Skip to content

chore(deps): bump the patch-updates group across 1 directory with 11 updates#314

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/patch-updates-db824c9661
Open

chore(deps): bump the patch-updates group across 1 directory with 11 updates#314
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/patch-updates-db824c9661

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Bumps the patch-updates group with 11 updates in the / directory:

Package From To
@hono/node-server 1.19.9 1.19.11
eslint-plugin-import-x 4.16.1 4.16.2
turbo 2.8.12 2.8.21
mongodb 7.1.0 7.1.1
sql.js 1.14.0 1.14.1
@types/sql.js 1.4.9 1.4.11
handlebars 4.7.8 4.7.9
fumadocs-mdx 14.2.9 14.2.11
postcss 8.5.6 8.5.8
react-router 7.13.1 7.13.2
react-router-dom 7.13.1 7.13.2

Updates @hono/node-server from 1.19.9 to 1.19.11

Release notes

Sourced from @​hono/node-server's releases.

v1.19.11

What's Changed

Full Changelog: honojs/node-server@v1.19.10...v1.19.11

v1.19.10

Security Fix

Fixed an authorization bypass in Serve Static Middleware caused by inconsistent URL decoding (%2F handling) between the router and static file resolution. Users of Serve Static Middleware are encouraged to upgrade to this version.

See GHSA-wc8c-qw6v-h7f6 for details.

Commits

Updates eslint-plugin-import-x from 4.16.1 to 4.16.2

Release notes

Sourced from eslint-plugin-import-x's releases.

v4.16.2

Patch Changes

  • #457 1da4043 Thanks @​SukkaW! - Make the no-unused-modules rule no-op on ESLint 10 or later for now before we can implement an alternative. A warning message about this behavior is added, and can be suppressed with the new suppressMissingFileEnumeratorAPIWarning rule option (import-x/no-unused-modules: ['error', { suppressMissingFileEnumeratorAPIWarning: true }]).

  • #450 a51be0f Thanks @​andrewgaun! - fix(deps): Bumping minimatch 10 version to avoid dependency with a critical vulnerability

    Updating the minimum minimatch 10 version to 10.1.2 which updates a dependency (@​isaacs/brace-expansion) with a critical vulnerability. See GHSA-7h2j-956f-4vf2

  • #466 b669aca Thanks @​SukkaW! - Make eslint-plugin-import-x compatible with ESLint's defineConfig

  • #434 a3aae61 Thanks @​stepankuzmin! - fix(deps): replace type-fest with @​package-json/types

    PackageJson types are imported in published declaration files (lib/rules/no-extraneous-dependencies.d.ts and lib/utils/read-pkg-up.d.ts), which causes TypeScript compilation errors for consumers who don't have skipLibCheck enabled. Replacing type-fest with the smaller @​package-json/types package ensures the types are available to all consumers while reducing bundle size.

  • #458 60312ee Thanks @​SukkaW! - Bump peer deps version range to include ESLint 10 support

  • #443 b416a8a Thanks @​baevm! - consistent-type-specifier-style: Add exception for TS resolution-mode import attributes

  • #454 d3f8d67 Thanks @​SukkaW! - First step toward ESLint 10 support:

    • sourceType determination now prefers context.languageOptions when possible
    • Ensure context.parserOptions no longer results in crashes with ESLint 10
    • Merge getParser and getParserPath implementations into one getParserOrPath
  • #406 d0a7816 Thanks @​marcalexiei! - fix(package): remove config and rules exports pointing to empty files

Changelog

Sourced from eslint-plugin-import-x's changelog.

4.16.2

Patch Changes

  • #457 1da4043 Thanks @​SukkaW! - Make the no-unused-modules rule no-op on ESLint 10 or later for now before we can implement an alternative. A warning message about this behavior is added, and can be suppressed with the new suppressMissingFileEnumeratorAPIWarning rule option (import-x/no-unused-modules: ['error', { suppressMissingFileEnumeratorAPIWarning: true }]).

  • #450 a51be0f Thanks @​andrewgaun! - fix(deps): Bumping minimatch 10 version to avoid dependency with a critical vulnerability

    Updating the minimum minimatch 10 version to 10.1.2 which updates a dependency (@​isaacs/brace-expansion) with a critical vulnerability. See GHSA-7h2j-956f-4vf2

  • #466 b669aca Thanks @​SukkaW! - Make eslint-plugin-import-x compatible with ESLint's defineConfig

  • #434 a3aae61 Thanks @​stepankuzmin! - fix(deps): replace type-fest with @​package-json/types

    PackageJson types are imported in published declaration files (lib/rules/no-extraneous-dependencies.d.ts and lib/utils/read-pkg-up.d.ts), which causes TypeScript compilation errors for consumers who don't have skipLibCheck enabled. Replacing type-fest with the smaller @​package-json/types package ensures the types are available to all consumers while reducing bundle size.

  • #458 60312ee Thanks @​SukkaW! - Bump peer deps version range to include ESLint 10 support

  • #443 b416a8a Thanks @​baevm! - consistent-type-specifier-style: Add exception for TS resolution-mode import attributes

  • #454 d3f8d67 Thanks @​SukkaW! - First step toward ESLint 10 support:

    • sourceType determination now prefers context.languageOptions when possible
    • Ensure context.parserOptions no longer results in crashes with ESLint 10
    • Merge getParser and getParserPath implementations into one getParserOrPath
  • #406 d0a7816 Thanks @​marcalexiei! - fix(package): remove config and rules exports pointing to empty files

Commits
  • 69ddbba chore: release eslint-plugin-import-x (#407)
  • b669aca fix(#421): defineConfig compatible (#466)
  • 60312ee chore: prepare for ESLint 10 more (#458)
  • 1da4043 refactor: make no-unused-modules no-op on ESLint 10 or later (#457)
  • d801fd7 docs: remove SublimeLinter-eslint mention in README (#432)
  • 1909953 chore(deps): update dependency minimatch to v9.0.8 [security] (#460)
  • b416a8a fix: consistent-type-specifier-style with prefer-inline and TS resolution...
  • a51be0f chore(deps): bumping minimatch 10 to 10.1.2 to avoid dependencies with cr...
  • d3f8d67 refactor: first step toward ESLint 10 support (#454)
  • a3aae61 fix(deps): replace type-fest w/ @package-json/types (#434)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for eslint-plugin-import-x since your current version.


Updates turbo from 2.8.12 to 2.8.21

Release notes

Sourced from turbo's releases.

Turborepo v2.8.21

What's Changed

Docs

eslint

@​turbo/repository

Examples

Changelog

... (truncated)

Commits

Updates mongodb from 7.1.0 to 7.1.1

Release notes

Sourced from mongodb's releases.

v7.1.1

7.1.1 (2026-03-24)

The MongoDB Node.js team is pleased to announce version 7.1.1 of the mongodb package!

Release Notes

Tighten OIDC ALLOWED_HOSTS wildcard matching

The OIDC ALLOWED_HOSTS wildcard handling has been fixed to require full subdomain/path matches for *. and */ entries, preventing partial suffix matches from being incorrectly accepted.

Fixed TCP keep-alive and no-delay settings not being applied on TLS connections

Due to a Node.js bug, tls.connect() silently ignores keepAlive, keepAliveInitialDelay, and noDelay options passed through its constructor. This could cause idle connections - particularly through cloud load balancers like Azure (240s idle timeout) or AWS PrivateLink/NLB - to be dropped unexpectedly due to missing TCP keep-alive probes.

The driver now explicitly calls setKeepAlive() and setNoDelay() on the socket after creation, ensuring these settings are always applied regardless of whether TLS is used.

Bug Fixes

  • NODE-7477: OIDC host allowlist fix (#4896) (237c9ab)
  • NODE-7482: explicitly call setKeepAlive and setNoDelay on socket (#4900) (b14ba21)

Documentation

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

Changelog

Sourced from mongodb's changelog.

7.1.1 (2026-03-23)

Bug Fixes

  • NODE-7477: OIDC host allowlist fix (#4896) (237c9ab)
  • NODE-7482: explicitly call setKeepAlive and setNoDelay on socket (#4900) (b14ba21)
Commits
  • 5e4341e chore(v7.1.x): release 7.1.1 (#4895)
  • b14ba21 fix(NODE-7482): explicitly call setKeepAlive and setNoDelay on socket (#4900)
  • 237c9ab fix(NODE-7477): OIDC host allowlist fix (#4896)
  • fa11559 ci(NODE-7489): pin npm to 11.11.1 for BSON compat tasks (#4901)
  • 66e5cd6 chore(NODE-7480): fix ci issues on release branch (#4899)
  • 639e17c chore(NODE-7476): added release-7.1 config
  • See full diff in compare view

Updates sql.js from 1.14.0 to 1.14.1

Commits

Updates @types/sql.js from 1.4.9 to 1.4.11

Commits

Updates @types/sql.js from 1.4.9 to 1.4.11

Commits

Updates handlebars from 4.7.8 to 4.7.9

Release notes

Sourced from handlebars's releases.

v4.7.9

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.9 - March 26th, 2026

  • fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2
  • fix type "RuntimeOptions" also accepting string partials - eab1d14
  • feat(types): set hash to be a Record<string, any> - de4414d
  • fix non-contiguous program indices - 4512766
  • refactor: rename i to startPartIndex - e497a35
  • security: fix security issues - 68d8df5

Commits

Commits
  • dce542c v4.7.9
  • 8a41389 Update release notes
  • 68d8df5 Fix security issues
  • b2a0831 Fix browser tests
  • 9f98c16 Fix release script
  • 45443b4 Revert "Improve partial indenting performance"
  • 8841a5f Fix CI errors with linting
  • e0137c2 fix: enable shell mode for spawn to resolve Windows EINVAL issue
  • e914d60 Improve rendering performance
  • 7de4b41 Upgrade GitHub Actions checkout and setup-node on 4.x branch
  • Additional commits viewable in compare view

Updates fumadocs-mdx from 14.2.9 to 14.2.11

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@14.2.11

Patch Changes

  • 3144149: Fix dynamic index generation so generated dynamic.ts imports node:path and passes lazy entries to create.doc() / create.docs() as arrays.
  • Updated dependencies [f45d703]
  • Updated dependencies [45aa454]
    • fumadocs-core@16.7.0

fumadocs-mdx@14.2.10

Patch Changes

  • c2678c0: Improve llms.txt generation via remark-llms plugin
  • Updated dependencies [c2678c0]
  • Updated dependencies [417f07a]
  • Updated dependencies [bb07706]
  • Updated dependencies [f065406]
    • fumadocs-core@16.6.17
Commits
  • faf02ff Chore: Bump deps
  • b38168d Version Packages
  • 0ddaa8a CLI: Preserve layout imports for slots
  • 42bf43e OpenAPI: Implement newer JSON Schema spec $ref resolution behaviour
  • 8c6fe9c Docs: rename sidebar tabs to layout tabs
  • 4fd51b7 UI: migrate Base UI
  • 67d6855 Docs: migrate
  • 0c3eda7 UI: clean code
  • 875d88a UI: forward hooks via slots
  • 484da08 UI: introduce slots system
  • Additional commits viewable in compare view

Updates postcss from 8.5.6 to 8.5.8

Release notes

Sourced from postcss's releases.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Changelog

Sourced from postcss's changelog.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Commits

Updates react-router from 7.13.1 to 7.13.2

Release notes

Sourced from react-router's releases.

v7.13.2

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132

Changelog

Sourced from react-router's changelog.

7.13.2

Patch Changes

  • Fix clientLoader.hydrate when an ancestor route is also hydrating a clientLoader (#14835)

  • Fix type error when passing Framework Mode route components using Route.ComponentProps to createRoutesStub (#14892)

  • Fix percent encoding in relative path navigation (#14786)

  • Add future.unstable_passThroughRequests flag (#14775)

    By default, React Router normalizes the request.url passed to your loader, action, and middleware functions by removing React Router's internal implementation details (.data suffixes, index + _routes query params).

    Enabling this flag removes that normalization and passes the raw HTTP request instance to your handlers. This provides a few benefits:

    • Reduces server-side overhead by eliminating multiple new Request() calls on the critical path
    • Allows you to distinguish document from data requests in your handlers base don the presence of a .data suffix (useful for observability purposes)

    If you were previously relying on the normalization of request.url, you can switch to use the new sibling unstable_url parameter which contains a URL instance representing the normalized location:

    // ❌ Before: you could assume there was no `.data` suffix in `request.url`
    export async function loader({ request }: Route.LoaderArgs) {
      let url = new URL(request.url);
      if (url.pathname === "/path") {
        // This check will fail with the flag enabled because the `.data` suffix will
        // exist on data requests
      }
    }
    // ✅ After: use unstable_url for normalized routing logic and request.url
    // for raw routing logic
    export async function loader({ request, unstable_url }: Route.LoaderArgs) {
    if (unstable_url.pathname === "/path") {
    // This will always have the .data suffix stripped
    }
    // And now you can distinguish between document versus data requests
    let isDataRequest = new URL(request.url).pathname.endsWith(".data");
    }

  • Internal refactor to consolidate framework-agnostic/React-specific route type layers - no public API changes (#14765)

  • Sync protocol validation to rsc flows (#14882)

  • Add a new unstable_url: URL parameter to route handler methods (loader, action, middleware, etc.) representing the normalized URL the application is navigating to or fetching, with React Router implementation details removed (.datasuffix, index/_routes query params) (#14775)

    This is being added alongside the new future.unstable_passthroughRequests future flag so that users still have a way to access the normalized URL when that flag is enabled and non-normalized request's are being passed to your handlers. When adopting this flag, you will only need to start leveraging this new parameter if you are relying on the normalization of request.url in your application code.

... (truncated)

Commits
  • aadb56f chore: Update version for release (#14908)
  • c68a9b3 chore: Update version for release (pre) (#14893)
  • 8c3c7ce fix: allow Framework Mode route components to be passed to createRoutesStub (...
  • 1cd923e chore: format
  • 830d3ba Fix percent encoding in relative path navigation (#14786)
  • 8646d39 Align redirect protocol validation in RSC flows (#14882)
  • 7d21b1c Add additional unit test - hydrate fallback rendering for SPA middleware w/o ...
  • 8a10826 docs: fix typo in useNavigate documentation (#14848)
  • bda5bb7 Fix typo in comment (#14844)
  • bbe4a73 chore: format
  • Additional commits viewable in compare view

Updates react-router-dom from 7.13.1 to 7.13.2

Changelog

Sourced from react-router-dom's changelog.

7.13.2

Patch Changes

  • Updated dependencies:
    • react-router@7.13.2
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates

Bumps the patch-updates group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@hono/node-server](https://github.com/honojs/node-server) | `1.19.9` | `1.19.11` |
| [eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x) | `4.16.1` | `4.16.2` |
| [turbo](https://github.com/vercel/turborepo) | `2.8.12` | `2.8.21` |
| [mongodb](https://github.com/mongodb/node-mongodb-native) | `7.1.0` | `7.1.1` |
| [sql.js](https://github.com/sql-js/sql.js) | `1.14.0` | `1.14.1` |
| [@types/sql.js](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sql.js) | `1.4.9` | `1.4.11` |
| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) | `14.2.9` | `14.2.11` |
| [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.8` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.13.1` | `7.13.2` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.13.1` | `7.13.2` |



Updates `@hono/node-server` from 1.19.9 to 1.19.11
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.9...v1.19.11)

Updates `eslint-plugin-import-x` from 4.16.1 to 4.16.2
- [Release notes](https://github.com/un-ts/eslint-plugin-import-x/releases)
- [Changelog](https://github.com/un-ts/eslint-plugin-import-x/blob/master/CHANGELOG.md)
- [Commits](un-ts/eslint-plugin-import-x@v4.16.1...v4.16.2)

Updates `turbo` from 2.8.12 to 2.8.21
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.8.12...v2.8.21)

Updates `mongodb` from 7.1.0 to 7.1.1
- [Release notes](https://github.com/mongodb/node-mongodb-native/releases)
- [Changelog](https://github.com/mongodb/node-mongodb-native/blob/v7.1.1/HISTORY.md)
- [Commits](mongodb/node-mongodb-native@v7.1.0...v7.1.1)

Updates `sql.js` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/sql-js/sql.js/releases)
- [Commits](sql-js/sql.js@v1.14.0...v1.14.1)

Updates `@types/sql.js` from 1.4.9 to 1.4.11
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sql.js)

Updates `@types/sql.js` from 1.4.9 to 1.4.11
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sql.js)

Updates `handlebars` from 4.7.8 to 4.7.9
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9)

Updates `fumadocs-mdx` from 14.2.9 to 14.2.11
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@14.2.9...fumadocs-mdx@14.2.11)

Updates `postcss` from 8.5.6 to 8.5.8
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.8)

Updates `react-router` from 7.13.1 to 7.13.2
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.13.2/packages/react-router)

Updates `react-router-dom` from 7.13.1 to 7.13.2
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.13.2/packages/react-router-dom)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 1.19.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: eslint-plugin-import-x
  dependency-version: 4.16.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: turbo
  dependency-version: 2.8.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: mongodb
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: sql.js
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@types/sql.js"
  dependency-version: 1.4.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@types/sql.js"
  dependency-version: 1.4.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: handlebars
  dependency-version: 4.7.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: fumadocs-mdx
  dependency-version: 14.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: postcss
  dependency-version: 8.5.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: react-router
  dependency-version: 7.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: react-router-dom
  dependency-version: 7.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 30, 2026

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel
Copy link
Copy Markdown

vercel bot commented Mar 30, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
objectos Ready Ready Preview, Comment Mar 30, 2026 2:31am
objectos-demo Error Error Mar 30, 2026 2:31am

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants