build(deps): bump the production-dependencies group across 1 directory with 24 updates by dependabot[bot] · Pull Request #278 · hackclub/lapse

dependabot · 2026-09-01T10:12:18Z

Bumps the production-dependencies group with 24 updates in the / directory:

Package	From	To
@orpc/contract	`1.14.13`	`1.15.0`
zod	`4.4.3`	`4.5.4`
@orpc/client	`1.14.13`	`1.15.0`
@orpc/openapi	`1.14.13`	`1.15.0`
@orpc/openapi-client	`1.14.13`	`1.15.0`
@scure/bip39	`2.2.0`	`2.4.0`
next	`16.2.12`	`16.3.4`
webpack	`5.109.2`	`5.110.3`
@inquirer/prompts	`8.5.2`	`8.7.1`
tsx	`4.23.4`	`4.23.13`
js-yaml	`5.2.3`	`5.4.1`
@aws-sdk/client-s3	`3.1101.0`	`3.1127.0`
@aws-sdk/s3-request-presigner	`3.1101.0`	`3.1127.0`
@orpc/server	`1.14.13`	`1.15.0`
@orpc/zod	`1.14.13`	`1.15.0`
@prisma/adapter-pg	`7.9.1`	`7.10.0`
@sentry/node	`10.69.0`	`10.73.0`
@tus/s3-store	`2.0.5`	`2.0.6`
@tus/server	`2.4.3`	`2.4.5`
bullmq	`6.0.6`	`6.3.4`
fastify	`5.11.2`	`5.12.3`
pretty-bytes	`7.1.1`	`7.1.3`
prisma	`7.9.1`	`7.10.0`
@aws-sdk/lib-storage	`3.1101.0`	`3.1127.0`

Updates @orpc/contract from 1.14.13 to 1.15.0

Release notes

Sourced from @orpc/contract's releases.

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

client: Stop client proxies from resolving primitive coercion over the network — by @dinwwwh in middleapi/orpc#1815 [(149c1)](middleapi/orpc@149c13ea)

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

openapi: Preserve event iterator return type in JsonifiedClient - by @dinwwwh in middleapi/orpc#1798 (17551)

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

nest: Run method-level guards on routes synthesized by router-contract @Implement - by @dinwwwh in middleapi/orpc#1775 (2b81d)

    View changes on GitHub

Commits

815467f chore: release v1.15.0
ee68137 chore: release v1.14.15
08a3cad chore: release v1.14.14
e5e7ee7 chore: sync sponsors
See full diff in compare view

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)

e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema

87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines

99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)

e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open

7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar

eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)

d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)

212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)

e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)

fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator

6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)

6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution

019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates

652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller

571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card

9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm

8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.
npm install zod@latest
At a glance:

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the flagship feature of Zod 4.5

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADChttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — 12–19 digits plus Luhn checksum

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the multi-property counterpart to z.property()

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD/https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD

... (truncated)

Commits

e8e206f 4.5.4
84e416f fix(v4): stop the cycle walk from firing a default factory (#6500)
1a16102 4.5.3
eab51ff fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)
7e24a24 docs(blog): drop the reading time and put a GitHub link in the navbar
e3a695b docs(v4): record the email regex and container output-shape findings under Open
99fce39 bench(v4): z.compile() against zod-compiler (#6499)
87d6464 fix(docs): drop the OG description when the title wraps past two lines
e6b6ab3 docs(blog): widen the z.compile example to a 20-property schema
9a193aa 4.5.2
Additional commits viewable in compare view

Updates @orpc/client from 1.14.13 to 1.15.0

Release notes

Sourced from @orpc/client's releases.

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

client: Stop client proxies from resolving primitive coercion over the network — by @dinwwwh in middleapi/orpc#1815 [(149c1)](middleapi/orpc@149c13ea)

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

openapi: Preserve event iterator return type in JsonifiedClient - by @dinwwwh in middleapi/orpc#1798 (17551)

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

nest: Run method-level guards on routes synthesized by router-contract @Implement - by @dinwwwh in middleapi/orpc#1775 (2b81d)

    View changes on GitHub

Commits

815467f chore: release v1.15.0
149c13e fix(client): stop client proxies from resolving primitive coercion over the n...
ee68137 chore: release v1.14.15
08a3cad chore: release v1.14.14
e5e7ee7 chore: sync sponsors
See full diff in compare view

Updates @orpc/openapi from 1.14.13 to 1.15.0

Release notes

Sourced from @orpc/openapi's releases.

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

client: Stop client proxies from resolving primitive coercion over the network — by @dinwwwh in middleapi/orpc#1815 [(149c1)](middleapi/orpc@149c13ea)

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

openapi: Preserve event iterator return type in JsonifiedClient - by @dinwwwh in middleapi/orpc#1798 (17551)

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

nest: Run method-level guards on routes synthesized by router-contract @Implement - by @dinwwwh in middleapi/orpc#1775 (2b81d)

    View changes on GitHub

Commits

815467f chore: release v1.15.0
ee68137 chore: release v1.14.15
08a3cad chore: release v1.14.14
e5e7ee7 chore: sync sponsors
See full diff in compare view

Updates @orpc/openapi-client from 1.14.13 to 1.15.0

Release notes

Sourced from @orpc/openapi-client's releases.

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

To improve compatibility with modern frameworks, as well as automatic logging and monitoring systems, we no longer support bind, valueOf, toString, or toJSON as router keys in the recursive-proxy client.

This can be considered a breaking change, but it should rarely affect users because these keys are rarely used as router keys and are generally treated as internal JavaScript mechanisms. This change is especially important for better compatibility with React 19.3.

🐞 Bug Fixes

client: Stop client proxies from resolving primitive coercion over the network — by @dinwwwh in middleapi/orpc#1815 [(149c1)](middleapi/orpc@149c13ea)

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

   🐞 Bug Fixes

openapi: Preserve event iterator return type in JsonifiedClient - by @dinwwwh in middleapi/orpc#1798 (17551)

    View changes on GitHub

v1.14.14

   🐞 Bug Fixes

nest: Run method-level guards on routes synthesized by router-contract @Implement - by @dinwwwh in middleapi/orpc#1775 (2b81d)

    View changes on GitHub

Commits

815467f chore: release v1.15.0
ee68137 chore: release v1.14.15
17551f0 fix(openapi): preserve event iterator return type in JsonifiedClient (#1798)
08a3cad chore: release v1.14.14
e5e7ee7 chore: sync sponsors
See full diff in compare view

Updates @scure/bip39 from 2.2.0 to 2.4.0

Release notes

Sourced from @scure/bip39's releases.

2.4.0

Hardening: Unpaired UTF-16 surrogates are now rejected in mnemonics & passphrases. Normal input is unaffected

Upgrade noble-hashes to 2.4.0

Improve tests

Full Changelog: paulmillr/scure-bip39@2.3.0...2.4.0

2.3.0

Rewrite package: the logic is now declared in scure-bip39 instead of @scure/base dependency, which was removed.

Upgrade noble-hashes to 2.3.0.

Full Changelog: paulmillr/scure-bip39@2.2.0...2.3.0

Changelog

Sourced from @scure/bip39's changelog.

2.4.0 (2026-08-28)

Hardening: Unpaired UTF-16 surrogates are now rejected in mnemonics & passphrases. Normal input is unaffected

Upgrade noble-hashes to 2.4.0

Improve tests

2.3.0 (2026-08-08)

Rewrite package: the logic is now declared in scure-bip39 instead of @scure/base dependency, which was removed.

Upgrade noble-hashes to 2.3.0.

Commits

2c8cf46 Release 2.4.0.
af5414c Update devdeps, add changelog
f80dd87 wordlists: reject ill-formed words
8073136 Bump jsbt
4ccd7e5 Reject ill-formed Unicode from inputs
44ab886 Update devdeps / lockfile
dfcb773 Add more tests, update fetch-wordlist
db04e10 Bump devdeps
158de4a Release 2.3.0.
4507966 Rewrite package to not depend on scure-base.
Additional commits viewable in compare view

Updates next from 16.2.12 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)

Fix build error when aliasing typescript to @typescript/typescript6 (#97997)

Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @eps1lon, @mischnic, and @timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution on windows-hosted servers

Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)

[backport] Fix catch-all index page being served for every other slug (#97416)

[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)

[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)

[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)

[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

... (truncated)

Commits

299180d v16.3.4
12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
d8f4560 [16.3.x] Fix build error when aliasing typescript to @typescript/typescript6 ...
656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
a9a1cb7 v16.3.3
968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
3a15b4a [16.3.x] [next/image]: disable avif image optimization
7378b51 Backport/docs fixes 16.3 (#97649)
Additional commits viewable in compare view

Updates webpack from 5.109.2 to 5.110.3

Release notes

Sourced from webpack's releases.

v5.110.3

Patch Changes

Fix import() options, circular reexport severity and namespace writes. (by @alexander-akait in #21867)

Skip ESM interop when require() targets a module outside the concatenation. (by @hai-x in #21884)

Fix concatenated require() in a require.ensure callback or a computed request. (by @hai-x in #21907)

Keep optimization.minimize a boolean; its options move to minimizeOptions. (by @alexander-akait in #21886)

Fix mangled exports read through require() and a leaked internal reference. (by @alexander-akait in #21905)

Fix new on a default import of a wrapped CommonJS module. (by @alexander-akait in #21876)

Throw when a deferred namespace of an async module is forced while it evaluates. (by @alexander-akait in #21871)

Do not report a missing export for a name a side-effect-free barrel defers. (by @alexander-akait in #21874)

Fix queue, URL scheme, dotenv, HTTP module and persistent cache edge cases. (by @alexander-akait in #21901)

Evaluate a deferred import's async dependencies where the import sits. (by @alexander-akait in #21902)

Omit ambiguous export * names from the module namespace. (by @alexander-akait in #21878)

v5.110.2

Patch Changes

Fix analyzable ESM baking around cycles, mixed-served wasm and style url maps. (by @alexander-akait in #21851)

Minify more HTML and CSS shorthands, and cut two costs off printing. (by @alexander-akait in #21842)

Report a named import that is never read when it names a missing export. (by @alexander-akait in #21856)

Fix ESM circular reexports, cyclic const TDZ, and defer evaluation order. (by @alexander-akait in #21852)

Stop output.html emitting an unused JS chunk for each generated page. (by @alexander-akait in #21859)

Stop emitting the CSS chunk loading runtime when every CSS chunk is initial. (by @alexander-akait in #21862)

Strip a BOM a loader put on a string, and shift a source map that counted it. (by @alexander-akait in #21857)

v5.110.1

Patch Changes

Fix a capture-group-less snapshot.managedPaths RegExp; speed up cache writes. (by @alexander-akait in #21843)

Throw SyntaxError, or WebAssembly.CompileError, from an unparsable module. (by @alexander-akait in #21847)

Accept the optimization.minimize: true shorthand set by a plugin in apply(). (by @AgentEnder in #21845)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.110.3

Patch Changes

Fix import() options, circular reexport severity and namespace writes. (by @alexander-akait in #21867)

Skip ESM interop when require() targets a module outside the concatenation. (by @hai-x in #21884)

Fix concatenated require() in a require.ensure callback or a computed request. (by @hai-x in #21907)

Keep optimization.minimize a boolean; its options move to minimizeOptions. (by @alexander-akait in #21886)

Fix mangled exports read through require() and a leaked internal reference. (by @alexander-akait in #21905)

Fix new on a default import of a wrapped CommonJS module. (by @alexander-akait in #21876)

Throw when a deferred namespace of an async module is forced while it evaluates. (by @alexander-akait in #21871)

Do not report a missing export for a name a side-effect-free barrel defers. (by @alexander-akait in #21874)

Fix queue, URL scheme, dotenv, HTTP module and persistent cache edge cases. (by @alexander-akait in #21901)

Evaluate a deferred import's async dependencies where the import sits. (by @alexander-akait in #21902)

Omit ambiguous export * names from the module namespace. (by @alexander-akait in #21878)

5.110.2

Patch Changes

Fix analyzable ESM baking around cycles, mixed-served wasm and style url maps. (by @alexander-akait in #21851)

Minify more HTML and CSS shorthands, and cut two costs off printing. (by @alexander-akait in #21842)

Report a named import that is never read when it names a missing export. (by @alexander-akait in #21856)

Fix ESM circular reexports, cyclic const TDZ, and defer evaluation order. (by @alexander-akait in #21852)

Stop output.html emitting an unused JS chunk for each generated page. (by @alexander-akait in #21859)

Stop emitting the CSS chunk loading runtime when every CSS chunk is initial. (by @alexander-akait in #21862)

Strip a BOM a loader put on a string, and shift a source map that counted it. (by @alexander-akait in #21857)

5.110.1

Patch Changes

Fix a capture-group-less snapshot.managedPaths RegExp; speed up cache writes. (by @alexander-akait in #21843)

... (truncated)

Commits

a2d7b9c chore(release): new release (#21868)
d6e86c0 test(test262): assert two more errors webpack reports at build time (#21906)
6a963fe fix: keep require() into a concatenation substituted and unmangled (#21905)
e1eb099 fix: concatenated require() in require.ensure callback or computed reques...
8d1ab53 chore: escape literal NUL bytes in Compilation.js (#21904)
5e6c4d7 fix(defer): evaluate async dependencies where the deferred import sits (#21902)
7ea4fa3 fix: handle audited correctness edge cases (#21901)
c50713c fix: keep code generation data per result instead of per NormalModule (#21900)
ebd3be4 docs: document the post-minor stabilization week and out-of-band releases (#2...
80be700 fix(config): keep the resolved optimization.minimize a boolean (#21886)
Additional commits viewable in compare view

Updates @inquirer/prompts from 8.5.2 to 8.7.1

Release notes

Sourced from @inquirer/prompts's releases.

@inquirer/prompts@8.7.1

What's new

All bundled prompts now pin @inquirer/type to an exact version in their published manifests. Since these type definitions leak into consumers' tsc runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (#2247, fixes #2244).

Included

@inquirer/checkbox@^5.2.4

@inquirer/confirm@^6.3.1

@inquirer/editor@^5.3.2

@inquirer/expand@^5.1.4

@inquirer/input@^5.1.5

@inquirer/number@^4.2.2

@inquirer/password@^5.2.1

@inquirer/rawlist@^5.3.4

@inquirer/search@^4.3.2

@inquirer/select@^5.2.4

@inquirer/prompts@8.7.0

What's new

password gains the toggleMask option (ctrl+t to reveal the typed value).

confirm now matches localized yes/no answers per-locale.

Prettified prompt and theme types for better IDE display.

Added inquirer-grouped-checkbox to the community prompts list (#2236).

Included

@inquirer/checkbox@^5.2.3

@inquirer/confirm@^6.3.0

@inquirer/editor@^5.3.1

@inquirer/expand@^5.1.3

@inquirer/input@^5.1.4

@inquirer/number@^4.2.1

@inquirer/password@^5.2.0

@inquirer/rawlist@^5.3.3Description has been truncated

socket-security · 2026-09-01T10:12:55Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
next@16.2.12 ⏵ 16.3.4	^-2	⁺⁷⁵	⁺¹
tsx@4.23.4 ⏵ 4.23.13	⁺¹²		⁺¹	⁺¹
@prisma/adapter-pg@7.9.1 ⏵ 7.10.0			⁺¹
@aws-sdk/lib-storage@3.1101.0 ⏵ 3.1127.0
@scure/bip39@2.2.0 ⏵ 2.4.0				⁺⁴
js-yaml@5.2.3 ⏵ 5.4.1	⁺¹		^-13	^-1
@orpc/zod@1.14.13 ⏵ 1.15.0
pretty-bytes@7.1.1 ⏵ 7.1.3			⁺¹	⁺⁶
webpack@5.109.2 ⏵ 5.110.3	⁺¹²		⁺¹	⁺¹
@orpc/server@1.14.13 ⏵ 1.15.0
@tus/s3-store@2.0.5 ⏵ 2.0.6	⁺¹¹			⁺²
prisma@7.9.1 ⏵ 7.10.0	⁺²⁰		⁺¹	^-1
bullmq@6.0.6 ⏵ 6.3.4	⁺¹			⁺¹
@tus/server@2.4.3 ⏵ 2.4.5	⁺¹			⁺²
@orpc/openapi-client@1.14.13 ⏵ 1.15.0	⁺¹		⁺¹
zod@4.5.4
@sentry/node@10.69.0 ⏵ 10.73.0			⁺¹
@inquirer/prompts@8.5.2 ⏵ 8.7.1				⁺³
@orpc/client@1.14.13 ⏵ 1.15.0	⁺¹		⁺¹
@orpc/contract@1.14.13 ⏵ 1.15.0
@orpc/openapi@1.14.13 ⏵ 1.15.0	⁺¹
@aws-sdk/client-s3@3.1101.0 ⏵ 3.1127.0	⁺¹
@aws-sdk/s3-request-presigner@3.1101.0 ⏵ 3.1127.0
fastify@5.11.2 ⏵ 5.12.3		⁺³		⁺²

View full report

…y with 24 updates Bumps the production-dependencies group with 24 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@orpc/contract](https://github.com/middleapi/orpc/tree/HEAD/packages/contract) | `1.14.13` | `1.15.0` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` | | [@orpc/client](https://github.com/middleapi/orpc/tree/HEAD/packages/client) | `1.14.13` | `1.15.0` | | [@orpc/openapi](https://github.com/middleapi/orpc/tree/HEAD/packages/openapi) | `1.14.13` | `1.15.0` | | [@orpc/openapi-client](https://github.com/middleapi/orpc/tree/HEAD/packages/openapi-client) | `1.14.13` | `1.15.0` | | [@scure/bip39](https://github.com/paulmillr/scure-bip39) | `2.2.0` | `2.4.0` | | [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.4` | | [webpack](https://github.com/webpack/webpack) | `5.109.2` | `5.110.3` | | [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.5.2` | `8.7.1` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.4` | `4.23.13` | | [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.3` | `5.4.1` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1101.0` | `3.1127.0` | | [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1101.0` | `3.1127.0` | | [@orpc/server](https://github.com/middleapi/orpc/tree/HEAD/packages/server) | `1.14.13` | `1.15.0` | | [@orpc/zod](https://github.com/middleapi/orpc/tree/HEAD/packages/zod) | `1.14.13` | `1.15.0` | | [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.9.1` | `7.10.0` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.69.0` | `10.73.0` | | [@tus/s3-store](https://github.com/tus/tus-node-server) | `2.0.5` | `2.0.6` | | [@tus/server](https://github.com/tus/tus-node-server) | `2.4.3` | `2.4.5` | | [bullmq](https://github.com/taskforcesh/bullmq) | `6.0.6` | `6.3.4` | | [fastify](https://github.com/fastify/fastify) | `5.11.2` | `5.12.3` | | [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) | `7.1.1` | `7.1.3` | | [prisma](https://github.com/prisma/prisma-cli/tree/HEAD/packages/prisma) | `7.9.1` | `7.10.0` | | [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.1101.0` | `3.1127.0` | Updates `@orpc/contract` from 1.14.13 to 1.15.0 - [Release notes](https://github.com/middleapi/orpc/releases) - [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/contract) Updates `zod` from 4.4.3 to 4.5.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.5.4) Updates `@orpc/client` from 1.14.13 to 1.15.0 - [Release notes](https://github.com/middleapi/orpc/releases) - [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/client) Updates `@orpc/openapi` from 1.14.13 to 1.15.0 - [Release notes](https://github.com/middleapi/orpc/releases) - [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/openapi) Updates `@orpc/openapi-client` from 1.14.13 to 1.15.0 - [Release notes](https://github.com/middleapi/orpc/releases) - [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/openapi-client) Updates `@scure/bip39` from 2.2.0 to 2.4.0 - [Release notes](https://github.com/paulmillr/scure-bip39/releases) - [Changelog](https://github.com/paulmillr/scure-bip39/blob/main/CHANGELOG.md) - [Commits](paulmillr/scure-bip39@2.2.0...2.4.0) Updates `next` from 16.2.12 to 16.3.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.12...v16.3.4) Updates `webpack` from 5.109.2 to 5.110.3 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.109.2...v5.110.3) Updates `@inquirer/prompts` from 8.5.2 to 8.7.1 - [Release notes](https://github.com/SBoudrias/Inquirer.js/releases) - [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.5.2...@inquirer/prompts@8.7.1) Updates `tsx` from 4.23.4 to 4.23.13 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.4...v4.23.13) Updates `js-yaml` from 5.2.3 to 5.4.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.2.3...5.4.1) Updates `@aws-sdk/client-s3` from 3.1101.0 to 3.1127.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1127.0/clients/client-s3) Updates `@aws-sdk/s3-request-presigner` from 3.1101.0 to 3.1127.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1127.0/packages/s3-request-presigner) Updates `@orpc/server` from 1.14.13 to 1.15.0 - [Release notes](https://github.com/middleapi/orpc/releases) - [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/server) Updates `@orpc/zod` from 1.14.13 to 1.15.0 - [Release notes](https://github.com/middleapi/orpc/releases) - [Commits](https://github.com/middleapi/orpc/commits/v1.15.0/packages/zod) Updates `@prisma/adapter-pg` from 7.9.1 to 7.10.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.10.0/packages/adapter-pg) Updates `@sentry/node` from 10.69.0 to 10.73.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.73.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.69.0...10.73.0) Updates `@tus/s3-store` from 2.0.5 to 2.0.6 - [Release notes](https://github.com/tus/tus-node-server/releases) - [Commits](https://github.com/tus/tus-node-server/compare/@tus/s3-store@2.0.5...@tus/s3-store@2.0.6) Updates `@tus/server` from 2.4.3 to 2.4.5 - [Release notes](https://github.com/tus/tus-node-server/releases) - [Commits](https://github.com/tus/tus-node-server/compare/@tus/server@2.4.3...@tus/server@2.4.5) Updates `bullmq` from 6.0.6 to 6.3.4 - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v6.0.6...v6.3.4) Updates `fastify` from 5.11.2 to 5.12.3 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](https://github.com/fastify/fastify/commits) Updates `pretty-bytes` from 7.1.1 to 7.1.3 - [Release notes](https://github.com/sindresorhus/pretty-bytes/releases) - [Commits](sindresorhus/pretty-bytes@v7.1.1...v7.1.3) Updates `prisma` from 7.9.1 to 7.10.0 - [Release notes](https://github.com/prisma/prisma-cli/releases) - [Commits](https://github.com/prisma/prisma-cli/commits/HEAD/packages/prisma) Updates `@aws-sdk/lib-storage` from 3.1101.0 to 3.1127.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1127.0/lib/lib-storage) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1121.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@aws-sdk/lib-storage" dependency-version: 3.1121.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@aws-sdk/s3-request-presigner" dependency-version: 3.1121.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@inquirer/prompts" dependency-version: 8.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@orpc/client" dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@orpc/contract" dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@orpc/openapi" dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@orpc/openapi-client" dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@orpc/server" dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@orpc/zod" dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@prisma/adapter-pg" dependency-version: 7.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@scure/bip39" dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/node" dependency-version: 10.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tus/s3-store" dependency-version: 2.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@tus/server" dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: bullmq dependency-version: 6.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: fastify dependency-version: 5.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: js-yaml dependency-version: 5.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: next dependency-version: 16.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: pretty-bytes dependency-version: 7.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: prisma dependency-version: 7.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: tsx dependency-version: 4.23.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: webpack dependency-version: 5.110.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-09-08T10:02:25Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@sentry/node-core` is 60.0% likely obfuscated Confidence: 0.60 Location: Package overview From: pnpm-lock.yaml → `npm/@sentry/node@10.73.0` → `npm/@sentry/node-core@10.73.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@sentry/node-core@10.73.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-9dd9b5c71b branch from b0f8416 to 2e7d872 Compare September 8, 2026 10:01

Navigation Menu

Uh oh!

build(deps): bump the production-dependencies group across 1 directory with 24 updates - #278

build(deps): bump the production-dependencies group across 1 directory with 24 updates#278
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-9dd9b5c71b

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 1, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

🐞 Bug Fixes

v1.14.14

🐞 Bug Fixes

v4.5.4

Commits:

v4.5.3

Commits:

v4.5.2

Commits:

v4.5.1

Commits:

v4.5.0

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

🐞 Bug Fixes

v1.14.14

🐞 Bug Fixes

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

🐞 Bug Fixes

v1.14.14

🐞 Bug Fixes

v1.15.0

Do not use these router keys: bind, valueOf, toString, toJSON in your routers

🐞 Bug Fixes

[View changes on GitHub](middleapi/orpc@v1.14.15...v1.15.0)

v1.14.15

🐞 Bug Fixes

v1.14.14

🐞 Bug Fixes

2.4.0

2.3.0

2.4.0 (2026-08-28)

2.3.0 (2026-08-08)

v16.3.4

Credits

v16.3.3

v16.3.2

Core Changes

Credits

v16.3.1

What's Changed

v5.110.3

Patch Changes

v5.110.2

Patch Changes

v5.110.1

Patch Changes

5.110.3

Patch Changes

5.110.2

Patch Changes

5.110.1

Patch Changes

@​inquirer/prompts@​8.7.1

What's new

Included

@​inquirer/prompts@​8.7.0

What's new

Included

Uh oh!

socket-security Bot commented Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Sep 8, 2026

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading

Do not use these router keys: `bind`, `valueOf`, `toString`, `toJSON` in your routers

[View changes on GitHub](middleapi/orpc@`v1.14.15...v1.15.0`)

Do not use these router keys: `bind`, `valueOf`, `toString`, `toJSON` in your routers

[View changes on GitHub](middleapi/orpc@`v1.14.15...v1.15.0`)

Do not use these router keys: `bind`, `valueOf`, `toString`, `toJSON` in your routers

[View changes on GitHub](middleapi/orpc@`v1.14.15...v1.15.0`)

Do not use these router keys: `bind`, `valueOf`, `toString`, `toJSON` in your routers

[View changes on GitHub](middleapi/orpc@`v1.14.15...v1.15.0`)

`@inquirer/prompts@8`.7.1

`@inquirer/prompts@8`.7.0

socket-security Bot commented Sep 1, 2026 •

edited

Loading