Skip to content

Bump the prisma group with 2 updates - #397

Merged
dependabot[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/prisma-2386c4e717
Aug 28, 2025
Merged

Bump the prisma group with 2 updates#397
dependabot[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/prisma-2386c4e717

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2025

Copy link
Copy Markdown
Contributor

Updates the requirements on @prisma/client and prisma to permit the latest version.
Updates @prisma/client to 6.15.0

Release notes

Sourced from @​prisma/client's releases.

6.15.0

Today, we are excited to share the 6.15.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

AI safety guardrails for destructive commands

Prisma ORM now includes built-in safety checks that protect against destructive commands when triggered by AI coding assistants. The CLI can recognize when it is being executed by popular AI agents such as Claude Code, Gemini CLI, Qwen Code, Cursor, Aider and Replit.

If a command like prisma migrate reset --force is attempted, Prisma ORM will prompt for explicit confirmation before proceeding.

Cursor AI guardrail

This feature ensures that irreversible operations which drop and recreate the database are not executed automatically by an AI tool. Prisma ORM is the first ORM to provide this level of protection, making it safer to use AI-assisted development while working with your databases.

📚 Learn more in the docs.

prisma-client: runtime improvements and schema flexibility

We simplified Prisma ORM by making the runtime options for the Prisma Client more consistent and easier to understand. Previously there were several overlapping aliases which created confusion. With this release we simplified the inputs while keeping support for all the major environments you might be targeting.

Changes include:

  • node has been removed, use runtime = "nodejs" instead
  • deno-deploy has been removed, use runtime = "deno" instead
  • vercel has been replaced by the new runtime = "vercel-edge"
  • edge-light is now just an alias for vercel-edge
  • nodejs, deno, and bun now share the same internal code path, while still keeping their separate input values for clarity
  • The VS Code extension has been updated to reflect these changes

The updated list of supported runtimes is now:

nodejs, deno, bun, workerd (alias cloudflare), vercel-edge (alias edge-light), and react-native.

In addition, we fixed an issue where running prisma generate would fail if your schema contained no models. This is now supported with the new prisma-client generator, just like it already worked with the older prisma-client-js generator.

For example, the following schema will now generate a client without errors:

generator client {
  provider = "prisma-client"
  output   = "../generated/client"
}
datasource db {
provider = "postgresql"
url      = env("DATABASE_URL")
}
</tr></table>

... (truncated)

Commits
  • 6e2b979 chore: upgrade prettier to v3 (#27972)
  • cc3f6a7 test(client): cover typedSql + queryCompiler + @​prisma/adapter-libsql (#27801)
  • b09e966 feat(qc): accept a udt parser for pg (#27941)
  • 1bf0165 fix(client-generator-ts): ensure "__dirname" doesn't conflict with const/let ...
  • 1f68dd4 perf: remove unnecessary data url prefix (#27930)
  • 6da8c88 perf(size): remove all raw wasm binaries from @prisma/client (#27923)
  • 8e0bcf7 chore(deps): update engines to 6.15.0-5.85179d7826409ee107a6ba334b5e305ae3fba...
  • 7c1a2a6 test(qc): remove test failure lists (#27939)
  • c808cad chore(deps): update engines to 6.15.0-4.98da675770d9fef84c079a41a258a554dadeb...
  • ec77b91 chore(deps): update engines to 6.15.0-3.b6523d21f41470c3678cc736b3d4f2cdce908...
  • Additional commits viewable in compare view

Updates prisma to 6.15.0

Release notes

Sourced from prisma's releases.

6.15.0

Today, we are excited to share the 6.15.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

AI safety guardrails for destructive commands

Prisma ORM now includes built-in safety checks that protect against destructive commands when triggered by AI coding assistants. The CLI can recognize when it is being executed by popular AI agents such as Claude Code, Gemini CLI, Qwen Code, Cursor, Aider and Replit.

If a command like prisma migrate reset --force is attempted, Prisma ORM will prompt for explicit confirmation before proceeding.

Cursor AI guardrail

This feature ensures that irreversible operations which drop and recreate the database are not executed automatically by an AI tool. Prisma ORM is the first ORM to provide this level of protection, making it safer to use AI-assisted development while working with your databases.

📚 Learn more in the docs.

prisma-client: runtime improvements and schema flexibility

We simplified Prisma ORM by making the runtime options for the Prisma Client more consistent and easier to understand. Previously there were several overlapping aliases which created confusion. With this release we simplified the inputs while keeping support for all the major environments you might be targeting.

Changes include:

  • node has been removed, use runtime = "nodejs" instead
  • deno-deploy has been removed, use runtime = "deno" instead
  • vercel has been replaced by the new runtime = "vercel-edge"
  • edge-light is now just an alias for vercel-edge
  • nodejs, deno, and bun now share the same internal code path, while still keeping their separate input values for clarity
  • The VS Code extension has been updated to reflect these changes

The updated list of supported runtimes is now:

nodejs, deno, bun, workerd (alias cloudflare), vercel-edge (alias edge-light), and react-native.

In addition, we fixed an issue where running prisma generate would fail if your schema contained no models. This is now supported with the new prisma-client generator, just like it already worked with the older prisma-client-js generator.

For example, the following schema will now generate a client without errors:

generator client {
  provider = "prisma-client"
  output   = "../generated/client"
}
datasource db {
provider = "postgresql"
url      = env("DATABASE_URL")
}
</tr></table>

... (truncated)

Commits
  • 6e2b979 chore: upgrade prettier to v3 (#27972)
  • b434633 fix(client-generator-ts): fix "prisma generate" when no model is defined (#27...
  • 6da8c88 perf(size): remove all raw wasm binaries from @prisma/client (#27923)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @samchon.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) and [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) to permit the latest version.

Updates `@prisma/client` to 6.15.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/6.15.0/packages/client)

Updates `prisma` to 6.15.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/6.15.0/packages/cli)

---
updated-dependencies:
- dependency-name: "@prisma/client"
  dependency-version: 6.15.0
  dependency-type: direct:production
  dependency-group: prisma
- dependency-name: prisma
  dependency-version: 6.15.0
  dependency-type: direct:production
  dependency-group: prisma
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 28, 2025
@samchon

samchon commented Aug 28, 2025

Copy link
Copy Markdown
Owner

@dependabot merge

@dependabot
dependabot Bot merged commit 1b242de into master Aug 28, 2025
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/prisma-2386c4e717 branch August 28, 2025 11:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant