, resource tokens, legal moves - End-game proximity modifier shifts weights toward direct VP as game approaches end conditions - Exported WEIGHTS object for future tuning AI controller (src/ai/aiController.ts): - pickBestAction: evaluates all legal actions, picks highest-scored - pickBestDraftSide: maximizes AI-human score gap for card orientation - pickBestCityHex: evaluates all valid hexes for setup placement Integration: - GameScreen wired to use heuristic AI instead of random - DraftingView uses pickBestDraftSide for AI card choices - AILogDrawer: collapsible right-side panel showing AI decisions with scores, grouped by generation Tests: 12 new heuristic tests (179 total passing)
- Prevent negative credits: executeAction now throws if player can't afford a card or standard project (defense in depth) - Add console logging for AI actions (type, score, card details) - Fix integration test to provide sufficient credits for actions
CRITICAL fixes: - Fix AI draft inversion (was picking worst orientation every time) - Fix drawCardsForResearch deck < 3 reshuffle (caused late-game freeze) - Fix getLegalActions: populate chosenResourceToken, secondaryTargetHexId, optionalSpend for resource tokens, greenery returns, Methane from Titan - Fix double click handler (HexGrid div + Hexagon svg both fired onClick) - Add turn guards in all GameScreen action handlers (prevent rapid-click exploits) HIGH fixes: - Fix tiebreaker to use credits remaining (per rulebook, not score subcategories) - Add supply guards in placeWaterTile/placeGreeneryTile/placeHeatTileOnMap - AI pickBestAction now uses score differential (AI - human) not absolute score - Wrap all AI controller functions in try/catch with random fallback - Fix composite supply check: gain_heat no longer blocks composite cards MEDIUM fixes: - Remove generation_12 end condition (doesn't exist in rulebook) - Add duplicate-use guards in executeAction (card + standard project) - Fix grid bottom clipping (add quarter-hex to height) - Convert credit throws to graceful console.warn + return - Convert handlePass to functional updater (fix stale closure) - Remove tile animation replay on re-render - Add disabledReason prop to ProjectCardView for activation feedback Tests: 179 passing (updated scoring tests for new tiebreaker/gen rules)
Tutorial system (21-step guided first game): - TutorialProvider: React context with localStorage persistence - TutorialOverlay: positioned tooltip with backdrop highlight cutout - 21 contextual steps triggered at phase transitions and first interactions - Skip Tutorial option at step 1, auto-completes after first game - Non-blocking: player can interact while tutorial is visible Help panel (always-accessible rules reference): - AILogDrawer converted to tabbed: [AI Thinking] [Rules] - HelpPanel: 10 searchable collapsible sections from verified rulebook - CardReference: browse all 14 cards (both sides) with search - Phase-aware highlighting shows relevant section - Help (?) button in TopBar opens Rules tab directly Inline tooltips: - Hexagon: hex type, bonus tag, tile/city status - PlayerDashboard: credits, heat, tags, tokens with explanations - StandardProjects: full details with availability reasons - data-tutorial attributes for tutorial highlight targeting Verification: 0 TS errors, 179 tests pass, build succeeds
Elysium map: remove TODO:VERIFY comments, all hex data confirmed against physical cards (water: 1,2,6,9,11; bonus: 4,7,10,17,19) Hex visual improvements: - Brighter water hex fill (more distinct from land) - Thicker bonus hex borders (4px vs 2px) - Water hexes get subtle blue border - Bonus tag icon rendered INSIDE bonus hexes (visible without hover) - Resource token icons larger and centered (60% of hex vs 25%) - All icons render at better opacity for visibility
Tharsis fully verified against physical cards: - Water hexes: 3(science), 9(nature), 10(nature), 15(nature), 16(none) - Fix: Hex 10 resource token was 'production', corrected to 'nature' - Bonus hexes: 1(production), 8(nature), 12(nature), 17(production), 19(space) - Water clustering note: center-right L-shape (3,9,10,15,16) - All TODO:VERIFY comments removed — both maps now fully verified
Minimax search (src/ai/minimax.ts): - Alpha-beta pruning with configurable depth (default 2) - Move ordering optimization (heuristic-first for better pruning) - Node counter for performance tracking - Try/catch with heuristic fallback on error AI mode system: - AIMode type: 'random' | 'heuristic' | 'minimax' - pickActionByMode/pickDraftByMode/pickCityByMode dispatchers - Mode toggle in TopBar (segmented button: 🎲 Random | 🧠 Heuristic | ♟️ Minimax) - Mode persisted to localStorage, changeable mid-game Enhanced logging: - Thinking time (ms), nodes evaluated, search depth - Top 5 evaluated actions with scores (expandable) - Minimax vs heuristic score comparison - Color-coded mode badges (grey/blue/purple) Verification: 0 TS errors, 179 tests pass
Replace HexGrid + Hexagon with a single SVG MarsBoard component featuring: - Circular Mars planet background with radial gradient and texture - Translucent hexes with 7px thick colored borders on bonus hexes - Puffy 3D hex tokens for greenery, water, heat tiles with depth/bevel - White and black city tokens with building icons and player-color support - Bonus hex icons (production/nature/science/space) and water hex resource tokens - Green pulse animation for valid placement targets - NORTH/SOUTH labels and map name display - Flat top-down view replacing old 3D perspective transform Deprecate old HexGrid.tsx and Hexagon.tsx (kept for reference). Update MapRevealScreen to use MarsBoard.
Layout: - Board on left (60%), right panel with supply/scoreboard/actions/cards - Side-by-side player dashboards under "Scoreboard" label - Standard projects + Pass as unified action buttons row - Project cards in grid-cols-3 (no fan rotation) - Each section in bordered container with labels - Generation tracker: 12 circle dots filling up per round - AI mode selector moved to TopBar right side - Removed fixed bottom panel — everything in scrollable right column Icons: - Create GameIcons.tsx as single source of truth for all stamp icons - Puffy hex stamps for heat/greenery/water/city matching board tokens - Circular stamps for nature/production/science resource tokens - Credits and Pass stamps - Replace Lucide icons in Supply, ResourceTokenSupply, StandardProjects, and PlayerDashboard with centralized stamps QA fixes: - Remove dead imports (BottomPanel, Flag, cn) - Remove dead props (generation, phase from PlayerDashboard) - Add energy bonusTag handling in MarsBoard (style + BoltIcon) - Fix opacity dimming: all invalid hexes dim during placement
…ture Board: - Etched/carved hex styles with shadow, bevel, and highlights per type - Embossed medallion icons for bonus hexes and resource tokens - Increased hex spacing for clean gaps between hexes - Orbitron font for map labels (THARSIS, NORTH/SOUTH) - Mars-colored generation tracker (orange filled/active/dim dots) Icons: - Centralized GameIcons.tsx with embossed medallion stamps - TagBadge mini circle badges replace Lucide TagIcon everywhere - Consistent icon style across supply bar, scoreboard, cards, standard projects Layout: - Responsive grid (lg breakpoint, adaptive padding per screen size) - Right panel vertically centered with scrollable content - Separate AI Log and Rules drawers with shared collapsed strip - Drawers scroll internally, don't expand page height Landing page: - Hero section with Mars decoration, orbital rings, star dots - Inline auth form (sign in/up, Google, guest play) - "Coming soon" CTA for Solo mode and Play with a Friend Dashboard: - Mode selection screen between auth and game - Player vs AI (active), Solo/Friends (coming soon, grayed) - Player stats display, sign out - Access control: guests blocked from multiplayer Infrastructure: - Shared GameFooter with legal modals (Disclaimer, Privacy, Terms) - Mars SVG favicon - Orbitron + Inter font system via next/font + tailwind - Back button with leave confirmation dialog - Play Again + Dashboard buttons on game over screen - Equal-height project cards and draft cards
Gemini AI:
- Add 'gemini' to AIMode type (4th mode)
- Game state serializer (serialize.ts) for compact LLM context
- Genkit decision flow (gemini-decision.ts) with expert strategist prompt
- Async pickActionByMode with Gemini re-ranking top 5 minimax candidates
- Graceful fallback to minimax if Gemini API fails
- Gemini reasoning logged to AI log entries
Tutorial persistence:
- Add tutorialCompleted field to UserProfile (Firestore)
- TutorialProvider reads from Firestore via userProfile prop
- On tutorial complete: saves to both localStorage and Firestore
- Cross-device tutorial state via user document
Multiplayer prep:
- Add MatchType ('human-vs-ai' | 'human-vs-human' | 'solo') to types
- Add matchType field to GameState (defaults to 'human-vs-ai')
- Game document schema (gameStore.ts) for future persistence
- Access control helper (guests blocked from multiplayer)
- Anonymous auth (signInAsGuest) for guest play
Bumps the npm_and_yarn group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `15.3.3` | `15.5.15` | | [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.26.9` | `7.29.2` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.17.5` | `1.29.0` | | [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.14.2` | | [@trpc/server](https://github.com/trpc/trpc/tree/HEAD/packages/server) | `10.45.2` | `10.45.4` | | [axios](https://github.com/axios/axios) | `1.11.0` | `1.15.0` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.14` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `2.0.1` | `2.1.0` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.5.3` | `4.5.6` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.11` | `1.16.0` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` | | [jws](https://github.com/brianloveswords/node-jws) | `3.2.2` | `3.2.3` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` | | [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` | | [minimatch](https://github.com/isaacs/minimatch) | `9.0.5` | `9.0.9` | | [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.4.0` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.12` | `0.1.13` | | [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.4.0` | `7.5.5` | | [tmp](https://github.com/raszi/node-tmp) | `0.0.33` | `0.2.5` | | [yaml](https://github.com/eemeli/yaml) | `2.8.0` | `2.8.3` | Updates `next` from 15.3.3 to 15.5.15 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.3...v15.5.15) Updates `@babel/runtime` from 7.26.9 to 7.29.2 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.2/packages/babel-runtime) Updates `@modelcontextprotocol/sdk` from 1.17.5 to 1.29.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.17.5...v1.29.0) Updates `ajv` from 6.12.6 to 8.17.1 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.12.6...v8.17.1) Updates `qs` from 6.13.0 to 6.14.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.13.0...v6.14.2) Updates `@trpc/server` from 10.45.2 to 10.45.4 - [Release notes](https://github.com/trpc/trpc/releases) - [Commits](https://github.com/trpc/trpc/commits/v10.45.4/packages/server) Updates `axios` from 1.11.0 to 1.15.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.11.0...v1.15.0) Updates `brace-expansion` from 1.1.11 to 1.1.14 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.14) Updates `brace-expansion` from 2.0.1 to 2.1.0 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.14) Updates `fast-xml-parser` from 4.5.3 to 4.5.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.5.3...v4.5.6) Updates `follow-redirects` from 1.15.11 to 1.16.0 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.11...v1.16.0) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `handlebars` from 4.7.8 to 4.7.9 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `jws` from 3.2.2 to 3.2.3 - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v3.2.2...v3.2.3) Updates `lodash` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `minimatch` from 3.1.2 to 3.1.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.1.2...v3.1.5) Updates `minimatch` from 9.0.5 to 9.0.9 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.1.2...v3.1.5) Updates `node-forge` from 1.3.1 to 1.4.0 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.4.0) Updates `path-to-regexp` from 0.1.12 to 0.1.13 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/v.0.1.13/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.12...v.0.1.13) Updates `picomatch` from 2.3.1 to 2.3.2 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@2.3.1...2.3.2) Updates `protobufjs` from 7.4.0 to 7.5.5 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.4.0...protobufjs-v7.5.5) Updates `tmp` from 0.0.33 to 0.2.5 - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](raszi/node-tmp@v0.0.33...v0.2.5) Updates `yaml` from 2.8.0 to 2.8.3 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.0...v2.8.3) --- updated-dependencies: - dependency-name: next dependency-version: 15.5.15 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/runtime" dependency-version: 7.29.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.29.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-version: 8.17.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@trpc/server" dependency-version: 10.45.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.15.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.14 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 2.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 4.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 9.0.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-version: 1.4.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-version: 0.1.13 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.5.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmp dependency-version: 0.2.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yaml dependency-version: 2.8.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Owner
|
Closing: this PR predates the history rewrite on main and still carries the old tree. Fresh Dependabot PRs (#2+) replace it. |
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 21 updates in the / directory:
15.3.315.5.157.26.97.29.21.17.51.29.06.13.06.14.210.45.210.45.41.11.01.15.01.1.111.1.142.0.12.1.04.5.34.5.61.15.111.16.010.4.510.5.04.7.84.7.94.1.04.1.13.2.23.2.34.17.214.18.13.1.23.1.59.0.59.0.91.3.11.4.00.1.120.1.132.3.12.3.27.4.07.5.50.0.330.2.52.8.02.8.3Updates
nextfrom 15.3.3 to 15.5.15Release notes
Sourced from next's releases.
Commits
412eb90v15.5.15cb90de9[15.x] Avoid consuming cyclic models multiple times (#74)fffef9eFix CI for glibc linux buildsd7b012dv15.5.142b05251[backport] feat(next/image): add lru disk cache and `images.maximumDiskCacheS...f88cee9Backport: Fix(pages-router): restore Content-Length and ETag for /_next/data/...cfd5f53v15.5.1315f2891[backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...d23f41cv15.5.128e75765fix unlock in publish-nativeUpdates
@babel/runtimefrom 7.26.9 to 7.29.2Release notes
Sourced from
@babel/runtime's releases.... (truncated)
Commits
37d5595v7.29.2d7f4008v7.28.635055e3v7.28.4ef155f5v7.28.3cac0ff4v7.28.2f68ac51chore: Avoid CITGM errors (#17382)baa4cb8v7.27.67d06930v7.27.45b9468dReduceregeneratorsize more (#17287)cb78b5b[babel 8] Do not replace globalregeneratorRuntimereferences in regenerato...Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@babel/runtimesince your current version.Updates
@modelcontextprotocol/sdkfrom 1.17.5 to 1.29.0Release notes
Sourced from
@modelcontextprotocol/sdk's releases.... (truncated)
Commits
e12cbd7chore: bump version to 1.29.0 (#1820)3913fd4fix(stdio): always set windowsHide on Windows, not just in Electron (#1640)5608e78[v1.x backport] Allow servers / clients to advertise extensions in the capabi...7213816v1.x #1623 follow up -add missing types to package.json (#1773)364f38cv1.x npm audit fix (#1780)c95cc09Add typings exports (#1623)ddadaa6[v1.x] fix: add missing size field to ResourceSchema (#1575)2a15851[v1.x] fix: disallow null (infinite) requested TTL (#1339)13e30f1fix: treat v1.x as primary branch for npm latest tag (backport #1577) (#1749)a056569chore: bump version to 1.28.0 (#1746)Maintainer changes
This version was pushed to npm by pcarleton, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
ajvfrom 6.12.6 to 8.17.1Release notes
Sourced from ajv's releases.
... (truncated)
Commits
9050ba1bump version to 8.17.1 (#2472)f7831b4fixes #2217 - clarify custom keyword naming (#2457)a523784fix: changes for@typescript-eslint/array-typerule (#2467)595fe58feat: add test for encoded refs and bump fast-uri (#2449)a18641eUpdate modifying-data.md - fix broken strict-mode link (#2459)650c7f6Fix grammatical typo in managing-schemas.md (#2305)603f63bdocs: refactor to improve legibility (#2432)8bccdc4docs: clarify behaviour of addVocabulary (#2454)85dafb0fix: ignore new eslint error (#2455)80c014fRevert "Revert fast-uri change (#2444)" (#2448)Install script changes
This version modifies
prepublishscript that runs during installation. Review the package contents before updating.Updates
qsfrom 6.13.0 to 6.14.2Changelog
Sourced from qs's changelog.
... (truncated)
Commits
bdcf0c7v6.14.2294db90[readme] document thataddQueryPrefixdoes not add?to empty output5c308e5[readme] clarifyparseArraysandarrayLimitdocumentation6addf8c[Fix]parse: mark overflow objects for indexed notation exceedingarrayLimitcfc108f[Fix]arrayLimitmeans max count, not max index, incombine/merge/`pars...febb644[Fix]parse: throw onarrayLimitexceeded with indexed notation when `thr...f6a7abf[Fix]parse: enforcearrayLimitoncomma-parsed valuesfbc5206[Fix]parse: fix error message to reflect arrayLimit as max index; remove e...1b9a8b4[actions] fix rebase workflow permissions2a35775[meta] fix changelog typo (arrayLength→arrayLimit)Updates
@trpc/serverfrom 10.45.2 to 10.45.4Release notes
Sourced from
@trpc/server's releases.Commits
2ec29bfv10.45.41117bb3v10.45.3Updates
axiosfrom 1.11.0 to 1.15.0Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
772a4e5chore(release): prepare release 1.15.0 (#10671)4b07137chore(deps-dev): bump vite from 8.0.0 to 8.0.5 in /tests/smoke/esm (#10663)51e57b3chore(deps-dev): bump vite from 8.0.2 to 8.0.5 (#10664)fba1a77chore(deps-dev): bump vite from 8.0.2 to 8.0.5 in /tests/module/esm (#10665)0bf6e28chore(deps): bump denoland/setup-deno in the github-actions group (#10669)8107157chore(deps-dev): bump the development_dependencies group with 4 updates (#10670)e66530eci: require npm-publish environment for releases (#10666)49f23cbchore(sponsor): update sponsor block (#10668)3631854fix: unrestricted cloud metadata exfiltration via header injection chain (#10...fb3befbfix: no_proxy hostname normalization bypass leads to ssrf (#10661)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
brace-expansionfrom 1.1.11 to 1.1.14Release notes
Sourced from brace-expansion's releases.
Commits
10c05fc1.1.141afa1b2Add opt-in { max } mitigation to v1 legacy line (#103)2fbb6a2Revert "Backport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)" (#102)0d7652eBackport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)6c353ca1.1.137fd684fBackport fix for GHSA-f886-m6hf-6m8v (#95)44f33b41.1.12c460dbdpkg: publish on tag 1.xccb8ac6fmtc3c73c8Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65)Updates
brace-expansionfrom 2.0.1 to 2.1.0Release notes
Sourced from brace-expansion's releases.
Commits
10c05fc1.1.141afa1b2Add opt-in { max } mitigation to v1 legacy line (