build(deps): bump the infra-deps group across 8 directories with 6 updates by dependabot[bot] · Pull Request #242 · bsv-blockchain/ts-stack

dependabot · 2026-06-29T08:52:32Z

Bumps the infra-deps group with 1 update in the /infra/chaintracks-server directory: @types/node.
Bumps the infra-deps group with 5 updates in the /infra/message-box-server directory:

Package	From	To
@types/node	`26.0.0`	`26.0.1`
firebase-admin	`14.0.0`	`14.1.0`
knex	`3.2.10`	`3.3.0`
mongodb	`7.3.0`	`7.4.0`
axios	`1.18.0`	`1.18.1`

Bumps the infra-deps group with 2 updates in the /infra/overlay-server directory: @types/node and mongodb.
Bumps the infra-deps group with 2 updates in the /infra/uhrp-server-basic directory: @types/node and axios.
Bumps the infra-deps group with 2 updates in the /infra/uhrp-server-cloud-bucket directory: @types/node and axios.
Bumps the infra-deps group with 1 update in the /infra/uhrp-server-cloud-bucket/notifier directory: axios.
Bumps the infra-deps group with 2 updates in the /infra/wab directory: @types/node and knex.
Bumps the infra-deps group with 3 updates in the /infra/wallet-infra directory: @types/node, knex and prettier.

Updates @types/node from 26.0.0 to 26.0.1

Commits

See full diff in compare view

Updates @types/node from 26.0.0 to 26.0.1

Commits

See full diff in compare view

Updates firebase-admin from 14.0.0 to 14.1.0

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Node.js SDK v14.1.0

New Features

feat(fcm): Enable fid and deprecate token for Send API (#3145)

Bug Fixes

fix(dataconnect): fix deserialization of emulator gRPC error codes into detailed errors (#3180)

Miscellaneous

[chore] Release 14.1.0 (#3193)

build(deps-dev): bump typescript-eslint packages to 8.62.0 (#3194)

build(deps-dev): bump @types/node from 25.7.0 to 26.0.0 (#3184)

build(deps-dev): bump @firebase/auth-compat from 0.6.6 to 0.6.8 (#3187)

build(deps-dev): bump @microsoft/api-extractor from 7.58.1 to 7.58.9 (#3188)

build(deps-dev): bump @firebase/app-compat from 0.5.12 to 0.5.13 (#3175)

build(deps-dev): bump shell-quote from 1.8.3 to 1.8.4 (#3173)

build(deps): bump @google-cloud/storage from 7.19.0 to 7.21.0 (#3174)

build(deps): bump google-auth-library from 10.6.2 to 10.7.0 (#3176)

build(deps-dev): bump nyc from 17.1.0 to 18.0.0 (#3177)

build(deps): bump @grpc/grpc-js from 1.14.3 to 1.14.4 (#3178)

Commits

96e3219 [chore] Release 14.1.0 (#3193)
d368c73 build(deps-dev): bump typescript-eslint packages to 8.62.0 (#3194)
645ba62 build(deps-dev): bump @types/node from 25.7.0 to 26.0.0 (#3184)
4ca39f3 build(deps-dev): bump @firebase/auth-compat from 0.6.6 to 0.6.8 (#3187)
265a9d5 feat(fcm): Enable fid and deprecate token for Send API (#3145)
c3de9df build(deps-dev): bump @microsoft/api-extractor from 7.58.1 to 7.58.9 (#3188)
22255fb fix(dataconnect): fix deserialization of emulator gRPC error codes into detai...
9c792b3 build(deps-dev): bump @firebase/app-compat from 0.5.12 to 0.5.13 (#3175)
c16db14 build(deps-dev): bump shell-quote from 1.8.3 to 1.8.4 (#3173)
9f3d986 build(deps): bump @google-cloud/storage from 7.19.0 to 7.21.0 (#3174)
Additional commits viewable in compare view

Updates knex from 3.2.10 to 3.3.0

Release notes

Sourced from knex's releases.

3.3.0

New features

feat: add support for returning in mariadb by @khalilst in #4572

feat: mariadb driver support by @erulabs in #6415

Fixes _setNullableState not respecting schema by @OliverHenrichs in #6025

feat: add connectionPool option for bringing an external pool by @tgriesser in #6414

Added knex.migrate.to and knex.migrate.before by @OlivierCavadenti in #6420

feat: set error.cause for tarn acquire connection error by @s-sathish in #5681

Bug fixes

Fix FOR UPDATE OF with explicit schema by @ErinCall in #5791

Fix sqlite conditional insert/merge when inserting multiple rows by @faulpeltz in #6185

Fix: Stream postProcessResponse error is not catchable with .on('error') by @Cerins in #6033

fix(pg): preserve updateFrom binding order by @AbdelrahmanHafez in #6454

fix: #6451, support token-credential in mssql auth by @tgriesser in #6465

fix(types): #6452 - .where type regression for invalid types by @tgriesser in #6463

fix: #6460 unhandled error on connection timeout with stream by @tgriesser in #6462

fix: #6455, correctly state tedious as dependency needed for mssql by @tgriesser in #6464

fix(pg,mssql): preserve binding order in delete and update queries by @AbdelrahmanHafez in #6438

Misc

chore: bump tarn@3.1.0 by @tgriesser in #6492

micro-optimization in wrappingFormatter by @erulabs in #6456

cleanup flake in the cancellation tests by @tgriesser in #6486

Update docs: timeout section by @rubengmurray in #6471

ci: make npm install resilient to transient network failures by @OlivierCavadenti in #6468

Update homepage urls by @giannisp in #6450

chore: add mariadb to docker-compose by @tgriesser in #6466

chore: set codecov to default coverage provider by @tgriesser in #6448

New Contributors

@AbdelrahmanHafez made their first contribution in knex/knex#6438

@s-sathish made their first contribution in knex/knex#5681

@OliverHenrichs made their first contribution in knex/knex#6025

@Cerins made their first contribution in knex/knex#6033

@faulpeltz made their first contribution in knex/knex#6185

@giannisp made their first contribution in knex/knex#6450

@ErinCall made their first contribution in knex/knex#5791

@khalilst made their first contribution in knex/knex#4572

@rubengmurray made their first contribution in knex/knex#6471

Full Changelog: knex/knex@3.2.10...3.3.0

Changelog

Sourced from knex's changelog.

3.3.0 - 26 June, 2026

New features

feat: add support for returning in mariadb #4572

feat: mariadb driver support #6415

Fixes _setNullableState not respecting schema #6025

feat: add connectionPool option for bringing an external pool #6414

Added knex.migrate.to and knex.migrate.before #6420

feat: set error.cause for tarn acquire connection error #5681

Bug fixes

Fix FOR UPDATE OF with explicit schema #5791

Fix sqlite conditional insert/merge when inserting multiple rows #6185

Fix: Stream postProcessResponse error is not catchable with .on('error') #6033

fix(pg): preserve updateFrom binding order #6454

fix: #6451, support token-credential in mssql auth #6465

fix(types): #6452 - .where type regression for invalid types #6463

fix: #6460 unhandled error on connection timeout with stream #6462

fix: #6455, correctly state tedious as dependency needed for mssql #6464

fix(pg,mssql): preserve binding order in delete and update queries #6438

Misc

chore: bump tarn@3.1.0 #6492

micro-optimization in wrappingFormatter #6456

cleanup flake in the cancellation tests #6486

Update docs: timeout section #6471

ci: make npm install resilient to transient network failures #6468

Update homepage urls #6450

chore: add mariadb to docker-compose #6466

chore: set codecov to default coverage provider #6448

Commits

e25d54b release 3.3.0
47988fb chore: bump tarn@3.1.0 (#6492)
22e080e micro-optimization in wrappingFormatter (#6456)
088d96d cleanup flake in the cancellation tests (#6486)
cbceb5d Update docs: timeout section (#6471)
16cd6ae feat: add support for returning in mariadb (#4572)
0ff56f8 ci: make npm install resilient to transient network failures (#6468)
1a962e2 Fix FOR UPDATE OF with explicit schema (#5791)
6f42421 Update homepage urls (#6450)
eab4576 fix sqlite conditional insert/merge with multiple rows (#6185)
Additional commits viewable in compare view

Updates mongodb from 7.3.0 to 7.4.0

Release notes

Sourced from mongodb's releases.

v7.4.0

7.4.0 (2026-06-25)

The MongoDB Node.js team is pleased to announce version 7.4.0 of the mongodb package!

Release Notes

Explicit resource management is now stable

The Symbol.asyncDispose methods on MongoClient, ClientSession, ChangeStream, and cursors enable await using for automatic cleanup. These methods were introduced as experimental in v6.9.0. Since then, TC39 Explicit Resource Management proposal reached Stage 4 in 2025, and Node.js enabled explicit resource management as a stable feature in Node.js 24, so the experimental flags have been removed from our APIs and the APIs are now officially supported.

afterClusterTime now sent on writes in causally-consistent sessions

When a session has causal consistency enabled, write operations now include readConcern.afterClusterTime, matching the existing read behavior. This maintains the "read your own writes" guarantee across primary failovers in shareded clusters. There are no API changes.

Features

NODE-7634: remove experimental tag from async dispose methods (#4976) (43ce3eb)

NODE-7549: send afterClusterTime on writes in causally-consistent sessions (#4963) (3abfd26)

Documentation

Reference

API

Changelog

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

Changelog

Sourced from mongodb's changelog.

7.4.0 (2026-06-25)

Features

NODE-7634: remove experimental tag from async dispose methods (#4976) (43ce3eb)

NODE-7549: send afterClusterTime on writes in causally-consistent sessions (#4963) (3abfd26)

Commits

1c4333e chore(main): release 7.4.0 (#4974)
43ce3eb feat(NODE-7634): remove experimental tag from async dispose methods (#4976)
3abfd26 fix(NODE-7549): send afterClusterTime on writes in causally-consistent sessio...
88ec159 chore(NODE-7418): skip csot tests on latest (#4969)
1f5ac37 chore(NODE-7473): upgrade to chai 5 (#4958)
b17288c chore: skip csfle tests and fix related broken tests (#4965)
5b401aa test(NODE-7493): enable source maps and add nyc-free debug scripts (#4947)
3ba2dd2 docs: clarify release notes verification steps (#4960)
0a434d3 docs: add 7.3 docs (#4959)
See full diff in compare view

Updates axios from 1.18.0 to 1.18.1

Release notes

Sourced from axios's releases.

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)

Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)

Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)

AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)

Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

@webdevelopersrinu (#10913)

@sijie-Z (#10993)

@bartlomieju (#11023)

@JSap0914 (#11019)

Full Changelog

Changelog

Sourced from axios's changelog.

Changelog

Commits

a209bfb chore(release): prepare release 1.18.1 (#11027)
fa6a55e chore(deps-dev): bump multer from 2.1.1 to 2.2.0 (#11026)
40e7be8 docs: clarifies that request data is request-specific in axios (#11025)
a446b39 fix(AxiosURLSearchParams): use arrow function so encoder.call(this) receives ...
cf1306a docs: add Deno to install instructions (#11023)
b32880a fix: incorrect use of error (#11021)
1792eda fix: ensure maxBodyLength is explicitly passed to follow-redirects (#10993)
30499d6 fix: various runtime crashes and type definition mismatches (#10959)
20ce9c4 fix(http): defer env proxy handling to Node (#10942)
e64bcf9 chore(deps): merge branch 'v1.x' into tests/module/cjs (#11014)
Additional commits viewable in compare view

Updates @types/node from 26.0.0 to 26.0.1

Commits

See full diff in compare view

Updates mongodb from 7.3.0 to 7.4.0

Release notes

Sourced from mongodb's releases.

v7.4.0

7.4.0 (2026-06-25)

The MongoDB Node.js team is pleased to announce version 7.4.0 of the mongodb package!

Release Notes

Explicit resource management is now stable

The Symbol.asyncDispose methods on MongoClient, ClientSession, ChangeStream, and cursors enable await using for automatic cleanup. These methods were introduced as experimental in v6.9.0. Since then, TC39 Explicit Resource Management proposal reached Stage 4 in 2025, and Node.js enabled explicit resource management as a stable feature in Node.js 24, so the experimental flags have been removed from our APIs and the APIs are now officially supported.

afterClusterTime now sent on writes in causally-consistent sessions

When a session has causal consistency enabled, write operations now include readConcern.afterClusterTime, matching the existing read behavior. This maintains the "read your own writes" guarantee across primary failovers in shareded clusters. There are no API changes.

Features

NODE-7634: remove experimental tag from async dispose methods (#4976) (43ce3eb)

NODE-7549: send afterClusterTime on writes in causally-consistent sessions (#4963) (3abfd26)

Documentation

Reference

API

Changelog

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

Changelog

Sourced from mongodb's changelog.

7.4.0 (2026-06-25)

Features

NODE-7634: remove experimental tag from async dispose methods (#4976) (43ce3eb)

NODE-7549: send afterClusterTime on writes in causally-consistent sessions (#4963) (3abfd26)

Commits

1c4333e chore(main): release 7.4.0 (#4974)
43ce3eb feat(NODE-7634): remove experimental tag from async dispose methods (#4976)
3abfd26 fix(NODE-7549): send afterClusterTime on writes in causally-consistent sessio...
88ec159 chore(NODE-7418): skip csot tests on latest (#4969)
1f5ac37 chore(NODE-7473): upgrade to chai 5 (#4958)
b17288c chore: skip csfle tests and fix related broken tests (#4965)
5b401aa test(NODE-7493): enable source maps and add nyc-free debug scripts (#4947)
3ba2dd2 docs: clarify release notes verification steps (#4960)
0a434d3 docs: add 7.3 docs (#4959)
See full diff in compare view

Updates @types/node from 26.0.0 to 26.0.1

Commits

See full diff in compare view

Updates axios from 1.18.0 to 1.18.1

Release notes

Sourced from axios's releases.

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)

Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)

Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)

AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)

Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

@webdevelopersrinu (#10913)

@sijie-Z (#10993)

@bartlomieju (#11023)

@JSap0914 (#11019)

Full Changelog

Changelog

Sourced from axios's changelog.

Changelog

Commits

a209bfb chore(release): prepare release 1.18.1 (#11027)
fa6a55e chore(deps-dev): bump multer from 2.1.1 to 2.2.0 (#11026)
40e7be8 docs: clarifies that request data is request-specific in axios (#11025)
a446b39 fix(AxiosURLSearchParams): use arrow function so encoder.call(this) receives ...
cf1306a docs: add Deno to install instructions (#11023)
b32880a fix: incorrect use of error (#11021)
1792eda fix: ensure maxBodyLength is explicitly passed to follow-redirects (#10993)
30499d6 fix: various runtime crashes and type definition mismatches (#10959)
20ce9c4 fix(http): defer env proxy handling to Node (#10942)
e64bcf9 chore(deps): merge branch 'v1.x' into tests/module/cjs (#11014)
Additional commits viewable in compare view

Updates @types/node from 26.0.0 to 26.0.1

Commits

See full diff in compare view

Updates axios from 1.18.0 to 1.18.1

Release notes

Sourced from axios's releases.

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)

Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)

Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)

AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)

Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

@webdevelopersrinu (#10913)

@sijie-Z (#10993)

@bartlomieju (#11023)

@JSap0914 (#11019)

Full Changelog

Changelog

Sourced from axios's changelog.

Changelog

Commits

a209bfb chore(release): prepare release 1.18.1 (#11027)
fa6a55e chore(deps-dev): bump multer from 2.1.1 to 2.2.0 (#11026)
40e7be8 docs: clarifies that request data is request-specific in axios (#11025)
a446b39 fix(AxiosURLSearchParams): use arrow function so encoder.call(this) receives ...
cf1306a docs: add Deno to install instructions (#11023)
b32880a fix: incorrect use of error (#11021)
1792eda fix: ensure maxBodyLength is explicitly passed to follow-redirects (#10993)
30499d6 fix: various runtime crashes and type definition mismatches (#10959)
20ce9c4 fix(http): defer env proxy handling to Node (#10942)
e64bcf9 chore(deps): merge branch 'v1.x' into tests/module/cjs (#11014)
Additional commits viewable in compare view

Updates axios from 1.18.0 to 1.18.1

Release notes

Sourced from axios's releases.

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)

Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)

Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)

AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)

Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

@webdevelopersrinu (#10913)

@sijie-Z (#10993)

@bartlomieju (#11023)

@JSap0914 (#11019)

Full Changelog

Changelog

Sourced from axios's changelog.

Changelog

Commits

a209bfb chore(release): prepare release 1.18.1 (#11027)
fa6a55e chore(deps-dev): bump multer from 2.1.1 to 2.2.0 (#11026)
40e7be8 docs: clarifies that request data is request-specific in axios (#11025)
a446b39 fix(AxiosURLSearchParams): use arrow function so encoder.call(this) receives ...
cf1306a docs: add Deno to install instructions (#11023)
b32880a fix: incorrect use of error (#11021)
1792eda fix: ensure maxBodyLength is explicitly passed to follow-redirects (#10993)
30499d6 fix: various runtime crashes and type definition mismatches (#10959)
20ce9c4 fix(http): defer env proxy handling to Node (#10942)
e64bcf9 chore(deps): merge branch 'v1.x' into tests/module/cjs (#11014)
Additional commits viewable in compare view

Updates @types/node from 26.0.0 to 26.0.1

Commits

See full diff in compare view

Updates knex from 3.2.10 to 3.3.0

Release notes

Sourced from knex's releases.

3.3.0

New features

feat: add support for returning in mariadb by @khalilst in #4572

feat: mariadb driver support by @erulabs in #6415

Fixes _setNullableState not respecting schema by @OliverHenrichs in #6025

feat: add connectionPool option for bringing an external pool by @tgriesser in #6414

Added knex.migrate.to and knex.migrate.before by @OlivierCavadenti in #6420

feat: set error.cause for tarn acquire connection error by @s-sathish in #5681

Bug fixes

Fix FOR UPDATE OF with explicit schema by @ErinCall in #5791

Fix sqlite conditional insert/merge when inserting multiple rows by @faulpeltz in #6185

Fix: Stream postProcessResponse error is not catchable with .on('error') by @Cerins in #6033

fix(pg): preserve updateFrom binding order by @AbdelrahmanHafez in #6454

fix: #6451, support token-credential in mssql auth by @tgriesser in #6465

fix(types): #6452 - .where type regression for invalid types by @tgriesser in #6463

fix: #6460 unhandled error on connection timeout with stream by @tgriesser in #6462

fix: #6455, correctly state tedious as dependency needed for mssql by @tgriesser in #6464

fix(pg,mssql): preserve binding order in delete and update queries by @AbdelrahmanHafez in #6438

Misc

chore: bump tarn@3.1.0 by @tgriesser in #6492

micro-optimization in wrappingFormatter by Description has been truncated

…dates Bumps the infra-deps group with 1 update in the /infra/chaintracks-server directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node). Bumps the infra-deps group with 5 updates in the /infra/message-box-server directory: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.0.0` | `26.0.1` | | [firebase-admin](https://github.com/firebase/firebase-admin-node) | `14.0.0` | `14.1.0` | | [knex](https://github.com/knex/knex) | `3.2.10` | `3.3.0` | | [mongodb](https://github.com/mongodb/node-mongodb-native) | `7.3.0` | `7.4.0` | | [axios](https://github.com/axios/axios) | `1.18.0` | `1.18.1` | Bumps the infra-deps group with 2 updates in the /infra/overlay-server directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [mongodb](https://github.com/mongodb/node-mongodb-native). Bumps the infra-deps group with 2 updates in the /infra/uhrp-server-basic directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [axios](https://github.com/axios/axios). Bumps the infra-deps group with 2 updates in the /infra/uhrp-server-cloud-bucket directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [axios](https://github.com/axios/axios). Bumps the infra-deps group with 1 update in the /infra/uhrp-server-cloud-bucket/notifier directory: [axios](https://github.com/axios/axios). Bumps the infra-deps group with 2 updates in the /infra/wab directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [knex](https://github.com/knex/knex). Bumps the infra-deps group with 3 updates in the /infra/wallet-infra directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [knex](https://github.com/knex/knex) and [prettier](https://github.com/prettier/prettier). Updates `@types/node` from 26.0.0 to 26.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/node` from 26.0.0 to 26.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `firebase-admin` from 14.0.0 to 14.1.0 - [Release notes](https://github.com/firebase/firebase-admin-node/releases) - [Changelog](https://github.com/firebase/firebase-admin-node/blob/main/CHANGELOG.md) - [Commits](firebase/firebase-admin-node@v14.0.0...v14.1.0) Updates `knex` from 3.2.10 to 3.3.0 - [Release notes](https://github.com/knex/knex/releases) - [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md) - [Commits](knex/knex@3.2.10...3.3.0) Updates `mongodb` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/mongodb/node-mongodb-native/releases) - [Changelog](https://github.com/mongodb/node-mongodb-native/blob/main/HISTORY.md) - [Commits](mongodb/node-mongodb-native@v7.3.0...v7.4.0) Updates `axios` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.18.0...v1.18.1) Updates `@types/node` from 26.0.0 to 26.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `mongodb` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/mongodb/node-mongodb-native/releases) - [Changelog](https://github.com/mongodb/node-mongodb-native/blob/main/HISTORY.md) - [Commits](mongodb/node-mongodb-native@v7.3.0...v7.4.0) Updates `@types/node` from 26.0.0 to 26.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `axios` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.18.0...v1.18.1) Updates `@types/node` from 26.0.0 to 26.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `axios` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.18.0...v1.18.1) Updates `axios` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.18.0...v1.18.1) Updates `@types/node` from 26.0.0 to 26.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `knex` from 3.2.10 to 3.3.0 - [Release notes](https://github.com/knex/knex/releases) - [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md) - [Commits](knex/knex@3.2.10...3.3.0) Updates `@types/node` from 26.0.0 to 26.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `knex` from 3.2.10 to 3.3.0 - [Release notes](https://github.com/knex/knex/releases) - [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md) - [Commits](knex/knex@3.2.10...3.3.0) Updates `prettier` from 3.8.4 to 3.9.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.4...3.9.1) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: infra-deps - dependency-name: "@types/node" dependency-version: 26.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: infra-deps - dependency-name: firebase-admin dependency-version: 14.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: infra-deps - dependency-name: knex dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: infra-deps - dependency-name: mongodb dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: infra-deps - dependency-name: axios dependency-version: 1.18.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: infra-deps - dependency-name: "@types/node" dependency-version: 26.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: infra-deps - dependency-name: mongodb dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: infra-deps - dependency-name: "@types/node" dependency-version: 26.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: infra-deps - dependency-name: axios dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: infra-deps - dependency-name: "@types/node" dependency-version: 26.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: infra-deps - dependency-name: axios dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: infra-deps - dependency-name: axios dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: infra-deps - dependency-name: "@types/node" dependency-version: 26.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: infra-deps - dependency-name: knex dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: infra-deps - dependency-name: "@types/node" dependency-version: 26.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: infra-deps - dependency-name: knex dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: infra-deps - dependency-name: prettier dependency-version: 3.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: infra-deps ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-06-29T08:53:29Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

socket-security · 2026-06-29T08:54:02Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality
npm/@types/node@26.0.1
npm/knex@3.3.0
npm/firebase-admin@14.0.0 ⏵ 14.1.0	⁺¹	⁺¹
npm/mongodb@7.4.0
npm/axios@1.18.0 ⏵ 1.18.1	⁺¹
npm/prettier@3.9.1

View full report

dependabot · 2026-06-29T20:17:32Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot · 2026-06-30T00:10:58Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot · 2026-06-30T22:17:29Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot · 2026-07-06T09:29:41Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot · 2026-07-13T09:30:06Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

sirdeggen · 2026-07-14T19:50:18Z

Superseded by #284 — consolidated into one branch so CI runs once against the combined dep bumps.

dependabot · 2026-07-14T19:50:21Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 29, 2026

dependabot Bot requested a review from sirdeggen as a code owner June 29, 2026 08:52

sirdeggen mentioned this pull request Jul 14, 2026

chore(deps): consolidate dependency bumps (#273, #260, #259, #258, #257, #256, #242) #284

Closed

2 tasks

sirdeggen closed this Jul 14, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/infra/chaintracks-server/infra-deps-350c1f27e3 branch July 14, 2026 19:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the infra-deps group across 8 directories with 6 updates - #242

build(deps): bump the infra-deps group across 8 directories with 6 updates#242
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/infra/chaintracks-server/infra-deps-350c1f27e3

dependabot Bot commented on behalf of github Jun 29, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Jun 29, 2026

Uh oh!

socket-security Bot commented Jun 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 30, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 30, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 6, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

sirdeggen commented Jul 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Firebase Admin Node.js SDK v14.1.0

New Features

Bug Fixes

Miscellaneous

3.3.0

New Contributors

3.3.0 - 26 June, 2026

New features

Bug fixes

Misc

v7.4.0

7.4.0 (2026-06-25)

Release Notes

Explicit resource management is now stable

afterClusterTime now sent on writes in causally-consistent sessions

Features

Documentation

7.4.0 (2026-06-25)

Features

v1.18.1 — June 21, 2026

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

Changelog

v7.4.0

7.4.0 (2026-06-25)

Release Notes

Explicit resource management is now stable

afterClusterTime now sent on writes in causally-consistent sessions

Features

Documentation

7.4.0 (2026-06-25)

Features

v1.18.1 — June 21, 2026

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

Changelog

v1.18.1 — June 21, 2026

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

Changelog

v1.18.1 — June 21, 2026

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

Changelog

3.3.0

Uh oh!

sonarqubecloud Bot commented Jun 29, 2026

Quality Gate passed

Uh oh!

socket-security Bot commented Jun 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 30, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 30, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 6, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

sirdeggen commented Jul 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026 •

edited

Loading