Skip to content

chore(deps): bump @hono/node-server, @modelcontextprotocol/sdk, prisma and @langchain/langgraph-cli - #24

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-fd761df579
Open

chore(deps): bump @hono/node-server, @modelcontextprotocol/sdk, prisma and @langchain/langgraph-cli#24
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-fd761df579

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown

Bumps @hono/node-server to 1.19.17 and updates ancestor dependencies @hono/node-server, @modelcontextprotocol/sdk, prisma and @langchain/langgraph-cli. These dependencies need to be updated together.

Updates @hono/node-server from 1.19.14 to 1.19.17

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hono/node-server since your current version.


Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates prisma from 7.8.0 to 7.9.1

Release notes

Sourced from prisma's releases.

7.9.1

Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).

This fixes prisma/prisma#29780.

It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:

# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish
tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)

@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @​AmirSa12 (#28351) — thank you!

prisma.mp4

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.

</tr></table>

... (truncated)

Commits

Updates @langchain/langgraph-cli from 1.2.2 to 1.4.4

Release notes

Sourced from @​langchain/langgraph-cli's releases.

@​langchain/langgraph-cli@​1.4.4

Patch Changes

  • #2645 059f3b8 Thanks @​christian-bromann! - fix(langgraph-api): stop wiping graph recursionLimit with undefined

    When a run omitted config.recursion_limit, the server still passed recursionLimit: undefined into streamEvents. Pregel spreads that over the graph's withConfig default, so agents fell back to langchain-core's 25. Omit undefined keys so bound limits (and deepagents' 10000) stick.

  • Updated dependencies [059f3b8]:

    • @​langchain/langgraph-api@​1.4.4

@​langchain/langgraph-cli@​1.4.3

Patch Changes

@​langchain/langgraph-cli@​1.4.2

Patch Changes

  • #2590 f71e00c Thanks @​christian-bromann! - fix(api): inject langgraph_auth_user on protocol-v2 run.start

    Stamp authenticated user fields onto run config in createOrResumeRun so v2 streaming matches the REST runs API. Shared helpers also dedupe REST run config auth/header enrichment.

  • #2575 e1b40c2 Thanks @​christian-bromann! - fix(cli): support node_version 24 in langgraph.json

    Allow Node 24 in the CLI config schema and Docker base image resolution. The langgraphjs-api:24 image is already published from langgraph-api.

  • Updated dependencies [f71e00c, e1b40c2]:

    • @​langchain/langgraph-api@​1.4.2

@​langchain/langgraph-cli@​1.4.1

Patch Changes

  • #2568 38d15e2 Thanks @​christian-bromann! - fix(langgraph-api): support configurable TypeScript loaders in dev server

    Add node_loader to langgraph.json (and LANGGRAPH_NODE_LOADER env override) so projects using reflect-metadata can use ts-node (--loader ts-node/esm) instead of the default tsx CLI. Other loaders default to --import; only registered shorthands like ts-node use --loader. --no-reload now also disables tsx's internal watch mode. Closes #1834.

  • Updated dependencies [38d15e2]:

    • @​langchain/langgraph-api@​1.4.1

@​langchain/langgraph-cli@​1.4.0

Minor Changes

... (truncated)

Changelog

Sourced from @​langchain/langgraph-cli's changelog.

1.4.4

Patch Changes

  • #2645 059f3b8 Thanks @​christian-bromann! - fix(langgraph-api): stop wiping graph recursionLimit with undefined

    When a run omitted config.recursion_limit, the server still passed recursionLimit: undefined into streamEvents. Pregel spreads that over the graph's withConfig default, so agents fell back to langchain-core's 25. Omit undefined keys so bound limits (and deepagents' 10000) stick.

  • Updated dependencies [059f3b8]:

    • @​langchain/langgraph-api@​1.4.4

1.4.3

Patch Changes

1.4.2

Patch Changes

  • #2590 f71e00c Thanks @​christian-bromann! - fix(api): inject langgraph_auth_user on protocol-v2 run.start

    Stamp authenticated user fields onto run config in createOrResumeRun so v2 streaming matches the REST runs API. Shared helpers also dedupe REST run config auth/header enrichment.

  • #2575 e1b40c2 Thanks @​christian-bromann! - fix(cli): support node_version 24 in langgraph.json

    Allow Node 24 in the CLI config schema and Docker base image resolution. The langgraphjs-api:24 image is already published from langgraph-api.

  • Updated dependencies [f71e00c, e1b40c2]:

    • @​langchain/langgraph-api@​1.4.2

1.4.1

Patch Changes

  • #2568 38d15e2 Thanks @​christian-bromann! - fix(langgraph-api): support configurable TypeScript loaders in dev server

    Add node_loader to langgraph.json (and LANGGRAPH_NODE_LOADER env override) so projects using reflect-metadata can use ts-node (--loader ts-node/esm) instead of the default tsx CLI. Other loaders default to --import; only registered shorthands like ts-node use --loader. --no-reload now also disables tsx's internal watch mode. Closes #1834.

  • Updated dependencies [38d15e2]:

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump @hono/node-server, @modelcontextprotocol/sdk, prism…
5866b28 
…a and @langchain/langgraph-cli

Bumps [@hono/node-server](https://github.com/honojs/node-server) to 1.19.17 and updates ancestor dependencies [@hono/node-server](https://github.com/honojs/node-server), [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk), [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) and [@langchain/langgraph-cli](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-cli). These dependencies need to be updated together.


Updates `@hono/node-server` from 1.19.14 to 1.19.17
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.14...v1.19.17)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `prisma` from 7.8.0 to 7.9.1
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/cli)

Updates `@langchain/langgraph-cli` from 1.2.2 to 1.4.4
- [Release notes](https://github.com/langchain-ai/langgraphjs/releases)
- [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-cli/CHANGELOG.md)
- [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph-cli@1.4.4/libs/langgraph-cli)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 1.19.17
  dependency-type: indirect
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
- dependency-name: prisma
  dependency-version: 7.9.1
  dependency-type: direct:development
- dependency-name: "@langchain/langgraph-cli"
  dependency-version: 1.4.4
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 12, 2026
@vercel

vercel Bot commented Aug 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
codevibe Ready Ready Preview Aug 12, 2026 7:28pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants