Skip to content

Bump the dependencies group with 9 updates#148

Merged
github-actions[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/dependencies-06e6d7f495
Oct 6, 2025
Merged

Bump the dependencies group with 9 updates#148
github-actions[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/dependencies-06e6d7f495

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Oct 6, 2025

Bumps the dependencies group with 9 updates:

Package From To
dotenv 17.2.2 17.2.3
@types/node 24.5.2 24.7.0
cross-env 10.0.0 10.1.0
typescript 5.9.2 5.9.3
vite 7.1.7 7.1.9
@aws-sdk/client-s3 3.896.0 3.901.0
@aws-sdk/lib-storage 3.896.0 3.903.0
@aws-sdk/s3-request-presigner 3.896.0 3.901.0
@google-cloud/storage 7.17.1 7.17.2

Updates dotenv from 17.2.2 to 17.2.3

Changelog

Sourced from dotenv's changelog.

17.2.3 (2025-09-29)

Changed

  • Fixed typescript error definition (#912)
Commits

Updates @types/node from 24.5.2 to 24.7.0

Commits

Updates cross-env from 10.0.0 to 10.1.0

Release notes

Sourced from cross-env's releases.

v10.1.0

10.1.0 (2025-09-29)

Features

  • add support for default value syntax (152ae6a)

For example:

"dev:server": "cross-env wrangler dev --port ${PORT:-8787}",

If PORT is already set, use that value, otherwise fallback to 8787.

Learn more about Shell Parameter Expansion

Commits

Updates typescript from 5.9.2 to 5.9.3

Release notes

Sourced from typescript's releases.

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

Commits
  • c63de15 Bump version to 5.9.3 and LKG
  • 8428ca4 🤖 Pick PR #62438 (Fix incorrectly ignored dts file fr...) into release-5.9 (#...
  • a131cac 🤖 Pick PR #62351 (Add missing Float16Array constructo...) into release-5.9 (#...
  • 0424333 🤖 Pick PR #62423 (Revert PR 61928) into release-5.9 (#62425)
  • bdb641a 🤖 Pick PR #62311 (Fix parenthesizer rules for manuall...) into release-5.9 (#...
  • 0d9b9b9 🤖 Pick PR #61978 (Restructure CI to prepare for requi...) into release-5.9 (#...
  • 2dce0c5 Intentionally regress one buggy declaration output to an older version (#62163)
  • See full diff in compare view

Updates vite from 7.1.7 to 7.1.9

Release notes

Sourced from vite's releases.

v7.1.9

Please refer to CHANGELOG.md for details.

v7.1.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.1.9 (2025-10-03)

Reverts

7.1.8 (2025-10-02)

Bug Fixes

Documentation

Miscellaneous Chores

Commits

Updates @aws-sdk/client-s3 from 3.896.0 to 3.901.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.901.0

3.901.0(2025-10-01)

Chores
Documentation Changes
  • client-ecs: This is a documentation only Amazon ECS release that adds additional information for health checks. (a5652334)
  • client-database-migration-service: This is a doc-only update, revising text for kms-key-arns. (629c6306)
New Features
  • client-chime-sdk-meetings: Add support to receive dual stack MediaPlacement URLs in Chime Meetings SDK (c32ced42)
  • client-cleanroomsml: This release introduces data access budgets to view how many times an input channel can be used for ML jobs in a collaboration. (a6cc054b)
  • client-cleanrooms: This release introduces data access budgets to control how many times a table can be used for queries and jobs in a collaboration. (783dbc10)
  • client-pcs: Added the UpdateCluster API action to modify cluster configurations, and Slurm custom settings for queues. (3b9d480e)
  • client-ivs-realtime: Remove incorrect ReadOnly trait on IVS RealTime ImportPublicKey API (8b79cdc1)

For list of updated packages, view updated-packages.md in assets-3.901.0.zip

v3.900.0

3.900.0(2025-09-30)

Chores
Documentation Changes
  • client-quicksight: added warnings to a few CLI pages (1ea0f889)
New Features
  • clients: update client endpoints as of 2025-09-30 (453bf08d)
  • client-customer-profiles: This release introduces ListProfileHistoryRecords and GetProfileHistoryRecord APIs for comprehensive profile history tracking with complete audit trails of creation, updates, merges, deletions, and data ingestion events. (a39cb127)
  • client-rds: Enhanced RDS error handling: Added DBProxyEndpointNotFoundFault, DBShardGroupNotFoundFault, KMSKeyNotAccessibleFault for snapshots/restores/backups, NetworkTypeNotSupported, StorageTypeNotSupportedFault for restores, and granular state validation faults. Changed DBInstanceNotReadyFault to HTTP 400. (a6d4eb28)
  • client-datasync: Added support for FIPS VPC endpoints in FIPS-enabled AWS Regions. (def03385)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.901.0 (2025-10-01)

Note: Version bump only for package @​aws-sdk/client-s3

3.899.0 (2025-09-29)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates @aws-sdk/lib-storage from 3.896.0 to 3.903.0

Release notes

Sourced from @​aws-sdk/lib-storage's releases.

v3.903.0

3.903.0(2025-10-03)

Chores
New Features
  • client-qconnect: Updated Amazon Q in Connect APIs to support Email Contact Recommendations. (e8840367)
  • client-medialive: AWS Elemental MediaLive enables Mediapackage V2 users to configure ID3, KLV, Nielsen ID3, and Segment Length related parameters through the Mediapackage output group. (5187cdb8)
  • client-cleanrooms: Added support for reading data sources across regions, and results delivery to allowedlisted regions. (77935070)
  • client-payment-cryptography-data: Added a new API - translateKeyMaterial; allows keys wrapped by ECDH derived keys to be rewrapped under a static AES keyblock without first importing the key into the service. (efdc7091)
Tests
  • lib-storage: example of how to mock requests for MPU (#7378) (3352e3ae)

For list of updated packages, view updated-packages.md in assets-3.903.0.zip

v3.902.0

3.902.0(2025-10-02)

Chores
Documentation Changes
  • client-guardduty: Updated descriptions for the Location parameter in CreateTrustedEntitySet and CreateThreatEntitySet. (3d2d565a)
New Features
  • client-dynamodb: Add support for dual-stack account endpoint generation (14f648bb)
  • client-connectcases: New Search All Related Items API enables searching related items across cases (4535c435)
  • client-cloudformation: Add new warning type 'EXCLUDED_RESOURCES' (228e3628)
  • client-synthetics: Adds support to configure canaries with pre-configured blueprint code on supported runtime versions. This behavior can be controlled via the new BlueprintTypes property exposed in the CreateCanary and UpdateCanary APIs. (b9d0925c)

For list of updated packages, view updated-packages.md in assets-3.902.0.zip

... (truncated)

Changelog

Sourced from @​aws-sdk/lib-storage's changelog.

3.903.0 (2025-10-03)

Note: Version bump only for package @​aws-sdk/lib-storage

3.901.0 (2025-10-01)

Note: Version bump only for package @​aws-sdk/lib-storage

3.900.0 (2025-09-30)

Bug Fixes

  • lib-storage: use input parameter object size information if available (#7385) (45d5730)

3.899.0 (2025-09-29)

Bug Fixes

  • lib-storage: respect user-provided partSize option for Upload (#7381) (31fc996)
Commits
  • 41a8028 Publish v3.903.0
  • 3352e3a test(lib-storage): example of how to mock requests for MPU (#7378)
  • 5befda8 Publish v3.901.0
  • 0a418cc chore: bump '@smithy/*' versions (#7391)
  • 0dcf5be Publish v3.900.0
  • 45d5730 fix(lib-storage): use input parameter object size information if available (#...
  • 99ff240 Publish v3.899.0
  • 31fc996 fix(lib-storage): respect user-provided partSize option for Upload (#7381)
  • ad1514d chore(codegen): sync for separating error schema & ctor (#7377)
  • See full diff in compare view

Updates @aws-sdk/s3-request-presigner from 3.896.0 to 3.901.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.901.0

3.901.0(2025-10-01)

Chores
Documentation Changes
  • client-ecs: This is a documentation only Amazon ECS release that adds additional information for health checks. (a5652334)
  • client-database-migration-service: This is a doc-only update, revising text for kms-key-arns. (629c6306)
New Features
  • client-chime-sdk-meetings: Add support to receive dual stack MediaPlacement URLs in Chime Meetings SDK (c32ced42)
  • client-cleanroomsml: This release introduces data access budgets to view how many times an input channel can be used for ML jobs in a collaboration. (a6cc054b)
  • client-cleanrooms: This release introduces data access budgets to control how many times a table can be used for queries and jobs in a collaboration. (783dbc10)
  • client-pcs: Added the UpdateCluster API action to modify cluster configurations, and Slurm custom settings for queues. (3b9d480e)
  • client-ivs-realtime: Remove incorrect ReadOnly trait on IVS RealTime ImportPublicKey API (8b79cdc1)

For list of updated packages, view updated-packages.md in assets-3.901.0.zip

v3.900.0

3.900.0(2025-09-30)

Chores
Documentation Changes
  • client-quicksight: added warnings to a few CLI pages (1ea0f889)
New Features
  • clients: update client endpoints as of 2025-09-30 (453bf08d)
  • client-customer-profiles: This release introduces ListProfileHistoryRecords and GetProfileHistoryRecord APIs for comprehensive profile history tracking with complete audit trails of creation, updates, merges, deletions, and data ingestion events. (a39cb127)
  • client-rds: Enhanced RDS error handling: Added DBProxyEndpointNotFoundFault, DBShardGroupNotFoundFault, KMSKeyNotAccessibleFault for snapshots/restores/backups, NetworkTypeNotSupported, StorageTypeNotSupportedFault for restores, and granular state validation faults. Changed DBInstanceNotReadyFault to HTTP 400. (a6d4eb28)
  • client-datasync: Added support for FIPS VPC endpoints in FIPS-enabled AWS Regions. (def03385)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.901.0 (2025-10-01)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.899.0 (2025-09-29)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

Commits

Updates @google-cloud/storage from 7.17.1 to 7.17.2

Release notes

Sourced from @​google-cloud/storage's releases.

v7.17.2

7.17.2 (2025-10-06)

Bug Fixes

  • Common Service: should retry a request failed (#2652) (b38b5d2)
  • Implement path containment to prevent traversal attacks (#2654) (08d7abf)
Changelog

Sourced from @​google-cloud/storage's changelog.

7.17.2 (2025-10-06)

Bug Fixes

  • Common Service: should retry a request failed (#2652) (b38b5d2)
  • Implement path containment to prevent traversal attacks (#2654) (08d7abf)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [dotenv](https://github.com/motdotla/dotenv) | `17.2.2` | `17.2.3` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.5.2` | `24.7.0` |
| [cross-env](https://github.com/kentcdodds/cross-env) | `10.0.0` | `10.1.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.2` | `5.9.3` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.1.7` | `7.1.9` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.896.0` | `3.901.0` |
| [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.896.0` | `3.903.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.896.0` | `3.901.0` |
| [@google-cloud/storage](https://github.com/googleapis/nodejs-storage) | `7.17.1` | `7.17.2` |


Updates `dotenv` from 17.2.2 to 17.2.3
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.2.2...v17.2.3)

Updates `@types/node` from 24.5.2 to 24.7.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `cross-env` from 10.0.0 to 10.1.0
- [Release notes](https://github.com/kentcdodds/cross-env/releases)
- [Changelog](https://github.com/kentcdodds/cross-env/blob/main/CHANGELOG.md)
- [Commits](kentcdodds/cross-env@v10.0.0...v10.1.0)

Updates `typescript` from 5.9.2 to 5.9.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](microsoft/TypeScript@v5.9.2...v5.9.3)

Updates `vite` from 7.1.7 to 7.1.9
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.1.9/packages/vite)

Updates `@aws-sdk/client-s3` from 3.896.0 to 3.901.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.901.0/clients/client-s3)

Updates `@aws-sdk/lib-storage` from 3.896.0 to 3.903.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.903.0/lib/lib-storage)

Updates `@aws-sdk/s3-request-presigner` from 3.896.0 to 3.901.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.901.0/packages/s3-request-presigner)

Updates `@google-cloud/storage` from 7.17.1 to 7.17.2
- [Release notes](https://github.com/googleapis/nodejs-storage/releases)
- [Changelog](https://github.com/googleapis/nodejs-storage/blob/main/CHANGELOG.md)
- [Commits](googleapis/nodejs-storage@v7.17.1...v7.17.2)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 17.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 24.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: cross-env
  dependency-version: 10.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: vite
  dependency-version: 7.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.901.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@aws-sdk/lib-storage"
  dependency-version: 3.903.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.901.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@google-cloud/storage"
  dependency-version: 7.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 6, 2025
@github-actions github-actions Bot enabled auto-merge (squash) October 6, 2025 16:09
@github-actions github-actions Bot merged commit 79c3aca into main Oct 6, 2025
8 of 13 checks passed
@github-actions github-actions Bot deleted the dependabot/npm_and_yarn/dependencies-06e6d7f495 branch October 6, 2025 16:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants