build(deps): bump the dependencies group across 1 directory with 19 updates by dependabot[bot] · Pull Request #64 · Ic3burG/OrgTree

dependabot · 2026-04-23T17:19:09Z

Bumps the dependencies group with 17 updates in the /server directory:

Package	From	To
@sentry/node	`10.38.0`	`10.50.0`
@simplewebauthn/server	`13.2.2`	`13.3.0`
better-sqlite3	`12.6.2`	`12.9.0`
express-rate-limit	`8.2.1`	`8.4.0`
otplib	`13.3.0`	`13.4.0`
resend	`6.9.2`	`6.12.2`
uuid	`13.0.0`	`14.0.0`
yaml	`2.8.2`	`2.8.3`
@eslint/js	`9.39.2`	`10.0.1`
@types/node	`25.2.3`	`25.6.0`
@types/supertest	`6.0.3`	`7.2.0`
@typescript-eslint/eslint-plugin	`8.55.0`	`8.59.0`
@vitest/coverage-v8	`4.0.18`	`4.1.5`
dotenv	`17.3.0`	`17.4.2`
eslint	`9.39.2`	`10.2.1`
prettier	`3.8.1`	`3.8.3`
typescript	`5.9.3`	`6.0.3`

Updates @sentry/node from 10.38.0 to 10.50.0

Release notes

Sourced from @sentry/node's releases.

10.50.0

Important Changes

feat(effect): Support v4 beta (#20394)

The @sentry/effect integration now supports Effect v4 beta, enabling Sentry instrumentation for the latest Effect framework version. Read more in the Effect SDK readme.

feat(hono): Add @sentry/hono/bun for Bun runtime (#20355)

A new @sentry/hono/bun entry point adds first-class support for running Hono applications instrumented with Sentry on the Bun runtime. Read more in the Hono SDK readme.

feat(replay): Add replayStart/replayEnd client lifecycle hooks (#20369)

New replayStart and replayEnd client lifecycle hooks let you react to replay session start and end events in your application.

Other Changes

feat(core): Emit no_parent_span client outcomes for discarded spans requiring a parent (#20350)

feat(deps): Bump protobufjs from 7.5.4 to 7.5.5 (#20372)

feat(hono): Add runtime packages as optional peer dependencies (#20423)

feat(opentelemetry): Add tracingChannel utility for context propagation (#20358)

fix(browser): Enrich graphqlClient spans for relative URLs (#20370)

fix(browser): Filter implausible LCP values (#20338)

fix(cloudflare): Use TransformStream to keep track of streams (#20452)

fix(console): Re-patch console in AWS Lambda runtimes (#20337)

fix(core): Correct GoogleGenAIIstrumentedMethod typo in type name

fix(core): Handle stateless MCP wrapper transport correlation (#20293)

fix(hono): Remove undefined from options type (#20419)

fix(node): Guard against null httpVersion in outgoing request span attributes (#20430)

fix(node-core): Pass rejection reason instead of Promise as originalException (#20366)

chore: Ignore claude worktrees (#20440)

chore: Prevent test from creating zombie process (#20392)

chore: Update size-limit (#20412)

chore(dev-deps): Bump nx from 22.5.0 to 22.6.5 (#20458)

chore(e2e-tests): Use tarball symlinks for E2E tests instead of verdaccio (#20386)

chore(lint): Remove lint warnings (#20413)

chore(test): Remove empty variant tests (#20443)

chore(tests): Use verdaccio as node process instead of docker image (#20336)

docs(readme): Update usage instructions for binary scripts (#20426)

ref(node): Vendor undici instrumentation (#20190)

test(aws-serverless): Ensure aws-serverless E2E tests run locally (#20441)

test(aws-serverless): Split npm & layer tests (#20442)

test(browser): Fix flaky sessions route-lifecycle test + upgrade axios (#20197)

test(cloudflare): Use .makeRequestAndWaitForEnvelope to wait for envelopes (#20208)

... (truncated)

Changelog

Sourced from @sentry/node's changelog.

10.50.0

Important Changes

feat(effect): Support v4 beta (#20394)

The @sentry/effect integration now supports Effect v4 beta, enabling Sentry instrumentation for the latest Effect framework version. Read more in the Effect SDK readme.

feat(hono): Add @sentry/hono/bun for Bun runtime (#20355)

A new @sentry/hono/bun entry point adds first-class support for running Hono applications instrumented with Sentry on the Bun runtime. Read more in the Hono SDK readme.

feat(replay): Add replayStart/replayEnd client lifecycle hooks (#20369)

New replayStart and replayEnd client lifecycle hooks let you react to replay session start and end events in your application.

Other Changes

feat(core): Emit no_parent_span client outcomes for discarded spans requiring a parent (#20350)

feat(deps): Bump protobufjs from 7.5.4 to 7.5.5 (#20372)

feat(hono): Add runtime packages as optional peer dependencies (#20423)

feat(opentelemetry): Add tracingChannel utility for context propagation (#20358)

fix(browser): Enrich graphqlClient spans for relative URLs (#20370)

fix(browser): Filter implausible LCP values (#20338)

fix(cloudflare): Use TransformStream to keep track of streams (#20452)

fix(console): Re-patch console in AWS Lambda runtimes (#20337)

fix(core): Correct GoogleGenAIIstrumentedMethod typo in type name

fix(core): Handle stateless MCP wrapper transport correlation (#20293)

fix(hono): Remove undefined from options type (#20419)

fix(node): Guard against null httpVersion in outgoing request span attributes (#20430)

fix(node-core): Pass rejection reason instead of Promise as originalException (#20366)

chore: Ignore claude worktrees (#20440)

chore: Prevent test from creating zombie process (#20392)

chore: Update size-limit (#20412)

chore(dev-deps): Bump nx from 22.5.0 to 22.6.5 (#20458)

chore(e2e-tests): Use tarball symlinks for E2E tests instead of verdaccio (#20386)

chore(lint): Remove lint warnings (#20413)

chore(test): Remove empty variant tests (#20443)

chore(tests): Use verdaccio as node process instead of docker image (#20336)

docs(readme): Update usage instructions for binary scripts (#20426)

ref(node): Vendor undici instrumentation (#20190)

test(aws-serverless): Ensure aws-serverless E2E tests run locally (#20441)

test(aws-serverless): Split npm & layer tests (#20442)

test(browser): Fix flaky sessions route-lifecycle test + upgrade axios (#20197)

... (truncated)

Commits

785e756 release: 10.50.0
ed26a19 Merge pull request #20461 from getsentry/prepare-release/10.50.0
7b584c4 meta(changelog): Update changelog for 10.50.0
39740da test(cloudflare): Use .makeRequestAndWaitForEnvelope to wait for envelopes (#...
c741030 test(aws-serverless): Split npm & layer tests (#20442)
f97076d chore(dev-deps): Bump nx from 22.5.0 to 22.6.5 (#20458)
4b4ac76 fix(node): Guard against null httpVersion in outgoing request span attribut...
7569b10 fix(cloudflare): Use TransformStream to keep track of streams (#20452)
a4c9686 test(hono): Add E2E tests for middleware spans (#20451)
ff23846 chore: Ignore claude worktrees (#20440)
Additional commits viewable in compare view

Updates @simplewebauthn/server from 13.2.2 to 13.3.0

Release notes

Sourced from @simplewebauthn/server's releases.

v13.3.0

[browser] startRegistration() and startAuthentication() will recognize punycode domains as valid domains when trying to identify why an error occurred (#750)

[server] A new verifyMDSBlob() helper method has been added to verify and extract metadata statements from FIDO MDS blobs. See the docs here for more info (#752)

v13.2.3

Changes

[server] Dependencies have been updated to fix a "Cannot get schema" error that may occur when verifying responses after upgrading to v13.2.0+ (#747)

Changelog

Sourced from @simplewebauthn/server's changelog.

v13.3.0

Changes:

[browser] startRegistration() and startAuthentication() will recognize punycode domains when trying to identify why an error occurred (#750)

[server] A new verifyMDSBlob() helper method has been added to verify and extract metadata statements from FIDO MDS blobs. See the docs here for more info (#752)

v13.2.3

Changes

[server] Dependencies have been updated to fix a "Cannot get schema" error that may occur when verifying responses after upgrading to v13.2.0+ (#747)

Commits

48e19ab Update version to 13.3.0
6bf921e Export as a helper
65e87a9 Rename method to verifyMDSBlob()
31d8314 Clean up from mdsBlobs removal
adf33d3 Remove mdsBlobs argument
2a6b4f0 Extract blob verification into new exported helper
972713b (Unrelated) Fix a docstring typo
8798082 Tweak data staleness warning message
08381fe Add test for loading offline MDS blob
ab8566a Reset metadata cache on initialization
Additional commits viewable in compare view

Updates better-sqlite3 from 12.6.2 to 12.9.0

Release notes

Sourced from better-sqlite3's releases.

v12.9.0

What's Changed

Update SQLite to version 3.53.0 in WiseLibs/better-sqlite3#1464

Full Changelog: WiseLibs/better-sqlite3@v12.8.0...v12.9.0

v12.8.0

What's Changed

Readme: requires Node.js v20 or later by @Prinzhorn in WiseLibs/better-sqlite3#1443

Update SQLite to version 3.51.3 in WiseLibs/better-sqlite3#1460

fix: use HolderV2() for PropertyCallbackInfo on V8 >= 12.5 by @tstone-1 in WiseLibs/better-sqlite3#1459

New Contributors

@tstone-1 made their first contribution in WiseLibs/better-sqlite3#1459

Why SQLite v3.51.3 instead of v3.52.0

From the SQLite team:

Some important issues have been found with version 3.52.0. In order to give us time to deal with those issues, we plan to withdraw the 3.52.0 release. In its place, we will put up a new 3.51.3 patch release that includes a fix for the recently discovered WAL-reset bug as well as other patches. This will happen probably within about the next twelve hours.

Hence, if you were planning to upgrade to 3.52.0 tomorrow (Friday, 2026-03-14), perhaps it would be better to wait a day or so for 3.51.3.

At some point we will do version 3.52.1 which will hopefully resolve the issues that have arisen with the 3.52.0 release.

Full Changelog: WiseLibs/better-sqlite3@v12.7.1...v12.8.0

v12.7.1

Also not a viable release

The V8 API change was more bonkers than expected. See v12.8.0.

What's Changed

fix: use Holder() instead of This() for Electron 41 compatibility by @mceachen in WiseLibs/better-sqlite3#1456

Roll back to SQLite to version 3.51.2 in WiseLibs/better-sqlite3#1457

Full Changelog: WiseLibs/better-sqlite3@v12.7.0...v12.7.1

v12.7.0

CAUTION: NOT A VIABLE RELEASE

Two (!!) reasons:

Electron v41 bit us and removed functions we were using, so a bunch of prebuilds are missing

From the SQLite team:

Some important issues have been found with version 3.52.0. In order to give us time to deal with those issues, we plan to withdraw the 3.52.0 release. In its place, we will put up a new 3.51.3 patch release that includes a fix for the recently discovered WAL-reset bug as well as other patches. This will happen probably within about the next twelve hours.

What's Changed

... (truncated)

Commits

4058d24 12.9.0
f653513 Update SQLite to version 3.53.0 (#1464)
fe774f5 12.8.0
8617ed6 fix: use HolderV2() for PropertyCallbackInfo on V8 >= 12.5 (#1459)
959a018 Update SQLite to version 3.51.3 (#1460)
43729c0 Readme: requires Node.js v20 or later (#1443)
27dc751 12.7.1
db1119c Update SQLite to version 3.51.2 (#1457)
d2c4815 fix: use Holder() instead of This() for Electron 41 compatibility (#1456)
ef9ffce 12.7.0
Additional commits viewable in compare view

Updates express-rate-limit from 8.2.1 to 8.4.0

Release notes

Sourced from express-rate-limit's releases.

v8.4.0

You can view the changelog here.

v8.3.2

You can view the changelog here.

v8.3.1

You can view the changelog here.

v8.3.0

You can view the changelog here.

Commits

f3b7929 8.4.0
789e4cb docs: logger option & v8.4.0 changelog
86eca43 test: bump request timeout from 10ms to 50ms in flakey skipFailedRequests test
2bb343c resolve Jest timeout for server-based tests (#617)
c4dbb42 8.3.2
8f1cc66 v8.3.2 changelog
601b87f Fix skipFailedRequests for for connections that close very early (#611)
014c2f3 chore(deps-dev): bump the development-dependencies group with 6 updates (#612)
4e8b18b Remove Zuplo sponsorship details from README (#613)
31dab19 test: use numeric range for reset timestamp assertion (#610)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express-rate-limit since your current version.

