dependabot fixes

[akshaydeo]

Summary

Bumps several transitive dependencies to newer versions to address potential security vulnerabilities and keep lockfiles up to date.

Changes

• ip-address upgraded from 10.2.0 to 10.3.1 in the temperature and test-tools-server MCP example lockfiles
• nanoid upgraded from 3.3.12 to 3.3.16 in the ui and TypeScript integration test lockfiles
• postcss upgraded from 8.5.15 to 8.5.24 in the ui and TypeScript integration test lockfiles
• golang.org/x/net upgraded from v0.33.0 to v0.55.0 in the realtime-test script
• Removed erroneous "peer": true flags from several packages in the TypeScript integration test lockfile, correcting their classification as direct or dev dependencies

Type of change

• Bug fix
• Feature
• Refactor
• Documentation
• Chore/CI

Affected areas

• Core (Go)
• Transports (HTTP)
• Providers/Integrations
• Plugins
• UI (React)
• Docs

How to test

# UI
cd ui
npm i
npm run build

# TypeScript integrations
cd tests/integrations/typescript
npm i
npm test

Breaking changes

• Yes
• No

Security considerations

golang.org/x/net v0.33.0 contained known vulnerabilities. Upgrading to v0.55.0 resolves those. The nanoid and postcss upgrades similarly address reported issues in the older patch versions.

Checklist

• I read docs/contributing/README.md and followed the guidelines
• I added/updated tests where appropriate
• I updated documentation where needed
• I verified builds succeed (Go and UI)
• I verified the CI pipeline passes locally if applicable

[akshaydeo]

• dependabot fixes #5889 👈 (View in Graphite)
• dev

This stack of pull requests is managed by Graphite. Learn more about stacking.

[coderabbitai]

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Updated an internal networking dependency used by realtime testing tools.
  • No user-visible features or behavior changes.

Walkthrough

The realtime test module updates its indirect golang.org/x/net dependency from v0.33.0 to v0.55.0.

Changes

Realtime test dependency

Layer / File(s)	Summary
Update indirect network dependency scripts/realtime-test/go.mod	Updates the indirect golang.org/x/net dependency from v0.33.0 to v0.55.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: pratham-mishra04

🚥 Pre-merge checks | ✅ 2 | ❌ 3

❌ Failed checks (2 warnings, 1 inconclusive)

Check name	Status	Explanation	Resolution
Linked Issues check	⚠️ Warning	The PR updates a Go dependency but provides no implementation of the Files API support requested by issue #123.	Implement the required Files API support for the target providers and endpoints, or link this PR to the correct dependency-update issue.
Out of Scope Changes check	⚠️ Warning	The dependency update is unrelated to the Files API support objective in issue #123.	Remove the unrelated dependency change from this PR or update the linked issue and objectives to cover the dependency update.
Title check	❓ Inconclusive	The title identifies dependency maintenance but is too generic to communicate the specific dependency updates.	Use a specific title such as "Update vulnerable transitive dependencies" to identify the primary change.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description check	✅ Passed	The description covers the main template sections, lists dependency changes, testing commands, security impact, and checklist status.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch 08-05-dependabot_fixes

---

_{Comment @coderabbitai help to get the list of available commands.}

[akshaydeo]

Merge activity

• Aug 6, 6:16 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Aug 6, 6:17 AM UTC: @akshaydeo merged this pull request with Graphite.