Skip to content

chore(deps): bump the npm-minor-and-patch group across 1 directory with 5 updates - #1173

Merged
Nanle-code merged 2 commits into
masterfrom
dependabot/npm_and_yarn/registry-api/npm-minor-and-patch-7ae07e5ff0
Oct 6, 2026
Merged

Nanle-code merged 2 commits into
masterfrom
dependabot/npm_and_yarn/registry-api/npm-minor-and-patch-7ae07e5ff0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 5 updates in the /registry-api directory:

Package From To
dotenv 18.0.4 18.0.5
mongoose 9.10.2 9.10.4
@typescript-eslint/eslint-plugin 8.70.1 8.71.0
eslint 10.11.0 10.12.0
supertest 7.3.0 7.3.1

Updates dotenv from 18.0.4 to 18.0.5

Changelog

Sourced from dotenv's changelog.

18.0.5 (2026-09-30)

Changed

  • Fix missing typescript module declaration (#1068)
  • Improve performance for large .env files (#1066)
Commits

Updates mongoose from 9.10.2 to 9.10.4

Release notes

Sourced from mongoose's releases.

9.10.4 / 2026-10-02

  • fix: handle MongoDB server 9.x returning collation: { locale: 'simple' } on all indexes #16557
  • fix(populate): resolve dotted parent path when collecting deferred sub-populate children #16538 jfits
  • fix(array): compare dates by value in indexOf() so pull() removes them #16535 giaBaoJS
  • fix(map): register $set when Map#set() replaces an array #16540 #16539 luantaraschi
  • fix(query): cast case and then expressions in $expr $switch branches #16534 kwy404
  • docs(guide): fix read preference tag set example #16541 NotAFlightRisk

9.10.3 / 2026-09-29

  • fix(model): preserve unsaved documents after ordered bulkSave errors #16533 #16532 IbrahimHafez1
  • fix(model): don't mutate the caller's update object in bulkWrite updateMany #16526 fadiroot
  • fix(schema): run setters declared on the union path itself #16528 giaBaoJS
  • fix(collection): open collection if connection was already opened #16527 #16525 #16524
  • fix(query+model): replace {MODEL} in cast error messages from update and bulkWrite casting #16529 #16502 #16480
Changelog

Sourced from mongoose's changelog.

9.10.4 / 2026-10-02

  • fix: handle MongoDB server 9.x returning collation: { locale: 'simple' } on all indexes #16557
  • fix(populate): resolve dotted parent path when collecting deferred sub-populate children #16538 jfits
  • fix(array): compare dates by value in indexOf() so pull() removes them #16535 giaBaoJS
  • fix(map): register $set when Map#set() replaces an array #16540 #16539 luantaraschi
  • fix(query): cast case and then expressions in $expr $switch branches #16534 kwy404
  • docs(guide): fix read preference tag set example #16541 NotAFlightRisk

9.10.3 / 2026-09-29

  • fix(model): preserve unsaved documents after ordered bulkSave errors #16533 #16532 IbrahimHafez1
  • fix(model): don't mutate the caller's update object in bulkWrite updateMany #16526 fadiroot
  • fix(schema): run setters declared on the union path itself #16528 giaBaoJS
  • fix(collection): open collection if connection was already opened #16527 #16525 #16524
  • fix(query+model): replace {MODEL} in cast error messages from update and bulkWrite casting #16529 #16502 #16480
Commits
  • 32efa1b chore: release 9.10.4
  • 1e86af9 Merge pull request #16557 from Automattic/vkarpov15/mongodb-9-fix
  • 4c12669 make schema index with collation: { locale: simple } equivalent to db index w...
  • e54b0f7 fix: handle MongoDB server 9.x returning collation: { locale: 'simple' } on...
  • 747473b Merge pull request #16541 from NotAFlightRisk/docs/guide-read-tag-sets
  • 5c61b8b correct replica set tags docs link
  • ca04d57 Merge pull request #16540 from luantaraschi/fix/map-set-registers-atomic-set
  • 42b676e Merge pull request #16538 from jfits/fix/deferred-subpopulate-dotted-path-lean
  • bec8680 Merge pull request #16534 from kwy404/fix-expr-switch-branch-casting
  • afffa20 Merge pull request #16556 from Automattic/dependabot/npm_and_yarn/master/esli...
  • Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.70.1 to 8.71.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.71.0

8.71.0 (2026-09-28)

🚀 Features

  • eslint-plugin: [no-unsafe-enum-assignment] add rule (#12732)

🩹 Fixes

  • eslint-plugin: [switch-exhaustiveness-check] always sort literal cases in stable order (#12885)
  • eslint-plugin: [unbound-method] respect this: void on class properties (7fce9127d)
  • eslint-plugin: [no-unnecessary-type-assertion] specialize generic assertion report message (#12832)
  • eslint-plugin: [no-misused-promises] handle a return outside of any function (#12912)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.71.0 (2026-09-28)

🚀 Features

  • eslint-plugin: [no-unsafe-enum-assignment] add rule (#12732)

🩹 Fixes

  • eslint-plugin: [no-misused-promises] handle a return outside of any function (#12912)
  • eslint-plugin: [no-unnecessary-type-assertion] specialize generic assertion report message (#12832)
  • eslint-plugin: [unbound-method] respect this: void on class properties (7fce9127d)
  • eslint-plugin: [switch-exhaustiveness-check] always sort literal cases in stable order (#12885)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 8695664 chore(release): publish 8.71.0
  • 99d759a feat(eslint-plugin): [no-unsafe-enum-assignment] add rule (#12732)
  • ae3ac15 docs(eslint-plugin): clarify checkTypePredicates assumptions (#12378)
  • 33824c1 fix(eslint-plugin): [no-misused-promises] handle a return outside of any func...
  • 7e25db3 fix(eslint-plugin): [no-unnecessary-type-assertion] specialize generic assert...
  • 8d7ab88 test: order union constituents stably in RuleTester tests
  • 7fce912 fix(eslint-plugin): [unbound-method] respect this: void on class properties
  • ce70016 fix(eslint-plugin): [switch-exhaustiveness-check] always sort literal cases i...
  • See full diff in compare view

Updates eslint from 10.11.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

  • 4618052 feat: handle astral letters in new-cap (#21357) (sary)
  • 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
  • efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
  • 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
  • 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
  • b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
  • 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
  • 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

  • 67eb586 docs: Update README (GitHub Actions Bot)
  • 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
  • 8816c1d docs: Update README (GitHub Actions Bot)
  • 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

  • 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
  • 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
  • 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
  • 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
  • f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
  • b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
  • 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)
Commits
  • a438ec3 10.12.0
  • 32a73f1 Build: changelog update for 10.12.0
  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
  • 152067f chore: update ecosystem plugins (#21362)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
  • 67eb586 docs: Update README
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371)
  • Additional commits viewable in compare view

Updates supertest from 7.3.0 to 7.3.1

Release notes

Sourced from supertest's releases.

v7.3.1

  • Merge pull request #907 from JH8459/fix/ephemeral-loopback-bind 884cd26
  • fix: bind ephemeral server to the loopback address it connects to e74a1e0

forwardemail/supertest@v7.3.0...v7.3.1

Commits
  • 3634bdd 7.3.1
  • 884cd26 Merge pull request #907 from JH8459/fix/ephemeral-loopback-bind
  • e74a1e0 fix: bind ephemeral server to the loopback address it connects to
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 5 updates

Bumps the npm-minor-and-patch group with 5 updates in the /registry-api directory:

| Package | From | To |
| --- | --- | --- |
| [dotenv](https://github.com/motdotla/dotenv) | `18.0.4` | `18.0.5` |
| [mongoose](https://github.com/Automattic/mongoose) | `9.10.2` | `9.10.4` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.70.1` | `8.71.0` |
| [eslint](https://github.com/eslint/eslint) | `10.11.0` | `10.12.0` |
| [supertest](https://github.com/ladjs/supertest) | `7.3.0` | `7.3.1` |



Updates `dotenv` from 18.0.4 to 18.0.5
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.4...v18.0.5)

Updates `mongoose` from 9.10.2 to 9.10.4
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@9.10.2...9.10.4)

Updates `@typescript-eslint/eslint-plugin` from 8.70.1 to 8.71.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/eslint-plugin)

Updates `eslint` from 10.11.0 to 10.12.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.11.0...v10.12.0)

Updates `supertest` from 7.3.0 to 7.3.1
- [Release notes](https://github.com/ladjs/supertest/releases)
- [Commits](forwardemail/supertest@v7.3.0...v7.3.1)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: mongoose
  dependency-version: 9.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.71.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: eslint
  dependency-version: 10.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: supertest
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Oct 6, 2026
@Nanle-code
Nanle-code merged commit 1c36525 into master Oct 6, 2026
12 of 61 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/registry-api/npm-minor-and-patch-7ae07e5ff0 branch October 6, 2026 13:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant