Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Jan 30, 2026

Bundles Dependabot PRs #12099 (hono security fixes) and #12009 (sentry update) for .github/workflows dependencies.

Changes

Dependencies:

  • @sentry/mcp-server: 0.27.0 → 0.29.0
  • hono: 4.11.4 → 4.11.7 (now direct dependency, was peer dependency via @hono/node-server)

Rationale for hono as direct dependency:
As a peer dependency, npm won't auto-upgrade it. Pinning directly ensures security fixes in 4.11.7 are enforced.

Configuration updates:

  • .github/workflows/shared/mcp/sentry.md: Updated npx invocation to @sentry/[email protected]
  • .github/workflows/mcp-inspector.lock.yml: Recompiled to propagate sentry version change

Security:
npm audit clean, 0 vulnerabilities.

Original prompt

This section details on the original issue you should resolve

<issue_title>Bundle npm dependencies for .github/workflows</issue_title>
<issue_description>This issue bundles 2 Dependabot PRs for npm dependencies in .github/workflows.

PRs included:

Instructions:
Review and merge these workflow dependency updates together. Note that #12099 includes security fixes and should be prioritized.


Campaign: dependabot-burner
Runtime: npm
Manifest: .github/workflows/package.json

AI generated by Dependabot Burner

Comments on the Issue (you are @copilot in this section)


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Copilot AI changed the title [WIP] Bundle npm dependencies for GitHub workflows Bundle npm dependency updates: @sentry/mcp-server 0.29.0, hono 4.11.7 Jan 30, 2026
Copilot AI requested a review from pelikhan January 30, 2026 06:23
@mnkiefer mnkiefer closed this Jan 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bundle npm dependencies for .github/workflows

3 participants