Skip to content

build(deps): bump the production-dependencies group across 1 directory with 27 updates - #293

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-424ab44b08
Closed

build(deps): bump the production-dependencies group across 1 directory with 27 updates#293
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-424ab44b08

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 27 updates in the / directory:

Package From To
@orpc/contract 1.14.13 1.15.4
zod 4.4.3 4.6.5
@orpc/client 1.14.13 1.15.4
@orpc/openapi 1.14.13 1.15.4
@orpc/openapi-client 1.14.13 1.15.4
@scure/bip39 2.2.0 2.4.0
valibot 1.4.2 1.5.0
webpack 5.109.2 5.111.1
@inquirer/prompts 8.5.2 8.7.2
tsx 4.23.4 4.23.15
chalk 6.0.0 6.0.1
js-yaml 5.2.3 5.4.2
@aws-sdk/client-s3 3.1101.0 3.1141.0
@aws-sdk/s3-request-presigner 3.1101.0 3.1141.0
@orpc/server 1.14.13 1.15.4
@orpc/zod 1.14.13 1.15.4
@prisma/adapter-pg 7.9.1 7.10.0
@sentry/node 10.69.0 11.0.0
@trpc/server 11.18.0 11.19.0
@tus/s3-store 2.0.5 2.0.7
@tus/server 2.4.3 2.4.5
bullmq 6.0.6 6.3.9
dotenv 17.4.2 18.0.4
fastify 5.11.2 5.12.5
pretty-bytes 7.1.1 7.2.0
prisma 7.9.1 7.10.0
@aws-sdk/lib-storage 3.1101.0 3.1141.0

Updates @orpc/contract from 1.14.13 to 1.15.4

Release notes

Sourced from @​orpc/contract's releases.

v1.15.4

   🐞 Bug Fixes

    View changes on GitHub

v1.15.3

   🐞 Bug Fixes

    View changes on GitHub

v1.15.2

   🐞 Bug Fixes

    View changes on GitHub

v1.15.1

   🐞 Bug Fixes

    View changes on GitHub

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

... (truncated)

Commits
  • 3f83e5d chore: release v1.15.4
  • 1da1e0c chore: release v1.15.3
  • 31e093e chore: release v1.15.2
  • 2c097a5 chore: embed hosted sponsor wall and remove banner and sidebar sponsors (#2034)
  • 0b1f671 chore: release v1.15.1
  • 74d0165 fix(zod): keep JSON Schema constraints on zod >= 4.6 (#2028)
  • 9333015 chore: sync sponsors
  • 55271d5 chore: use rel="sponsored noopener" and summarize past sponsors (#1831)
  • 815467f chore: release v1.15.0
  • ee68137 chore: release v1.14.15
  • Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

  • d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
  • f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
  • ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
  • cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
  • 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
  • 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

v4.6.1

A patch on top of 4.6.0.

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
  • 0f3f5ee 4.6.5
  • cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
  • ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
  • 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
  • de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
  • 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • 743aedb 4.6.4
  • Additional commits viewable in compare view

Updates @orpc/client from 1.14.13 to 1.15.4

Release notes

Sourced from @​orpc/client's releases.

v1.15.4

   🐞 Bug Fixes

    View changes on GitHub

v1.15.3

   🐞 Bug Fixes

    View changes on GitHub

v1.15.2

   🐞 Bug Fixes

    View changes on GitHub

v1.15.1

   🐞 Bug Fixes

    View changes on GitHub

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

... (truncated)

Commits
  • 3f83e5d chore: release v1.15.4
  • e9aeb1c fix(rpc): reject non-Blob values in serialized blobs (#2060)
  • 1da1e0c chore: release v1.15.3
  • 701ee78 fix(client): stop StandardRPCJsonSerializer from mutating its input on deseri...
  • 31e093e chore: release v1.15.2
  • 687a36c fix(rpc): check serialized value types and compile regexps lazily during RPC ...
  • 2c097a5 chore: embed hosted sponsor wall and remove banner and sidebar sponsors (#2034)
  • 0b1f671 chore: release v1.15.1
  • 74d0165 fix(zod): keep JSON Schema constraints on zod >= 4.6 (#2028)
  • 9333015 chore: sync sponsors
  • Additional commits viewable in compare view

Updates @orpc/openapi from 1.14.13 to 1.15.4

Release notes

Sourced from @​orpc/openapi's releases.

v1.15.4

   🐞 Bug Fixes

    View changes on GitHub

v1.15.3

   🐞 Bug Fixes

    View changes on GitHub

v1.15.2

   🐞 Bug Fixes

    View changes on GitHub

v1.15.1

   🐞 Bug Fixes

    View changes on GitHub

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

... (truncated)

Commits
  • 3f83e5d chore: release v1.15.4
  • 1da1e0c chore: release v1.15.3
  • 31e093e chore: release v1.15.2
  • 2c097a5 chore: embed hosted sponsor wall and remove banner and sidebar sponsors (#2034)
  • 0b1f671 chore: release v1.15.1
  • 74d0165 fix(zod): keep JSON Schema constraints on zod >= 4.6 (#2028)
  • 9333015 chore: sync sponsors
  • 55271d5 chore: use rel="sponsored noopener" and summarize past sponsors (#1831)
  • 815467f chore: release v1.15.0
  • ee68137 chore: release v1.14.15
  • Additional commits viewable in compare view

Updates @orpc/openapi-client from 1.14.13 to 1.15.4

Release notes

Sourced from @​orpc/openapi-client's releases.

v1.15.4

   🐞 Bug Fixes

    View changes on GitHub

v1.15.3

   🐞 Bug Fixes

    View changes on GitHub

v1.15.2

   🐞 Bug Fixes

    View changes on GitHub

v1.15.1

   🐞 Bug Fixes

    View changes on GitHub

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

... (truncated)

Commits
  • 3f83e5d chore: release v1.15.4
  • 1da1e0c chore: release v1.15.3
  • 31e093e chore: release v1.15.2
  • 2c097a5 chore: embed hosted sponsor wall and remove banner and sidebar sponsors (#2034)
  • 0b1f671 chore: release v1.15.1
  • 9333015 chore: sync sponsors
  • 55271d5 chore: use rel="sponsored noopener" and summarize past sponsors (#1831)
  • 815467f chore: release v1.15.0
  • ee68137 chore: release v1.14.15
  • 17551f0 fix(openapi): preserve event iterator return type in JsonifiedClient (#1798)
  • Additional commits viewable in compare view

Updates @scure/bip39 from 2.2.0 to 2.4.0

Release notes

Sourced from @​scure/bip39's releases.

2.4.0

  • Hardening: Unpaired UTF-16 surrogates are now rejected in mnemonics & passphrases. Normal input is unaffected
  • Upgrade noble-hashes to 2.4.0
  • Improve tests

Full Changelog: paulmillr/scure-bip39@2.3.0...2.4.0

2.3.0

  • Rewrite package: the logic is now declared in scure-bip39 instead of @scure/base dependency, which was removed.
  • Upgrade noble-hashes to 2.3.0.

Full Changelog: paulmillr/scure-bip39@2.2.0...2.3.0

Changelog

Sourced from @​scure/bip39's changelog.

2.4.0 (2026-08-28)

  • Hardening: Unpaired UTF-16 surrogates are now rejected in mnemonics & passphrases. Normal input is unaffected
  • Upgrade noble-hashes to 2.4.0
  • Improve tests

2.3.0 (2026-08-08)

  • Rewrite package: the logic is now declared in scure-bip39 instead of @scure/base dependency, which was removed.
  • Upgrade noble-hashes to 2.3.0.
Commits

Updates valibot from 1.4.2 to 1.5.0

Release notes

Sourced from valibot's releases.

v1.5.0

Many thanks to @​tats-u, @​idleberg, @​yslpn, @​francisjohnjohnston-web, @​MaxFreedomPollard, @​mahirhir, @​ItzXynx, @​LeSingh1, @​maxtaran2010, @​ysknsid25, @​cyyynthia, @​spokodev and @​sanjibani for contributing to this release.

  • Add codePoints, maxCodePoints, minCodePoints and notCodePoints validation actions to validate the number of Unicode code points (pull request #888)
  • Add ksuid validation action to validate KSUIDs (pull request #1370)
  • Change Standard Schema properties to use eager initialization for faster schema construction and replace internal _getStandardProps utility with _standardSchema (pull request #1534)
  • Change url action to use URL.canParse when available to avoid constructing URL objects (pull request #1608)
  • Fix stringifyJson action to preserve the dataset value when JSON.stringify returns undefined (pull request #1476)
  • Fix literal schema and value, values, notValue and notValues actions to treat NaN as equal to itself (pull request #1573)
  • Fix intersect schema to merge matching NaN values and invalid dates (pull request #1573)
  • Fix cache and cacheAsync methods to clone the issues of a cached dataset, preventing parent schemas from adding their path item to the same issue on every cache hit (pull request #1620)
  • Fix strictObject, looseObject, objectWithRest and their async variants to correctly handle unknown input keys that collide with Object.prototype members (pull request #1523)
  • Fix intersect and intersectAsync schemas to ignore inherited properties when merging objects and preserve own properties without invoking inherited setters or changing the output prototype (pull request #1621)
  • Fix ulid action to reject ULIDs that exceed the maximum 128-bit value (pull request #1498)
  • Fix email action to reject non-ASCII characters accepted by Unicode case folding (pull request #1075)

v1.5.0 (to-json-schema)

  • Add support for JSON Schema draft-2020-12 and OpenAPI 3.0 Schema Object format
  • Add propertyNames support to record schemas for key validation constraints
  • Add support for toBigint, toBoolean, toDate, toNumber and toString actions for typeMode: 'input'
  • Add new toStandardJsonSchema function to convert Valibot schemas to Standard JSON Schema format
  • Change return type from JSONSchema7 to a custom JsonSchema type
Commits
  • 5016198 chore: prepare Valibot v1.5.0 release (#1627)
  • 1ffb038 fix(intersect): skip inherited prototype props in _merge (#1621)
  • 1c4983f fix(ulid): restrict first character to 0-7 per ULID spec (#1498)
  • 5e449cd perf(url): use URL.canParse for validation (#1608)
  • 4acda1b Make sure that email validators don't match unintentional non-ASCII local par...
  • 95943ab fix: handle object keys that collide with Object.prototype in object schemas ...
  • d65438c fix(cache): clone cached issues to stop issue paths from accumulating (#1620)
  • 3ed804a dependabot: bump the github-actions group across 1 directory with 2 updates (...
  • 0681f43 fix: use SameValueZero equality for special numeric values (#1573)
  • 98ef8b4 Improve perf by changing ~standard implementation (#1534)
  • Additional commits viewable in compare view

Updates webpack from 5.109.2 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.1

Patch Changes

... (truncated)

Commits
  • 5a10675 chore(release): new release (#22105)
  • 9c448c4 test: consolidate loose harness files under test/harness (#22163)
  • a947604 fix(html): unquote an attribute value carrying a vertical tab (#22162)
  • db556f3 test: run the printer equivalence suite against Gecko in CI (#22155)
  • d174cdf perf(css): drop a fallback every browserslist target reads past (#22158)
  • 39f14f2 refactor(javascript): declare block bindings from the parse (#22161)
  • 0835411 test: move suite drivers into test/templates (#22159)
  • b48cd77 fix(html): minify by what a value says rather than how it was spelled (#22154)
  • a774f10 test: define the webpack major instead of bundling package.json (#22160)
  • 4b2eed0 docs: report only what needs a decision while watching a PR (#22156)
  • Additional commits viewable in compare view

Updates @inquirer/prompts from 8.5.2 to 8.7.2

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.2

What's new

  • Fixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach keypress handlers after the prompt was done, cancelled, or aborted (@inquirer/core, #2255, closes #1816).
  • confirm() now trims surrounding whitespace from ...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 30, 2026
@socket-security

socket-security Bot commented Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​sentry/​node@​10.69.0 ⏵ 11.0.076 -22100100 +596100
Updatedtsx@​4.23.4 ⏵ 4.23.15100 +121008194 +1100
Updated@​prisma/​adapter-pg@​7.9.1 ⏵ 7.10.0100 +110083 +198 -1100
Updated@​aws-sdk/​lib-storage@​3.1101.0 ⏵ 3.1141.09910085 +198100
Updated@​scure/​bip39@​2.2.0 ⏵ 2.4.0100 +110010086 -1100
Updatedjs-yaml@​5.2.3 ⏵ 5.4.2100100 +286 -1393100
Updatedchalk@​6.0.0 ⏵ 6.0.1100 +1100100 +187100
Updated@​orpc/​zod@​1.14.13 ⏵ 1.15.488 +1100100 +196100
Addedvalibot@​1.5.01001009988100
Updatedpretty-bytes@​7.1.1 ⏵ 7.2.0100 +1100100 +190 +7100
Updated@​tus/​s3-store@​2.0.5 ⏵ 2.0.7100 +1210010093 +2100
Updated@​orpc/​server@​1.14.13 ⏵ 1.15.49310010096100
Updatedwebpack@​5.109.2 ⏵ 5.111.19310093 +198 +1100
Updatedbullmq@​6.0.6 ⏵ 6.3.99410010096100
Updated@​orpc/​openapi-client@​1.14.13 ⏵ 1.15.4100 +110094 -596100
Updatedprisma@​7.9.1 ⏵ 7.10.094 +2010097 +196 -1100
Updated@​tus/​server@​2.4.3 ⏵ 2.4.59910010094 +3100
Updated@​inquirer/​prompts@​8.5.2 ⏵ 8.7.2991009795100
Addedzod@​4.6.510010010095100
Addeddotenv@​18.0.49910010095100
Updated@​orpc/​client@​1.14.13 ⏵ 1.15.499 +1100100 +196100
Updated@​orpc/​contract@​1.14.13 ⏵ 1.15.410010010096100
Updated@​orpc/​openapi@​1.14.13 ⏵ 1.15.4100 +110010096100
Updated@​trpc/​server@​11.18.0 ⏵ 11.19.01001009998 +1100
Updated@​aws-sdk/​client-s3@​3.1101.0 ⏵ 3.1141.099 +110010098100
Updated@​aws-sdk/​s3-request-presigner@​3.1101.0 ⏵ 3.1141.010010010098100
Updatedfastify@​5.11.2 ⏵ 5.12.598100 +4010098 +1100

View full report

@dependabot
build(deps): bump the production-dependencies group across 1 director…
e424660 
…y with 27 updates

Bumps the production-dependencies group with 27 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@orpc/contract](https://github.com/middleapi/orpc/tree/HEAD/packages/contract) | `1.14.13` | `1.15.4` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |
| [@orpc/client](https://github.com/middleapi/orpc/tree/HEAD/packages/client) | `1.14.13` | `1.15.4` |
| [@orpc/openapi](https://github.com/middleapi/orpc/tree/HEAD/packages/openapi) | `1.14.13` | `1.15.4` |
| [@orpc/openapi-client](https://github.com/middleapi/orpc/tree/HEAD/packages/openapi-client) | `1.14.13` | `1.15.4` |
| [@scure/bip39](https://github.com/paulmillr/scure-bip39) | `2.2.0` | `2.4.0` |
| [valibot](https://github.com/open-circle/valibot) | `1.4.2` | `1.5.0` |
| [webpack](https://github.com/webpack/webpack) | `5.109.2` | `5.111.1` |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.5.2` | `8.7.2` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.4` | `4.23.15` |
| [chalk](https://github.com/chalk/chalk) | `6.0.0` | `6.0.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.3` | `5.4.2` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1101.0` | `3.1141.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1101.0` | `3.1141.0` |
| [@orpc/server](https://github.com/middleapi/orpc/tree/HEAD/packages/server) | `1.14.13` | `1.15.4` |
| [@orpc/zod](https://github.com/middleapi/orpc/tree/HEAD/packages/zod) | `1.14.13` | `1.15.4` |
| [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.9.1` | `7.10.0` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.69.0` | `11.0.0` |
| [@trpc/server](https://github.com/trpc/trpc/tree/HEAD/packages/server) | `11.18.0` | `11.19.0` |
| [@tus/s3-store](https://github.com/tus/tus-node-server) | `2.0.5` | `2.0.7` |
| [@tus/server](https://github.com/tus/tus-node-server) | `2.4.3` | `2.4.5` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `6.0.6` | `6.3.9` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.4.2` | `18.0.4` |
| [fastify](https://github.com/fastify/fastify) | `5.11.2` | `5.12.5` |
| [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) | `7.1.1` | `7.2.0` |
| [prisma](https://github.com/prisma/prisma-cli/tree/HEAD/packages/prisma) | `7.9.1` | `7.10.0` |
| [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.1101.0` | `3.1141.0` |



Updates `@orpc/contract` from 1.14.13 to 1.15.4
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.4/packages/contract)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

Updates `@orpc/client` from 1.14.13 to 1.15.4
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.4/packages/client)

Updates `@orpc/openapi` from 1.14.13 to 1.15.4
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.4/packages/openapi)

Updates `@orpc/openapi-client` from 1.14.13 to 1.15.4
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.4/packages/openapi-client)

Updates `@scure/bip39` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/paulmillr/scure-bip39/releases)
- [Changelog](https://github.com/paulmillr/scure-bip39/blob/main/CHANGELOG.md)
- [Commits](paulmillr/scure-bip39@2.2.0...2.4.0)

Updates `valibot` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/open-circle/valibot/releases)
- [Commits](open-circle/valibot@v1.4.2...v1.5.0)

Updates `webpack` from 5.109.2 to 5.111.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.109.2...v5.111.1)

Updates `@inquirer/prompts` from 8.5.2 to 8.7.2
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.5.2...@inquirer/prompts@8.7.2)

Updates `tsx` from 4.23.4 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.4...v4.23.15)

Updates `chalk` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/chalk/chalk/releases)
- [Commits](chalk/chalk@v6.0.0...v6.0.1)

Updates `js-yaml` from 5.2.3 to 5.4.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.3...5.4.2)

Updates `@aws-sdk/client-s3` from 3.1101.0 to 3.1141.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1141.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1101.0 to 3.1141.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1141.0/packages/s3-request-presigner)

Updates `@orpc/server` from 1.14.13 to 1.15.4
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.4/packages/server)

Updates `@orpc/zod` from 1.14.13 to 1.15.4
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.4/packages/zod)

Updates `@prisma/adapter-pg` from 7.9.1 to 7.10.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.10.0/packages/adapter-pg)

Updates `@sentry/node` from 10.69.0 to 11.0.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.69.0...11.0.0)

Updates `@trpc/server` from 11.18.0 to 11.19.0
- [Release notes](https://github.com/trpc/trpc/releases)
- [Commits](https://github.com/trpc/trpc/commits/v11.19.0/packages/server)

Updates `@tus/s3-store` from 2.0.5 to 2.0.7
- [Release notes](https://github.com/tus/tus-node-server/releases)
- [Commits](https://github.com/tus/tus-node-server/compare/@tus/s3-store@2.0.5...@tus/s3-store@2.0.7)

Updates `@tus/server` from 2.4.3 to 2.4.5
- [Release notes](https://github.com/tus/tus-node-server/releases)
- [Commits](https://github.com/tus/tus-node-server/compare/@tus/server@2.4.3...@tus/server@2.4.5)

Updates `bullmq` from 6.0.6 to 6.3.9
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v6.0.6...v6.3.9)

Updates `dotenv` from 17.4.2 to 18.0.4
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.2...v18.0.4)

Updates `fastify` from 5.11.2 to 5.12.5
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.11.2...v5.12.5)

Updates `pretty-bytes` from 7.1.1 to 7.2.0
- [Release notes](https://github.com/sindresorhus/pretty-bytes/releases)
- [Commits](sindresorhus/pretty-bytes@v7.1.1...v7.2.0)

Updates `prisma` from 7.9.1 to 7.10.0
- [Release notes](https://github.com/prisma/prisma-cli/releases)
- [Commits](https://github.com/prisma/prisma-cli/commits/HEAD/packages/prisma)

Updates `@aws-sdk/lib-storage` from 3.1101.0 to 3.1141.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1141.0/lib/lib-storage)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1141.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@aws-sdk/lib-storage"
  dependency-version: 3.1141.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1141.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/client"
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/contract"
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/openapi"
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/openapi-client"
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/server"
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/zod"
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@prisma/adapter-pg"
  dependency-version: 7.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@scure/bip39"
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@sentry/node"
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@trpc/server"
  dependency-version: 11.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tus/s3-store"
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@tus/server"
  dependency-version: 2.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bullmq
  dependency-version: 6.3.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: chalk
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 18.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: fastify
  dependency-version: 5.12.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: js-yaml
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pretty-bytes
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: prisma
  dependency-version: 7.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: valibot
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: webpack
  dependency-version: 5.111.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-424ab44b08 branch from 73426c6 to e424660 Compare October 1, 2026 06:55
@dependabot @github

dependabot Bot commented on behalf of github Oct 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 10, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-424ab44b08 branch October 10, 2026 21:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants