Skip to content

chore(deps): Bump the npm-minor-patch group across 1 directory with 6 updates - #383

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend-serverless/npm-minor-patch-8bb578bd88
Open

chore(deps): Bump the npm-minor-patch group across 1 directory with 6 updates#383
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend-serverless/npm-minor-patch-8bb578bd88

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 6 updates in the /backend-serverless directory:

Package From To
@clerk/backend 2.33.5 2.33.6
@clerk/express 1.7.81 1.7.82
express-rate-limit 8.5.2 8.6.1
helmet 8.2.0 8.3.0
@vercel/node 5.8.23 5.9.0
tsx 4.23.0 4.23.1

Updates @clerk/backend from 2.33.5 to 2.33.6

Changelog

Sourced from @​clerk/backend's changelog.

2.33.6

Patch Changes

  • Updated dependencies [4093b03]:
    • @​clerk/shared@​3.47.8
    • @​clerk/types@​4.101.26
Commits

Updates @clerk/express from 1.7.81 to 1.7.82

Changelog

Sourced from @​clerk/express's changelog.

1.7.82

Patch Changes

  • Updated dependencies [4093b03]:
    • @​clerk/shared@​3.47.8
    • @​clerk/backend@​2.33.6
    • @​clerk/types@​4.101.26
Commits

Updates express-rate-limit from 8.5.2 to 8.6.1

Release notes

Sourced from express-rate-limit's releases.

v8.6.1

You can view the changelog here.

v8.6.0

You can view the changelog here.

Commits
  • c7fced5 8.6.1
  • b21110e chore: deprecate millisecond-based time constants (#662)
  • fad3d85 chore(deps-dev): bump the development-dependencies group with 4 updates (#660)
  • fffb3c4 8.6.0
  • f366b2d docs: debugging guide, time constants, & v8.6.0 changelog (#652)
  • 593ddd2 fix: make debug output easier to read (#653)
  • ef8c129 fix: Pin safe version of @​asyncapi/specs dev dep (#659)
  • 7b05e0d feat: add time constants to support more readable values for windowMs (#655)
  • 863e730 chore(deps-dev): bump the development-dependencies group with 3 updates (#657)
  • e0e711e fix: correct wording in usage documentation for express-rate-limit (#656)
  • Additional commits viewable in compare view

Updates helmet from 8.2.0 to 8.3.0

Changelog

Sourced from helmet's changelog.

8.3.0 - 2026-07-11

Changed

  • Content-Security-Policy: improved performance by ~7% when there are no dynamic directives
  • Content-Security-Policy: improved error handling for invalid directive names

Fixed

  • Content-Security-Policy: useDefaults: false with no directives is no longer valid, both at runtime and the type level
  • Content-Security-Policy: dynamically-computed directive values would throw, not call next, when invalid
  • Content-Security-Policy: dynamically-computed directive value entries would throw, not call next, when function threw
Commits
  • 75f1a98 8.3.0
  • f03f70d Update changelog for 8.3.0 release
  • a307fce Fix capitalization in CSP package changelog
  • 5347b43 Format default CSP in README for readability
  • 9afc570 CSP: fix middleware-specific README missing link
  • 266c95c Minor speedups to project setups test
  • 7a4196c CSP: update package-specific changelog
  • 02716b4 CSP: improve performance when there are no dynamic directives
  • 3f511ed CSP: move utility functions to separate file
  • 80338af CSP: disabling defaults with no directives is now an error
  • Additional commits viewable in compare view

Updates @vercel/node from 5.8.23 to 5.9.0

Release notes

Sourced from @​vercel/node's releases.

@​vercel/node@​5.9.0

Minor Changes

  • 4502520: Support Node.js Routing Middleware entrypoints through proxy.entrypoint, with optional path matching through proxy.matcher. The matcher may be configured in the entrypoint source or vercel.json, but not both.

Patch Changes

  • Updated dependencies [4502520]
    • @​vercel/build-utils@​13.36.0

@​vercel/node@​5.8.27

Patch Changes

  • Updated dependencies [7dd4301]
    • @​vercel/build-utils@​13.35.0

@​vercel/node@​5.8.26

Patch Changes

  • Updated dependencies [238543c]
    • @​vercel/build-utils@​13.34.0

@​vercel/node@​5.8.25

Patch Changes

  • Updated dependencies [def07fc]
    • @​vercel/build-utils@​13.33.1

@​vercel/node@​5.8.24

Patch Changes

  • Updated dependencies [607f0ef]
    • @​vercel/build-utils@​13.33.0
Changelog

Sourced from @​vercel/node's changelog.

5.9.0

Minor Changes

  • 4502520: Support Node.js Routing Middleware entrypoints through proxy.entrypoint, with optional path matching through proxy.matcher. The matcher may be configured in the entrypoint source or vercel.json, but not both.

Patch Changes

  • Updated dependencies [4502520]
    • @​vercel/build-utils@​13.36.0

5.8.27

Patch Changes

  • Updated dependencies [7dd4301]
    • @​vercel/build-utils@​13.35.0

5.8.26

Patch Changes

  • Updated dependencies [238543c]
    • @​vercel/build-utils@​13.34.0

5.8.25

Patch Changes

  • Updated dependencies [def07fc]
    • @​vercel/build-utils@​13.33.1

5.8.24

Patch Changes

  • Updated dependencies [607f0ef]
    • @​vercel/build-utils@​13.33.0
Commits

Updates tsx from 4.23.0 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

  • support tsImport after global preload (8d4ffc2)
  • watch: avoid clearing piped output (95d0672)
  • watch: treat script and dependency paths literally (79fddde)

Performance Improvements

  • index transform cache lazily (e818ad6)
  • load esbuild lazily in CLI (d067938)
  • map Node TypeScript formats directly (cdcc623)
  • use sync module hooks on Node v22.22.3+ (f8992f1)

This release is also available on:

Commits
  • 79fddde fix(watch): treat script and dependency paths literally
  • e818ad6 perf: index transform cache lazily
  • cdcc623 perf: map Node TypeScript formats directly
  • d067938 perf: load esbuild lazily in CLI
  • 95d0672 fix(watch): avoid clearing piped output
  • 6fd4607 docs: add per-page metadata
  • f4176d8 docs: generate sitemap
  • 8d4ffc2 fix: support tsImport after global preload
  • f0e89b2 docs: document Node's public type-stripping API vs internal loader path
  • f8992f1 perf: use sync module hooks on Node v22.22.3+
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 20, 2026
@dependabot
dependabot Bot requested a review from a team July 20, 2026 23:16
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 20, 2026
@vercel

vercel Bot commented Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
blog Ready Ready Preview, Comment Jul 27, 2026 11:18pm
projectachilles-io Ready Ready Preview, Comment Jul 27, 2026 11:18pm
wiki Ready Ready Preview, Comment Jul 27, 2026 11:18pm

@dependabot
chore(deps): Bump the npm-minor-patch group across 1 directory with 6…
191d35b 
… updates

Bumps the npm-minor-patch group with 6 updates in the /backend-serverless directory:

| Package | From | To |
| --- | --- | --- |
| [@clerk/backend](https://github.com/clerk/javascript/tree/HEAD/packages/backend) | `2.33.5` | `2.33.6` |
| [@clerk/express](https://github.com/clerk/javascript/tree/HEAD/packages/express) | `1.7.81` | `1.7.82` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.5.2` | `8.6.1` |
| [helmet](https://github.com/helmetjs/helmet) | `8.2.0` | `8.3.0` |
| [@vercel/node](https://github.com/vercel/vercel/tree/HEAD/packages/node) | `5.8.23` | `5.9.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.1` |



Updates `@clerk/backend` from 2.33.5 to 2.33.6
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/@clerk/backend@2.33.6/packages/backend/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/backend@2.33.6/packages/backend)

Updates `@clerk/express` from 1.7.81 to 1.7.82
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/@clerk/express@1.7.82/packages/express/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/express@1.7.82/packages/express)

Updates `express-rate-limit` from 8.5.2 to 8.6.1
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.5.2...v8.6.1)

Updates `helmet` from 8.2.0 to 8.3.0
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](helmetjs/helmet@v8.2.0...v8.3.0)

Updates `@vercel/node` from 5.8.23 to 5.9.0
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/node@5.9.0/packages/node)

Updates `tsx` from 4.23.0 to 4.23.1
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.0...v4.23.1)

---
updated-dependencies:
- dependency-name: "@clerk/backend"
  dependency-version: 2.33.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@clerk/express"
  dependency-version: 1.7.82
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@vercel/node"
  dependency-version: 5.8.26
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: express-rate-limit
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: helmet
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/backend-serverless/npm-minor-patch-8bb578bd88 branch from 74ab89f to 191d35b Compare July 27, 2026 23:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants