chore(deps): bump the npm-dependencies group across 1 directory with 66 updates

[dependabot]

Bumps the npm-dependencies group with 60 updates in the / directory:

Package	From	To
simple-git	3.28.0	3.35.1
@agentclientprotocol/sdk	0.12.0	0.18.0
@octokit/rest	22.0.0	22.0.1
@types/react	19.2.2	19.2.14
@types/react-dom	19.2.2	19.2.3
@vitest/eslint-plugin	1.4.3	1.6.14
esbuild	0.25.6	0.28.0
eslint-config-prettier	10.1.5	10.1.8
eslint-plugin-headers	1.3.3	1.3.4
google-artifactregistry-auth	3.4.0	3.5.0
lint-staged	16.1.6	16.4.0
memfs	4.42.0	4.57.1
msw	2.10.4	2.12.14
prettier	3.6.1	3.8.1
strip-ansi	7.1.2	7.2.0
tsx	4.20.3	4.21.0
typescript-eslint	8.56.1	8.58.0
node-pty	1.0.0	1.1.0
@a2a-js/sdk	0.3.8	0.3.13
fs-extra	11.3.1	11.3.4
tar	7.5.8	7.5.13
@types/tar	6.1.13	7.0.87
winston	3.17.0	3.19.0
@google/genai	1.41.0	1.48.0
@types/express	5.0.3	5.0.6
supertest	7.1.4	7.2.2
@types/supertest	6.0.3	7.2.0
@modelcontextprotocol/sdk	1.26.0	1.29.0
clipboardy	5.0.0	5.3.1
comment-json	4.2.5	4.6.2
diff	8.0.3	8.0.4
string-width	8.1.0	8.2.0
ws	8.18.3	8.20.0
@types/semver	7.7.0	7.7.1
@opentelemetry/api	1.9.0	1.9.1
@opentelemetry/api-logs	0.211.0	0.214.0
@opentelemetry/core	2.5.0	2.6.1
@opentelemetry/exporter-logs-otlp-grpc	0.211.0	0.214.0
@opentelemetry/exporter-logs-otlp-http	0.211.0	0.214.0
@opentelemetry/exporter-metrics-otlp-grpc	0.211.0	0.214.0
@opentelemetry/exporter-metrics-otlp-http	0.211.0	0.214.0
@opentelemetry/exporter-trace-otlp-grpc	0.211.0	0.214.0
@opentelemetry/exporter-trace-otlp-http	0.211.0	0.214.0
@opentelemetry/instrumentation-http	0.211.0	0.214.0
@opentelemetry/otlp-exporter-base	0.211.0	0.214.0
@opentelemetry/sdk-logs	0.211.0	0.214.0
@opentelemetry/sdk-node	0.211.0	0.214.0
@opentelemetry/semantic-conventions	1.39.0	1.40.0
chardet	2.1.0	2.1.1
fdir	6.4.6	6.5.0
google-auth-library	10.5.0	10.6.2
mime	4.0.7	4.1.0
picomatch	4.0.3	4.0.4
@types/picomatch	4.0.1	4.0.3
systeminformation	5.31.1	5.31.5
tree-sitter-bash	0.25.0	0.25.1
web-tree-sitter	0.25.10	0.26.8
zod-to-json-schema	3.25.1	3.25.2
cors	2.8.5	2.8.6
@types/vscode	1.99.0	1.110.0

Updates simple-git from 3.28.0 to 3.35.1

Release notes

Sourced from simple-git's releases.

simple-git@3.35.1

Patch Changes

• 0de400e: Update monorepo version handling during publish
• Updated dependencies [0de400e]
  • @​simple-git/argv-parser@​1.0.2

simple-git@3.33.0

Minor Changes

• a263635: Use pathspec wrappers for remote and local paths when running either git.clone or git.mirror to avoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.

Patch Changes

• e253a0d: Enhanced git -c checks in unsafe plugin.

  Thanks to @​JohannesLks for identifying the issue

simple-git@3.32.3

Patch Changes

• f704208: Enhanced protocol.allow checks in allowUnsafeExtProtocol handling.

  Thanks to @​CodeAnt-AI-Security for identifying the issue

simple-git@3.32.2

Patch Changes

• 8d02097: Enhanced clone unsafe switch detection.

simple-git@3.32.1

Patch Changes

• 23b070f: Fix regex for detecting unsafe clone options

  Thanks to @​stevenwdv for reporting this issue.

simple-git@3.32.0

Minor Changes

• 1effd8e: Enhances the unsafe plugin to block additional cases where the -u switch may be disguised along with other single character options.

  Thanks to @​JuHwiSang for identifying this as vulnerability.

Patch Changes

• d5fd4fe: Use task runner for logging use of deprecated (already no-op) functions.

... (truncated)

Changelog

Sourced from simple-git's changelog.

3.35.1

Patch Changes

• 0de400e: Update monorepo version handling during publish
• Updated dependencies [0de400e]
  • @​simple-git/argv-parser@​1.0.2

3.35.0

Minor Changes

• 3d8708b: Updating publish config

Patch Changes

• Updated dependencies [3d8708b]
  • @​simple-git/args-pathspec@​1.0.1
  • @​simple-git/argv-parser@​1.0.1

3.34.0

Minor Changes

• 2b68331: Revised dependency tree to add helper modules as dependencies in main simple-git

Patch Changes

• 2e1f51c: Enhances scanning of arguments before passing on to the spawned child_process.

  Caters for -c flags prefixing the git task (used when setting global inline config) and suffixing with either -c, --config or --config-env. Detects git config operations that write to the configuration.

• Updated dependencies [2e1f51c]

  • @​simple-git/args-pathspec@​1.0.0
  • @​simple-git/argv-parser@​1.0.0

3.33.0

Minor Changes

• a263635: Use pathspec wrappers for remote and local paths when running either git.clone or git.mirror to avoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.

Patch Changes

• e253a0d: Enhanced git -c checks in unsafe plugin.

  Thanks to @​JohannesLks for identifying the issue

3.32.3

... (truncated)

Commits

• 6d7cb51 Version Packages
• 0de400e Switch to semver from workspace revisions
• 2264722 Version Packages
• 8fbcecd Version Packages
• da3aedf Update dependency identifiers - ^1 (#1144)
• 2b68331 Update dependency identifiers (#1143)
• 2e1f51c Git argument parsing (#1141)
• 8bbbabc Version Packages
• a263635 Clone API use pathspec (#1132)
• e253a0d Fix/block unsafe 2603 (#1135)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for simple-git since your current version.

Updates @agentclientprotocol/sdk from 0.12.0 to 0.18.0

Release notes

Sourced from @​agentclientprotocol/sdk's releases.

v0.18.0

0.18.0 (2026-04-01)

Features

• unstable: Add initial additionalDirectories and NES support (#104) (43cde3b)

v0.17.1

0.17.1 (2026-03-27)

Bug Fixes

• Make sure we use zod/v4 path for imports (#99) (e632d3b)

v0.17.0

0.17.0 (2026-03-25)

Features

• schema: Update schema to 0.11.3 (#88) (0fe246e)

v0.16.1

0.16.1 (2026-03-11)

Bug Fixes

• unstable: Fixes for session/close capabilities (#85) (e8721b7)

v0.16.0

0.16.0 (2026-03-10)

Features

• add unstable session/close (#81) (2c9bc77)
• Stabilize unstable_listSessions to listSessions (#84) (9e89bbc)

v0.15.0

0.15.0 (2026-03-05)

Features

• Update to 0.11.0 of the schema (#79) (2763d63)

... (truncated)

Changelog

Sourced from @​agentclientprotocol/sdk's changelog.

0.18.0 (2026-04-01)

Features

• unstable: Add initial additionalDirectories and NES support (#104) (43cde3b)

0.17.1 (2026-03-27)

Bug Fixes

• Make sure we use zod/v4 path for imports (#99) (e632d3b)

0.17.0 (2026-03-25)

Features

• schema: Update schema to 0.11.3 (#88) (0fe246e)

0.16.1 (2026-03-11)

Bug Fixes

• unstable: Fixes for session/close capabilities (#85) (e8721b7)

0.16.0 (2026-03-10)

Features

• add unstable session/close (#81) (2c9bc77)
• Stabilize unstable_listSessions to listSessions (#84) (9e89bbc)

0.15.0 (2026-03-05)

Features

• Update to 0.11.0 of the schema (#79) (2763d63)

Bug Fixes

• use npx.cmd on Windows in client example (#68) (fdc7815)

0.14.1 (2026-02-05)

... (truncated)

Commits

• a51950f chore(main): release 0.18.0 (#105)
• 43cde3b feat(unstable): Add initial additionalDirectories and NES support (#104)
• 430575d chore(deps): bump the minor group with 9 updates (#101)
• 521078a chore(main): release 0.17.1 (#100)
• e632d3b fix: Make sure we use zod/v4 path for imports (#99)
• 4eebf35 chore(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 (#95)
• e63f49f chore(deps): bump picomatch in the npm_and_yarn group across 1 directory (#93)
• ed274ca chore(deps): bump the minor group with 48 updates (#96)
• cd701b2 chore: Use dependabot for NPM packages too (#94)
• 7fa012e chore(main): release 0.17.0 (#89)
• Additional commits viewable in compare view

Updates @octokit/rest from 22.0.0 to 22.0.1

Release notes

Sourced from @​octokit/rest's releases.

v22.0.1

22.0.1 (2025-10-31)

Bug Fixes

• deps: update octokit monorepo (major) (#538) (ded2f17)

Commits

• daa3ec9 ci(action): update actions/setup-node action to v6 (#534)
• 1dec0c7 ci(action): update peter-evans/create-or-update-comment action to v5 (#531)
• ded2f17 fix(deps): update octokit monorepo (major) (#538)
• 0e0eaea chore(deps): update dependency @​types/node to v24 (#537)
• c04acc8 chore(deps): update vitest monorepo to v4 (major) (#536)
• e6dd306 chore(deps): update dependency undici to v7 (#474)
• 5f380d0 build(deps-dev): Bump form-data from 4.0.2 to 4.0.4 in /docs (#520)
• dc6827d build(deps-dev): Bump tar-fs from 2.1.2 to 2.1.3 in /docs (#516)
• See full diff in compare view

Updates @types/react from 19.2.2 to 19.2.14

Commits

• See full diff in compare view

Updates @types/react-dom from 19.2.2 to 19.2.3

Commits

• See full diff in compare view

Updates @vitest/eslint-plugin from 1.4.3 to 1.6.14

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.6.14

What's Changed

• chore: bump @​typescript-eslint packages to ^8.58.0 by @​null0rUndefined in vitest-dev/eslint-plugin-vitest#886

New Contributors

• @​null0rUndefined made their first contribution in vitest-dev/eslint-plugin-vitest#886

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.6.13...v1.6.14

v1.6.13

   🚀 Features

• unbound-method: Re-enable rule  -  by @​FloEdelmann in vitest-dev/eslint-plugin-vitest#883 (944f2)

    View changes on GitHub

v1.6.12

    View changes on GitHub

What's Changed

• fix: detect class/function type more reliably by @​FloEdelmann in vitest-dev/eslint-plugin-vitest#882
• fix(no-alias-methods): reverse toThrow/toThrowError alias direction by @​FloEdelmann in vitest-dev/eslint-plugin-vitest#881

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.6.11...v1.6.12

v1.6.11

   🐞 Bug Fixes

• no-focused-tests: Not all chainable APIs are reported  -  by @​StyleShit in vitest-dev/eslint-plugin-vitest#878 (703b0)

    View changes on GitHub

v1.6.10

   🚀 Features

• prefer-import-in-mock: Support doMock  -  by @​andreww2012 in vitest-dev/eslint-plugin-vitest#875 (ef227)

    View changes on GitHub

v1.6.9

   🐞 Bug Fixes

• Correct dist entrypoints and type paths  -  by @​yyxi in vitest-dev/eslint-plugin-vitest#872 (1cf79)

    View changes on GitHub

v1.6.8

No significant changes

... (truncated)

Commits

• 5a408df chore: release v1.6.14
• 09ab936 chore: bump @​typescript-eslint packages to ^8.58.0 (#886)
• a011852 chore: release v1.6.13
• 944f2a3 feat(unbound-method): re-enable rule (#883)
• a5cfe4f chore: release v1.6.12
• 6629da5 fix(no-alias-methods): reverse toThrow/toThrowError alias direction (#881)
• c3e4754 fix: detect class/function type more reliably (#882)
• ba77927 chore: release v1.6.11
• 703b006 fix(no-focused-tests): not all chainable APIs are reported (#878)
• 99cd227 chore: release v1.6.10
• Additional commits viewable in compare view

Updates esbuild from 0.25.6 to 0.28.0

Release notes

Sourced from esbuild's releases.

v0.28.0

• Add support for with { type: 'text' } imports (#4435)

  The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

  import string from './example.txt' with { type: 'text' }
  console.log(string)

• Add integrity checks to fallback download path (#4343)

  Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

  This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

• Update the Go compiler from 1.25.7 to 1.26.1

  This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

  • It now uses the new garbage collector that comes with Go 1.26.
  • The Go compiler is now more aggressive with allocating memory on the stack.
  • The executable format that the Go linker uses has undergone several changes.
  • The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

  You can read the Go 1.26 release notes for more information.

v0.27.7

• Fix lowering of define semantics for TypeScript parameter properties (#4421)

  The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

  // Original code
  class Foo {
    constructor(public x = 1) {}
    y = 2
  }
  // Old output (with --loader=ts --target=es2021)
  class Foo {
  constructor(x = 1) {
  this.x = x;
  __publicField(this, "y", 2);
  }
  x;
  }
  // New output (with --loader=ts --target=es2021)
  class Foo {

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2025

This changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).

0.27.2

• Allow import path specifiers starting with #/ (#4361)

  Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

  This change was contributed by @​hybrist.

• Automatically add the -webkit-mask prefix (#4357, #4358)

  This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

  /* Original code */
  main {
    mask: url(x.png) center/5rem no-repeat
  }
  /* Old output (with --target=chrome110) */
  main {
  mask: url(x.png) center/5rem no-repeat;
  }
  /* New output (with --target=chrome110) */
  main {
  -webkit-mask: url(x.png) center/5rem no-repeat;
  mask: url(x.png) center/5rem no-repeat;
  }

  This change was contributed by @​BPJEnnova.

• Additional minification of switch statements (#4176, #4359)

  This release contains additional minification patterns for reducing switch statements. Here is an example:

  // Original code
  switch (x) {
    case 0:
      foo()
      break
    case 1:
    default:
      bar()
  }

... (truncated)

Commits

• 6a794df publish 0.28.0 to npm
• 64ee0ea fix #4435: support with { type: text } imports
• ef65aee fix sort order in snapshots_packagejson.txt
• 1a26a8e try to fix test-old-ts, also shuffle CI tasks
• 556ce6c use '' instead of null to omit build hashes
• 8e675a8 ci: allow missing binary hashes for tests
• 7067763 Reapply "update go 1.25.7 => 1.26.1"
• 39473a9 fix #4343: integrity check for binary download
• 2025c9f publish 0.27.7 to npm
• c6b586e fix typo in Makefile for @esbuild/win32-x64
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.

Updates eslint-config-prettier from 10.1.5 to 10.1.8

Release notes

Sourced from eslint-config-prettier's releases.

v10.1.8

republish latest version

Full Changelog: prettier/eslint-config-prettier@v10.1.5...v10.1.8

Changelog

Sourced from eslint-config-prettier's changelog.

eslint-config-prettier

Commits

• 9b0b0a4 fix: release a new latest version
• See full diff in compare view

Updates eslint-plugin-headers from 1.3.3 to 1.3.4

Release notes

Sourced from eslint-plugin-headers's releases.

v1.3.4

• Support ESLint 10.

Full Changelog: robmisasi/eslint-plugin-headers@v1.3.3...v1.3.4

Commits

• c8f8537 1.3.4
• 7a1f7a0 Tweak AST traversal to support ESLint 10. Update dev dependencies.
• d31dee9 Update dev dependencies.
• See full diff in compare view

Updates google-artifactregistry-auth from 3.4.0 to 3.5.0

Release notes

Sourced from google-artifactregistry-auth's releases.

v3.5.0

Add yarn support in GoogleCloudPlatform/artifact-registry-npm-tools#78

Commits

• adf7988 Bump to version v3.5.0 for release
• 36fc4c0 Revert "Bump to version v3.5.0 for release"
• 31f9653 Bump to version v3.5.0 for release
• 9f8b4ad Adding support of .yarnrc.yml to npm tools (#78)
• See full diff in compare view

Updates lint-staged from 16.1.6 to 16.4.0

Release notes

Sourced from lint-staged's releases.

v16.4.0

Minor Changes

• #1739 687fc90 Thanks @​hyperz111! - Replace micromatch with picomatch to reduce dependencies.

v16.3.4

Patch Changes

• #1742 9d6e827 Thanks @​iiroj! - Update dependencies, including tinyexec@1.0.4 to make sure local node_modules/.bin are preferred to global locations (released in tinyexec@1.0.3).

v16.3.3

Patch Changes

• #1740 0109e8d Thanks @​iiroj! - Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash.

v16.3.2

Patch Changes

• #1735 2adaf6c Thanks @​iiroj! - Hide the extra cmd window on Windows by spawning tasks without the detached option.

v16.3.1

Patch Changes

• #1729 cd5d762 Thanks @​iiroj! - Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.

v16.3.0

Minor Changes

• #1698 feda37a Thanks @​iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.

• #1699 1346d16 Thanks @​iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes

• #1726 87467aa Thanks @​iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.

v16.2.7

Patch Changes

• #1711 ef74c8d Thanks @​iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.

v16.2.6

Patch Changes

• #1693 33d4502 Thanks @​Adrian-Baran-GY! - Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

v16.2.5

Patch Changes

• #1687 9e02d9d Thanks @​iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

... (truncated)

Changelog

Sourced from lint-staged's changelog.

16.4.0

Minor Changes

• #1739 687fc90 Thanks @​hyperz111! - Replace micromatch with picomatch to reduce dependencies.

16.3.4

Patch Changes

• #1742 9d6e827 Thanks @​iiroj! - Update dependencies, including tinyexec@1.0.4 to make sure local node_modules/.bin are preferred to global locations (released in tinyexec@1.0.3).

16.3.3

Patch Changes

• #1740 0109e8d Thanks @​iiroj! - Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash.

16.3.2

Patch Changes

• #1735 2adaf6c Thanks @​iiroj! - Hide the extra cmd window on Windows by spawning tasks without the detached option.

16.3.1

Patch Changes

• #1729 cd5d762 Thanks @​iiroj! - Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.

16.3.0

Minor Changes

• #1698 feda37a Thanks @​iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.

• #1699 1346d16 Thanks @​iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes

• #1726 87467aa Thanks @​iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.

16.2.7

Patch Changes

• #1711 ef74c8d Thanks @​iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.

16.2.6

... (truncated)

Commits

• 445f9dd chore(changeset): release
• d91be60 docs: update readme to use picomatch
• b392a9f refactor: extract matchFiles and add unit tests
• 687fc90 refactor: replace micromatch with picomatch
• 26dadf9 chore(changeset): release
• 9d6e827 build(deps): update dependencies
• 8aea986 chore(changeset): release
• 0109e8d fix: strip Git CRLF warning from output
• dfd6a7a chore(changeset): release
• 2adaf6c fix(Windows): do not spawn tasks as detached since it opens a cmd window on ...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lint-staged since your current version.

Updates memfs from 4.42.0 to 4.57.1

Release notes

Sourced from memfs's releases.

Release v4.57.1

What's Changed

• fix: EBADF when calling fileHandle.close() after streaming via pipeline by @​Copilot in streamich/memfs#1249

Full Changelog: streamich/memfs@v4.57.0...v4.57.1

Release v4.57.0

What's Changed

• feat: allow injecting custom process implementation for better testability by @​Copilot in streamich/memfs#1248

Full Changelog: streamich/memfs@v4.56.11...v4.57.0

Release v4.56.11

What's Changed

• fix: normalize leading ./ in relative glob patterns by @​Copilot in streamich/memfs#1243

Full Changelog: streamich/memfs@v4.56.10...v4.56.11

Release v4.56.10

Full Changelog: streamich/memfs@v4.56.9...v4.56.10

Release v4.56.9

Full Changelog: streamich/memfs@v4.56.8...v4.56.9

Release v4.56.8

Full Changelog: streamich/memfs@v4.56.7...v4.56.8

v4.56.7

Full Changelog: streamich/memfs@v4.56.2...v4.56.7

v4.56.2

Full Changelog: streamich/memfs@v4.54.0...v4.56.2

v4.54.0

4.54.0 (2026-01-18)

Features

• 🎸 add locking for FSA writable handles (35d3519)

v4.53.0

4.53.0 (2026-01-17)

Features

... (truncated)

Changelog

Sourced from memfs's changelog.

4.54.0 (2026-01-18)

Features

• 🎸 add locking for FSA writable handles (35d3519)

4.53.0 (2026-01-17)

Features

• implement Result type and improve error handling for exists methods (f95531f), closes #1218

4.52.0 (2026-01-15)

Bug Fixes

• 🐛 add deprecated Dirent.path with deprecation notice (ebf8ea9)

Features

• 🎸 add disposable methods to Dir (d237aa9)
• 🎸 add Dirent.parentPath (f72f9fe)

4.51.1 (2025-11-30)

Bug Fixes

• add glob functions to API lists (445f337)

4.51.0 (2025-11-12)

Features

• sort files and folder when using toTreeSync() (673cb7a), closes #1214

4.50.0 (2025-10-28)

Features

• 🎸 improve Node buffer allocation strategy (d1edb3f)
• optimize Node buffer management to prevent O(n^2) overhead (

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
gemini-cli	Error		Apr 6, 2026 0:47am
v0-gemini-cli	Error		Apr 6, 2026 0:47am

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​tar@​6.1.13 ⏵ 7.0.87			-34	+4
	@​opentelemetry/​exporter-logs-otlp-grpc@​0.211.0 ⏵ 0.214.0	-1		+5	+1
	@​types/​express@​5.0.3 ⏵ 5.0.6
	@​opentelemetry/​sdk-trace-node@​2.5.0 ⏵ 2.6.1				+1
	@​typescript-eslint/​parser@​8.56.1 ⏵ 8.58.0	+1		+1
	@​opentelemetry/​exporter-trace-otlp-http@​0.211.0 ⏵ 0.214.0	-1			+1
	@​opentelemetry/​exporter-logs-otlp-http@​0.211.0 ⏵ 0.214.0	-1			+1
	@​types/​supertest@​6.0.3 ⏵ 7.2.0	+1		+1	+5
	esbuild@​0.25.6 ⏵ 0.28.0			+1
	@​types/​picomatch@​4.0.1 ⏵ 4.0.3				+6
	@​types/​semver@​7.7.0 ⏵ 7.7.1	+1		+1
	@​google/​genai@​1.42.0 ⏵ 1.48.0	+1
	@​types/​react-dom@​19.2.2 ⏵ 19.2.3
	@​opentelemetry/​instrumentation-http@​0.211.0 ⏵ 0.214.0				+1
	@​opentelemetry/​api-logs@​0.211.0 ⏵ 0.214.0
	@​opentelemetry/​sdk-trace-base@​2.5.0 ⏵ 2.6.1				+1
	@​types/​react@​19.2.2 ⏵ 19.2.14	+1		+1
	@​types/​vscode@​1.110.0
	@​typescript-eslint/​eslint-plugin@​8.56.1 ⏵ 8.58.0	+1		+1
	chardet@​2.1.0 ⏵ 2.1.1	+1
	@​octokit/​rest@​22.0.0 ⏵ 22.0.1
	google-artifactregistry-auth@​3.4.0 ⏵ 3.5.0			+1
	@​opentelemetry/​otlp-exporter-base@​0.211.0 ⏵ 0.214.0				+1
	execa@​9.6.0 ⏵ 9.6.1
	cors@​2.8.5 ⏵ 2.8.6
	fs-extra@​11.3.1 ⏵ 11.3.4	+1
	@​opentelemetry/​resources@​2.5.0 ⏵ 2.6.1
	eslint-config-prettier@​10.1.5 ⏵ 10.1.8
	comment-json@​4.2.5 ⏵ 4.6.2	+1		+1
	eslint-plugin-headers@​1.3.3 ⏵ 1.3.4	+1		+1	+6
	@​opentelemetry/​api@​1.9.0 ⏵ 1.9.1	+1
	@​agentclientprotocol/​sdk@​0.12.0 ⏵ 0.18.0			+1	+2
See 17 more rows in the dashboard

View full report