Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 31 updates - #409

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-4783690f90
Closed

chore(deps): bump the minor-and-patch group across 1 directory with 31 updates#409
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-4783690f90

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 31 updates in the / directory:

Package From To
@biomejs/biome 2.5.12 2.6.3
@electric-sql/pglite 0.5.8 0.5.13
@electric-sql/pglite-socket 0.2.11 0.2.16
@playwright/test 1.63.0 1.64.1
@types/node 26.4.1 26.6.5
dependency-cruiser 18.2.0 18.7.0
tsx 4.23.13 4.23.15
@aws-sdk/client-s3 3.1127.0 3.1158.0
next 16.3.4 16.4.3
postcss 8.5.28 8.5.32
react 19.2.8 19.3.1
@types/react 19.2.18 19.3.0
react-dom 19.2.8 19.3.1
@types/react-dom 19.2.7 19.3.0
marked 18.0.11 18.1.2
mermaid 12.0.0 12.2.0
shiki 4.4.3 4.5.0
@aws-sdk/s3-request-presigner 3.1127.0 3.1158.0
@opentelemetry/api 1.9.1 1.10.0
@opentelemetry/exporter-trace-otlp-http 0.222.0 0.300.0
@opentelemetry/sdk-trace-node 2.11.0 2.12.0
pino 10.3.1 10.4.0
zod 4.5.4 4.6.7
drizzle-orm 0.45.2 0.45.4
drizzle-kit 0.31.10 0.31.11
@vercel/blob 2.8.0 2.8.2
nodemailer 10.0.9 10.2.1
redis 6.2.1 6.3.0
mysql2 3.24.3 3.24.6
@base-ui/react 1.8.0 1.9.0
tailwind-merge 3.6.0 3.7.0

Updates @biomejs/biome from 2.5.12 to 2.6.3

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.6.3

2.6.3

Patch Changes

  • #12275 807e616 Thanks @​dyc3! - Added the new nursery rule noArraySortForMinMax, which reports sorting an array only to read its smallest or largest value. Use Math.min() or Math.max() instead.

    const minimum = array.toSorted((a, b) => a - b)[0];

  • #12432 cf61682 Thanks @​dyc3! - Added the nursery rule noBooleanSortComparator, which reports sort comparators that return a boolean instead of a number. For example, array.sort((a, b) => a > b) never puts the first item before the second, so the array isn't sorted correctly.

  • #12304 b4654c5 Thanks @​dyc3! - Added the new nursery rule noEagerArrayMethodsInLoops, which reports .map() and .filter() calls in the header of for...of loops. These calls build a new array that is only used by the loop.

    for (const name of users.map((user) => user.name)) {
  console.log(name);
}

  • #12121 66c3791 Thanks @​dyc3! - Added the nursery rule noNewRequire, which disallows calling require with new, such as new require("app-header").

  • #12316 34b520d Thanks @​dyc3! - Added the new nursery rule noObsoleteAttributes, which disallows obsolete attributes on HTML elements and suggests what to use instead.

    <table bgcolor="#ffffff" cellpadding="5"></table>

  • #12258 cce2385 Thanks @​dyc3! - Added the nursery rule noPathConcat, which disallows building file paths and URLs by joining strings to __dirname, __filename, import.meta.dirname, import.meta.filename, or import.meta.url.

    const fullPath = __dirname + "/foo.js"; // reported

  • #12287 e12ad78 Thanks @​dyc3! - Added the new nursery rule noPlaywrightNthMethods, which disallows selecting Playwright elements by position with first(), last(), and nth(). A test that relies on the position of an element can act on a different element when the page changes.

    await page.locator("button").first().click();

  • #12343 62ad123 Thanks @​vibbix! - Added the nursery rule noSelfNestedLayer, which disallows nesting a cascade layer inside a layer with the same name. Layer names inside an @layer block are relative to it, so the inner layer below creates the sublayer components.components instead of adding to components.

    @layer components {
  @layer components {
    .button {
      color: red;
    }

... (truncated)

Commits

Updates @electric-sql/pglite from 0.5.8 to 0.5.13

Release notes

Sourced from @​electric-sql/pglite's releases.

@​electric-sql/pglite-prepopulatedfs@​0.5.13

Patch Changes

  • Updated dependencies [c7dc39e]
  • Updated dependencies [8364675]
  • Updated dependencies [a4cfd4d]
  • Updated dependencies [2db5d2d]
    • @​electric-sql/pglite@​0.5.13

@​electric-sql/pglite@​0.5.13

Patch Changes

  • c7dc39e: close() now waits for queries, execs and transactions that were issued before it, so they complete instead of failing with Cannot read properties of undefined after teardown.
  • 8364675: Added support for node-postgres through createPgConfig()
  • a4cfd4d: Added MemfsFrontendFS which allows other filesystems be implemented on top of a MEMFS. Example: added Memfs2OpfsFS which is backed by an OPFS fs.
  • 2db5d2d: Upgrade emsdk to 6.0.5

@​electric-sql/pglite@​0.5.12

Patch Changes

  • 0641b37: Fix custom filesystems not receiving times set with FS.utime. Emscripten's FS.utime calls setattr with atime and mtime, but the BaseFilesystem bridge only handled the older timestamp field, so utimes was never called on OPFS AHP or any other BaseFilesystem. Files restored from a tarball kept the time they were written instead of the time stored in the tarball.
  • e752dbe: Run initdb with TZ=UTC, like the backend, so a new database gets timezone = 'UTC' in postgresql.conf. Before, initdb wrote the host's zone as a fixed offset without daylight saving (e.g. Etc/GMT+5 for America/New_York), so timestamptz input without an offset was stored at a different instant on each non-UTC machine.
  • c31130c: Start under the Node.js permission model (node --permission). Emscripten's NODEFS read the fs open flags with process.binding('constants'), which Node always denies in that mode, so new PGlite() threw ERR_ACCESS_DENIED even for memory://. The bundled build now reads them from require('fs').constants, which holds the same values.
  • 0641b37: Fix files restored from a tarball getting a January 1970 modification time. loadTar passed the tar header's time to Emscripten's FS.utime in seconds, but FS.utime takes milliseconds. This affected every new database (initdb's data dir is restored from a tarball) and every loadDataDir. With the Node filesystem the files on disk got those dates too.

@​electric-sql/pglite-prepopulatedfs@​0.5.12

Patch Changes

  • Updated dependencies [0641b37]
  • Updated dependencies [e752dbe]
  • Updated dependencies [c31130c]
  • Updated dependencies [0641b37]
    • @​electric-sql/pglite@​0.5.12

@​electric-sql/pglite-prepopulatedfs@​0.5.11

Patch Changes

  • Updated dependencies [5573bb0]
  • Updated dependencies [2372f39]
  • Updated dependencies [4321a41]
    • @​electric-sql/pglite@​0.5.11

@​electric-sql/pglite@​0.5.11

Patch Changes

  • 5573bb0: bug fix: check ready before close
  • 2372f39: Update submodule
  • 4321a41: Fix premature ReadyForQuery responses after extended-query errors, preventing PostgreSQL clients from desynchronizing before Sync.

@​electric-sql/pglite@​0.5.10

... (truncated)

Changelog

Sourced from @​electric-sql/pglite's changelog.

0.5.13

Patch Changes

  • c7dc39e: close() now waits for queries, execs and transactions that were issued before it, so they complete instead of failing with Cannot read properties of undefined after teardown.
  • 8364675: Added support for node-postgres through createPgConfig()
  • a4cfd4d: Added MemfsFrontendFS which allows other filesystems be implemented on top of a MEMFS. Example: added Memfs2OpfsFS which is backed by an OPFS fs.
  • 2db5d2d: Upgrade emsdk to 6.0.5

0.5.12

Patch Changes

  • 0641b37: Fix custom filesystems not receiving times set with FS.utime. Emscripten's FS.utime calls setattr with atime and mtime, but the BaseFilesystem bridge only handled the older timestamp field, so utimes was never called on OPFS AHP or any other BaseFilesystem. Files restored from a tarball kept the time they were written instead of the time stored in the tarball.
  • e752dbe: Run initdb with TZ=UTC, like the backend, so a new database gets timezone = 'UTC' in postgresql.conf. Before, initdb wrote the host's zone as a fixed offset without daylight saving (e.g. Etc/GMT+5 for America/New_York), so timestamptz input without an offset was stored at a different instant on each non-UTC machine.
  • c31130c: Start under the Node.js permission model (node --permission). Emscripten's NODEFS read the fs open flags with process.binding('constants'), which Node always denies in that mode, so new PGlite() threw ERR_ACCESS_DENIED even for memory://. The bundled build now reads them from require('fs').constants, which holds the same values.
  • 0641b37: Fix files restored from a tarball getting a January 1970 modification time. loadTar passed the tar header's time to Emscripten's FS.utime in seconds, but FS.utime takes milliseconds. This affected every new database (initdb's data dir is restored from a tarball) and every loadDataDir. With the Node filesystem the files on disk got those dates too.

0.5.11

Patch Changes

  • 5573bb0: bug fix: check ready before close
  • 2372f39: Update submodule
  • 4321a41: Fix premature ReadyForQuery responses after extended-query errors, preventing PostgreSQL clients from desynchronizing before Sync.

0.5.10

Patch Changes

  • 367ee2f: Bug fix: wait for running queries to finish before doing a data dir dump
  • cb06c21: Wait for queries to finish before closing PGlite instance. See #1128
  • 78012ca: Fix a windowed live.query (one given offset and limit) leaking its live_query_<id>_get_total_count prepared statement on unsubscribe. Only live_query_<id>_get was deallocated, so the count statement survived every teardown while its backing view was dropped, accumulating dangling prepared statements for the lifetime of the database.

0.5.9

Patch Changes

  • 389b731: upgrade to PostgreSQL 18.6
  • 389b731: Export additional core symbols from the main WASM module required by the plpgsql_check extension
Commits

Updates @electric-sql/pglite-socket from 0.2.11 to 0.2.16

Release notes

Sourced from @​electric-sql/pglite-socket's releases.

@​electric-sql/pglite-socket@​0.2.16

Patch Changes

  • Updated dependencies [c7dc39e]
  • Updated dependencies [8364675]
  • Updated dependencies [a4cfd4d]
  • Updated dependencies [2db5d2d]
    • @​electric-sql/pglite@​0.5.13
    • @​electric-sql/pglite-age@​0.0.14
    • @​electric-sql/pglite-pg_hashids@0.0.14
    • @​electric-sql/pglite-pg_ivm@0.0.14
    • @​electric-sql/pglite-pg_textsearch@0.0.15
    • @​electric-sql/pglite-pg_uuidv7@0.0.14
    • @​electric-sql/pglite-pgtap@​0.0.14
    • @​electric-sql/pglite-pgvector@​0.0.14

@​electric-sql/pglite-socket@​0.2.15

Patch Changes

  • e0585be: Release a connection slot when its handler ends in an error (for example ECONNRESET or an idle timeout). Previously only a clean close removed the handler, so maxConnections filled up and new connections were refused until the server restarted.
  • Updated dependencies [0641b37]
  • Updated dependencies [e752dbe]
  • Updated dependencies [c31130c]
  • Updated dependencies [0641b37]
    • @​electric-sql/pglite@​0.5.12
    • @​electric-sql/pglite-age@​0.0.13
    • @​electric-sql/pglite-pg_hashids@0.0.13
    • @​electric-sql/pglite-pg_ivm@0.0.13
    • @​electric-sql/pglite-pg_textsearch@0.0.14
    • @​electric-sql/pglite-pg_uuidv7@0.0.13
    • @​electric-sql/pglite-pgtap@​0.0.13
    • @​electric-sql/pglite-pgvector@​0.0.13

@​electric-sql/pglite-socket@​0.2.14

Patch Changes

  • Updated dependencies [5573bb0]
  • Updated dependencies [2372f39]
  • Updated dependencies [4321a41]
    • @​electric-sql/pglite@​0.5.11
    • @​electric-sql/pglite-age@​0.0.12
    • @​electric-sql/pglite-pg_hashids@0.0.12
    • @​electric-sql/pglite-pg_ivm@0.0.12
    • @​electric-sql/pglite-pg_textsearch@0.0.13
    • @​electric-sql/pglite-pg_uuidv7@0.0.12
    • @​electric-sql/pglite-pgtap@​0.0.12
    • @​electric-sql/pglite-pgvector@​0.0.12

@​electric-sql/pglite-socket@​0.2.13

Patch Changes

... (truncated)

Changelog

Sourced from @​electric-sql/pglite-socket's changelog.

0.2.16

Patch Changes

  • Updated dependencies [c7dc39e]
  • Updated dependencies [8364675]
  • Updated dependencies [a4cfd4d]
  • Updated dependencies [2db5d2d]
    • @​electric-sql/pglite@​0.5.13
    • @​electric-sql/pglite-age@​0.0.14
    • @​electric-sql/pglite-pg_hashids@0.0.14
    • @​electric-sql/pglite-pg_ivm@0.0.14
    • @​electric-sql/pglite-pg_textsearch@0.0.15
    • @​electric-sql/pglite-pg_uuidv7@0.0.14
    • @​electric-sql/pglite-pgtap@​0.0.14
    • @​electric-sql/pglite-pgvector@​0.0.14

0.2.15

Patch Changes

  • e0585be: Release a connection slot when its handler ends in an error (for example ECONNRESET or an idle timeout). Previously only a clean close removed the handler, so maxConnections filled up and new connections were refused until the server restarted.
  • Updated dependencies [0641b37]
  • Updated dependencies [e752dbe]
  • Updated dependencies [c31130c]
  • Updated dependencies [0641b37]
    • @​electric-sql/pglite@​0.5.12
    • @​electric-sql/pglite-age@​0.0.13
    • @​electric-sql/pglite-pg_hashids@0.0.13
    • @​electric-sql/pglite-pg_ivm@0.0.13
    • @​electric-sql/pglite-pg_textsearch@0.0.14
    • @​electric-sql/pglite-pg_uuidv7@0.0.13
    • @​electric-sql/pglite-pgtap@​0.0.13
    • @​electric-sql/pglite-pgvector@​0.0.13

0.2.14

Patch Changes

  • Updated dependencies [5573bb0]
  • Updated dependencies [2372f39]
  • Updated dependencies [4321a41]
    • @​electric-sql/pglite@​0.5.11
    • @​electric-sql/pglite-age@​0.0.12
    • @​electric-sql/pglite-pg_hashids@0.0.12
    • @​electric-sql/pglite-pg_ivm@0.0.12
    • @​electric-sql/pglite-pg_textsearch@0.0.13
    • @​electric-sql/pglite-pg_uuidv7@0.0.12
    • @​electric-sql/pglite-pgtap@​0.0.12
    • @​electric-sql/pglite-pgvector@​0.0.12

... (truncated)

Commits

Updates @playwright/test from 1.63.0 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

  • #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits
  • cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
  • 866cbb8 chore: mark v1.64.1 (#43354)
  • 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
  • 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
  • 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
  • 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
  • e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
  • f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
  • e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
  • d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
  • Additional commits viewable in compare view

Updates @types/node from 26.4.1 to 26.6.5

Commits

Updates dependency-cruiser from 18.2.0 to 18.7.0

Release notes

Sourced from dependency-cruiser's releases.

v18.7.0

✨ features

  • 6ae13a39 feat(summarize): makes the missing compiler warnings more precise (#1111) This a.o. makes dependency-cruiser stop reporting a missing typescript compiler even when swc was installed (and swc was sufficient for the configured features). Thanks @​duvillierA for raising the issue!

🐛 fixes

  • da0efbb4 fix(extract/resolve): disregards peerDependenciesMeta and similar actual non-dependencies keys to prevent false positives (#1110). Thanks @​arvidtorbjoernsen for reporting the issue that led to this fix!
  • c580daf6 fix(extract/swc): expands extensions swc can handle to all ts* variants (#1105) Thanks @​duvillierA for raising the issue and for providing the fix that landed in the PR!
  • 9d53b95a fix(extract/swc): adds recognition of type-only-ness of exports (#1106). Thanks @​duvillierA for raising the issue and for providing the fix that landed in the PR!

📖 documentation

v18.6.0

✨ features

  • 51467e4d feat(extract/transpile): compile svelte components that use top level await (#1103) - thanks @​JonnyBGod for finding the issue and raising the pull request!

👷‍♂️ maintenance

  • 14ca8a17 build(npm): updates external dependencies
  • 3f4e5feb doc(SECURITY.md): adds direct link to raising an adivisory
  • e35bded9 chore: renames copilot-instructions AGENTS.md

v18.5.0

✨ features

  • 25ac2f7f feat(extract/tsc): adds support for imports inside module and namespace blocks (#1095) - thanks to @​arpitjain099 for detecting the missing feature AND making the PR
  • 918d9193 feat(report/markdown): adds baseline stale table (#1102)

👷 maintenance

  • 10860b9a build(npm): updates external dependencies

v18.4.0

✨ features

To improve visibility of the state of the baseline (.dependency-cruiser-known-violations.json)...

  • ...the err, err-html and markdown reporters now show the number of stale entries in the baseline. (c617e580/ e9ad4ce6/ be91a27c/ 993ac9df)

... (truncated)

Commits
  • 60f8a7e 18.7.0
  • 6ae13a3 feat(summarize): makes the missing compiler warnings more precise (#1111)
  • 8b4dbde docs: fix typo in no-duplicate-dep-types comment (#1108)
  • da0efbb fix(extract/resolve): disregards peerDependenciesMeta and similar actual non-...
  • c580daf fix(extract/swc): expands extensions swc can handle to all ts* variants (#1105)
  • 9d53b95 fix(extract/swc): adds recognition of type-only-ness of exports (#1106)
  • 59606f7 18.6.0
  • 14ca8a1 build(npm): updates external dependencies
  • 51467e4 fix(extract/transpile): compile svelte components that use top level await (#...
  • 3f4e5fe doc(SECURITY.md): adds direct link to raising an adivisory
  • Additional commits viewable in compare view

Updates tsx from 4.23.13 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

  • exclude bare builtins from namespace inheritance (38e1588)
  • expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
  • make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

  • restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

Commits
  • ca66105 test: fix drive-less file URLs in ESM resolver fixtures
  • 2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
  • 38e1588 fix: exclude bare builtins from namespace inheritance
  • 562c434 fix: make namespaced register() overloads portable for declaration emit
  • edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
  • 70e7828 test: upgrade tinyspy for disposable API
  • 9ed2022 ci: avoid duplicate release notifications
  • 872e77f refactor: use disposables for cleanup
  • 6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
  • See full diff in compare view

Updates @aws-sdk/client-s3 from 3.1127.0 to 3.1158.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1158.0

3.1158.0(2026-10-27)

Chores
  • codegen: smithy-aws-typescript-codegen 0.55.0 (#8385) (4a149acb)
New Features
  • client-license-manager: AWS License Manager now supports delegate grants for read-only visibility into license distributions. CreateGrant accepts a new GrantType (BuyerGrant or DelegateGrant) and a desired status at distribution time. (c2b033fe)
  • client-ecs: ECS now supports GPU sharing via NVIDIA Multi-Process Service (MPS) on ECS Managed Instances and ECS EC2, allowing multiple ECS tasks to share a single Nvidia GPU for improved utilization. (82c0bea6)
  • client-bedrock-agentcore-control: Adds the ResetTokenVaultKeyMaterial API, which restores a token vault whose customer managed key was deleted by moving it to an AWS owned key. The reset permanently deletes the stored OAuth 2.0 tokens, users must consent again. Adds on-behalf-of token exchange client authentication override option. (caa886f6)
  • client-inspector2: Adding support for Machine Image scan (44b1f0cb)
  • client-lightsail: Added the attributeUpdates parameter to the Lightsail StartInstance API, which allows customers to update the attributes of a stopped instance when starting it. (f01e4a58)
  • client-ec2: EC2 AMIs can now show vulnerability data and be targeted directly for scanning. (4f53b1cf)
  • lib-sqs: add SQSPoller for auto queue polling (#8339) (cb0d4f01)
Bug Fixes
  • lib-sqs: sync version with current monorepo release (#8384) (82c877fa)
  • client-s3: isolate special character e2e test keys (#8382) (d9c091fa)

For list of updated packages, view updated-packages.md in assets-3.1158.0.zip

v3.1157.0

3.1157.0(2026-10-26)

Chores
  • codegen: sync for service default socket timeout and RPC v2 JSON (#8378) (f9d9119f)
Documentation Changes
  • client-deadline: fix the sdk documenation issue only (e3bf3c6c)
New Features
  • clients: update client endpoints as of 2026-10-26 (a95658fd)
  • client-connect: Amazon Connect now automatically saves agents' in-progress email drafts preserving the message, recipients, and subject during browser or network interruptions so agents can return to the mail and continue instead of starting over. (d03e5700)
  • client-appstream: Add Windows 11 to PlatformType enum (52666c31)
  • client-lightsail: This release adds Web Application Firewall (WAF) support for Lightsail distribution. (1fee104e)
  • client-marketplace-catalog: This release adds support for the SubsidiaryAuthorization entity type in the ListEntities operation, including entity-type filters with partial name search, sort options, and a summary returned for each subsidiary authorization. (a3f6ea1b)
  • client-eks: This release adds support for EKS management of Gateway API CRDs (Custom Resource Definitions) (67c963fe)
  • client-sso-admin: Added support for the RegionScope parameter on ListInstances, allowing you to list IAM Identity Center instances in the current Region or across all Regions. (6cc5db1b)
  • client-medialive: AWS Elemental MediaLive now lets you control whether explicit weighted prediction is applied to H.264 outputs. It also introduces Perceptual Filter, a new noise reduction filter designed to improve video quality by increasing VMAF scores, now with Auto, None, and strength options. (b515e6cd)
  • client-billing: Adds support for managing private pricing contracts and contractual investments including listing and associating contracts, retrieving contractual investments and their summaries, and creating, listing, and canceling contractual investment attestations (b4e7d786)
  • client-taxsettings: Add Mexico Additional Info changes (88e365c5)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1158.0 (2026-10-27)

Bug Fixes

  • client-s3: isolate special character e2e test keys (#8382) (d9c091f)

3.1157.0 (2026-10-26)

Note: Version bump only for package @​aws-sdk/client-s3

3.1156.0 (2026-10-22)

Note: Version bump only for package @​aws-sdk/client-s3

3.1155.0 (2026-10-21)

Note: Version bump only for package @​aws-sdk/client-s3

3.1154.0 (2026-10-20)

Note: Version bump only for package @​aws-sdk/client-s3

3.1153.0 (2026-10-19)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits
  • 2d08e1c Publish v3.1158.0
  • d9c091f fix(client-s3): isolate special character e2e test keys (#8382)
  • e5988ec Publish v3.1157.0
  • f9d9119 chore(codegen): sync for service default socket timeout and RPC v2 JSON (#8378)
  • 163a566 Publish v3.1156.0
  • 7c2f089 Publish v3.1155.0
  • 5f53137 chore(codegen): sync for JSON string serializer buffer fix and retryMode docs...
  • f6ff312 Publish v3.1154.0
  • 3508584 Publish v3.1153.0
  • 3e350b5 chore(codegen): sync for JSON codec and schema server plugin (#8353)
  • Additional commits viewable in compare view

Updates next from 16.3.4 to 16.4.3

Release notes

Sourced from next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
  • [lts-active] test: Pin react-virtualized (#100545)
  • [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
  • [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
  • [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

v16.4.2

What's Changed

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

High:

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

  • Show compiler plugin warning in more situations: #75682
  • fix(scripts): correct typo in rm.mjs error message: #87015

... (truncated)

Commits
  • 29bbeab v16.4.3
  • 5117201 [lts-active] Avoid loading standalone React in server bootstrap (#100610)
  • Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-4783690f90 branch from 23047d5 to 3aabfe1 Compare October 30, 2026 17:09
@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 3…
6a307d2 
…1 updates

Bumps the minor-and-patch group with 31 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.12` | `2.6.3` |
| [@electric-sql/pglite](https://github.com/electric-sql/pglite/tree/HEAD/packages/pglite) | `0.5.8` | `0.5.13` |
| [@electric-sql/pglite-socket](https://github.com/electric-sql/pglite/tree/HEAD/packages/pglite-socket) | `0.2.11` | `0.2.16` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.1` | `26.6.5` |
| [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) | `18.2.0` | `18.7.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1127.0` | `3.1158.0` |
| [next](https://github.com/vercel/next.js) | `16.3.4` | `16.4.3` |
| [postcss](https://github.com/postcss/postcss) | `8.5.28` | `8.5.32` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.1` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.1` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` |
| [marked](https://github.com/markedjs/marked) | `18.0.11` | `18.1.2` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `12.0.0` | `12.2.0` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.4.3` | `4.5.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1127.0` | `3.1158.0` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.1` | `1.10.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.300.0` |
| [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `2.11.0` | `2.12.0` |
| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |
| [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.7` |
| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.2` | `0.45.4` |
| [drizzle-kit](https://github.com/drizzle-team/drizzle-orm) | `0.31.10` | `0.31.11` |
| [@vercel/blob](https://github.com/vercel/storage/tree/HEAD/packages/blob) | `2.8.0` | `2.8.2` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.9` | `10.2.1` |
| [redis](https://github.com/redis/node-redis) | `6.2.1` | `6.3.0` |
| [mysql2](https://github.com/sidorares/node-mysql2) | `3.24.3` | `3.24.6` |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.8.0` | `1.9.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |



Updates `@biomejs/biome` from 2.5.12 to 2.6.3
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/CHANGELOG_v1.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.6.3/packages/@biomejs/biome)

Updates `@electric-sql/pglite` from 0.5.8 to 0.5.13
- [Release notes](https://github.com/electric-sql/pglite/releases)
- [Changelog](https://github.com/electric-sql/pglite/blob/main/packages/pglite/CHANGELOG.md)
- [Commits](https://github.com/electric-sql/pglite/commits/@electric-sql/pglite@0.5.13/packages/pglite)

Updates `@electric-sql/pglite-socket` from 0.2.11 to 0.2.16
- [Release notes](https://github.com/electric-sql/pglite/releases)
- [Changelog](https://github.com/electric-sql/pglite/blob/main/packages/pglite-socket/CHANGELOG.md)
- [Commits](https://github.com/electric-sql/pglite/commits/@electric-sql/pglite-socket@0.2.16/packages/pglite-socket)

Updates `@playwright/test` from 1.63.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.1)

Updates `@types/node` from 26.4.1 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `dependency-cruiser` from 18.2.0 to 18.7.0
- [Release notes](https://github.com/sverweij/dependency-cruiser/releases)
- [Changelog](https://github.com/sverweij/dependency-cruiser/blob/main/CHANGELOG.md)
- [Commits](sverweij/dependency-cruiser@v18.2.0...v18.7.0)

Updates `tsx` from 4.23.13 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.13...v4.23.15)

Updates `@aws-sdk/client-s3` from 3.1127.0 to 3.1158.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1158.0/clients/client-s3)

Updates `next` from 16.3.4 to 16.4.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.4...v16.4.3)

Updates `postcss` from 8.5.28 to 8.5.32
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.28...8.5.32)

Updates `react` from 19.2.8 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.8 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `@types/react-dom` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `marked` from 18.0.11 to 18.1.2
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.11...v18.1.2)

Updates `mermaid` from 12.0.0 to 12.2.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@12.0.0...mermaid@12.2.0)

Updates `shiki` from 4.4.3 to 4.5.0
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.5.0/packages/shiki)

Updates `@aws-sdk/s3-request-presigner` from 3.1127.0 to 3.1158.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1158.0/packages/s3-request-presigner)

Updates `@opentelemetry/api` from 1.9.1 to 1.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.9.1...v1.10.0)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.222.0 to 0.300.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.300.0)

Updates `@opentelemetry/sdk-trace-node` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.11.0...v2.12.0)

Updates `pino` from 10.3.1 to 10.4.0
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v10.3.1...v10.4.0)

Updates `zod` from 4.5.4 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.5.4...v4.6.7)

Updates `drizzle-orm` from 0.45.2 to 0.45.4
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.45.2...0.45.4)

Updates `drizzle-kit` from 0.31.10 to 0.31.11
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.31.10...drizzle-kit@0.31.11)

Updates `@vercel/blob` from 2.8.0 to 2.8.2
- [Release notes](https://github.com/vercel/storage/releases)
- [Changelog](https://github.com/vercel/storage/blob/main/packages/blob/CHANGELOG.md)
- [Commits](https://github.com/vercel/storage/commits/@vercel/blob@2.8.2/packages/blob)

Updates `nodemailer` from 10.0.9 to 10.2.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.9...v10.2.1)

Updates `redis` from 6.2.1 to 6.3.0
- [Release notes](https://github.com/redis/node-redis/releases)
- [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/redis/node-redis/compare/redis@6.2.1...redis@6.3.0)

Updates `mysql2` from 3.24.3 to 3.24.6
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v3.24.3...v3.24.6)

Updates `@base-ui/react` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.9.0/packages/react)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1156.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1156.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@base-ui/react"
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@electric-sql/pglite"
  dependency-version: 0.5.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@electric-sql/pglite-socket"
  dependency-version: 0.2.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-version: 0.300.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-trace-node"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vercel/blob"
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: dependency-cruiser
  dependency-version: 18.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: drizzle-kit
  dependency-version: 0.31.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: drizzle-orm
  dependency-version: 0.45.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: marked
  dependency-version: 18.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mermaid
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mysql2
  dependency-version: 3.24.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: next
  dependency-version: 16.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: nodemailer
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pino
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: postcss
  dependency-version: 8.5.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: redis
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: shiki
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-4783690f90 branch from 3aabfe1 to 6a307d2 Compare October 31, 2026 14:23
This was referenced Nov 3, 2026
Merged
Closed
Closed
@jouwdan ChatGPT Codex Connector

jouwdan commented Nov 3, 2026

Copy link
Copy Markdown
Collaborator

Superseded by #461, which consolidates #407, #408 and #409 and fixes the CI failures. All 16 CI checks pass on the replacement PR. OpenTelemetry API/exporter versions that conflict with the current SDK are retained on compatible versions, as documented in #461. Closing in favour of #461.

@jouwdan jouwdan closed this Nov 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-4783690f90 branch November 3, 2026 09:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jouwdan