Skip to content

chore(deps-dev): bump the development-dependencies group across 1 directory with 6 updates - #14

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/development-dependencies-a8e817faa0
Open

chore(deps-dev): bump the development-dependencies group across 1 directory with 6 updates#14
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/development-dependencies-a8e817faa0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 6 updates in the / directory:

Package From To
@elysiajs/openapi 1.4.15 1.4.16
@vitest/coverage-v8 4.1.10 5.0.1
elysia 1.4.29 1.4.30
redis 6.1.0 6.2.1
tsdown 0.22.7 0.23.0
vitest 4.1.10 5.0.1

Updates @elysiajs/openapi from 1.4.15 to 1.4.16

Release notes

Sourced from @​elysiajs/openapi's releases.

1.4.16

What's Changed

Improvement

New Contributors

Full Changelog: elysiajs/elysia-openapi@1.4.15...1.4.16

Changelog

Sourced from @​elysiajs/openapi's changelog.

1.4.16 - 2 Sep 2026

Improvement:

Commits
  • 1d5ad36 🧹 chore: update document
  • d792f61 Merge PR #348 with OpenAPI 3.1 support
  • 3293154 fix(gen): only quote numeric property keys
  • ddc220c Merge pull request #329 from alexng353/fix/fromtypes-response-parsing
  • 534e5aa Merge branch 'main' into fix/fromtypes-response-parsing
  • f673313 Merge pull request #334 from c-ehrlich/fix/withHeaders-response-headers
  • 2a9619c Merge pull request #341 from lxy2500798479/fix/arraybuffer-request-body
  • b5b154f Merge pull request #342 from lxy2500798479/fix/from-types-compiler-options
  • a1c8f63 Merge pull request #346 from Umi4Life/fix/invalid-date-type-in-openapi-spec
  • 4a9ea0a Merge pull request #349 from Jussinevavuori/fix/support-regex-in-exclude-paths
  • Additional commits viewable in compare view

Updates @vitest/coverage-v8 from 4.1.10 to 5.0.1

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

... (truncated)

Commits

Updates elysia from 1.4.29 to 1.4.30

Release notes

Sourced from elysia's releases.

1.4.30

What's changed

The current development effort will be focused in Elysia 2, see kiana and beta release note.

1.4.x will only publish security updates, no new features.

Chore:

  • update test case for Bun 1.4

Advisory:

  • GHSA-gmm9-qwx3-2m3h
  • GHSA-2p5p-r4r9-f9jm
  • GHSA-3958-wq4x-729c
  • GHSA-46qc-v7pw-4j7j
  • GHSA-mx4m-hmpr-4w39

Full Changelog: elysiajs/elysia@1.4.29...1.4.30

Changelog

Sourced from elysia's changelog.

1.4.30 - 26 Aug 2026

Chore:

  • update test case for Bun 1.4

Advisory:

  • GHSA-gmm9-qwx3-2m3h
  • GHSA-2p5p-r4r9-f9jm
  • GHSA-3958-wq4x-729c
  • GHSA-46qc-v7pw-4j7j
  • GHSA-mx4m-hmpr-4w39
Commits
  • e037eca 🧹 chore: correct spelling mistake in changelog
  • acea3a7 🧹 chore: add SECURITY.md
  • a6b9fc7 🧹 chore: update for bun 1.4
  • b1c325f Merge branch 'main' of https://github.com/elysiajs/elysia
  • b8256cc 🧹 chore: update for bun 1.4
  • 767bad1 Merge commit from fork
  • be31c27 🔧 fix: escape schema default keys and values to prevent code injection
  • 89088df 🧹 chore: remove blank issue
  • 2c8b61d 🧹 chore: 'I have nothing but my burger and I want nothing more' disclosure
  • 7e7dabd 🧹 chore: 'I have nothing but my burger and I want nothing more' disclosure
  • Additional commits viewable in compare view

Updates redis from 6.1.0 to 6.2.1

Release notes

Sourced from redis's releases.

redis@6.2.1

What's Changed

New Contributors

Full Changelog: https://github.com/redis/node-redis/compare/redis@6.2.0...redis@6.2.1

redis@6.2.0

6.2.0

✨ Highlights

Cluster commands now follow the server's request/response policies. node-redis reads each command's routing policy from the server's COMMAND metadata and routes and aggregates accordingly, so the cluster client behaves much more like a single server. Multi-key commands that span hash slots — MGET, MSET, DEL, EXISTS, TOUCH, UNLINK — are transparently split per slot and their replies reassembled in caller order, so cross-slot calls that previously failed with CROSSSLOT now just work. Fan-out commands such as KEYS, DBSIZE, FLUSHALL, PING, WAIT, SCRIPT EXISTS and CONFIG SET run across every shard (or every node) and their replies are aggregated per the server's policy, SCAN walks the whole cluster behind a per-client virtual cursor, and RANDOMKEY / FT.CURSOR get correct cluster-aware routing. Replica read-scaling was also aligned with the server flags, so read-only keyless commands (DBSIZE, KEYS, SCAN, RANDOMKEY, and the RediSearch / time-series reads) can be served from replicas again.

⚠️ Behavior change for the raw sendCommand path: a table-recognized command sent raw — e.g. cluster.sendCommand(['DBSIZE']) — now follows its policy (fan-out and aggregate) instead of hitting a single node. Callers who relied on raw commands for per-node operations should target a specific node with cluster.nodeClient(node).sendCommand(...).

This release also brings a broad wave of new command coverage across the client and modules. The time-series package gains the most: new TS.NRANGE/TS.NREVRANGE multi-key pivot commands, a TS.READ cursor reader, TS.QUERYLABELS, EXCLUDEEMPTY on MRANGE/MREVRANGE, and multi-aggregator support. RediSearch adds FT.ALIASLIST, a COLLECT reducer for FT.AGGREGATE, HNSW RERANK, timeout warnings on the FT.SEARCH family, and the full set of stemmer languages. The core client adds SUNIONCARD/SDIFFCARD, LMOVEM/BLMOVEM, ZREVRANK WITHSCORE, COMMAND DOCS, and XREAD MAXCOUNT/MAXSIZE. A large batch of correctness fixes lands for zero-valued optional arguments (LIMIT 0, DB 0, SAMPLES 0, ENTRIESREAD 0, IDLETIME/FREQ 0, ENTRIESADDED 0) that were previously dropped from the wire, alongside several cluster and sentinel connection-lifecycle fixes.

The new HIMPORT command family (managed fieldset lifecycle) ships as experimental — see the warning below.

🚀 New Features

... (truncated)

Commits
  • 90fd065 Release redis@6.2.1
  • 9d52256 Release entraid@6.2.1
  • 58d2b8a Release time-series@6.2.1
  • 7565ac6 Release search@6.2.1
  • 85d7038 Release json@6.2.1
  • 992f068 Release bloom@6.2.1
  • 10b5625 Release client@6.2.1
  • ba1b90b fix(cluster): handle MOVED and ASK redirects for atomic MULTI (#3395)
  • 2f0ab75 fix(client): decode RESP3 doubles to the value the server sent (#3393)
  • d4eba09 fix(cluster): keep batch commands routed by slot during migration (#3377)
  • Additional commits viewable in compare view

Updates tsdown from 0.22.7 to 0.23.0

Release notes

Sourced from tsdown's releases.

v0.23.0

   🧭 Migration Guide

Most users can upgrade directly. Before upgrading, run one final build with tsdown@0.22.14 and resolve all deprecation warnings.

  • config:
    • bundle: false → unbundle: true; bundle: true can be removed
    • outExtension → outExtensions
    • publicDir / --public-dir → copy / --copy
    • removeNodeProtocol: true → nodeProtocol: 'strip'
    • injectStyle → css.inject
  • deps:
    • inlineOnly / deps.onlyAllowBundle → deps.onlyBundle
    • skipNodeModulesBundle: true → deps.neverBundle: true
    • resolveDepSubpath now defaults to false; set it to true to preserve the previous behavior
  • dts:
    • rolldown-plugin-dts was upgraded from 0.27.13 to 0.28.5
    • dts.oxc: true → dts.generator: 'oxc'
    • dts.tsgo: true → dts.generator: 'tsgo'; oxc and tsgo objects now only configure their respective generators
    • dts.volarPlugins → dts.customLanguages; rename each language's create hook to createVolarPlugins
    • Custom languages, including vue, now throw when combined with an incompatible generator
    • dts.cjsReexport was removed; dual-format builds now generate CJS declarations in a separate pass
  • attw:
    • The default profile changed from strict to esm-only; set profile: 'strict' to preserve the previous checks
  • programmatic API:
    • build() now returns { bundles, watch }; replace const bundles = await build() with const { bundles } = await build()
  • requirements:
    • Node.js 25 is no longer supported; use ^22.18.0, ^24.11.0, or >=26.0.0
    • rolldown-plugin-dts now requires Rolldown 1.2.x
    • Legacy types and typesVersions fallbacks were removed; use TypeScript's bundler, node16, or nodenext module resolution

   🚨 Breaking Changes

   🚀 Features

... (truncated)

Commits

Updates vitest from 4.1.10 to 5.0.1

Release notes

Sourced from vitest's releases.

v5.0.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

... (truncated)

Commits
  • 03630a5 chore: release v5.0.1 (#11275)
  • a47d790 fix(fakeTimers): force queueMicrotask and nextTick in toNotFake (#11261)
  • 2ce29d5 fix: warn when deprecated deps.optimizer.web is used (#11214)
  • ccd6d05 docs: fix typecheck exclude default in documentation (#11223)
  • 91ab158 fix(doctor): measure vm pools for custom environments (#11212)
  • 23dda73 fix: share the server on self-referencing extends (#11034)
  • 498fbe9 fix: resolve ResolvedConfig exactOptionalPropertyTypes errors (#11175)
  • 115c3f6 fix: correct typos in error message and comments (#11187)
  • 7361465 fix: keep metadata file when clearing the cache (#11199)
  • 972e24b fix(browser): avoid double quotes in config.define (#11198)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the development-dependencies group across 1 dir…
615ea90 
…ectory with 6 updates

Bumps the development-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@elysiajs/openapi](https://github.com/elysiajs/elysia-openapi) | `1.4.15` | `1.4.16` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `5.0.1` |
| [elysia](https://github.com/elysiajs/elysia) | `1.4.29` | `1.4.30` |
| [redis](https://github.com/redis/node-redis) | `6.1.0` | `6.2.1` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.22.7` | `0.23.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `5.0.1` |



Updates `@elysiajs/openapi` from 1.4.15 to 1.4.16
- [Release notes](https://github.com/elysiajs/elysia-openapi/releases)
- [Changelog](https://github.com/elysiajs/elysia-openapi/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia-openapi@1.4.15...1.4.16)

Updates `@vitest/coverage-v8` from 4.1.10 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/coverage-v8)

Updates `elysia` from 1.4.29 to 1.4.30
- [Release notes](https://github.com/elysiajs/elysia/releases)
- [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia@1.4.29...1.4.30)

Updates `redis` from 6.1.0 to 6.2.1
- [Release notes](https://github.com/redis/node-redis/releases)
- [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/redis/node-redis/compare/redis@6.1.0...redis@6.2.1)

Updates `tsdown` from 0.22.7 to 0.23.0
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.22.7...v0.23.0)

Updates `vitest` from 4.1.10 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest)

---
updated-dependencies:
- dependency-name: "@elysiajs/openapi"
  dependency-version: 1.4.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: elysia
  dependency-version: 1.4.30
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: redis
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: tsdown
  dependency-version: 0.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants