Skip to content

Bump uuid, node-cron, remult and cypress - #220

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-772fac912e
Open

Bump uuid, node-cron, remult and cypress#220
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-772fac912e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps uuid, node-cron, remult and cypress. These dependencies needed to be updated together.
Updates uuid from 11.1.0 to 14.0.2

Release notes

Sourced from uuid's releases.

v14.0.2

14.0.2 (2026-08-18)

Bug Fixes

  • v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
  • v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
  • v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.2 (2026-08-18)

Bug Fixes

  • v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
  • v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
  • v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

  • update to typescript@5.2 (#887)
  • remove CommonJS support (#886)
  • drop node@16 support (#883)

... (truncated)

Commits
  • fd59f02 chore(main): release 14.0.2 (#967)
  • f3c564e docs: point the Node support permalink at the CI version matrix (#974)
  • b1da338 fix(v1): set the multicast bit on v1Bytes's own randomly-generated node (#973)
  • 6adcc1d fix(v1): carry nsecs overflow into the timestamp's high bits (#972)
  • ea83515 docs: cleanup API summary (#968)
  • ac36860 chore: pin publint version in CI (#966)
  • a67db57 fix(v7): align default seq formula in v7Bytes with updateV7State (#965)
  • 7017780 chore(main): release 14.0.1 (#964)
  • f2c3e4b chore: fix release-please workflow (#963)
  • 27ffae5 fix: add types condition to node export for moduleResolution bundler (#961)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates node-cron from 3.0.3 to 4.6.0

Release notes

Sourced from node-cron's releases.

v4.6.0

4.6.0 (2026-07-04)

Added

  • add cron.shutdown(timeout?) for graceful process teardown (#589) (35f1a61)
  • add unref option for heartbeat timers (#588) (35cb140)
  • day-of-month: Quartz-style W, L-n and ? modifiers (#570) (cbe379b)
  • emit task:failed when a background daemon exits unexpectedly (7bd91d6)
  • support cron expression nicknames (@​yearly, @​daily, etc.) (#579) (6a6e14e)

Fixed

  • background task state transition on stop/destroy without fork (#584) (9dbc6de)
  • clear jitter timeout on runner stop (#583) (28b8146)
  • CommonJS type resolution (#608) (ee9d294)
  • correct falied->failed typo in daemon task error log (#594) (66c6961)
  • correct shutdown listener typing that broke the build (#595) (7aac3ad)
  • correlate execute() by id, isolate event hooks, and stop counting manual runs toward maxExecutions (#607) (0f039a9)
  • daemon serialized task state with wrong field name (#587) (688d465)
  • expand inverted ranges with wrap-around instead of silently swapping (#602) (a10ae53)
  • harden cron.shutdown() teardown (#598) (a0b0d1f)
  • kill orphan child process on background task stop/destroy timeout (#582) (8179e10)
  • make concurrent background start() await the daemon and time out coordinator lookups (#605) (446f03a)
  • make lifecycle calls on a destroyed task safe no-ops (#600) (7fa9795)
  • prevent double destroy on registry remove (#585) (8ae9f06)
  • release-please: match existing v-prefixed tags (#575) (e43c152)
  • runner promise bugs that could hang scheduling or crash process (#581) (0ae62be)
  • unref the IPC channel so background tasks let the process exit (#599) (534e593)
  • validate the cron expression when scheduling a task (#603) (196e6cd)
  • validate() consistency and multi-asterisk expansion (#606) (8cf41c4)
  • weekday 7-to-0 conversion corrupting ranges (#580) (c8a3943)

Changed

  • replace chai and sinon with native vitest assertions (#590) (d29d07a)

v4.5.0

Added

  • lastRun() introspection getter on ScheduledTask: returns { date, result } after a successful execution, { date, error } after a failed one, or null before the first run.
  • Extended day-of-week tokens: <weekday>#<nth> (nth weekday of the month, e.g. 1#1 for the first Monday) and <weekday>L (last weekday of the month, e.g. 5L for the last Friday).

Performance

  • Cache Intl.DateTimeFormat instances per timezone instead of rebuilding on every call.
  • Parse the cron expression once per TimeMatcher instead of re-parsing in MatcherWalker.
  • Compute the GMT offset lazily (only when formatting ISO strings, not during the next-run search).
  • Replace crypto.randomBytes with crypto.randomUUID for internal ID generation.

... (truncated)

Changelog

Sourced from node-cron's changelog.

4.6.0 (2026-07-04)

Added

  • add cron.shutdown(timeout?) for graceful process teardown (#589) (35f1a61)
  • add unref option for heartbeat timers (#588) (35cb140)
  • day-of-month: Quartz-style W, L-n and ? modifiers (#570) (cbe379b)
  • emit task:failed when a background daemon exits unexpectedly (7bd91d6)
  • support cron expression nicknames (@​yearly, @​daily, etc.) (#579) (6a6e14e)

Fixed

  • background task state transition on stop/destroy without fork (#584) (9dbc6de)
  • clear jitter timeout on runner stop (#583) (28b8146)
  • CommonJS type resolution (#608) (ee9d294)
  • correct falied->failed typo in daemon task error log (#594) (66c6961)
  • correct shutdown listener typing that broke the build (#595) (7aac3ad)
  • correlate execute() by id, isolate event hooks, and stop counting manual runs toward maxExecutions (#607) (0f039a9)
  • daemon serialized task state with wrong field name (#587) (688d465)
  • expand inverted ranges with wrap-around instead of silently swapping (#602) (a10ae53)
  • harden cron.shutdown() teardown (#598) (a0b0d1f)
  • kill orphan child process on background task stop/destroy timeout (#582) (8179e10)
  • make concurrent background start() await the daemon and time out coordinator lookups (#605) (446f03a)
  • make lifecycle calls on a destroyed task safe no-ops (#600) (7fa9795)
  • prevent double destroy on registry remove (#585) (8ae9f06)
  • release-please: match existing v-prefixed tags (#575) (e43c152)
  • runner promise bugs that could hang scheduling or crash process (#581) (0ae62be)
  • unref the IPC channel so background tasks let the process exit (#599) (534e593)
  • validate the cron expression when scheduling a task (#603) (196e6cd)
  • validate() consistency and multi-asterisk expansion (#606) (8cf41c4)
  • weekday 7-to-0 conversion corrupting ranges (#580) (c8a3943)

Changed

  • replace chai and sinon with native vitest assertions (#590) (d29d07a)

[4.5.0] - 2026-06-21

Added

  • lastRun() introspection getter on ScheduledTask: returns { date, result } after a successful execution, { date, error } after a failed one, or null before the first run. (#557)
  • Extended day-of-week tokens: <weekday>#<nth> (nth weekday of the month, e.g. 1#1 for the first Monday) and <weekday>L (last weekday of the month, e.g. 5L for the last Friday). (#560)

Performance

... (truncated)

Commits
  • 0be2ca0 chore(main): release 4.6.0 (#576)
  • 813ab08 docs: note bundlers must keep node-cron external for background tasks (#610)
  • ee9d294 fix: CommonJS type resolution (#608)
  • 0f039a9 fix: correlate execute() by id, isolate event hooks, and stop counting manual...
  • 8cf41c4 fix: validate() consistency and multi-asterisk expansion (#606)
  • 446f03a fix: make concurrent background start() await the daemon and time out coordin...
  • 88647a6 docs: note DST fall-back behavior for sub-hourly schedules and the UTC workar...
  • 196e6cd fix: validate the cron expression when scheduling a task (#603)
  • 7bd91d6 feat: emit task:failed when a background daemon exits unexpectedly (#601)
  • a10ae53 fix: expand inverted ranges with wrap-around instead of silently swapping (#602)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for node-cron since your current version.


Updates remult from 2.7.33 to 3.3.18

Release notes

Sourced from remult's releases.

v3.3.15

What's Changed

  • feat: add Node built-in SQLite data provider by @​linoch512 in remult/remult#1034
  • groupBy now ignores orderBy fields that are not part of the group by (previously they were passed through to the database, producing an invalid grouped query on SQL Server / Postgres). The rest api additionally ignores orderBy fields that are not included in the api.

New Contributors

Full Changelog: remult/remult@v3.3.14...v3.3.15

v3.3.1

What's Changed

Full Changelog: remult/remult@v3.3.0...v3.3.1

v3.3.0

What's Changed

  • #820 - option to eliminate update/insert result to improve performance. 
    repo(Task).Insert({ id: 1, name: 'test' }, { select: 'none' })
  • Added option for deleteMany({where:'all'}) and updateMany({where:'all',set:{ status:0 }})
  • Fixed a bunch if issues around ValueConverter.DateOnlyString
  • Query-args-and-to-db-sql by @​noam-honig in remult/remult#801

Full Changelog: remult/remult@v3.2.3...v3.3.0

v3.2.0

What's Changed

  • select fields by @​noam-honig in remult/remult#786 Added support for select in find, now you can select which fields will be part of the query and part of the result. 
    await repo(Task).find({ select: { id: true, title: true } })
  • update deps, fixes import_remult.Fields by @​delebash in remult/remult#783

New Contributors

Full Changelog: remult/remult@v3.1.2...v3.2.0

... (truncated)

Changelog

Sourced from remult's changelog.

[3.3.18] - 2026-08-30

  • Fixed ArrayEntityDataProvider storing omitted/undefined nullable fields as undefined instead of null, so filters like { date: null } missed rows inserted without a value

[3.3.17] - 2026-08-24

  • Fixed TypeError: Cannot delete property on client save when a field has includeInApi: false and the entity was subscribed (e.g. grid dirty tracking)

[3.3.16] - 2026-07-14

  • Added support for default values without an arrow function
  • Added type info in the field's function response - used for typing stuff :)

[3.3.15] - 2026-07-10

  • Added a Node built-in SQLite data provider (remult/remult-node-sqlite), using the native node:sqlite module (#1034).
  • Thanks to @​linoch512 for their first contribution
  • groupBy now ignores orderBy fields that are not part of the group by (previously they were passed through to the database, producing an invalid grouped query on SQL Server / Postgres). The rest api additionally ignores orderBy fields that are not included in the api.

[3.3.14] - 2026-07-08

  • Fixed a memory leak related to usage of repo(x,y) with infinite different y

[3.3.13] - 2026-06-09

  • Fixed groupBy/aggregate with limit/page but no orderBy emitting OFFSET/FETCH without an ORDER BY, which is invalid on SQL Server. A grouped query now falls back to ordering by the group columns, and a pure aggregate skips paging entirely.
  • The query api action no longer leaks the items' paging into the aggregate, so the aggregate summarizes the whole filtered set.

[3.3.12] - 2026-06-01

  • Fixed issue with auto increment in ArrayEntityDataProvider where the dbname of the auto increment field was different than the member key

[3.3.10] - 2026-05-19

  • Improve Indexed db connection error further

[3.3.9] - 2026-05-15

  • Change Postgres Table Alter Autoincrement to Use Serial, by @​jckwik - remult/remult#968
  • Thanks to @​jckwik for their first contribution
  • Improved handling of indexed db connection close etc...

[3.3.8] - 2026-05-12

  • Fixed issue with indexed db recovery after close (ios closes long open indexed db)

[3.3.7] - 2026-04-09

  • Reduced npm package size by > 50%

... (truncated)

Commits

Updates cypress from 14.3.0 to 16.0.0

Release notes

Sourced from cypress's releases.

v16.0.0

Changelog: https://docs.cypress.io/app/references/changelog#16-0-0

v15.21.1

Changelog: https://docs.cypress.io/app/references/changelog#15-21-1

v15.21.0

Changelog: https://docs.cypress.io/app/references/changelog#15-21-0

v15.20.1

Changelog: https://docs.cypress.io/app/references/changelog#15-20-1

v15.20.0

Changelog: https://docs.cypress.io/app/references/changelog#15-20-0

v15.19.0

Changelog: https://docs.cypress.io/app/references/changelog#15-19-0

v15.18.1

Changelog: https://docs.cypress.io/app/references/changelog#15-18-1

v15.18.0

Changelog: https://docs.cypress.io/app/references/changelog#15-18-0

v15.17.0

Changelog: https://docs.cypress.io/app/references/changelog#15-17-0

v15.16.0

Changelog: https://docs.cypress.io/app/references/changelog#15-16-0

v15.15.0

Changelog: https://docs.cypress.io/app/references/changelog#15-15-0

v15.14.2

Changelog: https://docs.cypress.io/app/references/changelog#15-14-2

v15.14.1

Changelog: https://docs.cypress.io/app/references/changelog#15-14-1

v15.14.0

Changelog: https://docs.cypress.io/app/references/changelog#15-14-0

v15.13.1

Changelog: https://docs.cypress.io/app/references/changelog#15-13-1

v15.13.0

Changelog: https://docs.cypress.io/app/references/changelog#15-13-0

v15.12.0

Changelog: https://docs.cypress.io/app/references/changelog#15-12-0

... (truncated)

Commits
  • 9467a6e chore: disable ServiceWorkerAutoPreload on the browser network path (#34711)
  • 2043773 chore: correct 16.0.0 release date in launchpad welcome screen (#34751)
  • 5fe8c53 chore: update cypress-example-kitchensink to 6.1.0 (#34701)
  • d78daf9 chore: disable service worker navigation preload on the browser network path ...
  • 4eaf14e chore: reorder 16.0.0 changelog entries to match docs (#34750)
  • 78dab45 fix: tolerate transient AUT-context gaps in Firefox BiDi automation (#34708)
  • 7f92ce3 dependency: upgrade dayjs from 1.10.4 to 1.11.23 (#34748)
  • 212f6ce test(launchpad): de-flake choose-a-browser browser status tests (#34749)
  • b563b63 chore: remove tsconfig options that TypeScript 5.6 removed and replace those ...
  • 07f0726 chore: bump devtools-protocol to 0.0.1687809 (#34745)
  • Additional commits viewable in compare view
Install script changes

This version modifies postinstall script that runs during installation. Review the package contents before updating.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 8, 2026
@coveralls

coveralls commented Sep 8, 2026 •
edited
Loading

Copy link
Copy Markdown

Coverage Report for CI Build 34309034565

Coverage remained the same at 98.903%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

Coverage Stats

Coverage Status
Relevant Lines: 1176
Covered Lines: 1172
Line Coverage: 99.66%
Relevant Branches: 191
Covered Branches: 180
Branch Coverage: 94.24%
Branches in Coverage %: Yes
Coverage Strength: 3.66 hits per line
💛 - Coveralls

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-772fac912e branch 5 times, most recently from 4be6f7b to 7674019 Compare September 8, 2026 20:21
@haliphax

haliphax commented Sep 8, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@haliphax haliphax changed the title Bump uuid, node-cron, remult and cypress 🔒️ bump uuid, node-cron, remult and cypress Sep 8, 2026
@dependabot
Bump uuid, node-cron, remult and cypress
b193ce3 
Bumps [uuid](https://github.com/uuidjs/uuid), [node-cron](https://github.com/node-cron/node-cron), [remult](https://github.com/remult/remult/tree/HEAD/projects/core) and [cypress](https://github.com/cypress-io/cypress). These dependencies needed to be updated together.

Updates `uuid` from 11.1.0 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v11.1.0...v14.0.2)

Updates `node-cron` from 3.0.3 to 4.6.0
- [Release notes](https://github.com/node-cron/node-cron/releases)
- [Changelog](https://github.com/node-cron/node-cron/blob/main/CHANGELOG.md)
- [Commits](node-cron/node-cron@v3.0.3...v4.6.0)

Updates `remult` from 2.7.33 to 3.3.18
- [Release notes](https://github.com/remult/remult/releases)
- [Changelog](https://github.com/remult/remult/blob/main/CHANGELOG.md)
- [Commits](https://github.com/remult/remult/commits/v3.3.18/projects/core)

Updates `cypress` from 14.3.0 to 16.0.0
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v14.3.0...v16.0.0)

---
updated-dependencies:
- dependency-name: cypress
  dependency-version: 16.0.0
  dependency-type: direct:development
- dependency-name: node-cron
  dependency-version: 4.6.0
  dependency-type: direct:production
- dependency-name: remult
  dependency-version: 3.3.18
  dependency-type: direct:production
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title 🔒️ bump uuid, node-cron, remult and cypress Bump uuid, node-cron, remult and cypress Sep 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-772fac912e branch from 7674019 to b193ce3 Compare September 9, 2026 03:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@coveralls @haliphax