Skip to content

chore(deps): bump the realtime-minor-and-patch group in /realtime with 4 updates - #571

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/realtime/dev/realtime-minor-and-patch-039ee147e7
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/realtime/dev/realtime-minor-and-patch-039ee147e7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the realtime-minor-and-patch group in /realtime with 4 updates: gremlin, pino, @types/node and @types/ws.

Updates gremlin from 3.7.7 to 3.8.2

Changelog

Sourced from gremlin's changelog.

=== TinkerPop 3.8.2 (Release Date: September 1, 2026)

This release also includes changes from <<release-3-7-7, 3.7.7>>.

  • Enabled building and running with Java 21 and Java 25 (experimental; spark-gremlin excluded, as Spark 3.3.x only runs on Java 8 through 17).
  • Bumped to Groovy 4.0.32 which adds support for parsing Java 25 bytecode.
  • Bumped Hadoop to 3.4.3 (and Kerby to 2.0.3) to enable hadoop-gremlin to build and run on Java 25.
  • Add missing Configuring interface to GraphStepPlaceholder and VertexStepPlaceholder
  • Fixed bug in group() value traversal where keys were retained with stale barrier state instead of being filtered when steps following a Barrier in the second by() produced no output (e.g. by(values("age").fold().unfold()) or by(__.out().fold().count(local).is(P.gt(0))) for vertices with no out-edges).
  • Corrected numerous inaccuracies in the reference documentation, including wrong default values (connection pool sizes, buffer sizes, ports, timeouts), stale serializer class names, removed options documented as available, and broken code examples across the JVM, Python, .NET, Go, and JavaScript drivers.
  • Fixed bug in gremlin-javascript GraphBinary and GraphSON deserialization where OffsetDateTime values outside the JavaScript Date range were silently returned as invalid Date objects instead of failing deserialization.
  • Added a propertyMap() helper to view an element's properties as a map keyed by property key, on the Element structure API in gremlin-core (inherited by Vertex, Edge, and VertexProperty) and on Vertex, Edge, and VertexProperty in gremlin-javascript, gremlin-python, gremlin-dotnet, and gremlin-go.
  • Fixed a bug in gremlin-go where a VertexProperty deserialized from GraphBinary did not have its Key field populated, causing Vertex.PropertyMap() to group properties under an empty key.
  • Removed final from RepeatStep to allow providers to extend it.
  • Restricted GraphSON 2.0 and 3.0 TraversalStrategy deserialization to registered strategies. (breaking)

==== Bugs

  • TINKERPOP-3185 Ensure consistency of option key constants for with()
  • TINKERPOP-3225 conjoin has incorrect null handling (breaking)
  • TINKERPOP-3270 where(P) throws ClassCastException for non-String predicate values instead of a descriptive validation error
  • TINKERPOP-3271 subgraph() throws ClassCastException instead of a descriptive error for non-Edge input
  • TINKERPOP-3273 V and hasId consistency with collection unrolling
  • TINKERPOP-3275 gremlin-python graphbinary BigInt serializer incorrect for negative boundary values
  • TINKERPOP-3276 gremlin-javascript offsetdatetime silently creates incorrect values
  • TINKERPOP-3277 gremlin-go can't serialize zero in bigdecimal/biginteger
  • TINKERPOP-3278 Gryo IO unsafe Java deserialization
  • TINKERPOP-3279 GraphSON 1.0 embedded types unsafe deserialization (breaking)
  • TINKERPOP-3281 GraphBinary deserializer unbounded pre-allocation from length prefixes

==== Improvements

  • TINKERPOP-2085 Remove dependency on Mono
  • TINKERPOP-3042 Deprecate ProductiveByStrategy
  • TINKERPOP-3151 Allow floats with no leading digits
  • TINKERPOP-3179 Support withComputer() for go
  • TINKERPOP-3238 fail() improvements for remote applications
  • TINKERPOP-3242 Pull Configuring interface into VertexStepContract and GraphStepContract
  • TINKERPOP-3243 Add next(n) batch iteration to gremlin-javascript
  • TINKERPOP-3244 Add next(n) batch iteration to gremlin-go for GLV parity

[[release-3-8-1]] === TinkerPop 3.8.1 (Release Date: April 1, 2026)

This release also includes changes from <<release-3-7-6, 3.7.6>>.

  • Deprecated Translator.LANGUAGE and preferred Translator.CANONICAL.
  • Preserved BulkSet when given to 'P'.
  • Fixed bug in Gremlin orderability semantics for OffsetDateTime.
  • Fixed bug in Javascript translation for UUID.

... (truncated)

Commits
  • 952d8d8 TinkerPop 3.8.2 release
  • 1a99f50 Merge branch '3.7-dev' into 3.8-dev
  • 9ef293d Merge remote-tracking branch 'origin/3.7-dev' into 3.8-dev
  • 2718dbb Merge remote-tracking branch 'origin/3.7-dev' into 3.8-dev
  • 99c9153 Merge branch '3.7-dev' into 3.8-dev
  • 0e743cb Fixed P.typeOf()
  • bc9936c Merge branch '3.7-dev' into 3.8-dev
  • 8e861e5 Merge branch '3.7-dev' into 3.8-dev
  • b644ac0 Merge branch '3.7-dev' into 3.8-dev
  • 35d8f49 Merge branch '3.7-dev' into 3.8-dev
  • Additional commits viewable in compare view

Updates pino from 10.3.1 to 10.4.0

Release notes

Sourced from pino's releases.

v10.4.0

What's Changed

... (truncated)

Commits
  • b29dbe9 Bumped v10.4.0
  • 6ba157b docs: fix the pino-pretty flush explanation after thread-stream#198 (#2524)
  • 6429c14 docs: Note that serializers run on child bindings at creation time (#2518)
  • 6c71bc9 Add bindings method to browser logger (#2504)
  • b557f72 ci: pin lock-threads to upstream v6.0.2 to fix token validation failure (#2525)
  • 1de1212 docs: document the APIs that are unavailable in the browser (#2521)
  • af2fe10 Delete .github/dependabot.yml (#2517)
  • 5aa6230 build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 (#2515)
  • 6f5af07 build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 (#2513)
  • 2ffe576 ci: check pull requests target main (#2500)
  • Additional commits viewable in compare view

Updates @types/node from 25.9.8 to 25.9.9

Commits

Updates @types/ws from 8.18.1 to 8.18.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the realtime-minor-and-patch group in /realtime with 4 updates: [gremlin](https://github.com/apache/tinkerpop), [pino](https://github.com/pinojs/pino), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws).


Updates `gremlin` from 3.7.7 to 3.8.2
- [Changelog](https://github.com/apache/tinkerpop/blob/master/CHANGELOG.asciidoc)
- [Commits](apache/tinkerpop@gremlin-go/v3.7.7...gremlin-go/v3.8.2)

Updates `pino` from 10.3.1 to 10.4.0
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v10.3.1...v10.4.0)

Updates `@types/node` from 25.9.8 to 25.9.9
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/ws` from 8.18.1 to 8.18.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws)

---
updated-dependencies:
- dependency-name: gremlin
  dependency-version: 3.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: realtime-minor-and-patch
- dependency-name: pino
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: realtime-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 25.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: realtime-minor-and-patch
- dependency-name: "@types/ws"
  dependency-version: 8.18.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: realtime-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 14, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants