chore(deps): bump the production-dependencies group with 4 updates

[dependabot]

Bumps the production-dependencies group with 4 updates: typescript, @tanstack/virtual-core, @tanstack/react-virtual and add-mcp.

Updates typescript from 6.0.3 to 7.0.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates @tanstack/virtual-core from 3.17.4 to 3.17.5

Release notes

Sourced from @​tanstack/virtual-core's releases.

@​tanstack/virtual-core@​3.17.5

Patch Changes

• #1230 1e3b908 - Clamp the tracked scrollOffset at 0 when applying end-anchor measurement compensation and when re-anchoring in setOptions. Previously, with anchorTo: 'end' and content shorter than the viewport, items measuring smaller than their estimates drove the tracked offset negative with no scroll event to ever correct it — getDistanceFromEnd() reported a permanent phantom distance and iOS deferred measurement corrections stayed wedged forever.

• #1235 7dcfc07 - Stop iOS-deferred scroll adjustments from replaying stale deltas after the position is already correct (#1233). On iOS WebKit the end-anchored virtualizer defers scroll compensation while the scroller is live and replays it once settled, but two cases replayed a delta whose premise no longer held:

  • Absolute scroll commands (scrollToOffset / scrollToIndex / scrollToEnd) derive their target from current measurements, so a pending deferred delta is already stale — it now invalidates the deferral instead of letting it replay and shift the list off the just-established position. Relative commands (scrollBy) keep the deferral.
  • At the end clamp with anchorTo: 'end', a row above the viewport re-measuring smaller lets the browser clamp scrollTop onto the new bottom (already the correct position); the flush now drops the stale negative compensation instead of replaying it and lifting the view off the bottom. Positive deltas still replay, since content growth above does not clamp.

Changelog

Sourced from @​tanstack/virtual-core's changelog.

3.17.5

Patch Changes

• #1230 1e3b908 - Clamp the tracked scrollOffset at 0 when applying end-anchor measurement compensation and when re-anchoring in setOptions. Previously, with anchorTo: 'end' and content shorter than the viewport, items measuring smaller than their estimates drove the tracked offset negative with no scroll event to ever correct it — getDistanceFromEnd() reported a permanent phantom distance and iOS deferred measurement corrections stayed wedged forever.

• #1235 7dcfc07 - Stop iOS-deferred scroll adjustments from replaying stale deltas after the position is already correct (#1233). On iOS WebKit the end-anchored virtualizer defers scroll compensation while the scroller is live and replays it once settled, but two cases replayed a delta whose premise no longer held:

  • Absolute scroll commands (scrollToOffset / scrollToIndex / scrollToEnd) derive their target from current measurements, so a pending deferred delta is already stale — it now invalidates the deferral instead of letting it replay and shift the list off the just-established position. Relative commands (scrollBy) keep the deferral.
  • At the end clamp with anchorTo: 'end', a row above the viewport re-measuring smaller lets the browser clamp scrollTop onto the new bottom (already the correct position); the flush now drops the stale negative compensation instead of replaying it and lifting the view off the bottom. Positive deltas still replay, since content growth above does not clamp.

Commits

• 87f689a ci: Version Packages (#1231)
• ba5c47a feat(angular-virtual): add chat example and require Angular 20 (#1228)
• 7dcfc07 fix(virtual-core): stop iOS deferred scroll adjustments from replaying stale ...
• 1e3b908 fix(virtual-core): clamp tracked scrollOffset at 0 in end-anchor compensation...
• See full diff in compare view

Updates @tanstack/react-virtual from 3.14.6 to 3.14.7

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.7

Patch Changes

• Updated dependencies [1e3b908, 7dcfc07]:
  • @​tanstack/virtual-core@​3.17.5

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.7

Patch Changes

• Updated dependencies [1e3b908, 7dcfc07]:
  • @​tanstack/virtual-core@​3.17.5

Commits

• 87f689a ci: Version Packages (#1231)
• ba5c47a feat(angular-virtual): add chat example and require Angular 20 (#1228)
• See full diff in compare view

Updates add-mcp from 1.13.0 to 1.14.0

Release notes

Sourced from add-mcp's releases.

v1.14.0

What's Changed

• move the default find / search registry to its new home at https://add-mcp.com/registry/api/v1/servers (label: "add-mcp registry"). The previous mcp.agent-tooling.dev URL keeps working; saved configs referencing it are migrated automatically on the next find / search run (custom labels are preserved, duplicates are deduped).

Full Changelog: neon-solutions/add-mcp@v1.13.3...v1.14.0

v1.13.3

• show registry result install targets, such as remote MCP URLs or package names, instead of reverse-domain registry IDs in find / search selection rows.

v1.13.2

• make find / search default to the integrations.sh registry on first run instead of prompting for an initial registry selection.

v1.13.1

• expand the find / search registry from integrations.sh data and update registry messaging to point maintainers to integrations.sh.

Changelog

Sourced from add-mcp's changelog.

[1.14.0] - 2026-07-06

• move the default find / search registry to its new home at https://add-mcp.com/registry/api/v1/servers (label: "add-mcp registry"). The previous mcp.agent-tooling.dev URL keeps working; saved configs referencing it are migrated automatically on the next find / search run (custom labels are preserved, duplicates are deduped).

[1.13.3] - 2026-07-06

• show registry result install targets, such as remote MCP URLs or package names, instead of reverse-domain registry IDs in find / search selection rows.

[1.13.2] - 2026-07-06

• make find / search default to the integrations.sh registry on first run instead of prompting for an initial registry selection.

[1.13.1] - 2026-07-05

• expand the find / search registry from integrations.sh data and update registry messaging to point maintainers to integrations.sh.

Commits

• 75bf1a5 Move default find registry to add-mcp.com/registry with auto-migration (#69)
• efac078 Add add-mcp.com website: landing page + docs (Blume), /registry proxy (#68)
• 7009543 Show install targets in find results (#67)
• 47d7a6a default find to integrations registry (#66)
• 055c54e chore: release v1.13.1
• 557cd1a [codex] move integrations registry data into add-mcp (#65)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[greptile-apps]

PR author is in the excluded authors list.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​tanstack/​react-virtual@​3.14.7
	@​tanstack/​virtual-core@​3.17.5
	add-mcp@​1.14.0

View full report