Skip to content

Update production-dependencies (minor) - #906

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/production-dependencies
Open

Update production-dependencies (minor)#906
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/production-dependencies

Conversation

@renovate

@renovate renovate Bot commented Feb 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@supercharge/promise-pool ^3.2.0 → ^3.3.0 age confidence
class-validator ^0.14.1 → ^0.15.1 age confidence
html-entities ^2.5.2 → ^2.6.0 age confidence
luxon 3.3.0 → 3.7.2 age confidence
matrix-widget-api ^1.13.1 → ^1.17.0 age confidence
nestjs-pino ^4.1.0 → ^4.6.1 age confidence
pino (source) ^9.2.0 → ^9.14.0 age confidence
pino-http ^10.1.0 → ^10.5.0 age confidence
timezones-ical-library (source) ^1.9.1 → ^1.11.1 age confidence

Release Notes

superchargejs/promise-pool (@​supercharge/promise-pool)

v3.3.0

Compare Source

Added
  • add dontStoreProcessedItems method to the promise pool to tell the processor to skip storing processed items in memory (Thank you Christopher Zinger! PR 92) 
      await PromisePool
    .for([1,2,3,4])
    .dontStoreProcessedItems()
    .process(async (num, index) => {
      // processing …
    })
  • add flushProcessedItems method to the promise pool executor (Thank you Christopher Zinger! PR 91) 
      await PromisePool
    .for([1,2,3,4])
    .dontStoreProcessedItems()
    .process(async (num, index, pool) => {
      pool.flushProcessedItems()
    })
typestack/class-validator (class-validator)

v0.15.1

Compare Source

BREAKING CHANGES
  • Added options argument to IsIBAN validator (#​2618), which breaks any existing usage of this decorator that pass an argument to the decorator, e.g. @IsIBAN({forbidUnknownValues: false})
Fixed
  • Updated lockfile to patch vulnerabilities (#​2669)
  • Fixed a small grammatical error in the docs (#​2596)
Added

v0.14.4

Compare Source

  • Updated validator.js to 13.15.22 (#​2649)

v0.14.3

Compare Source

v0.14.2

Compare Source

Fixed
  • Fixed an issue where forbidUnknownValues did not default to true when validatorOptions was undefined. (#​2196 by @​cduff)
  • Fixed the ValidationMetadata.name property to work correctly with the @IsOptional decorator. (#​2044 by @​Clashsoft)
  • Updated the Codecov configuration for continuous integration. (#​2556 by @​haiweilian)
  • Fixed an issue where options were not passed correctly to the @IsBase64 decorator. (#​2549 by @​aseyfpour)
  • Fixed argument handling for the isBase64 function. (#​2574 by @​braaar)
0.14.1 (2024-01-12)
Added
  • allow specifying options for @IsBase64 decorator (#​1845) , closes #​1013
  • use official type for version in @IsUUID decorator (#​1846) , closes #​1497
  • update @IsPhoneNumber decorator to use max dataset (#​1857)
Fixed
  • fail for non-array constraint in @IsIn decorator (#​1844) , closes #​1693
  • allow number and boolean values in validation message "$value" tokens (#​1467) , closes #​921, #​1046
  • read nullable option in @IsNotEmptyObject decorator correctly (#​1555) , closes #​1554
Changed
  • update libphonenumber-js to ^1.10.53 from ^1.10.14
  • update various dev-dependencies
0.14.0 (2022-12-09)
Added
  • add @IsTimeZone decorator to check if given string is valid IANA time zone
  • add @IsISO4217CurrencyCode decorator to check if the string is an ISO 4217 currency code
  • add @IsStrongPassword decorator to check if given password matches specific complexity criteria
  • add @IsBase58 decorator to check if a string is base58 encoded
  • add @IsTaxId decorator to check if a given string is a valid tax ID in a given locale
  • add support for passing function as date generator in @MinDate and @MaxDate decorators
  • add option to print constraint error message instead of constraint type in validation error
  • improve decorator metadata lookup performance
  • return possible values in error message for @IsEnum decorator
Fixed
  • re-added @types/validator as dependency
  • fix error generation when using @NestedValidation
  • pass validation options correctly to validator in @IsDateString decorator
  • support passing Symbol as parameter in error message generation
  • specify supported locales for @IsAlphanumeric decorator
  • correctly assign decorator name in metadata instead of loosing it
  • fix various spelling errors in documentation
  • fix various spelling errors and inconsistencies in JSDoc for decorators
Changed
  • enable forbidUnknownValues option by default
  • remove documentation about deprecated schema based validation and added warning
  • update warning message logged about missing decorator metadata
  • update libphonenumber-js to ^1.10.14 from ^1.9.43
  • update various dev-dependencies
BREAKING CHANGES

forbidUnknownValues option is enabled by default

From this release the forbidUnknownValues is enabled by default. This is the desired behavior for majority of
use-cases, but this change may break validation for some. The two scenarios that results in failed validation:

  • when attempting to validate a class instance without metadata for it
  • when using group validation and the specified validation group results in zero validation applied

The old behavior can be restored via specifying forbidUnknownValues: false option when calling the validate functions.

For more details see PR #​1798 and #​1422 (comment).

@NestedValidation decorator correctly assigns validation errors

Until now the errors from a nested validation in some cases were incorrectly assigned
to the parent instead of the child being validated. Now the validation errors are correctly assigned.

For more details see #​679.

0.13.2 (2021-11-20)

NOTE: This version fixes a security vulnerability allowing denial of service attacks with a specially crafted request payload.
Please update as soon as possible.

Fixed
  • switched to use Array.isArray in array checks from instanceof operator
Changed
  • libphonenumber-js package updated to 1.9.43 from 1.9.7
  • validator package updated to 13.5.2 from 13.5.2
  • various dev-dependencies updated
0.13.1 (2021-01-14)
Added
  • optional mather function has been added to the ArrayUnique decorator
Fixed
  • a typo was fixed in the error message generated by the IsUUID decorator
  • calling ValidationError.toString() doesn't result in an error when forbidNonWhitelisted parameter was used
  • fixed typo in error message generated by IsIn decorator
  • the @types/validator package is correctly installed
  • inlineSources option is enabled in tsconfig preventing various sourcemap errors when consuming the package
Changed
  • various dev dependencies has been updated
0.13.0 (2021-01-11)
Added
  • project is restructured to allow three-shaking
  • added option to fail on first validation error (#​620)
  • two new validator option is added:
    • always - allows setting global default for always option for decorators
    • strictGroups - ignore decorators with at least one group, when ValidatorOptions.groups is empty
Fixed
  • the 'any' locale is allowed in the isPostalCode decorator (#​634)
  • the IsDateString() decorator now aliases the IsISO8601() decorator (#​672)
Changed
  • project tooling has been updated significantly
  • google-libphonenumber has been replaced with libphonenumber-js (this should have no effect on validation)
  • build process generates include both ES/CommonJS and UMD variations
  • various dev dependencies has been updated
0.12.2 (2020-04-23)
Fixed
  • move tslib from peerDependencies to dependencies (827eff1), closes #​588
0.12.1 (2020-04-18)
Fixed
  • apply only nested validator for ValidateNested multi-dimensional array (c463be5)
0.12.0 (2020-04-18)
Fixed
Changed
Added
BREAKING CHANGES

  • Validatorjs releases contain some breaking changes e.g. IsMobileNumber or IsHexColor. Please check validatorjs CHANGELOG

  • Validation functions was removed from Validator class to enable tree shaking.

    BEFORE:

    import { Validator } from 'class-validator';

const validator = new Validator();
validator.isNotIn(value, possibleValues);
validator.isBoolean(value);

    AFTER:

    import { isNotIn, isBoolean } from 'class-validator';

isNotIn(value, possibleValues);
isBoolean(value);

  • IsNumberString decorator arguments changed to @IsNumberString(ValidatorJS.IsNumericOptions, ValidationOptions).

0.11.1 (2020-03-18)
Fixed
  • IsNumber validator now works when maxDecimalPlaces=0 (#​524) (b8aa922)
Added
0.11.0 (2019-11-01)
Fixed
Added
BREAKING CHANGES
0.10.2 (2019-10-14)
Fixed
Added
0.10.1 (2019-09-25)
Fixed
Added
0.10.0 (2019-08-10)
Fixed
  • add correct signature for custom error message handler (249c41d)
Added
  • add IsISO31661Alpha3 and IsISO31661Alpha2 validators (#​273) (55c57b3)
  • IsDecimal: implement IsDecimal from validatorjs (#​359) (b4c8e21)
  • add isPort decorator (#​282) (36684ec)
  • allow validate Map/Set (#​365) (f6fcdc5)
  • new ValidatePromise decorator - resolve promise before validate (#​369) (35ec04d)
  • replace instanceof Promise and support Promise/A+ (#​310) (59eac09)
  • isNumberString now accept validator.js IsNumericOptions as second parameter (#​262)
BREAKING CHANGES
  • update @​types/validator from 10.4.0 to version 10.11.2 - please check it's changelog (cb960dd)
  • isDateString now check to match only entire ISO Date (#​275) (5012464)
  • remove IsCurrencyOptions, IsURLOptions, IsEmailOptions, IsFQDNOptions interfaces and replace with interfaces from @types/validator
0.9.1
Added
  • added option to pass custom context for the decorators
Fixed
  • validating against a schema will validate against that one instead of every registered one
0.9.0 [BREAKING CHANGE]
Added
  • updated validator.js from 9.2.0 to 10.4.0 (Check it's changelog for what has changed.)
    • until now fractional numbers was not allowed in the IsNumberString decorator, now they are allowed
    • until now Gmail addresses could contain multiple dots or random text after a + symbol, this is not allowed anymore
  • IsPhoneNumber decorator has been added which uses the google-libphonenumber library to validate international phone numbers accurately
Fixed
  • update IsURLOptions to match underlying validator host list options
  • added a console warning when no metadata decorator is found as it's possibly not intended
  • the Min and Max decorator will corectly show an inclusive error message when failing
  • fixed a runtime error when validationArguments.value is not a string
0.8.5
Fixed
  • remove ansicolor package, because it's incompatible with IE
0.8.4
Added
  • ValidatorOptions now has a forbidUnknownValues key to prevent unknown objects to pass validation
    • it's highly advised to turn this option on
    • now this option defaults to false but will be default to true after the 1.0 release
0.8.3
Fixed
  • handle when target property is undefined when calling ValidationError.toString()
0.8.2
Added
  • added ValidationError.toString() method for easier debugging
  • added printError method to pretty-print errors in NodeJS or the browser
Fixed
  • fixed wrong type info in ValidatorOptions
  • fixed wrong type info in ValidationSchema (the options key now is optional)
  • corrected IsNumericString to IsNumberString in the README
  • fixed type of host_whitelist and host_backlist in IsURLOptions
0.8.1
Fixed
  • fixed wrong type info in ValidatorOptions
0.8.0 [BREAKING CHANGE]
Added

  • updated validator.js from 7.0.0 to 9.2.0 (Check it's changelog for what has changed.)

    This caused breaking change, if you used the IsUrl decorator to validate localhost as a valid url, from now you must use the require_tld: false option

    @​IsUrl({ require_tld: false})
url: string;

  • added @IsInstance decorator and validator.isInstance(value, target) method.

  • changed @IsNumber decorator has been changed to @IsNumber(options: IsNumberOptions)

  • added option to strip unknown properties (whitelist: true)

  • added option to throw error on unknown properties (forbidNonWhitelisted: true)

  • added @Allow decorator to prevent stripping properties without other constraint

Fixed
  • fixed issue with @IsDateString now it allow dates without fraction seconds to be set
  • fixed issue with @IsDateString now it allow dates without with timezones to be set
  • @ValidateNested correctly generates validation error on non object and non array values
0.6.7
Fixed
  • fixed issue with @ValidateNested when nested property is not defined and it throw an error (#​59)
0.6.5
Fixed
  • fixed bugs with @IsUrl, @IsEmail and several other decorators
0.6.4
Added
  • added @IsMilitaryTime decorator.
0.6.3
Added
  • added validateOrReject method which rejects promise instead of returning array of errors in resolved result
0.6.1
Added
  • added @IsArray decorator.
0.6.0 [BREAKING CHANGE]
Added
  • breaking change with @ValidateNested on arrays: Validator now groups the validation errors by sub-object, rather than them all being grouped together. See #​32 for a demonstration of the updated structure.
  • added @ValidateIf decorator, see conditional validation in docs.
0.5.0 [BREAKING CHANGE]
Added

  • async validations must be marked with { async: true } option now.

    This is optional, but it helps to determine which decorators are async to prevent their execution in validateSync method.

  • added validateSync method that performs non asynchronous validation and ignores validations that marked with async: true.

  • there is a breaking change in registerDecorator method. Now it accepts options object.

  • breaking change with @ValidatorConstraint decorator. Now it accepts option object instead of single name.

0.4.1
Fixed
  • fixed issue with wrong source maps packaged
0.4.0 [BREAKING CHANGE]
Added
  • everything should be imported from "class-validator" main entry point now
  • ValidatorInterface has been renamed to ValidatorConstraintInterface
  • contain can be set in the main entry point now
  • some decorator's names changed. Be aware of this
  • added few more non-string decorators
  • validator now returns array of ValidationError instead of ValidationErrorInterface. Removed old ValidationError
  • removed all other validation methods except validator.validate
  • finally validate method is async now, so custom async validations are supported now
  • added ability to validate inherited properties
  • added support of separate validation schemas
  • added support of default validation messages
  • added support of special tokens in validation messages
  • added support of message functions in validation options
  • added support of custom decorators
  • if no groups were specified, decorators with groups now are being ignored
  • changed signature of the ValidationError. Now if it has nested errors it does not return them in a flat array
Fixed
  • fixed all decorators that should not work only with strings
0.3.0
Added
  • package has changed its name from validator.ts to class-validator.
  • sanitation functionality has been removed from this library. Use class-sanitizer instead.
mdevils/html-entities (html-entities)

v2.6.0

Compare Source

Features
2.5.6 (2025-03-30)
Bug Fixes
  • significantly reduce package size (72c7819)
2.5.5 (2025-03-28)
Bug Fixes
  • incorrect typescript dependency (adb6176)
2.5.4 (2025-03-28)
Bug Fixes
2.5.3 (2025-03-23)
Bug Fixes
  • improve encoding performance (f4d14e2)

v2.5.6

Compare Source

Features
2.5.6 (2025-03-30)
Bug Fixes
  • significantly reduce package size (72c7819)
2.5.5 (2025-03-28)
Bug Fixes
  • incorrect typescript dependency (adb6176)
2.5.4 (2025-03-28)
Bug Fixes
2.5.3 (2025-03-23)
Bug Fixes
  • improve encoding performance (f4d14e2)

v2.5.5

Compare Source

Features
2.5.6 (2025-03-30)
Bug Fixes
  • significantly reduce package size (72c7819)
2.5.5 (2025-03-28)
Bug Fixes
  • incorrect typescript dependency (adb6176)
2.5.4 (2025-03-28)
Bug Fixes
2.5.3 (2025-03-23)
Bug Fixes
  • improve encoding performance (f4d14e2)

v2.5.4

Compare Source

Features
2.5.6 (2025-03-30)
Bug Fixes
  • significantly reduce package size (72c7819)
2.5.5 (2025-03-28)
Bug Fixes
  • incorrect typescript dependency (adb6176)
2.5.4 (2025-03-28)
Bug Fixes
2.5.3 (2025-03-23)
Bug Fixes
  • improve encoding performance (f4d14e2)

v2.5.3

Compare Source

Features
2.5.6 (2025-03-30)
Bug Fixes
  • significantly reduce package size (72c7819)
2.5.5 (2025-03-28)
Bug Fixes
  • incorrect typescript dependency (adb6176)
2.5.4 (2025-03-28)
Bug Fixes
2.5.3 (2025-03-23)
Bug Fixes
  • improve encoding performance (f4d14e2)
moment/luxon (luxon)

v3.7.2

Compare Source

  • Fix ES6 packaging

v3.7.1

Compare Source

  • Revert change in ES6 packaging

v3.7.0

Compare Source

  • Added showZeros option to Duration#toHuman
  • Added Duration#removeZeros method.
  • Added rounding option to DateTime#toRelative
  • Added precision option to ISO formatting methods
  • Added signMode option to Duration#toFormat
  • Allow escaping single quotes in format strings
  • Improve output of Info.months and Info.monthsFormat for ja locale
  • Accept lowercase t as a separator in ISO strings
  • Accept lowercase z as an offset in ISO strings
  • Reject non-finite numbers where previously only NaN was rejected
  • Improve the documentation for Interval
  • Added a dark theme for the documentation site

v3.6.1

Compare Source

  • Add Fallback for minimalDays being removed from Intl.WeekInfo
  • Fix various caches when JS keywords like "constructor" are used for names

v3.6.0

Compare Source

  • Add Interval.lastDateTime
  • Fix a bug that could cause wrong timezone calculations when multiple timezones are in use

v3.5.0

Compare Source

  • Various performance improvements
  • throwOnInvalid causes the constructor to throw if the year is invalid

v3.4.4

Compare Source

v3.4.3

Compare Source

  • Fixes another regression from 3.4.0 (#​1496)

v3.4.2

Compare Source

  • Fixes regression from 3.4.1 (#​1493)

v3.4.1

Compare Source

v3.4.0

Compare Source

  • Fix type checking on input zones
  • Fix Islamic months listing
  • Fix normalize() for negative inputs
matrix-org/matrix-widget-api (matrix-widget-api)

v1.17.0

Compare Source

1.17.0 Release

What's Changed
New Contributors

Full Changelog: matrix-org/matrix-widget-api@v1.16.1...v1.17.0

v1.16.1

Compare Source

1.16.1 Release

What's Changed

Full Changelog: matrix-org/matrix-widget-api@v1.16.0...v1.16.1

v1.16.0

Compare Source

1.16.0 Release

What's Changed

Full Changelog: matrix-org/matrix-widget-api@v1.15.0...v1.16.0

v1.15.0

Compare Source

1.15.0 Release

What's Changed
New Contributors

Full Changelog: matrix-org/matrix-widget-api@v1.14.0...v1.15.0

v1.14.0

Compare Source

1.14.0 Release

⚠️ Breaking changes

This release introduces breaking changes to the WidgetApi methods for updating delayed events, and to the WidgetDriver methods for performing the requested update action in a client. See #​143 for details. Only the minor version has been bumped because the APIs in question are currently considered experimental.

What's Changed

Full Changelog: matrix-org/matrix-widget-api@v1.13.1...v1.14.0

iamolegga/nestjs-pino (nestjs-pino)

v4.6.1: : handle errorKey when pinoHttp is a tuple

Compare Source

What's Changed

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • Between 12:00 AM and 05:59 AM, only on Monday (* 0-5 * * 1)
  • Automerge
    • Monday through Friday (* * * * 1-5)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner February 23, 2026 00:39
@changeset-bot

changeset-bot Bot commented Feb 23, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 99607e2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 3 times, most recently from 17696cb to 75af6cc Compare March 3, 2026 06:03
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 2 times, most recently from 584eb46 to 273c0c8 Compare March 5, 2026 07:29
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 5 times, most recently from 5b2d727 to d1a7ceb Compare March 19, 2026 10:00
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 4 times, most recently from 477fa88 to 920a6a4 Compare April 2, 2026 07:54
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch from 920a6a4 to 52f8b35 Compare April 7, 2026 12:50
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 2 times, most recently from 24cd2f2 to 860247d Compare April 23, 2026 16:14
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 3 times, most recently from 4eef58a to 56df9bc Compare April 27, 2026 08:42
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 2 times, most recently from fda0698 to 954d91a Compare May 18, 2026 19:14
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch from 954d91a to 4c46c52 Compare May 30, 2026 20:19
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 3 times, most recently from ad60dda to 1738ba7 Compare June 16, 2026 20:18
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch from 1738ba7 to ff20c20 Compare June 17, 2026 09:07
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 3 times, most recently from c8656d4 to 6c66ec5 Compare June 29, 2026 15:06
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 9 times, most recently from 2de968d to 12f9e5b Compare July 17, 2026 09:15
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 4 times, most recently from 802a3d7 to 3fc8aef Compare July 22, 2026 03:15
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch 2 times, most recently from ff99b5a to 84d6aae Compare July 28, 2026 16:02
@renovate
renovate Bot force-pushed the renovate/production-dependencies branch from 84d6aae to 99607e2 Compare July 28, 2026 19:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

matrix-widget-api Prod

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants