build(deps): bump the npm_and_yarn group across 3 directories with 6 updates by dependabot[bot] · Pull Request #390 · simnova/sharethrift

dependabot · 2026-07-08T16:07:54Z

Bumps the npm_and_yarn group with 4 updates in the / directory: turbo, mongoose, vite and vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/cellix/service-messaging-mock directory: axios.
Bumps the npm_and_yarn group with 1 update in the /packages/cellix/service-payment-mock directory: axios.

Updates turbo from 2.8.19 to 2.9.14

Release notes

Sourced from turbo's releases.

Turborepo v2.9.14

[!NOTE] This release contains important security fixes.

High:

GHSA-5xc8-49mv-x4mm: Turborepo VSCode Extension command injection

Low:

GHSA-hcf7-66rw-9f5r: Login callback CSRF/session fixation

GHSA-3qcw-2rhx-2726: Unexpected local code execution during Yarn Berry detection

What's Changed

Changelog

release(turborepo): 2.9.12 by @github-actions[bot] in vercel/turborepo#12774

fix: Restore docs mobile menu by @anthonyshew in vercel/turborepo#12782

ci: Use pull_request for PR title linting by @anthonyshew in vercel/turborepo#12787

ci: Scope GitHub Actions caches by branch by @anthonyshew in vercel/turborepo#12788

test: Validate lockfiles without dependency downloads by @anthonyshew in vercel/turborepo#12789

Removed unneeded import form hash creation script in docs by @dancrumb in vercel/turborepo#12799

fix: Validate auth callback state by @anthonyshew in vercel/turborepo#12802

fix: Harden VS Code extension command execution by @anthonyshew in vercel/turborepo#12800

fix: Avoid project-local Yarn during detection by @anthonyshew in vercel/turborepo#12801

chore: Release 2.9.13 by @anthonyshew in vercel/turborepo#12803

New Contributors

@dancrumb made their first contribution in vercel/turborepo#12799

Full Changelog: vercel/turborepo@v2.9.12...v2.9.14

Turborepo v2.9.13-canary.1

What's Changed

Changelog

release(turborepo): 2.9.11-canary.7 by @github-actions[bot] in vercel/turborepo#12768

fix: Allow $TURBO_EXTENDS$ in LSP diagnostics by @anthonyshew in vercel/turborepo#12770

release(turborepo): 2.9.11 by @github-actions[bot] in vercel/turborepo#12771

fix: Allow transit nodes in LSP diagnostics by @anthonyshew in vercel/turborepo#12773

release(turborepo): 2.9.12 by @github-actions[bot] in vercel/turborepo#12774

fix: Restore docs mobile menu by @anthonyshew in vercel/turborepo#12782

ci: Use pull_request for PR title linting by @anthonyshew in vercel/turborepo#12787

ci: Scope GitHub Actions caches by branch by @anthonyshew in vercel/turborepo#12788

test: Validate lockfiles without dependency downloads by @anthonyshew in vercel/turborepo#12789

Removed unneeded import form hash creation script in docs by @dancrumb in vercel/turborepo#12799

fix: Validate auth callback state by @anthonyshew in vercel/turborepo#12802

fix: Harden VS Code extension command execution by @anthonyshew in vercel/turborepo#12800

fix: Avoid project-local Yarn during detection by @anthonyshew in vercel/turborepo#12801

... (truncated)

Commits

fc62fe0 publish 2.9.14 to registry
fb8c9ae chore: Release 2.9.13 (#12803)
e8e629d fix: Avoid project-local Yarn during detection (#12801)
91c90cb fix: Harden VS Code extension command execution (#12800)
84f4508 fix: Validate auth callback state (#12802)
1779ad7 Removed unneeded import form hash creation script in docs (#12799)
71f8c90 test: Validate lockfiles without dependency downloads (#12789)
5fcb960 ci: Scope GitHub Actions caches by branch (#12788)
4cf9fab ci: Use pull_request for PR title linting (#12787)
859c629 fix: Restore docs mobile menu (#12782)
Additional commits viewable in compare view

Updates mongoose from 8.17.0 to 8.22.1

Release notes

Sourced from mongoose's releases.

8.22.1 / 2025-02-04

fix: handle other top-level query operators in sanitizeFilter

fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901

types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910

types: add toBSON() to documents #15927

8.22.0 / 2026-01-27

feat(model): allow passing strict option to hydrate() #15944 #15940

8.21.1

fix(clone): fix parent doc for map subdocuments and array subdocuments #15958 AbdelrahmanHafez

fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901

fix: respect currentTime schema option in bulkWrite updates #15976 sderrow

types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910

types: add toBSON() to documents #15927

8.21.0 / 2025-12-29

feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817

feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870

fix: add support for typescript style enums #15914 #15913 mjfwebb

8.20.4 / 2025-12-18

fix(model): ensure $isDeleted is set after calling doc.deleteOne() successfully #15898

fix(document): use bitwise OR to accumulate version mode flags #15893 #15888 AbdelrahmanHafez

8.20.3 / 2025-12-15

perf: use Object.hasOwn instead of Object#hasOwnProperty #15875 AbdelrahmanHafez

fix: improve error when calling Document.prototype.init() with null/undefined #15812 Vegapunk-debug

types(schema): avoid treating paths with default: null as required #15889

types(schema): allow partial statics to schema.statics() #15780

8.20.2 / 2025-12-05

fix(model): bump version if necessary after successful bulkSave() #15809 #15800

fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15789 #15782 #15781

types(schema): allow calling schema.static() with as TStatics #15794 #15780

8.20.1 / 2025-11-20

types: correct Model.schema type and fix unknown check for this param type in schema.methods #15750 #15693

docs: add detailed loadClass() TypeScript usage guide #15731 #12813 Necro-Rohan

docs: update version support documentation for Mongoose #15761 ManmathX

docs: add copy-to-clipboard feature for code blocks in docs #15759 vedansha07

8.20.0 / 2025-11-17

... (truncated)

Changelog

Sourced from mongoose's changelog.

8.22.1 / 2026-02-04

fix: handle other top-level query operators in sanitizeFilter

fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901

types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910

types: add toBSON() to documents #15927

7.8.9 / 2026-02-04

fix: handle other top-level query operators in sanitizeFilter

8.22.0 / 2026-01-27

feat(model): allow passing strict option to hydrate() #15944 #15940

8.21.1 / 2026-01-23

fix(clone): fix parent doc for map subdocuments and array subdocuments #15958 AbdelrahmanHafez

fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901

fix: respect currentTime schema option in bulkWrite updates #15976 sderrow

types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910

types: add toBSON() to documents #15927

9.1.5 / 2026-01-20

fix(map): validate map subdocument when loaded with init #15960 #15957 AbdelrahmanHafez

fix(discriminator): prevent indexes and callQueue duplication with shared nested schemas #15974 #15966 AbdelrahmanHafez

fix(subdocuments): do not pass parent path on init #15970 #15969 #15682 AbdelrahmanHafez

types(inferrawdoctype): correct handling for subdocs and doc arrays #15967 #13772

docs: improve grammar and clarity in TypeScript schema comments #15971 harshsinghpujari

9.1.4 / 2026-01-15

fix: attach sessions to docs retrieved by cursor #15953 #15949 mjfwalsh

fix(model): make hydrate() handle nested schema arrays #15964 #15956

fix(clone): fix parent doc for map subdocuments and array subdocuments #15958 #15954 AbdelrahmanHafez

fix: prevent crash when accessing nested paths on prototype #15962 #15961 som14062005

9.1.3 / 2026-01-09

fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig #15941 #15938

fix(query): include preview of current and incoming update in error when merging normal update with pipeline #15939 #15928

types(model): apply basic type casting to paths underneath subdocuments #15948 #15947

types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members #15942 #15923

docs(schema): expose "DocumentArrayElement" #15590 hasezoey

9.1.2 / 2026-01-05

fix(subdocs): pass options to pre-save hooks for subdocs #15921 #15920 AbdelrahmanHafez

perf(model): select only _id when checking document existence during save() #15919 AbdelrahmanHafez

... (truncated)

Commits

472e7c7 chore: release 8.22.1
1735149 Merge branch '7.x' into 8.x
5227801 chore: release 7.8.9
b804e34 fix: handle other top-level query operators in sanitizeFilter
8d9a81f chore: release 8.22.0
f752854 Merge pull request #15985 from Automattic/8.22
e7a57ed avoid hardcoding dbName
31adbb4 chore: release 8.21.1
62a5af7 test: bring test cases from #15958 into 8.x to ensure fixes are applied in 8.x
bc8cb23 implement review suggestions
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mongoose since your current version.

Updates vite from 7.3.2 to 7.3.5

Release notes

Sourced from vite's releases.

v7.3.5

Please refer to CHANGELOG.md for details.

v7.3.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.3.5 (2026-06-01)

Bug Fixes

backport #22572, reject windows alternate paths (#22574) (8c18556)

deps: backport #22571, reject UNC paths for launch-editor-middleware (#22573) (f20d64b)

Miscellaneous Chores

skip v7.3.4 release (8a6a0c9)

7.3.4 (2026-06-01)

Bug Fixes

backport #22572, reject windows alternate paths (#22574) (8c18556)

deps: backport #22571, reject UNC paths for launch-editor-middleware (#22573) (f20d64b)

7.3.3 (2026-05-07)

Bug Fixes

avoid destructure lowering for newer safari (#22346) (5ab51c0)

Commits

077945c release: v7.3.5
8a6a0c9 chore: skip v7.3.4 release
8c18556 fix: backport #22572, reject windows alternate paths (#22574)
f20d64b fix(deps): backport #22571, reject UNC paths for launch-editor-middleware (#2...
ca31424 release: v7.3.3
5ab51c0 fix: avoid destructure lowering for newer safari (#22346)
See full diff in compare view

Updates vitest from 4.0.18 to 4.1.0

Release notes

Sourced from vitest's releases.

v4.1.0

Vitest 4.1 is out!

This release page lists all changes made to the project during the 4.1 beta. To get a review of all the new features, read our blog post.

🚀 Features

Return a disposable from doMock() - by @kirkwaiblinger in vitest-dev/vitest#9332 (e3e65)

Added chai style assertions - by @ronnakamoto and @sheremet-va in vitest-dev/vitest#8842 (841df)

Update to sinon/fake-timers v15 and add setTickMode to timer controls - by @atscott and @sheremet-va in vitest-dev/vitest#8726 (4b480)

Expose matcher types - by @sheremet-va in vitest-dev/vitest#9448 (3e4b9)

Add toTestSpecification to reported tasks - by @sheremet-va in vitest-dev/vitest#9464 (1a470)

Show a warning if vi.mock or vi.hoisted are declared outside of top level of the module - by @sheremet-va in vitest-dev/vitest#9387 (5db54)

Track and display expectedly failed tests (.fails) in UI and CLI - by @Copilot, sheremet-va and @sheremet-va in vitest-dev/vitest#9476 (77d75)

Support tags - by @sheremet-va in vitest-dev/vitest#9478 (de7c8)

Implement aroundEach and aroundAll hooks - by @sheremet-va in vitest-dev/vitest#9450 (2a8cb)

Stabilize experimental features - by @sheremet-va in vitest-dev/vitest#9529 (b5fd2)

Accept new or all in --update flag - by @sheremet-va in vitest-dev/vitest#9543 (a5acf)

Support meta in test options - by @sheremet-va in vitest-dev/vitest#9535 (7d622)

Support type inference with a new test.extend syntax - by @sheremet-va in vitest-dev/vitest#9550 (e5385)

Support vite 8 beta, fix type issues in the config with different vite versions - by @sheremet-va in vitest-dev/vitest#9587 (99028)

Add assertion helper to hide internal stack traces - by @hi-ogawa and Claude Opus 4.6 in vitest-dev/vitest#9594 (eeb0a)

Store failure screenshots using artifacts API - by @macarie in vitest-dev/vitest#9588 (24603)

Allow vitest list to statically collect tests instead of running files to collect them - by @sheremet-va in vitest-dev/vitest#9630 (7a8e7)

Add --detect-async-leaks - by @AriPerkkio in vitest-dev/vitest#9528 (c594d)

Implement mockThrow and mockThrowOnce - by @thor-juhasz and @sheremet-va in vitest-dev/vitest#9512 (61917)

Support update: "none" and add docs about snapshots behavior on CI - by @hi-ogawa in vitest-dev/vitest#9700 (05f18)

Support playwright launchOptions with connectOptions - by @hi-ogawa in vitest-dev/vitest#9702 (f0ff1)

Add page/locator.mark API to enhance playwright trace - by @hi-ogawa in vitest-dev/vitest#9652 (d0ee5)

api:

Support tests starting or ending with test in experimental_parseSpecification - by @jgillick and Jeremy Gillick in vitest-dev/vitest#9235 (2f367)

Add filters to createSpecification - by @sheremet-va in vitest-dev/vitest#9336 (c8e6c)

Expose runTestFiles as alternative to runTestSpecifications - by @sheremet-va in vitest-dev/vitest#9443 (43d76)

Add allowWrite and allowExec options to api - by @sheremet-va in vitest-dev/vitest#9350 (20e00)

Allow passing down test cases to toTestSpecification - by @sheremet-va in vitest-dev/vitest#9627 (6f17d)

browser:

Add userEvent.wheel API - by @macarie in vitest-dev/vitest#9188 (66080)

Add filterNode option to prettyDOM for filtering browser assertion error output - by @Copilot, sheremet-va and @sheremet-va in vitest-dev/vitest#9475 (d3220)

Support playwright persistent context - by @hi-ogawa, Claude Opus 4.6 and @sheremet-va in vitest-dev/vitest#9229 (f865d)

Added detailsPanelPosition option and button - by @shairez in vitest-dev/vitest#9525 (c8a31)

Use BlazeDiff instead of pixelmatch - by @macarie in vitest-dev/vitest#9514 (30936)

Add findElement and enable strict mode in webdriverio and preview - by @sheremet-va in vitest-dev/vitest#9677 (c3f37)

cli:

Add @bomb.sh/tab completions - by @AmirSa12 and @sheremet-va in vitest-dev/vitest#8639 (200f3)

coverage:

Support ignore start/stop ignore hints - by @AriPerkkio in vitest-dev/vitest#9204 (e59c9)

Add coverage.changed option to report only changed files - by @kykim00 and @AriPerkkio in vitest-dev/vitest#9521 (1d939)

experimental:

Add onModuleRunner hook to worker.init - by @sheremet-va in vitest-dev/vitest#9286 (e977f)

Option to disable the module runner - by @sheremet-va and @AriPerkkio in vitest-dev/vitest#9210 (9be61)

... (truncated)

Commits

4150b91 chore: release v4.1.0
1de0aa2 fix: correctly identify concurrent test during static analysis (#9846)
c3cac1c fix: use isAgent check, not just TTY, for watch mode (#9841)
eab68ba chore(deps): update all non-major dependencies (#9824)
031f02a fix: allow catch/finally for async assertion (#9827)
3e9e096 feat(reporters): add agent reporter to reduce ai agent token usage (#9779)
0c2c013 chore: release v4.1.0-beta.6
8181e06 fix: hideSkippedTests should not hide test.todo (fix #9562) (#9781)
a8216b0 fix: manual and redirect mock shouldn't load or transform original module...
689a22a fix(browser): types of getCDPSession and cdp() (#9716)
Additional commits viewable in compare view

Updates form-data from 2.5.5 to 2.5.6

Changelog

Sourced from form-data's changelog.

v2.5.6 - 2026-06-12

Commits

[Fix] escape CR, LF, and " in field names and filenames b620316

[Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape 12be578

[Dev Deps] update js-randomness-predictor 46cfd23

[Tests] use safe-buffer so the header-injection test runs on node < 4 633044a

[Deps] update hasown e3b96ee

Commits

c713349 v2.5.6
46cfd23 [Dev Deps] update js-randomness-predictor
633044a [Tests] use safe-buffer so the header-injection test runs on node < 4
e3b96ee [Deps] update hasown
12be578 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape
b620316 [Fix] escape CR, LF, and " in field names and filenames
See full diff in compare view

Updates mongoose from 8.17.0 to 8.22.1

Release notes

Sourced from mongoose's releases.

8.22.1 / 2025-02-04

fix: handle other top-level query operators in sanitizeFilter

fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901

types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910

types: add toBSON() to documents #15927

8.22.0 / 2026-01-27

feat(model): allow passing strict option to hydrate() #15944 #15940

8.21.1

fix(clone): fix parent doc for map subdocuments and array subdocuments #15958 AbdelrahmanHafez

fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901

fix: respect currentTime schema option in bulkWrite updates #15976 sderrow

types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910

types: add toBSON() to documents #15927

8.21.0 / 2025-12-29

feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817

feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870

fix: add support for typescript style enums #15914 #15913 mjfwebb

8.20.4 / 2025-12-18

fix(model): ensure $isDeleted is set after calling doc.deleteOne() successfully #15898

fix(document): use bitwise OR to accumulate version mode flags #15893 #15888 AbdelrahmanHafez

8.20.3 / 2025-12-15

perf: use Object.hasOwn instead of Object#hasOwnProperty #15875 AbdelrahmanHafez

fix: improve error when calling Document.prototype.init() with null/undefined #15812 Vegapunk-debug

types(schema): avoid treating paths with default: null as required #15889

types(schema): allow partial statics to schema.statics() #15780

8.20.2 / 2025-12-05

fix(model): bump version if necessary after successful bulkSave() #15809 #15800

fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15789 #15782 #15781

types(schema): allow calling schema.static() with as TStatics #15794 #15780

8.20.1 / 2025-11-20

types: correct Model.schema type and fix unknown check for this param type in schema.methods #15750 #15693

docs: add detailed loadClass() TypeScript usage guide #15731 #12813 Necro-Rohan

docs: update version support documentation for Mongoose #15761 ManmathX

docs: add copy-to-clipboard feature for code blocks in docs #15759 vedansha07

8.20.0 / 2025-11-17

... (truncated)

Changelog

Sourced from mongoose's changelog.

8.22.1 / 2026-02-04

fix: handle other top-level query operators in sanitizeFilter

fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901

types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910

types: add toBSON() to documents #15927

7.8.9 / 2026-02-04

fix: handle other top-level query operators in sanitizeFilter

8.22.0 / 2026-01-27

feat(model): allow passing strict option to hydrate() #15944 #15940

8.21.1 / 2026-01-23

fix(clone): fix parent doc for map subdocuments and array subdocuments #15958 AbdelrahmanHafez

fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901

fix: respect currentTime schema option in bulkWrite updates #15976 sderrow

types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910

types: add toBSON() to documents #15927

9.1.5 / 2026-01-20

fix(map): validate map subdocument when loaded with init #15960 #15957 AbdelrahmanHafez

fix(discriminator): prevent indexes and callQueue duplication with shared nested schemas #15974 #15966 AbdelrahmanHafez

fix(subdocuments): do not pass parent path on init #15970 #15969 #15682 AbdelrahmanHafez

types(inferrawdoctype): correct handling for subdocs and doc arrays #15967 #13772

docs: improve grammar and clarity in TypeScript schema comments #15971 harshsinghpujari

9.1.4 / 2026-01-15

fix: attach sessions to docs retrieved by cursor #15953 #15949 mjfwalsh

fix(model): make hydrate() handle nested schema arrays #15964 #15956

fix(clone): fix parent doc for map subdocuments and array subdocuments #15958 #15954 AbdelrahmanHafez

fix: prevent crash when accessing nested paths on prototype #15962 #15961 som14062005

9.1.3 / 2026-01-09

fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig #15941 #15938

fix(query): include preview of current and incoming update in error when merging normal update with pipeline #15939 #15928

types(model): apply basic type casting to paths underneath subdocuments #15948 #15947

types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members #15942 #15923

docs(schema): expose "DocumentArrayElement" #15590 hasezoey

9.1.2 / 2026-01-05

fix(subdocs): pass options to pre-save hooks for subdocs #15921 #15920 AbdelrahmanHafez

perf(model): select only _id when checking document existence during save() #15919 AbdelrahmanHafez

... (truncated)

Commits

472e7c7 chore: release 8.22.1
1735149 Merge branch '7.x' into 8.x
5227801 chore: release 7.8.9
b804e34 fix: handle other top-level query operators in sanitizeFilter
8d9a81f chore: release 8.22.0
f752854 Merge pull request #15985 from Automattic/8.22
e7a57ed avoid hardcoding dbName
CVE-2026-42334 — Mongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection
Resolves CVE-2026-47429 — When Vitest UI server is listening, arbitrary file can be read and executed
Resolves 1/2 issues in vite

…updates Bumps the npm_and_yarn group with 4 updates in the / directory: [turbo](https://github.com/vercel/turborepo), [mongoose](https://github.com/Automattic/mongoose), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 1 update in the /packages/cellix/service-messaging-mock directory: [axios](https://github.com/axios/axios). Bumps the npm_and_yarn group with 1 update in the /packages/cellix/service-payment-mock directory: [axios](https://github.com/axios/axios). Updates `turbo` from 2.8.19 to 2.9.14 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.8.19...v2.9.14) Updates `mongoose` from 8.17.0 to 8.22.1 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@8.17.0...8.22.1) Updates `vite` from 7.3.2 to 7.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite) Updates `vitest` from 4.0.18 to 4.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest) Updates `form-data` from 2.5.5 to 2.5.6 - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v2.5.5...v2.5.6) Updates `mongoose` from 8.17.0 to 8.22.1 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@8.17.0...8.22.1) Updates `turbo` from 2.8.19 to 2.9.14 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.8.19...v2.9.14) Updates `vite` from 7.3.2 to 7.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite) Updates `vitest` from 4.0.18 to 4.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest) Updates `form-data` from 2.5.5 to 2.5.6 - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v2.5.5...v2.5.6) Updates `mongoose` from 8.17.0 to 8.22.1 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@8.17.0...8.22.1) Updates `turbo` from 2.8.19 to 2.9.14 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.8.19...v2.9.14) Updates `vite` from 7.3.2 to 7.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite) Updates `vitest` from 4.0.18 to 4.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest) Updates `form-data` from 2.5.5 to 2.5.6 - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v2.5.5...v2.5.6) Updates `mongoose` from 8.17.0 to 8.22.1 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@8.17.0...8.22.1) Updates `turbo` from 2.8.19 to 2.9.14 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.8.19...v2.9.14) Updates `vite` from 7.3.2 to 7.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite) Updates `vitest` from 4.0.18 to 4.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest) Updates `form-data` from 2.5.5 to 2.5.6 - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v2.5.5...v2.5.6) Updates `mongoose` from 8.17.0 to 8.22.1 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@8.17.0...8.22.1) Updates `turbo` from 2.8.19 to 2.9.14 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.8.19...v2.9.14) Updates `vite` from 7.3.2 to 7.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite) Updates `vitest` from 4.0.18 to 4.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest) Updates `form-data` from 2.5.5 to 2.5.6 - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v2.5.5...v2.5.6) Updates `axios` from 1.15.2 to 1.16.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.0) Updates `axios` from 1.15.2 to 1.16.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.0) Updates `axios` from 1.15.2 to 1.16.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.0) Updates `axios` from 1.15.2 to 1.16.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.0) Updates `axios` from 1.15.2 to 1.16.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.0) Updates `axios` from 1.15.2 to 1.16.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.0) Updates `axios` from 1.15.2 to 1.16.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.0) Updates `axios` from 1.15.2 to 1.16.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.0) Updates `axios` from 1.15.2 to 1.16.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.0) Updates `axios` from 1.15.2 to 1.16.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.0) --- updated-dependencies: - dependency-name: turbo dependency-version: 2.9.14 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: mongoose dependency-version: 8.22.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.3.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 2.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mongoose dependency-version: 8.22.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: turbo dependency-version: 2.9.14 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.3.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 2.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mongoose dependency-version: 8.22.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: turbo dependency-version: 2.9.14 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.3.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 2.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mongoose dependency-version: 8.22.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: turbo dependency-version: 2.9.14 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.3.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 2.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mongoose dependency-version: 8.22.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: turbo dependency-version: 2.9.14 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.3.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 2.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.16.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.16.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.16.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.16.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.16.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.16.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.16.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.16.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.16.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.16.0 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from a team July 8, 2026 16:07

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 8, 2026

dependabot Bot requested review from jasonmorais and nnoce14 as code owners July 8, 2026 16:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the npm_and_yarn group across 3 directories with 6 updates#390

build(deps): bump the npm_and_yarn group across 3 directories with 6 updates#390
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-4c7aa11a77

dependabot Bot commented on behalf of github Jul 8, 2026 •

edited by sourcery-ai Bot

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 8, 2026 • edited by sourcery-ai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Turborepo v2.9.14

High:

Low:

What's Changed

Changelog

New Contributors

Turborepo v2.9.13-canary.1

What's Changed

Changelog

8.22.1 / 2025-02-04

8.22.0 / 2026-01-27

8.21.1

8.21.0 / 2025-12-29

8.20.4 / 2025-12-18

8.20.3 / 2025-12-15

8.20.2 / 2025-12-05

8.20.1 / 2025-11-20

8.22.1 / 2026-02-04

7.8.9 / 2026-02-04

8.22.0 / 2026-01-27

8.21.1 / 2026-01-23

9.1.5 / 2026-01-20

9.1.4 / 2026-01-15

9.1.3 / 2026-01-09

9.1.2 / 2026-01-05

v7.3.5

v7.3.3

7.3.5 (2026-06-01)

Bug Fixes

Miscellaneous Chores

7.3.4 (2026-06-01)

Bug Fixes

7.3.3 (2026-05-07)

Bug Fixes

v4.1.0

🚀 Features

v2.5.6 - 2026-06-12

Commits

8.22.1 / 2025-02-04

8.22.0 / 2026-01-27

8.21.1

8.21.0 / 2025-12-29

8.20.4 / 2025-12-18

8.20.3 / 2025-12-15

8.20.2 / 2025-12-05

8.20.1 / 2025-11-20

8.22.1 / 2026-02-04

7.8.9 / 2026-02-04

8.22.0 / 2026-01-27

8.21.1 / 2026-01-23

9.1.5 / 2026-01-20

9.1.4 / 2026-01-15

9.1.3 / 2026-01-09

9.1.2 / 2026-01-05

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 8, 2026 •

edited by sourcery-ai Bot

Loading