Skip to content

ci(deps): bump the major-updates group across 1 directory with 7 updates - #123

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-updates-c6c9839fb0
Closed

ci(deps): bump the major-updates group across 1 directory with 7 updates#123
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-updates-c6c9839fb0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the major-updates group with 7 updates in the / directory:

Package From To
bullmq 5.78.0 6.0.2
js-yaml 4.2.0 5.2.2
openai 6.42.0 7.2.0
typeorm 0.3.30 1.1.0
@types/node 25.9.2 26.1.2
jscpd 4.2.4 5.0.14
typescript 6.0.3 7.0.2

Updates bullmq from 5.78.0 to 6.0.2

Release notes

Sourced from bullmq's releases.

v6.0.2

6.0.2 (2026-07-31)

Bug Fixes

v6.0.1

6.0.1 (2026-07-31)

Bug Fixes

  • add missing sql files to release packages (elixir) (python) (#4413) (a138230)

v6.0.0

6.0.0 (2026-07-30)

BREAKING CHANGES

v5.81.3

5.81.3 (2026-07-30)

Bug Fixes

  • deps: update dependency msgpackr to v2.0.5 [security] (#4387) (6fccb59)
  • deps: update dependency redis [security] (#4369) (2a120df)
  • worker: recover blocking client after sentinel disconnect, fixes… (#4384) (93649b8)

v5.81.2

5.81.2 (2026-07-24)

Bug Fixes

  • prevent unhandled rejection when a connection's init fails before an 'error' listener is attached (#4328) (315ec33)
  • telemetry: emit job.state while preserving job.status compatibility (#4293) (36a3b2a)

v5.81.1

5.81.1 (2026-07-24)

... (truncated)

Commits
  • 2ac754f fix(deps): update dependency redis to v7.4.1 (#4426)
  • a13de5a chore(release): vpy3.0.1 (#4427)
  • 2c700d0 chore(release): vex2.0.1 (#4428)
  • c428aa6 chore(deps): update dependency @​types/pg to v8.20.0 [security] (#4415) [elixi...
  • c99c323 chore(deps): update actions/setup-node digest to 2499707 (#4420)
  • 889844c ci: consolidate API docs into main site and restore older versions (#4414)
  • 640d50e chore(deps): update actions/checkout digest to d23441a (#4419)
  • 93d9d45 chore(deps): update devdependencies (non-major) [security] (#4416)
  • a138230 fix: add missing sql files to release packages (elixir) (python) (#4413)
  • 8a06098 ci: add api pages to main documentation site (#4408)
  • Additional commits viewable in compare view

Updates js-yaml from 4.2.0 to 5.2.2

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).

4.3.0, 3.15.0 - 2026-06-27

Security

  • Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.
  • Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

  • maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

  • Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

Added

  • Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

  • [breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

... (truncated)

Commits

Updates openai from 6.42.0 to 7.2.0

Release notes

Sourced from openai's releases.

v7.2.0

7.2.0 (2026-07-30)

Full Changelog: v7.1.0...v7.2.0

Features

v7.1.0

7.1.0 (2026-07-28)

Full Changelog: v7.0.0...v7.1.0

Features

  • api: transcription model updates (b35ca14)

Chores

  • internal: codegen related update (ee871e5)

v7.0.0

7.0.0 (2026-07-27)

Full Changelog: v6.49.0...v7.0.0

⚠ BREAKING CHANGES

  • require Node.js 22 and codify version support (#2026)

Features

  • require Node.js 22 and codify version support (#2026) (9185cdd)

Build System

  • deps: bump fast-uri in /ecosystem-tests/ts-browser-webpack (#2027) (c6a46b8)
  • deps: bump fast-uri in /ecosystem-tests/vercel-edge (#2024) (8e775cf)
  • deps: bump next from 15.5.20 to 15.5.21 (#2025) (09f0b5e)

v6.49.0

6.49.0 (2026-07-23)

Full Changelog: v6.48.0...v6.49.0

Features

... (truncated)

Changelog

Sourced from openai's changelog.

7.2.0 (2026-07-30)

Full Changelog: v7.1.0...v7.2.0

Features

7.1.0 (2026-07-28)

Full Changelog: v7.0.0...v7.1.0

Features

  • api: transcription model updates (b35ca14)

Chores

  • internal: codegen related update (ee871e5)

7.0.0 (2026-07-27)

Full Changelog: v6.49.0...v7.0.0

⚠ BREAKING CHANGES

  • require Node.js 22 and codify version support (#2026)

Features

  • require Node.js 22 and codify version support (#2026) (9185cdd)

Build System

  • deps: bump fast-uri in /ecosystem-tests/ts-browser-webpack (#2027) (c6a46b8)
  • deps: bump fast-uri in /ecosystem-tests/vercel-edge (#2024) (8e775cf)
  • deps: bump next from 15.5.20 to 15.5.21 (#2025) (09f0b5e)

6.49.0 (2026-07-23)

Full Changelog: v6.48.0...v6.49.0

Features

  • api: accept None for prompt_cache_key/safety_identifier (c54a7f3)
  • api: add support for spend_limit admin apis (e8238b0)
  • helpers: add standard schema support (#1997) (4ced1a8)
  • helpers: add zod realtime function helper (#1996) (ee59911)

... (truncated)

Commits

Updates typeorm from 0.3.30 to 1.1.0

Release notes

Sourced from typeorm's releases.

1.1.0

What's Changed

New Contributors

Full Changelog: typeorm/typeorm@1.0.0...1.1.0

1.0.0

TypeORM v1.0 is here! 🥳

👉 For a structured walk-through of the changes in v1.0 — breaking changes, new features, security fixes, and the upgrade path from 0.3.x — see the v1.0 Release Notes.

... (truncated)

Changelog

Sourced from typeorm's changelog.

1.1.0 (2026-07-13)

Bug Fixes

  • cache: release query runner on error in storeInCache (#12545) (a84b9b3)
  • correct grammar in AlreadyHasActiveConnectionError message (#12554) (304d129)
  • entity-manager: default invalidWhereValuesBehavior to throw on the write path (#12690) (44d8052)
  • entity-manager: validate where criteria in increment/decrement (#12692) (8a51b75)
  • mongodb: use cursor.transform for doc to entity transformation and skip load broadcast in next if toArray (#11926) (0bbefc9)
  • move hashing function to PlatformTools (#12648) (c456cbd)
  • multiple recursive cte problems (#12490) (7c26654)
  • normalization of FindOptionsWhere for arrays and Buffers (#12577) (a8173fc)
  • persistence: preserve select false columns on the in-memory entity after save() (#12501) (324c46c)
  • postgres: improve normalizeDatetimeFunction for tstzrange data type (#12182) (bf47c9f)
  • query-builder: reject empty where criteria on update and delete operations (#12629) (81b9466)
  • query-builder: wrap inner joins under left joins correctly (#11137) (d5f4b9d)
  • remove require() calls that break bundlers (#12647) (30f9fc7)
  • tree-entity: tree entity schema propagation in internal TreeRepository methods (#12590) (7fb7c2c)

Features

1.0.0 (2026-05-19)

👉 For a structured walk-through of the changes in v1.0 — breaking changes, new features, security fixes, and the upgrade path from 0.3.x — see the v1.0 Release Notes.

The list below is the set of commits between 0.3.30 and 1.0.0 — fixes already shipped on the 0.3.x line are listed under their respective 0.3.x entries below.

Bug Fixes

  • cascade: propagate withDeleted to relation-id loader for many-to-many recover (#12287) (cfba9e7)
  • cascade: support cascade remove for OneToMany relations with composite PKs (#12286) (09183c8)
  • cli: preserve devDependencies needed by init command in published package (#12281) (c3b771c)
  • cockroachdb: preserve structured query results during txn retry replay (#11861) (09db48c)
  • codemod: apply find-options select/relations rewrites to .exists() too (#12399) (4461063)
  • codemod: correct relation-count guidance and flag loadRelationCountAndMap (#12374) (5de5490)
  • codemod: cover ColumnMetadata args.options in column option rewrites (#12400) (7a68cf2)
  • codemod: exclude type declarations from build (#12292) (4c645f0)
  • codemod: handle aliases, quoted keys, and ObjectProperty variants (#12377) (2d15644)
  • codemod: handle lock option objects correctly and increase test coverage (#12353) (b871719)
  • codemod: handle typeof type queries and use getStringValue consistently (#12379) (dedea37)
  • codemod: harden destructure and DI accessor rewrites for connection to dataSource rename (#12398) (057ddbc)
  • codemod: harden scope and type-name detection across more AST shapes (#12394) (9d1fd8d)
  • codemod: harden scope, idempotency, and import-strip semantics (#12391) (ed5a19b)
  • codemod: recognize typeorm deep-path imports (#12382) (a96b097)
  • codemod: rename .connection on EntityMetadata, ColumnMetadata, IndexMetadata (#12383) (8a51e30), closes #12249
  • codemod: rewrite typeorm re-exports in barrel files (#12373) (25f0b5f)

... (truncated)

Commits
  • 8748b1b chore(release): prepare v1.1.0 (#12697)
  • 0caca21 style(test): format migration test
  • 41d1c62 Merge commit from fork
  • 8a51b75 fix(entity-manager): validate where criteria in increment/decrement (#12692)
  • 44d8052 fix(entity-manager): default invalidWhereValuesBehavior to throw on the write...
  • af5f2a5 chore: update dependencies (#12678)
  • f5c6aa3 ci: improve pr triage script (#12677)
  • 81b9466 fix(query-builder): reject empty where criteria on update and delete operatio...
  • 30f9fc7 fix: remove require() calls that break bundlers (#12647)
  • c456cbd fix: move hashing function to PlatformTools (#12648)
  • Additional commits viewable in compare view

Updates @types/node from 25.9.2 to 26.1.2

Commits

Updates jscpd from 4.2.4 to 5.0.14

Release notes

Sourced from jscpd's releases.

Release v5.0.14

New Features

  • --cross-formats — detect clones across related formats via format equivalence groups sharing one comparison pool, e.g. --cross-formats "javascript,typescript" or the js-ts preset (javascript,jsx,typescript,tsx). When a group mixes TypeScript with JavaScript, TS files are compared with erasable type syntax stripped (positions still reference the original source), so function f(a: number): void matches function f(a). Also configurable as crossFormats in .jscpd.json / package.json (string, array-of-strings, or array-of-arrays). Cross-format clones are attributed to one member format in per-format statistics. (#810)

Bug Fixes

  • Prose-only Markdown files are now analyzed — the Markdown tokenizer only extracted fenced code blocks, so .md files without code fences produced zero tokens and were silently skipped (-f markdown matched 0 files in Markdown-only projects). Prose is now tokenized too, so duplicated prose is detected as clones, while embedded code fences keep being detected under their own sub-format pools. (#883)

Dependencies

  • Bump regex to 1.13.1 in /rust
  • Bump globset to 0.4.19 in /rust
  • Bump ignore to 0.4.28 in /rust
  • Bump xxhash-rust to 0.8.16 in /rust

Published Packages

  • cpd-core@0.1.7 on crates.io
  • cpd-finder@0.1.9 on crates.io
  • cpd-reporter@0.1.7 on crates.io
  • cpd-tokenizer@0.1.8 on crates.io
  • jscpd@5.0.14 on crates.io
  • cpd@5.0.14 on npm
  • jscpd-darwin-arm64@5.0.14 on npm
  • jscpd-darwin-x64@5.0.14 on npm
  • jscpd-linux-x64-gnu@5.0.14 on npm
  • jscpd-linux-arm64-gnu@5.0.14 on npm
  • jscpd-linux-x64-musl@5.0.14 on npm
  • jscpd-windows-x64-msvc@5.0.14 on npm

Not Yet Published

  • jscpd@5.0.14 (published: 5.0.12)

Release v5.0.12

Highlights

Bug Fixes

  • Rename cpd binary and npm packages to jscpd — the CLI binary was named cpd (cpd.exe on Windows), which collided with an executable name flagged by some antivirus software (McAfee, Trend Micro), causing false-positive blocking. The binary and platform npm packages are now named jscpd / jscpd-*. Closes #826 (#854)
  • Recognize ; line comments for Lisp/Clojure/Scheme/Racket — these languages fell through to C-style comment handling, so ; comments were tokenized as code and --mode weak / --skip-comments couldn't drop them. Closes #849 (#850, thanks @​laurynas-biveinis)
  • Use HTTPS for SARIF schema URI — avoids "untrusted URI" errors in SARIF-consuming tools (#844, thanks @​chrisc-onaorg)

Chores

  • Use public repository URLs for @jscpd/core, @jscpd/finder, @jscpd/tokenizer, @jscpd/html-reporter, @jscpd/badge-reporter, @jscpd/leveldb-store, and @jscpd/redis-store package metadata (#831#837, thanks @​9904099)
  • Add cargo ecosystem to Dependabot config

... (truncated)

Changelog

Sourced from jscpd's changelog.

Changelog

All notable changes to jscpd are documented here. Releases follow Semantic Versioning.


5.0.11

New Features

  • Razor (.razor) support — new tokenizer for Razor files in the Rust backend (thanks to @​chrisc-onaorg in #829)

Dependencies

  • cpd-core bumped to 0.1.6, cpd-tokenizer bumped to 0.1.7

5.0.10

Bug Fixes

  • Emit scan-root-relative paths in all reporters when absolute: false. Fixes #827
  • Fix --skip-local to match jscpd v4 TypeScript semantics

Refactoring

  • DRY duplication in reporters: extract shared helpers into cpd-reporter/src/shared.rs
  • Move blame enrichment from gitoxide to git blame --porcelain

5.0.9

New Features

  • GitHub Action for jscpd (Rust v5) — jscpd-copy-paste-detector action for GitHub Actions Marketplace. Scan your repo for copy/paste in CI with uses: kucherenko/jscpd/.github/workflows/action.yml@v5

Bug Fixes

  • Resolve platform binary resolution when cpd is installed as a nested dependency (e.g. in a project's node_modules via a parent package). The runner now correctly locates the platform-specific binary relative to the installed package rather than assuming a top-level install. Fixes #816

5.0.8

Bug Fixes

  • Prevent mmap exhaustion crashes when scanning repositories with more files than vm.max_map_count (default 131 072 on Linux). The walker previously held a live Mmap per discovered file; each rayon worker now opens and drops its mapping within the processing closure, capping concurrent mappings to the thread-pool size (typically 8–32). Fixes #813
  • Fix --pattern not matching relative paths when the scan root is absolute (e.g. CWD). Patterns like src/**/*.ts now match correctly by comparing against both the relative path and the full absolute path, and bare patterns like *.ts gain a **/ prefix to match at any depth. Fixes #811

... (truncated)

Commits

Updates typescript from 6.0.3 to 7.0.2

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the major-updates group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.78.0` | `6.0.2` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.2.0` | `5.2.2` |
| [openai](https://github.com/openai/openai-node) | `6.42.0` | `7.2.0` |
| [typeorm](https://github.com/typeorm/typeorm) | `0.3.30` | `1.1.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.2` | `26.1.2` |
| [jscpd](https://github.com/kucherenko/jscpd/tree/HEAD/rust/jscpd) | `4.2.4` | `5.0.14` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `bullmq` from 5.78.0 to 6.0.2
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.78.0...v6.0.2)

Updates `js-yaml` from 4.2.0 to 5.2.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.2.0...5.2.2)

Updates `openai` from 6.42.0 to 7.2.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.42.0...v7.2.0)

Updates `typeorm` from 0.3.30 to 1.1.0
- [Release notes](https://github.com/typeorm/typeorm/releases)
- [Changelog](https://github.com/typeorm/typeorm/blob/master/CHANGELOG.md)
- [Commits](typeorm/typeorm@0.3.30...1.1.0)

Updates `@types/node` from 25.9.2 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `jscpd` from 4.2.4 to 5.0.14
- [Release notes](https://github.com/kucherenko/jscpd/releases)
- [Changelog](https://github.com/kucherenko/jscpd/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kucherenko/jscpd/commits/v5.0.14/rust/jscpd)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: bullmq
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: openai
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: typeorm
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: jscpd
  dependency-version: 5.0.14
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 10, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/major-updates-c6c9839fb0 branch August 10, 2026 14:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants