Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bitwarden/mcp-server).

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] [deps]: Update github-action minor (`actions/checkout`, `actions/setup-node`, `docker/build-push-action`, `docker/login-action`)
- [ ] [deps]: Update npm minor (`@jest/globals`, `@modelcontextprotocol/sdk`, `@types/node`, `eslint`, `globals`, `jest`, `lint-staged`, `prettier`, `ts-jest`, `typescript-eslint`, `zod`)
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [[deps]: Update @bitwarden/cli to v2026.8.0](../pull/234)
- [ ] [[deps]: Update @modelcontextprotocol/inspector to v2](../pull/235)
- [ ] [[deps]: Update actions/setup-node action to v7](../pull/236)
- [ ] [[deps]: Update typescript to v7](../pull/237)
- [ ] [[deps]: Lock file maintenance](../pull/238)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

dockerfile (1)

Dockerfile

github-actions (7)

.github/workflows/build.yml (6)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e` → [Updates: `v6.5.0`, `v7.0.0`]
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee` → [Updates: `v4.6.0`]
- `docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf` → [Updates: `v7.3.0`]
- `sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6`

.github/workflows/publish-npm.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/publish.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/release.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/respond.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/review-code.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/test.yml (5)

- `actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0` → [Updates: `v7.0.1`]
- `actions/setup-node v6.4.0@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e` → [Updates: `v6.5.0`, `v7.0.0`]
- `dorny/test-reporter v3.0.0@a43b3a5f7366b97d083190328d2c652e1a8b6aa2`
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f`
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f`

npm (1)

package.json (18)

- `@modelcontextprotocol/sdk 1.29.0` → [Updates: `1.30.0`]
- `shx 0.4.0`
- `zod 4.4.3` → [Updates: `4.5.4`]
- `@eslint/js 10.0.1`
- `@jest/globals 30.4.1` → [Updates: `30.5.1`]
- `@modelcontextprotocol/inspector 0.22.0` → [Updates: `2.5.0`]
- `@types/jest 30.0.0`
- `@types/node 24.13.2` → [Updates: `24.13.3`]
- `eslint 10.6.0` → [Updates: `10.10.0`]
- `globals 17.7.0` → [Updates: `17.12.0`]
- `husky 9.1.7`
- `jest 30.4.2` → [Updates: `30.5.1`]
- `jest-junit 17.0.0`
- `lint-staged 17.0.8` → [Updates: `17.5.0`]
- `prettier 3.9.4` → [Updates: `3.9.6`]
- `ts-jest 29.4.11` → [Updates: `29.4.12`]
- `typescript 5.9.3` → [Updates: `7.0.2`]
- `typescript-eslint 8.62.1` → [Updates: `8.69.0`]

regex (1)

Dockerfile (1)

- `@bitwarden/cli 2026.6.0` → [Updates: `2026.8.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the dependency entries in package.json, Dockerfile, and the listed .github/workflows files, then review the linked Renovate pull requests 234-238. Done means the selected dependency updates are handled and the corresponding dashboard entries no longer require action.

Written by the indexing model from the issue text.