fix(deps): update dependency @notionhq/client to v5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@notionhq/client (source)	^3.0.0 → ^5.0.0

---

Release Notes

makenotion/notion-sdk-js (@​notionhq/client)

v5.9.0

Compare Source

What's Changed

• Fix: Prevent path traversal in Client.request() #​661
  • Note when upgrading: This means that callers can no longer use ../ to switch the meaning of a request that accepts an ID path parameter to navigate to a different Notion API endpoint. Please use Client.request() with a properly formatted, absolute API path instead.

Links

• Full Changelog: makenotion/notion-sdk-js@v5.8.0...v5.9.0
• NPM Package: https://www.npmjs.com/package/@​notionhq/client/v/5.9.0

v5.8.0

Compare Source

What's Changed

• Sync api-endpoints: add position to AppendBlockChildrenParameters by @​ksinder in #​658
  • Specifically, this change is a backwards-compatible improvement to support a more expressive position parameter in the PATCH /v1/blocks/:block_id/children body to append at a specific position in the parent's children array.
    • The parameter cannot be used with the older after parameter, which will be officially removed in the next public API version.
• Sync api-endpoints: add list_start_index and list_format by @​vshen-notion in #​659
  • For numbered_list_item, support distinguishing where list numbering starts and what type of list (number, letter, roman numeral), by exposing list_start_index and list_format

New Contributors

• @​vshen-notion made their first contribution in #​659

Full Changelog: makenotion/notion-sdk-js@v5.7.0...v5.8.0

v5.7.0

Compare Source

What's Changed

• Add 'Contributing' section to README. by @​toolness in #​655
• Sync api-endpoints: add position to CreatePageBodyParameters by @​ksinder in #​656
  • Backwards-compatible improvement: support the new, optional position parameter in the POST /v1/pages body, which attaches the newly created page at a specific location in a parent page.
  • The parameter cannot be used if the parent is not a regular page.

Links

• Full Changelog: makenotion/notion-sdk-js@v5.6.0...v5.7.0
• NPM Package: https://www.npmjs.com/package/@​notionhq/client/v/5.7.0

v5.6.0

Compare Source

What's Changed

• Add husky, lint-staged by @​michaelfromyeg in #​642
• Put build step back in prepare by @​michaelfromyeg in #​643
• Remove examples/ in favor of notion-cookbook by @​ksinder in #​647
• Add Client.pages.move endpoint to Notion TS SDK by @​ksinder in #​646
• Bump version to v5.6.0 by @​github-actions[bot] in #​650

Links

• Full Changelog: makenotion/notion-sdk-js@v5.4.0...v5.6.0
• NPM Package: https://www.npmjs.com/package/@​notionhq/client/v/5.6.0

v5.5.0

Compare Source

v5.4.0

Compare Source

What's Changed

• Tidy up gitignore, add CLAUDE.md by @​michaelfromyeg in #​638
• Add support for the place property type @​michaelfromyeg in #​637

Links

• Full Changelog: makenotion/notion-sdk-js@v5.3.0...v5.4.0
• NPM Package: https://npmjs.com/package/@​notionhq/client/v/5.4.0

v5.3.0

Compare Source

What's Changed

• api-endpoints sync: add pagination for ListDataSourceTemplates endpoint by @​ksinder in #​633
• Bump version to v5.3.0 by @​github-actions[bot] in #​634

Links

• Full Changelog: makenotion/notion-sdk-js@v5.2.1...v5.3.0
• NPM Package: https://npmjs.com/package/@​notionhq/client/v/5.3.0

v5.2.1

Compare Source

What's Changed

• Sync api-endpoints: support templates in Update Page by @​ksinder in #​631

Links

• Full Changelog: makenotion/notion-sdk-js@v5.2.0...v5.2.1
• NPM Package: https://npmjs.com/package/@​notionhq/client/v/5.2.1

v5.2.0

Compare Source

What's Changed

• API schema sync: small consolidation refactors and fixes by @​ksinder in #​622
• API schema sync: remove data_source_id type from DataSource.database_parent by @​ksinder in #​626
• Sync API schema: CreatePage + templates; workspace_id field; query wiki filters by @​ksinder in #​628
  • Including workspace_id in bot responses alongside workspace_name
  • Introducing a new API endpoint notion.dataSources.listTemplates with one path parameter, data_source_id, for listing the available page templates under a data source
  • Adding a new optional parameter template to CreatePageBodyParameters with polymorphic type options of none (don't apply any template; existing behavior), default (apply data source's default template), and template_id (apply a custom template ID)
  • Adding a new optional parameter result_type to QueryDataSourceBodyParameters to allow for only surfacing "page" or "data_source" result types in the case of wikis (where databases can be nested)

Links

• Full Changelog: makenotion/notion-sdk-js@1e9562d...v5.2.0
• NPM Package: https://npmjs.com/package/@​notionhq/client/v/5.2.0

v5.1.0

Compare Source

What's Changed

• Add support for is_locked on update page and database APIs
• Add request_id to Client log lines
• Remove page_id as a possible parent for CreateDataSourceBodyParameters
• SDK dataSource.update: add support for changing parent

Links

• Full Changelog: makenotion/notion-sdk-js@6945289...v5.1.0
• NPM Package: https://npmjs.com/package/@​notionhq/client/v/5.1.0

v5.0.0

Compare Source

What's Changed

Major changes and highlights from v4.0.2 to v5.0.0.

⚡️ Major API and SDK updates

• Added support for multiple data sources
  • Prepared the SDK for Notion API version 2025-09-03, introducing notion.dataSources.* endpoints to manage databases at the data source level and repurposing notion.databases.* endpoints for the database container. #​600 #​601 #​602 #​603 #​607 #​609
• Removed support for `notion.databases.list
  • The list databases method has been removed, since this endpoint has been deprecated & unsupported since 2022-02-22, and v5 of the SDK is tailored toward 2025-09-03 #​600
• Added support for verification filters for data sources
  • Added verification filter property to queryDataSources API shape #​604

📝 API shape and type improvements

• Richer API error details
  • SDK now surfaces the optional additional_data field in API error responses for better diagnostics. #​603
• API schema syncs
  • DataSourceObjectResponse["parent"] now supports the data_source_id variant.
  • Search filter enum updated from page | database to page | data_source.
  • Typechecking added for all examples/ projects in CI. #​602

🧩 Examples and internal maintenance

• Examples directory
  • Migrated all examples/ to TypeScript and committed missing build files. #​603 #​600
• CI improvements
  • All examples are now typechecked as part of continuous integration. #​602
• Other
  • Added Copilot instructions file for repo #​610

🛠 Miscellaneous fixes

• Documentation
  • Updated the minimum recommended TypeScript version in the README after a dependency upgrade. #​598
• Patch releases
  • Version bumps and lockfile updates to keep publish and infra consistent. #​596 #​597

[!NOTE]
v5.0.0 and 2025-09-03 bring fairly major changes to the SDK and to the API schema!

You can help us by tracking any friction as you upgrade, as well as any issues or improvement opportunities with the JavaScript → TypeScript changes in the examples/ projects, and filing an issue or opening a pull request for each.

New Contributors

• @​hallie made their first contribution in #​604

Links

• Full Changelog: makenotion/notion-sdk-js@f12b584...v5.0.0
• Upgrade Guide: https://developers.notion.com/docs/upgrade-guide-2025-09-03
• NPM Package: https://npmjs.com/package/@​notionhq/client/v/5.0.0

v4.0.2

Compare Source

What's Changed

• Update Notion JS SDK with GetComment endpoint by @​julyou in #​595
  • Introduces notion.comments.retrieve({...}) endpoint to fetch a comment by its ID; this was previously a hidden and un-documented endpoint
  • Introduces API shape to manually refresh an API token by passing grant_type: "refresh_token" with a refresh_token to notion.oauth.token(...)
  • Minor refactors and additional type exports
• Bump TypeScript dependency to 5.9 by @​ksinder in #​597
  • WARNING: This might be effectively a breaking change in some cases since part of the SDK contract is exporting types for Notion's public API endpoints. Before upgrading, confirm your TypeScript version is sufficiently new or that the types are compatible with your system.

Full Changelog: makenotion/notion-sdk-js@f849574...v4.0.2

View this version on NPM: https://www.npmjs.com/package/@​notionhq/client/v/4.0.2

v4.0.1

Compare Source

What's Changed

• Support additional headers passed to notion.request()

Full Changelog: makenotion/notion-sdk-js@f7bfcfd...v4.0.1

View this version on NPM: https://www.npmjs.com/package/@​notionhq/client/v/4.0.1

v4.0.0

Compare Source

What's Changed

• Remove no-op duplicates from union types across all endpoints by @​ksinder in #​579
• Remove legacy (<=2021) v1 API shape for page properties by @​ksinder in #​580
  • Removes support for the legacy (pre-Q3-2021) shape for page properties parameters from CreatePageBodyParameters and UpdatePageBodyParameters in src/api-endpoints.ts.
  • This collapses the union type of {old properties shape, new properties shape} down to the new shape only.
  • In the old shape, properties was a fairly ambiguous Record<string, ...> mapping each property key to the property value (a union type across all possible property types' values) e.g.

    {
      // ...
      "numberId": 24,
    }

  • In the new shape (the only one we want to support going forward), the value must be wrapped in an object that uses the polymorphic type pattern with the actual value defined in a sub-object to disambiguate:

    {
      // ...
      "numberId": {
        "type": "number",
        "number": 24
      }
    }

  • This matches up with our responses in the API read path so most, if not all, integrations are likely already using syntax compatible with the new shape
• chore: add JSDoc comments to API types by @​julyou in #​585
• Add support for attachments in Comment API by @​julyou in #​586
• CreatePage: support workspace-level private pages (+ misc param type refactors) by @​ksinder in #​587
  • No-op refactors/cleanups: extracting some components into separate type aliases, e.g. AnnotationRequest
  • Support the new mode in POST /v1/pages (CreatePage) API where:
    • parent can be omitted, or passed as {"workspace": true}, to create top-level private pages at the workspace level (for public integrations only)
    • properties is also optional. For standalone pages, this results in title defaulting to an empty string
• Sync API endpoints: add display_name to Comment, more extraction refactors and docstrings by @​ksinder in #​588
  • This includes miscellaneous extraction refactors for named subsets of parameters and other cleanups like new parameter docstrings.
  • The only functional change is adding the new display_name object to the CommentObjectResponse, and some fixes from previous PRs around parenthesizing a & (b | c) in allOf → oneOf OpenAPI types to get the correct result rather than defaulting to the incorrect interpretation (a & b) | c.
• Sync latest API endpoints schema as of 2025-06-30 by @​ksinder in #​590
  • Most of these are no-op re-ordering of type definitions.
  • Some added and edited comments/docstrings.
  • The only semantic change is adding support for the abc music language to LanguageRequest.

New Contributors

• @​julyou made their first contribution in #​585

Full Changelog: makenotion/notion-sdk-js@df95f35...v4.0.0

View this version on NPM: https://www.npmjs.com/package/@​notionhq/client/v/4.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
pathogen-platform	Error		Jan 29, 2026 9:36pm