Updates otplib from 13.3.0 to 13.4.0

Release notes

Sourced from otplib's releases.

v13.4.0

What's Changed

fix(deps): resolve markdown-it ReDoS vulnerability by @yeojz in yeojz/otplib#798

chore(deps-dev): bump the dev-dependencies-minor group with 3 updates by @dependabot[bot] in yeojz/otplib#800

chore: update dependabot to monthly cadence by @yeojz in yeojz/otplib#802

chore: upgrade dependencies to latest versions by @Copilot in yeojz/otplib#804

Upgrade pnpm to 10.30.1 to fix audit endpoint issue by @Copilot in yeojz/otplib#805

chore: override minimatch by @yeojz in yeojz/otplib#806

docs: improve package READMEs with accurate API context and usage examples by @yeojz in yeojz/otplib#803

Fix docs by @BobTheShoplifter in yeojz/otplib#807

ci: skip reporting job on fork PRs by @yeojz in yeojz/otplib#808

chore: override ajv to fix moderate ReDoS vulnerability by @yeojz in yeojz/otplib#809

feat: add IIFE/CDN build support to otplib by @yeojz in yeojz/otplib#810

fix: update release titles to use version-prefixed format by @yeojz in yeojz/otplib#811

chore: move otplib-cli to packages/ and sync versioning by @yeojz in yeojz/otplib#812

docs(totp): add string secrets and authenticator compatibility notes to README by @yeojz in yeojz/otplib#813

chore(deps-dev): bump the dev-dependencies-patch group with 5 updates by @dependabot[bot] in yeojz/otplib#814

chore(deps): bump the github-actions group with 3 updates by @dependabot[bot] in yeojz/otplib#816

chore(deps-dev): bump @eslint/js from 9.39.2 to 9.39.3 by @dependabot[bot] in yeojz/otplib#815

fix: override undici package security alert by @yeojz in yeojz/otplib#818

release(packages): v13.4.0 by @github-actions[bot] in yeojz/otplib#819

New Contributors

@BobTheShoplifter made their first contribution in yeojz/otplib#807

Full Changelog: yeojz/otplib@v13.3.0...v13.4.0

Commits

e5490bb release(packages): v13.4.0 (#819)
3352eeb docs(totp): add string secrets and authenticator compatibility notes to READM...
9038272 feat: add IIFE/CDN build support to otplib (#810)
4fd86b5 chore: update readme tip/important blocks
6c9ed1c docs: improve package READMEs with accurate API context and usage examples (#...
See full diff in compare view

Updates resend from 6.9.2 to 6.12.2

Release notes

Sourced from resend's releases.

v6.12.2

What's Changed

fix: add new domain statuses by @rehanvdm in resend/resend-node#936

Full Changelog: resend/resend-node@v6.12.1...v6.12.2

v6.12.1

What's Changed

chore(deps): update dependency typescript to v6.0.3 by @renovate[bot] in resend/resend-node#935

chore(deps): update dependency dotenv to v17.4.2 by @renovate[bot] in resend/resend-node#927

chore(deps): update dependency @biomejs/biome to v2.4.12 by @renovate[bot] in resend/resend-node#916

fix(deps): update dependency next to v16.2.4 by @renovate[bot] in resend/resend-node#911

feat: add missing domain types: domains can be partially_verified/partially_failed by @CarolinaMoraes in resend/resend-node#937

Full Changelog: resend/resend-node@v6.12.0...v6.12.1

v6.12.0

What's Changed

chore(ci): use depot by @gabrielmfern in resend/resend-node#931

feat: preview tracking domains in resend/resend-node#932

Full Changelog: resend/resend-node@v6.11.0...v6.12.0

v6.11.0

What's Changed

chore(ci): migrate from BuildJet to Blacksmith runners by @lucasfcosta in resend/resend-node#907

chore(deps): update dependency vitest to v4.1.3 by @renovate[bot] in resend/resend-node#894

chore(deps): update dependency @types/node to v24.12.2 by @renovate[bot] in resend/resend-node#906

fix(deps): update dependency svix to v1.90.0 by @renovate[bot] in resend/resend-node#892

chore(deps): update dependency @biomejs/biome to v2.4.10 by @renovate[bot] in resend/resend-node#885

fix(deps): update dependency next to v16.2.2 by @renovate[bot] in resend/resend-node#893

chore(deps): update dependency typescript to v6 by @renovate[bot] in resend/resend-node#895

chore(deps): update pnpm to v10.33.0 by @renovate[bot] in resend/resend-node#896

fix(deps): update dependency esbuild to v0.28.0 by @renovate[bot] in resend/resend-node#909

chore(deps): update dependency dotenv to v17.4.1 by @renovate[bot] in resend/resend-node#908

chore(deps): update dependency vitest to v4.1.4 by @renovate[bot] in resend/resend-node#913

fix(deps): update react monorepo to v19.2.5 by @renovate[bot] in resend/resend-node#912

fix(deps): update dependency next to v16.2.3 [security] by @renovate[bot] in resend/resend-node#922

feat: add automations and events by @felipefreitag in resend/resend-node#866

chore: bump version by @isabellaaquino in resend/resend-node#925

fix: case conventions by @isabellaaquino in resend/resend-node#926

chore: bump to 6.11.0 for release by @lucasfcosta in resend/resend-node#928

Full Changelog: resend/resend-node@v6.10.0...v6.11.0

v6.10.0

... (truncated)

Commits

b514002 fix: add new domain statuses (#936)
1c10dbe feat: add missing domain types: domains can be partially_verified/partially_f...
168443a fix(deps): update dependency next to v16.2.4 (#911)
93328d9 chore(deps): update dependency @biomejs/biome to v2.4.12 (#916)
135aaaf chore(deps): update dependency dotenv to v17.4.2 (#927)
d7b7f1c chore(deps): update dependency typescript to v6.0.3 (#935)
39241d0 feat: preview tracking domains (#932)
fe864dc chore(ci): use depot (#931)
48b793f chore: bump to 6.11.0 for release (#928)
eb2fafe fix: case conventions (#926)
Additional commits viewable in compare view

Updates uuid from 13.0.0 to 14.0.0

Release notes

Sourced from uuid's releases.

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

expect crypto to be global everywhere (requires node@20+) (#935)

drop node@18 support (#934)

Features

drop node@18 support (#934) (dc4ddb8)

Bug Fixes

expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)

Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

Changelog

Sourced from uuid's changelog.

14.0.0 (2026-04-19)

Security

Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

crypto is now expected to be globally defined (requires node@20+) (#935)

drop node@18 support (#934)

upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

Commits

7c1ea08 chore(main): release 14.0.0 (#926)
3d2c5b0 Merge commit from fork
f2c235f fix!: expect crypto to be global everywhere (requires node@20+) (#935)
529ef08 chore: upgrade TypeScript and fixup types (#927)
086fd79 chore: update dependencies (#933)
dc4ddb8 feat!: drop node@18 support (#934)
0f1f9c9 chore: switch to Biome for parsing and linting (#932)
e2879e6 chore: use maintained version of npm-run-all (#930)
ffa3138 fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)
0423d49 docs: remove obsolete v1 option notes (#915)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Updates yaml from 2.8.2 to 2.8.3

Release notes

Sourced from yaml's releases.

v2.8.3

Add trailingComma ToString option for multiline flow formatting (#670)

Catch stack overflow during node composition (1e84ebb)

Commits

ce14587 2.8.3
1e84ebb fix: Catch stack overflow during node composition
6b24090 ci: Include Prettier check in lint action
9424dee chore: Refresh lockfile
d1aca82 Add trailingComma ToString option for multiline flow formatting (#670)
4321509 ci: Drop the branch filter from GitHub PR actions
47207d0 chore: Update docs-slate
5212fae chore: Update docs-slate
See full diff in compare view

Updates @eslint/js from 9.39.2 to 10.0.1

Release notes

Sourced from @eslint/js's releases.

v10.0.1

Bug Fixes

c87d5bd fix: update eslint (#20531) (renovate[bot])

d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)

04c2147 fix: update error message for unused suppressions (#20496) (fnx)

38b089c fix: update dependency @eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)

6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)

b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

e5c281f chore: updates for v9.39.3 release (Jenkins)

8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)

8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)

37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)

da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)

84fb885 chore: package.json update for @eslint/js release (Jenkins)

1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)

a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)

c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)

fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)

3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)

501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])

ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)

96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)

c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)

208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)

a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)

a89059d feat!: Program range span entire source text (#20133) (Pixel998)

39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)

f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)

aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)

f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)

4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)

523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)

454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)

4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)

f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)

c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)

290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)

43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

84fb885 chore: package.json update for @eslint/js release
1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)

…pdates Bumps the dependencies group with 17 updates in the /server directory: | Package | From | To | | --- | --- | --- | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.38.0` | `10.50.0` | | [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.2.2` | `13.3.0` | | [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `12.6.2` | `12.9.0` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.2.1` | `8.4.0` | | [otplib](https://github.com/yeojz/otplib/tree/HEAD/packages/otplib) | `13.3.0` | `13.4.0` | | [resend](https://github.com/resend/resend-node) | `6.9.2` | `6.12.2` | | [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.0` | | [yaml](https://github.com/eemeli/yaml) | `2.8.2` | `2.8.3` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.2` | `10.0.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.2.3` | `25.6.0` | | [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) | `6.0.3` | `7.2.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.55.0` | `8.59.0` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.18` | `4.1.5` | | [dotenv](https://github.com/motdotla/dotenv) | `17.3.0` | `17.4.2` | | [eslint](https://github.com/eslint/eslint) | `9.39.2` | `10.2.1` | | [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` | Updates `@sentry/node` from 10.38.0 to 10.50.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.38.0...10.50.0) Updates `@simplewebauthn/server` from 13.2.2 to 13.3.0 - [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases) - [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md) - [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.0/packages/server) Updates `better-sqlite3` from 12.6.2 to 12.9.0 - [Release notes](https://github.com/WiseLibs/better-sqlite3/releases) - [Commits](WiseLibs/better-sqlite3@v12.6.2...v12.9.0) Updates `express-rate-limit` from 8.2.1 to 8.4.0 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.2.1...v8.4.0) Updates `otplib` from 13.3.0 to 13.4.0 - [Release notes](https://github.com/yeojz/otplib/releases) - [Commits](https://github.com/yeojz/otplib/commits/v13.4.0/packages/otplib) Updates `resend` from 6.9.2 to 6.12.2 - [Release notes](https://github.com/resend/resend-node/releases) - [Commits](resend/resend-node@v6.9.2...v6.12.2) Updates `uuid` from 13.0.0 to 14.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v13.0.0...v14.0.0) Updates `yaml` from 2.8.2 to 2.8.3 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.2...v2.8.3) Updates `@eslint/js` from 9.39.2 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `@types/node` from 25.2.3 to 25.6.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/supertest` from 6.0.3 to 7.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/supertest) Updates `@typescript-eslint/eslint-plugin` from 8.55.0 to 8.59.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.55.0 to 8.59.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/parser) Updates `@vitest/coverage-v8` from 4.0.18 to 4.1.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/coverage-v8) Updates `dotenv` from 17.3.0 to 17.4.2 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.3.0...v17.4.2) Updates `eslint` from 9.39.2 to 10.2.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.2...v10.2.1) Updates `prettier` from 3.8.1 to 3.8.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.1...3.8.3) Updates `typescript` from 5.9.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) Updates `vitest` from 4.0.18 to 4.1.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest) --- updated-dependencies: - dependency-name: "@sentry/node" dependency-version: 10.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@simplewebauthn/server" dependency-version: 13.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: better-sqlite3 dependency-version: 12.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: express-rate-limit dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: otplib dependency-version: 13.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: resend dependency-version: 6.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: yaml dependency-version: 2.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@types/node" dependency-version: 25.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@types/supertest" dependency-version: 7.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.59.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.59.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: dotenv dependency-version: 17.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: eslint dependency-version: 10.2.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: prettier dependency-version: 3.8.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: vitest dependency-version: 4.1.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

CLAassistant · 2026-04-23T17:19:17Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

dependabot · 2026-05-14T17:22:11Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 23, 2026

dependabot Bot closed this May 14, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/server/dependencies-aa9197ef5f branch May 14, 2026 17:22

Navigation Menu

build(deps): bump the dependencies group across 1 directory with 19 updates - #64

build(deps): bump the dependencies group across 1 directory with 19 updates#64
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/dependencies-aa9197ef5f

dependabot Bot commented on behalf of github Apr 23, 2026 •

edited

Loading

Uh oh!

CLAassistant commented Apr 23, 2026

Uh oh!

dependabot Bot commented on behalf of github May 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Apr 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.50.0

Important Changes

Other Changes

10.50.0

Important Changes

Other Changes

v13.3.0

v13.2.3

v13.3.0

v13.2.3

v12.9.0

What's Changed

v12.8.0

What's Changed

New Contributors

Why SQLite v3.51.3 instead of v3.52.0

v12.7.1

Also not a viable release

What's Changed

v12.7.0

CAUTION: NOT A VIABLE RELEASE

What's Changed

v8.4.0

v8.3.2

v8.3.1

v8.3.0

v13.4.0

What's Changed

New Contributors

v6.12.2

What's Changed

v6.12.1

What's Changed

v6.12.0

What's Changed

v6.11.0

What's Changed

v6.10.0

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

Features

Bug Fixes

14.0.0 (2026-04-19)

Security

⚠ BREAKING CHANGES

v2.8.3

v10.0.1

Bug Fixes

Documentation

Chores

v10.0.0

Breaking Changes

Features

Uh oh!

CLAassistant commented Apr 23, 2026

Uh oh!

dependabot Bot commented on behalf of github May 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Apr 23, 2026 •

edited

Loading