build(deps): bump the production-dependencies group across 1 directory with 10 updates

[dependabot]

Bumps the production-dependencies group with 10 updates in the / directory:

Package	From	To
three	0.185.1	0.186.1
vscode-languageserver	10.1.0	10.1.2
vscode-languageserver-textdocument	1.0.14	1.0.15
@modelcontextprotocol/sdk	1.30.0	1.31.0
zod	4.4.3	4.6.5
@codemirror/commands	6.11.0	6.11.1
@codemirror/state	6.7.1	6.7.6
@codemirror/view	6.43.10	6.43.13
@lezer/highlight	1.2.3	1.2.5
vscode-languageclient	10.1.0	10.1.2

Updates three from 0.185.1 to 0.186.1

Commits

• See full diff in compare view

Updates vscode-languageserver from 10.1.0 to 10.1.2

Commits

• d776b6e Prepare new release
• 87f5872 Expose null progress reporter detection (#1827)
• 67724c1 Fall back to a full result when previousResult gets an unknown id (#1858)
• 5351a23 Enable publishing to Azure Artifacts (#1847)
• 8fe8390 redirect console.info to avoid corrupting stdio (#1841)
• a180df4 Release version 3.18.3 and update lock files (#1844)
• 93d5fe6 feat(server): support document ranges formatting (#1823)
• 0da5527 Merge latest release into main (#1817)
• See full diff in compare view

Updates vscode-languageserver-textdocument from 1.0.14 to 1.0.15

Release notes

Sourced from vscode-languageserver-textdocument's releases.

release/textDocument/1.0.15

Changes:

• #1864: Remove publishPackageToAzureArtifacts property
• #1854: Include error code and message in the 'Sending response' trace log
• #1853: Route jsonrpc connection logging to the output channel instead of console
• #1827: Expose null progress reporter detection
• #1855: Fix unhandled rejection when writing a JSON-RPC request fails
• #1856: Bump js-yaml from 4.3.1 to 4.3.2
• #1858: Fall back to a full result when previousResult gets an unknown id
• #1846: Fix socket transport when TransportKind.socket uses port 0
• #1850: Bump fast-uri from 3.1.5 to 3.1.7
• #1851: Bump browserslist from 4.28.1 to 4.28.8

• #1852: Bump @​humanfs/node from 0.16.7 to 0.16.8
• #1848: Align implementation with specification
• #1847: Enable publishing to Azure Artifacts
• #1841: redirect console.info to avoid corrupting stdio
• #1844: Release version 3.18.3 and update lock files
• #1843: 3.18.3 release and lock file updates

This list of changes was auto generated.

Commits

• See full diff in compare view

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.31.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.31.0

Upgrade notes

• Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.
• Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

• [v1.x] Bind stored OAuth credentials to the authorization server that issued them by @​maxisbey in modelcontextprotocol/typescript-sdk#2888
• chore: bump version to 1.31.0 by @​claude[bot] in modelcontextprotocol/typescript-sdk#2890

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.1...1.31.0

1.30.1

What's Changed

• [v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length by @​maxisbey in modelcontextprotocol/typescript-sdk#2717
• fix(auth): preserve resource URI without trailing slash (#1968) by @​MukundaKatta in modelcontextprotocol/typescript-sdk#1972
• chore: bump version to 1.30.1 by @​claude[bot] in modelcontextprotocol/typescript-sdk#2848

New Contributors

• @​MukundaKatta made their first contribution in modelcontextprotocol/typescript-sdk#1972

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.0...1.30.1

Commits

• 4b0051f chore: bump version to 1.31.0 (#2890)
• 51ad4f0 [v1.x] Bind stored OAuth credentials to the authorization server that issued ...
• 289ac2c chore: bump version to 1.30.1 (#2848)
• 12b4256 fix(auth): preserve resource URI without trailing slash (#1968) (#1972)
• a9f6eb7 [v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON...
• See full diff in compare view

Updates zod from 4.4.3 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

• d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
• f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
• ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
• cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
• 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
• 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

• d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
• ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
• 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
• f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

• 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
• 75d63ee1 docs: show only the .properties() method form in the 4.6 post
• 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

• 9446b5cc fix: preserve undefined prefault outputs and object keys (#6587) — closes #6585
• 0c483c58 docs: the Zod 4.6 announcement post (#6546)
• a00c3f34 docs: use Trigger.dev's brand-kit lockups for the platinum card

v4.6.1

A patch on top of 4.6.0.

• b12aa523 fix: preserve unique tags with defaulted discriminators (#6582) — closes #6577
• dd9c36fa fix(v4): defer recursive object index inference (#6580)
• 3b154992 feat(lang): add Tajik (tg) locale (#6581) by @​ismoil77
• 2efa8b80 ci: give the npm wait a real budget and drop the back-publish path (#6583)

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits

• 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
• 0f3f5ee 4.6.5
• cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
• ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
• 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
• de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
• 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
• 743aedb 4.6.4
• Additional commits viewable in compare view

Updates @codemirror/commands from 6.11.0 to 6.11.1

Commits

• See full diff in compare view

Updates @codemirror/state from 6.7.1 to 6.7.6

Commits

• See full diff in compare view

Updates @codemirror/view from 6.43.10 to 6.43.13

Commits

• See full diff in compare view

Updates @lezer/highlight from 1.2.3 to 1.2.5

Commits

• See full diff in compare view

Updates vscode-languageclient from 10.1.0 to 10.1.2

Commits

• d776b6e Prepare new release
• a7ca284 Route jsonrpc connection logging to the output channel instead of console (#1...
• 5010cdf Fix socket transport when TransportKind.socket uses port 0 (#1846)
• 5351a23 Enable publishing to Azure Artifacts (#1847)
• a180df4 Release version 3.18.3 and update lock files (#1844)
• 2ffaa4d Add configurable language server stream handlers (#1839)
• d6ff6d0 Preserve diagnostic pull state after quick document reopen (#1835)
• f99697b Update dependencies (#1834)
• 0b6b07c Bump brace-expansion from 5.0.7 to 5.0.9 in /client (#1831)
• a9befc8 Bump brace-expansion from 5.0.6 to 5.0.7 in /client (#1824)
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
posecode	Ready	Preview	Oct 4, 2026 2:07pm UTC

[a-baran-orhan]

Eski taban dalında kaldığı ve Changesets kuralı nedeniyle CI başarısız olduğu için kapatıldı.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml