Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 15 updates - #557

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-cc42d89cce
Closed

chore(deps): bump the minor-and-patch group across 1 directory with 15 updates#557
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-cc42d89cce

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the minor-and-patch group with 15 updates in the / directory:

Package From To
nx 23.0.0 23.1.0
@clack/prompts 1.6.0 1.7.0
@modelcontextprotocol/sdk 1.29.0 1.30.0
graphql 17.0.1 17.0.2
picomatch 4.0.4 4.0.5
undici 8.5.0 8.9.0
xstate 5.32.1 5.32.5
@types/node 25.9.4 25.9.5
@typescript-eslint/eslint-plugin 8.62.0 8.65.0
@typescript-eslint/parser 8.62.0 8.65.0
eslint 10.5.0 10.8.0
prettier 3.8.4 3.9.6
ts-jest 29.4.11 29.4.12
@prisma/client 7.8.0 7.9.1
prisma 7.8.0 7.9.1

Updates nx from 23.0.0 to 23.1.0

Release notes

Sourced from nx's releases.

23.1.0 (2026-07-13)

🚀 Features

  • ⚠️ angular: support angular v22 (#35851, #35910)
  • core: show a performance report at the end of every run (#36077)
  • core: support filtered targetDefaults via the nested-array shape (#36049)
  • core: re-add isCacheableTask helper (#36177)
  • core: add mouse support to the terminal UI (#35868)
  • core: scaffold create-nx-workspace into the current directory (#36134)
  • expo: support Expo SDK 56 (#35904, #35714)
  • ⚠️ linter: drop eslint v8 support (#36006)
  • linter: add migration to drop typescript-eslint v8-removed rules from flat configs (#36123)
  • misc: add next 14 to 15 and react 18 to 19 upgrade paths (#36031)
  • nx-cloud: add utm tracking to clickable cloud prompt links (#36028)
  • nx-dev: show product hunt launch banner in docs (#36112)
  • nx-dev: show product hunt launch banner in docs" (#36129, #36112)
  • release: add option to force changelog generation for programmatic usage (#36242)
  • repo: enable the tsgo compiler workspace-wide (#35926, #35047, #35167)
  • rspack: support @​rspack/core@​2 and @​rsbuild/core@​2 (multi-version compliance) (#35682, #35764, #13420, #781)
  • storybook: update Storybook to support Angular 22 (#36293)
  • testing: add migration to verify typecheck after the 23.1 migration (#36106)
  • vite: add configurable ts paths build/test targets and stabilize build coordination (#34890)

🩹 Fixes

  • angular: resolve esbuild option paths relative to the workspace root (#36017, #35936)
  • angular: bump prescribed angular version to 22.0.4 (#36130)
  • angular: make nx migrate to Angular 22 leave a buildable workspace (#36183)
  • angular-rspack: surface compilation failures as build errors and release resources on teardown (#36018)
  • bundling: restore preprocessor extensions in postcss normalizeOp… (#36057, #35854)
  • bundling: prevent TS6059 when an app imports a workspace lib from source (#36217, #35017)
  • core: avoid tsconfig path false positives for sibling project roots (#35796, #35795, #35786)
  • core: do not write minimumReleaseAgeExclude during nx migrate (#36045)
  • core: do not crash nx migrate on non-semver dependency specifiers (#36051)
  • core: format AI-edited files after agentic migrations (#36064)
  • core: prefer module.registerHooks to avoid DEP0205 deprecation warning (#36081)
  • core: prevent nx migrate crash when include=optional filters out the target package (#36087)
  • core: make nx migrate honor preapproved packages and emit a valid temp workspace (#36086)
  • core: skip daemon project-graph recompute on no-op file rewrites (#36082)
  • core: prevent the TUI from auto-selecting a completed task when a batch finishes (#35833)
  • core: deregister pseudo-terminal exit handlers when tasks finish (#36115)
  • core: prevent path traversal / zip-slip in self-hosted remote cache (#36116)
  • core: respect explicit --nxCloud=skip for AI agents in create-nx-workspace (#36131)
  • core: warn when the self-hosted remote cache disables TLS verification (NXC-4593) (#36132, #36116)
  • core: throw actionable error when pnpm .modules.yaml is missing (#35666, #35635)
  • core: support ${configDir} in tsconfig path alias resolution (#36037, #35804)
  • core: prevent non-npm devEngines pin from breaking npm registry lookups (#36020, #35815)
  • core: clarify nx sync remediation messaging and surface spinner output in non-tty (#35747)
  • core: exclude direct-dependency overrides from generated package.json (#36040, #35675)

... (truncated)

Commits
  • a88e494 chore(repo): migrate to nx 23.1.0-rc.2 (#36269)
  • 9f2d9bc fix(core): reduce task hashing memory usage on large workspaces (#36267)
  • b0e0260 fix(core): include root package.json dependencies for '.'-rooted projects (#3...
  • edc9212 fix(core): omit peer dependencies when installing packages to a temp dir (#36...
  • 2126534 fix(core): defer unresolved spread tokens when merging intermediate target co...
  • 127cf39 fix(core): size TUI bottom bar reservations to the actual help text (#36261)
  • edda904 fix(core): skip projects-filtered targetDefaults when resolved without a proj...
  • a4526f8 fix(core): detect Codex sandbox on Linux to disable daemon and plugin isolati...
  • 0824cce docs(misc): refresh angular docs pages and fix broken angular urls (#36276)
  • bfde134 fix(core): prevent TUI hint popup from permanently stealing focus (#36256)
  • Additional commits viewable in compare view

Updates @clack/prompts from 1.6.0 to 1.7.0

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.7.0

Minor Changes

  • #574 8f1c380 Thanks @​dreyfus92! - Add showInstructions option to select, multiselect, and groupMultiselect. Keyboard hints remain shown by default; pass showInstructions: false to hide them.

Patch Changes

Changelog

Sourced from @​clack/prompts's changelog.

1.7.0

Minor Changes

  • #574 8f1c380 Thanks @​dreyfus92! - Add showInstructions option to select, multiselect, and groupMultiselect. Keyboard hints remain shown by default; pass showInstructions: false to hide them.

Patch Changes

Commits

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits
  • 2d889f2 chore: bump version to 1.30.0 (#2563)
  • e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
  • bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
  • 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
  • 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
  • 369513d fix: support Zod 3.25 method literals (#2368)
  • e7ee57c v1 stdio buffer limit (#2239)
  • c36e1ef Add end-to-end test suite (#2167)
  • bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
  • 9edbab7 fix(server): prioritize zod issues and format them (#1503)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.


Updates graphql from 17.0.1 to 17.0.2

Release notes

Sourced from graphql's releases.

v17.0.2 (2026-07-03)

Bug Fix 🐞

Polish 💅

Committers: 2

Commits

Updates picomatch from 4.0.4 to 4.0.5

Release notes

Sourced from picomatch's releases.

4.0.5

What's Changed

New Contributors

Full Changelog: micromatch/picomatch@4.0.4...4.0.5

Commits
  • 4f41a8e 4.0.5
  • 02cfc1b Update .verb.md and run verb to generate README documentation
  • cc52ff6 Only run the upload code coverage step for 1 matrix permutation
  • 6d426d7 Allow workflow to continue if the code coverage step to fails
  • a00b954 Merge branch 'codeql-coverage'
  • 9680381 Merge pull request #183 from MerlijnW70/fix/matchbase-windows-basename
  • 648b4f2 Merge pull request #182 from MerlijnW70/fix/repeated-extglob-drops-branches
  • 70e6485 Configure code coverage upload for CodeQL
  • ab8bc4d fix: honor the windows option when matching basenames
  • 6289307 fix: preserve all branches when rewriting risky repeated extglobs
  • Additional commits viewable in compare view

Updates undici from 8.5.0 to 8.9.0

Release notes

Sourced from undici's releases.

v8.9.0

What's Changed

New Contributors

Full Changelog: nodejs/undici@v8.8.0...v8.9.0

v8.8.0

What's Changed

New Contributors

... (truncated)

Commits
  • 21a8e1e Bumped v8.9.0 (#5589)
  • 7d3cf92 fix: validate blob body content type
  • c601fff fix(cache): harden cache directive parsing
  • 2b3f749 test(retry): correct broken content-range fixtures in retry-handler.js
  • e11a68e fix(retry): reject partial content length mismatch
  • 9f09b49 test: cover crash on mixed unqualified and qualified private cache directives
  • 4fe5bc5 fix: handle empty qualified private cache directive
  • 10d93fc fix: harden cookie domain, path, and unparsed attribute validation
  • a17e301 Ignore auto-generated .npmrc on Windows (#5583)
  • a0922b0 fix: handle frozen globalThis in setGlobalDispatcher (#5574)
  • Additional commits viewable in compare view

Updates xstate from 5.32.1 to 5.32.5

Release notes

Sourced from xstate's releases.

xstate@5.32.5

Patch Changes

  • #5603 345e04c Thanks @​xianjianlf2! - Sending an event to a stopped actor no longer throws when the event contains unserializable data (e.g. circular references). Previously, the development-only warning that an event was sent to a stopped actor used JSON.stringify on the event, which could throw and mask the intended warning. The warning is now emitted safely regardless of the event's contents.

xstate@5.32.4

Patch Changes

  • #5589 e913eeb Thanks @​spokodev! - Fixed a bug where targeting a history state that is a direct child of a parallel state would silently do nothing when that parallel state had not been visited yet and the history state had no default target. The machine now enters the parallel state's initial configuration, matching the behavior of history states inside compound states.

    const machine = createMachine({
  initial: 'off',
  states: {
    off: { on: { GO: 'on.hist' } },
    on: {
      type: 'parallel',
      states: {
        regA: { initial: 'a1', states: { a1: {}, a2: {} } },
        regB: { initial: 'b1', states: { b1: {}, b2: {} } },
        hist: { type: 'history', history: 'deep' }
      }
    }
  }
});
const actor = createActor(machine).start();
actor.send({ type: 'GO' });
actor.getSnapshot().value; // { on: { regA: 'a1', regB: 'b1' } }

xstate@5.32.3

Patch Changes

  • #5575 830db8b Thanks @​JSap0914! - Fixed initialTransition (and transition) throwing "Actor with system ID '...' already exists" when the machine contains an invoke with a systemId.

    Root cause: createInertActorScope used createActor(logic) internally, which eagerly ran getInitialSnapshot during construction and registered any systemId-carrying child actors in the system. When the caller then ran getInitialSnapshot (or transition) via the returned scope, the same system was reused, causing the duplicate-registration error.

    Fix: After creating the internal actor, createInertActorScope now replaces the actor's system reference with a freshly-created system. Child actors spawned by the subsequent caller-driven getInitialSnapshot / transition invocation therefore register into a clean system with no pre-existing entries.

    const machine = createMachine({
  initial: 'idle',
  states: {
    idle: {
      invoke: {
        src: fromPromise(async () => 42),
        systemId: 'myActor' // previously caused: "Actor with system ID 'myActor' already exists"
      }
    }

... (truncated)

Commits
  • c25dba0 Version Packages (#5604)
  • b669e95 fix(xstate-vue): correct vitest include glob so tests are discovered (#5607)
  • 345e04c fix(core): don't throw when warning about unserializable event sent to stoppe...
  • 9297fa8 Version Packages (#5590)
  • e913eeb fix(core): enter parallel default when targeting an unvisited history child (...
  • ab5aa56 Version Packages (#5586)
  • 830db8b fix(core): prevent 'systemId already exists' in pure transition functions (#5...
  • a551a2b docs: add missing https protocol to Stately Studio link (#5585)
  • cc087bf ci: pin Node to 24.16.0 (#5577)
  • 806ae91 Version Packages
  • Additional commits viewable in compare view

Updates @types/node from 25.9.4 to 25.9.5

Commits

Updates @typescript-eslint/eslint-plugin from 8.62.0 to 8.65.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)
  • eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
  • eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
  • parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
  • typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

  • eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
  • eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

  • support parsing import defer (#12513)
  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.65.0 (2026-07-20)

🚀 Features

  • eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
  • add warning when TS 7 is detected (#12529)
  • eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)
  • eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
  • eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

🚀 Features

  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

🚀 Features

... (truncated)

Commits
  • 63ba81b chore(release): publish 8.65.0
  • aa602bd fix(eslint-plugin): [no-unnecessary-parameter-property-assignment] don't flag...
  • 1e90d67 feat(eslint-plugin): [no-shadow] specialized error on enum declaration and me...
  • b32fb34 docs: fix broken code samples in no-extraneous-class and prefer-function-type...
  • eaf4576 feat: add warning when TS 7 is detected (#12529)
  • 18c01c7 feat(eslint-plugin): [no-restricted-imports] deprecate extension rule (#12527)
  • 96e8fe2 fix(eslint-plugin): [unbound-method] report unbound methods accessed via memb...
  • 0d06406 chore: add attw validation to repo (#12437)
  • 9d9973b fix(eslint-plugin): [prefer-string-starts-ends-with] handle escaped $ ending ...
  • c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.62.0 to 8.65.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)
  • eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
  • eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
  • parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
  • typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

  • eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
  • eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

  • support parsing import defer (#12513)
  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)
  • parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 63ba81b chore(release): publish 8.65.0
  • eaf4576 feat: add warning when TS 7 is detected (

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 1…
433bab0 
…5 updates

Bumps the minor-and-patch group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) | `23.0.0` | `23.1.0` |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.6.0` | `1.7.0` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` |
| [graphql](https://github.com/graphql/graphql-js) | `17.0.1` | `17.0.2` |
| [picomatch](https://github.com/micromatch/picomatch) | `4.0.4` | `4.0.5` |
| [undici](https://github.com/nodejs/undici) | `8.5.0` | `8.9.0` |
| [xstate](https://github.com/statelyai/xstate) | `5.32.1` | `5.32.5` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.4` | `25.9.5` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.62.0` | `8.65.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.62.0` | `8.65.0` |
| [eslint](https://github.com/eslint/eslint) | `10.5.0` | `10.8.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.4` | `3.9.6` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.11` | `29.4.12` |
| [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.8.0` | `7.9.1` |
| [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `7.8.0` | `7.9.1` |



Updates `nx` from 23.0.0 to 23.1.0
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/23.1.0/packages/nx)

Updates `@clack/prompts` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.7.0/packages/prompts)

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0)

Updates `graphql` from 17.0.1 to 17.0.2
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v17.0.1...v17.0.2)

Updates `picomatch` from 4.0.4 to 4.0.5
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.4...4.0.5)

Updates `undici` from 8.5.0 to 8.9.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.5.0...v8.9.0)

Updates `xstate` from 5.32.1 to 5.32.5
- [Release notes](https://github.com/statelyai/xstate/releases)
- [Commits](https://github.com/statelyai/xstate/compare/xstate@5.32.1...xstate@5.32.5)

Updates `@types/node` from 25.9.4 to 25.9.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.62.0 to 8.65.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.62.0 to 8.65.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/parser)

Updates `eslint` from 10.5.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.5.0...v10.8.0)

Updates `prettier` from 3.8.4 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.4...3.9.6)

Updates `ts-jest` from 29.4.11 to 29.4.12
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.4.11...v29.4.12)

Updates `@prisma/client` from 7.8.0 to 7.9.1
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/client)

Updates `prisma` from 7.8.0 to 7.9.1
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/cli)

---
updated-dependencies:
- dependency-name: nx
  dependency-version: 23.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@clack/prompts"
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: graphql
  dependency-version: 17.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: picomatch
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: undici
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: xstate
  dependency-version: 5.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 25.9.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ts-jest
  dependency-version: 29.4.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@prisma/client"
  dependency-version: 7.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: prisma
  dependency-version: 7.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 28, 2026
@sonarqubecloud

sonarqubecloud Bot commented Jul 28, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@github-actions

github-actions Bot commented Jul 28, 2026

Copy link
Copy Markdown

Test Coverage Report

Overall Coverage: 96.84%

Metric Percentage
Statements 96.2%
Branches 87.97%
Functions 94.83%
Lines 96.84%

View detailed coverage report

@polaz

polaz commented Aug 8, 2026

Copy link
Copy Markdown
Member

Superseded by #571, which applies all pending dependency updates in one pass.

@polaz polaz closed this Aug 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-cc42d89cce branch August 8, 2026 18:26
polaz added a commit that referenced this pull request Aug 8, 2026
@polaz
fix(logging): never write logs to stdout in stdio mode (#571)
2e8e836 
* fix(logging): never write logs to stdout in stdio mode

- LOG_JSON=true previously created a bare pino instance that wrote
  NDJSON log lines to stdout, corrupting the MCP JSON-RPC channel in
  stdio transport mode; logs are now forced to stderr whenever the
  server runs on stdio, for both plain and JSON formats
- add LOG_DESTINATION=stdout|stderr override for HTTP mode; defaults
  keep the container convention (pretty to stderr, NDJSON to stdout)
- fix LOG_FORMAT rendering: messageFormat crossed the worker-thread
  transport boundary, duplicating the prefix and printing 'undefined'
  for the level; format tokens now drive field visibility via ignore
  list only
- document LOG_FORMAT and LOG_DESTINATION plus a destination matrix
  in the configuration guide

Closes #563

* chore(deps): update all dependencies across workspaces

Applies every pending Dependabot update in one pass:

- @cloudflare/workers-types 4.20260623.1 -> 5.20260808.1 (major)
- vitepress 2.0.0-alpha.17 -> 2.0.0-alpha.19
- undici ^8.5.0 -> ^8.10.0
- @modelcontextprotocol/sdk, @clack/prompts, eslint, prettier,
  @typescript-eslint/*, ts-jest, graphql, picomatch, xstate minor/patch
- prisma + @prisma/client 7.8.0 -> 7.9.1
- nx 23.0.0 -> 23.1.1
- lockfile-only transitive bumps: hono 4.13.1, postcss 8.5.26,
  ip-address 10.4.0, brace-expansion 1.1.18, js-yaml 3.15.1,
  fast-uri 3.1.5, tar 7.5.22, body-parser 2.3.0

typescript 7 and @types/node 26 majors are intentionally skipped:
@types/node major is on the Dependabot ignore list and the native
tsc migration is a separate effort.

Supersedes Dependabot PRs #543, #544, #545, #546, #551, #556, #557,
#559, #560, #561, #566, #568, #569, #570

* chore(ci): bump actions/setup-node to v7 and pin codeql-action to v4.37.4

Supersedes Dependabot PRs #549 and #567

* test(runners): pass statuses as an array in list_jobs schema check

The list_jobs statuses filter became an array of CiJobStatus in
c1b37f9, but the integration schema test still passed a bare string
and failed against the current schema.

* style: reformat union types per prettier 3.9

prettier 3.9 collapses short union types onto one line; reformat the
9 affected files so lint passes on the updated toolchain.

* docs(logging): describe LOG_FORMAT tokens as visibility switches

- LOG_FORMAT tokens toggle field visibility; the line always renders in
  pino-pretty's fixed order, so stop advertising custom layouts in the
  docstring and configuration guide
- add unit test for LOG_DESTINATION=stdout with the pretty transport in
  HTTP mode
- drop issue references from code comments and test names; ticket
  numbers belong in commits and PRs, not in source

* docs(troubleshooting): add JSONRPC parse error spam diagnosis

Startup 'Failed to parse JSONRPC message' bursts mean an outdated
build (stale npx cache) logging to stdout; document the symptom,
cause, and cache-refresh fix with a quick-diagnosis row.

* docs(logging): state that the log message is always rendered

The %msg token cannot suppress the message: a log line without its
message is useless, so only %time, %level, and %name act as
visibility switches. Make the docstring and configuration guide say
so explicitly instead of implying %msg is toggleable.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@polaz