This repository was archived by the owner on Jun 9, 2026. It is now read-only.
Bump the minor-and-patch group across 1 directory with 43 updates - #141
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the minor-and-patch group across 1 directory with 43 updates#141dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
| "pino-http": "^11.0.0", | ||
| "prisma": "^6.4.1", | ||
| "prisma-json-types-generator": "^3.2.2", | ||
| "reflect-metadata": "^0.2.2", |
There was a problem hiding this comment.
🟣 This is a pre-existing issue: prisma is listed in both dependencies at ^6.4.1 and devDependencies at ^6.5.0 with different version ranges. In a production install (npm install --omit=dev), only prisma@6.4.x is resolved, while dev/CI installs get prisma@6.5.x, creating potential discrepancies in migration and schema generation behavior between environments. Fix by removing the devDependencies entry and updating dependencies to ^6.5.0.
Extended reasoning...
The prisma package appears twice in package.json: once in dependencies as ^6.4.1 and once in devDependencies as ^6.5.0. These two ranges are both semantically valid semver ranges, but they specify different lower bounds. The presence of both entries in the same file creates an ambiguous and inconsistent version specification.
The specific code path is straightforward: in package.json, line 57 has "prisma": "^6.4.1" in dependencies, while line 87 has "prisma": "^6.5.0" in devDependencies. When npm encounters the same package in both sections, the devDependencies entry effectively overrides in development installs (the higher range wins), while a production install with --omit=dev only sees the ^6.4.1 entry, resolving to the latest 6.4.x patch.
Existing code does not prevent this inconsistency — npm's package.json format allows the same package in both sections without error or warning. No CI lint check appears to guard against duplicate package entries with diverging version constraints.
The impact is that prisma migrate deploy (run in production) would use prisma@6.4.x, while prisma migrate dev or prisma generate run in development CI would use prisma@6.5.x. Prisma CLI version differences can affect migration behavior, schema generation output, and error messages, making it harder to diagnose environment-specific issues.
To fix, remove the devDependencies entry for prisma and update the dependencies entry to "^6.5.0". Since prisma is a CLI tool used at runtime for migrations (via npx prisma migrate deploy in production), it belongs solely in dependencies.
Step-by-step proof: (1) Developer runs npm install locally — npm resolves prisma@^6.5.0 (from devDependencies, which satisfies the higher constraint). (2) CI runs npm install --omit=dev for production build — npm only sees prisma@^6.4.1 and resolves, e.g., prisma@6.4.1. (3) Developer runs prisma generate locally with 6.5.x, generating client code with features from 6.5.x. (4) Production container runs prisma migrate deploy with 6.4.x — if there are any behavioral changes between 6.4.x and 6.5.x in the CLI, the behavior diverges. This is confirmed by inspecting the package.json file: "prisma": "^6.4.1" (dependencies section) and "prisma": "^6.5.0" (devDependencies section) are both present unchanged in the PR diff as context lines.
Bumps the minor-and-patch group with 40 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@fastify/cors](https://github.com/fastify/fastify-cors) | `11.0.0` | `11.2.0` | | [@fastify/helmet](https://github.com/fastify/fastify-helmet) | `13.0.1` | `13.0.2` | | [@fastify/otel](https://github.com/fastify/otel) | `0.16.0` | `0.18.1` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.0.11` | `11.1.19` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.0.11` | `11.1.19` | | [@nestjs/platform-fastify](https://github.com/nestjs/nest/tree/HEAD/packages/platform-fastify) | `11.0.11` | `11.1.19` | | [@nestjs/swagger](https://github.com/nestjs/swagger) | `11.0.6` | `11.4.2` | | [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` | | [@opentelemetry/exporter-logs-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` | | [@opentelemetry/exporter-metrics-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` | | [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` | | [@opentelemetry/instrumentation-pino](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-pino) | `0.58.0` | `0.62.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.7.1` | | [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` | | [@opentelemetry/sdk-metrics](https://github.com/open-telemetry/opentelemetry-js) | `2.5.1` | `2.7.1` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.212.0` | `0.216.0` | | [@prisma/instrumentation](https://github.com/prisma/prisma/tree/HEAD/packages/instrumentation) | `7.4.2` | `7.8.0` | | [es-toolkit](https://github.com/toss/es-toolkit) | `1.44.0` | `1.46.1` | | [module-alias](https://github.com/ilearnio/module-alias) | `2.2.3` | `2.3.4` | | [nestjs-pino](https://github.com/iamolegga/nestjs-pino) | `4.6.0` | `4.6.1` | | [slugify](https://github.com/simov/slugify) | `1.6.6` | `1.6.9` | | [@nestjs/cli](https://github.com/nestjs/nest-cli) | `11.0.5` | `11.0.21` | | [@nestjs/schematics](https://github.com/nestjs/schematics) | `11.0.2` | `11.1.0` | | [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.0.11` | `11.1.19` | | [@pulumi/aws](https://github.com/pulumi/pulumi-aws) | `7.17.0` | `7.28.0` | | [@pulumi/pulumi](https://github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs) | `3.218.0` | `3.235.0` | | [@swc/cli](https://github.com/swc-project/pkgs) | `0.6.0` | `0.8.1` | | [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.11.5` | `1.15.33` | | [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `5.0.0` | `5.0.6` | | [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.16` | `4.17.24` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.27.0` | `8.59.2` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.27.0` | `8.59.2` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.18` | `4.1.5` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.2.3` | `5.5.5` | | [eslint-plugin-unused-imports](https://github.com/sweepline/eslint-plugin-unused-imports) | `4.1.4` | `4.4.1` | | [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.8.3` | | [prisma-erd-generator](https://github.com/keonik/prisma-erd-generator) | `2.0.4` | `2.4.2` | | [ts-loader](https://github.com/TypeStrong/ts-loader) | `9.5.2` | `9.5.7` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.27.0` | `8.59.2` | Updates `@fastify/cors` from 11.0.0 to 11.2.0 - [Release notes](https://github.com/fastify/fastify-cors/releases) - [Commits](fastify/fastify-cors@v11.0.0...v11.2.0) Updates `@fastify/helmet` from 13.0.1 to 13.0.2 - [Release notes](https://github.com/fastify/fastify-helmet/releases) - [Commits](fastify/fastify-helmet@v13.0.1...v13.0.2) Updates `@fastify/otel` from 0.16.0 to 0.18.1 - [Release notes](https://github.com/fastify/otel/releases) - [Changelog](https://github.com/fastify/otel/blob/main/CHANGELOG.md) - [Commits](fastify/otel@v0.16.0...v0.18.1) Updates `@nestjs/common` from 11.0.11 to 11.1.19 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.19/packages/common) Updates `@nestjs/core` from 11.0.11 to 11.1.19 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.19/packages/core) Updates `@nestjs/platform-fastify` from 11.0.11 to 11.1.19 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.19/packages/platform-fastify) Updates `@nestjs/swagger` from 11.0.6 to 11.4.2 - [Release notes](https://github.com/nestjs/swagger/releases) - [Commits](nestjs/swagger@11.0.6...11.4.2) Updates `@opentelemetry/api` from 1.9.0 to 1.9.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.9.0...v1.9.1) Updates `@opentelemetry/exporter-logs-otlp-http` from 0.212.0 to 0.216.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0) Updates `@opentelemetry/exporter-metrics-otlp-http` from 0.212.0 to 0.216.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.212.0 to 0.216.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0) Updates `@opentelemetry/instrumentation-http` from 0.212.0 to 0.216.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0) Updates `@opentelemetry/instrumentation-pino` from 0.58.0 to 0.62.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-pino/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/contrib-test-utils-v0.62.0/packages/instrumentation-pino) Updates `@opentelemetry/resources` from 2.5.1 to 2.7.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.7.1) Updates `@opentelemetry/sdk-logs` from 0.212.0 to 0.216.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0) Updates `@opentelemetry/sdk-metrics` from 2.5.1 to 2.7.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.1...v2.7.1) Updates `@opentelemetry/sdk-node` from 0.212.0 to 0.216.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.212.0...experimental/v0.216.0) Updates `@prisma/instrumentation` from 7.4.2 to 7.8.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.8.0/packages/instrumentation) Updates `es-toolkit` from 1.44.0 to 1.46.1 - [Release notes](https://github.com/toss/es-toolkit/releases) - [Changelog](https://github.com/toss/es-toolkit/blob/main/CHANGELOG.md) - [Commits](toss/es-toolkit@v1.44.0...v1.46.1) Updates `lodash` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `module-alias` from 2.2.3 to 2.3.4 - [Commits](https://github.com/ilearnio/module-alias/commits) Updates `nestjs-pino` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/iamolegga/nestjs-pino/releases) - [Commits](iamolegga/nestjs-pino@4.6.0...4.6.1) Updates `slugify` from 1.6.6 to 1.6.9 - [Changelog](https://github.com/simov/slugify/blob/master/CHANGELOG.md) - [Commits](https://github.com/simov/slugify/commits) Updates `@nestjs/cli` from 11.0.5 to 11.0.21 - [Release notes](https://github.com/nestjs/nest-cli/releases) - [Commits](nestjs/nest-cli@11.0.5...11.0.21) Updates `@nestjs/schematics` from 11.0.2 to 11.1.0 - [Release notes](https://github.com/nestjs/schematics/releases) - [Commits](nestjs/schematics@11.0.2...11.1.0) Updates `@nestjs/testing` from 11.0.11 to 11.1.19 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.19/packages/testing) Updates `@pulumi/aws` from 7.17.0 to 7.28.0 - [Release notes](https://github.com/pulumi/pulumi-aws/releases) - [Changelog](https://github.com/pulumi/pulumi-aws/blob/master/CHANGELOG_OLD.md) - [Commits](pulumi/pulumi-aws@v7.17.0...v7.28.0) Updates `@pulumi/pulumi` from 3.218.0 to 3.235.0 - [Release notes](https://github.com/pulumi/pulumi/releases) - [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md) - [Commits](https://github.com/pulumi/pulumi/commits/v3.235.0/sdk/nodejs) Updates `@swc/cli` from 0.6.0 to 0.8.1 - [Commits](https://github.com/swc-project/pkgs/commits) Updates `@swc/core` from 1.11.5 to 1.15.33 - [Release notes](https://github.com/swc-project/swc/releases) - [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md) - [Commits](https://github.com/swc-project/swc/commits/v1.15.33/packages/core) Updates `@types/express` from 5.0.0 to 5.0.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) Updates `@types/lodash` from 4.17.16 to 4.17.24 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash) Updates `@typescript-eslint/eslint-plugin` from 8.27.0 to 8.59.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.27.0 to 8.59.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/parser) Updates `@vitest/coverage-v8` from 4.0.18 to 4.1.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/coverage-v8) Updates `@vitest/ui` from 4.0.18 to 4.1.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/ui) Updates `eslint-plugin-prettier` from 5.2.3 to 5.5.5 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.2.3...v5.5.5) Updates `eslint-plugin-unused-imports` from 4.1.4 to 4.4.1 - [Release notes](https://github.com/sweepline/eslint-plugin-unused-imports/releases) - [Commits](sweepline/eslint-plugin-unused-imports@v4.1.4...v4.4.1) Updates `prettier` from 3.5.3 to 3.8.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.5.3...3.8.3) Updates `prisma-erd-generator` from 2.0.4 to 2.4.2 - [Release notes](https://github.com/keonik/prisma-erd-generator/releases) - [Changelog](https://github.com/keonik/prisma-erd-generator/blob/main/CHANGELOG.md) - [Commits](https://github.com/keonik/prisma-erd-generator/commits/v2.4.2) Updates `ts-loader` from 9.5.2 to 9.5.7 - [Release notes](https://github.com/TypeStrong/ts-loader/releases) - [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md) - [Commits](TypeStrong/ts-loader@v9.5.2...v9.5.7) Updates `typescript-eslint` from 8.27.0 to 8.59.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/typescript-eslint) Updates `vitest` from 4.0.18 to 4.1.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest) --- updated-dependencies: - dependency-name: "@fastify/cors" dependency-version: 11.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@fastify/helmet" dependency-version: 13.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@fastify/otel" dependency-version: 0.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@nestjs/cli" dependency-version: 11.0.19 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@nestjs/common" dependency-version: 11.1.18 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@nestjs/core" dependency-version: 11.1.18 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@nestjs/platform-fastify" dependency-version: 11.1.18 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@nestjs/schematics" dependency-version: 11.0.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@nestjs/swagger" dependency-version: 11.2.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@nestjs/testing" dependency-version: 11.1.18 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/api" dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@opentelemetry/exporter-logs-otlp-http" dependency-version: 0.214.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/exporter-metrics-otlp-http" dependency-version: 0.214.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.214.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/instrumentation-http" dependency-version: 0.214.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/instrumentation-pino" dependency-version: 0.60.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/resources" dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/sdk-logs" dependency-version: 0.214.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/sdk-metrics" dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.214.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@prisma/instrumentation" dependency-version: 7.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@pulumi/aws" dependency-version: 7.24.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@pulumi/pulumi" dependency-version: 3.230.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@swc/cli" dependency-version: 0.8.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@swc/core" dependency-version: 1.15.24 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/express" dependency-version: 5.0.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/lodash" dependency-version: 4.17.24 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.58.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@typescript-eslint/parser" dependency-version: 8.58.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@vitest/ui" dependency-version: 4.1.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: es-toolkit dependency-version: 1.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: eslint-plugin-prettier dependency-version: 5.5.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: eslint-plugin-unused-imports dependency-version: 4.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: lodash dependency-version: 4.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: module-alias dependency-version: 2.3.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: nestjs-pino dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.8.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: prisma-erd-generator dependency-version: 2.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: slugify dependency-version: 1.6.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: ts-loader dependency-version: 9.5.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.58.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 4.1.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/minor-and-patch-7eaac18f72
branch
from
May 8, 2026 11:38
50c55e8 to
73a7651
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the minor-and-patch group with 40 updates in the / directory:
11.0.011.2.013.0.113.0.20.16.00.18.111.0.1111.1.1911.0.1111.1.1911.0.1111.1.1911.0.611.4.21.9.01.9.10.212.00.216.00.212.00.216.00.212.00.216.00.212.00.216.00.58.00.62.02.5.12.7.10.212.00.216.02.5.12.7.10.212.00.216.07.4.27.8.01.44.01.46.12.2.32.3.44.6.04.6.11.6.61.6.911.0.511.0.2111.0.211.1.011.0.1111.1.197.17.07.28.03.218.03.235.00.6.00.8.11.11.51.15.335.0.05.0.64.17.164.17.248.27.08.59.28.27.08.59.24.0.184.1.55.2.35.5.54.1.44.4.13.5.33.8.32.0.42.4.29.5.29.5.78.27.08.59.2Updates
@fastify/corsfrom 11.0.0 to 11.2.0Release notes
Sourced from @fastify/cors's releases.
Commits
db4ceb6v11.2.0aeb6a48feat: support route-level CORS configuration (#384)561480bci(ci): add concurrency config (#388)708f3a3build(deps-dev): remove@fastify/pre-commit(#387)7a478c0chore(.npmrc): ignore scripts (#386)3502123chore(deps-dev): bump tsd from 0.32.0 to 0.33.0 (#385)4c03abefix(docs): config set (#382)2e5f646chore(deps-dev): bump typescript from 5.8.3 to 5.9.2 (#379)de3cdbdBumped 11.1.0c16aeaeMerge branch 'main' of github.com:fastify/fastify-corsMaintainer changes
This version was pushed to npm by gurgunday, a new releaser for
@fastify/corssince your current version.Updates
@fastify/helmetfrom 13.0.1 to 13.0.2Release notes
Sourced from @fastify/helmet's releases.
Commits
f77340fBumped v13.0.29bbc471build(deps-dev): remove@fastify/pre-commit(#294)599077dchore(.npmrc): ignore scripts (#293)865f36fUpdate comments on Helmet error handling (#292)caa39b8build(deps-dev): bump tsd from 0.31.2 to 0.32.0 (#285)c782ef2build(deps-dev): bump@types/nodefrom 22.17.0 to 24.1.0 (#291)8b170b7refactor: remove usage of deprecated request.routeConfig (#289)77ac218chore(license): update date ranges; standardise style (#288)5bd3833docs: use cross-platform compatible info emoji (#286)6ca1722ci: restore job level permissions (#284)Updates
@fastify/otelfrom 0.16.0 to 0.18.1Release notes
Sourced from @fastify/otel's releases.
Changelog
Sourced from @fastify/otel's changelog.
Commits
bae80d6Bumped v0.18.1b2039b8build(deps-dev): bump@opentelemetry/contrib-test-utilsfrom 0.59.0 to 0.61.0...8536479build(deps): bump@opentelemetry/instrumentationfrom 0.212.0 to 0.214.0 (#143)f65af07build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml from 5 t...243eb11build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#141)0eb2ac6build(deps-dev): bump@opentelemetry/instrumentation-httpfrom 0.212.0 to 0.2...574f59dchore(release): 0.18.04528070ci: remove stale.yml and update node version (#138)cc9c6b5fastify/otel#136#137)9ff035cfeat: remove setStatus(OK) calls to comply with OTel spec (#135)Updates
@nestjs/commonfrom 11.0.11 to 11.1.19Release notes
Sourced from @nestjs/common's releases.
... (truncated)
Commits
6730995chore(release): publish v11.1.19 release3c1cc5fchore(release): publish v11.1.18 releasea39e345refactor(common): change console logger helpers to protected34f0f28chore(deps): bump file-type from 21.3.3 to 21.3.40e96b0achore(deps): bump file-type from 21.3.2 to 21.3.35a05f52chore: update readme447a373chore(release): publish v11.1.17 release99ed6e6fix(deps): update dependency file-type to v21.3.2268a283fix(deps): update dependency file-type to v21.3.1315e698chore(release): publish v11.1.16 releaseUpdates
@nestjs/corefrom 11.0.11 to 11.1.19Release notes
Sourced from @nestjs/core's releases.
... (truncated)
Commits
6730995chore(release): publish v11.1.19 release3c1cc5fchore(release): publish v11.1.18 release0f962c7fix(core): sanitize sse message94aa424Merge pull request #16679 from nestjs/renovate/path-to-regexp-8.x368691cfix(core): prevent injector hang when design:paramtypes is missing25d4fdefix(deps): update dependency path-to-regexp to v8.4.25c0b11efix(deps): update dependency path-to-regexp to v8.4.1f7d4460Merge pull request #16637 from JakobStaudinger/moduleref-create-transient-sco...d0a9dc9fix(deps): update dependency path-to-regexp to v8.4.04677434feat(core): exportIEntryNestModuletypeUpdates
@nestjs/platform-fastifyfrom 11.0.11 to 11.1.19Release notes
Sourced from @nestjs/platform-fastify's releases.
... (truncated)
Commits
6730995chore(release): publish v11.1.19 release3c1cc5fchore(release): publish v11.1.18 release25d4fdefix(deps): update dependency path-to-regexp to v8.4.25c0b11efix(deps): update dependency path-to-regexp to v8.4.1d0a9dc9fix(deps): update dependency path-to-regexp to v8.4.0d2e85c4fix(deps): update dependency fastify to v5.8.45a05f52chore: update readme447a373chore(release): publish v11.1.17 release8490ac5fix(deps): update dependency fastify to v5.8.2b8e52abfix(deps): update dependency fastify to v5.8.1 [security]Updates
@nestjs/swaggerfrom 11.0.6 to 11.4.2Release notes
Sourced from @nestjs/swagger's releases.
... (truncated)
Commits
3f58449chore(): release v11.4.2b0a35f3Merge pull request #3867 from PeterTheOne/fix-error-only-response-decorators-...f01f6aarefactor(plugin): make isSuccessOrRedirectApiResponseArg a private method7999f78test: inspect@ApiResponsestatus arg and extend fixture with redirect/500 cases977a139fix(plugin): keep auto-inferred default response when only error Api*Response...a51cf09Merge pull request #3876 from y-hsgw/fix/plugin-string-literal-union-typea8acf7achore(deps): update dependency@commitlint/clito v20.5.2 (#3878)e054058chore(deps): update dependency release-it to v20.0.1 (#3877)9a3745bfix(plugin): enhance enum handling for literal union types in schema generation6e1bb8fMerge pull request #3875 from nestjs/renovate/vite-8.x-lockfileInstall script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
@opentelemetry/apifrom 1.9.0 to 1.9.1Release notes
Sourced from @opentelemetry/api's releases.
Changelog
Sourced from @opentelemetry/api's changelog.
Commits
279458eRelease 1.9.1 / 0.35.1 (#3573)4978743fix(http): remove outgoing headers normalization (#3557)d1f9594chore(deps): update dependency rimraf to v4 (#3532)e0abcc0fix: remove JSON syntax error and regenerate tsconfig files (#3566)a90c558fix(sdk-node): register instrumentations early (#3502)5b070b8fix: include TraceState in trace exports (#3569)dcb09b7chore(deps): update dependency gh-pages to v5 (