Bump the dependencies group with 17 updates by dependabot[bot] · Pull Request #1608 · testcontainers/testcontainers-node

dependabot · 2026-10-19T00:45:13Z

Bumps the dependencies group with 17 updates:

Package	From	To
knip	`6.39.0`	`6.41.0`
npm-check-updates	`23.1.0`	`23.1.1`
@types/dockerode	`4.0.1`	`4.0.2`
@azure/service-bus	`7.9.5`	`7.10.0`
@clickhouse/client	`1.23.1`	`1.24.1`
@grpc/grpc-js	`1.14.5`	`1.14.6`
@google-cloud/bigquery	`9.1.0`	`9.2.0`
@google-cloud/datastore	`11.1.0`	`11.2.0`
@google-cloud/pubsub	`6.1.0`	`6.2.0`
@google-cloud/storage	`8.2.0`	`8.4.0`
msw	`3.0.2`	`3.0.3`
@confluentinc/kafka-javascript	`1.10.1`	`1.11.0`
@aws-sdk/client-s3	`3.1146.0`	`3.1149.0`
mongoose	`9.10.4`	`9.11.1`
oracledb	`7.0.1`	`26.0.0`
selenium-webdriver	`4.50.0`	`4.51.0`
node-vault	`0.12.0`	`0.13.0`

Updates knip from 6.39.0 to 6.41.0

Release notes

Sourced from knip's releases.

Release 6.41.0

Add Flue plugin (#2124) (c52737d45ff008d6d96d4c2d4182048a2aa64602) - thanks @LuisFigueroaG!

Match all React Native config file extensions (#2125) (898fdffb37ae0bdb3d2653038eb10c2e01edf983) - thanks @LuisFigueroaG!

Consolidate fixture guidance and extend plugin guidelines (37a4ca04645f71f599e9b530676543f9893bd641)

Add AI contribution policy (b15f0fbb090ea0427240880da2bec602c11cea50)

Use files from tsconfig references with --use-tsconfig-files (#2126) (9618185eafb0c5cb365035f89e9d66718642338a) - thanks @kaanisthatyou!

Compile gitignore walk patterns once (resolve #2127) (09c80299779fa5abe133ee8f82051c25870007b8)

Drop readdir order dependent case from gitignore walk test (ab3da8ff95a05a0fbfba6873b64559017d038aa7)

fix: recognize binaries from absent optional dependencies (#2120) (d908556eaa98bf9637a2744d2de089bab31b8dbc) - thanks @DreamLongYT!

Apply a directory's .gitignore before walking its subdirectories (9560c07862d4c72dc956371b9a77e049d83ed4a9)

Apply nested .gitignore files to workspace globs (23d35421dd67c405254f2f8bcbc09b18d224e338)

Update gitignore matcher and walk notes (499f85f4544457dc7c51c4a7612fea69773ef3dd)

Keep the cwd out of glob patterns and matchers (#2107) (1e82fb807c88cc46951f2028214569f9a2eb0061) - thanks @kaanisthatyou!

Support function configs in Rsbuild plugin (#2122) (38071db87e9023e5dd61173ce32f9020a1a5d7ff) - thanks @bytedoe!

Separate Expo Router plugin; remove expo-router entry points from Expo plugin (#2128) (ad541764ca7d3c062236661677d1d66d5275122f) - thanks @jjjjonathan!

Link Expo config discovery source and fold expo6 fixture into expo-router (2ddeca50956790b10580e835df50bc980cce961d)

Update dependencies (c9f79148f7165314a7b3c801eff926d1d0d6b060)

Migrate shell script parsing to unbash v5 (4942cca05303410120a007a5bb23b0c2da725da1)

Handle updated Formatly result types (ca9e8315e003dae69646f7500fa98ab9ed403b92)

Preserve TypeScript 5.0 compatibility in shell AST filters (957ac7bbd654f6d3d0c4dc4eab2f4aa133ff0b4b)

Point timerify crashes to the Node.js version that fixes them (0c235de096fd3361eb918d1290241fa32a62f089)

Copy importer identifier sets into the reverse index (2860d678a87dddb5ad56299119fb6e108ceffa12)

Clear the resolver cache at the start of a run (10b5bb82ecd03c88b68ace58a7aea23d188cc5f1)

Release 6.40.0

Resolve local and scope-only extends in commitlint plugin (#2079) (e667552d4e7122094565d3ad9ae407acfc0ac684) - thanks @giaBaoJS!

Clarify worktree guides and plugin review preparation (dd02baf020d23af1d47c44c1a726a61014b270bd)

Document stale cache results and workarounds (#2078) (3573749a5d5bbee6305f207cc7d1b72c200c8c9b)

Exclude test files from package entries in production mode (resolve #2082) (b86f45f9d38d4b83baad98e43983e08910e00c78) - thanks @jonathanong!

Resolve Serverless file variables in plugins and functions (resolve #2074) (99cac789694ea8d76cd38184d2d7c95f34315224) - thanks @SwastikTripathi!

Preserve locally referenced namespace members (resolve #2070) (f0f36df766cd74ad7ae03fbf8940bdeb792439be) - thanks @MFA-G!

fix: add the commitlint-plugin prefix to Commitlint plugin names (#2096) (3decd35ff0a4220c7cd2c9142dc69c89794b3927) - thanks @devYRPauli!

fix: match .mjs config files in the simple-git-hooks plugin (#2097) (79a87d92396c2444ae4ef3c780c0d2e18cd73e4c) - thanks @devYRPauli!

fix: match capacitor.config.js in the Capacitor plugin (#2098) (4a5ec96d818117a7f2eafa027e3b707bc97573a8) - thanks @devYRPauli!

fix(typescript): ArrayExpression (#2099) (#2100) (87fea9f201c2fd864eafa31bdad68910a8a177ba) - thanks @DreamLongYT!

Preserve development entry pattern groups (7c229f4e1918075d801ed3b046fa022b1d3bcc41)

Resolve null package exports to the files they hide (resolve #2084, close #2085) (5bd46260feb60b957c2631bc72375ef192e441e0)

Pin InvokeAI ecosystem test (4e0a3432eb35e3f628f6d3b7fcd14b942de343d0)

fix(utils): add jsx extension to source mapping (#2087) (eaa353b5fc30c2f12cdf2c29e6dd68e0d0950062) - thanks @DreamLongYT!

fix(serverless-framework): handle explicit extensions in handler paths (#2091) (e9393965be7563640921e3f20c946fcb9132e1cb) - thanks @DreamLongYT!

Annotate published manifest return type (d95a8310a0d0dca8f23d8dd3f83e7b0a1909d038)

Add Jasmine plugin (#2105) (9ed14911d5c5752aef36878ab3d515c35d1ac6bc) - thanks @SulimanAbdulrazzaq!

fix: resolve workspace exports with fallback arrays (#2088) (49c2aaeaba4544f25cc02c19d5da5152a8ef68c3) - thanks @DreamLongYT!

fix(postcss): ignore disabled plugins in object configs (#2092) (b84fdf8a8ee676ee45f4313009ebfe969d034a88) - thanks @DreamLongYT!

Resolve webServer commands in Playwright plugin (#2110) (1af96bce36b0d0d07791de100c7f2ea5672a478c) - thanks @everton-dgn!

Cache config file inputs per plugin (#2109) (01cb43267ca5dc03a2cbcba0a19fd891d4ed1f37) - thanks @everton-dgn!

fix: include custom compiler extensions in source path mapping (#2090) (dc3a47e2d810808314454b8f5c23070f136d15d3) - thanks @DreamLongYT!

Don't let a self-closing swallow the next (#2113) (989fdadde0a068d1d1c52e26a8327b99c5de0668) - thanks @maniflopi!

fix(oxlint): resolve lint from loaded Vite config (#2108) (6d44e532ed6320cdf4f4c3253b26e155c4d26ba7) - thanks @everton-dgn!

fix: resolve Jest module names without the jest-* prefix (#2095) (a5f4cfbff7f263a0ea8d5461a3f9216cbef38602) - thanks @devYRPauli!

... (truncated)

Commits

13d7f21 Release knip@6.41.0
10b5bb8 Clear the resolver cache at the start of a run
2860d67 Copy importer identifier sets into the reverse index
0c235de Point timerify crashes to the Node.js version that fixes them
957ac7b Preserve TypeScript 5.0 compatibility in shell AST filters
ca9e831 Handle updated Formatly result types
4942cca Migrate shell script parsing to unbash v5
c9f7914 Update dependencies
2ddeca5 Link Expo config discovery source and fold expo6 fixture into expo-router
ad54176 Separate Expo Router plugin; remove expo-router entry points from Expo plugin...
Additional commits viewable in compare view

Updates npm-check-updates from 23.1.0 to 23.1.1

Release notes

Sourced from npm-check-updates's releases.

v23.1.1

What's Changed

Add support for excluding deprecated versions by @XhmikosR in raineorshine/npm-check-updates#1996

Use the jsonc-aware parseJson for the catalog check in upgradePackageData by @XhmikosR in raineorshine/npm-check-updates#2040

Extract getCooldownInfo shared by runLocal and runGlobal by @XhmikosR in raineorshine/npm-check-updates#2039

