Skip to content

chore(deps): bump the npm_and_yarn group across 10 directories with 18 updates#1

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-25cf340016
Open

chore(deps): bump the npm_and_yarn group across 10 directories with 18 updates#1
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-25cf340016

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 16 updates in the / directory:

Package From To
mongodb 4.6.0 4.17.0
uuid 8.3.2 14.0.0
knex 2.0.0 2.4.0
mysql2 2.3.3 3.9.8
sqlite3 5.0.8 5.1.5
@babel/core 7.16.7 7.29.7
brace-expansion 1.1.11 1.1.15
braces 3.0.2 3.0.3
decode-uri-component 0.2.0 0.2.2
flatted 3.2.4 3.4.2
handlebars 4.7.7 4.7.9
lodash 4.17.21 4.18.1
minimatch 3.0.4 3.1.5
moment-timezone 0.5.34 0.5.48
picomatch 2.3.1 2.3.2
tar-fs 2.1.1 2.1.4

Bumps the npm_and_yarn group with 3 updates in the /packages/sqlite directory: sqlite3, @mikro-orm/knex and @mikro-orm/core.
Bumps the npm_and_yarn group with 1 update in the /packages/seeder directory: @mikro-orm/core.
Bumps the npm_and_yarn group with 1 update in the /packages/reflection directory: @mikro-orm/core.
Bumps the npm_and_yarn group with 2 updates in the /packages/postgresql directory: @mikro-orm/knex and @mikro-orm/core.
Bumps the npm_and_yarn group with 3 updates in the /packages/mysql directory: mysql2, @mikro-orm/knex and @mikro-orm/core.
Bumps the npm_and_yarn group with 2 updates in the /packages/mongodb directory: mongodb and @mikro-orm/core.
Bumps the npm_and_yarn group with 3 updates in the /packages/migrations directory: knex, @mikro-orm/knex and @mikro-orm/core.
Bumps the npm_and_yarn group with 2 updates in the /packages/mariadb directory: @mikro-orm/knex and @mikro-orm/core.
Bumps the npm_and_yarn group with 2 updates in the /packages/knex directory: knex and @mikro-orm/core.

Updates mongodb from 4.6.0 to 4.17.0

Release notes

Sourced from mongodb's releases.

v4.17.0

4.17.0 (2023-08-17)

The MongoDB Node.js team is pleased to announce version 4.17.0 of the mongodb package!

Release Notes

mongodb-js/saslprep is now installed by default

Until v6, the driver included the saslprep package as an optional dependency for SCRAM-SHA-256 authentication. saslprep breaks when bundled with webpack because it attempted to read a file relative to the package location and consequently the driver would throw errors when using SCRAM-SHA-256 if it were bundled.

The driver now depends on mongodb-js/saslprep, a fork of saslprep that can be bundled with webpack because it includes the necessary saslprep data in memory upon loading. This will be installed by default but will only be used if SCRAM-SHA-256 authentication is used.

Remove credential availability on ConnectionPoolCreatedEvent

In order to avoid mistakenly printing credentials the ConnectionPoolCreatedEvent will replace the credentials option with an empty object. The credentials are still accessble via MongoClient options: client.options.credentials.

Features

  • NODE-5272: do not create or drop ecc collections (#3678) (d26ad61)
  • NODE-5398: use mongodb-js/saslprep instead of saslprep (#3820) (5244711)

Bug Fixes

  • NODE-5262: AWS Lambda metadata detection logic is too permissive (#3683) (c0c3d99)
  • NODE-5311: construct error messages for AggregateErrors in Node16+ (#3683) (98b7bdf)
  • NODE-5316: prevent parallel topology creation in MongoClient.connect (#3696) (e13038d)
    • Thank you @​clemclx for contributing this fix! 🎉
  • NODE-5356: prevent scram auth from throwing TypeError if saslprep is not a function (#3732) (2d028af)
  • NODE-5536: remove credentials from ConnectionPoolCreatedEvent options (#3812) (2910dca)

Documentation

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

v4.16.0

The MongoDB Node.js team is pleased to announce version 4.16.0 of the mongodb package!

... (truncated)

Changelog

Sourced from mongodb's changelog.

4.17.0 (2023-08-17)

Features

  • NODE-5272: do not create or drop ecc collections (#3678) (d26ad61)
  • NODE-5398: use mongodb-js/saslprep instead of saslprep (#3820) (5244711)

Bug Fixes

  • NODE-5262: AWS Lambda metadata detection logic is too permissive (#3683) (c0c3d99)
  • NODE-5311: construct error messages for AggregateErrors in Node16+ (#3683) (98b7bdf)
  • NODE-5316: prevent parallel topology creation in MongoClient.connect (#3696) (e13038d)
  • NODE-5356: prevent scram auth from throwing TypeError if saslprep is not a function (#3732) (2d028af)
  • NODE-5536: remove credentials from ConnectionPoolCreatedEvent options (#3812) (2910dca)

4.16.0 (2023-04-18)

Features

  • NODE-5159: add FaaS env information to client metadata (#3639) (e0b20f1)
  • NODE-5199: add alternative runtime detection to client metadata (#3647) (fba16ad)

Bug Fixes

  • NODE-5161: metadata duplication in handshake (#3628) (b790142)
  • NODE-5200: relax SRV record validation to account for a dot suffix (#3640) (4272c43)

4.15.0 (2023-04-04)

Features

  • NODE-5054: add AssumeRoleWithWebIdentity support to 4x driver (#3566) (8a8c386)

Bug Fixes

  • NODE-5097: set timeout on write and reset on message (#3590) (2d3576b)

4.14.0 (2023-02-07)

Features

  • NODE-4992: Deprecate methods and options that reference legacy logger (#3532) (6c94b4a)

... (truncated)

Commits
  • c83a801 chore(4.x): release 4.17.0 [skip-ci] (#3763)
  • 1b59955 chore: update release automation scripts 4.x (#3824)
  • 5244711 feat(NODE-5398): use mongodb-js/saslprep instead of saslprep (#3820)
  • 2910dca fix(NODE-5536): remove credentials from ConnectionPoolCreatedEvent options (#...
  • 0c1b654 chore(NODE-5400): add @​octokit/core as a devDep (#3750)
  • 4adff37 chore(NODE-5382): backport release automation scripts (#3747)
  • 2d028af fix(NODE-5356): prevent scram auth from throwing TypeError if saslprep is not...
  • 0e1afc0 ci(Node 5335): clean up instance profile from instance after CI runs (#3719)
  • 7f5b334 ci(NODE-5334): install npm to node_artifacts directory in CI (#3709)
  • e13038d fix(NODE-5316): prevent parallel topology creation in MongoClient.connect (#3...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by dbx-node, a new releaser for mongodb since your current version.


Updates uuid from 8.3.2 to 14.0.0

Release notes

Sourced from uuid's releases.

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

v13.0.0

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

v12.0.1

12.0.1 (2026-04-29)

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

  • update to typescript@5.2 (#887)
  • remove CommonJS support (#886)
  • drop node@16 support (#883)

Features

Bug Fixes

11.1.0 (2025-02-19)

... (truncated)

Commits
  • 7c1ea08 chore(main): release 14.0.0 (#926)
  • 3d2c5b0 Merge commit from fork
  • f2c235f fix!: expect crypto to be global everywhere (requires node@20+) (#935)
  • 529ef08 chore: upgrade TypeScript and fixup types (#927)
  • 086fd79 chore: update dependencies (#933)
  • dc4ddb8 feat!: drop node@18 support (#934)
  • 0f1f9c9 chore: switch to Biome for parsing and linting (#932)
  • e2879e6 chore: use maintained version of npm-run-all (#930)
  • ffa3138 fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)
  • 0423d49 docs: remove obsolete v1 option notes (#915)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates knex from 2.0.0 to 2.4.0

Release notes

Sourced from knex's releases.

2.4.0

New features:

  • Support partial unique indexes #5316
  • Make compiling SQL in error message optional #5282

Bug fixes

  • Insert array into json column #5321
  • Fix unexpected max acquire-timeout #5377
  • Fix: orWhereJson #5361
  • MySQL: Add assertion for basic where clause not to be object or array #1227
  • SQLite: Fix changing the default value of a boolean column in SQLite #5319

Typings:

  • add missing type for 'expirationChecker' on PgConnectionConfig #5334

2.3.0

New features:

  • PostgreSQL: Explicit jsonb support for custom pg clients #5201
  • SQLite: Support returning with sqlite3 and better-sqlite3 #5285
  • MSSQL: Implement mapBinding mssql dialect option #5292

Typings:

  • Update types for TS 4.8 #5279
  • Fix typo #5267
  • Fix WhereJsonObject withCompositeTableType #5306
  • Fix AnalyticFunction type #5304
  • Infer specific column value type in aggregations #5297

2.2.0

New features:

  • Inline primary key creation for postgres flavours #5233
  • SQLite: Add warning for undefined connection file #5223
  • MSSQL: Add JSON parameter support for connection #5200

Bug fixes:

  • PostgreSQL: add primaryKey option for uuid #5212

Typings:

  • Add promisable and better types #5222
  • Update raw query bind parameter type #5208

2.1.0 - 26 May, 2022

... (truncated)

Changelog

Sourced from knex's changelog.

2.4.0 - 06 January, 2023

New features:

  • Support partial unique indexes #5316
  • Make compiling SQL in error message optional #5282

Bug fixes

  • Insert array into json column #5321
  • Fix unexpected max acquire-timeout #5377
  • Fix: orWhereJson #5361
  • MySQL: Add assertion for basic where clause not to be object or array #1227
  • SQLite: Fix changing the default value of a boolean column in SQLite #5319

Typings:

  • add missing type for 'expirationChecker' on PgConnectionConfig #5334

2.3.0 - 31 August, 2022

New features:

  • PostgreSQL: Explicit jsonb support for custom pg clients #5201
  • SQLite: Support returning with sqlite3 and better-sqlite3 #5285
  • MSSQL: Implement mapBinding mssql dialect option #5292

Typings:

  • Update types for TS 4.8 #5279
  • Fix typo #5267
  • Fix WhereJsonObject withCompositeTableType #5306
  • Fix AnalyticFunction type #5304
  • Infer specific column value type in aggregations #5297

2.2.0 - 19 July, 2022

New features:

  • Inline primary key creation for postgres flavours #5233
  • SQLite: Add warning for undefined connection file #5223
  • MSSQL: Add JSON parameter support for connection #5200

Bug fixes:

  • PostgreSQL: add primaryKey option for uuid #5212

Typings:

  • Add promisable and better types #5222

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates mysql2 from 2.3.3 to 3.9.8

Release notes

Sourced from mysql2's releases.

v3.9.8

3.9.8 (2024-05-26)

Bug Fixes

  • security: sanitize fields and tables when using nestTables (#2702) (efe3db5)
  • support deno + caching_sha2_password FULL_AUTHENTICATION_PACKET flow (#2704) (2e03694)
  • typings: typo from jonServerPublicKey to onServerPublicKey (#2699) (8b5f691)

v3.9.7

3.9.7 (2024-04-21)

Bug Fixes

  • security: sanitize timezone parameter value to prevent code injection - report by zhaoyudi (Nebulalab) (#2608) (7d4b098)

v3.9.6

3.9.6 (2024-04-18)

Bug Fixes

  • binary parser sometimes reads out of packet bounds when results contain null and typecast is false (#2601) (705835d)

v3.9.5

3.9.5 (2024-04-17)

Bug Fixes

  • revert breaking change in results creation (#2591) (f7c60d0)

v3.9.4

3.9.4 (2024-04-09)

Bug Fixes

  • SSL: separate each certificate into an individual item #2542 (63f1055)
  • security: improve supportBigNumbers and bigNumberStrings sanitization (#2572) (74abf9e)
    • Fixes a potential RCE attack vulnerability reported by Vsevolod Kokorin (Slonser) of Solidlab
  • security: improve results object creation (#2574) (4a964a3)
    • Fixes a potential Prototype Pollution attack vulnerability reported by Vsevolod Kokorin (Slonser) of Solidlab
  • docs: improve the contribution guidelines (#2552) (8a818ce)

v3.9.3

3.9.3 (2024-03-26)

... (truncated)

Changelog

Sourced from mysql2's changelog.

3.9.8 (2024-05-26)

Bug Fixes

  • security: sanitize fields and tables when using nestTables (#2702) (efe3db5)
  • support deno + caching_sha2_password FULL_AUTHENTICATION_PACKET flow (#2704) (2e03694)
  • typings: typo from jonServerPublicKey to onServerPublicKey (#2699) (8b5f691)

3.9.7 (2024-04-21)

Bug Fixes

  • security: sanitize timezone parameter value to prevent code injection (#2608) (7d4b098)

3.9.6 (2024-04-18)

Bug Fixes

  • binary parser sometimes reads out of packet bounds when results contain null and typecast is false (#2601) (705835d)

3.9.5 (2024-04-17)

Bug Fixes

  • revert breaking change in results creation (#2591) (f7c60d0)

3.9.4 (2024-04-09)

Bug Fixes

  • docs: improve the contribution guidelines (#2552) (8a818ce)
  • security: improve results object creation (#2574) (4a964a3)
  • security: improve supportBigNumbers and bigNumberStrings sanitization (#2572) (74abf9e)

3.9.3 (2024-03-26)

Bug Fixes

  • security: improve cache key formation (#2424) (0d54b0c)
    • Fixes a potential parser cache poisoning attack vulnerability reported by Vsevolod Kokorin (Slonser) of Solidlab
  • update Amazon RDS SSL CA cert (#2131) (d9dccfd)

3.9.2 (2024-02-26)

... (truncated)

Commits
  • f637d3f chore(master): release 3.9.8 (#2700)
  • efe3db5 fix(security): sanitize fields and tables when using nestTables (#2702)
  • 2e03694 fix: support deno + caching_sha2_password FULL_AUTHENTICATION_PACKET flow (#2...
  • 8b5f691 fix(typings): typo from jonServerPublicKey to onServerPublicKey (#2699)
  • 5c75802 build(deps-dev): bump tsx from 4.10.5 to 4.11.0 in /website (#2695)
  • 179769f build(deps): bump @​easyops-cn/docusaurus-search-local in /website (#2696)
  • 56289e2 build(deps-dev): bump poku from 1.12.1 to 1.13.0 (#2698)
  • b029308 build(deps-dev): bump poku from 1.12.1 to 1.13.0 in /website (#2697)
  • 539acb8 build(deps): bump lucide-react from 0.378.0 to 0.379.0 in /website (#2693)
  • dc80580 build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.9.0 to 7.10.0 i...
  • Additional commits viewable in compare view

Updates sqlite3 from 5.0.8 to 5.1.5

Release notes

Sourced from sqlite3's releases.

v5.1.5

What's Changed

Full Changelog: TryGhost/node-sqlite3@v5.1.4...v5.1.5

v5.1.4

What's Changed

Full Changelog: TryGhost/node-sqlite3@v5.1.3...v5.1.4

v5.1.3

What's Changed

Full Changelog: TryGhost/node-sqlite3@v5.1.2...v5.1.3

v5.1.2

What's Changed

Full Changelog: TryGhost/node-sqlite3@v5.1.1...v5.1.2

v5.1.1

What's Changed

A huge thanks to MacStadium for providing an M1 Mac Mini so we can offer ARM64 binaries.

Full Changelog: TryGhost/node-sqlite3@v5.1.0...v5.1.1

v5.1.0

✨ We're very excited to announce node-sqlite3's first minor release of v5, packed with features and improvements.

If you encounter any problems, please open a detailed issue using the templates.

What's Changed

... (truncated)

Commits
  • 6a806f8 v5.1.5
  • edb1934 Fixed code execution vulnerability due to Object coercion
  • 3a48888 Updated bundled SQLite to v3.41.1
  • c1440bd Fixed rpath linker option when using a custom sqlite (#1654)
  • 93affa4 Update microsoft/setup-msbuild action to v1.3
  • 6f6318e v5.1.4
  • aeafe25 Revert "Renamed master references to main"
  • 57ce2d4 Fixed glib compatibility by downgrading to Ubuntu 20
  • af8e567 Renamed master references to main
  • 8fd18a3 Extracted function checking code into macro
  • Additional commits viewable in compare view

Updates @babel/core from 7.16.7 to 7.29.7

Release notes

Sourced from @​babel/core's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​babel/core since your current version.


Updates brace-expansion from 1.1.11 to 1.1.15

Release notes

Sourced from brace-expansion's releases.

v1.1.15

  • Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

Updates braces from 3.0.2 to 3.0.3

Commits

Updates decode-uri-component from 0.2.0 to 0.2.2

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

  • Prevent overwriting previously decoded tokens 980e0bf

SamVerschueren/decode-uri-component@v0.2.1...v0.2.2

v0.2.1

  • Switch to GitHub workflows 76abc93
  • Fix issue where decode throws - fixes #6 746ca5d
  • Update license (#1) 486d7e2
  • Tidelift tasks a650457
  • Meta tweaks 66e1c28

SamVerschueren/decode-uri-component@v0.2.0...v0.2.1

Commits

…8 updates

Bumps the npm_and_yarn group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [mongodb](https://github.com/mongodb/node-mongodb-native) | `4.6.0` | `4.17.0` |
| [uuid](https://github.com/uuidjs/uuid) | `8.3.2` | `14.0.0` |
| [knex](https://github.com/knex/knex) | `2.0.0` | `2.4.0` |
| [mysql2](https://github.com/sidorares/node-mysql2) | `2.3.3` | `3.9.8` |
| [sqlite3](https://github.com/TryGhost/node-sqlite3) | `5.0.8` | `5.1.5` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.16.7` | `7.29.7` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.15` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` |
| [flatted](https://github.com/WebReflection/flatted) | `3.2.4` | `3.4.2` |
| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.7` | `4.7.9` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.5` |
| [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.34` | `0.5.48` |
| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |
| [tar-fs](https://github.com/mafintosh/tar-fs) | `2.1.1` | `2.1.4` |

Bumps the npm_and_yarn group with 3 updates in the /packages/sqlite directory: [sqlite3](https://github.com/TryGhost/node-sqlite3), [@mikro-orm/knex](https://github.com/mikro-orm/mikro-orm) and [@mikro-orm/core](https://github.com/mikro-orm/mikro-orm).
Bumps the npm_and_yarn group with 1 update in the /packages/seeder directory: [@mikro-orm/core](https://github.com/mikro-orm/mikro-orm).
Bumps the npm_and_yarn group with 1 update in the /packages/reflection directory: [@mikro-orm/core](https://github.com/mikro-orm/mikro-orm).
Bumps the npm_and_yarn group with 2 updates in the /packages/postgresql directory: [@mikro-orm/knex](https://github.com/mikro-orm/mikro-orm) and [@mikro-orm/core](https://github.com/mikro-orm/mikro-orm).
Bumps the npm_and_yarn group with 3 updates in the /packages/mysql directory: [mysql2](https://github.com/sidorares/node-mysql2), [@mikro-orm/knex](https://github.com/mikro-orm/mikro-orm) and [@mikro-orm/core](https://github.com/mikro-orm/mikro-orm).
Bumps the npm_and_yarn group with 2 updates in the /packages/mongodb directory: [mongodb](https://github.com/mongodb/node-mongodb-native) and [@mikro-orm/core](https://github.com/mikro-orm/mikro-orm).
Bumps the npm_and_yarn group with 3 updates in the /packages/migrations directory: [knex](https://github.com/knex/knex), [@mikro-orm/knex](https://github.com/mikro-orm/mikro-orm) and [@mikro-orm/core](https://github.com/mikro-orm/mikro-orm).
Bumps the npm_and_yarn group with 2 updates in the /packages/mariadb directory: [@mikro-orm/knex](https://github.com/mikro-orm/mikro-orm) and [@mikro-orm/core](https://github.com/mikro-orm/mikro-orm).
Bumps the npm_and_yarn group with 2 updates in the /packages/knex directory: [knex](https://github.com/knex/knex) and [@mikro-orm/core](https://github.com/mikro-orm/mikro-orm).


Updates `mongodb` from 4.6.0 to 4.17.0
- [Release notes](https://github.com/mongodb/node-mongodb-native/releases)
- [Changelog](https://github.com/mongodb/node-mongodb-native/blob/v4.17.0/HISTORY.md)
- [Commits](mongodb/node-mongodb-native@v4.6.0...v4.17.0)

Updates `uuid` from 8.3.2 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v8.3.2...v14.0.0)

Updates `knex` from 2.0.0 to 2.4.0
- [Release notes](https://github.com/knex/knex/releases)
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md)
- [Commits](knex/knex@2.0.0...2.4.0)

Updates `mysql2` from 2.3.3 to 3.9.8
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v2.3.3...v3.9.8)

Updates `sqlite3` from 5.0.8 to 5.1.5
- [Release notes](https://github.com/TryGhost/node-sqlite3/releases)
- [Commits](TryGhost/node-sqlite3@v5.0.8...v5.1.5)

Updates `@babel/core` from 7.16.7 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core)

Updates `brace-expansion` from 1.1.11 to 1.1.15
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.15)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `decode-uri-component` from 0.2.0 to 0.2.2
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2)

Updates `flatted` from 3.2.4 to 3.4.2
- [Commits](WebReflection/flatted@v3.2.4...v3.4.2)

Updates `handlebars` from 4.7.7 to 4.7.9
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.7.7...v4.7.9)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.18.1)

Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)

Updates `moment-timezone` from 0.5.34 to 0.5.48
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](moment/moment-timezone@0.5.34...0.5.48)

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

Updates `tar-fs` from 2.1.1 to 2.1.4
- [Commits](mafintosh/tar-fs@v2.1.1...v2.1.4)

Updates `sqlite3` from 5.0.8 to 5.1.5
- [Release notes](https://github.com/TryGhost/node-sqlite3/releases)
- [Commits](TryGhost/node-sqlite3@v5.0.8...v5.1.5)

Updates `@mikro-orm/knex` from 5.9.8 to 6.6.14
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/v6.6.14/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v6.6.14)

Updates `@mikro-orm/core` from 5.9.8 to 7.1.4
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/master/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v7.1.4)

Updates `@mikro-orm/core` from 5.9.8 to 7.1.4
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/master/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v7.1.4)

Updates `@mikro-orm/core` from 5.9.8 to 7.1.4
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/master/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v7.1.4)

Updates `@mikro-orm/knex` from 5.9.8 to 6.6.14
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/v6.6.14/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v6.6.14)

Updates `@mikro-orm/core` from 5.9.8 to 7.1.4
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/master/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v7.1.4)

Updates `mysql2` from 2.3.3 to 3.9.8
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v2.3.3...v3.9.8)

Updates `@mikro-orm/knex` from 5.9.8 to 6.6.14
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/v6.6.14/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v6.6.14)

Updates `@mikro-orm/core` from 5.9.8 to 7.1.4
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/master/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v7.1.4)

Updates `mongodb` from 4.6.0 to 4.17.0
- [Release notes](https://github.com/mongodb/node-mongodb-native/releases)
- [Changelog](https://github.com/mongodb/node-mongodb-native/blob/v4.17.0/HISTORY.md)
- [Commits](mongodb/node-mongodb-native@v4.6.0...v4.17.0)

Updates `@mikro-orm/core` from 5.9.8 to 7.1.4
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/master/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v7.1.4)

Updates `knex` from 2.0.0 to 2.4.0
- [Release notes](https://github.com/knex/knex/releases)
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md)
- [Commits](knex/knex@2.0.0...2.4.0)

Updates `@mikro-orm/knex` from 5.9.8 to 6.6.14
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/v6.6.14/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v6.6.14)

Updates `@mikro-orm/core` from 5.9.8 to 7.1.4
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/master/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v7.1.4)

Updates `@mikro-orm/knex` from 5.9.8 to 6.6.14
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/v6.6.14/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v6.6.14)

Updates `@mikro-orm/core` from 5.9.8 to 7.1.4
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/master/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v7.1.4)

Updates `knex` from 2.0.0 to 2.4.0
- [Release notes](https://github.com/knex/knex/releases)
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md)
- [Commits](knex/knex@2.0.0...2.4.0)

Updates `@mikro-orm/core` from 5.9.8 to 7.1.4
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/master/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v5.9.8...v7.1.4)

---
updated-dependencies:
- dependency-name: mongodb
  dependency-version: 4.17.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: knex
  dependency-version: 2.4.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mysql2
  dependency-version: 3.9.8
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sqlite3
  dependency-version: 5.1.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@babel/core"
  dependency-version: 7.29.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.15
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: decode-uri-component
  dependency-version: 0.2.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: handlebars
  dependency-version: 4.7.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: moment-timezone
  dependency-version: 0.5.48
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar-fs
  dependency-version: 2.1.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: sqlite3
  dependency-version: 5.1.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/knex"
  dependency-version: 6.6.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/core"
  dependency-version: 7.1.4
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/core"
  dependency-version: 7.1.4
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/core"
  dependency-version: 7.1.4
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/knex"
  dependency-version: 6.6.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/core"
  dependency-version: 7.1.4
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: mysql2
  dependency-version: 3.9.8
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/knex"
  dependency-version: 6.6.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/core"
  dependency-version: 7.1.4
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: mongodb
  dependency-version: 4.17.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/core"
  dependency-version: 7.1.4
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: knex
  dependency-version: 2.4.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/knex"
  dependency-version: 6.6.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/core"
  dependency-version: 7.1.4
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/knex"
  dependency-version: 6.6.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/core"
  dependency-version: 7.1.4
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: knex
  dependency-version: 2.4.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@mikro-orm/core"
  dependency-version: 7.1.4
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants