Build(deps-dev): Bump the lint group with 2 updates by dependabot[bot] · Pull Request #3 · starter-series/python-mcp-server-starter

dependabot · 2026-03-25T18:04:07Z

Bumps the lint group with 2 updates: eslint and typescript-eslint.

Updates eslint from 10.0.3 to 10.1.0

Release notes

v10.1.0

Features

ff4382b feat: apply fix for no-var in TSModuleBlock (#20638) (Tanuj Kanti)

0916995 feat: Implement api support for bulk-suppressions (#20565) (Blake Sager)

Bug Fixes

2b8824e fix: Prevent no-var autofix when a variable is used before declaration (#20464) (Amaresh S M)

e58b4bf fix: update eslint (#20597) (renovate[bot])

Documentation

b7b57fe docs: use correct JSDoc link in require-jsdoc.md (#20641) (mkemna-clb)

58e4cfc docs: add deprecation notice partial (#20639) (Milos Djermanovic)

7143dbf docs: update v9 migration guide for @eslint/js usage (#20540) (fnx)

035fc4f docs: note that globalReturn applies only with sourceType: "script" (#20630) (Milos Djermanovic)

e972c88 docs: merge ESLint option descriptions into type definitions (#20608) (Francesco Trotta)

7f10d84 docs: Update README (GitHub Actions Bot)

aeed007 docs: open playground link in new tab (#20602) (Tanuj Kanti)

a0d1a37 docs: Add AI Usage Policy (#20510) (Nicholas C. Zakas)

Chores

a9f9cce chore: update dependency eslint-plugin-unicorn to ^63.0.0 (#20584) (Milos Djermanovic)

1f42bd7 chore: update prettier to 3.8.1 (#20651) (루밀LuMir)

c0a6f4a chore: update dependency @eslint/json to ^1.2.0 (#20652) (renovate[bot])

cc43f79 chore: update dependency c8 to v11 (#20650) (renovate[bot])

2ce4635 chore: update dependency @eslint/json to v1 (#20649) (renovate[bot])

f0406ee chore: update dependency markdownlint-cli2 to ^0.21.0 (#20646) (renovate[bot])

dbb4c95 chore: remove trunk (#20478) (sethamus)

c672a2a test: fix CLI test for empty output file (#20640) (kuldeep kumar)

c7ada24 ci: bump pnpm/action-setup from 4.3.0 to 4.4.0 (#20636) (dependabot[bot])

07c4b8b test: fix RuleTester test without test runners (#20631) (Francesco Trotta)

079bba7 test: Add tests for isValidWithUnicodeFlag (#20601) (Manish chaudhary)

5885ae6 ci: unpin Node.js 25.x in CI (#20615) (Copilot)

f65e5d3 chore: update pnpm/action-setup digest to b906aff (#20610) (renovate[bot])

Commits

8351ec7 10.1.0
3270bc1 Build: changelog update for 10.1.0
a9f9cce chore: update dependency eslint-plugin-unicorn to ^63.0.0 (#20584)
1f42bd7 chore: update prettier to 3.8.1 (#20651)
c0a6f4a chore: update dependency @eslint/json to ^1.2.0 (#20652)
cc43f79 chore: update dependency c8 to v11 (#20650)
2ce4635 chore: update dependency @eslint/json to v1 (#20649)
f0406ee chore: update dependency markdownlint-cli2 to ^0.21.0 (#20646)
dbb4c95 chore: remove trunk (#20478)
ff4382b feat: apply fix for no-var in TSModuleBlock (#20638)
Additional commits viewable in compare view

Updates typescript-eslint from 8.57.0 to 8.57.2

Release notes

Sourced from typescript-eslint's releases.

v8.57.2

8.57.2 (2026-03-23)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#11865)

eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#11971)

eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#12120)

eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)

eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)

eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#12127)

eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#11954)

typescript-estree: skip createIsolatedProgram fallback for projectService (#12066, #12065)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

Konv Suu

mdm317

Newton Yuan @NewtonYuan

RyoheiYamamoto

SungHyun627 @SungHyun627

Tamashoo @Tamashoo

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.1

8.57.1 (2026-03-16)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#12126)

❤️ Thank You

Newton Yuan @NewtonYuan

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.57.2 (2026-03-23)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.57.1 (2026-03-16)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

be4d54d chore(release): publish 8.57.2
c7c38aa chore(release): publish 8.57.1
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

CI: gitleaks, license compliance, npm audit, lint, build, test CD: OIDC trusted publishing with provenance, version guard, GitHub Release

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v6) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [eslint](https://github.com/eslint/eslint) from 9.39.4 to 10.0.3. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.0.3) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.0.3 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) from 9.39.4 to 10.0.1. - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

…etup-node-6 Build(deps): Bump actions/setup-node from 4 to 6

…heckout-6 Build(deps): Bump actions/checkout from 4 to 6

gitleaks-action requires commit history to scan PR diffs. Shallow clone (fetch-depth: 1) causes fatal SHA resolution errors.

Build(deps-dev): Bump eslint from 9.39.4 to 10.0.3

…0.0.1 Build(deps-dev): Bump @eslint/js from 9.39.4 to 10.0.1

Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) from 29.7.0 to 30.3.0. - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.3.0/packages/jest) --- updated-dependencies: - dependency-name: jest dependency-version: 30.3.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Build(deps-dev): Bump jest from 29.7.0 to 30.3.0

Related packages (eslint/jest/actions) now bump in a single PR instead of separate PRs that conflict on package-lock.json.

Dogfooding feedback from iMcp (Apple Notes MCP server): - Add safety annotations (readOnly/destructive/idempotent/openWorld) to tool pattern - Add prompt example (src/prompts/hello.ts) with schema and handler - Add ok()/err() response helpers (src/helpers.ts) - Add environment variable config pattern (src/config.ts) - Switch from server.tool() to server.registerTool() for annotation support - Update AGENTS.md with prompt guide, multi-module scaling, annotation reference - Update README/README.ko.md with new patterns - Update setup checklist with new items - Add tests for helpers and prompts (8 total)

- Add permissions: contents: read to CI workflow - Add .npmignore to prevent publishing tests, config, and docs to npm registry

gitleaks-action@v2 requires paid license for orgs. Use gitleaks CLI directly (MIT, free) for same functionality.

gitleaks git subcommand has no --source flag. Use gitleaks detect --source instead.

- Add tool name collision warning (must be globally unique across servers) - Add Resources primitive example in code and docs - Add HTTP (StreamableHTTPServerTransport) guide for remote deployments - Add NODE_AUTH_TOKEN and EBADPLATFORM comments in CD workflow - Add shell command injection warning in SECURITY.md

- HTTP Transport: full session-aware example with isInitializeRequest guard, session map, GET/DELETE handlers - Tool naming: add intra-server collision warning in AGENTS.md - CD: improve os EBADPLATFORM guidance - NPM setup: create docs/NPM_PUBLISH_SETUP.md with OIDC + classic token guide, environment vs repo secret gotcha - helpers.ts: ok() accepts unknown, auto-stringifies objects - index.ts: add config-passing pattern comment for multi-module - README: note pretest auto-builds in Scripts table

…#10) Bumps the lint group with 1 update: [globals](https://github.com/sindresorhus/globals). Updates `globals` from 16.5.0 to 17.4.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.5.0...v17.4.0) --- updated-dependencies: - dependency-name: globals dependency-version: 17.4.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: lint ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: heznpc <heznpc@gmail.com>

Bumps the test group with 1 update: [@jest/globals](https://github.com/jestjs/jest/tree/HEAD/packages/jest-globals). Updates `@jest/globals` from 29.7.0 to 30.3.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.3.0/packages/jest-globals) --- updated-dependencies: - dependency-name: "@jest/globals" dependency-version: 30.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: test ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: heznpc <heznpc@gmail.com>

Bumps the mcp group with 1 update: [zod](https://github.com/colinhacks/zod). Updates `zod` from 3.25.76 to 4.3.6 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.76...v4.3.6) --- updated-dependencies: - dependency-name: zod dependency-version: 4.3.6 dependency-type: direct:production update-type: version-update:semver-major dependency-group: mcp ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: heznpc <heznpc@gmail.com>

- add prettier + eslint-config-prettier with format/format:check scripts - replace hardcoded server version with dynamic package.json read - bump @modelcontextprotocol/sdk to ^1.27.1 - update tsconfig module resolution to NodeNext - add version:sync script for future automation

Bumps the lint group with 2 updates: [eslint](https://github.com/eslint/eslint) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). Updates `eslint` from 10.0.3 to 10.1.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.0.3...v10.1.0) Updates `typescript-eslint` from 8.57.0 to 8.57.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.2/packages/typescript-eslint) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: lint - dependency-name: typescript-eslint dependency-version: 8.57.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: lint ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-04T14:07:26Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

heznpc and others added 30 commits March 13, 2026 02:45

Initial commit: MCP server starter with TypeScript + OIDC npm publishing

3a09857

CI: gitleaks, license compliance, npm audit, lint, build, test CD: OIDC trusted publishing with provenance, version guard, GitHub Release

Merge pull request #2 from heznpc/dependabot/github_actions/actions/s…

d505783

…etup-node-6 Build(deps): Bump actions/setup-node from 4 to 6

Merge pull request #3 from heznpc/dependabot/github_actions/actions/c…

bd51b24

…heckout-6 Build(deps): Bump actions/checkout from 4 to 6

Fix gitleaks CI failure: use full clone for secret scanning

350cf43

gitleaks-action requires commit history to scan PR diffs. Shallow clone (fetch-depth: 1) causes fatal SHA resolution errors.

Merge pull request #7 from heznpc/dependabot/npm_and_yarn/eslint-10.0.3

f5a6d37

Build(deps-dev): Bump eslint from 9.39.4 to 10.0.3

Merge pull request #8 from heznpc/dependabot/npm_and_yarn/eslint/js-1…

b7f80bb

…0.0.1 Build(deps-dev): Bump @eslint/js from 9.39.4 to 10.0.1

Merge pull request #6 from heznpc/dependabot/npm_and_yarn/jest-30.3.0

243efe2

Build(deps-dev): Bump jest from 29.7.0 to 30.3.0

Group Dependabot PRs to prevent lockfile conflicts

adee5a7

Related packages (eslint/jest/actions) now bump in a single PR instead of separate PRs that conflict on package-lock.json.

Fix README: add header block, badges, and language toggle

15e6679

Migrate to starter-series org: update URLs and contact email

94a225c

Harden CI permissions + add .npmignore

4b8309a

- Add permissions: contents: read to CI workflow - Add .npmignore to prevent publishing tests, config, and docs to npm registry

Replace gitleaks-action with gitleaks CLI

d843323

gitleaks-action@v2 requires paid license for orgs. Use gitleaks CLI directly (MIT, free) for same functionality.

Fix gitleaks: use detect subcommand

dbe327c

gitleaks git subcommand has no --source flag. Use gitleaks detect --source instead.

Extract gitleaks to /tmp to avoid large file check conflict

5e24560

Add .idea/ to .gitignore

50bdc07

add maintenance workflows (codeql, stale, maintenance)

46fbde1

docs: add CodeQL, maintenance, stale workflows to README

e0128bd

chore: add .claude/ to gitignore

91a5c38

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 25, 2026

heznpc closed this Apr 4, 2026

heznpc force-pushed the main branch from 3d59c41 to fab7869 Compare April 4, 2026 14:07

dependabot Bot deleted the dependabot/npm_and_yarn/lint-d3bcd30403 branch April 4, 2026 14:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Build(deps-dev): Bump the lint group with 2 updates#3

Build(deps-dev): Bump the lint group with 2 updates#3
dependabot[bot] wants to merge 31 commits into
mainfrom
dependabot/npm_and_yarn/lint-d3bcd30403

dependabot Bot commented on behalf of github Mar 25, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Mar 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v10.1.0

Features

Bug Fixes

Documentation

Chores

v8.57.2

8.57.2 (2026-03-23)

🩹 Fixes

❤️ Thank You

v8.57.1

8.57.1 (2026-03-16)

🩹 Fixes

❤️ Thank You

8.57.2 (2026-03-23)

8.57.1 (2026-03-16)

Uh oh!

dependabot Bot commented on behalf of github Apr 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Mar 25, 2026 •

edited

Loading