Collapse the four catalog path reconstruction loops into one by @XhmikosR in raineorshine/npm-check-updates#2038

Dedupe doctor test helpers: escapeRegExp, lockfile name, ncu runner by @XhmikosR in raineorshine/npm-check-updates#2037

Extract fetchVersions shared by the greatest, minor, patch, and semver targets by @XhmikosR in raineorshine/npm-check-updates#2036

Collapse the pnpm, yarn, and npm native cooldown branches into one helper by @XhmikosR in raineorshine/npm-check-updates#2035

Only rewrite the cache file when something was added by @XhmikosR in raineorshine/npm-check-updates#2034

Resolve node engine and peer specs once per package in filterPredicate by @XhmikosR in raineorshine/npm-check-updates#2041

Add support for devEngines by @XhmikosR in raineorshine/npm-check-updates#2026

Reuse renderDependencyTable in printErrors by @XhmikosR in raineorshine/npm-check-updates#2042

Drop always-true guards in upgradePackageDefinitions and getAllPackages by @XhmikosR in raineorshine/npm-check-updates#2043

Use keyValueBy for the cli options map and defaults by @XhmikosR in raineorshine/npm-check-updates#2044

Build the interactive prompt once in chooseUpgrades by @XhmikosR in raineorshine/npm-check-updates#2046

Build filter predicates once instead of per dependency name by @XhmikosR in raineorshine/npm-check-updates#2047

Share the version diff index between partChanged and colorizeDiff by @XhmikosR in raineorshine/npm-check-updates#2048

Parse the yaml catalog file once per run instead of once per dependency by @XhmikosR in raineorshine/npm-check-updates#2049

Merge readPnpmWorkspaces and readYarnConfig into readYamlSibling by @XhmikosR in raineorshine/npm-check-updates#2050

Sanitize registry and package manager text in error output by @XhmikosR in raineorshine/npm-check-updates#2022

Drop the redundant filter and reject re-spread in cli options by @XhmikosR in raineorshine/npm-check-updates#2033

Collapse the repeated npm config print blocks into one helper by @XhmikosR in raineorshine/npm-check-updates#2045

Use lib/exists in pnpm adapter instead of a local pathExists by @XhmikosR in raineorshine/npm-check-updates#2032

build(deps): bump node from a0b9bf0 to e67514e by @dependabot[bot] in raineorshine/npm-check-updates#2056

Extract createProgressBar into logging by @XhmikosR in raineorshine/npm-check-updates#2051

Memoize the yarn version lookup in getPeerDependencies by @XhmikosR in raineorshine/npm-check-updates#2031

Replace chalk with styleText by @XhmikosR in raineorshine/npm-check-updates#2018

Simplify spawnCommand for spawn-please v4 by @XhmikosR in raineorshine/npm-check-updates#2021

Fetch engines.node concurrently with pMap by @XhmikosR in raineorshine/npm-check-updates#2054

build(deps): bump the github-actions group with 3 updates by @dependabot[bot] in raineorshine/npm-check-updates#2058

build(deps-dev): bump the development-dependencies group across 1 directory with 5 updates by @dependabot[bot] in raineorshine/npm-check-updates#2057

Paired codehtml and typepublic by @XhmikosR in raineorshine/npm-check-updates#2059

Replace the #catalog path sentinel with a catalog flag on PackageInfo by @XhmikosR in raineorshine/npm-check-updates#2060

Single lockfile table shared by findLockfile, determinePackageManager, and doctor by @XhmikosR in raineorshine/npm-check-updates#2062

Replace fp-and-or with native code by @XhmikosR in raineorshine/npm-check-updates#2061

fix: ignore versionless packageManager field by @onuracar-dev in raineorshine/npm-check-updates#2067

build(deps-dev): bump the development-dependencies group with 4 updates by @dependabot[bot] in raineorshine/npm-check-updates#2069

build(deps): bump fast-uri from 3.1.5 to 3.1.7 by @dependabot[bot] in raineorshine/npm-check-updates#2071

build(deps): bump the github-actions group with 3 updates by @dependabot[bot] in raineorshine/npm-check-updates#2076

Single source of truth for which file holds a package manager's catalogs by @XhmikosR in raineorshine/npm-check-updates#2063

Add a makeTempDir test helper and use it for all temp dir creation by @XhmikosR in raineorshine/npm-check-updates#2068

fix: use makeTempDir in dep.test.ts by @raineorshine in raineorshine/npm-check-updates#2081

Parse upgraded package data with the format upgradePackageData wrote by @XhmikosR in raineorshine/npm-check-updates#2064

Revamp build-changelog.ts by @XhmikosR in raineorshine/npm-check-updates#2073

test: cover coercion of a string format in a nested package's ncurc by @raineorshine in raineorshine/npm-check-updates#2082

fix: reject a cooldown string that cannot be read by @raineorshine in raineorshine/npm-check-updates#2083

build(deps-dev): bump js-yaml from 4.3.1 to 4.3.2 by @dependabot[bot] in raineorshine/npm-check-updates#2084

Expand env vars in npm and yarn auth config keys by @XhmikosR in raineorshine/npm-check-updates#2079

package.json: use the lint:types script in test by @XhmikosR in raineorshine/npm-check-updates#2074

... (truncated)

Changelog

Sourced from npm-check-updates's changelog.

Changelog

This file is automatically generated from the GitHub releases page. Do not edit manually.

Commits

161014e 23.1.1
f24ac0c build(deps): bump node from 50c8e8c to ebfe2f9 (#2105)
af621c4 Keep non-violating upgrades when the peer recursion cannot resolve a conflict...
bffee5e Update dependencies and fix npm vulnerabilities (#2099)
7ad439c CI: cancel superseded PR runs, never main runs (#2100)
e80b0ce CI: revert the macOS changes (#2101)
8f8b850 Fetch peer dependencies from the registry instead of spawning npm view (#2089)
7584a4d Apply option parse to ncurc and module values, not just the cli path (#2066)
a5ac576 build(deps): bump smol-toml and markdownlint-cli2 (#2098)
4770289 build(deps-dev): bump vitest from 4.1.11 to 5.0.1 (#2096)
Additional commits viewable in compare view

Updates @types/dockerode from 4.0.1 to 4.0.2

Commits

See full diff in compare view

Updates @azure/service-bus from 7.9.5 to 7.10.0

Changelog

Sourced from @azure/service-bus's changelog.

7.10.0 (2026-10-06)

Features Added

Added ServiceBusClient.listMessageSessions() to list session IDs for session-enabled queues and subscriptions, including optional filtering by session-state update timestamp. Implements the com.microsoft:get-message-sessions management operation. (#38323)

Added sqlFilterCount and correlationFilterCount to TopicRuntimeProperties, exposing the total number of SQL filters and correlation filters across all of a topic's subscriptions. (#39500)

The ATOM administration client now sends api-version=2024-05 (previously 2021-05), which is required for the topic filter counts above. (#39500)

Add the experimental diagnostic feature omitMessageBody via PeekMessagesOptions under ./experimental subpath export. #31361 To access the new option, import "@azure/service-bus/experimental" sub-path. For example,
import { DefaultAzureCredential } from "@azure/identity";
import { ServiceBusClient } from "@azure/service-bus";
import "@azure/service-bus/experimental";
import "dotenv/config";
async function test() {
const fqdn = process.env.SERVICEBUS_FQDN || "example.servicebus.windows.net";
const queue = process.env.SERVICEBUS_QUEUE || "queue1";
const credential = new DefaultAzureCredential();
const client = new ServiceBusClient(fqdn, credential);
const receiver = client.createReceiver(queue);
await receiver.peekMessages(100, {
omitMessageBody: true,
});
}
Breaking Changes

Removed the preview deleteMessages() and purgeMessages() receiver methods and the DeleteMessagesOptions and PurgeMessagesOptions types from 7.10.0 GA. These APIs were not available in the previous stable release, 7.9.5; applications using them must remain on a preview version until they are reintroduced. Reintroduction is tracked in #39309.

Bugs Fixed

Fixed three unreachable error-handling guards that compared an error code against its un-normalized name after translateServiceBusError had already normalized it: peekMessages / peekMessagesBySession now return an empty result instead of throwing when the service reports the requested messages are not found (matching .NET); the streaming receiver no longer attempts a doomed abandon when a message's lock is already lost; and a session-lock-expired error now carries its descriptive message. #39312

Fixed unhandled OperationTimeoutError promise rejections that could crash the application when an AMQP link close timed out while a receiver was draining credits (during a close() or a receiveMessages() timeout). The close timeout is now logged instead of surfacing as an unhandled rejection. This extends the fix for #35342. #39348

Read com.microsoft:max-message-batch-size vendor property from the AMQP sender link to correctly limit batch size on Premium large-message entities, where max-message-size can be up to 100 MB but the batch limit is 1 MB. #38049

Fixed TimeoutNegativeWarning on Node.js v24+ when timeout budget is exceeded during CBS authentication by clamping remaining-time computations to a minimum of 0. #38166

Fixed CBS token renewal stopping permanently after a single failed renewal. A transient credential error (for example a failed AAD getToken during a workload-identity rotation) no longer leaves the link's token un-renewed; renewal now retries with a capped exponential backoff until it succeeds or the link closes. #38467

Other Changes

Preserve caught errors as the cause when wrapping them. #39423

Upgrade dependency @azure/abort-controller version to ^2.1.2.

Remove port number from fully qualified namespace.

Commits

fad40ee [Service Bus] Prepare @azure/service-bus 7.10.0 for release (#39995)
8a41208 [Service Bus] Remove and fix unreachable error-code guards from the code-norm...
41971b3 [service-bus] Guard unhandled OperationTimeoutError from receiver close on dr...
96a244f [ESLint] Restore no-useless-assignment recommended rule to error (#39784)
eb8e042 [ESLint] Restore preserve-caught-error recommended rule to error (#39580)
bea984c [Service Bus] Prepare @azure/service-bus 7.10.0-beta.5 release (#39672)
b60af76 [Service Bus] Clarify and sample session listing (#39668)
bd459db [Service Bus] Add topic sqlFilterCount and correlationFilterCount runtime pro...
a46a830 [ESLint] Restore no-unassigned-vars recommended rule to error (#39460)
be07193 feat(service-bus): expose listMessageSessions on ServiceBusClient (#38323)
Additional commits viewable in compare view

Updates @clickhouse/client from 1.23.1 to 1.24.1

Release notes

Sourced from @clickhouse/client's releases.

client-1.24.1

Bug fixes

Fixed a socket hang up error on a request that took over a socket released by an earlier request, when another request queued for that socket was aborted in between. The orphaned idle-socket timer from the earlier release destroyed the socket idle_socket_ttl later, mid-request (Node.js only) (#1040). (#1041)

#1040: ClickHouse/clickhouse-js#1040 #1041: ClickHouse/clickhouse-js#1041

client-1.24.0

New features

OpenTelemetry: richer, more actionable spans (requested by Langfuse, #948). (#950)

The X-ClickHouse-Summary counters are now attached to the clickhouse.query span as well (previously only on command / exec / insert), so the request-level metrics are visible on the outer client span.

Every key present in the summary header is now recorded as clickhouse.summary.<key> (the set is no longer a hardcoded subset). This surfaces total_rows_to_read (already typed but never recorded) and memory_usage (peak query memory, in bytes; sent by newer servers), and picks up future server-side additions (e.g. real_time_microseconds) automatically.

db.response.returned_rows is now recorded for non-streaming result consumption too (json() on JSON / JSONObjectEachRow / the other single-document JSON formats), not just row-streaming paths.

Added a span_attributes field to the per-request query params (query / command / exec / insert / ping). Use it to enrich the operation span with application-level context — e.g. mirroring the tags you also send via the log_comment setting (route, tenant, surface, etc.). Caller-provided attributes never override the client's own db.* / server.* / clickhouse.* attributes.

Added a dangerously_log_query_text client option (default false). When enabled, the raw SQL statement is attached to spans as the OpenTelemetry db.query.text attribute and included in the error-level logs emitted for a failed request. The query text may contain sensitive literals, which is why it is off by default; bound query_params values and credentials are never logged or traced regardless of this setting.

#948: ClickHouse/clickhouse-js#948 #950: ClickHouse/clickhouse-js#950

Bug fixes

Fixed Array(Date) / Array(Date32) query-parameter binding (and other temporal element types nested in arrays, tuples, and maps). A JS Date inside a container was serialized as a bare Unix timestamp (e.g. [1683244800]), which the server's Array(Date) element parser rejects (CANNOT_PARSE_INPUT_ASSERTION_FAILED). Container-nested Date values are now emitted as a quoted UTC date string (e.g. ['2023-05-05']), the one encoding every temporal element type accepts. Note: a Date used inside Array(DateTime) / Array(DateTime64) is now bound at day precision (the time-of-day is dropped), since date-only is the only form Array(Date) accepts; scalar Date / DateTime binding is unchanged. (#947)

Export the QueryParamsWithFormat, ClickHouseSummary, WithClickHouseSummary, ResultJSONType, RowJSONType and PingParams types from @clickhouse/client. They are used in the signatures of the public API (query, ping, the result types), but could not be imported from the package root (#997). (#1024)

#947: ClickHouse/clickhouse-js#947 #997: ClickHouse/clickhouse-js#997 #1024: ClickHouse/clickhouse-js#1024

client-web-1.24.0

New features

OpenTelemetry: richer, more actionable spans (requested by Langfuse, #948). (#950)

The X-ClickHouse-Summary header is now parsed on the Web client and attached to the operation spans (query / command / exec / insert), including the outer clickhouse.query span. Previously the Web client did not parse the summary header at all.

Every key present in the summary header is recorded as clickhouse.summary.<key> (the set is not hardcoded). This surfaces total_rows_to_read and memory_usage (peak query memory, in bytes; sent by newer servers), and picks up future server-side additions (e.g. real_time_microseconds) automatically.

db.response.returned_rows is now recorded for non-streaming result consumption too (json() on JSON / JSONObjectEachRow / the other single-document JSON formats), not just row-streaming paths.

Added a span_attributes field to the per-request query params (query / command / exec / insert / ping). Use it to enrich the operation span with application-level context — e.g. mirroring the tags you also send via the log_comment setting (route, tenant, surface, etc.). Caller-provided attributes never override the client's own db.* / server.* / clickhouse.* attributes.

Added a dangerously_log_query_text client option (default false). When enabled, the raw SQL statement is attached to spans as the OpenTelemetry db.query.text attribute. The query text may contain sensitive literals, which is why it is off by default; bound query_params values and credentials are never traced regardless of this setting.

#948: ClickHouse/clickhouse-js#948 #950: ClickHouse/clickhouse-js#950

Bug fixes

Fixed Array(Date) / Array(Date32) query-parameter binding (and other temporal element types nested in arrays, tuples, and maps). A JS Date inside a container was serialized as a bare Unix timestamp (e.g. [1683244800]), which the server's Array(Date) element parser rejects (CANNOT_PARSE_INPUT_ASSERTION_FAILED). Container-nested Date values are now emitted as a quoted UTC date string (e.g. ['2023-05-05']), the one encoding every temporal element type accepts. Note: a Date used inside Array(DateTime) / Array(DateTime64) is now bound at day precision (the time-of-day is dropped), since date-only is the only form Array(Date) accepts; scalar Date / DateTime binding is unchanged. (#947)

Export the QueryParamsWithFormat, ClickHouseSummary, WithClickHouseSummary, ResultJSONType, RowJSONType and PingParams types from @clickhouse/client-web. They are used in the signatures of the public API (query, ping, the result types), but could not be imported from the package root (#997). (#1024)

... (truncated)

Commits

6a265d2 Merge pull request #1044 from ClickHouse/main
6750ed4 fix: unblock the 1.24.1 release PR CI (#1045)
938b720 chore: bump @clickhouse/client version to 1.24.1 (#1043)
c2d69e7 fix(client-node): stop an aborted waiting request from destroying a socket in...
cbaf09b chore(deps): bump sharp from 0.34.5 to 0.35.5 in /demo/logs (#1039)
caf5859 chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 in /examples/node (#1...
5350609 chore(deps-dev): bump brace-expansion from 1.1.18 to 1.1.21 in /examples/node...
f3d5c8f chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 in /skills/clickhouse...
c32237e ci: roll ClickHouse version matrix to 26.9, 26.8, 26.7, 26.3 (#1003)
7c01e77 chore(deps-dev): bump the dev-dependencies group across 1 directory with 15 u...
Additional commits viewable in compare view

Updates @grpc/grpc-js from 1.14.5 to 1.14.6

Release notes

Sourced from @grpc/grpc-js's releases.

@grpc/grpc-js 1.14.6

Address remaining instances of advisory GHSA-f596-whhp-79r4 (#3105)

Avoid Date allocations on request and channelz tracking paths (#3090 contributed by @olavloite)

Avoid throwaway timer allocation in ResolvingCall (#3092 contributed by @olavloite)

Avoid building metadata map when parsing trailers (#3093 contributed by @olavloite)

Lazily allocate Metadata opaqueData map (#3095 contributed by @olavloite)

Cache precomputed serviceUrl in InternalChannel (#3097 contributed by @olavloite)

Memoize method config lookup in default config selector (#3098 contributed by @olavloite)

Avoid array allocation for single-value metadata headers (#3099 contributed by @olavloite)

Avoid allocations for empty CallCredentials on the RPC hot path (#3100 contributed by @olavloite)

Avoid redundant metadata clone in RetryingCall on initial attempt (#3101 contributed by @olavloite)

Commits

c63ed15 Merge pull request #3105 from murgatroid99/grpc-js_error_details_1.14
025cc24 Merge pull request #3107 from olavloite/backport-perf-to-1.14.x
9b50778 grpc-js: Increment version to 1.14.6
1126061 grpc-js: Don't transmit error details by default in server interceptors
40b61a0 perf(grpc-js): avoid allocations for empty CallCredentials on the RPC hot pat...
aed1745 test(grpc-js): stabilize weighted round robin tests on slow runners (#3104)
8db8a06 perf(grpc-js): avoid redundant metadata clone in RetryingCall on initial atte...
2aa8b88 perf(grpc-js): memoize method config lookup in default config selector (#3098)
e4ccd66 perf(grpc-js): cache precomputed serviceUrl in InternalChannel (#3097)
17c61a5 test(grpc-js): fix Windows CI test failures (#3094)
Additional commits viewable in compare view

Updates @google-cloud/bigquery from 9.1.0 to 9.2.0

Changelog

Sourced from @google-cloud/bigquery's changelog.

9.2.0 (2026-10-07)

Features

tools: Add individual CLI flags for Bun monkey patches (#9533) (a5eec89)

Commits

e1cd55c test: run the bigquery system tests in google cloud build (#8690)
b7433b3 chore: clean up linkinator configurations and test scripts across monorepo (#...
92b328b chore: release main (#8242)
0ad39e4 chore: update owlbot configs (#8229)
9fd76ef fix: bump all node submodules (#8178)
See full diff in compare view

Updates @google-cloud/datastore from 11.1.0 to 11.2.0

Release notes

Sourced from @google-cloud/datastore's releases.

teeny-request: v11.1.1

11.1.1 (2026-10-14)

Bug Fixes

core: Remove --fetch-shim and handle Bun fetch natively (#9573) (62559f1)

Changelog

Sourced from @google-cloud/datastore's changelog.

11.2.0 (2026-10-07)

Features

tools: Add individual CLI flags for Bun monkey patches (#9533) (a5eec89)

Commits

d07cb88 chore: release main (#9547)
a5eec89 feat(tools): add individual CLI flags for Bun monkey patches (#9533)
eb4cf9e test: run bun handwritten tests in bun runtime for firestore through pubsub p...
5e36a6b test: update first half of handwritten libraries to be bun compatible (#9448)
See full diff in compare view

Updates @google-cloud/pubsub from 6.1.0 to 6.2.0

Release notes

Sourced from @google-cloud/pubsub's releases.

phishing-protection: v6.2.0

6.2.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

precise-date: v6.2.0

6.2.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

projectify: v6.2.0

6.2.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

promisify: v6.2.0

6.2.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

redis: v6.2.0

6.2.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

scheduler: v6.2.0

6.2.0 (2026-10-08)

Features

Update API sources and regenerate (#9554) (8b6837a)

vision: v6.2.0

6.2.0 (2026-10-08)

... (truncated)

Changelog

Sourced from @google-cloud/pub...

Description has been truncated

Bumps the dependencies group with 17 updates: | Package | From | To | | --- | --- | --- | | [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.39.0` | `6.41.0` | | [npm-check-updates](https://github.com/raineorshine/npm-check-updates) | `23.1.0` | `23.1.1` | | [@types/dockerode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dockerode) | `4.0.1` | `4.0.2` | | [@azure/service-bus](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/servicebus/service-bus) | `7.9.5` | `7.10.0` | | [@clickhouse/client](https://github.com/ClickHouse/clickhouse-js) | `1.23.1` | `1.24.1` | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.5` | `1.14.6` | | [@google-cloud/bigquery](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/bigquery) | `9.1.0` | `9.2.0` | | [@google-cloud/datastore](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/datastore) | `11.1.0` | `11.2.0` | | [@google-cloud/pubsub](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/pubsub) | `6.1.0` | `6.2.0` | | [@google-cloud/storage](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/storage) | `8.2.0` | `8.4.0` | | [msw](https://github.com/mswjs/msw) | `3.0.2` | `3.0.3` | | [@confluentinc/kafka-javascript](https://github.com/confluentinc/confluent-kafka-javascript) | `1.10.1` | `1.11.0` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1146.0` | `3.1149.0` | | [mongoose](https://github.com/Automattic/mongoose) | `9.10.4` | `9.11.1` | | [oracledb](https://github.com/oracle/node-oracledb) | `7.0.1` | `26.0.0` | | [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.50.0` | `4.51.0` | | [node-vault](https://github.com/nodevault/node-vault) | `0.12.0` | `0.13.0` | Updates `knip` from 6.39.0 to 6.41.0 - [Release notes](https://github.com/webpro-nl/knip/releases) - [Commits](https://github.com/webpro-nl/knip/commits/knip@6.41.0/packages/knip) Updates `npm-check-updates` from 23.1.0 to 23.1.1 - [Release notes](https://github.com/raineorshine/npm-check-updates/releases) - [Changelog](https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md) - [Commits](raineorshine/npm-check-updates@v23.1.0...v23.1.1) Updates `@types/dockerode` from 4.0.1 to 4.0.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dockerode) Updates `@azure/service-bus` from 7.9.5 to 7.10.0 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/servicebus/service-bus/CHANGELOG.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/service-bus_7.10.0/sdk/servicebus/service-bus) Updates `@clickhouse/client` from 1.23.1 to 1.24.1 - [Release notes](https://github.com/ClickHouse/clickhouse-js/releases) - [Changelog](https://github.com/ClickHouse/clickhouse-js/blob/main/CHANGELOG.md) - [Commits](ClickHouse/clickhouse-js@client-1.23.1...client-1.24.1) Updates `@grpc/grpc-js` from 1.14.5 to 1.14.6 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.14.5...@grpc/grpc-js@1.14.6) Updates `@google-cloud/bigquery` from 9.1.0 to 9.2.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/handwritten/bigquery/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/admin-v9.2.0/handwritten/bigquery) Updates `@google-cloud/datastore` from 11.1.0 to 11.2.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/handwritten/datastore/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/datastore-v11.2.0/handwritten/datastore) Updates `@google-cloud/pubsub` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/handwritten/pubsub/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/iot-v6.2.0/handwritten/pubsub) Updates `@google-cloud/storage` from 8.2.0 to 8.4.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/handwritten/storage/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/storage-v8.4.0/handwritten/storage) Updates `msw` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v3.0.2...v3.0.3) Updates `@confluentinc/kafka-javascript` from 1.10.1 to 1.11.0 - [Release notes](https://github.com/confluentinc/confluent-kafka-javascript/releases) - [Changelog](https://github.com/confluentinc/confluent-kafka-javascript/blob/master/CHANGELOG.md) - [Commits](confluentinc/confluent-kafka-javascript@v1.10.1...v1.11.0) Updates `@aws-sdk/client-s3` from 3.1146.0 to 3.1149.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1149.0/clients/client-s3) Updates `mongoose` from 9.10.4 to 9.11.1 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@9.10.4...9.11.1) Updates `oracledb` from 7.0.1 to 26.0.0 - [Release notes](https://github.com/oracle/node-oracledb/releases) - [Changelog](https://github.com/oracle/node-oracledb/blob/main/CHANGELOG.md) - [Commits](oracle/node-oracledb@v7.0.1...v26.0.0) Updates `selenium-webdriver` from 4.50.0 to 4.51.0 - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Commits](SeleniumHQ/selenium@selenium-4.50.0...selenium-4.51.0) Updates `node-vault` from 0.12.0 to 0.13.0 - [Release notes](https://github.com/nodevault/node-vault/releases) - [Commits](nodevault/node-vault@v0.12.0...v0.13.0) --- updated-dependencies: - dependency-name: knip dependency-version: 6.41.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: npm-check-updates dependency-version: 23.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@types/dockerode" dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@azure/service-bus" dependency-version: 7.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@clickhouse/client" dependency-version: 1.24.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@grpc/grpc-js" dependency-version: 1.14.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@google-cloud/bigquery" dependency-version: 9.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@google-cloud/datastore" dependency-version: 11.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@google-cloud/pubsub" dependency-version: 6.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@google-cloud/storage" dependency-version: 8.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: msw dependency-version: 3.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@confluentinc/kafka-javascript" dependency-version: 1.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1149.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: mongoose dependency-version: 9.11.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: oracledb dependency-version: 26.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: selenium-webdriver dependency-version: 4.51.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: node-vault dependency-version: 0.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code major An incompatible API change labels Oct 19, 2026

Navigation Menu

Repository navigation

Bump the dependencies group with 17 updates - #1608

Bump the dependencies group with 17 updates#1608
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-5a9206c82d

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026

Release 6.41.0

Release 6.40.0

v23.1.1

What's Changed

Changelog

7.10.0 (2026-10-06)

Features Added

Breaking Changes

Bugs Fixed

Other Changes

client-1.24.1

Bug fixes

client-1.24.0

New features

Bug fixes

client-web-1.24.0

New features

Bug fixes

@​grpc/grpc-js 1.14.6

9.2.0 (2026-10-07)

Features

teeny-request: v11.1.1

11.1.1 (2026-10-14)

Bug Fixes

11.2.0 (2026-10-07)

Features

phishing-protection: v6.2.0

6.2.0 (2026-10-08)

Features

precise-date: v6.2.0

6.2.0 (2026-10-08)

Features

projectify: v6.2.0

6.2.0 (2026-10-08)

Features

promisify: v6.2.0

6.2.0 (2026-10-08)

Features

redis: v6.2.0

6.2.0 (2026-10-08)

Features

scheduler: v6.2.0

6.2.0 (2026-10-08)

Features

vision: v6.2.0

6.2.0 (2026-10-08)

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@grpc/grpc-js` 1.14.6