chore(deps): bump the backend-all group in /backend with 10 updates by dependabot[bot] · Pull Request #244 · KOUSSEMONAUREL/Project-WebMedia

dependabot · 2026-09-07T15:56:24Z

Bumps the backend-all group in /backend with 10 updates:

Package	From	To
@hono/zod-validator	`0.9.0`	`0.9.1`
@libsql/client	`0.17.4`	`0.18.0`
@supabase/supabase-js	`2.112.4`	`2.115.0`
nodemailer	`9.0.6`	`10.0.0`
zod	`4.4.3`	`4.5.4`
@cloudflare/workers-types	`5.20260828.1`	`5.20260904.1`
@types/node	`26.4.0`	`26.4.1`
tsx	`4.23.12`	`4.23.13`
vitest	`4.1.11`	`5.0.0`
wrangler	`4.127.1`	`4.129.0`

Updates @hono/zod-validator from 0.9.0 to 0.9.1

Release notes

Sourced from @hono/zod-validator's releases.

@hono/zod-validator@0.9.1

Patch Changes

#2112 51b7f976286d0429179142e8058dcc59d1e82d75 Thanks @T4ko0522! - Cached case-insensitive header schema metadata when creating validator middleware.

Changelog

Sourced from @hono/zod-validator's changelog.

0.9.1

Patch Changes

#2112 51b7f976286d0429179142e8058dcc59d1e82d75 Thanks @T4ko0522! - Cached case-insensitive header schema metadata when creating validator middleware.

Commits

8de0f1e Version Packages (#2114)
51b7f97 perf(zod-validator): Caching the key mapping table of the header scheme (#2112)
40f956e chore(dev-deps): partial upgrade to TypeScript 7 (#2048)
See full diff in compare view

Updates @libsql/client from 0.17.4 to 0.18.0

Commits

9496c78 0.18.0
f336495 fix(sqlite3): settle in-flight operations when the pool is torn down
1174d51 fix(sqlite3): give a client a connection pool, like the hrana clients
05e3344 fix(sqlite3): keep connection handle for in-memory databases across transactions
See full diff in compare view

Updates @supabase/supabase-js from 2.112.4 to 2.115.0

Release notes

Sourced from @supabase/supabase-js's releases.

v2.115.0

2.115.0 (2026-09-03)

🚀 Features

postgrest: add getOpenApiSpec() (#2651)

❤️ Thank You

Katerina Skroumpelou @mandarini

v2.115.0-canary.0

2.115.0-canary.0 (2026-09-03)

🚀 Features

postgrest: add getOpenApiSpec() (#2651)

❤️ Thank You

Katerina Skroumpelou @mandarini

v2.114.0

2.114.0 (2026-09-02)

🚀 Features

storage: object versioning updates (#2644)

🩹 Fixes

auth: unenroll the unverified factor after a failed registration (#2641)

deps: override browserslist to patch high-severity advisories (#2652)

❤️ Thank You

Katerina Skroumpelou @mandarini

Miodrag Obradovic @Kjubikstronk

Tyler Hillery

v2.114.0-canary.0

2.114.0-canary.0 (2026-09-02)

🚀 Features

storage: object versioning updates (#2644)

🩹 Fixes

auth: unenroll the unverified factor after a failed registration (#2641)

... (truncated)

Changelog

Sourced from @supabase/supabase-js's changelog.

2.115.0 (2026-09-03)

🚀 Features

postgrest: add getOpenApiSpec() (#2651)

❤️ Thank You

Katerina Skroumpelou @mandarini

2.114.0 (2026-09-02)

This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.

2.113.0 (2026-09-02)

This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.

Commits

3eb6193 docs(supabase): clarify db.schema needs the second generic (#2662)
92fb8ba feat(postgrest): add getOpenApiSpec() (#2651)
aef432b chore(release): version 2.114.0 changelogs (#2653)
67b07b0 chore(release): version 2.113.0 changelogs (#2650)
062ae5e chore(release): version 2.112.4 changelogs (#2628)
See full diff in compare view

Updates nodemailer from 9.0.6 to 10.0.0

Release notes

Sourced from nodemailer's releases.

v10.0.0

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Node.js 20 or newer is required. The Node.js 6 syntax compatibility check and the .npmignore file are gone.

Features

keep the @types/nodemailer type layout working (1cc5356)

migrate to TypeScript with ES module and CommonJS builds (f7cbf83)

Bug Fixes

apply the other keys of a configuration object next to its url (29610f9)

dkim: canonicalize raw messages the way verifiers do (2c84b11)

keep a transporter assignable to the plain Transporter type (8bf55fb)

shared: keep a colon in the user name of a connection or proxy url (6acf4b6)

shared: refuse URL hosts the legacy parser would truncate (17a5068)

shared: resolve hostnames when the runtime has no interface table (8b03240)

smtp-connection: clear the timers of a connection dropped before the greeting (01dcaa0)

smtp-connection: keep an incomplete server reply out of lastServerResponse (1a6e427)

smtp-pool: free the pool slot when the proxy socket can not be opened (204a344)

well-known: keep nodemailer/lib/well-known/services.json available (367730c)

v9.1.1

9.1.1 (2026-09-01)

Bug Fixes

mailer: apply the message access policy in resolveContent (dc48ed3)

mailer: keep message data from reopening the access sandbox (ab7ef34)

mime-node: inherit the access policy from the tree a node hangs in (262d550)

v9.1.0

9.1.0 (2026-08-31)

Features

mailer: cap recipients per message with maxRecipients (7279ac8)

Bug Fixes

addressparser: handle address lists in linear time (9116da9)

addressparser: terminate the domain at an RFC 5322 comment (902b63e)

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Node.js 20 or newer is required. The Node.js 6 syntax compatibility check and the .npmignore file are gone.

Features

keep the @types/nodemailer type layout working (1cc5356)

migrate to TypeScript with ES module and CommonJS builds (f7cbf83)

Bug Fixes

apply the other keys of a configuration object next to its url (29610f9)

dkim: canonicalize raw messages the way verifiers do (2c84b11)

keep a transporter assignable to the plain Transporter type (8bf55fb)

shared: keep a colon in the user name of a connection or proxy url (6acf4b6)

shared: refuse URL hosts the legacy parser would truncate (17a5068)

shared: resolve hostnames when the runtime has no interface table (8b03240)

smtp-connection: clear the timers of a connection dropped before the greeting (01dcaa0)

smtp-connection: keep an incomplete server reply out of lastServerResponse (1a6e427)

smtp-pool: free the pool slot when the proxy socket can not be opened (204a344)

well-known: keep nodemailer/lib/well-known/services.json available (367730c)

9.1.1 (2026-09-01)

Bug Fixes

mailer: apply the message access policy in resolveContent (dc48ed3)

mailer: keep message data from reopening the access sandbox (ab7ef34)

mime-node: inherit the access policy from the tree a node hangs in (262d550)

9.1.0 (2026-08-31)

Features

mailer: cap recipients per message with maxRecipients (7279ac8)

Bug Fixes

addressparser: handle address lists in linear time (9116da9)

addressparser: terminate the domain at an RFC 5322 comment (902b63e)

mime-node: apply UTS-46 mapping when encoding a domain (259c32d)

mime-node: dedupe envelope recipients in linear time (7cc38af)

mime-node: flatten parsed addresses without concat.apply (83b8c48)

... (truncated)

Commits

2ee030c chore(master): release 10.0.0 (#1852)
8bf55fb fix: keep a transporter assignable to the plain Transporter type
62202a8 docs: mark 10.x as the supported security line
d9316d1 refactor(punycode): write the RFC 3490 separators as escape sequences
d1d3fb5 test(dkim): cover the signing failure path
1a6e427 fix(smtp-connection): keep an incomplete server reply out of lastServerResponse
70b2197 test(dkim): skip the mailauth verification where mailauth does not load
7c1ca6d test: cover the mailer, the transports and the utility modules
29610f9 fix: apply the other keys of a configuration object next to its url
6acf4b6 fix(shared): keep a colon in the user name of a connection or proxy url
Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)

e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema

87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines

99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)

e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open

7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar

eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)

d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)

212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)

e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)

fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator

6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)

6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution

019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates

652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller

571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card

9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm

8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.
npm install zod@latest
At a glance:

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the flagship feature of Zod 4.5

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADChttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — 12–19 digits plus Luhn checksum

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the multi-property counterpart to z.property()

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD/https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD

... (truncated)

Commits

e8e206f 4.5.4
84e416f fix(v4): stop the cycle walk from firing a default factory (#6500)
1a16102 4.5.3
eab51ff fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)
7e24a24 docs(blog): drop the reading time and put a GitHub link in the navbar
e3a695b docs(v4): record the email regex and container output-shape findings under Open
99fce39 bench(v4): z.compile() against zod-compiler (#6499)
87d6464 fix(docs): drop the OG description when the title wraps past two lines
e6b6ab3 docs(blog): widen the z.compile example to a 20-property schema
9a193aa 4.5.2
Additional commits viewable in compare view

Updates @cloudflare/workers-types from 5.20260828.1 to 5.20260904.1

Commits

See full diff in compare view

Updates @types/node from 26.4.0 to 26.4.1

Commits

See full diff in compare view

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

npm package (@latest dist-tag)

Commits

28e1f12 fix(cache): bound shared transform cache memory (#835)
See full diff in compare view

Updates vitest from 4.1.11 to 5.0.0

Release notes

Sourced from vitest's releases.

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

🚨 Breaking Changes

Replace loupe.inspect with pretty-format - by @hi-ogawa, Claude Opus 5 (1M context) and OpenAI Codex in vitest-dev/vitest#9609 (3f802)

Remove quotes from string values in test.for/each title $ variable (take 2) - by @hi-ogawa in vitest-dev/vitest#10170 (04d37)

Default attachmentsDir from .vitest-attachements/ to .vitest/attachments/ - by @MdSadiqMd in vitest-dev/vitest#10186 (1ba73)

Remove sequential test/suite options in favor of concurrent - by @hi-ogawa and OpenAI Codex in vitest-dev/vitest#10198 (9229f)

Represent locator as an object instead of a string - by @sheremet-va in vitest-dev/vitest#10212 (80f07)

Inline expect package - by @sheremet-va in vitest-dev/vitest#10221 (ad162)

Remove deprecated entry points - by @sheremet-va in vitest-dev/vitest#10222 (994c6)

Require Node.js 22 and Vite 6.4 - by @sheremet-va in vitest-dev/vitest#10178 (38762)

Fail expect.poll when function didn't resolve in time - by @hi-ogawa and OpenAI Codex in vitest-dev/vitest#10233 (4df04)

Throw an error if hoistable methods are outside the top level scope - by @sheremet-va in vitest-dev/vitest#10460 (d0b4f)

toHaveTextContent is strict, add toMatchTextContent as alternative - by @sheremet-va in vitest-dev/vitest#10473 (18f30)

Don't lookup config file from ancestor directories - by @hi-ogawa, OpenAI Codex and Hiroshi Ogawa in vitest-dev/vitest#10428 (945d9)

Inline @vitest/runner package, do not publish it anymore - by @sheremet-va in vitest-dev/vitest#10511 (6d6e4)

Allow mutating happy-dom/jsdom window object - by @hi-ogawa, Hiroshi Ogawa and OpenAI Codex in vitest-dev/vitest#10373 (206e8)

Expose concurrencyId/workerId on TestModule's diagnostics, make id 1-based - by @sheremet-va in vitest-dev/vitest#10516 (bdd98)

Add screenshotDirectory config to browser.expect.toMatchScreenshot - by @macarie in vitest-dev/vitest#10592 (a60de)

Update @sinonjs/fake-timers and support mocking Temporal - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#10654 (f8b15)

Remove webdriverio package - by @sheremet-va in vitest-dev/vitest#10675 (5fed6)

Clear mocks by default before each test - by @sheremet-va in vitest-dev/vitest#10613 (0f646)

Don't emit localStorage warnings on Node 26, fail gracefully when worker fails to start - by @sheremet-va in vitest-dev/vitest#10293 (334ed)

Separate config resolution from the server creation - by @sheremet-va in vitest-dev/vitest#10554 (1c0ec)

Inline projects extend the root config by default - by @sheremet-va in vitest-dev/vitest#10750 (fec00)

Enable mocking Temporal without fake timers - by @fabon-f, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#10757 (ac2d4)

Support nested projects - by @sheremet-va in vitest-dev/vitest#10846 (ec367)

Use > as separator in -t, calculate only once - by @sheremet-va in vitest-dev/vitest#10686 (a0b20)

Fail the test when an asynchronous assertion is not awaited - by @sheremet-va in vitest-dev/vitest#10868 (86d4a)

Share the Vite server between inline projects - by @sheremet-va in vitest-dev/vitest#10848 (d87c9)

Parse files statically in vitest list by default - by @sheremet-va in vitest-dev/vitest#11088 (51e94)

benchmark:

Rewrite the public API - by @sheremet-va in vitest-dev/vitest#10113 (19f6e)

browser:

Iframe scale - by @macarie in vitest-dev/vitest#9745 (b6398)

Enable locators.exact by default - by @sheremet-va in vitest-dev/vitest#10430 (e2032)

Require sessionId for orchestrator html request - by @hi-ogawa, Hiroshi Ogawa and OpenAI Codex in vitest-dev/vitest#10522 (79b7d)

Save failure screenshots in attachmentsDir - by @macarie in vitest-dev/vitest#10917 (3b5bb)

coverage:

include/exclude globs too eager - by @AriPerkkio in vitest-dev/vitest#9818 (edacb)

Allow thresholds.perFile to accept an object - by @vladlenskiy and @AriPerkkio in vitest-dev/vitest#10190 (13b78)

expect:

Fix toThrow("") behavior by reverting #6710 - by @hi-ogawa in vitest-dev/vitest#9643 and vitest-dev/vitest#6710 (6c3e4)

mocker:

Deserialize automock as automock - by @nami8824 in vitest-dev/vitest#10192 (2f892)

reporters:

blob reporter and --merge-reports default to .vitest/blob/ - by @AriPerkkio in vitest-dev/vitest#10232 (d22b0)

Write json and junit reporter output files to .vitest by default - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and @AriPerkkio in vitest-dev/vitest#10621 (58577)

... (truncated)

Commits

f441c6f chore: release v5.0.0 (#11130)
d46a747 fix: treat test.describe as a suite during static collection (#11128)
584cf30 fix: add a warning if inline project has duplicate plugins due to unexpected ...
f08ce4b fix: apply queued mocks from doMock() in queue order (fixes #10706) (#11127)
897f51f chore: release v5.0.0-rc.4 (#11107)
1339b06 chore(deps): update all non-major dependencies (#11104)
51e9494 feat!: parse files statically in vitest list by default (#11088)
2122ffd fix: propagate --maxWorkers to projects (#11102)
dc10f5f fix(browser): report the action error when a task times out (#11101)
d4fe198 feat: promote clearCache out of experimental (#11086)
Additional commits viewable in compare view

Updates wrangler from 4.127.1 to 4.129.0

Release notes

Sourced from wrangler's releases.

wrangler@4.129.0

Minor Changes

#15460 93d72a5 Thanks @QnJ1c2kNCg! - Support gzip compression for JSON Pipelines sinks

Pipelines is in open beta. wrangler pipelines sinks create and the interactive setup flow now pass the selected JSON compression to the Pipelines API. JSON sinks accept uncompressed or gzip, while Parquet retains its existing compression options and zstd default.

#15358 d2d8eea Thanks @pombosilva! - Add a --json flag to the wrangler workflows commands

Every wrangler workflows command now accepts --json, which emits the raw API payload instead of the human-readable rendering. The formatted output remains the default, so existing usage is unaffected:

wrangler workflows instances list my-workflow --json

The JSON output carries raw values rather than a serialisation of the formatted view: ISO timestamps instead of locale-formatted dates, plain status strings instead of emojified labels, and no presentation-only derived fields.

Patch Changes

#15469 d40a634 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

@cloudflare/workers-types ^5.20260831.1 ^5.20260902.1

workerd 1.20260831.1 1.20260902.1

#15481 7c1b2a6 Thanks Description has been truncated

Bumps the backend-all group in /backend with 10 updates: | Package | From | To | | --- | --- | --- | | [@hono/zod-validator](https://github.com/honojs/middleware/tree/HEAD/packages/zod-validator) | `0.9.0` | `0.9.1` | | [@libsql/client](https://github.com/tursodatabase/libsql-client-ts/tree/HEAD/packages/libsql-client) | `0.17.4` | `0.18.0` | | [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.112.4` | `2.115.0` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.6` | `10.0.0` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` | | [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260828.1` | `5.20260904.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.0` | `26.4.1` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `5.0.0` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.127.1` | `4.129.0` | Updates `@hono/zod-validator` from 0.9.0 to 0.9.1 - [Release notes](https://github.com/honojs/middleware/releases) - [Changelog](https://github.com/honojs/middleware/blob/main/packages/zod-validator/CHANGELOG.md) - [Commits](https://github.com/honojs/middleware/commits/@hono/zod-validator@0.9.1/packages/zod-validator) Updates `@libsql/client` from 0.17.4 to 0.18.0 - [Release notes](https://github.com/tursodatabase/libsql-client-ts/releases) - [Changelog](https://github.com/tursodatabase/libsql-client-ts/blob/main/CHANGELOG.md) - [Commits](https://github.com/tursodatabase/libsql-client-ts/commits/v0.18.0/packages/libsql-client) Updates `@supabase/supabase-js` from 2.112.4 to 2.115.0 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.115.0/packages/core/supabase-js) Updates `nodemailer` from 9.0.6 to 10.0.0 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v9.0.6...v10.0.0) Updates `zod` from 4.4.3 to 4.5.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.5.4) Updates `@cloudflare/workers-types` from 5.20260828.1 to 5.20260904.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](https://github.com/cloudflare/workerd/commits) Updates `@types/node` from 26.4.0 to 26.4.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `tsx` from 4.23.12 to 4.23.13 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.12...v4.23.13) Updates `vitest` from 4.1.11 to 5.0.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/vitest) Updates `wrangler` from 4.127.1 to 4.129.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.129.0/packages/wrangler) --- updated-dependencies: - dependency-name: "@hono/zod-validator" dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-all - dependency-name: "@libsql/client" dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-all - dependency-name: "@supabase/supabase-js" dependency-version: 2.115.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-all - dependency-name: nodemailer dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: backend-all - dependency-name: zod dependency-version: 4.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-all - dependency-name: "@cloudflare/workers-types" dependency-version: 5.20260904.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backend-all - dependency-name: "@types/node" dependency-version: 26.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: backend-all - dependency-name: tsx dependency-version: 4.23.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: backend-all - dependency-name: vitest dependency-version: 5.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: backend-all - dependency-name: wrangler dependency-version: 4.129.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backend-all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-07T15:56:25Z

Labels

The following labels could not be found: backend, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-09-07T15:56:28Z

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
project-web-media	Ignored	Preview	Sep 7, 2026 3:56pm UTC

cloudflare-workers-and-pages · 2026-09-07T15:59:45Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	webmedia-backend	`1ece817`	Sep 07 2026, 03:56 PM

Navigation Menu

chore(deps): bump the backend-all group in /backend with 10 updates - #244

chore(deps): bump the backend-all group in /backend with 10 updates#244
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/backend-all-c71e0a8159

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

vercel Bot commented Sep 7, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Dependency	From	To
`@cloudflare/workers-types`	^5.20260831.1	^5.20260902.1
workerd	1.20260831.1	1.20260902.1

Conversation

dependabot Bot commented on behalf of github Sep 7, 2026

@​hono/zod-validator@​0.9.1

Patch Changes

0.9.1

Patch Changes

v2.115.0

2.115.0 (2026-09-03)

🚀 Features

❤️ Thank You

v2.115.0-canary.0

2.115.0-canary.0 (2026-09-03)

🚀 Features

❤️ Thank You

v2.114.0

2.114.0 (2026-09-02)

🚀 Features

🩹 Fixes

❤️ Thank You

v2.114.0-canary.0

2.114.0-canary.0 (2026-09-02)

🚀 Features

🩹 Fixes

2.115.0 (2026-09-03)

🚀 Features

❤️ Thank You

2.114.0 (2026-09-02)

2.113.0 (2026-09-02)

v10.0.0

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Features

Bug Fixes

v9.1.1

9.1.1 (2026-09-01)

Bug Fixes

v9.1.0

9.1.0 (2026-08-31)

Features

Bug Fixes

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Features

Bug Fixes

9.1.1 (2026-09-01)

Bug Fixes

9.1.0 (2026-08-31)

Features

Bug Fixes

v4.5.4

Commits:

v4.5.3

Commits:

v4.5.2

Commits:

v4.5.1

Commits:

v4.5.0

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

v5.0.0

🚨 Breaking Changes

wrangler@4.129.0

Minor Changes

Patch Changes

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Labels

Uh oh!

vercel Bot commented Sep 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 7, 2026

Deploying with Cloudflare Workers

Uh oh!

Reviewers

Assignees

Labels

Projects

`@hono/zod-validator@0`.9.1

vercel Bot commented Sep 7, 2026 •

edited

Loading