Skip to content

build(deps): bump the production-dependencies group across 1 directory with 26 updates - #289

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-7d05538d1e
Open

build(deps): bump the production-dependencies group across 1 directory with 26 updates#289
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-7d05538d1e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 26 updates in the / directory:

Package From To
@orpc/contract 1.14.13 1.15.2
zod 4.4.3 4.6.5
@orpc/client 1.14.13 1.15.2
@orpc/openapi 1.14.13 1.15.2
@orpc/openapi-client 1.14.13 1.15.2
@scure/bip39 2.2.0 2.4.0
valibot 1.4.2 1.5.0
webpack 5.109.2 5.111.1
@inquirer/prompts 8.5.2 8.7.2
tsx 4.23.4 4.23.13
js-yaml 5.2.3 5.4.2
@aws-sdk/client-s3 3.1101.0 3.1136.0
@aws-sdk/s3-request-presigner 3.1101.0 3.1136.0
@orpc/server 1.14.13 1.15.2
@orpc/zod 1.14.13 1.15.2
@prisma/adapter-pg 7.9.1 7.10.0
@sentry/node 10.69.0 10.75.0
@trpc/server 11.18.0 11.19.0
@tus/s3-store 2.0.5 2.0.6
@tus/server 2.4.3 2.4.5
bullmq 6.0.6 6.3.8
dotenv 17.4.2 18.0.1
fastify 5.11.2 5.12.5
pretty-bytes 7.1.1 7.1.3
prisma 7.9.1 7.10.0
@aws-sdk/lib-storage 3.1101.0 3.1136.0

Updates @orpc/contract from 1.14.13 to 1.15.2

Release notes

Sourced from @​orpc/contract's releases.

v1.15.2

   🐞 Bug Fixes

    View changes on GitHub

v1.15.1

   🐞 Bug Fixes

    View changes on GitHub

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates zod from 4.4.3 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

  • d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
  • f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
  • ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
  • cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
  • 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
  • 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

v4.6.1

A patch on top of 4.6.0.

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
  • 0f3f5ee 4.6.5
  • cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
  • ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
  • 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
  • de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
  • 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • 743aedb 4.6.4
  • Additional commits viewable in compare view

Updates @orpc/client from 1.14.13 to 1.15.2

Release notes

Sourced from @​orpc/client's releases.

v1.15.2

   🐞 Bug Fixes

    View changes on GitHub

v1.15.1

   🐞 Bug Fixes

    View changes on GitHub

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 31e093e chore: release v1.15.2
  • 687a36c fix(rpc): check serialized value types and compile regexps lazily during RPC ...
  • 2c097a5 chore: embed hosted sponsor wall and remove banner and sidebar sponsors (#2034)
  • 0b1f671 chore: release v1.15.1
  • 74d0165 fix(zod): keep JSON Schema constraints on zod >= 4.6 (#2028)
  • 9333015 chore: sync sponsors
  • 55271d5 chore: use rel="sponsored noopener" and summarize past sponsors (#1831)
  • 815467f chore: release v1.15.0
  • 149c13e fix(client): stop client proxies from resolving primitive coercion over the n...
  • ee68137 chore: release v1.14.15
  • Additional commits viewable in compare view

Updates @orpc/openapi from 1.14.13 to 1.15.2

Release notes

Sourced from @​orpc/openapi's releases.

v1.15.2

   🐞 Bug Fixes

    View changes on GitHub

v1.15.1

   🐞 Bug Fixes

    View changes on GitHub

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @orpc/openapi-client from 1.14.13 to 1.15.2

Release notes

Sourced from @​orpc/openapi-client's releases.

v1.15.2

   🐞 Bug Fixes

    View changes on GitHub

v1.15.1

   🐞 Bug Fixes

    View changes on GitHub

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 31e093e chore: release v1.15.2
  • 2c097a5 chore: embed hosted sponsor wall and remove banner and sidebar sponsors (#2034)
  • 0b1f671 chore: release v1.15.1
  • 9333015 chore: sync sponsors
  • 55271d5 chore: use rel="sponsored noopener" and summarize past sponsors (#1831)
  • 815467f chore: release v1.15.0
  • ee68137 chore: release v1.14.15
  • 17551f0 fix(openapi): preserve event iterator return type in JsonifiedClient (#1798)
  • 08a3cad chore: release v1.14.14
  • e5e7ee7 chore: sync sponsors
  • See full diff in compare view

Updates @scure/bip39 from 2.2.0 to 2.4.0

Release notes

Sourced from @​scure/bip39's releases.

2.4.0

  • Hardening: Unpaired UTF-16 surrogates are now rejected in mnemonics & passphrases. Normal input is unaffected
  • Upgrade noble-hashes to 2.4.0
  • Improve tests

Full Changelog: paulmillr/scure-bip39@2.3.0...2.4.0

2.3.0

  • Rewrite package: the logic is now declared in scure-bip39 instead of @scure/base dependency, which was removed.
  • Upgrade noble-hashes to 2.3.0.

Full Changelog: paulmillr/scure-bip39@2.2.0...2.3.0

Changelog

Sourced from @​scure/bip39's changelog.

2.4.0 (2026-08-28)

  • Hardening: Unpaired UTF-16 surrogates are now rejected in mnemonics & passphrases. Normal input is unaffected
  • Upgrade noble-hashes to 2.4.0
  • Improve tests

2.3.0 (2026-08-08)

  • Rewrite package: the logic is now declared in scure-bip39 instead of @scure/base dependency, which was removed.
  • Upgrade noble-hashes to 2.3.0.
Commits

Updates valibot from 1.4.2 to 1.5.0

Release notes

Sourced from valibot's releases.

v1.5.0

Many thanks to @​tats-u, @​idleberg, @​yslpn, @​francisjohnjohnston-web, @​MaxFreedomPollard, @​mahirhir, @​ItzXynx, @​LeSingh1, @​maxtaran2010, @​ysknsid25, @​cyyynthia, @​spokodev and @​sanjibani for contributing to this release.

  • Add codePoints, maxCodePoints, minCodePoints and notCodePoints validation actions to validate the number of Unicode code points (pull request #888)
  • Add ksuid validation action to validate KSUIDs (pull request #1370)
  • Change Standard Schema properties to use eager initialization for faster schema construction and replace internal _getStandardProps utility with _standardSchema (pull request #1534)
  • Change url action to use URL.canParse when available to avoid constructing URL objects (pull request #1608)
  • Fix stringifyJson action to preserve the dataset value when JSON.stringify returns undefined (pull request #1476)
  • Fix literal schema and value, values, notValue and notValues actions to treat NaN as equal to itself (pull request #1573)
  • Fix intersect schema to merge matching NaN values and invalid dates (pull request #1573)
  • Fix cache and cacheAsync methods to clone the issues of a cached dataset, preventing parent schemas from adding their path item to the same issue on every cache hit (pull request #1620)
  • Fix strictObject, looseObject, objectWithRest and their async variants to correctly handle unknown input keys that collide with Object.prototype members (pull request #1523)
  • Fix intersect and intersectAsync schemas to ignore inherited properties when merging objects and preserve own properties without invoking inherited setters or changing the output prototype (pull request #1621)
  • Fix ulid action to reject ULIDs that exceed the maximum 128-bit value (pull request #1498)
  • Fix email action to reject non-ASCII characters accepted by Unicode case folding (pull request #1075)

v1.5.0 (to-json-schema)

  • Add support for JSON Schema draft-2020-12 and OpenAPI 3.0 Schema Object format
  • Add propertyNames support to record schemas for key validation constraints
  • Add support for toBigint, toBoolean, toDate, toNumber and toString actions for typeMode: 'input'
  • Add new toStandardJsonSchema function to convert Valibot schemas to Standard JSON Schema format
  • Change return type from JSONSchema7 to a custom JsonSchema type
Commits
  • 5016198 chore: prepare Valibot v1.5.0 release (#1627)
  • 1ffb038 fix(intersect): skip inherited prototype props in _merge (#1621)
  • 1c4983f fix(ulid): restrict first character to 0-7 per ULID spec (#1498)
  • 5e449cd perf(url): use URL.canParse for validation (#1608)
  • 4acda1b Make sure that email validators don't match unintentional non-ASCII local par...
  • 95943ab fix: handle object keys that collide with Object.prototype in object schemas ...
  • d65438c fix(cache): clone cached issues to stop issue paths from accumulating (#1620)
  • 3ed804a dependabot: bump the github-actions group across 1 directory with 2 updates (...
  • 0681f43 fix: use SameValueZero equality for special numeric values (#1573)
  • 98ef8b4 Improve perf by changing ~standard implementation (#1534)
  • Additional commits viewable in compare view

Updates webpack from 5.109.2 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.1

Patch Changes

... (truncated)

Commits
  • 5a10675 chore(release): new release (#22105)
  • 9c448c4 test: consolidate loose harness files under test/harness (#22163)
  • a947604 fix(html): unquote an attribute value carrying a vertical tab (#22162)
  • db556f3 test: run the printer equivalence suite against Gecko in CI (#22155)
  • d174cdf perf(css): drop a fallback every browserslist target reads past (#22158)
  • 39f14f2 refactor(javascript): declare block bindings from the parse (#22161)
  • 0835411 test: move suite drivers into test/templates (#22159)
  • b48cd77 fix(html): minify by what a value says rather than how it was spelled (#22154)
  • a774f10 test: define the webpack major instead of bundling package.json (#22160)
  • 4b2eed0 docs: report only what needs a decision while watching a PR (#22156)
  • Additional commits viewable in compare view

Updates @inquirer/prompts from 8.5.2 to 8.7.2

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.2

What's new

  • Fixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach keypress handlers after the prompt was done, cancelled, or aborted (@inquirer/core, #2255, closes #1816).
  • confirm() now trims surrounding whitespace from answers before matching yes/no keywords (@inquirer/confirm, #2254).

Included

  • @inquirer/checkbox@^5.2.5
  • @inquirer/confirm@^6.3.2
  • @inquirer/editor@^5.3.3
  • @inquirer/expand@^5.1.5
  • @inquirer/input@^5.1.6
  • @inquirer/number@^4.2.3
  • @inquirer/password@^5.2.2
  • @inquirer/rawlist@^5.3.5
  • @inquirer/search@^4.3.3
  • @inquirer/select@^5.2.5

@​inquirer/prompts@​8.7.1

What's new

  • All bundled prompts now pin @inquirer/type to an exact version in their published manifests. Since these type definitions leak into consumers' tsc runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (#2247, fixes #2244).

Included

  • @inquirer/checkbox@^5.2.4
  • @inquirer/confirm@^6.3.1
  • @inquirer/editor@^5.3.2
  • @inquirer/expand@^5.1.4
  • @inquirer/input@^5.1.5
  • @inquirer/number@^4.2.2
  • @inquirer/password@^5.2.1
  • @inquirer/rawlist@^5.3.4
  • @inquirer/search@^4.3.2
  • @inquirer/select@^5.2.4

@​inquirer/prompts@​8.7.0

What's new

  • password gains the toggleMask option (ctrl+t to reveal the typed value).
  • confirm now matches localized yes/no answers per-locale.
  • Prettified prompt and theme types for better IDE display.
  • Added inquirer-grouped-checkbox to the community prompts list (#2236).

Included

@dependabot
build(deps): bump the production-dependencies group across 1 director…
308c74a 
…y with 26 updates

Bumps the production-dependencies group with 26 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@orpc/contract](https://github.com/middleapi/orpc/tree/HEAD/packages/contract) | `1.14.13` | `1.15.2` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |
| [@orpc/client](https://github.com/middleapi/orpc/tree/HEAD/packages/client) | `1.14.13` | `1.15.2` |
| [@orpc/openapi](https://github.com/middleapi/orpc/tree/HEAD/packages/openapi) | `1.14.13` | `1.15.2` |
| [@orpc/openapi-client](https://github.com/middleapi/orpc/tree/HEAD/packages/openapi-client) | `1.14.13` | `1.15.2` |
| [@scure/bip39](https://github.com/paulmillr/scure-bip39) | `2.2.0` | `2.4.0` |
| [valibot](https://github.com/open-circle/valibot) | `1.4.2` | `1.5.0` |
| [webpack](https://github.com/webpack/webpack) | `5.109.2` | `5.111.1` |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.5.2` | `8.7.2` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.4` | `4.23.13` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.3` | `5.4.2` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1101.0` | `3.1136.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1101.0` | `3.1136.0` |
| [@orpc/server](https://github.com/middleapi/orpc/tree/HEAD/packages/server) | `1.14.13` | `1.15.2` |
| [@orpc/zod](https://github.com/middleapi/orpc/tree/HEAD/packages/zod) | `1.14.13` | `1.15.2` |
| [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.9.1` | `7.10.0` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.69.0` | `10.75.0` |
| [@trpc/server](https://github.com/trpc/trpc/tree/HEAD/packages/server) | `11.18.0` | `11.19.0` |
| [@tus/s3-store](https://github.com/tus/tus-node-server) | `2.0.5` | `2.0.6` |
| [@tus/server](https://github.com/tus/tus-node-server) | `2.4.3` | `2.4.5` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `6.0.6` | `6.3.8` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.1` |
| [fastify](https://github.com/fastify/fastify) | `5.11.2` | `5.12.5` |
| [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) | `7.1.1` | `7.1.3` |
| [prisma](https://github.com/prisma/prisma-cli/tree/HEAD/packages/prisma) | `7.9.1` | `7.10.0` |
| [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.1101.0` | `3.1136.0` |



Updates `@orpc/contract` from 1.14.13 to 1.15.2
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.2/packages/contract)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

Updates `@orpc/client` from 1.14.13 to 1.15.2
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.2/packages/client)

Updates `@orpc/openapi` from 1.14.13 to 1.15.2
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.2/packages/openapi)

Updates `@orpc/openapi-client` from 1.14.13 to 1.15.2
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.2/packages/openapi-client)

Updates `@scure/bip39` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/paulmillr/scure-bip39/releases)
- [Changelog](https://github.com/paulmillr/scure-bip39/blob/main/CHANGELOG.md)
- [Commits](paulmillr/scure-bip39@2.2.0...2.4.0)

Updates `valibot` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/open-circle/valibot/releases)
- [Commits](open-circle/valibot@v1.4.2...v1.5.0)

Updates `webpack` from 5.109.2 to 5.111.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.109.2...v5.111.1)

Updates `@inquirer/prompts` from 8.5.2 to 8.7.2
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.5.2...@inquirer/prompts@8.7.2)

Updates `tsx` from 4.23.4 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.4...v4.23.13)

Updates `js-yaml` from 5.2.3 to 5.4.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.3...5.4.2)

Updates `@aws-sdk/client-s3` from 3.1101.0 to 3.1136.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1136.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1101.0 to 3.1136.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1136.0/packages/s3-request-presigner)

Updates `@orpc/server` from 1.14.13 to 1.15.2
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.2/packages/server)

Updates `@orpc/zod` from 1.14.13 to 1.15.2
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.2/packages/zod)

Updates `@prisma/adapter-pg` from 7.9.1 to 7.10.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.10.0/packages/adapter-pg)

Updates `@sentry/node` from 10.69.0 to 10.75.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.69.0...10.75.0)

Updates `@trpc/server` from 11.18.0 to 11.19.0
- [Release notes](https://github.com/trpc/trpc/releases)
- [Commits](https://github.com/trpc/trpc/commits/v11.19.0/packages/server)

Updates `@tus/s3-store` from 2.0.5 to 2.0.6
- [Release notes](https://github.com/tus/tus-node-server/releases)
- [Commits](https://github.com/tus/tus-node-server/compare/@tus/s3-store@2.0.5...@tus/s3-store@2.0.6)

Updates `@tus/server` from 2.4.3 to 2.4.5
- [Release notes](https://github.com/tus/tus-node-server/releases)
- [Commits](https://github.com/tus/tus-node-server/compare/@tus/server@2.4.3...@tus/server@2.4.5)

Updates `bullmq` from 6.0.6 to 6.3.8
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v6.0.6...v6.3.8)

Updates `dotenv` from 17.4.2 to 18.0.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.2...v18.0.1)

Updates `fastify` from 5.11.2 to 5.12.5
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.11.2...v5.12.5)

Updates `pretty-bytes` from 7.1.1 to 7.1.3
- [Release notes](https://github.com/sindresorhus/pretty-bytes/releases)
- [Commits](sindresorhus/pretty-bytes@v7.1.1...v7.1.3)

Updates `prisma` from 7.9.1 to 7.10.0
- [Release notes](https://github.com/prisma/prisma-cli/releases)
- [Commits](https://github.com/prisma/prisma-cli/commits/HEAD/packages/prisma)

Updates `@aws-sdk/lib-storage` from 3.1101.0 to 3.1136.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1136.0/lib/lib-storage)

---
updated-dependencies:
- dependency-name: "@orpc/contract"
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/client"
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/openapi"
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/openapi-client"
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@scure/bip39"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: valibot
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: webpack
  dependency-version: 5.111.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: js-yaml
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1136.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1136.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/server"
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/zod"
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@prisma/adapter-pg"
  dependency-version: 7.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@sentry/node"
  dependency-version: 10.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@trpc/server"
  dependency-version: 11.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tus/s3-store"
  dependency-version: 2.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@tus/server"
  dependency-version: 2.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bullmq
  dependency-version: 6.3.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 18.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: fastify
  dependency-version: 5.12.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pretty-bytes
  dependency-version: 7.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: prisma
  dependency-version: 7.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@aws-sdk/lib-storage"
  dependency-version: 3.1136.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 22, 2026
@socket-security

socket-security Bot commented Sep 22, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedtsx@​4.23.4 ⏵ 4.23.13100 +1210081 +195 +2100
Updated@​prisma/​adapter-pg@​7.9.1 ⏵ 7.10.010010083 +199100
Updated@​aws-sdk/​lib-storage@​3.1101.0 ⏵ 3.1136.0100 +110085 +198100
Updatedjs-yaml@​5.2.3 ⏵ 5.4.210010086 -1394100
Updated@​orpc/​zod@​1.14.13 ⏵ 1.15.288 +1100100 +196100
Updated@​scure/​bip39@​2.2.0 ⏵ 2.4.0100 +110010088 +6100
Updatedpretty-bytes@​7.1.1 ⏵ 7.1.3100 +1100100 +188 +5100
Addedvalibot@​1.5.01001009989100
Updated@​orpc/​server@​1.14.13 ⏵ 1.15.29310010096100
Updatedwebpack@​5.109.2 ⏵ 5.111.19310093 +1100100
Updated@​tus/​s3-store@​2.0.5 ⏵ 2.0.699 +1110010093 +2100
Addeddotenv@​18.0.19910010094100
Updated@​orpc/​openapi-client@​1.14.13 ⏵ 1.15.2100 +110094 -596 +1100
Updatedprisma@​7.9.1 ⏵ 7.10.094 +2010097 +196 -1100
Updatedbullmq@​6.0.6 ⏵ 6.3.89410010096 +1100
Updated@​tus/​server@​2.4.3 ⏵ 2.4.599 +110010094 +2100
Addedzod@​4.6.510010010095100
Updated@​sentry/​node@​10.69.0 ⏵ 10.75.09810095 +196100
Updated@​inquirer/​prompts@​8.5.2 ⏵ 8.7.2991009796 +1100
Updated@​orpc/​client@​1.14.13 ⏵ 1.15.298100100 +196100
Updated@​orpc/​contract@​1.14.13 ⏵ 1.15.210010010096 +1100
Updated@​orpc/​openapi@​1.14.13 ⏵ 1.15.2100 +110010096100
Updated@​trpc/​server@​11.18.0 ⏵ 11.19.01001009998 +1100
Updated@​aws-sdk/​client-s3@​3.1101.0 ⏵ 3.1136.099 +110010098100
Updated@​aws-sdk/​s3-request-presigner@​3.1101.0 ⏵ 3.1136.010010010098100
Updatedfastify@​5.11.2 ⏵ 5.12.598100 +310099 +2100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants