Skip to content

Bump the npm-minor-patch group across 1 directory with 17 updates - #262

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-087fbf9c0e
Open

Bump the npm-minor-patch group across 1 directory with 17 updates#262
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-087fbf9c0e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 17 updates in the / directory:

Package From To
@modelcontextprotocol/sdk 1.30.0 1.31.0
@remotion/bundler 4.0.508 4.0.530
@remotion/cli 4.0.508 4.0.530
@remotion/renderer 4.0.508 4.0.530
lucide-react 1.31.0 1.49.0
multer 2.2.0 2.4.0
@types/multer 2.2.0 2.3.0
react 19.2.8 19.3.0
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.0
@types/react-dom 19.2.4 19.3.0
react-router-dom 7.18.2 7.18.4
remotion 4.0.508 4.0.530
uuid 14.0.1 14.0.2
zod 4.4.3 4.5.4
@types/multer 2.2.0 2.3.0
@types/node 26.2.0 26.6.3
@types/react 19.2.18 19.3.0
@types/react-dom 19.2.4 19.3.0
tsx 4.23.12 4.23.15

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.31.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.31.0

Upgrade notes

  • Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.
  • Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.1...1.31.0

1.30.1

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.0...1.30.1

Commits
  • 4b0051f chore: bump version to 1.31.0 (#2890)
  • 51ad4f0 [v1.x] Bind stored OAuth credentials to the authorization server that issued ...
  • 289ac2c chore: bump version to 1.30.1 (#2848)
  • 12b4256 fix(auth): preserve resource URI without trailing slash (#1968) (#1972)
  • a9f6eb7 [v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON...
  • See full diff in compare view

Updates @remotion/bundler from 4.0.508 to 4.0.530

Release notes

Sourced from @​remotion/bundler's releases.

v4.0.530

What's Changed

... (truncated)

Commits
  • c3c210d v4.0.530
  • 24ec4cc Shorten Studio tab close icon
  • ac6b0a3 Merge pull request #11801 from remotion-dev/codex/fix-sequence-props-observer...
  • f91401d Update agent plugin captions prompt
  • aa32a23 @remotion/studio: Fix Visual Editing after splitting multiple items
  • 114250e Merge pull request #11792 from remotion-dev/codex/caption-editing-flow
  • a125bb4 Merge pull request #11796 from remotion-dev/codex/fix-template-npm-vulnerabil...
  • ecb2b40 Skills: Keep caption data inline
  • 11f8a3f Skills: Keep composition registrations editable
  • f9f8482 create-video: Fix npm audit warnings in generated projects
  • Additional commits viewable in compare view

Updates @remotion/cli from 4.0.508 to 4.0.530

Release notes

Sourced from @​remotion/cli's releases.

v4.0.530

What's Changed

... (truncated)

Commits
  • c3c210d v4.0.530
  • 24ec4cc Shorten Studio tab close icon
  • ac6b0a3 Merge pull request #11801 from remotion-dev/codex/fix-sequence-props-observer...
  • f91401d Update agent plugin captions prompt
  • aa32a23 @remotion/studio: Fix Visual Editing after splitting multiple items
  • 114250e Merge pull request #11792 from remotion-dev/codex/caption-editing-flow
  • a125bb4 Merge pull request #11796 from remotion-dev/codex/fix-template-npm-vulnerabil...
  • ecb2b40 Skills: Keep caption data inline
  • 11f8a3f Skills: Keep composition registrations editable
  • f9f8482 create-video: Fix npm audit warnings in generated projects
  • Additional commits viewable in compare view

Updates @remotion/renderer from 4.0.508 to 4.0.530

Release notes

Sourced from @​remotion/renderer's releases.

v4.0.530

What's Changed

... (truncated)

Commits
  • c3c210d v4.0.530
  • 24ec4cc Shorten Studio tab close icon
  • ac6b0a3 Merge pull request #11801 from remotion-dev/codex/fix-sequence-props-observer...
  • f91401d Update agent plugin captions prompt
  • aa32a23 @remotion/studio: Fix Visual Editing after splitting multiple items
  • 114250e Merge pull request #11792 from remotion-dev/codex/caption-editing-flow
  • a125bb4 Merge pull request #11796 from remotion-dev/codex/fix-template-npm-vulnerabil...
  • ecb2b40 Skills: Keep caption data inline
  • 11f8a3f Skills: Keep composition registrations editable
  • f9f8482 create-video: Fix npm audit warnings in generated projects
  • Additional commits viewable in compare view

Updates lucide-react from 1.31.0 to 1.49.0

Release notes

Sourced from lucide-react's releases.

Version 1.49.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.48.0...1.49.0

Version 1.48.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.47.0...1.48.0

Version 1.47.0

What's Changed

... (truncated)

Commits
  • e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
  • f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
  • 94e4cb9 chore(dependencies): Update dependencies (#4806)
  • 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
  • 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
  • See full diff in compare view

Updates multer from 2.2.0 to 2.4.0

Release notes

Sourced from multer's releases.

v2.4.0

Highlights

multer finally supports Google Cloud Functions and Firebase 🎉

These platforms read the request body before your code runs, so multer's classic req.pipe(busboy) received nothing: empty req.body, empty req.files, and nearly a decade of duplicated issues.

The new streamHandler option closes that gap: you decide how the body reaches the parser, so the pre-read rawBody just works (see image).

const multer = require('multer')
const upload = multer({
storage: multer.memoryStorage(),
streamHandler: (req, busboy) => {
// Cloud Functions / Firebase expose the pre-read body here
if (req.rawBody) busboy.end(req.rawBody)
else req.pipe(busboy)
}
})
app.post('/upload', upload.single('file'), (req, res) => {
res.json({ name: req.file.originalname, size: req.file.size })
})

This landed thanks to community PRs going back to 2017; their authors are credited as co-authors in the release.

Important: Security

What's Changed

@dependabot
Bump the npm-minor-patch group across 1 directory with 17 updates
331d5cd 
Bumps the npm-minor-patch group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.31.0` |
| [@remotion/bundler](https://github.com/remotion-dev/remotion) | `4.0.508` | `4.0.530` |
| [@remotion/cli](https://github.com/remotion-dev/remotion) | `4.0.508` | `4.0.530` |
| [@remotion/renderer](https://github.com/remotion-dev/remotion) | `4.0.508` | `4.0.530` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.49.0` |
| [multer](https://github.com/expressjs/multer) | `2.2.0` | `2.4.0` |
| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.2.0` | `2.3.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.2` | `7.18.4` |
| [remotion](https://github.com/remotion-dev/remotion) | `4.0.508` | `4.0.530` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.1` | `14.0.2` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |
| [@types/multer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/multer) | `2.2.0` | `2.3.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.3` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.15` |



Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.31.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.31.0)

Updates `@remotion/bundler` from 4.0.508 to 4.0.530
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.508...v4.0.530)

Updates `@remotion/cli` from 4.0.508 to 4.0.530
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.508...v4.0.530)

Updates `@remotion/renderer` from 4.0.508 to 4.0.530
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.508...v4.0.530)

Updates `lucide-react` from 1.31.0 to 1.49.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.49.0/packages/lucide-react)

Updates `multer` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](expressjs/multer@v2.2.0...v2.4.0)

Updates `@types/multer` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-router-dom` from 7.18.2 to 7.18.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.4/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.4/packages/react-router-dom)

Updates `remotion` from 4.0.508 to 4.0.530
- [Release notes](https://github.com/remotion-dev/remotion/releases)
- [Commits](remotion-dev/remotion@v4.0.508...v4.0.530)

Updates `uuid` from 14.0.1 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.1...v14.0.2)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

Updates `@types/multer` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/multer)

Updates `@types/node` from 26.2.0 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.4 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `tsx` from 4.23.12 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.15)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@remotion/bundler"
  dependency-version: 4.0.530
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@remotion/cli"
  dependency-version: 4.0.530
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@remotion/renderer"
  dependency-version: 4.0.530
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: lucide-react
  dependency-version: 1.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: multer
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/multer"
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: react-router-dom
  dependency-version: 7.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: remotion
  dependency-version: 4.0.530
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/multer"
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 3, 2026
@dependabot
dependabot Bot requested a review from nmbrthirteen as a code owner October 3, 2026 06:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 3, 2026
@coderabbitai

coderabbitai Bot commented Oct 3, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b6a25f7e-83d4-481e-bc44-5dbd14702973

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@socket-security

socket-security Bot commented Oct 3, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​react-router-dom@​7.18.2 ⏵ 7.18.41001006595 -1100
Updatednpm/​@​types/​multer@​2.2.0 ⏵ 2.3.0100 +110073 +188 +7100
Updatednpm/​@​types/​react-dom@​19.2.4 ⏵ 19.3.0100 +110075 +191100
Updatednpm/​@​remotion/​bundler@​4.0.508 ⏵ 4.0.5309810078 +196 +180
Updatednpm/​@​types/​react@​19.2.18 ⏵ 19.3.01001007991 -1100
Updatednpm/​@​remotion/​cli@​4.0.508 ⏵ 4.0.5309310080 +196 +180
Updatednpm/​@​remotion/​renderer@​4.0.508 ⏵ 4.0.5308910082 +196 +180
Updatednpm/​remotion@​4.0.508 ⏵ 4.0.53099100100 +196 +180
Updatednpm/​lucide-react@​1.31.0 ⏵ 1.49.010010098 +19680
Updatednpm/​@​types/​node@​26.2.0 ⏵ 26.6.3100 +110081 +196100
Updatednpm/​tsx@​4.23.12 ⏵ 4.23.151001008194100
Updatednpm/​react@​19.2.8 ⏵ 19.3.0100 +110084 +197100
Updatednpm/​uuid@​14.0.1 ⏵ 14.0.2100100100 +187100
Updatednpm/​react-dom@​19.2.8 ⏵ 19.3.010010092 +198100
Updatednpm/​multer@​2.2.0 ⏵ 2.4.0100 +1100 +31100 +194100
Updatednpm/​zod@​4.4.3 ⏵ 4.5.410010010095100
Updatednpm/​@​modelcontextprotocol/​sdk@​1.30.0 ⏵ 1.31.099 +110010097100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@nmbrthirteen nmbrthirteen Awaiting requested review from nmbrthirteen nmbrthirteen is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants