Skip to content

chore(deps): bump the prod-minor-patch group across 1 directory with 9 updates#475

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/server/prod-minor-patch-db6c43df4c
Closed

chore(deps): bump the prod-minor-patch group across 1 directory with 9 updates#475
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/server/prod-minor-patch-db6c43df4c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the prod-minor-patch group with 9 updates in the /apps/server directory:

Package From To
@aws-sdk/client-s3 3.1077.0 3.1085.0
@hono/node-server 2.0.6 2.0.8
@pothos/core 4.13.0 4.13.1
@pothos/plugin-prisma 4.14.3 4.15.0
@scalar/hono-api-reference 0.11.7 0.11.9
resend 6.16.0 6.17.2
graphql-ws 6.0.8 6.1.0
hono 4.12.27 4.12.29
sharp 0.35.2 0.35.3

Updates @aws-sdk/client-s3 from 3.1077.0 to 3.1085.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1085.0

3.1085.0(2026-07-10)

New Features
  • clients: update client endpoints as of 2026-07-10 (dffbeab0)
  • client-quicksight: Provides CreateKnowledgeBase and UpdateKnowledgeBase APIs (42de5523)
  • client-inspector2: Support for 3 day and 7 day ECR re-scan durations (4b0b5c86)
  • client-lambda: Added TelemetryConfig support for Managed Instances Capacity Provider, enabling customers to configure system log level and custom log group for managed instance logging. (63388139)
  • client-sagemaker: Release support for g4d, c6g, c7g, c8g instance types for SageMaker HyperPod (800976de)
  • client-ec2: New Amazon EC2 instances. M9g, M9gd, C9g, and C9gd on AWS Graviton5. C8in, M8in, and R8in add 600 Gbps network. C8ib, M8ib, and R8ib add 300 Gbps EBS. C8ine, M8ine, M8idn, R8idn, M8idb, and R8idb round out Intel Xeon 6. Mac-m3ultra with Apple M3 Ultra. G7 with NVIDIA RTX PRO 4500 Blackwell GPUs. (35aaf387)
  • client-license-manager: Added the ResetUsage field to the CreateLicenseVersion API. When set to true, the entitlement usage counts for the license are reset to 0. If it is false or not specified, entitlement usage is left unchanged. (52f1c9c0)
  • client-cloudwatch: CloudWatch now assigns a unique identifier to each anomaly detector. PutAnomalyDetector and DescribeAnomalyDetectors return this AnomalyDetectorId, which you can use to describe or delete a specific anomaly detector directly. (36fc0ee5)

For list of updated packages, view updated-packages.md in assets-3.1085.0.zip

v3.1084.0

3.1084.0(2026-07-09)

New Features
  • client-connect: Amazon Connect - Added DeleteContactData API to support PII deletion of customer endpoint, additional email recipients and email subject. (87f4ae0e)
  • client-guardduty: Adding "AI Analyst" enum value for detector (20518a4f)
  • client-synthetics: CloudWatch Synthetics adds support for customer managed KMS keys for canary environment variables. Customers can now encrypt their canary's Lambda function environment variables at rest using their own AWS KMS key, providing additional control over data protection. (c7379151)
  • client-ec2: Added support for additional override parameters in CreateFleet, including LaunchTemplateSpecificationUserData, KeyName, IamInstanceProfile, and MetadataOptions. The CreateFleet response now also includes SubnetId, AvailabilityZone, and AvailabilityZoneId for launched instances. (6fcc95d1)
  • client-ivs: adds support for AWS IVS ad configuration APIs to allow for a postRollConfiguration object on the ad configuration resource (7dd93c48)
Tests
  • client-kinesis: aggregate HTTP/2 sessions across all endpoint pools (#8181) (84b2b62c)

For list of updated packages, view updated-packages.md in assets-3.1084.0.zip

v3.1083.0

3.1083.0(2026-07-08)

Chores
  • core/client: remove TypeScript version user-agent metric (#8177) (9d72bc29)
New Features
  • client-signin: Adds support for OAuth 2.0 token operations in AWS Sign-In, CreateOAuth2TokenWithIAM (client credentials flow), IntrospectOAuth2TokenWithIAM (token inspection), and RevokeOAuth2TokenWithIAM (token revocation). (bc64f6b2)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1085.0 (2026-07-10)

Note: Version bump only for package @​aws-sdk/client-s3

3.1084.0 (2026-07-09)

Note: Version bump only for package @​aws-sdk/client-s3

3.1083.0 (2026-07-08)

Note: Version bump only for package @​aws-sdk/client-s3

3.1082.0 (2026-07-08)

Note: Version bump only for package @​aws-sdk/client-s3

3.1081.0 (2026-07-07)

Note: Version bump only for package @​aws-sdk/client-s3

3.1080.0 (2026-07-06)

Note: Version bump only for package @​aws-sdk/client-s3

3.1079.0 (2026-07-02)

... (truncated)

Commits

Updates @hono/node-server from 2.0.6 to 2.0.8

Release notes

Sourced from @​hono/node-server's releases.

v2.0.8

What's Changed

Full Changelog: honojs/node-server@v2.0.7...v2.0.8

v2.0.7

What's Changed

Full Changelog: honojs/node-server@v2.0.6...v2.0.7

Commits

Updates @pothos/core from 4.13.0 to 4.13.1

Release notes

Sourced from @​pothos/core's releases.

@​pothos/core@​4.13.1

Patch Changes

  • 76e06e7: Rebuild with TypeScript 7. Source files now use explicit .js import extensions (enforced by lint) instead of adding them during the build, and declaration files are emitted by TypeScript 7's compiler. Published output is functionally unchanged.
Changelog

Sourced from @​pothos/core's changelog.

4.13.1

Patch Changes

  • 76e06e7: Rebuild with TypeScript 7. Source files now use explicit .js import extensions (enforced by lint) instead of adding them during the build, and declaration files are emitted by TypeScript 7's compiler. Published output is functionally unchanged.
Commits
  • 8916d15 chore: update versions
  • a32b270 feat: upgrade to typescript 7, remove compiler-API dependence
  • See full diff in compare view

Updates @pothos/plugin-prisma from 4.14.3 to 4.15.0

Release notes

Sourced from @​pothos/plugin-prisma's releases.

@​pothos/plugin-prisma@​4.15.0

Minor Changes

  • a32b270: Support TypeScript 7.

    The prisma generator (prisma-pothos-types) previously built its output with the TypeScript compiler API (ts.factory + printer), which no longer exists in TypeScript 7 — the Go-based compiler ships no in-process JS API. The generator now emits the same output (byte-identical) via string templates, so it no longer imports typescript at runtime and works regardless of which TypeScript version (or none) is installed. The typescript peer dependency of @pothos/plugin-prisma has been removed accordingly.

    @pothos/plugin-relay contains two internal fixes for type-checker differences between TypeScript 6 and 7 (explicit type arguments where 7 picks a different inference candidate, and a resolver wrapper that is checked against the declared resolver type). No public types changed; the plugin now type-checks cleanly under both majors.

Patch Changes

  • 76e06e7: Rebuild with TypeScript 7. Source files now use explicit .js import extensions (enforced by lint) instead of adding them during the build, and declaration files are emitted by TypeScript 7's compiler. Published output is functionally unchanged.
Changelog

Sourced from @​pothos/plugin-prisma's changelog.

4.15.0

Minor Changes

  • a32b270: Support TypeScript 7.

    The prisma generator (prisma-pothos-types) previously built its output with the TypeScript compiler API (ts.factory + printer), which no longer exists in TypeScript 7 — the Go-based compiler ships no in-process JS API. The generator now emits the same output (byte-identical) via string templates, so it no longer imports typescript at runtime and works regardless of which TypeScript version (or none) is installed. The typescript peer dependency of @pothos/plugin-prisma has been removed accordingly.

    @pothos/plugin-relay contains two internal fixes for type-checker differences between TypeScript 6 and 7 (explicit type arguments where 7 picks a different inference candidate, and a resolver wrapper that is checked against the declared resolver type). No public types changed; the plugin now type-checks cleanly under both majors.

Patch Changes

  • 76e06e7: Rebuild with TypeScript 7. Source files now use explicit .js import extensions (enforced by lint) instead of adding them during the build, and declaration files are emitted by TypeScript 7's compiler. Published output is functionally unchanged.
Commits
  • 8916d15 chore: update versions
  • a32b270 feat: upgrade to typescript 7, remove compiler-API dependence
  • f1d82b3 chore: sort imports in prisma index.test.ts
  • 3e43097 test: support graphql 17 incremental delivery in prisma/drizzle tests
  • 044520d feat: support graphql 17 alongside graphql 16
  • 37012ca chore: upgrade to TypeScript native preview (tsgo) and Node 24
  • e8c02e5 fix drizzle selection bug and update dependencies
  • See full diff in compare view

Updates @scalar/hono-api-reference from 0.11.7 to 0.11.9

Changelog

Sourced from @​scalar/hono-api-reference's changelog.

0.11.9

0.11.8

Commits

Updates resend from 6.16.0 to 6.17.2

Release notes

Sourced from resend's releases.

v6.17.2

fix response types for removing contacts out of segments and removing api keys (90d18da)

v6.17.1

remove resource field, it was a dead field (0572834)

v6.17.0

What's Changed

Full Changelog: resend/resend-node@v6.16.0...v6.17.0

Changelog

Sourced from resend's changelog.

resend@6.17.2

fix response types for removing contacts out of segments and removing api keys

resend@6.17.1

remove resource field, it was a dead field

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for resend since your current version.


Updates graphql-ws from 6.0.8 to 6.1.0

Release notes

Sourced from graphql-ws's releases.

v6.1.0

Minor Changes

Changelog

Sourced from graphql-ws's changelog.

6.1.0

Minor Changes

Commits
  • 0b69b9b Upcoming Release Changes (#679)
  • 8bbad60 chore: downgrade uws for node 20
  • 3675e0d chore: bump uws
  • 0f78663 chore: bump node version
  • a6a792a chore(release): permissions write-all
  • 1b657c5 chore(release): npm publish registry
  • 65c1f88 chore(release): content permissions need write
  • d068b8f chore(release): maybe permissions per
  • 4a25081 chore(release): needs contents read
  • bf18045 chore(release): permissions and oidc
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql-ws since your current version.


Updates hono from 4.12.27 to 4.12.29

Release notes

Sourced from hono's releases.

v4.12.29

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.12.28...v4.12.29

v4.12.28

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.12.27...v4.12.28

Commits
  • cda1af2 4.12.29
  • 2126289 fix(etag): treat If-None-Match: * as a match (#5084)
  • 0fc7ffc fix(trie-router): match empty wildcard remainder after regexp param (#5102)
  • ab590e4 fix(types): strip extra properties from array types in JSONParsed (#5103)
  • b93a254 fix(aws-lambda): treat any non-identity content-encoding as binary (#5101)
  • 6217f4b fix(lambda-edge): base64 encode content-encoded response bodies (#5099)
  • ba89e97 test(workerd): add compatibilityDate (#5100)
  • 46557ef docs(language): add JSDoc @​example to languageDetector (#5081)
  • 24547a6 fix(lambda-edge): resolve the handler with the value passed to the callback (...
  • 9c6ccd7 chore: fix no-op tsc in test script (#5093)
  • Additional commits viewable in compare view

Updates sharp from 0.35.2 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

  • Improve code bundler support by resolving path to libvips binary.

  • Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

  • Emit warning about binaries provided by Electron for use on Linux.

  • Add hasAlpha property to output info. #4500

  • TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @​Andarist

  • Bound clahe width and height to avoid signed overflow. #4551 @​metsw24-max

  • Bound trim margin to avoid signed overflow. #4552 @​metsw24-max

  • Reject infinite values when validating numbers. #4553 @​metsw24-max

  • Bound extract region to libvips coordinate limit. #4555 @​metsw24-max

  • Verify background colour values are numbers. #4556 @​metsw24-max

  • Bound create and raw input dimensions to coordinate limit. #4558 @​metsw24-max

  • Tighten recomb and affine matrix verification. #4560 @​chatman-media

  • Verify cache memory limit to avoid overflow. #4561 @​metsw24-max

v0.35.3-rc.2

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits
  • 1018449 Release v0.35.3
  • ba303a7 Prerelease v0.35.3-rc.2
  • 4f94fc5 Upgrade to sharp-libvips v1.3.2
  • c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
  • 9a8d002 Docs: Add changelog entry and note about transferable #4520
  • 8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
  • e000d0b Prerelease v0.35.3-rc.1
  • 9554ca9 Prerelease v0.35.3-rc.0
  • 6a29fd5 Emit warning about native binaries on Linux Electron
  • 540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the prod-minor-patch group across 1 directory with …
de43ee7 
…9 updates

Bumps the prod-minor-patch group with 9 updates in the /apps/server directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1077.0` | `3.1085.0` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.0.6` | `2.0.8` |
| [@pothos/core](https://github.com/hayes/pothos/tree/HEAD/packages/core) | `4.13.0` | `4.13.1` |
| [@pothos/plugin-prisma](https://github.com/hayes/pothos/tree/HEAD/packages/plugin-prisma) | `4.14.3` | `4.15.0` |
| [@scalar/hono-api-reference](https://github.com/scalar/scalar/tree/HEAD/integrations/hono) | `0.11.7` | `0.11.9` |
| [resend](https://github.com/resend/resend-node) | `6.16.0` | `6.17.2` |
| [graphql-ws](https://github.com/enisdenjo/graphql-ws) | `6.0.8` | `6.1.0` |
| [hono](https://github.com/honojs/hono) | `4.12.27` | `4.12.29` |
| [sharp](https://github.com/lovell/sharp) | `0.35.2` | `0.35.3` |



Updates `@aws-sdk/client-s3` from 3.1077.0 to 3.1085.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1085.0/clients/client-s3)

Updates `@hono/node-server` from 2.0.6 to 2.0.8
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.6...v2.0.8)

Updates `@pothos/core` from 4.13.0 to 4.13.1
- [Release notes](https://github.com/hayes/pothos/releases)
- [Changelog](https://github.com/hayes/pothos/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/hayes/pothos/commits/@pothos/core@4.13.1/packages/core)

Updates `@pothos/plugin-prisma` from 4.14.3 to 4.15.0
- [Release notes](https://github.com/hayes/pothos/releases)
- [Changelog](https://github.com/hayes/pothos/blob/main/packages/plugin-prisma/CHANGELOG.md)
- [Commits](https://github.com/hayes/pothos/commits/@pothos/plugin-prisma@4.15.0/packages/plugin-prisma)

Updates `@scalar/hono-api-reference` from 0.11.7 to 0.11.9
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/integrations/hono/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits/HEAD/integrations/hono)

Updates `resend` from 6.16.0 to 6.17.2
- [Release notes](https://github.com/resend/resend-node/releases)
- [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md)
- [Commits](resend/resend-node@v6.16.0...v6.17.2)

Updates `graphql-ws` from 6.0.8 to 6.1.0
- [Release notes](https://github.com/enisdenjo/graphql-ws/releases)
- [Changelog](https://github.com/enisdenjo/graphql-ws/blob/master/CHANGELOG.md)
- [Commits](enisdenjo/graphql-ws@v6.0.8...v6.1.0)

Updates `hono` from 4.12.27 to 4.12.29
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.27...v4.12.29)

Updates `sharp` from 0.35.2 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.2...v0.35.3)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1085.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-patch
- dependency-name: "@hono/node-server"
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
- dependency-name: "@pothos/core"
  dependency-version: 4.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
- dependency-name: "@pothos/plugin-prisma"
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-patch
- dependency-name: "@scalar/hono-api-reference"
  dependency-version: 0.11.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
- dependency-name: resend
  dependency-version: 6.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-patch
- dependency-name: graphql-ws
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-patch
- dependency-name: hono
  dependency-version: 4.12.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
- dependency-name: sharp
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 11, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 18, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 18, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/apps/server/prod-minor-patch-db6c43df4c branch July 18, 2026 19:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants