chore(deps): bump the patch-minor group across 1 directory with 22 updates by dependabot[bot] · Pull Request #410 · ygncode/wateaminbox

dependabot · 2026-09-27T08:26:25Z

Bumps the patch-minor group with 22 updates in the / directory:

Package	From	To
@biomejs/biome	`2.5.12`	`2.5.14`
knip	`6.34.0`	`6.38.0`
turbo	`2.10.12`	`2.11.3`
@aws-sdk/client-s3	`3.1127.0`	`3.1139.0`
@aws-sdk/s3-request-presigner	`3.1127.0`	`3.1139.0`
@modelcontextprotocol/sdk	`1.30.0`	`1.30.1`
hono	`4.13.7`	`4.13.9`
meilisearch	`0.60.0`	`0.62.0`
@tanstack/react-query	`5.102.8`	`5.103.2`
@tanstack/react-virtual	`3.14.10`	`3.14.13`
centrifuge	`5.7.3`	`5.7.4`
lucide-react	`1.41.0`	`1.48.0`
motion	`13.2.0`	`13.4.2`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
react-hook-form	`7.87.0`	`7.88.0`
react-i18next	`17.0.13`	`17.0.15`
react-router	`8.3.1`	`8.4.0`
tailwind-merge	`3.6.0`	`3.7.0`
@types/react	`19.2.18`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
kysely	`0.28.17`	`0.29.6`

Updates @biomejs/biome from 2.5.12 to 2.5.14

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.14

2.5.14

Patch Changes
#9022 0d49e24 Thanks @dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.
// Invalid: return in finally callback
Promise.resolve(1).finally(() => { return 2 })
// Valid: no return in finally callback
Promise.resolve(1).finally(() => { console.log(2) })
Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.
#11754 71eaa0d Thanks @griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

{@debug user}
The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.
#11725 5eb5f09 Thanks @m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

#11735 9bd70c7 Thanks @ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

#11715 f05a3c3 Thanks @ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

#11766 c2542c6 Thanks @dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.
#11461 22e9966 Thanks @FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.
 const value = `
      ${
        condition
          ? "yes"
          : "no"
-}
+     }
 `;
#11766 c2542c6 Thanks @dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.14

Patch Changes
#9022 0d49e24 Thanks @dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.
// Invalid: return in finally callback
Promise.resolve(1).finally(() => { return 2 })
// Valid: no return in finally callback
Promise.resolve(1).finally(() => { console.log(2) })
Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.
#11754 71eaa0d Thanks @griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

{@debug user}
The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.
#11725 5eb5f09 Thanks @m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

#11735 9bd70c7 Thanks @ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

#11715 f05a3c3 Thanks @ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

#11766 c2542c6 Thanks @dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.
#11461 22e9966 Thanks @FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.
 const value = `
      ${
        condition
          ? "yes"
          : "no"
-}
+     }
 `;
#11766 c2542c6 Thanks @dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

#11790 17d0ff0 Thanks @ematipico! - Fixed #10248: noUselessFragments now allows fragments with props in Astro files, such as <Fragment slot="name">{text}</Fragment> inside template expressions.

... (truncated)

Commits

af4365d ci: release (#11711)
7ee3a6c fix(useExhaustiveSwitchCases): add option requireExplicitCase (#11777)
02ea438 feat(json_analyze): implement noJsonUnsafeValues (#9758)
64fd314 feat(json_analyze): implement useConsistentObjectKeys (#9797)
a9c4aa0 feat(html): detect undeclared custom Vue directives (#11651)
1fc17e3 feat: expand useIncludes (#11739)
71eaa0d feat(lint/html/svelte): add noSvelteAtDebugTags (#11754)
9bd70c7 fix: various bug fixes (#11735)
c7c4e2b fix(analyzer): various bugs (#11720)
5eb5f09 feat(biome_js_analyze): implement useValidTestTitle rule (#9176) (#11725)
Additional commits viewable in compare view

Updates knip from 6.34.0 to 6.38.0

Release notes

Sourced from knip's releases.

Release 6.38.0

Include co-authors in docs contributor list (0c334100df59d89a512ad598ec50e7f62f6da0c3)

Filter bots and agents from docs contributors (617f70d8179c6b8668ca41fe5df77ced5e2b37c0)

Update Eve plugin conventions (#2049) (260dbb91a85f3a3bc2727e8f255d73df3737552c) - thanks @matchai!

Add args example to that doc page (50b271b98fc930a05a3b045a2f691486f9f06528)

Add Turborepo plugin (#2055) (e49d3db05f1d69ce7db3efcb8467a4af63c27379) - thanks @changbaebang!

Support import-x/* settings in ESLint plugin (#2050) (1a34cf82a3d6a1202717ef910bedba55838e9dd9) - thanks @bytedoe!

Resolve file option in Mocha configuration files (#2051) (9b5c5f60468c8a92a3e74adca5c0931f008677af) - thanks @giaBaoJS!

Support oxlint extends (#2054) (a149a98219bb14b15f446fc5f8c4f815e28b2183) - thanks @matthewnitschke-wk!

Fix import.meta handling in built-in compilers (#2059) (8b0c85076bf3dce15ef5f3c0c4e58bfefdf59ded) - thanks @vdavid!

Fix tag hints for enum and namespace members (#2061) (8a8805e48945863248429d18b7f6c4e4b7dc9ebd) - thanks @devYRPauli!

Flag unused member tags in tagged enums and namespaces (584e53ff3e0846fbfe04fa5b5bfefe2420576a34)

feat: resolve MDX content mapper remarkPlugins (#2060) (34dbccf25359f9e9fefe9d0be6ef2ec0252223cc) - thanks @gioboa!

Refactor and separate concerns w/ new typescript-content-mapper plugin (11e94509bd0f350d747facf4003fc5b248d1b02d)

Resolve mdx content mapper providerImportSource (7b5825117f97f2f87b7141509a254f88d0957cf7)

Fix config → entry in plop plugin (25a380c9e1165b76583d69b48b5fa7cdf5db0ae2)

Release 6.37.0

fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#2048) (06a68fcf99a90e559daeb0b8fb2d24e173124774) - thanks @RobHannay!

fix: enable JSX in the config loader (#1959) (5b21dc9192f773613d1c5db8edf35f0a68820268) - thanks @addielaruee!

Match binaries only to their actual dependency providers (c5bdb69ccbcb7e1056233f346d0ada3495d1013d)

Preserve executable references across package manager commands (54af171638db22f5d903faae05c37c2ea6adc869)

Correct binary provider metadata in Relay fixtures (e67dfcb96d055c27be9c8601e077656855bb632b)

Separate shell binary expectations from reporting exemptions (resolve #2022) (c1d7d75a3529d9faff7f4c0df11dd0ca1bdfb149)

Respect npx no-install flags before the executable (4237010c9a834eb8b04f4a528c76d10a5c38ee98)

Update dependencies (038ea179f7d6bf7ca43bc5daf553a68b13a9067c)

Remove npm auth check now that's in release-it (4aaf77c58004ac64063a1982b98e53107c2ebe93)

Fix --format name resolution in the ESLint plugin (#2046) (1269e98bb700384811fadc124d69ea720832037e) - thanks @bytedoe!

Release 6.36.0

Add @tailwindcss/webpack as Tailwind plugin enabler (#2027) (b5ac0cf734dda3c6c6c51c817981dfc558b7c582) - thanks @igas!

Fix Next.js Turbopack loader dependencies (23419b4edfd48796dd484fa880e1bad49a043d2e)

Explain ambiguous star exports in traces (#2025) (3c2c1a53f9c2b7ff3057a4e46761791979e0b09c) - thanks @gioboa!

Fix eslintrc parserOptions.parser handling in ESLint plugin (#2028) (c79463cec81d09518eda325ec00e6f12327dea8d) - thanks @bytedoe!

fix(compilers): require word boundary around import keyword (#2029) (68bbe51c39b564022b63942bc83cb570778cca00) - thanks @thanadolps!

fix: recover from corrupt cache file (#2034) (30ff7568c84e0a6731ca634a52314228d23d1a2b) - thanks @gioboa!

fix: fix trailing comma on dependency removal (#2033) (adfaf4f78878b6d55b0939a92d70a1fbb0ae1240) - thanks @gioboa!

Document built-in compiler scope (a05e155276dad4ead16992580d17572cebf045e7)

Add babel, khan and oxc to projects and optimize svgs (1c26560b98bc3109e93d15761d02f089213bfb6c)

Add section to test preview packages & extension (d911c18385f0aa41f53653a2a15cc90a1e0251b8)

Fix shared info/exclude handling in linked Git worktrees (#2037) (c1f18d5a7d25fc5a614747bbcbd62d043457eb48) - thanks @kenfdev!

Shard Node specs on Windows and enable Bun test parallelism (66e966b6edec4460b40b05847fefa9f90ee69068)

Add Varlock plugin support (#2000) (e4fbf46acff08e78370e72b142e795bd81f28561) - thanks @Joehoel!

Apply NODE_OPTIONS inputs to package manager binaries (#2038) (c8df8a28e9a19484efe7097f984abc0c6556aff5) - thanks @giaBaoJS!

Handle array form of import/resolver setting in ESLint plugin (#2041) (a80d386a80fdafc89c610d4887ec82184ac178db) - thanks @bytedoe!

fix(node): add valueless Node CLI flags to boolean options (#2042) (4c6768501f7115a894d7ece9e5c32090b684cc6f) - thanks @shoutoutuoadi325!

fix(typedoc): accept string form of plugin and theme options (#2043) (ce387b05c8f136546e860ec73e29557563c63afa) - thanks @giaBaoJS!

Add textlint plugin (#2039) (532dab595fc9a910e320418dc0390222fb2d7478) - thanks @anandghegde!

fix: Correctly resolve Vitest setupFiles from nested configs (#2040) (84a494334e125d229dc865893b21d69d0d201e85) - thanks @CruseCtrl!

Add n8n to projects (3f756a7e70c4164d57a7dbbd58f3604afe4043e2)

... (truncated)

Commits

c0e42f8 Release [email protected]
25a380c Fix config → entry in plop plugin
7b58251 Resolve mdx content mapper providerImportSource
11e9450 Refactor and separate concerns w/ new typescript-content-mapper plugin
34dbccf feat: resolve MDX content mapper remarkPlugins (#2060)
584e53f Flag unused member tags in tagged enums and namespaces
8a8805e Fix tag hints for enum and namespace members (#2061)
8b0c850 Fix import.meta handling in built-in compilers (#2059)
a149a98 Support oxlint extends (#2054)
9b5c5f6 Resolve file option in Mocha configuration files (#2051)
Additional commits viewable in compare view

Updates turbo from 2.10.12 to 2.11.3

Release notes

Sourced from turbo's releases.

Turborepo v2.11.3

What's Changed

Changelog

chore: Release Turborepo 2.11.2 by @github-actions[bot] in vercel/turborepo#14107

refactor: Remove experimental Cargo compile cache by @anthonyshew in vercel/turborepo#14110

refactor: Remove clap from turborepo-types by @anthonyshew in vercel/turborepo#14111

chore: Use canary turbo for Vercel builds by @anthonyshew in vercel/turborepo#14112

refactor: Extract turborepo-tracing crate by @anthonyshew in vercel/turborepo#14113

refactor: Remove Run boundaries extension by @vercel-gh-bot-2[bot] in vercel/turborepo#14114

refactor: Relocate child spawning to turborepo-process by @vercel-gh-bot-3[bot] in vercel/turborepo#14115

docs: Drop stale support-policy entry from getting-started nav by @Neekoras in vercel/turborepo#14116

refactor: Move CLI configuration overrides into CLI by @anthonyshew in vercel/turborepo#14119

fix: Avoid microfrontend polyrepo warnings by @anthonyshew in vercel/turborepo#14118

refactor: Add run and execution selector DTOs by @anthonyshew in vercel/turborepo#14120

chore: Release Turborepo 2.11.3-canary.1 by @github-actions[bot] in vercel/turborepo#14121

test: Reuse Go cache in invalidation test by @anthonyshew in vercel/turborepo#14122

chore: Release Turborepo 2.11.3-canary.2 by @github-actions[bot] in vercel/turborepo#14124

test: Avoid overlapping concurrent cache restores by @anthonyshew in vercel/turborepo#14125

refactor: Rewire Opts to consume selectors by @anthonyshew in vercel/turborepo#14126

refactor: Extract task filtering into dedicated crate by @anthonyshew in vercel/turborepo#14127

refactor: Extract task access into dedicated crate by @anthonyshew in vercel/turborepo#14128

refactor: Extract MicrofrontendsConfigs by @anthonyshew in vercel/turborepo#14133

chore: Update with-rollup example by @vercel-gh-bot-5[bot] in vercel/turborepo#14123

refactor: Move unified turbo.json loader by @anthonyshew in vercel/turborepo#14134

refactor: Extract package watcher crate by @anthonyshew in vercel/turborepo#14135

refactor: Extract prune input DTO by @anthonyshew in vercel/turborepo#14136

fix: Ignore gitignored files in boundaries by @anthonyshew in vercel/turborepo#14137

fix: Stabilize boundaries tag order in prune by @anthonyshew in vercel/turborepo#14138

fix: Normalize affected task input globs by @anthonyshew in vercel/turborepo#14140

chore: Release Turborepo 2.11.3-canary.3 by @github-actions[bot] in vercel/turborepo#14141

refactor: Extract prune orchestration by @anthonyshew in vercel/turborepo#14142

ci: Update Node.js test matrices by @anthonyshew in vercel/turborepo#14139

refactor: Add Turborepo run context crate by @anthonyshew in vercel/turborepo#14143

refactor: Add repository run context by @anthonyshew in vercel/turborepo#14144

refactor: Use RepoContext in task graph visitor by @anthonyshew in vercel/turborepo#14145

refactor: Extract repository discovery from run builder by @anthonyshew in vercel/turborepo#14146

refactor: Extract run execution context construction by @anthonyshew in vercel/turborepo#14147

refactor: Extract run services construction by @anthonyshew in vercel/turborepo#14148

refactor: Promote task graph to dedicated crate by @anthonyshew in vercel/turborepo#14150

refactor: Extract run options into dedicated crate by @anthonyshew in vercel/turborepo#14152

docs: Remove duplicated word in the 1.9 blog post by @Neekoras in vercel/turborepo#14129

refactor: Promote run and watch to dedicated crates by @anthonyshew in vercel/turborepo#14153

refactor: Extract run command orchestration by @anthonyshew in vercel/turborepo#14154

refactor: Rename turborepo-lib to turborepo-cli by @anthonyshew in vercel/turborepo#14155

refactor: Slim query API interface by @anthonyshew in vercel/turborepo#14157

fix(affected): Treat root internal dependency changes as global by @anthonyshew in vercel/turborepo#14156

refactor: Move engine validation into turborepo-engine by @anthonyshew in vercel/turborepo#14158

test: Harden weak tests and shared assertion helpers by @anthonyshew in vercel/turborepo#14159

... (truncated)

Commits

0b053aa publish 2.11.3 to registry
fde6637 fix: Stop with tasks when parent exits (#14163)
fb2fb0c chore: Release Turborepo 2.11.3-canary.4 (#14162)
dd1d31a perf: Reuse parsed lockfile during lazy graph loading (#14161)
c079ed3 chore: Update with-rsbuild-module-federation example (#14160)
ad8379b test: Harden weak tests and shared assertion helpers (#14159)
4f23af2 refactor: Move engine validation into turborepo-engine (#14158)
69b7c6b fix(affected): Treat root internal dependency changes as global (#14156)
5614369 refactor: Slim query API interface (#14157)
f81062f refactor: Rename turborepo-lib to turborepo-cli (#14155)
Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.1127.0 to 3.1139.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1139.0

3.1139.0(2026-09-23)

New Features

clients: update client endpoints as of 2026-09-23 (557cad53)

client-billing: Added the ListBillingViewSegments API, which returns billing view segment information for a specified billing view ARN and time range. This API enables customers and integrated tools to programmatically determine the billing context of their accounts. (aa679a98)

client-network-security-manager: AWS Network Security Manager is a new service that helps you centrally configure, deploy, and continuously enforce security policies on network security services across the accounts and resources in your AWS Organization. (e07a9b6d)

client-payment-cryptography-data: Adds asymmetric key support to ReEncryptData for re-encrypting data between RSA and symmetric data encryption keys. (3ce62583)

client-connecthealth: Multi language support with code switching, custom template sectionHeader now allows underscores. (b4256a32)

client-mediaconvert: This release adds support for SMPTE 337M audio passthrough, compositing up to five motion graphic overlays in a single output, and controlling how passthrough video is segmented in ABR outputs. It also adds 3GP, 3G2, AAC, AC-3, and E-AC-3 as supported input containers for the Probe operation. (bed45e63)

client-imagebuilder: Documentation update for EC2 Image Builder - adds API request and response examples for all operations, improves descriptions throughout, and corrects response field patterns for image versions and workflow ARNs. (12a03c02)

client-kinesis: Amazon Kinesis Data Streams now supports service managed record distribution for on demand streams. Set the record distribution strategy to AUTO to evenly distribute records across shards. Configure it at stream creation with CreateStream or update anytime with UpdateStreamRecordDistributionStrategy (c556a9e4)

client-mediapackagev2: This release adds support for signalling start and end in the ContentKeyPeriod element in key request from MediaPackageV2 (608b4b1e)

client-lex-models-v2: Adds support for speaker diarization on Amazon Lex V2 bot locales. Speaker diarization keeps your bot on the primary (loudest) speaker during a streaming voice conversation, so background voices do not start a turn or interrupt a prompt. (6da33581)

For list of updated packages, view updated-packages.md in assets-3.1139.0.zip

v3.1138.0

3.1138.0(2026-09-22)

Chores

codegen: sync for MetricsRecorder support and core error/retry fixes (#8312) (9a104768)

middleware-sdk-s3: add feature ID 'S3_REGION_REDIRECT' (#8311) (f8b0f8d3)

New Features

clients: update client endpoints as of 2026-09-22 (e854d54a)

client-glue: Adding two new fields for Glue Materialized Views feature - (1) SubObjectsStatistics and (2) SparkPipelineInfo. (32b7228c)

client-cloudwatchomni: Amazon CloudWatch Omni is now generally available, an AI-powered unified observability for AI agents, applications, and infrastructure. As part of it, organization centralization rules now support cross-account context graph centralization. (f4c9a42a)

client-observabilityadmin: Amazon CloudWatch Omni is now generally available, an AI-powered unified observability for AI agents, applications, and infrastructure. Centralization now supports context graph for multi-account resource discovery, and dataset integrations makes logs available in CloudWatch datasets. (a24414c0)

client-ec2: Amazon EC2 now supports quote-based start date changes for future-dated Capacity Reservations (f1cb11a8)

client-quicksight: Adds support for granular custom permissions on 28 action connectors, including Gmail, Google Drive, Google Sheets, Airtable, and Dropbox. Administrators can now allow or deny individual connector operations instead of all action connectors at once. (7f02673f)

client-sso-admin: AWS IAM Identity Center now returns PrimaryRegion and Regions in the DescribeInstance response, providing information about replicated instances, and returns IdentityStoreArn in both the ListInstances and DescribeInstance responses. (83be3d86)

client-api-gateway: API Gateway now supports two new security policies for REST APIs and custom domain names, SecurityPolicy-TLS13-1-2-Ext2-PQ-2025-09 (TLS 1.3 1.2 with post-quantum cryptography) and SecurityPolicy-TLS13-1-2-Ext2-FIPS-PQ-2025-09 (adds FIPS). Both retain legacy algorithms for backward compatibility. (924dc413)

For list of updated packages, view updated-packages.md in assets-3.1138.0.zip

v3.1137.0

3.1137.0(2026-09-21)

New Features

... (truncated)

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1139.0 (2026-09-23)

Note: Version bump only for package @aws-sdk/client-s3

3.1138.0 (2026-09-22)

Note: Version bump only for package @aws-sdk/client-s3

3.1137.0 (2026-09-21)

Note: Version bump only for package @aws-sdk/client-s3

3.1136.0 (2026-09-18)

Note: Version bump only for package @aws-sdk/client-s3

3.1135.0 (2026-09-17)

Note: Version bump only for package @aws-sdk/client-s3

3.1134.0 (2026-09-16)

Note: Version bump only for package @aws-sdk/client-s3

3.1133.0 (2026-09-15)

... (truncated)

Commits

03d54a8 Publish v3.1139.0
c68e50e Publish v3.1138.0
9a10476 chore(codegen): sync for MetricsRecorder support and core error/retry fixes (...
6b43247 Publish v3.1137.0
d6b94db Publish v3.1136.0
2d5f18d Publish v3.1135.0
0d6310b Publish v3.1134.0
615a1ca Publish v3.1133.0
99b4bd0 Publish v3.1132.0
33f2cc7 Publish v3.1131.0
Additional commits viewable in compare view

Updates @aws-sdk/s3-request-presigner from 3.1127.0 to 3.1139.0

Release notes

Sourced from @aws-sdk/s3-request-presigner's releases.

v3.1139.0

3.1139.0(2026-09-23)

New Features

clients: update client endpoints as of 2026-09-23 (557cad53)

client-billing: Added the ListBillingViewSegments API, which returns billing view segment information for a specified billing view ARN and time range. This API enables customers and integrated tools to programmatically determine the billing context of their accounts. (aa679a98)

client-network-security-manager: AWS Network Security Manager is a new service that helps you centrally configure, deploy, and continuously enforce security policies on network security services across the accounts and resources in your AWS Organization. (e07a9b6d)

client-payment-cryptography-data: Adds asymmetric key support to ReEncryptData for re-encrypting data between RSA and symmetric data encryption keys. (3ce62583)

client-connecthealth: Multi language support with code switching, custom template sectionHeader now allows underscores. (b4256a32)

client-mediaconvert: This release adds support for SMPTE 337M audio passthrough, compositing up to five motion graphic overlays in a single output, and controlling how passthrough video is segmented in ABR outputs. It also adds 3GP, 3G2, AAC, AC-3, and E-AC-3 as supported input containers for the Probe operation. (bed45e63)

client-imagebuilder: Documentation update for EC2 Image Builder - adds API request and response examples for all operations, improves descriptions throughout, and corrects response field patterns for image versions and workflow ARNs. (12a03c02)

client-kinesis: Amazon Kinesis Data Streams now supports service managed record distribution for on demand streams. Set the record distribution strategy to AUTO to evenly distribute records across shards. Configure it at stream creation with CreateStream or update anytime with UpdateStreamRecordDistributionStrategy (c556a9e4)

client-mediapackagev2: This release adds support for signalling start and end in the ContentKeyPeriod element in key request from MediaPackageV2 (608b4b1e)

client-lex-models-v2: Adds support for speaker diarization on Amazon Lex V2 bot locales. Speaker diarization keeps your bot on the primary (loudest) speaker during a streaming voice conversation, so background voices do not start a turn or interrupt a prompt. (6da33581)

For list of updated packages, view updated-packages.md in assets-3.1139.0.zip

v3.1138.0

3.1138.0(2026-09-22)

Chores

codegen: sync for MetricsRecorder support and core error/retry fixes (#8312) (9a104768)

middleware-sdk-s3: add feature ID 'S3_REGION_REDIRECT' (#8311) (f8b0f8d3)

New Features

clients: update client endpoints as of 2026-09-22 (e854d54a)

client-glue: Adding two new fields for Glue Materialized Views feature - (1) SubObjectsStatistics and (2) SparkPipelineInfo. (32b7228c)

client-cloudwatchomni: Amazon CloudWatch Omni is now generally available, an AI-powered unified observability for AI agents, applications, and infrastructure. As part of it, organization centralization rules now support cross-account context graph centralization. (f4c9a42a)

client-observabilityadmin: Amazon CloudWatch Omni is now generally available, an AI-powered unified observability for AI agents, applications, and infrastructure. Centralization now supports context graph for multi-account resource discovery, and dataset integrations makes logs available in CloudWatch datasets. (a24414c0)

client-ec2: Amazon EC2 now supports quote-based start date changes for future-dated Capacity Reservations (f1cb11a8)

client-quicksight: Adds support for granular custom permissions on 28 action connectors, including Gmail, Google Drive, Google Sheets, Airtable, and Dropbox. Administrators can now allow or deny individual connector operations instead of all action connectors at once. (7f02673f)

client-sso-admin: AWS IAM Identity Center now returns PrimaryRegion and Regions in the DescribeInstance response, providing information about replicated instances, and returns IdentityStoreArn in both the ListInstances and DescribeInstance responses. (83be3d86)

client-api-gateway: API Gateway now supports two new security policies for REST APIs and custom domain names, SecurityPolicy-TLS13-1-2-Ext2-PQ-2025-09 (TLS 1.3 1.2 with post-quantum cryptography) and SecurityPolicy-TLS13-1-2-Ext2-FIPS-PQ-2025-09 (adds FIPS). Both retain legacy algorithms for backward compatibility. (924dc413)

For list of updated packages, view updated-packages.md in assets-3.1138.0.zip

v3.1137.0

3.1137.0(2026-09-21)

New Features

... (truncated)

Changelog

Sourced from @aws-sdk/s3-request-presigner's changelog.

3.1139.0 (2026-09-23)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1138.0 (2026-09-22)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1137.0 (2026-09-21)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1136.0 (2026-09-18)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1135.0 (2026-09-17)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1134.0 (2026-09-16)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1133.0 (2026-09-15)

... (truncated)

Commits

03d54a8 Publish v3.1139.0
c68e50e Publish v3.1138.0
9a10476 chore(codegen): sync for MetricsRecorder support and core error/retry fixes (...
6b43247 Publish v3.1137.0
d6b94db Publish v3.1136.0
2d5f18d Publish v3.1135.0
0d6310b Publish v3.1134.0
615a1ca Publish v3.1133.0
99b4bd0 Publish v3.1132.0
33f2cc7 Publish v3.1131.0
Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.30.1

Release notes

Sourced from @modelcontextprotocol/sdk's releases.

1.30.1

What's Changed

[v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON-RPC batch length by @maxisbey in modelcontextprotocol/typescript-sdk#2717

fix(auth): preserve resource URI without trailing slash (#1968) by @MukundaKatta in modelcontextprotocol/typescript-sdk#1972

chore: bump version to 1.30.1 by @claude[bot] in modelcontextprotocol/typescript-sdk#2848

New Contributors

@MukundaKatta made their firs...
Description has been truncated

…dates Bumps the patch-minor group with 22 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.12` | `2.5.14` | | [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.34.0` | `6.38.0` | | [turbo](https://github.com/vercel/turborepo) | `2.10.12` | `2.11.3` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1127.0` | `3.1139.0` | | [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1127.0` | `3.1139.0` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.30.1` | | [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.9` | | [meilisearch](https://github.com/meilisearch/meilisearch-js) | `0.60.0` | `0.62.0` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.103.2` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.10` | `3.14.13` | | [centrifuge](https://github.com/centrifugal/centrifuge-js) | `5.7.3` | `5.7.4` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.41.0` | `1.48.0` | | [motion](https://github.com/motiondivision/motion) | `13.2.0` | `13.4.2` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.87.0` | `7.88.0` | | [react-i18next](https://github.com/i18next/react-i18next) | `17.0.13` | `17.0.15` | | [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `8.3.1` | `8.4.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [kysely](https://github.com/kysely-org/kysely) | `0.28.17` | `0.29.6` | Updates `@biomejs/biome` from 2.5.12 to 2.5.14 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/[email protected]/packages/@biomejs/biome) Updates `knip` from 6.34.0 to 6.38.0 - [Release notes](https://github.com/webpro-nl/knip/releases) - [Commits](https://github.com/webpro-nl/knip/commits/[email protected]/packages/knip) Updates `turbo` from 2.10.12 to 2.11.3 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.10.12...v2.11.3) Updates `@aws-sdk/client-s3` from 3.1127.0 to 3.1139.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1139.0/clients/client-s3) Updates `@aws-sdk/s3-request-presigner` from 3.1127.0 to 3.1139.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1139.0/packages/s3-request-presigner) Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.30.1 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.30.1) Updates `hono` from 4.13.7 to 4.13.9 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.7...v4.13.9) Updates `meilisearch` from 0.60.0 to 0.62.0 - [Release notes](https://github.com/meilisearch/meilisearch-js/releases) - [Commits](meilisearch/meilisearch-js@v0.60.0...v0.62.0) Updates `@tanstack/react-query` from 5.102.8 to 5.103.2 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/react-query) Updates `@tanstack/react-virtual` from 3.14.10 to 3.14.13 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/[email protected]/packages/react-virtual) Updates `centrifuge` from 5.7.3 to 5.7.4 - [Release notes](https://github.com/centrifugal/centrifuge-js/releases) - [Changelog](https://github.com/centrifugal/centrifuge-js/blob/master/CHANGELOG.md) - [Commits](centrifugal/centrifuge-js@5.7.3...5.7.4) Updates `lucide-react` from 1.41.0 to 1.48.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.48.0/packages/lucide-react) Updates `motion` from 13.2.0 to 13.4.2 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v13.2.0...v13.4.2) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-hook-form` from 7.87.0 to 7.88.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.87.0...v7.88.0) Updates `react-i18next` from 17.0.13 to 17.0.15 - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v17.0.13...v17.0.15) Updates `react-router` from 8.3.1 to 8.4.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/[email protected]/packages/tailwind-merge) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `kysely` from 0.28.17 to 0.29.6 - [Release notes](https://github.com/kysely-org/kysely/releases) - [Commits](kysely-org/kysely@v0.28.17...v0.29.6) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-minor - dependency-name: knip dependency-version: 6.38.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: turbo dependency-version: 2.11.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1139.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@aws-sdk/s3-request-presigner" dependency-version: 3.1139.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.30.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-minor - dependency-name: hono dependency-version: 4.13.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-minor - dependency-name: meilisearch dependency-version: 0.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@tanstack/react-query" dependency-version: 5.103.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@tanstack/react-virtual" dependency-version: 3.14.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-minor - dependency-name: centrifuge dependency-version: 5.7.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-minor - dependency-name: lucide-react dependency-version: 1.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: motion dependency-version: 13.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: react-hook-form dependency-version: 7.88.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: react-i18next dependency-version: 17.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-minor - dependency-name: react-router dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: kysely dependency-version: 0.29.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2026-10-04T08:23:35Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 27, 2026

dependabot Bot closed this Oct 4, 2026

dependabot Bot deleted the dependabot/bun/patch-minor-a59a833863 branch October 4, 2026 08:23

Navigation Menu

Repository navigation

chore(deps): bump the patch-minor group across 1 directory with 22 updates - #410

chore(deps): bump the patch-minor group across 1 directory with 22 updates#410
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/patch-minor-a59a833863

dependabot Bot commented on behalf of github Sep 27, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.14

2.5.14

Patch Changes

2.5.14

Patch Changes

Release 6.38.0

Release 6.37.0

Release 6.36.0

Turborepo v2.11.3

What's Changed

Changelog

v3.1139.0

3.1139.0(2026-09-23)

New Features

v3.1138.0

3.1138.0(2026-09-22)

Chores

New Features

v3.1137.0

3.1137.0(2026-09-21)

New Features

3.1139.0 (2026-09-23)

3.1138.0 (2026-09-22)

3.1137.0 (2026-09-21)

3.1136.0 (2026-09-18)

3.1135.0 (2026-09-17)

3.1134.0 (2026-09-16)

3.1133.0 (2026-09-15)

v3.1139.0

3.1139.0(2026-09-23)

New Features

v3.1138.0

3.1138.0(2026-09-22)

Chores

New Features

v3.1137.0

3.1137.0(2026-09-21)

New Features

3.1139.0 (2026-09-23)

3.1138.0 (2026-09-22)

3.1137.0 (2026-09-21)

3.1136.0 (2026-09-18)

3.1135.0 (2026-09-17)

3.1134.0 (2026-09-16)

3.1133.0 (2026-09-15)

1.30.1

What's Changed

New Contributors

Uh oh!

dependabot Bot commented on behalf of github Oct 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 27, 2026 •

edited

Loading