Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@cerbos/grpc (source)	^0.23.0 → ^0.25.0			dependencies	minor
@types/express (source)	4.17.23 → 4.17.25			devDependencies	patch
@types/node (source)	24.10.13 → 24.12.2			devDependencies	minor
express (source)	4.21.2 → 4.22.1			dependencies	minor
mongoose (source)	9.2.2 → 9.4.1			dependencies	minor
nodemon (source)	3.1.10 → 3.1.14			dependencies	patch
supercharge/mongodb-github-action	1.12.0 → 1.12.1			action	patch
supertest	7.1.4 → 7.2.2			dependencies	minor
ts-jest (source)	29.4.1 → 29.4.9			dependencies	patch
typescript (source)	5.9.2 → 5.9.3			devDependencies	patch

---

Release Notes

cerbos/cerbos-sdk-javascript (@​cerbos/grpc)

v0.25.0

Compare Source

Added

• Client.deletePolicy and Client.deletePolicies methods to delete policies (#​1344)

  Requires a policy decision point server running Cerbos 0.51+.

• PolicyStoreIntegrityViolated error, thrown when disabling or deleting a policy violates the integrity of the store (#​1344)

  Requires a policy decision point server running Cerbos 0.51+.

• Support for additional request context (#​1344)

  Requires a policy decision point server running Cerbos 0.51+.

• OutputResult.action property (#​1344)

  Requires a policy decision point server running Cerbos 0.51+.

• Support for versioned role policies (#​1344)

  Requires a policy decision point server running Cerbos 0.51+.

• Client.purgeStoreRevisions method to clear history from dynamic policy stores (#​1344)

  Requires a policy decision point server running Cerbos 0.51+.

Changed

• Bump dependency on [@​bufbuild/protobuf] to 2.11.0 (#​1355)

• Bump dependency on [@​cerbos/api] to 0.6.0 (#​1358)

• Bump dependency on [@​cerbos/core] to 0.28.0 (#​1361)

v0.24.2

Compare Source

Changed

• Ignore unknown fields when parsing responses from the policy decision point server (#​1341)

v0.24.1

Compare Source

Changed

• Migrate documentation to TypeDoc (#​1332)

• Bump dependency on [@​cerbos/api] to 0.5.1 (#​1340)

• Bump dependency on [@​cerbos/core] to 0.27.1 (#​1340)

v0.24.0

Compare Source

Changed

• Convert package to ESM (#​1330)

• Bump dependency on [@​bufbuild/protobuf] to 2.10.2 (#​1320)

• Bump dependency on [@​cerbos/api] to 0.5.0 (#​1331)

• Bump dependency on [@​cerbos/core] to 0.27.0 (#​1331)

v0.23.7

Compare Source

Changed

• Bump dependency on [@​grpc/grpc-js] to 1.14.3 (#​1314)

v0.23.6

Compare Source

Changed

• Bump dependency on [@​cerbos/api] to 0.4.0 (#​1313)

• Bump dependency on [@​cerbos/core] to 0.26.0 (#​1313)

• Bump dependency on [@​grpc/grpc-js] to 1.14.2 (#​1303)

v0.23.5

Compare Source

Changed

• Bump dependency on [@​bufbuild/protobuf] to 2.10.1 (#​1281)

• Bump dependency on [@​cerbos/api] to 0.3.0 (#​1288)

• Bump dependency on [@​cerbos/core] to 0.25.2 (#​1288)

• Bump dependency on [@​grpc/grpc-js] to 1.14.1 (#​1282)

v0.23.4

Compare Source

Changed

• Bump dependency on [@​cerbos/api] to 0.2.0 (#​1280)

• Bump dependency on [@​cerbos/core] to 0.25.1 (#​1280)

v0.23.3

Compare Source

Changed

• Migrate to protoc-gen-es and extract generated code to its own package (#​1271)

• Bump dependency on [@​cerbos/core] to 0.25.0 (#​1273)

v0.23.2

Compare Source

Changed

• Bump dependency on [@​bufbuild/protobuf] to 2.9.0 (#​1236)

• Bump dependency on [@​grpc/grpc-js] to 1.14.0 (#​1237)

v0.23.1

Compare Source

Changed

• Bump dependency on [@​bufbuild/protobuf] to 2.8.0 (#​1216, #​1227)

• Bump dependency on [@​cerbos/core] to 0.24.1 (#​1233)

expressjs/express (express)

v4.22.1

Compare Source

v4.22.0

Compare Source

Automattic/mongoose (mongoose)

v9.4.1

Compare Source

==================

• Revert "fix(setDefaultsOnInsert): run setters on default values during upsert" #​16218 #​16051

v9.4.0

Compare Source

==================

• perf(document+model): avoid parallel save error instantiation, simplify resetting atomics, streamline validation and collection handling
• feat(document): add $getChanges() alias, deprecate getChanges() #​15959 techcodie
• fix(schema): support toJSONSchema on unions #​16179
• fix(schema): implement validation for Union schemas and subdocuments techcodie
• fix(connection): snapshot Date in heartbeat handler and flush queue on recovery #​16183 andreialecu
• fix(model): use duck-typing with version check to validate the argument to useConnection() is actually a connection #​16098
• fix(setDefaultsOnInsert): run setters on default values during upsert #​16051 mahmoodhamdi
• fix(utils): properly compare Set objects in deepEqual KhanjarSingh
• fix(utils): wrap discriminator merge check in parentheses to fix precedence Necro-Rohan
• fix(schema): correct template literal in encryptionType error message Mridul012
• fix(schema): correct error when unsupported query operator with number #​16062
• fix(types): make MergeType and UnpackedIntersection distributive over union types techcodie
• types: add id to HydratedDocument virtuals by default unless explicitly set #​16178
• types(populate): use marker type to track populated vs depopulated type for perf
• types(populate): retain populated paths in toObject() and toJSON() unless depopulate: true set #​16085
• types(query): make TypeScript error on $and with unrecognized query operator
• chore: use TSTyche assertions mrazauskas
• docs(connection): remove references to useUnifiedTopology and fix backtick
• docs: fix typo 'retreiving' -> 'retrieving' in SchemaType getter JSDoc yogesh968
• docs: fix typos around 'retrieve' in schemaType and tests ayushshukla1807
• docs: fix typos in code comments Goldyvaiiii

v9.3.3

Compare Source

==================

• fix(schemaType): standardize to use MongooseError instead of plain Error #​16172 VIPAX-JIT
• types: make MergeType distributive to better support populate on models where the hydrated doc type is a union #​16101 #​16161
• docs: upgrade http:// links to https:// in connections.md #​16163 Puxhkar
• docs: fix typographical, grammatical errors & documentation clarity improvements #​16175 yogesh968
• docs: clarify multi-mongos support documentation for sharded clusters

v9.3.2

Compare Source

==================

• fix(mongoose): throw error when trying to set null or undefined as options #​16130 #​16140
• fix(cast): include array value in query filter error message #​16127 White-Devil2839
• fix(cast): replace assert.ok with descriptive Error in castNumber #​16110 mrsandy1965
• fix(connection): standardize throw new Error to MongooseError #​16142 techcodie
• fix(query): use MongooseError instead of Error #​16132 ace-tk
• docs: add production environment example for autoIndex #​16151 mrsandy1965
• docs: upgrade self-referencing http:// links to https:// #​16150 mrsandy1965
• docs: fix incorrect Double cast comment and upgrade insecure plugin link #​16148 mrsandy1965
• docs: fix redundant text and http link in installation section #​16146 Puxhkar
• docs: fix typo 'mutiple' → 'multiple' in queries.md #​16147 mrsandy1965
• docs: use HTTPS for external links in docs navigation #​16133 ace-tk
• docs: use HTTPS for external links in CONTRIBUTING and homepage #​16134 ace-tk
• docs(populate): replace removed mapReduce() API link #​16135 ace-tk
• docs(models): replace removed count() and mapReduce() references #​16123 White-Devil2839
• docs: fix broken count() and update() links in queries docs White-Devil2839
• docs: fix broken update() link in validation docs #​16121 White-Devil2839
• docs: update GitHub link to use https #​16120 White-Devil2839
• docs(documents): fix incorrect variable name in nullish coalescing example #​16119 White-Devil2839
• docs: fix missing quotes in populate path examples #​16118 White-Devil2839
• docs: fix missing comma in populate dynamic ref example #​16117 White-Devil2839
• docs: clarify that transaction rollback marks fields as modified to allow re-saving #​16112 ramanverse

v9.3.1

Compare Source

==================

• fix(model): handle passing string projection to hydrate() #​16082
• fix(model): fix bulkWrite() sorting #​16079 #​16080 pnkov
• fix(QueryCursor): fix wrong this context in QueryCursor close callback #​16104 techcodie
• types(schema): infer schema options correctly for model context in statics #​16046 #​16102
• types(schema): fix type definition for HydratedDocType in autoTypedVirtuals #​16083
• types(plugin): allow passing model with custom TStatics into Schema.prototype.plugin() #​16090 #​16086
• chore: use MongooseError instead of Error in schema, model, and aggregate #​15995 mahmoodhamdi
• docs(projection): clean up jsdoc for parseProjection()

v9.3.0

Compare Source

==================

• feat(schema): support discriminators option inline for better TypeScript support #​16053
• feat(aggregate): add pipelineForUnionWith() helper to allow reusing pipelines with $unionWith in TypeScript #​16033
• feat(setDefaultsOnInsert): pass query as context to default functions #​16041 #​16025
• fix: resolve deeply nested discriminator paths in arrayFilters #​16072 Yatin81
• fix(changeStream): emit ready on next tick to allow stream to initialize
• fix(connection): handle calling watch() on disconnected connection
• fix: remove references to mongodb option "promiseLibrary" hasezoey
• fix(model+query): backwards compatible validateBeforeSave handling and avoid TypeError in removeUnusedArrayFilters on nullish update
• perf(model): remove unnecessary overhead when saving new doc
• types(InferRawDocType): fall back to using InferRawDocType instead of pulling non-raw inferred doc type if EnforcedDocType not set #​16053
• types: add type constraints for Document#$model() and Document#model() mrazauskas
• docs: fix broken links and update MongoDB documentation links #​16037 hasezoey
• docs(contributing): update issue tracker links to Automattic org AkaHarshit

v9.2.4

Compare Source

==================

• types(models): allow unknown keys in subdocs while retaining autocomplete suggestions #​16048
• types(schema): fix issues related to defining timestamps and virtuals with methods and/or statics in schema options #​16052 #​16046
• docs: use lowercase primitive types in JSDoc and fix incorrect @returns declarations #​16036 #​16018
• docs(field-level-encryption): improve CSFLE docs with model registration guidance and schema definition example #​16065 #​16015

v9.2.3

Compare Source

==================

• types(model): make bulkSave() correctly take array of THydratedDocumentType #​16032

remy/nodemon (nodemon)

v3.1.14

Compare Source

Bug Fixes

• get watch working on windows (cfebe2f), closes #​2270

v3.1.13

Compare Source

Bug Fixes

• TypeScript definition for 'restart' args (5c03715), closes #​2265

v3.1.12

Compare Source

Bug Fixes

• bump minimatch (9376af3), closes #​2267

v3.1.11

Compare Source

supercharge/mongodb-github-action (supercharge/mongodb-github-action)

v1.12.1

Compare Source

Fixed

• change Docker tag from docker:stable to docker:latest

ladjs/supertest (supertest)

v7.2.2

Compare Source

• fix: replace 'should' dependency with native assertions in cookies module 1954bcf

---

v7.2.1

Compare Source

• fix: correct case-sensitive require path for assertion module d4f04fb

---

v7.2.0

Compare Source

• fix: fixed package lock c4b08a6
• fix: drop v14 and v16 from tests d084ce2
• Merge pull request #​872 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.14.2 61f3ddf
• Merge pull request #​873 from forwardemail/dependabot/npm_and_yarn/multi-6d05d0e569 bd2fe45
• chore(deps): bump qs, body-parser and express 07bf4fb
• Merge pull request #​866 from SchroederSteffen/use-lowercase-header-name 0666797
• Merge pull request #​868 from dmurvihill/cookie-assertions 953eca7
• chore(deps-dev): bump js-yaml from 3.14.1 to 3.14.2 81ab94c
• Merge pull request #​870 from kudlav/patch-1 14d905d
• Update links to documentation in README f508b30
• feat(cookies): add cookie assertions 4f89680
• chore(readme): use lower-case header name 1e642b0

---

kulshekhar/ts-jest (ts-jest)

v29.4.9

Compare Source

v29.4.8

Compare Source

v29.4.7

Compare Source

Features

• support TypeScript v6 (eda517d)

v29.4.6

Compare Source

Bug Fixes

• log hybrid module as warning instead of failing tests (#​5144) (528d37c), closes #​5130

v29.4.5

Compare Source

Bug Fixes

• allow filtering modern module warning message with diagnostic code (c290d4d), , closes #​5013

v29.4.4

Compare Source

Bug Fixes

• revert 29.4.3 changes (25cb706), closes #​5049

v29.4.3

Compare Source

Bug Fixes

• revert 29.4.3 changes (25cb706), closes #​5049

v29.4.2

Compare Source

microsoft/TypeScript (typescript)

v5.9.3: TypeScript 5.9.3

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)
• fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

• npm

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • "after 9am and before 5pm Monday"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.