Resolves CodeQL alert #83 by dropping manual PR head checkout in the
privileged issue_comment workflow and letting claude-code-action handle
PR refs with its built-in base-branch config restore.
* Fix/move-zod-to-peer (#1198)
* chore: update pnpm-lock.yaml and package.json to include zod dependency in mcp-use package and test_app configuration
* feat(cli): implement TypeScript file collection and transpilation with esbuild
- Added `collectTsFiles` function to gather TypeScript files based on tsconfig patterns using Node.js built-ins.
- Introduced `transpileWithEsbuild` function to handle TypeScript transpilation, improving performance and memory usage.
- Updated build command to utilize esbuild for transpilation and added an option to skip TypeScript type checking with `--no-typecheck`.
* chore: enter canary prerelease mode
* chore(typescript): version packages (canary)
* chore: update package dependencies in TypeScript libraries (#1199)
* chore: update package dependencies in TypeScript libraries
- Bump `qs` version from `>=6.14.1` to `>=6.14.2`.
- Add new dependencies: `flatted`, `tar`, `hono`, `@hono/node-server`, `express-rate-limit`, `dompurify`, `minimatch`, `rollup`, `@modelcontextprotocol/sdk`, `ai`, `ajv`, `axios`, `body-parser`, `brace-expansion`, `@isaacs/brace-expansion`, `form-data`, `lodash`, and `@eslint/plugin-kit`.
- Update `tar` version from `^7.5.9` to `^7.5.11` in multiple packages.
- Update `hono` version from `^4.11.10` to `^4.12.7` in relevant packages.
- Update `@modelcontextprotocol/sdk` version from `^1.26.0` to `^1.27.1` in relevant packages.
- Update `express-rate-limit` version from `^7.4.1` to `>=8.2.2` in the example server feature.
* chore: remove ajv dependency from TypeScript libraries
- Removed `ajv` dependency from `package.json` and `pnpm-lock.yaml`.
- Updated peer dependencies for `ajv-formats` to use `^8.0.0` instead of `>=8.18.0`.
- Added new dependencies: `fast-json-stable-stringify`, `json-schema-traverse`, and `uri-js` with their respective versions.
* fix: ensure widget parameter is non-null in setupWidgetRoutes
- Updated the widget parameter retrieval in setupWidgetRoutes to use a non-null assertion, ensuring that the widget variable is always defined when serving static assets and widget index.html files.
* chore(typescript): version packages (canary)
* fix(typescript): use file:// URL in tsImport to fix Windows crash (#1193)
* fix(typescript): use file:// URL in tsImport to fix Windows crash
The tsImport call was passing serverFilePath (raw OS path) instead of
serverFileUrl (file:// URL), causing ERR_UNSUPPORTED_ESM_URL_SCHEME on Windows.
Fixes#1171
* fix(typescript): also fix file:// URL in generate-types and add Windows CI
The original fix addressed tsImport in the dev command but missed the
same bug in generateToolRegistryTypesForServer (used by generate-types
and postinstall). Also adds Windows to the CLI test matrix so
platform-specific path issues are caught in CI.
* fix(typescript): fix Windows path separator issues in CLI tests
- display-package-versions: use path.join instead of hardcoded forward-slash path
- tsx-resolution: use path.join in assertions to handle backslash separators
- cli-integration: skip when dist/index.cjs build artifact is missing
---------
Co-authored-by: Enrico Toniato <2827496+tonxxd@users.noreply.github.com>
* chore(typescript): version packages (canary)
* fix(workflows): enhance environment variable usage in GitHub Actions
- Updated multiple workflow files to use environment variables for better readability and maintainability.
- Replaced direct references to GitHub context variables with environment variables in `claude.yml`, `conformance.yml`, `create-app-e2e-canary.yml`, `railway-deploy.yml`, and `typescript-pr-preview.yml`.
- Improved conditional checks in scripts to utilize these environment variables, streamlining the workflow logic.
* refactor(tests): format playwrightArgs for better readability
- Reformatted the addition of `--grep-invert` arguments in the run-test-matrix script to improve code clarity and maintainability.
* refactor(cli, mcp-use): update type generation functions to return success status (#1201)
- Modified `generateToolRegistryTypesForServer` and `generateToolRegistryTypes` to return a boolean indicating success or failure instead of void.
- Updated CLI commands to handle and log success or error messages based on the type generation outcome.
- Enhanced error handling in type generation to prevent server crashes while providing feedback on failures.
* chore(typescript): version packages (canary)
* chore(docs): update changelog for v0.24.5 and v1.21.5 releases
- Added entries for v0.24.5, detailing dependency updates and fixes for security alerts.
- Included v1.21.5 changes, highlighting Zod peer dependency adjustments, esbuild transpilation improvements, and Windows path handling fixes.
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: guoyangzhen <upgyz@qq.com>
Enrico Toniato