npm(deps): bump the npm-dependencies group across 1 directory with 13 updates #29

dependabot · 2025-07-28T18:25:46Z

Bumps the npm-dependencies group with 13 updates in the / directory:

Package	From	To
dotenv	`16.5.0`	`17.2.1`
express-rate-limit	`7.5.0`	`8.0.1`
mongoose	`8.15.1`	`8.16.5`
morgan	`1.10.0`	`1.10.1`
@babel/preset-env	`7.27.2`	`7.28.0`
@eslint/js	`9.28.0`	`9.32.0`
cross-env	`7.0.3`	`10.0.0`
eslint-config-prettier	`10.1.5`	`10.1.8`
globals	`16.2.0`	`16.3.0`
jest	`29.7.0`	`30.0.5`
lint-staged	`16.1.0`	`16.1.2`
prettier	`3.5.3`	`3.6.2`
supertest	`7.1.1`	`7.1.4`

Updates dotenv from 16.5.0 to 17.2.1

Changelog

Sourced from dotenv's changelog.

17.2.1 (2025-07-24)

Changed

Fix clickable tip links by removing parentheses (#897)

17.2.0 (2025-07-09)

Added

Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#889)

Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})
# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"
// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)
$ node index.js
Hello World
or
$ DOTENV_CONFIG_QUIET=true node index.js
17.1.0 (2025-07-07)

Added

Add additional security and configuration tips to the runtime log (#884)

Dim the tips text from the main injection information text
const TIPS = [
  '🔐 encrypt with dotenvx: https://dotenvx.com',
  '🔐 prevent committing .env to code: https://dotenvx.com/precommit',
  '🔐 prevent building .env in docker: https://dotenvx.com/prebuild',
  '🛠️  run anywhere with `dotenvx run -- yourcommand`',
  '⚙️  specify custom .env file path with { path: \'/custom/path/.env\' }',
  '⚙️  enable debug logging with { debug: true }',
  '⚙️  override existing env vars with { override: true }',
  '⚙️  suppress all logs with { quiet: true }',
  '⚙️  write to custom object with { processEnv: myObject }',
</tr></table> 

... (truncated)

Commits

37cf55a 17.2.1
f2d92e9 changelog 🪵
bd27017 Merge pull request #897 from motdotla/adjust-tip-for-click
8a9ce45 add to tests
19e5ad9 adjust clickable tip
4186757 Merge pull request #894 from mjomble/patch-1
04322a6 Merge pull request #895 from andersr/add-es6-config-info-to-readme
1102cab Add info about ES6 import with config options
5566b77 Fixed link in changelog
11acd9f 17.2.0
Additional commits viewable in compare view

Updates express-rate-limit from 7.5.0 to 8.0.1

Release notes

Sourced from express-rate-limit's releases.

v8.0.1

You can view the changelog here.

v8.0.0

You can view the changelog here.

v7.5.1

Changed

Narrowed type of standardHeaders from string to just the supported values via a TypeScript const assertion (#506)

You can view the full changelog here.

Commits

b70f456 8.0.1
f7a079b fix: replace vulnerable ip library with ip-address lib (#536)
0e6b264 chore: biome migrate and format
2aa115a chore: biome config migration (#528)
ec67446 docs: v8.0.1 changelog
e880dd1 fix: express Request and Response types (#534)
51eeab2 fix: export ipKeyGenerator in cjs build (#532)
5687f29 typo
8213eae docs: Don't return response.send from RequestHandler in example (#531)
c299d5c 8.0.0
Additional commits viewable in compare view

Updates mongoose from 8.15.1 to 8.16.5

Release notes

Sourced from mongoose's releases.

8.16.5 / 2025-07-25

fix(map): avoid throwing required error if saving map of primitives with required: true #15542

types(model): export MongooseBulkWriteResult type #15546

types(connection): add base to connection type #15544

8.16.4 / 2025-07-16

fix(connection): avoid calling connection.close() internally with force: Object #15534 #15531

types(schema): handle required: string in schema definitions #15538 #15536

types(document): allow calling $isDefault() with no args #15528 #15522

types: infer Typescript string enums #15530 ruiaraujo

types: pass TModelType down to schema statics #15537

8.16.3 / 2025-07-10

fix(document): clean modified subpaths if unsetting map #15520 #15519

fix: make DocumentArray SchemaType pass all options to embedded SchemaType #15523

types: support readonly array in query.select #15527 omermizr

8.16.2 / 2025-07-07

fix(cursor): populate after hydrating in queryCursor so populated docs get parent() #15498 #15494

fix(schema): support toJSONSchema() on mixed types and improve error message about unsupported types #15492 #15489

types: add _id and __v to toObject/toJSON transform type #15501 #15479

types(schema): use user-provided THydratedDocumentType as context for virtual get() and set() #15517 #15516

types: improve typing for transform option to toJSON and toObject #15485

docs: link to custom setter docs from lowercase, etc. options and note that setters run on query filters #15493 #15491

docs(jest): add note about resetModules #15515

8.16.1 / 2025-06-26

fix(document): avoid setting _skipMarkModified when setting nested path with merge option #15484 #11913

fix(model): make sure post save error handler gets doc as param on VersionError #15483 #15480

fix: consistent $conditionalHandlers setup between schematypes #15490

docs(compatibility): note that mongodb 4.0 is not supported anymore since 8.16.0 #15487 hasezoey

docs: remove unnecessary --save flag from npm install instruction #15486 Thahirgeek

8.16.0 / 2025-06-16

feat(model): add Model.createSearchIndexes() #15470 #15465

feat: upgrade MongoDB driver -> 6.17.0 #15468 gmstavros

8.15.2 / 2025-06-12

fix(document+schema): improve handling for setting paths underneath maps, including maps of maps #15477 #15461

fix: report default paths in VersionError message because they can can cause VersionError #15464

fix(updateValidators): ensure update validators only call validators underneath single nested paths once #15446 #15436

fix: fix validation for deeply nested maps of subdocuments #15469 #15447 AbdelrahmanHafez

fix(DocumentArray): correctly set parent if instantiated with schema from another Mongoose instance #15471 #15466

... (truncated)

Changelog

Sourced from mongoose's changelog.

8.16.5 / 2025-07-25

fix(map): avoid throwing required error if saving map of primitives with required: true #15542

types(model): export MongooseBulkWriteResult type #15546

types(connection): add base to connection type #15544

8.16.4 / 2025-07-16

fix(connection): avoid calling connection.close() internally with force: Object #15534 #15531

types(schema): handle required: string in schema definitions #15538 #15536

types(document): allow calling $isDefault() with no args #15528 #15522

types: infer Typescript string enums #15530 ruiaraujo

types: pass TModelType down to schema statics #15537

8.16.3 / 2025-07-10

fix(document): clean modified subpaths if unsetting map #15520 #15519

fix: make DocumentArray SchemaType pass all options to embedded SchemaType #15523

types: support readonly array in query.select #15527 omermizr

8.16.2 / 2025-07-07

fix(cursor): populate after hydrating in queryCursor so populated docs get parent() #15498 #15494

fix(schema): support toJSONSchema() on mixed types and improve error message about unsupported types #15492 #15489

types: add _id and __v to toObject/toJSON transform type #15501 #15479

types(schema): use user-provided THydratedDocumentType as context for virtual get() and set() #15517 #15516

types: improve typing for transform option to toJSON and toObject #15485

docs: link to custom setter docs from lowercase, etc. options and note that setters run on query filters #15493 #15491

docs(jest): add note about resetModules #15515

8.16.1 / 2025-06-26

fix(document): avoid setting _skipMarkModified when setting nested path with merge option #15484 #11913

fix(model): make sure post save error handler gets doc as param on VersionError #15483 #15480

fix: consistent $conditionalHandlers setup between schematypes #15490

docs(compatibility): note that mongodb 4.0 is not supported anymore since 8.16.0 #15487 hasezoey

docs: remove unnecessary --save flag from npm install instruction #15486 Thahirgeek

8.16.0 / 2025-06-16

feat(model): add Model.createSearchIndexes() #15470 #15465

feat: upgrade MongoDB driver -> 6.17.0 #15468 gmstavros

8.15.2 / 2025-06-12

fix(document+schema): improve handling for setting paths underneath maps, including maps of maps #15477 #15461

fix: report default paths in VersionError message because they can can cause VersionError #15464

fix(updateValidators): ensure update validators only call validators underneath single nested paths once #15446 #15436

fix: fix validation for deeply nested maps of subdocuments #15469 #15447 AbdelrahmanHafez

fix(DocumentArray): correctly set parent if instantiated with schema from another Mongoose instance #15471 #15466

... (truncated)

Commits

1ced175 chore: release 8.16.5
2faae5e test: add coverage for issues referenced in #14119
099e79a Merge pull request #15546 from Automattic/vkarpov15/gh-15541
6be3ae0 Merge pull request #15544 from Automattic/vkarpov15/base-type
6e7f825 Merge pull request #15542 from Automattic/vkarpov15/maps-required
47ba4ce types(model): export MongooseBulkWriteResult type
145a790 types(connection): add base to connection type
68d8564 fix(map): avoid throwing required error if saving map of primitives with requ...
9b0c083 chore: release 8.16.4
7f03e11 Merge pull request #15538 from Automattic/vkarpov15/gh-15536
Additional commits viewable in compare view

Updates morgan from 1.10.0 to 1.10.1

Release notes

Sourced from morgan's releases.

1.10.1

What's Changed

renaming simple to sample in readme by @ryhinchey in expressjs/morgan#237

adding installation instructions to readme by @ryhinchey in expressjs/morgan#233

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/morgan#291

ci: replace travis with github actions by @inigomarquinez in expressjs/morgan#290

docs: add example output for log formats by @jonchurch in expressjs/morgan#299

ci: use ubuntu-latest by @bjohansebas in expressjs/morgan#301

ci: apply OSSF Scorecard security best practices by @UlisesGascon in expressjs/morgan#300

remove --bail by @jonchurch in expressjs/morgan#314

⬆️ bump on-headers by @ctcpip in expressjs/morgan#319

New Contributors

@inigomarquinez made their first contribution in expressjs/morgan#291

@jonchurch made their first contribution in expressjs/morgan#299

@bjohansebas made their first contribution in expressjs/morgan#301

@UlisesGascon made their first contribution in expressjs/morgan#300

@ctcpip made their first contribution in expressjs/morgan#319

Full Changelog: expressjs/morgan@1.10.0...1.10.1

Changelog

Sourced from morgan's changelog.

1.10.1 / 2025-07-17

deps: on-headers@~1.1.0

Fix CVE-2025-7339 (GHSA-76c9-3jph-rj3q)

Commits

c1c7f10 🔖 1.10.1
eb896c2 ⬆️ bump on-headers
1c3eec6 remove --bail (#314)
b144728 ci: apply OSSF Scorecard security best practices (#300)
68c2d21 ci: use ubuntu-latest (#301)
8740a19 docs: add example output for log formats (#299)
efd6bff ci: migra to GitHub actions (#290)
3b89789 ci: add support for OSSF scorecard reporting (#291)
19a6aa5 docs: add installation section
b94f3ff docs: change simple to sample in example descriptions
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for morgan since your current version.

Updates @babel/preset-env from 7.27.2 to 7.28.0

Release notes

Sourced from @babel/preset-env's releases.

v7.28.0 (2025-07-02)

🚀 New Feature

babel-node

#17147 Support top level await in node repl (@liuxingbaoyu)

babel-types

#17258 feat(matchesPattern): support super/private/meta (@JLHwung)

babel-compat-data, babel-preset-env

#17355 Add explicit resource management to preset-env (@JLHwung)

babel-core, babel-parser

#17390 Support sourceType: "commonjs" (@JLHwung)

babel-generator, babel-parser

#17346 Materialize explicitResourceManagement parser plugin (@JLHwung)

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types

#17391 LVal coverage updates (Part 2) (@JLHwung)

babel-parser, babel-traverse, babel-types

#17378 Accept bigints in t.bigIntLiteral factory (@JLHwung)

babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types

#17277 Transform discard binding (@JLHwung)

babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types

#17163 Parse discard binding (@JLHwung)

🐛 Bug Fix

babel-helper-globals, babel-plugin-transform-classes, babel-traverse

#17297 Create babel-helper-globals (@JLHwung)

babel-types

#17009 feature: TSTypeOperator: keyof (#16799) (@coderaiser)

🏠 Internal

babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

#17403 Update babel-polyfill packages (@nicolo-ribaudo)

Committers: 5

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

coderaiser (@coderaiser)

v7.27.7 (2025-06-26)

Thanks @arthur-mountain and @evankanderson for your first PRs!

👓 Spec Compliance

babel-parser, babel-plugin-transform-classes

#17203 Interepret parser allow* options as top level only (@JLHwung)

babel-parser

#17371 fix: disable using in ambient context (@JLHwung)

🐛 Bug Fix

... (truncated)

Changelog

Sourced from @babel/preset-env's changelog.

v7.28.0 (2025-07-02)

🚀 New Feature

babel-node

#17147 Support top level await in node repl (@liuxingbaoyu)

babel-types

#17258 feat(matchesPattern): support super/private/meta (@JLHwung)

babel-compat-data, babel-preset-env

#17355 Add explicit resource management to preset-env (@JLHwung)

babel-core, babel-parser

#17390 Support sourceType: "commonjs" (@JLHwung)

babel-generator, babel-parser

#17346 Materialize explicitResourceManagement parser plugin (@JLHwung)

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types

#17391 LVal coverage updates (Part 2) (@JLHwung)

babel-parser, babel-traverse, babel-types

#17378 Accept bigints in t.bigIntLiteral factory (@JLHwung)

babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types

#17277 Transform discard binding (@JLHwung)

babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types

#17163 Parse discard binding (@JLHwung)

🐛 Bug Fix

babel-helper-globals, babel-plugin-transform-classes, babel-traverse

#17297 Create babel-helper-globals (@JLHwung)

babel-types

#17009 feature: TSTypeOperator: keyof (#16799) (@coderaiser)

🏠 Internal

babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

#17403 Update babel-polyfill packages (@nicolo-ribaudo)

v7.27.7 (2025-06-26)

👓 Spec Compliance

babel-parser, babel-plugin-transform-classes

#17203 Interepret parser allow* options as top level only (@JLHwung)

babel-parser

#17371 fix: disable using in ambient context (@JLHwung)

🐛 Bug Fix

babel-core

#17392 Improve TS babel config loading (@JLHwung)

babel-types

#17376 fix: support negative bigint in valueToNode (@JLHwung)

babel-plugin-transform-parameters

#17352 fix: Params of async function* should throw synchronously (@liuxingbaoyu)

🏠 Internal

babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread

#17389 Use NodePath#splitExportDeclaration in destructuring transforms (@JLHwung)

... (truncated)

Commits

ccc5fae v7.28.0
743ecd4 Add explicit resource management to preset-env (#17355)
cd0de90 Update babel-polyfill packages (#17403)
fdbf1b3 fix: finally causes unexpected return value (#17366)
7ba1afa Update babel 8 preset env fixtures (#17356)
5b9468d Reduce regenerator size more (#17287)
49c0dbb Fix iterator compatibility of regeneratorValues (#17335)
d23a1bd Use shorter method names for regenerator context (#17334)
fe32019 Reduce regenerator helper size (#17268)
a0690e3 Split regeneratorRuntime into multiple helpers (#17238)
Additional commits viewable in compare view

Updates @eslint/js from 9.28.0 to 9.32.0

Release notes

Sourced from @eslint/js's releases.

v9.32.0

Features

1245000 feat: support explicit resource management in core rules (#19828) (fnx)

0e957a7 feat: support typescript types in accessor rules (#19882) (fnx)

Bug Fixes

960fd40 fix: Upgrade @eslint/js (#19971) (Nicholas C. Zakas)

bbf23fa fix: Refactor reporting into FileReport (#19877) (Nicholas C. Zakas)

d498887 fix: bump @eslint/plugin-kit to 0.3.4 to resolve vulnerability (#19965) (Milos Djermanovic)

f46fc6c fix: report only global references in no-implied-eval (#19932) (Nitin Kumar)

7863d26 fix: remove outdated types in ParserOptions.ecmaFeatures (#19944) (ntnyq)

3173305 fix: update execScript message in no-implied-eval rule (#19937) (TKDev7)

Documentation

86e7426 docs: Update README (GitHub Actions Bot)

Chores

50de1ce chore: package.json update for @eslint/js release (Jenkins)

74f01a3 ci: unpin jiti to version ^2.5.1 (#19970) (루밀LuMir)

2ab1381 ci: pin jiti to version 2.4.2 (#19964) (Francesco Trotta)

b7f7545 test: switch to flat config mode in SourceCode tests (#19953) (Milos Djermanovic)

f5a35e3 test: switch to flat config mode in eslint-fuzzer (#19960) (Milos Djermanovic)

e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#19949) (Francesco Trotta)

e855717 chore: switch performance tests to hyperfine (#19919) (Francesco Trotta)

2f73a23 test: switch to flat config mode in ast-utils tests (#19948) (Milos Djermanovic)

c565a53 chore: exclude further_reading_links.json from Prettier formatting (#19943) (Milos Djermanovic)

v9.31.0

Features

35cf44c feat: output full actual location in rule tester if different (#19904) (ST-DDT)

a6a6325 feat: support explicit resource management in no-loop-func (#19895) (Milos Djermanovic)

4682cdc feat: support explicit resource management in no-undef-init (#19894) (Milos Djermanovic)

5848216 feat: support explicit resource management in init-declarations (#19893) (Milos Djermanovic)

bb370b8 feat: support explicit resource management in no-const-assign (#19892) (Milos Djermanovic)

Bug Fixes

07fac6c fix: retry on EMFILE when writing autofix results (#19926) (TKDev7)

28cc7ab fix: Remove incorrect RuleContext types (#19910) (Nicholas C. Zakas)

Documentation

664cb44 docs: Update README (GitHub Actions Bot)

40dbe2a docs: fix mismatch between globalIgnores() code and text (#19914) (MaoShizhong)

5a0069d docs: Update README (GitHub Actions Bot)

fef04b5 docs: Update working on issues info (#19902) (Nicholas C. Zakas)

Chores

3ddd454 chore: upgrade to @eslint/[email protected] (#19935) (Francesco Trotta)

d5054e5 chore: package.json update for @eslint/js release (Jenkins)

0f4a378 chore: update eslint (#19933) (renovate[bot])

76c2340 chore: bump mocha to v11 (#19917) (루밀LuMir)

... (truncated)

Changelog

Sourced from @eslint/js's changelog.

v9.32.0 - July 25, 2025

960fd40 fix: Upgrade @eslint/js (#19971) (Nicholas C. Zakas)

50de1ce chore: package.json update for @eslint/js release (Jenkins)

bbf23fa fix: Refactor reporting into FileReport (#19877) (Nicholas C. Zakas)

74f01a3 ci: unpin jiti to version ^2.5.1 (#19970) (루밀LuMir)

d498887 fix: bump @eslint/plugin-kit to 0.3.4 to resolve vulnerability (#19965) (Milos Djermanovic)

2ab1381 ci: pin jiti to version 2.4.2 (#19964) (Francesco Trotta)

b7f7545 test: switch to flat config mode in SourceCode tests (#19953) (Milos Djermanovic)

f5a35e3 test: switch to flat config mode in eslint-fuzzer (#19960) (Milos Djermanovic)

f46fc6c fix: report only global references in no-implied-eval (#19932) (Nitin Kumar)

86e7426 docs: Update README (GitHub Actions Bot)

e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#19949) (Francesco Trotta)

1245000 feat: support explicit resource management in core rules (#19828) (fnx)

e855717 chore: switch performance tests to hyperfine (#19919) (Francesco Trotta)

0e957a7 feat: support typescript types in accessor rules (#19882) (fnx)

2f73a23 test: switch to flat config mode in ast-utils tests (#19948) (Milos Djermanovic)

7863d26 fix: remove outdated types in ParserOptions.ecmaFeatures (#19944) (ntnyq)

c565a53 chore: exclude further_reading_links.json from Prettier formatting (#19943) (Milos Djermanovic)

3173305 fix: update execScript message in no-implied-eval rule (#19937) (TKDev7)

v9.31.0 - July 11, 2025

3ddd454 chore: upgrade to @eslint/[email protected] (#19935) (Francesco Trotta)

d5054e5 chore: package.json update for @eslint/js release (Jenkins)

0f4a378 chore: update eslint (#19933) (renovate[bot])

664cb44 docs: Update README (GitHub Actions Bot)

07fac6c fix: retry on EMFILE when writing autofix results (#19926) (TKDev7)

35cf44c feat: output full actual location in rule tester if different (#19904) (ST-DDT)

40dbe2a docs: fix mismatch between globalIgnores() code and text (#19914) (MaoShizhong)

76c2340 chore: bump mocha to v11 (#19917) (루밀LuMir)

28cc7ab fix: Remove incorrect RuleContext types (#19910) (Nicholas C. Zakas)

a6a6325 feat: support explicit resource management in no-loop-func (#19895) (Milos Djermanovic)

4682cdc feat: support explicit resource management in no-undef-init (#19894) (Milos Djermanovic)

5848216 feat: support explicit resource management in init-declarations (#19893) (Milos Djermanovic)

… updates Bumps the npm-dependencies group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [dotenv](https://github.com/motdotla/dotenv) | `16.5.0` | `17.2.1` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `7.5.0` | `8.0.1` | | [mongoose](https://github.com/Automattic/mongoose) | `8.15.1` | `8.16.5` | | [morgan](https://github.com/expressjs/morgan) | `1.10.0` | `1.10.1` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.27.2` | `7.28.0` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.28.0` | `9.32.0` | | [cross-env](https://github.com/kentcdodds/cross-env) | `7.0.3` | `10.0.0` | | [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) | `10.1.5` | `10.1.8` | | [globals](https://github.com/sindresorhus/globals) | `16.2.0` | `16.3.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.0.5` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.1.0` | `16.1.2` | | [prettier](https://github.com/prettier/prettier) | `3.5.3` | `3.6.2` | | [supertest](https://github.com/ladjs/supertest) | `7.1.1` | `7.1.4` | Updates `dotenv` from 16.5.0 to 17.2.1 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v16.5.0...v17.2.1) Updates `express-rate-limit` from 7.5.0 to 8.0.1 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v7.5.0...v8.0.1) Updates `mongoose` from 8.15.1 to 8.16.5 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@8.15.1...8.16.5) Updates `morgan` from 1.10.0 to 1.10.1 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.10.0...1.10.1) Updates `@babel/preset-env` from 7.27.2 to 7.28.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.0/packages/babel-preset-env) Updates `@eslint/js` from 9.28.0 to 9.32.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/commits/v9.32.0/packages/js) Updates `cross-env` from 7.0.3 to 10.0.0 - [Release notes](https://github.com/kentcdodds/cross-env/releases) - [Changelog](https://github.com/kentcdodds/cross-env/blob/main/CHANGELOG.md) - [Commits](kentcdodds/cross-env@v7.0.3...v10.0.0) Updates `eslint-config-prettier` from 10.1.5 to 10.1.8 - [Release notes](https://github.com/prettier/eslint-config-prettier/releases) - [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-config-prettier@v10.1.5...v10.1.8) Updates `globals` from 16.2.0 to 16.3.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.2.0...v16.3.0) Updates `jest` from 29.7.0 to 30.0.5 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.0.5/packages/jest) Updates `lint-staged` from 16.1.0 to 16.1.2 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.1.0...v16.1.2) Updates `prettier` from 3.5.3 to 3.6.2 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.5.3...3.6.2) Updates `supertest` from 7.1.1 to 7.1.4 - [Release notes](https://github.com/ladjs/supertest/releases) - [Commits](forwardemail/supertest@v7.1.1...v7.1.4) --- updated-dependencies: - dependency-name: dotenv dependency-version: 17.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: express-rate-limit dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: mongoose dependency-version: 8.16.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: morgan dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/preset-env" dependency-version: 7.28.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@eslint/js" dependency-version: 9.32.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: cross-env dependency-version: 10.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: eslint-config-prettier dependency-version: 10.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: globals dependency-version: 16.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: jest dependency-version: 30.0.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: lint-staged dependency-version: 16.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: prettier dependency-version: 3.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: supertest dependency-version: 7.1.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

coderabbitai · 2025-07-28T18:25:53Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Explain this complex logic.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai explain this code block.
- @coderabbitai modularize this function.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read src/utils.ts and explain its main purpose.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
- @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Join our Discord community for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

dependabot · 2025-08-04T09:57:07Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies npm labels Jul 28, 2025

dependabot bot requested a review from kjanat as a code owner July 28, 2025 18:25

dependabot bot added dependencies npm labels Jul 28, 2025

dependabot bot closed this Aug 4, 2025

dependabot bot deleted the dependabot/npm_and_yarn/npm-dependencies-2bcdde550f branch August 4, 2025 09:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

npm(deps): bump the npm-dependencies group across 1 directory with 13 updates #29

npm(deps): bump the npm-dependencies group across 1 directory with 13 updates #29

Uh oh!

dependabot bot commented on behalf of github Jul 28, 2025 •

edited

Loading

Uh oh!

coderabbitai bot commented Jul 28, 2025

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (`.coderabbit.yaml`)

Documentation and Community

Uh oh!

dependabot bot commented on behalf of github Aug 4, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

npm(deps): bump the npm-dependencies group across 1 directory with 13 updates #29

npm(deps): bump the npm-dependencies group across 1 directory with 13 updates #29

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

17.2.1 (2025-07-24)

Changed

17.2.0 (2025-07-09)

Added

17.1.0 (2025-07-07)

Added

v8.0.1

v8.0.0

v7.5.1

Changed

8.16.5 / 2025-07-25

8.16.4 / 2025-07-16

8.16.3 / 2025-07-10

8.16.2 / 2025-07-07

8.16.1 / 2025-06-26

8.16.0 / 2025-06-16

8.15.2 / 2025-06-12

8.16.5 / 2025-07-25

8.16.4 / 2025-07-16

8.16.3 / 2025-07-10

8.16.2 / 2025-07-07

8.16.1 / 2025-06-26

8.16.0 / 2025-06-16

8.15.2 / 2025-06-12

1.10.1

What's Changed

New Contributors

1.10.1 / 2025-07-17

v7.28.0 (2025-07-02)

🚀 New Feature

🐛 Bug Fix

🏠 Internal

Committers: 5

v7.27.7 (2025-06-26)

👓 Spec Compliance

🐛 Bug Fix

v7.28.0 (2025-07-02)

🚀 New Feature

🐛 Bug Fix

🏠 Internal

v7.27.7 (2025-06-26)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

v9.32.0

Features

Bug Fixes

Documentation

Chores

v9.31.0

Features

Bug Fixes

Documentation

Chores

Uh oh!

coderabbitai bot commented Jul 28, 2025

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (.coderabbit.yaml)

Documentation and Community

Uh oh!

dependabot bot commented on behalf of github Aug 4, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jul 28, 2025 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)