Bump the minor-and-patch group across 1 directory with 5 updates by dependabot[bot] · Pull Request #23 · oxia-db/oxia-client-node

dependabot · 2026-08-24T08:45:03Z

Bumps the minor-and-patch group with 5 updates in the / directory:

Package	From	To
@bufbuild/protobuf	`2.12.1`	`2.14.0`
@node-rs/xxhash	`1.7.6`	`1.7.7`
@biomejs/biome	`2.5.2`	`2.5.9`
ts-proto	`2.12.0`	`2.12.1`
vitest	`4.1.10`	`4.1.11`

Updates @bufbuild/protobuf from 2.12.1 to 2.14.0

Release notes

Sourced from @bufbuild/protobuf's releases.

v2.14.0

What's Changed

This is a performance release of protobuf-es. We've made substantial improvements to the runtime, while also reducing bundle size by 5%. Here are the results from our benchmarks (compared against v2.13.0):

fixture toBinary fromBinary toJson fromJson

general 4.66x 1.46x 2.29x 1.67x

scalar 2.91x 1.96x 1.74x 1.64x

repeated-scalar 4.37x 1.53x 3.06x 1.65x

map-scalar 4.43x 1.44x 2.42x 2.28x

repeated-message 5.27x 1.89x 1.71x 1.63x

map-message 5.21x 1.95x 1.81x 1.66x

user-tiny 1.44x 1.99x 1.49x 1.50x

user-normal 5.24x 1.99x 2.33x 2.03x

Individual changes are below:

Add benchmarks by @ajeetdsouza in bufbuild/protobuf-es#1474

Optimize BinaryWriter with a growable buffer by @jlucaso1 in bufbuild/protobuf-es#1108

Use Set to check for WKTs by @ajeetdsouza in bufbuild/protobuf-es#1475

Cache DataView in BinaryWriter by @ajeetdsouza in bufbuild/protobuf-es#1483

Use native String.prototype.isWellFormed() when available by @ajeetdsouza in bufbuild/protobuf-es#1479

Drop support for Node.js 20 by @timostamm in bufbuild/protobuf-es#1488

Use native toBase64 / fromBase64 when available by @ajeetdsouza in bufbuild/protobuf-es#1477

Avoid allocations in varint64 by @ajeetdsouza in bufbuild/protobuf-es#1498

Compile descriptors to closure trees by @ajeetdsouza in bufbuild/protobuf-es#1491

Reserve bytes for lenPrefix in strings / fork-join by @ajeetdsouza in bufbuild/protobuf-es#1490

Fix byte size estimate in base64 fallback by @ajeetdsouza in bufbuild/protobuf-es#1504

Define descriptor toString instead of assigning it by @ltrouton in bufbuild/protobuf-es#1507

Use setFromBase64 instead of fromBase64 by @ajeetdsouza in bufbuild/protobuf-es#1508

Compile and cache create() function by @ajeetdsouza in bufbuild/protobuf-es#1499

Add ASCII fast paths by @ajeetdsouza in bufbuild/protobuf-es#1509

New Contributors

@anuraaga made their first contribution in bufbuild/protobuf-es#1478

@jlucaso1 made their first contribution in bufbuild/protobuf-es#1108

@ltrouton made their first contribution in bufbuild/protobuf-es#1507

Full Changelog: bufbuild/protobuf-es@v2.13.0...v2.14.0

v2.13.0

What's Changed

Add support for the Protobuf Text Format by @timostamm in bufbuild/protobuf-es#1450

Support enums with erasable syntax by @timostamm in bufbuild/protobuf-es#1464

Add readMaxBytes option to sizeDelimitedDecode by @ajeetdsouza in bufbuild/protobuf-es#1468

... (truncated)

Commits

04297e7 Release v2.14.0 (#1514)
8c0b7e0 Add ASCII fast paths (#1509)
2455a10 Compile and cache create() function (#1499)
7b528c2 Use setFromBase64 instead of fromBase64 (#1508)
e9adad5 Define descriptor toString instead of assigning it (#1507)
9466211 Fix byte size estimate in base64 fallback (#1504)
7e3e019 Reserve bytes for lenPrefix in strings / fork-join (#1490)
23a2f6f Compile descriptors to closure trees (#1491)
4316491 Refresh README (#1500)
9d5f11e Avoid allocations in varint64 (#1498)
Additional commits viewable in compare view

Updates @node-rs/xxhash from 1.7.6 to 1.7.7

Commits

3b28965 chore(release): publish
64b9227 chore(deps): lock file maintenance (#1182)
b0ea4a0 perf(argon2): simdutf8, crate PHC decode, argon2-rust 1.1 (#1189)
2b8b617 feat(argon2): switch backend to argon2-rust (#1188)
05156db chore(deps): update rust crate jsonwebtoken to v11 (#1177)
1933745 chore: upgrade all npm deps (#1187)
317e00e chore(deps): update cross-platform-actions/action action to v1.4.0 (#1185)
284ee70 chore(deps): update dependency oxfmt to ^0.63.0 (#1186)
54d5564 chore(deps): update dependency oxfmt to ^0.62.0 (#1183)
23aad38 chore(deps): update yarn to v4.18.0 (#1180)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @node-rs/xxhash since your current version.

Updates @biomejs/biome from 2.5.2 to 2.5.9

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.9

2.5.9

Patch Changes
#11321 41386f3 Thanks @dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

#11248 57b197e Thanks @yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.
#11377 a8798ea Thanks @Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.
@layer {
  a {
    color: red;
  }
}
#11327 6771cf5 Thanks @dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.
 <div>
   
+
   
 </div>
#10312 ba8aa18 Thanks @dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

#11333 715e0cd Thanks @kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.
#11343 9b98211 Thanks @johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.
@variant @xl {
  div {
    background: red;
  }
}
#11220 3e8c488 Thanks @santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

For example, Biome no longer reports greet as undeclared in the following Svelte component:
<script module>

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.9

Patch Changes
#11321 41386f3 Thanks @dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

#11248 57b197e Thanks @yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.
#11377 a8798ea Thanks @Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.
@layer {
  a {
    color: red;
  }
}
#11327 6771cf5 Thanks @dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.
 <div>
   
+
   
 </div>
#10312 ba8aa18 Thanks @dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

#11333 715e0cd Thanks @kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.
#11343 9b98211 Thanks @johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.
@variant @xl {
  div {
    background: red;
  }
}
#11220 3e8c488 Thanks @santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

For example, Biome no longer reports greet as undeclared in the following Svelte component:
<script module>
  export function greet() {
    console.log("Hello!");

... (truncated)

Commits

2081460 ci: release (#11309)
6559e6c feat: adds the useAstroClientOnlyDirectiveValue rule for .astro files (#11299)
a8798ea feat: useNamedLayer (#11377)
85aac73 feat(lint): add noUnsafeTypeAssertion rule (#11221)
e65f07e feat(lint): nursery useControlLabel (#11312)
ba8aa18 feat(lint): add useTailwindShorthandClasses (#10312)
6b8f09c ci: release (#11236)
23c0369 feat(lint): nursery noInvalidPropertyInitValue (#11187)
52b44d6 feat(lint/html): add noSvelteLegacyConst (#11247)
0a0fbc1 feat(lint/js): add useReactCompiler (#10710)
Additional commits viewable in compare view

Updates ts-proto from 2.12.0 to 2.12.1

Release notes

Sourced from ts-proto's releases.

v2.12.1

2.12.1 (2026-08-20)

Bug Fixes

avoid prototype pollution in generated toJSON for proto json… (#1268) (d0ac4c4)

avoid prototype pollution when decoding JSON maps (#1267) (2b387b7)

bound recursion depth in generated message decode (#1269) (18071eb)

escape proto2 string field defaults in generated code (#1270) (bd34278)

Changelog

Sourced from ts-proto's changelog.

2.12.1 (2026-08-20)

Bug Fixes

avoid prototype pollution in generated toJSON for proto json… (#1268) (d0ac4c4)

avoid prototype pollution when decoding JSON maps (#1267) (2b387b7)

bound recursion depth in generated message decode (#1269) (18071eb)

escape proto2 string field defaults in generated code (#1270) (bd34278)

Commits

83838df chore(release): 2.12.1 [skip ci]
d0ac4c4 fix: avoid prototype pollution in generated toJSON for proto json… (#1268)
18071eb fix: bound recursion depth in generated message decode (#1269)
bd34278 fix: escape proto2 string field defaults in generated code (#1270)
2b387b7 fix: avoid prototype pollution when decoding JSON maps (#1267)
See full diff in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

🐞 Bug Fixes

Revive global concurrency limit for test lifecycle [backport to v4] - by @sheremet-va and @hi-ogawa in vitest-dev/vitest#10992 (5146d)

browser:

Encode iframeId in tester iframe URL [backport to v4] - by @sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)

Trigger playwright/chromium gc on lower disk availability [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)

mocker:

Restrict redirect mocks to the fs allowlist [backport to v4] - by @sheremet-va in vitest-dev/vitest#10974 (fe5a1)

View changes on GitHub

Commits

9bd8d46 chore: release v4.1.11 (#10995)
9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@bufbuild/protobuf](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protobuf) | `2.12.1` | `2.14.0` | | [@node-rs/xxhash](https://github.com/napi-rs/node-rs) | `1.7.6` | `1.7.7` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.2` | `2.5.9` | | [ts-proto](https://github.com/stephenh/ts-proto) | `2.12.0` | `2.12.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` | Updates `@bufbuild/protobuf` from 2.12.1 to 2.14.0 - [Release notes](https://github.com/bufbuild/protobuf-es/releases) - [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.14.0/packages/protobuf) Updates `@node-rs/xxhash` from 1.7.6 to 1.7.7 - [Release notes](https://github.com/napi-rs/node-rs/releases) - [Commits](https://github.com/napi-rs/node-rs/compare/@node-rs/xxhash@1.7.6...@node-rs/xxhash@1.7.7) Updates `@biomejs/biome` from 2.5.2 to 2.5.9 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.9/packages/@biomejs/biome) Updates `ts-proto` from 2.12.0 to 2.12.1 - [Release notes](https://github.com/stephenh/ts-proto/releases) - [Changelog](https://github.com/stephenh/ts-proto/blob/main/CHANGELOG.md) - [Commits](stephenh/ts-proto@v2.12.0...v2.12.1) Updates `vitest` from 4.1.10 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest) --- updated-dependencies: - dependency-name: "@bufbuild/protobuf" dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@node-rs/xxhash" dependency-version: 1.7.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@biomejs/biome" dependency-version: 2.5.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: ts-proto dependency-version: 2.12.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 24, 2026

Navigation Menu

Uh oh!

Bump the minor-and-patch group across 1 directory with 5 updates - #23

Bump the minor-and-patch group across 1 directory with 5 updates#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-3ea477070a

dependabot Bot commented on behalf of github Aug 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

fixture	toBinary	fromBinary	toJson	fromJson
general	4.66x	1.46x	2.29x	1.67x
scalar	2.91x	1.96x	1.74x	1.64x
repeated-scalar	4.37x	1.53x	3.06x	1.65x
map-scalar	4.43x	1.44x	2.42x	2.28x
repeated-message	5.27x	1.89x	1.71x	1.63x
map-message	5.21x	1.95x	1.81x	1.66x
user-tiny	1.44x	1.99x	1.49x	1.50x
user-normal	5.24x	1.99x	2.33x	2.03x

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 24, 2026

v2.14.0

What's Changed

New Contributors

v2.13.0

What's Changed

Biome CLI v2.5.9

2.5.9

Patch Changes

2.5.9

Patch Changes

v2.12.1

2.12.1 (2026-08-20)

Bug Fixes

2.12.1 (2026-08-20)

Bug Fixes

v4.1.11

🐞 Bug Fixes

View changes on GitHub

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants