Skip to content

chore(deps): bump the production-minor group with 2 updates#39

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-78656ab3f2
Jun 8, 2026
Merged

chore(deps): bump the production-minor group with 2 updates#39
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-78656ab3f2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-minor group with 2 updates: @modelcontextprotocol/ext-apps and socks-proxy-agent.

Updates @modelcontextprotocol/ext-apps from 1.7.3 to 1.7.4

Release notes

Sourced from @​modelcontextprotocol/ext-apps's releases.

v1.7.4

What's Changed

No SDK API changes in this release.

Examples

  • lazy-auth-server: require PKCE and bind redirect_uri in token exchange (#681)
  • lazy-auth-server: support mounting under a base path of a host Express app (#683)

Security

npm audit now reports 0 vulnerabilities:

  • Removed unused vitest devDependency from basic-host
  • systeminformation bumped to 5.31.6+ in system-monitor-server (GHSA-hvx9-hwr7-wjj9)
  • Transitive dependency updates: devalue 5.8.1, fast-uri 3.1.2, hono 4.12.23, ip-address 10.2.0, express-rate-limit 8.5.2, postcss 8.5.15, qs 6.15.2, svelte 5.56.1 (#685)

Full Changelog: modelcontextprotocol/ext-apps@v1.7.3...v1.7.4

Commits
  • ca1d298 chore: bump ext-apps to 1.7.4 (#685)
  • 0ffe167 lazy-auth-server: support mounting under a base path (#683)
  • a990780 Require PKCE and bind redirect_uri in lazy-auth-server token exchange (#681)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by ochafik-ant, a new releaser for @​modelcontextprotocol/ext-apps since your current version.


Updates socks-proxy-agent from 10.0.0 to 10.1.0

Release notes

Sourced from socks-proxy-agent's releases.

socks-proxy-agent@10.1.0

Minor Changes

  • 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.
Changelog

Sourced from socks-proxy-agent's changelog.

10.1.0

Minor Changes

  • 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.
Commits
  • 065d1ff Version Packages (#416)
  • 3ebf4b2 feat: add proxy event emission on request for all proxy agents (#422)
  • 8761b47 fix: log error message on each E2E retry attempt
  • 434d237 fix: increase E2E test timeout to 120s for retry headroom
  • 671a314 fix: retry NordVPN E2E proxy tests with different servers on failure (#419)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-minor group with 2 updates: [@modelcontextprotocol/ext-apps](https://github.com/modelcontextprotocol/ext-apps) and [socks-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/socks-proxy-agent).


Updates `@modelcontextprotocol/ext-apps` from 1.7.3 to 1.7.4
- [Release notes](https://github.com/modelcontextprotocol/ext-apps/releases)
- [Changelog](https://github.com/modelcontextprotocol/ext-apps/blob/main/RELEASES.md)
- [Commits](modelcontextprotocol/ext-apps@v1.7.3...v1.7.4)

Updates `socks-proxy-agent` from 10.0.0 to 10.1.0
- [Release notes](https://github.com/TooTallNate/proxy-agents/releases)
- [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/socks-proxy-agent/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/proxy-agents/commits/socks-proxy-agent@10.1.0/packages/socks-proxy-agent)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/ext-apps"
  dependency-version: 1.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor
- dependency-name: socks-proxy-agent
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 8, 2026
@github-actions github-actions Bot merged commit 33eb25e into main Jun 8, 2026
2 checks passed
@github-actions github-actions Bot deleted the dependabot/npm_and_yarn/production-minor-78656ab3f2 branch June 8, 2026 17:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants