Skip to content

build(deps): bump the server-dependencies group across 1 directory with 31 updates - #2513

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/server/server-dependencies-833b565a93
Open

build(deps): bump the server-dependencies group across 1 directory with 31 updates#2513
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/server/server-dependencies-833b565a93

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the server-dependencies group with 31 updates in the /server directory:

Package From To
@influxdata/influxdb-client 1.25.0 1.35.0
@questdb/nodejs-client 3.0.0 4.2.0
@tdengine/rest 3.0.2 3.0.3
app-root-path 2.2.1 3.1.0
async 3.2.3 3.2.6
axios 1.18.1 1.20.0
bcryptjs 2.4.3 3.0.3
body-parser 1.20.5 2.3.0
csv-parser 3.0.0 3.2.1
dayjs 1.11.9 1.11.23
express 4.22.2 5.2.1
@types/express 5.0.0 5.0.6
express-rate-limit 5.5.1 8.7.0
fs-extra 7.0.1 11.4.0
influx 5.9.3 5.12.0
morgan 1.10.1 1.12.0
mqtt 4.3.7 5.15.2
node-red 4.1.11 5.0.6
nodemailer 8.0.11 10.0.1
nopt 5.0.0 10.0.1
pdfmake 0.2.5 0.3.11
pg 8.22.0 8.23.0
serialport 12.0.0 13.0.0
sqlite3 5.1.7 6.0.1
winston 3.7.2 3.19.0
ws 8.21.0 8.21.3
@mapbox/node-pre-gyp 1.0.11 2.0.3
chai 5.1.2 6.2.2
mocha 10.8.2 12.0.0
sinon 19.0.2 22.1.0
typescript 5.6.3 7.0.2

Updates @influxdata/influxdb-client from 1.25.0 to 1.35.0

Release notes

Sourced from @​influxdata/influxdb-client's releases.

1.35.0

Bug Fixes

  1. #1044: Allow 201 status code in a write response.

1.34.0

Breaking Changes

⚠️ Drop supports for node v14, v15 and v16 in CI.

Features:

  1. #1005: Token stored as a private class property.
  2. #1019: Propagates headers from HTTP response when an error is returned from the server.

CI

  1. #893: Add node v20 to CI.
  2. #953: Add node v21 to CI.

v1.33.2

1.33.2 [2023-02-23]

Bug Fixes

  1. Various updates to dependencies

v1.33.1

1.33.1 [2023-01-26]

Bug Fixes

  1. Various updates to dependencies

v1.33.0

1.33.0 [2022-12-02]

Bug Fixes

  1. Various updates to dependencies

1.32.0

Features

  1. #592: Allow to receive query results using for-await loop.

Breaking Changes

  1. #592: The client packages newly require ES2018 runtime (was ES2015). The javascript code now needs async generators and for-await loop. At least the latest node 14 is required because of mature support for iterable http response. Deno and all current modern browsers support ES2018 for years back. This change shoudn't cause any harm in existing installations. In case of troubles, configure your project with babel ES2018 preset to produce ES2015 code.

... (truncated)

Changelog

Sourced from @​influxdata/influxdb-client's changelog.

1.35.0 [2024-08-15]

Bug Fixes

  1. #1044: Allow 201 status code in a write response.

1.34.0 [2024-07-26]

Breaking Changes

⚠️ Drop supports for node v14, v15 and v16 in CI.

Features:

  1. #1005: Token stored as a private class property.
  2. #1019: Propagates headers from HTTP response when an error is returned from the server.
  3. #1020: Adds example of working with HttpError response.

CI

  1. #893: Add node v20 to CI.
  2. #953: Add node v21 to CI.

1.33.2 [2023-02-23]

Bug Fixes

  1. Various updates to dependencies

1.33.1 [2023-01-26]

Bug Fixes

  1. Various updates to dependencies

1.33.0 [2022-12-02]

Bug Fixes

  1. Various updates to dependencies

1.32.0 [2022-11-01]

Features

  1. #592: Allow to receive query results using for-await loop.

Other

  1. #624: Upgrade to the latest node v18 LTS.

... (truncated)

Commits
  • fe5bc8e chore(release): publish v1.35.0 [skip CI]
  • 187e987 chore(release): prepare to release influxdb-client-js-1.35.0
  • fff3615 fix: handle 201 response from write endpoint (#1044)
  • b11ebbf chore(deps-dev): bump @​typescript-eslint/parser from 7.14.1 to 8.0.0 (#1025)
  • e535fb0 chore(deps-dev): bump prettier from 3.3.2 to 3.3.3 (#1028)
  • d35725e chore(deps-dev): bump esbuild from 0.22.0 to 0.23.0 (#1024)
  • 7cb8e43 Merge pull request #1020 from influxdata/docs/headersExample
  • 3d1ff62 docs: adds httpErrorHandled example and integration test for HttpError
  • 147f6ee chore(release): publish v1.34.0 [skip CI]
  • 4db6db9 chore(release): prepare to release influxdb-client-js-1.34.0
  • Additional commits viewable in compare view

Updates @questdb/nodejs-client from 3.0.0 to 4.2.0

Release notes

Sourced from @​questdb/nodejs-client's releases.

Support for the DECIMAL type

Release Overview

This release adds full support for the DECIMAL data type, aligning the client library with the QuestDB 9.2.0 server update.

DECIMAL Support

With QuestDB 9.2.0 introducing the new DECIMAL data type, this release extends the client API to enable seamless ingestion and handling of decimal values.
The updated API supports DECIMAL values provided as string, number, BigInt or Int8Array with a scale, and supports ingestion in both text and binary forms.

For detailed usage examples, refer to the updated API documentation.

Compatibility

This version remains fully backwards compatible.
However, the new DECIMAL functionality requires a server that supports protocol v3 — available in QuestDB 9.2.0 or later.

Nanosecond precision

Release Overview

This release introduces nanosecond precision support for timestamps, aligning the client library with the recent QuestDB 9.1.0 server update.

Nanosecond Precision Support

Previously, while the API allowed timestamps to be specified in nanoseconds, they were stored on the server with only microsecond precision.
QuestDB 9.1.0 added nanosecond accuracy through the new TIMESTAMP_NS data type, and this library update brings full client-side support for it.

Starting with this release:

  • When using protocol version v2 or higher, and timestamps are provided in nanoseconds, they are now recorded on the server with full nanosecond precision, provided the column type is TIMESTAMP_NS.
  • If the column does not yet exist and the client sends nanosecond timestamps, the server will automatically create the column as TIMESTAMP_NS.
  • This behavior also applies to the designated timestamp column.

For compatibility:

  • Protocol version v1 remains unchanged and continues to store timestamps with microsecond precision, ensuring full backward compatibility.

Export SenderOptions class

A maintenance release to fix exports in the library. SenderOptions was exported only as a type, its methods were not available for use. Many thanks to @​nicochatzi for providing the fix!

This release also exports the createBuffer() and createSender() factory functions, so now we can do this:

    const options: SenderOptions = await SenderOptions.fromConfig('http::addr=localhost:9000');
    const buffer: SenderBuffer = createBuffer(options);
    const transport: SenderTransport = createTransport(options);

buffer.table("test").symbol("sym", "sym1").floatColumn("fp64", 1.123).atNow();
await transport.send(buffer.toBufferNew());



</tr></table>

... (truncated)

Commits

Updates @tdengine/rest from 3.0.2 to 3.0.3

Release notes

Sourced from @​tdengine/rest's releases.

3.0.3.0

New Features:

  • You can now create windowed queries that are triggered by events - just specify any conditions that TDengine supports, including operations on different columns.
  • Indexing on any tag: You can now create an index on any tag, enabling improved query performance when filtering by tag.
  • (Enterprise Edition only) Data compaction: TDengine Enterprise Edition now provides the COMPACT statement to reorganize your database and remove gaps from deleted or updated records. This can greatly improve storage and query performance on deployments that have been running for some time.
  • (Enterprise Edition only) TDengine Explorer: TDengine Enterprise Edition now offers a convenient GUI to make ad hoc time-series operations and instance management even easier.
  • (Enterprise Edition only) Local backup and migration: The latest version of taosX included with TDengine Enterprise Edition 3.0.3.0 can back up and restore a TDengine deployment from a local file. taosX can also migrate data from existing TDengine 2.6 or 3.x deployments to TDengine 3.0.3.0, either incrementally or in full.

Enhancements:

  • Results of stream processing can be stored in existing stables
  • You can specify tags when storing the results of stream processing
  • Data can be subscribed over websocket using Java Connector
  • Data can be subscribed over websocket using Python Connector
  • You can monitor HTTP status code on Grafana Dashboard
  • Grafana plugin supports multi-dimensional alerts
  • taosBenchmark can write data into sepcified range of child tables
  • taosBenchmark can specify the number of vgroups on command line

What's Changed

... (truncated)

Commits
  • 4c69835 Merge pull request #20327 from taosdata/fix/xftan/TS-2827/main
  • c4d2718 Merge pull request #20332 from taosdata/fix/main_bugfix_wxy
  • 5d80e71 fix: check the compatibility of client version and server version
  • 098dddc Merge pull request #20328 from taosdata/fix/TD-22972
  • ac1b924 Merge pull request #20330 from taosdata/fix/msg_check
  • 3db2c59 fix: check the compatibility of client version and server version
  • e034d7a Merge pull request #20321 from taosdata/fix/TD-22247-M
  • 38c9501 docs: this line is inaccurate, in current connector-python repo, it require p...
  • 1439bdc Merge pull request #20306 from taosdata/feat/add-reboot-time
  • 0568838 little fix
  • Additional commits viewable in compare view

Updates app-root-path from 2.2.1 to 3.1.0

Release notes

Sourced from app-root-path's releases.

3.1.0

Added

Fixed

New Contributors

Full Changelog: inxilpro/node-app-root-path@v2.1.0...3.1.0

3.0.0

Improved Plug'n'Play and Webpack support.

Commits

Updates async from 3.2.3 to 3.2.6

Changelog

Sourced from async's changelog.

v3.2.6

  • Fix ReDoS vulnerability in autoInject (#1980)

v3.2.5

  • Ensure Error objects such as AggregateError are propagated without modification (#1920)

v3.2.4

  • Fix a bug in priorityQueue where it didn't wait for the result. (#1725)
  • Fix a bug where unshiftAsync was included in priorityQueue. (#1790)
Commits
  • 85fb18f Version 3.2.6
  • 8c0c941 Update built files
  • 5f756b4 Fix ReDoS (#1980)
  • 39cdc9b build(deps-dev): bump karma from 6.4.3 to 6.4.4 (#1985)
  • 7b8ddeb build(deps-dev): bump @​babel/core from 7.24.7 to 7.25.2 (#1981)
  • 4634a9d build(deps-dev): bump rollup from 4.18.0 to 4.19.2 (#1982)
  • afb176c build(deps-dev): bump chai from 4.4.1 to 4.5.0 (#1983)
  • 3568a74 build(deps-dev): bump @​babel/eslint-parser from 7.24.7 to 7.25.1 (#1984)
  • 9e885fd build(deps-dev): bump babel-plugin-istanbul from 6.1.1 to 7.0.0 (#1986)
  • f9c7f2a build(deps-dev): bump semver from 7.6.2 to 7.6.3 (#1987)
  • Additional commits viewable in compare view

Updates axios from 1.18.1 to 1.20.0

Release notes

Sourced from axios's releases.

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

  • HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

  • Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

  • Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)
  • Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)
  • XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)
  • Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)
  • Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#11096)

🔧 Maintenance & Chores

  • Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (#11092, #11098, #11099, #11106, #11107, #11122, #11123, #11126, #11127, #11133, #11140, #11143, #11144)
  • Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (#11101, #11113, #11097, #11119)
  • Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (#11124, #11136, #11137)
  • CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (#11128, #11152)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog (axios/axios@v1.19.0...v1.20.0)

v1.19.0 - July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

  • Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

v1.19.0 — July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

  • Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

  • Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)
  • Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)
  • HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

  • Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)

  • Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)

  • Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)

  • Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)

  • URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11008, #11038)

  • Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)

  • Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)

  • Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)

  • Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

  • Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (#11031, #11055, #11056, #11058, #11079, #11080, #11088, #11089, #11090)
  • Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (#11054)
  • Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (#11062)
  • Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (#11032, #11073)
  • Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (#11041, #11068, #11076, #11078)
  • Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (#11083, #11095)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

... (truncated)

Commits
  • 84a9f3b chore(release): prepare release 1.20.0 (#11152)
  • e6824ee fix: core methodList, HTTP adapter errors, and add tests (#11096)
  • d8a919f fix(xhr): flush final progress during the live loadend dispatch (#11121)
  • 2d2a21a fix(interceptors): tolerate nullish handlers in syncHandlerEntries (#11118)
  • d19040b fix: harden runtime option handling (#11141)
  • e0a02dd chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...
  • d10cb3a chore(deps-dev): bump the development_dependencies group with 4 updates (#11143)
  • 2c94646 chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (#11133)
  • 76c12bc chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (#11140)
  • ba98559 docs: add ScrapingBee sponsor (#11137)
  • Additional commits viewable in compare view

Updates bcryptjs from 2.4.3 to 3.0.3

Release notes

Sourced from bcryptjs's releases.

v3.0.3

Bug fixes

  • Always yield to event loop before nextTick for async versions (#164) (1211e9a2213e0b3ee232a204b3ce899beebce31a)

v3.0.2

Bug fixes

  • Use upstream fix to emit interop helpers (28e510389374f5736c447395443d4a6687325048)

v3.0.1

Bug fixes

  • Separate ESM and UMD type definitions (e7055caf0c723cbcf8bc3f0784b8c30ee332380f)

v3.0.0

Breaking changes

  • Modernize project structure (2f45985738604c743c4b8cc8464e3e7d3e04c73d) The project now exports an ECMAScript module by default, albeit with an UMD fallback, ships with types, the dist/ directory no longer exists in version control, and Closure Compiler externs have been removed.
  • Generate 2b hashes by default (d36bfb42fa642b6d6986a84ce106a7110e5824db) This library was not affected by the bug that led to incrementing the bcrypt version from 2a to 2b, but nowadays most implementations use 2b, including the native bcrypt binding, so this change aligns with them. Existing hashes will continue to work, but test logic that generates hashes and compares them literally might need to be updated to account for the new default.

Features

  • Add helper to check for password input length (d5656b39e2e368c87724a312e4e454456a4e5d1b)

Other

  • Update publish workflow (2a9bea9e276e6be04dbd403f9695937788b3b10a)
  • Add note on using the ESM variant in the browser (e09eb9afb14170069aaea19631b763307ee7b480)
  • Update types (58333a1533dd53838e2697628f84b98d54a5c079)
  • Merge lint and test workflows (2e3b17659e8856696acfe3015631ce2989eb3084)
  • Fix tests (ec02e8a0ada7a8f6c71a91df164db8c25bbbb7b4)
  • Update legacy fallback to handle crypto dependency (9db275fa10b1b40da4a6844480d7f8ae8df27fb8)
  • Update lint workflow title (ac70ac57c2f99ad5639eddf54578e5fdd07b9c4c)
  • Adapt crypto module usage for ESM environments (574d690d4972bcebbd5ca07880a62abab9ae3c0b)
  • Format with prettier (e7465479282d8155852ce88d6407eccb14adc106)
  • Rename default branch to 'main' (548559d032d7dd5ac3e4e16d7afd87b36ebe96ca)
  • Update description to mention TypeScript support (4977df0849eaf8cad5b0d0b543fe452432a2d761)
  • Add stale action for issues and PRs (a84d4e45487df0972d8781feafa477d5db4c1dbd)
  • Fix typo (c8c9c01799bbc13092fcbb20cfab4d9015d14c61)
  • Fix Node.js version in CI (1b54cc48d4120b50e1d9058e5a67f326102fd744)

Backlog from v2

  • Added externs to .npmignore (#124) (7e2e93af99df2952253f9cf32db29aefa8f272f7) The npm package does not need externs as it is needed only for closure compiler. Added it in .npmignore since bcryptjs overrides global module and process in WebStorm IDE.
  • Make sure the bin script uses LF (684fac6814a81d974c805a15e22fd69922c7ca6e)
  • Post-merge; Clean up a bit (b09f7f266a7015456b7b36deeb026dc636f64542)

... (truncated)

Commits
  • 1211e9a fix: Always yield to event loop before nextTick for async versions (#164)
  • 28e5103 fix: Use upstream fix to emit interop helpers
  • e7055ca fix: Separate ESM and UMD type definitions
  • 2a9bea9 Update publish workflow
  • d5656b3 Add helper to check for password input length
  • e09eb9a Add note on using the ESM variant in the browser
  • 58333a1 Update types
  • 2e3b176 Merge lint and test workflows
  • ec02e8a Fix tests
  • 9db275f Update legacy fallback to handle crypto dependency
  • Additional commits viewable in compare view

Updates body-parser from 1.20.5 to 2.3.0

Release notes

Sourced from body-parser's releases.

v2.3.0

Important: Security

What's Changed

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 13, 2026
@dependabot
build(deps): bump the server-dependencies group across 1 directory wi…
11325b1 
…th 31 updates

Bumps the server-dependencies group with 31 updates in the /server directory:

| Package | From | To |
| --- | --- | --- |
| [@influxdata/influxdb-client](https://github.com/influxdata/influxdb-client-js/tree/HEAD/packages/core) | `1.25.0` | `1.35.0` |
| [@questdb/nodejs-client](https://github.com/questdb/nodejs-questdb-client) | `3.0.0` | `4.2.0` |
| [@tdengine/rest](https://github.com/taosdata/TDengine) | `3.0.2` | `3.0.3` |
| [app-root-path](https://github.com/inxilpro/node-app-root-path) | `2.2.1` | `3.1.0` |
| [async](https://github.com/caolan/async) | `3.2.3` | `3.2.6` |
| [axios](https://github.com/axios/axios) | `1.18.1` | `1.20.0` |
| [bcryptjs](https://github.com/dcodeIO/bcrypt.js) | `2.4.3` | `3.0.3` |
| [body-parser](https://github.com/expressjs/body-parser) | `1.20.5` | `2.3.0` |
| [csv-parser](https://github.com/mafintosh/csv-parser) | `3.0.0` | `3.2.1` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.9` | `1.11.23` |
| [express](https://github.com/expressjs/express) | `4.22.2` | `5.2.1` |
| [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `5.0.0` | `5.0.6` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `5.5.1` | `8.7.0` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `7.0.1` | `11.4.0` |
| [influx](https://github.com/node-influx/node-influx) | `5.9.3` | `5.12.0` |
| [morgan](https://github.com/expressjs/morgan) | `1.10.1` | `1.12.0` |
| [mqtt](https://github.com/mqttjs/MQTT.js) | `4.3.7` | `5.15.2` |
| [node-red](https://github.com/node-red/node-red) | `4.1.11` | `5.0.6` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.11` | `10.0.1` |
| [nopt](https://github.com/npm/nopt) | `5.0.0` | `10.0.1` |
| [pdfmake](https://github.com/bpampuch/pdfmake) | `0.2.5` | `0.3.11` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` |
| [serialport](https://github.com/serialport/node-serialport) | `12.0.0` | `13.0.0` |
| [sqlite3](https://github.com/TryGhost/node-sqlite3) | `5.1.7` | `6.0.1` |
| [winston](https://github.com/winstonjs/winston) | `3.7.2` | `3.19.0` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.3` |
| [@mapbox/node-pre-gyp](https://github.com/mapbox/node-pre-gyp) | `1.0.11` | `2.0.3` |
| [chai](https://github.com/chaijs/chai) | `5.1.2` | `6.2.2` |
| [mocha](https://github.com/mochajs/mocha) | `10.8.2` | `12.0.0` |
| [sinon](https://github.com/sinonjs/sinon) | `19.0.2` | `22.1.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.6.3` | `7.0.2` |



Updates `@influxdata/influxdb-client` from 1.25.0 to 1.35.0
- [Release notes](https://github.com/influxdata/influxdb-client-js/releases)
- [Changelog](https://github.com/influxdata/influxdb-client-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/influxdata/influxdb-client-js/commits/v1.35.0/packages/core)

Updates `@questdb/nodejs-client` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/questdb/nodejs-questdb-client/releases)
- [Commits](questdb/nodejs-questdb-client@v3.0.0...v4.2.0)

Updates `@tdengine/rest` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/taosdata/TDengine/releases)
- [Commits](taosdata/TDengine@ver-3.0.2.0...ver-3.0.3.0)

Updates `app-root-path` from 2.2.1 to 3.1.0
- [Release notes](https://github.com/inxilpro/node-app-root-path/releases)
- [Commits](inxilpro/node-app-root-path@2.2.1...3.1.0)

Updates `async` from 3.2.3 to 3.2.6
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v3.2.3...v3.2.6)

Updates `axios` from 1.18.1 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.18.1...v1.20.0)

Updates `bcryptjs` from 2.4.3 to 3.0.3
- [Release notes](https://github.com/dcodeIO/bcrypt.js/releases)
- [Commits](dcodeIO/bcrypt.js@2.4.3...v3.0.3)

Updates `body-parser` from 1.20.5 to 2.3.0
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.5...v2.3.0)

Updates `csv-parser` from 3.0.0 to 3.2.1
- [Release notes](https://github.com/mafintosh/csv-parser/releases)
- [Commits](mafintosh/csv-parser@v3.0.0...v3.2.1)

Updates `dayjs` from 1.11.9 to 1.11.23
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/v1.11.23/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.9...v1.11.23)

Updates `express` from 4.22.2 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v4.22.2...v5.2.1)

Updates `@types/express` from 5.0.0 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `express-rate-limit` from 5.5.1 to 8.7.0
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v5.5.1...v8.7.0)

Updates `fs-extra` from 7.0.1 to 11.4.0
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@7.0.1...11.4.0)

Updates `influx` from 5.9.3 to 5.12.0
- [Release notes](https://github.com/node-influx/node-influx/releases)
- [Changelog](https://github.com/node-influx/node-influx/blob/master/CHANGELOG.md)
- [Commits](node-influx/node-influx@v5.9.3...v5.12.0)

Updates `morgan` from 1.10.1 to 1.12.0
- [Release notes](https://github.com/expressjs/morgan/releases)
- [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md)
- [Commits](expressjs/morgan@1.10.1...1.12.0)

Updates `mqtt` from 4.3.7 to 5.15.2
- [Release notes](https://github.com/mqttjs/MQTT.js/releases)
- [Changelog](https://github.com/mqttjs/MQTT.js/blob/main/CHANGELOG.OLD.md)
- [Commits](mqttjs/MQTT.js@v4.3.7...v5.15.2)

Updates `node-red` from 4.1.11 to 5.0.6
- [Release notes](https://github.com/node-red/node-red/releases)
- [Changelog](https://github.com/node-red/node-red/blob/main/CHANGELOG.md)
- [Commits](node-red/node-red@4.1.11...5.0.6)

Updates `nodemailer` from 8.0.11 to 10.0.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v8.0.11...v10.0.1)

Updates `nopt` from 5.0.0 to 10.0.1
- [Release notes](https://github.com/npm/nopt/releases)
- [Changelog](https://github.com/npm/nopt/blob/main/CHANGELOG.md)
- [Commits](npm/nopt@v5.0.0...v10.0.1)

Updates `pdfmake` from 0.2.5 to 0.3.11
- [Release notes](https://github.com/bpampuch/pdfmake/releases)
- [Changelog](https://github.com/bpampuch/pdfmake/blob/master/CHANGELOG.md)
- [Commits](bpampuch/pdfmake@0.2.5...0.3.11)

Updates `pg` from 8.22.0 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

Updates `serialport` from 12.0.0 to 13.0.0
- [Release notes](https://github.com/serialport/node-serialport/releases)
- [Changelog](https://github.com/serialport/node-serialport/blob/main/CHANGELOG.md)
- [Commits](serialport/node-serialport@v12.0.0...v13.0.0)

Updates `sqlite3` from 5.1.7 to 6.0.1
- [Release notes](https://github.com/TryGhost/node-sqlite3/releases)
- [Commits](TryGhost/node-sqlite3@v5.1.7...v6.0.1)

Updates `winston` from 3.7.2 to 3.19.0
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston@v3.7.2...v3.19.0)

Updates `ws` from 8.21.0 to 8.21.3
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.3)

Updates `@mapbox/node-pre-gyp` from 1.0.11 to 2.0.3
- [Release notes](https://github.com/mapbox/node-pre-gyp/releases)
- [Changelog](https://github.com/mapbox/node-pre-gyp/blob/master/CHANGELOG.md)
- [Commits](mapbox/node-pre-gyp@v1.0.11...v2.0.3)

Updates `@types/express` from 5.0.0 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `chai` from 5.1.2 to 6.2.2
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](chaijs/chai@v5.1.2...v6.2.2)

Updates `mocha` from 10.8.2 to 12.0.0
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v10.8.2...v12.0.0)

Updates `sinon` from 19.0.2 to 22.1.0
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md)
- [Commits](sinonjs/sinon@v19.0.2...v22.1.0)

Updates `typescript` from 5.6.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.6.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@influxdata/influxdb-client"
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: "@mapbox/node-pre-gyp"
  dependency-version: 2.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: "@questdb/nodejs-client"
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: "@tdengine/rest"
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: app-root-path
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: async
  dependency-version: 3.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: axios
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: bcryptjs
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: chai
  dependency-version: 6.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: csv-parser
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: dayjs
  dependency-version: 1.11.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: express-rate-limit
  dependency-version: 8.6.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: fs-extra
  dependency-version: 11.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: influx
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: mocha
  dependency-version: 11.8.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: morgan
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: mqtt
  dependency-version: 5.15.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: node-red
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: nodemailer
  dependency-version: 9.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: nopt
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: pdfmake
  dependency-version: 0.3.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: serialport
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: sinon
  dependency-version: 22.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: sqlite3
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: winston
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: ws
  dependency-version: 8.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/server/server-dependencies-833b565a93 branch from c16cdb0 to 11325b1 Compare September 10, 2026 21:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants