Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 5, 2026

Bumps the prod-minor-updates group with 7 updates in the / directory:

Package From To
@asteasolutions/zod-to-openapi 8.2.0 8.4.0
@aws-sdk/client-s3 3.955.0 3.962.0
@faker-js/faker 10.1.0 10.2.0
next-intl 4.6.1 4.7.0
posthog-node 5.17.4 5.18.1
react-hook-form 7.68.0 7.70.0
zod 4.2.1 4.3.5

Updates @asteasolutions/zod-to-openapi from 8.2.0 to 8.4.0

Release notes

Sourced from @​asteasolutions/zod-to-openapi's releases.

v8.4.0

What's Changed

  • Added support for z.json (#353)
  • Added support for template literals (#352)
  • Fixed a bug in some nested structures when using isAnyZodType with null/undefined #343
  • Exported OpenApiOptions to resolve a problem when extending an object schema. For more information see: #341

Full Changelog: asteasolutions/zod-to-openapi@v8.3.3...v8.4.0

v8.3.3

What's Changed

  • use correct date-time instead of date when using z.date
  • fix: add null option for nullable enum

Full Changelog: asteasolutions/zod-to-openapi@v8.3.2...v8.3.3

v8.3.2

Testing Trusted Publishers setup again

Full Changelog: asteasolutions/zod-to-openapi@v8.3.1...v8.3.2

v8.3.1

Testing the Trusted Publihsers setup

Full Changelog: asteasolutions/zod-to-openapi@v8.3.0...v8.3.1

v8.3.0

What's Changed

  • 🎉 FINALLY added support for zod lazy (and recursive schemas with getters). Closes: #247, #300 and the discussion in #191
  • Bump js-yaml from 3.14.1 to 3.14.2
  • Setup Trusted Publishsers for NPM

Full Changelog: asteasolutions/zod-to-openapi@v8.2.0...v8.3.0

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​asteasolutions/zod-to-openapi since your current version.


Updates @aws-sdk/client-s3 from 3.955.0 to 3.962.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.962.0

3.962.0(2026-01-02)

Chores
New Features
  • client-identitystore: This change introduces "Roles" attribute for User entities supported by AWS Identity Store SDK. (80de895d)
  • client-cleanrooms: Added support for publishing detailed metrics to CloudWatch for operational monitoring of collaborations, including query performance and resource utilization. (762ac213)
  • codegen: include lib package versions in sdkVersions.properties file (#7616) (978a0720)
Tests
  • credential-provider-login: mock Date for determinism (#7613) (287d8e47)

For list of updated packages, view updated-packages.md in assets-3.962.0.zip

v3.961.0

3.961.0(2025-12-30)

New Features
  • clients: update client endpoints as of 2025-12-30 (e653544c)
  • client-connect: Adds support for searching global contacts using the ActiveRegions filter, and pagination support for ListSecurityProfileFlowModules and ListEntitySecurityProfiles. (fc921795)
  • client-kafkaconnect: This change sets the KafkaConnect GovCloud FIPS and FIPS DualStack endpoints to use kafkaconnect instead of kafkaconnect-fips as the service name. This is done to match the Kafka endpoints. (bb5638e8)

For list of updated packages, view updated-packages.md in assets-3.961.0.zip

v3.960.0

3.960.0(2025-12-29)

New Features
  • client-connect: Changes for Contact for Global Search (4a3526b7)
  • client-quicksight: This release adds support for quick users to be able to perform role upgrades on their own. Additionally it allows admins to make this feature admin or auto approval along with new self upgrade capability that can be restricted by Admins. (fb0bfe2b)
Tests

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.962.0 (2026-01-02)

Note: Version bump only for package @​aws-sdk/client-s3

3.958.0 (2025-12-23)

Features

  • client-s3: Add additional validation to Outpost bucket names. (2f30457)

3.957.0 (2025-12-22)

Note: Version bump only for package @​aws-sdk/client-s3

3.956.0 (2025-12-19)

Note: Version bump only for package @​aws-sdk/client-s3

Commits
  • 821ef45 Publish v3.962.0
  • dbc6c8b chore(codegen): sync for waiter codegen fix (#7614)
  • 57ab7df Publish v3.958.0
  • 2f30457 feat(client-s3): Add additional validation to Outpost bucket names.
  • da9c913 chore(build): generate clients without formatting prettier/eslint (#7599)
  • bd65e3e Publish v3.957.0
  • 04bdba3 chore(build): replace lerna partial-tree build with turbo (#7597)
  • 7804018 Publish v3.956.0
  • a3f0202 chore(codegen): differentiate union and struct schema (#7594)
  • 2c73829 chore(codegen): update for $unknown union member handling (#7591)
  • Additional commits viewable in compare view

Updates @faker-js/faker from 10.1.0 to 10.2.0

Release notes

Sourced from @​faker-js/faker's releases.

v10.2.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from @​faker-js/faker's changelog.

10.2.0 (2025-12-27)

New Locales

  • locale: add bn_BD location module (#3614) (99a448c)
  • locale: add counties & states to nb_NO location (#3617) (3dbcbe1)
  • locale: add da states (regions) (#3656) (78c892b)
  • locale: add id_ID translation for animal, color, commerce, and word also add country to location id_ID translation. (#3608) (02c2c3e)
  • locale: add ku_kmr_latin locale (#3629) (247f42d)
  • locale: add person module data to ku_ckb (#3630) (6be2c20)

Features

  • Add support for UPC (#3648) (57b2d78)
  • commerce: allow for locale-specific product name patterns (#3657) (1cf3991)
  • finance: add IR iban (#3678) (101a74a)
  • locales: add sl_SI locale, person module (#3564) (e7c9945)
  • location: Hungarian support for city name, full street address, continents, countries and directions (hu) (#3618) (2c9aefd)

Bug Fixes

  • food: move raspberry from vegetable to fruit (#3650) (6a4f01f)
  • locale: endonym should be in Latin script (#3660) (4cda07f)
  • locale: remove additional inappropriate words from ja locale (#3665) (18a1554)
  • locale: remove offensive and inappropriate words from ja locale (#3661) (8310c8c)
  • locale: remove some negative hu words (#3664) (bd36bae)
  • location: Use accents in en country names (#3637) (24aa11f)
  • vehicle: Updated spelling Mercielago to Murcielago (#3636) (bfb1bdb)
Commits
  • 6ab5670 chore(release): 10.2.0 (#3688)
  • 214d7fc chore(deps): lock file maintenance (#3607)
  • a2f1575 chore(deps): update eslint (major) (#3687)
  • ca01985 chore(deps): update actions/checkout action to v6 (#3686)
  • 92daab3 chore(deps): update dependency vue-tsc to v3.2.1 (#3685)
  • c0234b1 chore(deps): update mcr.microsoft.com/devcontainers/typescript-node docker ta...
  • c7feaff chore(deps): update all non-major dependencies (#3682)
  • 27666af chore(deps): update dependency prettier to v3.7.4 (#3683)
  • d656a82 chore(deps): update dependency @​vitest/eslint-plugin to v1.6.3 (#3645)
  • 8794cac chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:22 docker...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​faker-js/faker since your current version.


Updates next-intl from 4.6.1 to 4.7.0

Release notes

Sourced from next-intl's releases.

v4.7.0

4.7.0 (2026-01-01)

Improvements for useExtracted

  • Only run extraction for next dev and next build (not e.g. for next typegen)
  • Include line numbers for file references in .po files
  • Incorporate line numbers into sorting of messages within a single file (if you're using the default .po format)

(#2200) (ebc5e43) – by @​amannn

Changelog

Sourced from next-intl's changelog.

4.7.0 (2026-01-01)

Features

Commits

Updates posthog-node from 5.17.4 to 5.18.1

Release notes

Sourced from posthog-node's releases.

posthog-node@5.18.1

5.18.1

Patch Changes

  • #2825 5a4a8e2 Thanks @​haacked! - getFeatureFlag() respects exponential backoff for HTTP 401, 403, and 429 responses. (2025-12-30)

posthog-node@5.18.0

5.18.0

Minor Changes

  • #2782 04065b9 Thanks @​haacked! - Add $feature_flag_error to $feature_flag_called events when an error occurred while trying evaluate a flag (2025-12-22)

Patch Changes

Changelog

Sourced from posthog-node's changelog.

5.18.1

Patch Changes

  • #2825 5a4a8e2 Thanks @​haacked! - getFeatureFlag() respects exponential backoff for HTTP 401, 403, and 429 responses. (2025-12-30)

5.18.0

Minor Changes

  • #2782 04065b9 Thanks @​haacked! - Add $feature_flag_error to $feature_flag_called events when an error occurred while trying evaluate a flag (2025-12-22)

Patch Changes

Commits
  • 072a1d0 chore: update versions and lockfile [version bump]
  • 5a4a8e2 fix(flags): Apply exponential backoff to on-demand fetches after errors (#2825)
  • 8c6929a chore: update versions and lockfile [version bump]
  • 04065b9 feat(flags): Add $feature_flag_error property to track flag evaluation fail...
  • See full diff in compare view

Updates react-hook-form from 7.68.0 to 7.70.0

Release notes

Sourced from react-hook-form's releases.

Version 7.70.0

✅ watch type improvement (#13228) 🐞 fix: prevent field array ghost elements with keepDirtyValues (#13188) 🐞 fix: improve invalid date handling in deepEqual and validation (#13230) 🐞 fix(types): handle branded types correctly in DeepPartial (#13222) 🐞 fix native validation focus issue (#13220) 🐞 change spread operator to set name with depricated names prop, then override with new name prop is supplied (#13214) 🐞 fix: prevent duplicate subscription trigger in setValue (#13206) (#13209) 👌 chore: fix lib type check include tests (#13229)

thanks to @​EdwardEB, @​constantly-dev & @​a28689604

🎄 Version 7.69.0

📏 feat: align API with useWatch (#13192) 🤦🏻‍♂️ chore: update @​deprecated names prop on (#13198) 🏥 chore: safely call function methods on elements (#13190) 🪖 chore: cve-2025-67779 (#13196) 🪖 chore: cve-2025-55184 & cve-2025-55183 (#13194) 🪖 chore: CVE-2025-55182 Critical RCE vulnerabilty (#13175) 🔬 test: add regression tests for #12837 and #13136 (#13187) 🐞 fix(reset): preserve isValid state when keepIsValid option is used (#13173) 🐞 fix: ensure each createFormControl.subscribe subscription listens only to the changes it subscribes to (#12968) 🐞 fix(validation): batch isValidating state updates with validation result (#13181) 🐞 fix(createFormControl): resolve race condition between setError and setFocus (#13138) (#13169) 🧿 fix control prop type (#13189) 🔔 chore: clean cloneObject logic (#13179)

thanks to @​PierreCrb, @​a28689604, @​AnuragM7666, @​ap0nia, @​dusan233 & @​hlongc

Commits
  • d810ff5 7.70.0
  • c54ebf9 🐞 fix: prevent field array ghost elements with keepDirtyValues (#13188)
  • 3966596 ✅ watch type improvement (#13228)
  • 29885bb 🐞 fix: improve invalid date handling in deepEqual and validation (#13230)
  • 9c22bc7 👌 chore: fix lib type check include tests (#13229)
  • 76db177 🐞 fix(types): handle branded types correctly in DeepPartial (#13222)
  • 8d693a7 🐞 fix native validation focus issue (#13220)
  • 74e652c 🐞 change spread operator to set name with depricated names prop, then overrid...
  • 94c8af1 ☺️ chore: move regression test to setValue.test.tsx (#13211)
  • e45b4cb 🐞 fix: prevent duplicate subscription trigger in setValue (#13206) (#13209)
  • Additional commits viewable in compare view

Updates zod from 4.2.1 to 4.3.5

Release notes

Sourced from zod's releases.

v4.3.5

Commits:

  • 21afffdb42ccab554036312e33fed0ea3cb8f982 [Docs] Update migration guide docs for deprecation of message (#5595)
  • e36743e513aadb307b29949a80d6eb0dcc8fc278 Improve mini treeshaking
  • 0cdc0b8597999fd9ca99767b912c1e82c1ff2d6c 4.3.5

v4.3.4

Commits:

  • 1a8bea3b474eada6f219c163d0d3ad09fadabe72 Add integration tests
  • e01cd02b2f23d7e9078d3813830b146f8a2258b4 Support patternProperties for looserecord (#5592)
  • 089e5fbb0f58ce96d2c4fb34cd91724c78df4af5 Improve looseRecord docs
  • decef9c418d9a598c3f1bada06891ba5d922c5cd Fix lint
  • 9443aab00d44d5d5f4a7eada65fc0fc851781042 Drop iso time in fromJSONSchema
  • 66bda7491a1b9eab83bdeec0c12f4efc7290bd48 Remove .refine() from ZodMiniType
  • b4ab94ca608cd5b581bfc12b20dd8d95b35b3009 4.3.4

v4.3.3

Commits:

  • f3b2151959d215d405f54dff3c7ab3bf1fd887ca v4.3.3

v4.3.2

Commits:

  • bf96635d243118de6e4f260077aa137453790bf6 Loosen strictObjectinside intersection (#5587)
  • f71dc0182ab0f0f9a6be6295b07faca269e10179 Remove Juno (#5590)
  • 0f41e5a12a43e6913c9dcb501b2b5136ea86500d 4.3.2

v4.3.1

Commits:

  • 0fe88407a4149c907929b757dc6618d8afe998fc allow non-overwriting extends with refinements. 4.3.1

v4.3.0

This is Zod's biggest release since 4.0. It addresses several of Zod's longest-standing feature requests.

z.fromJSONSchema()

Convert JSON Schema to Zod (#5534, #5586)

You can now convert JSON Schema definitions directly into Zod schemas. This function supports JSON Schema "draft-2020-12", "draft-7", "draft-4", and OpenAPI 3.0.

import * as z from "zod";
const schema = z.fromJSONSchema({
type: "object",
properties: {
</tr></table>

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-minor-updates group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@asteasolutions/zod-to-openapi](https://github.com/asteasolutions/zod-to-openapi) | `8.2.0` | `8.4.0` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.955.0` | `3.962.0` |
| [@faker-js/faker](https://github.com/faker-js/faker) | `10.1.0` | `10.2.0` |
| [next-intl](https://github.com/amannn/next-intl) | `4.6.1` | `4.7.0` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.17.4` | `5.18.1` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.68.0` | `7.70.0` |
| [zod](https://github.com/colinhacks/zod) | `4.2.1` | `4.3.5` |



Updates `@asteasolutions/zod-to-openapi` from 8.2.0 to 8.4.0
- [Release notes](https://github.com/asteasolutions/zod-to-openapi/releases)
- [Commits](asteasolutions/zod-to-openapi@v8.2.0...v8.4.0)

Updates `@aws-sdk/client-s3` from 3.955.0 to 3.962.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.962.0/clients/client-s3)

Updates `@faker-js/faker` from 10.1.0 to 10.2.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v10.1.0...v10.2.0)

Updates `next-intl` from 4.6.1 to 4.7.0
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.6.1...v4.7.0)

Updates `posthog-node` from 5.17.4 to 5.18.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.18.1/packages/node)

Updates `react-hook-form` from 7.68.0 to 7.70.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.68.0...v7.70.0)

Updates `zod` from 4.2.1 to 4.3.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.2.1...v4.3.5)

---
updated-dependencies:
- dependency-name: "@asteasolutions/zod-to-openapi"
  dependency-version: 8.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.962.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: "@faker-js/faker"
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: next-intl
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: posthog-node
  dependency-version: 5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: react-hook-form
  dependency-version: 7.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: zod
  dependency-version: 4.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 5, 2026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jan 6, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 6, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/prod-minor-updates-8742190d98 branch January 6, 2026 10:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants