From 9a33828ee50ebc8f86c49d49ec56cd137b24ce22 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 30 Oct 2026 21:42:22 +0000 Subject: [PATCH 1/2] chore(deps): bump the production group across 1 directory with 3 updates Bumps the production group with 3 updates in the / directory: [@huggingface/transformers](https://github.com/huggingface/transformers.js), [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) and [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas). Updates `@huggingface/transformers` from 4.3.1 to 4.3.2 - [Release notes](https://github.com/huggingface/transformers.js/releases) - [Commits](https://github.com/huggingface/transformers.js/compare/4.3.1...4.3.2) Updates `@modelcontextprotocol/sdk` from 1.32.1 to 1.32.2 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/1.32.1...1.32.2) Updates `@napi-rs/canvas` from 1.0.11 to 1.0.13 - [Release notes](https://github.com/Brooooooklyn/canvas/releases) - [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md) - [Commits](https://github.com/Brooooooklyn/canvas/compare/v1.0.11...v1.0.13) --- updated-dependencies: - dependency-name: "@huggingface/transformers" dependency-version: 4.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.32.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@napi-rs/canvas" dependency-version: 1.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production ... Signed-off-by: dependabot[bot] --- package-lock.json | 112 +++++++++++++++++++++++----------------------- package.json | 6 +-- 2 files changed, 59 insertions(+), 59 deletions(-) diff --git a/package-lock.json b/package-lock.json index 12e44200c..04b255626 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,9 +9,9 @@ "version": "0.55.4", "license": "MIT", "dependencies": { - "@huggingface/transformers": "4.3.1", - "@modelcontextprotocol/sdk": "1.32.1", - "@napi-rs/canvas": "1.0.11", + "@huggingface/transformers": "4.3.2", + "@modelcontextprotocol/sdk": "1.32.2", + "@napi-rs/canvas": "1.0.13", "better-sqlite3": "13.0.3", "chokidar": "6.0.0", "env-var": "7.5.0", @@ -1539,9 +1539,9 @@ "license": "Apache-2.0" }, "node_modules/@huggingface/transformers": { - "version": "4.3.1", - "resolved": "https://registry.npmjs.org/@huggingface/transformers/-/transformers-4.3.1.tgz", - "integrity": "sha512-5+voSeUCFK6PCKlY15dPhNOKq3/zOTxDN7oC+Wy9dFb1QZ0TSQomZRRy7URRK8YRuUoE9fGMQTTPC5d/pWBJhA==", + "version": "4.3.2", + "resolved": "https://registry.npmjs.org/@huggingface/transformers/-/transformers-4.3.2.tgz", + "integrity": "sha512-V3+dqf3iWlRYJ9I9GreM3zGQd0lAXnnoPeddmkOQYWAEE4l/+Fi6p7tx/qVUJlKQgLXGim2W76rTOzz+eC0i7g==", "license": "Apache-2.0", "dependencies": { "@huggingface/jinja": "^0.5.10", @@ -2235,9 +2235,9 @@ "license": "MIT" }, "node_modules/@modelcontextprotocol/sdk": { - "version": "1.32.1", - "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.32.1.tgz", - "integrity": "sha512-2DdE+SJDtzLEEWzY1ZjY7Q+VcPhcV1KisD3zI4u0XZyktsjHum1mwbMI+JaulUBi2OZk+KJAi2uPXzxichPkdw==", + "version": "1.32.2", + "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.32.2.tgz", + "integrity": "sha512-SWsVtH/0vULSQStoZ6xxH2K09Li8fXYTMC64ZeogCdpZ3XSi1eCPOByV1OpuJxuI3OcmHhosDWYyii07tpPsLw==", "license": "MIT", "dependencies": { "@hono/node-server": "^1.19.9 || ^2.0.5", @@ -2275,9 +2275,9 @@ } }, "node_modules/@napi-rs/canvas": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas/-/canvas-1.0.11.tgz", - "integrity": "sha512-vt5tog1cr+QKadIddGe+3LrcX0EmjEd0izF717Uwf92mBmgYfq2XRmL2r4bZU40spB69exxhrBn9I91HYEr/7w==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas/-/canvas-1.0.13.tgz", + "integrity": "sha512-b87ugZpQ5ViwqVBkjervxpwa0GmJPsKHLBNoZN6GpjWeHzTbDUGryriq+2DYW2XbB+xCqSIINQysC0/I87nPbw==", "license": "MIT", "workspaces": [ "e2e/*" @@ -2290,23 +2290,23 @@ "url": "https://github.com/sponsors/Brooooooklyn" }, "optionalDependencies": { - "@napi-rs/canvas-android-arm64": "1.0.11", - "@napi-rs/canvas-darwin-arm64": "1.0.11", - "@napi-rs/canvas-darwin-x64": "1.0.11", - "@napi-rs/canvas-linux-arm-gnueabihf": "1.0.11", - "@napi-rs/canvas-linux-arm64-gnu": "1.0.11", - "@napi-rs/canvas-linux-arm64-musl": "1.0.11", - "@napi-rs/canvas-linux-riscv64-gnu": "1.0.11", - "@napi-rs/canvas-linux-x64-gnu": "1.0.11", - "@napi-rs/canvas-linux-x64-musl": "1.0.11", - "@napi-rs/canvas-win32-arm64-msvc": "1.0.11", - "@napi-rs/canvas-win32-x64-msvc": "1.0.11" + "@napi-rs/canvas-android-arm64": "1.0.13", + "@napi-rs/canvas-darwin-arm64": "1.0.13", + "@napi-rs/canvas-darwin-x64": "1.0.13", + "@napi-rs/canvas-linux-arm-gnueabihf": "1.0.13", + "@napi-rs/canvas-linux-arm64-gnu": "1.0.13", + "@napi-rs/canvas-linux-arm64-musl": "1.0.13", + "@napi-rs/canvas-linux-riscv64-gnu": "1.0.13", + "@napi-rs/canvas-linux-x64-gnu": "1.0.13", + "@napi-rs/canvas-linux-x64-musl": "1.0.13", + "@napi-rs/canvas-win32-arm64-msvc": "1.0.13", + "@napi-rs/canvas-win32-x64-msvc": "1.0.13" } }, "node_modules/@napi-rs/canvas-android-arm64": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas-android-arm64/-/canvas-android-arm64-1.0.11.tgz", - "integrity": "sha512-dtJS4FQEfH9OwSYLtMrEnj7T8DzBbJc/97LI/OkiWOYpW/iW5t6R/gcxVrUXS8l45gCVpwMufgucRe/pe0ISqA==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas-android-arm64/-/canvas-android-arm64-1.0.13.tgz", + "integrity": "sha512-trn7AaDzQ+yeeA0ezhkC7cB1ZDPtp4UYk0EvB5F8qtYL9jEVWtVrU30WOpI52DszoTxaTsCgf5PP4ZVaOlOIHQ==", "cpu": [ "arm64" ], @@ -2324,9 +2324,9 @@ } }, "node_modules/@napi-rs/canvas-darwin-arm64": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas-darwin-arm64/-/canvas-darwin-arm64-1.0.11.tgz", - "integrity": "sha512-J/JylWoJTG8OQqZaiqly4IODyAxNofUlZo0wtSBJtHk6AdymbdIkPynAM1JvQaZpPaG5h+msk9QuK8y4i1ooqw==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas-darwin-arm64/-/canvas-darwin-arm64-1.0.13.tgz", + "integrity": "sha512-6Y2djEetL8copxfNK6hg7oig/xqTwOchv19hBOm+zBNdKc/02Z3kjZN5wrLzv/l5O04/bAQS6I/AlQpwBlXgPg==", "cpu": [ "arm64" ], @@ -2344,9 +2344,9 @@ } }, "node_modules/@napi-rs/canvas-darwin-x64": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas-darwin-x64/-/canvas-darwin-x64-1.0.11.tgz", - "integrity": "sha512-nlecCk3xy06eAGC7krZtzNDm9UNTHKuHQYK8ZYegdjzgSL8anGt/eLJZm86OWaNgZkwQwvDqfSmG8Nqe6MPZNQ==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas-darwin-x64/-/canvas-darwin-x64-1.0.13.tgz", + "integrity": "sha512-OZoPwwu4TMMg8GTCFBrg8UFExwQTU/55i3uTC/izDat6PHE+ro9dimyQoOboFf91+NY7Pnn70ScR8f8I8+eZXw==", "cpu": [ "x64" ], @@ -2364,9 +2364,9 @@ } }, "node_modules/@napi-rs/canvas-linux-arm-gnueabihf": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-arm-gnueabihf/-/canvas-linux-arm-gnueabihf-1.0.11.tgz", - "integrity": "sha512-DKImmG+sTPolE0kGPsYPBxTtOjb3INALp32O2lW2CfSr0bAzSEKKuu+GrQbtilClyoPOahUErS3OrznFDraoWA==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-arm-gnueabihf/-/canvas-linux-arm-gnueabihf-1.0.13.tgz", + "integrity": "sha512-dZSYaKROuswU2eUWG5aBKndNVe68elo1YX93xtRax7q658tj8rYE+HwduovWJgs6qwv1r1/CLR60nDeBbyjvyg==", "cpu": [ "arm" ], @@ -2384,9 +2384,9 @@ } }, "node_modules/@napi-rs/canvas-linux-arm64-gnu": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-arm64-gnu/-/canvas-linux-arm64-gnu-1.0.11.tgz", - "integrity": "sha512-55sykACGENj5j1rhj+81AO8JbR9HYgGjRZ7/H+pNr4VE1DvINKYNMTcutk8ZmWxk276jAQvUKJ3+Kdj9GXU3lQ==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-arm64-gnu/-/canvas-linux-arm64-gnu-1.0.13.tgz", + "integrity": "sha512-W6FzYE8ADHI93In1vi80KBL6btDtAMuj50Ch5ptkWS8xuntyzbR4h5JDUmXoakxZn2yMInksudTEqVSWoFqFGg==", "cpu": [ "arm64" ], @@ -2407,9 +2407,9 @@ } }, "node_modules/@napi-rs/canvas-linux-arm64-musl": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-arm64-musl/-/canvas-linux-arm64-musl-1.0.11.tgz", - "integrity": "sha512-6Jz6jys17yXydO+WdJgu7JhoB4K7/w9sWHByzzTmLjQghUx3TDMWvLv+UcCdnWhg4oprET67EMymnrETdeGNAg==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-arm64-musl/-/canvas-linux-arm64-musl-1.0.13.tgz", + "integrity": "sha512-+6fQ+rR49hkAa4voh2stLIwQ+4t+gmoseM8Bc53/DlMXb73IKymDPWK9A/NtWeqTW4ijWppYuyuxS2hPI8tzNA==", "cpu": [ "arm64" ], @@ -2430,9 +2430,9 @@ } }, "node_modules/@napi-rs/canvas-linux-riscv64-gnu": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-riscv64-gnu/-/canvas-linux-riscv64-gnu-1.0.11.tgz", - "integrity": "sha512-lf2XeEebWiUYVOVEjLXxF7dfXrBBSEOBn9AqBh39VYXrPt5cDqI+1t58IFSjn8npqkg5jIOs8TQbjKABbFW1gQ==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-riscv64-gnu/-/canvas-linux-riscv64-gnu-1.0.13.tgz", + "integrity": "sha512-17XEMO3t9RW/TtHtSFf2AkaSWuCWdzbPeidz7zrOFawHxoLSJCnpTI1hN5aUvrZNnkNNmt/vZVJCh0ryUaik3A==", "cpu": [ "riscv64" ], @@ -2453,9 +2453,9 @@ } }, "node_modules/@napi-rs/canvas-linux-x64-gnu": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-x64-gnu/-/canvas-linux-x64-gnu-1.0.11.tgz", - "integrity": "sha512-iDapw7nFSE5tsmQxcH2+KotJhyfVPmHd6vUOQN/Em+8WNbkZJwJ/rDowlJMFnMl0SYSDSfgKCNUGi6Sn5++Smg==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-x64-gnu/-/canvas-linux-x64-gnu-1.0.13.tgz", + "integrity": "sha512-lc48IwknVHBsNzXn9Xs5OkUsRX38Ml3Z1aOybQ51mMEzZckm8+4A0qROlyYHEoBPzr1kL3IU8ZUAqDb7wtdX8w==", "cpu": [ "x64" ], @@ -2476,9 +2476,9 @@ } }, "node_modules/@napi-rs/canvas-linux-x64-musl": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-x64-musl/-/canvas-linux-x64-musl-1.0.11.tgz", - "integrity": "sha512-26q26AyITo3CGZX4HWFIMgBMA1lu3YN07gxzBm4tW6Hglq/OVyTP50kDrmWuKybCX6dh3m8Ly+c7YhI+sqCgCQ==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-x64-musl/-/canvas-linux-x64-musl-1.0.13.tgz", + "integrity": "sha512-bGY1r26S2bs8UNFJcPWcCSNdCFbKep5PATsvtgtC9A5u6SRgr2/jJE/RlhHL5m9ZpixNDhVkLY/5h16Kx5V9YA==", "cpu": [ "x64" ], @@ -2499,9 +2499,9 @@ } }, "node_modules/@napi-rs/canvas-win32-arm64-msvc": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas-win32-arm64-msvc/-/canvas-win32-arm64-msvc-1.0.11.tgz", - "integrity": "sha512-cUO96IdsfvIj2S+2PNcDSkTcLhjPj8pIOEWRV1Kj70MOP4wnE9zSk7N4C1EKHlFGRcgdR5AkbnBZj0dfHK9nbQ==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas-win32-arm64-msvc/-/canvas-win32-arm64-msvc-1.0.13.tgz", + "integrity": "sha512-2vRPBZoaIvJrUkDhZTE2Hn0YrnpJRCWVM3EJACoBKjuWI6WgPxGtUoRMsxRviCsyks8bKTSFdyw14CellnG2qA==", "cpu": [ "arm64" ], @@ -2519,9 +2519,9 @@ } }, "node_modules/@napi-rs/canvas-win32-x64-msvc": { - "version": "1.0.11", - "resolved": "https://registry.npmjs.org/@napi-rs/canvas-win32-x64-msvc/-/canvas-win32-x64-msvc-1.0.11.tgz", - "integrity": "sha512-DFYp/ZQRdKunI/LPc0UkRXG1vlNjJKOJf8O8Ctb8+wm2Nt2ELg9Eamc31D2VoakkfGo8L+z0Iejz6WtFbQwyGw==", + "version": "1.0.13", + "resolved": "https://registry.npmjs.org/@napi-rs/canvas-win32-x64-msvc/-/canvas-win32-x64-msvc-1.0.13.tgz", + "integrity": "sha512-DUlW3lZPz63kYsf8mxgyyZuevhlH0T3/BGP9l+NazhB0F1+gL6D4hqZdnhZpw24DlWmTpATDcyYSZlJOi+DdfQ==", "cpu": [ "x64" ], diff --git a/package.json b/package.json index 60b531770..f25935ae8 100644 --- a/package.json +++ b/package.json @@ -94,9 +94,9 @@ ] }, "dependencies": { - "@huggingface/transformers": "4.3.1", - "@modelcontextprotocol/sdk": "1.32.1", - "@napi-rs/canvas": "1.0.11", + "@huggingface/transformers": "4.3.2", + "@modelcontextprotocol/sdk": "1.32.2", + "@napi-rs/canvas": "1.0.13", "better-sqlite3": "13.0.3", "chokidar": "6.0.0", "env-var": "7.5.0", From 307735972476dcf9b606443fb357f198bc065078 Mon Sep 17 00:00:00 2001 From: Tanisha Aberdeen <32620895+aliasunder@users.noreply.github.com> Date: Fri, 30 Oct 2026 22:07:00 -0400 Subject: [PATCH 2/2] chore: remove ts-expect-error directives MCP SDK 1.32.2 made unused SDK 1.32.2 adds explicit | undefined to the Transport interface's optional properties, so connect() now type-checks under exactOptionalPropertyTypes and the three directives fail the build with TS2578. Co-Authored-By: Claude Opus 5.5 --- src/__tests__/docker/docker-harness.ts | 4 ---- src/__tests__/integration/test-harness.ts | 5 ----- src/vault-mcp/mcp-core/mcp-router.ts | 3 --- 3 files changed, 12 deletions(-) diff --git a/src/__tests__/docker/docker-harness.ts b/src/__tests__/docker/docker-harness.ts index 287b49414..5fd35a2d6 100644 --- a/src/__tests__/docker/docker-harness.ts +++ b/src/__tests__/docker/docker-harness.ts @@ -625,10 +625,6 @@ export const createClient = async (port: number, token: string): Promise requestInit: { headers: { Authorization: `Bearer ${token}` } }, }) const client = new Client({ name: "remote-boot-test", version: "1.0.0" }) - // SDK's StreamableHTTPClientTransport.sessionId is `string | undefined` but - // the Transport interface declares `sessionId?: string` — incompatible under - // exactOptionalPropertyTypes. Self-cleans when the SDK fixes the type. - // @ts-expect-error — SDK type misalignment (sessionId optionality) await client.connect(transport) return client } diff --git a/src/__tests__/integration/test-harness.ts b/src/__tests__/integration/test-harness.ts index 326006008..f622211e0 100644 --- a/src/__tests__/integration/test-harness.ts +++ b/src/__tests__/integration/test-harness.ts @@ -304,11 +304,6 @@ export const createTestClient = async (port: number): Promise => { }, }) const client = new Client({ name: "integration-test", version: "1.0.0" }) - // SDK's StreamableHTTPClientTransport.sessionId is `string | undefined` but - // the Transport interface declares `sessionId?: string` — incompatible under - // exactOptionalPropertyTypes. Once the SDK fixes the type, the directive - // below fails the build as unused, flagging it for deletion. - // @ts-expect-error — SDK type misalignment (sessionId optionality) await client.connect(transport) return client } diff --git a/src/vault-mcp/mcp-core/mcp-router.ts b/src/vault-mcp/mcp-core/mcp-router.ts index e230b6316..390aa6db1 100644 --- a/src/vault-mcp/mcp-core/mcp-router.ts +++ b/src/vault-mcp/mcp-core/mcp-router.ts @@ -191,9 +191,6 @@ export const createMcpRouter = ({ config, }) - // @ts-expect-error — SDK type bug: StreamableHTTPServerTransport - // declares onclose as optional, but Transport requires it. onclose - // is assigned above; remove this when the SDK fixes the type. await server.connect(transport) await transport.handleRequest(req, res, body) if (!transport.sessionId) {