Skip to content

Bump the dev-dependencies group across 1 directory with 6 updates - #227

Closed
dependabot[bot] wants to merge 4 commits into
devfrom
dependabot/npm_and_yarn/dev-dependencies-6f3489ea25
Closed

Bump the dev-dependencies group across 1 directory with 6 updates#227
dependabot[bot] wants to merge 4 commits into
devfrom
dependabot/npm_and_yarn/dev-dependencies-6f3489ea25

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 6 updates in the / directory:

Package From To
prisma 5.22.0 7.9.0
typescript 5.9.3 7.0.2
@nestjs/cli 10.4.9 11.0.24
@types/express 4.17.25 5.0.6
@types/node 22.20.1 26.1.1
@types/pdfkit 0.13.9 0.17.6

Updates prisma from 5.22.0 to 7.9.0

Release notes

Sourced from prisma's releases.

7.8.0

Today, we are excited to share the 7.8.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Features

Prisma Client

  • Added a queryPlanCacheMaxSize option to the PrismaClient constructor for fine-grained control over the query plan cache. Pass 0 to disable the cache entirely, or omit it to use the default cache size. A larger value can improve performance in applications that execute many unique queries, while a smaller one can reduce memory usage. (#29503)

Bug Fixes

Prisma Client

  • Fixed an equality filter panic and incorrect ::jsonb cast when filtering on PostgreSQL JSON list columns. Queries using where: { jsonListField: { equals: [...] } }prisma/prisma-engines#5804
  • Fixed case-insensitive JSON field filtering (mode: insensitive), allowing where: { jsonField: { equals: "...", mode: "insensitive" } }prisma/prisma-engines#5806
  • Fixed incorrect parameterization of enum values that have a custom database name set via @map. (#29422)
  • Fixed a database parameter limit check (P2029), which could incorrectly reject or miss over-limit queries. (#29422)
  • Fixed a regression that caused missing SQL Server VARCHARprisma/prisma-engines#5801

Schema Engine

  • Fixed a misleading error message in prisma migrate diff that referenced the --shadow-database-url CLI flag, which was removed in Prisma 7. (#29455)
  • Fixed prisma migrate dev (and shadow database migration replay in general) failing with CREATE INDEX CONCURRENTLY cannot run inside a transaction blockprisma/prisma-engines#5799
  • Fixed PostgreSQL introspection silently dropping sequence defaults when the database returns the schema-qualified form pg_catalog.nextval('sequence_name'::regclass) instead of the bare nextval(...). Columns backed by sequences now correctly appear as @default(autoincrement())prisma/prisma-engines#5802

Driver Adapters

  • @​prisma/adapter-d1: Savepoint operations (createSavepoint, rollbackToSavepoint, releaseSavepoint) now silently no-op with debug logging instead of executing SQL statements, consistent with how the D1 adapter already treats top-level transactions. (#29499)

Open roles at Prisma

Interested in joining Prisma? We're growing and have several exciting opportunities across the company for developers who are passionate about building with Prisma. Explore our open positions on our Careers page and find the role that's right for you.

Enterprise support

Thousands of teams use Prisma and many of them already tap into our Enterprise & Agency Support Program for hands-on help with everything from schema integrations and performance tuning to security and compliance.

With this program you also get priority issue triage and bug fixes, expert scalability advice, and custom training so that your Prisma-powered apps stay rock-solid at any scale. Learn more or join: https://prisma.io/enterprise.

7.7.0

Today, we are excited to share the 7.7.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

... (truncated)

Commits
  • 537583c feat(cli): add @bomb.sh/tab completions (#28351)
  • bf7c40f fix(cli): update Studio to 0.33.0 and suppress aborted response errors (#29720)
  • 9acd8dc feat(cli): install Prisma agent skills during prisma init (#29689)
  • aef8cb5 fix(cli): remove the migrate-reset tool from the MCP server (#29691)
  • cdca333 chore(deps): update @​prisma/dev to 0.24.14 (#29686)
  • fda8fbc chore(deps): bump @​prisma/dev to 0.24.9 (resolves hono GHSA-92pp-h63x-v22m) (...
  • 5723406 fix(cli): route bootstrap telemetry to Prisma Web Properties project (#29473)
  • 8e71aa7 fix(cli): install missing @prisma/client in prisma bootstrap (#29444)
  • ada077b fix(cli): bootstrap UX — auto-install deps, resumable flow, timeout handling ...
  • 9b0b7f5 feat(cli): add prisma bootstrap command (#29374)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prisma since your current version.


Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates @nestjs/cli from 10.4.9 to 11.0.24

Release notes

Sourced from @​nestjs/cli's releases.

Release 11.0.24

  • fix(compiler): fail fast when typescript lacks the programmatic api (3c6b4ac4)
  • refactor: move available languages closer to first usage (1697b7fd)
  • refactor: delete unused gulp tool utility helper file (75b57c4e)
  • fix(runners): remove duplicated binary in failed command message (54b08ae0)

Release 11.0.23

  • Revert "fix(compiler): validate delete out dir paths before rm" (0dd0e3ef)
  • Revert "fix(compiler): validate asset output paths" (728f80cf)

Release 11.0.22

  • fix(cli): resolve Windows path separator bug in plugin loader (9e502bda)
  • fix(compiler): validate asset output paths (c4342b2c)
  • fix: Update CRUD option to accept a value for generating entry points (4c0e2cab)
  • feat: Add type and CRUD options in generate command (b19856a3)

Release 11.0.21

Release 11.0.20

  • fix: revert #3313 due to #3391 and #3390 (705bb7da)
  • chore(deps): update swc monorepo (8496c768)
  • fix(assets-manager): return promise from close watchers (2181947d)
  • fix(swc): fix inverted chokidar ignored filter in watch mode (a3890cba)
  • fix: add type annotations to caught errors (c46ddd71)

Release 11.0.19

What's Changed

Full Changelog: nestjs/nest-cli@11.0.18...11.0.19

11.0.18

What's Changed

... (truncated)

Commits
  • c8a68da chore(): release v11.0.24
  • e5fda8c Merge pull request #3478 from ruban-s/fix/typescript-7-unsupported-api
  • 3c6b4ac fix(compiler): fail fast when typescript lacks the programmatic api
  • de85434 Merge pull request #3475 from abdulganiyy/refactor/move-languages-variable-cl...
  • 1697b7f refactor: move available languages closer to first usage
  • 2705bd4 Merge pull request #3472 from abdulganiyy/delete-unused-helper-file
  • 75b57c4 refactor: delete unused gulp tool utility helper file
  • c2aefdf Merge pull request #3469 from iamkanguk97/fix/runner-duplicated-binary
  • 54b08ae fix(runners): remove duplicated binary in failed command message
  • 731a09b chore(): release v11.0.23
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @types/express from 4.17.25 to 5.0.6

Commits

Updates @types/node from 22.20.1 to 26.1.1

Commits

Updates @types/pdfkit from 0.13.9 to 0.17.6

Commits

@dependabot @github

dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
overlay-web Error Error Jul 21, 2026 6:17am

@dependabot
Bump the dev-dependencies group across 1 directory with 6 updates
6e4a1a4 
Bumps the dev-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `5.22.0` | `7.9.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |
| [@nestjs/cli](https://github.com/nestjs/nest-cli) | `10.4.9` | `11.0.24` |
| [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `4.17.25` | `5.0.6` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.1` | `26.1.1` |
| [@types/pdfkit](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pdfkit) | `0.13.9` | `0.17.6` |



Updates `prisma` from 5.22.0 to 7.9.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.9.0/packages/cli)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `@nestjs/cli` from 10.4.9 to 11.0.24
- [Release notes](https://github.com/nestjs/nest-cli/releases)
- [Commits](nestjs/nest-cli@10.4.9...11.0.24)

Updates `@types/express` from 4.17.25 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `@types/node` from 22.20.1 to 26.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/pdfkit` from 0.13.9 to 0.17.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pdfkit)

---
updated-dependencies:
- dependency-name: "@nestjs/cli"
  dependency-version: 11.0.24
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: "@types/pdfkit"
  dependency-version: 0.17.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: prisma
  dependency-version: 7.9.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-6f3489ea25 branch from 8a42819 to 6e4a1a4 Compare July 21, 2026 05:19
@Dickson-Mwendia

Dickson-Mwendia commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

@copilot lets figure out whats happening here. Also merge dev to this branch too

Copilot AI commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

@copilot lets figure out whats happening here. Also merge dev to this branch too

Merged dev into this branch (commit 89e5de6). The only difference dev had was the CodeQL workflow additions from PR #229 (.github/workflows/codeql.yml).

As for what's happening here — this is a Dependabot-generated PR bumping 6 dev dependencies across major versions:

  • prisma 5.22 → 7.9 (major)
  • typescript 5.9.3 → 7.0.2 (major, not yet released — likely a pre-release)
  • @nestjs/cli 10.4.9 → 11.0.24 (major)
  • @types/express 4.17.25 → 5.0.6 (major)
  • @types/node 22.20.1 → 26.1.1 (major)
  • @types/pdfkit 0.13.9 → 0.17.6 (minor)

These are all major version bumps, so the main concern is whether any of them introduce breaking type changes that break the build (especially TypeScript 7.x and @types/express v5). Worth running npm run build across the workspaces to validate before merging.

Copilot AI requested a review from Dickson-Mwendia July 21, 2026 05:53
@Dickson-Mwendia

Dickson-Mwendia commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

@copilot what's up with the failing tests

fix: migrate to Prisma 7 and fix TypeScript 7 node:crypto type resolu…
35a7b63 
…tion

- prisma/schema.prisma: remove datasource url (Prisma 7 breaking change)
- prisma.config.ts: new file — datasource URL via defineConfig (Prisma 7)
- apps/api/package.json: upgrade @prisma/client from ^5.20.0 to ^7.9.0
- packages/shared/tsconfig.json: add types:["node"] for TypeScript 7
- all *.itest.ts: replace PrismaClient({ datasources: ... }) with
  process.env.DATABASE_URL ??= '<default>' + new PrismaClient() (Prisma 7)
- package-lock.json: updated for @prisma/client 7.9.0

Copilot AI commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

@copilot what's up with the failing tests

Two root causes, both fixed in the latest commit:

1. Prisma 7 breaking change (P1012)
The Prisma CLI was bumped to v7, which no longer accepts url = env("DATABASE_URL") in schema.prisma. Fixed by:

  • Removing url from schema.prisma's datasource block
  • Creating prisma.config.ts at the root with defineConfig({ datasource: { url: process.env.DATABASE_URL } })
  • Upgrading @prisma/client from ^5.20.0 → ^7.9.0 to match the CLI
  • Updating all 10 integration tests — Prisma 7 also removed new PrismaClient({ datasources: ... }); replaced with process.env.DATABASE_URL ??= '<default>'; new PrismaClient()

2. TypeScript 7 node:crypto type resolution failure
TypeScript 7 no longer auto-includes @types/node — you must explicitly opt in. Fixed by adding "types": ["node"] to packages/shared/tsconfig.json.

@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-6f3489ea25 branch July 27, 2026 11:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Dickson-Mwendia Dickson-Mwendia Awaiting requested review from Dickson-Mwendia

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Dickson-Mwendia