Skip to content

chore(deps): Bump the minor-and-patch group with 11 updates - #590

Merged
huyplb merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-c57f2a09a0
Nov 2, 2026
Merged

chore(deps): Bump the minor-and-patch group with 11 updates#590
huyplb merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-c57f2a09a0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 11 updates:

Package From To
eslint-plugin-security 4.2.0 4.2.1
typescript-eslint 8.72.0 8.72.1
@fastify/static 10.1.7 10.1.8
isomorphic-git 1.44.3 1.44.8
@inquirer/prompts 8.7.4 8.7.5
lucide-react 1.61.0 1.65.0
mssql 12.7.11 12.7.13
@types/node 26.6.5 26.6.6
@aws-sdk/client-secrets-manager 3.1156.0 3.1160.0
@azure/identity 4.14.0 4.14.1
@azure/keyvault-secrets 4.11.2 4.12.0

Updates eslint-plugin-security from 4.2.0 to 4.2.1

Release notes

Sourced from eslint-plugin-security's releases.

eslint-plugin-security: v4.2.1

4.2.1 (2026-10-18)

Bug Fixes

  • check RegExp() called without new in the regexp rules (#232) (affbfc0)
Changelog

Sourced from eslint-plugin-security's changelog.

4.2.1 (2026-10-18)

Bug Fixes

  • check RegExp() called without new in the regexp rules (#232) (affbfc0)
Commits

Updates typescript-eslint from 8.72.0 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @fastify/static from 10.1.7 to 10.1.8

Release notes

Sourced from @​fastify/static's releases.

v10.1.8

What's Changed

Full Changelog: fastify/fastify-static@v10.1.7...v10.1.8

Commits
  • 4e0e7e3 Bumped v10.1.8
  • b2974e0 chore: lower min-release-age to 6 days to unblock 10.1.8 release
  • 5b382cd docs: document the dotfiles option and its default
  • 71e2519 Merge commit from fork
  • See full diff in compare view

Updates isomorphic-git from 1.44.3 to 1.44.8

Release notes

Sourced from isomorphic-git's releases.

v1.44.8

1.44.8 (2026-10-28)

Bug Fixes

v1.44.7

1.44.7 (2026-10-28)

Bug Fixes

v1.44.6

1.44.6 (2026-10-27)

Performance Improvements

  • inflate each object once in GitPackIndex.fromPack (#2443) (cea14b8)

v1.44.5

1.44.5 (2026-10-26)

Bug Fixes

  • parse config section headers with comments, tabs and escaped subsections (#2466) (dea0848)

v1.44.4

1.44.4 (2026-10-23)

Bug Fixes

  • escape and unescape config values like canonical git (#2462) (815284f)
Commits
  • 6801888 fix: reject malformed pkt-line lengths (#2457)
  • 7ac1608 fix: read and write version 3 index files (#2465)
  • 9db9fd1 docs(quickstart): define global Buffer in browser Quick Start (#2468)
  • cea14b8 perf: inflate each object once in GitPackIndex.fromPack (#2443)
  • dea0848 fix: parse config section headers with comments, tabs and escaped subsections...
  • 815284f fix: escape and unescape config values like canonical git (#2462)
  • See full diff in compare view

Updates @inquirer/prompts from 8.7.4 to 8.7.5

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.5

What's new

  • Dependencies updated: @inquirer/password@5.2.5 fixes the cursor overlapping the message when the password prompt is empty (#2360), and @inquirer/core@12.0.6 fixes piped-stdin answers being dropped before the first render (#2359)
Commits
  • 672b77f chore: Publish new release
  • 8e66d58 fix(@​inquirer/password): keep trailing space after message in empty state
  • 98f5ad3 fix(turbo): hash nested source files in tsc task cache inputs
  • 5239f87 fix(core): don't drop piped stdin answers in first-render deferral
  • 69b4eec ci: run windows unit tests on node 26 only (#2358)
  • 483e52a test(demo): replace 3s real-time wait with fake timers in slow-validation tes...
  • 071edfc ci: overwrite the runner's stale yarn shims instead of reinstalling corepack ...
  • e38e706 ci: cancel superseded CI runs with a concurrency group (#2354)
  • 629a91d ci: drop 'needs: Compile' from Linting/e2e/deno-pack (#2353)
  • 5e9227c ci: run coverage and codecov on the ubuntu node-26 unit cell only (#2351)
  • Additional commits viewable in compare view

Updates lucide-react from 1.61.0 to 1.65.0

Release notes

Sourced from lucide-react's releases.

Version 1.65.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.64.0...1.65.0

Version 1.64.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.63.0...1.64.0

Version 1.63.0

What's Changed

... (truncated)

Commits
  • 1668a0c chore(deps): bump rollup to 4.65.1 and keep typescript on v6 (#5110)
  • e8f86fc fix(lucide-react): ignore stale DynamicIcon loads after the name changes (#5060)
  • 6657faa chore(deps-dev): bump vite from 8.3.2 to 8.3.3 (#5052)
  • 1802f33 feat(lucide-react): add package exports for per-icon imports without changing...
  • 20aef31 chore(packages): Update sponsors (#5034)
  • See full diff in compare view

Updates mssql from 12.7.11 to 12.7.13

Release notes

Sourced from mssql's releases.

v12.7.13

12.7.13 (2026-10-26)

Bug Fixes

  • keep msnodesqlv8 6 from holding the connection of a stream paused after its cancel (97ead5b)

v12.7.12

12.7.12 (2026-10-26)

Bug Fixes

  • strip every ODBC driver's prefix from msnodesqlv8 messages (4f78ec4)
Commits
  • 3202519 Merge pull request #1945 from dhensby/fix/msnodesqlv8-cancel-then-pause
  • 083063f Merge pull request #1946 from dhensby/ci/msnodesqlv8-v6
  • dd683d2 docs: list msnodesqlv8 v6 as supported
  • 6a35192 test: check that floats, reals and decimals are read at full precision
  • 21155f4 ci: test against msnodesqlv8 v6
  • 97ead5b fix: keep msnodesqlv8 6 from holding the connection of a stream paused after ...
  • ccee402 Merge pull request #1944 from dhensby/fix/msnodesqlv8-odbc-message-prefix
  • 4f78ec4 fix: strip every ODBC driver's prefix from msnodesqlv8 messages
  • See full diff in compare view

Updates @types/node from 26.6.5 to 26.6.6

Commits

Updates @aws-sdk/client-secrets-manager from 3.1156.0 to 3.1160.0

Release notes

Sourced from @​aws-sdk/client-secrets-manager's releases.

v3.1160.0

3.1160.0(2026-10-29)

New Features
  • client-cleanrooms: Adds support for the PySpark 2.0 analysis template format and for choosing the file format (CSV or Parquet) of protected job results written to Amazon S3, including in a membership's default job result configuration. (8cb4c7eb)
  • client-bedrock-agentcore-control: Adds Session Endpoint Feature on AgentCore Runtime (07ecbbc3)
  • client-wafv2: AWS WAF customers using Targeted Bot Control, ATP, or ACFP managed rule groups can now enable automatic Challenge JavaScript SDK injection. When enabled, Amazon CloudFront injects the script tag into HTML responses on your behalf, removing the need for manual integration. (d4065359)
  • client-bedrock-agentcore: Adds AgentCore Runtime session endpoint support, including sessionEndpointUrl on the InvokeAgentRuntime response (dac2f977)
  • client-lightsail: This release adds support for instance health status checks and system status checks. (5bf15ec1)
  • client-imagebuilder: This release adds support for on-demand AMI scanning with Amazon Inspector. (a1a1c3ea)
  • checksums: add xxHash and SHA-512 checksum algorithms (#8383) (3aa504f3)
  • codegen: add Smithy RPCv2 JSON protocol (#8386) (ee519d02)

For list of updated packages, view updated-packages.md in assets-3.1160.0.zip

v3.1159.0

3.1159.0(2026-10-28)

Chores
  • readability, require braces for control flow (#8389) (2a160140)
New Features
  • client-connectparticipant: Amazon Connect Participant Service now supports the optional UrlContentDisposition parameter on GetAttachment, which returns a pre-signed URL that renders a chat attachment inline in the browser instead of forcing a download. (264a9efc)
  • client-connect: Amazon Connect APIs - CreateTaskTemplate and UpdateTaskTemplate accept a new ContactHooks parameter called WrapUpFlowId to identify the flow module that runs when an agent attempts to disconnect from a task created with the template. Use this to verify an agent's work or update external case repos. (86f44373)
  • client-ec2: Amazon EC2 Capacity Manager adds supportability checks and capacity fulfillment metrics. Use GetCapacityManagerSupportabilityScores to score how well instance types and Availability Zones can support a capacity request, and GetCapacityManagerMetricData to retrieve fulfillment metrics. (2ab44578)
  • client-opensearch: This release adds APIs to simplify setting up a replication relationship between OpenSearch clusters. The APIs include new Switchover and Failover actions for planned switchovers and unplanned failovers to ensure high availability for OpenSearch in the event of disaster in a single region. (59cc8c0d)
  • client-ivs: InsertAdBreak now allows setting a customized adBreakId on a request and also adds a new field targetStartAt for a delayed ad insertion (c0656dd6)
  • client-acm: AWS Certificate Manager now supports the Automatic Certificate Management Environment (ACME) protocol in the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions. (5b43833f)
  • client-securityagent: Adds support for attaching client certificates for mutual TLS (mTLS) authentication to penetration test target endpoints via the new ClientCertificates field on Assets, enabling pentesting of endpoints that require client certificate authentication. (fe783883)
  • client-kafkaconnect: Amazon MSK Connect now supports updating a connector's custom plugin and worker configuration via the UpdateConnector API. MSK Connect checks connector and task health after the update and rolls back on failure. Each call returns an operation ARN to track with DescribeConnectorOperation. (c9a2aa5a)
  • client-artifact: Update support mode for Assurance Assistance (18fff2c6)
  • client-medialive: AWS Elemental MediaLive now supports SMPTE 2022-7 seamless protection switching for multicast inputs on MediaLive Anywhere. Support for MulticastSettings sources to add a redundant copy of the stream received on a second network interface. (d44798e5)
  • client-neptunedata: Get Storage API analyzes storage usage to identify database bloat and your storage footprint. Index Rebuild API triggers on-demand index reconstruction to eliminate bloat and restore query performance. (278cca93)
Bug Fixes
  • middleware-sdk-s3: scope S3 Express cache by identity (#8387) (7485eaac)

For list of updated packages, view updated-packages.md in assets-3.1159.0.zip

v3.1158.0

... (truncated)

Changelog

Sourced from @​aws-sdk/client-secrets-manager's changelog.

3.1160.0 (2026-10-29)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1159.0 (2026-10-28)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1158.0 (2026-10-27)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1157.0 (2026-10-26)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

Commits

Updates @azure/identity from 4.14.0 to 4.14.1

Changelog

Sourced from @​azure/identity's changelog.

4.14.1 (2026-10-29)

Bugs Fixed

  • Restored the fix from 4.13.3 that forwards constructor options from DefaultAzureCredential to ManagedIdentityCredential when selected through AZURE_TOKEN_CREDENTIALS, including managedIdentityClientId and managedIdentityResourceId. #40547

Other Changes

Commits
  • 56472b9 [Identity] Set 4.14.1 release date to October 29, 2026
  • 8881515 [Identity] Backport 4.13.3 fixes and finalize 4.14.1 changelog
  • 89ef212 [Identity] Backport MSAL Node v7 for 4.14.1
  • See full diff in compare view

Updates @azure/keyvault-secrets from 4.11.2 to 4.12.0

Changelog

Sourced from @​azure/keyvault-secrets's changelog.

4.12.0 (2026-10-27)

Features Added

  • Added support for service API version 2026-04-01, which is now the default, and for explicitly selecting it via serviceVersion. #40486

Other Changes

  • Regenerated the internal client from the stable 2026-04-01 specification. #40486
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the minor-and-patch group with 11 updates
d975b42 
Bumps the minor-and-patch group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [eslint-plugin-security](https://github.com/eslint-community/eslint-plugin-security) | `4.2.0` | `4.2.1` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.72.0` | `8.72.1` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `10.1.7` | `10.1.8` |
| [isomorphic-git](https://github.com/isomorphic-git/isomorphic-git) | `1.44.3` | `1.44.8` |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.7.4` | `8.7.5` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.61.0` | `1.65.0` |
| [mssql](https://github.com/tediousjs/node-mssql) | `12.7.11` | `12.7.13` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` |
| [@aws-sdk/client-secrets-manager](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-secrets-manager) | `3.1156.0` | `3.1160.0` |
| [@azure/identity](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/identity/identity) | `4.14.0` | `4.14.1` |
| [@azure/keyvault-secrets](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/keyvault/keyvault-secrets) | `4.11.2` | `4.12.0` |


Updates `eslint-plugin-security` from 4.2.0 to 4.2.1
- [Release notes](https://github.com/eslint-community/eslint-plugin-security/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-security/blob/main/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-security@eslint-plugin-security-v4.2.0...eslint-plugin-security-v4.2.1)

Updates `typescript-eslint` from 8.72.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

Updates `@fastify/static` from 10.1.7 to 10.1.8
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v10.1.7...v10.1.8)

Updates `isomorphic-git` from 1.44.3 to 1.44.8
- [Release notes](https://github.com/isomorphic-git/isomorphic-git/releases)
- [Commits](isomorphic-git/isomorphic-git@v1.44.3...v1.44.8)

Updates `@inquirer/prompts` from 8.7.4 to 8.7.5
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.7.4...@inquirer/prompts@8.7.5)

Updates `lucide-react` from 1.61.0 to 1.65.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.65.0/packages/lucide-react)

Updates `mssql` from 12.7.11 to 12.7.13
- [Release notes](https://github.com/tediousjs/node-mssql/releases)
- [Changelog](https://github.com/tediousjs/node-mssql/blob/master/CHANGELOG.txt)
- [Commits](tediousjs/node-mssql@v12.7.11...v12.7.13)

Updates `@types/node` from 26.6.5 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@aws-sdk/client-secrets-manager` from 3.1156.0 to 3.1160.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-secrets-manager/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1160.0/clients/client-secrets-manager)

Updates `@azure/identity` from 4.14.0 to 4.14.1
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/@azure/identity_4.14.1/sdk/identity/identity/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/identity_4.14.1/sdk/identity/identity)

Updates `@azure/keyvault-secrets` from 4.11.2 to 4.12.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/keyvault/keyvault-secrets/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/keyvault-secrets_4.12.0/sdk/keyvault/keyvault-secrets)

---
updated-dependencies:
- dependency-name: eslint-plugin-security
  dependency-version: 4.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@fastify/static"
  dependency-version: 10.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: isomorphic-git
  dependency-version: 1.44.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mssql
  dependency-version: 12.7.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/client-secrets-manager"
  dependency-version: 3.1160.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@azure/identity"
  dependency-version: 4.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@azure/keyvault-secrets"
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

huyplb
huyplb approved these changes Nov 2, 2026
View reviewed changes

@huyplb huyplb left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Patch/minor group bump; CI is green. Same lockfile family as #591 — merging this first.

@huyplb
huyplb merged commit e2690dc into main Nov 2, 2026
10 checks passed
@huyplb
huyplb deleted the dependabot/npm_and_yarn/minor-and-patch-c57f2a09a0 branch November 2, 2026 23:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@huyplb huyplb huyplb approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@huyplb