build(deps): bump the dependencies group across 1 directory with 19 updates by dependabot[bot] · Pull Request #293 · SubStream-Protocol/SubStream-Protocol-Backend

dependabot · 2026-06-01T22:39:28Z

Bumps the dependencies group with 19 updates in the / directory:

Package	From	To
@nestjs/common	`11.1.20`	`11.1.24`
@nestjs/core	`11.1.20`	`11.1.24`
@nestjs/platform-express	`11.1.20`	`11.1.24`
@nestjs/testing	`11.1.20`	`11.1.24`
@nestjs/websockets	`11.1.20`	`11.1.24`
@sentry/node	`10.53.1`	`10.55.0`
@types/node	`25.7.0`	`25.9.1`
bullmq	`5.76.8`	`5.77.7`
date-fns	`4.1.0`	`4.4.0`
express-rate-limit	`8.5.1`	`8.5.2`
helmet	`8.1.0`	`8.2.0`
ioredis	`5.10.1`	`5.11.0`
js-yaml	`4.1.1`	`4.2.0`
pg	`8.20.0`	`8.21.0`
puppeteer	`24.43.1`	`25.1.0`
redis	`5.12.1`	`6.0.0`
stripe	`22.1.1`	`22.2.0`
commander	`14.0.3`	`15.0.0`
concurrently	`9.2.1`	`10.0.1`

Updates @nestjs/common from 11.1.20 to 11.1.24

Release notes

Sourced from @nestjs/common's releases.

v11.1.24 (2026-05-25)

Bug fixes

core

#17009 fix(core): reset dependency-tree cache on metadata changes (@puneetdixit200)

Enhancements

core

#16997 feat(core): warn on late websocket adapter registration (@hbinhng)

Dependencies

platform-ws

#17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@dependabot[bot])

Committers: 2

Nguyễn Hải Bình (@hbinhng)

Puneet Dixit (@puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

core

nestjs/nest#16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

Kamil Mysliwiec (@kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

core

#16993 fix(core): inflight request injection bug #16989 (@kamilmysliwiec)

Enhancements

core

#16967 fix(core): identify decorator type in invalid-class-module error (@HarrierOnChain)

Committers: 2

Harrier (@HarrierOnChain)

Kamil Mysliwiec (@kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

core

#16948 fix(core): settle skipped provider initialization (@yudin-s)

Committers: 1

Serge Yudin (@yudin-s)

Commits

d8a0ab8 chore(release): publish v11.1.24 release
2dccece chore: update readmes
b8be8c1 chore(release): publish v11.1.23 release
801c46f chore(release): publish v11.1.22 release
983dd52 chore(release): publish v11.1.21 release
a0b0139 chore: update readme
See full diff in compare view

Updates @nestjs/core from 11.1.20 to 11.1.24

Release notes

Sourced from @nestjs/core's releases.

v11.1.24 (2026-05-25)

Bug fixes

core

#17009 fix(core): reset dependency-tree cache on metadata changes (@puneetdixit200)

Enhancements

core

#16997 feat(core): warn on late websocket adapter registration (@hbinhng)

Dependencies

platform-ws

#17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@dependabot[bot])

Committers: 2

Nguyễn Hải Bình (@hbinhng)

Puneet Dixit (@puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

core

nestjs/nest#16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

Kamil Mysliwiec (@kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

core

#16993 fix(core): inflight request injection bug #16989 (@kamilmysliwiec)

Enhancements

core

#16967 fix(core): identify decorator type in invalid-class-module error (@HarrierOnChain)

Committers: 2

Harrier (@HarrierOnChain)

Kamil Mysliwiec (@kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

core

#16948 fix(core): settle skipped provider initialization (@yudin-s)

Committers: 1

Serge Yudin (@yudin-s)

Commits

d8a0ab8 chore(release): publish v11.1.24 release
3ed595e fix(core): keep dependency parent registry internal
1b8c8b0 fix(core): propagate dependency tree cache resets
4c07009 fix(core): reset dependency tree cache on metadata changes
ff95b3f Merge pull request #16997 from hbinhng/feat/warn-late-use-websocket-adapter
2dccece chore: update readmes
b8be8c1 chore(release): publish v11.1.23 release
5de10df fix: should skip transient providers for snapshots
d956db4 feat(core): warn on late websocket adapter registration
801c46f chore(release): publish v11.1.22 release
Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.1.20 to 11.1.24

Release notes

Sourced from @nestjs/platform-express's releases.

v11.1.24 (2026-05-25)

Bug fixes

core

#17009 fix(core): reset dependency-tree cache on metadata changes (@puneetdixit200)

Enhancements

core

#16997 feat(core): warn on late websocket adapter registration (@hbinhng)

Dependencies

platform-ws

#17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@dependabot[bot])

Committers: 2

Nguyễn Hải Bình (@hbinhng)

Puneet Dixit (@puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

core

nestjs/nest#16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

Kamil Mysliwiec (@kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

core

#16993 fix(core): inflight request injection bug #16989 (@kamilmysliwiec)

Enhancements

core

#16967 fix(core): identify decorator type in invalid-class-module error (@HarrierOnChain)

Committers: 2

Harrier (@HarrierOnChain)

Kamil Mysliwiec (@kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

core

#16948 fix(core): settle skipped provider initialization (@yudin-s)

Committers: 1

Serge Yudin (@yudin-s)

Commits

d8a0ab8 chore(release): publish v11.1.24 release
2dccece chore: update readmes
b8be8c1 chore(release): publish v11.1.23 release
801c46f chore(release): publish v11.1.22 release
983dd52 chore(release): publish v11.1.21 release
a0b0139 chore: update readme
See full diff in compare view

Updates @nestjs/testing from 11.1.20 to 11.1.24

Release notes

Sourced from @nestjs/testing's releases.

v11.1.24 (2026-05-25)

Bug fixes

core

#17009 fix(core): reset dependency-tree cache on metadata changes (@puneetdixit200)

Enhancements

core

#16997 feat(core): warn on late websocket adapter registration (@hbinhng)

Dependencies

platform-ws

#17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@dependabot[bot])

Committers: 2

Nguyễn Hải Bình (@hbinhng)

Puneet Dixit (@puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

core

nestjs/nest#16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

Kamil Mysliwiec (@kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

core

#16993 fix(core): inflight request injection bug #16989 (@kamilmysliwiec)

Enhancements

core

#16967 fix(core): identify decorator type in invalid-class-module error (@HarrierOnChain)

Committers: 2

Harrier (@HarrierOnChain)

Kamil Mysliwiec (@kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

core

#16948 fix(core): settle skipped provider initialization (@yudin-s)

Committers: 1

Serge Yudin (@yudin-s)

Commits

d8a0ab8 chore(release): publish v11.1.24 release
2dccece chore: update readmes
b8be8c1 chore(release): publish v11.1.23 release
801c46f chore(release): publish v11.1.22 release
983dd52 chore(release): publish v11.1.21 release
a0b0139 chore: update readme
See full diff in compare view

Updates @nestjs/websockets from 11.1.20 to 11.1.24

Release notes

Sourced from @nestjs/websockets's releases.

v11.1.24 (2026-05-25)

Bug fixes

core

#17009 fix(core): reset dependency-tree cache on metadata changes (@puneetdixit200)

Enhancements

core

#16997 feat(core): warn on late websocket adapter registration (@hbinhng)

Dependencies

platform-ws

#17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@dependabot[bot])

Committers: 2

Nguyễn Hải Bình (@hbinhng)

Puneet Dixit (@puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

core

nestjs/nest#16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

Kamil Mysliwiec (@kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

core

#16993 fix(core): inflight request injection bug #16989 (@kamilmysliwiec)

Enhancements

core

#16967 fix(core): identify decorator type in invalid-class-module error (@HarrierOnChain)

Committers: 2

Harrier (@HarrierOnChain)

Kamil Mysliwiec (@kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

core

#16948 fix(core): settle skipped provider initialization (@yudin-s)

Committers: 1

Serge Yudin (@yudin-s)

Commits

d8a0ab8 chore(release): publish v11.1.24 release
2dccece chore: update readmes
b8be8c1 chore(release): publish v11.1.23 release
801c46f chore(release): publish v11.1.22 release
983dd52 chore(release): publish v11.1.21 release
a0b0139 chore: update readme
See full diff in compare view

Updates @sentry/node from 10.53.1 to 10.55.0

Release notes

Sourced from @sentry/node's releases.

10.55.0

Important Changes
feat(hono): Promote @sentry/hono to stable and deprecate honoIntegration (#21208)

The @sentry/hono SDK is now stable. See the Sentry Hono SDK docs to get started.

docs(tanstackstart-react): Promote SDK status to beta (#21175)

This release promotes the @sentry/tanstackstart-react SDK to beta. For details on how to use it, check out the Sentry TanStack Start SDK docs. Please reach out on GitHub if you have any feedback or concerns.
feat(hono): Add shouldHandleError option to sentry() middleware (#21205)

The sentry() middleware now accepts a shouldHandleError callback to control which errors are captured and sent to Sentry. By default, 3xx/4xx HTTP errors are ignored and 5xx errors and plain Error objects are captured. Return true from the callback to capture an error, false to suppress it.
app.use(
  sentry(app, {
    dsn: '__DSN__',
    shouldHandleError(error) {
      const status = (error as { status?: number })?.status;
      // Capture 401/403 in addition to the default 5xx errors
      return status === 401 || status === 403 || typeof status !== 'number' || status >= 500;
    },
  }),
);
test(tanstackstart-react): Move initialization to client entry point (#21161)

Change the recommended setup for the SDK to do Sentry.init() in the client entry file to capture telemetry that is emitted ahead of page hydration.

feat(tanstackstart-react): Add distributed tracing (#21144)

Server and client traces are now automatically connected, allowing you to see the full request lifecycle from server-side rendering through client-side hydration in a single trace.

feat(tanstackstart-react): Add server-side route parametrization (#21147)

Server transaction names are now parametrized automatically (e.g., GET /users/123 becomes GET /users/$userId), improving transaction grouping in Sentry.

feat(tanstackstart-react): Show readable server function names in traces (#21190)

Server function spans now show human-readable names (e.g., GET /_serverFn/greet instead of GET /_serverFn/a10e70b3...). The tanstackstart.function.hash.sha256 span attribute has been renamed to tanstackstart.function.id.
Other Changes

feat(core): Migrate request data to dataCollection (#21071)

feat(hono): Add warning in Bun for double init (#21195)

... (truncated)

Changelog

Sourced from @sentry/node's changelog.

10.55.0

Important Changes
feat(hono): Promote @sentry/hono to stable and deprecate honoIntegration (#21208)

The @sentry/hono SDK is now stable. See the Sentry Hono SDK docs to get started.

docs(tanstackstart-react): Promote SDK status to beta (#21175)

This release promotes the @sentry/tanstackstart-react SDK to beta. For details on how to use it, check out the Sentry TanStack Start SDK docs. Please reach out on GitHub if you have any feedback or concerns.
feat(hono): Add shouldHandleError option to sentry() middleware (#21205)

The sentry() middleware now accepts a shouldHandleError callback to control which errors are captured and sent to Sentry. By default, 3xx/4xx HTTP errors are ignored and 5xx errors and plain Error objects are captured. Return true from the callback to capture an error, false to suppress it.
app.use(
  sentry(app, {
    dsn: '__DSN__',
    shouldHandleError(error) {
      const status = (error as { status?: number })?.status;
      // Capture 401/403 in addition to the default 5xx errors
      return status === 401 || status === 403 || typeof status !== 'number' || status >= 500;
    },
  }),
);
test(tanstackstart-react): Move initialization to client entry point (#21161)

Change the recommended setup for the SDK to do Sentry.init() in the client entry file to capture telemetry that is emitted ahead of page hydration.

feat(tanstackstart-react): Add distributed tracing (#21144)

Server and client traces are now automatically connected, allowing you to see the full request lifecycle from server-side rendering through client-side hydration in a single trace.

feat(tanstackstart-react): Add server-side route parametrization (#21147)

Server transaction names are now parametrized automatically (e.g., GET /users/123 becomes GET /users/$userId), improving transaction grouping in Sentry.

feat(tanstackstart-react): Show readable server function names in traces (#21190)

Server function spans now show human-readable names (e.g., GET /_serverFn/greet instead of GET /_serverFn/a10e70b3...). The tanstackstart.function.hash.sha256 span attribute has been renamed to tanstackstart.function.id.
Other Changes

feat(core): Migrate request data to dataCollection (#21071)

... (truncated)

Commits

acd7b57 release: 10.55.0
d5323d2 Merge pull request #21216 from getsentry/prepare-release/10.55.0
2fb1929 meta(changelog): Update changelog for 10.55.0
556bcb3 feat(hono): Add shouldHandleError as middleware option (#21205)
7a67ea4 feat(hono): Promote @sentry/hono to stable and deprecate honoIntegration ...
cead7f9 fix(e2e): Fix astro-6 e2e test build by relaxing astro version range (#21211)
75fd1d5 chore(changelog): clarify array attributes impact on beforeSend* callbacks ...
8a2a490 fix(cloudflare): Use original waitUntil to not create a deadlock (#21197)
f7b506d feat(metrics): Migrate metrics to use dataCollection instead of `sendDefaul...
f55fc30 feat(core): Migrate request data to dataCollection (#21071)
Additional commits viewable in compare view

Updates @types/node from 25.7.0 to 25.9.1

Commits

See full diff in compare view

Updates bullmq from 5.76.8 to 5.77.7

Release notes

Sourced from bullmq's releases.

v5.77.7

5.77.7 (2026-06-01)

Bug Fixes

deps: update dependency msgpackr to v2.0.2 [security] (#4202) (fbe04af)

v5.77.6

5.77.6 (2026-05-27)

Bug Fixes

types: change NodeRedisRawClient to be node-redis compliant (#4195) (81709e4)

v5.77.5

5.77.5 (2026-05-27)

Bug Fixes

connection: handle cluster reconnection with timeouts (#4186) (411690e)

v5.77.4

5.77.4 (2026-05-26)

Bug Fixes

deduplication: preserve custom jobId when requeuing keepLastIfActive proto-jobs (#4190) fixes #4030 (6e4972e)

v5.77.3

5.77.3 (2026-05-25)

Performance Improvements

bun-redis: remove per-command serialization to enable implicit pipelining (#4188) (685b074)

v5.77.2

5.77.2 (2026-05-24)

Bug Fixes

connection: use more permissive typing on NodeRedisRawClient options (#4184) (#4187) (0feec14), closes #4170

v5.77.1

5.77.1 (2026-05-23)

... (truncated)

Commits

fbe04af fix(deps): update dependency msgpackr to v2.0.2 [security] (#4202)
63c4054 chore(deps): update eslint to v8.60.0 [security] (#4192)
d2c9850 chore(release): v5.77.6 (#4199)
1c99570 chore(release): 5.77.5 (#4198)
81709e4 fix(types): change NodeRedisRawClient to be node-redis compliant (#4195)
411690e fix(connection): handle cluster reconnection with timeouts (#4186)
e7d7d87 chore(release): 5.77.4 (#4197)
6e4972e fix(deduplication): preserve custom jobId when requeuing keepLastIfActive pro...
6e20ecf chore(release): 5.77.3 (#4193)
685b074 perf(bun-redis): remove per-command serialization to enable implicit pipelini...
Additional commits viewable in compare view

Updates date-fns from 4.1.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

v4.3.0

Kudos to @ImRodry and @puneetdixit200 for their contributions.

Fixed

Fixed missing modularized optimization fallback (for Next.js and others). See #4193.

Fixed pt locale first day of week to be Sunday. See #4195 by @ImRodry.

Fixed zh-CN, zh-HK, and zh-TW locale month parsing for October, November, and December. See #4194 by @puneetdixit200.

v4.2.1

Fixed

Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.

Commits

cd53d25 Promote to v4.4.0
d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
ee65753 Add root mise :format task
9f5bdf5 Add positional argument to test/smoke.sh script
651ead6 Split CDN bundles into separate @date-fns/cdn package
224c1a2 Deprecate type tests as attw hangs on date-fns package
7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
b6ad5ac Add flags to control package build script
424a783 Fix docs release after moving to monorepo setup
f95bcf1 (docs): Add missing tsx dependency
Additional commits viewable in compare view

Updates express-rate-limit from 8.5.1 to 8.5.2

Release notes

Sourced from express-rate-limit's releases.

v8.5.2

You can view the changelog here.

Commits

9774693 8.5.2
0e94cc0 v8.5.2 changelog
9a583c5 feat: simplify IPv6 key generation (#633)
4f4b3fb chore(deps-dev): bump lint-staged from 16.4.0 to 17.0.4 (#632)
3c1d6c5 chore(deps-dev): bump the development-dependencies group with 7 updates (#631)
18884b6 chore(deps): bump basic-ftp from 5.2.0 to 5.3.1 (#630)
dacc980 chore(deps): bump handlebars from 4.7.8 to 4.7.9 (#629)
486d0c6 chore(deps): bump follow-redirects from 1.15.11 to 1.16.0 (#627)
See full diff in compare view

Updates helmet from 8.1.0 to 8.2.0

Changelog

Sourced from helmet's changelog.

8.2.0 - 2026-05-21

Cross-Origin-Opener-Policy: support noopener-allow-popups. See #522

Improve error message when passing duplicate options

Commits

638e43b 8.2.0
fdf25a8 Update changelog for 8.2.0 release
bd293b7 Update devDependencies to latest versions
81ce5cc Test supported Node versions on CI
807a888 Update to new URL
d4e0128 Add direct link to FAQ
437d2eb Bump actions/setup-node from 6.3.0 to 6.4.0 (#537)
a6bd779 Upgrade actions/setup-node to 6.3.0
1e09f5f Fix changelog typo
d526f5c Bump Picomatch dev sub-dependency
Additional commits viewable in compare view

Updates ioredis from 5.10.1 to 5.11.0

Release notes

Sourced from ioredis's releases.

v5.11.0

5.11.0 (2026-05-26)

Bug Fixes

prevent RangeError from string accumulation in pipeline (#2088) (defc077)

replace deprecated url.parse() with WHATWG URL API (#2081) (0021a45), closes redis/ioredis#1747

Features

add array commands, typings and tests (#2114) (baf68d6)

add increx command (#2115) (37d0695)

add Redis MSETEX support (#2111) (04a4615)

add typed GCRA command support and functional tests (#2094) (468a802)

add vector set command support (#2116) (b7b3def)

Add xnack command (#2103) (187d29b)

Add zinter zunion count (#2104) (0d510bb)

Implement TracingChannel support (#2089) (4760e0a)

Changelog

Sourced from ioredis's changelog.

5.11.0 (2026-05-26)

Bug Fixes

prevent RangeError from string accumulation in pipeline (#2088) (defc077)

replace deprecated url.parse() with WHATWG URL API (#2081) (0021a45), closes redis/ioredis#1747

Features

add array commands, typings and tests (#2114) (baf68d6)

add increx command (#2115) (37d0695)

add Redis MSETEX support (#2111) (04a4615)

add typed GCRA command support and functional tests (#2094) (468a802)

add vector set command support (#2116) (b7b3def)

Add xnack command (#2103) (187d29b)

Add zinter zunion count (#2104) (0d510bb)

Implement TracingChannel support (#2089) (4760e0a)

Commits

1490432 chore(release): 5.11.0 [skip ci]
5359d4d refactor(utils): inline defaults and isArguments helpers (#2107)
b7b3def feat: add vector set command support (#2116)
faa53fd ci: update Node.js and Redis test matrix (#2119)
37d0695 feat: add increx command (#2115)
612ee9d chore: update Redis 8.8 test image to custom (#2118)
baf68d6 feat: add array commands, typings and tests (#2114)
ba3b4cf test: update Redis 8.8 test image to m03 (#2113)
32dd17b test: add hash field subkey notification coverage (#2112)
04a4615 feat: add Redis MSETEX support (#2111)
Additional commits viewable in compare view

Updates js-yaml from 4.1.1 to 4.2.0

Changelog

Sourced from js-yaml's changelog.

[4.2.0] - 2026-06-01

Added

Added docs/safety.md with notes about processing untrusted YAML.

Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.

Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety.

Added sourcemaps to dist/ builds.

Changed

Stop resolving numbers with underscores as numeric scalars, #627.

Switched dev toolchains to Vite / neostandard.

Updated demo.

Reorganized tests.

dist/ files are no longer kept in the repository.

Fixed

Fix parsing of properties on the first implicit block mapping key, #62.

Fix trailing whitespace handling when folding flow scalar lines, #307.

Reject top-level block scalars without content indentation, #280.

Ensure numbers survive round-trip, #737.

Fix test coverage for issue #221.

Fix flow scalar trailing whitespace folding, #307.

Fix digits in YAML named tag handles.

Security

Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).

[3.14.2] - 2025-11-15

Security

Backported v4.1.1 fix to v3

Commits

See full diff in compare view

Updates pg from 8.20.0 to 8.21.0

Changelog

Sourced from pg's changelog.

pg@8.21.0

Handle SASL SCRAM server error responses properly.

Add support for node@26.

Add scramMaxIterations config option.

Add client.getTransactionStatus() method.

Commits

544b1ce Publish
cc03fa5 Add scramMaxIterations option to limit SCRAM iteration count (#3677)
f776327 Remove compatibility code for unsupported versions of Node (<16) (#3678)
f252870 cleanup: pg utils (#3675)
c8da6ab Assorted test cleanup (#3673)
fa47e73 fix: Client#end callback being called multiple times when first is no-op (#...
88a7e60 cleanup: Move declaration to more natural place
2095247 cleanup: Combine duplicated code in Client#query and avoid unneeded early n...
0ac3edd fix: apply SASLprep (RFC 4013) to passwords before SCRAM-SHA-256 PBKDF2 (#3669)
be880d4 Assorted test fixes and cleanup (#3672)
Additional commits viewable in compare view

Updates puppeteer from 24.43.1 to 25.1.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.1.0

25.1.0 (2026-05-26)

🎉 Features

roll to Chrome 149.0.7827.2 (af1b9be)

roll to Firefox 151.0 (#15013) (767ea54)

🛠️ Fix...
Description has been truncated

…pdates Bumps the dependencies group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.20` | `11.1.24` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.20` | `11.1.24` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.1.20` | `11.1.24` | | [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.1.20` | `11.1.24` | | [@nestjs/websockets](https://github.com/nestjs/nest/tree/HEAD/packages/websockets) | `11.1.20` | `11.1.24` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.53.1` | `10.55.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.7.0` | `25.9.1` | | [bullmq](https://github.com/taskforcesh/bullmq) | `5.76.8` | `5.77.7` | | [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.5.1` | `8.5.2` | | [helmet](https://github.com/helmetjs/helmet) | `8.1.0` | `8.2.0` | | [ioredis](https://github.com/luin/ioredis) | `5.10.1` | `5.11.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.20.0` | `8.21.0` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `24.43.1` | `25.1.0` | | [redis](https://github.com/redis/node-redis) | `5.12.1` | `6.0.0` | | [stripe](https://github.com/stripe/stripe-node) | `22.1.1` | `22.2.0` | | [commander](https://github.com/tj/commander.js) | `14.0.3` | `15.0.0` | | [concurrently](https://github.com/open-cli-tools/concurrently) | `9.2.1` | `10.0.1` | Updates `@nestjs/common` from 11.1.20 to 11.1.24 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.24/packages/common) Updates `@nestjs/core` from 11.1.20 to 11.1.24 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.24/packages/core) Updates `@nestjs/platform-express` from 11.1.20 to 11.1.24 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.24/packages/platform-express) Updates `@nestjs/testing` from 11.1.20 to 11.1.24 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.24/packages/testing) Updates `@nestjs/websockets` from 11.1.20 to 11.1.24 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.24/packages/websockets) Updates `@sentry/node` from 10.53.1 to 10.55.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.53.1...10.55.0) Updates `@types/node` from 25.7.0 to 25.9.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `bullmq` from 5.76.8 to 5.77.7 - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v5.76.8...v5.77.7) Updates `date-fns` from 4.1.0 to 4.4.0 - [Release notes](https://github.com/date-fns/date-fns/releases) - [Commits](date-fns/date-fns@v4.1.0...v4.4.0) Updates `express-rate-limit` from 8.5.1 to 8.5.2 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.5.1...v8.5.2) Updates `helmet` from 8.1.0 to 8.2.0 - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](helmetjs/helmet@v8.1.0...v8.2.0) Updates `ioredis` from 5.10.1 to 5.11.0 - [Release notes](https://github.com/luin/ioredis/releases) - [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md) - [Commits](redis/ioredis@v5.10.1...v5.11.0) Updates `js-yaml` from 4.1.1 to 4.2.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/commits) Updates `pg` from 8.20.0 to 8.21.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.21.0/packages/pg) Updates `puppeteer` from 24.43.1 to 25.1.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](puppeteer/puppeteer@puppeteer-v24.43.1...puppeteer-v25.1.0) Updates `redis` from 5.12.1 to 6.0.0 - [Release notes](https://github.com/redis/node-redis/releases) - [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/node-redis/compare/redis@5.12.1...redis@6.0.0) Updates `stripe` from 22.1.1 to 22.2.0 - [Release notes](https://github.com/stripe/stripe-node/releases) - [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md) - [Commits](stripe/stripe-node@v22.1.1...v22.2.0) Updates `commander` from 14.0.3 to 15.0.0 - [Release notes](https://github.com/tj/commander.js/releases) - [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md) - [Commits](tj/commander.js@v14.0.3...v15.0.0) Updates `concurrently` from 9.2.1 to 10.0.1 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](open-cli-tools/concurrently@v9.2.1...v10.0.1) --- updated-dependencies: - dependency-name: "@nestjs/common" dependency-version: 11.1.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@nestjs/core" dependency-version: 11.1.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@nestjs/platform-express" dependency-version: 11.1.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@nestjs/testing" dependency-version: 11.1.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@nestjs/websockets" dependency-version: 11.1.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@sentry/node" dependency-version: 10.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@types/node" dependency-version: 25.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: bullmq dependency-version: 5.77.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: date-fns dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: express-rate-limit dependency-version: 8.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: helmet dependency-version: 8.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ioredis dependency-version: 5.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pg dependency-version: 8.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: puppeteer dependency-version: 25.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: redis dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: stripe dependency-version: 22.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: commander dependency-version: 15.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: concurrently dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the dependencies group across 1 directory with 19 updates#293

build(deps): bump the dependencies group across 1 directory with 19 updates#293
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-8e3d5daf03

dependabot Bot commented on behalf of github Jun 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 1, 2026

v11.1.24 (2026-05-25)

Bug fixes

Enhancements

Dependencies

Committers: 2

v11.1.23 (2026-05-21)

Bug fixes

Committers: 1

v11.1.22 (2026-05-21)

Bug fixes

Enhancements

Committers: 2

v11.1.21 (2026-05-14)

Bug fixes

Committers: 1

v11.1.24 (2026-05-25)

Bug fixes

Enhancements

Dependencies

Committers: 2

v11.1.23 (2026-05-21)

Bug fixes

Committers: 1

v11.1.22 (2026-05-21)

Bug fixes

Enhancements

Committers: 2

v11.1.21 (2026-05-14)

Bug fixes

Committers: 1

v11.1.24 (2026-05-25)

Bug fixes

Enhancements

Dependencies

Committers: 2

v11.1.23 (2026-05-21)

Bug fixes

Committers: 1

v11.1.22 (2026-05-21)

Bug fixes

Enhancements

Committers: 2

v11.1.21 (2026-05-14)

Bug fixes

Committers: 1

v11.1.24 (2026-05-25)

Bug fixes

Enhancements

Dependencies

Committers: 2

v11.1.23 (2026-05-21)

Bug fixes

Committers: 1

v11.1.22 (2026-05-21)

Bug fixes

Enhancements

Committers: 2

v11.1.21 (2026-05-14)

Bug fixes

Committers: 1

v11.1.24 (2026-05-25)

Bug fixes

Enhancements

Dependencies

Committers: 2

v11.1.23 (2026-05-21)

Bug fixes

Committers: 1

v11.1.22 (2026-05-21)

Bug fixes

Enhancements

Committers: 2

v11.1.21 (2026-05-14)

Bug fixes

Committers: 1

10.55.0

Important Changes

Other Changes

🛠️ Fix...
Description has been truncated