build(deps): bump the production-patches group across 1 directory with 10 updates by dependabot[bot] · Pull Request #107 · Hilbras/Keystone

dependabot · 2026-10-12T18:57:34Z

Bumps the production-patches group with 10 updates in the / directory:

Package	From	To
@opentelemetry/auto-instrumentations-node	`0.80.0`	`0.81.0`
@opentelemetry/sdk-node	`0.222.0`	`0.223.0`
@simplewebauthn/server	`14.0.2`	`14.0.3`
bullmq	`6.3.8`	`6.3.12`
dotenv	`18.0.3`	`18.0.7`
drizzle-orm	`0.45.3`	`0.45.4`
nodemailer	`10.0.10`	`10.0.16`
pino	`10.3.1`	`10.4.0`
@types/node	`26.6.3`	`26.6.5`
oxlint	`1.85.0`	`1.87.0`

Updates @opentelemetry/auto-instrumentations-node from 0.80.0 to 0.81.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.81.0

0.81.0 (2026-10-06)

Features

deps: update deps matching '@opentelemetry/*' (#3804) (36fcb9c)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.77.0 to ^0.78.0

@opentelemetry/instrumentation-bunyan bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-connect bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-cucumber bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-dataloader bumped from ^0.39.0 to ^0.40.0

@opentelemetry/instrumentation-dns bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-express bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-fs bumped from ^0.41.0 to ^0.42.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-graphql bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-hapi bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.5.0 to ^0.6.0

@opentelemetry/instrumentation-ioredis bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.31.0 to ^0.32.0

@opentelemetry/instrumentation-knex bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-koa bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-memcached bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mongodb bumped from ^0.75.0 to ^0.76.0

@opentelemetry/instrumentation-mongoose bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-mysql bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-net bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-openai bumped from ^0.20.0 to ^0.21.0

@opentelemetry/instrumentation-oracledb bumped from ^0.47.0 to ^0.48.0

@opentelemetry/instrumentation-pg bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-pino bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-redis bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-restify bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-router bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-socket.io bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-tedious bumped from ^0.41.0 to ^0.42.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.81.0 (2026-10-06)

Features

deps: update deps matching '@opentelemetry/*' (#3804) (36fcb9c)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.77.0 to ^0.78.0

@opentelemetry/instrumentation-bunyan bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-connect bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-cucumber bumped from ^0.38.0 to ^0.39.0

@opentelemetry/instrumentation-dataloader bumped from ^0.39.0 to ^0.40.0

@opentelemetry/instrumentation-dns bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-express bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-fs bumped from ^0.41.0 to ^0.42.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-graphql bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-hapi bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.5.0 to ^0.6.0

@opentelemetry/instrumentation-ioredis bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.31.0 to ^0.32.0

@opentelemetry/instrumentation-knex bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-koa bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-memcached bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-mongodb bumped from ^0.75.0 to ^0.76.0

@opentelemetry/instrumentation-mongoose bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-mysql bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-net bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-openai bumped from ^0.20.0 to ^0.21.0

@opentelemetry/instrumentation-oracledb bumped from ^0.47.0 to ^0.48.0

@opentelemetry/instrumentation-pg bumped from ^0.74.0 to ^0.75.0

@opentelemetry/instrumentation-pino bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-redis bumped from ^0.70.0 to ^0.71.0

@opentelemetry/instrumentation-restify bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-router bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-runtime-node bumped from ^0.35.0 to ^0.36.0

@opentelemetry/instrumentation-socket.io bumped from ^0.69.0 to ^0.70.0

@opentelemetry/instrumentation-tedious bumped from ^0.41.0 to ^0.42.0

@opentelemetry/instrumentation-undici bumped from ^0.32.0 to ^0.33.0

... (truncated)

Commits

cc263ac chore: release main (#3719)
36fcb9c feat(deps): update deps matching '@opentelemetry/*' (#3804)
2729b78 chore: revert "chore!: raise minimum supported Node.js to 22.15.0, dropping 1...
36dffd2 chore!: raise minimum supported Node.js to 22.15.0, dropping 18 and 20 suppor...
See full diff in compare view

Updates @opentelemetry/sdk-node from 0.222.0 to 0.223.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.223.0

0.223.0

💥 Breaking Changes

chore(web-common)!: clean up and deprecate network span utils #7114

These utilities were long planned for removal. They were moved from the sdk-trace-web package and are currently only used by the (deprecated) instrumentation-fetch and instrumentation-xml-http-request packages.

Drop the skipOldSemconvContentLengthAttrs vestigial option from addSpanNetworkEvents().

🏠 Internal

refactor(web-common, instrumentation-fetch, instrumentation-xml-http-request): move utils from @opentelemetry/sdk-trace-web into @opentelemetry/web-common and use them in @opentelemetry/instrumentation-fetch and @opentelemetry/instrumentation-xml-http-request. With this change the instrumentations do not depend on SDK packages and the utils are kept in a shared package so we avoid code duplication.

Commits

92b844e chore: prepare next v2.x release (#7151)
a859aff fix(web-common): export getElementXPath utility (#7124)
2bd5a73 chore(web-common)!: deprecate addSpanNetworkEvents() et al instrumentation-...
d60f05e doc(sdk-trace): add description for StackContextManager (#7089)
5bd476e chore: move context manager to sdk-trace (#7086)
554c0c6 chore: move sdk-trace-web utils to web-common (#7058)
788922c ci: support maintenance branch releases (#7036)
See full diff in compare view

Updates @simplewebauthn/server from 14.0.2 to 14.0.3

Release notes

Sourced from @simplewebauthn/server's releases.

v14.0.3

Changes:

[server] PQC support is now lazily evaluated. This delays Node from emitting its PQC warnings from when the Node process starts to when a method is called that checks for PQC support (#809)

Changelog

Sourced from @simplewebauthn/server's changelog.

v14.0.3

Changes:

[server] PQC support is now lazily evaluated. This delays Node from emitting its PQC warnings from when the Node process starts to when a method is called that checks for PQC support (#809)

Commits

084e601 Update server version to v14.0.3
cd402cc Lazily evaluate PQC support to prevent Node warnings on startup (#809)
7e3c4c4 Kinda makes more sense to do the AKI check first
See full diff in compare view

Updates bullmq from 6.3.8 to 6.3.12

Release notes

Sourced from bullmq's releases.

v6.3.12

6.3.12 (2026-10-09)

Bug Fixes

postgres: inline SQL at build time to restore single-file bundler support (#4822) (c6bc9a4), closes #4603

v6.3.11

6.3.11 (2026-10-01)

Bug Fixes

worker: detach stalled checker from telemetry context to prevent trace leak (#4812) fixes #4731 (01b8b14)

v6.3.10

6.3.10 (2026-09-29)

Bug Fixes

worker: stop infinite connection-error retries during shutdown (#4833) (96e0a96)

v6.3.9

6.3.9 (2026-09-25)

Bug Fixes

connection: infer backend-specific connection options instead of hiding mismatches with casts (#4796) (10dc93c)

Commits

c6bc9a4 fix(postgres): inline SQL at build time to restore single-file bundler suppor...
9b7b293 chore(release): vex2.3.0 (#4900)
6dcd0fa chore(release): vpy3.3.2 (#4899)
4bb572c feat(connection): allow injecting redis username [elixir] (#4854)
ab38089 fix(deps): accept a compatible redis-py range instead of an exact pin [python...
f82ca81 chore(release): vrs1.3.5 (#4897)
0e07ef6 fix(deps): update security patches [rust] [security] (#4893)
71307f7 chore(deps): update security dev patches [security] (#4892)
1b8841a chore(release): vpy3.3.1 (#4895)
b1d410e fix(lock-manager): renew locks with the atomic extendLocks script [python] (#...
Additional commits viewable in compare view

Updates dotenv from 18.0.3 to 18.0.7

Changelog

Sourced from dotenv's changelog.

18.0.7 (2026-10-09)

Changed

Treat undefined settings like quiet: true as null rather than falsey (#1070)

CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

Use smarter parseBoolean not Boolean() to fix override (#1069)

18.0.5 (2026-09-30)

Changed

Fix missing typescript module declaration (#1068)

Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

import dotenv/config should default quiet: true (#1063)

Commits

2953207 18.0.7
9944723 make more readable for undefined -> null
d455db0 Merge branch 'master' of github.com:motdotla/dotenv
e411e02 changelog
6237c35 Merge pull request #1070 from Utkarsh-Singhal-26/fix/ignore-undefined-config-...
9af8c28 Merge pull request #1071 from himanshu748/fix-cli-env-quiet
c7161c6 fix(cli): honor quiet settings loaded from .env
3990466 fix: ignore undefined options so they don't mask DOTENV_* env settings
5d7cc39 18.0.6
750ba03 changelog
Additional commits viewable in compare view

Updates drizzle-orm from 0.45.3 to 0.45.4

Release notes

Sourced from drizzle-orm's releases.

0.45.4

Fixed postgres-js not using prepared queries on explicit .prepare(name)

Commits

eab8bed Fixed postgres-js not using prepared queries on explicit .prepare(name) (...
See full diff in compare view

Updates nodemailer from 10.0.10 to 10.0.16

Release notes

Sourced from nodemailer's releases.

v10.0.16

10.0.16 (2026-10-07)

Bug Fixes

addressparser: keep an escaped parenthesis inside a comment (c4ae20d)

fetch: keep the case of cookie names (#1888) (9f16eed)

fetch: read the cookie name-value pair by position (645e97c)

v10.0.15

10.0.15 (2026-10-05)

Bug Fixes

errors: inherit NodemailerError code from ErrnoException (e99db61), closes #1884

errors: keep NodemailerError compatible with @types/node 26 ErrnoException (#1885) (b660328)

v10.0.14

10.0.14 (2026-10-03)

Bug Fixes

addressparser: keep a quoted display name that holds no "@" out of the address (3570d26)

addressparser: keep the group recursion depth out of the options object (a680254)

addressparser: stop a "[" from hiding the operators after it (5619784)

dkim: trim a header field name in linear time (c6f7a55)

mime-funcs: read and write header parameters per rfc2045 and rfc2231 (b8ccad7)

search only the new bytes for the end of the proxy CONNECT response (81efd7b)

v10.0.13

10.0.13 (2026-09-30)

Bug Fixes

read the advertised SASL methods without backtracking regexes (b5a896f)

strip comments inside an angle-addr before it becomes the address (a502247)

v10.0.12

10.0.12 (2026-09-28)

Bug Fixes

settle every send on a connection error, back off pool requeues, turn a bare CR into CRLF, bound fetch, honour requireTLS (63ccd66)

v10.0.11

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.0.16 (2026-10-07)

Bug Fixes

addressparser: keep an escaped parenthesis inside a comment (c4ae20d)

fetch: keep the case of cookie names (#1888) (9f16eed)

fetch: read the cookie name-value pair by position (645e97c)

10.0.15 (2026-10-05)

Bug Fixes

errors: inherit NodemailerError code from ErrnoException (e99db61), closes #1884

errors: keep NodemailerError compatible with @types/node 26 ErrnoException (#1885) (b660328)

10.0.14 (2026-10-03)

Bug Fixes

addressparser: keep a quoted display name that holds no "@" out of the address (3570d26)

addressparser: keep the group recursion depth out of the options object (a680254)

addressparser: stop a "[" from hiding the operators after it (5619784)

dkim: trim a header field name in linear time (c6f7a55)

mime-funcs: read and write header parameters per rfc2045 and rfc2231 (b8ccad7)

search only the new bytes for the end of the proxy CONNECT response (81efd7b)

10.0.13 (2026-09-30)

Bug Fixes

read the advertised SASL methods without backtracking regexes (b5a896f)

strip comments inside an angle-addr before it becomes the address (a502247)

10.0.12 (2026-09-28)

Bug Fixes

settle every send on a connection error, back off pool requeues, turn a bare CR into CRLF, bound fetch, honour requireTLS (63ccd66)

10.0.11 (2026-09-27)

Bug Fixes

fetch: report a form body that can not be encoded through the returned stream (74d40bf)

... (truncated)

Commits

afa8815 chore(master): release 10.0.16 (#1889)
c4ae20d fix(addressparser): keep an escaped parenthesis inside a comment
645e97c fix(fetch): read the cookie name-value pair by position
e2e7fa3 chore(deps): update dependencies
9f16eed fix(fetch): keep the case of cookie names (#1888)
c17efc0 chore(master): release 10.0.15 (#1886)
8d423d0 chore(deps): update dependencies
e99db61 fix(errors): inherit NodemailerError code from ErrnoException
b660328 fix(errors): keep NodemailerError compatible with @types/node 26 ErrnoExcepti...
aefd1da chore(master): release 10.0.14 (#1880)
Additional commits viewable in compare view

Updates pino from 10.3.1 to 10.4.0

Release notes

Sourced from pino's releases.

v10.4.0

What's Changed

Add warning on incompatible formatters.level with multi-target transports by @lraveri in pinojs/pino#2381

chore: use TSTyche for type testing by @mrazauskas in pinojs/pino#2376

Add Sentry Native Integration Docs by @KyleTryon in pinojs/pino#2394

docs: add flush limitation warning for pino-pretty, fix #1015 by @mcollina in pinojs/pino#2402

feat(browser): add redaction support by @abhu85 in pinojs/pino#2396

chore: lint the type declaration file by @mrazauskas in pinojs/pino#2408

chore: remove TSTyche config file by @mrazauskas in pinojs/pino#2409

docs: clarify multi-target formatter limitation by @mcollina in pinojs/pino#2410

No bots allowed by @mcollina in pinojs/pino#2412

build(deps): bump real-require from 0.2.0 to 1.0.0 by @dependabot[bot] in pinojs/pino#2414

build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @dependabot[bot] in pinojs/pino#2418

fix: use util.getCallSites when able to allow frozen intrinsics by @CarlOlson in pinojs/pino#2294

Update AWS Lambda reference in asynchronous docs by @urbanautomaton in pinojs/pino#2413

chore: update license by @Tony133 in pinojs/pino#2375

fix: add named default export by @mrazauskas in pinojs/pino#2421

Update contrib doc by @jsumners in pinojs/pino#2424

docs: use @hono/structured-logger for Pino with Hono by @brunorodmoreira in pinojs/pino#2425

chore(deps): remove pre-commit by @kshitijanurag in pinojs/pino#2423

build(deps): bump actions/github-script from 8 to 9 by @dependabot[bot] in pinojs/pino#2427

build(deps-dev): bump eslint-plugin-promise from 6.6.0 to 7.3.0 by @dependabot[bot] in pinojs/pino#2428

build(deps-dev): bump tstyche from 6.2.0 to 7.1.0 by @dependabot[bot] in pinojs/pino#2429

test: fix flaky transport config test by @mcollina in pinojs/pino#2434

chore: upgrade typescript to v6.0.2 by @Tony133 in pinojs/pino#2419

docs: fix typo "compatability" → "compatibility" in README by @premsreelathasugeendran in pinojs/pino#2435

docs: warn against untrusted top-level log keys by @mcollina in pinojs/pino#2450

test(transport): keep event loop alive while awaiting async flush by @YBJ0000 in pinojs/pino#2470

docs: clarify Node.js version support policy in LTS doc by @youdie006 in pinojs/pino#2472

fix: honor per-target level filter on single-element targets array by @mcollina in pinojs/pino#2432

fix(multistream): resolve string level labels in write() by @xianjianlf2 in pinojs/pino#2474

fix: escape child binding keys by @mcollina in pinojs/pino#2452

docs: clarify stringification limits by @mcollina in pinojs/pino#2475

fix: add setBindings to the browser logger by @ankit1324 in pinojs/pino#2471

build(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in pinojs/pino#2486

build(deps-dev): bump through2 from 4.0.2 to 5.0.10 by @dependabot[bot] in pinojs/pino#2488

build(deps-dev): bump bole from 5.0.29 to 6.0.7 by @dependabot[bot] in pinojs/pino#2489

build(deps-dev): bump eslint-plugin-n from 17.23.2 to 18.2.2 by @dependabot[bot] in pinojs/pino#2492

build(deps): bump actions/checkout from 6.0.2 to 7.0.1 by @dependabot[bot] in pinojs/pino#2485

fix: log objects with an own proto key instead of crashing by @spokodev in pinojs/pino#2457

fix: build the redaction shape without Object.prototype by @luantaraschi in pinojs/pino#2495

ci: add Node.js 26 to test matrix by @aquie00t in pinojs/pino#2480

fix(multistream): fix clone add crash and missing end/remove methods by @spellsaif in pinojs/pino#2493

ci: check pull requests target main by @marktran0710 in pinojs/pino#2500

build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 by @dependabot[bot] in pinojs/pino#2513

build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 by @dependabot[bot] in pinojs/pino#2515

Delete .github/dependabot.yml by @jsumners in pinojs/pino#2517

docs: document the APIs that are unavailable in the browser by @kavish-19 in pinojs/pino#2521

ci: pin lock-threads to upstream v6.0.2 to fix token validation failure by @simpleqt in pinojs/pino#2525

Add bindings() method to browser logger by @RT1811 in pinojs/pino#2504

... (truncated)

Commits

b29dbe9 Bumped v10.4.0
6ba157b docs: fix the pino-pretty flush explanation after thread-stream#198 (#2524)
6429c14 docs: Note that serializers run on child bindings at creation time (#2518)
6c71bc9 Add bindings method to browser logger (#2504)
b557f72 ci: pin lock-threads to upstream v6.0.2 to fix token validation failure (#2525)
1de1212 docs: document the APIs that are unavailable in the browser (#2521)
af2fe10 Delete .github/dependabot.yml (#2517)
5aa6230 build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 (#2515)
6f5af07 build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 (#2513)
2ffe576 ci: check pull requests target main (#2500)
Additional commits viewable in compare view

Updates @types/node from 26.6.3 to 26.6.5

Commits

See full diff in compare view

Updates oxlint from 1.85.0 to 1.87.0

Release notes

Sourced from oxlint's releases.

oxlint v1.87.0

🚀 Features

42dcfd2 linter/react/no-unescaped-entities: Implement suggestion (#27292) (Mikhail Baev)

cd4510d linter/unicorn/no-useless-switch-case: Implement suggestion (#27245) (Mikhail Baev)

1a7c902 linter/react/jsx-no-target-blank: Implement suggestion (#27181) (Mikhail Baev)

🐛 Bug Fixes

176b4b9 linter/jsx-a11y/label-has-associated-control: Validate label attribute values (#27302) (sama Pyb)

7d381c3 linter/jsx-a11y/mouse-events-have-key-events: Handle nullish event handlers (#27306) (sama Pyb)

4e09837 linter/jsx-a11y/lang: Validate lang expression strings (#27304) (sama Pyb)

7d28a66 linter/unicorn/numeric-separators-style: Report misgrouped BigInt literals (#27207) (breken)

e928322 linter/unicorn/no-zero-fractions: Parenthesize separator and large integers in fixer (#27206) (breken)

3d61a59 parser: Validate TypeScript type member separators (#27222) (camc314)

f08236b linter/eslint/prefer-exponentiation-operator: Preserve autofix precedence (#27150) (camc314)

7d60ae3 linter/valid-title: Continue checks after allowed words (#27146) (Cameron)

ad5dd5d linter/eslint/no-unused-vars: Respect disabled argument checks for used ignore patterns (#26925) (camc314)

oxlint v1.86.0

🚀 Features

9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)

e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

🐛 Bug Fixes

8306aa4 linter/typescript/no-unnecessary-parameter-property-assignment: Account for parameter property reassignment (#26955) (camc314)

42dfbb5 linter/eslint/one-var: Keep declare when splitting declarations (#27081) (Cheolhee Lee)

2ba7e33 linter/eslint/require-await: Count await using as an await (#27080) (Cheolhee Lee)

611e4ed linter/plugins: Include executing selectors in JS plugin rule timings (#27111) (overlookmotel)

2cac66f react-compiler: Handle recursive function expressions (#26796) (Brennan Butler)

e996e6c react-compiler: Treat zero-argument new Date as impure (#26894) (Boshen)

571cfa3 oxlint: Skip type-aware lint rules in type-check-only mode (#27076) (camc314)

d0b2462 oxlint: Skip undefined children in CFG walker (#27075) (camc314)

5186328 parser: Handle HTML comment values (#22933) (Boshen)

0b630e8 linter/typescript/unified-signatures: Align rule with upstream (#26956) (camc314)

ebb22f1 linter/node/no-exports-assign: Change category from style to suspicious (#26555) (Bartok)

cce28a0 linter/import/no-duplicates: Distinguish import attributes (#26936) (camc314)

feb733b linter/unicorn/prefer-spread: Stop checking string split calls (#26935) (camc314)

929e154 linter/eslint/no-unused-vars: Honor ignore patterns inside array rest bindings (#26923) (camc314)

5bdb9b8 linter/eslint/no-unused-vars: Recognize consumed update expressions (#26782) (camc314)

5c05bef linter/eslint/prefer-const: Ignore embedded assignments (#26920) (camc314)

⚡ Performance

ded4c29 linter/eslint/no-unused-vars: Skip sequence checks when absent (#26921) (camc314)

Commits

2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
9d80eed feat(linter/react/only-export-components): support allowCompoundComponents ...
e05b155 feat(linter): add typescript/no-generated-empty-object-type (#26958)
88a0096 chore(oxlint): require tsgolint 7.0.2003 (#27021)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 10 updates Bumps the production-patches group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.80.0` | `0.81.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.222.0` | `0.223.0` | | [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `14.0.2` | `14.0.3` | | [bullmq](https://github.com/taskforcesh/bullmq) | `6.3.8` | `6.3.12` | | [dotenv](https://github.com/motdotla/dotenv) | `18.0.3` | `18.0.7` | | [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.3` | `0.45.4` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.10` | `10.0.16` | | [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.3` | `26.6.5` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.85.0` | `1.87.0` | Updates `@opentelemetry/auto-instrumentations-node` from 0.80.0 to 0.81.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.81.0/packages/auto-instrumentations-node) Updates `@opentelemetry/sdk-node` from 0.222.0 to 0.223.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.222.0...experimental/v0.223.0) Updates `@simplewebauthn/server` from 14.0.2 to 14.0.3 - [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases) - [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md) - [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v14.0.3/packages/server) Updates `bullmq` from 6.3.8 to 6.3.12 - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v6.3.8...v6.3.12) Updates `dotenv` from 18.0.3 to 18.0.7 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v18.0.3...v18.0.7) Updates `drizzle-orm` from 0.45.3 to 0.45.4 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](drizzle-team/drizzle-orm@0.45.3...0.45.4) Updates `nodemailer` from 10.0.10 to 10.0.16 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v10.0.10...v10.0.16) Updates `pino` from 10.3.1 to 10.4.0 - [Release notes](https://github.com/pinojs/pino/releases) - [Commits](pinojs/pino@v10.3.1...v10.4.0) Updates `@types/node` from 26.6.3 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `oxlint` from 1.85.0 to 1.87.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.87.0/npm/oxlint) --- updated-dependencies: - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patches - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.223.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patches - dependency-name: "@simplewebauthn/server" dependency-version: 14.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patches - dependency-name: bullmq dependency-version: 6.3.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patches - dependency-name: dotenv dependency-version: 18.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patches - dependency-name: drizzle-orm dependency-version: 0.45.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patches - dependency-name: nodemailer dependency-version: 10.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-patches - dependency-name: pino dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-patches - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production-patches - dependency-name: oxlint dependency-version: 1.87.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production-patches ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-12T18:57:39Z

Labels

The following labels could not be found: security. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 12, 2026

Navigation Menu

Repository navigation

build(deps): bump the production-patches group across 1 directory with 10 updates - #107

build(deps): bump the production-patches group across 1 directory with 10 updates#107
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-patches-5f97fe6720

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026

auto-instrumentations-node: v0.81.0

0.81.0 (2026-10-06)

Features

Dependencies

0.81.0 (2026-10-06)

Features

Dependencies

experimental/v0.223.0

0.223.0

💥 Breaking Changes

🏠 Internal

v14.0.3

v14.0.3

v6.3.12

6.3.12 (2026-10-09)

Bug Fixes

v6.3.11

6.3.11 (2026-10-01)

Bug Fixes

v6.3.10

6.3.10 (2026-09-29)

Bug Fixes

v6.3.9

6.3.9 (2026-09-25)

Bug Fixes

18.0.7 (2026-10-09)

Changed

18.0.6 (2026-10-06)

Changed

18.0.5 (2026-09-30)

Changed

18.0.4 (2026-09-25)

Changed

0.45.4

v10.0.16

10.0.16 (2026-10-07)

Bug Fixes

v10.0.15

10.0.15 (2026-10-05)

Bug Fixes

v10.0.14

10.0.14 (2026-10-03)

Bug Fixes

v10.0.13

10.0.13 (2026-09-30)

Bug Fixes

v10.0.12

10.0.12 (2026-09-28)

Bug Fixes

v10.0.11

10.0.16 (2026-10-07)

Bug Fixes

10.0.15 (2026-10-05)

Bug Fixes

10.0.14 (2026-10-03)

Bug Fixes

10.0.13 (2026-09-30)

Bug Fixes

10.0.12 (2026-09-28)

Bug Fixes

10.0.11 (2026-09-27)

Bug Fixes

v10.4.0

What's Changed

oxlint v1.87.0

🚀 Features

🐛 Bug Fixes

oxlint v1.86.0

🚀 Features

🐛 Bug Fixes

⚡ Performance

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels