Skip to content

build(deps): bump the production-dependencies group across 1 directory with 15 updates - #267

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4632c24b71
Closed

build(deps): bump the production-dependencies group across 1 directory with 15 updates#267
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4632c24b71

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 15 updates in the / directory:

Package From To
@orpc/contract 1.14.13 1.15.0
@orpc/client 1.14.13 1.15.0
@orpc/openapi 1.14.13 1.15.0
@orpc/openapi-client 1.14.13 1.15.0
@scure/bip39 2.2.0 2.3.0
next 16.2.12 16.3.0
tsx 4.23.4 4.23.12
@aws-sdk/client-s3 3.1101.0 3.1107.0
@aws-sdk/s3-request-presigner 3.1101.0 3.1107.0
@orpc/server 1.14.13 1.15.0
@orpc/zod 1.14.13 1.15.0
@sentry/node 10.69.0 10.70.0
bullmq 6.0.6 6.0.11
fastify 5.11.2 5.11.3
@aws-sdk/lib-storage 3.1101.0 3.1107.0

Updates @orpc/contract from 1.14.13 to 1.15.0

Release notes

Sourced from @​orpc/contract's releases.

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @orpc/client from 1.14.13 to 1.15.0

Release notes

Sourced from @​orpc/client's releases.

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 815467f chore: release v1.15.0
  • 149c13e fix(client): stop client proxies from resolving primitive coercion over the n...
  • ee68137 chore: release v1.14.15
  • 08a3cad chore: release v1.14.14
  • e5e7ee7 chore: sync sponsors
  • See full diff in compare view

Updates @orpc/openapi from 1.14.13 to 1.15.0

Release notes

Sourced from @​orpc/openapi's releases.

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @orpc/openapi-client from 1.14.13 to 1.15.0

Release notes

Sourced from @​orpc/openapi-client's releases.

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @scure/bip39 from 2.2.0 to 2.3.0

Release notes

Sourced from @​scure/bip39's releases.

2.3.0

  • Rewrite package: the logic is now declared in scure-bip39 instead of @scure/base dependency, which was removed.
  • Upgrade noble-hashes to 2.3.0.

Full Changelog: paulmillr/scure-bip39@2.2.0...2.3.0

Commits

Updates next from 16.2.12 to 16.3.0

Release notes

Sourced from next's releases.

v16.3.0

Core Changes

  • Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
  • Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
  • Normalize encoded dynamic placeholders in app routes: #91603
  • Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
  • Update tokio from 1.43.0 to 1.47.3: #90945
  • [turbopack] Simplify snapshotting logic: #91178
  • Turbopack: enable server HMR for app route handlers: #91466
  • turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
  • [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
  • Skip loadBindings() Lightning CSS check during next start: #91538
  • turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
  • Turbopack: Add importModule() support to webpack loaders: #89630
  • turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
  • turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
  • feat(node-streams): add config flag, define-env, and env precedence test: #90427
  • Rename /_next/webpack-hmr to /_next/hmr: #91415
  • Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
  • Handle encoded params further: #91627
  • [turbopack] Respect {eval:true} in worker_threads constructors: #91666
  • Fix missing route in otel spans without base-server: #91665
  • [turbopack] Optimize compaction cpu usage: #91468
  • Fix layout segment optimization: move app-page imports to server-utility transition: #91701
  • Fix server actions in standalone mode with cacheComponents: #91711
  • turbo-persistence: remove Unmergeable mmap advice: #91713
  • turbopack: move "compact database" tracing span to backend layer: #91693
  • Turbopack: lazy require metadata and handle TLA: #91705
  • Fix adapter outputs for dynamic metadata routes: #91680
  • Turbopack: fix webpack loader runner layer: #91727
  • [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
  • Add module count field to module graph tracing spans: #91697
  • turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
  • Turbopack: pull in updated vercel/nft tests: #91651
  • [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
  • [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
  • [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
  • Avoid deprecated TS node10 moduleResolution defaults: #91847
  • [turbopack] Rebuild the docker build scripts: #91799
  • Fix TS6 baseUrl deprecation for extended tsconfig: #91855
  • Add next internal post-build CLI command for Turbopack database compaction: #91336
  • Turbopack: Define Effect as a trait instead of a closure: #89080
  • Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
  • turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
  • Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
  • Use charCodeAt for normalizePathTrailingSlash: #91380
  • Turbopack: Only patch lockfile when bindings fails to load: #91379
  • [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
  • [devtools] Make instant navs panel draggable: #91914
  • [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

Updates tsx from 4.23.4 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

  • shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

  • preserve async ESM require fallback (55cbece)

This release is also available on:

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

This release is also available on:

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

  • map Node test locations (2f55884)
  • support data URLs in tsImport (b94f46f)

This release is also available on:

v4.23.8

... (truncated)

Commits
  • ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
  • 651f5be test: cover CommonJS TypeScript import.meta paths
  • bd3bc64 test: cover CommonJS loader source fallback
  • 55cbece fix: preserve async ESM require fallback
  • 6c5ba85 docs: document CommonJS default interop
  • ec1bcd5 fix: support nyc coverage discovery (#710)
  • b6e5b48 docs: clarify CommonJS default imports
  • 2f55884 fix: map Node test locations
  • de935d5 docs: document Node source-map stack formatting
  • b94f46f fix: support data URLs in tsImport
  • Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.1101.0 to 3.1107.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1107.0

3.1107.0(2026-08-10)

Chores
  • codegen:
    • sync for omit staticContextParams on ClientInputEndpointParameters (#8258) (2b7601ed)
    • smithy-aws-typescript-codegen 0.52.0 (#8255) (2e4482a6)
New Features
  • client-connect: Added Malay language option to use AI to automatically fill evaluation forms in Malay (6f82fc3a)
  • client-sagemaker: Added PREFIX AWARE routing strategy and PrefixAwareRoutingConfig to CreateEndpointConfig. Configure PrefixLength and ConcurrencyThreshold to route requests that share the same prompt prefix to the same instance. (c0ce67e2)
  • client-medialive: Added VirtualSourceAddress to multicast output destinations for MediaLive Anywhere channels. Specifies the source IP address for outbound multicast packets when downstream networks enforce source-IP filtering. (dc24c644)
  • client-elementalinference: Added support for the SearchFixtures API and DataSourceConfiguration, enabling customers to map fixture event data onto clipping outputs for improved feature accuracy. (8a63a39d)
  • client-sagemaker-runtime: Added the PrefixAwareId header to InvokeEndpoint and InvokeEndpointWithResponseStream. This optional parameter serves as a routing hint for endpoints configured with prefix-aware routing, differentiating routing decisions for requests that share the same prompt prefix. (8345d8ef)

For list of updated packages, view updated-packages.md in assets-3.1107.0.zip

v3.1106.0

3.1106.0(2026-08-07)

New Features
  • clients: update client endpoints as of 2026-08-07 (c5d05426)
  • client-amplify: Increased the maximum allowed length of the oauthToken parameter in the CreateApp and UpdateApp APIs to support longer OAuth tokens issued by third-party Git providers. (b239e292)
  • client-healthlake: Adds provenanceEnabled to StartFHIRImportJob (18ac6efe)
  • client-securityagent: Added enableEmailMfa input field on Actor to enable email-based MFA during penetration tests. When enabled, a server-generated mfaForwardingAddress is returned. Set up a forwarding rule in your email provider to forward MFA emails to this address so the agent can complete email-based MFA login flows (e21d3919)
  • client-mediapackagev2: StreamNameOutputMode - a new optional field on MediaPackageV2 OriginEndpoints that lets customers choose whether egress manifests use numeric stream indices (default) or encoder-assigned stream names from the input (7f49cb06)
  • client-sagemaker: Amazon SageMaker adds maintenance lifecycle statuses for Notebook Instances (6ce0f884)
  • client-ec2: This release adds support for BGP route protection in Amazon VPC IP Address Manager (IPAM), including route discovery, RPKI route protection findings, and delegated RPKI (Internet Registry Associations, routing policy registrations, and ROA management) for BYOIP prefixes. (62f281df)
  • client-mediatailor: Added support for inserting ads via the VAST Ad Buffet standard. You can now configure MediaTailor to insert ads in sequence order using the AdSequencingMode setting in your playback configuration. Standalone ads are used as fallbacks when a sequenced ad is unavailable. (7bebb1e5)
  • client-connect: Supports updating the task template associated with in-progress task contacts using the new UpdateContactTaskTemplate API. This enables supervisors and developers to dynamically reassign task templates without creating a new task. (24f40416)

For list of updated packages, view updated-packages.md in assets-3.1106.0.zip

v3.1105.0

3.1105.0(2026-08-06)

Chores
  • lib-dynamodb: add error msg and fallback when incompatible client is supplied (#8231) (e663d41f)
New Features

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1107.0 (2026-08-10)

Note: Version bump only for package @​aws-sdk/client-s3

3.1106.0 (2026-08-07)

Note: Version bump only for package @​aws-sdk/client-s3

3.1105.0 (2026-08-06)

Features

  • client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf6560)

3.1104.0 (2026-08-05)

Note: Version bump only for package @​aws-sdk/client-s3

3.1103.0 (2026-08-04)

Note: Version bump only for package @​aws-sdk/client-s3

3.1102.0 (2026-08-03)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates @aws-sdk/s3-request-presigner from 3.1101.0 to 3.1107.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1107.0

3.1107.0(2026-08-10)

Chores
  • codegen:
    • sync for omit staticContextParams on ClientInputEndpointParameters (#8258) (2b7601ed)
    • smithy-aws-typescript-codegen 0.52.0 (#8255) (2e4482a6)
New Features
  • client-connect: Added Malay language option to use AI to automatically fill evaluation forms in Malay (6f82fc3a)
  • client-sagemaker: Added PREFIX AWARE routing strategy and PrefixAwareRoutingConfig to CreateEndpointConfig. Configure PrefixLength and ConcurrencyThreshold to route requests that share the same prompt prefix to the same instance. (c0ce67e2)
  • client-medialive: Added VirtualSourceAddress to multicast output destinations for MediaLive Anywhere channels. Specifies the source IP address for outbound multicast packets when downstream networks enforce source-IP filtering. (dc24c644)
  • client-elementalinference: Added support for the SearchFixtures API and DataSourceConfiguration, enabling customers to map fixture event data onto clipping outputs for improved feature accuracy. (8a63a39d)
  • client-sagemaker-runtime: Added the PrefixAwareId header to InvokeEndpoint and InvokeEndpointWithResponseStream. This optional parameter serves as a routing hint for endpoints configured with prefix-aware routing, differentiating routing decisions for requests that share the same prompt prefix. (8345d8ef)

For list of updated packages, view updated-packages.md in assets-3.1107.0.zip

v3.1106.0

3.1106.0(2026-08-07)

New Features
  • clients: update client endpoints as of 2026-08-07 (c5d05426)
  • client-amplify: Increased the maximum allowed length of the oauthToken parameter in the CreateApp and UpdateApp APIs to support longer OAuth tokens issued by third-party Git providers. (b239e292)
  • client-healthlake: Adds provenanceEnabled to StartFHIRImportJob (18ac6efe)
  • client-securityagent: Added enableEmailMfa input field on Actor to enable email-based MFA during penetration tests. When enabled, a server-generated mfaForwardingAddress is returned. Set up a forwarding rule in your email provider to forward MFA emails to this address so the agent can complete email-based MFA login flows (e21d3919)
  • client-mediapackagev2: StreamNameOutputMode - a new optional field on MediaPackageV2 OriginEndpoints that lets customers choose whether egress manifests use numeric stream indices (default) or encoder-assigned stream names from the input (7f49cb06)
  • client-sagemaker: Amazon SageMaker adds maintenance lifecycle statuses for Notebook Instances (6ce0f884)
  • client-ec2: This release adds support for BGP route protection in Amazon VPC IP Address Manager (IPAM), including route discovery, RPKI route protection findings, and delegated RPKI (Internet Registry Associations, routing policy registrations, and ROA management) for BYOIP prefixes. (62f281df)
  • client-mediatailor: Added support for inserting ads via the VAST Ad Buffet standard. You can now configure MediaTailor to insert ads in sequence order using the AdSequencingMode setting in your playback configuration. Standalone ads are used as fallbacks when a sequenced ad is unavailable. (7bebb1e5)
  • client-connect: Supports updating the task template associated with in-progress task contacts using the new UpdateContactTaskTemplate API. This enables supervisors and developers to dynamically reassign task templates without creating a new task. (24f40416)

For list of updated packages, view updated-packages.md in assets-3.1106.0.zip

v3.1105.0

3.1105.0(2026-08-06)

Chores
  • lib-dynamodb: add error msg and fallback when incompatible client is supplied (#8231) (e663d41f)
New Features

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1107.0 (2026-08-10)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1106.0 (2026-08-07)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1105.0 (2026-08-06)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1104.0 (2026-08-05)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1103.0 (2026-08-04)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1102.0 (2026-08-03)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

Commits

Updates @orpc/server from 1.14.13 to 1.15.0

Release notes

Sourced from @​orpc/server's releases.

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @orpc/zod from 1.14.13 to 1.15.0

Release notes

Sourced from @​orpc/zod's releases.

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @sentry/node from 10.69.0 to 10.70.0

Release notes

Sourced from @​sentry/node's releases.

10.70.0

  • feat(v10/core): Support stable MCP SDK v2 (#22986)
  • feat(v10/deps): Bump @sentry/node-cpu-profiler to 2.4.3 (#22992)
  • feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)
  • fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23189)
  • fix(v10/cloudflare): Get original waituntil in workflows (#23192)
  • fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy (#23190)
  • fix(v10/cloudflare): Set agent conversation id on the onRequest path (#22985)
  • fix(v10/cloudflare): Set conversation id independent of session name (#23193)
  • fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)
  • fix(v10/cloudflare): Use gen_ai.agent.name for class names (#22987)
  • fix(v10/core,browser): Handle errors from other realms (#23201)
  • fix(v10/core): Sample errors after beforeSend while preserving session updates (#22819)
  • fix(v10/hono): Include originalException in captured exception hint (#22990)
  • fix(v10/nextjs): meriyah issue for standalone build (#23055)
  • fix(v10/nextjs): Remove tracing from middleware wrappers (#22904)
  • fix(v10/profiling-node): Respect profileSessionSampleRate in trace profile lifecycle (#22940)
  • fix(v10/react-router): Preserve sourcemaps.disable when unstable_sentryVitePluginOptions is set (#22966)
  • fix(v10/react): Remove routes from shared set on <Routes> unmount (#22948)
  • fix(v10/sveltekit): Export metrics from worker entry point (#23027)
  • test(v10/e2e): Add missing @sentry/core dep to nextjs-16-userfeedback (#23009)
  • test(v10/e2e): Fix failing sveltekit-3 test (#23016)
  • test(v10/e2e): Fix type error in nextjs ai-error tests (#23011)
  • test(v10/e2e): Pin tanstackstart-react e2e deps to unblock tunnel tests (#23048)

Work in this release was contributed by @​davidmurdoch, @​Jxxunnn, and @​kamilogorek. Thank you for your contributions!

Bundle size 📦

Path Size
@​sentry/browser 27.09 KB
@​sentry/browser - with treeshaking flags 25.58 KB
@​sentry/browser (incl. Tracing) 45.5 KB
@​sentry/browser (incl. Tracing + Span Streaming) 47.24 KB
@​sentry/browser (incl. Tracing, Profiling) 50.13 KB
@​sentry/browser (incl. Tracing, Replay) 83.82 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.7 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 88.42 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 100.78 KB
@​sentry/browser (incl. Feedback) 43.87 KB
@​sentry/browser (incl. sendFeedback) 31.78 KB
@​sentry/browser (incl. FeedbackAsync) 36.79 KB
@​sentry/browser (incl. Metrics) 28.16 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.70.0

  • feat(v10/core): Support stable MCP SDK v2 (#22986)
  • feat(v10/deps): Bump @sentry/node-cpu-profiler to 2.4.3 (#22992)
  • feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)
  • fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23189)
  • fix(v10/cloudflare): Get original waituntil in workflows (#23192)
  • fix(v10/cloudflare): Ins...

    Description has been truncated

@dependabot
build(deps): bump the production-dependencies group across 1 director…
8e9f9b9 
…y with 15 updates

Bumps the production-dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@orpc/contract](https://github.com/middleapi/orpc/tree/HEAD/packages/contract) | `1.14.13` | `1.15.0` |
| [@orpc/client](https://github.com/middleapi/orpc/tree/HEAD/packages/client) | `1.14.13` | `1.15.0` |
| [@orpc/openapi](https://github.com/middleapi/orpc/tree/HEAD/packages/openapi) | `1.14.13` | `1.15.0` |
| [@orpc/openapi-client](https://github.com/middleapi/orpc/tree/HEAD/packages/openapi-client) | `1.14.13` | `1.15.0` |
| [@scure/bip39](https://github.com/paulmillr/scure-bip39) | `2.2.0` | `2.3.0` |
| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.4` | `4.23.12` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1101.0` | `3.1107.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1101.0` | `3.1107.0` |
| [@orpc/server](https://github.com/middleapi/orpc/tree/HEAD/packages/server) | `1.14.13` | `1.15.0` |
| [@orpc/zod](https://github.com/middleapi/orpc/tree/HEAD/packages/zod) | `1.14.13` | `1.15.0` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.69.0` | `10.70.0` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `6.0.6` | `6.0.11` |
| [fastify](https://github.com/fastify/fastify) | `5.11.2` | `5.11.3` |
| [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.1101.0` | `3.1107.0` |



Updates `@orpc/contract` from 1.14.13 to 1.15.0
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/contract)

Updates `@orpc/client` from 1.14.13 to 1.15.0
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/client)

Updates `@orpc/openapi` from 1.14.13 to 1.15.0
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/openapi)

Updates `@orpc/openapi-client` from 1.14.13 to 1.15.0
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/openapi-client)

Updates `@scure/bip39` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/paulmillr/scure-bip39/releases)
- [Commits](paulmillr/scure-bip39@2.2.0...2.3.0)

Updates `next` from 16.2.12 to 16.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.0)

Updates `tsx` from 4.23.4 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.4...v4.23.12)

Updates `@aws-sdk/client-s3` from 3.1101.0 to 3.1107.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1107.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1101.0 to 3.1107.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1107.0/packages/s3-request-presigner)

Updates `@orpc/server` from 1.14.13 to 1.15.0
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/server)

Updates `@orpc/zod` from 1.14.13 to 1.15.0
- [Release notes](https://github.com/middleapi/orpc/releases)
- [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/zod)

Updates `@sentry/node` from 10.69.0 to 10.70.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.70.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.69.0...10.70.0)

Updates `bullmq` from 6.0.6 to 6.0.11
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v6.0.6...v6.0.11)

Updates `fastify` from 5.11.2 to 5.11.3
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.11.2...v5.11.3)

Updates `@aws-sdk/lib-storage` from 3.1101.0 to 3.1107.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1107.0/lib/lib-storage)

---
updated-dependencies:
- dependency-name: "@orpc/contract"
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/client"
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/openapi"
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/openapi-client"
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@scure/bip39"
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1107.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1107.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/server"
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@orpc/zod"
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@sentry/node"
  dependency-version: 10.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: bullmq
  dependency-version: 6.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: fastify
  dependency-version: 5.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@aws-sdk/lib-storage"
  dependency-version: 3.1107.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 13, 2026
@socket-security

socket-security Bot commented Aug 13, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedtsx@​4.23.4 ⏵ 4.23.12100 +1210081 +195 +2100
Updated@​orpc/​zod@​1.14.13 ⏵ 1.15.08810010096100
Updated@​scure/​bip39@​2.2.0 ⏵ 2.3.0100 +110010088 +6100
Updated@​orpc/​server@​1.14.13 ⏵ 1.15.09310010096100
Updated@​sentry/​node@​10.69.0 ⏵ 10.70.0981009596100
Updated@​orpc/​openapi-client@​1.14.13 ⏵ 1.15.0100 +1100100 +196100
Updated@​orpc/​client@​1.14.13 ⏵ 1.15.099 +1100100 +196100
Updated@​orpc/​contract@​1.14.13 ⏵ 1.15.010010010096100
Updated@​orpc/​openapi@​1.14.13 ⏵ 1.15.0100 +110010096100

View full report

@socket-security

socket-security Bot commented Aug 13, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @sentry/node-core is 60.0% likely obfuscated

Confidence: 0.60

Location: Package overview

From: pnpm-lock.yaml → npm/@sentry/node@10.70.0 → npm/@sentry/node-core@10.70.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@sentry/node-core@10.70.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 18, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-4632c24b71 branch August 18, 2026 09:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants