chore(deps-dev): bump the dev-dependencies-minor-patch group with 7 updates by dependabot[bot] · Pull Request #105 · middleapi/standard-server

dependabot · 2026-09-26T01:14:06Z

Bumps the dev-dependencies-minor-patch group with 7 updates:

Package	From	To
@types/node	`26.4.1`	`26.6.2`
fastify	`5.12.1`	`5.12.5`
lint-staged	`17.4.1`	`17.5.1`
pkg-pr-new	`0.0.87`	`0.0.88`
supertest	`7.2.2`	`7.3.0`
tsx	`4.23.13`	`4.23.15`
@types/bun	`1.4.0`	`1.4.2`

Updates @types/node from 26.4.1 to 26.6.2

Commits

See full diff in compare view

Updates fastify from 5.12.1 to 5.12.5

Release notes

Sourced from fastify's releases.

v5.12.5

⚠️ Security release

Fix for GHSA-4mh8-r7rc-xpvc

What's Changed

[Backport 5.x] perf: reduce content-type parser overhead by @github-actions[bot] in fastify/fastify#7019

[Backport 5.x] perf: avoid redundant request-part reads during validation by @github-actions[bot] in fastify/fastify#7020

Full Changelog: fastify/fastify@v5.12.4...v5.12.5

v5.12.4

Fixed the fastify.js version mismatch.

Full Changelog: fastify/fastify@v5.12.2...v5.12.4

v5.12.2

⚠️ Security release

Fix for GHSA-9q9j-q6p8-xq58

Fix for GHSA-hwr6-493r-vm6h

Fix for GHSA-p68q-wchp-6fh7

Fix for GHSA-667r-xxjv-c9mm

What's Changed

[Backport 5.x] fix: callNotFound should run not-found preHandler regardless of registration order by @github-actions[bot] in fastify/fastify#6973

[Backport 5.x] chore: npm ignore remaining agent files by @github-actions[bot] in fastify/fastify#7003

Full Changelog: fastify/fastify@v5.12.1...v5.12.2

Commits

ba235fd Bumped v5.12.5
ad06a4c Merge commit from fork
7af0d77 [Backport 5.x] perf: avoid redundant request-part reads during validation (#7...
990ebef [Backport 5.x] perf: reduce content-type parser overhead (#7019)
1690e35 Bumped v5.12.4
1c991c4 Bumped v5.12.3
942a2be Bumped v5.12.2
853f6e2 test(validation): cover normalization and async branches
f02d8d4 fix(validation): do not unwrap async validator results
93c239a fix: reject malformed URLs before custom 404 handlers
Additional commits viewable in compare view

Updates lint-staged from 17.4.1 to 17.5.1

Release notes

Sourced from lint-staged's releases.

v17.5.1

Patch Changes

#1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

v17.5.0

Minor Changes

#1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.

Patch Changes

#1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

#1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

#1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

Changelog

Sourced from lint-staged's changelog.

17.5.1

Patch Changes

#1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

17.5.0

Minor Changes

#1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.

Patch Changes

#1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

#1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

#1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

Commits

f8b1ab1 Merge pull request #1853 from lint-staged/changeset-release/main
3b54961 chore(changeset): release
09317ff Merge pull request #1852 from lint-staged/fix-ambient-declaration
bfcca94 fix: change defineConfig signature from const to a function
dcb59f6 Merge pull request #1846 from lint-staged/changeset-release/main
9c8c6dc chore(changeset): release
586466f Merge pull request #1849 from lint-staged/improve-intent-to-add
45eda5f refactor: improve --intent-to-add detection
26372e3 Merge pull request #1848 from lint-staged/fix-color-detection
d718ccc fix: honor FORCE_COLOR/NO_COLOR env variables in non-TTY streams
Additional commits viewable in compare view

Updates pkg-pr-new from 0.0.87 to 0.0.88

Commits

b594954 release: v0.0.88
See full diff in compare view

Updates supertest from 7.2.2 to 7.3.0

Release notes

Sourced from supertest's releases.

v7.3.0

fix: stabilize ephemeral server requests and assertions 71dc5fb

Merge pull request #883 from forwardemail/dependabot/npm_and_yarn/multi-acd8535d99 3b5ba5c

Merge pull request #886 from forwardemail/dependabot/npm_and_yarn/picomatch-2.3.2 c3419b2

Merge pull request #887 from forwardemail/dependabot/npm_and_yarn/lodash-4.18.1 7e409db

Merge pull request #898 from forwardemail/dependabot/npm_and_yarn/brace-expansion-1.1.21 b55a7f9

Merge pull request #899 from forwardemail/dependabot/npm_and_yarn/browserslist-4.29.0 7a5deaa

Merge pull request #900 from forwardemail/dependabot/npm_and_yarn/fast-uri-3.1.8 a75f6ee

Merge pull request #901 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.15.2 c2cb33e

Merge pull request #896 from pnookala-godaddy/codex/ephemeral-loopback-bind 7fb34e7

chore(deps-dev): bump js-yaml from 3.14.2 to 3.15.2 c357584

chore(deps-dev): bump browserslist from 4.25.1 to 4.29.0 2a01b57

chore(deps-dev): bump fast-uri from 3.0.6 to 3.1.8 343394d

chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.21 6b203e9

Merge pull request #881 from forwardemail/dependabot/npm_and_yarn/qs-6.14.2 d40ca7e

fix: match ephemeral server address family b6f5995

chore(deps-dev): bump lodash from 4.17.21 to 4.18.1 81766ca

chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 985ac7c

chore(deps): bump minimatch 58baa5f

chore(deps): bump qs from 6.14.1 to 6.14.2 c406e82

forwardemail/supertest@v7.2.2...v7.3.0

Commits

a3f5cb8 7.3.0
71dc5fb fix: stabilize ephemeral server requests and assertions
3b5ba5c Merge pull request #883 from forwardemail/dependabot/npm_and_yarn/multi-acd85...
c3419b2 Merge pull request #886 from forwardemail/dependabot/npm_and_yarn/picomatch-2...
7e409db Merge pull request #887 from forwardemail/dependabot/npm_and_yarn/lodash-4.18.1
b55a7f9 Merge pull request #898 from forwardemail/dependabot/npm_and_yarn/brace-expan...
7a5deaa Merge pull request #899 from forwardemail/dependabot/npm_and_yarn/browserslis...
a75f6ee Merge pull request #900 from forwardemail/dependabot/npm_and_yarn/fast-uri-3.1.8
c2cb33e Merge pull request #901 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.15.2
7fb34e7 Merge pull request #896 from pnookala-godaddy/codex/ephemeral-loopback-bind
Additional commits viewable in compare view

Updates tsx from 4.23.13 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

exclude bare builtins from namespace inheritance (38e1588)

expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)

make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

npm package (@latest dist-tag)

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

npm package (@latest dist-tag)

Commits

ca66105 test: fix drive-less file URLs in ESM resolver fixtures
2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
38e1588 fix: exclude bare builtins from namespace inheritance
562c434 fix: make namespaced register() overloads portable for declaration emit
edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
70e7828 test: upgrade tinyspy for disposable API
9ed2022 ci: avoid duplicate release notifications
872e77f refactor: use disposables for cleanup
6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
See full diff in compare view

Updates @types/bun from 1.4.0 to 1.4.2

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates Bumps the dev-dependencies-minor-patch group with 7 updates: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.1` | `26.6.2` | | [fastify](https://github.com/fastify/fastify) | `5.12.1` | `5.12.5` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.4.1` | `17.5.1` | | [pkg-pr-new](https://github.com/stackblitz-labs/pkg.pr.new/tree/HEAD/packages/cli) | `0.0.87` | `0.0.88` | | [supertest](https://github.com/ladjs/supertest) | `7.2.2` | `7.3.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` | | [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.0` | `1.4.2` | Updates `@types/node` from 26.4.1 to 26.6.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `fastify` from 5.12.1 to 5.12.5 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.12.1...v5.12.5) Updates `lint-staged` from 17.4.1 to 17.5.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.4.1...v17.5.1) Updates `pkg-pr-new` from 0.0.87 to 0.0.88 - [Commits](https://github.com/stackblitz-labs/pkg.pr.new/commits/v0.0.88/packages/cli) Updates `supertest` from 7.2.2 to 7.3.0 - [Release notes](https://github.com/ladjs/supertest/releases) - [Commits](forwardemail/supertest@v7.2.2...v7.3.0) Updates `tsx` from 4.23.13 to 4.23.15 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.13...v4.23.15) Updates `@types/bun` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies-minor-patch - dependency-name: fastify dependency-version: 5.12.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch - dependency-name: lint-staged dependency-version: 17.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies-minor-patch - dependency-name: pkg-pr-new dependency-version: 0.0.88 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch - dependency-name: supertest dependency-version: 7.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies-minor-patch - dependency-name: tsx dependency-version: 4.23.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch - dependency-name: "@types/bun" dependency-version: 1.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

pkg-pr-new · 2026-09-26T01:14:50Z

@standard-server/aws-lambda

npm i https://pkg.pr.new/@standard-server/aws-lambda@105

@standard-server/core

npm i https://pkg.pr.new/@standard-server/core@105

@standard-server/fastify

npm i https://pkg.pr.new/@standard-server/fastify@105

@standard-server/fetch

npm i https://pkg.pr.new/@standard-server/fetch@105

@standard-server/node

npm i https://pkg.pr.new/@standard-server/node@105

@standard-server/peer

npm i https://pkg.pr.new/@standard-server/peer@105

@standard-server/shared

npm i https://pkg.pr.new/@standard-server/shared@105

commit: 628056b

codecov · 2026-09-26T01:15:40Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

codspeed · 2026-09-26T01:16:13Z

Merging this PR will not alter performance

✅ 26 untouched benchmarks
⏩ 108 skipped benchmarks¹

_{Comparing dependabot/npm_and_yarn/dev-dependencies-minor-patch-1a4b9bfef2 (628056b) with main (4488969)}

108 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 26, 2026

Navigation Menu

Uh oh!

chore(deps-dev): bump the dev-dependencies-minor-patch group with 7 updates - #105

chore(deps-dev): bump the dev-dependencies-minor-patch group with 7 updates#105
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-minor-patch-1a4b9bfef2

dependabot Bot commented on behalf of github Sep 26, 2026

Uh oh!

pkg-pr-new Bot commented Sep 26, 2026

Uh oh!

codecov Bot commented Sep 26, 2026

Uh oh!

codspeed Bot commented Sep 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 26, 2026

v5.12.5

⚠️ Security release

What's Changed

v5.12.4

v5.12.2

⚠️ Security release

What's Changed

v17.5.1

Patch Changes

v17.5.0

Minor Changes

Patch Changes

17.5.1

Patch Changes

17.5.0

Minor Changes

Patch Changes

v7.3.0

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

Uh oh!

pkg-pr-new Bot commented Sep 26, 2026

Uh oh!

codecov Bot commented Sep 26, 2026

Codecov Report

Uh oh!

codspeed Bot commented Sep 26, 2026

Merging this PR will not alter performance

Footnotes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants