Skip to content

chore(deps)(deps): Bump the runtime-deps group across 1 directory with 17 updates - #30351

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/runtime-deps-94688b1936
Closed

chore(deps)(deps): Bump the runtime-deps group across 1 directory with 17 updates#30351
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/runtime-deps-94688b1936

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the runtime-deps group with 17 updates in the / directory:

Package From To
uniku 0.5.0 0.6.0
wrap-ansi 10.0.0 10.0.1
@vercel/detect-agent 1.2.4 1.2.5
jose 6.2.8 6.2.12
bson 7.3.1 7.3.2
temporal-polyfill 1.0.4 1.0.5
vitest 4.1.10 4.1.11
next 16.3.0 16.3.5
@react-router/node 8.3.0 8.3.1
@react-router/serve 8.3.0 8.3.1
isbot 5.2.1 5.2.2
react-router 8.3.0 8.3.1
postcss 8.5.26 8.5.28
@prisma/dev 0.25.1 0.25.2
tsx 4.23.12 4.23.13
vscode-languageserver-textdocument 1.0.12 1.0.14
vscode-languageserver 10.1.0 10.1.1

Updates uniku from 0.5.0 to 0.6.0

Release notes

Sourced from uniku's releases.

uniku CLI v0.6.0

What's Changed

Full Changelog: https://github.com/jkomyno/uniku/compare/@​uniku/cli@0.5.2...uniku-cli-v0.6.0

uniku@0.6.0

Minor Changes

  • e5294d9: Publish the final pre-v1 migration release with the secs, seq, and Nanoid object-form size aliases explicitly deprecated. Use msecs, counter, and length instead; the aliases will be removed in 1.0.0-rc.1.

uniku CLI v0.5.2

What's Changed

Full Changelog: https://github.com/jkomyno/uniku/compare/@​uniku/cli@0.5.1...uniku-cli-v0.5.2

uniku CLI v0.5.1

What's Changed

Full Changelog: https://github.com/jkomyno/uniku/compare/@​uniku/cli@0.5.0...uniku-cli-v0.5.1

Changelog

Sourced from uniku's changelog.

0.6.0

Minor Changes

  • e5294d9: Publish the final pre-v1 migration release with the secs, seq, and Nanoid object-form size aliases explicitly deprecated. Use msecs, counter, and length instead; the aliases will be removed in 1.0.0-rc.1.
Commits
  • 9f171bb chore(release): version packages
  • e5294d9 docs(uniku): schedule deprecated alias removals
  • a26f226 docs: document generator public APIs
  • c4fd1c5 revert: restore main before v1 RC review
  • 641aeb4 chore(release): prepare uniku 1.0.0-rc.0
  • 13175e4 docs(uniku): finalize v1 migration contract
  • 9246e9f test(uniku): lock v1 package removals
  • 0172a2e refactor(uniku): remove pre-v1 option aliases
  • 4bc91f7 refactor(uniku): make CUID v2 canonical
  • See full diff in compare view

Updates wrap-ansi from 10.0.0 to 10.0.1

Release notes

Sourced from wrap-ansi's releases.

v10.0.1

  • Fix handling of hyperlinks 1f23be6

chalk/wrap-ansi@v10.0.0...v10.0.1

Commits

Updates @vercel/detect-agent from 1.2.4 to 1.2.5

Release notes

Sourced from @​vercel/detect-agent's releases.

@​vercel/h3@​0.1.116

Patch Changes

  • @​vercel/node@​5.9.3

@​vercel/h3@​0.1.115

Patch Changes

  • @​vercel/node@​5.9.2

@​vercel/h3@​0.1.114

Patch Changes

  • @​vercel/node@​5.9.1

@​vercel/h3@​0.1.113

Patch Changes

  • Updated dependencies [4502520]
    • @​vercel/node@​5.9.0

@​vercel/h3@​0.1.112

Patch Changes

  • @​vercel/node@​5.8.27
Changelog

Sourced from @​vercel/detect-agent's changelog.

1.2.5

Patch Changes

  • 2da7809: Remove redundant and ineffective package tests.
Commits

Updates jose from 6.2.8 to 6.2.12

Release notes

Sourced from jose's releases.

v6.2.12

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

v6.2.11

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

v6.2.10

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)
  • jwt: prevent replacing protected headers (ae07d09)
  • jwt: reject invalid duration inputs (282f9aa)
  • jwt: validate builder claim values (ea03f83)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.12 (2026-09-05)

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

6.2.11 (2026-09-04)

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

6.2.10 (2026-08-21)

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)

... (truncated)

Commits
  • 505a55b chore(release): 6.2.12
  • 7bc9a33 perf: encode single-signature JWS input once
  • 78637bd perf: normalize General JWE shared headers once
  • bf5138b perf: deduplicate pending jwks key imports
  • b23a6f3 perf: use native encoding for larger ASCII strings
  • fd3ae3f perf: normalize jwks selection metadata once
  • 6925d43 perf: avoid copying AES-GCM output
  • be62530 docs: clarify and shorten public API guidance
  • 1b41312 build: preserve README when generation fails
  • 0b51829 build: check tree-shaking for every public binding
  • Additional commits viewable in compare view

Updates bson from 7.3.1 to 7.3.2

Release notes

Sourced from bson's releases.

v7.3.2

7.3.2 (2026-07-31)

The MongoDB Node.js team is pleased to announce version 7.3.2 of the bson package!

Release Notes

calculateObjectSize() now returns accurate byte counts for Int32 and BSONSymbol

Previously, each Int32 or BSONSymbol value caused a 12-byte overcount.

calculateObjectSize() now yields proper size calculations on ES Map's

This release of js-bson fixes an issue where we were incorrectly considering ES Map objects inside calculateObjectSize. This issue did not impact serialization, just size calculation.

Fixed incorrect date boundary in relaxed EJSON

This release of js-bson fixes an issue where the date boundary for relaxed EJSON was incorrectly set to a date 5 hours after the maximum limit of 10,000 AD.

Fixed an issue with ObjectId initialization in Cloudflare Workers

This release of js-bson fixes an issue where we were making crypto calls during module initialization, which is forbidden by Cloudflare Workers and other environments.

Memory optimization via smaller ObjectIds

ObjectId now stores its 12 bytes as four inline integers instead of a Uint8Array, cutting per-ObjectId memory by about 63% (and roughly 45 to 47% across large result sets) with no serialization slowdown. Deep equality and cloning are preserved (assert.deepStrictEqual, and lodash isEqual / cloneDeep).

Thanks to @​spokodev for contributing their fixes! (NODE-7631 (#901), NODE-7645 (#917), NODE-7646 (#910))

Bug Fixes

  • NODE-7631: count Int32 and BSONSymbol in calculateObjectSize (#901) (7f948a6)
  • NODE-7645: use the first instant of year 10000 as the relaxed EJSON date bound (#917) (9272c9a)
  • NODE-7646: count ES Map entries in calculateObjectSize (#910) (8d28b12)
  • NODE-7667: remove early initialization from ObjectId (#916) (665286f)

Performance Improvements

  • NODE-6246: store ObjectId bytes as four packed integers (#893) (a84229c)

Documentation

We invite you to try the bson library immediately, and report any issues to the NODE project.

Changelog

Sourced from bson's changelog.

7.3.2 (2026-07-31)

Bug Fixes

  • NODE-7631: count Int32 and BSONSymbol in calculateObjectSize (#901) (7f948a6)
  • NODE-7645: use the first instant of year 10000 as the relaxed EJSON date bound (#917) (9272c9a)
  • NODE-7646: count ES Map entries in calculateObjectSize (#910) (8d28b12)
  • NODE-7667: remove early initialization from ObjectId (#916) (665286f)

Performance Improvements

  • NODE-6246: store ObjectId bytes as four packed integers (#893) (a84229c)
Commits
  • 9cd2e68 chore(main): release 7.3.2 (#902)
  • 9272c9a fix(NODE-7645): use the first instant of year 10000 as the relaxed EJSON date...
  • 8d28b12 fix(NODE-7646): count ES Map entries in calculateObjectSize (#910)
  • 665286f fix(NODE-7667): remove early initialization from ObjectId (#916)
  • 1fc57e4 chore(NODE-7681): allow git fetch for npm12 (#914)
  • 57b5bf0 chore: use bundled version of NPM (#913)
  • a84229c perf(NODE-6246): store ObjectId bytes as four packed integers (#893)
  • 7f948a6 fix(NODE-7631): count Int32 and BSONSymbol in calculateObjectSize (#901)
  • See full diff in compare view

Updates temporal-polyfill from 1.0.4 to 1.0.5

Release notes

Sourced from temporal-polyfill's releases.

temporal-polyfill@1.0.5

📉 Size Wins

  • Smaller global IIFE bundles after min+gzip:
    • Basic (global.js): 19,532 → 19,433 bytes (−0.5%)
    • Full (full/global.js): 23,378 → 23,276 bytes (−0.4%)
  • Tree-shakeable API imports are 27.30% smaller on average after min+gzip. Highlights:
    • DurationFns.sign: 880 → 186 bytes (−79%)
    • ZonedDateTimeFns.compare: 950 → 268 bytes (−72%)
    • PlainDateFns.toPlainYearMonth: 2,808 → 1,194 bytes (−57%)

🐛 Tree-Shakeable API Correctness Fixes

  • FIX: Tree-shakeable API year/month rounding and alignment helpers use correct non-ISO calendar boundaries instead of mixing calendar year/month values with ISO fields
  • FIX: ZonedDateTimeFns.getTimeZoneTransition preserves transitions at epoch nanoseconds 0n instead of returning null, in both class-based and tree-shakeable APIs
  • FIX: Improve behavioral parity between the tree-shakeable and class-based APIs:
    • diffYears/Months/Weeks/Days:
      • ZonedDateTime handles equal instants, fractional units, DST transitions, skipped dates, rounding, and calendar validation (#103, #104), thx @​Pawel-IT
      • PlainDateTime includes time remainders and uses correct relative calendar-unit rounding, floating-point precision, calendar validation, and range validation
      • PlainDate uses correct relative calendar-unit rounding, floating-point precision, calendar validation, and range validation
      • PlainYearMonth ignores the internal reference ISO day, uses month precision, and handles rounding and range boundaries correctly
    • diffHours/Minutes/Seconds/Milliseconds/Microseconds/Nanoseconds
      • PlainTime preserves fractional precision and return positive zero for results that round to zero
Changelog

Sourced from temporal-polyfill's changelog.

v1.0.5

📉 Size Wins

  • Smaller global IIFE bundles after min+gzip:
    • Basic (global.js): 19,532 → 19,433 bytes (−0.5%)
    • Full (full/global.js): 23,378 → 23,276 bytes (−0.4%)
  • Tree-shakeable API imports are 27.30% smaller on average after min+gzip. Highlights:
    • DurationFns.sign: 880 → 186 bytes (−79%)
    • ZonedDateTimeFns.compare: 950 → 268 bytes (−72%)
    • PlainDateFns.toPlainYearMonth: 2,808 → 1,194 bytes (−57%)

🐛 Tree-Shakeable API Correctness Fixes

  • FIX: Tree-shakeable API year/month rounding and alignment helpers use correct non-ISO calendar boundaries instead of mixing calendar year/month values with ISO fields
  • FIX: ZonedDateTimeFns.getTimeZoneTransition preserves transitions at epoch nanoseconds 0n instead of returning null, in both class-based and tree-shakeable APIs
  • FIX: Improve behavioral parity between the tree-shakeable and class-based APIs:
    • diffYears/Months/Weeks/Days:
      • ZonedDateTime handles equal instants, fractional units, DST transitions, skipped dates, rounding, and calendar validation (#103, #104), thx @​Pawel-IT
      • PlainDateTime includes time remainders and uses correct relative calendar-unit rounding, floating-point precision, calendar validation, and range validation
      • PlainDate uses correct relative calendar-unit rounding, floating-point precision, calendar validation, and range validation
      • PlainYearMonth ignores the internal reference ISO day, uses month precision, and handles rounding and range boundaries correctly
    • diffHours/Minutes/Seconds/Milliseconds/Microseconds/Nanoseconds
      • PlainTime preserves fractional precision and return positive zero for results that round to zero
Commits

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 9bd8d46 chore: release v4.1.11 (#10995)
  • 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
  • See full diff in compare view

Updates next from 16.3.0 to 16.3.5

Release notes

Sourced from next's releases.

v16.3.5

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
  • next/image: Reject empty images when reading/writing to the disk cache (#98186)
  • Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
  • Add CSP nonce to script tags of loading and template files (#98403)
  • Fix use cache prerender signal retention (#98448)

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [backport] Scope app-entry export validation to files inside the app directory (#97357)
  • [backport] Fix catch-all index page being served for every other slug (#97416)
  • [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

... (truncated)

Commits
  • ca2c75e v16.3.5
  • 14fb290 [backport] Fix use cache prerender signal retention (#98448)
  • 2b1f28d [16.3.x] Add CSP nonce to script tags of loading and template files (#98403)
  • 4b56cee [16.3.x] Backport docs fixes (#98317)
  • 5568a02 [backport] docs: local development: Rewrite docker section, add Windows Dev D...
  • 93249ab [16.3.X] Emit whole-app server NFTs when output: 'standalone' is used with ...
  • 6549fd7 [16.3.x] next/image: reject empty image on read/write to disk cache (#98186)
  • d9eac96 [16.3.x] next/image: skip 0-byte entries when initializing disk LRU cache (#9...
  • 84b35fe [test] Fix 16.3 deploy test assertions (#98133)
  • 14f9c1a [16.3.x][ci] Run flake detection and new deploy tests when merged and on back...
  • Additional commits viewable in compare view

Updates @react-router/node from 8.3.0 to 8.3.1

Release notes

Sourced from @​react-router/node's releases.

v8.3.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v831

Changelog

Sourced from @​react-router/node's changelog.

v8.3.1

Patch Changes

  • Bump @remix-run/node-fetch-server dependency (#15447)
  • fix: Prevent client disconnects during streaming from crashing the Node process (#15324)
  • Updated dependencies:
Commits

Updates @react-router/serve from 8.3.0 to 8.3.1

Release notes

Sourced from @​react-router/serve's releases.

v8.3.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v831

Changelog

Sourced from @​react-router/serve's changelog.

v8.3.1

Patch Changes

  • Bump @remix-run/node-fetch-server dependency (#15447)
  • Serve /.well-known/* files from the client build directory. Express 5's static middleware ignores every dot-segment path by default, so RFC 8615 well-known URIs — ACME challenges, Android's assetlinks.json, Apple's apple-app-site-association — fell through to the request handler and came back as app-rendered HTML instead of the static file. Other dotfiles remain hidden. (#15340)
  • Updated dependencies:
Commits

Updates isbot from 5.2.1 to 5.2.2

Changelog

Sourced from isbot's changelog.

5.2.2

  • Pattern update: reduce size
Commits
  • eff2b5a Pattern update: reduce size
  • 09506ca adjust procedure for zsh, too
  • 06e1827 Does anyone read this? I'll be at the coffee shop accross the street.
  • 344052d nothing really
  • See full diff in compare view

Updates react-router from 8.3.0 to 8.3.1

Release notes

Sourced from react-router's releases.

v8.3.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v831

Changelog

Sourced from react-router's changelog.

v8.3.1

Patch Changes

  • Fix Expected fetcher: <key> error thrown on navigation when a fetcher is aborted during its post-action revalidation (#15365)
  • Fix lazy route discovery caching a path as discovered when the triggering navigation was aborted after the manifest response settled but before the route tree was patched, which permanently (for the session) shadowed the real route behind a catch-all or produced 404s on every subsequent visit (#15399)
  • Improve route matching performance for long paths (#15417)
  • Improve validation of action request origins (#15419)
  • Fix <ScrollRestoration> leaving history.scrollRestoration set to "auto" after a bfcache restore, which let the browser restore scroll on subsequent history traversals before the destination route had rendered (#15397)
  • Properly respect the relative option in useSubmit/fetcher.submit when resolivng the action path (#15400)
  • Add additional URL validation on client side navigations/redirects (#15445)
Commits
  • da2a0f0 Release v8.3.1 (#15368)
  • 917e6fd fix(fog-of-war): don't cache aborted lazy route discoveries as discovered (#1...
  • 2e0bf72 Validate client-side navigation targets (#15445)
  • f45d4ca Revert "fix: normalize control characters in relative URLs (#15416)" (#15442)
  • c091832 fix: validate schemeful action origins (#15419)
  • 308d206 fix: improve matching perf (#15417)
  • 36bdbeb fix: normalize control characters in relative URLs (#15416)
  • 801e2ae fix(react-router): re-enable manual scroll restoration after a bfcache restor...
  • 5e98140 fix: honor the relative option in useSubmit and fetcher.submit (#15400)
  • 5843d38 refactor(router): use definite assignment assertions in createDeferred (#15396)
  • Additional commits viewable in compare view

Updates postcss from 8.5.26 to 8.5.28

Release notes

Sourced from postcss's releases.

8.5.28

  • Fixes types regression.

8.5.27

Changelog

Sourced from postcss's changelog.

8.5.28

  • Fixes types regression.

8.5.27

Commits

Updates @prisma/dev from 0.25.1 to 0.25.2

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

Commits
  • 28e1f12 fix(cache): bound shared transform cache memory (

@dependabot
chore(deps)(deps): Bump the runtime-deps group across 1 directory wit…
d67963e 
…h 17 updates

Bumps the runtime-deps group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [uniku](https://github.com/jkomyno/uniku/tree/HEAD/packages/uniku) | `0.5.0` | `0.6.0` |
| [wrap-ansi](https://github.com/chalk/wrap-ansi) | `10.0.0` | `10.0.1` |
| [@vercel/detect-agent](https://github.com/vercel/vercel/tree/HEAD/packages/detect-agent) | `1.2.4` | `1.2.5` |
| [jose](https://github.com/panva/jose) | `6.2.8` | `6.2.12` |
| [bson](https://github.com/mongodb/js-bson) | `7.3.1` | `7.3.2` |
| [temporal-polyfill](https://github.com/fullcalendar/temporal-polyfill/tree/HEAD/polyfill) | `1.0.4` | `1.0.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |
| [next](https://github.com/vercel/next.js) | `16.3.0` | `16.3.5` |
| [@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node) | `8.3.0` | `8.3.1` |
| [@react-router/serve](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-serve) | `8.3.0` | `8.3.1` |
| [isbot](https://github.com/omrilotan/isbot) | `5.2.1` | `5.2.2` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `8.3.0` | `8.3.1` |
| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` |
| @prisma/dev | `0.25.1` | `0.25.2` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |
| [vscode-languageserver-textdocument](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/textDocument) | `1.0.12` | `1.0.14` |
| [vscode-languageserver](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/server) | `10.1.0` | `10.1.1` |



Updates `uniku` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/jkomyno/uniku/releases)
- [Changelog](https://github.com/jkomyno/uniku/blob/main/packages/uniku/CHANGELOG.md)
- [Commits](https://github.com/jkomyno/uniku/commits/uniku@0.6.0/packages/uniku)

Updates `wrap-ansi` from 10.0.0 to 10.0.1
- [Release notes](https://github.com/chalk/wrap-ansi/releases)
- [Commits](chalk/wrap-ansi@v10.0.0...v10.0.1)

Updates `@vercel/detect-agent` from 1.2.4 to 1.2.5
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/detect-agent/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/ruby@1.2.5/packages/detect-agent)

Updates `jose` from 6.2.8 to 6.2.12
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.8...v6.2.12)

Updates `bson` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/mongodb/js-bson/releases)
- [Changelog](https://github.com/mongodb/js-bson/blob/main/HISTORY.md)
- [Commits](mongodb/js-bson@v7.3.1...v7.3.2)

Updates `temporal-polyfill` from 1.0.4 to 1.0.5
- [Release notes](https://github.com/fullcalendar/temporal-polyfill/releases)
- [Changelog](https://github.com/fullcalendar/temporal-polyfill/blob/main/polyfill/CHANGELOG.md)
- [Commits](https://github.com/fullcalendar/temporal-polyfill/commits/temporal-polyfill@1.0.5/polyfill)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

Updates `next` from 16.3.0 to 16.3.5
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.0...v16.3.5)

Updates `@react-router/node` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-node/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/node@8.3.1/packages/react-router-node)

Updates `@react-router/serve` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-serve/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/serve@8.3.1/packages/react-router-serve)

Updates `isbot` from 5.2.1 to 5.2.2
- [Changelog](https://github.com/omrilotan/isbot/blob/main/CHANGELOG.md)
- [Commits](omrilotan/isbot@v5.2.1...v5.2.2)

Updates `react-router` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@8.3.1/packages/react-router)

Updates `postcss` from 8.5.26 to 8.5.28
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.26...8.5.28)

Updates `@prisma/dev` from 0.25.1 to 0.25.2

Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

Updates `vscode-languageserver-textdocument` from 1.0.12 to 1.0.14
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/HEAD/textDocument)

Updates `vscode-languageserver` from 10.1.0 to 10.1.1
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.1.1/server)

---
updated-dependencies:
- dependency-name: uniku
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-deps
- dependency-name: wrap-ansi
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: "@vercel/detect-agent"
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: jose
  dependency-version: 6.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: bson
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: temporal-polyfill
  dependency-version: 1.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: next
  dependency-version: 16.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: "@react-router/node"
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: "@react-router/serve"
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: isbot
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: react-router
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: postcss
  dependency-version: 8.5.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: "@prisma/dev"
  dependency-version: 0.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: vscode-languageserver-textdocument
  dependency-version: 1.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: vscode-languageserver
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 18, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 18, 2026 17:08
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 18, 2026
@coderabbitai

coderabbitai Bot commented Sep 18, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yml

Review profile: CHILL

Plan: Advanced

Run ID: 2ee3e5db-7e19-4881-9d5d-82354bec79b5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-new Bot commented Sep 18, 2026

Copy link
Copy Markdown

Open in StackBlitz

@prisma/orm-extension-arktype-json

npm i https://pkg.pr.new/@prisma/orm-extension-arktype-json@30351

@prisma/orm-extension-middleware-cache

npm i https://pkg.pr.new/@prisma/orm-extension-middleware-cache@30351

@prisma/orm-extension-paradedb

npm i https://pkg.pr.new/@prisma/orm-extension-paradedb@30351

@prisma/orm-extension-pgvector

npm i https://pkg.pr.new/@prisma/orm-extension-pgvector@30351

@prisma/orm-extension-postgis

npm i https://pkg.pr.new/@prisma/orm-extension-postgis@30351

@prisma/orm-extension-supabase

npm i https://pkg.pr.new/@prisma/orm-extension-supabase@30351

@prisma/orm-family-mongo

npm i https://pkg.pr.new/@prisma/orm-family-mongo@30351

@prisma/orm-family-sql

npm i https://pkg.pr.new/@prisma/orm-family-sql@30351

@prisma/orm-framework

npm i https://pkg.pr.new/@prisma/orm-framework@30351

@prisma/orm-mongo

npm i https://pkg.pr.new/@prisma/orm-mongo@30351

@prisma/orm-postgres

npm i https://pkg.pr.new/@prisma/orm-postgres@30351

@prisma/orm-sqlite

npm i https://pkg.pr.new/@prisma/orm-sqlite@30351

@prisma/orm-target-mongo

npm i https://pkg.pr.new/@prisma/orm-target-mongo@30351

@prisma/orm-target-postgres

npm i https://pkg.pr.new/@prisma/orm-target-postgres@30351

@prisma/orm-target-sqlite

npm i https://pkg.pr.new/@prisma/orm-target-sqlite@30351

@prisma/orm-toolchain

npm i https://pkg.pr.new/@prisma/orm-toolchain@30351

commit: d67963e

@github-actions

github-actions Bot commented Sep 18, 2026

Copy link
Copy Markdown
Contributor

size-limit report 📦

Path Size
postgres / no-emit 189.77 KB (+0.17% 🔺)
postgres / emit 160.29 KB (+0.22% 🔺)
mongo / no-emit 109.99 KB (+0.5% 🔺)
mongo / emit 92.34 KB (+0.59% 🔺)
cf-worker / no-emit 212.89 KB (+0.18% 🔺)
cf-worker / emit 180.31 KB (+0.2% 🔺)

@dependabot @github

dependabot Bot commented on behalf of github Sep 24, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 24, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/main/runtime-deps-94688b1936 branch September 24, 2026 14:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants