Skip to content

chore(deps): bump the production-minor-patch group across 1 directory with 11 updates#56

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/production-minor-patch-afed96dc96
Closed

chore(deps): bump the production-minor-patch group across 1 directory with 11 updates#56
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/production-minor-patch-afed96dc96

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Copy link
Copy Markdown

Bumps the production-minor-patch group with 9 updates in the / directory:

Package From To
nanoid 5.1.7 5.1.11
express-rate-limit 8.3.1 8.5.1
ansis 4.2.0 4.3.0
typeorm 0.3.28 0.3.29
next 16.2.2 16.2.6
next-intl 4.9.0 4.11.2
react-dom 19.2.4 19.2.6
joi 18.1.2 18.2.1
nodemailer 8.0.4 8.0.7

Updates nanoid from 5.1.7 to 5.1.11

Release notes

Sourced from nanoid's releases.

5.1.11

  • Fixed breaking Nano ID by requesting big ID.

5.1.10

5.1.9

  • Fixed npm package size regression.

5.1.8

Changelog

Sourced from nanoid's changelog.

5.1.11

  • Fixed breaking Nano ID by requesting big ID.

5.1.10

5.1.9

  • Fixed npm package size regression.

5.1.8

Commits

Updates express-rate-limit from 8.3.1 to 8.5.1

Release notes

Sourced from express-rate-limit's releases.

v8.5.1

You can view the changelog here.

v8.5.0

You can view the changelog here.

v8.4.1

You can view the changelog here.

v8.4.0

You can view the changelog here.

v8.3.2

You can view the changelog here.

Commits

Updates ip-address from 10.1.0 to 10.2.0

Commits

Updates ansis from 4.2.0 to 4.3.0

Changelog

Sourced from ansis's changelog.

4.3.0 (2026-05-11)

  • feat: add support for OSC 8 hyperlink: link(url, text)
  • feat: add constructor overload to pass a mock globalThis object for controlled color auto-detection
    import { Ansis } from 'ansis';
    const color = new Ansis({
    process: {
    env: { FORCE_COLOR: '1' },
    argv: ['node', 'app.js'],
    stdout: { isTTY: false },
    platform: 'linux',
    },
    });
    console.log(color.level); // 1

  • fix(color-support): correctly handle edge cases using ENV variables and CLI flags
Fixed edge case Old behavior (bug) New behavior (correct)
FORCE_COLOR=1, NO_COLOR=1 disable color enable color (FORCE_COLOR takes precedence over NO_COLOR)
NO_COLOR=1, --color disable color enable color (CLI color flags take precedence over NO_COLOR)
FORCE_COLOR=1, --no-color disable color enable color (FORCE_COLOR has the highest priority)
--no-color --color disable color enable color (last flag wins)
--color with no detected colors truecolor 16 colors (auto-detect fallback uses the minimum color level, not truecolor)
Commits

Updates typeorm from 0.3.28 to 0.3.29

Release notes

Sourced from typeorm's releases.

0.3.29

What's Changed

New Contributors

Full Changelog: typeorm/typeorm@0.3.28...0.3.29

Changelog

Sourced from typeorm's changelog.

0.3.29 (2026-05-08)

Bug Fixes

  • add async to the method using setFindOptions() (#10787) (cc07c90)
  • change import for process dependency (#11248) (1c67c3b)
  • cli: init command loading non-existing package.json (#11947) (4d9d1a6)
  • fix up aggregate methods ambiguous column (#11822) (6e34756)
  • fix up limit with joins (#11987) (3657db8)
  • getPendingMigrations unnecessarily creating migrations table (#11672) (1dbc224)
  • postgres: execute queries sequentially to avoid pg 8.19.0 deprecation warning (#12105) (79829a0)
  • prevent columns with select false from being returned (#11944) (6b20831)
  • prevent eager-loaded entities from overwriting manual relations (#11267) (2d8c515)
  • propagate schema and database to closure junction table (#12110) (58b403f)
  • redis: redis cache version detection (#11936) (f22c7a2)
  • release query runner when there is no migration to revert (#11232) (a46eb0a)
  • sap: QueryBuilder parameter of type JS Date not escaped correctly (#11867) (5153436)
  • security: validate limit() in Update/SoftDelete query builders (#12437) (0d7991a)
  • virtual property handling in schema builder (#11000) (5bd3255)

Features

Commits
  • 0ed009a ci: add npm environment to publish job for trusted publishing
  • 6ede38b chore: enable trusted publishing in publish workflow
  • 578d9e9 chore: fix pnpm publish for v0.3
  • 253f060 chore: disable git check on pnpm publish for v0.3
  • 1b5476f chore: set pnpm publish branch for v0.3
  • 17c6ec2 chore(release): release 0.3.29 (#12442)
  • 0ac8092 chore(deps): update all minor (#12443)
  • 0d7991a fix(security): validate limit() in Update/SoftDelete query builders (#12437)
  • c38c754 ci: remove docs indexing (#12435)
  • 1b66c44 Merge commit from fork
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for typeorm since your current version.


Updates next from 16.2.2 to 16.2.6

Release notes

Sourced from next's releases.

v16.2.6

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

v16.2.5

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

v16.2.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • chore: Bump reqwest to 0.13.2 (Fixes Google Fonts with Turbopack for Windows on ARM64) (#92713)

... (truncated)

Commits
  • ee6e79b v16.2.6
  • afa053d Turbopack: Match proxy matchers with webpack implementation (#93594)
  • 97a154e Turbopack: Fix middleware matcher suffix (#93590)
  • 83899bc [backport] Disable build caches for production/staging/force-preview deploys ...
  • 7b222b9 [backport][test] Pin package manager to patch versions (#93595)
  • a8dc24f [backport] Turbopack: more strict vergen setup (#93587)
  • 766148f v16.2.5
  • 0dd9483 fix: add explicit checks for RSC header (#83) (#98)
  • d166096 fix proxy matching for segment prefetch URLs (#89) (#96)
  • 9d50c0b Strip next-resume header from incoming requests (#92)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.


Updates next-intl from 4.9.0 to 4.11.2

Release notes

Sourced from next-intl's releases.

v4.11.2

4.11.2 (2026-05-11)

Bug Fixes

v4.11.1

4.11.1 (2026-05-08)

Bug Fixes

v4.11.0

4.11.0 (2026-04-28)

Features

v4.10.1

This was reverted in https://github.com/amannn/next-intl/releases/tag/v4.11.2


4.10.1 (2026-04-28)

Bug Fixes

⚠️ If you're using a setup behind a reverse proxy and your proxy sets x-forwarded-port, make sure the value is correct (typically 443).

v4.10.0

4.10.0 (2026-04-28)

Features

v4.9.2

4.9.2 (2026-04-27)

Bug Fixes

v4.9.1

... (truncated)

Changelog

Sourced from next-intl's changelog.

4.11.2 (2026-05-11)

Bug Fixes

4.11.1 (2026-05-08)

Bug Fixes

4.11.0 (2026-04-28)

Features

4.10.1 (2026-04-28)

Bug Fixes

4.10.0 (2026-04-28)

Features

4.9.2 (2026-04-27)

Bug Fixes

4.9.1 (2026-04-10)

Bug Fixes

Commits

Updates react-dom from 19.2.4 to 19.2.6

Release notes

Sourced from react-dom's releases.

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

Commits

Updates joi from 18.1.2 to 18.2.1

Commits

Updates nodemailer from 8.0.4 to 8.0.7

Release notes

Sourced from nodemailer's releases.

v8.0.7

8.0.7 (2026-04-27)

Bug Fixes

  • keep domain as UTF-8 when local part is non-ASCII (#1814) (66d4ecb)

v8.0.6

8.0.6 (2026-04-24)

Bug Fixes

  • restore base64 wrap() trim behavior to prevent trailing CRLF (#1810) (#1811) (b1ae6c1)

v8.0.5

8.0.5 (2026-04-07)

Bug Fixes

  • decode SMTP server responses as UTF-8 at line boundary (95876b1)
  • sanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (0a43876)
Changelog

Sourced from nodemailer's changelog.

8.0.7 (2026-04-27)

Bug Fixes

  • keep domain as UTF-8 when local part is non-ASCII (#1814) (66d4ecb)

8.0.6 (2026-04-24)

Bug Fixes

  • restore base64 wrap() trim behavior to prevent trailing CRLF (#1810) (#1811) (b1ae6c1)

8.0.5 (2026-04-07)

Bug Fixes

  • decode SMTP server responses as UTF-8 at line boundary (95876b1)
  • sanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (0a43876)
Commits
  • 1997040 chore(master): release 8.0.7 (#1815)
  • 9b9c545 chore: drop nodemailer-ntlm-auth devDependency (#1816)
  • 22bf90c Bumped dev deps
  • 66d4ecb fix: keep domain as UTF-8 when local part is non-ASCII (#1814)
  • 6a4a01e Fix/base64 wrap trailing crlf (#1813)
  • a22efbc chore(master): release 8.0.6 (#1812)
  • b1ae6c1 fix: restore base64 wrap() trim behavior to prevent trailing CRLF (#1810) (#1...
  • 202cfb3 chore(master): release 8.0.5 (#1809)
  • b634abf docs: add CLAUDE.md with project conventions and release process
  • 95876b1 fix: decode SMTP server responses as UTF-8 at line boundary
  • Additional commits viewable in compare view

Updates react from 19.2.4 to 19.2.6

Release notes

Sourced from react's releases.

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… with 11 updates

Bumps the production-minor-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [nanoid](https://github.com/ai/nanoid) | `5.1.7` | `5.1.11` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.3.1` | `8.5.1` |
| [ansis](https://github.com/webdiscus/ansis) | `4.2.0` | `4.3.0` |
| [typeorm](https://github.com/typeorm/typeorm) | `0.3.28` | `0.3.29` |
| [next](https://github.com/vercel/next.js) | `16.2.2` | `16.2.6` |
| [next-intl](https://github.com/amannn/next-intl) | `4.9.0` | `4.11.2` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.6` |
| [joi](https://github.com/hapijs/joi) | `18.1.2` | `18.2.1` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.4` | `8.0.7` |



Updates `nanoid` from 5.1.7 to 5.1.11
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.1.7...5.1.11)

Updates `express-rate-limit` from 8.3.1 to 8.5.1
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.3.1...v8.5.1)

Updates `ip-address` from 10.1.0 to 10.2.0
- [Commits](https://github.com/beaugunderson/ip-address/commits)

Updates `ansis` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/webdiscus/ansis/releases)
- [Changelog](https://github.com/webdiscus/ansis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webdiscus/ansis/commits)

Updates `typeorm` from 0.3.28 to 0.3.29
- [Release notes](https://github.com/typeorm/typeorm/releases)
- [Changelog](https://github.com/typeorm/typeorm/blob/0.3.29/CHANGELOG.md)
- [Commits](typeorm/typeorm@0.3.28...0.3.29)

Updates `next` from 16.2.2 to 16.2.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.2.2...v16.2.6)

Updates `next-intl` from 4.9.0 to 4.11.2
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.9.0...v4.11.2)

Updates `react-dom` from 19.2.4 to 19.2.6
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react-dom)

Updates `joi` from 18.1.2 to 18.2.1
- [Commits](hapijs/joi@v18.1.2...v18.2.1)

Updates `nodemailer` from 8.0.4 to 8.0.7
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v8.0.4...v8.0.7)

Updates `react` from 19.2.4 to 19.2.6
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 5.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: express-rate-limit
  dependency-version: 8.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: ip-address
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: ansis
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: typeorm
  dependency-version: 0.3.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: next
  dependency-version: 16.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: next-intl
  dependency-version: 4.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: react-dom
  dependency-version: 19.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: joi
  dependency-version: 18.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: nodemailer
  dependency-version: 8.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: react
  dependency-version: 19.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates and security issues label May 11, 2026
@github-actions github-actions Bot added apps Changes to apps/ packages Changes to packages/ labels May 11, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 18, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 18, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/develop/production-minor-patch-afed96dc96 branch May 18, 2026 22:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

apps Changes to apps/ dependencies Dependency updates and security issues packages Changes to packages/

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants