Skip to content

Bump the prod-minor-updates group across 1 directory with 12 updates#530

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/prod-minor-updates-2097ecc9b5
Closed

Bump the prod-minor-updates group across 1 directory with 12 updates#530
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/prod-minor-updates-2097ecc9b5

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jan 19, 2026

Bumps the prod-minor-updates group with 12 updates in the / directory:

Package From To
@asteasolutions/zod-to-openapi 8.2.0 8.4.0
@aws-sdk/client-s3 3.955.0 3.971.0
@faker-js/faker 10.1.0 10.2.0
ioredis 5.8.2 5.9.2
next-intl 4.6.1 4.7.0
pg 8.16.3 8.17.1
posthog-node 5.17.4 5.21.1
react-hook-form 7.68.0 7.71.1
resend 6.6.0 6.7.0
stripe 20.1.0 20.2.0
ws 8.18.3 8.19.0
zod 4.2.1 4.3.5

Updates @asteasolutions/zod-to-openapi from 8.2.0 to 8.4.0

Release notes

Sourced from @​asteasolutions/zod-to-openapi's releases.

v8.4.0

What's Changed

  • Added support for z.json (#353)
  • Added support for template literals (#352)
  • Fixed a bug in some nested structures when using isAnyZodType with null/undefined #343
  • Exported OpenApiOptions to resolve a problem when extending an object schema. For more information see: #341

Full Changelog: asteasolutions/zod-to-openapi@v8.3.3...v8.4.0

v8.3.3

What's Changed

  • use correct date-time instead of date when using z.date
  • fix: add null option for nullable enum

Full Changelog: asteasolutions/zod-to-openapi@v8.3.2...v8.3.3

v8.3.2

Testing Trusted Publishers setup again

Full Changelog: asteasolutions/zod-to-openapi@v8.3.1...v8.3.2

v8.3.1

Testing the Trusted Publihsers setup

Full Changelog: asteasolutions/zod-to-openapi@v8.3.0...v8.3.1

v8.3.0

What's Changed

  • 🎉 FINALLY added support for zod lazy (and recursive schemas with getters). Closes: #247, #300 and the discussion in #191
  • Bump js-yaml from 3.14.1 to 3.14.2
  • Setup Trusted Publishsers for NPM

Full Changelog: asteasolutions/zod-to-openapi@v8.2.0...v8.3.0

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​asteasolutions/zod-to-openapi since your current version.


Updates @aws-sdk/client-s3 from 3.955.0 to 3.971.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.971.0

3.971.0(2026-01-16)

Chores
Documentation Changes
  • client-sagemaker: Adding security consideration comments for lcc accessing execution role under root access (83b0e783)
  • client-glacier: Documentation updates for Amazon Glacier's maintenance mode (18674f5d)
New Features
  • clients: update client endpoints as of 2026-01-16 (5149b6b0)
  • client-datazone: This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs. (3ce55674)
  • client-connect: Adds support to allow customers to create form with Dispute configuration (faedfc8b)
  • client-launch-wizard: Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizard (5126f41e)
  • client-resource-explorer-2: Added ViewName to View-related responses and ServiceViewName to GetServiceView response. (e0212a10)

For list of updated packages, view updated-packages.md in assets-3.971.0.zip

v3.970.0

3.970.0(2026-01-15)

Chores
  • util-endpoints: update aws partitions.json (057ed943)
  • endpoints: update endpoints model (27bb9e6d)
  • models: update API models (e4aef87d)
  • codegen: update for handling __type in cbor structs (#7663) (2104fe9e)
Documentation Changes
  • client-ec2: This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period. (0e4c5b5c)
New Features
  • client-ecs: Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints. (0ebb2f22)
  • client-evs: A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter. (4f6b30a2)
  • client-deadline: AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API. (bb46d258)
  • client-cleanrooms: This release adds support for parameters in PySpark analysis templates. (bc4219bf)
  • client-opensearchserverless: Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key. (bfdce6ab)
  • client-lakeformation: API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResource (493fd840)
  • client-qconnect: Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage API (c54736e1)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.971.0 (2026-01-16)

Note: Version bump only for package @​aws-sdk/client-s3

3.970.0 (2026-01-15)

Note: Version bump only for package @​aws-sdk/client-s3

3.969.0 (2026-01-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.968.0 (2026-01-13)

Note: Version bump only for package @​aws-sdk/client-s3

3.967.0 (2026-01-12)

Note: Version bump only for package @​aws-sdk/client-s3

3.966.0 (2026-01-09)

Note: Version bump only for package @​aws-sdk/client-s3

3.965.0 (2026-01-07)

... (truncated)

Commits

Updates @faker-js/faker from 10.1.0 to 10.2.0

Release notes

Sourced from @​faker-js/faker's releases.

v10.2.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from @​faker-js/faker's changelog.

10.2.0 (2025-12-27)

New Locales

  • locale: add bn_BD location module (#3614) (99a448c)
  • locale: add counties & states to nb_NO location (#3617) (3dbcbe1)
  • locale: add da states (regions) (#3656) (78c892b)
  • locale: add id_ID translation for animal, color, commerce, and word also add country to location id_ID translation. (#3608) (02c2c3e)
  • locale: add ku_kmr_latin locale (#3629) (247f42d)
  • locale: add person module data to ku_ckb (#3630) (6be2c20)

Features

  • Add support for UPC (#3648) (57b2d78)
  • commerce: allow for locale-specific product name patterns (#3657) (1cf3991)
  • finance: add IR iban (#3678) (101a74a)
  • locales: add sl_SI locale, person module (#3564) (e7c9945)
  • location: Hungarian support for city name, full street address, continents, countries and directions (hu) (#3618) (2c9aefd)

Bug Fixes

  • food: move raspberry from vegetable to fruit (#3650) (6a4f01f)
  • locale: endonym should be in Latin script (#3660) (4cda07f)
  • locale: remove additional inappropriate words from ja locale (#3665) (18a1554)
  • locale: remove offensive and inappropriate words from ja locale (#3661) (8310c8c)
  • locale: remove some negative hu words (#3664) (bd36bae)
  • location: Use accents in en country names (#3637) (24aa11f)
  • vehicle: Updated spelling Mercielago to Murcielago (#3636) (bfb1bdb)
Commits
  • 6ab5670 chore(release): 10.2.0 (#3688)
  • 214d7fc chore(deps): lock file maintenance (#3607)
  • a2f1575 chore(deps): update eslint (major) (#3687)
  • ca01985 chore(deps): update actions/checkout action to v6 (#3686)
  • 92daab3 chore(deps): update dependency vue-tsc to v3.2.1 (#3685)
  • c0234b1 chore(deps): update mcr.microsoft.com/devcontainers/typescript-node docker ta...
  • c7feaff chore(deps): update all non-major dependencies (#3682)
  • 27666af chore(deps): update dependency prettier to v3.7.4 (#3683)
  • d656a82 chore(deps): update dependency @​vitest/eslint-plugin to v1.6.3 (#3645)
  • 8794cac chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:22 docker...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​faker-js/faker since your current version.


Updates ioredis from 5.8.2 to 5.9.2

Release notes

Sourced from ioredis's releases.

v5.9.2

5.9.2 (2026-01-15)

Bug Fixes

  • cluster: Cluster reconnect sharded subscribers (#2060) (def9804)
  • preserve replica slots on MOVED in pipelines (#2059) (a1c3e9d)

Reverts

v5.9.1

5.9.1 (2026-01-08)

Bug Fixes

  • make client-side blocking timeouts opt-in (#2058) (07ed493)

v5.9.0

5.9.0 (2026-01-05)

Bug Fixes

  • remove unnecessary case-sensitivity when working with commands (#2036) (f33a2c8)

Features

Changelog

Sourced from ioredis's changelog.

5.9.2 (2026-01-15)

Bug Fixes

  • cluster: Cluster reconnect sharded subscribers (#2060) (def9804)
  • preserve replica slots on MOVED in pipelines (#2059) (a1c3e9d)

Reverts

5.9.1 (2026-01-08)

Bug Fixes

  • make client-side blocking timeouts opt-in (#2058) (07ed493)

5.9.0 (2026-01-05)

Bug Fixes

  • remove unnecessary case-sensitivity when working with commands (#2036) (f33a2c8)

Features

Commits

Updates next-intl from 4.6.1 to 4.7.0

Release notes

Sourced from next-intl's releases.

v4.7.0

4.7.0 (2026-01-01)

Improvements for useExtracted

  • Only run extraction for next dev and next build (not e.g. for next typegen)
  • Include line numbers for file references in .po files
  • Incorporate line numbers into sorting of messages within a single file (if you're using the default .po format)

(#2200) (ebc5e43) – by @​amannn

Changelog

Sourced from next-intl's changelog.

4.7.0 (2026-01-01)

Features

Commits

Updates pg from 8.16.3 to 8.17.1

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

pg@8.17.0

  • Throw correct error if database URL parsing fails.

pg@8.16.0

pg@8.15.0

  • Add support for esm importing. CommonJS importing is still also supported.

pg@8.14.0

pg@8.13.0

pg@8.12.0

pg-pool@8.10.0

  • Emit release event when client is returned to the pool.

pg@8.9.0

pg@8.8.0

pg-pool@3.5.0

... (truncated)

Commits

Updates posthog-node from 5.17.4 to 5.21.1

Release notes

Sourced from posthog-node's releases.

posthog-node@5.21.1

5.21.1

Patch Changes

  • Updated dependencies [d37e570]:
    • @​posthog/core@​1.10.0

posthog-node@5.21.0

5.21.0

Minor Changes

  • #2883 640fcdd Thanks @​ordehi! - Add warning when experience continuity flags are detected during local evaluation, and new strictLocalEvaluation option.

    Warning: When using local evaluation with flags that have experience continuity enabled, a warning is now emitted explaining that these flags will cause server requests on every evaluation, negating local evaluation cost savings.

    New option: strictLocalEvaluation: true can be set at client init to prevent all server fallback for flag evaluations. Flags that cannot be evaluated locally will return undefined instead of making a server request. This is useful in high-volume environments where you want to guarantee no unexpected server costs. (2026-01-14)

posthog-node@5.20.0

5.20.0

Minor Changes

Patch Changes

posthog-node@5.19.0

5.19.0

Minor Changes

  • #2840 84e4140 Thanks @​ordehi! - Add overrideFeatureFlags() method for local testing and development (2026-01-06)
Changelog

Sourced from posthog-node's changelog.

5.21.1

Patch Changes

  • Updated dependencies [d37e570]:
    • @​posthog/core@​1.10.0

5.21.0

Minor Changes

  • #2883 640fcdd Thanks @​ordehi! - Add warning when experience continuity flags are detected during local evaluation, and new strictLocalEvaluation option.

    Warning: When using local evaluation with flags that have experience continuity enabled, a warning is now emitted explaining that these flags will cause server requests on every evaluation, negating local evaluation cost savings.

    New option: strictLocalEvaluation: true can be set at client init to prevent all server fallback for flag evaluations. Flags that cannot be evaluated locally will return undefined instead of making a server request. This is useful in high-volume environments where you want to guarantee no unexpected server costs. (2026-01-14)

5.20.0

Minor Changes

Patch Changes

5.19.0

Minor Changes

  • #2840 84e4140 Thanks @​ordehi! - Add overrideFeatureFlags() method for local testing and development (2026-01-06)

5.18.1

Patch Changes

  • #2825 5a4a8e2 Thanks @​haacked! - getFeatureFlag() respects exponential backoff for HTTP 401, 403, and 429 responses. (2025-12-30)

5.18.0

Minor Changes

  • #2782 04065b9 Thanks @​haacked! - Add $feature_flag_error to $feature_flag_called events when an error occurred while trying evaluate a flag (2025-12-22)

... (truncated)

Commits
  • 6ac83cc chore: update versions and lockfile [version bump]
  • 19b40a3 chore: update versions and lockfile [version bump]
  • 640fcdd feat(node): warn about experience continuity flags and add strictLocalEvaluat...
  • 423dccd chore: update versions and lockfile [version bump]
  • fba9fb2 feat: better integration between llma and error tracking (#2593)
  • 80189f2 chore: update versions and lockfile [version bump]
  • 84e4140 feat(node): add overrideFeatureFlags() method for local testing (#2840)
  • 072a1d0 chore: update versions and lockfile [version bump]
  • 5a4a8e2 fix(flags): Apply exponential backoff to on-demand fetches after errors (#2825)
  • 8c6929a chore: update versions and lockfile [version bump]
  • Additional commits viewable in compare view

Updates react-hook-form from 7.68.0 to 7.71.1

Release notes

Sourced from react-hook-form's releases.

Version v7.71.1

🐞 fix #13250 issue with booleans_as_integers (#13252)

Version 7.71.0

⚡ perf: memoize FormProvider context value to prevent unnecessary rerenders (#13235) 🚄 perf: separate control context to prevent unnecessary rerenders (#13234) 🐞 fix: update isValid when field disabled state changes (#13231) 👌 chore: optimize bundle size via safe terser options (#13243) (#13244)

thanks to @​kamja44, @​a28689604 & @​newsiberian

Version 7.70.0

✅ watch type improvement (#13228) 🐞 fix: prevent field array ghost elements with keepDirtyValues (#13188) 🐞 fix: improve invalid date handling in deepEqual and validation (#13230) 🐞 fix(types): handle branded types correctly in DeepPartial (#13222) 🐞 fix native validation focus issue (#13220) 🐞 change spread operator to set name with depricated names prop, then override with new name prop is supplied (#13214) 🐞 fix: prevent duplicate subscription trigger in setValue (#13206) (#13209) 👌 chore: fix lib type check include tests (#13229)

thanks to @​EdwardEB, @​constantly-dev & @​a28689604

🎄 Version 7.69.0

📏 feat: align API with useWatch (#13192) 🤦🏻‍♂️ chore: update @​deprecated names prop on (#13198) 🏥 chore: safely call function methods on elements (#13190) 🪖 chore: cve-2025-67779 (#13196) 🪖 chore: cve-2025-55184 & cve-2025-55183 (#13194) 🪖 chore: CVE-2025-55182 Critical RCE vulnerabilty (#13175) 🔬 test: add regression tests for #12837 and #13136 (#13187) 🐞 fix(reset): preserve isValid state when keepIsValid option is used (#13173) 🐞 fix: ensure each createFormControl.subscribe subscription listens only to the changes it subscribes to (#12968) 🐞 fix(validation): batch isValidating state updates with validation result (#13181) 🐞 fix(createFormControl): resolve race condition between setError and setFocus (#13138) (#13169) 🧿 fix control prop type (#13189) 🔔 chore: clean cloneObject logic (#13179)

thanks to @​PierreCrb,

Bumps the prod-minor-updates group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@asteasolutions/zod-to-openapi](https://github.com/asteasolutions/zod-to-openapi) | `8.2.0` | `8.4.0` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.955.0` | `3.971.0` |
| [@faker-js/faker](https://github.com/faker-js/faker) | `10.1.0` | `10.2.0` |
| [ioredis](https://github.com/luin/ioredis) | `5.8.2` | `5.9.2` |
| [next-intl](https://github.com/amannn/next-intl) | `4.6.1` | `4.7.0` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.16.3` | `8.17.1` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.17.4` | `5.21.1` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.68.0` | `7.71.1` |
| [resend](https://github.com/resend/resend-node) | `6.6.0` | `6.7.0` |
| [stripe](https://github.com/stripe/stripe-node) | `20.1.0` | `20.2.0` |
| [ws](https://github.com/websockets/ws) | `8.18.3` | `8.19.0` |
| [zod](https://github.com/colinhacks/zod) | `4.2.1` | `4.3.5` |



Updates `@asteasolutions/zod-to-openapi` from 8.2.0 to 8.4.0
- [Release notes](https://github.com/asteasolutions/zod-to-openapi/releases)
- [Commits](asteasolutions/zod-to-openapi@v8.2.0...v8.4.0)

Updates `@aws-sdk/client-s3` from 3.955.0 to 3.971.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.971.0/clients/client-s3)

Updates `@faker-js/faker` from 10.1.0 to 10.2.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v10.1.0...v10.2.0)

Updates `ioredis` from 5.8.2 to 5.9.2
- [Release notes](https://github.com/luin/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.8.2...v5.9.2)

Updates `next-intl` from 4.6.1 to 4.7.0
- [Release notes](https://github.com/amannn/next-intl/releases)
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md)
- [Commits](amannn/next-intl@v4.6.1...v4.7.0)

Updates `pg` from 8.16.3 to 8.17.1
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.17.1/packages/pg)

Updates `posthog-node` from 5.17.4 to 5.21.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.21.1/packages/node)

Updates `react-hook-form` from 7.68.0 to 7.71.1
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.68.0...v7.71.1)

Updates `resend` from 6.6.0 to 6.7.0
- [Release notes](https://github.com/resend/resend-node/releases)
- [Commits](resend/resend-node@v6.6.0...v6.7.0)

Updates `stripe` from 20.1.0 to 20.2.0
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v20.1.0...v20.2.0)

Updates `ws` from 8.18.3 to 8.19.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.18.3...8.19.0)

Updates `zod` from 4.2.1 to 4.3.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.2.1...v4.3.5)

---
updated-dependencies:
- dependency-name: "@asteasolutions/zod-to-openapi"
  dependency-version: 8.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.971.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: "@faker-js/faker"
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: ioredis
  dependency-version: 5.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: next-intl
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: pg
  dependency-version: 8.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: posthog-node
  dependency-version: 5.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: react-hook-form
  dependency-version: 7.71.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: resend
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: stripe
  dependency-version: 20.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: ws
  dependency-version: 8.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
- dependency-name: zod
  dependency-version: 4.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 19, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Jan 22, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jan 22, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/prod-minor-updates-2097ecc9b5 branch January 22, 2026 10:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants