Skip to content

chore(deps): update all-dependencies#14

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-dependencies
Open

chore(deps): update all-dependencies#14
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-dependencies

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 31, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@asteasolutions/zod-to-openapi 8.2.0 → 8.4.3 age adoption passing confidence dependencies minor
@prisma/adapter-pg (source) 7.2.0 → 7.4.2 age adoption passing confidence dependencies minor
@prisma/client (source) 7.2.0 → 7.4.2 age adoption passing confidence dependencies minor
@scalar/express-api-reference (source) 0.8.30 → 0.8.47 age adoption passing confidence dependencies patch
@swc/cli 0.7.9 → 0.8.0 age adoption passing confidence dependencies minor
@swc/core (source) 1.15.8 → 1.15.18 age adoption passing confidence dependencies patch
cors 2.8.5 → 2.8.6 age adoption passing confidence dependencies patch
dotenv 17.2.3 → 17.3.1 age adoption passing confidence dependencies minor
ioredis 5.9.0 → 5.10.0 age adoption passing confidence dependencies minor
lint-staged 16.2.7 → 16.3.1 age adoption passing confidence dependencies minor
mongoose (source) 9.1.1 → 9.2.3 age adoption passing confidence dependencies minor
pg (source) 8.16.3 → 8.19.0 age adoption passing confidence dependencies minor
pino (source) 10.1.0 → 10.3.1 age adoption passing confidence dependencies minor
pnpm (source) 10.26.1 → 10.30.3 age adoption passing confidence packageManager minor
redis 8.4.0-alpine → 8.6.1-alpine age adoption passing confidence minor
zod (source) 4.3.2 → 4.3.6 age adoption passing confidence dependencies patch

Release Notes

asteasolutions/zod-to-openapi (@​asteasolutions/zod-to-openapi)

v8.4.3

Compare Source

What's Changed

  • Bump rollup from 4.22.4 to 4.59.0

Full Changelog: asteasolutions/zod-to-openapi@v8.4.2...v8.4.3

v8.4.2

Compare Source

What's Changed

  • Bump minimatch

Full Changelog: asteasolutions/zod-to-openapi@v8.4.1...v8.4.2

v8.4.1

Compare Source

What's Changed

  • Fix memory leak in generateDocument() when using request parameters (fixes #​361)

Full Changelog: asteasolutions/zod-to-openapi@v8.4.0...v8.4.1

v8.4.0

Compare Source

What's Changed

  • Added support for z.json (#​353)
  • Added support for template literals (#​352)
  • Fixed a bug in some nested structures when using isAnyZodType with null/undefined #​343
  • Exported OpenApiOptions to resolve a problem when extending an object schema. For more information see: #​341

Full Changelog: asteasolutions/zod-to-openapi@v8.3.3...v8.4.0

v8.3.3

Compare Source

What's Changed

  • use correct date-time instead of date when using z.date
  • fix: add null option for nullable enum

Full Changelog: asteasolutions/zod-to-openapi@v8.3.2...v8.3.3

v8.3.2

Compare Source

Testing Trusted Publishers setup again

Full Changelog: asteasolutions/zod-to-openapi@v8.3.1...v8.3.2

v8.3.1

Compare Source

Testing the Trusted Publihsers setup

Full Changelog: asteasolutions/zod-to-openapi@v8.3.0...v8.3.1

v8.3.0

Compare Source

What's Changed

  • 🎉 FINALLY added support for zod lazy (and recursive schemas with getters). Closes: #​247, #​300 and the discussion in #​191
  • Bump js-yaml from 3.14.1 to 3.14.2
  • Setup Trusted Publishsers for NPM

Full Changelog: asteasolutions/zod-to-openapi@v8.2.0...v8.3.0

prisma/prisma (@​prisma/adapter-pg)

v7.4.2

Compare Source

Today, we are issuing a 7.4.2 patch release focused on bug fixes and quality improvements.

🛠 Fixes

Prisma Client

  • Fix a case-insensitive IN and NOT IN filter regression (#​29243)
  • Fix a query plan mutation issue that resulted in broken cursor queries (#​29262)
  • Fix an array parameter wrapping issue in push operations (prisma/prisma-engines#5784)
  • Fix Uint8Array serialization in nested JSON fields (#​29268)
  • Fix an issue with MySQL joins that relied on non-strict equality (#​29251)

Driver Adapters

Schema Engine

🙏 Huge thanks to our community

Many of the fixes in this release were contributed by our amazing community members. We're grateful for your continued support and contributions that help make Prisma better for everyone!

v7.4.1

Compare Source

Today, we are issuing a 7.4.1 patch release focused on bug fixes and quality improvements.

🛠 Fixes

Prisma Client

  • Fix cursor-based pagination regression with parameterised values (#​29184)
  • Preserve Prisma.skip through query extension argument cloning (#​29198)
  • Enable batching of multiple queries inside interactive transactions (#​25571)
  • Add missing JSON value deserialization for JSONB parameter fields (#​29182)
  • Apply result extensions correctly for nested and fluent relations (#​29218)
  • Allow missing config datasource URL and validate only when needed (prisma/prisma-engines#5777)

Driver Adapters

Prisma Schema Language

🙏 Huge thanks to our community

Many of the fixes in this release were contributed by our amazing community members. We're grateful for your continued support and contributions that help make Prisma better for everyone!

v7.4.0

Compare Source

Today, we are excited to share the 7.4.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Caching in Prisma Client

Today’s release is a big one, as we introduce a new caching layer into Prisma ORM. But why the need for a caching layer?

In Prisma 7, the query compiler runs as a WebAssembly module directly on the JavaScript main thread. While this simplified the architecture by eliminating the separate engine process, it introduced a trade-off: every query now synchronously blocks the event loop during compilation.

For individual queries, compilation takes between 0.1ms and 1ms, which is barely noticeable in isolation. But under high concurrency this overhead adds up and creates event loop contention that affects overall application throughput.

For instance, say we have a query that is run over and over, but is a similar shape:

// These two queries have the same shape:
const alice = await prisma.user.findUnique({ where: { email: 'alice@prisma.io' } })
const bob = await prisma.user.findUnique({ where: { email: 'bob@prisma.io' } })

Prior to v7.4.0, this would be reevaluated ever time the query is run. Now, Prisma Client will extract the user-provided values and replaces them with typed placeholders, producing a normalized query shape:

prisma.user.findUnique({ where: { email: %1 } })   // cache key
                                         ↑
                              %1 = 'alice@prisma.io'  (or 'bob@prisma.io')

This normalized shape is used as a cache key. On the first call, the query is compiled as usual and the resulting plan is stored in an LRU cache. On every subsequent call with the same query shape, regardless of the actual values, the cached plan is reused instantly without invoking the compiler.

We have more details on the impact of this change and some deep dives into Prisma architecture in an upcoming blog post!

Partial Indexes (Filtered Indexes) Support

We're excited to announce Partial Indexes support in Prisma! This powerful community-contributed feature allows you to create indexes that only include rows matching specific conditions, significantly reducing index size and improving query performance.

Partial indexes are available behind the partialIndexes preview feature for PostgreSQL, SQLite, SQL Server, and CockroachDB, with full migration and introspection support.

Basic usage

Enable the preview feature in your schema:

generator client {
  provider        = "prisma-client-js"
  previewFeatures = ["partialIndexes"]
}

Raw SQL syntax

For maximum flexibility, use the raw() function with database-specific predicates:

model User {
  id       Int     @​id
  email    String
  status   String

  @​@​unique([email], where: raw("status = 'active'"))
  @​@​index([email], where: raw("deletedAt IS NULL"))
}

Type-safe object syntax

For better type safety, use the object literal syntax for simple conditions:

model Post {
  id        Int      @​id
  title     String
  published Boolean

  @​@​index([title], where: { published: true })
  @​@​unique([title], where: { published: { not: false } })
}
Bug Fixes

Most of these fixes are community contributions - thank you to our amazing contributors!

  • prisma/prisma-engines#5767: Fixed an issue with PostgreSQL migration scripts that prevented usage of CREATE INDEX CONCURRENTLY in migrations
  • prisma/prisma-engines#5752: Fixed BigInt precision loss in JSON aggregation for MySQL and CockroachDB by casting BigInt values to text (from community member polaz)
  • prisma/prisma-engines#5750: Fixed connection failures with non-ASCII database names by properly URL-decoding database names in connection strings
  • #​29155: Fixed silent transaction commit errors in PlanetScale adapter by ensuring COMMIT failures are properly propagated
  • #​29141: Resolved race condition errors (EREQINPROG) in SQL Server adapter by serializing commit/rollback operations using mutex synchronization
  • #​29158: Fixed MSSQL connection string parsing to properly handle curly brace escaping for passwords containing special characters

Open roles at Prisma

Interested in joining Prisma? We’re growing and have several exciting opportunities across the company for developers who are passionate about building with Prisma. Explore our open positions on our Careers page and find the role that’s right for you.

Enterprise support

Thousands of teams use Prisma and many of them already tap into our Enterprise & Agency Support Program for hands-on help with everything from schema integrations and performance tuning to security and compliance.

With this program you also get priority issue triage and bug fixes, expert scalability advice, and custom training so that your Prisma-powered apps stay rock-solid at any scale. Learn more or join: https://prisma.io/enterprise.

v7.3.0

Compare Source

Today, we are excited to share the 7.3.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

ORM

  • #​28976: Fast and Small Query Compilers
    We've been working on various performance-related bugs since the initial ORM 7.0 release. With 7.3.0, we're introducing a new compilerBuild option for the client generator block in schema.prisma with two options: fast and small. This allows you to swap the underlying Query Compiler engine based on your selection, one built for speed (with an increase in size), and one built for size (with the trade off for speed). By default, the fast mode is used, but this can be set by the user:
generator client {
  provider = "prisma-client"
  output   = "../src/generated/prisma"
  compilerBuild = "fast" // "fast" | "small"
}

We still have more in progress for performance, but this new compilerBuild option is our first step toward addressing your concerns!

  • #​29005: Bypass the Query Compiler for Raw Queries
    Raw queries ($executeRaw, $queryRaw) can now skip going through the query compiler and query interpreter infrastructure. They can be sent directly to the driver adapter, removing additional overhead.

  • #​28965: Update MSSQL to v12.2.0
    This community PR updates the @prisma/adapter-mssql to use MSSQL v12.2.0. Thanks Jay-Lokhande!

  • #​29001: Pin better-sqlite3 version to avoid SQLite bug
    An underlying bug in SQLite 3.51.0 has affected the better-sqlite3 adapter. We’ve bumped the version that powers @prisma/better-sqlite3 and have pinned the version to prevent any unexpected issues. If you are using @prisma/better-sqlite3 , please upgrade to v7.3.0.

  • #​29002: Revert @map enums to v6.19.0 behavior
    In the initial release of v7.0, we made a change with Mapped Enums where the generated enum would get its value from the value passed to the @map function. This was a breaking change from v6 that caused issues for many users. We have reverted this change for the time being, as many different diverging approaches have emerged from the community discussion.

  • prisma-engines#5745: Cast BigInt to text in JSON aggregation
    When using relationJoins with BigInt fields in Prisma 7, JavaScript's JSON.parse loses precision for integers larger than Number.MAX_SAFE_INTEGER (2^53 - 1). This happens because PostgreSQL's JSONB_BUILD_OBJECT returns BigInt values as JSON numbers, which JavaScript cannot represent precisely.

    // Original BigInt ID: 312590077454712834
// After JSON.parse: 312590077454712830 (corrupted!)

    This PR cast BigInt columns to ::text inside JSONB_BUILD_OBJECT calls, similar to how MONEY is already cast to ::numeric.

    -- Before
JSONB_BUILD_OBJECT('id', "id")

-- After
JSONB_BUILD_OBJECT('id', "id"::text)

This ensures BigInt values are returned as JSON strings, preserving full precision when parsed in JavaScript.

Open roles at Prisma

Interested in joining Prisma? We’re growing and have several exciting opportunities across the company for developers who are passionate about building with Prisma. Explore our open positions on our [Careers page](https://www.prisma.io/careers#current) and find the role that’s right for you.

Enterprise support

Thousands of teams use Prisma and many of them already tap into our Enterprise & Agency Support Program for hands-on help with everything from schema integrations and performance tuning to security and compliance.

With this program you also get priority issue triage and bug fixes, expert scalability advice, and custom training so that your Prisma-powered apps stay rock-solid at any scale. Learn more or join: https://prisma.io/enterprise.

scalar/scalar (@​scalar/express-api-reference)

v0.8.47

Patch Changes
Updated Dependencies

v0.8.46

Patch Changes
Updated Dependencies

v0.8.45

Patch Changes
  • #​8248: fix(express): remove unused customTheme
Updated Dependencies

v0.8.44

Patch Changes
Updated Dependencies

v0.8.41

Patch Changes
Updated Dependencies

v0.8.40

Patch Changes
Updated Dependencies

v0.8.39

Patch Changes
Updated Dependencies

v0.8.38

Patch Changes
Updated Dependencies

v0.8.37

Patch Changes
Updated Dependencies

v0.8.36

Patch Changes
Updated Dependencies

v0.8.35

Patch Changes
  • #​7810: docs: update documentation domain

v0.8.34

Patch Changes
Updated Dependencies

v0.8.33

Patch Changes
Updated Dependencies

v0.8.32

Patch Changes
Updated Dependencies

v0.8.31

Patch Changes
Updated Dependencies
swc-project/swc (@​swc/core)

v1.15.18

Compare Source

Bug Fixes
Documentation
Features
Ci

v1.15.17

Compare Source

Documentation
Features

v1.15.13

Compare Source

Bug Fixes

  • (errors) Avoid panic on invalid diagnostic spans (#​11561) (b24b8e0)

  • (es/helpers) Fix _object_without_properties crash on primitive values (#​11571) (4f35904)

  • (es/jsx) Preserve whitespace before HTML entities (#​11521) (64be077)

  • (es/minifier) Do not merge if statements with different local variable values (#​11518) (3e63627)

  • (es/minifier) Prevent convert_tpl_to_str when there's emoji under es5 (#​11529) (ff6cf88)

  • (es/minifier) Inline before merge if (#​11526) (aa5a9ac)

  • (es/minifier) Preserve array join("") nullish semantics (#​11558) (d477f61)

  • (es/minifier) Inline side-effect-free default params (#​11564) (1babda7)

  • (es/parser) Fix generic arrow function in TSX mode (#​11549) (366a16b)

  • (es/react) Preserve first-line leading whitespace with entities (#​11568) (fc62617)

  • (es/regexp) Transpile unicode property escapes in RegExp constructor (#​11554) (476d544)

Documentation
Features
Refactor

  • (es/parser) Compare token kind rather than strings (#​11531) (5872ffa)

  • (es/typescript) Run typescript transform in two passes (#​11532) (b069558)

  • (es/typescript) Precompute namespace import-equals usage in semantic pass (#​11534) (b7e87c7)

Testing
Ci

v1.15.11

Compare Source

Bug Fixes

  • (es/codegen) Emit leading comments for JSX elements, fragments, and empty expressions (#​11488) (1520633)

  • (es/decorators) Invoke addInitializer callbacks for decorated fields (#​11495) (11cfe4d)

  • (es/es3) Visit export decl body even if name is not reserved (#​11473) (9113fff)

  • (es/es3) Remove duplicate code (#​11499) (fbee775)

  • (es/minifier) Treat new expression with empty class as side-effect free (#​11455) (a33a45e)

  • (es/minifier) Escape control characters when converting strings to template literals (#​11464) (028551f)

  • (es/minifier) Handle unused parameters with default values (#​11494) (6ed1ee9)

  • (es/module) Preserve ./ prefix for hidden directory imports (#​11489) (a005391)

  • (es/parser) Validate dynamic import argument count (#​11462) (2f67591)

  • (es/parser) Allow compilation with --no-default-features (#​11460) (b70c5f8)

  • (es/parser) Skip emitting TS1102 in TypeScript mode (#​11463) (e6f5b06)

  • (es/parser) Reject ambiguous generic arrow functions in TSX mode (#​11491) (ac00915)

  • (es/parser) Disallow NumericLiteralSeparator with BigInts (#​11510) (6b3644b)

  • (es/react) Preserve HTML entity-encoded whitespace in JSX (#​11474) (7d433a9)

  • (es/renamer) Prevent duplicate parameter names with destructuring patterns (#​11456) (e25a2c8)

  • (es/testing) Skip update when expected output has invalid code (#​11469) (2be6b8a)

  • (es/typescript) Don't mark enums with opaque members as pure (#​11452) (b713fae)

  • (preset-env) Distinguish unknown browser vs empty config (#​11457) (1310957)

Documentation
Features

  • (cli) Add --root-mode argument for .swcrc resolution (#​11501) (b53a0e2)

  • (es/module) Make module transforms optional via module feature (#​11509) (b94a178)

  • (es/regexp) Implement unicode property escape transpilation (#​11472) (a2e0ba0)

  • (es/transformer) Merge ES3 hooks into swc_ecma_transformer (#​11503) (5efcac9)

Miscellaneous Tasks
  • (es/minifier) Extend OrderedChain to support more node types (#​11477) (aa9d789)
Performance
Refactor
Testing

  • (es/minifier) Add test case for merge_imports order preservation (#​11458) (b874a05)

  • (es/parser) Add error tests for import.source and import.defer with too many args (#​11466) (7313462)

  • (es/parser) Check handler.has_errors() in test error parsing (#​11487) (fade647)

  • Replace deprecated cargo_bin function with cargo_bin! macro (#​11461) (73f77b6)

v1.15.10

Compare Source

Bug Fixes

  • (ci) Handle merged PRs separately in milestone manager (#​11409) (3554268)

  • (es/compat) Preserve this context in nested arrow functions (#​11423) (f2bdaf2)

  • (es/es2017) Replace this in arrow functions during async-to-generator (#​11450) (a993da6)

Features
Miscellaneous Tasks
Performance

  • (es/codegen, es/utils) Migrate to dragonbox_ecma for faster Number::toString (#​11412) (b7978cc)

  • (es/react) Optimize JSX transforms to reduce allocations (#​11425) (2a20cb6)

Refactor
Testing
Ci
  • Collapse preivous claude[bot] PR review comments (affb6a2)
expressjs/cors (cors)

v2.8.6

Compare Source

==================

  • Improve documentation (API, context, examples...)
  • Remove additional markdown files from tarball
motdotla/dotenv (dotenv)

v17.3.1

Compare Source

Changed
  • Fix as2 example command in README and update spanish README

v17.3.0

Compare Source

Added
  • Add a new README section on dotenv’s approach to the agentic future.
Changed
  • Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

v17.2.4

Compare Source

Changed
  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type ([#&#820

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@vercel
Copy link

vercel bot commented Dec 31, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
express_boilerplate Ready Ready Preview, Comment Mar 2, 2026 10:10pm
express-boilerplate Ready Ready Preview, Comment Mar 2, 2026 10:10pm
express-v5-typescript-boilerplate Ready Ready Preview, Comment Mar 2, 2026 10:10pm

@renovate renovate bot force-pushed the renovate/all-dependencies branch from a27cb42 to fd355e3 Compare December 31, 2025 21:48
@renovate renovate bot force-pushed the renovate/all-dependencies branch from fd355e3 to 3cf4afa Compare January 1, 2026 05:45
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 3cf4afa to f139b14 Compare January 3, 2026 20:50
@renovate renovate bot force-pushed the renovate/all-dependencies branch from f139b14 to 59e21a7 Compare January 4, 2026 08:50
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 59e21a7 to e907b99 Compare January 4, 2026 13:13
@renovate renovate bot force-pushed the renovate/all-dependencies branch from e907b99 to f8396cc Compare January 5, 2026 17:53
@renovate renovate bot force-pushed the renovate/all-dependencies branch from f8396cc to ab7f2eb Compare January 8, 2026 05:45
@renovate renovate bot force-pushed the renovate/all-dependencies branch from ab7f2eb to 263a035 Compare January 9, 2026 03:03
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 263a035 to 1356695 Compare January 9, 2026 21:11
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 1356695 to 70bc68e Compare January 10, 2026 00:28
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 70bc68e to d3fede4 Compare January 12, 2026 01:28
@renovate renovate bot force-pushed the renovate/all-dependencies branch from d3fede4 to 439593f Compare January 14, 2026 11:08
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 439593f to 1585451 Compare January 14, 2026 21:39
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 7a2a558 to 1e28bfb Compare February 23, 2026 13:10
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 1e28bfb to 0567bed Compare February 23, 2026 19:53
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 0567bed to 16a0223 Compare February 24, 2026 02:17
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 16a0223 to b1a3543 Compare February 24, 2026 20:09
@renovate renovate bot force-pushed the renovate/all-dependencies branch from b1a3543 to e8b9cf3 Compare February 25, 2026 20:15
@renovate renovate bot force-pushed the renovate/all-dependencies branch from e8b9cf3 to 86b6ea6 Compare February 26, 2026 13:53
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 86b6ea6 to 227dcd1 Compare February 26, 2026 21:03
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 227dcd1 to 928e31e Compare February 27, 2026 01:16
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 928e31e to a2caa8a Compare February 27, 2026 18:10
@renovate renovate bot force-pushed the renovate/all-dependencies branch from a2caa8a to c92909d Compare February 28, 2026 13:26
@renovate renovate bot force-pushed the renovate/all-dependencies branch from c92909d to 4b9abf1 Compare March 1, 2026 07:38
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 4b9abf1 to d2c9df1 Compare March 1, 2026 21:43
@renovate renovate bot force-pushed the renovate/all-dependencies branch from d2c9df1 to 50ba9a4 Compare March 2, 2026 10:36
@renovate renovate bot force-pushed the renovate/all-dependencies branch from 50ba9a4 to 394c6b1 Compare March 2, 2026 22:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants