build(deps): bump the production-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #17 · GDG-Appointment-Booking-System/Backend

dependabot · 2026-06-22T09:17:01Z

Bumps the production-dependencies group with 8 updates in the / directory:

Package	From	To
body-parser	`2.2.2`	`2.3.0`
dotenv	`17.3.1`	`17.4.2`
helmet	`8.1.0`	`8.2.0`
mongodb	`7.1.1`	`7.3.0`
mongoose	`9.3.3`	`9.7.1`
multer	`2.1.1`	`2.2.0`
swagger-jsdoc	`6.2.8`	`6.3.0`
zod	`4.3.6`	`4.4.3`

Updates body-parser from 2.2.2 to 2.3.0

Release notes

Sourced from body-parser's releases.

v2.3.0

What's Changed

build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in expressjs/body-parser#681

build(deps): bump actions/checkout from 5.0.0 to 6.0.1 by @dependabot[bot] in expressjs/body-parser#682

build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in expressjs/body-parser#683

build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in expressjs/body-parser#685

build(deps): bump github/codeql-action from 4.31.2 to 4.31.9 by @dependabot[bot] in expressjs/body-parser#684

perf(urlencoded): move empty-body guard to avoid extra function closure by @Phillip9587 in expressjs/body-parser#647

Improve ESM compatibility by @Phillip9587 in expressjs/body-parser#697

docs: add recommendations for configuring payload limits by @bjohansebas in expressjs/body-parser#699

build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 by @dependabot[bot] in expressjs/body-parser#701

build(deps): bump github/codeql-action from 4.31.10 to 4.32.0 by @dependabot[bot] in expressjs/body-parser#702

build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in expressjs/body-parser#700

chore: add explicit type commonjs to package.json by @Phillip9587 in expressjs/body-parser#711

deps: update dependencies to latest versions by @Phillip9587 in expressjs/body-parser#708

build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in expressjs/body-parser#712

build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by @dependabot[bot] in expressjs/body-parser#713

build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in expressjs/body-parser#714

fix: improve limit option validation by @Phillip9587 in expressjs/body-parser#698

build(deps): bump github/codeql-action from 4.32.4 to 4.35.1 by @dependabot[bot] in expressjs/body-parser#719

build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in expressjs/body-parser#718

build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @dependabot[bot] in expressjs/body-parser#717

perf: eliminate conditional check in json strict mode hot path by @Phillip9587 in expressjs/body-parser#651

ci: add node.js 26 to text matrix by @Phillip9587 in expressjs/body-parser#726

build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in expressjs/body-parser#725

build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in expressjs/body-parser#724

build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 by @dependabot[bot] in expressjs/body-parser#723

Upgrade "content-type" by @blakeembrey in expressjs/body-parser#728

refactor: switch to const/let and enable eslint no-var rule by @Phillip9587 in expressjs/body-parser#729

Update outdated reference to MDN docs by @krzysdz in expressjs/body-parser#730

build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 by @dependabot[bot] in expressjs/body-parser#731

build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in expressjs/body-parser#732

chore: updated deps to latest by @Phillip9587 in expressjs/body-parser#733

2.3.0 by @UlisesGascon in expressjs/body-parser#735

New Contributors

@krzysdz made their first contribution in expressjs/body-parser#730

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

fix: use static exports instead of lazy getters to improve ESM compatibility

feat: add subpath exports for individual parsers

fix: improve limit option validation (#698)

Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement

null and undefined fall back to the default 100kb limit

deps:

content-type@^2.0.0

http-errors@^2.0.1

iconv-lite^0.7.2

qs@^6.15.2

raw-body@^3.0.2

type-is@^2.1.0

Commits

d0f2ace 2.3.0 (#735)
7d03f2f chore: updated deps to latest (#733)
8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
ff0f6b9 docs: update outdated reference to MDN docs (#730)
14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
37f36a2 deps: update content-type and type-is (#728)
e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
Additional commits viewable in compare view

Updates dotenv from 17.3.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

Tighten up logs: ◇ injecting env (14) from .env (#1003)

Commits

f116f70 17.4.2
3a81612 fix visual order of faq
13f55a8 Merge branch 'skill'
4bbbf73 reorganize faq
c3da64b Merge pull request #1009 from motdotla/skill
6f743b1 update source
fc2c624 update skill
972315b Tighten up skill
2795fce reorganize faq
d5495d4 adjust skill
Additional commits viewable in compare view

Updates helmet from 8.1.0 to 8.2.0

Changelog

Sourced from helmet's changelog.

8.2.0 - 2026-05-21

Cross-Origin-Opener-Policy: support noopener-allow-popups. See #522

Improve error message when passing duplicate options

Commits

638e43b 8.2.0
fdf25a8 Update changelog for 8.2.0 release
bd293b7 Update devDependencies to latest versions
81ce5cc Test supported Node versions on CI
807a888 Update to new URL
d4e0128 Add direct link to FAQ
437d2eb Bump actions/setup-node from 6.3.0 to 6.4.0 (#537)
a6bd779 Upgrade actions/setup-node to 6.3.0
1e09f5f Fix changelog typo
d526f5c Bump Picomatch dev sub-dependency
Additional commits viewable in compare view

Updates mongodb from 7.1.1 to 7.3.0

Release notes

Sourced from mongodb's releases.

v7.3.0

[!IMPORTANT] A future minor release will raise the minimum supported MongoDB Server version from 4.2 to 4.4. This is in accordance with MongoDB Software Lifecycle Schedules. Support for MongoDB Server 4.2 will be dropped in a future release!

7.3.0 (2026-06-04)

The MongoDB Node.js team is pleased to announce version 7.3.0 of the mongodb package!

Release Notes

maxWireVersion is bumped to 29

Max wire version & max server version bumped in preparation for MongoDB LTS (v9.0).

Fixed SCRAM authentication for non-Node.js runtimes (e.g., Deno)

SCRAM-based authentication (the default mechanism for username/password connections) was broken when using the driver in non-Node.js environments such as Deno. The root cause was an implicit toString() call on byte arrays that produced incorrect output outside of Node.js. This fix ensures explicit UTF-8 string conversion is used throughout the SCRAM implementation, restoring authentication in Deno and other web-compatible runtimes.

Features

NODE-7518: bump maxWireVersion (#4950) (4447050)

Bug Fixes

NODE-7548: SCRAM authentication fails on non-Node runtimes (#4932) (a10d2c9)

Documentation

Reference

API

Changelog

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

v7.2.0

7.2.0 (2026-04-17)

The MongoDB Node.js team is pleased to announce version 7.2.0 of the mongodb package!

Release Notes

⚙️ Added support for MongoDB's Intelligent Workload Management

Added support for MongoDB's Intelligent Workload Management (IWM) and ingress connection rate limiting features. The driver now gracefully handles write-blocking scenarios and optimizes connection establishment during high-load conditions to maintain application availability.

Two new client options are available:

maxAdaptiveRetries (default: 2) - configures the maximum number of retries during server overload. Set to 0 to disable overload retries.

enableOverloadRetargeting (default: false) - when enabled, the driver will deprioritize servers that return overload errors during retry server selection.

... (truncated)

Changelog

Sourced from mongodb's changelog.

7.3.0 (2026-06-04)

Features

NODE-7518: bump maxWireVersion (#4950) (4447050)

Bug Fixes

NODE-7548: SCRAM authentication fails on non-Node runtimes (#4932) (a10d2c9)

7.2.0 (2026-04-17)

Features

NODE-7142: Exponential backoff and jitter in retry loops (#4871) (22c6031)

NODE-7315: Use BSON ByteUtils instead of Nodejs Buffer (#4840) (1add538)

NODE-7335: Create dedicated mocha runner with isolated vm context (#4876) (a4cba4c)

NODE-7379: Refactor Crypto to Web Crypto API (#4862) (ac98f4a)

NODE-7385: add experimental os runtime adapter (#4851) (d2ad07f)

NODE-7441: add ChangeStream.bufferedCount (#4870) (f7ea421)

NODE-7452: restrict server deprioritization on replica sets to overload errors (#4875) (87a3465)

NODE-7467: make token bucket optional in client backpressure (#4878) (4fb0a0a)

NODE-7491: finalize client backpressure implementation for phase 1 rollout (#4920) (2cc7983)

Bug Fixes

NODE-7430: throw timeout error when withTransaction retries exceed deadline (#4897) (16a899d)

NODE-7459: explicitly call setKeepAlive and setNoDelay on socket (#4879) (778a2a1)

NODE-7469: overload retry when retryReads/Writes=false (#4888) (4157b26)

NODE-7478: OIDC host allowlist fix (#4905) (f36b754)

7.1.0 (2026-02-02)

Features

NODE-5393: aws4 no longer required for AWS authentication (#4824) (0f46db8)

NODE-7121: prevent connection churn on backpressure errors when establishing connections (#4800) (4cb2b87)

NODE-7122: exponential backoff between retries in convenient transaction API (#4765) (e70fdc9)

NODE-7304: remove usages in src of promisify (#4799) (761b9bf)

NODE-7306: Replace global process with import node:process (#4820) (cc503cb)

NODE-7310: Replace process.arch with os.arch() (#4823) (f0af829)

NODE-7311: Replace process.platform with os.platform() (#4822) (c58ca1f)

NODE-7317: use BSON.NumberUtils to determine endianness (#4808) (4e9467e)

NODE-7319: update allowed hosts list with *.mongo.com (#4802) (bfb7160)

NODE-7330: deprecate RenameCollectionOptions.new_collection (#4815) (a96fa26)

... (truncated)

Commits

99106de chore(main): release 7.3.0 (#4944)
fd940fe ci: use toolchain python in windows (#4954)
b7f54b5 test(NODE-5517): display installed deps in CI (#4948)
de29d72 chore: disable bson compat tests in prs (#4952)
4447050 feat(NODE-7518): bump maxWireVersion (#4950)
d2b828b chore(NODE-7599): tighten build workflow permissions and update release docs ...
24e5705 chore(NODE-7512): add Windows Node Latest to smoke test configuration (#4940)
90f6967 chore(NODE-7563): migrate main release workflows to npm trusted publishers (#...
a10d2c9 fix(NODE-7548): SCRAM authentication fails on non-Node runtimes (#4932)
5c986b1 test(NODE-6820): test on Graviton processor (#4936)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mongodb since your current version.

Updates mongoose from 9.3.3 to 9.7.1

Release notes

Sourced from mongoose's releases.

9.7.1 / 2026-06-17

perf(document+model): improve save performance by avoiding unnecessary promise allocations and reducing path/default/dirty-state overhead #16331

fix(schema): include ObjectId regex pattern in toJSONSchema() output #16335 #16334 AbdelrahmanHafez

fix(populate): split populate into separate queries per document if the resulting $in filter has more than 50k elements to reduce risk of BSON size errors #16333 #5890

docs: add assistant sidebar with MongoDB Knowledge integration #16311 #16283

docs: update docs copy buttons, edit links, homepage alignment, and llms.txt generation #16326 #16327 #16329

9.7.0 / 2026-06-09

feat: add Node.js TracingChannel support for APM instrumentation #16275 #16105 logaretm

feat(model): add standard schema adapter for models #16308 #16280

fix(cursor): avoid waiting on buffering to run aggregation middleware #16289 #16284

fix(document): throw error if overwriting array selected with $slice #16313 #2432

fix(schema): remove validateSync() union fallback #16310 #16291 AbdelrahmanHafez

types: cast primitive types within unions when applying create casting #16320 #16316

docs: add llms.txt #16312 #15687

docs: rewrite documents docs #16298

docs(model): clarify some details on model.validate() casting #16308 #16280

docs(findOneAndUpdate): clarify update handling of undefined #16299

docs(model): fix link to be absolute #16321 hasezoey

9.6.3 / 2026-05-27

fix(clone): isolate cloned arrays from source documents #16281 AbdelrahmanHafez

fix(update): preserve user-provided $setOnInsert.createdAt with overwriteImmutable: true #16278 #15781 AbdelrahmanHafez

fix(schema): always pass raw string value to error validators, only trim to 30 chars for maxlength validator #16238 #16236 #15550 #15571

types: add $percentile to TypeScript aggregation expression types #16290 #16288

docs: update default pool sizes on createConnection() #16295 torbiak-samdesk

docs: improve code block copy button behavior and sidebar scrolling #16294 DraXx-Van

docs: remove broken link to deleted schema example #16297 kaseken

9.6.2 / 2026-05-08

fix(document): correctly handle modified subpaths when parent path is unset after modifying #16271 #16252

types: handle compiling with exactOptionalPropertyTypes #16277 #16273

chore: align Node version docs and types #16270 AbdelrahmanHafez

9.6.1 / 2026-04-29

types(objectid): fix _id getter helper on ObjectId #16251 noseworthy

9.6.0 / 2026-04-28

feat: upgrade mongodb node driver to 7.2 #16245

feat(schematype): support allowNull option to disallow null values even if not required #16237 #15905

types(query): make QueryFilter respect string unions and enums #16242 #16240

types: export Projector and ArrayProjectionOperators #16243 #16235

9.5.0 / 2026-04-20

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.7.1 / 2026-06-17

perf(document+model): improve save performance by avoiding unnecessary promise allocations and reducing path/default/dirty-state overhead #16331

fix(schema): include ObjectId regex pattern in toJSONSchema() output #16335 #16334 AbdelrahmanHafez

fix(populate): split populate into separate queries per document if the resulting $in filter has more than 50k elements to reduce risk of BSON size errors #16333 #5890

docs: add assistant sidebar with MongoDB Knowledge integration #16311 #16283

docs: update docs copy buttons, edit links, homepage alignment, and llms.txt generation #16326 #16327 #16329

9.7.0 / 2026-06-09

feat: add Node.js TracingChannel support for APM instrumentation #16275 #16105 logaretm

feat(model): add standard schema adapter for models #16308 #16280

fix(cursor): avoid waiting on buffering to run aggregation middleware #16289 #16284

fix(document): throw error if overwriting array selected with $slice #16313 #2432

fix(schema): remove validateSync() union fallback #16310 #16291 AbdelrahmanHafez

types: cast primitive types within unions when applying create casting #16320 #16316

docs: add llms.txt #16312 #15687

docs: rewrite documents docs #16298

docs(model): clarify some details on model.validate() casting #16308 #16280

docs(findOneAndUpdate): clarify update handling of undefined #16299

docs(model): fix link to be absolute #16321 hasezoey

9.6.3 / 2026-05-27

fix(clone): isolate cloned arrays from source documents #16281 AbdelrahmanHafez

fix(update): preserve user-provided $setOnInsert.createdAt with overwriteImmutable: true #16278 #15781 AbdelrahmanHafez

fix(schema): always pass raw string value to error validators, only trim to 30 chars for maxlength validator #16238 #16236 #15550 #15571

types: add $percentile to TypeScript aggregation expression types #16290 #16288

docs: update default pool sizes on createConnection() #16295 torbiak-samdesk

docs: improve code block copy button behavior and sidebar scrolling #16294 DraXx-Van

docs: remove broken link to deleted schema example #16297 kaseken

8.24.0 / 2026-05-14

feat(aggregate): add pipelineForUnionWith() helper to allow reusing pipelines with $unionWith in TypeScript #16247 #16041 #16033

fix(connection): handle calling watch() on disconnected connection #16246 #16034

types: handle compiling with exactOptionalPropertyTypes #16286 #16273

9.6.2 / 2026-05-08

fix(document): correctly handle modified subpaths when parent path is unset after modifying #16271 #16252

types: handle compiling with exactOptionalPropertyTypes #16277 #16273

chore: align Node version docs and types #16270 AbdelrahmanHafez

9.6.1 / 2026-04-29

types(objectid): fix _id getter helper on ObjectId #16251 noseworthy

9.6.0 / 2026-04-28

... (truncated)

Commits

7fee4b5 chore: release 9.7.1
1e81fcc Merge pull request #16333 from Automattic/vkarpov15/gh-5890-2
1f75b81 Merge pull request #16311 from Automattic/vkarpov15/gh-16283
a705903 switch to knowledge.mongodb.com and remove relay
7518499 add copy buttons to AI assistant
7120c89 fix syntax highlighting in output and vendor deps that dont require build
2bbe775 Merge pull request #16335 from AbdelrahmanHafez/feat/objectid-jsonschema-pattern
95e631a feat(schema): include ObjectId regex pattern in toJSONSchema output re #16334
4566ac5 test(schema): add tests for ObjectId regex pattern in toJSONSchema re #16334
eebb70a docs: replace ask ai input with textarea and add outline indicator when assis...
Additional commits viewable in compare view

Updates multer from 2.1.1 to 2.2.0

Release notes

Sourced from multer's releases.

v2.2.0

Important

Fix CVE-2026-5038 (GHSA-3p4h-7m6x-2hcm)

Fix CVE-2026-5079 (GHSA-72gw-mp4g-v24j)

What's Changed

chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in expressjs/multer#1397

chore(deps): bump github/codeql-action from 4.32.4 to 4.36.1 by @dependabot[bot] in expressjs/multer#1409

chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in expressjs/multer#1410

ci: add Node 26 to test matrix by @gameroman in expressjs/multer#1404

Release: 2.2.0 by @UlisesGascon in expressjs/multer#1412

New Contributors

@gameroman made their first contribution in expressjs/multer#1404

Full Changelog: expressjs/multer@v2.1.1...v2.2.0

Changelog

Sourced from multer's changelog.

2.2.0

Fix CVE-2026-5038 (GHSA-3p4h-7m6x-2hcm)

Fix CVE-2026-5079 (GHSA-72gw-mp4g-v24j)

Commits

2e2af08 2.2.0 (#1412)
a192b52 feat: add fieldNestingDepth limit option
9c801c7 fix: clean up in-progress disk writes on abort
0adb21d ci: add Node 26 to test matrix (#1404)
f5e17c3 chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#1410)
de1fefd chore(deps): bump github/codeql-action from 4.32.4 to 4.36.1 (#1409)
67abfc8 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#1397)
See full diff in compare view

Updates swagger-jsdoc from 6.2.8 to 6.3.0

Release notes

Sourced from swagger-jsdoc's releases.

v6.3.0

What's Changed

Fix/extract annotations error handling by @nejclovrencic in Surnet/swagger-jsdoc#363

fix: Update Glob to fix memory leak issue from inflight by @mkonikov in Surnet/swagger-jsdoc#430

chore(deps): bump @babel/helpers from 7.18.9 to 7.28.4 in /docusaurus by @dependabot[bot] in Surnet/swagger-jsdoc#433

chore(deps): bump @babel/runtime from 7.18.9 to 7.28.4 in /docusaurus by @dependabot[bot] in Surnet/swagger-jsdoc#434

fix: replace mikeal/merge-release with direct npm publish, update actions to v5 by @mkonikov in Surnet/swagger-jsdoc#448

Fix security vulnerabilities by @jpage-godaddy in Surnet/swagger-jsdoc#425

New Contributors

@nejclovrencic made their first contribution in Surnet/swagger-jsdoc#363

@mkonikov made their first contribution in Surnet/swagger-jsdoc#430

@jpage-godaddy made their first contribution in Surnet/swagger-jsdoc#425

Full Changelog: Surnet/swagger-jsdoc@v6.2.8...v6.3.0

Commits

04cbcb6 Version Bump
a761cf7 Fix security vulnerabilities (#425)
cb90faf fix: replace mikeal/merge-release with direct npm publish, update actions to ...
3ebd8d2 chore(deps): bump @babel/runtime from 7.18.9 to 7.28.4 in /docusaurus (#434)
51f408d chore(deps): bump @babel/helpers from 7.18.9 to 7.28.4 in /docusaurus (#433)
3778b42 fix: Update Glob to fix memory leak issue from inflight (#430)
2325600 Merge pull request #363 from nejclovrencic/fix/extract-annotations-error-hand...
f92ee06 Update express and body-parser to fix qs vulnerability
fc52de9 Update yarn.lock
af64d34 Add try catch to build function for loop
Additional commits viewable in compare view

Updates zod from 4.3.6 to 4.4.3

Release notes

Sourced from zod's releases.

v4.4.3

Commits:

4c2fa95ce3f3390fbc522324e406b4e9e89b88f9 docs: use Zernio primary wordmark for gold sponsor logo

2aeec83eb135e3a83756e973ef44845fc5a455d2 docs: prune lapsed gold sponsors and rebalance logo sizing

7391be88ac1ee5cd02057f5ccc012a1f5df4efd0 docs: prune lapsed silver/bronze sponsors and add active ones

2c703322a21b4e2b12f33f49ea8430c451a68b4f docs: normalize bronze sponsor logos to github avatar pattern

9195250cab0e7950efe39c3926d6c203b4b0a170 docs: remove Mintlify from bronze sponsors (churned)

b8dffe9e62f17e6571e6249d05cc5102b54d94e4 docs: remove Numeric and Speakeasy (2+ missed monthly cycles)

1cab69383fcdeae2a366d5e2a2fc4d8fc765d168 fix(v4): restore catch handling for absent object keys (#5937) (#5939)

c2be4f819064eed62c7c350a2d399b5faecd15f8 fix(v4): generalize optin/fallback to transform; restore preprocess on absent keys (#5941)

f3c9ec03ba7a28ae72d25cc295f38674bee0f559 4.4.3

1fb56a5c18c27102dbc92260a4007c7732a0ccca docs: document release procedure in AGENTS.md

v4.4.2

Commits:

0c62df0ea19fd05abdf90473e9eef7eea530fab2 Clean up docs navigation and stale labels (#5901)

20cc794895cc8604fe0c87d83a5d1c3f89fad0ac chore: add security policy and refresh tooling deps

6fbe07b0177efdd1bf1c0b05160e70d7a0702337 fix(docs): heading anchor links now include the hash so it doesnt scoll all the way up, follows navbar logic (#5791)

4bbed1b1c73eca4ce9e59b1189ed236aa6c8b5bd Tighten discriminated union option typing

bbac3e567e7fccfaaf7cdc97f1ce30c295e2c908 Update PR guidance for agents

cf0dc942a32805c292fff59ade20a7ace980735a Merge remote-tracking branch 'origin/main' into fix-discriminated-union-key-constraint

292c894a5fd2aa42e527900b83d8d7a3009a709c docs: add Zernio gold sponsor

1fc9f311c28dcf80d0bb5a36b177086cbc3d8eca docs: document codec inversion

1373c85da9aeff704a9762d27bc58699618aefb7 docs: remove AI disclosure guidance

e20d02b473c08e3a4e557bc610b1b5fac079b649 chore: ignore triage notes

e58ea4d91b1dfe8194b73508203213cbc7e9c936 docs: test Zod Mini tab code heights

905761a5d127e8d5dd2ebb3bc88c75cb0b8149ff docs: document preprocess input type narrowing

bf64bac850d4dee2b7dde7e64909d5d796d32043 chore: tighten test guidance in AGENTS.md

8ec4e73f4c4693b6361ad591be40fb41eb8a9f95 chore: update play.ts scratch

02c2baf7d0d615872fa4528a8020603b71211702 Make z.preprocess defer optionality to inner schema (#5929)

88015df8e25c44fb5385eb3ef28935119cd5edea fix(docs): drop deprecated baseUrl from tsconfig

c59d4474e3b4cad1b323462186cf607178ce8267 4.4.2

v4.4.1

Commits:

481f7be4238c83ed58183f921b2646f340a91c6a ci: gate release publishing on full test workflow

95ccab423aec720b2523c3a64cdc7e3204537cc7 test(v3): restore optional undefined expectations

cede2c6373...
Description has been truncated

…y with 8 updates Bumps the production-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [body-parser](https://github.com/expressjs/body-parser) | `2.2.2` | `2.3.0` | | [dotenv](https://github.com/motdotla/dotenv) | `17.3.1` | `17.4.2` | | [helmet](https://github.com/helmetjs/helmet) | `8.1.0` | `8.2.0` | | [mongodb](https://github.com/mongodb/node-mongodb-native) | `7.1.1` | `7.3.0` | | [mongoose](https://github.com/Automattic/mongoose) | `9.3.3` | `9.7.1` | | [multer](https://github.com/expressjs/multer) | `2.1.1` | `2.2.0` | | [swagger-jsdoc](https://github.com/Surnet/swagger-jsdoc) | `6.2.8` | `6.3.0` | | [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` | Updates `body-parser` from 2.2.2 to 2.3.0 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@v2.2.2...v2.3.0) Updates `dotenv` from 17.3.1 to 17.4.2 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.3.1...v17.4.2) Updates `helmet` from 8.1.0 to 8.2.0 - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](helmetjs/helmet@v8.1.0...v8.2.0) Updates `mongodb` from 7.1.1 to 7.3.0 - [Release notes](https://github.com/mongodb/node-mongodb-native/releases) - [Changelog](https://github.com/mongodb/node-mongodb-native/blob/main/HISTORY.md) - [Commits](mongodb/node-mongodb-native@v7.1.1...v7.3.0) Updates `mongoose` from 9.3.3 to 9.7.1 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@9.3.3...9.7.1) Updates `multer` from 2.1.1 to 2.2.0 - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](expressjs/multer@v2.1.1...v2.2.0) Updates `swagger-jsdoc` from 6.2.8 to 6.3.0 - [Release notes](https://github.com/Surnet/swagger-jsdoc/releases) - [Changelog](https://github.com/Surnet/swagger-jsdoc/blob/master/CHANGELOG.md) - [Commits](Surnet/swagger-jsdoc@v6.2.8...v6.3.0) Updates `zod` from 4.3.6 to 4.4.3 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.3.6...v4.4.3) --- updated-dependencies: - dependency-name: body-parser dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: dotenv dependency-version: 17.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: helmet dependency-version: 8.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: mongodb dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: mongoose dependency-version: 9.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: multer dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: swagger-jsdoc dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-22T09:17:02Z

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the production-dependencies group across 1 directory with 8 updates#17

build(deps): bump the production-dependencies group across 1 directory with 8 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-9a49413e64

dependabot Bot commented on behalf of github Jun 22, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 22, 2026

v2.3.0

What's Changed

New Contributors

2.3.0 / 2026-06-15

17.4.2 (2026-04-12)

Changed

17.4.1 (2026-04-05)

Changed

17.4.0 (2026-04-01)

Added

Changed

8.2.0 - 2026-05-21

v7.3.0

7.3.0 (2026-06-04)

Release Notes

maxWireVersion is bumped to 29

Fixed SCRAM authentication for non-Node.js runtimes (e.g., Deno)

Features

Bug Fixes

Documentation

v7.2.0

7.2.0 (2026-04-17)

Release Notes

⚙️ Added support for MongoDB's Intelligent Workload Management

7.3.0 (2026-06-04)

Features

Bug Fixes

7.2.0 (2026-04-17)

Features

Bug Fixes

7.1.0 (2026-02-02)

Features

9.7.1 / 2026-06-17

9.7.0 / 2026-06-09

9.6.3 / 2026-05-27

9.6.2 / 2026-05-08

9.6.1 / 2026-04-29

9.6.0 / 2026-04-28

9.7.1 / 2026-06-17

9.7.0 / 2026-06-09

9.6.3 / 2026-05-27

8.24.0 / 2026-05-14

9.6.2 / 2026-05-08

9.6.1 / 2026-04-29

9.6.0 / 2026-04-28

v2.2.0

Important

What's Changed

New Contributors

2.2.0

v6.3.0

What's Changed

New Contributors

v4.4.3

Commits:

v4.4.2

Commits:

v4.4.1

Commits:

Uh oh!

dependabot Bot commented on behalf of github Jun 22, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`maxWireVersion` is bumped to `29`