Skip to content

Update dependencies: Bump the all-dependencies group across 1 directory with 8 updates#324

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot-npm_and_yarn-all-dependencies-cbc420ac10
Closed

Update dependencies: Bump the all-dependencies group across 1 directory with 8 updates#324
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot-npm_and_yarn-all-dependencies-cbc420ac10

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps the all-dependencies group with 8 updates in the / directory:

Package From To
@biomejs/biome 2.3.2 2.3.8
@types/node 24.10.0 24.10.1
@vitest/coverage-v8 4.0.6 4.0.15
bson 6.10.4 7.0.0
mongodb-memory-server 10.3.0 10.4.1
mongoose 8.19.2 9.0.1
pkgroll 2.20.1 2.21.4
vitest 4.0.6 4.0.15

Updates @biomejs/biome from 2.3.2 to 2.3.8

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.3.8

2.3.8

Patch Changes

  • #8188 4ca088c Thanks @​ematipico! - Fixed #7390, where Biome couldn't apply the correct configuration passed via --config-path.

    If you have multiple root configuration files, running any command with --config-path will now apply the chosen configuration file.

  • #8171 79adaea Thanks @​dibashthapa! - Added the new rule noLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.

    For example, the following code triggers the rule because the component would render 0:

    const Component = () => {
      const count = 0;
      return <div>{count && <span>Count: {count}</span>}</div>;
    };
  • #8116 b537918 Thanks @​Netail! - Added the nursery rule noDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.

    Invalid:

    <div {...props} something="else" {...props} />
  • #8256 f1e4696 Thanks @​cormacrelf! - Fixed a bug where logs were discarded (the kind from --log-level=info etc.). This is a regression introduced after an internal refactor that wasn't adequately tested.

  • #8226 3f19b52 Thanks @​dyc3! - Fixed #8222: The HTML parser, with Vue directives enabled, can now parse v-slot shorthand syntax, e.g. \<template #foo>.

  • #8007 182ecdc Thanks @​brandonmcconnell! - Added support for dollar-sign-prefixed filenames in the useFilenamingConvention rule.

    Biome now allows filenames starting with the dollar-sign (e.g. $postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.

  • #8218 91484d1 Thanks @​hirokiokada77! - Added the noMultiStr rule, which disallows creating multiline strings by escaping newlines.

    Invalid:

    const foo =
      "Line 1\n\
    Line 2";

    Valid:

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.3.8

Patch Changes

  • #8188 4ca088c Thanks @​ematipico! - Fixed #7390, where Biome couldn't apply the correct configuration passed via --config-path.

    If you have multiple root configuration files, running any command with --config-path will now apply the chosen configuration file.

  • #8171 79adaea Thanks @​dibashthapa! - Added the new rule noLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.

    For example, the following code triggers the rule because the component would render 0:

    const Component = () => {
      const count = 0;
      return <div>{count && <span>Count: {count}</span>}</div>;
    };
  • #8116 b537918 Thanks @​Netail! - Added the nursery rule noDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.

    Invalid:

    <div {...props} something="else" {...props} />
  • #8256 f1e4696 Thanks @​cormacrelf! - Fixed a bug where logs were discarded (the kind from --log-level=info etc.). This is a regression introduced after an internal refactor that wasn't adequately tested.

  • #8226 3f19b52 Thanks @​dyc3! - Fixed #8222: The HTML parser, with Vue directives enabled, can now parse v-slot shorthand syntax, e.g. \<template #foo>.

  • #8007 182ecdc Thanks @​brandonmcconnell! - Added support for dollar-sign-prefixed filenames in the useFilenamingConvention rule.

    Biome now allows filenames starting with the dollar-sign (e.g. $postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.

  • #8218 91484d1 Thanks @​hirokiokada77! - Added the noMultiStr rule, which disallows creating multiline strings by escaping newlines.

    Invalid:

    const foo =
      "Line 1\n\
    Line 2";

    Valid:

    const foo = "Line 1\nLine 2";
    const bar = `Line 1

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​biomejs/biome since your current version.


Updates @types/node from 24.10.0 to 24.10.1

Commits

Updates @vitest/coverage-v8 from 4.0.6 to 4.0.15

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.0.15

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.0.14

   🚀 Experimental Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates bson from 6.10.4 to 7.0.0

Release notes

Sourced from bson's releases.

v7.0.0

7.0.0 (2025-11-05)

The MongoDB Node.js team is pleased to announce version 7.0.0 of the bson package!

Release Notes

⚠ Breaking Changes

Minimum supported Node.js version now 20.19.0

The minimum supported Node.js version is now v20.19.0. We strive to keep our minimum supported Node.js version in sync with the runtime's release cadence to keep up with the latest security updates and modern language features. Our TypeScript target has also been updated to ES2023.

BSON now requires BigInt literal support

BSON now uses Javascript BigInt syntax and requires a JS engine with support for BigInt literal syntax.

All BSON bundles now use globalThis.crypto for random byte generation

Until BSON@7.x, BSON has supported Node.js v16. Node.js v16 does not include crypto in the global object, which necessitated importing crypto from node:crypto. This require has caused many headaches for bundlers. We improved the situation in NODE-6074, but this release updates our Node.js bundle to rely on the global object instead and removes all requires from the bundle.

BSON no longer vendors atob, btoa, and TextEncoder for react native builds

The React Native JS engine (Hermes) now supports atob, btoa, and TextEncoder natively and polyfills are no longer needed. BSON no longer includes these polyfills for react native builds.

ObjectId constructor no longer accepts a number

If you wish to create an ObjectId from a numeric timestamp, use ObjectId.createFromTime() instead.

BSON Binary subtype 2 constant deprecated

BSON Binary subtype 2 was previously deprecated in the BSON specification, but the corresponding subtype constant remained available in the BSON library. This constant has now been deprecated to align with the specification.

Non-breaking Features

New bsonType symbol property as an alias for _bsontype

JS classes representing BSON values now have a bsonType symbol property as an alias for the existing _bsontype property. This makes it easier to distinguish between values of a specific BSON type and documents with arbitrary keys after deserializing:

import { bsonType, deserialize } from 'bson';
const doc = deserialize(...);
// will be set when doc.value is a BSON wrapper class or a sub-document { _bsontype: '...' }
console.log(doc.value._bsontype);
// will be set if and only if doc.value is a BSON wrapper class
console.log(doc.value[bsonType]);

It is safe to replace all uses of value._bsontype with value[bsonType].

... (truncated)

Changelog

Sourced from bson's changelog.

7.0.0 (2025-11-05)

Miscellaneous Chores

7.0.0-alpha.2 (2025-10-24)

Bug Fixes

  • NODE-7271: revert private property usage in ObjectId (#835) (79faf75)

7.0.0-alpha.1 (2025-10-21)

⚠ BREAKING CHANGES

  • bump BSON_MAJOR_VERSION to 7 (#832)

Features

7.0.0-alpha (2025-10-21)

⚠ BREAKING CHANGES

  • NODE-7098: use bigint literal syntax (#826)
  • NODE-5763: remove support for new ObjectId() (#824)
  • NODE-6625: remove support for Node 16 and 18 (#821)

Features

  • NODE-5763: remove support for new ObjectId(<number>) (#824) (21cc3ff)
  • NODE-6321: remove require('crypto') from Nodejs bundle (#825) (7ba8917)
  • NODE-6625: remove support for Node 16 and 18 (#821) (f636254)
  • NODE-7019: remove react native vendor polyfills (#827) (883f238)
  • NODE-7098: use bigint literal syntax (#826) (94bf732)
  • NODE-7099: deprecate BSON binary subtype 2 constant (#812) (f61946d)
  • NODE-7255: add well-known Symbol alias for _bsontype (#829) (1e1b619)
Commits
  • 988fa17 chore(main): release 7.0.0 (#848)
  • b925f26 chore: prerelease false (#847)
  • 186d5f3 chore: remove alpha tag on main (#846)
  • d9bf5c8 chore: prepare for 7.0.0 release (#845)
  • 40a6082 docs(NODE-7173): update v7 compat table (#844)
  • e8840dc test(NODE-7281): add node 24 to ci (#839)
  • 5d9ff9d chore(deps-dev): bump tar from 7.5.1 to 7.5.2 (#838)
  • b2be66a chore(deps-dev): bump the development-dependencies group across 1 directory w...
  • baa070a chore(deps): bump mongodb-labs/drivers-github-tools from 2 to 3 (#822)
  • 1a6afc6 chore(deps-dev): bump sinon from 18.0.1 to 21.0.0 (#819)
  • Additional commits viewable in compare view

Updates mongodb-memory-server from 10.3.0 to 10.4.1

Release notes

Sourced from mongodb-memory-server's releases.

v10.4.1

10.4.1 (2025-12-04)

Fixes

  • resolveConfig: correct the mapping for "RESUME_DOWNLOAD" (c0d1b4d)

v10.4.0

10.4.0 (2025-12-03)

Features

  • resolveConfig: stabilize "RESUME_DOWNLOAD" option (3fa975f)

Dev-Dependencies

  • prettier: upgrade to version 3.7.4 (753dceb)
  • ts-jest: upgrade to version 29.4.6 (e4be65b)
Changelog

Sourced from mongodb-memory-server's changelog.

10.4.1 (2025-12-04)

Fixes

  • resolveConfig: correct the mapping for "RESUME_DOWNLOAD" (c0d1b4d)

10.4.0 (2025-12-03)

Features

  • resolveConfig: stabilize "RESUME_DOWNLOAD" option (3fa975f)

Dev-Dependencies

  • prettier: upgrade to version 3.7.4 (753dceb)
  • ts-jest: upgrade to version 29.4.6 (e4be65b)
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for mongodb-memory-server since your current version.


Updates mongoose from 8.19.2 to 9.0.1

Release notes

Sourced from mongoose's releases.

9.0.1 / 2025-12-05

  • perf: use native Buffer.equals() for buffer comparison #15821 AbdelrahmanHafez
  • fix(model): fix overwriteImmutable not working with timestamps: true, add overwriteImmutable types re #15781 #15819 AbdelrahmanHafez
  • fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15782 #15781 jhaayushkumar
  • fix(schema): Add enumValues property to Number enum for consistency with String enum #15824 AkaHarshit
  • fix: incorrect variable bug in double casting #15849 #15848 lomesh2312
  • fix: clear timeout in collection operations #15852 techcodie
  • types(query+model): use function overrides instead of | Query<any, any> to support using Query as filter #15791 #15779
  • docs(migrating_to_9): clarify removing next() from pre middleware #15813
  • docs: add dark mode support and CSS improvements #15753
  • docs: Mongoose compatibility page updates #15797 alexbevi
  • docs: Add closing backticks to code block in migration guide #15783 isnifer
  • docs: fix documentation link in connection.js #15804 salittle0

9.0.0 / 2025-11-21

  • BREAKING CHANGE: drop support for callback-based pre middleware, e.g. next() in pre() hooks
  • BREAKING CHANGE: update to MongoDB Node driver v7
  • BREAKING CHANGE: make UUID schema type return bson UUIDs #15378
  • BREAKING CHANGE: make findOne(null), find(null), etc. throw an error instead of returning first doc #15019 #14948
  • BREAKING CHANGE: disallow update pipelines by default, require updatePipeline option #15586 #14424
  • BREAKING CHANGE: call virtual ref function with subdoc, not top-level doc #14652 #12440 #12363
  • BREAKING CHANGE(types): make create() and insertOne() params more strict, remove generics to prevent type inference #15587 #15355
  • BREAKING CHANGE(types): make FilterQuery properties no longer resolve to any in TypeScript #15422
  • BREAKING CHANGE(types): change this to HydratedDocument for default() and required(), HydratedDocument | Query for validate() #15020 #14696
  • BREAKING CHANGE(types): make id a virtual in TypeScript rather than a property on Document base class #15572 #13079
  • BREAKING CHANGE(types): consolidate RootQuerySelector, Condition, etc. types with MongoDB driver's #15593
  • BREAKING CHANGE: asyncify update validators, SchemaType.prototype.doValidate(), save hooks for improved stack traces #15312
  • BREAKING CHANGE: remove bson as direct dependency, use mongodb/lib/bson instead #15576 #15154
  • BREAKING CHANGE: remove _executionStack, make validate() async function and call Kareem hooks directly vs through wrappers #15298 #14906
  • BREAKING CHANGE: remove browser build, move to @​mongoosejs/browser instead #15385 #15296
  • BREAKING CHANGE: remove schematype caster and casterConstructor properties in favor of embeddedSchemaType and Constructor #15513 #15179
  • BREAKING CHANGE: adding missing pluralizations, fixing pluralization: virus -> viruses #14247 ItsBradyDavis
  • BREAKING CHANGE: remove connection noListener option #15641 #15640
  • feat(types): add Schema.create() for TypeScript type inference #15482 #14954
  • chore: remove examples directory #15597

9.0.0-rc1 / 2025-11-19

  • fix(populate): correctly populate embedded discriminators on subdocuments #15774

9.0.0-rc0 / 2025-11-19

  • BREAKING CHANGE: drop support for callback-based pre middleware, e.g. next() in pre() hooks
  • BREAKING CHANGE: update to MongoDB Node driver v7
  • BREAKING CHANGE: make UUID schema type return bson UUIDs #15378
  • BREAKING CHANGE: make findOne(null), find(null), etc. throw an error instead of returning first doc #15019 #14948
  • BREAKING CHANGE: disallow update pipelines by default, require updatePipeline option #15586 #14424
  • BREAKING CHANGE: call virtual ref function with subdoc, not top-level doc #14652 #12440 #12363

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.0.1 / 2025-12-05

  • perf: use native Buffer.equals() for buffer comparison #15821 AbdelrahmanHafez
  • fix(model): fix overwriteImmutable not working with timestamps: true, add overwriteImmutable types re #15781 #15819 AbdelrahmanHafez
  • fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15782 #15781 jhaayushkumar
  • fix(schema): Add enumValues property to Number enum for consistency with String enum #15824 AkaHarshit
  • fix: incorrect variable bug in double casting #15849 #15848 lomesh2312
  • fix: clear timeout in collection operations #15852 techcodie
  • types(query+model): use function overrides instead of | Query<any, any> to support using Query as filter #15791 #15779
  • docs(migrating_to_9): clarify removing next() from pre middleware #15813
  • docs: add dark mode support and CSS improvements #15753
  • docs: Mongoose compatibility page updates #15797 alexbevi
  • docs: Add closing backticks to code block in migration guide #15783 isnifer
  • docs: fix documentation link in connection.js #15804 salittle0

8.20.2 / 2025-12-05

  • fix(model): bump version if necessary after successful bulkSave() #15809 #15800
  • fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15789 #15782 #15781
  • types(schema): allow calling schema.static() with as TStatics #15794 #15780

7.8.8 / 2025-12-04

  • fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15789 #15782 #15781
  • fix(model): bump version if necessary after successful bulkSave() #15800

9.0.0 / 2025-11-21

  • BREAKING CHANGE: drop support for callback-based pre middleware, e.g. next() in pre() hooks
  • BREAKING CHANGE: update to MongoDB Node driver v7
  • BREAKING CHANGE: make UUID schema type return bson UUIDs #15378
  • BREAKING CHANGE: make findOne(null), find(null), etc. throw an error instead of returning first doc #15019 #14948
  • BREAKING CHANGE: disallow update pipelines by default, require updatePipeline option #15586 #14424
  • BREAKING CHANGE: call virtual ref function with subdoc, not top-level doc #14652 #12440 #12363
  • BREAKING CHANGE(types): make create() and insertOne() params more strict, remove generics to prevent type inference #15587 #15355
  • BREAKING CHANGE(types): make FilterQuery properties no longer resolve to any in TypeScript #15422
  • BREAKING CHANGE(types): change this to HydratedDocument for default() and required(), HydratedDocument | Query for validate() #15020 #14696
  • BREAKING CHANGE(types): make id a virtual in TypeScript rather than a property on Document base class #15572 #13079
  • BREAKING CHANGE(types): consolidate RootQuerySelector, Condition, etc. types with MongoDB driver's #15593
  • BREAKING CHANGE: asyncify update validators, SchemaType.prototype.doValidate(), save hooks for improved stack traces #15312
  • BREAKING CHANGE: remove bson as direct dependency, use mongodb/lib/bson instead #15576 #15154
  • BREAKING CHANGE: remove _executionStack, make validate() async function and call Kareem hooks directly vs through wrappers #15298 #14906
  • BREAKING CHANGE: remove browser build, move to @​mongoosejs/browser instead #15385 #15296
  • BREAKING CHANGE: remove schematype caster and casterConstructor properties in favor of embeddedSchemaType and Constructor #15513 #15179
  • BREAKING CHANGE: adding missing pluralizations, fixing pluralization: virus -> viruses #14247 ItsBradyDavis
  • BREAKING CHANGE: remove connection noListener option #15641 #15640
  • feat(types): add Schema.create() for TypeScript type inference #15482 #14954
  • chore: remove examples directory #15597

8.20.1 / 2025-11-20

... (truncated)

Commits
  • adb3a5e chore: release 9.0.1
  • 1b72648 docs(migrating_to_9): clarify removing next() from pre middleware
  • 7a15ea5 Merge branch '8.x'
  • 0275815 correct publish step name
  • 8d0f22f chore: release 8.20.2
  • 1164312 chore: publish with tag 8x from 8.x branch
  • cb13354 fix lint
  • e97a0da fix overwriteImmutable option lost in merge conflict
  • 63df6c4 Merge pull request #15852 from techcodie/fix-collection-timeout-memory-leak
  • b7794d1 Merge pull request #15876 from Automattic/fix-ci
  • Additional commits viewable in compare view

Updates pkgroll from 2.20.1 to 2.21.4

Release notes

Sourced from pkgroll's releases.

v2.21.4

2.21.4 (2025-11-28)

Bug Fixes

  • dont resolve .js to .ts in external dependency (03c7283), closes #141

v2.21.3

2.21.3 (2025-11-22)

Bug Fixes

  • resolve implicit external path (d972431)

v2.21.2

2.21.2 (2025-11-22)

Bug Fixes

  • deps: update dependency @​rollup/plugin-alias to v6 (1267295)
  • deps: update dependency @​rollup/plugin-commonjs to v29 (07548e4)

v2.21.1

2.21.1 (2025-11-20)

Bug Fixes

  • resolver: prefer .js over .ts in node_modules (46d4202)

v2.21.0

2.21.0 (2025-11-20)

Bug Fixes

  • deps: update all non-major dependencies (#25) (f18fe0f)

Features

  • enhance dependency externalization with improved warnings (f7b3876), closes #32 #49
Commits
  • 03c7283 fix: dont resolve .js to .ts in external dependency
  • d972431 fix: resolve implicit external path
  • 07548e4 fix(deps): update dependency @​rollup/plugin-commonjs to v29
  • 91e3813 ci(github-actions): update github-actions to v6 (major)
  • 1267295 fix(deps): update dependency @​rollup/plugin-alias to v6
  • 46d4202 fix(resolver): prefer .js over .ts in node_modules
  • a26950c chore(deps): lock file maintenance (#26)
  • d6eba4e test: upgrade manten
  • d4ef552 test: fix correct node version usage

…ry with 8 updates

Bumps the all-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.3.2` | `2.3.8` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.0` | `24.10.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.6` | `4.0.15` |
| [bson](https://github.com/mongodb/js-bson) | `6.10.4` | `7.0.0` |
| [mongodb-memory-server](https://github.com/typegoose/mongodb-memory-server/tree/HEAD/packages/mongodb-memory-server) | `10.3.0` | `10.4.1` |
| [mongoose](https://github.com/Automattic/mongoose) | `8.19.2` | `9.0.1` |
| [pkgroll](https://github.com/privatenumber/pkgroll) | `2.20.1` | `2.21.4` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.6` | `4.0.15` |



Updates `@biomejs/biome` from 2.3.2 to 2.3.8
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.8/packages/@biomejs/biome)

Updates `@types/node` from 24.10.0 to 24.10.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.0.6 to 4.0.15
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.15/packages/coverage-v8)

Updates `bson` from 6.10.4 to 7.0.0
- [Release notes](https://github.com/mongodb/js-bson/releases)
- [Changelog](https://github.com/mongodb/js-bson/blob/main/HISTORY.md)
- [Commits](mongodb/js-bson@v6.10.4...v7.0.0)

Updates `mongodb-memory-server` from 10.3.0 to 10.4.1
- [Release notes](https://github.com/typegoose/mongodb-memory-server/releases)
- [Changelog](https://github.com/typegoose/mongodb-memory-server/blob/master/CHANGELOG.md)
- [Commits](https://github.com/typegoose/mongodb-memory-server/commits/v10.4.1/packages/mongodb-memory-server)

Updates `mongoose` from 8.19.2 to 9.0.1
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@8.19.2...9.0.1)

Updates `pkgroll` from 2.20.1 to 2.21.4
- [Release notes](https://github.com/privatenumber/pkgroll/releases)
- [Commits](privatenumber/pkgroll@v2.20.1...v2.21.4)

Updates `vitest` from 4.0.6 to 4.0.15
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.15/packages/vitest)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.3.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/node"
  dependency-version: 24.10.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: bson
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: mongodb-memory-server
  dependency-version: 10.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: mongoose
  dependency-version: 9.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: pkgroll
  dependency-version: 2.21.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: vitest
  dependency-version: 4.0.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 8, 2025
@sonarqubecloud
Copy link

sonarqubecloud bot commented Dec 8, 2025

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 12, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 12, 2026
@dependabot dependabot bot deleted the dependabot-npm_and_yarn-all-dependencies-cbc420ac10 branch January 12, 2026 06:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants