Skip to content

chore(deps)(deps): bump the backend-minor-patch group across 1 directory with 17 updates#436

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/backend-minor-patch-1fbb5964a1
Open

chore(deps)(deps): bump the backend-minor-patch group across 1 directory with 17 updates#436
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/backend-minor-patch-1fbb5964a1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the backend-minor-patch group with 17 updates in the /backend directory:

Package From To
@anthropic-ai/sdk 0.104.2 0.112.3
@aws-sdk/client-kms 3.1069.0 3.1090.0
@aws-sdk/client-s3 3.1069.0 3.1090.0
@aws-sdk/s3-request-presigner 3.1069.0 3.1090.0
@sentry/node 10.58.0 10.66.0
express-rate-limit 8.5.2 8.6.0
google-auth-library 10.7.0 10.9.0
helmet 8.2.0 8.3.0
nodemailer 9.0.1 9.0.3
posthog-node 5.37.1 5.45.2
sanitize-html 2.17.5 2.17.6
sharp 0.35.1 0.35.3
stripe 22.2.1 22.3.2
svix 1.95.2 1.98.0
eslint 10.5.0 10.7.0
globals 17.6.0 17.7.0
vitest 4.1.9 4.1.10

Updates @anthropic-ai/sdk from 0.104.2 to 0.112.3

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.112.3

0.112.3 (2026-07-17)

Full Changelog: sdk-v0.112.2...sdk-v0.112.3

Chores

sdk: v0.112.2

0.112.2 (2026-07-17)

Full Changelog: sdk-v0.112.1...sdk-v0.112.2

Chores

sdk: v0.112.1

0.112.1 (2026-07-16)

Full Changelog: sdk-v0.112.0...sdk-v0.112.1

sdk: v0.112.0

0.112.0 (2026-07-16)

Full Changelog: sdk-v0.111.0...sdk-v0.112.0

Features

  • api: add support for MCP Tunnels (597ac41)

sdk: v0.111.0

0.111.0 (2026-07-10)

Full Changelog: sdk-v0.110.0...sdk-v0.111.0

Features

  • api: add support for dreaming (77b28a6)
  • tools: gate session tool calls on evaluated_permission; bound idle by server stop_reason (68a6d7b)

Chores

  • docs: small updates to field descriptions (e25b885)
  • docs: update model example (a33f3f0)
  • docs: updates to descriptions and examples (eac4bac)

sdk: v0.110.0

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.112.3 (2026-07-17)

Full Changelog: sdk-v0.112.2...sdk-v0.112.3

Chores

0.112.2 (2026-07-17)

Full Changelog: sdk-v0.112.1...sdk-v0.112.2

Chores

0.112.1 (2026-07-16)

Full Changelog: sdk-v0.112.0...sdk-v0.112.1

0.112.0 (2026-07-16)

Full Changelog: sdk-v0.111.0...sdk-v0.112.0

Features

  • api: add support for MCP Tunnels (597ac41)

0.111.0 (2026-07-10)

Full Changelog: sdk-v0.110.0...sdk-v0.111.0

Features

  • api: add support for dreaming (77b28a6)
  • tools: gate session tool calls on evaluated_permission; bound idle by server stop_reason (68a6d7b)

Chores

  • docs: small updates to field descriptions (e25b885)
  • docs: update model example (a33f3f0)
  • docs: updates to descriptions and examples (eac4bac)

0.110.0 (2026-07-02)

Full Changelog: sdk-v0.109.1...sdk-v0.110.0

Features

... (truncated)

Commits

Updates @aws-sdk/client-kms from 3.1069.0 to 3.1090.0

Release notes

Sourced from @​aws-sdk/client-kms's releases.

v3.1090.0

3.1090.0(2026-07-17)

New Features
  • clients: update client endpoints as of 2026-07-17 (857153f3)
  • client-kinesis-analytics-v2: Support for Flink 2.3 in Managed Service for Apache Flink (1ad0421f)
  • client-gameliftstreams: Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables. (cf945cdb)
  • client-rds: Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward. (48b74a43)
  • client-odb: Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService. (d5619c8b)
  • client-cognito-identity-provider: Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option. (600cf8d5)

For list of updated packages, view updated-packages.md in assets-3.1090.0.zip

v3.1089.0

3.1089.0(2026-07-16)

Chores
Documentation Changes
  • client-s3: Documentation update for removing the 30 day minimum restriction for transition to Standard-IA or OneZone-IA storage classes (91723d24)
  • client-redshift: Amazon Redshift - Added support for rg.large and rg.12xlarge node types in CreateCluster, ModifyCluster, and ResizeCluster API operations. (50989cf0)
New Features
  • clients: update client endpoints as of 2026-07-16 (c9150fe6)
  • client-chime-sdk-voice: Marked CreateProxySession, DeleteProxySession, GetProxySession, ListProxySessions, UpdateProxySession, PutVoiceConnectorProxy, DeleteVoiceConnectorProxy, and GetVoiceConnectorProxy as deprecated. (d706c456)
  • client-emr: Amazon EMR updates the Session object returned by GetSession API (863234ad)
  • client-omics: Adds support for returning the task UUID (universally unique identifier) in GetRunTask and ListRunTasks responses (bafd66dd)
  • client-sagemaker: Release support for g7 instance type for SageMaker inference endpoints. (668f46cb)
  • client-sustainability: Adds support for retrieving estimated water allocation data. (432031b6)
Bug Fixes
  • package.json: run make lint format without file args (#8201) (33ac9c0b)
Tests
  • extend TypeScript compatibility check to 3.4-4.4 (#8197) (59f7fc67)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-kms's changelog.

3.1090.0 (2026-07-17)

Note: Version bump only for package @​aws-sdk/client-kms

3.1089.0 (2026-07-16)

Note: Version bump only for package @​aws-sdk/client-kms

3.1088.0 (2026-07-15)

Note: Version bump only for package @​aws-sdk/client-kms

3.1087.0 (2026-07-14)

Note: Version bump only for package @​aws-sdk/client-kms

3.1086.0 (2026-07-13)

Note: Version bump only for package @​aws-sdk/client-kms

3.1085.0 (2026-07-10)

Note: Version bump only for package @​aws-sdk/client-kms

3.1084.0 (2026-07-09)

... (truncated)

Commits

Updates @aws-sdk/client-s3 from 3.1069.0 to 3.1090.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1090.0

3.1090.0(2026-07-17)

New Features
  • clients: update client endpoints as of 2026-07-17 (857153f3)
  • client-kinesis-analytics-v2: Support for Flink 2.3 in Managed Service for Apache Flink (1ad0421f)
  • client-gameliftstreams: Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables. (cf945cdb)
  • client-rds: Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward. (48b74a43)
  • client-odb: Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService. (d5619c8b)
  • client-cognito-identity-provider: Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option. (600cf8d5)

For list of updated packages, view updated-packages.md in assets-3.1090.0.zip

v3.1089.0

3.1089.0(2026-07-16)

Chores
Documentation Changes
  • client-s3: Documentation update for removing the 30 day minimum restriction for transition to Standard-IA or OneZone-IA storage classes (91723d24)
  • client-redshift: Amazon Redshift - Added support for rg.large and rg.12xlarge node types in CreateCluster, ModifyCluster, and ResizeCluster API operations. (50989cf0)
New Features
  • clients: update client endpoints as of 2026-07-16 (c9150fe6)
  • client-chime-sdk-voice: Marked CreateProxySession, DeleteProxySession, GetProxySession, ListProxySessions, UpdateProxySession, PutVoiceConnectorProxy, DeleteVoiceConnectorProxy, and GetVoiceConnectorProxy as deprecated. (d706c456)
  • client-emr: Amazon EMR updates the Session object returned by GetSession API (863234ad)
  • client-omics: Adds support for returning the task UUID (universally unique identifier) in GetRunTask and ListRunTasks responses (bafd66dd)
  • client-sagemaker: Release support for g7 instance type for SageMaker inference endpoints. (668f46cb)
  • client-sustainability: Adds support for retrieving estimated water allocation data. (432031b6)
Bug Fixes
  • package.json: run make lint format without file args (#8201) (33ac9c0b)
Tests
  • extend TypeScript compatibility check to 3.4-4.4 (#8197) (59f7fc67)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1090.0 (2026-07-17)

Note: Version bump only for package @​aws-sdk/client-s3

3.1089.0 (2026-07-16)

Note: Version bump only for package @​aws-sdk/client-s3

3.1088.0 (2026-07-15)

Note: Version bump only for package @​aws-sdk/client-s3

3.1087.0 (2026-07-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.1086.0 (2026-07-13)

Note: Version bump only for package @​aws-sdk/client-s3

3.1085.0 (2026-07-10)

Note: Version bump only for package @​aws-sdk/client-s3

3.1084.0 (2026-07-09)

... (truncated)

Commits
  • eb268ed Publish v3.1090.0
  • 60e8b54 Publish v3.1089.0
  • 91723d2 docs(client-s3): Documentation update for removing the 30 day minimum restric...
  • 73de389 Publish v3.1088.0
  • d43e5bf chore(codegen): sync to use typesVersions entries for submodules (#8195)
  • 7d14409 chore: migrate eslint/prettier to oxlint/oxfmt (#8192)
  • ec24bb4 Publish v3.1087.0
  • a20c28d chore(codegen): sync for codegen and include OAuthIAM operation for signin li...
  • 64c3e50 Publish v3.1086.0
  • 8d0b498 Publish v3.1085.0
  • Additional commits viewable in compare view

Updates @aws-sdk/s3-request-presigner from 3.1069.0 to 3.1090.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1090.0

3.1090.0(2026-07-17)

New Features
  • clients: update client endpoints as of 2026-07-17 (857153f3)
  • client-kinesis-analytics-v2: Support for Flink 2.3 in Managed Service for Apache Flink (1ad0421f)
  • client-gameliftstreams: Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables. (cf945cdb)
  • client-rds: Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward. (48b74a43)
  • client-odb: Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService. (d5619c8b)
  • client-cognito-identity-provider: Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option. (600cf8d5)

For list of updated packages, view updated-packages.md in assets-3.1090.0.zip

v3.1089.0

3.1089.0(2026-07-16)

Chores
Documentation Changes
  • client-s3: Documentation update for removing the 30 day minimum restriction for transition to Standard-IA or OneZone-IA storage classes (91723d24)
  • client-redshift: Amazon Redshift - Added support for rg.large and rg.12xlarge node types in CreateCluster, ModifyCluster, and ResizeCluster API operations. (50989cf0)
New Features
  • clients: update client endpoints as of 2026-07-16 (c9150fe6)
  • client-chime-sdk-voice: Marked CreateProxySession, DeleteProxySession, GetProxySession, ListProxySessions, UpdateProxySession, PutVoiceConnectorProxy, DeleteVoiceConnectorProxy, and GetVoiceConnectorProxy as deprecated. (d706c456)
  • client-emr: Amazon EMR updates the Session object returned by GetSession API (863234ad)
  • client-omics: Adds support for returning the task UUID (universally unique identifier) in GetRunTask and ListRunTasks responses (bafd66dd)
  • client-sagemaker: Release support for g7 instance type for SageMaker inference endpoints. (668f46cb)
  • client-sustainability: Adds support for retrieving estimated water allocation data. (432031b6)
Bug Fixes
  • package.json: run make lint format without file args (#8201) (33ac9c0b)
Tests
  • extend TypeScript compatibility check to 3.4-4.4 (#8197) (59f7fc67)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1090.0 (2026-07-17)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1089.0 (2026-07-16)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1088.0 (2026-07-15)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1087.0 (2026-07-14)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1086.0 (2026-07-13)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1085.0 (2026-07-10)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1084.0 (2026-07-09)

... (truncated)

Commits
  • eb268ed Publish v3.1090.0
  • 60e8b54 Publish v3.1089.0
  • 73de389 Publish v3.1088.0
  • d43e5bf chore(codegen): sync to use typesVersions entries for submodules (#8195)
  • 7d14409 chore: migrate eslint/prettier to oxlint/oxfmt (#8192)
  • ec24bb4 Publish v3.1087.0
  • a20c28d chore(codegen): sync for codegen and include OAuthIAM operation for signin li...
  • 64c3e50 Publish v3.1086.0
  • 8d0b498 Publish v3.1085.0
  • c34ce8a Publish v3.1084.0
  • Additional commits viewable in compare view

Updates @sentry/node from 10.58.0 to 10.66.0

Release notes

Sourced from @​sentry/node's releases.

10.66.0

  • chore(node-core): Deprecate @sentry/node-core package (#22285)
  • chore(tanstackstart): Deprecate @sentry/tanstackstart package (#22284)
  • deps(server-utils): bump @​apm-js-collab/code-transformer and tracing-hooks (#22172)
  • feat(bun): Add initWithoutDefaultIntegrations and getDefaultIntegrationsWithoutPerformance (#22036)
  • feat(bundlers): Add orchestrion bundler plugins (#22124)
  • feat(cloudflare): Support Cloudflare types v5 & newer wrangler versions (#22180)
  • feat(core): Add and use dataCollection.databaseQueryData (for e.g. Supabase filter values and mutation bodies) (#22219)
  • feat(core): Add and use dataCollection.graphQL (#22221)
  • feat(core): Add stringify helper and make AI-tracing serializers safe (#22163)
  • feat(nestjs): Add orchestrion diagnostics-channel instrumentation (#22176)
  • feat(nextjs): Add opt-in for orchestrion instrumentation (#22043)
  • feat(node): Rewrite knex instrumentation to orchestrion tracing channels (#22237)
  • feat(server-utils): Capture and log orchestrion stats (#22269)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-kafkajs to orchestrion (#21923)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-mysql2 to orchestrion (#22229)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-dataloader to orchestrion (#22236)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-generic-pool to orchestrion (#22240)
  • feat(sveltekit): Detect SvelteKit 3 native tracing from the Vite plugin (#21580)
  • fix: Include bundler CJS exports to fix Node warning (#22286)
  • fix(browser-utils): Remove readystatechange listener to prevent memory leaks (#22216)
  • fix(browser): Propagate trace data from active span if http.client span is non-recording (#22246)
  • fix(core): Preserve propagation across ignored spans (#22277)
  • fix(node): move dc integration swap to _init (#22173)
  • fix(react-router): Correct url attributes for history and relative navigations (#22131)
  • fix(react): Preserve parent path prefix for descendant route names in react-router (#22225)
  • fix(server-utils): Dedupe ioredis orchestrion span for offline-queued commands (#22279)
  • fix(vue): Refresh pageload URL attrs on TanStack onResolved (#22140)
  • chore: Add external contributor to CHANGELOG.md (#22295)
  • chore: Do not treat flaky test issues as bug (#22272)
  • chore: stub modules for orchestrion configs, channels (#22195)
  • chore: Update claude PR instructions (#22241)
  • chore(changelog): Add external contributor to next changelog (#22234)
  • chore(ci): Temporarily assign node/node-core reviews to whole JS SDK team (#22226)
  • chore(ci): Temporarily assign orchestrion reviews to whole JS SDK team (#22215)
  • chore(deps): Bump orchestrion dependencies to latest (#22287)
  • chore(deps): Bump @sentry/conventions to 0.16.0 (#22270)
  • chore(gitignore): Add .pnpm-store to gitignore (#22223)
  • chore(skills): Add bump-conventions skill (#22271)
  • fix(ci): Improve flaky test issue deduplication (#22042)
  • fix(ci): Unblock external-contributors checkout on fork PR merges (#22235)
  • ref(build): Replace ts-node with tsx for build and CI scripts (#22186)
  • ref(core): Remove redundant log buffer flush (#22278)
  • ref(nestjs): extract shared span helpers (#22175)
  • ref(node): Refactor some otel internals in http integrations (#22292)
  • ref(nuxt): Build the Nuxt module in-house instead of @​nuxt/module-builder (#22190)

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.66.0

  • chore(node-core): Deprecate @sentry/node-core package (#22285)
  • chore(tanstackstart): Deprecate @sentry/tanstackstart package (#22284)
  • deps(server-utils): bump @​apm-js-collab/code-transformer and tracing-hooks (#22172)
  • feat(bun): Add initWithoutDefaultIntegrations and getDefaultIntegrationsWithoutPerformance (#22036)
  • feat(bundlers): Add orchestrion bundler plugins (#22124)
  • feat(cloudflare): Support Cloudflare types v5 & newer wrangler versions (#22180)
  • feat(core): Add and use dataCollection.databaseQueryData (for e.g. Supabase filter values and mutation bodies) (#22219)
  • feat(core): Add and use dataCollection.graphQL (#22221)
  • feat(core): Add stringify helper and make AI-tracing serializers safe (#22163)
  • feat(nestjs): Add orchestrion diagnostics-channel instrumentation (#22176)
  • feat(nextjs): Add opt-in for orchestrion instrumentation (#22043)
  • feat(node): Rewrite knex instrumentation to orchestrion tracing channels (#22237)
  • feat(server-utils): Capture and log orchestrion stats (#22269)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-kafkajs to orchestrion (#21923)
  • feat(server-utils): Migrate @opentelemetry/instrumentation-mysql2 to orchestrion (#22229)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-dataloader to orchestrion (#22236)
  • feat(server-utils): Rewrite @opentelemetry/instrumentation-generic-pool to orchestrion (#22240)
  • feat(sveltekit): Detect SvelteKit 3 native tracing from the Vite plugin (#21580)
  • fix: Include bundler CJS exports to fix Node warning (#22286)
  • fix(browser-utils): Remove readystatechange listener to prevent memory leaks (#22216)
  • fix(browser): Propagate trace data from active span if http.client span is non-recording (#22246)
  • fix(core): Preserve propagation across ignored spans (#22277)
  • fix(node): move dc integration swap to _init (#22173)
  • fix(react-router): Correct url attributes for history and relative navigations (#22131)
  • fix(react): Preserve parent path prefix for descendant route names in react-router (#22225)
  • fix(server-utils): Dedupe ioredis orchestrion span for offline-queued commands (#22279)
  • fix(vue): Refresh pageload URL attrs on TanStack onResolved (#22140)
  • chore: Add external contributor to CHANGELOG.md (#22295)
  • chore: Do not treat flaky test issues as bug (#22272)
  • chore: stub modules for orchestrion configs, channels (#22195)
  • chore: Update claude PR instructions (#22241)
  • chore(changelog): Add external contributor to next changelog (#22234)
  • chore(ci): Temporarily assign node/node-core reviews to whole JS SDK team (#22226)
  • chore(ci): Temporarily assign orchestrion reviews to whole JS SDK team (#22215)
  • chore(deps): Bump orchestrion dependencies to latest (#22287)
  • chore(deps): Bump @sentry/conventions to 0.16.0 (#22270)
  • chore(gitignore): Add .pnpm-store to gitignore (#22223)
  • chore(skills): Add bump-conventions skill (#22271)
  • fix(ci): Improve flaky test issue deduplication (#22042)
  • fix(ci): Unblock external-contributors checkout on fork PR merges (#22235)
  • ref(build): Replace ts-node with tsx for build and CI scripts (#22186)
  • ref(core): Remove redundant log buffer flush (#22278)
  • ref(nestjs): extract shared span helpers (#22175)
  • ref(node): Refactor some otel internals in http integrations (#22292)

... (truncated)

Commits
  • 323cbf6 release: 10.66.0
  • 85d0619 Merge pull request #22315 from getsentry/prepare-release/10.66.0
  • bddcb83 meta(changelog): Update changelog for 10.66.0
  • 595e940 feat(sveltekit): Detect SvelteKit 3 native tracing from the Vite plugin (#21580)
  • 667cb71 fix(browser): Propagate trace data from active span if http.client span is ...
  • e8d7bd4 fix(core): Preserve propagation across ignored spans (#22277)
  • bd69bd9 chore(node-core): Deprecate @sentry/node-core package (#22285)
  • c04ebda fix(react): Preserve parent path prefix for descendant route names in `react-...
  • 2cbacb5 feat(node): Rewrite knex instrumentation to orchestrion tracing channels (#22...
  • c9716eb feat(server-utils): Capture and log orchestrion stats (#22269)
  • Additional commits viewable in compare view

Updates express-rate-limit from 8.5.2 to 8.6.0

Release notes

Sourced from express-rate-limit's releases.

v8.6.0

You can view the changelog here.

Commits
  • fffb3c4 8.6.0
  • f366b2d docs: debugging guide, time constants, & v8.6.0 changelog (#652)
  • 593ddd2 fix: make debug output easier to read (#653)
  • ef8c129 fix: Pin safe version of @​asyncapi/specs dev dep (#659)
  • 7b05e0d feat: add time constants to support more readable values for windowMs (#655)
  • 863e730 chore(deps-dev): bump the development-dependencies group with 3 updates (#657)
  • e0e711e fix: correct wording in usage documentation for express-rate-limit (#656)
  • fcd3aa7 chore(deps-dev): bump the development-dependencies group with 3 updates (#651)
  • 99d4298 feat: use debug for debug logging (#641)
  • 23e4dde feat: Run validations once each (#650)
  • Additional commits viewable in compare view

Updates google-auth-library from 10.7.0 to 10.9.0

Release notes

Sourced from google-auth-library's releases.

google-auth-library: v10.9.0

10.9.0 (2026-06-24)

Features

  • auth: Regional access boundaries main merge (#8665) (76e6d3b)

Bug Fixes

  • Correct repository URLs in core package.json files (#8722) (368f18e)

google-auth-library: v10.8.1

10.8.1 (2026-06-23)

Bug Fixes

  • Strip trailing slashes from automatic GDCH audience (#8692) (4e4badf)

google-auth-library: v10.8.0

10.8.0 (2026-06-18)

Features

  • Port GDCH credentials support to Node.js Auth SDK (#8301) (75f148c)

Bug Fixes

  • Bump all node submodules (#8178) (9fd76ef)
  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
Changelog

Sourced from google-auth-library's changelog.

10.9.0 (2026-06-24)

Features

  • auth: Regional access boundaries main merge (#8665) (76e6d3b)

Bug Fixes

  • Correct repository URLs in core package.json files (#8722) (368f18e)

10.8.1 (2026-06-23)

Bug Fixes

  • Strip trailing slashes from automatic GDCH audience (#8692) (4e4badf)

10.8.0 (2026-06-18)

Features

  • Port GDCH credentials support to Node.js Auth SDK (#8301) (75f148c)

Bug Fixes

  • Bump all node submodules (#8178) (9fd76ef)
  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)<...

    Description has been truncated

…ory with 17 updates

Bumps the backend-minor-patch group with 17 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.104.2` | `0.112.3` |
| [@aws-sdk/client-kms](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-kms) | `3.1069.0` | `3.1090.0` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1069.0` | `3.1090.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1069.0` | `3.1090.0` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.58.0` | `10.66.0` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.5.2` | `8.6.0` |
| [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `10.7.0` | `10.9.0` |
| [helmet](https://github.com/helmetjs/helmet) | `8.2.0` | `8.3.0` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.1` | `9.0.3` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.37.1` | `5.45.2` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.5` | `2.17.6` |
| [sharp](https://github.com/lovell/sharp) | `0.35.1` | `0.35.3` |
| [stripe](https://github.com/stripe/stripe-node) | `22.2.1` | `22.3.2` |
| [svix](https://github.com/svix/svix-webhooks) | `1.95.2` | `1.98.0` |
| [eslint](https://github.com/eslint/eslint) | `10.5.0` | `10.7.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.6.0` | `17.7.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` |



Updates `@anthropic-ai/sdk` from 0.104.2 to 0.112.3
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.104.2...sdk-v0.112.3)

Updates `@aws-sdk/client-kms` from 3.1069.0 to 3.1090.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-kms/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1090.0/clients/client-kms)

Updates `@aws-sdk/client-s3` from 3.1069.0 to 3.1090.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1090.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1069.0 to 3.1090.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1090.0/packages/s3-request-presigner)

Updates `@sentry/node` from 10.58.0 to 10.66.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.58.0...10.66.0)

Updates `express-rate-limit` from 8.5.2 to 8.6.0
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.5.2...v8.6.0)

Updates `google-auth-library` from 10.7.0 to 10.9.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v10.9.0/core/packages/google-auth-library-nodejs)

Updates `helmet` from 8.2.0 to 8.3.0
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](helmetjs/helmet@v8.2.0...v8.3.0)

Updates `nodemailer` from 9.0.1 to 9.0.3
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v9.0.1...v9.0.3)

Updates `posthog-node` from 5.37.1 to 5.45.2
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.45.2/packages/node)

Updates `sanitize-html` from 2.17.5 to 2.17.6
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/HEAD/packages/sanitize-html)

Updates `sharp` from 0.35.1 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.1...v0.35.3)

Updates `stripe` from 22.2.1 to 22.3.2
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v22.2.1...v22.3.2)

Updates `svix` from 1.95.2 to 1.98.0
- [Release notes](https://github.com/svix/svix-webhooks/releases)
- [Changelog](https://github.com/svix/svix-webhooks/blob/main/ChangeLog.md)
- [Commits](svix/svix-webhooks@v1.95.2...v1.98.0)

Updates `eslint` from 10.5.0 to 10.7.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.5.0...v10.7.0)

Updates `globals` from 17.6.0 to 17.7.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.6.0...v17.7.0)

Updates `vitest` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.112.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: "@aws-sdk/client-kms"
  dependency-version: 3.1090.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1090.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1090.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: "@sentry/node"
  dependency-version: 10.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: express-rate-limit
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: google-auth-library
  dependency-version: 10.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: helmet
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: nodemailer
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: posthog-node
  dependency-version: 5.45.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: sanitize-html
  dependency-version: 2.17.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: sharp
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: stripe
  dependency-version: 22.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: svix
  dependency-version: 1.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: eslint
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: globals
  dependency-version: 17.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: backend. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 20, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 20, 2026

Copy link
Copy Markdown

Deploying studyhub with  Cloudflare Pages  Cloudflare Pages

Latest commit: 54c754f
Status:🚫  Build failed.

View logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants