chore(deps): bump the minor-and-patch group across 1 directory with 9 updates by dependabot[bot] · Pull Request #20 · Hilbras/Keystone

dependabot · 2026-09-06T10:24:42Z

Bumps the minor-and-patch group with 9 updates in the / directory:

Package	From	To
@fastify/swagger	`9.8.0`	`9.8.1`
@opentelemetry/auto-instrumentations-node	`0.78.0`	`0.80.0`
@opentelemetry/sdk-node	`0.220.0`	`0.222.0`
argon2	`0.44.0`	`0.45.1`
drizzle-orm	`0.31.4`	`0.45.2`
fastify	`5.10.0`	`5.12.1`
nodemailer	`9.0.3`	`9.1.1`
drizzle-kit	`0.22.8`	`0.31.10`
tsx	`4.23.0`	`4.23.13`

Updates @fastify/swagger from 9.8.0 to 9.8.1

Release notes

Sourced from @fastify/swagger's releases.

v9.8.1

What's Changed

fix: reduce the numbers of onReady hooks by @climba03003 in fastify/fastify-swagger#932

Full Changelog: fastify/fastify-swagger@v9.8.0...v9.8.1

Commits

bdee614 Bumped v9.8.1
64c617c fix: reduce the numbers of onReady hooks (#932)
See full diff in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.78.0 to 0.80.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.80.0

0.80.0 (2026-08-31)

Features

deps: update deps matching '@opentelemetry/*' (#3716) (015582a)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.76.0 to ^0.77.0

@opentelemetry/instrumentation-bunyan bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-connect bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cucumber bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dataloader bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-dns bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-express bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-fs bumped from ^0.40.0 to ^0.41.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-graphql bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-hapi bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.4.0 to ^0.5.0

@opentelemetry/instrumentation-ioredis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-knex bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-koa bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-memcached bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mongodb bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-mongoose bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-net bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-openai bumped from ^0.19.0 to ^0.20.0

@opentelemetry/instrumentation-oracledb bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-pg bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-pino bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-redis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-restify bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-router bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-socket.io bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-tedious bumped from ^0.40.0 to ^0.41.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.80.0 (2026-08-31)

Features

deps: update deps matching '@opentelemetry/*' (#3716) (015582a)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.76.0 to ^0.77.0

@opentelemetry/instrumentation-bunyan bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-connect bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-cucumber bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dataloader bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-dns bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-express bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-fs bumped from ^0.40.0 to ^0.41.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-graphql bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-hapi bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.4.0 to ^0.5.0

@opentelemetry/instrumentation-ioredis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.30.0 to ^0.31.0

@opentelemetry/instrumentation-knex bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-koa bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-memcached bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-mongodb bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-mongoose bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-net bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-openai bumped from ^0.19.0 to ^0.20.0

@opentelemetry/instrumentation-oracledb bumped from ^0.46.0 to ^0.47.0

@opentelemetry/instrumentation-pg bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-pino bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-redis bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-restify bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-router bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.34.0 to ^0.35.0

@opentelemetry/instrumentation-socket.io bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-tedious bumped from ^0.40.0 to ^0.41.0

@opentelemetry/instrumentation-undici bumped from ^0.31.0 to ^0.32.0

... (truncated)

Commits

932fc96 chore: release main (#3638)
015582a feat(deps): update deps matching '@opentelemetry/*' (#3716)
27e172a chore: release main (#3596)
466d5de feat(deps): update deps matching '@opentelemetry/*' (#3629)
b7efd7b chore(*): migrate to sdk-trace (#3599)
3ae8a1b fix(auto-instrumentations-node): avoid duplicate diag logger warning in regis...
See full diff in compare view

Updates @opentelemetry/sdk-node from 0.220.0 to 0.222.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes
fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @trentm

fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @trentm

fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @trentm
fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @trentm
This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)
Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"
🚀 Features

feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @dyladan

fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @JacksonWeber

📚 Documentation

docs(sdk-logs): mark logger configuration as experimental #6996 @LarryHu0217

docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @vedantchalke36

🏠 Internal

refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @david-luna

experimental/v0.221.0

0.221.0

💥 Breaking Changes

feat(sdk-logs)!: configure the force flush timeout per call #6931 @LarryHu0217

(user-facing): LoggerProviderOptions.forceFlushTimeoutMillis has been removed; pass timeoutMillis to LoggerProvider.forceFlush() instead.

feat(instrumentation-http)!: emit only stable HTTP semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes HTTP attribute or metric emission — old (v1.7.0) and duplicate (http/http/dup) semconv outputs have been removed. #6819 @maryliag

feat(instrumentation-fetch)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-xml-http-request)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-grpc)!: emit only stable network semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes attribute emission — net.peer.name and net.peer.port (old) are no longer set; only server.address and server.port (stable). #6819 @maryliag

🚀 Features

feat(sdk-logs): allow modifying ReadWriteLogRecord properties (including hrTime, hrTimeObserved, and spanContext) in accordance with the OpenTelemetry Logs specification #6923 @Babul422

... (truncated)

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates argon2 from 0.44.0 to 0.45.1

Release notes

Sourced from argon2's releases.

v0.45.1

Fixes an issue with v0.45.0 where TypeScript generated types for the hash function as returning Promise<any>

Full Changelog: ranisalt/node-argon2@v0.45.0...v0.45.1

v0.45.0

What's Changed

Drops support for Node 18 and 20 (probably still works, but isn't tested)

Add comparison with node:crypto and clarify parameter usage in README.md by @cbodin in ranisalt/node-argon2#491

Fix compilation on solaris by @matt-fidd in ranisalt/node-argon2#538

New Contributors

@cbodin made their first contribution in ranisalt/node-argon2#491

@matt-fidd made their first contribution in ranisalt/node-argon2#538

Full Changelog: ranisalt/node-argon2@v0.44.0...v0.45.0

Commits

786de71 fix: hash function generated types
e2fe33f fix: update Node.js version to latest in publish job
e27980f fix: revert sync to default in freebsd test
3d0a0b4 fix: change npm publish to npm stage publish in release workflow
c61513f chore: update actions versions
2bc0733 fix: revert sync to default in freebsd build
b012379 chore: update dependencies and devDependencies
d2edf4e fix(tests): add unicode flag to regex assertions in option tests
0eb1db1 Apply npm fixes to package.json
a09b94e Fix compilation on solaris (#538)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for argon2 since your current version.

Updates drizzle-orm from 0.31.4 to 0.45.2

Release notes

Sourced from drizzle-orm's releases.

0.45.2

Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability

Thanks to @EthanKim88, @0x90sh and @wgoodall01 for reaching out to us with a reproduction and suggested fix

drizzle-kit@0.31.10

Updated to hanji@0.0.8 - native bun stringWidth, stripANSI support, errors for non-TTY environments

We've migrated away from esbuild-register to tsx loader, it will now allow to use drizzle-kit seamlessly with both ESM and CJS modules

We've also added native Bun and Deno launch support, which will not trigger tsx loader and utilise native bun and deno imports capabilities and faster startup times

drizzle-kit@0.31.9

drizzle-kit api improvements for D1 connections

0.45.1

Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden require() (#5107)

0.45.0

Fixed pg-native Pool detection in node-postgres transactions

Allowed subqueries in select fields

Updated typo algorythm => algorithm

Fixed $onUpdate not handling SQL values (fixes #2388, tests implemented by L-Mario564 in #2911)

Fixed pg mappers not handling Date instances in bun-sql:postgresql driver responses for date, timestamp types (fixes #4493)

drizzle-kit@0.31.8

Bug fixes

Fixed algorythm => algorithm typo.

Fixed external dependencies in build configuration.

drizzle-kit@0.31.7

Bug fixes

[BUG]: Drizzle Kit push to Postgres 18 produces unecessary DROP SQL when the schema was NOT changed

drizzle-kit@0.31.6

Bug fixes

[BUG]: Importing drizzle-kit/api fails in ESM modules

0.44.7

fix durable sqlite transaction return value #3746 - thanks @joaocstro

0.44.6

feat: add $replicas reference #4874

drizzle-kit@0.31.5

Add casing support to studio configuration and related functions

0.44.5

... (truncated)

Commits

273c780 + 0.45.2 (#5534)
4aa6ecf Kit updates (#5490)
e8e6edf feat(drizzle-kit): support d1 via binding (#5302)
a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
c445637 Merge pull request #5095 from drizzle-team/main-workflows
e7b3aaa Merge branch 'main' into main-workflows
0d885a5 refactor: Update condition for run-feature job to improve clarity and functio...
45a1ffb Merge pull request #5087 from drizzle-team/main-workflows
6357645 chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows
53dec98 refactor: Simplify release router workflow by removing unnecessary switch job...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for drizzle-orm since your current version.

Updates fastify from 5.10.0 to 5.12.1

Release notes

Sourced from fastify's releases.

v5.12.1

⚠️ Security release

Fix for GHSA-w2qp-rph6-63g4

Fix for GHSA-3m5p-2c4r-xxw2

What's Changed

[Backport 5.x] test: fix reply.mediaType by @github-actions[bot] in fastify/fastify#6950

[Backport 5.x] ci: allow backport in pr title by @github-actions[bot] in fastify/fastify#6952

[Backport 5.x] fix: run preClose hook exactly once per declaring instance by @github-actions[bot] in fastify/fastify#6954

[Backport 5.x] fix: report canonical route url for hidden prefix slash route by @github-actions[bot] in fastify/fastify#6961

Full Changelog: fastify/fastify@v5.12.0...v5.12.1

v5.12.0

What's Changed

chore(sponsor): add testmu ai by @Eomm in fastify/fastify#6922

docs: add per-route logging for Google Cloud Functions by @slegarraga in fastify/fastify#6907

test: remove @sinonjs/fake-timers by @climba03003 in fastify/fastify#6934

[Backport 5.x] fix: remove raw response headers by @github-actions[bot] in fastify/fastify#6939

[Backport 5.x] test: use process-warning spyWarning for testing by @github-actions[bot] in fastify/fastify#6945

[Backport 5.x] feat: add Reply.prototype.mediaType by @github-actions[bot] in fastify/fastify#6946

[Backport 5.x] fix(content-type): return undefined for invalid media types by @github-actions[bot] in fastify/fastify#6947

Full Changelog: fastify/fastify@v5.11.3...v5.12.0

v5.11.3

What's Changed

fix: clear trailer state when removing all trailers by @Ram-blip in fastify/fastify#6845

docs: document percent-decoded route params as untrusted input by @mcollina in fastify/fastify#6903

docs(errors): document what the default error handler sends by @basteez in fastify/fastify#6894

docs(readme): fix grammar and cjs capitalization by @minirang in fastify/fastify#6899

fix: pass null instead of undefined to requestCompleted on success by @lazerg in fastify/fastify#6837

docs(encapsulation): clarify nested plugin scopes by @jean-michelet in fastify/fastify#6893

chore: Bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify#6916

chore: Bump fastify/workflows/.github/workflows/nested-quality.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify#6917

fix: recognize constructor-assigned built-in properties as decorator … by @aquie00t in fastify/fastify#6892

fix: reset lastIndex before testing global/sticky content-type RegExp parsers by @zelinewang in fastify/fastify#6846

New Contributors

@minirang made their first contribution in fastify/fastify#6899

@lazerg made their first contribution in fastify/fastify#6837

@zelinewang made their first contribution in fastify/fastify#6846

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

v5.11.2

What's Changed

... (truncated)

Commits

7d196a9 Bumped v5.12.1
1ef8a60 fix(validation): preserve coerced root values
8acfea7 fix: disable numeric trustProxy hop-count trust
268e439 fix: report canonical route url for hidden prefix slash route (#6719) (#6961)
b3b8be1 fix: run preClose hook exactly once per declaring instance (#6940) (#6954)
4708a98 ci: allow backport in pr title (#6948) (#6952)
65d12da test: fix reply.mediaType (#6949) (#6950)
27d1fec Bumped v5.12.0
430dd4e fix(content-type): return undefined for invalid media types (#6942) (#6947)
fd5fe53 feat: add Reply.prototype.mediaType (#6932) (#6946)
Additional commits viewable in compare view

Updates nodemailer from 9.0.3 to 9.1.1

Release notes

Sourced from nodemailer's releases.

v9.1.1

9.1.1 (2026-09-01)

Bug Fixes

mailer: apply the message access policy in resolveContent (dc48ed3)

mailer: keep message data from reopening the access sandbox (ab7ef34)

mime-node: inherit the access policy from the tree a node hangs in (262d550)

v9.1.0

9.1.0 (2026-08-31)

Features

mailer: cap recipients per message with maxRecipients (7279ac8)

Bug Fixes

addressparser: handle address lists in linear time (9116da9)

addressparser: terminate the domain at an RFC 5322 comment (902b63e)

mime-node: apply UTS-46 mapping when encoding a domain (259c32d)

mime-node: dedupe envelope recipients in linear time (7cc38af)

mime-node: flatten parsed addresses without concat.apply (83b8c48)

mime-node: keep the recipient dedupe linear across address headers (34da642)

mime-node: keep URL delimiters away from the domain mapper (b212ac4)

v9.0.6

9.0.6 (2026-08-27)

Bug Fixes

addressparser: recover the addr-spec from an angle-addr holding whitespace (e989a22)

harden copies of user supplied keys and URL fetching (2f667f4)

v9.0.5

9.0.5 (2026-08-07)

Bug Fixes

ci: retrigger the workflows dropped during the Actions outage (85d16c1)

mailer: escape specials in List-* header comments (#1842) (75913bb)

mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)

mime-node: keep control chars out of header values and msg-id headers (15cf6d1)

mime: encode DEL in header parameters and List-* comments (cf69430)

mime: keep control chars out of the remaining header positions (5ed9d26)

... (truncated)

Changelog

Sourced from nodemailer's changelog.

9.1.1 (2026-09-01)

Bug Fixes

mailer: apply the message access policy in resolveContent (dc48ed3)

mailer: keep message data from reopening the access sandbox (ab7ef34)

mime-node: inherit the access policy from the tree a node hangs in (262d550)

9.1.0 (2026-08-31)

Features

mailer: cap recipients per message with maxRecipients (7279ac8)

Bug Fixes

addressparser: handle address lists in linear time (9116da9)

addressparser: terminate the domain at an RFC 5322 comment (902b63e)

mime-node: apply UTS-46 mapping when encoding a domain (259c32d)

mime-node: dedupe envelope recipients in linear time (7cc38af)

mime-node: flatten parsed addresses without concat.apply (83b8c48)

mime-node: keep the recipient dedupe linear across address headers (34da642)

mime-node: keep URL delimiters away from the domain mapper (b212ac4)

9.0.6 (2026-08-27)

Bug Fixes

addressparser: recover the addr-spec from an angle-addr holding whitespace (e989a22)

harden copies of user supplied keys and URL fetching (2f667f4)

9.0.5 (2026-08-07)

Bug Fixes

ci: retrigger the workflows dropped during the Actions outage (85d16c1)

mailer: escape specials in List-* header comments (#1842) (75913bb)

mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)

mime-node: keep control chars out of header values and msg-id headers (15cf6d1)

mime: encode DEL in header parameters and List-* comments (cf69430)

mime: keep control chars out of the remaining header positions (5ed9d26)

mime: normalize an address parsed out of a string as well (63685f7)

mime: normalize an address so header and envelope agree (a9343b4)

mime: stop a header key callback and the dkim tags from injecting (b7d772e)

... (truncated)

Commits

ad4513f chore(master): release 9.1.1 (#1850)
c3e261f docs: replace dead Node.js c-ares dependencies link (#1845)
c158a38 docs: mark 9.x as the supported security line (#1846)
262d550 fix(mime-node): inherit the access policy from the tree a node hangs in
ab7ef34 fix(mailer): keep message data from reopening the access sandbox
dc48ed3 fix(mailer): apply the message access policy in resolveContent
efd6e29 chore(master): release 9.1.0 (#1849)
1f9533b chore(deps): update dev dependencies
b212ac4 fix(mime-node): keep URL delimiters away from the domain mapper
6aa7e3f refactor: fold review findings into the address parsing changes
Additional commits viewable in compare view

Updates drizzle-kit from 0.22.8 to 0.31.10

Release notes

Sourced from drizzle-kit's releases.

drizzle-kit@0.31.10

Updated to hanji@0.0.8 - native bun stringWidth, stripANSI support, errors for non-TTY environments

We've migrated away from esbuild-register to tsx loader, it will now allow to use drizzle-kit seamlessly with both ESM and CJS modules

We've also added native Bun and Deno launch support, which will not trigger tsx loader and utilise native bun and deno imports capabilities and faster startup times

drizzle-kit@0.31.9

drizzle-kit api improvements for D1 connections

drizzle-kit@0.31.8

Bug fixes

Fixed algorythm => algorithm typo.

Fixed external dependencies in build configuration.

drizzle-kit@0.31.6

Bug fixes

[BUG]: Importing drizzle-kit/api fails in ESM modules

drizzle-kit@0.31.5

Add casing support to studio configuration and related functions

drizzle-kit@0.31.4

Fixed halfvec, bit and sparsevec type generation bug in drizzle-kit

drizzle-kit@0.31.3

Internal changes to Studio context. Added databaseName and packageName properties for Studio

drizzle-kit@0.31.2

Bug fixes

Fixed relations extraction to not interfere with Drizzle Studio.

drizzle-kit@0.31.1

Fixed drizzle-kit pull bugs when using Gel extensions.

Because Gel extensions create schema names containing :: (for example, ext::auth), Drizzle previously handled these names incorrectly. Starting with this release, you can use Gel extensions without any problems. Here’s what you should do:

Enable extensions schemas in drizzle.config.ts
import  { defineConfig } from "drizzle-kit";
export default defineConfig({
dialect: 'gel',
schemaFilter: ['ext::auth', 'public']
});
Run drizzle-kit pull

... (truncated)

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for drizzle-kit since your current version.

Updates tsx from 4.23.0 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

npm package (@latest dist-tag)

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

npm package (@latest dist-tag)

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

preserve async ESM require fallback (55cbece)

This release is also available on:

npm package (@latest dist-tag)

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

support nyc coverage discovery (#710) (ec1bcd5)

This release is also available on:

npm package (@latest dist-tag)

v4.23.9

4.23.9 (2026-08-06)

... (truncated)

Commits

28e1f12 fix(cache): bound shared transform cache memory (#835)
ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
651f5be test: cover CommonJS TypeScript import.meta paths
bd3bc64 test: cover CommonJS loader source fallback
55cbece fix: preserve async ESM require fallback
6c5ba85 docs: document CommonJS default interop
ec1bcd5 fix: support nyc coverage discovery (#710)
b6e5b48 docs: clarify CommonJS default imports
2f55884 fix: map Node test locations
de935d5 docs: document Node source-map stack formatting
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates Bumps the minor-and-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@fastify/swagger](https://github.com/fastify/fastify-swagger) | `9.8.0` | `9.8.1` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.78.0` | `0.80.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.222.0` | | [argon2](https://github.com/ranisalt/node-argon2) | `0.44.0` | `0.45.1` | | [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.31.4` | `0.45.2` | | [fastify](https://github.com/fastify/fastify) | `5.10.0` | `5.12.1` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.3` | `9.1.1` | | [drizzle-kit](https://github.com/drizzle-team/drizzle-orm) | `0.22.8` | `0.31.10` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.13` | Updates `@fastify/swagger` from 9.8.0 to 9.8.1 - [Release notes](https://github.com/fastify/fastify-swagger/releases) - [Commits](fastify/fastify-swagger@v9.8.0...v9.8.1) Updates `@opentelemetry/auto-instrumentations-node` from 0.78.0 to 0.80.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.80.0/packages/auto-instrumentations-node) Updates `@opentelemetry/sdk-node` from 0.220.0 to 0.222.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.222.0) Updates `argon2` from 0.44.0 to 0.45.1 - [Release notes](https://github.com/ranisalt/node-argon2/releases) - [Commits](ranisalt/node-argon2@v0.44.0...v0.45.1) Updates `drizzle-orm` from 0.31.4 to 0.45.2 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](drizzle-team/drizzle-orm@0.31.4...0.45.2) Updates `fastify` from 5.10.0 to 5.12.1 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.10.0...v5.12.1) Updates `nodemailer` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v9.0.3...v9.1.1) Updates `drizzle-kit` from 0.22.8 to 0.31.10 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](https://github.com/drizzle-team/drizzle-orm/commits/drizzle-kit@0.31.10) Updates `tsx` from 4.23.0 to 4.23.13 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.0...v4.23.13) --- updated-dependencies: - dependency-name: "@fastify/swagger" dependency-version: 9.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.80.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.222.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: argon2 dependency-version: 0.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: drizzle-orm dependency-version: 0.45.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: fastify dependency-version: 5.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: nodemailer dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: drizzle-kit dependency-version: 0.31.10 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tsx dependency-version: 4.23.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-13T10:23:36Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 6, 2026

dependabot Bot closed this Sep 13, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-32c5e22ea3 branch September 13, 2026 10:23

Navigation Menu

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates - #20

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-32c5e22ea3

dependabot Bot commented on behalf of github Sep 6, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v9.8.1

What's Changed

auto-instrumentations-node: v0.80.0

0.80.0 (2026-08-31)

Features

Dependencies

0.80.0 (2026-08-31)

Features

Dependencies

experimental/v0.222.0

0.222.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.221.0

0.221.0

💥 Breaking Changes

🚀 Features

v0.45.1

v0.45.0

What's Changed

New Contributors

0.45.2

drizzle-kit@0.31.10

drizzle-kit@0.31.9

0.45.1

0.45.0

drizzle-kit@0.31.8

Bug fixes

drizzle-kit@0.31.7

Bug fixes

drizzle-kit@0.31.6

Bug fixes

0.44.7

0.44.6

drizzle-kit@0.31.5

0.44.5

v5.12.1

⚠️ Security release

What's Changed

v5.12.0

What's Changed

v5.11.3

What's Changed

New Contributors

v5.11.2

What's Changed

v9.1.1

9.1.1 (2026-09-01)

Bug Fixes

v9.1.0

9.1.0 (2026-08-31)

Features

Bug Fixes

v9.0.6

9.0.6 (2026-08-27)

Bug Fixes

v9.0.5

9.0.5 (2026-08-07)

Bug Fixes

9.1.1 (2026-09-01)

Bug Fixes

9.1.0 (2026-08-31)

Features

Bug Fixes

9.0.6 (2026-08-27)

Bug Fixes

9.0.5 (2026-08-07)

Bug Fixes

drizzle-kit@0.31.10

drizzle-kit@0.31.9

drizzle-kit@0.31.8

Bug fixes

drizzle-kit@0.31.6

Bug fixes

dependabot Bot commented on behalf of github Sep 6, 2026 •

edited

Loading

Fixed `drizzle-kit pull` bugs when using Gel extensions.