Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 12, 2026

Bumps the dev-dependencies group with 8 updates in the / directory:

Package From To
@aws-sdk/client-s3 3.958.0 3.966.0
@aws-sdk/s3-request-presigner 3.958.0 3.966.0
libsodium 0.7.15 0.8.0
libsodium-wrappers 0.7.15 0.8.0
libsodium-wrappers-sumo 0.7.15 0.8.0
ws 8.18.3 8.19.0
@typescript-eslint/eslint-plugin 8.50.1 8.52.0
supertest 7.1.4 7.2.2

Updates @aws-sdk/client-s3 from 3.958.0 to 3.966.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.966.0

3.966.0(2026-01-09)

Chores
New Features
  • clients: update client endpoints as of 2026-01-09 (060fef34)
  • client-medialive: MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels. (ce039310)
  • client-bedrock-agentcore-control: Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not. (c68a59e8)
  • client-transcribe: Adds waiters to Amazon Transcribe. (93eb18c5)
  • client-glue: Adding MaterializedViews task run APIs (d430d646)
  • client-cloudfront: Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfig (858e6e8b)

For list of updated packages, view updated-packages.md in assets-3.966.0.zip

v3.965.0

3.965.0(2026-01-07)

Chores
New Features
  • clients: update client endpoints as of 2026-01-07 (a77238b4)
  • client-workspaces: Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response. (fe652fb5)
Tests
  • core: reduce nesting depth of test structures (#7624) (552e8329)

For list of updated packages, view updated-packages.md in assets-3.965.0.zip

v3.964.0

3.964.0(2026-01-06)

Chores

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.966.0 (2026-01-09)

Note: Version bump only for package @​aws-sdk/client-s3

3.965.0 (2026-01-07)

Note: Version bump only for package @​aws-sdk/client-s3

3.964.0 (2026-01-06)

Note: Version bump only for package @​aws-sdk/client-s3

3.962.0 (2026-01-02)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates @aws-sdk/s3-request-presigner from 3.958.0 to 3.966.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.966.0

3.966.0(2026-01-09)

Chores
New Features
  • clients: update client endpoints as of 2026-01-09 (060fef34)
  • client-medialive: MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels. (ce039310)
  • client-bedrock-agentcore-control: Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not. (c68a59e8)
  • client-transcribe: Adds waiters to Amazon Transcribe. (93eb18c5)
  • client-glue: Adding MaterializedViews task run APIs (d430d646)
  • client-cloudfront: Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfig (858e6e8b)

For list of updated packages, view updated-packages.md in assets-3.966.0.zip

v3.965.0

3.965.0(2026-01-07)

Chores
New Features
  • clients: update client endpoints as of 2026-01-07 (a77238b4)
  • client-workspaces: Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response. (fe652fb5)
Tests
  • core: reduce nesting depth of test structures (#7624) (552e8329)

For list of updated packages, view updated-packages.md in assets-3.965.0.zip

v3.964.0

3.964.0(2026-01-06)

Chores

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.966.0 (2026-01-09)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.965.0 (2026-01-07)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.964.0 (2026-01-06)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.962.0 (2026-01-02)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

Commits

Updates libsodium from 0.7.15 to 0.8.0

Release notes

Sourced from libsodium's releases.

0.8.0

This new release is based on libsodium 1.0.21.

0.7.16

  • ESM modules support was added (dist/modules-esm/, dist/modules-sumo-esm/).
  • Libsodium has been updated
  • Various bug fixes (crypto exclusion for browser, pointer fixes)
Commits

Updates libsodium-wrappers from 0.7.15 to 0.8.0

Release notes

Sourced from libsodium-wrappers's releases.

0.8.0

This new release is based on libsodium 1.0.21.

0.7.16

  • ESM modules support was added (dist/modules-esm/, dist/modules-sumo-esm/).
  • Libsodium has been updated
  • Various bug fixes (crypto exclusion for browser, pointer fixes)
Commits

Updates libsodium-wrappers-sumo from 0.7.15 to 0.8.0

Release notes

Sourced from libsodium-wrappers-sumo's releases.

0.8.0

This new release is based on libsodium 1.0.21.

0.7.16

  • ESM modules support was added (dist/modules-esm/, dist/modules-sumo-esm/).
  • Libsodium has been updated
  • Various bug fixes (crypto exclusion for browser, pointer fixes)
Commits

Updates ws from 8.18.3 to 8.19.0

Release notes

Sourced from ws's releases.

8.19.0

Features

  • Added the closeTimeout option (#2308).

Bug fixes

  • Handled a forthcoming breaking change in Node.js core (19984854).
Commits
  • 61349ec [dist] 8.19.0
  • 3f9ffc6 [feature] Introduce the closeTimeout option (#2308)
  • 1998485 [fix] Ensure all remaining data is read as a single chunk
  • 726c373 [doc] Sort options alphabetically
  • b151f1e [ci] Update actions/checkout action to v6
  • dabdd5b [ci] Update actions/setup-node action to v6
  • 86eac5b [ci] Test on node 25
  • 1891e14 [ci] Update actions/setup-node action to v5
  • aa28c77 [ci] Update actions/checkout action to v5
  • See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.50.1 to 8.52.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.52.0

8.52.0 (2026-01-05)

🚀 Features

  • eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)
  • typescript-estree: add tseslint.com redirects for CLI outputs (#11895)

🩹 Fixes

  • eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)
  • eslint-plugin: [no-base-to-string] detect @@​toPrimitive and valueOf (#11901)

❤️ Thank You

  • Josh Goldberg ✨
  • Ulrich Stark

You can read about our versioning strategy and releases on our website.

v8.51.0

8.51.0 (2025-12-29)

🚀 Features

  • eslint-plugin: expose rule name via RuleModule interface (#11719)
  • eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)
  • eslint-plugin: add namespace to plugin meta (#11885)
  • tsconfig-utils: more informative error on parsing failures (#11888)

🩹 Fixes

  • eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)
  • eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
  • eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
  • eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.52.0 (2026-01-05)

🚀 Features

  • eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)

🩹 Fixes

  • eslint-plugin: [no-base-to-string] detect @@​toPrimitive and valueOf (#11901)
  • eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)

❤️ Thank You

  • Josh Goldberg ✨
  • Ulrich Stark

You can read about our versioning strategy and releases on our website.

8.51.0 (2025-12-29)

🚀 Features

  • eslint-plugin: add namespace to plugin meta (#11885)
  • eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)

🩹 Fixes

  • eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)
  • eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
  • eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
  • eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Commits
  • 9ddd571 chore(release): publish 8.52.0
  • 6b467b0 docs: add blog post on revamping the ban-types rule (#11873)
  • 309a38e fix(eslint-plugin): [no-base-to-string] detect @@​toPrimitive and valueOf (#11...
  • cf79108 fix(eslint-plugin): [no-useless-default-assignment] handle conditional initia...
  • a166cea feat(eslint-plugin-internal): [no-multiple-lines-of-errors] add rule (#11899)
  • d1b44c0 chore(deps): update nx monorepo to v22.3.3 (#11848)
  • 95c7c73 chore: update deps to latest minor/patch (#11921)
  • 45a7d2b chore(typescript-estree): use iterateComments() from ts-api-utils v2.3 (#11...
  • e4c57f5 chore(release): publish 8.51.0
  • c7b698b feat(eslint-plugin): add namespace to plugin meta (#11885)
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.50.1 to 8.52.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.52.0

8.52.0 (2026-01-05)

🚀 Features

  • eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)
  • typescript-estree: add tseslint.com redirects for CLI outputs (#11895)

🩹 Fixes

  • eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)
  • eslint-plugin: [no-base-to-string] detect @@​toPrimitive and valueOf (#11901)

❤️ Thank You

  • Josh Goldberg ✨
  • Ulrich Stark

You can read about our versioning strategy and releases on our website.

v8.51.0

8.51.0 (2025-12-29)

🚀 Features

  • eslint-plugin: expose rule name via RuleModule interface (#11719)
  • eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)
  • eslint-plugin: add namespace to plugin meta (#11885)
  • tsconfig-utils: more informative error on parsing failures (#11888)

🩹 Fixes

  • eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)
  • eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
  • eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
  • eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.52.0 (2026-01-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.51.0 (2025-12-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates supertest from 7.1.4 to 7.2.2

Release notes

Sourced from supertest's releases.

v7.2.2

  • fix: replace 'should' dependency with native assertions in cookies module 1954bcf

forwardemail/supertest@v7.2.1...v7.2.2

v7.2.1

  • fix: correct case-sensitive require path for assertion module d4f04fb

forwardemail/supertest@v7.2.0...v7.2.1

v7.2.0

  • fix: fixed package lock c4b08a6
  • fix: drop v14 and v16 from tests d084ce2
  • Merge pull request #872 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.14.2 61f3ddf
  • Merge pull request #873 from forwardemail/dependabot/npm_and_yarn/multi-6d05d0e569 bd2fe45
  • chore(deps): bump qs, body-parser and express 07bf4fb
  • Merge pull request #866 from SchroederSteffen/use-lowercase-header-name 0666797
  • Merge pull request #868 from dmurvihill/cookie-assertions 953eca7
  • chore(deps-dev): bump js-yaml from 3.14.1 to 3.14.2 81ab94c
  • Merge pull request #870 from kudlav/patch-1 14d905d
  • Update links to documentation in README f508b30
  • feat(cookies): add cookie assertions 4f89680
  • chore(readme): use lower-case header name 1e642b0

forwardemail/supertest@v7.1.4...v7.2.0

Commits
  • d799751 7.2.2
  • 1954bcf fix: replace 'should' dependency with native assertions in cookies module
  • 8fb7453 7.2.1
  • d4f04fb fix: correct case-sensitive require path for assertion module
  • b8f0a43 7.2.0
  • c4b08a6 fix: fixed package lock
  • d084ce2 fix: drop v14 and v16 from tests
  • 61f3ddf Merge pull request #872 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.14.2
  • bd2fe45 Merge pull request #873 from forwardemail/dependabot/npm_and_yarn/multi-6d05d...
  • 07bf4fb chore(deps): bump qs, body-parser and express
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.958.0` | `3.966.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.958.0` | `3.966.0` |
| [libsodium](https://github.com/jedisct1/libsodium.js) | `0.7.15` | `0.8.0` |
| [libsodium-wrappers](https://github.com/jedisct1/libsodium.js) | `0.7.15` | `0.8.0` |
| [libsodium-wrappers-sumo](https://github.com/jedisct1/libsodium.js) | `0.7.15` | `0.8.0` |
| [ws](https://github.com/websockets/ws) | `8.18.3` | `8.19.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.50.1` | `8.52.0` |
| [supertest](https://github.com/ladjs/supertest) | `7.1.4` | `7.2.2` |



Updates `@aws-sdk/client-s3` from 3.958.0 to 3.966.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.966.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.958.0 to 3.966.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.966.0/packages/s3-request-presigner)

Updates `libsodium` from 0.7.15 to 0.8.0
- [Release notes](https://github.com/jedisct1/libsodium.js/releases)
- [Commits](jedisct1/libsodium.js@0.7.15...0.8.0)

Updates `libsodium-wrappers` from 0.7.15 to 0.8.0
- [Release notes](https://github.com/jedisct1/libsodium.js/releases)
- [Commits](jedisct1/libsodium.js@0.7.15...0.8.0)

Updates `libsodium-wrappers-sumo` from 0.7.15 to 0.8.0
- [Release notes](https://github.com/jedisct1/libsodium.js/releases)
- [Commits](jedisct1/libsodium.js@0.7.15...0.8.0)

Updates `ws` from 8.18.3 to 8.19.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.18.3...8.19.0)

Updates `@typescript-eslint/eslint-plugin` from 8.50.1 to 8.52.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.52.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.50.1 to 8.52.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.52.0/packages/parser)

Updates `supertest` from 7.1.4 to 7.2.2
- [Release notes](https://github.com/ladjs/supertest/releases)
- [Commits](forwardemail/supertest@v7.1.4...v7.2.2)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.966.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.966.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: libsodium
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: libsodium-wrappers
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: libsodium-wrappers-sumo
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: ws
  dependency-version: 8.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.52.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.52.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: supertest
  dependency-version: 7.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 12, 2026
@github-actions
Copy link

tests: Run #559

Tests 📝 Passed ✅ Failed ❌ Skipped ⏭️ Pending ⏳ Other ❓ Flaky 🍂 Duration ⏱️
124 120 3 0 1 0 0 34.2s

Some tests failed!

Name Failure Message
❌ personalTracker/getAll Should return all encrypted events and decrypt them correctly Error Timeout of 5000ms exceeded. For async tests and hooks, ensure "done()" is called; if returning a Promise, ensure it resolves. (/home/runner/work/api.statox.fr/api.statox.fr/dist/tests/routes/personalTracker/getAll/getAll.test.js)
❌ personalTracker/getAll Should only return events for the authenticated user, not other users Error Timeout of 5000ms exceeded. For async tests and hooks, ensure "done()" is called; if returning a Promise, ensure it resolves. (/home/runner/work/api.statox.fr/api.statox.fr/dist/tests/routes/personalTracker/getAll/getAll.test.js)
❌ "before each" hook: beforeEach for "Should verify data isolation: mistakenly attributed data should not be accessible" Error Error in auth proces - Couldn't find user when deserializing a session. UserId: 3

Github Test Reporter

@github-actions
Copy link

tests: Run #560

Tests 📝 Passed ✅ Failed ❌ Skipped ⏭️ Pending ⏳ Other ❓ Flaky 🍂 Duration ⏱️
124 120 3 0 1 0 0 33.6s

Some tests failed!

Name Failure Message
❌ personalTracker/getAll Should return all encrypted events and decrypt them correctly Error Timeout of 5000ms exceeded. For async tests and hooks, ensure "done()" is called; if returning a Promise, ensure it resolves. (/home/runner/work/api.statox.fr/api.statox.fr/dist/tests/routes/personalTracker/getAll/getAll.test.js)
❌ personalTracker/getAll Should only return events for the authenticated user, not other users Error Timeout of 5000ms exceeded. For async tests and hooks, ensure "done()" is called; if returning a Promise, ensure it resolves. (/home/runner/work/api.statox.fr/api.statox.fr/dist/tests/routes/personalTracker/getAll/getAll.test.js)
❌ "before each" hook: beforeEach for "Should verify data isolation: mistakenly attributed data should not be accessible" Error Error in auth proces - Couldn't find user when deserializing a session. UserId: 3

Github Test Reporter

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 19, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 19, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dev-dependencies-b34041c502 branch January 19, 2026 03:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants