Skip to content

Bump @pinecone-database/pinecone from 6.1.1 to 8.2.0 - #19

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pinecone-database/pinecone-8.2.0
Open

Bump @pinecone-database/pinecone from 6.1.1 to 8.2.0#19
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pinecone-database/pinecone-8.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown

Bumps @pinecone-database/pinecone from 6.1.1 to 8.2.0.

Release notes

Sourced from @​pinecone-database/pinecone's releases.

Release v8.2.0

AdminClient: manage organizations, projects, and access (2026-04)

This release adds AdminClient, a second top-level entry point covering the Pinecone Admin API. It manages an organization and the resources beneath it including projects, API keys, service accounts, role bindings, invites, and users.

The Admin API authenticates differently from the rest of the SDK using service-account OAuth2 rather than a project Api-Key.

Authentication

Create a service account in the console under Organization Settings → Service Accounts, then either pass its credentials directly or set PINECONE_CLIENT_ID / PINECONE_CLIENT_SECRET:

import { AdminClient } from '@pinecone-database/pinecone';
// Reads PINECONE_CLIENT_ID / PINECONE_CLIENT_SECRET from the environment
const admin = new AdminClient();
// ...or pass credentials explicitly
const admin = new AdminClient({
clientId: 'your_client_id',
clientSecret: 'your_client_secret',
});

The AdminClient constructor is synchronous. The bearer token is fetched lazily on the first admin request and then cached for the lifetime of the client, with concurrent first calls sharing a single in-flight exchange. There is no proactive refresh, so a client held past its token's server-side expiry should be recreated. Rejected credentials surface as PineconeAuthorizationError, so instanceof checks behave the same as they do on the Pinecone client.

Resource surface

Sub-client Methods
admin.projects create describe list update delete
admin.organizations describe list update delete
admin.apiKeys create describe list update delete
admin.serviceAccounts create describe list update rotateSecret delete
admin.roleBindings create describe list delete
admin.invites create describe list resend delete
admin.users describe list delete
const project = await admin.projects.create({ name: 'my-project' });
// List operations return their results under data
const { data: projects } = await admin.projects.list();
// create returns the new record alongside its secret, which is shown only once
const { serviceAccount, clientSecret } = await admin.serviceAccounts.create({
name: 'ci-runner',
});
await admin.roleBindings.create({
</tr></table>

... (truncated)

Commits
  • 4070122 [skip ci] Publish release v8.2.0
  • 83231ef Bump dev dependencies and group REPL env var warnings (#425)
  • d04f743 Add AdminClient for the Pinecone Admin API (v2026-04) (#424)
  • a98d447 Regenerate 2026-04 to pull in admin API module (#420)
  • 52acf4a Add jest-util as an explicit dev dependency (#421)
  • c06da2e [skip ci] Publish release v8.1.0
  • ca078d0 Implement list and update for alpha preview operations (#392)
  • 4e6422a chore(deps): bump eslint to v10 + migrate to flat config (#409) (#419)
  • aadfceb chore(deps): bump @​types/node to 26.1.1 (#410) (#418)
  • 236c2e2 chore(deps): bump jest + @​types/jest to v30 (#405) (#417)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​pinecone-database/pinecone since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Medium Risk
Two major SDK versions with a Node 20 floor may break Zapier builds or existing Pinecone client calls until tests and deploy runtime are verified.

Overview
Dependabot bumps @pinecone-database/pinecone from ^6.1.1 to ^8.2.0 in package.json and package-lock.json. No integration source files change in this diff.

The locked client now requires Node >=20 (previously >=18). v8 adds optional AdminClient and other SDK changes across the v6→v8 span; this Zapier app still imports Pinecone only in creates/actions, so the main review item is runtime/API compatibility after the major upgrade, not new app features.

Reviewed by Cursor Bugbot for commit d72b1a2. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [@pinecone-database/pinecone](https://github.com/pinecone-io/pinecone-ts-client) from 6.1.1 to 8.2.0.
- [Release notes](https://github.com/pinecone-io/pinecone-ts-client/releases)
- [Commits](pinecone-io/pinecone-ts-client@v6.1.1...v8.2.0)

---
updated-dependencies:
- dependency-name: "@pinecone-database/pinecone"
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants