Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 11, 2025

Bumps the dependencies group with 12 updates in the / directory:

Package From To
fastify 5.3.3 5.4.0
@rollup/rollup-linux-x64-gnu 4.42.0 4.46.2
@myunisoft/loki 5.1.0 6.0.0
minimatch 10.0.1 10.0.3
dotenv 16.5.0 17.2.1
better-sqlite3 11.10.0 12.2.0
croner 9.0.0 9.1.0
pino 9.7.0 9.8.0
testcontainers 11.0.2 11.5.1
@slack/types 2.14.0 2.15.0
@ngneat/falso 7.4.0 8.0.2
ts-pattern 5.7.1 5.8.0

Updates fastify from 5.3.3 to 5.4.0

Release notes

Sourced from fastify's releases.

v5.4.0

What's Changed

Full Changelog: fastify/fastify@v5.3.3...v5.4.0

Commits
  • 0111d0a Bumped v5.4.0
  • a6b357c chore: removed simple-get from lock test (#6186)
  • 0a0b969 chore: removed simple-get from https tests (#6197)
  • 8226d14 chore(ci): cleanup citgm.yml (#6195)
  • 1fc4689 chore: removed simple-get from proppatch tests (#6200)
  • b853818 chore: removed simple-get from trust-proxy tests (#6205)
  • f1bc0c3 chore: removed simple-get from body-limit tests (#6209)
  • 1b46ddf chore: removed simple-get from async-delay-request tests (#6211)
  • 3bf4f10 chore: removed simple-get from output-validation tests (#6213)
  • 3f2b984 chore: removed simple-get from sync-delay-request tests (#6212)
  • Additional commits viewable in compare view

Updates @rollup/rollup-linux-x64-gnu from 4.42.0 to 4.46.2

Release notes

Sourced from @​rollup/rollup-linux-x64-gnu's releases.

v4.46.2

4.46.2

2025-07-29

Bug Fixes

  • Fix in-operator handling for external namespace and when the left side cannot be analyzed (#6041)

Pull Requests

v4.46.1

4.46.1

2025-07-28

Bug Fixes

  • Do not fail when using the in operator on external namespaces (#6036)

Pull Requests

  • #6036: disables optimization for external namespace when using the in operator (@​TrickyPi)

v4.46.0

4.46.0

2025-07-27

Features

  • Optimize in checks on namespaces to keep them treeshake-able (#6029)

Pull Requests

v4.45.3

4.45.3

2025-07-26

Bug Fixes

  • Do not fail build if a const is reassigned but warn instead (#6020)
  • Fail with a helpful error message if an exported binding is not defined (#6023)

... (truncated)

Changelog

Sourced from @​rollup/rollup-linux-x64-gnu's changelog.

4.46.2

2025-07-29

Bug Fixes

  • Fix in-operator handling for external namespace and when the left side cannot be analyzed (#6041)

Pull Requests

4.46.1

2025-07-28

Bug Fixes

  • Do not fail when using the in operator on external namespaces (#6036)

Pull Requests

  • #6036: disables optimization for external namespace when using the in operator (@​TrickyPi)

4.46.0

2025-07-27

Features

  • Optimize in checks on namespaces to keep them treeshake-able (#6029)

Pull Requests

4.45.3

2025-07-26

Bug Fixes

  • Do not fail build if a const is reassigned but warn instead (#6020)
  • Fail with a helpful error message if an exported binding is not defined (#6023)

Pull Requests

  • #6014: chore(deps): update dependency @​vue/language-server to v3 (@​renovate[bot])

... (truncated)

Commits

Updates @myunisoft/loki from 5.1.0 to 6.0.0

Updates minimatch from 10.0.1 to 10.0.3

Commits

Updates dotenv from 16.5.0 to 17.2.1

Changelog

Sourced from dotenv's changelog.

17.2.1 (2025-07-24)

Changed

  • Fix clickable tip links by removing parentheses (#897)

17.2.0 (2025-07-09)

Added

  • Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#889)
  • Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})
# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"
// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)
$ node index.js
Hello World
or
$ DOTENV_CONFIG_QUIET=true node index.js

17.1.0 (2025-07-07)

Added

  • Add additional security and configuration tips to the runtime log (#884)
  • Dim the tips text from the main injection information text
const TIPS = [
  '🔐 encrypt with dotenvx: https://dotenvx.com',
  '🔐 prevent committing .env to code: https://dotenvx.com/precommit',
  '🔐 prevent building .env in docker: https://dotenvx.com/prebuild',
  '🛠️  run anywhere with `dotenvx run -- yourcommand`',
  '⚙️  specify custom .env file path with { path: \'/custom/path/.env\' }',
  '⚙️  enable debug logging with { debug: true }',
  '⚙️  override existing env vars with { override: true }',
  '⚙️  suppress all logs with { quiet: true }',
  '⚙️  write to custom object with { processEnv: myObject }',
</tr></table> 

... (truncated)

Commits

Updates better-sqlite3 from 11.10.0 to 12.2.0

Release notes

Sourced from better-sqlite3's releases.

v12.2.0

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v12.1.1...v12.2.0

v12.1.1

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v12.1.0...v12.1.1

v12.1.0

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v12.0.0...v12.1.0

v12.0.0

What's Changed

New Contributors

Full Changelog: WiseLibs/better-sqlite3@v11.10.0...v12.0.0

Commits

Updates croner from 9.0.0 to 9.1.0

Release notes

Sourced from croner's releases.

9.1.0

What's Changed

Fixes

Chores

New Contributors

Full Changelog: Hexagon/croner@9.0.0...9.1.0

9.0.1-dev.3

What's Changed

New Contributors

Full Changelog: Hexagon/croner@9.0.1-dev.2...9.0.1-dev.3

9.0.1-dev.2

Changes

9.0.1-dev.1

  • chore: Repo/Dist cleanup
  • chore: Dev dependency updates
Commits
  • 364a307 Depencency update
  • 000d935 Update Action
  • 0b71e79 Format. Dependency update. Version bump.
  • b7b1723 Merge pull request #274 from gianlucca/gianlucca-patch-1
  • acdb262 Changed cron notation to match text
  • 9615864 Add "new" keyword to node-cron migration example.
  • 3a8b863 Merge pull request #273 from mgrisole/fix/immediate-interval-start
  • 8467a9f fix no immediate execution with interval
  • 5208508 Update deno.json
  • e92ec11 Merge pull request #266 from renejfc/fix/typesafe-constructor
  • Additional commits viewable in compare view

Updates pino from 9.7.0 to 9.8.0

Release notes

Sourced from pino's releases.

v9.8.0

What's Changed

New Contributors

Full Changelog: pinojs/pino@v9.7.0...v9.8.0

Commits

Updates testcontainers from 11.0.2 to 11.5.1

Release notes

Sourced from testcontainers's releases.

v11.5.1

Changes

🐛 Bug Fixes

🧹 Maintenance

📦 Dependency Updates

v11.5.0

Changes

🚀 Features

🐛 Bug Fixes

🧹 Maintenance

📦 Dependency Updates

v11.4.0

Changes

🚀 Features

🐛 Bug Fixes

v11.3.2

Changes

📦 Dependency Updates

... (truncated)

Commits
  • 1a2c25d Fix redpanda missing redpanda.yaml.hbs (#1105)
  • ed2c83d Bump the dependencies group across 1 directory with 28 updates (#1102)
  • 819fd80 Move more test images to Dockerfiles for Dependabot (#1100)
  • ba24450 v11.5.0
  • 13881ba Bump mkdocs-material from 9.6.15 to 9.6.16 in the dependencies group (#1091)
  • 73a371e Bump the dependencies group across 11 directories with 12 updates (#1092)
  • 74a5946 Documentation improvements (#1089)
  • 40829ec Fix resource quota being rejected when contains decimals (#1088)
  • 98a81b3 Implement support for specifying the protocol when exposing ports (#1068)
  • 0c3d4e4 v11.4.0
  • Additional commits viewable in compare view

Updates @slack/types from 2.14.0 to 2.15.0

Release notes

Sourced from @​slack/types's releases.

@​slack/types@​2.15.0

What's Changed

🧱 Enhancements

feat(types): Add assistant_thread to message event payload type in #2077 - Thanks @​seratch! Add expand prfoperty to section block type in #2137 - Thanks @​seratch!

🐛 Bug fixes

fix(types): use correct name of team_domain_change event in #2280 - Thanks @​toofishes!

📚 Documentation

docs: replace redirected or missing links to sdk documentation in #2125 - Thanks @​zimeg!

🤖 Dependencies

chore(deps-dev): bump @​biomejs/biome to v2 for all packages in #2281 - Thanks @​mwbrooks! chore(deps-dev): bump tsd from 0.31.2 to 0.32.0 in /packages/types in #2235 - Thanks @​dependabot! chore(deps-dev): bump shx from 0.3.4 to 0.4.0 in /packages/types in #2184 - Thanks @​dependabot!

🧰 Maintenance

ci: check for changes to lints separate from writing changes in #2117 - Thanks @​zimeg! chore(types): release @​slack/types@​2.15.0 in #2295 - Thanks @​zimeg!

New Contributors

Milestone: https://github.com/slackapi/node-slack-sdk/milestone/145 Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@​slack/types@​2.14.0...@​slack/types@​2.15.0

Commits
  • 5bcef49 chore(types): release @​slack/types@​2.15.0 (#2295)
  • e2e395c fix(types): use correct name of team_domain_change event (#2280)
  • 5cf7634 refactor(oauth): remove lodash.isstring from dependencies (#2293)
  • f1ebcc6 chore(deps-dev): bump @​biomejs/biome to v2 for all packages (#2281)
  • 181d486 chore(deps): bump the docusaurus group across 1 directory with 7 updates (#2291)
  • dd69010 chore(deps): bump dotenv from 16.6.1 to 17.0.1 in /examples/greet-and-react (...
  • 1a082ae chore(deps): bump dotenv from 16.6.1 to 17.0.1 in /examples/express-all-inter...
  • ca28ceb chore(deps-dev): bump @​tsconfig/recommended from 1.0.8 to 1.0.10 in /docs (#2...
  • fb3d0cd chore(web-api): release @​slack/web-api@​7.9.3 (#2272)
  • e41889b chore(deps-dev): bump sinon from 20.0.0 to 21.0.0 in /packages/web-api in the...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by e-zim, a new releaser for @​slack/types since your current version.


Updates @ngneat/falso from 7.4.0 to 8.0.2

Commits
  • 96a9c10 chore($falso): release version 8.0.2
  • a4616c6 type with {length: number} instead of never (#407)
  • 2afb1de chore($falso): release version 8.0.1
  • 35aea5d fix: 🐞 make options in toCollection optional
  • d62e3bd chore($falso): release version 8.0.0
  • 58e8eba fix: 🐞 toCollection returns an array
  • See full diff in compare view

Updates ts-pattern from 5.7.1 to 5.8.0

Release notes

Sourced from ts-pattern's releases.

v5.8.0

TS-Pattern v5.8.0 Release Notes

New Feature: .narrow() Method for Deep Type Narrowing

.narrow() gives you fine-grained control over type narrowing of deeply nested union types during pattern matching.

What is .narrow()?

The .narrow() method allows you to explicitly narrow the input type to exclude all values that have been handled by previous patterns. This is especially useful when working with:

  • Deeply nested union types
  • Nullable properties at any nesting level
  • Complex type structures where you need precise type information

When to Use .narrow()

By default, TS-Pattern automatically narrows top-level union types as you pattern match. However, for deeply nested types, this narrowing doesn't happen automatically to maintain optimal TypeScript performance. The .narrow() method gives you explicit control over when to perform this more computationally expensive operation.

Example Usage

type Input = { user: { role: 'admin' | 'editor' | 'viewer' } };
declare const input: Input;
const result = match(input)
.with({ user: { role: 'admin' } }, handleAdmin)
.narrow() // Explicitly narrow remaining cases
.with({ user: { role: 'editor' } }, handleEditor)
.narrow() // Narrow again if needed
.otherwise((remaining) => {
// remaining.user.role is now precisely 'viewer'
handleViewer(remaining);
});

Additional Improvements

  • Improvements to release scripts
  • Updated dependencies

Full Changelog: gvergnaud/ts-pattern@v5.7.1...v5.8.0

PRs

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates

Bumps the dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fastify](https://github.com/fastify/fastify) | `5.3.3` | `5.4.0` |
| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.42.0` | `4.46.2` |
| @myunisoft/loki | `5.1.0` | `6.0.0` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.0.1` | `10.0.3` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.5.0` | `17.2.1` |
| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `11.10.0` | `12.2.0` |
| [croner](https://github.com/hexagon/croner) | `9.0.0` | `9.1.0` |
| [pino](https://github.com/pinojs/pino) | `9.7.0` | `9.8.0` |
| [testcontainers](https://github.com/testcontainers/testcontainers-node) | `11.0.2` | `11.5.1` |
| [@slack/types](https://github.com/slackapi/node-slack-sdk) | `2.14.0` | `2.15.0` |
| [@ngneat/falso](https://github.com/ngneat/falso) | `7.4.0` | `8.0.2` |
| [ts-pattern](https://github.com/gvergnaud/ts-pattern) | `5.7.1` | `5.8.0` |



Updates `fastify` from 5.3.3 to 5.4.0
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.3.3...v5.4.0)

Updates `@rollup/rollup-linux-x64-gnu` from 4.42.0 to 4.46.2
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.42.0...v4.46.2)

Updates `@myunisoft/loki` from 5.1.0 to 6.0.0

Updates `minimatch` from 10.0.1 to 10.0.3
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.0.1...v10.0.3)

Updates `dotenv` from 16.5.0 to 17.2.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.5.0...v17.2.1)

Updates `better-sqlite3` from 11.10.0 to 12.2.0
- [Release notes](https://github.com/WiseLibs/better-sqlite3/releases)
- [Commits](WiseLibs/better-sqlite3@v11.10.0...v12.2.0)

Updates `croner` from 9.0.0 to 9.1.0
- [Release notes](https://github.com/hexagon/croner/releases)
- [Commits](Hexagon/croner@9.0.0...9.1.0)

Updates `pino` from 9.7.0 to 9.8.0
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v9.7.0...v9.8.0)

Updates `testcontainers` from 11.0.2 to 11.5.1
- [Release notes](https://github.com/testcontainers/testcontainers-node/releases)
- [Commits](testcontainers/testcontainers-node@v11.0.2...v11.5.1)

Updates `@slack/types` from 2.14.0 to 2.15.0
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/[email protected]...@slack/[email protected])

Updates `@ngneat/falso` from 7.4.0 to 8.0.2
- [Changelog](https://github.com/ngneat/falso/blob/main/changelog.config.js)
- [Commits](ngneat/falso@falso-7.4.0...falso-8.0.2)

Updates `ts-pattern` from 5.7.1 to 5.8.0
- [Release notes](https://github.com/gvergnaud/ts-pattern/releases)
- [Commits](gvergnaud/ts-pattern@v5.7.1...v5.8.0)

---
updated-dependencies:
- dependency-name: fastify
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.46.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@myunisoft/loki"
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: minimatch
  dependency-version: 10.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: dotenv
  dependency-version: 17.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: better-sqlite3
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: croner
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pino
  dependency-version: 9.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: testcontainers
  dependency-version: 11.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@slack/types"
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@ngneat/falso"
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ts-pattern
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 11, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 1, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dependencies-ec008a065b branch September 1, 2025 11:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant