Skip to content

Bump the "all" group with 7 updates across multiple ecosystems#1210

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/all-47c4de55d8
Open

Bump the "all" group with 7 updates across multiple ecosystems#1210
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/all-47c4de55d8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Bumps the all group with 1 update: ghcr.io/devcontainers/features/node.

Updates ghcr.io/devcontainers/features/node from 1.7.1 to 2.0.0

Updates the requirements on actions/checkout, actions/setup-node, actions/setup-go, actions/github-script, extractions/setup-just, github/gh-aw-actions, actions/upload-artifact and actions/cache to permit the latest version.
Updates actions/checkout from 4 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Commits

Updates actions/setup-node from 4 to 6

Release notes

Sourced from actions/setup-node's releases.

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

Full Changelog: actions/setup-node@v5...v6.0.0

v5.0.0

What's Changed

Breaking Changes

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

New Contributors

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

... (truncated)

Commits

Updates actions/setup-go from 5 to 6

Release notes

Sourced from actions/setup-go's releases.

v6.0.0

What's Changed

Breaking Changes

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

New Contributors

Full Changelog: actions/setup-go@v5...v6.0.0

v5.6.0

What's Changed

Full Changelog: actions/setup-go@v5...v5.6.0

v5.5.0

What's Changed

Bug fixes:

Dependency updates:

New Contributors

Full Changelog: actions/setup-go@v5...v5.5.0

... (truncated)

Commits

Updates actions/github-script from 8.0.0 to 9.0.0

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

  • getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
  • Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

  • require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
  • getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
  • If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

New Contributors

Full Changelog: actions/github-script@v8.0.0...v9.0.0

Commits
  • 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
  • ca10bbd fix: use @​octokit/core/types import for v7 compatibility
  • 86e48e2 merge: incorporate main branch changes
  • c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
  • afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
  • ff8117e ci: fix user-agent test to handle orchestration ID
  • 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
  • 3953caf docs: update README examples from @​v8 to @​v9, add getOctokit docs and v9 brea...
  • c17d55b ci: add getOctokit integration test job
  • a047196 test: add getOctokit integration tests via callAsyncFunction
  • Additional commits viewable in compare view

Updates extractions/setup-just from 3 to 4

Commits

Updates github/gh-aw-actions to 63aa903fe409698e15e5718ad89366a72bfe6a89

Changelog

Sourced from github/gh-aw-actions's changelog.

Changelog

See https://github.com/github/gh-aw/blob/main/CHANGELOG.md for the changelog of the main gh-aw repository, which includes changes to this repository as well.

Commits

Updates actions/upload-artifact from 7.0.0 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

Commits

Updates actions/cache from 4 to 5

Release notes

Sourced from actions/cache's releases.

v5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

What's Changed

Full Changelog: actions/cache@v4.3.0...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

What's Changed

  • Update to use @​actions/cache 4.0.3 package & prepare for new release by @​salmanmkc in actions/cache#1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

Full Changelog: actions/cache@v4.2.2...v4.2.3

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

  • Bump @actions/cache to v5.0.3 #1692

5.0.1

  • Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits
  • 27d5ce7 Merge pull request #1747 from actions/yacaovsnc/update-dependency
  • f280785 licensed changes
  • 619aeb1 npm run build generated dist files
  • bcf16c2 Update ts-http-runtime to 0.3.5
  • 6682284 Merge pull request #1738 from actions/prepare-v5.0.4
  • e340396 Update RELEASES
  • 8a67110 Add licenses
  • 1865903 Update dependencies & patch security vulnerabilities
  • 5656298 Merge pull request #1722 from RyPeck/patch-1
  • 4e380d1 Fix cache key in examples.md for bun.lock
  • Additional commits viewable in compare view

Bumps the all group in /test/harness with 7 updates:

Package From To
@github/copilot 1.0.41-1 1.0.41
@modelcontextprotocol/sdk 1.26.0 1.29.0
@types/node 25.3.3 25.6.0
openai 6.17.0 6.36.0
typescript 5.9.3 6.0.3
vitest 4.0.18 4.1.5
yaml 2.8.2 2.8.4

Updates @github/copilot from 1.0.41-1 to 1.0.41

Release notes

Sourced from @​github/copilot's releases.

1.0.41

2026-05-05

  • CLI starts faster by rendering the UI immediately while authentication resolves in the background
  • Shell completions (bash, zsh, fish) are automatically installed on first run and updated after copilot update
  • Tab-completing slash commands that accept arguments now adds a trailing space automatically
  • Package extraction no longer crashes on Windows when antivirus or filesystem locks cause transient EPERM errors
  • Remote session connection errors show your logged-in account and tailored remediation steps
  • Markdown formatting renders in ask user prompt questions
  • Add experimental MCP Tasks support: MCP tools with taskSupport: "required" run as non-blocking background agents trackable via list_agents and read_agent (available when experimental mode is enabled, e.g. via /experimental on or the --experimental flag)
  • Extensions now load in prompt mode (-p). User extensions load by default; project extensions alnd management tools require GITHUB_COPILOT_PROMPT_MODE_EXTENSIONS=true.
  • Assistant responses no longer contain spurious system notification XML tags
  • Large output guidance correctly references the configured grep tool name
  • Adding a plugin marketplace using a git SSH URL (e.g. git@github.com:owner/repo) now works correctly
  • Slash command picker searches command descriptions and underlines matched characters
  • Memory tool confirmation prompt now shows the scope (repository or user) when requesting permission to store a memory
  • SQL todo timeline entries display more accurately for INSERT OR IGNORE/REPLACE and blocked status updates
  • Streaming text and shimmer animations stay smooth on slow or busy hosts
  • Add --attachment flag in non-interactive (-p/--prompt) mode to attach files (images or native documents) to the initial prompt
  • @-mention completion works for ./ paths, no longer adds trailing space on directories, and shows project files before workspace roots
  • Improve stability on Windows by working around a V8 crash in Node 24.x
  • Session files containing Unicode line separator characters load correctly
  • Reasoning effort picker hint text displays "Esc to cancel" with correct spacing
  • Improve reliability of file edits by better recovering from fuzzy or misaligned edit blocks
Changelog

Sourced from @​github/copilot's changelog.

1.0.41 - 2026-05-05

  • CLI starts faster by rendering the UI immediately while authentication resolves in the background
  • Shell completions (bash, zsh, fish) are automatically installed on first run and updated after copilot update
  • Tab-completing slash commands that accept arguments now adds a trailing space automatically
  • Package extraction no longer crashes on Windows when antivirus or filesystem locks cause transient EPERM errors
  • Remote session connection errors show your logged-in account and tailored remediation steps
  • Markdown formatting renders in ask user prompt questions
  • Add experimental MCP Tasks support: MCP tools with taskSupport: "required" run as non-blocking background agents trackable via list_agents and read_agent (available when experimental mode is enabled, e.g. via /experimental on or the --experimental flag)
  • Extensions now load in prompt mode (-p). User extensions load by default; project extensions alnd management tools require GITHUB_COPILOT_PROMPT_MODE_EXTENSIONS=true.
  • Assistant responses no longer contain spurious system notification XML tags
  • Large output guidance correctly references the configured grep tool name
  • Adding a plugin marketplace using a git SSH URL (e.g. git@github.com:owner/repo) now works correctly
  • Slash command picker searches command descriptions and underlines matched characters
  • Memory tool confirmation prompt now shows the scope (repository or user) when requesting permission to store a memory
  • SQL todo timeline entries display more accurately for INSERT OR IGNORE/REPLACE and blocked status updates
  • Streaming text and shimmer animations stay smooth on slow or busy hosts
  • Add --attachment flag in non-interactive (-p/--prompt) mode to attach files (images or native documents) to the initial prompt
  • @-mention completion works for ./ paths, no longer adds trailing space on directories, and shows project files before workspace roots
  • Improve stability on Windows by working around a V8 crash in Node 24.x
  • Session files containing Unicode line separator characters load correctly
  • Reasoning effort picker hint text displays "Esc to cancel" with correct spacing
  • Improve reliability of file edits by better recovering from fuzzy or misaligned edit blocks

1.0.40 - 2026-05-01

  • PR branch decoration displays correctly in the footer regardless of model name length
  • /clear and /new reset the active custom agent selection
  • Assistant responses stream with smoother text output
  • copilot plugin list shows the correct version after running copilot plugin update
  • Add support for client_credentials OAuth grant type for MCP servers, enabling fully headless authentication without a browser
  • Subagents correctly evaluate tool search support for their own model instead of inheriting the parent session's settings
  • Switching sessions with /new or /resume no longer carries over pending messages to the new session
  • CLI no longer hangs at 100% CPU when sending a large file attachment
  • Resume session picker no longer shows duplicate entries for the same Mission Control-backed session
  • Session resume selector displays summaries on a single line, truncated to fit the column width
  • Print "Exiting…" to stderr immediately on Ctrl+C during prompt mode so shutdown progress is visible
  • /research uses an orchestrator/subagent model for more thorough and reliable deep research results
  • Autopilot mode now limits continuation messages to 5 by default (configurable with --max-autopilot-continues)
  • Automatically clean up old CLI package versions from disk during auto-update
  • Remote session statusline shows the remote working directory and branch instead of local context
  • /update no longer re-submits the original -i prompt after restarting
  • Detect Azure DevOps repositories and auto-disable the GitHub MCP server
  • Session history, file tracking, and the /chronicle command are now available to all users
  • Skills are available as slash commands in ACP clients, matching the CLI experience
  • Resuming a session no longer falsely reports it as in use after a previous CLI process exited unexpectedly
  • --config-dir now propagates correctly to plugin subcommands; --config-dir is deprecated in favor of COPILOT_HOME
  • Mouse selection works while the /ask response dialog is open, so its content can be highlighted and copied
  • Improve CLI startup speed by loading custom CA certificates asynchronously
  • Remote control link shows the full URL in the timeline instead of 'Open in browser'

... (truncated)

Commits

Updates @modelcontextprotocol/sdk from 1.26.0 to 1.29.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.29.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.28.0...v1.29.0

v1.28.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0

v1.27.1

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.0...v1.27.1

v1.27.0

What's Changed

... (truncated)

Commits

Updates @types/node from 25.3.3 to 25.6.0

Commits

Updates openai from 6.17.0 to 6.36.0

Release notes

Sourced from openai's releases.

v6.36.0

6.36.0 (2026-05-01)

Full Changelog: v6.35.0...v6.36.0

Features

  • api: add group_type/user metadata fields, update types across admin resources (cc52f97)
  • api: add support for Admin API Keys per endpoint (770d187)
  • api: admin API updates (ee2bd2d)
  • api: manual updates (6af2b6d)
  • api: manual updates (f2dceda)

Bug Fixes

  • api: support admin api key auth (e3862a3)
  • api: tighten auth header selection (f1203bd)

Chores

  • format: run eslint and prettier separately (104543a)
  • internal: codegen related update (05d86da)
  • internal: codegen related update (f184586)

v6.35.0

6.35.0 (2026-04-28)

Full Changelog: v6.34.0...v6.35.0

Features

  • api: ...

    Description has been truncated

@dependabot
build(deps): bump ghcr.io/devcontainers/features/node in the all group
c173267 
Bumps the all group with 1 update: ghcr.io/devcontainers/features/node.


Updates `ghcr.io/devcontainers/features/node` from 1.7.1 to 2.0.0
build(deps): bump the all group with 8 updates

Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node), [actions/setup-go](https://github.com/actions/setup-go), [actions/github-script](https://github.com/actions/github-script), [extractions/setup-just](https://github.com/extractions/setup-just), [github/gh-aw-actions](https://github.com/github/gh-aw-actions), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/cache](https://github.com/actions/cache) to permit the latest version.

Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v4...v6)

Updates `actions/setup-node` from 4 to 6
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

Updates `actions/setup-go` from 5 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v5...v6)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v8...v9)

Updates `extractions/setup-just` from 3 to 4
- [Release notes](https://github.com/extractions/setup-just/releases)
- [Commits](extractions/setup-just@v3...v4)

Updates `github/gh-aw-actions` to 63aa903fe409698e15e5718ad89366a72bfe6a89
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/gh-aw-actions/commits/63aa903fe409698e15e5718ad89366a72bfe6a89)

Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v7...v7.0.1)

Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v4...v5)
build(deps-dev): bump the all group in /test/harness with 7 updates

Bumps the all group in /test/harness with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@github/copilot](https://github.com/github/copilot-cli) | `1.0.41-1` | `1.0.41` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.26.0` | `1.29.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.3` | `25.6.0` |
| [openai](https://github.com/openai/openai-node) | `6.17.0` | `6.36.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.5` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.2` | `2.8.4` |


Updates `@github/copilot` from 1.0.41-1 to 1.0.41
- [Release notes](https://github.com/github/copilot-cli/releases)
- [Changelog](https://github.com/github/copilot-cli/blob/main/changelog.md)
- [Commits](github/copilot-cli@v1.0.41-1...v1.0.41)

Updates `@modelcontextprotocol/sdk` from 1.26.0 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.26.0...v1.29.0)

Updates `@types/node` from 25.3.3 to 25.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `openai` from 6.17.0 to 6.36.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.17.0...v6.36.0)

Updates `typescript` from 5.9.3 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.3)

Updates `vitest` from 4.0.18 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)

Updates `yaml` from 2.8.2 to 2.8.4
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.2...v2.8.4)
build(deps): bump the all group in /go with 3 updates

Bumps the all group in /go with 3 updates: [github.com/google/jsonschema-go](https://github.com/google/jsonschema-go), [github.com/klauspost/compress](https://github.com/klauspost/compress) and [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go).


Updates `github.com/google/jsonschema-go` from 0.4.2 to 0.4.3
- [Release notes](https://github.com/google/jsonschema-go/releases)
- [Commits](google/jsonschema-go@v0.4.2...0.4.3)

Updates `github.com/klauspost/compress` from 1.18.3 to 1.18.6
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.3...v1.18.6)

Updates `go.opentelemetry.io/otel` from 1.35.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.43.0)
build(deps): bump the all group in /nodejs with 12 updates

Bumps the all group in /nodejs with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [@github/copilot](https://github.com/github/copilot-cli) | `1.0.41-1` | `1.0.41` |
| [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` |
| [@platformatic/vfs](https://github.com/platformatic/vfs) | `0.3.0` | `0.4.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.3` | `25.6.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.56.1` | `8.59.2` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.56.1` | `8.59.2` |
| [esbuild](https://github.com/evanw/esbuild) | `0.27.2` | `0.28.0` |
| [eslint](https://github.com/eslint/eslint) | `9.39.2` | `10.3.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` |
| [semver](https://github.com/npm/node-semver) | `7.7.3` | `7.7.4` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.5` |


Updates `@github/copilot` from 1.0.41-1 to 1.0.41
- [Release notes](https://github.com/github/copilot-cli/releases)
- [Changelog](https://github.com/github/copilot-cli/blob/main/changelog.md)
- [Commits](github/copilot-cli@v1.0.41-1...v1.0.41)

Updates `zod` from 4.3.6 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.4.3)

Updates `@platformatic/vfs` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/platformatic/vfs/releases)
- [Commits](platformatic/vfs@v0.3.0...v0.4.0)

Updates `@types/node` from 25.3.3 to 25.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.56.1 to 8.59.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.56.1 to 8.59.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/parser)

Updates `esbuild` from 0.27.2 to 0.28.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md)
- [Commits](evanw/esbuild@v0.27.2...v0.28.0)

Updates `eslint` from 9.39.2 to 10.3.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.2...v10.3.0)

Updates `prettier` from 3.8.1 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.8.3)

Updates `semver` from 7.7.3 to 7.7.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.3...v7.7.4)

Updates `typescript` from 5.9.3 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.3)

Updates `vitest` from 4.0.18 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)
build(deps-dev): update ty requirement in /python in the all group

Updates the requirements on [ty](https://github.com/astral-sh/ty) to permit the latest version.

Updates `ty` to 0.0.34
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.2...0.0.34)
Bump the all group with 7 updates

Bumps coverlet.collector from 6.0.4 to 10.0.0
Bumps Microsoft.Extensions.AI.Abstractions from 10.2.0 to 10.5.2
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.2 to 10.0.7
Bumps Microsoft.NET.Test.Sdk from 18.3.0 to 18.5.1
Bumps Microsoft.SourceLink.GitHub from 10.0.102 to 10.0.203
Bumps roslyn-language-server from 5.5.0-2.26078.4 to 5.5.0-2.26103.6
Bumps System.Text.Json to 10.0.6, 10.0.7

---
updated-dependencies:
- dependency-name: ghcr.io/devcontainers/features/node
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: extractions/setup-just
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: github/gh-aw-actions
  dependency-version: 63aa903fe409698e15e5718ad89366a72bfe6a89
  dependency-type: direct:production
  dependency-group: all
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: "@github/copilot"
  dependency-version: 1.0.41
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: openai
  dependency-version: 6.36.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: yaml
  dependency-version: 2.8.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/google/jsonschema-go
  dependency-version: 0.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@github/copilot"
  dependency-version: 1.0.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@platformatic/vfs"
  dependency-version: 0.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.59.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.59.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: esbuild
  dependency-version: 0.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: eslint
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: semver
  dependency-version: 7.7.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: ty
  dependency-version: 0.0.34
  dependency-type: direct:development
  dependency-group: all
- dependency-name: coverlet.collector
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: Microsoft.Extensions.AI.Abstractions
  dependency-version: 10.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: System.Text.Json
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.203
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: roslyn-language-server
  dependency-version: 5.5.0-2.26103.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: System.Text.Json
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file devcontainers_package_manager Pull requests that update devcontainers_package_manager code labels May 6, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 6, 2026 08:52
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file devcontainers_package_manager Pull requests that update devcontainers_package_manager code labels May 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file devcontainers_package_manager Pull requests that update devcontainers_package_manager code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants