chore(deps): Bump the npm group across 1 directory with 28 updates by dependabot[bot] · Pull Request #39 · anchildress1/commit-chronicles

dependabot · 2026-09-17T04:18:19Z

Bumps the npm group with 28 updates in the / directory:

Package	From	To
@google-cloud/storage	`7.21.0`	`8.1.0`
@google-cloud/tasks	`6.3.0`	`7.1.0`
@hono/node-server	`2.0.12`	`2.1.1`
google-auth-library	`10.9.1`	`11.0.2`
hono	`4.13.1`	`4.13.7`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.17`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.3`	`19.3.0`
snowflake-sdk	`3.1.0`	`3.3.0`
@commitlint/cli	`21.2.1`	`21.2.2`
@commitlint/config-conventional	`21.2.0`	`21.2.2`
@playwright/test	`1.62.0`	`1.63.0`
@testing-library/jest-dom	`7.0.0`	`7.0.1`
@testing-library/react	`16.3.2`	`16.3.3`
@testing-library/user-event	`14.6.1`	`14.6.7`
@types/node	`26.1.2`	`26.5.1`
@types/react	`19.2.17`	`19.3.0`
@types/react-dom	`19.2.3`	`19.3.0`
@vitejs/plugin-react	`6.0.4`	`6.1.1`
@vitest/coverage-v8	`4.1.10`	`5.0.0`
commitlint-plugin-rai	`1.0.1`	`1.0.2`
concurrently	`10.0.4`	`10.0.5`
eslint	`10.8.0`	`10.10.0`
lefthook	`2.1.10`	`2.1.12`
tsx	`4.23.1`	`4.23.13`
typescript	`6.0.3`	`7.0.2`
typescript-eslint	`8.65.0`	`8.70.0`
vite	`8.1.5`	`8.2.2`
vitest	`4.1.10`	`5.0.0`

Updates @google-cloud/storage from 7.21.0 to 8.1.0

Release notes

Sourced from @google-cloud/storage's releases.

recommender: v8.1.0

8.1.0 (2026-09-08)

Features

Upgrade librarian gapic-generator-typescript to v5.2.0 (c249594)

security-private-ca: v8.1.0

8.1.0 (2026-09-08)

Features

Upgrade librarian gapic-generator-typescript to v5.2.0 (c249594)

speech: v8.1.0

8.1.0 (2026-09-08)

Features

Upgrade librarian gapic-generator-typescript to v5.2.0 (c249594)

storage: v8.1.0

8.1.0 (2026-09-08)

Features

storage: Add IpFilter support to bucket metadata (#8623) (30c91c8)

storage: Add x-goog-gcs-idempotency-token header (#8837) (0df2e55)

storage: Support copying CSEK-encrypted files to non-CSEK destinations (#8771) (953328f)

Bug Fixes

storage: Resolve strict linter and TypeScript errors (#9198) (cee5338)

talent: v8.1.0

8.1.0 (2026-09-08)

Features

Upgrade librarian gapic-generator-typescript to v5.2.0 (c249594)

cloud-profiler: v8.1.0

8.1.0 (2026-09-15)

... (truncated)

Changelog

Sourced from @google-cloud/storage's changelog.

8.1.0 (2026-09-08)

Features

storage: Add IpFilter support to bucket metadata (#8623) (30c91c8)

storage: Add x-goog-gcs-idempotency-token header (#8837) (0df2e55)

storage: Support copying CSEK-encrypted files to non-CSEK destinations (#8771) (953328f)

Bug Fixes

storage: Resolve strict linter and TypeScript errors (#9198) (cee5338)

8.0.1 (2026-08-18)

Bug Fixes

Upgrade storage dependencies to corresponding Node 22 versions for core, handwritten and generated libraries (#9135) (a3d9092)

8.0.0 (2026-08-13)

⚠ BREAKING CHANGES

Update storage to minimum Node version of 22. (#9079)

Features

Update storage to minimum Node version of 22. (#9079) (5830779), refs #8985

7.22.0 (2026-08-11)

Features

storage: Add deleteSourceObjects option to combine/compose method (#8444) (43abc45)

Bug Fixes

storage: Destroy local read stream on upload write failure to prevent resource leaks (#8752) (77dab53), refs #7325

storage: Pass signingEndpoint to URLSigner in file.getSignedUrl (#8982) (b001807)

storage: Resolve Node compatibility crashes, security vulnerability, and stream hangs (#8622) (512ba79)

storage: Set application/json Content-Type for impersonated ADC requests (#8419) (292c688)

Commits

See full diff in compare view

Updates @google-cloud/tasks from 6.3.0 to 7.1.0

Release notes

Sourced from @google-cloud/tasks's releases.

resource-manager: v7.1.0

7.1.0 (2026-09-08)

Features

Upgrade librarian gapic-generator-typescript to v5.2.0 (c249594)

secret-manager: v7.1.0

7.1.0 (2026-09-08)

Features

Upgrade librarian gapic-generator-typescript to v5.2.0 (c249594)

service-directory: v7.1.0

7.1.0 (2026-09-08)

Features

Upgrade librarian gapic-generator-typescript to v5.2.0 (c249594)

tasks: v7.1.0

7.1.0 (2026-09-08)

Features

Upgrade librarian gapic-generator-typescript to v5.2.0 (c249594)

text-to-speech: v7.1.0

7.1.0 (2026-09-08)

Features

Upgrade librarian gapic-generator-typescript to v5.2.0 (c249594)

video-intelligence: v7.1.0

7.1.0 (2026-09-08)

Features

Upgrade librarian gapic-generator-typescript to v5.2.0 (c249594)

logging-winston: v7.1.0

7.1.0 (2026-09-15)

... (truncated)

Changelog

Sourced from @google-cloud/tasks's changelog.

7.1.0 (2026-09-08)

Features

Upgrade librarian gapic-generator-typescript to v5.2.0 (c249594)

7.0.0 (2026-08-04)

⚠ BREAKING CHANGES

upgrade minimum Node.js version to 22 (#9026)

Features

Upgrade minimum Node.js version to 22 (#9026) (1ed703f)

Commits

77aa170 chore: update librarian to v0.32.0 (#9091)
d163c4f chore: release main (#9019)
1ed703f feat!: upgrade minimum Node.js version to 22 (#9026)
4785152 chore: release main (#8986)
5c36365 feat: update API sources and regenerate (#8999)
328a654 chore(deps): update librarian toolchain to v0.30.1 and gapic-node-processing ...
6935a6a chore: librarian version update (#8905)
8e4434a chore: eliminate test run.ts (#8414)
524887a chore: migrate google-cloud-tasks to librarian (#8568)
a75465c refactor: rename quickstart.test.js to quickstart.js (#8533)
Additional commits viewable in compare view

Updates @hono/node-server from 2.0.12 to 2.1.1

Release notes

Sourced from @hono/node-server's releases.

v2.1.1

What's Changed

perf: lazily materialize request headers by @BlankParticle in honojs/node-server#389

Full Changelog: honojs/node-server@v2.1.0...v2.1.1

v2.1.0

What's Changed

feat: add Early Hints (HTTP 103) middleware by @bilal-azam in honojs/node-server#378

fix(listener): avoid uncaught error when force-closing a non-standard socket by @mohamedramadan14 in honojs/node-server#383

New Contributors

@bilal-azam made their first contribution in honojs/node-server#378

@mohamedramadan14 made their first contribution in honojs/node-server#383

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

Commits

73c03ad 2.1.1
5515aa0 perf: lazily materialize request headers (#389)
82ba34e 2.1.0
1f2909a fix(listener): avoid uncaught error when force-closing a non-standard socket ...
977a242 feat: add Early Hints (HTTP 103) middleware (#378)
See full diff in compare view

Updates google-auth-library from 10.9.1 to 11.0.2

Changelog

Sourced from google-auth-library's changelog.

11.0.2 (2026-08-12)

Bug Fixes

Ensure node 22 dependencies are up to date so they get the latest patches for core and handwritten libraries (#9116) (fad57ff)

11.0.1 (2026-08-10)

Bug Fixes

Upgrade all node core library dependencies to their latest node 22 version (#9084) (af8074c)

11.0.0 (2026-07-29)

⚠ BREAKING CHANGES

Update google-auth-library-nodejs to minimum Node version of 22. (#8995)

Features

Update google-auth-library-nodejs to minimum Node version of 22. (#8995) (152f686), refs #8985

Commits

1c40473 chore: release main (#9125)
fad57ff fix: Ensure node 22 dependencies are up to date so they get the latest patche...
f5ab609 chore: release main (#9110)
af8074c fix: upgrade all node core library dependencies to their latest node 22 versi...
ad53939 chore: release main (#9012)
152f686 feat!: Update google-auth-library-nodejs to minimum Node version of 22. (#8995)
See full diff in compare view

Updates hono from 4.13.1 to 4.13.7

Release notes

Sourced from hono's releases.

v4.13.7

Security fixes

This release includes a fix for the following security issue:

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

Affects: Suspense, ErrorBoundary, and Context.Provider in hono/jsx, and renderToString() / renderToReadableStream() in hono/jsx/dom/server. Fixes missing HTML escaping for a plain string placed directly as a child or fallback of these components, or as the root value of the server rendering functions, so untrusted strings could be emitted as markup. GHSA-hxh3-vqpv-xpqv

Users who render untrusted strings inside Suspense, ErrorBoundary, or Context.Provider, or pass them directly to hono/jsx/dom/server, are strongly encouraged to upgrade to this version.

v4.13.6

What's Changed

fix(client): keep a param value of "index" in $url() and $path() in honojs/hono#5297

fix(client): normalize root WebSocket URLs in honojs/hono#5291

fix(types): allow symbol keys in Context get and set fallbacks in honojs/hono#5300

chore: bump editorconfig-checker in honojs/hono#5336

refactor(on-handler): use forEach for consistent handler iteration in honojs/hono#5326

Full Changelog: honojs/hono@v4.13.5...v4.13.6

v4.13.5

Security fixes

This release includes fixes for the following security issues:

Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

Affects: Cache Middleware and applications behind a proxy, WAF, or logging layer that inspects query strings. Fixes query parsing that did not stop at the URL fragment, so a ? after a # was treated as the start of a query string and the application could read parameters that the other component never saw. GHSA-crvj-82cr-hjcx

Incomplete fix for CVE-2026-39408: toSSG() still writes files outside the output directory

Affects: toSSG() for Static Site Generation. Fixes a path normalization gap where consecutive parent-directory segments in ssgParams values were not fully collapsed, bypassing the containment check added in 4.12.12. GHSA-gqvv-2mrq-wpjv

Unbounded dot-notation nesting in parseBody() can cause memory exhaustion

Affects: parseBody() when dot-notation parsing is enabled. Fixes unbounded expansion of dot-separated field names, where a small request body could allocate a disproportionately large object graph and concurrent requests could exhaust the heap. GHSA-g6gw-c38x-mqfc

Users who use Cache Middleware, deploy behind a proxy or WAF that inspects query strings, use Static Site Generation, or use parseBody({ dot: true }) are strongly encouraged to upgrade to this version.

v4.13.4

What's Changed

fix(request): handle params on unmatched requests in honojs/hono#5268

fix(jsx/dom): execute previous ref cleanup when ref prop changes on re-render in honojs/hono#5264

fix(reg-exp-router): associate wildcard middleware with matching routes in honojs/hono#5266

perf(router): share null object creation in honojs/hono#5267

... (truncated)

Commits

eebdf7b 4.13.7
2b8ed40 Merge commit from fork
cac0c4d 4.13.6
dac5d57 refactor(on-handler): use forEach for consistent handler iteration (#5326)
ec648d6 chore: bump editorconfig-checker (#5336)
e2740d5 fix(types): allow symbol keys in Context<any> get and set fallbacks (#5300)
499c35e fix(client): normalize root WebSocket URLs (#5291)
50b8788 fix(client): keep a param value of "index" in $url() and $path() (#5297)
06880c4 4.13.5
531e9c5 Merge commit from fork
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@so... Description has been truncated

Bumps the npm group with 28 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@google-cloud/storage](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/storage) | `7.21.0` | `8.1.0` | | [@google-cloud/tasks](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-tasks) | `6.3.0` | `7.1.0` | | [@hono/node-server](https://github.com/honojs/node-server) | `2.0.12` | `2.1.1` | | [google-auth-library](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/google-auth-library-nodejs) | `10.9.1` | `11.0.2` | | [hono](https://github.com/honojs/hono) | `4.13.1` | `4.13.7` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` | | [snowflake-sdk](https://github.com/snowflakedb/snowflake-connector-nodejs) | `3.1.0` | `3.3.0` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.1` | `21.2.2` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.0` | `21.2.2` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.62.0` | `1.63.0` | | [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `7.0.0` | `7.0.1` | | [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.7` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.2` | `26.5.1` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.4` | `6.1.1` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `5.0.0` | | [commitlint-plugin-rai](https://github.com/anchildress1/rai-lint/tree/HEAD/packages/node-commitlint) | `1.0.1` | `1.0.2` | | [concurrently](https://github.com/open-cli-tools/concurrently) | `10.0.4` | `10.0.5` | | [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.10.0` | | [lefthook](https://github.com/evilmartians/lefthook) | `2.1.10` | `2.1.12` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.13` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.65.0` | `8.70.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.5` | `8.2.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `5.0.0` | Updates `@google-cloud/storage` from 7.21.0 to 8.1.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/handwritten/storage/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/admin-v8.1.0/handwritten/storage) Updates `@google-cloud/tasks` from 6.3.0 to 7.1.0 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-tasks/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/dlp-v7.1.0/packages/google-cloud-tasks) Updates `@hono/node-server` from 2.0.12 to 2.1.1 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.0.12...v2.1.1) Updates `google-auth-library` from 10.9.1 to 11.0.2 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/google-auth-library-nodejs/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/google-auth-library-v11.0.2/core/packages/google-auth-library-nodejs) Updates `hono` from 4.13.1 to 4.13.7 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.1...v4.13.7) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.17 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.3 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `snowflake-sdk` from 3.1.0 to 3.3.0 - [Release notes](https://github.com/snowflakedb/snowflake-connector-nodejs/releases) - [Changelog](https://github.com/snowflakedb/snowflake-connector-nodejs/blob/master/CHANGELOG.md) - [Commits](snowflakedb/snowflake-connector-nodejs@v3.1.0...v3.3.0) Updates `@commitlint/cli` from 21.2.1 to 21.2.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/cli) Updates `@commitlint/config-conventional` from 21.2.0 to 21.2.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/config-conventional) Updates `@playwright/test` from 1.62.0 to 1.63.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.62.0...v1.63.0) Updates `@testing-library/jest-dom` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/testing-library/jest-dom/releases) - [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md) - [Commits](testing-library/jest-dom@v7.0.0...v7.0.1) Updates `@testing-library/react` from 16.3.2 to 16.3.3 - [Release notes](https://github.com/testing-library/react-testing-library/releases) - [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3) Updates `@testing-library/user-event` from 14.6.1 to 14.6.7 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.6.1...v14.6.7) Updates `@types/node` from 26.1.2 to 26.5.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.17 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.3 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitejs/plugin-react` from 6.0.4 to 6.1.1 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/[email protected]/packages/plugin-react) Updates `@vitest/coverage-v8` from 4.1.10 to 5.0.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/coverage-v8) Updates `commitlint-plugin-rai` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/anchildress1/rai-lint/releases) - [Changelog](https://github.com/anchildress1/rai-lint/blob/main/packages/node-commitlint/CHANGELOG.md) - [Commits](https://github.com/anchildress1/rai-lint/commits/commitlint-plugin-rai-v1.0.2/packages/node-commitlint) Updates `concurrently` from 10.0.4 to 10.0.5 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](open-cli-tools/concurrently@v10.0.4...v10.0.5) Updates `eslint` from 10.8.0 to 10.10.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.8.0...v10.10.0) Updates `lefthook` from 2.1.10 to 2.1.12 - [Release notes](https://github.com/evilmartians/lefthook/releases) - [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md) - [Commits](evilmartians/lefthook@v2.1.10...v2.1.12) Updates `tsx` from 4.23.1 to 4.23.13 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.1...v4.23.13) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) Updates `typescript-eslint` from 8.65.0 to 8.70.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint) Updates `vite` from 8.1.5 to 8.2.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite) Updates `vitest` from 4.1.10 to 5.0.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/vitest) --- updated-dependencies: - dependency-name: "@google-cloud/storage" dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: "@google-cloud/tasks" dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: "@hono/node-server" dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: google-auth-library dependency-version: 11.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: hono dependency-version: 4.13.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: snowflake-sdk dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@commitlint/cli" dependency-version: 21.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@commitlint/config-conventional" dependency-version: 21.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@playwright/test" dependency-version: 1.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@testing-library/jest-dom" dependency-version: 7.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@testing-library/react" dependency-version: 16.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@testing-library/user-event" dependency-version: 14.6.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@types/node" dependency-version: 26.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@vitest/coverage-v8" dependency-version: 5.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: commitlint-plugin-rai dependency-version: 1.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: concurrently dependency-version: 10.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: eslint dependency-version: 10.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: lefthook dependency-version: 2.1.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: tsx dependency-version: 4.23.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: typescript-eslint dependency-version: 8.70.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: vite dependency-version: 8.2.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: vitest dependency-version: 5.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm ... Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: anchildress1 <[email protected]>

dependabot Bot added dependencies javascript labels Sep 17, 2026

dependabot Bot requested a review from anchildress1 as a code owner September 17, 2026 04:18

dependabot Bot added dependencies javascript labels Sep 17, 2026

Copilot started work on behalf of anchildress1 September 19, 2026 16:17 View session

fix: restore CI install by pinning TypeScript 6

92f888b

Co-authored-by: anchildress1 <[email protected]>

Copilot finished work on behalf of anchildress1 September 19, 2026 16:21

Navigation Menu

chore(deps): Bump the npm group across 1 directory with 28 updates - #39

chore(deps): Bump the npm group across 1 directory with 28 updates#39
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-c31aeb0407

dependabot Bot commented on behalf of github Sep 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 17, 2026

recommender: v8.1.0

8.1.0 (2026-09-08)

Features

security-private-ca: v8.1.0

8.1.0 (2026-09-08)

Features

speech: v8.1.0

8.1.0 (2026-09-08)

Features

storage: v8.1.0

8.1.0 (2026-09-08)

Features

Bug Fixes

talent: v8.1.0

8.1.0 (2026-09-08)

Features

cloud-profiler: v8.1.0

8.1.0 (2026-09-15)

8.1.0 (2026-09-08)

Features

Bug Fixes

8.0.1 (2026-08-18)

Bug Fixes

8.0.0 (2026-08-13)

⚠ BREAKING CHANGES

Features

7.22.0 (2026-08-11)

Features

Bug Fixes

resource-manager: v7.1.0

7.1.0 (2026-09-08)

Features

secret-manager: v7.1.0

7.1.0 (2026-09-08)

Features

service-directory: v7.1.0

7.1.0 (2026-09-08)

Features

tasks: v7.1.0

7.1.0 (2026-09-08)

Features

text-to-speech: v7.1.0

7.1.0 (2026-09-08)

Features

video-intelligence: v7.1.0

7.1.0 (2026-09-08)

Features

logging-winston: v7.1.0

7.1.0 (2026-09-15)

7.1.0 (2026-09-08)

Features

7.0.0 (2026-08-04)

⚠ BREAKING CHANGES

Features

v2.1.1

What's Changed

v2.1.0

What's Changed

New Contributors

11.0.2 (2026-08-12)

Bug Fixes

11.0.1 (2026-08-10)

Bug Fixes

11.0.0 (2026-07-29)

⚠ BREAKING CHANGES

Features

v4.13.7

Security fixes

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

v4.13.6

What's Changed

v4.13.5

Security fixes

Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

Incomplete fix for CVE-2026-39408: toSSG() still writes files outside the output directory

Unbounded dot-notation nesting in parseBody() can cause memory exhaustion

v4.13.4

What's Changed

`hono/jsx` renders plain strings unescaped in boundary components, leading to XSS

Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory

Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion