Skip to content

deps: bump the npm group with 7 updates - #102

Merged
github-actions[bot] merged 1 commit into
devfrom
dependabot/npm_and_yarn/dev/npm-82522aa478
Aug 11, 2026
Merged

deps: bump the npm group with 7 updates#102
github-actions[bot] merged 1 commit into
devfrom
dependabot/npm_and_yarn/dev/npm-82522aa478

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 7 updates:

Package From To
@aws-sdk/client-s3 3.1079.0 3.1106.0
bullmq 5.79.2 5.81.3
ioredis 5.10.1 5.11.1
isomorphic-dompurify 3.19.0 3.22.0
lucide-react 1.23.0 1.30.0
next 16.2.12 16.3.0
@types/node 24.13.2 24.13.3

Updates @aws-sdk/client-s3 from 3.1079.0 to 3.1106.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1106.0

3.1106.0(2026-08-07)

New Features
  • clients: update client endpoints as of 2026-08-07 (c5d05426)
  • client-amplify: Increased the maximum allowed length of the oauthToken parameter in the CreateApp and UpdateApp APIs to support longer OAuth tokens issued by third-party Git providers. (b239e292)
  • client-healthlake: Adds provenanceEnabled to StartFHIRImportJob (18ac6efe)
  • client-securityagent: Added enableEmailMfa input field on Actor to enable email-based MFA during penetration tests. When enabled, a server-generated mfaForwardingAddress is returned. Set up a forwarding rule in your email provider to forward MFA emails to this address so the agent can complete email-based MFA login flows (e21d3919)
  • client-mediapackagev2: StreamNameOutputMode - a new optional field on MediaPackageV2 OriginEndpoints that lets customers choose whether egress manifests use numeric stream indices (default) or encoder-assigned stream names from the input (7f49cb06)
  • client-sagemaker: Amazon SageMaker adds maintenance lifecycle statuses for Notebook Instances (6ce0f884)
  • client-ec2: This release adds support for BGP route protection in Amazon VPC IP Address Manager (IPAM), including route discovery, RPKI route protection findings, and delegated RPKI (Internet Registry Associations, routing policy registrations, and ROA management) for BYOIP prefixes. (62f281df)
  • client-mediatailor: Added support for inserting ads via the VAST Ad Buffet standard. You can now configure MediaTailor to insert ads in sequence order using the AdSequencingMode setting in your playback configuration. Standalone ads are used as fallbacks when a sequenced ad is unavailable. (7bebb1e5)
  • client-connect: Supports updating the task template associated with in-progress task contacts using the new UpdateContactTaskTemplate API. This enables supervisors and developers to dynamically reassign task templates without creating a new task. (24f40416)

For list of updated packages, view updated-packages.md in assets-3.1106.0.zip

v3.1105.0

3.1105.0(2026-08-06)

Chores
  • lib-dynamodb: add error msg and fallback when incompatible client is supplied (#8231) (e663d41f)
New Features
  • clients: update client endpoints as of 2026-08-06 (e4f7b32f)
  • client-cloudwatch-logs: This release adds index category support to the CloudWatch Logs DescribeFieldIndexes API. Customers can filter and identify DEFAULT, CUSTOM, AUTO, and INACTIVE field indexes. (e17fff6f)
  • client-socialmessaging: Add support for WhatsApp Conversions APIs. (5c29a869)
  • client-gamelift: Adds support for C8a, C8i, C9g, M8a, M8i, and M9g EC2 instance type families for managed EC2 and container fleets. Also adds explicit anchors on most string regexes. (30dfd63a)
  • client-securityhub: Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features. (e44b3582)
  • client-bedrock-agentcore-control: Add support for Gateway rate limits and Runtime instances in Amazon Bedrock AgentCore. Customers can now configure rate limits scoped to control request rates, token consumption rates, and active connection rates. Customers can now create capacity providers to launch runtimes on their EC2 instances. (865d21ef)
  • client-device-farm: Adds support for service generated insights across runs, jobs, and tests. (6c601b71)
  • client-sagemaker: Releases new Model Customization SequenceLength parameter for Training and g7 instance types for Training and Processing. (14bd2ac7)
  • client-agent-registry-control: Agent Registry's Public Preview release (a137863d)
  • client-backup: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (636228a9)
  • client-mediatailor: AWS Elemental MediaTailor now supports concurrent function execution. The new Concurrent Executor function type runs multiple independent child functions in parallel within a single lifecycle hook, reducing pipeline latency to the duration of the slowest call instead of the sum of all calls. (1cf61475)
  • client-marketplace-agreement: GetAgreementTerms now returns a new term variant in AcceptedTerm, netPaymentTerm, with a paymentDuePeriod field (example "P30D"). (50b0d6d5)
  • client-agent-registry: Agent Registry's Public Preview release (632ae479)
  • client-kafka: MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you (b7e31937)
  • client-bedrock-agentcore: Add support for capacity provider sessions in Amazon Bedrock AgentCore. Customers can now delete an active session running on a runtime instance launched through their capacity provider. (bd301533)
  • client-auto-scaling: EC2 Auto Scaling now supports being managed by other AWS services via the operator field. (f5d54fce)
  • client-ec2: Adds a new optional IncludeLocalZones parameter to the Spot Placement Score API that defaults to false. When set to true, the Spot Placement Score API will consider the relevant Local Zones with Spot capacity when computing the Spot Placement Score. (43673842)
  • client-marketplace-discovery: GetOfferTerms now returns netPaymentTerm in offerTerms, specifying payment due period after invoice date. The paymentDuePeriod field uses ISO 8601 duration format (e.g., "P30D" for net 30 days). This is a backward-compatible addition. See API documentation for full structure and examples. (f4fd7ae7)
  • client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf65602)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1106.0 (2026-08-07)

Note: Version bump only for package @​aws-sdk/client-s3

3.1105.0 (2026-08-06)

Features

  • client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf6560)

3.1104.0 (2026-08-05)

Note: Version bump only for package @​aws-sdk/client-s3

3.1103.0 (2026-08-04)

Note: Version bump only for package @​aws-sdk/client-s3

3.1102.0 (2026-08-03)

Note: Version bump only for package @​aws-sdk/client-s3

3.1101.0 (2026-07-31)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits

Updates bullmq from 5.79.2 to 5.81.3

Release notes

Sourced from bullmq's releases.

v5.81.3

5.81.3 (2026-07-30)

Bug Fixes

  • deps: update dependency msgpackr to v2.0.5 [security] (#4387) (6fccb59)
  • deps: update dependency redis [security] (#4369) (2a120df)
  • worker: recover blocking client after sentinel disconnect, fixes… (#4384) (93649b8)

v5.81.2

5.81.2 (2026-07-24)

Bug Fixes

  • prevent unhandled rejection when a connection's init fails before an 'error' listener is attached (#4328) (315ec33)
  • telemetry: emit job.state while preserving job.status compatibility (#4293) (36a3b2a)

v5.81.1

5.81.1 (2026-07-24)

Bug Fixes

  • queue: retrieve jobs in same transaction under getJobs (#4300) (python) (elixir) (php) (rust) (8571503)

v5.81.0

5.81.0 (2026-07-23)

Features

  • connection: add Valkey Glide client adapter (#4321) (e2b89f7)

v5.80.12

5.80.12 (2026-07-23)

Bug Fixes

  • bun: match Bun RedisClient callback types and suppress teardown ConnectionClosedError (#4329) fixes #4212 (c7bd217)

v5.80.11

5.80.11 (2026-07-23)

Bug Fixes

  • worker: emit active event for all jobs moved to active fixes #3911 (#4326) (b002d48)

... (truncated)

Commits
  • d2831ae ci: align release workflow Node version with semantic-release engine requirem...
  • 93649b8 fix(worker): recover blocking client after sentinel disconnect, fixes… (#4384)
  • 820e261 ci: refresh OSV-scanned lockfile resolutions (python)(elixir)(php) (#4388)
  • 6fccb59 fix(deps): update dependency msgpackr to v2.0.5 [security] (#4387)
  • 8208aef chore(deps): pin vite and esbuild to patched versions via resolutions (#4386)
  • 54127ba chore(deps): update rust dependency redis to 1.4 [rust] (#4377)
  • de28f3f chore(deps): update dependency minimatch to v10.2.6 [security] (#4382)
  • d44ae5a ci: group renovate security patches into one daily PR (#4375)
  • 63675bc docs: update Rust cargo add instructions to rename bullmq-official (#4376) re...
  • e558424 chore(deps): update dependency @​semantic-release/git to v11 [security] (#4367)
  • Additional commits viewable in compare view

Updates ioredis from 5.10.1 to 5.11.1

Release notes

Sourced from ioredis's releases.

v5.11.1

5.11.1 (2026-06-04)

Bug Fixes

  • cluster: reconnect to nodes that restart without slot changes (#2096) (c84b2ee)
  • parse protocol-relative Redis URLs as TCP connections (#2125) (131ee24)

v5.11.0

5.11.0 (2026-05-26)

Bug Fixes

Features

Changelog

Sourced from ioredis's changelog.

5.11.1 (2026-06-04)

Bug Fixes

  • cluster: reconnect to nodes that restart without slot changes (#2096) (c84b2ee)
  • parse protocol-relative Redis URLs as TCP connections (#2125) (131ee24)

5.11.0 (2026-05-26)

Bug Fixes

Features

Commits
  • fb224a7 chore(release): 5.11.1 [skip ci]
  • 131ee24 fix: parse protocol-relative Redis URLs as TCP connections (#2125)
  • c84b2ee fix(cluster): reconnect to nodes that restart without slot changes (#2096)
  • 1490432 chore(release): 5.11.0 [skip ci]
  • 5359d4d refactor(utils): inline defaults and isArguments helpers (#2107)
  • b7b3def feat: add vector set command support (#2116)
  • faa53fd ci: update Node.js and Redis test matrix (#2119)
  • 37d0695 feat: add increx command (#2115)
  • 612ee9d chore: update Redis 8.8 test image to custom (#2118)
  • baf68d6 feat: add array commands, typings and tests (#2114)
  • Additional commits viewable in compare view

Updates isomorphic-dompurify from 3.19.0 to 3.22.0

Release notes

Sourced from isomorphic-dompurify's releases.

3.22.0: Updated dependencies

  • dompurify 3.4.12 -> 3.4.13
  • @​biomejs/biome 2.5.6 -> 2.5.7
  • pnpm 11.17.0 -> 11.20.0

3.21.0: Updated dependencies

  • jsdom 30.0.0 -> 30.0.1
  • @​biomejs/biome 2.5.5 -> 2.5.6

3.20.0: jsdom 30 and raised Node.js floor

  • jsdom 29.1.1 -> 30.0.0
  • Node.js requirement raised to ^22.22.2 || ^24.15.0 || >=26.0.0 (Node 20 is no longer supported)
  • @​biomejs/biome 2.5.4 -> 2.5.5
  • pnpm 11.13.1 -> 11.17.0
  • actions/setup-node 6 -> 7
Commits
  • 5a41195 chore: bump pnpm to 11.20.0 and release 3.22.0
  • c358a22 chore(deps): bump dompurify from 3.4.12 to 3.4.13
  • 455f1c5 chore(deps-dev): bump @​biomejs/biome from 2.5.6 to 2.5.7
  • 196b4a7 chore: update biome schema to 2.5.6 and release 3.21.0
  • d862ed5 chore(deps-dev): bump @​biomejs/biome from 2.5.5 to 2.5.6
  • 8271d58 chore(deps): bump jsdom from 30.0.0 to 30.0.1
  • 75fb766 chore: raise Node.js floor for jsdom 30 and release 3.20.0
  • 4e66264 chore(deps): bump jsdom from 29.1.1 to 30.0.0
  • d746d62 chore: update biome schema to 2.5.5 and pnpm to 11.17.0
  • 3174817 chore(deps): bump actions/setup-node from 6 to 7
  • Additional commits viewable in compare view

Updates lucide-react from 1.23.0 to 1.30.0

Release notes

Sourced from lucide-react's releases.

Version 1.30.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.29.0...1.30.0

Version 1.29.0

What's Changed

Full Changelog: lucide-icons/lucide@1.28.0...1.29.0

Version 1.28.0

What's Changed

Full Changelog: lucide-icons/lucide@1.27.0...1.28.0

Version 1.27.0

What's Changed

... (truncated)

Commits

Updates next from 16.2.12 to 16.3.0

Release notes

Sourced from next's releases.

v16.3.0

Core Changes

  • Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
  • Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
  • Normalize encoded dynamic placeholders in app routes: #91603
  • Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
  • Update tokio from 1.43.0 to 1.47.3: #90945
  • [turbopack] Simplify snapshotting logic: #91178
  • Turbopack: enable server HMR for app route handlers: #91466
  • turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
  • [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
  • Skip loadBindings() Lightning CSS check during next start: #91538
  • turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
  • Turbopack: Add importModule() support to webpack loaders: #89630
  • turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
  • turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
  • feat(node-streams): add config flag, define-env, and env precedence test: #90427
  • Rename /_next/webpack-hmr to /_next/hmr: #91415
  • Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
  • Handle encoded params further: #91627
  • [turbopack] Respect {eval:true} in worker_threads constructors: #91666
  • Fix missing route in otel spans without base-server: #91665
  • [turbopack] Optimize compaction cpu usage: #91468
  • Fix layout segment optimization: move app-page imports to server-utility transition: #91701
  • Fix server actions in standalone mode with cacheComponents: #91711
  • turbo-persistence: remove Unmergeable mmap advice: #91713
  • turbopack: move "compact database" tracing span to backend layer: #91693
  • Turbopack: lazy require metadata and handle TLA: #91705
  • Fix adapter outputs for dynamic metadata routes: #91680
  • Turbopack: fix webpack loader runner layer: #91727
  • [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
  • Add module count field to module graph tracing spans: #91697
  • turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
  • Turbopack: pull in updated vercel/nft tests: #91651
  • [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
  • [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
  • [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
  • Avoid deprecated TS node10 moduleResolution defaults: #91847
  • [turbopack] Rebuild the docker build scripts: #91799
  • Fix TS6 baseUrl deprecation for extended tsconfig: #91855
  • Add next internal post-build CLI command for Turbopack database compaction: #91336
  • Turbopack: Define Effect as a trait instead of a closure: #89080
  • Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
  • turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
  • Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
  • Use charCodeAt for normalizePathTrailingSlash: #91380
  • Turbopack: Only patch lockfile when bindings fails to load: #91379
  • [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
  • [devtools] Make instant navs panel draggable: #91914
  • [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

Updates @types/node from 24.13.2 to 24.13.3

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@types/node [>= 26.a, < 27]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the npm group with 7 updates
52b60f6 
Bumps the npm group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1079.0` | `3.1106.0` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.79.2` | `5.81.3` |
| [ioredis](https://github.com/redis/ioredis) | `5.10.1` | `5.11.1` |
| [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) | `3.19.0` | `3.22.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.23.0` | `1.30.0` |
| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.2` | `24.13.3` |


Updates `@aws-sdk/client-s3` from 3.1079.0 to 3.1106.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1106.0/clients/client-s3)

Updates `bullmq` from 5.79.2 to 5.81.3
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.79.2...v5.81.3)

Updates `ioredis` from 5.10.1 to 5.11.1
- [Release notes](https://github.com/redis/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.10.1...v5.11.1)

Updates `isomorphic-dompurify` from 3.19.0 to 3.22.0
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@3.19.0...3.22.0)

Updates `lucide-react` from 1.23.0 to 1.30.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.30.0/packages/lucide-react)

Updates `next` from 16.2.12 to 16.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.0)

Updates `@types/node` from 24.13.2 to 24.13.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1106.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: bullmq
  dependency-version: 5.81.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: ioredis
  dependency-version: 5.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: isomorphic-dompurify
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: lucide-react
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: next
  dependency-version: 16.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 24.13.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) August 11, 2026 10:47
@github-actions
github-actions Bot merged commit 0a622a4 into dev Aug 11, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev/npm-82522aa478 branch August 11, 2026 11:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants