Skip to content

chore(deps-dev): bump the dependencies group in /pkg/js with 4 updates#545

Merged
curfew-marathon merged 2 commits intomainfrom
dependabot/npm_and_yarn/pkg/js/dependencies-13e1cc5396
Mar 2, 2026
Merged

chore(deps-dev): bump the dependencies group in /pkg/js with 4 updates#545
curfew-marathon merged 2 commits intomainfrom
dependabot/npm_and_yarn/pkg/js/dependencies-13e1cc5396

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps the dependencies group in /pkg/js with 4 updates: @openfga/sdk, @types/node, @typescript-eslint/eslint-plugin and @typescript-eslint/parser.

Updates @openfga/sdk from 0.9.2 to 0.9.3

Release notes

Sourced from @​openfga/sdk's releases.

v0.9.3

v0.9.3 (2026-02-27)

  • feat: add executeApiRequest and executeStreamedApiRequest methods to OpenFgaClient for calling arbitrary API endpoints with full SDK support (authentication, retries, telemetry, error handling). See documentation for more. (#298, #345) - thanks @​Abishek-Newar!
  • fix: use current SDK version in telemetry meter (#335)
  • fix: disable httprequestduration metric by default to avoid high cardinality (#344)
  • fix: apply expiry buffer before reusing cached tokens (#331)
  • chore!: drop support for Node.js v16 & 18. We recommend updating to a node-runtime that is supported upstream - currently 20 (maintenance), 22 (maintenance), 24 (LTS) and 25 (current). The minimum supported version of Node.js is now v20. This is in line with our stated supported environments

What's Changed

New Contributors

Full Changelog: openfga/js-sdk@v0.9.2...v0.9.3

Changelog

Sourced from @​openfga/sdk's changelog.

v0.9.3

v0.9.3 (2026-02-27)

  • feat: add executeApiRequest and executeStreamedApiRequest methods to OpenFgaClient for calling arbitrary API endpoints with full SDK support (authentication, retries, telemetry, error handling). See documentation for more. (#298, #345) - thanks @​Abishek-Newar!
  • fix: use current SDK version in telemetry meter (#335)
  • fix: disable httprequestduration metric by default to avoid high cardinality (#344)
  • fix: apply expiry buffer before reusing cached tokens (#331)
  • chore!: drop support for Node.js v16 & 18. We recommend updating to a node-runtime that is supported upstream - currently 20 (maintenance), 22 (maintenance), 24 (LTS) and 25 (current). The minimum supported version of Node.js is now v20. This is in line with our stated supported environments
Commits
  • f340e03 release: v0.9.3 (#342)
  • c800ac1 chore(deps): upgrade dependencies (#248)
  • 0f1b6a9 chore: improve api executor flow (#345)
  • 5470381 fix: honor explicit msg in FgaError constructor (#325)
  • 10e5e54 fix: make FgaApiAuthenticationError inherit from FgaApiError (#327)
  • e3879c3 fix: apply expiry buffer before reusing cached tokens (#331)
  • 92ef2d2 chore: npm audit fix (#341)
  • 7e95579 feat: Add APIExecutor for calling arbitrary API endpoints (#298)
  • 9e55466 fix: use current SDK version in telemetry meter (#335)
  • a7090e2 chore(deps-dev): bump the dependencies group with 4 updates (#323)
  • Additional commits viewable in compare view

Updates @types/node from 25.3.0 to 25.3.3

Commits

Updates @typescript-eslint/eslint-plugin from 8.56.0 to 8.56.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.56.1

8.56.1 (2026-02-23)

What's Changed

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.56.1 (2026-02-23)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 96a04a9 chore(release): publish 8.56.1
  • 958f390 chore(eslint-plugin): add default excludes to vitest (#12067)
  • ffb46ea docs(eslint-plugin): [method-signature-style] clarify autofix impact on type ...
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.56.0 to 8.56.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.56.1

8.56.1 (2026-02-23)

What's Changed

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.56.1 (2026-02-23)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group in /pkg/js with 4 updates: [@openfga/sdk](https://github.com/openfga/js-sdk), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser).


Updates `@openfga/sdk` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/openfga/js-sdk/releases)
- [Changelog](https://github.com/openfga/js-sdk/blob/main/CHANGELOG.md)
- [Commits](openfga/js-sdk@v0.9.2...v0.9.3)

Updates `@types/node` from 25.3.0 to 25.3.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.56.0 to 8.56.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.56.0 to 8.56.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@openfga/sdk"
  dependency-version: 0.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 25.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.56.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.56.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 2, 2026
Copilot AI review requested due to automatic review settings March 2, 2026 07:33
@dependabot dependabot bot requested review from a team as code owners March 2, 2026 07:33
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 2, 2026
@dependabot dependabot bot review requested due to automatic review settings March 2, 2026 07:33
@socket-security
Copy link

socket-security bot commented Mar 2, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​typescript-eslint/​parser@​8.56.0 ⏵ 8.56.11001007198100
Updatednpm/​@​typescript-eslint/​eslint-plugin@​8.56.0 ⏵ 8.56.199 +11008098100
Updatednpm/​@​types/​node@​25.3.0 ⏵ 25.3.31001008196100
Updatednpm/​@​openfga/​sdk@​0.9.2 ⏵ 0.9.399 -110010094 +4100

View full report

@dosubot
Copy link

dosubot bot commented Mar 2, 2026

Documentation Updates

2 document(s) were updated by changes in this PR:

Custom HTTP Headers Support
View Changes
@@ -248,7 +248,7 @@
 
 #### Supported Node.js Versions
 
-The JavaScript SDK requires Node.js v20.19.0 or higher. Support for Node.js v16 and v18 has been dropped.
+The JavaScript SDK requires Node.js v20.19.0 or higher. This is a breaking change from earlier versions that supported Node.js v16 and v18, which are no longer supported.
 
 The SDK is tested against the following Node.js versions:
 - Node.js 20.x (Maintenance)
StreamedListObjects Feature Overview
View Changes
@@ -82,9 +82,9 @@
 For more details, see the [Go SDK StreamedListObjects Example](https://github.com/openfga/go-sdk/blob/main/example/streamed_list_objects/main.go).
 
 ### JS SDK
-The JS SDK supports StreamedListObjects as of version v0.9.3. The method streams results using async iterators, allowing you to process each object as it arrives. See the [documentation](#streamed-list-objects) for usage details.
+The JS SDK supports StreamedListObjects in v0.9.3 and later. The method streams results using async iterators, allowing you to process each object as it arrives. See the [documentation](#streamed-list-objects) for usage details.
 
-**Runtime Requirements:** The JS SDK requires Node.js v20.19.0 or higher. Currently tested versions include Node.js 20.x, 22.x, 24.x, and 25.x. For detailed information about supported Node.js versions and the support policy, see [SUPPORTED_RUNTIMES.md](https://github.com/openfga/js-sdk/blob/main/SUPPORTED_RUNTIMES.md).
+**Runtime Requirements:** The JS SDK requires Node.js v20.19.0 or higher. Tested and supported versions include Node.js 20.x, 22.x, 24.x, and 25.x. For detailed information about supported Node.js versions and the support policy, see [SUPPORTED_RUNTIMES.md](https://github.com/openfga/js-sdk/blob/main/SUPPORTED_RUNTIMES.md).
 
 Additionally, the JS SDK provides `executeApiRequest` and `executeStreamedApiRequest` methods on `OpenFgaClient` that can be used to call arbitrary API endpoints that don't yet have dedicated SDK methods. Use `executeApiRequest` for regular endpoints and `executeStreamedApiRequest` for streaming endpoints like `/streamed-list-objects`. These methods act as an escape hatch while still providing SDK benefits like authentication, configuration, retries, and error handling.
 

How did I do? Any feedback?  Join Discord

Copilot AI review requested due to automatic review settings March 2, 2026 15:58
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.

Files not reviewed (1)
  • pkg/js/package-lock.json: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@curfew-marathon curfew-marathon added this pull request to the merge queue Mar 2, 2026
Merged via the queue into main with commit eb45213 Mar 2, 2026
19 checks passed
@curfew-marathon curfew-marathon deleted the dependabot/npm_and_yarn/pkg/js/dependencies-13e1cc5396 branch March 2, 2026 17:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants