What is the Neural Link?

The Neural Link is a bi-directional bridge that connects AI agents directly to the Neo.mjs runtime. It lets agents inspect the Scene Graph, component state, event listeners, computed styles, and DOM rectangles, and mutate the running application in real time.

Why is Neo.mjs called an Application Engine instead of a framework?

Neo.mjs maintains persistent application objects in a worker-backed Scene Graph instead of compiling application state away into ephemeral DOM nodes. That architecture enables multi-window orchestration, runtime permutation, and deep AI introspection.

What is Context Engineering?

Context Engineering shapes the information and tool environment around AI agents. Neo.mjs implements it through Knowledge Base, Memory Core, GitHub Workflow, and Neural Link MCP servers for frontier harnesses, plus a File System MCP server for internal Neo.ai.Agent local loops.

What is the Neo.mjs Agent OS?

The Neo.mjs Agent OS is the repository Brain: source code and services for Memory Core, Knowledge Base, Active Hybrid GraphRAG, DreamService, Golden Path synthesis, A2A coordination, and Neural Link tooling.

Neo.mjs - Self-Evolving Software Organism

Frontmatter

title	chore(deps): bump ip-address and express-rate-limit
author	dependabot
state	Merged
createdAt	May 7, 2026, 12:48 AM
updatedAt	May 7, 2026, 12:54 AM
closedAt	May 7, 2026, 12:54 AM
mergedAt	May 7, 2026, 12:54 AM
branches	`dev` ← `dependabot/npm_and_yarn/multi-7bdfbe8666`
url	https://github.com/neomjs/neo/pull/10851

Merged

dependabot commented on May 7, 2026, 12:48 AM

Bumps ip-address and express-rate-limit. These dependencies needed to be updated together. Updates ip-address from 10.0.1 to 10.2.0

Commits

See full diff in compare view

Updates express-rate-limit from 8.2.1 to 8.5.1

Release notes

Sourced from express-rate-limit's releases.

v8.5.1

You can view the changelog here.

v8.5.0

You can view the changelog here.

v8.4.1

You can view the changelog here.

v8.4.0

You can view the changelog here.

v8.3.2

You can view the changelog here.

v8.3.1

You can view the changelog here.

v8.3.0

You can view the changelog here.

Commits

50cc3f6 8.5.1
92c8e3e chore: bump ip-address library to latest (#626)
807e383 8.5.0
b844137 v8.5.0 changelog
ceaffab feat: async store init (#621)
69568d4 8.4.1
c686acd v8.4.1 changelog
ba71353 test: bump timeout in flakey skipFailedRequests test (#618)
dd4c894 feat: allow usage of custom logger (#616)
2bb343c resolve Jest timeout for server-based tests (#617)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express-rate-limit since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.