Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 10 updates - #19

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-fa467f7879
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-fa467f7879

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 30, 2026

Copy link
Copy Markdown

Bumps the minor-and-patch group with 10 updates in the / directory:

Package From To
@fastify/swagger 9.8.0 9.8.1
@opentelemetry/auto-instrumentations-node 0.78.0 0.79.0
@opentelemetry/sdk-node 0.220.0 0.221.0
@simplewebauthn/server 13.3.2 13.3.3
argon2 0.44.0 0.45.1
drizzle-orm 0.31.4 0.45.2
fastify 5.10.0 5.12.1
nodemailer 9.0.3 9.0.5
drizzle-kit 0.22.8 0.31.10
tsx 4.23.0 4.23.12

Updates @fastify/swagger from 9.8.0 to 9.8.1

Release notes

Sourced from @​fastify/swagger's releases.

v9.8.1

What's Changed

Full Changelog: fastify/fastify-swagger@v9.8.0...v9.8.1

Commits

Updates @opentelemetry/auto-instrumentations-node from 0.78.0 to 0.79.0

Release notes

Sourced from @​opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.79.0

0.79.0 (2026-07-23)

Features

  • deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Bug Fixes

  • auto-instrumentations-node: avoid duplicate diag logger warning in register.js (#3601) (3ae8a1b)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.75.0 to ^0.76.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.37.0 to ^0.38.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-express bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.39.0 to ^0.40.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-host-metrics bumped from ^0.3.0 to ^0.4.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.29.0 to ^0.30.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.73.0 to ^0.74.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-net bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.18.0 to ^0.19.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.45.0 to ^0.46.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.68.0 to ^0.69.0

... (truncated)

Changelog

Sourced from @​opentelemetry/auto-instrumentations-node's changelog.

0.79.0 (2026-07-23)

Features

  • deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Bug Fixes

  • auto-instrumentations-node: avoid duplicate diag logger warning in register.js (#3601) (3ae8a1b)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​opentelemetry/instrumentation-amqplib bumped from ^0.67.0 to ^0.68.0
      • @​opentelemetry/instrumentation-aws-lambda bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-aws-sdk bumped from ^0.75.0 to ^0.76.0
      • @​opentelemetry/instrumentation-bunyan bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-cassandra-driver bumped from ^0.65.0 to ^0.66.0
      • @​opentelemetry/instrumentation-connect bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-cucumber bumped from ^0.36.0 to ^0.37.0
      • @​opentelemetry/instrumentation-dataloader bumped from ^0.37.0 to ^0.38.0
      • @​opentelemetry/instrumentation-dns bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-express bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-fs bumped from ^0.39.0 to ^0.40.0
      • @​opentelemetry/instrumentation-generic-pool bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-graphql bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-hapi bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-host-metrics bumped from ^0.3.0 to ^0.4.0
      • @​opentelemetry/instrumentation-ioredis bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-kafkajs bumped from ^0.29.0 to ^0.30.0
      • @​opentelemetry/instrumentation-knex bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-koa bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-lru-memoizer bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-memcached bumped from ^0.63.0 to ^0.64.0
      • @​opentelemetry/instrumentation-mongodb bumped from ^0.73.0 to ^0.74.0
      • @​opentelemetry/instrumentation-mongoose bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-mysql bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-mysql2 bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-nestjs-core bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-net bumped from ^0.64.0 to ^0.65.0
      • @​opentelemetry/instrumentation-openai bumped from ^0.18.0 to ^0.19.0
      • @​opentelemetry/instrumentation-oracledb bumped from ^0.45.0 to ^0.46.0
      • @​opentelemetry/instrumentation-pg bumped from ^0.72.0 to ^0.73.0
      • @​opentelemetry/instrumentation-pino bumped from ^0.66.0 to ^0.67.0
      • @​opentelemetry/instrumentation-redis bumped from ^0.68.0 to ^0.69.0
      • @​opentelemetry/instrumentation-restify bumped from ^0.65.0 to ^0.66.0

... (truncated)

Commits

Updates @opentelemetry/sdk-node from 0.220.0 to 0.221.0

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.221.0

0.221.0

💥 Breaking Changes

  • feat(sdk-logs)!: configure the force flush timeout per call #6931 @​LarryHu0217
    • (user-facing): LoggerProviderOptions.forceFlushTimeoutMillis has been removed; pass timeoutMillis to LoggerProvider.forceFlush() instead.
  • feat(instrumentation-http)!: emit only stable HTTP semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes HTTP attribute or metric emission — old (v1.7.0) and duplicate (http/http/dup) semconv outputs have been removed. #6819 @​maryliag
  • feat(instrumentation-fetch)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @​maryliag
  • feat(instrumentation-xml-http-request)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @​maryliag
  • feat(instrumentation-grpc)!: emit only stable network semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes attribute emission — net.peer.name and net.peer.port (old) are no longer set; only server.address and server.port (stable). #6819 @​maryliag

🚀 Features

  • feat(sdk-logs): allow modifying ReadWriteLogRecord properties (including hrTime, hrTimeObserved, and spanContext) in accordance with the OpenTelemetry Logs specification #6923 @​Babul422
  • feat(sdk-node): emit a deprecation warning when the JaegerPropagator is selected via OTEL_PROPAGATORS or declarative config; use tracecontext instead. @​pichlermarc
  • feat(instrumentation-http): set error.type to status code in metrics for error requests. #6919 @​raphael-theriault-swi
Commits
  • 76fa6b5 chore: prepare next release (#6942)
  • 3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
  • be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
  • f6d8fbe chore(deps): lock file maintenance (#6559)
  • 9612732 chore: remove examples/dice from workspaces (#6937)
  • 7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
  • a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
  • af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
  • b9f57c6 chore(deps): update dependency @​types/webpack-env to v1.18.8 (#6877)
  • cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
  • Additional commits viewable in compare view

Updates @simplewebauthn/server from 13.3.2 to 13.3.3

Release notes

Sourced from @​simplewebauthn/server's releases.

v13.3.3

Changes:

  • [server] Updated MDS blob signature verification to support more algorithms (#788)
  • [server] Updated MetadataService to know about the new FIDO MDS blob trust anchor certificate (#789)
Changelog

Sourced from @​simplewebauthn/server's changelog.

v13.3.3

Changes:

  • [server] Updated MDS blob signature verification to support more algorithms (#788)
  • [server] Updated MetadataService to know about the new FIDO MDS blob trust anchor certificate (#789)
Commits

Updates argon2 from 0.44.0 to 0.45.1

Release notes

Sourced from argon2's releases.

v0.45.1

Fixes an issue with v0.45.0 where TypeScript generated types for the hash function as returning Promise<any>

Full Changelog: ranisalt/node-argon2@v0.45.0...v0.45.1

v0.45.0

What's Changed

Drops support for Node 18 and 20 (probably still works, but isn't tested)

New Contributors

Full Changelog: ranisalt/node-argon2@v0.44.0...v0.45.0

Commits
  • 786de71 fix: hash function generated types
  • e2fe33f fix: update Node.js version to latest in publish job
  • e27980f fix: revert sync to default in freebsd test
  • 3d0a0b4 fix: change npm publish to npm stage publish in release workflow
  • c61513f chore: update actions versions
  • 2bc0733 fix: revert sync to default in freebsd build
  • b012379 chore: update dependencies and devDependencies
  • d2edf4e fix(tests): add unicode flag to regex assertions in option tests
  • 0eb1db1 Apply npm fixes to package.json
  • a09b94e Fix compilation on solaris (#538)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for argon2 since your current version.


Updates drizzle-orm from 0.31.4 to 0.45.2

Release notes

Sourced from drizzle-orm's releases.

0.45.2

  • Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability

Thanks to @​EthanKim88, @​0x90sh and @​wgoodall01 for reaching out to us with a reproduction and suggested fix

drizzle-kit@0.31.10

  • Updated to hanji@0.0.8 - native bun stringWidth, stripANSI support, errors for non-TTY environments
  • We've migrated away from esbuild-register to tsx loader, it will now allow to use drizzle-kit seamlessly with both ESM and CJS modules
  • We've also added native Bun and Deno launch support, which will not trigger tsx loader and utilise native bun and deno imports capabilities and faster startup times

drizzle-kit@0.31.9

  • drizzle-kit api improvements for D1 connections

0.45.1

  • Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden require() (#5107)

0.45.0

  • Fixed pg-native Pool detection in node-postgres transactions
  • Allowed subqueries in select fields
  • Updated typo algorythm => algorithm
  • Fixed $onUpdate not handling SQL values (fixes #2388, tests implemented by L-Mario564 in #2911)
  • Fixed pg mappers not handling Date instances in bun-sql:postgresql driver responses for date, timestamp types (fixes #4493)

drizzle-kit@0.31.8

Bug fixes

  • Fixed algorythm => algorithm typo.
  • Fixed external dependencies in build configuration.

drizzle-kit@0.31.7

Bug fixes

drizzle-kit@0.31.6

Bug fixes

0.44.7

0.44.6

  • feat: add $replicas reference #4874

drizzle-kit@0.31.5

  • Add casing support to studio configuration and related functions

0.44.5

... (truncated)

Commits
  • 273c780 + 0.45.2 (#5534)
  • 4aa6ecf Kit updates (#5490)
  • e8e6edf feat(drizzle-kit): support d1 via binding (#5302)
  • a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
  • c445637 Merge pull request #5095 from drizzle-team/main-workflows
  • e7b3aaa Merge branch 'main' into main-workflows
  • 0d885a5 refactor: Update condition for run-feature job to improve clarity and functio...
  • 45a1ffb Merge pull request #5087 from drizzle-team/main-workflows
  • 6357645 chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows
  • 53dec98 refactor: Simplify release router workflow by removing unnecessary switch job...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for drizzle-orm since your current version.


Updates fastify from 5.10.0 to 5.12.1

Release notes

Sourced from fastify's releases.

v5.12.1

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.0...v5.12.1

v5.12.0

What's Changed

Full Changelog: fastify/fastify@v5.11.3...v5.12.0

v5.11.3

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

v5.11.2

What's Changed

... (truncated)

Commits

Updates nodemailer from 9.0.3 to 9.0.5

Release notes

Sourced from nodemailer's releases.

v9.0.5

9.0.5 (2026-08-07)

Bug Fixes

  • ci: retrigger the workflows dropped during the Actions outage (85d16c1)
  • mailer: escape specials in List-* header comments (#1842) (75913bb)
  • mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)
  • mime-node: keep control chars out of header values and msg-id headers (15cf6d1)
  • mime: encode DEL in header parameters and List-* comments (cf69430)
  • mime: keep control chars out of the remaining header positions (5ed9d26)
  • mime: normalize an address parsed out of a string as well (63685f7)
  • mime: normalize an address so header and envelope agree (a9343b4)
  • mime: stop a header key callback and the dkim tags from injecting (b7d772e)

v9.0.4

9.0.4 (2026-08-04)

Bug Fixes

  • mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)
  • mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#1838) (5bd3a65)
  • mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)
  • mime-node: escape backslash and quote in the Content-Type name parameter (#1837) (adcfc4f)
  • mime: encode HT/CR/LF in header parameter values instead of quoting them (#1840) (5bc9cab)
Changelog

Sourced from nodemailer's changelog.

9.0.5 (2026-08-07)

Bug Fixes

  • ci: retrigger the workflows dropped during the Actions outage (85d16c1)
  • mailer: escape specials in List-* header comments (#1842) (75913bb)
  • mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)
  • mime-node: keep control chars out of header values and msg-id headers (15cf6d1)
  • mime: encode DEL in header parameters and List-* comments (cf69430)
  • mime: keep control chars out of the remaining header positions (5ed9d26)
  • mime: normalize an address parsed out of a string as well (63685f7)
  • mime: normalize an address so header and envelope agree (a9343b4)
  • mime: stop a header key callback and the dkim tags from injecting (b7d772e)

9.0.4 (2026-08-04)

Bug Fixes

  • mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)
  • mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#1838) (5bd3a65)
  • mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)
  • mime-node: escape backslash and quote in the Content-Type name parameter (#1837) (adcfc4f)
  • mime: encode HT/CR/LF in header parameter values instead of quoting them (#1840) (5bc9cab)
Commits
  • 742cff9 chore(master): release 9.0.5 (#1843)
  • 524f0af chore: apply prettier to the punycode decode loop
  • 63685f7 fix(mime): normalize an address parsed out of a string as well
  • d899213 test: cover the custom envelope path of every transport
  • c4daee0 chore(ci): trigger the workflows now that the Actions outage is over
  • 85d16c1 fix(ci): retrigger the workflows dropped during the Actions outage
  • 76d0d92 chore(deps): update devDependencies
  • a9343b4 fix(mime): normalize an address so header and envelope agree
  • b7d772e fix(mime): stop a header key callback and the dkim tags from injecting
  • 5ed9d26 fix(mime): keep control chars out of the remaining header positions
  • Additional commits viewable in compare view

Updates drizzle-kit from 0.22.8 to 0.31.10

Release notes

Sourced from drizzle-kit's releases.

drizzle-kit@0.31.10

  • Updated to hanji@0.0.8 - native bun stringWidth, stripANSI support, errors for non-TTY environments
  • We've migrated away from esbuild-register to tsx loader, it will now allow to use drizzle-kit seamlessly with both ESM and CJS modules
  • We've also added native Bun and Deno launch support, which will not trigger tsx loader and utilise native bun and deno imports capabilities and faster startup times

drizzle-kit@0.31.9

  • drizzle-kit api improvements for D1 connections

drizzle-kit@0.31.8

Bug fixes

  • Fixed algorythm => algorithm typo.
  • Fixed external dependencies in build configuration.

drizzle-kit@0.31.6

Bug fixes

drizzle-kit@0.31.5

  • Add casing support to studio configuration and related functions

drizzle-kit@0.31.4

  • Fixed halfvec, bit and sparsevec type generation bug in drizzle-kit

drizzle-kit@0.31.3

  • Internal changes to Studio context. Added databaseName and packageName properties for Studio

drizzle-kit@0.31.2

Bug fixes

  • Fixed relations extraction to not interfere with Drizzle Studio.

drizzle-kit@0.31.1

Fixed drizzle-kit pull bugs when using Gel extensions.

Because Gel extensions create schema names containing :: (for example, ext::auth), Drizzle previously handled these names incorrectly. Starting with this release, you can use Gel extensions without any problems. Here’s what you should do:

  1. Enable extensions schemas in drizzle.config.ts
import  { defineConfig } from "drizzle-kit";
export default defineConfig({
dialect: 'gel',
schemaFilter: ['ext::auth', 'public']
});

  1. Run drizzle-kit pull

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for drizzle-kit since your current version.


Updates tsx from 4.23.0 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

  • shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

  • preserve async ESM require fallback (55cbece)

This release is also available on:

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes


This release is also available on:

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

  • map Node test locations (2f55884)
  • support data URLs in tsImport (b94f46f)

This release is also available on:

v4.23.8

... (truncated)

Commits
  • ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
  • 651f5be test: cover CommonJS TypeScript import.meta paths
  • bd3bc64 test: cover CommonJS loader source fallback
  • 55cbece fix: preserve async ESM require fallback
  • 6c5ba85 docs: document CommonJS default interop
  • ec1bcd5 fix: support nyc coverage discovery (#710)
  • b6e5b48 docs: clarify CommonJS default imports
  • 2f55884 fix: map Node test locations
  • de935d5 docs: document Node source-map stack formatting
  • b94f46f fix: support data URLs in tsImport
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…0 updates

Bumps the minor-and-patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@fastify/swagger](https://github.com/fastify/fastify-swagger) | `9.8.0` | `9.8.1` |
| [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.78.0` | `0.79.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` |
| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.2` | `13.3.3` |
| [argon2](https://github.com/ranisalt/node-argon2) | `0.44.0` | `0.45.1` |
| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.31.4` | `0.45.2` |
| [fastify](https://github.com/fastify/fastify) | `5.10.0` | `5.12.1` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.3` | `9.0.5` |
| [drizzle-kit](https://github.com/drizzle-team/drizzle-orm) | `0.22.8` | `0.31.10` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.12` |



Updates `@fastify/swagger` from 9.8.0 to 9.8.1
- [Release notes](https://github.com/fastify/fastify-swagger/releases)
- [Commits](fastify/fastify-swagger@v9.8.0...v9.8.1)

Updates `@opentelemetry/auto-instrumentations-node` from 0.78.0 to 0.79.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.79.0/packages/auto-instrumentations-node)

Updates `@opentelemetry/sdk-node` from 0.220.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0)

Updates `@simplewebauthn/server` from 13.3.2 to 13.3.3
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases)
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.3/packages/server)

Updates `argon2` from 0.44.0 to 0.45.1
- [Release notes](https://github.com/ranisalt/node-argon2/releases)
- [Commits](ranisalt/node-argon2@v0.44.0...v0.45.1)

Updates `drizzle-orm` from 0.31.4 to 0.45.2
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.31.4...0.45.2)

Updates `fastify` from 5.10.0 to 5.12.1
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.10.0...v5.12.1)

Updates `nodemailer` from 9.0.3 to 9.0.5
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v9.0.3...v9.0.5)

Updates `drizzle-kit` from 0.22.8 to 0.31.10
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](https://github.com/drizzle-team/drizzle-orm/commits/drizzle-kit@0.31.10)

Updates `tsx` from 4.23.0 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.0...v4.23.12)

---
updated-dependencies:
- dependency-name: "@fastify/swagger"
  dependency-version: 9.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/auto-instrumentations-node"
  dependency-version: 0.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@simplewebauthn/server"
  dependency-version: 13.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: argon2
  dependency-version: 0.45.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: drizzle-orm
  dependency-version: 0.45.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fastify
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: nodemailer
  dependency-version: 9.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: drizzle-kit
  dependency-version: 0.31.10
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 30, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 6, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-fa467f7879 branch September 6, 2026 10:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants