Bump the mcp-dependencies group across 1 directory with 7 updates by dependabot[bot] · Pull Request #46 · hakodev2k/AI-Engineering

dependabot · 2026-09-06T20:33:52Z

Bumps the mcp-dependencies group with 7 updates in the /MCP-API directory:

Package	From	To
zod	`4.4.3`	`4.5.4`
@types/node	`24.13.3`	`26.4.1`
tsx	`4.23.12`	`4.23.13`
typescript	`6.0.3`	`7.0.2`
vitest	`3.2.7`	`5.0.0`
@slack/web-api	`8.0.0`	`8.1.1`
stripe	`22.5.0`	`22.6.1`

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)

e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema

87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines

99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)

e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open

7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar

eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)

d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)

212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)

e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)

fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator

6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)

6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution

019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates

652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller

571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card

9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm

8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.
npm install zod@latest
At a glance:

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the flagship feature of Zod 4.5

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADChttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — 12–19 digits plus Luhn checksum

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the multi-property counterpart to z.property()

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD/https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD

... (truncated)

Commits

e8e206f 4.5.4
84e416f fix(v4): stop the cycle walk from firing a default factory (#6500)
1a16102 4.5.3
eab51ff fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)
7e24a24 docs(blog): drop the reading time and put a GitHub link in the navbar
e3a695b docs(v4): record the email regex and container output-shape findings under Open
99fce39 bench(v4): z.compile() against zod-compiler (#6499)
87d6464 fix(docs): drop the OG description when the title wraps past two lines
e6b6ab3 docs(blog): widen the z.compile example to a 20-property schema
9a193aa 4.5.2
Additional commits viewable in compare view

Updates @types/node from 24.13.3 to 26.4.1

Commits

See full diff in compare view

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

npm package (@latest dist-tag)

Commits

28e1f12 fix(cache): bound shared transform cache memory (#835)
See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits

1e4744d Merge branch 'main' into ts7-release
a5a219cmicrosoft/typescript-go#4558
ecfe30d Update status localization
5de25b5 Hide executable name in TypeScript status
d7ce74a Show bundled TypeScript version for packaged servers
29be66a Correct TS 7 release version to 7.0.2
ed2bd1b Merge branch 'main' into ts7-release
8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
d4eaca5microsoft/typescript-go#4549
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vitest from 3.2.7 to 5.0.0

Release notes

Sourced from vitest's releases.

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

🚨 Breaking Changes

Replace loupe.inspect with pretty-format - by @hi-ogawa, Claude Opus 5 (1M context) and OpenAI Codex in vitest-dev/vitest#9609 (3f802)

Remove quotes from string values in test.for/each title $ variable (take 2) - by @hi-ogawa in vitest-dev/vitest#10170 (04d37)

Default attachmentsDir from .vitest-attachements/ to .vitest/attachments/ - by @MdSadiqMd in vitest-dev/vitest#10186 (1ba73)

Remove sequential test/suite options in favor of concurrent - by @hi-ogawa and OpenAI Codex in vitest-dev/vitest#10198 (9229f)

Represent locator as an object instead of a string - by @sheremet-va in vitest-dev/vitest#10212 (80f07)

Inline expect package - by @sheremet-va in vitest-dev/vitest#10221 (ad162)

Remove deprecated entry points - by @sheremet-va in vitest-dev/vitest#10222 (994c6)

Require Node.js 22 and Vite 6.4 - by @sheremet-va in vitest-dev/vitest#10178 (38762)

Fail expect.poll when function didn't resolve in time - by @hi-ogawa and OpenAI Codex in vitest-dev/vitest#10233 (4df04)

Throw an error if hoistable methods are outside the top level scope - by @sheremet-va in vitest-dev/vitest#10460 (d0b4f)

toHaveTextContent is strict, add toMatchTextContent as alternative - by @sheremet-va in vitest-dev/vitest#10473 (18f30)

Don't lookup config file from ancestor directories - by @hi-ogawa, OpenAI Codex and Hiroshi Ogawa in vitest-dev/vitest#10428 (945d9)

Inline @vitest/runner package, do not publish it anymore - by @sheremet-va in vitest-dev/vitest#10511 (6d6e4)

Allow mutating happy-dom/jsdom window object - by @hi-ogawa, Hiroshi Ogawa and OpenAI Codex in vitest-dev/vitest#10373 (206e8)

Expose concurrencyId/workerId on TestModule's diagnostics, make id 1-based - by @sheremet-va in vitest-dev/vitest#10516 (bdd98)

Add screenshotDirectory config to browser.expect.toMatchScreenshot - by @macarie in vitest-dev/vitest#10592 (a60de)

Update @sinonjs/fake-timers and support mocking Temporal - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#10654 (f8b15)

Remove webdriverio package - by @sheremet-va in vitest-dev/vitest#10675 (5fed6)

Clear mocks by default before each test - by @sheremet-va in vitest-dev/vitest#10613 (0f646)

Don't emit localStorage warnings on Node 26, fail gracefully when worker fails to start - by @sheremet-va in vitest-dev/vitest#10293 (334ed)

Separate config resolution from the server creation - by @sheremet-va in vitest-dev/vitest#10554 (1c0ec)

Inline projects extend the root config by default - by @sheremet-va in vitest-dev/vitest#10750 (fec00)

Enable mocking Temporal without fake timers - by @fabon-f, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#10757 (ac2d4)

Support nested projects - by @sheremet-va in vitest-dev/vitest#10846 (ec367)

Use > as separator in -t, calculate only once - by @sheremet-va in vitest-dev/vitest#10686 (a0b20)

Fail the test when an asynchronous assertion is not awaited - by @sheremet-va in vitest-dev/vitest#10868 (86d4a)

Share the Vite server between inline projects - by @sheremet-va in vitest-dev/vitest#10848 (d87c9)

Parse files statically in vitest list by default - by @sheremet-va in vitest-dev/vitest#11088 (51e94)

benchmark:

Rewrite the public API - by @sheremet-va in vitest-dev/vitest#10113 (19f6e)

browser:

Iframe scale - by @macarie in vitest-dev/vitest#9745 (b6398)

Enable locators.exact by default - by @sheremet-va in vitest-dev/vitest#10430 (e2032)

Require sessionId for orchestrator html request - by @hi-ogawa, Hiroshi Ogawa and OpenAI Codex in vitest-dev/vitest#10522 (79b7d)

Save failure screenshots in attachmentsDir - by @macarie in vitest-dev/vitest#10917 (3b5bb)

coverage:

include/exclude globs too eager - by @AriPerkkio in vitest-dev/vitest#9818 (edacb)

Allow thresholds.perFile to accept an object - by @vladlenskiy and @AriPerkkio in vitest-dev/vitest#10190 (13b78)

expect:

Fix toThrow("") behavior by reverting #6710 - by @hi-ogawa in vitest-dev/vitest#9643 and vitest-dev/vitest#6710 (6c3e4)

mocker:

Deserialize automock as automock - by @nami8824 in vitest-dev/vitest#10192 (2f892)

reporters:

blob reporter and --merge-reports default to .vitest/blob/ - by @AriPerkkio in vitest-dev/vitest#10232 (d22b0)

Write json and junit reporter output files to .vitest by default - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and @AriPerkkio in vitest-dev/vitest#10621 (58577)

... (truncated)

Commits

f441c6f chore: release v5.0.0 (#11130)
d46a747 fix: treat test.describe as a suite during static collection (#11128)
584cf30 fix: add a warning if inline project has duplicate plugins due to unexpected ...
f08ce4b fix: apply queued mocks from doMock() in queue order (fixes #10706) (#11127)
897f51f chore: release v5.0.0-rc.4 (#11107)
1339b06 chore(deps): update all non-major dependencies (#11104)
51e9494 feat!: parse files statically in vitest list by default (#11088)
2122ffd fix: propagate --maxWorkers to projects (#11102)
dc10f5f fix(browser): report the action error when a task times out (#11101)
d4fe198 feat: promote clearCache out of experimental (#11086)
Additional commits viewable in compare view

Updates @slack/web-api from 8.0.0 to 8.1.1

Release notes

Sourced from @slack/web-api's releases.

@slack/web-api@8.1.1

Patch Changes

0ee1d99: fix: revert internal packages requiring esm loading for backward compatible support (#2711)

@slack/web-api@8.1.0

Minor Changes

955e6b9: feat(web-api): add support for admin.users.getExpiration

4322e14: feat(web-api): add agents.sessions.rename and agents.sessions.setStatus

4ba30a1: feat(web-api): add session_status to chat.stopStream arguments

bff3398: feat(web-api): add webapi response changes as of 2026-08-21

Regenerate response types with new stable response properties (e.g. agent_session on message-bearing responses, ListView grouping/sort/filter fields, bots.info connector/workflow flags).

Two fields are removed from UsersListResponse, neither of which is a real success-response property:

Member.is_connector_bot — not returned by users.list; this flag is surfaced on bots.info (added here to BotsInfoResponse).

arg — an error-response echo field, not part of a successful users.list body.

f5fd35a: feat(web-api): add blocks.validate method

Patch Changes

Updated dependencies [916d8e9]

Updated dependencies [f5e9a01]

@slack/types@3.1.0

Commits

e026671 chore: release (#2719)
0ee1d99 ci: adjust outputs of changeset releases to reattempt most recent releases (#...
05502d9 chore: release (#2713)
11b81e1 chore(deps): bump changesets/action from 1.9.0 to 2.1.1 (#2714)
7a3d149 chore(deps-dev): bump @changesets/cli from 2.31.1 to 3.0.1 (#2716)
67f8a74 chore(deps-dev): bump @biomejs/biome from 2.5.8 to 2.5.10 (#2717)
aef66ac fix: revert internal packages requiring esm loading for backward compatible s...
c663dc0 chore: release (#2681)
4ba30a1 feat(web-api): add session_status to chat.stopStream arguments (#2708)
916d8e9 feat(types): add agent_session_stopped and agent_session_title_changed events...
Additional commits viewable in compare view

Updates stripe from 22.5.0 to 22.6.1

Release notes

Sourced from stripe's releases.

v22.6.1

#2831 Use cryptographically secure boundaries for multipart file uploads

#2836 update OtherString docstring

#2835 Fix request coercion for GET and DELETE parameters

Fixes serialization of schema-coerced values, including Decimal, in GET and DELETE query parameters.

#2829 Harden API requestor code against malicious URLs

See the changelog for more details.

v22.6.0

This release changes the pinned API version to 2026-08-26.dahlia.

#2801 Add discriminatedUnion kind to V2RuntimeSchema coercion

Adds runtime support for coercing int64/decimal fields within discriminated union variants in V2 API requests and responses.

⚠️ Throws when serializing a discriminated union parameter whose discriminator is missing or is not a string. This avoids skipping coercion entirely which could silently truncate int64 fields above Number.MAX_SAFE_INTEGER.

#2818 Add new EventNotificationHandler class for better thin event management

We've been putting a lot of time into rethinking the event handling experience in the SDKs. This new class is the culmination of that effort.

They're designed for a tight coupling with both StripeClient and the fully-typed nature of thin events. This delivers painless event destination upgrades, in-editor checks for common mistakes, and better code modularity.

Now that we've released thin event notifications for v1 objects, these new handlers are our recommended path for all integrations using thin event notifications.

See more detailed docs here: https://docs.stripe.com/webhooks/event-notification-handlers

#2815 correctly throw connection errors if the server drops while sending the HTTP response body

This change results in new exceptions being thrown instead of hanging indefinitely

in an effort to make this change backwards compatible, it doesn't affect a case that was already throwing an error: if the stripe API sends invalid JSON, we were treating it as an API error instead of a connection error.

In the next major version, we'll change the exception thrown from StripeAPIError to StripeConnectionError and document it accordingly.

#2812 Update generated code

Add support for new resource Billing.FeedbackOption

Add support for create, deactivate, list, retrieve, and update methods on resource Billing.FeedbackOption

Add support for payment_method_settings on AccountSession.components and AccountSessionCreateParams.components

Add support for feedback_options on BillingPortal.Configuration.features.subscription_cancel.cancellation_reason, BillingPortal.ConfigurationCreateParams.features.subscription_cancel.cancellation_reason, and BillingPortal.ConfigurationUpdateParams.features.subscription_cancel.cancellation_reason

Add support for new value customer_update on enums BillingPortal.Session.flow.type and BillingPortal.SessionCreateParams.flow_data.type

Add support for customer_update on BillingPortal.Session.flow

Add support for funding_source_group on Charge.payment_method_details.card.wallet.link and Charge.payment_method_details.link

Add support for funding_types_blocked on Checkout.Session.payment_method_options.card.restrictions and Checkout.SessionCreateParams.payment_method_options.card.restrictions

Add support for metadata on ConfirmationToken

Add support for active_entitlements and customer_portal on CustomerSession.components and CustomerSessionCreateParams.components

Add support for country on FinancialConnections.Session.filters

Add support for frozen_fields on InvoiceItem

Add support for billie on Invoice.payment_settings.payment_method_options, InvoiceCreateParams.payment_settings.payment_method_options, InvoiceUpdateParams.payment_settings.payment_method_options, Subscription.payment_settings.payment_method_options, SubscriptionCreateParams.payment_settings.payment_method_options, and SubscriptionUpdateParams.payment_settings.payment_method_options

Add support for new value billie on enums Invoice.payment_settings.payment_method_types, InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, Subscription.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types

⚠️ Remove support for cryptogram on PaymentAttemptRecord.payment_method_details.card.three_d_secure and PaymentRecord.payment_method_details.card.three_d_secure

Add support for new value touch_n_go on enums PaymentIntent.allowed_payment_method_types, PaymentIntentConfirmParams.allowed_payment_method_types, PaymentIntentCreateParams.allowed_payment_method_types, PaymentIntentUpdateParams.allowed_payment_method_types, SetupIntent.allowed_payment_method_types, SetupIntentConfirmParams.allowed_payment_method_types, SetupIntentCreateParams.allowed_payment_method_types, and SetupIntentUpdateParams.allowed_payment_method_types

Change PaymentIntent.allowed_payment_method_types and SetupIntent.allowed_payment_method_types to be required

Add support for application_fee_amount, application_fee_percent, on_behalf_of, and transfer_data on PaymentLinkUpdateParams

Add support for feedback_option on Subscription.cancellation_details, SubscriptionCancelParams.cancellation_details, and SubscriptionUpdateParams.cancellation_details

Add support for igic on Tax.Registration.country_options.at, Tax.Registration.country_options.be, Tax.Registration.country_options.bg, Tax.Registration.country_options.cy, Tax.Registration.country_options.cz, Tax.Registration.country_options.de, Tax.Registration.country_options.dk, Tax.Registration.country_options.ee, Tax.Registration.country_options.es, Tax.Registration.country_options.fi, Tax.Registration.country_options.fr, Tax.Registration.country_options.gr, Tax.Registration.country_options.hr, Tax.Registration.country_options.hu, Tax.Registration.country_options.ie, Tax.Registration.country_options.it, Tax.Registration.country_options.lt, Tax.Registration.country_options.lu, Tax.Registration.country_options.lv, Tax.Registration.country_options.mt, Tax.Registration.country_options.nl, Tax.Registration.country_options.pl, Tax.Registration.country_options.pt, Tax.Registration.country_options.ro, Tax.Registration.country_options.se, Tax.Registration.country_options.si, Tax.Registration.country_options.sk, Tax.RegistrationCreateParams.country_options.at, Tax.RegistrationCreateParams.country_options.be, Tax.RegistrationCreateParams.country_options.bg, Tax.RegistrationCreateParams.country_options.cy, Tax.RegistrationCreateParams.country_options.cz, Tax.RegistrationCreateParams.country_options.de, Tax.RegistrationCreateParams.country_options.dk, Tax.RegistrationCreateParams.country_options.ee, Tax.RegistrationCreateParams.country_options.es, Tax.RegistrationCreateParams.country_options.fi, Tax.RegistrationCreateParams.country_options.fr, Tax.RegistrationCreateParams.country_options.gr, Tax.RegistrationCreateParams.country_options.hr, Tax.RegistrationCreateParams.country_options.hu, Tax.RegistrationCreateParams.country_options.ie, Tax.RegistrationCreateParams.country_options.it, Tax.RegistrationCreateParams.country_options.lt, Tax.RegistrationCreateParams.country_options.lu, Tax.RegistrationCreateParams.country_options.lv, Tax.RegistrationCreateParams.country_options.mt, Tax.RegistrationCreateParams.country_options.nl, Tax.RegistrationCreateParams.country_options.pl, Tax.RegistrationCreateParams.country_options.pt, Tax.RegistrationCreateParams.country_options.ro, Tax.RegistrationCreateParams.country_options.se, Tax.RegistrationCreateParams.country_options.si, and Tax.RegistrationCreateParams.country_options.sk

Add support for new value 2026-08-26.dahlia on enum WebhookEndpointCreateParams.api_version

Add support for error codes authentication_failure, capability_not_active, expired_payment_method, incorrect_postal_code, invalid_canceled_subscription_fields, and payment_method_restricted on Invoice.last_finalization_error, PaymentIntent.last_payment_error, SetupAttempt.setup_error, SetupIntent.last_setup_error, StripeError, and Terminal.Reader.action.api_error

... (truncated)

Changelog

Sourced from stripe's changelog.

22.6.1 - 2026-09-01

#2831 Use cryptographically secure boundaries for multipart file uploads

#2836 update OtherString docstring

#2835 Fix request coercion for GET and DELETE parameters

Fixes serialization of schema-coerced values, including Decimal, in GET and DELETE query parameters.

#2829 Harden API requestor code against malicious URLs

22.6.0 - 2026-08-26

This release changes the pinned API version to 2026-08-26.dahlia.

#2801 Add discriminatedUnion kind to V2RuntimeSchema coercion

Adds runtime support for coercing int64/decimal fields within discriminated union variants in V2 API requests and responses.

⚠️ Throws when serializing a discriminated union parameter whose discriminator is missing or is not a string. This avoids skipping coercion entirely which could silently truncate int64 fields above Number.MAX_SAFE_INTEGER.

#2818 Add new EventNotificationHandler class for better thin event management

We've been putting a lot of time into rethinking the event handling experience in the SDKs. This new class is the culmination of that effort.

They're designed for a tight coupling with both StripeClient and the fully-typed nature of thin events. This delivers painless event destination upgrades, in-editor checks for common mistakes, and better code modularity.

Now that we've released thin event notifications for v1 objects, these new handlers are our recommended path for all integrations using thin event notifications.

See more detailed docs here: https://docs.stripe.com/webhooks/event-notification-handlers

#2815 correctly throw connection errors if the server drops while sending the HTTP response body

This change results in new exceptions being thrown instead of hanging indefinitely

in an effort to make this change backwards compatible, it doesn't affect a case that was already throwing an error: if the stripe API sends invalid JSON, we were treating it as an API error instead of a connection error.

In the next major version, we'll change the exception thrown from StripeAPIError to StripeConnectionError and document it accordingly.

#2812 Update generated code

Add support for new resource Billing.FeedbackOption

Add support for create, deactivate, list, retrieve, and update methods on resource Billing.FeedbackOption

Add support for payment_method_settings on AccountSession.components and AccountSessionCreateParams.components

Add support for feedback_options on BillingPortal.Configuration.features.subscription_cancel.cancellation_reason, BillingPortal.ConfigurationCreateParams.features.subscription_cancel.cancellation_reason,...
Description has been truncated

Bumps the mcp-dependencies group with 7 updates in the /MCP-API directory: | Package | From | To | | --- | --- | --- | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `26.4.1` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.7` | `5.0.0` | | [@slack/web-api](https://github.com/slackapi/node-slack-sdk) | `8.0.0` | `8.1.1` | | [stripe](https://github.com/stripe/stripe-node) | `22.5.0` | `22.6.1` | Updates `zod` from 4.4.3 to 4.5.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.5.4) Updates `@types/node` from 24.13.3 to 26.4.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `tsx` from 4.23.12 to 4.23.13 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.12...v4.23.13) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) Updates `vitest` from 3.2.7 to 5.0.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/vitest) Updates `@slack/web-api` from 8.0.0 to 8.1.1 - [Release notes](https://github.com/slackapi/node-slack-sdk/releases) - [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@8.0.0...@slack/web-api@8.1.1) Updates `stripe` from 22.5.0 to 22.6.1 - [Release notes](https://github.com/stripe/stripe-node/releases) - [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md) - [Commits](stripe/stripe-node@v22.5.0...v22.6.1) --- updated-dependencies: - dependency-name: zod dependency-version: 4.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: mcp-dependencies - dependency-name: "@types/node" dependency-version: 26.4.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: mcp-dependencies - dependency-name: tsx dependency-version: 4.23.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: mcp-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: mcp-dependencies - dependency-name: vitest dependency-version: 5.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: mcp-dependencies - dependency-name: "@slack/web-api" dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: mcp-dependencies - dependency-name: stripe dependency-version: 22.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: mcp-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-13T20:33:53Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 6, 2026

dependabot Bot requested a review from hakodev2k as a code owner September 6, 2026 20:33

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 6, 2026

dependabot Bot closed this Sep 13, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/MCP-API/mcp-dependencies-ebe0e0f9c3 branch September 13, 2026 20:33

Navigation Menu

Bump the mcp-dependencies group across 1 directory with 7 updates - #46

Bump the mcp-dependencies group across 1 directory with 7 updates#46
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/MCP-API/mcp-dependencies-ebe0e0f9c3

dependabot Bot commented on behalf of github Sep 6, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.5.4

Commits:

v4.5.3

Commits:

v4.5.2

Commits:

v4.5.1

Commits:

v4.5.0

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

TypeScript 7.0.2

v5.0.0

🚨 Breaking Changes

@​slack/web-api@​8.1.1

Patch Changes

@​slack/web-api@​8.1.0

Minor Changes

Patch Changes

v22.6.1

v22.6.0

22.6.1 - 2026-09-01

22.6.0 - 2026-08-26

Uh oh!

dependabot Bot commented on behalf of github Sep 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 6, 2026 •

edited

Loading

`@slack/web-api@8`.1.1

`@slack/web-api@8`.1.0