Skip to content

chore(deps): bump the backend-minor-and-patch group across 1 directory with 8 updates#109

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/backend-minor-and-patch-853932f2c2
Open

chore(deps): bump the backend-minor-and-patch group across 1 directory with 8 updates#109
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/backend-minor-and-patch-853932f2c2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown

Bumps the backend-minor-and-patch group with 7 updates in the /backend directory:

Package From To
axios 1.16.1 1.17.0
dotenv 17.3.1 17.4.2
mongoose 9.2.4 9.6.3
stripe 22.1.1 22.2.0
@types/node 25.4.0 25.9.2
@vitest/coverage-v8 4.1.7 4.1.8
mongodb-memory-server 11.1.0 11.2.0

Updates axios from 1.16.1 to 1.17.0

Release notes

Sourced from axios's releases.

v1.17.0 — June 1, 2026

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

🔒 Security Fixes

  • Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
  • Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)

🚀 New Features

  • HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)

🐛 Bug Fixes

  • Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)
  • Proxy TLS: Preserved user httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#10957)
  • React Native FormData: Cleared default Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#10898)
  • Headers: Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (#10875)
  • Request Data Merging: Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (#10812)
  • Bundler Compatibility: Converted resolveConfig from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (#10891)
  • Types: Corrected AxiosHeaders.toJSON() return types and updated CommonJS isCancel typings to narrow to CanceledError<T>. (#10956, #10952)
  • Build Tooling: Avoided emitting a null Authorization header from the GitHub build helper when GITHUB_TOKEN is unset. (#10931)

🔧 Maintenance & Chores

  • HTTP/2 Internals: Extracted Http2Sessions into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (#10861)
  • Package Publishing: Reduced published package size by switching to a files allowlist and dropping unneeded unminified bundle source maps. (#10939)
  • CI and Release Automation: Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (#10907, #10911, #10916, #10927, #10935, #10983)
  • Developer Workflow: Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (#10925, #10914, #10958)
  • Documentation and Policy: Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (#10890, #10889, #10921, #10945, #10905, #10933, #10915, #10887, #10955)
  • Dependencies: Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, fs-extra, qs, docs dependencies, and GitHub Actions dependencies including actions/dependency-review-action and zizmorcore/zizmor-action. (#10871, #10879, #10918, #10919, #10934, #10947, #10954, #10960)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

Changelog

Sourced from axios's changelog.

v1.17.0 — June 1, 2026

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

🔒 Security Fixes

  • Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
  • Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)

🚀 New Features

  • HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)

🐛 Bug Fixes

  • Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)
  • Proxy TLS: Preserved user httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#10957)
  • React Native FormData: Cleared default Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#10898)
  • Headers: Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (#10875)
  • Request Data Merging: Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (#10812)
  • Bundler Compatibility: Converted resolveConfig from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (#10891)
  • Types: Corrected AxiosHeaders.toJSON() return types and updated CommonJS isCancel typings to narrow to CanceledError<T>. (#10956, #10952)
  • Build Tooling: Avoided emitting a null Authorization header from the GitHub build helper when GITHUB_TOKEN is unset. (#10931)

🔧 Maintenance & Chores

  • HTTP/2 Internals: Extracted Http2Sessions into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (#10861)
  • Package Publishing: Reduced published package size by switching to a files allowlist and dropping unneeded unminified bundle source maps. (#10939)
  • CI and Release Automation: Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (#10907, #10911, #10916, #10927, #10935, #10983)
  • Developer Workflow: Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (#10925, #10914, #10958)
  • Documentation and Policy: Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (#10890, #10889, #10921, #10945, #10905, #10933, #10915, #10887, #10955)
  • Dependencies: Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, fs-extra, qs, docs dependencies, and GitHub Actions dependencies including actions/dependency-review-action and zizmorcore/zizmor-action. (#10871, #10879, #10918, #10919, #10934, #10947, #10954, #10960)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

Commits

Updates dotenv from 17.3.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

  • Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)
Commits

Updates mongoose from 9.2.4 to 9.6.3

Release notes

Sourced from mongoose's releases.

9.6.3 / 2026-05-27

9.6.2 / 2026-05-08

  • fix(document): correctly handle modified subpaths when parent path is unset after modifying #16271 #16252
  • types: handle compiling with exactOptionalPropertyTypes #16277 #16273
  • chore: align Node version docs and types #16270 AbdelrahmanHafez

9.6.1 / 2026-04-29

9.6.0 / 2026-04-28

  • feat: upgrade mongodb node driver to 7.2 #16245
  • feat(schematype): support allowNull option to disallow null values even if not required #16237 #15905
  • types(query): make QueryFilter respect string unions and enums #16242 #16240
  • types: export Projector and ArrayProjectionOperators #16243 #16235

9.5.0 / 2026-04-20

  • feat(debug): add timestamp option to debug output #16216 rejunp
  • feat(query): add cloneUpdate option to explicitly disable update cloning #16230 #16202
  • feat(query): extend defaults query option to find() #16226 sderrow
  • fix(query): avoid cloning update until absolutely necessary to better support updates with __proto__ #16230 #16202
  • fix(query): avoid treating documents with a $set() method as objects with a $set property when casting updates #16230
  • fix(queryHelpers): pass default options to discriminators #16227 #16226
  • fix(document): handle including and excluding nested paths with optimistic concurrency #16177 #16054
  • fix(model): throw ObjectParameterError in insertOne() if doc is not an object #16221 IshitaSingh0822
  • fix(cast): preserve reason in CastError message after setModel() #16167 White-Devil2839
  • perf(model): remove unnecessary clone in findOneAndUpdate() #16230
  • perf: use kareem 3.3.0 mongoosejs/kareem#45 #16229
  • chore: use TSTyche assertions #16222 mrazauskas

9.4.1 / 2026-04-03

  • Revert "fix(setDefaultsOnInsert): run setters on default values during upsert" #16218 #16051

9.4.0 / 2026-04-03

  • perf(document+model): avoid parallel save error instantiation, simplify resetting atomics, streamline validation and collection handling
  • feat(document): add $getChanges() alias, deprecate getChanges() #15959 techcodie

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.6.3 / 2026-05-27

8.24.0 / 2026-05-14

  • feat(aggregate): add pipelineForUnionWith() helper to allow reusing pipelines with $unionWith in TypeScript #16247 #16041 #16033
  • fix(connection): handle calling watch() on disconnected connection #16246 #16034
  • types: handle compiling with exactOptionalPropertyTypes #16286 #16273

9.6.2 / 2026-05-08

  • fix(document): correctly handle modified subpaths when parent path is unset after modifying #16271 #16252
  • types: handle compiling with exactOptionalPropertyTypes #16277 #16273
  • chore: align Node version docs and types #16270 AbdelrahmanHafez

9.6.1 / 2026-04-29

9.6.0 / 2026-04-28

  • feat: upgrade mongodb node driver to 7.2 #16245
  • feat(schematype): support allowNull option to disallow null values even if not required #16237 #15905
  • types(query): make QueryFilter respect string unions and enums #16242 #16240
  • types: export Projector and ArrayProjectionOperators #16243 #16235

8.23.1 / 2026-04-23

  • fix(model): support sort option in Model.bulkWrite() updateOne and replaceOne operations #16091 #16079
  • fix(setDefaultsOnInsert): check child filter paths before applying defaults (backport #16031 to 8.x) #16219 marklai1998
  • fix(schema): always pass raw string value to error validators, only trim to 30 chars for maxlength validator #16238 #16236 #15550 #15571

9.5.0 / 2026-04-20

  • feat(debug): add timestamp option to debug output #16216 rejunp
  • feat(query): add cloneUpdate option to explicitly disable update cloning #16230 #16202
  • feat(query): extend defaults query option to find() #16226 sderrow
  • fix(query): avoid cloning update until absolutely necessary to better support updates with __proto__ #16230 #16202
  • fix(query): avoid treating documents with a $set() method as objects with a $set property when casting updates #16230
  • fix(queryHelpers): pass default options to discriminators #16227 #16226
  • fix(document): handle including and excluding nested paths with optimistic concurrency #16177 #16054
  • fix(model): throw ObjectParameterError in insertOne() if doc is not an object #16221 IshitaSingh0822
  • fix(cast): preserve reason in CastError message after setModel() #16167 White-Devil2839

... (truncated)

Commits
  • f4d651d chore: release 9.6.3
  • 5841200 docs: add section about Mongoose Studio to README
  • 396607a Merge pull request #16297 from kaseken/fix/remove-broken-examples-link
  • 912d164 docs: remove broken link to deleted examples/schema/schema.js
  • dbaa16d Merge pull request #16296 from Automattic/fix/copy-code-lint-space
  • 9cf3b58 style(docs): fix lint errors in copy-code.js
  • cb2985e Merge pull request #16295 from torbiak-samdesk/maxPoolSize
  • 83d1599 docs: update default pool sizes on createConnection()
  • 5dc742b docs: show copy button when tabbing
  • d2699d5 Merge pull request #16294 from DraXx-Van/fix-copy-button-scroll
  • Additional commits viewable in compare view

Updates stripe from 22.1.1 to 22.2.0

Release notes

Sourced from stripe's releases.

v22.2.0

This release changes the pinned API version to 2026-05-27.dahlia.

  • #2710 Update generated code
    • Add support for new resource V2.Commerce.ProductCatalogImport
    • Add support for create and retrieve methods on resource V2.Commerce.ProductCatalogImport
    • Add support for bizum_payments and scalapay_payments on Account.capabilities, AccountCreateParams.capabilities, and AccountUpdateParams.capabilities
    • Add support for automatic_transfer_rules_by_currency on BalanceSettingUpdateParams.payments.payouts and BalanceSettings.payments.payouts
    • Add support for start_of_day on BalanceSettingUpdateParams.payments.settlement_timing and BalanceSettings.payments.settlement_timing
    • Add support for description on ChargeCreateParams.transfer_data, PaymentIntent.transfer_data, PaymentIntentCreateParams.transfer_data, and PaymentIntentUpdateParams.transfer_data
    • Add support for bizum on Charge.payment_method_details, ConfirmationToken.payment_method_preview, ConfirmationTokenCreateParams.testHelpers.payment_method_data, PaymentAttemptRecord.payment_method_details, PaymentIntent.payment_method_options, PaymentIntentConfirmParams.payment_method_data, PaymentIntentConfirmParams.payment_method_options, PaymentIntentCreateParams.payment_method_data, PaymentIntentCreateParams.payment_method_options, PaymentIntentUpdateParams.payment_method_data, PaymentIntentUpdateParams.payment_method_options, PaymentMethodConfigurationCreateParams, PaymentMethodConfigurationUpdateParams, PaymentMethodConfiguration, PaymentMethodCreateParams, PaymentMethod, PaymentRecord.payment_method_details, SetupIntent.payment_method_options, SetupIntentConfirmParams.payment_method_data, SetupIntentConfirmParams.payment_method_options, SetupIntentCreateParams.payment_method_data, SetupIntentCreateParams.payment_method_options, SetupIntentUpdateParams.payment_method_data, and SetupIntentUpdateParams.payment_method_options
    • Add support for scalapay on Charge.payment_method_details, Checkout.Session.payment_method_options, Checkout.SessionCreateParams.payment_method_options, ConfirmationToken.payment_method_preview, ConfirmationTokenCreateParams.testHelpers.payment_method_data, PaymentAttemptRecord.payment_method_details, PaymentIntent.payment_method_options, PaymentIntentConfirmParams.payment_method_data, PaymentIntentConfirmParams.payment_method_options, PaymentIntentCreateParams.payment_method_data, PaymentIntentCreateParams.payment_method_options, PaymentIntentUpdateParams.payment_method_data, PaymentIntentUpdateParams.payment_method_options, PaymentMethodConfigurationCreateParams, PaymentMethodConfigurationUpdateParams, PaymentMethodConfiguration, PaymentMethodCreateParams, PaymentMethod, PaymentRecord.payment_method_details, Refund.destination_details, SetupIntentConfirmParams.payment_method_data, SetupIntentCreateParams.payment_method_data, and SetupIntentUpdateParams.payment_method_data
    • Add support for mandate on Charge.payment_method_details.twint, PaymentAttemptRecord.payment_method_details.twint, and PaymentRecord.payment_method_details.twint
    • Add support for new values bizum and scalapay on enums Checkout.SessionCreateParams.excluded_payment_method_types, PaymentIntentConfirmParams.excluded_payment_method_types, PaymentIntentCreateParams.excluded_payment_method_types, PaymentIntentUpdateParams.excluded_payment_method_types, SetupIntentCreateParams.excluded_payment_method_types, and SetupIntentUpdateParams.excluded_payment_method_types
    • Change type of Checkout.SessionCreateParams.payment_method_options.twint.setup_future_usage, PaymentIntentConfirmParams.payment_method_options.twint.setup_future_usage, PaymentIntentCreateParams.payment_method_options.twint.setup_future_usage, and PaymentIntentUpdateParams.payment_method_options.twint.setup_future_usage from literal('none') to enum('none'|'off_session')
    • Add support for new values bizum and scalapay on enum Checkout.SessionCreateParams.payment_method_types
    • ⚠️ Change type of Checkout.Session.payment_method_options.twint.setup_future_usage and PaymentIntent.payment_method_options.twint.setup_future_usage from literal('none') to enum('none'|'off_session')
    • Add support for new values bizum and scalapay on enums ConfirmationTokenCreateParams.testHelpers.payment_method_data.type, PaymentIntentConfirmParams.payment_method_data.type, PaymentIntentCreateParams.payment_method_data.type, PaymentIntentUpdateParams.payment_method_data.type, SetupIntentConfirmParams.payment_method_data.type, SetupIntentCreateParams.payment_method_data.type, and SetupIntentUpdateParams.payment_method_data.type
    • ⚠️ Add support for new values bizum and scalapay on enums ConfirmationToken.payment_method_preview.type and PaymentMethod.type
    • Add support for new values bizum and scalapay on enums CustomerListPaymentMethodsParams.type, PaymentMethodCreateParams.type, and PaymentMethodListParams.type
    • Add support for credited_items on InvoiceItem.proration_details
    • Add support for new value twint on enums InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types
    • Add support for discountable on InvoiceCreatePreviewParams.schedule_details.phases[].add_invoice_items[], SubscriptionCreateParams.add_invoice_items[], SubscriptionSchedule.phases[].add_invoice_items[], SubscriptionScheduleCreateParams.phases[].add_invoice_items[], SubscriptionScheduleUpdateParams.phases[].add_invoice_items[], and SubscriptionUpdateParams.add_invoice_items[]
    • Add support for billing_schedules on InvoiceCreatePreviewParams.subscription_details, SubscriptionCreateParams, SubscriptionUpdateParams, and Subscription
    • Add support for new value max_billed_until on enums InvoiceCreatePreviewParams.subscription_details.cancel_at, SubscriptionCreateParams.cancel_at, and SubscriptionUpdateParams.cancel_at
    • Add support for amount_paid_off_stripe on Invoice
    • ⚠️ Add support for new value twint on enums Invoice.payment_settings.payment_method_types and Subscription.payment_settings.payment_method_types
    • Add support for twint on Mandate.payment_method_details and SetupAttempt.payment_method_details
    • Add support for metadata on PaymentIntent.transfer_data, PaymentIntentCreateParams.transfer_data, PaymentIntentUpdateParams.transfer_data, and Subscription.pending_update
    • Add support for payment_data on PaymentIntent.transfer_data, PaymentIntentCreateParams.transfer_data, and PaymentIntentUpdateParams.transfer_data
    • ⚠️ Add support for new values bizum and scalapay on enums PaymentIntent.excluded_payment_method_types and SetupIntent.excluded_payment_method_types
    • Add support for blik_authorize on PaymentIntent.next_action and SetupIntent.next_action
    • Add support for payment_method_options on PaymentLinkCreateParams, PaymentLinkUpdateParams, and PaymentLink
    • Add support for new value bizum on enums PaymentLinkCreateParams.payment_method_types and PaymentLinkUpdateParams.payment_method_types
    • ⚠️ Add support for new value bizum on enum PaymentLink.payment_method_types
    • Add support for active on PaymentMethodConfigurationListParams
    • Add support for billed_until on SubscriptionItem
    • Add support for discount and discounts on Subscription.pending_update
    • Add support for verifone_m425, verifone_p630, verifone_ux700, and verifone_v660p on Terminal.ConfigurationCreateParams, Terminal.ConfigurationUpdateParams, and Terminal.Configuration
    • Add support for new values simulated_verifone_m425, simulated_verifone_p630, simulated_verifone_ux700, simulated_verifone_v660p, verifone_m425, verifone_p630, verifone_ux700, and verifone_v660p on enum Terminal.ReaderListParams.device_type
    • Add support for api_error and print_content on Terminal.Reader.action
    • ⚠️ Add support for new value print_content on enum Terminal.Reader.action.type
    • ⚠️ Add support for new values simulated_verifone_m425, simulated_verifone_p630, simulated_verifone_ux700, simulated_verifone_v660p, verifone_m425, verifone_p630, verifone_ux700, and verifone_v660p on enum Terminal.Reader.device_type
    • Add support for customer on TestHelpers.TestClockCreateParams
    • Add support for new value 2026-05-27.dahlia on enum WebhookEndpointCreateParams.api_version
    • Add support for signer on V2.Core.Account.identity.business_details.documents.proof_of_registration, V2.Core.Account.identity.business_details.documents.proof_of_ultimate_beneficial_ownership, V2.Core.AccountCreateParams.identity.business_details.documents.proof_of_registration, V2.Core.AccountCreateParams.identity.business_details.documents.proof_of_ultimate_beneficial_ownership, V2.Core.AccountTokenCreateParams.identity.business_details.documents.proof_of_registration, V2.Core.AccountTokenCreateParams.identity.business_details.documents.proof_of_ultimate_beneficial_ownership, V2.Core.AccountUpdateParams.identity.business_details.documents.proof_of_registration, and V2.Core.AccountUpdateParams.identity.business_details.documents.proof_of_ultimate_beneficial_ownership
    • Add support for azure_event_grid on V2.Core.EventDestinationCreateParams and V2.Core.EventDestination
    • ⚠️ Add support for new value no_azure_partner_topic_exists on enum V2.Core.EventDestination.status_details.disabled.reason
    • ⚠️ Add support for new value azure_event_grid on enum V2.Core.EventDestination.type
    • Add support for new value azure_event_grid on enum V2.Core.EventDestinationCreateParams.type

... (truncated)

Changelog

Sourced from stripe's changelog.

22.2.0 - 2026-05-27

This release changes the pinned API version to 2026-05-27.dahlia.

  • #2710 Update generated code
    • Add support for new resource V2.Commerce.ProductCatalogImport
    • Add support for create and retrieve methods on resource V2.Commerce.ProductCatalogImport
    • Add support for bizum_payments and scalapay_payments on Account.capabilities, AccountCreateParams.capabilities, and AccountUpdateParams.capabilities
    • Add support for automatic_transfer_rules_by_currency on BalanceSettingUpdateParams.payments.payouts and BalanceSettings.payments.payouts
    • Add support for start_of_day on BalanceSettingUpdateParams.payments.settlement_timing and BalanceSettings.payments.settlement_timing
    • Add support for description on ChargeCreateParams.transfer_data, PaymentIntent.transfer_data, PaymentIntentCreateParams.transfer_data, and PaymentIntentUpdateParams.transfer_data
    • Add support for bizum on Charge.payment_method_details, ConfirmationToken.payment_method_preview, ConfirmationTokenCreateParams.testHelpers.payment_method_data, PaymentAttemptRecord.payment_method_details, PaymentIntent.payment_method_options, PaymentIntentConfirmParams.payment_method_data, PaymentIntentConfirmParams.payment_method_options, PaymentIntentCreateParams.payment_method_data, PaymentIntentCreateParams.payment_method_options, PaymentIntentUpdateParams.payment_method_data, PaymentIntentUpdateParams.payment_method_options, PaymentMethodConfigurationCreateParams, PaymentMethodConfigurationUpdateParams, PaymentMethodConfiguration, PaymentMethodCreateParams, PaymentMethod, PaymentRecord.payment_method_details, SetupIntent.payment_method_options, SetupIntentConfirmParams.payment_method_data, SetupIntentConfirmParams.payment_method_options, SetupIntentCreateParams.payment_method_data, SetupIntentCreateParams.payment_method_options, SetupIntentUpdateParams.payment_method_data, and SetupIntentUpdateParams.payment_method_options
    • Add support for scalapay on Charge.payment_method_details, Checkout.Session.payment_method_options, Checkout.SessionCreateParams.payment_method_options, ConfirmationToken.payment_method_preview, ConfirmationTokenCreateParams.testHelpers.payment_method_data, PaymentAttemptRecord.payment_method_details, PaymentIntent.payment_method_options, PaymentIntentConfirmParams.payment_method_data, PaymentIntentConfirmParams.payment_method_options, PaymentIntentCreateParams.payment_method_data, PaymentIntentCreateParams.payment_method_options, PaymentIntentUpdateParams.payment_method_data, PaymentIntentUpdateParams.payment_method_options, PaymentMethodConfigurationCreateParams, PaymentMethodConfigurationUpdateParams, PaymentMethodConfiguration, PaymentMethodCreateParams, PaymentMethod, PaymentRecord.payment_method_details, Refund.destination_details, SetupIntentConfirmParams.payment_method_data, SetupIntentCreateParams.payment_method_data, and SetupIntentUpdateParams.payment_method_data
    • Add support for mandate on Charge.payment_method_details.twint, PaymentAttemptRecord.payment_method_details.twint, and PaymentRecord.payment_method_details.twint
    • Add support for new values bizum and scalapay on enums Checkout.SessionCreateParams.excluded_payment_method_types, PaymentIntentConfirmParams.excluded_payment_method_types, PaymentIntentCreateParams.excluded_payment_method_types, PaymentIntentUpdateParams.excluded_payment_method_types, SetupIntentCreateParams.excluded_payment_method_types, and SetupIntentUpdateParams.excluded_payment_method_types
    • Change type of Checkout.SessionCreateParams.payment_method_options.twint.setup_future_usage, PaymentIntentConfirmParams.payment_method_options.twint.setup_future_usage, PaymentIntentCreateParams.payment_method_options.twint.setup_future_usage, and PaymentIntentUpdateParams.payment_method_options.twint.setup_future_usage from literal('none') to enum('none'|'off_session')
    • Add support for new values bizum and scalapay on enum Checkout.SessionCreateParams.payment_method_types
    • ⚠️ Change type of Checkout.Session.payment_method_options.twint.setup_future_usage and PaymentIntent.payment_method_options.twint.setup_future_usage from literal('none') to enum('none'|'off_session')
    • Add support for new values bizum and scalapay on enums ConfirmationTokenCreateParams.testHelpers.payment_method_data.type, PaymentIntentConfirmParams.payment_method_data.type, PaymentIntentCreateParams.payment_method_data.type, PaymentIntentUpdateParams.payment_method_data.type, SetupIntentConfirmParams.payment_method_data.type, SetupIntentCreateParams.payment_method_data.type, and SetupIntentUpdateParams.payment_method_data.type
    • ⚠️ Add support for new values bizum and scalapay on enums ConfirmationToken.payment_method_preview.type and PaymentMethod.type
    • Add support for new values bizum and scalapay on enums CustomerListPaymentMethodsParams.type, PaymentMethodCreateParams.type, and PaymentMethodListParams.type
    • Add support for credited_items on InvoiceItem.proration_details
    • Add support for new value twint on enums InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.paym...

      Description has been truncated

…y with 8 updates

Bumps the backend-minor-and-patch group with 7 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [axios](https://github.com/axios/axios) | `1.16.1` | `1.17.0` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.3.1` | `17.4.2` |
| [mongoose](https://github.com/Automattic/mongoose) | `9.2.4` | `9.6.3` |
| [stripe](https://github.com/stripe/stripe-node) | `22.1.1` | `22.2.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.4.0` | `25.9.2` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.7` | `4.1.8` |
| [mongodb-memory-server](https://github.com/typegoose/mongodb-memory-server/tree/HEAD/packages/mongodb-memory-server) | `11.1.0` | `11.2.0` |



Updates `axios` from 1.16.1 to 1.17.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.1...v1.17.0)

Updates `dotenv` from 17.3.1 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.3.1...v17.4.2)

Updates `mongoose` from 9.2.4 to 9.6.3
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@9.2.4...9.6.3)

Updates `stripe` from 22.1.1 to 22.2.0
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v22.1.1...v22.2.0)

Updates `@types/node` from 25.4.0 to 25.9.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.7 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/coverage-v8)

Updates `mongodb-memory-server` from 11.1.0 to 11.2.0
- [Release notes](https://github.com/typegoose/mongodb-memory-server/releases)
- [Changelog](https://github.com/typegoose/mongodb-memory-server/blob/master/CHANGELOG.md)
- [Commits](https://github.com/typegoose/mongodb-memory-server/commits/v11.2.0/packages/mongodb-memory-server)

Updates `vitest` from 4.1.7 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: mongoose
  dependency-version: 9.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: stripe
  dependency-version: 22.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 25.9.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-and-patch
- dependency-name: mongodb-memory-server
  dependency-version: 11.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: backend, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants