chore(deps): bump the patch-minor group across 1 directory with 23 updates by dependabot[bot] · Pull Request #412 · ygncode/wateaminbox

dependabot · 2026-10-04T08:24:54Z

Bumps the patch-minor group with 23 updates in the / directory:

Package	From	To
@biomejs/biome	`2.5.12`	`2.5.15`
knip	`6.34.0`	`6.39.0`
turbo	`2.10.12`	`2.11.6`
@aws-sdk/client-s3	`3.1127.0`	`3.1144.0`
@aws-sdk/s3-request-presigner	`3.1127.0`	`3.1144.0`
@modelcontextprotocol/sdk	`1.30.0`	`1.31.0`
hono	`4.13.7`	`4.13.12`
meilisearch	`0.60.0`	`0.62.0`
@tanstack/react-query	`5.102.8`	`5.104.0`
@tanstack/react-virtual	`3.14.10`	`3.14.13`
centrifuge	`5.7.3`	`5.7.4`
lucide-react	`1.41.0`	`1.49.0`
motion	`13.2.0`	`13.4.6`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
react-hook-form	`7.87.0`	`7.89.0`
react-i18next	`17.0.13`	`17.0.15`
react-router	`8.3.1`	`8.4.0`
tailwind-merge	`3.6.0`	`3.7.0`
@types/react	`19.2.18`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
kysely	`0.28.17`	`0.29.6`
pg	`8.23.0`	`8.23.1`

Updates @biomejs/biome from 2.5.12 to 2.5.15

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.15

2.5.15

Patch Changes
#10634 b436ba0 Thanks @subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

For example, the following snippet triggers the rule.
function Component({ items = [] }) {
  return items;
}
#11956 faa8b37 Thanks @dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.
<script>
  export let name;
</script>
#10816 1b9479e Thanks @Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034
{
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}
#11960 1fdb5c2 Thanks @dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.
import { page } from "$app/stores";

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.15

Patch Changes
#10634 b436ba0 Thanks @subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

For example, the following snippet triggers the rule.
function Component({ items = [] }) {
  return items;
}
#11956 faa8b37 Thanks @dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.
<script>
  export let name;
</script>
#10816 1b9479e Thanks @Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034
{
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}
#11960 1fdb5c2 Thanks @dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.
import { page } from "$app/stores";
#11723 3b429d1 Thanks @m1handr! - Fixed #11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.

... (truncated)

Commits

0b4c11f ci: release (#11815)
ad5b362 feat: adds noAstroConflictingSetDirectives rule for .astro (#11494)
034366d chore: update codspeed logo in readme (#12019)
717db8c feat(lint): add noMisplacedListElements (#11917)
089bde0 feat(lint/js): add useStrictBooleanExpressions (#11750)
1fdb5c2 feat(lint/js/svelte): add useSvelteKitRuneImports lint rule (#11960)
faa8b37 feat(lint/js/svelte): add noSvelteExportLet (#11956)
b2b4400 chore: update sponsors (#11973)
ff4c4dd feat(lint/js): add noMeaninglessVoidOperator (#11732)
1b9479e feat(lint): add useLogicalProperties rule (#10816)
Additional commits viewable in compare view

Updates knip from 6.34.0 to 6.39.0

Release notes

Sourced from knip's releases.

Release 6.39.0

Add Railway plugin (#2026) (6da55767eb419701dd32f93789a00e8bdc915276) - thanks @jonahsnider!

Update query snapshot (8877d3cf35943e17a617e1197fa46c5a43342479)

Fix excluded tags on entry re-exports (#2062) (b22e27543cb8dd4ba7ec97c70ccfd06bc8f16614) - thanks @devYRPauli!

Update rolldown snapshot (3a45c806e1c1b7ceb078903652c8631566400096)

Skip synthetic self-imports in Vue and Nuxt auto-import compilers (#2067) (d912d807e41f140bbc79bafce6882b3c05dec6ff) - thanks @bytedoe!

fix(angular): keep other projects' inputs when one has no architect (#2064) (af3f42e9772e9937fd71b7557d3b54aee1db339a) - thanks @Cayan!

fix(vite): resolve nested HTML entry points in multi-page apps (#1988) (4648aefe56e7bac521bb6f17189473b46f8ff00f) - thanks @DreamLongYT!

Improve Rstest plugin support (#2068) (add87992e9dfe2f3c22e4c6ba7fa257d7f0151cf) - thanks @fi3ework!

Handle profiles, formatters and require paths in Cucumber plugin (#2065) (2ad39fcf02e067b4bdfc06a658bf4bf5abeea764) - thanks @giaBaoJS!

fix(playwright): resolve globalSetup/globalTeardown from config dir (#2076) (7060bb968339680d694275413aba2833e4521ed9) - thanks @alokn!

fix: read entry export tags under the re-exported names (#2069) (1698683df95a96b3515795eb664aacf030042d7b) - thanks @devYRPauli!

Release 6.38.0

Include co-authors in docs contributor list (0c334100df59d89a512ad598ec50e7f62f6da0c3)

Filter bots and agents from docs contributors (617f70d8179c6b8668ca41fe5df77ced5e2b37c0)

Update Eve plugin conventions (#2049) (260dbb91a85f3a3bc2727e8f255d73df3737552c) - thanks @matchai!

Add args example to that doc page (50b271b98fc930a05a3b045a2f691486f9f06528)

Add Turborepo plugin (#2055) (e49d3db05f1d69ce7db3efcb8467a4af63c27379) - thanks @changbaebang!

Support import-x/* settings in ESLint plugin (#2050) (1a34cf82a3d6a1202717ef910bedba55838e9dd9) - thanks @bytedoe!

Resolve file option in Mocha configuration files (#2051) (9b5c5f60468c8a92a3e74adca5c0931f008677af) - thanks @giaBaoJS!

Support oxlint extends (#2054) (a149a98219bb14b15f446fc5f8c4f815e28b2183) - thanks @matthewnitschke-wk!

Fix import.meta handling in built-in compilers (#2059) (8b0c85076bf3dce15ef5f3c0c4e58bfefdf59ded) - thanks @vdavid!

Fix tag hints for enum and namespace members (#2061) (8a8805e48945863248429d18b7f6c4e4b7dc9ebd) - thanks @devYRPauli!

Flag unused member tags in tagged enums and namespaces (584e53ff3e0846fbfe04fa5b5bfefe2420576a34)

feat: resolve MDX content mapper remarkPlugins (#2060) (34dbccf25359f9e9fefe9d0be6ef2ec0252223cc) - thanks @gioboa!

Refactor and separate concerns w/ new typescript-content-mapper plugin (11e94509bd0f350d747facf4003fc5b248d1b02d)

Resolve mdx content mapper providerImportSource (7b5825117f97f2f87b7141509a254f88d0957cf7)

Fix config → entry in plop plugin (25a380c9e1165b76583d69b48b5fa7cdf5db0ae2)

Release 6.37.0

fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#2048) (06a68fcf99a90e559daeb0b8fb2d24e173124774) - thanks @RobHannay!

fix: enable JSX in the config loader (#1959) (5b21dc9192f773613d1c5db8edf35f0a68820268) - thanks @addielaruee!

Match binaries only to their actual dependency providers (c5bdb69ccbcb7e1056233f346d0ada3495d1013d)

Preserve executable references across package manager commands (54af171638db22f5d903faae05c37c2ea6adc869)

Correct binary provider metadata in Relay fixtures (e67dfcb96d055c27be9c8601e077656855bb632b)

Separate shell binary expectations from reporting exemptions (resolve #2022) (c1d7d75a3529d9faff7f4c0df11dd0ca1bdfb149)

Respect npx no-install flags before the executable (4237010c9a834eb8b04f4a528c76d10a5c38ee98)

Update dependencies (038ea179f7d6bf7ca43bc5daf553a68b13a9067c)

Remove npm auth check now that's in release-it (4aaf77c58004ac64063a1982b98e53107c2ebe93)

Fix --format name resolution in the ESLint plugin (#2046) (1269e98bb700384811fadc124d69ea720832037e) - thanks @bytedoe!

Release 6.36.0

Add @tailwindcss/webpack as Tailwind plugin enabler (#2027) (b5ac0cf734dda3c6c6c51c817981dfc558b7c582) - thanks @igas!

Fix Next.js Turbopack loader dependencies (23419b4edfd48796dd484fa880e1bad49a043d2e)

Explain ambiguous star exports in traces (#2025) (3c2c1a53f9c2b7ff3057a4e46761791979e0b09c) - thanks @gioboa!

Fix eslintrc parserOptions.parser handling in ESLint plugin (#2028) (c79463cec81d09518eda325ec00e6f12327dea8d) - thanks @bytedoe!

fix(compilers): require word boundary around import keyword (#2029) (68bbe51c39b564022b63942bc83cb570778cca00) - thanks @thanadolps!

fix: recover from corrupt cache file (#2034) (30ff7568c84e0a6731ca634a52314228d23d1a2b) - thanks @gioboa!

fix: fix trailing comma on dependency removal (#2033) (adfaf4f78878b6d55b0939a92d70a1fbb0ae1240) - thanks @gioboa!

... (truncated)

Commits

ed30e5b Release [email protected]
1698683 fix: read entry export tags under the re-exported names (#2069)
7060bb9 fix(playwright): resolve globalSetup/globalTeardown from config dir (#2076)
2ad39fc Handle profiles, formatters and require paths in Cucumber plugin (#2065)
add8799 Improve Rstest plugin support (#2068)
4648aef fix(vite): resolve nested HTML entry points in multi-page apps (#1988)
af3f42e fix(angular): keep other projects' inputs when one has no architect (#2064)
d912d80 Skip synthetic self-imports in Vue and Nuxt auto-import compilers (#2067)
b22e275 Fix excluded tags on entry re-exports (#2062)
6da5576 Add Railway plugin (#2026)
Additional commits viewable in compare view

Updates turbo from 2.10.12 to 2.11.6

Release notes

Sourced from turbo's releases.

Turborepo v2.11.6

What's Changed

Changelog

chore: Release Turborepo 2.11.5 by @github-actions[bot] in vercel/turborepo#14329

fix: Upgrade standalone turbo on installer reruns by @anthonyshew in vercel/turborepo#14330

test: Deflake OpenTelemetry and PTY shutdown tests by @anthonyshew in vercel/turborepo#14331

docs: Document standalone turbo installation by @anthonyshew in vercel/turborepo#14332

ci: Install standalone turbo on Windows with PowerShell by @anthonyshew in vercel/turborepo#14334

fix: Keep Yarn patch resolutions with npm protocol selectors in prune by @anthonyshew in vercel/turborepo#14337

chore: Update with-tailwind example by @vercel-gh-bot-5[bot] in vercel/turborepo#14264

ci: Resolve latest turbo release with workflow token by @anthonyshew in vercel/turborepo#14339

chore: Update with-ultracite example by @vercel-gh-bot-5[bot] in vercel/turborepo#14335

fix: Match production MFE negative lookaheads locally by @kitfoster in vercel/turborepo#13496

docs: Add missing system environment variables and run flags by @BABTUNA in vercel/turborepo#13811

fix: Normalize task inputs consistently for affected detection and hashing by @anthonyshew in vercel/turborepo#14341

feat: Add task tags with configuration inheritance by @anthonyshew in vercel/turborepo#14342

fix: Upgrade brace-expansion to latest compatible releases by @anthonyshew in vercel/turborepo#14347

docs: Point security.txt to Vercel HackerOne program by @swarnava in vercel/turborepo#14346

test: Deflake untracked scan-scope assertions by @anthonyshew in vercel/turborepo#14348

feat: Expose task and package tags in query by @anthonyshew in vercel/turborepo#14343

feat: Filter query tasks and packages by tags by @anthonyshew in vercel/turborepo#14344

feat: Filter tasks by tags in the CLI by @anthonyshew in vercel/turborepo#14345

fix: Complete task query metadata for non-script entrypoints by @anthonyshew in vercel/turborepo#14350

fix: Infer single-package mode for query commands by @anthonyshew in vercel/turborepo#14351

New Contributors

@swarnava made their first contribution in vercel/turborepo#14346

Full Changelog: vercel/turborepo@v2.11.5...v2.11.6

Turborepo v2.11.5

What's Changed

Changelog

chore: Release Turborepo 2.11.4 by @github-actions[bot] in vercel/turborepo#14231

test: Move Python opt-in hint into filter contracts by @anthonyshew in vercel/turborepo#14228

test: Move dependency-output summary assertion into contract by @anthonyshew in vercel/turborepo#14230

test: Move dependency-output selection and validation cases to engine contracts by @anthonyshew in vercel/turborepo#14232

test: Move Cargo exclude-only scope coverage by @anthonyshew in vercel/turborepo#14238

test: Move Cargo cache-authority cases to contracts by @anthonyshew in vercel/turborepo#14240

test: Move JIT dependency graph scenario into engine contract by @anthonyshew in vercel/turborepo#14235

test: Move dependency-output hash cases into task-hash contracts by @anthonyshew in vercel/turborepo#14233

test: Move Cargo task-filter cases into crate contracts by @anthonyshew in vercel/turborepo#14239

test: Move JIT input hash timing cases into task-hash contracts by @anthonyshew in vercel/turborepo#14234

test: Move package input normalization cases into engine contracts by @anthonyshew in vercel/turborepo#14236

test: Move structured startup and JIT input cases into contracts by @anthonyshew in vercel/turborepo#14237

fix: Back off remote artifact requests during outages by @anthonyshew in vercel/turborepo#14222

... (truncated)

Commits

fcd1213 publish 2.11.6 to registry
90718d1 fix: Infer single-package mode for query commands (#14351)
a409ce5 fix: Complete task query metadata for non-script entrypoints (#14350)
bc7c148 feat: Filter tasks by tags in the CLI (#14345)
49d1607 feat: Filter query tasks and packages by tags (#14344)
fba5351 feat: Expose task and package tags in query (#14343)
b4570e0 test: Deflake untracked scan-scope assertions (#14348)
fa107aa docs: Point security.txt to Vercel HackerOne program (#14346)
0deb0e7 fix: Upgrade brace-expansion to latest compatible releases (#14347)
d44edbe feat: Add task tags with configuration inheritance (#14342)
Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.1127.0 to 3.1144.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1144.0

3.1144.0(2026-09-30)

Documentation Changes

client-agent-registry: Minor doc update for the AWS Agent Registry Custom metadata SearchDiscoverableRegistryRecords API (fd88a846)

New Features

clients: update client endpoints as of 2026-09-30 (d13ef6af)

client-organizations: Add support for policy operations on the GUARDDUTY POLICY policy type. (407089b4)

client-s3: Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others. (82bbbdce)

client-observabilityadmin: Enablement for Bedrock PaymentManager logs via Observability Admin Telemetry Rule (1f287614)

client-datazone: Support for setting notebook run notification configurations (e15e2d5b)

client-guardduty: GuardDuty AWS Organizations policy integration. GetDetector and GetMemberDetectors now show whether a GuardDuty policy manages a feature. (10339365)

client-cloudwatch-logs: Amazon CloudWatch Logs now supports an optional roleArn parameter on PutDeliveryDestination for X-Ray trace delivery destinations, specifying the IAM role to assume when delivering traces. (735bb3d8)

client-bedrock-agentcore-control: This release adds support for private certificate authorities on Amazon Bedrock AgentCore Gateway targets. The new certificateConfigurations parameter on CreateGatewayTarget and UpdateGatewayTarget references a PEM-encoded CA certificate in Amazon S3 or AWS Secrets Manager. (fb5fa19b)

client-glue: Enable Catalog ID for crawler, column statistics and materialized views. (10b32a9f)

client-ecs: Releasing VPCL for BlueGreen ecs deployments. (924733c4)

client-batch: AWS Batch adds support for Amazon EKS access entries on EKS compute environments through the new accessEntry setting in CreateComputeEnvironment and UpdateComputeEnvironment. (946708d2)

client-connect: Amazon Connect Rules can now trigger in-app notifications to users as a rule action. Notification character limit was increased to 500 visible characters. (092994bd)

client-account: This release adds support for verifying an AWS account's primary contact phone number. SendPhoneNumberVerification sends a one-time code by SMS, VerifyPhoneNumber validates it, and GetContactInformation now returns the verification status. (b7923799)

client-sagemaker: This feature enables customers to modify their accounting database via API. (1e6c93d8)

client-dynamodb: Adds support for filtering exported table data using FilterExpression, ProjectionExpression and KeyConditionExpression with ExportTableToPointInTime. (b24fe220)

client-global-accelerator: IpSets now include the Network Zone for each Static IP address. (e7ddc104)

client-bedrock: Amazon Bedrock Automated Reasoning policies now accept Unicode letters in identifier names such as type names, type value names, and variable names. You can now author policies in non-English languages using accented or non-Latin characters. (dfd92215)

client-s3vectors: Amazon S3 Vectors now supports metadata prefiltering, providing higher recall on filtered queries. (cec579d0)

For list of updated packages, view updated-packages.md in assets-3.1144.0.zip

v3.1143.0

3.1143.0(2026-09-29)

New Features

client-inspector2: The ListFindingAggregations API now includes Low, Informational, and Untriaged counts alongside the existing severity counts in SeverityCounts. (523ef402)

client-appstream: Add support for NVIDIA GRID driver version metadata in Workspace Applications image responses through the new ImageSoftwareMetadata field. (87e9c22f)

client-bedrock-agent-runtime: Amazon Bedrock Agentic Retrieve now supports the Bedrock Mantle (OpenAI Responses) endpoint via a new MantleFoundationModel configuration with an optional projectId. (9529fe9e)

client-sagemaker: Adds support for cpu flex type instances on SageMaker Training and Processing. Also contains minor updates to DescribeTrainingPlan to support ARN inputs. (ca45f9e9)

client-opensearch: Amazon OpenSearch Service now supports advisory pre-validations for domain config changes. Non-critical checks now surface as warnings you can acknowledge (via the new AcceptedWarnings parameter) and proceed, instead of hard-blocking. Severity is reported in change-progress and dry-run results. (2419dc69)

client-securityagent: Adds support for Azure DevOps and Bitbucket Data Center integration providers. (8fda1d16)

client-transfer: AWS Transfer Family now supports configuring up to three custom ports on public SFTP servers, instead of the single default port 22. You can also set each port's communication mode (server-talk-first or client-talk-first) so legacy and modern SFTP clients connect reliably. (b5745934)

client-mediatailor: AWS Elemental MediaTailor now supports beaconing configuration on playback configurations. In Insights reporting mode, MediaTailor will now gather client side beaconing metrics. Set the reporting mode to Disabled to turn this off. (99e75af3)

client-deadline: AWS Deadline Cloud now supports Docker software add-ons on service-managed fleets. Adds support for Open Job Description EXPR and Feature Bundle 1 job templates with typed job parameters and job, step, and parameter names up to 512 characters. (33fcaa7b)

client-identitystore: Add support for network access controls to restrict Identity Store API and SCIM access to trusted networks, optimistic locking for users and groups via resource revisions, and resource ARNs as identifiers in requests. (b1ec66e6)

client-elementalinference: Adds an extendedAnalysis setting to contextual metadata outputs to control detection of people, environments, brands, and on-screen text, and updates the summaryGeneration documentation. (c121ec60)

client-elasticache: Amazon ElastiCache Serverless now supports public endpoints for Valkey caches. With the new Connection Type parameter, you can create a serverless cache accessible over the internet without any VPC configuration. Public endpoint caches require IAM authentication. (c674d6c7)

... (truncated)

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1144.0 (2026-09-30)

Features

client-s3: Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others. (82bbbdc)

3.1143.0 (2026-09-29)

Note: Version bump only for package @aws-sdk/client-s3

3.1142.0 (2026-09-28)

Note: Version bump only for package @aws-sdk/client-s3

3.1141.0 (2026-09-25)

Note: Version bump only for package @aws-sdk/client-s3

3.1140.0 (2026-09-24)

Note: Version bump only for package @aws-sdk/client-s3

3.1139.0 (2026-09-23)

Note: Version bump only for package @aws-sdk/client-s3

... (truncated)

Commits

ce26281 Publish v3.1144.0
82bbbdc feat(client-s3): Amazon S3 adds a new optional S3 Inventory field, Intelligen...
81afad0 Publish v3.1143.0
c935fdd Publish v3.1142.0
5bc8d9a Publish v3.1141.0
6050a38 Publish v3.1140.0
03d54a8 Publish v3.1139.0
c68e50e Publish v3.1138.0
9a10476 chore(codegen): sync for MetricsRecorder support and core error/retry fixes (...
6b43247 Publish v3.1137.0
Additional commits viewable in compare view

Updates @aws-sdk/s3-request-presigner from 3.1127.0 to 3.1144.0

Release notes

Sourced from @aws-sdk/s3-request-presigner's releases.

v3.1144.0

3.1144.0(2026-09-30)

Documentation Changes

client-agent-registry: Minor doc update for the AWS Agent Registry Custom metadata SearchDiscoverableRegistryRecords API (fd88a846)

New Features

clients: update client endpoints as of 2026-09-30 (d13ef6af)

client-organizations: Add support for policy operations on the GUARDDUTY POLICY policy type. (407089b4)

client-s3: Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others. (82bbbdce)

client-observabilityadmin: Enablement for Bedrock PaymentManager logs via Observability Admin Telemetry Rule (1f287614)

client-datazone: Support for setting notebook run notification configurations (e15e2d5b)

client-guardduty: GuardDuty AWS Organizations policy integration. GetDetector and GetMemberDetectors now show whether a GuardDuty policy manages a feature. (10339365)

client-cloudwatch-logs: Amazon CloudWatch Logs now supports an optional roleArn parameter on PutDeliveryDestination for X-Ray trace delivery destinations, specifying the IAM role to assume when delivering traces. (735bb3d8)

client-bedrock-agentcore-control: This release adds support for private certificate authorities on Amazon Bedrock AgentCore Gateway targets. The new certificateConfigurations parameter on CreateGatewayTarget and UpdateGatewayTarget references a PEM-encoded CA certificate in Amazon S3 or AWS Secrets Manager. (fb5fa19b)

client-glue: Enable Catalog ID for crawler, column statistics and materialized views. (10b32a9f)

client-ecs: Releasing VPCL for BlueGreen ecs deployments. (924733c4)

client-batch: AWS Batch adds support for Amazon EKS access entries on EKS compute environments through the new accessEntry setting in CreateComputeEnvironment and UpdateComputeEnvironment. (946708d2)

client-connect: Amazon Connect Rules can now trigger in-app notifications to users as a rule action. Notification character limit was increased to 500 visible characters. (092994bd)

client-account: This release adds support for verifying an AWS account's primary contact phone number. SendPhoneNumberVerification sends a one-time code by SMS, VerifyPhoneNumber validates it, and GetContactInformation now returns the verification status. (b7923799)

client-sagemaker: This feature enables customers to modify their accounting database via API. (1e6c93d8)

client-dynamodb: Adds support for filtering exported table data using FilterExpression, ProjectionExpression and KeyConditionExpression with ExportTableToPointInTime. (b24fe220)

client-global-accelerator: IpSets now include the Network Zone for each Static IP address. (e7ddc104)

client-bedrock: Amazon Bedrock Automated Reasoning policies now accept Unicode letters in identifier names such as type names, type value names, and variable names. You can now author policies in non-English languages using accented or non-Latin characters. (dfd92215)

client-s3vectors: Amazon S3 Vectors now supports metadata prefiltering, providing higher recall on filtered queries. (cec579d0)

For list of updated packages, view updated-packages.md in assets-3.1144.0.zip

v3.1143.0

3.1143.0(2026-09-29)

New Features

client-inspector2: The ListFindingAggregations API now includes Low, Informational, and Untriaged counts alongside the existing severity counts in SeverityCounts. (523ef402)

client-appstream: Add support for NVIDIA GRID driver version metadata in Workspace Applications image responses through the new ImageSoftwareMetadata field. (87e9c22f)

client-bedrock-agent-runtime: Amazon Bedrock Agentic Retrieve now supports the Bedrock Mantle (OpenAI Responses) endpoint via a new MantleFoundationModel configuration with an optional projectId. (9529fe9e)

client-sagemaker: Adds support for cpu flex type instances on SageMaker Training and Processing. Also contains minor updates to DescribeTrainingPlan to support ARN inputs. (ca45f9e9)

client-opensearch: Amazon OpenSearch Service now supports advisory pre-validations for domain config changes. Non-critical checks now surface as warnings you can acknowledge (via the new AcceptedWarnings parameter) and proceed, instead of hard-blocking. Severity is reported in change-progress and dry-run results. (2419dc69)

client-securityagent: Adds support for Azure DevOps and Bitbucket Data Center integration providers. (8fda1d16)

client-transfer: AWS Transfer Family now supports configuring up to three custom ports on public SFTP servers, instead of the single default port 22. You can also set each port's communication mode (server-talk-first or client-talk-first) so legacy and modern SFTP clients connect reliably. (b5745934)

client-mediatailor: AWS Elemental MediaTailor now supports beaconing configuration on playback configurations. In Insights reporting mode, MediaTailor will now gather client side beaconing metrics. Set the reporting mode to Disabled to turn this off. (99e75af3)

client-deadline: AWS Deadline Cloud now supports Docker software add-ons on service-managed fleets. Adds support for Open Job Description EXPR and Feature Bundle 1 job templates with typed job parameters and job, step, and parameter names up to 512 characters. (33fcaa7b)

client-identitystore: Add support for network access controls to restrict Identity Store API and SCIM access to trusted networks, optimistic locking for users and groups via resource revisions, and resource ARNs as identifiers in requests. (b1ec66e6)

client-elementalinference: Adds an extendedAnalysis setting to contextual metadata outputs to control detection of people, environments, brands, and on-screen text, and updates the summaryGeneration documentation. (c121ec60)

client-elasticache: Amazon ElastiCache Serverless now supports public endpoints for Valkey caches. With the new Connection Type parameter, you can create a serverless cache accessible over the internet without any VPC configuration. Public endpoint caches require IAM authentication. (c674d6c7)

... (truncated)

Changelog

Sourced from @aws-sdk/s3-request-presigner's changelog.

3.1144.0 (2026-09-30)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1143.0 (2026-09-29)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1142.0 (2026-09-28)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1141.0 (2026-09-25)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1140.0 (2026-09-24)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1139.0 (2026-09-23)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1138.0 (2026-09-22)

... (truncated)

Commits

ce26281 Publish v3.1144.0
81afad0 Publish v3.1143.0
c935fdd Publish v3.1142.0
5bc8d9a Publish v3.1141.0
6050a38 Publish v3.1140.0
03d54a8 Publish v3.1139.0
c68e50e Publish v3.1138.0
9a10476 chore(codegen): sync for MetricsRecorder support and core error/retry fixes (...
6b43247 Publish v3.1137.0
d6b94db Publish v3.1136.0
Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.31.0

Release notes

Sourced from @modelcontextprotocol/sdk's releases.

1.31.0

Upgrade notes

Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.

Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

[v1.x] Bind stored OAuth credentials to the authorization server that issu...
Description has been truncated

…dates Bumps the patch-minor group with 23 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.12` | `2.5.15` | | [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.34.0` | `6.39.0` | | [turbo](https://github.com/vercel/turborepo) | `2.10.12` | `2.11.6` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1127.0` | `3.1144.0` | | [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1127.0` | `3.1144.0` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.31.0` | | [hono](https://github.com/honojs/hono) | `4.13.7` | `4.13.12` | | [meilisearch](https://github.com/meilisearch/meilisearch-js) | `0.60.0` | `0.62.0` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.8` | `5.104.0` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.10` | `3.14.13` | | [centrifuge](https://github.com/centrifugal/centrifuge-js) | `5.7.3` | `5.7.4` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.41.0` | `1.49.0` | | [motion](https://github.com/motiondivision/motion) | `13.2.0` | `13.4.6` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.87.0` | `7.89.0` | | [react-i18next](https://github.com/i18next/react-i18next) | `17.0.13` | `17.0.15` | | [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `8.3.1` | `8.4.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [kysely](https://github.com/kysely-org/kysely) | `0.28.17` | `0.29.6` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.23.0` | `8.23.1` | Updates `@biomejs/biome` from 2.5.12 to 2.5.15 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/[email protected]/packages/@biomejs/biome) Updates `knip` from 6.34.0 to 6.39.0 - [Release notes](https://github.com/webpro-nl/knip/releases) - [Commits](https://github.com/webpro-nl/knip/commits/[email protected]/packages/knip) Updates `turbo` from 2.10.12 to 2.11.6 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.10.12...v2.11.6) Updates `@aws-sdk/client-s3` from 3.1127.0 to 3.1144.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1144.0/clients/client-s3) Updates `@aws-sdk/s3-request-presigner` from 3.1127.0 to 3.1144.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1144.0/packages/s3-request-presigner) Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.31.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.31.0) Updates `hono` from 4.13.7 to 4.13.12 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.7...v4.13.12) Updates `meilisearch` from 0.60.0 to 0.62.0 - [Release notes](https://github.com/meilisearch/meilisearch-js/releases) - [Commits](meilisearch/meilisearch-js@v0.60.0...v0.62.0) Updates `@tanstack/react-query` from 5.102.8 to 5.104.0 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/react-query) Updates `@tanstack/react-virtual` from 3.14.10 to 3.14.13 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/[email protected]/packages/react-virtual) Updates `centrifuge` from 5.7.3 to 5.7.4 - [Release notes](https://github.com/centrifugal/centrifuge-js/releases) - [Changelog](https://github.com/centrifugal/centrifuge-js/blob/master/CHANGELOG.md) - [Commits](centrifugal/centrifuge-js@5.7.3...5.7.4) Updates `lucide-react` from 1.41.0 to 1.49.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.49.0/packages/lucide-react) Updates `motion` from 13.2.0 to 13.4.6 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v13.2.0...v13.4.6) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-hook-form` from 7.87.0 to 7.89.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.87.0...v7.89.0) Updates `react-i18next` from 17.0.13 to 17.0.15 - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v17.0.13...v17.0.15) Updates `react-router` from 8.3.1 to 8.4.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/[email protected]/packages/tailwind-merge) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `kysely` from 0.28.17 to 0.29.6 - [Release notes](https://github.com/kysely-org/kysely/releases) - [Commits](kysely-org/kysely@v0.28.17...v0.29.6) Updates `pg` from 8.23.0 to 8.23.1 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/[email protected]/packages/pg) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-minor - dependency-name: knip dependency-version: 6.39.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: turbo dependency-version: 2.11.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1144.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@aws-sdk/s3-request-presigner" dependency-version: 3.1144.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: hono dependency-version: 4.13.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-minor - dependency-name: meilisearch dependency-version: 0.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@tanstack/react-query" dependency-version: 5.104.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@tanstack/react-virtual" dependency-version: 3.14.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-minor - dependency-name: centrifuge dependency-version: 5.7.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-minor - dependency-name: lucide-react dependency-version: 1.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: motion dependency-version: 13.4.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: react-hook-form dependency-version: 7.89.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: react-i18next dependency-version: 17.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-minor - dependency-name: react-router dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: kysely dependency-version: 0.29.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor - dependency-name: pg dependency-version: 8.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-minor ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2026-10-11T08:26:07Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 4, 2026

dependabot Bot closed this Oct 11, 2026

dependabot Bot deleted the dependabot/bun/patch-minor-2ddec3484c branch October 11, 2026 08:26

Navigation Menu

Repository navigation

chore(deps): bump the patch-minor group across 1 directory with 23 updates - #412

chore(deps): bump the patch-minor group across 1 directory with 23 updates#412
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/patch-minor-2ddec3484c

dependabot Bot commented on behalf of github Oct 4, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.15

2.5.15

Patch Changes

2.5.15

Patch Changes

Release 6.39.0

Release 6.38.0

Release 6.37.0

Release 6.36.0

Turborepo v2.11.6

What's Changed

Changelog

New Contributors

Turborepo v2.11.5

What's Changed

Changelog

v3.1144.0

3.1144.0(2026-09-30)

Documentation Changes

New Features

v3.1143.0

3.1143.0(2026-09-29)

New Features

3.1144.0 (2026-09-30)

Features

3.1143.0 (2026-09-29)

3.1142.0 (2026-09-28)

3.1141.0 (2026-09-25)

3.1140.0 (2026-09-24)

3.1139.0 (2026-09-23)

v3.1144.0

3.1144.0(2026-09-30)

Documentation Changes

New Features

v3.1143.0

3.1143.0(2026-09-29)

New Features

3.1144.0 (2026-09-30)

3.1143.0 (2026-09-29)

3.1142.0 (2026-09-28)

3.1141.0 (2026-09-25)

3.1140.0 (2026-09-24)

3.1139.0 (2026-09-23)

3.1138.0 (2026-09-22)

1.31.0

Upgrade notes

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Oct 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 4, 2026 •

edited

Loading