Skip to content

ci(deps): bump the major-updates group across 1 directory with 8 updates - #127

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-updates-66a84357df
Open

ci(deps): bump the major-updates group across 1 directory with 8 updates#127
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-updates-66a84357df

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the major-updates group with 8 updates in the / directory:

Package From To
bullmq 5.78.0 6.0.9
ioredis 5.11.1 6.0.0
js-yaml 4.2.0 5.2.3
openai 6.42.0 7.4.0
typeorm 0.3.30 1.1.0
@types/node 25.9.2 26.1.2
jscpd 4.2.4 5.0.14
typescript 6.0.3 7.0.2

Updates bullmq from 5.78.0 to 6.0.9

Release notes

Sourced from bullmq's releases.

v6.0.9

6.0.9 (2026-08-07)

Bug Fixes

  • events: type completed event returnvalue as deserialized value (#4441) fixes #4147 (5910ccc)

v6.0.8

6.0.8 (2026-08-05)

Bug Fixes

  • deps: avoid deep ioredis import so postgres backend works without ioredis internals (#4437) fixes #4435 (550e446)
  • postgres: fail fast when SQL loader directory cannot be resolved (#4482) (f3936a2)

v6.0.7

6.0.7 (2026-08-04)

Bug Fixes

  • worker: recover blocking reads that never settle after a reconnect fixes #4479 (#4484) (e7e9a64)

v6.0.6

6.0.6 (2026-08-03)

Bug Fixes

v6.0.5

6.0.5 (2026-08-01)

Bug Fixes

  • deps: update python dependencies (python) (#4453) (e58f9e1)

v6.0.4

6.0.4 (2026-08-01)

Bug Fixes

  • deps: update security patches [security] (#4444) (c1cf328)

v6.0.3

... (truncated)

Commits
  • 5910ccc fix(events): type completed event returnvalue as deserialized value (#4441) f...
  • aebff17 chore(deps): update docker.dragonflydb.io/dragonflydb/dragonfly docker tag to...
  • 7be3e7e ci: do not pin peer dependencies (#4519)
  • a1dd9ae chore(deps): update ci dependencies (#4516)
  • a46ebc2 chore(deps): update dependency squizlabs/php_codesniffer to v4.0.4 [php] (#4515)
  • 00410ae docs: corrected some texts (#4510) [dotnet]
  • 1d44f06 chore(deps): lock file maintenance (#4509)
  • cdab95e chore(deps): update security patches [security] (#4499)
  • 62777d9 chore: ignore multi line commits from changelog (#4508)
  • 9b1861e ci(docs): upgrade vitepress to fix docs
  • Additional commits viewable in compare view

Updates ioredis from 5.11.1 to 6.0.0

Release notes

Sourced from ioredis's releases.

v6.0.0

6.0.0 (2026-07-31)

Bug Fixes

  • clear stale socket timeout on reconnect (#2148) (6455dbe)
  • cluster: recreate stale connection on circular MOVED (#2135) (08c8967)
  • cluster: validate MOVED slot to prevent Array.prototype pollution (#2151) (9618206), closes #1267
  • command: serialize large integer arguments in decimal notation (#2136) (09b8d04)
  • redis: keep reconnecting when connection closes during client setup (#2099) (#2123) (f9a66bc)
  • sentinel: preserve zero preferred slave priority (#2129) (a3f9f2d)
  • tracing: redact values for GETSET and PSETEX (#2134) (832765d)
  • types: export ScanStreamOptions, RedisStatus and ClusterStatus (#2158) (cf3bf71)

Features

BREAKING CHANGES

  • ioredis now requires Node.js 20 or newer and uses RESP3 by default. Set protocol: 2 to retain the v5 wire protocol.

v6.0.0-beta.1

6.0.0-beta.1 (2026-07-29)

Bug Fixes

  • clear stale socket timeout on reconnect (#2148) (6455dbe)
  • cluster: recreate stale connection on circular MOVED (#2135) (08c8967)
  • cluster: validate MOVED slot to prevent Array.prototype pollution (#2151) (9618206), closes #1267
  • command: serialize large integer arguments in decimal notation (#2136) (09b8d04)
  • redis: keep reconnecting when connection closes during client setup (#2099) (#2123) (f9a66bc)
  • sentinel: preserve zero preferred slave priority (#2129) (a3f9f2d)
  • tracing: redact values for GETSET and PSETEX (#2134) (832765d)

... (truncated)

Changelog

Sourced from ioredis's changelog.

6.0.0 (2026-07-31)

Bug Fixes

  • clear stale socket timeout on reconnect (#2148) (6455dbe)
  • cluster: recreate stale connection on circular MOVED (#2135) (08c8967)
  • cluster: validate MOVED slot to prevent Array.prototype pollution (#2151) (9618206), closes #1267
  • command: serialize large integer arguments in decimal notation (#2136) (09b8d04)
  • redis: keep reconnecting when connection closes during client setup (#2099) (#2123) (f9a66bc)
  • sentinel: preserve zero preferred slave priority (#2129) (a3f9f2d)
  • tracing: redact values for GETSET and PSETEX (#2134) (832765d)
  • types: export ScanStreamOptions, RedisStatus and ClusterStatus (#2158) (cf3bf71)

Features

BREAKING CHANGES

  • ioredis now requires Node.js 20 or newer and uses RESP3 by default. Set protocol: 2 to retain the v5 wire protocol.
Commits

Updates js-yaml from 4.2.0 to 5.2.3

Changelog

Sourced from js-yaml's changelog.

[5.2.3] - 2026-08-01

Fixed

  • Prevent prototype fallback when resolving tags and mapping entries, #782.
  • Resolve !!timestamp years 0000-0099 correctly, #775.
  • Preserve implicit null mapping values before document markers and reject unpaired mapping event streams, #784.
  • Preserve folded scalar values with tab-indented lines when round-tripping a parsed AST through present(); dump() and loading are unaffected, #780.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).

4.3.0, 3.15.0 - 2026-06-27

Security

  • Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.
  • Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

  • maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

  • Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

... (truncated)

Commits
  • 6740445 5.2.3 released
  • 94e766d Update changelog
  • c3bd7ca Polish previous commit, #780
  • 00209b6 presenter: treat a tab-indented line in a folded scalar as more-indented (#780)
  • 40fcb4f Fix missing mapping values before document markers and reject unpaired mappin...
  • 49280f3 Fix !!timestamp resolution for years 0000-0099, #775
  • 355dc96 fix: prevent prototype fallback in tag and harden object lookups, #782 (than...
  • d524f83 docs: add contributing guidelines
  • 3c29559 5.2.2 released
  • 3e5240f parser: avoid reparsing flow sequence pair keys
  • Additional commits viewable in compare view

Updates openai from 6.42.0 to 7.4.0

Release notes

Sourced from openai's releases.

v7.4.0

7.4.0 (2026-08-03)

Features

  • api: Add gpt-5.5 model and tool metadata fields (#2049) (6d8fb53)

Bug Fixes

Documentation

Build System

  • deps-dev: bump @​smithy/hash-node from 4.3.5 to 4.4.15 (#2064) (481b325)
  • deps-dev: bump @​types/web from 0.0.194 to 0.0.354 (#2061) (f61f267)
  • deps-dev: bump publint from 0.2.12 to 0.3.22 (#2058) (823d7df)
  • deps: bump dotenv from 16.6.1 to 17.4.2 (#2065) (3576574)
  • deps: bump fast-uri from 3.1.4 to 3.1.5 in /ecosystem-tests/vercel-edge (#2050) (590982f)
  • deps: bump ip-address from 10.2.0 to 10.4.0 in /ecosystem-tests/vercel-edge (#2056) (4d927de)
  • migrate release workflow to upstream release-please (#2048) (d41c272)

v7.3.0

7.3.0 (2026-07-31)

Full Changelog: v7.2.0...v7.3.0

Features

  • api: content provenance checks (c6f9339)

Chores

Documentation

  • organize SDK guides and repository metadata (#2032) (275dff4)
  • remove root-level provider guides (98a2ae7)

... (truncated)

Changelog

Sourced from openai's changelog.

7.4.0 (2026-08-03)

Features

  • api: Add gpt-5.5 model and tool metadata fields (#2049) (6d8fb53)

Bug Fixes

Documentation

Build System

  • deps-dev: bump @​smithy/hash-node from 4.3.5 to 4.4.15 (#2064) (481b325)
  • deps-dev: bump @​types/web from 0.0.194 to 0.0.354 (#2061) (f61f267)
  • deps-dev: bump publint from 0.2.12 to 0.3.22 (#2058) (823d7df)
  • deps: bump dotenv from 16.6.1 to 17.4.2 (#2065) (3576574)
  • deps: bump fast-uri from 3.1.4 to 3.1.5 in /ecosystem-tests/vercel-edge (#2050) (590982f)
  • deps: bump ip-address from 10.2.0 to 10.4.0 in /ecosystem-tests/vercel-edge (#2056) (4d927de)
  • migrate release workflow to upstream release-please (#2048) (d41c272)

7.3.0 (2026-07-31)

Full Changelog: v7.2.0...v7.3.0

Features

  • api: content provenance checks (c6f9339)

Chores

Documentation

  • organize SDK guides and repository metadata (#2032) (275dff4)
  • remove root-level provider guides (98a2ae7)

7.2.0 (2026-07-30)

... (truncated)

Commits
  • 83c437f release: 7.4.0 (#2055)
  • a97cbff ci: prepare checks for merge queue (#2066)
  • 481b325 build(deps-dev): bump @​smithy/hash-node from 4.3.5 to 4.4.15 (#2064)
  • 3576574 build(deps): bump dotenv from 16.6.1 to 17.4.2 (#2065)
  • 823d7df build(deps-dev): bump publint from 0.2.12 to 0.3.22 (#2058)
  • f61f267 build(deps-dev): bump @​types/web from 0.0.194 to 0.0.354 (#2061)
  • 85ea6b2 [dependabot] Configure a seven-day npm cooldown (#2054)
  • 4d927de build(deps): bump ip-address from 10.2.0 to 10.4.0 in /ecosystem-tests/vercel...
  • 590982f build(deps): bump fast-uri from 3.1.4 to 3.1.5 in /ecosystem-tests/vercel-edg...
  • 6d8fb53 feat(api): Add gpt-5.5 model and tool metadata fields (#2049)
  • Additional commits viewable in compare view

Updates typeorm from 0.3.30 to 1.1.0

Release notes

Sourced from typeorm's releases.

1.1.0

What's Changed

New Contributors

Full Changelog: typeorm/typeorm@1.0.0...1.1.0

1.0.0

TypeORM v1.0 is here! 🥳

👉 For a structured walk-through of the changes in v1.0 — breaking changes, new features, security fixes, and the upgrade path from 0.3.x — see the v1.0 Release Notes.

... (truncated)

Changelog

Sourced from typeorm's changelog.

1.1.0 (2026-07-13)

Bug Fixes

  • cache: release query runner on error in storeInCache (#12545) (a84b9b3)
  • correct grammar in AlreadyHasActiveConnectionError message (#12554) (304d129)
  • entity-manager: default invalidWhereValuesBehavior to throw on the write path (#12690) (44d8052)
  • entity-manager: validate where criteria in increment/decrement (#12692) (8a51b75)
  • mongodb: use cursor.transform for doc to entity transformation and skip load broadcast in next if toArray (#11926) (0bbefc9)
  • move hashing function to PlatformTools (#12648) (c456cbd)
  • multiple recursive cte problems (#12490) (7c26654)
  • normalization of FindOptionsWhere for arrays and Buffers (#12577) (a8173fc)
  • persistence: preserve select false columns on the in-memory entity after save() (#12501) (324c46c)
  • postgres: improve normalizeDatetimeFunction for tstzrange data type (#12182) (bf47c9f)
  • query-builder: reject empty where criteria on update and delete operations (#12629) (81b9466)
  • query-builder: wrap inner joins under left joins correctly (#11137) (d5f4b9d)
  • remove require() calls that break bundlers (#12647) (30f9fc7)
  • tree-entity: tree entity schema propagation in internal TreeRepository methods (#12590) (7fb7c2c)

Features

1.0.0 (2026-05-19)

👉 For a structured walk-through of the changes in v1.0 — breaking changes, new features, security fixes, and the upgrade path from 0.3.x — see the v1.0 Release Notes.

The list below is the set of commits between 0.3.30 and 1.0.0 — fixes already shipped on the 0.3.x line are listed under their respective 0.3.x entries below.

Bug Fixes

  • cascade: propagate withDeleted to relation-id loader for many-to-many recover (#12287) (cfba9e7)
  • cascade: support cascade remove for OneToMany relations with composite PKs (#12286) (09183c8)
  • cli: preserve devDependencies needed by init command in published package (#12281) (c3b771c)
  • cockroachdb: preserve structured query results during txn retry replay (#11861) (09db48c)
  • codemod: apply find-options select/relations rewrites to .exists() too (#12399) (4461063)
  • codemod: correct relation-count guidance and flag loadRelationCountAndMap (#12374) (5de5490)
  • codemod: cover ColumnMetadata args.options in column option rewrites (#12400) (7a68cf2)
  • codemod: exclude type declarations from build (#12292) (4c645f0)
  • codemod: handle aliases, quoted keys, and ObjectProperty variants (#12377) (2d15644)
  • codemod: handle lock option objects correctly and increase test coverage (#12353) (b871719)
  • codemod: handle typeof type queries and use getStringValue consistently (#12379) (dedea37)
  • codemod: harden destructure and DI accessor rewrites for connection to dataSource rename (#12398) (057ddbc)
  • codemod: harden scope and type-name detection across more AST shapes (#12394) (9d1fd8d)
  • codemod: harden scope, idempotency, and import-strip semantics (#12391) (ed5a19b)
  • codemod: recognize typeorm deep-path imports (#12382) (a96b097)
  • codemod: rename .connection on EntityMetadata, ColumnMetadata, IndexMetadata (#12383) (8a51e30), closes #12249
  • codemod: rewrite typeorm re-exports in barrel files (#12373) (25f0b5f)

... (truncated)

Commits
  • 8748b1b chore(release): prepare v1.1.0 (#12697)
  • 0caca21 style(test): format migration test
  • 41d1c62 Merge commit from fork
  • 8a51b75 fix(entity-manager): validate where criteria in increment/decrement (#12692)
  • 44d8052 fix(entity-manager): default invalidWhereValuesBehavior to throw on the write...
  • af5f2a5 chore: update dependencies (#12678)
  • f5c6aa3 ci: improve pr triage script (#12677)
  • 81b9466 fix(query-builder): reject empty where criteria on update and delete operatio...
  • 30f9fc7 fix: remove require() calls that break bundlers (#12647)
  • c456cbd fix: move hashing function to PlatformTools (#12648)
  • Additional commits viewable in compare view

Updates @types/node from 25.9.2 to 26.1.2

Commits

Updates jscpd from 4.2.4 to 5.0.14

Release notes

Sourced from jscpd's releases.

Release v5.0.14

New Features

  • --cross-formats — detect clones across related formats via format equivalence groups sharing one comparison pool, e.g. --cross-formats "javascript,typescript" or the js-ts preset (javascript,jsx,typescript,tsx). When a group mixes TypeScript with JavaScript, TS files are compared with erasable type syntax stripped (positions still reference the original source), so function f(a: number): void matches function f(a). Also configurable as crossFormats in .jscpd.json / package.json (string, array-of-strings, or array-of-arrays). Cross-format clones are attributed to one member format in per-format statistics. (#810)

Bug Fixes

  • Prose-only Markdown files are now analyzed — the Markdown tokenizer only extracted fenced code blocks, so .md files without code fences produced zero tokens and were silently skipped (-f markdown matched 0 files in Markdown-only projects). Prose is now tokenized too, so duplicated prose is detected as clones, while embedded code fences keep being detected under their own sub-format pools. (#883)

Dependencies

  • Bump regex to 1.13.1 in /rust
  • Bump globset to 0.4.19 in /rust
  • Bump ignore to 0.4.28 in /rust
  • Bump xxhash-rust to 0.8.16 in /rust

Published Packages

  • cpd-core@0.1.7 on crates.io
  • cpd-finder@0.1.9 on crates.io
  • cpd-reporter@0.1.7 on crates.io
  • cpd-tokenizer@0.1.8 on crates.io
  • jscpd@5.0.14 on crates.io
  • cpd@5.0.14 on npm
  • jscpd-darwin-arm64@5.0.14 on npm
  • jscpd-darwin-x64@5.0.14 on npm
  • jscpd-linux-x64-gnu@5.0.14 on npm
  • jscpd-linux-arm64-gnu@5.0.14 on npm
  • jscpd-linux-x64-musl@5.0.14 on npm
  • jscpd-windows-x64-msvc@5.0.14 on npm

Not Yet Published

  • jscpd@5.0.14 (published: 5.0.12)

Release v5.0.12

Highlights

Bug Fixes

  • Rename cpd binary and npm packages to jscpd — the CLI binary was named cpd (cpd.exe on Windows), which collided with an executable name flagged by some antivirus software (McAfee, Trend Micro), causing false-positive blocking. The binary and platform npm packages are now named jscpd / jscpd-*. Closes #826 (#854)
  • Recognize ; line comments for Lisp/Clojure/Scheme/Racket — these languages fell through to C-style comment handling, so ; comments were tokenized as code and --mode weak / --skip-comments couldn't drop them. Closes #849 (#850, thanks @​laurynas-biveinis)
  • Use HTTPS for SARIF schema URI — avoids "untrusted URI" errors in SARIF-consuming tools (#844, thanks @​chrisc-onaorg)

Chores

  • Use public repository URLs for @jscpd/core, @jscpd/finder, @jscpd/tokenizer, @jscpd/html-reporter, @jscpd/badge-reporter, @jscpd/leveldb-store, and @jscpd/redis-store package metadata (#831#837, thanks @​9904099)
  • Add cargo ecosystem to Dependabot config

... (truncated)

Changelog

Sourced from jscpd's changelog.

Changelog

All notable changes to jscpd are documented here. Releases follow Semantic Versioning.


5.0.11

New Features

  • Razor (.razor) support — new tokenizer for Razor files in the Rust backend (thanks to @​chrisc-onaorg in #829)

Dependencies

  • cpd-core bumped to 0.1.6, cpd-tokenizer bumped to 0.1.7

5.0.10

Bug Fixes

  • Emit scan-root-relative paths in all reporters when absolute: false. Fixes #827
  • Fix --skip-local to match jscpd v4 TypeScript semantics

Refactoring

  • DRY duplication in reporters: extract shared helpers into cpd-reporter/src/shared.rs
  • Move blame enrichment from gitoxide to git blame --porcelain

5.0.9

New Features

  • GitHub Action for jscpd (Rust v5) — jscpd-copy-paste-detector ...

    Description has been truncated

Bumps the major-updates group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.78.0` | `6.0.9` |
| [ioredis](https://github.com/redis/ioredis) | `5.11.1` | `6.0.0` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.2.0` | `5.2.3` |
| [openai](https://github.com/openai/openai-node) | `6.42.0` | `7.4.0` |
| [typeorm](https://github.com/typeorm/typeorm) | `0.3.30` | `1.1.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.2` | `26.1.2` |
| [jscpd](https://github.com/kucherenko/jscpd/tree/HEAD/rust/jscpd) | `4.2.4` | `5.0.14` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `bullmq` from 5.78.0 to 6.0.9
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.78.0...v6.0.9)

Updates `ioredis` from 5.11.1 to 6.0.0
- [Release notes](https://github.com/redis/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.11.1...v6.0.0)

Updates `js-yaml` from 4.2.0 to 5.2.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.2.0...5.2.3)

Updates `openai` from 6.42.0 to 7.4.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v6.42.0...v7.4.0)

Updates `typeorm` from 0.3.30 to 1.1.0
- [Release notes](https://github.com/typeorm/typeorm/releases)
- [Changelog](https://github.com/typeorm/typeorm/blob/master/CHANGELOG.md)
- [Commits](typeorm/typeorm@0.3.30...1.1.0)

Updates `@types/node` from 25.9.2 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `jscpd` from 4.2.4 to 5.0.14
- [Release notes](https://github.com/kucherenko/jscpd/releases)
- [Changelog](https://github.com/kucherenko/jscpd/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kucherenko/jscpd/commits/v5.0.14/rust/jscpd)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: bullmq
  dependency-version: 6.0.9
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: ioredis
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: js-yaml
  dependency-version: 5.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: openai
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: typeorm
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: jscpd
  dependency-version: 5.0.14
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants