frame-stream

frame-stream copied to clipboard

Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. Commits 74b2db2 3.0.3 88f1429 update eslint. lint, fix unit tests. 415d660 Snyk js braces 6838727 (#40) 190510f fix tests, skip 1 test in test/braces.expand...

dependabot[bot]

Use of deprecated `util._extend` API

1

After starting my project with node version v22.14.0 (current LTS), I got a deprecation warning which I could trace back to the `frame-stream` package using the `--trace-deprecation` flag: ``` (node:58294)...

bxt

As described in https://github.com/davedoesdev/frame-stream/issues/23 this project uses the [deprecated](https://nodejs.org/api/deprecations.html#DEP0060) `util._extend` of node's utils package in the code here in the constructor of `Decoder` to merge the options with the default...

bxt

Bumps [qs](https://github.com/ljharb/qs) from 6.14.0 to 6.14.1. Changelog Sourced from qs's changelog. 6.14.1 [Fix] ensure arrayLength applies to [] notation as well [Fix] parse: when a custom decoder returns null for...

dependabot[bot]

Bumps [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) from 1.11.0 to 1.24.0. Release notes Sourced from @​modelcontextprotocol/sdk's releases. 1.24.0 Summary This release brings us up to speed with the latest MCP spec 2025-11-25. Take a look...

dependabot[bot]

Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1. Release notes Sourced from express's releases. v5.2.1 What's Changed Release: 5.2.1 by @​UlisesGascon in expressjs/express#6933 Full Changelog: https://github.com/expressjs/express/compare/v5.2.0...v5.2.1 v5.2.0 Important: Security Security fix for...

dependabot[bot]

Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0. Commits 56774ef 10.5.0 1e4e297 bin: Do not expose filenames to shell expansion See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve...

dependabot[bot]

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. Changelog Sourced from js-yaml's changelog. [4.1.1] - 2025-11-12 Security Fix prototype pollution issue in yaml merge (<<) operator. Commits cc482e7 4.1.1 released 50968b8 dist...

dependabot[bot]