Skip to content

build(deps): bump the production-patch group across 1 directory with 8 updates - #1574

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-patch-cdb24c8ea6
Open

build(deps): bump the production-patch group across 1 directory with 8 updates#1574
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-patch-cdb24c8ea6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-patch group with 8 updates in the / directory:

Package From To
nice-grpc 2.1.16 2.1.17
nice-grpc-client-middleware-retry 3.1.15 3.1.16
winston-loki 6.1.4 6.1.6
@scalar/express-api-reference 0.10.4 0.10.12
graphql-tools 9.0.28 9.0.33
nice-grpc-common 2.0.3 2.0.4
nodemailer 9.0.1 9.0.4
bson 7.3.0 7.3.1

Updates nice-grpc from 2.1.16 to 2.1.17

Release notes

Sourced from nice-grpc's releases.

nice-grpc@2.1.17

2.1.17 (2026-08-04)

Bug Fixes

  • nice-grpc: time out connection attempts that get no response (#904) (bede2e3)
Changelog

Sourced from nice-grpc's changelog.

2.1.17 (2026-08-04)

Bug Fixes

  • nice-grpc: time out connection attempts that get no response (#904) (bede2e3)

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

Commits

Updates nice-grpc-client-middleware-retry from 3.1.15 to 3.1.16

Release notes

Sourced from nice-grpc-client-middleware-retry's releases.

nice-grpc-client-middleware-retry@3.1.16

3.1.16 (2026-08-04)

Note: Version bump only for package nice-grpc-client-middleware-retry

Changelog

Sourced from nice-grpc-client-middleware-retry's changelog.

3.1.16 (2026-08-04)

Note: Version bump only for package nice-grpc-client-middleware-retry

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

Commits

Updates winston-loki from 6.1.4 to 6.1.6

Release notes

Sourced from winston-loki's releases.

v6.1.6

What's Changed

New Contributors

Full Changelog: JaniAnttonen/winston-loki@v6.1.5...v6.1.6

v6.1.5

Fixes issues with requests & a potential timestamp overflow

What's Changed

Full Changelog: JaniAnttonen/winston-loki@v6.1.4...v6.1.5

Commits
  • 9b58e61 Merge pull request #194 from JaniAnttonen/development
  • 69cf547 Merge pull request #193 from fabrykowski/development
  • 5b0e20e fix(json): stringify meta values sent as structured metadata
  • 81283ba Use Node 24 in publish workflow for npm trusted publishing
  • 05ba93b Merge pull request #191 from JaniAnttonen/development
  • abd8afa Merge pull request #190 from JaniAnttonen/fix/reject-non-2xx-responses
  • c899621 Revert lazy btoa require, keep it hoisted in the constructor
  • bb9d409 Reject non-2xx responses from Loki push endpoint
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for winston-loki since your current version.


Updates @scalar/express-api-reference from 0.10.4 to 0.10.12

Changelog

Sourced from @​scalar/express-api-reference's changelog.

0.10.12

0.10.11

Patch Changes

  • #9719: docs: update the Scalar platform overview block in the README

0.10.10

Patch Changes

  • #9710: Republish so the updated README (with the Scalar platform overview) reaches npm. Also renames the README generator metadata in package.json from readme to scalarReadme: npm treats a readme field as the readme text itself, so affected packages were published with a literal [object Object] readme on the registry instead of README.md.

0.10.9

0.10.8

0.10.7

0.10.6

0.10.5

Commits

Updates graphql-tools from 9.0.28 to 9.0.33

Changelog

Sourced from graphql-tools's changelog.

9.0.33

Patch Changes

  • Updated dependencies []:
    • @​graphql-tools/schema@​10.0.38

9.0.32

Patch Changes

  • Updated dependencies []:
    • @​graphql-tools/schema@​10.0.37

9.0.31

Patch Changes

  • Updated dependencies []:
    • @​graphql-tools/schema@​10.0.36

9.0.30

Patch Changes

  • Updated dependencies []:
    • @​graphql-tools/schema@​10.0.35

9.0.29

Patch Changes

  • Updated dependencies []:
    • @​graphql-tools/schema@​10.0.34
Commits
  • 11f0a21 chore(release): update monorepo packages versions (#8303)
  • 3c27f9a chore(release): update monorepo packages versions (#8284)
  • d246275 build(deps): bump the actions-deps group with 4 updates (#8293)
  • 16096f7 build(deps): bump the actions-deps group across 1 directory with 23 updates (...
  • 76b54da chore(release): update monorepo packages versions (#8264)
  • 062d229 chore(release): update monorepo packages versions (#8261)
  • c7f20ac chore(release): update monorepo packages versions (#8157)
  • 1fb1076 build(deps): bump the actions-deps group across 1 directory with 15 updates (...
  • f0caccf build(deps): bump the actions-deps group across 1 directory with 9 updates (#...
  • See full diff in compare view

Updates nice-grpc-common from 2.0.3 to 2.0.4

Release notes

Sourced from nice-grpc-common's releases.

nice-grpc-common@2.0.4

2.0.4 (2026-08-04)

Note: Version bump only for package nice-grpc-common

Changelog

Sourced from nice-grpc-common's changelog.

2.0.4 (2026-08-04)

Note: Version bump only for package nice-grpc-common

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

Commits

Updates nodemailer from 9.0.1 to 9.0.4

Release notes

Sourced from nodemailer's releases.

v9.0.4

9.0.4 (2026-08-04)

Bug Fixes

  • mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)
  • mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#1838) (5bd3a65)
  • mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)
  • mime-node: escape backslash and quote in the Content-Type name parameter (#1837) (adcfc4f)
  • mime: encode HT/CR/LF in header parameter values instead of quoting them (#1840) (5bc9cab)

v9.0.3

9.0.3 (2026-06-30)

Bug Fixes

  • smtp-connection: harden STARTTLS upgrade and secure socket handling (#1835) (07d8253)

v9.0.2

9.0.2 (2026-06-29)

Bug Fixes

  • addressparser: keep operator chars inside an address-literal as text (#1829) (9ba1064)
  • harden smtp-connection low-severity issues (22ddcea)
  • harden smtp-connection response parsing and socket lifecycle (68860b9)
  • prevent SES transport callback double-invocation and hang on sync errors (#1831) (9517bc5)
  • reject CRLF in HTTP proxy CONNECT destination to prevent request injection (6347b47)
Changelog

Sourced from nodemailer's changelog.

9.0.4 (2026-08-04)

Bug Fixes

  • mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)
  • mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#1838) (5bd3a65)
  • mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)
  • mime-node: escape backslash and quote in the Content-Type name parameter (#1837) (adcfc4f)
  • mime: encode HT/CR/LF in header parameter values instead of quoting them (#1840) (5bc9cab)

9.0.3 (2026-06-30)

Bug Fixes

  • smtp-connection: harden STARTTLS upgrade and secure socket handling (#1835) (07d8253)

9.0.2 (2026-06-29)

Bug Fixes

  • addressparser: keep operator chars inside an address-literal as text (#1829) (9ba1064)
  • harden smtp-connection low-severity issues (22ddcea)
  • harden smtp-connection response parsing and socket lifecycle (68860b9)
  • prevent SES transport callback double-invocation and hang on sync errors (#1831) (9517bc5)
  • reject CRLF in HTTP proxy CONNECT destination to prevent request injection (6347b47)
Commits
  • 2a0e8c3 chore(master): release 9.0.4 (#1841)
  • 78f4aa2 fix(mime-funcs): percent encode unpaired surrogates in header parameter values
  • 182d39a refactor(mime-node): quote the Content-Type name parameter with JSON.stringify
  • 9797f7f fix(mime-funcs): do not let an unpaired surrogate consume the next character
  • adcfc4f fix(mime-node): escape backslash and quote in the Content-Type name parameter...
  • 5bd3a65 fix(mime-funcs): keep any surrogate pair intact when chunking base64 mime wor...
  • eaf12a0 chore(services): add TurboSMTP (#1839)
  • b27d300 test(mime-node): assert the Content-Type name= output for line break filenames
  • 5bc9cab fix(mime): encode HT/CR/LF in header parameter values instead of quoting them...
  • acc2b43 chore(deps): update dev dependencies
  • Additional commits viewable in compare view

Updates bson from 7.3.0 to 7.3.1

Release notes

Sourced from bson's releases.

v7.3.1

7.3.1 (2026-06-23)

The MongoDB Node.js team is pleased to announce version 7.3.1 of the bson package!

Release Notes

ObjectId initialization now tolerates partial process polyfills

Adds optional chaining to Node.js startup snapshot API calls in ObjectId so that environments with a stubbed or partial process global no longer throw a TypeError at startup.

Bug Fixes

  • NODE-7630: make startup snapshot calls more defensive (#899) (99433cd)

Documentation

We invite you to try the bson library immediately, and report any issues to the NODE project.

Changelog

Sourced from bson's changelog.

7.3.1 (2026-06-23)

Bug Fixes

  • NODE-7630: make startup snapshot calls more defensive (#899) (99433cd)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the production-patch group across 1 directory with …
d44d064 
…8 updates

Bumps the production-patch group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [nice-grpc](https://github.com/deeplay-io/nice-grpc/tree/HEAD/packages/nice-grpc) | `2.1.16` | `2.1.17` |
| [nice-grpc-client-middleware-retry](https://github.com/deeplay-io/nice-grpc/tree/HEAD/packages/nice-grpc-client-middleware-retry) | `3.1.15` | `3.1.16` |
| [winston-loki](https://github.com/JaniAnttonen/winston-loki) | `6.1.4` | `6.1.6` |
| [@scalar/express-api-reference](https://github.com/scalar/scalar/tree/HEAD/integrations/express) | `0.10.4` | `0.10.12` |
| [graphql-tools](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/graphql-tools) | `9.0.28` | `9.0.33` |
| [nice-grpc-common](https://github.com/deeplay-io/nice-grpc/tree/HEAD/packages/nice-grpc-common) | `2.0.3` | `2.0.4` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.1` | `9.0.4` |
| [bson](https://github.com/mongodb/js-bson) | `7.3.0` | `7.3.1` |



Updates `nice-grpc` from 2.1.16 to 2.1.17
- [Release notes](https://github.com/deeplay-io/nice-grpc/releases)
- [Changelog](https://github.com/deeplay-io/nice-grpc/blob/master/packages/nice-grpc/CHANGELOG.md)
- [Commits](https://github.com/deeplay-io/nice-grpc/commits/nice-grpc@2.1.17/packages/nice-grpc)

Updates `nice-grpc-client-middleware-retry` from 3.1.15 to 3.1.16
- [Release notes](https://github.com/deeplay-io/nice-grpc/releases)
- [Changelog](https://github.com/deeplay-io/nice-grpc/blob/master/packages/nice-grpc-client-middleware-retry/CHANGELOG.md)
- [Commits](https://github.com/deeplay-io/nice-grpc/commits/nice-grpc-client-middleware-retry@3.1.16/packages/nice-grpc-client-middleware-retry)

Updates `winston-loki` from 6.1.4 to 6.1.6
- [Release notes](https://github.com/JaniAnttonen/winston-loki/releases)
- [Commits](JaniAnttonen/winston-loki@v6.1.4...v6.1.6)

Updates `@scalar/express-api-reference` from 0.10.4 to 0.10.12
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/integrations/express/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits/HEAD/integrations/express)

Updates `graphql-tools` from 9.0.28 to 9.0.33
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/graphql-tools/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/graphql-tools@9.0.33/packages/graphql-tools)

Updates `nice-grpc-common` from 2.0.3 to 2.0.4
- [Release notes](https://github.com/deeplay-io/nice-grpc/releases)
- [Changelog](https://github.com/deeplay-io/nice-grpc/blob/master/packages/nice-grpc-common/CHANGELOG.md)
- [Commits](https://github.com/deeplay-io/nice-grpc/commits/nice-grpc-common@2.0.4/packages/nice-grpc-common)

Updates `nodemailer` from 9.0.1 to 9.0.4
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v9.0.1...v9.0.4)

Updates `bson` from 7.3.0 to 7.3.1
- [Release notes](https://github.com/mongodb/js-bson/releases)
- [Changelog](https://github.com/mongodb/js-bson/blob/main/HISTORY.md)
- [Commits](mongodb/js-bson@v7.3.0...v7.3.1)

---
updated-dependencies:
- dependency-name: nice-grpc
  dependency-version: 2.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch
- dependency-name: nice-grpc-client-middleware-retry
  dependency-version: 3.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch
- dependency-name: winston-loki
  dependency-version: 6.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch
- dependency-name: "@scalar/express-api-reference"
  dependency-version: 0.10.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch
- dependency-name: graphql-tools
  dependency-version: 9.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch
- dependency-name: nice-grpc-common
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch
- dependency-name: nodemailer
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch
- dependency-name: bson
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants