Skip to content

build(deps): bump the server-prod group across 1 directory with 41 updates#508

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/server-prod-d36f290c91
Open

build(deps): bump the server-prod group across 1 directory with 41 updates#508
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/server-prod-d36f290c91

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Bumps the server-prod group with 41 updates in the /server directory:

Package From To
@apollo/server 5.5.0 5.5.1
@aws-sdk/client-s3 3.1035.0 3.1048.0
@aws-sdk/client-secrets-manager 3.1035.0 3.1048.0
@aws-sdk/client-ses 3.1035.0 3.1048.0
@clickhouse/client 1.18.2 1.18.5
@google-cloud/translate 9.3.0 9.4.1
@opentelemetry/api 1.8.0 1.9.1
@opentelemetry/semantic-conventions 1.40.0 1.41.1
@roostorg/coop-integration-example 2.0.0 2.0.1
@stdlib/stats-binomial-test 0.0.7 0.2.3
@total-typescript/ts-reset 0.3.7 0.6.1
@types/cookie-parser 1.4.3 1.4.10
@types/debug 4.1.12 4.1.13
@types/lodash 4.14.198 4.17.24
@types/morgan 1.9.4 1.9.10
@types/node 18.17.3 18.19.130
@types/validator 13.9.0 13.15.10
ajv 8.18.0 8.20.0
bullmq 5.76.1 5.76.10
cassandra-driver 4.8.0 4.9.0
cors 2.8.5 2.8.6
dataloader 2.2.2 2.2.3
eslint-plugin-switch-statement 0.0.11 0.0.12
express-session 1.18.2 1.19.0
@types/express-session 1.17.7 1.19.0
fast-check 4.6.0 4.8.0
form-data-encoder 4.0.2 4.1.0
fuzzball 2.1.2 2.2.6
graphql 16.13.2 16.14.0
graphql-scalars 1.22.2 1.25.0
kysely 0.28.17 0.29.2
normalize-text 2.4.1 2.6.0
openai 4.24.0 4.104.0
pg 8.11.2 8.21.0
pg-cursor 2.10.2 2.20.0
@types/pg-cursor 2.7.0 2.7.2
safe-stable-stringify 2.4.3 2.5.0
stream-json 1.8.0 1.9.1
ts-pattern 5.0.5 5.9.0
type-fest 4.3.2 4.41.0
undici 7.24.5 7.25.0

Updates @apollo/server from 5.5.0 to 5.5.1

Release notes

Sourced from @​apollo/server's releases.

@​apollo/server-integration-testsuite@​5.5.1

Patch Changes

  • Updated dependencies [3f46c51]:
    • @​apollo/server@​5.5.1

@​apollo/server@​5.5.1

Patch Changes

Changelog

Sourced from @​apollo/server's changelog.

5.5.1

Patch Changes

Commits

Updates @aws-sdk/client-s3 from 3.1035.0 to 3.1048.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1048.0

3.1048.0(2026-05-15)

Chores
New Features
  • clients: update client endpoints as of 2026-05-15 (4aa76bd0)
  • client-mediapackagev2: This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests (6c8a84d4)
  • client-partnercentral-selling: Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution. (d68a75c4)
  • client-cloudwatch-logs: Updating the max limit for start query api parameter. (931876e1)

For list of updated packages, view updated-packages.md in assets-3.1048.0.zip

v3.1047.0

3.1047.0(2026-05-14)

Chores
New Features
  • clients: update client endpoints as of 2026-05-14 (3505575d)
  • client-glue: Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables. (e2b076ee)
  • client-database-migration-service: Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs. (32d372e7)
  • client-mgn: Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility. (27c07049)
  • client-bedrock: Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs. (7e479fde)
  • client-cloudfront: Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes (ee96afaa)
  • client-datazone: Adds support for SageMaker Unified Studio notebook operations, including notebook import and export (383f4ea2)
  • client-qconnect: ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type. (0d6d7ec3)
  • client-grafana: Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access. (1184c5e5)

For list of updated packages, view updated-packages.md in assets-3.1047.0.zip

v3.1046.0

3.1046.0(2026-05-14)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1048.0 (2026-05-15)

Note: Version bump only for package @​aws-sdk/client-s3

3.1047.0 (2026-05-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.1046.0 (2026-05-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.1045.0 (2026-05-07)

Note: Version bump only for package @​aws-sdk/client-s3

3.1044.0 (2026-05-06)

Features

  • client-s3: Validate outpost access point resource name (bee88a5)

3.1043.0 (2026-05-05)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits

Updates @aws-sdk/client-secrets-manager from 3.1035.0 to 3.1048.0

Release notes

Sourced from @​aws-sdk/client-secrets-manager's releases.

v3.1048.0

3.1048.0(2026-05-15)

Chores
New Features
  • clients: update client endpoints as of 2026-05-15 (4aa76bd0)
  • client-mediapackagev2: This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests (6c8a84d4)
  • client-partnercentral-selling: Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution. (d68a75c4)
  • client-cloudwatch-logs: Updating the max limit for start query api parameter. (931876e1)

For list of updated packages, view updated-packages.md in assets-3.1048.0.zip

v3.1047.0

3.1047.0(2026-05-14)

Chores
New Features
  • clients: update client endpoints as of 2026-05-14 (3505575d)
  • client-glue: Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables. (e2b076ee)
  • client-database-migration-service: Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs. (32d372e7)
  • client-mgn: Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility. (27c07049)
  • client-bedrock: Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs. (7e479fde)
  • client-cloudfront: Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes (ee96afaa)
  • client-datazone: Adds support for SageMaker Unified Studio notebook operations, including notebook import and export (383f4ea2)
  • client-qconnect: ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type. (0d6d7ec3)
  • client-grafana: Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access. (1184c5e5)

For list of updated packages, view updated-packages.md in assets-3.1047.0.zip

v3.1046.0

3.1046.0(2026-05-14)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-secrets-manager's changelog.

3.1048.0 (2026-05-15)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1047.0 (2026-05-14)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1046.0 (2026-05-14)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1045.0 (2026-05-07)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1044.0 (2026-05-06)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1043.0 (2026-05-05)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1042.0 (2026-05-04)

... (truncated)

Commits

Updates @aws-sdk/client-ses from 3.1035.0 to 3.1048.0

Release notes

Sourced from @​aws-sdk/client-ses's releases.

v3.1048.0

3.1048.0(2026-05-15)

Chores
New Features
  • clients: update client endpoints as of 2026-05-15 (4aa76bd0)
  • client-mediapackagev2: This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests (6c8a84d4)
  • client-partnercentral-selling: Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution. (d68a75c4)
  • client-cloudwatch-logs: Updating the max limit for start query api parameter. (931876e1)

For list of updated packages, view updated-packages.md in assets-3.1048.0.zip

v3.1047.0

3.1047.0(2026-05-14)

Chores
New Features
  • clients: update client endpoints as of 2026-05-14 (3505575d)
  • client-glue: Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables. (e2b076ee)
  • client-database-migration-service: Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs. (32d372e7)
  • client-mgn: Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility. (27c07049)
  • client-bedrock: Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs. (7e479fde)
  • client-cloudfront: Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes (ee96afaa)
  • client-datazone: Adds support for SageMaker Unified Studio notebook operations, including notebook import and export (383f4ea2)
  • client-qconnect: ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type. (0d6d7ec3)
  • client-grafana: Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access. (1184c5e5)

For list of updated packages, view updated-packages.md in assets-3.1047.0.zip

v3.1046.0

3.1046.0(2026-05-14)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-ses's changelog.

3.1048.0 (2026-05-15)

Note: Version bump only for package @​aws-sdk/client-ses

3.1047.0 (2026-05-14)

Note: Version bump only for package @​aws-sdk/client-ses

3.1046.0 (2026-05-14)

Note: Version bump only for package @​aws-sdk/client-ses

3.1045.0 (2026-05-07)

Note: Version bump only for package @​aws-sdk/client-ses

3.1044.0 (2026-05-06)

Note: Version bump only for package @​aws-sdk/client-ses

3.1043.0 (2026-05-05)

Note: Version bump only for package @​aws-sdk/client-ses

3.1042.0 (2026-05-04)

... (truncated)

Commits

Updates @clickhouse/client from 1.18.2 to 1.18.5

Release notes

Sourced from @​clickhouse/client's releases.

1.18.5

Improvements

  • (Node.js only) Added max_response_headers_size client option that forwards the maxHeaderSize option to the underlying http(s).request call. This raises the per-request limit on the total size of HTTP response headers received from the server (Node.js default is ~16 KB). It is most useful when running long-running queries with send_progress_in_http_headers enabled — the X-ClickHouse-Progress headers accumulate over the lifetime of the request and can exceed the default limit, causing the request to fail with HPE_HEADER_OVERFLOW. Setting this option avoids the need to use the global --max-http-header-size Node.js CLI flag or the NODE_OPTIONS environment variable. Has no effect for the Web client (which uses fetch) and no effect when a custom http_agent is configured with a request implementation that does not honor the option.
const client = createClient({
  request_timeout: 400_000,
  max_response_headers_size: 1024 * 1024, // accept up to 1 MiB of response headers
  clickhouse_settings: {
    send_progress_in_http_headers: 1,
    http_headers_progress_interval_ms: '110000',
  },
})
  • The @clickhouse/client npm package now ships embedded AI-agent skills, clickhouse-js-node-coding and clickhouse-js-node-troubleshooting, under node_modules/@clickhouse/client/skills/. These skills are also declared in the agents.skills field of the package manifest for discovery tools that scan node_modules. This allows agentic coding tools to load focused, Node-client-specific coding and troubleshooting guidance without any additional setup. (#682)

#682: ClickHouse/clickhouse-js#682

1.18.4

A release-infrastructure-only version bump (no user-facing changes). See 1.18.5 for the next release with user-facing improvements.

1.18.3

Improvements

  • Added keep_alive.eagerly_destroy_stale_sockets option (Node.js only, default: false). When enabled, sockets that have been idle for longer than idle_socket_ttl are destroyed immediately before each request, rather than waiting for the idle timeout to fire. This helps reclaim stale sockets during event loop delays, where the timeout callback may not run on time.
const client = createClient({
  keep_alive: {
    enabled: true,
    idle_socket_ttl: 2500,
    eagerly_destroy_stale_sockets: true,
  },
})
  • Added auto-detection and warning when request_timeout is high (> 60 seconds) but progress headers are not configured. Long-running queries may fail with socket hang-up errors if they exceed the load balancer idle timeout. The client now warns users to enable send_progress_in_http_headers and http_headers_progress_interval_ms settings to prevent such issues.
// This will now trigger a warning
const client = createClient({
  request_timeout: 120_000, // 120 seconds
  // send_progress_in_http_headers is not configured
})
// ✓ Properly configured to avoid load balancer timeouts
const client = createClient({
request_timeout: 400_000,
</tr></table>

... (truncated)

Changelog

Sourced from @​clickhouse/client's changelog.

1.18.5

Improvements

  • (Node.js only) Added max_response_headers_size client option that forwards the maxHeaderSize option to the underlying http(s).request call. This raises the per-request limit on the total size of HTTP response headers received from the server (Node.js default is ~16 KB). It is most useful when running long-running queries with send_progress_in_http_headers enabled — the X-ClickHouse-Progress headers accumulate over the lifetime of the request and can exceed the default limit, causing the request to fail with HPE_HEADER_OVERFLOW. Setting this option avoids the need to use the global --max-http-header-size Node.js CLI flag or the NODE_OPTIONS environment variable. Has no effect for the Web client (which uses fetch) and no effect when a custom http_agent is configured with a request implementation that does not honor the option.
const client = createClient({
  request_timeout: 400_000,
  max_response_headers_size: 1024 * 1024, // accept up to 1 MiB of response headers
  clickhouse_settings: {
    send_progress_in_http_headers: 1,
    http_headers_progress_interval_ms: '110000',
  },
})
  • The @clickhouse/client npm package now ships embedded AI-agent skills, clickhouse-js-node-coding and clickhouse-js-node-troubleshooting, under node_modules/@clickhouse/client/skills/. These skills are also declared in the agents.skills field of the package manifest for discovery tools that scan node_modules. This allows agentic coding tools to load focused, Node-client-specific coding and troubleshooting guidance without any additional setup. (#682)

#682: ClickHouse/clickhouse-js#682

1.18.4

A release-infrastructure-only version bump (no user-facing changes). See 1.18.5 for the next release with user-facing improvements.

1.18.3

Improvements

  • Added keep_alive.eagerly_destroy_stale_sockets option (Node.js only, default: false). When enabled, sockets that have been idle for longer than idle_socket_ttl are destroyed immediately before each request, rather than waiting for the idle timeout to fire. This helps reclaim stale sockets during event loop delays, where the timeout callback may not run on time.
const client = createClient({
  keep_alive: {
    enabled: true,
    idle_socket_ttl: 2500,
    eagerly_destroy_stale_sockets: true,
  },
})
  • Added auto-detection and warning when request_timeout is high (> 60 seconds) but progress headers are not configured. Long-running queries may fail with socket hang-up errors if they exceed the load balancer idle timeout. The client now warns users to enable send_progress_in_http_headers and http_headers_progress_interval_ms settings to prevent such issues.
// This will now trigger a warning
const client = createClient({
  request_timeout: 120_000, // 120 seconds
  // send_progress_in_http_headers is not configured
})
</tr></table>

... (truncated)

Commits
  • 24bbb66 Merge pull request #744 from ClickHouse/main
  • d0212a2 Create review.instructions.md (#743)
  • dec52f8 ci: split examples checks into a dedicated examples workflow (#742)
  • 5535526 Add bin/clickhouse-client shim symlink for upstream test runner (#736)
  • 03f689a Add upstream SQL test runner to npm workspaces (#740)
  • 390a2ac test-runner: persist SET across statements via session_id; allowlist 23 newly...
  • 8ed01d5 tests/clickhouse-test-runner: stop logging argv (#739)
  • 3b2c176 ci(publish): trigger release workflow from release branch (#737)
  • 37573c9 Potential fix for pull request finding
  • 63111da Potential fix for pull request finding
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​clickhouse/client since your current version.


Updates @google-cloud/translate from 9.3.0 to 9.4.1

Release notes

Sourced from @​google-cloud/translate's releases.

translate: v9.4.1

9.4.1 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)

security-center: v9.3.1

9.3.1 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)
Changelog

Sourced from @​google-cloud/translate's changelog.

9.4.1 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)

9.4.0 (2026-04-08)

Features

  • [translate] A new field mime_type is added to message .google.cloud.translation.v3.AdaptiveMtTranslateRequest (#7968) (4e5752b)
Commits
  • 4572246 chore: release main (#8148)
  • 59f445d fix: sync legacy 0.1.0 snippet metadata versions across monorepo (#8144)
  • c1a03fe fix: change the copyright year for files in the packages folder (#8109)
  • a47507c chore: consolidate prettierignore and prettierrc files: autogen (#8082)
  • ac0fbb6 fix: Revert "fix: Do not publish the protos to npm" (#8096)
  • 816216b fix: Do not publish the protos to npm (#8079)
  • 5d85291 chore: cleanup redundant .gitattributes files (#8007)
  • 6b4a203 chore: remove duplicate per-package contribution and license files (#7972)
  • c35255e ci: resolve type conflict for @​sinonjs/fake-timers for all generated packages...
  • e2491a6 chore: release main (#7895)
  • Additional commits viewable in compare view

Updates @opentelemetry/api from 1.8.0 to 1.9.1

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.9.1

1.9.1

🐛 (Bug Fix)

  • fix(api): prioritize esnext export condition as it is more specific #5458
  • fix(api): update diag consoleLogger to use original console methods to prevent infinite loop when a console instrumentation is present #6395
  • fix(api): use Attributes instead of deprecated SpanAttributes in SpanOptions #6478 @​overbalance
  • fix(diag): change types in DiagComponentLogger from any to unknown#5478 @​loganrosen
  • fix(api): re-introduce fallback chain for global utils #6523 @​pichlermarc

🏠 (Internal)

api/v1.9.0

1.9.0

🚀 (Enhancement)

  • feat(metrics): added synchronous gauge #4528 @​clintonb
  • feat(api): allow adding span links after span creation #4536 @​seemk
    • This change is non-breaking for end-users, but breaking for Trace SDK implmentations in accordance with the specification as new features need to be implemented.
  • feat: support node 22 #4666 @​dyladan
Changelog

Sourced from @​opentelemetry/api's changelog.

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

  • chore: fix cross project links and missing implicitly exported types #3533 @​legendecas
  • feat(sdk-metrics): add exponential histogram mapping functions #3504 @​mwear

1.9.0

🚀 (Enhancement)

  • feat(instrumentation-grpc): set net.peer.name and net.peer.port on client spans #3430
  • feat(exporter-trace-otlp-proto): Add protobuf otlp trace exporter support for browser #3208 @​pkanal

🐛 (Bug Fix)

  • fix(sdk-metrics): use default Resource to comply with semantic conventions #3411 @​pichlermarc
    • Metrics exported by the SDK now contain the following resource attributes by default:
      • service.name
      • telemetry.sdk.name
      • telemetry.sdk.language
      • telemetry.sdk.version
  • fix(sdk-metrics): use Date.now() for instrument recording timestamps #3514 @​MisterSquishy
  • fix(sdk-trace): make spans resilient to clock drift #3434 @​dyladan
  • fix(selenium-tests): updated webpack version for selenium test issue #3456 @​SaumyaBhushan
  • fix(sdk-metrics): collect metrics when periodic exporting metric reader flushes #3517 @​legendecas
  • fix(sdk-metrics): fix duplicated registration of metrics for collectors #3488 @​legendecas
  • fix(core): fix precision loss in numberToHrtime #3480 @​legendecas

🏠 (Internal)

Commits
  • 279458e Release 1.9.1 / 0.35.1 (#3573)
  • 4978743 fix(http): remove outgoing headers normalization (#3557)
  • d1f9594 chore(deps): update dependency rimraf to v4 (#3532)
  • e0abcc0 fix: remove JSON syntax error and regenerate tsconfig files (#3566)
  • a90c558 fix(sdk-node): register instrumentations early (#3502)
  • 5b070b8 fix: include TraceState in trace exports (#3569)
  • dcb09b7 chore(deps): update dependency gh-pages to v5 (#3571)

@dependabot
build(deps): bump the server-prod group across 1 directory with 41 up…
5422048 
…dates

Bumps the server-prod group with 41 updates in the /server directory:

| Package | From | To |
| --- | --- | --- |
| [@apollo/server](https://github.com/apollographql/apollo-server/tree/HEAD/packages/server) | `5.5.0` | `5.5.1` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1035.0` | `3.1048.0` |
| [@aws-sdk/client-secrets-manager](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-secrets-manager) | `3.1035.0` | `3.1048.0` |
| [@aws-sdk/client-ses](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ses) | `3.1035.0` | `3.1048.0` |
| [@clickhouse/client](https://github.com/ClickHouse/clickhouse-js) | `1.18.2` | `1.18.5` |
| [@google-cloud/translate](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-translate) | `9.3.0` | `9.4.1` |
| [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.8.0` | `1.9.1` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.40.0` | `1.41.1` |
| [@roostorg/coop-integration-example](https://github.com/roostorg/coop-integration-example) | `2.0.0` | `2.0.1` |
| [@stdlib/stats-binomial-test](https://github.com/stdlib-js/stats-binomial-test) | `0.0.7` | `0.2.3` |
| [@total-typescript/ts-reset](https://github.com/total-typescript/ts-reset) | `0.3.7` | `0.6.1` |
| [@types/cookie-parser](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/cookie-parser) | `1.4.3` | `1.4.10` |
| [@types/debug](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/debug) | `4.1.12` | `4.1.13` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.14.198` | `4.17.24` |
| [@types/morgan](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/morgan) | `1.9.4` | `1.9.10` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `18.17.3` | `18.19.130` |
| [@types/validator](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/validator) | `13.9.0` | `13.15.10` |
| [ajv](https://github.com/ajv-validator/ajv) | `8.18.0` | `8.20.0` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.76.1` | `5.76.10` |
| [cassandra-driver](https://github.com/apache/cassandra-nodejs-driver) | `4.8.0` | `4.9.0` |
| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |
| [dataloader](https://github.com/graphql/dataloader) | `2.2.2` | `2.2.3` |
| [eslint-plugin-switch-statement](https://github.com/ethanresnick/eslint-plugin-exhaustive-switch) | `0.0.11` | `0.0.12` |
| [express-session](https://github.com/expressjs/session) | `1.18.2` | `1.19.0` |
| [@types/express-session](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express-session) | `1.17.7` | `1.19.0` |
| [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) | `4.6.0` | `4.8.0` |
| [form-data-encoder](https://github.com/octet-stream/form-data-encoder) | `4.0.2` | `4.1.0` |
| [fuzzball](https://github.com/nol13/fuzzball.js) | `2.1.2` | `2.2.6` |
| [graphql](https://github.com/graphql/graphql-js) | `16.13.2` | `16.14.0` |
| [graphql-scalars](https://github.com/Urigo/graphql-scalars) | `1.22.2` | `1.25.0` |
| [kysely](https://github.com/kysely-org/kysely) | `0.28.17` | `0.29.2` |
| [normalize-text](https://github.com/VitorLuizC/normalize-text) | `2.4.1` | `2.6.0` |
| [openai](https://github.com/openai/openai-node) | `4.24.0` | `4.104.0` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.11.2` | `8.21.0` |
| [pg-cursor](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg-cursor) | `2.10.2` | `2.20.0` |
| [@types/pg-cursor](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg-cursor) | `2.7.0` | `2.7.2` |
| [safe-stable-stringify](https://github.com/BridgeAR/safe-stable-stringify) | `2.4.3` | `2.5.0` |
| [stream-json](https://github.com/uhop/stream-json) | `1.8.0` | `1.9.1` |
| [ts-pattern](https://github.com/gvergnaud/ts-pattern) | `5.0.5` | `5.9.0` |
| [type-fest](https://github.com/sindresorhus/type-fest) | `4.3.2` | `4.41.0` |
| [undici](https://github.com/nodejs/undici) | `7.24.5` | `7.25.0` |



Updates `@apollo/server` from 5.5.0 to 5.5.1
- [Release notes](https://github.com/apollographql/apollo-server/releases)
- [Changelog](https://github.com/apollographql/apollo-server/blob/main/packages/server/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-server/commits/@apollo/server@5.5.1/packages/server)

Updates `@aws-sdk/client-s3` from 3.1035.0 to 3.1048.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1048.0/clients/client-s3)

Updates `@aws-sdk/client-secrets-manager` from 3.1035.0 to 3.1048.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-secrets-manager/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1048.0/clients/client-secrets-manager)

Updates `@aws-sdk/client-ses` from 3.1035.0 to 3.1048.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ses/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1048.0/clients/client-ses)

Updates `@clickhouse/client` from 1.18.2 to 1.18.5
- [Release notes](https://github.com/ClickHouse/clickhouse-js/releases)
- [Changelog](https://github.com/ClickHouse/clickhouse-js/blob/main/CHANGELOG.md)
- [Commits](ClickHouse/clickhouse-js@1.18.2...1.18.5)

Updates `@google-cloud/translate` from 9.3.0 to 9.4.1
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-translate/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/translate-v9.4.1/packages/google-cloud-translate)

Updates `@opentelemetry/api` from 1.8.0 to 1.9.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.8.0...v1.9.1)

Updates `@opentelemetry/semantic-conventions` from 1.40.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@semconv/v1.40.0...semconv/v1.41.1)

Updates `@roostorg/coop-integration-example` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/roostorg/coop-integration-example/releases)
- [Commits](roostorg/coop-integration-example@v2.0...v2.0.1)

Updates `@stdlib/stats-binomial-test` from 0.0.7 to 0.2.3
- [Changelog](https://github.com/stdlib-js/stats-binomial-test/blob/main/CHANGELOG.md)
- [Commits](stdlib-js/stats-binomial-test@v0.0.7...v0.2.3)

Updates `@total-typescript/ts-reset` from 0.3.7 to 0.6.1
- [Release notes](https://github.com/total-typescript/ts-reset/releases)
- [Changelog](https://github.com/mattpocock/ts-reset/blob/main/CHANGELOG.md)
- [Commits](https://github.com/total-typescript/ts-reset/commits)

Updates `@types/cookie-parser` from 1.4.3 to 1.4.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/cookie-parser)

Updates `@types/debug` from 4.1.12 to 4.1.13
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/debug)

Updates `@types/lodash` from 4.14.198 to 4.17.24
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `@types/morgan` from 1.9.4 to 1.9.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/morgan)

Updates `@types/node` from 18.17.3 to 18.19.130
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/validator` from 13.9.0 to 13.15.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/validator)

Updates `ajv` from 8.18.0 to 8.20.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v8.18.0...v8.20.0)

Updates `bullmq` from 5.76.1 to 5.76.10
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.76.1...v5.76.10)

Updates `cassandra-driver` from 4.8.0 to 4.9.0
- [Changelog](https://github.com/apache/cassandra-nodejs-driver/blob/trunk/CHANGELOG.md)
- [Commits](apache/cassandra-nodejs-driver@v4.8.0...v4.9.0)

Updates `cors` from 2.8.5 to 2.8.6
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](expressjs/cors@v2.8.5...v2.8.6)

Updates `dataloader` from 2.2.2 to 2.2.3
- [Release notes](https://github.com/graphql/dataloader/releases)
- [Changelog](https://github.com/graphql/dataloader/blob/main/CHANGELOG.md)
- [Commits](graphql/dataloader@v2.2.2...v2.2.3)

Updates `eslint-plugin-switch-statement` from 0.0.11 to 0.0.12
- [Commits](https://github.com/ethanresnick/eslint-plugin-exhaustive-switch/commits)

Updates `express-session` from 1.18.2 to 1.19.0
- [Release notes](https://github.com/expressjs/session/releases)
- [Changelog](https://github.com/expressjs/session/blob/master/HISTORY.md)
- [Commits](expressjs/session@v1.18.2...v1.19.0)

Updates `@types/express-session` from 1.17.7 to 1.19.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express-session)

Updates `fast-check` from 4.6.0 to 4.8.0
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/v4.8.0/packages/fast-check)

Updates `form-data-encoder` from 4.0.2 to 4.1.0
- [Release notes](https://github.com/octet-stream/form-data-encoder/releases)
- [Changelog](https://github.com/octet-stream/form-data-encoder/blob/main/CHANGELOG.md)
- [Commits](octet-stream/form-data-encoder@v4.0.2...v4.1.0)

Updates `fuzzball` from 2.1.2 to 2.2.6
- [Release notes](https://github.com/nol13/fuzzball.js/releases)
- [Commits](nol13/fuzzball.js@v2.1.2...v2.2.6)

Updates `graphql` from 16.13.2 to 16.14.0
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.13.2...v16.14.0)

Updates `graphql-scalars` from 1.22.2 to 1.25.0
- [Release notes](https://github.com/Urigo/graphql-scalars/releases)
- [Changelog](https://github.com/graphql-hive/graphql-scalars/blob/master/CHANGELOG.md)
- [Commits](graphql-hive/graphql-scalars@v1.22.2...v1.25.0)

Updates `kysely` from 0.28.17 to 0.29.2
- [Release notes](https://github.com/kysely-org/kysely/releases)
- [Commits](kysely-org/kysely@v0.28.17...v0.29.2)

Updates `normalize-text` from 2.4.1 to 2.6.0
- [Release notes](https://github.com/VitorLuizC/normalize-text/releases)
- [Commits](VitorLuizC/normalize-text@2.4.1...2.6.0)

Updates `openai` from 4.24.0 to 4.104.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v4.24.0...v4.104.0)

Updates `pg` from 8.11.2 to 8.21.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.21.0/packages/pg)

Updates `pg-cursor` from 2.10.2 to 2.20.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg-cursor@2.20.0/packages/pg-cursor)

Updates `@types/pg-cursor` from 2.7.0 to 2.7.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg-cursor)

Updates `safe-stable-stringify` from 2.4.3 to 2.5.0
- [Release notes](https://github.com/BridgeAR/safe-stable-stringify/releases)
- [Changelog](https://github.com/BridgeAR/safe-stable-stringify/blob/main/CHANGELOG.md)
- [Commits](BridgeAR/safe-stable-stringify@v2.4.3...v2.5.0)

Updates `stream-json` from 1.8.0 to 1.9.1
- [Commits](uhop/stream-json@1.8.0...1.9.1)

Updates `ts-pattern` from 5.0.5 to 5.9.0
- [Release notes](https://github.com/gvergnaud/ts-pattern/releases)
- [Commits](gvergnaud/ts-pattern@v5.0.5...v5.9.0)

Updates `type-fest` from 4.3.2 to 4.41.0
- [Release notes](https://github.com/sindresorhus/type-fest/releases)
- [Commits](sindresorhus/type-fest@v4.3.2...v4.41.0)

Updates `undici` from 7.24.5 to 7.25.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.24.5...v7.25.0)

---
updated-dependencies:
- dependency-name: "@apollo/server"
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-prod
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1048.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@aws-sdk/client-secrets-manager"
  dependency-version: 3.1048.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@aws-sdk/client-ses"
  dependency-version: 3.1048.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@clickhouse/client"
  dependency-version: 1.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-prod
- dependency-name: "@google-cloud/translate"
  dependency-version: 9.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@opentelemetry/api"
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@roostorg/coop-integration-example"
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-prod
- dependency-name: "@stdlib/stats-binomial-test"
  dependency-version: 0.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@total-typescript/ts-reset"
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@types/cookie-parser"
  dependency-version: 1.4.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-prod
- dependency-name: "@types/debug"
  dependency-version: 4.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-prod
- dependency-name: "@types/lodash"
  dependency-version: 4.17.24
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@types/morgan"
  dependency-version: 1.9.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-prod
- dependency-name: "@types/node"
  dependency-version: 18.19.130
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@types/validator"
  dependency-version: 13.15.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: ajv
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: bullmq
  dependency-version: 5.76.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-prod
- dependency-name: cassandra-driver
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-prod
- dependency-name: dataloader
  dependency-version: 2.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-prod
- dependency-name: eslint-plugin-switch-statement
  dependency-version: 0.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-prod
- dependency-name: express-session
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@types/express-session"
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: fast-check
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: form-data-encoder
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: fuzzball
  dependency-version: 2.2.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: graphql
  dependency-version: 16.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: graphql-scalars
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: kysely
  dependency-version: 0.29.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: normalize-text
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: openai
  dependency-version: 4.104.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: pg
  dependency-version: 8.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: pg-cursor
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: "@types/pg-cursor"
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-prod
- dependency-name: safe-stable-stringify
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: stream-json
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: ts-pattern
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: type-fest
  dependency-version: 4.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
- dependency-name: undici
  dependency-version: 7.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Issues about dependencies, or pull requests that update a dependency file javascript Pull requests that update javascript code labels May 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@juanmrad juanmrad Awaiting requested review from juanmrad juanmrad is a code owner

@vinaysrao1 vinaysrao1 Awaiting requested review from vinaysrao1 vinaysrao1 is a code owner

@cassidyjames cassidyjames Awaiting requested review from cassidyjames cassidyjames is a code owner

@julietshen julietshen Awaiting requested review from julietshen julietshen is a code owner

@dom-notion dom-notion Awaiting requested review from dom-notion dom-notion is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Issues about dependencies, or pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants