github-featured/triggerdotdev--trigger.dev
2
0
Fork 0
Code Issues Pull Requests Deployments Models Agent Notes Packages Projects Releases Wiki Activity

security: dependabot alert triage (#2768)

Browse Source 
- Upgrade @modelcontextprotocol/sdk to 1.24.3
- Override jws to 3.2.3
This commit is contained in:
nicktrn
2025-12-08 21:02:13 +00:00
committed by GitHub
parent 7fba9e9f6b
commit 66c6da7114
4 changed files with 49 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.changeset/ninety-cougars-remember.md
+5
View File
@@ -0,0 +1,5 @@
---
"trigger.dev": patch
---
Upgrade @modelcontextprotocol/sdk to 1.24.3
package.json
+2 -1
View File
@@ -90,7 +90,8 @@
"form-data@^4": "4.0.4",
"axios@1.9.0": ">=1.12.0",
"js-yaml@>=3.0.0 <3.14.2": "3.14.2",
"js-yaml@>=4.0.0 <4.1.1": "4.1.1"
"js-yaml@>=4.0.0 <4.1.1": "4.1.1",
"jws@<3.2.3": "3.2.3"
},
"onlyBuiltDependencies": [
"@depot/cli",
packages/cli-v3/package.json
+1 -1
View File
@@ -83,7 +83,7 @@
"dependencies": {
"@clack/prompts": "0.11.0",
"@depot/cli": "0.0.1-cli.2.80.0",
"@modelcontextprotocol/sdk": "^1.17.0",
"@modelcontextprotocol/sdk": "^1.24.0",
"@opentelemetry/api": "1.9.0",
"@opentelemetry/api-logs": "0.203.0",
"@opentelemetry/exporter-trace-otlp-http": "0.203.0",
pnpm-lock.yaml
Generated
+41 -18
View File
@@ -14,6 +14,7 @@ overrides:
axios@1.9.0: '>=1.12.0'
js-yaml@>=3.0.0 <3.14.2: 3.14.2
js-yaml@>=4.0.0 <4.1.1: 4.1.1
jws@<3.2.3: 3.2.3
patchedDependencies:
'@changesets/assemble-release-plan@5.2.4':
@@ -1050,7 +1051,7 @@ importers:
version: 18.3.1
react-email:
specifier: ^2.1.1
version: 2.1.2(@opentelemetry/api@1.9.0)(@swc/helpers@0.5.15)(bufferutil@4.0.9)(eslint@8.31.0)
version: 2.1.2(@opentelemetry/api@1.9.0)(@swc/helpers@0.5.15)(eslint@8.31.0)
resend:
specifier: ^3.2.0
version: 3.2.0
@@ -1339,8 +1340,8 @@ importers:
specifier: 0.0.1-cli.2.80.0
version: 0.0.1-cli.2.80.0
'@modelcontextprotocol/sdk':
specifier: ^1.17.0
version: 1.17.1(supports-color@10.0.0)
specifier: ^1.24.0
version: 1.24.3(supports-color@10.0.0)(zod@3.25.76)
'@opentelemetry/api':
specifier: 1.9.0
version: 1.9.0
@@ -5655,9 +5656,15 @@ packages:
'@microsoft/fetch-event-source@2.0.1':
resolution: {integrity: sha512-W6CLUJ2eBMw3Rec70qrsEW0jOm/3twwJv21mrmj2yORiaVmVYGS4sSS5yUwvQc1ZlDLYGPnClVWmUUMagKNsfA==}
'@modelcontextprotocol/sdk@1.17.1':
resolution: {integrity: sha512-CPle1OQehbWqd25La9Ack5B07StKIxh4+Bf19qnpZKJC1oI22Y0czZHbifjw1UoczIfKBwBDAp/dFxvHG13B5A==}
'@modelcontextprotocol/sdk@1.24.3':
resolution: {integrity: sha512-YgSHW29fuzKKAHTGe9zjNoo+yF8KaQPzDC2W9Pv41E7/57IfY+AMGJ/aDFlgTLcVVELoggKE4syABCE75u3NCw==}
engines: {node: '>=18'}
peerDependencies:
'@cfworker/json-schema': ^4.1.1
zod: ^3.25 || ^4.0
peerDependenciesMeta:
'@cfworker/json-schema':
optional: true
'@msgpack/msgpack@3.0.0-beta2':
resolution: {integrity: sha512-y+l1PNV0XDyY8sM3YtuMLK5vE3/hkfId+Do8pLo/OPxfxuFAUwcGz3oiiUuV46/aBpwTzZ+mRWVMtlSKbradhw==}
@@ -14725,6 +14732,9 @@ packages:
jose@6.0.8:
resolution: {integrity: sha512-EyUPtOKyTYq+iMOszO42eobQllaIjJnwkZ2U93aJzNyPibCy7CEvT9UQnaCVB51IAd49gbNdCew1c0LcLTCB2g==}
jose@6.1.3:
resolution: {integrity: sha512-0TpaTfihd4QMNwrz/ob2Bp7X04yuxJkjRGi4aKmOqwhov54i6u79oCv7T+C7lo70MKH6BesI3vscD1yb/yzKXQ==}
joycon@3.1.1:
resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==}
engines: {node: '>=10'}
@@ -14865,8 +14875,8 @@ packages:
jwa@1.4.2:
resolution: {integrity: sha512-eeH5JO+21J78qMvTIDdBXidBd6nG2kZjg5Ohz/1fpa28Z4CcsWUzJ1ZZyFq/3z3N17aZy+ZuBoHljASbL1WfOw==}
jws@3.2.2:
resolution: {integrity: sha512-YHlZCB6lMTllWDtSPHz/ZXTsi8S00usEV6v1tjq8tOUZzw7DpSDWVXjXDre6ed1w/pd495ODpHZYSdkRTsa0HA==}
jws@3.2.3:
resolution: {integrity: sha512-byiJ0FLRdLdSVSReO/U4E7RoEyOCKnEnEPMjq3HxWtvzLsV08/i5RQKsFVNkCldrCaPr2vDNAOMsfs8T/Hze7g==}
katex@0.16.25:
resolution: {integrity: sha512-woHRUZ/iF23GBP1dkDQMh1QBad9dmr8/PAwNA54VrSOVYgI12MAcE14TqnDdQOdzyEonGzMepYnqBMYdsoAr8Q==}
@@ -19903,6 +19913,11 @@ packages:
peerDependencies:
zod: ^3.24.1
zod-to-json-schema@3.25.0:
resolution: {integrity: sha512-HvWtU2UG41LALjajJrML6uQejQhNJx+JBO9IflpSja4R03iNWfKXrj6W2h7ljuLyc1nKS+9yDyL/9tD1U/yBnQ==}
peerDependencies:
zod: ^3.25 || ^4
zod-validation-error@1.5.0:
resolution: {integrity: sha512-/7eFkAI4qV0tcxMBB/3+d2c1P6jzzZYdYSlBuAklzMuCrJu5bzJfHS0yVAS87dRHVlhftd6RFJDIvv03JgkSbw==}
engines: {node: '>=16.0.0'}
@@ -24066,20 +24081,22 @@ snapshots:
'@microsoft/fetch-event-source@2.0.1': {}
'@modelcontextprotocol/sdk@1.17.1(supports-color@10.0.0)':
'@modelcontextprotocol/sdk@1.24.3(supports-color@10.0.0)(zod@3.25.76)':
dependencies:
ajv: 6.12.6
ajv: 8.17.1
ajv-formats: 3.0.1(ajv@8.17.1)
content-type: 1.0.5
cors: 2.8.5
cross-spawn: 7.0.6
eventsource: 3.0.5
eventsource-parser: 3.0.0
eventsource-parser: 3.0.6
express: 5.0.1(supports-color@10.0.0)
express-rate-limit: 7.5.0(express@5.0.1(supports-color@10.0.0))
jose: 6.1.3
pkce-challenge: 5.0.0
raw-body: 3.0.0
zod: 3.25.76
zod-to-json-schema: 3.24.5(zod@3.25.76)
zod-to-json-schema: 3.25.0(zod@3.25.76)
transitivePeerDependencies:
- supports-color
@@ -35681,6 +35698,8 @@ snapshots:
jose@6.0.8: {}
jose@6.1.3: {}
joycon@3.1.1: {}
js-beautify@1.15.1:
@@ -35778,7 +35797,7 @@ snapshots:
jsonwebtoken@9.0.2:
dependencies:
jws: 3.2.2
jws: 3.2.3
lodash.includes: 4.3.0
lodash.isboolean: 3.0.3
lodash.isinteger: 4.0.4
@@ -35809,7 +35828,7 @@ snapshots:
ecdsa-sig-formatter: 1.0.11
safe-buffer: 5.2.1
jws@3.2.2:
jws@3.2.3:
dependencies:
jwa: 1.4.2
safe-buffer: 5.2.1
@@ -38792,7 +38811,7 @@ snapshots:
react: 19.1.0
scheduler: 0.26.0
react-email@2.1.2(@opentelemetry/api@1.9.0)(@swc/helpers@0.5.15)(bufferutil@4.0.9)(eslint@8.31.0):
react-email@2.1.2(@opentelemetry/api@1.9.0)(@swc/helpers@0.5.15)(eslint@8.31.0):
dependencies:
'@babel/parser': 7.24.1
'@radix-ui/colors': 1.0.1
@@ -38829,8 +38848,8 @@ snapshots:
react: 18.3.1
react-dom: 18.2.0(react@18.3.1)
shelljs: 0.8.5
socket.io: 4.7.3(bufferutil@4.0.9)
socket.io-client: 4.7.3(bufferutil@4.0.9)
socket.io: 4.7.3
socket.io-client: 4.7.3
sonner: 1.3.1(react-dom@18.2.0(react@18.3.1))(react@18.3.1)
source-map-js: 1.0.2
stacktrace-parser: 0.1.10
@@ -39951,7 +39970,7 @@ snapshots:
- supports-color
- utf-8-validate
socket.io-client@4.7.3(bufferutil@4.0.9):
socket.io-client@4.7.3:
dependencies:
'@socket.io/component-emitter': 3.1.0
debug: 4.3.7(supports-color@10.0.0)
@@ -39980,7 +39999,7 @@ snapshots:
transitivePeerDependencies:
- supports-color
socket.io@4.7.3(bufferutil@4.0.9):
socket.io@4.7.3:
dependencies:
accepts: 1.3.8
base64id: 2.0.0
@@ -42016,6 +42035,10 @@ snapshots:
dependencies:
zod: 3.25.76
zod-to-json-schema@3.25.0(zod@3.25.76):
dependencies:
zod: 3.25.76
zod-validation-error@1.5.0(zod@3.25.76):
dependencies:
zod: 3.25.76