Skip to content

Commit b075271

Browse files
fix(deps): update all non-major dependencies (#123)
This PR contains the following updates: | Package | Change | Age | Confidence | Type | Update | Pending | |---|---|---|---|---|---|---| | [@prisma/client](https://www.prisma.io) ([source](https://redirect.github.com/prisma/prisma/tree/HEAD/packages/client)) | [`6.12.0` -> `6.15.0`](https://renovatebot.com/diffs/npm/@prisma%2fclient/6.12.0/6.15.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@prisma%2fclient/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@prisma%2fclient/6.12.0/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | | | [@prisma/client](https://www.prisma.io) ([source](https://redirect.github.com/prisma/prisma/tree/HEAD/packages/client)) | [`6.12.0` -> `6.15.0`](https://renovatebot.com/diffs/npm/@prisma%2fclient/6.12.0/6.15.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@prisma%2fclient/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@prisma%2fclient/6.12.0/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | | | [@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)) | [`22.16.5` -> `22.18.0`](https://renovatebot.com/diffs/npm/@types%2fnode/22.16.5/22.18.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fnode/22.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fnode/22.16.5/22.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | `22.18.1` | | [aquasecurity/setup-trivy](https://redirect.github.com/aquasecurity/setup-trivy) | `v0.2.3` -> `v0.2.4` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/aquasecurity%2fsetup-trivy/v0.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/aquasecurity%2fsetup-trivy/v0.2.3/v0.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | action | patch | | | docker.io/node | `22.17.1-bookworm-slim` -> `22.18.0-bookworm-slim` | [![age](https://developer.mend.io/api/mc/badges/age/docker/docker.io%2fnode/22.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/docker.io%2fnode/22.17.1/22.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | final | minor | `22.19.0` | | docker.io/redis | `8.0.3-bookworm` -> `8.2.0-bookworm` | [![age](https://developer.mend.io/api/mc/badges/age/docker/docker.io%2fredis/8.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/docker.io%2fredis/8.0.3/8.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | minor | `8.2.1-bookworm` | | [eslint](https://eslint.org) ([source](https://redirect.github.com/eslint/eslint)) | [`9.32.0` -> `9.34.0`](https://renovatebot.com/diffs/npm/eslint/9.32.0/9.34.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/eslint/9.34.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint/9.32.0/9.34.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | `9.35.0` | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | `v3.29.5` -> `v3.30.1` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/github%2fcodeql-action/v3.30.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/github%2fcodeql-action/v3.29.5/v3.30.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | action | minor | | | [node](https://redirect.github.com/actions/node-versions) | `22` -> `22.19.0` | [![age](https://developer.mend.io/api/mc/badges/age/github-releases/actions%2fnode-versions/22.19.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/actions%2fnode-versions/22.0.0/22.19.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | uses-with | minor | | | [prisma](https://www.prisma.io) ([source](https://redirect.github.com/prisma/prisma/tree/HEAD/packages/cli)) | [`6.12.0` -> `6.15.0`](https://renovatebot.com/diffs/npm/prisma/6.12.0/6.15.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/prisma/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/prisma/6.12.0/6.15.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | | | [tsx](https://tsx.is) ([source](https://redirect.github.com/privatenumber/tsx)) | [`4.20.3` -> `4.20.5`](https://renovatebot.com/diffs/npm/tsx/4.20.3/4.20.5) | [![age](https://developer.mend.io/api/mc/badges/age/npm/tsx/4.20.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/tsx/4.20.3/4.20.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch | | | [typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint) ([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)) | [`8.38.0` -> `8.41.0`](https://renovatebot.com/diffs/npm/typescript-eslint/8.38.0/8.41.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/typescript-eslint/8.41.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript-eslint/8.38.0/8.41.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | `8.43.0` (+1) | --- ### Release Notes <details> <summary>prisma/prisma (@&#8203;prisma/client)</summary> ### [`v6.15.0`](https://redirect.github.com/prisma/prisma/releases/tag/6.15.0) [Compare Source](https://redirect.github.com/prisma/prisma/compare/6.14.0...6.15.0) Today, we are excited to share the `6.15.0` stable release 🎉 **🌟 Star this repo for notifications about new releases, bug fixes & features — or [follow us on X](https://pris.ly/x)!** ##### Highlights ##### AI safety guardrails for destructive commands Prisma ORM now includes built-in safety checks that protect against destructive commands when triggered by AI coding assistants. The CLI can recognize when it is being executed by popular AI agents such as Claude Code, Gemini CLI, Qwen Code, Cursor, Aider and Replit. If a command like `prisma migrate reset --force` is attempted, Prisma ORM will prompt for explicit confirmation before proceeding. ![Cursor AI guardrail](https://redirect.github.com/user-attachments/assets/81b47674-ad93-4270-b073-69fe583e34a5) This feature ensures that irreversible operations which drop and recreate the database are not executed automatically by an AI tool. Prisma ORM is the first ORM to provide this level of protection, making it safer to use AI-assisted development while working with your databases. 📚 Learn more [in the docs](https://www.prisma.io/docs/orm/reference/prisma-cli-reference#ai-safety-guardrails-for-prisma-migrate-reset). ##### `prisma-client`: runtime improvements and schema flexibility We simplified Prisma ORM by making the runtime options for the Prisma Client more consistent and easier to understand. Previously there were several overlapping aliases which created confusion. With this release we simplified the inputs while keeping support for all the major environments you might be targeting. Changes include: - `node` has been removed, use `runtime = "nodejs"` instead - `deno-deploy` has been removed, use `runtime = "deno"` instead - `vercel` has been replaced by the new `runtime = "vercel-edge"` - `edge-light` is now just an alias for `vercel-edge` - `nodejs`, `deno`, and `bun` now share the same internal code path, while still keeping their separate input values for clarity - The VS Code extension has been updated to reflect these changes The updated list of supported runtimes is now: `nodejs`, `deno`, `bun`, `workerd` (alias `cloudflare`), `vercel-edge` (alias `edge-light`), and `react-native`. In addition, we fixed an issue where running `prisma generate` would fail if your schema contained no models. This is now supported with the new `prisma-client` generator, just like it already worked with the older `prisma-client-js` generator. For example, the following schema will now generate a client without errors: ```prisma generator client { provider = "prisma-client" output = "../generated/client" } datasource db { provider = "postgresql" url = env("DATABASE_URL") } ``` Running `prisma generate` with this schema will succeed and create the client in `./generated/client`. 📚 Learn more [in the docs](https://www.prisma.io/docs/orm/prisma-schema/overview/generators#prisma-client-preview). ##### Using Prisma ORM with Vercel Fluid [Fluid compute](https://vercel.com/fluid) is a new compute model from Vercel that combines the flexibility of serverless with the stability of servers, making it ideal for dynamic workloads such as streaming data and AI APIs. A common challenge in traditional serverless platforms is that when functions are suspended, database connection pools can’t close idle connections. This leads to leaked connections that stay open until the database times them out, which can exhaust the pool. Vercel provides the [`attachDatabasePool`](https://vercel.com/blog/the-real-serverless-compute-to-database-connection-problem-solved) utility to solve this problem. It ensures idle connections in the pool are properly released before a function is suspended, preventing connection leaks. You can use this utility together with Prisma’s driver adapters to safely manage database connections in Fluid Compute: ```ts import { Pool } from "pg"; import { attachDatabasePool } from "@&#8203;vercel/functions"; import { PrismaPg } from "@&#8203;prisma/adapter-pg"; import { PrismaClient } from "./generated/prisma/client"; const pool = new Pool({ connectionString: process.env.POSTGRES_URL }); attachDatabasePool(pool); const prisma = new PrismaClient({ adapter: new PrismaPg(pool), }); ``` 📚 Learn more [in the docs](https://www.prisma.io/docs/orm/prisma-client/deployment/serverless/deploy-to-vercel#using-prisma-orm-with-vercel-fluid). ##### Other news ##### Prisma Postgres Management API is Generally Available The Prisma Postgres Management API allows you to [programmatically](https://www.prisma.io/docs/guides/management-api-basic) provision and manage Prisma Postgres instances. It’s the perfect way to spin up a database in your CI/CD workflow, see our GitHub Action examples for [creating](https://redirect.github.com/marketplace/actions/create-prisma-postgres-database) and [deleting](https://redirect.github.com/marketplace/actions/delete-prisma-postgres-database) if you’re curious about this use case. It also enables developers to offer databases to their own users! For example, did you know that [Co.dev](http://co.dev/) (YC23), a popular “low-code AI app builder” is [using the Management API to provision Prisma Postgres instances to people building apps with their platform](https://www.prisma.io/blog/how-co-dev-uses-prisma-postgres-to-power-ai-driven-app-development-for-non-developers)? We’re excited to share that the Management API is now fully ready for production. With it moving into GA, we also added another piece of functionality where you can now create new projects without a default database. We’re looking forward to see what you’re going to build with it! 📚 Learn more [in the docs](https://www.prisma.io/docs/postgres/introduction/management-api). ##### Prisma Postgres is now available on Pipedream Prisma Postgres can now be used directly in your Pipedream workflows 🎉 With this integration, you can connect Prisma Postgres to over 2,800+ apps supported on Pipedream, enabling powerful automations and data workflows. For example, you can: - Automatically spin up a new Prisma Postgres database when a customer signs up in Stripe. - Connect Prisma Postgres with Slack, Notion, Airtable, or any other app in the Pipedream ecosystem This makes it easier than ever to use Prisma Postgres in your automation pipelines, without needing to manage custom scripts or infrastructure. 📚 Learn more [on the Pipedream integration page](https://pipedream.com/apps/prisma-management-api). <img width="1624" height="994" alt="Screenshot 2025-08-26 at 3 15 19 PM" src="https://github.com/user-attachments/assets/f0d98f8f-362d-4887-baeb-019ed9625c66" /> ##### New `--json` flag for `npx create-db` The `npx create-db` command lets you spin up a temporary, production-ready Prisma Postgres database that you can later claim for continued use. With this release, you can now add the `--json` flag to return the database details in JSON format. This makes it straightforward to programmatically use the connection details, whether you are building custom APIs or integrating database provisioning into your workflows. 📚 Learn more [in the docs](https://www.prisma.io/docs/postgres/introduction/npx-create-db). ![npx create-db --json command](https://redirect.github.com/user-attachments/assets/5fa40e7c-d531-4f81-b26c-2e150c5cade3) ##### Direct connections to Prisma Postgres are coming close to GA Direct connections enable you to connect to your database using any ORM library or tool of your choice (e.g. Drizzle ORM, Kysely but also database GUIs like Postico or TablePlus). In this release, we’ve improved the robustness of direct TCP connections and are close to bringing it to General Availability. 📚 Learn more [in the docs](https://www.prisma.io/docs/postgres/database/direct-connections). ##### Enterprise support Thousands of teams use Prisma and many of them already tap into our Enterprise & Agency Support Program for hands-on help with everything from schema integrations and performance tuning to security and compliance. With this program you also get priority issue triage and bug fixes, expert scalability advice, and custom training so that your Prisma-powered apps stay rock-solid at any scale. Learn more or join: <https://prisma.io/enterprise>. ### [`v6.14.0`](https://redirect.github.com/prisma/prisma/releases/tag/6.14.0) [Compare Source](https://redirect.github.com/prisma/prisma/compare/6.13.0...6.14.0) Today, we are excited to share the `6.14.0` stable release 🎉 **🌟 Star this repo for notifications about new releases, bug fixes & features — or [follow us on X](https://pris.ly/x)!** ##### Highlights ##### `@unique` attributes for SQL views (Preview) [Last release](https://pris.ly/release/6.13.0), we improved the robustness of [SQL views](https://www.prisma.io/docs/orm/prisma-schema/data-model/views) defined in the Prisma schema. Views are *virtual* tables that don't allows for defining unique constraints, indexes or foreign keys in the underlying database. However, as an application developer, it can be convenient to also define relationships involving views or paginate them using cursors. We've received this feedback from several people who had been using views in that way with Prisma ORM, so in this release we're re-introducing the `@unique` attribute for views. This attribute enables: - relationships involving views - `findUnique` queries, cursor-based pagination & implicit ordering for views Here's an example schema using `@unique` and defining a relationship from a model to a view: ```prisma model User { id Int @&#8203;id @&#8203;default(autoincrement()) email String @&#8203;unique posts Post[] stats UserPostStats? @&#8203;relation(fields: [email], references: [userEmail]) } model Post { id Int @&#8203;id @&#8203;default(autoincrement()) title String published Boolean @&#8203;default(false) createdAt DateTime @&#8203;default(now()) authorId Int? author User? @&#8203;relation(fields: [authorId], references: [id]) } view UserPostStats { userEmail String @&#8203;unique totalPosts BigInt? publishedPosts BigInt? unpublishedPosts BigInt? latestPostDate DateTime? @&#8203;db.Timestamp(6) user User? } ``` <details><summary>Expand to view the SQL code for this view</summary> ```sql CREATE OR REPLACE VIEW "UserPostStats" AS SELECT u.email AS "userEmail", u.name AS "userName", COUNT(p.id) AS "totalPosts", COUNT(CASE WHEN p.published = true THEN 1 END) AS "publishedPosts", COUNT(CASE WHEN p.published = false THEN 1 END) AS "unpublishedPosts", MAX(p."createdAt") AS "latestPostDate" FROM "User" u LEFT JOIN "Post" p ON u.id = p."authorId" GROUP BY u.id, u.email, u.name; ``` </details> You can now query this view and its relationship using `include`: ```ts const userPostStats = await prisma.userPostStats.findMany({ include: { user: true, } }) ``` 📚 Learn more in the [docs](https://www.prisma.io/docs/orm/prisma-schema/data-model/views). ##### Various fixes & stability improvements - Fixed several issues related to new `prisma-client` generator and the `queryCompiler` Preview feature (aka “Prisma Client without Rust engines”). Both will become the default in the upcoming Prisma 7 release and we're working hard on bringing these features into General Availability. You can try them out with your favorite stack with our [ready-to-run examples](https://redirect.github.com/prisma/prisma-examples/tree/latest/generator-prisma-client). - Fixed several regressions, e.g. related to Prisma Config - Removed middleware from Prisma Client (i.e. the `prisma.$use` method), which was deprecated since v4.16.0. Use [Prisma Client extensions](https://www.prisma.io/docs/orm/prisma-client/client-extensions) instead. - Deprecated `metrics` Preview feature (which will be removed in Prisma 7) ##### Improved type performance In this release, we also addressed some type performance issues that led to slower editors and lagging auto-complete. If you're curious about the details, you can check the description and changes in [this PR](https://redirect.github.com/prisma/prisma/pull/27777). ##### Other news ##### Increased robustness of Management API (Early Access) We recently released an [API for programmatically managing Prisma Postgres instances](https://www.prisma.io/docs/postgres/introduction/management-api) that's perfect for CI/CD workflows and scripting. In this release, we made it more robust and are bringing it closer to its General Availability release. ##### Revoke OAuth tokens in Prisma Console If you use OAuth to authorize third-party applications to act on your behalf in the Prisma Console, you can now revoke any app's access at any time. The Prisma Console shows a list of your authorized (connected) apps, and you can easily remove one to immediately block further access. ##### ICYMI [Last release](https://pris.ly/release/6.14.0) was *huge*, so just in case you missed it, here's the TLDR of what we put out last time: - **Prisma ORM** - **Prisma Config file (`prisma.config.ts`) is Generally Available** – Native way to configure schema paths, migrations, seeds, and more; no need for `earlyAccess` flag anymore. - **Multi-schema support is Generally Available** – Allows assigning models to different database schemas in Postgres and SQL Server using `@@&#8203;schema`. - **Improved SQL views support (still in Preview)** – Adds guardrails for views by disabling unsupported features. - **Externally managed tables** – Lets you exclude specific tables from Prisma Migrate while still querying them via Prisma Client. - **Prisma Postgres** - **Extension support for Prisma Postgres** – Prisma Postgres now supports `pgvector`, `pg_search`, `pg_stat_statements`, `citext`, `pg_trgm`, `fuzzystrmatch`, and `unaccent`. If you don't see the extension you need, you can [request it here](https://pris.ly/i-want-extensions). Extensions only work on *new* instances, if you want to use any of them on your existing instance, [reach out to us](mailto:support@prisma.io). - **Management API for Prisma Postgres** – REST API to provision, delete, and manage Prisma Postgres instances programmatically, perfect for CI/CD and scripting workflows. - **GitHub Actions for Prisma Postgres** – Actions for creating and deleting databases in CI/CD workflows, available on GitHub Marketplace. - **New CLI: `npx create-db`** – Instantly spin up a new Postgres database—no authentication required. ### [`v6.13.0`](https://redirect.github.com/prisma/prisma/releases/tag/6.13.0) [Compare Source](https://redirect.github.com/prisma/prisma/compare/6.12.0...6.13.0) Today, we are excited to share the `6.13.0` stable release 🎉 **🌟 Star this repo for notifications about new releases, bug fixes & features — or [follow us on X](https://pris.ly/x)!** #### Highlights In this ORM release, we’re moving the Prisma Config file and the multi-schema feature into [General Availability](https://www.prisma.io/docs/orm/more/releases#generally-available-ga). This means these features now are fully production-ready and we’re looking forward to seeing what you are going to build with them! Additionally, support for SQL views is getting an important update to further stabilize its API. ##### Configuring Prisma via Prisma Config is now Generally Available The [`prisma.config.ts`](https://www.prisma.io/docs/orm/reference/prisma-config-reference) file is Prisma ORM’s native way to provide configuration options for your project. It currently lets you specify: - the locations for various Prisma-related assets, such as your: - Prisma schema file - migrations - SQL view definitions - TypedSQL queries - a `seed` command to populate your database based on some executable script - externally managed tables (see below) - the driver adapters to be used by the Prisma CLI when interacting with your database Here’s an example Prisma Config file that specified custom locations for various project assets in and a seed script inside a `db` directory: ```tsx import path from "node:path"; import { defineConfig } from "prisma/config"; export default defineConfig({ schema: path.join("db", "schema.prisma"), migrations: { path: path.join("db", "migrations"), seed: "tsx db/seed.ts" } }); ``` Note that you’ll also see warning now if you defined a `prisma.seed` command in `package.json`. We’re excited to move the [`prisma.config.ts`](https://www.prisma.io/docs/orm/reference/prisma-config-reference) file into General Availability. If you used it before in your projects, you can now drop `earlyAccess` from its options: ```diff import { defineConfig } from "prisma/config"; export default defineConfig({ - earlyAccess: true, }); ``` There still are and will be fields on the Prisma Config object that are Early Access or Preview features. To opt-into these, you’ll need to explicitly declare them via a new `experimental` field. For example, usage of `adapters` is currently still in Preview: ```tsx import { defineConfig } from "prisma/config"; export default defineConfig({ experimental: { adapter: true, }, // requires `experimental.adapter` adapter: async () => { // ... }, }); ``` Finally, the Prisma Config file now also supports various file extensions so it fits neatly into your individual project setups: `.js`, `.ts`, `.mjs`, `.cjs`, `.mts`, `.cts`. It also can be defined as `.config/prisma.${extension}`, where `extension` is the same one as file extensions above. 📚 Learn more [in the docs](https://www.prisma.io/docs/orm/reference/prisma-config-reference). ##### Using multiple schemas in now Generally Available Databases like PostgreSQL or SQL Server provide a way to logically organize your tables in dedicated namespaces called *schemas*. In Prisma ORM, you can assign tables to various schemas via the `@@&#8203;schema` attribute: ```tsx datasource db { provider = "postgresql" url = env("DATABASE_URL") schemas = ["base", "shop"] } model User { id Int @&#8203;id orders Order[] @&#8203;@&#8203;schema("base") } model Order { id Int @&#8203;id user User @&#8203;relation(fields: [userId], references: [id]) userId Int @&#8203;@&#8203;schema("shop") } ``` This feature has moved into General Availability, so if you were using it before, you can now drop the `multiSchema` feature flag from the `generator` block in your Prisma schema: ```diff generator client { // ... - previewFeatures = ["multiSchema"] } ``` 📚 Learn more [in the docs](https://www.prisma.io/docs/orm/prisma-schema/data-model/multi-schema). ##### More robust support for SQL views (Preview) SQL views are *virtual* tables created by a query. Unlike regular tables, views do not store data themselves; instead, they represent the result of a stored SQL query that runs whenever the view is accessed. We continue to improve support for SQL views, making them more reliable and better aligned with Prisma’s features. In this release, we ensured that `@id`, `@index` and `@unique` can’t be used on a `view` block in the Prisma schema. Without these attributes, several other features in Prisma Client or the Prisma schema don’t make sense any more either, so we made sure that they can’t be used with views: - disabled `findUnique` queries and cursor-based pagination in Prisma Client - disallowed writes and implicit ordering for views in Prisma Client - disallowed relationships involving views in Prisma Schema This will align the API surface of Prisma ORM with the actual capabilities of SQL views and adds guardrails so you can use views with more confidence! 📚 Learn more [in the docs](https://www.prisma.io/docs/orm/prisma-schema/data-model/views). ##### Externally managed tables In some situations, you may not want Prisma ORM to be “responsible” for specific tables in your database because they’re being managed by a different team in your organization or an external service. In these cases, you still may want to quert these tables using Prisma Client but never want Prisma Migrate to make any changes to them. In this release, we’re introducing externally managed tables that will be: - ignored by Prisma Migrate - queryable via Prisma Client You can specify which tables should be ignored by Prisma Migrate using the `tables` option in `prisma.config.ts`: ```tsx // prisma.config.ts export default defineConfig({ tables: { external: [ "users", ] }, ... }) ``` A typical use case for this is the [`users` table from Supabase](https://supabase.com/docs/guides/auth/managing-user-data) which you never want be changed by Prisma Migrate but still may want to query with Prisma Client. 📚 Learn more [in the docs](https://www.prisma.io/docs/orm/prisma-schema/data-model/externally-managed-tables). #### Other news ##### [`pgvector`](https://redirect.github.com/pgvector/pgvector) extension support for Prisma Postgres (Early Access) In this release, we’ve implemented a highly popular feature request for Prisma Postgres: [Early Access](https://www.prisma.io/docs/platform/maturity-levels#early-access) support for the [`pgvector`](https://redirect.github.com/pgvector/pgvector) PostgreSQL extension along with several other popular Postgres extensions! It enables efficient storage and querying of high-dimensional vector embeddings directly in a Postgres database and thus is perfect for building AI-driven applications. `pgvector` essentially allows developers to perform similarity search (e.g., for recommendation systems or semantic search) using standard SQL, eliminating the need for a separate vector database. Native support for `pgvector` in Prisma ORM is going to follow soon, until then you can use `pgvector` via [custom migrations](https://www.prisma.io/docs/orm/prisma-migrate/workflows/customizing-migrations) and [TypedSQL](https://www.prisma.io/blog/announcing-typedsql-make-your-raw-sql-queries-type-safe-with-prisma-orm). > **Note**: For now, `pgvector` is only available on *newly created* Prisma Postgres instances. It will be rolled out for *existing* instances soon. In addition to `pgvector`, Prisma Postgres now includes Early Access support for `pg_search`, `pg_stat_statements`, `citext`, `pg_trgm`, `fuzzystrmatch`, and `unaccent`. If you don’t see the extension you need, you can [request it here](https://pris.ly/i-want-extensions). 📚 Learn more [in the docs](https://www.prisma.io/docs/postgres/database/postgres-extensions). ##### Manage Prisma Postgres programmatically via an API Whether you need a way to quickly provision a Prisma Postgres instance in your CI/CD workflows, want to attach a fresh database to a preview branch of your app or even want to offer Prisma Postgres to your own users—our new Management API has you covered! It’s shaped as a familiar REST API so you can programmatically take care of your database workflows: Provision or delete Prisma Postgres instances, retrieve or create connection strings and manage entire projects in [Prisma Console](https://console.prisma.io/). 📚 Learn more [in the docs](https://www.prisma.io/docs/postgres/database/api-reference/management-api). ##### CI/CD GitHub Actions for Prisma Postgres available on GitHub Marketplace Based on the Management API, we’ve also published two templates for GitHub Actions that you can use in your own CI/CD setups: - [**Create Prisma Postgres Database Action**](https://redirect.github.com/marketplace/actions/create-prisma-postgres-database) - [**Delete Prisma Postgres Database Action**](https://redirect.github.com/marketplace/actions/delete-prisma-postgres-database) These Actions serve as the foundational building blocks for integrating Prisma Postgres into CI/CD pipelines. ![Prisma Postgres GH Actions](https://redirect.github.com/user-attachments/assets/e319ab2e-70c3-4dc2-ae88-ec6e67deb693) They enable workflows like provisioning databases on every pull request, running integration tests against real instances, and managing database lifecycles end-to-end. We’ve included several examples in the README to help users get started quickly. The setup is straightforward, and these Actions are designed to plug into user's workflows with minimal effort. ##### Instant Postgres with `npx create-db` — no auth required We launched a new CLI command that allows you to spin up a new database within seconds: ```bash npx create-db # no auth required ``` The command doesn’t require authentication, so you can play around with your database without any initial hurdles! ![create-db](https://redirect.github.com/user-attachments/assets/b1e3ba6f-0a48-4b6f-8621-247943717903) Your instance will be automatically deleted after 24 hours *but* you can claim it and put it into your [Prisma Console](https://console.prisma.io) account if you want to keep using it after that period. Visit [the docs](https://www.prisma.io/docs/postgres/introduction/npx-create-db) to learn more. ##### New navigation UI for [Prisma Console](https://console.prisma.io/) The [Prisma Console](https://console.prisma.io) got a little makeover, including a new design for navigating and managing your projects and their databases. This makes common workflows like *creating new projects*, *navigating between projects and databases*, as well as *accessing project settings* a lot more smooth. ![New Console UI](https://redirect.github.com/user-attachments/assets/7509abd2-8297-466b-bcee-57318f0e13bb) We’re eager to hear your feedback, [let us know on X](https://pris.ly/x) what you think of the new UI. #### Enterprise support Thousands of teams use Prisma and many of them already tap into our Enterprise & Agency Support Program for hands-on help with everything from schema integrations and performance tuning to security and compliance. With this program you also get priority issue triage and bug fixes, expert scalability advice, and custom training so that your Prisma-powered apps stay rock-solid at any scale. Learn more or join: <https://prisma.io/enterprise>. </details> <details> <summary>aquasecurity/setup-trivy (aquasecurity/setup-trivy)</summary> ### [`v0.2.4`](https://redirect.github.com/aquasecurity/setup-trivy/releases/tag/v0.2.4) [Compare Source](https://redirect.github.com/aquasecurity/setup-trivy/compare/v0.2.3...v0.2.4) #### What's Changed - pin actions/checkout and actions/cache by [@&#8203;stefan0xC](https://redirect.github.com/stefan0xC) in [#&#8203;22](https://redirect.github.com/aquasecurity/setup-trivy/pull/22) #### New Contributors - [@&#8203;stefan0xC](https://redirect.github.com/stefan0xC) made their first contribution in [#&#8203;22](https://redirect.github.com/aquasecurity/setup-trivy/pull/22) **Full Changelog**: <aquasecurity/setup-trivy@v0.2.3...v0.2.4> </details> <details> <summary>eslint/eslint (eslint)</summary> ### [`v9.34.0`](https://redirect.github.com/eslint/eslint/compare/v9.33.0...b8875f67a7bc99824f19147f4a669be7e98f3eee) [Compare Source](https://redirect.github.com/eslint/eslint/compare/v9.33.0...v9.34.0) ### [`v9.33.0`](https://redirect.github.com/eslint/eslint/compare/v9.32.0...a90d7c4fe5ef83054e29d21d7ffb442103429d03) [Compare Source](https://redirect.github.com/eslint/eslint/compare/v9.32.0...v9.33.0) </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v3.30.1`](https://redirect.github.com/github/codeql-action/compare/v3.30.0...v3.30.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.30.0...v3.30.1) ### [`v3.30.0`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.11...v3.30.0) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.30.0 - 01 Sep 2025 - Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. [#&#8203;3054](https://redirect.github.com/github/codeql-action/pull/3054) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.0/CHANGELOG.md) for more information. ### [`v3.29.11`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.11) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.10...v3.29.11) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.29.11 - 21 Aug 2025 - Update default CodeQL bundle version to 2.22.4. [#&#8203;3044](https://redirect.github.com/github/codeql-action/pull/3044) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.11/CHANGELOG.md) for more information. ### [`v3.29.10`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.10) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.9...v3.29.10) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.29.10 - 18 Aug 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.10/CHANGELOG.md) for more information. ### [`v3.29.9`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.8...v3.29.9) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.29.9 - 12 Aug 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.9/CHANGELOG.md) for more information. ### [`v3.29.8`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.7...v3.29.8) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.29.8 - 08 Aug 2025 - Fix an issue where the Action would autodetect unsupported languages such as HTML. [#&#8203;3015](https://redirect.github.com/github/codeql-action/pull/3015) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.8/CHANGELOG.md) for more information. ### [`v3.29.7`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.6...v3.29.7) This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6. ### [`v3.29.6`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.6) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.5...v3.29.6) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.29.6 - 07 Aug 2025 - The `cleanup-level` input to the `analyze` Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. [#&#8203;2999](https://redirect.github.com/github/codeql-action/pull/2999) - Update default CodeQL bundle version to 2.22.3. [#&#8203;3000](https://redirect.github.com/github/codeql-action/pull/3000) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.6/CHANGELOG.md) for more information. </details> <details> <summary>actions/node-versions (node)</summary> ### [`v22.19.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.19.0-17311483029): 22.19.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.18.0-16666198358...22.19.0-17311483029) Node.js 22.19.0 ### [`v22.18.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.18.0-16666198358): 22.18.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.17.1-16309770702...22.18.0-16666198358) Node.js 22.18.0 ### [`v22.17.1`](https://redirect.github.com/actions/node-versions/releases/tag/22.17.1-16309770702): 22.17.1 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.17.0-15866718879...22.17.1-16309770702) Node.js 22.17.1 ### [`v22.17.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.17.0-15866718879): 22.17.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.16.0-15177438473...22.17.0-15866718879) Node.js 22.17.0 ### [`v22.16.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.16.0-15177438473): 22.16.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.15.1-15035854612...22.16.0-15177438473) Node.js 22.16.0 ### [`v22.15.1`](https://redirect.github.com/actions/node-versions/releases/tag/22.15.1-15035854612): 22.15.1 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.15.0-14621731016...22.15.1-15035854612) Node.js 22.15.1 ### [`v22.15.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.15.0-14621731016): 22.15.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.14.0-13265982013...22.15.0-14621731016) Node.js 22.15.0 ### [`v22.14.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.14.0-13265982013): 22.14.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.13.1-12900459766...22.14.0-13265982013) Node.js 22.14.0 ### [`v22.13.1`](https://redirect.github.com/actions/node-versions/releases/tag/22.13.1-12900459766): 22.13.1 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.13.0-12671059536...22.13.1-12900459766) Node.js 22.13.1 ### [`v22.13.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.13.0-12671059536): 22.13.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.12.0-12152383658...22.13.0-12671059536) Node.js 22.13.0 ### [`v22.12.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.12.0-12152383658): 22.12.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.11.0-11593095476...22.12.0-12152383658) Node.js 22.12.0 ### [`v22.11.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.11.0-11593095476): 22.11.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.10.0-11377615849...22.11.0-11593095476) Node.js 22.11.0 ### [`v22.10.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.10.0-11377615849): 22.10.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.9.0-10914884886...22.10.0-11377615849) Node.js 22.10.0 ### [`v22.9.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.9.0-10914884886): 22.9.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.8.0-10685632420...22.9.0-10914884886) Node.js 22.9.0 ### [`v22.8.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.8.0-10685632420): 22.8.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.7.0-10511334152...22.8.0-10685632420) Node.js 22.8.0 ### [`v22.7.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.7.0-10511334152): 22.7.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.6.0-10277432289...22.7.0-10511334152) Node.js 22.7.0 ### [`v22.6.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.6.0-10277432289): 22.6.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.5.1-10010673511...22.6.0-10277432289) Node.js 22.6.0 ### [`v22.5.1`](https://redirect.github.com/actions/node-versions/releases/tag/22.5.1-10010673511): 22.5.1 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.5.0-9985144103...22.5.1-10010673511) Node.js 22.5.1 ### [`v22.5.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.5.0-9985144103): 22.5.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.4.1-9860948056...22.5.0-9985144103) Node.js 22.5.0 ### [`v22.4.1`](https://redirect.github.com/actions/node-versions/releases/tag/22.4.1-9860948056): 22.4.1 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.4.0-9766506602...22.4.1-9860948056) Node.js 22.4.1 ### [`v22.4.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.4.0-9766506602): 22.4.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.3.0-9569309553...22.4.0-9766506602) Node.js 22.4.0 ### [`v22.3.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.3.0-9569309553): 22.3.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.2.0-9105861751...22.3.0-9569309553) Node.js 22.3.0 ### [`v22.2.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.2.0-9105861751): 22.2.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.1.0-8926142033...22.2.0-9105861751) Node.js 22.2.0 ### [`v22.1.0`](https://redirect.github.com/actions/node-versions/releases/tag/22.1.0-8926142033): 22.1.0 [Compare Source](https://redirect.github.com/actions/node-versions/compare/22.0.0-8879734543...22.1.0-8926142033) Node.js 22.1.0 </details> <details> <summary>privatenumber/tsx (tsx)</summary> ### [`v4.20.5`](https://redirect.github.com/privatenumber/tsx/releases/tag/v4.20.5) [Compare Source](https://redirect.github.com/privatenumber/tsx/compare/v4.20.4...v4.20.5) ##### Bug Fixes - handle ambiguous packages ([796053a](https://redirect.github.com/privatenumber/tsx/commit/796053a6473898bf02283e90dea35a8ff537fa10)) *** This release is also available on: - [npm package (@&#8203;latest dist-tag)](https://www.npmjs.com/package/tsx/v/4.20.5) ### [`v4.20.4`](https://redirect.github.com/privatenumber/tsx/compare/v4.20.3...a639836fad4e60dbda6498b7851b6890e0c60a08) [Compare Source](https://redirect.github.com/privatenumber/tsx/compare/v4.20.3...v4.20.4) </details> <details> <summary>typescript-eslint/typescript-eslint (typescript-eslint)</summary> ### [`v8.41.0`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8410-2025-08-25) [Compare Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.40.0...v8.41.0) This was a version bump only for typescript-eslint to align it with other projects, there were no code changes. You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. ### [`v8.40.0`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8400-2025-08-18) [Compare Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.39.1...v8.40.0) ##### 🩹 Fixes - **typescript-eslint:** export `plugin`, `parser`, and `configs` that are compatible with both `defineConfig()` and `tseslint.config()` ([#&#8203;11475](https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11475)) ##### ❤️ Thank You - Kirk Waiblinger [@&#8203;kirkwaiblinger](https://redirect.github.com/kirkwaiblinger) You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. ### [`v8.39.1`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8391-2025-08-11) [Compare Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.39.0...v8.39.1) ##### 🩹 Fixes - **typescript-eslint:** handle `file://` urls in stack trace when inferring `tsconfigRootDir` ([#&#8203;11464](https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11464)) ##### ❤️ Thank You - Kirk Waiblinger [@&#8203;kirkwaiblinger](https://redirect.github.com/kirkwaiblinger) You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. ### [`v8.39.0`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8390-2025-08-04) [Compare Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.38.0...v8.39.0) ##### 🚀 Features - update to TypeScript 5.9.2 ([#&#8203;11445](https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11445)) ##### ❤️ Thank You - Brad Zacher [@&#8203;bradzacher](https://redirect.github.com/bradzacher) You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "on Sunday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/8hobbies/commitrack). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuOTcuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent bad234d commit b075271

File tree

14 files changed

+1828
-704
lines changed

14 files changed

+1828
-704
lines changed

.github/workflows/dockerfile.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
- name: Use Node.js
3838
uses: actions/setup-node@v5.0.0
3939
with:
40-
node-version: 22
40+
node-version: 22.20.0
4141
cache: "npm"
4242

4343
- name: Install npm dependencies

.github/workflows/lint.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
- name: Use Node.js
3535
uses: actions/setup-node@v5.0.0
3636
with:
37-
node-version: 22
37+
node-version: 22.20.0
3838
cache: "npm"
3939

4040
- name: Install Dependencies

.github/workflows/runtime.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
- name: Use Node.js
3838
uses: actions/setup-node@v5.0.0
3939
with:
40-
node-version: 22
40+
node-version: 22.20.0
4141
cache: "npm"
4242

4343
- name: Install Dependencies

.github/workflows/trivy.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -37,12 +37,12 @@ jobs:
3737
uses: actions/checkout@v5.0.0
3838

3939
- name: Install Trivy
40-
uses: aquasecurity/setup-trivy@v0.2.3
40+
uses: aquasecurity/setup-trivy@v0.2.4
4141

4242
- name: Use Node.js
4343
uses: actions/setup-node@v5.0.0
4444
with:
45-
node-version: 22
45+
node-version: 22.20.0
4646
cache: "npm"
4747

4848
- name: Install npm dependencies
@@ -55,13 +55,13 @@ jobs:
5555
continue-on-error: true
5656

5757
- name: Upload Trivy fs scan results to GitHub Security tab
58-
uses: github/codeql-action/upload-sarif@v3.29.5
58+
uses: github/codeql-action/upload-sarif@v3.30.3
5959
with:
6060
category: "trivy-fs"
6161
sarif_file: "fs.sarif"
6262

6363
- name: Upload Trivy image scan results to GitHub Security tab
64-
uses: github/codeql-action/upload-sarif@v3.29.5
64+
uses: github/codeql-action/upload-sarif@v3.30.3
6565
with:
6666
category: "trivy-image"
6767
sarif_file: "image.sarif"

docker-compose.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,7 @@ services:
6161
- commitrack
6262

6363
cache:
64-
image: docker.io/redis:8.0.3-bookworm@sha256:399d5066615b74d5ce68ac402bea1548cb3103317eae65df02377e009860d6bc
64+
image: docker.io/redis:8.2.1-bookworm@sha256:acb90ced0bd769b7c04cb4c32c4494ba7b3e0ee068bdbfff0eeb0d31c2a21078
6565
container_name: commitrack-cache
6666
ports:
6767
- "6379:6379"

0 commit comments

Comments
 (0)