Skip to content

Conversation

@jonathannorris
Copy link
Member

@jonathannorris jonathannorris commented Oct 30, 2025

Updates vulnerable dependencies to patched versions:

  • hono: 4.9.8 → 4.10.4
  • class-validator: 0.14.1 → 0.14.2
  • validator: Added resolution to force ^13.15.20 (patched version)

Copilot AI review requested due to automatic review settings October 30, 2025 19:07
@jonathannorris jonathannorris requested a review from a team as a code owner October 30, 2025 19:07
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates dependencies and removes unused variables/parameters across the codebase. The changes include:

  • Upgrading several npm packages (@modelcontextprotocol/sdk, class-validator, @cloudflare/workers-oauth-provider, agents, and hono)
  • Removing unused function parameters in the consent screen rendering logic
  • Adding a missing dependency (validator) to package.json overrides
  • Fixing an empty catch block issue in the test utilities
  • Bumping the version number in the manifest

Reviewed Changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

Show a summary per file
File Description
yarn.lock Updated lockfile reflecting dependency version upgrades including @modelcontextprotocol/sdk (1.18.1→1.20.2), class-validator (0.14.1→0.14.2), agents (0.1.6→0.2.19), and hono (4.10.2→4.10.4)
test-utils/init.js Added comment to empty catch block for clarity
package.json Updated dependency versions and added validator to resolutions
oclif.manifest.json Version bump from 6.1.1 to 6.1.2
mcp-worker/src/index.ts Removed unused OAuthHelpers import
mcp-worker/src/consentScreen.ts Removed unused clientUri and redirectUri parameters
mcp-worker/src/auth.ts Removed unused clientUri variable and parameter passing

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@jonathannorris jonathannorris enabled auto-merge (squash) October 30, 2025 19:09
@jonathannorris jonathannorris merged commit 3c807c4 into main Oct 30, 2025
8 checks passed
@jonathannorris jonathannorris deleted the fix-update-hono-validator branch October 30, 2025 19:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants