Skip to content

build(deps): bump the production-dependencies group with 14 updates - #264

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-1ee6926c5e
Open

build(deps): bump the production-dependencies group with 14 updates#264
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-1ee6926c5e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 14 updates:

Package From To
@orpc/contract 1.14.13 1.14.15
@orpc/client 1.14.13 1.14.15
@orpc/openapi 1.14.13 1.14.15
@orpc/openapi-client 1.14.13 1.14.15
@scure/bip39 2.2.0 2.3.0
next 16.2.12 16.3.0
tsx 4.23.4 4.23.11
@aws-sdk/client-s3 3.1101.0 3.1106.0
@aws-sdk/s3-request-presigner 3.1101.0 3.1106.0
@orpc/server 1.14.13 1.14.15
@orpc/zod 1.14.13 1.14.15
bullmq 6.0.6 6.0.9
fastify 5.11.2 5.11.3
@aws-sdk/lib-storage 3.1101.0 3.1106.0

Updates @orpc/contract from 1.14.13 to 1.14.15

Release notes

Sourced from @​orpc/contract's releases.

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @orpc/client from 1.14.13 to 1.14.15

Release notes

Sourced from @​orpc/client's releases.

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @orpc/openapi from 1.14.13 to 1.14.15

Release notes

Sourced from @​orpc/openapi's releases.

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @orpc/openapi-client from 1.14.13 to 1.14.15

Release notes

Sourced from @​orpc/openapi-client's releases.

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @scure/bip39 from 2.2.0 to 2.3.0

Release notes

Sourced from @​scure/bip39's releases.

2.3.0

  • Rewrite package: the logic is now declared in scure-bip39 instead of @scure/base dependency, which was removed.
  • Upgrade noble-hashes to 2.3.0.

Full Changelog: paulmillr/scure-bip39@2.2.0...2.3.0

Commits

Updates next from 16.2.12 to 16.3.0

Release notes

Sourced from next's releases.

v16.3.0

Core Changes

  • Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
  • Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
  • Normalize encoded dynamic placeholders in app routes: #91603
  • Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
  • Update tokio from 1.43.0 to 1.47.3: #90945
  • [turbopack] Simplify snapshotting logic: #91178
  • Turbopack: enable server HMR for app route handlers: #91466
  • turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
  • [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
  • Skip loadBindings() Lightning CSS check during next start: #91538
  • turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
  • Turbopack: Add importModule() support to webpack loaders: #89630
  • turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
  • turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
  • feat(node-streams): add config flag, define-env, and env precedence test: #90427
  • Rename /_next/webpack-hmr to /_next/hmr: #91415
  • Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
  • Handle encoded params further: #91627
  • [turbopack] Respect {eval:true} in worker_threads constructors: #91666
  • Fix missing route in otel spans without base-server: #91665
  • [turbopack] Optimize compaction cpu usage: #91468
  • Fix layout segment optimization: move app-page imports to server-utility transition: #91701
  • Fix server actions in standalone mode with cacheComponents: #91711
  • turbo-persistence: remove Unmergeable mmap advice: #91713
  • turbopack: move "compact database" tracing span to backend layer: #91693
  • Turbopack: lazy require metadata and handle TLA: #91705
  • Fix adapter outputs for dynamic metadata routes: #91680
  • Turbopack: fix webpack loader runner layer: #91727
  • [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
  • Add module count field to module graph tracing spans: #91697
  • turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
  • Turbopack: pull in updated vercel/nft tests: #91651
  • [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
  • [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
  • [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
  • Avoid deprecated TS node10 moduleResolution defaults: #91847
  • [turbopack] Rebuild the docker build scripts: #91799
  • Fix TS6 baseUrl deprecation for extended tsconfig: #91855
  • Add next internal post-build CLI command for Turbopack database compaction: #91336
  • Turbopack: Define Effect as a trait instead of a closure: #89080
  • Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
  • turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
  • Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
  • Use charCodeAt for normalizePathTrailingSlash: #91380
  • Turbopack: Only patch lockfile when bindings fails to load: #91379
  • [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
  • [devtools] Make instant navs panel draggable: #91914
  • [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

Updates tsx from 4.23.4 to 4.23.11

Release notes

Sourced from tsx's releases.

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

  • preserve async ESM require fallback (55cbece)

This release is also available on:

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

This release is also available on:

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

  • map Node test locations (2f55884)
  • support data URLs in tsImport (b94f46f)

This release is also available on:

v4.23.8

4.23.8 (2026-08-05)

Bug Fixes

  • preserve package subpath resolution (be1315e)
  • preserve typeless ESM dependency exports (70dfc5e)

This release is also available on:

... (truncated)

Commits
  • bd3bc64 test: cover CommonJS loader source fallback
  • 55cbece fix: preserve async ESM require fallback
  • 6c5ba85 docs: document CommonJS default interop
  • ec1bcd5 fix: support nyc coverage discovery (#710)
  • b6e5b48 docs: clarify CommonJS default imports
  • 2f55884 fix: map Node test locations
  • de935d5 docs: document Node source-map stack formatting
  • b94f46f fix: support data URLs in tsImport
  • be1315e fix: preserve package subpath resolution
  • 5efba41 docs: organize transform backend research
  • Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.1101.0 to 3.1106.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1106.0

3.1106.0(2026-08-07)

New Features
  • clients: update client endpoints as of 2026-08-07 (c5d05426)
  • client-amplify: Increased the maximum allowed length of the oauthToken parameter in the CreateApp and UpdateApp APIs to support longer OAuth tokens issued by third-party Git providers. (b239e292)
  • client-healthlake: Adds provenanceEnabled to StartFHIRImportJob (18ac6efe)
  • client-securityagent: Added enableEmailMfa input field on Actor to enable email-based MFA during penetration tests. When enabled, a server-generated mfaForwardingAddress is returned. Set up a forwarding rule in your email provider to forward MFA emails to this address so the agent can complete email-based MFA login flows (e21d3919)
  • client-mediapackagev2: StreamNameOutputMode - a new optional field on MediaPackageV2 OriginEndpoints that lets customers choose whether egress manifests use numeric stream indices (default) or encoder-assigned stream names from the input (7f49cb06)
  • client-sagemaker: Amazon SageMaker adds maintenance lifecycle statuses for Notebook Instances (6ce0f884)
  • client-ec2: This release adds support for BGP route protection in Amazon VPC IP Address Manager (IPAM), including route discovery, RPKI route protection findings, and delegated RPKI (Internet Registry Associations, routing policy registrations, and ROA management) for BYOIP prefixes. (62f281df)
  • client-mediatailor: Added support for inserting ads via the VAST Ad Buffet standard. You can now configure MediaTailor to insert ads in sequence order using the AdSequencingMode setting in your playback configuration. Standalone ads are used as fallbacks when a sequenced ad is unavailable. (7bebb1e5)
  • client-connect: Supports updating the task template associated with in-progress task contacts using the new UpdateContactTaskTemplate API. This enables supervisors and developers to dynamically reassign task templates without creating a new task. (24f40416)

For list of updated packages, view updated-packages.md in assets-3.1106.0.zip

v3.1105.0

3.1105.0(2026-08-06)

Chores
  • lib-dynamodb: add error msg and fallback when incompatible client is supplied (#8231) (e663d41f)
New Features
  • clients: update client endpoints as of 2026-08-06 (e4f7b32f)
  • client-cloudwatch-logs: This release adds index category support to the CloudWatch Logs DescribeFieldIndexes API. Customers can filter and identify DEFAULT, CUSTOM, AUTO, and INACTIVE field indexes. (e17fff6f)
  • client-socialmessaging: Add support for WhatsApp Conversions APIs. (5c29a869)
  • client-gamelift: Adds support for C8a, C8i, C9g, M8a, M8i, and M9g EC2 instance type families for managed EC2 and container fleets. Also adds explicit anchors on most string regexes. (30dfd63a)
  • client-securityhub: Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features. (e44b3582)
  • client-bedrock-agentcore-control: Add support for Gateway rate limits and Runtime instances in Amazon Bedrock AgentCore. Customers can now configure rate limits scoped to control request rates, token consumption rates, and active connection rates. Customers can now create capacity providers to launch runtimes on their EC2 instances. (865d21ef)
  • client-device-farm: Adds support for service generated insights across runs, jobs, and tests. (6c601b71)
  • client-sagemaker: Releases new Model Customization SequenceLength parameter for Training and g7 instance types for Training and Processing. (14bd2ac7)
  • client-agent-registry-control: Agent Registry's Public Preview release (a137863d)
  • client-backup: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (636228a9)
  • client-mediatailor: AWS Elemental MediaTailor now supports concurrent function execution. The new Concurrent Executor function type runs multiple independent child functions in parallel within a single lifecycle hook, reducing pipeline latency to the duration of the slowest call instead of the sum of all calls. (1cf61475)
  • client-marketplace-agreement: GetAgreementTerms now returns a new term variant in AcceptedTerm, netPaymentTerm, with a paymentDuePeriod field (example "P30D"). (50b0d6d5)
  • client-agent-registry: Agent Registry's Public Preview release (632ae479)
  • client-kafka: MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you (b7e31937)
  • client-bedrock-agentcore: Add support for capacity provider sessions in Amazon Bedrock AgentCore. Customers can now delete an active session running on a runtime instance launched through their capacity provider. (bd301533)
  • client-auto-scaling: EC2 Auto Scaling now supports being managed by other AWS services via the operator field. (f5d54fce)
  • client-ec2: Adds a new optional IncludeLocalZones parameter to the Spot Placement Score API that defaults to false. When set to true, the Spot Placement Score API will consider the relevant Local Zones with Spot capacity when computing the Spot Placement Score. (43673842)
  • client-marketplace-discovery: GetOfferTerms now returns netPaymentTerm in offerTerms, specifying payment due period after invoice date. The paymentDuePeriod field uses ISO 8601 duration format (e.g., "P30D" for net 30 days). This is a backward-compatible addition. See API documentation for full structure and examples. (f4fd7ae7)
  • client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf65602)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1106.0 (2026-08-07)

Note: Version bump only for package @​aws-sdk/client-s3

3.1105.0 (2026-08-06)

Features

  • client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf6560)

3.1104.0 (2026-08-05)

Note: Version bump only for package @​aws-sdk/client-s3

3.1103.0 (2026-08-04)

Note: Version bump only for package @​aws-sdk/client-s3

3.1102.0 (2026-08-03)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates @aws-sdk/s3-request-presigner from 3.1101.0 to 3.1106.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1106.0

3.1106.0(2026-08-07)

New Features
  • clients: update client endpoints as of 2026-08-07 (c5d05426)
  • client-amplify: Increased the maximum allowed length of the oauthToken parameter in the CreateApp and UpdateApp APIs to support longer OAuth tokens issued by third-party Git providers. (b239e292)
  • client-healthlake: Adds provenanceEnabled to StartFHIRImportJob (18ac6efe)
  • client-securityagent: Added enableEmailMfa input field on Actor to enable email-based MFA during penetration tests. When enabled, a server-generated mfaForwardingAddress is returned. Set up a forwarding rule in your email provider to forward MFA emails to this address so the agent can complete email-based MFA login flows (e21d3919)
  • client-mediapackagev2: StreamNameOutputMode - a new optional field on MediaPackageV2 OriginEndpoints that lets customers choose whether egress manifests use numeric stream indices (default) or encoder-assigned stream names from the input (7f49cb06)
  • client-sagemaker: Amazon SageMaker adds maintenance lifecycle statuses for Notebook Instances (6ce0f884)
  • client-ec2: This release adds support for BGP route protection in Amazon VPC IP Address Manager (IPAM), including route discovery, RPKI route protection findings, and delegated RPKI (Internet Registry Associations, routing policy registrations, and ROA management) for BYOIP prefixes. (62f281df)
  • client-mediatailor: Added support for inserting ads via the VAST Ad Buffet standard. You can now configure MediaTailor to insert ads in sequence order using the AdSequencingMode setting in your playback configuration. Standalone ads are used as fallbacks when a sequenced ad is unavailable. (7bebb1e5)
  • client-connect: Supports updating the task template associated with in-progress task contacts using the new UpdateContactTaskTemplate API. This enables supervisors and developers to dynamically reassign task templates without creating a new task. (24f40416)

For list of updated packages, view updated-packages.md in assets-3.1106.0.zip

v3.1105.0

3.1105.0(2026-08-06)

Chores
  • lib-dynamodb: add error msg and fallback when incompatible client is supplied (#8231) (e663d41f)
New Features
  • clients: update client endpoints as of 2026-08-06 (e4f7b32f)
  • client-cloudwatch-logs: This release adds index category support to the CloudWatch Logs DescribeFieldIndexes API. Customers can filter and identify DEFAULT, CUSTOM, AUTO, and INACTIVE field indexes. (e17fff6f)
  • client-socialmessaging: Add support for WhatsApp Conversions APIs. (5c29a869)
  • client-gamelift: Adds support for C8a, C8i, C9g, M8a, M8i, and M9g EC2 instance type families for managed EC2 and container fleets. Also adds explicit anchors on most string regexes. (30dfd63a)
  • client-securityhub: Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features. (e44b3582)
  • client-bedrock-agentcore-control: Add support for Gateway rate limits and Runtime instances in Amazon Bedrock AgentCore. Customers can now configure rate limits scoped to control request rates, token consumption rates, and active connection rates. Customers can now create capacity providers to launch runtimes on their EC2 instances. (865d21ef)
  • client-device-farm: Adds support for service generated insights across runs, jobs, and tests. (6c601b71)
  • client-sagemaker: Releases new Model Customization SequenceLength parameter for Training and g7 instance types for Training and Processing. (14bd2ac7)
  • client-agent-registry-control: Agent Registry's Public Preview release (a137863d)
  • client-backup: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (636228a9)
  • client-mediatailor: AWS Elemental MediaTailor now supports concurrent function execution. The new Concurrent Executor function type runs multiple independent child functions in parallel within a single lifecycle hook, reducing pipeline latency to the duration of the slowest call instead of the sum of all calls. (1cf61475)
  • client-marketplace-agreement: GetAgreementTerms now returns a new term variant in AcceptedTerm, netPaymentTerm, with a paymentDuePeriod field (example "P30D"). (50b0d6d5)
  • client-agent-registry: Agent Registry's Public Preview release (632ae479)
  • client-kafka: MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you (b7e31937)
  • client-bedrock-agentcore: Add support for capacity provider sessions in Amazon Bedrock AgentCore. Customers can now delete an active session running on a runtime instance launched through their capacity provider. (bd301533)
  • client-auto-scaling: EC2 Auto Scaling now supports being managed by other AWS services via the operator field. (f5d54fce)
  • client-ec2: Adds a new optional IncludeLocalZones parameter to the Spot Placement Score API that defaults to false. When set to true, the Spot Placement Score API will consider the relevant Local Zones with Spot capacity when computing the Spot Placement Score. (43673842)
  • client-marketplace-discovery: GetOfferTerms now returns netPaymentTerm in offerTerms, specifying payment due period after invoice date. The paymentDuePeriod field uses ISO 8601 duration format (e.g., "P30D" for net 30 days). This is a backward-compatible addition. See API documentation for full structure and examples. (f4fd7ae7)
  • client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf65602)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1106.0 (2026-08-07)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1105.0 (2026-08-06)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1104.0 (2026-08-05)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1103.0 (2026-08-04)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1102.0 (2026-08-03)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

Commits

Updates @orpc/server from 1.14.13 to 1.14.15

Release notes

Sourced from @​orpc/server's releases.

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @orpc/zod from 1.14.13 to 1.14.15

Release notes

Sourced from @​orpc/zod's releases.

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates bullmq from 6.0.6 to 6.0.9

Release notes

Sourced from bullmq's releases.

v6.0.9

6.0.9 (2026-08-07)

Bug Fixes

  • events: type completed event returnvalue as deserialized value (#4441) fixes #4147 (5910ccc)

v6.0.8

6.0.8 (2026-08-05)

Bug Fixes

  • deps: avoid deep ioredis import so postgres backend works without ioredis internals (#4437) fixes #4435 (550e446)
  • postgres: fail fast when SQL loader directory cannot be resolved (#4482) (f3936a2)

v6.0.7

6.0.7 (2026-08-04)

Bug Fixes

  • worker: recover blocking reads that never settle after a reconnect fixes #4479 (#4484) (e7e9a64)
Commits
  • 5910ccc fix(events): type completed event returnvalue as deserialized value (#4441) f...
  • aebff17 chore(deps): update docker.dragonflydb.io/dragonflydb/dragonfly docker tag to...
  • 7be3e7e ci: do not pin peer dependencies (#4519)
  • a1dd9ae chore(deps): update ci dependencies (#4516)
  • a46ebc2 chore(deps): update dependency squizlabs/php_codesniffer to v4.0.4 [php] (#4515)
  • 00410ae docs: corrected some texts (#4510) [dotnet]
  • 1d44f06 chore(deps): lock file maintenance (#4509)
  • cdab95e chore(deps): update security patches [security] (#4499)
  • 62777d9 chore: ignore multi line commits from changelog (#4508)
  • 9b1861e ci(docs): upgrade vitepress to fix docs
  • Additional commits viewable in compare view

Updates fastify from 5.11.2 to 5.11.3

Release notes

Sourced from fastify's releases.

v5.11.3

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

Commits
  • a22cede Bumped v5.11.3
  • 16a74e7 fix: reset lastIndex before testing global/sticky content-type RegExp parsers...
  • 27938ac fix: recognize constructor-assigned built-in properties as decorator dependen...
  • a2f5905 chore: Bump fastify/workflows/.github/workflows/nested-quality.yml (#6917)
  • 22c419a chore: Bump fastify/workflows/.github/workflows/lock-threads.yml (#6916)
  • f5b1400 docs(encapsulation): clarify nested plugin scopes (#6893)
  • 9eaef51 fix: pass null instead of undefined to requestCompleted on success (#6837)
  • 39e87e8 docs(readme): fix grammar and cjs capitalization (#6899)
  • 3f6451c docs(errors): document what the default error handler sends (#6894)
  • f28528f docs: document percent-decoded route params as untrusted input (#6903)
  • Additional commits viewable in compare view

Updates @aws-sdk/lib-storage from 3.1101.0 to 3.1106.0

Release notes

Sourced from @​aws-sdk/lib-storage's releases.

v3.1106.0

3.1106.0(2026-08-07)

New Features
  • clients: update client endpoints as of 2026-08-07 (c5d05426)
  • ...

    Description has been truncated

@dependabot
build(deps): bump the production-dependencies group with 14 updates
c1df1b8 
Bumps the production-dependencies group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [@orpc/contract](https://github.com/middleapi/orpc/tree/HEAD/packages/contract) | `1.14.13` | `1.14.15` |
| [@orpc/client](https://github.com/middleapi/orpc/tree/HEAD/packages/client) | `1.14.13` | `1.14.15` |
| [@orpc/openapi](https://github.com/middleapi/orpc/tree/HEAD/packages/openapi) | `1.14.13` | `1.14.15` |
| [@orpc/openapi-client](https://github.com/middleapi/orpc/tree/HEAD/packages/openapi-client) | `1.14.13` | `1.14.15` |
| [@scure/bip39](https://github.com/paulmillr/scure-bip39) | `2.2.0` | `2.3.0` |
| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.4` | `4.23.11` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1101.0` | `3.1106.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1101.0` | `3.1106.0` |
| [@orpc/server](https://github.com/middleapi/orpc/tree/HEAD/packages/server) | `1.14.13` | `1.14.15` |
| [@orpc/zod](https://github.com/middleapi/orpc/tree/HEAD/packages/zod) | `1.14.13` | `1.14.15` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `6.0.6` | `6.0.9` |
| [fastify](https://github.com/fastify/fastify) | `5.11.2` | `5.11.3` |
| [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.1101.0` | `3.1106.0` |


Updates `@orpc/contract` from 1.14.13 to 1.14.15
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.14.15/packages/contract)

Updates `@orpc/client` from 1.14.13 to 1.14.15
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.14.15/packages/client)

Updates `@orpc/openapi` from 1.14.13 to 1.14.15
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.14.15/packages/openapi)

Updates `@orpc/openapi-client` from 1.14.13 to 1.14.15
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.14.15/packages/openapi-client)

Updates `@scure/bip39` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/paulmillr/scure-bip39/releases)
- [Commits](paulmillr/scure-bip39@2.2.0...2.3.0)

Updates `next` from 16.2.12 to 16.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.0)

Updates `tsx` from 4.23.4 to 4.23.11
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.4...v4.23.11)

Updates `@aws-sdk/client-s3` from 3.1101.0 to 3.1106.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1106.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1101.0 to 3.1106.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1106.0/packages/s3-request-presigner)

Updates `@orpc/server` from 1.14.13 to 1.14.15
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.14.15/packages/server)

Updates `@orpc/zod` from 1.14.13 to 1.14.15
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.14.15/packages/zod)

Updates `bullmq` from 6.0.6 to 6.0.9
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v6.0.6...v6.0.9)

Updates `fastify` from 5.11.2 to 5.11.3
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.11.2...v5.11.3)

Updates `@aws-sdk/lib-storage` from 3.1101.0 to 3.1106.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1106.0/lib/lib-storage)

---
updated-dependencies:
- dependency-name: "@orpc/contract"
  dependency-version: 1.14.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@orpc/client"
  dependency-version: 1.14.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@orpc/openapi"
  dependency-version: 1.14.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@orpc/openapi-client"
  dependency-version: 1.14.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@scure/bip39"
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tsx
  dependency-version: 4.23.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1106.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1106.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/server"
  dependency-version: 1.14.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@orpc/zod"
  dependency-version: 1.14.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: bullmq
  dependency-version: 6.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: fastify
  dependency-version: 5.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@aws-sdk/lib-storage"
  dependency-version: 3.1106.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
@socket-security

socket-security Bot commented Aug 11, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednext@​16.3.061100909970
Addedtsx@​4.23.111001008195100
Added@​aws-sdk/​lib-storage@​3.1106.01001008598100
Added@​orpc/​zod@​1.14.158810010096100
Added@​scure/​bip39@​2.3.010010010088100
Added@​orpc/​server@​1.14.159310010096100
Addedbullmq@​6.0.99410010096100
Added@​orpc/​openapi-client@​1.14.1510010010096100
Added@​orpc/​client@​1.14.159910010096100
Added@​orpc/​contract@​1.14.1510010010096100
Added@​orpc/​openapi@​1.14.1510010010096100
Added@​aws-sdk/​client-s3@​3.1106.09910010098100
Added@​aws-sdk/​s3-request-presigner@​3.1106.010010010098100
Addedfastify@​5.11.39810010098100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants