Skip to content

Bump the npm-dependencies group with 22 updates - #15

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-7d288df331
Open

Bump the npm-dependencies group with 22 updates#15
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-7d288df331

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown

Bumps the npm-dependencies group with 22 updates:

Package From To
cors 2.8.5 2.8.6
@types/cors 2.8.18 2.8.19
dotenv 16.5.0 17.4.2
express 5.1.0 5.2.1
@types/express 5.0.2 5.0.6
openai 4.103.0 7.5.0
@types/node 20.17.50 26.2.0
concurrently 8.2.2 10.0.5
typescript 5.8.3 7.0.2
express-rate-limit 7.5.0 8.6.2
express-slow-down 2.1.0 3.1.0
zod 3.25.3 4.4.3
@typescript-eslint/eslint-plugin 7.18.0 8.67.0
@typescript-eslint/parser 7.18.0 8.67.0
eslint 8.57.1 10.8.1
eslint-config-prettier 9.1.0 10.1.8
eslint-import-resolver-typescript 3.10.1 4.4.5
eslint-plugin-import 2.31.0 2.32.0
eslint-plugin-prettier 5.4.0 5.5.6
nodemon 3.1.10 3.1.14
prettier 3.5.3 3.9.6
tsx 4.19.4 4.23.12

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

  • Improve documentation (API, context, examples...)
  • Remove additional markdown files from tarball
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.


Updates @types/cors from 2.8.18 to 2.8.19

Commits

Updates dotenv from 16.5.0 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

  • Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)

17.3.1 (2026-02-12)

Changed

  • Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

  • Add a new README section on dotenv’s approach to the agentic future.

Changed

  • Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

17.2.4 (2026-02-05)

Changed

  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)
  • Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

17.2.3 (2025-09-29)

Changed

  • Fixed typescript error definition (#912)

... (truncated)

Commits

Updates express from 5.1.0 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Security

What's Changed

... (truncated)

Changelog

Sourced from express's changelog.

5.2.1 / 2025-12-01

  • Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
    • The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

5.2.0 / 2025-12-01

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
  • deps: body-parser@^2.2.1
  • A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.
Commits

Updates @types/express from 5.0.2 to 5.0.6

Commits

Updates openai from 4.103.0 to 7.5.0

Release notes

Sourced from openai's releases.

v7.5.0

7.5.0 (2026-08-17)

Features

  • add Bedrock Runtime endpoint support (SDK-290) (#2348) (4a199af)
  • api: add new Daybreak and gpt-5.6-cyber model identifiers (9a38e63)
  • api: add new Daybreak and gpt-5.6-cyber model identifiers (#2278) (9a38e63)
  • api: Add ServiceTier and ImageDetail types (#2364) (602d481)
  • api: add WebSocket stream IDs (#2314) (156a8db)
  • api: add workload identity access token issued event (#2307) (322a5b1)
  • api: deprecate Sora video APIs (#2313) (4424b40)
  • api: Ultrafast tier, structured MCP and websocket errors, separate websocket events (#2332) (a3deafb)

Bug Fixes

  • api: clarify audio upload metadata requirements (#2279) (34ecf3f)
  • audio: prevent microphone leaks and playback pipe deadlocks (#2339) (1c692fe)
  • audio: reject ffplay spawn errors (#2012) (6d42d4d)
  • auth: reject redirects during workload identity token exchange (#2321) (240385e)
  • auth: reject unsafe workload-identity token expirations (#2345) (1f0349d)
  • avoid TypeError in toFile for Responses without a URL (#2311) (3313f54)
  • await webhook verification in README examples (#2302) (0fe7ad0)
  • azure: honor explicit browser denial for Entra token providers (#2328) (9d47510)
  • azure: preserve model-to-deployment mapping for images.edit (#1918) (6c207c6)
  • azure: prevent API-key disclosure across HTTP redirects (#2320) (f36c418)
  • azure: prevent deployment path traversal (#2337) (a9d9d41)
  • bedrock: safely sign inherited query parameter names (#2375) (3f8d5cc)
  • chat: support custom tool calls in parser and ChatCompletionStream (#2023) (6fa9152)
  • client: handle empty JSON response body without content-length (#1998) (b6447e9)
  • configure Bash for pnpm scripts on Windows (#2330) (f5a0ad1)
  • deps: remediate Dependabot and fixture vulnerabilities (#2282) (783da8f)
  • embedding: response type for base64 encoding format (#1554) (ef69801)
  • export AzureClientOptions (#1760) (511bf6d), closes #1735
  • export workload identity helpers from openai/auth (#2344) (af8f14f)
  • fail ecosystem CI when live credentials are missing (#2349) (a47dc75)
  • format: restore formatting for generated SDK files (#2089) (6d69d4b)
  • harden runTools against inherited function names (#2333) (f4496d1)
  • honor defaultHeaders null for helper method header (#1857) (8eab09a)
  • include items for strict Zod v3 any arrays (#2357) (4c32089)
  • isolate Vercel ecosystem tests per request (#2359) (2831290)
  • keep streamed Responses output text linear and canonical (#2354) (6827a40)
  • lint: recognize Castiron-generated headers (#2124) (cf6237f)
  • lint: restore generated SDK lint rules (#2126) (6b8162c)
  • parse empty chat content when present (#2331) (53dd723)
  • parser: recognize raw json_schema response format in auto-parsing checks (#2015) (fbd2541)
  • pass file batch helper options through (#1855) (05ce028)
  • preserve File-like metadata in toFile (#1883) (ba1a781)

... (truncated)

Changelog

Sourced from openai's changelog.

7.5.0 (2026-08-17)

Features

  • add Bedrock Runtime endpoint support (SDK-290) (#2348) (4a199af)
  • api: add new Daybreak and gpt-5.6-cyber model identifiers (9a38e63)
  • api: add new Daybreak and gpt-5.6-cyber model identifiers (#2278) (9a38e63)
  • api: Add ServiceTier and ImageDetail types (#2364) (602d481)
  • api: add WebSocket stream IDs (#2314) (156a8db)
  • api: add workload identity access token issued event (#2307) (322a5b1)
  • api: deprecate Sora video APIs (#2313) (4424b40)
  • api: Ultrafast tier, structured MCP and websocket errors, separate websocket events (#2332) (a3deafb)

Bug Fixes

  • api: clarify audio upload metadata requirements (#2279) (34ecf3f)
  • audio: prevent microphone leaks and playback pipe deadlocks (#2339) (1c692fe)
  • audio: reject ffplay spawn errors (#2012) (6d42d4d)
  • auth: reject redirects during workload identity token exchange (#2321) (240385e)
  • auth: reject unsafe workload-identity token expirations (#2345) (1f0349d)
  • avoid TypeError in toFile for Responses without a URL (#2311) (3313f54)
  • await webhook verification in README examples (#2302) (0fe7ad0)
  • azure: honor explicit browser denial for Entra token providers (#2328) (9d47510)
  • azure: preserve model-to-deployment mapping for images.edit (#1918) (6c207c6)
  • azure: prevent API-key disclosure across HTTP redirects (#2320) (f36c418)
  • azure: prevent deployment path traversal (#2337) (a9d9d41)
  • bedrock: safely sign inherited query parameter names (#2375) (3f8d5cc)
  • chat: support custom tool calls in parser and ChatCompletionStream (#2023) (6fa9152)
  • client: handle empty JSON response body without content-length (#1998) (b6447e9)
  • configure Bash for pnpm scripts on Windows (#2330) (f5a0ad1)
  • deps: remediate Dependabot and fixture vulnerabilities (#2282) (783da8f)
  • embedding: response type for base64 encoding format (#1554) (ef69801)
  • export AzureClientOptions (#1760) (511bf6d), closes #1735
  • export workload identity helpers from openai/auth (#2344) (af8f14f)
  • fail ecosystem CI when live credentials are missing (#2349) (a47dc75)
  • format: restore formatting for generated SDK files (#2089) (6d69d4b)
  • harden runTools against inherited function names (#2333) (f4496d1)
  • honor defaultHeaders null for helper method header (#1857) (8eab09a)
  • include items for strict Zod v3 any arrays (#2357) (4c32089)
  • isolate Vercel ecosystem tests per request (#2359) (2831290)
  • keep streamed Responses output text linear and canonical (#2354) (6827a40)
  • lint: recognize Castiron-generated headers (#2124) (cf6237f)
  • lint: restore generated SDK lint rules (#2126) (6b8162c)
  • parse empty chat content when present (#2331) (53dd723)
  • parser: recognize raw json_schema response format in auto-parsing checks (#2015) (fbd2541)
  • pass file batch helper options through (#1855) (05ce028)
  • preserve File-like metadata in toFile (#1883) (ba1a781)
  • preserve skill upload paths without buffering native files (#2303) (30b9c41)

... (truncated)

Commits
  • 5b96016 release: 7.5.0 (#2087)
  • bfcccad fix(security): prevent Bedrock bearer credential disclosure across redirects ...
  • 3f8d5cc fix(bedrock): safely sign inherited query parameter names (#2375)
  • 16172a4 chore(deps-dev): bump oxfmt from 0.61.0 to 0.62.0 (#2373)
  • 6320b64 chore(deps-dev): bump ts-jest from 29.4.11 to 29.4.12 (#2374)
  • b49b227 chore(deps-dev): bump webpack from 5.108.4 to 5.109.2 in /ecosystem-tests/ts-...
  • 2cc57c3 chore(deps-dev): bump @​aws-sdk/credential-provider-node from 3.972.77 to 3.97...
  • 6983363 chore(deps-dev): bump @​cloudflare/workers-types from 5.20260804.1 to 5.202608...
  • 50db5db chore(deps-dev): bump @​types/node from 24.12.4 to 26.2.0 (#2370)
  • 7259f9f chore(deps-dev): bump html-webpack-plugin from 5.6.7 to 5.6.8 in /ecosystem-t...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for openai since your current version.


Updates @types/cors from 2.8.18 to 2.8.19

Commits

Updates @types/express from 5.0.2 to 5.0.6

Commits

Updates @types/node from 20.17.50 to 26.2.0

Commits

Updates concurrently from 8.2.2 to 10.0.5

Release notes

Sourced from concurrently's releases.

v10.0.5

What's Changed

New Contributors

Full Changelog: open-cli-tools/concurrently@v10.0.4...v10.0.5

v10.0.4

What's Changed

New Contributors

Full Changelog: open-cli-tools/concurrently@v10.0.3...v10.0.4

v10.0.3

Republish of https://github.com/open-cli-tools/concurrently/releases/tag/v10.0.1 with Trusted Publishing enabled (see #595)

Full Changelog: open-cli-tools/concurrently@v10.0.2...v10.0.3

v10.0.2

Test version to restore Trusted Publishing. Not published to npm.

v10.0.1

  • Ensure FlowController type is exported - #594

Full Changelog: open-cli-tools/concurrently@v10.0.0...v10.0.1

v10.0.0

💥 Breaking Changes

  • Dropped support for Node.js <22.0.0. Older Node.js version have reached end-of-life, and certain features require new-ish JS APIs.
  • concurrently is now ESM-only. It's now possible to require(esm). See here for interoperability.
  • Prefix colors now default to automatic - #581 The colors used to default to reset (which does nothing). Concurrently now automatically selects a color, out of the box. The list of colors used is not jarring nor carries semantic meaning, and reads well in both dark and light terminal backgrounds.
  • Removed deprecated flags and options
    • CLI flag --name-separator: use commas instead.
    • API option killOthers: use killOthersOn instead.

✨ New Features

  • Support applying modifiers to hex prefix colors (e.g. #ff0000.bold) - #450

... (truncated)

Commits
  • 1b8cbeb 10.0.5
  • 544dba0 docs: make linter happy
  • 667b701 deps: update several dev deps
  • f67c57c vscode: use installed TS version
  • dbb5617 fix: expand wildcards from package.json5 when package.json is missing (#608)
  • 9f90a1a fix: correctly output non-ASCII text on Windows (#604)
  • 94415cc ci: fix publishing to latest/backport
  • 2524b65 10.0.4
  • 1080199 fix: avoid kill timeout exit delays (#601)

Bumps the npm-dependencies group with 22 updates:

| Package | From | To |
| --- | --- | --- |
| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |
| [@types/cors](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/cors) | `2.8.18` | `2.8.19` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.5.0` | `17.4.2` |
| [express](https://github.com/expressjs/express) | `5.1.0` | `5.2.1` |
| [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `5.0.2` | `5.0.6` |
| [openai](https://github.com/openai/openai-node) | `4.103.0` | `7.5.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.17.50` | `26.2.0` |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `8.2.2` | `10.0.5` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `7.0.2` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `7.5.0` | `8.6.2` |
| [express-slow-down](https://github.com/express-rate-limit/express-slow-down) | `2.1.0` | `3.1.0` |
| [zod](https://github.com/colinhacks/zod) | `3.25.3` | `4.4.3` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `7.18.0` | `8.67.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.18.0` | `8.67.0` |
| [eslint](https://github.com/eslint/eslint) | `8.57.1` | `10.8.1` |
| [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `9.1.0` | `10.1.8` |
| [eslint-import-resolver-typescript](https://github.com/import-js/eslint-import-resolver-typescript) | `3.10.1` | `4.4.5` |
| [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.31.0` | `2.32.0` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.4.0` | `5.5.6` |
| [nodemon](https://github.com/remy/nodemon) | `3.1.10` | `3.1.14` |
| [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.9.6` |
| [tsx](https://github.com/privatenumber/tsx) | `4.19.4` | `4.23.12` |


Updates `cors` from 2.8.5 to 2.8.6
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](expressjs/cors@v2.8.5...v2.8.6)

Updates `@types/cors` from 2.8.18 to 2.8.19
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/cors)

Updates `dotenv` from 16.5.0 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.5.0...v17.4.2)

Updates `express` from 5.1.0 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.1.0...v5.2.1)

Updates `@types/express` from 5.0.2 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `openai` from 4.103.0 to 7.5.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v4.103.0...v7.5.0)

Updates `@types/cors` from 2.8.18 to 2.8.19
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/cors)

Updates `@types/express` from 5.0.2 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `@types/node` from 20.17.50 to 26.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `concurrently` from 8.2.2 to 10.0.5
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v8.2.2...v10.0.5)

Updates `typescript` from 5.8.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.8.3...v7.0.2)

Updates `express-rate-limit` from 7.5.0 to 8.6.2
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v7.5.0...v8.6.2)

Updates `express-slow-down` from 2.1.0 to 3.1.0
- [Changelog](https://github.com/express-rate-limit/express-slow-down/blob/main/changelog.md)
- [Commits](express-rate-limit/express-slow-down@v2.1.0...v3.1.0)

Updates `zod` from 3.25.3 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](https://github.com/colinhacks/zod/commits/v4.4.3)

Updates `@typescript-eslint/eslint-plugin` from 7.18.0 to 8.67.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 7.18.0 to 8.67.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/parser)

Updates `eslint` from 8.57.1 to 10.8.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.57.1...v10.8.1)

Updates `eslint-config-prettier` from 9.1.0 to 10.1.8
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-config-prettier@v9.1.0...v10.1.8)

Updates `eslint-import-resolver-typescript` from 3.10.1 to 4.4.5
- [Release notes](https://github.com/import-js/eslint-import-resolver-typescript/releases)
- [Changelog](https://github.com/import-js/eslint-import-resolver-typescript/blob/master/CHANGELOG.md)
- [Commits](import-js/eslint-import-resolver-typescript@v3.10.1...v4.4.5)

Updates `eslint-plugin-import` from 2.31.0 to 2.32.0
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](import-js/eslint-plugin-import@v2.31.0...v2.32.0)

Updates `eslint-plugin-prettier` from 5.4.0 to 5.5.6
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.4.0...v5.5.6)

Updates `nodemon` from 3.1.10 to 3.1.14
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](remy/nodemon@v3.1.10...v3.1.14)

Updates `prettier` from 3.5.3 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.5.3...3.9.6)

Updates `tsx` from 4.19.4 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.19.4...v4.23.12)

---
updated-dependencies:
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/cors"
  dependency-version: 2.8.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: openai
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@types/cors"
  dependency-version: 2.8.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: concurrently
  dependency-version: 10.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: express-rate-limit
  dependency-version: 8.6.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: express-slow-down
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.67.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.67.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: eslint
  dependency-version: 10.8.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: eslint-config-prettier
  dependency-version: 10.1.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: eslint-import-resolver-typescript
  dependency-version: 4.4.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-import
  dependency-version: 2.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: nodemon
  dependency-version: 3.1.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants