Skip to content

[Production] Release 2026-10-22 - #335

Merged
wasimxyz merged 4 commits into
productionfrom
staging
Oct 22, 2026
Merged

wasimxyz merged 4 commits into
productionfrom
staging

Conversation

@wasimxyz

Copy link
Copy Markdown
Member

No description provided.

dependabot Bot and others added 4 commits October 22, 2026 11:51
Bumps [@modelcontextprotocol/server](https://github.com/modelcontextprotocol/typescript-sdk) from 2.0.0 to 2.3.1.
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/@modelcontextprotocol/server@2.0.0...@modelcontextprotocol/server@2.3.1)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/server"
  dependency-version: 2.3.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Run npm audit fix in web/ and bump vitest to 4.1.12 by hand, since
npm audit fix reported that fix but did not apply it. The vitest minimum
in package.json goes up to ^4.1.12 to match the lockfile.

Fixes alerts for hono, follow-redirects, next, and vitest. The braces
alert stays open because no fixed version exists.

Co-authored-by: Cursor <cursoragent@cursor.com>
Bump next to 16.4.2, dompurify to 3.4.17, and follow-redirects to 1.16.1
in docs/site. Raise the next version floor in package.json to ^16.4.2 so a
fresh install cannot resolve an affected Next.js release.

npm audit fix also moved @vercel/microfrontends from 2.4.0 to 2.4.2. That
bump is reverted so this change only touches packages with open alerts.

The braces alerts stay open because no fixed braces release exists. braces
is only reached through glob expansion inside @vercel/microfrontends.

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Wasim Amiri <wasimxyz@users.noreply.github.com>
Upgrade pillow from 12.3.0 to 13.0.0, certifi from 2026.2.25 to
2026.10.19, and virtualenv from 21.14.5 to 21.14.12 in uv.lock.

virtualenv 21.14.12 requires packaging >= 26.3 and distlib >= 0.4.3, so
uv also moves packaging from 26.0 to 26.3 and distlib from 0.4.0 to
0.4.4. packaging is used at runtime by matplotlib and scikit-image, so
the Lambda image picks up the new packaging version as well.

No dependency edges changed. Only the five pinned versions above moved.

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Wasim Amiri <wasimxyz@users.noreply.github.com>
@wasimxyz wasimxyz self-assigned this Oct 22, 2026
@vercel

vercel Bot commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
data-hub (staging) Ready Ready Preview Oct 22, 2026 8:48pm UTC
1 Skipped Deployment
Project Deployment Actions Updated
data-hub-docs Ignored Ignored Oct 22, 2026 8:48pm UTC

Request Review

@wasimxyz
wasimxyz merged commit 6c5cb74 into production Oct 22, 2026
13 checks passed

This branch was successfully deployed

2 active deployments
staging – data-hub — fea03ac0 Deployed Oct 22, 2026 by vercel[bot]
staging — fea03ac0 Deployed Oct 22, 2026 by wasimxyz via deploy-lambda #150
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant