Thanks to visit codestin.com
Credit goes to github.com

Skip to content

chore(deps)(deps): bump the runtime-deps group across 1 directory with 17 updates - #30241

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/runtime-deps-62323f42be
Open

chore(deps)(deps): bump the runtime-deps group across 1 directory with 17 updates#30241
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/runtime-deps-62323f42be

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the runtime-deps group with 17 updates in the / directory:

Package From To
uniku 0.5.0 0.6.0
wrap-ansi 10.0.0 10.0.1
@vercel/detect-agent 1.2.4 1.2.5
jose 6.2.8 6.2.12
bson 7.3.1 7.3.2
pg-cursor 2.21.0 2.22.0
vitest 4.1.10 4.1.11
next 16.3.0 16.3.4
@react-router/node 8.3.0 8.3.1
@react-router/serve 8.3.0 8.3.1
isbot 5.2.1 5.2.2
react-router 8.3.0 8.3.1
postcss 8.5.26 8.5.28
@prisma/dev 0.25.1 0.25.2
tsx 4.23.12 4.23.13
vscode-languageserver-textdocument 1.0.12 1.0.14
vscode-languageserver 10.1.0 10.1.1

Updates uniku from 0.5.0 to 0.6.0

Release notes

Sourced from uniku's releases.

uniku CLI v0.6.0

What's Changed

Full Changelog: https://github.com/jkomyno/uniku/compare/@​uniku/[email protected]

[email protected]

Minor Changes

  • e5294d9: Publish the final pre-v1 migration release with the secs, seq, and Nanoid object-form size aliases explicitly deprecated. Use msecs, counter, and length instead; the aliases will be removed in 1.0.0-rc.1.

uniku CLI v0.5.2

What's Changed

Full Changelog: https://github.com/jkomyno/uniku/compare/@​uniku/[email protected]

uniku CLI v0.5.1

What's Changed

Full Changelog: https://github.com/jkomyno/uniku/compare/@​uniku/[email protected]

Changelog

Sourced from uniku's changelog.

0.6.0

Minor Changes

  • e5294d9: Publish the final pre-v1 migration release with the secs, seq, and Nanoid object-form size aliases explicitly deprecated. Use msecs, counter, and length instead; the aliases will be removed in 1.0.0-rc.1.
Commits
  • 9f171bb chore(release): version packages
  • e5294d9 docs(uniku): schedule deprecated alias removals
  • a26f226 docs: document generator public APIs
  • c4fd1c5 revert: restore main before v1 RC review
  • 641aeb4 chore(release): prepare uniku 1.0.0-rc.0
  • 13175e4 docs(uniku): finalize v1 migration contract
  • 9246e9f test(uniku): lock v1 package removals
  • 0172a2e refactor(uniku): remove pre-v1 option aliases
  • 4bc91f7 refactor(uniku): make CUID v2 canonical
  • See full diff in compare view

Updates wrap-ansi from 10.0.0 to 10.0.1

Release notes

Sourced from wrap-ansi's releases.

v10.0.1

  • Fix handling of hyperlinks 1f23be6

chalk/wrap-ansi@v10.0.0...v10.0.1

Commits

Updates @vercel/detect-agent from 1.2.4 to 1.2.5

Release notes

Sourced from @​vercel/detect-agent's releases.

@​vercel/h3@​0.1.116

Patch Changes

  • @​vercel/node@​5.9.3

@​vercel/h3@​0.1.115

Patch Changes

  • @​vercel/node@​5.9.2

@​vercel/h3@​0.1.114

Patch Changes

  • @​vercel/node@​5.9.1

@​vercel/h3@​0.1.113

Patch Changes

  • Updated dependencies [4502520]
    • @​vercel/node@​5.9.0

@​vercel/h3@​0.1.112

Patch Changes

  • @​vercel/node@​5.8.27
Changelog

Sourced from @​vercel/detect-agent's changelog.

1.2.5

Patch Changes

  • 2da7809: Remove redundant and ineffective package tests.
Commits

Updates jose from 6.2.8 to 6.2.12

Release notes

Sourced from jose's releases.

v6.2.12

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

v6.2.11

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

v6.2.10

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)
  • jwt: prevent replacing protected headers (ae07d09)
  • jwt: reject invalid duration inputs (282f9aa)
  • jwt: validate builder claim values (ea03f83)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.12 (2026-09-05)

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

6.2.11 (2026-09-04)

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

6.2.10 (2026-08-21)

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)

... (truncated)

Commits
  • 505a55b chore(release): 6.2.12
  • 7bc9a33 perf: encode single-signature JWS input once
  • 78637bd perf: normalize General JWE shared headers once
  • bf5138b perf: deduplicate pending jwks key imports
  • b23a6f3 perf: use native encoding for larger ASCII strings
  • fd3ae3f perf: normalize jwks selection metadata once
  • 6925d43 perf: avoid copying AES-GCM output
  • be62530 docs: clarify and shorten public API guidance
  • 1b41312 build: preserve README when generation fails
  • 0b51829 build: check tree-shaking for every public binding
  • Additional commits viewable in compare view

Updates bson from 7.3.1 to 7.3.2

Release notes

Sourced from bson's releases.

v7.3.2

7.3.2 (2026-07-31)

The MongoDB Node.js team is pleased to announce version 7.3.2 of the bson package!

Release Notes

calculateObjectSize() now returns accurate byte counts for Int32 and BSONSymbol

Previously, each Int32 or BSONSymbol value caused a 12-byte overcount.

calculateObjectSize() now yields proper size calculations on ES Map's

This release of js-bson fixes an issue where we were incorrectly considering ES Map objects inside calculateObjectSize. This issue did not impact serialization, just size calculation.

Fixed incorrect date boundary in relaxed EJSON

This release of js-bson fixes an issue where the date boundary for relaxed EJSON was incorrectly set to a date 5 hours after the maximum limit of 10,000 AD.

Fixed an issue with ObjectId initialization in Cloudflare Workers

This release of js-bson fixes an issue where we were making crypto calls during module initialization, which is forbidden by Cloudflare Workers and other environments.

Memory optimization via smaller ObjectIds

ObjectId now stores its 12 bytes as four inline integers instead of a Uint8Array, cutting per-ObjectId memory by about 63% (and roughly 45 to 47% across large result sets) with no serialization slowdown. Deep equality and cloning are preserved (assert.deepStrictEqual, and lodash isEqual / cloneDeep).

Thanks to @​spokodev for contributing their fixes! (NODE-7631 (#901), NODE-7645 (#917), NODE-7646 (#910))

Bug Fixes

  • NODE-7631: count Int32 and BSONSymbol in calculateObjectSize (#901) (7f948a6)
  • NODE-7645: use the first instant of year 10000 as the relaxed EJSON date bound (#917) (9272c9a)
  • NODE-7646: count ES Map entries in calculateObjectSize (#910) (8d28b12)
  • NODE-7667: remove early initialization from ObjectId (#916) (665286f)

Performance Improvements

  • NODE-6246: store ObjectId bytes as four packed integers (#893) (a84229c)

Documentation

We invite you to try the bson library immediately, and report any issues to the NODE project.

Changelog

Sourced from bson's changelog.

7.3.2 (2026-07-31)

Bug Fixes

  • NODE-7631: count Int32 and BSONSymbol in calculateObjectSize (#901) (7f948a6)
  • NODE-7645: use the first instant of year 10000 as the relaxed EJSON date bound (#917) (9272c9a)
  • NODE-7646: count ES Map entries in calculateObjectSize (#910) (8d28b12)
  • NODE-7667: remove early initialization from ObjectId (#916) (665286f)

Performance Improvements

  • NODE-6246: store ObjectId bytes as four packed integers (#893) (a84229c)
Commits
  • 9cd2e68 chore(main): release 7.3.2 (#902)
  • 9272c9a fix(NODE-7645): use the first instant of year 10000 as the relaxed EJSON date...
  • 8d28b12 fix(NODE-7646): count ES Map entries in calculateObjectSize (#910)
  • 665286f fix(NODE-7667): remove early initialization from ObjectId (#916)
  • 1fc57e4 chore(NODE-7681): allow git fetch for npm12 (#914)
  • 57b5bf0 chore: use bundled version of NPM (#913)
  • a84229c perf(NODE-6246): store ObjectId bytes as four packed integers (#893)
  • 7f948a6 fix(NODE-7631): count Int32 and BSONSymbol in calculateObjectSize (#901)
  • See full diff in compare view

Updates pg-cursor from 2.21.0 to 2.22.0

Commits

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 9bd8d46 chore: release v4.1.11 (#10995)
  • 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
  • See full diff in compare view

Updates next from 16.3.0 to 16.3.4

Release notes

Sourced from next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [backport] Scope app-entry export validation to files inside the app directory (#97357)
  • [backport] Fix catch-all index page being served for every other slug (#97416)
  • [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

... (truncated)

Commits
  • 299180d v16.3.4
  • 12e173d [16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)
  • 5d9022e [backport] Fix unset crossOrigin in Turbopack manifests (#97930)
  • d8f4560 [16.3.x] Fix build error when aliasing typescript to @​typescript/typescript6 ...
  • 656aebf [16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • f37c1d6 [16.3.x] ci: remove pull_request_stats workflow (#97975)
  • a9a1cb7 v16.3.3
  • 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 3a15b4a [16.3.x] [next/image]: disable avif image optimization
  • 7378b51 Backport/docs fixes 16.3 (#97649)
  • Additional commits viewable in compare view

Updates @react-router/node from 8.3.0 to 8.3.1

Release notes

Sourced from @​react-router/node's releases.

v8.3.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v831

Changelog

Sourced from @​react-router/node's changelog.

v8.3.1

Patch Changes

  • Bump @remix-run/node-fetch-server dependency (#15447)
  • fix: Prevent client disconnects during streaming from crashing the Node process (#15324)
  • Updated dependencies:
Commits

Updates @react-router/serve from 8.3.0 to 8.3.1

Release notes

Sourced from @​react-router/serve's releases.

v8.3.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v831

Changelog

Sourced from @​react-router/serve's changelog.

v8.3.1

Patch Changes

  • Bump @remix-run/node-fetch-server dependency (#15447)
  • Serve /.well-known/* files from the client build directory. Express 5's static middleware ignores every dot-segment path by default, so RFC 8615 well-known URIs — ACME challenges, Android's assetlinks.json, Apple's apple-app-site-association — fell through to the request handler and came back as app-rendered HTML instead of the static file. Other dotfiles remain hidden. (#15340)
  • Updated dependencies:
Commits

Updates isbot from 5.2.1 to 5.2.2

Changelog

Sourced from isbot's changelog.

5.2.2

  • Pattern update: reduce size
Commits
  • eff2b5a Pattern update: reduce size
  • 09506ca adjust procedure for zsh, too
  • 06e1827 Does anyone read this? I'll be at the coffee shop accross the street.
  • 344052d nothing really
  • See full diff in compare view

Updates react-router from 8.3.0 to 8.3.1

Release notes

Sourced from react-router's releases.

v8.3.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v831

Changelog

Sourced from react-router's changelog.

v8.3.1

Patch Changes

  • Fix Expected fetcher: <key> error thrown on navigation when a fetcher is aborted during its post-action revalidation (#15365)
  • Fix lazy route discovery caching a path as discovered when the triggering navigation was aborted after the manifest response settled but before the route tree was patched, which permanently (for the session) shadowed the real route behind a catch-all or produced 404s on every subsequent visit (#15399)
  • Improve route matching performance for long paths (#15417)
  • Improve validation of action request origins (#15419)
  • Fix <ScrollRestoration> leaving history.scrollRestoration set to "auto" after a bfcache restore, which let the browser restore scroll on subsequent history traversals before the destination route had rendered (#15397)
  • Properly respect the relative option in useSubmit/fetcher.submit when resolivng the action path (#15400)
  • Add additional URL validation on client side navigations/redirects (#15445)
Commits
  • da2a0f0 Release v8.3.1 (#15368)
  • 917e6fd fix(fog-of-war): don't cache aborted lazy route discoveries as discovered (#1...
  • 2e0bf72 Validate client-side navigation targets (#15445)
  • f45d4ca Revert "fix: normalize control characters in relative URLs (#15416)" (#15442)
  • c091832 fix: validate schemeful action origins (#15419)
  • 308d206 fix: improve matching perf (#15417)
  • 36bdbeb fix: normalize control characters in relative URLs (#15416)
  • 801e2ae fix(react-router): re-enable manual scroll restoration after a bfcache restor...
  • 5e98140 fix: honor the relative option in useSubmit and fetcher.submit (#15400)
  • 5843d38 refactor(router): use definite assignment assertions in createDeferred (#15396)
  • Additional commits viewable in compare view

Updates postcss from 8.5.26 to 8.5.28

Release notes

Sourced from postcss's releases.

8.5.28

  • Fixes types regression.

8.5.27

Changelog

Sourced from postcss's changelog.

8.5.28

  • Fixes types regression.

8.5.27

Commits

Updates @prisma/dev from 0.25.1 to 0.25.2

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

Commits

Updates vscode-languageserver-textdocument from 1.0.12 to 1.0.14

Release notes

Sourced from vscode-languageserver-textdocument's releases.

release/textDocument/1.0.13

Changes:

Bugs:

  • #752: Edits are applied twice

Others:

  • #1775: Update dependencies and improve compatibility
  • #1774: Bump qs from 6.15.0 to 6.15.2
  • #1773: Implement TextDocumentSnapshot for delay open notifications
  • #1772: Prevent pulling diagnostics on untitled documents
  • #1770: Update documentation and fix lint errors
  • #1767: Inline value documentation improvements
  • #1769: Fix glob pattern documentation
  • #1768: Make document color requests consistent with the specification
  • #1766: Add optional MarkupContent support to diagnostics
  • #1751: forgetDocument is crashing the extension host
  • #1765: Fixes #1751: Prevent crash in forgetDocument when disposed
  • #1752: fix: random pipe path length extends limit on macos
  • #1764: Fixes double application of edits during renaming
  • #1762: Bump brace-expansion from 5.0.3 to 5.0.6 in /client
  • #1763: Bump brace-expansion from 5.0.5 to 5.0.6 in /client-node-tests
  • #1761: Inline Linux/macOS process-tree termination in client dispose path
  • #1760: Remove uuid dependency and use crypto's randomUUID
  • #1759: Bump fast-uri from 3.1.0 to 3.1.2
  • #1753: Bump follow-redirects from 1.15.11 to 1.16.0
  • #1747: Migrate to ESLint 9
  • #1746: Bump brace-expansion from 5.0.3 to 5.0.5 in /client-node-tests
  • #1744: Bump picomatch from 2.3.1 to 2.3.2 in /client
  • #1745: Bump picomatch from 2.3.1 to 2.3.2
  • #1742: Bump flatted from 3.2.7 to 3.4.2
  • #1733: Update metamodel
  • #1736: Merge release into main
  • #1735: Merge updated lock files into release branch

This list of changes was auto generated.

Commits
  • See full diff in

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 9, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 9, 2026 17:23
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 9, 2026
@pkg-pr-new

pkg-pr-new Bot commented Sep 9, 2026

Copy link
Copy Markdown

Open in StackBlitz

@prisma/orm-extension-arktype-json

npm i https://pkg.pr.new/@prisma/orm-extension-arktype-json@30241

@prisma/orm-extension-middleware-cache

npm i https://pkg.pr.new/@prisma/orm-extension-middleware-cache@30241

@prisma/orm-extension-paradedb

npm i https://pkg.pr.new/@prisma/orm-extension-paradedb@30241

@prisma/orm-extension-pgvector

npm i https://pkg.pr.new/@prisma/orm-extension-pgvector@30241

@prisma/orm-extension-postgis

npm i https://pkg.pr.new/@prisma/orm-extension-postgis@30241

@prisma/orm-extension-supabase

npm i https://pkg.pr.new/@prisma/orm-extension-supabase@30241

@prisma/orm-family-mongo

npm i https://pkg.pr.new/@prisma/orm-family-mongo@30241

@prisma/orm-family-sql

npm i https://pkg.pr.new/@prisma/orm-family-sql@30241

@prisma/orm-framework

npm i https://pkg.pr.new/@prisma/orm-framework@30241

@prisma/orm-mongo

npm i https://pkg.pr.new/@prisma/orm-mongo@30241

@prisma/orm-postgres

npm i https://pkg.pr.new/@prisma/orm-postgres@30241

@prisma/orm-sqlite

npm i https://pkg.pr.new/@prisma/orm-sqlite@30241

@prisma/orm-target-mongo

npm i https://pkg.pr.new/@prisma/orm-target-mongo@30241

@prisma/orm-target-postgres

npm i https://pkg.pr.new/@prisma/orm-target-postgres@30241

@prisma/orm-target-sqlite

npm i https://pkg.pr.new/@prisma/orm-target-sqlite@30241

@prisma/orm-toolchain

npm i https://pkg.pr.new/@prisma/orm-toolchain@30241

commit: 6fefa2c

@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

size-limit report 📦

Path Size
postgres / no-emit 181.77 KB (+0.2% 🔺)
postgres / emit 154.89 KB (+0.25% 🔺)
mongo / no-emit 107.92 KB (+0.53% 🔺)
mongo / emit 92.34 KB (+0.59% 🔺)
cf-worker / no-emit 206.23 KB (+0.15% 🔺)
cf-worker / emit 176.42 KB (+0.19% 🔺)

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/runtime-deps-62323f42be branch from 685598d to 38646a7 Compare September 10, 2026 15:19
@coderabbitai

coderabbitai Bot commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yml

Review profile: CHILL

Plan: Advanced

Run ID: a0b0d22a-1a2d-43d6-b373-6d87d8917ae8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/runtime-deps-62323f42be branch 2 times, most recently from f5a3471 to a840b47 Compare September 11, 2026 16:39
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/runtime-deps-62323f42be branch from a840b47 to 3e8bd58 Compare September 11, 2026 18:35
thallesdomician pushed a commit to thallesdomician/prisma that referenced this pull request Sep 11, 2026
…#30261)

## Linked issue

n/a — no Linear ticket. Follow-up to prisma#30229 (roadmap removal) and prisma#30248
(Prisma 8 rename).

## At a glance

Docs-only PRs could not enter the merge queue: `Size Limit` is a
required check, and the bundle-size workflow skipped the whole job on an
inert diff, so the check never reported. prisma#30229 needed an admin merge
for exactly this reason. The job now always runs and only its steps
skip.

## Summary

Three leftovers from the roadmap removal in one commit, plus a second
commit that fixes the test-database idle timeout behind today's
`Connection terminated unexpectedly` failures.

### The idle-timeout mismatch

`createDevDatabase` in `@repo/test-utils` started the dev Postgres with
a one-second idle timeout, while the Postgres driver's pool keeps an
idle client for thirty seconds. Any test that pauses more than a second
between queries then gets a dead client back from the pool: `Client has
encountered a connection error and is not queryable`, wrapped as
`SqlConnectionError: Connection terminated unexpectedly`. Coverage
instrumentation makes such pauses routine, which is why the
adapter-postgres native-enum lifecycle suite failed the Coverage job on
five branches today (prisma#30249's queue run, prisma#30241, `prepare-orm`,
`prisma-8-skill-rc9-refresh`, prisma#30262 four times in a row) while passing
every plain shard.

Three suites had already worked around it with a per-call thirty- or
sixty-second override and a comment explaining exactly this. The default
now matches the pool (thirty seconds), the three redundant overrides are
gone, the telemetry harness keeps its sixty, and the returned handle
exposes the setting so the test can assert it.

### The roadmap leftovers

1. **`ROADMAP.html` is deleted.** It was the rendered twin of the
`ROADMAP.md` that prisma#30229 removed and still described the rc.1 plan.
2. **`scripts/lint-legacy-name.mjs` no longer cites the deleted
roadmap.** Two of its temporary allowances pointed at "ROADMAP.md § 3"
as the task that retires them; they now name the pending identifier
rename directly. The file-specific allowance for the roadmap itself is
gone with the files, and so is its test.
3. **The `Size Limit` job always reports.** The inert-diff condition
moves from the job to each step, following the pattern the CI workflow
already uses for its required `Test` summary job.

## Behavior changes & evidence

- **CI:** a docs-only PR now gets a green `Size Limit` check instead of
a skipped one, so auto-merge can enqueue it. Evidence: this PR touches
`.github/` and `scripts/`, so it is non-inert and exercises the real
path; the inert path is exercised by the next docs-only PR.
- **Lint:** `pnpm lint:legacy-name` still passes on main; `node --test
scripts/lint-legacy-name.test.mjs
scripts/lint-workflow-triggers.test.mjs` passes (29 tests).

## Skill update

n/a — no user-facing surface changed.

## Checklist

- [x] All commits are signed off (`git commit -s`) per the
[DCO](../CONTRIBUTING.md#developer-certificate-of-origin-dco).
- [x] I read [CONTRIBUTING.md](../CONTRIBUTING.md) and the change is
scoped to one logical concern.
- [x] Tests are updated (the lint test drops the roadmap allowance case
and asserts the new pointer).
- [ ] The PR title is in `TML-NNNN: <sentence-case title>` form. No
Linear ticket exists for this change.
- [x] The **Skill update** section above is filled in.

🤖 Generated with [Claude Code](https://claude.com/claude-code)


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- **Documentation**
  - Removed the Prisma 8 RC1 roadmap page.

- **Bug Fixes**
- Bundle-size checks now report consistently, including for
documentation-only changes.

- **Development Experience**
- Improved local development database connection handling by keeping
idle connections available for longer, reducing unexpected disconnects
during extended development and testing sessions.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Signed-off-by: willbot <[email protected]>
Signed-off-by: Will Madden <[email protected]>
Co-authored-by: Claude Fable 5.1 <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/runtime-deps-62323f42be branch from 3e8bd58 to fe42005 Compare September 12, 2026 11:53
RyanGarber pushed a commit to RyanGarber/prisma-orm that referenced this pull request Sep 13, 2026
…#30261)

## Linked issue

n/a — no Linear ticket. Follow-up to prisma#30229 (roadmap removal) and prisma#30248
(Prisma 8 rename).

## At a glance

Docs-only PRs could not enter the merge queue: `Size Limit` is a
required check, and the bundle-size workflow skipped the whole job on an
inert diff, so the check never reported. prisma#30229 needed an admin merge
for exactly this reason. The job now always runs and only its steps
skip.

## Summary

Three leftovers from the roadmap removal in one commit, plus a second
commit that fixes the test-database idle timeout behind today's
`Connection terminated unexpectedly` failures.

### The idle-timeout mismatch

`createDevDatabase` in `@repo/test-utils` started the dev Postgres with
a one-second idle timeout, while the Postgres driver's pool keeps an
idle client for thirty seconds. Any test that pauses more than a second
between queries then gets a dead client back from the pool: `Client has
encountered a connection error and is not queryable`, wrapped as
`SqlConnectionError: Connection terminated unexpectedly`. Coverage
instrumentation makes such pauses routine, which is why the
adapter-postgres native-enum lifecycle suite failed the Coverage job on
five branches today (prisma#30249's queue run, prisma#30241, `prepare-orm`,
`prisma-8-skill-rc9-refresh`, prisma#30262 four times in a row) while passing
every plain shard.

Three suites had already worked around it with a per-call thirty- or
sixty-second override and a comment explaining exactly this. The default
now matches the pool (thirty seconds), the three redundant overrides are
gone, the telemetry harness keeps its sixty, and the returned handle
exposes the setting so the test can assert it.

### The roadmap leftovers

1. **`ROADMAP.html` is deleted.** It was the rendered twin of the
`ROADMAP.md` that prisma#30229 removed and still described the rc.1 plan.
2. **`scripts/lint-legacy-name.mjs` no longer cites the deleted
roadmap.** Two of its temporary allowances pointed at "ROADMAP.md § 3"
as the task that retires them; they now name the pending identifier
rename directly. The file-specific allowance for the roadmap itself is
gone with the files, and so is its test.
3. **The `Size Limit` job always reports.** The inert-diff condition
moves from the job to each step, following the pattern the CI workflow
already uses for its required `Test` summary job.

## Behavior changes & evidence

- **CI:** a docs-only PR now gets a green `Size Limit` check instead of
a skipped one, so auto-merge can enqueue it. Evidence: this PR touches
`.github/` and `scripts/`, so it is non-inert and exercises the real
path; the inert path is exercised by the next docs-only PR.
- **Lint:** `pnpm lint:legacy-name` still passes on main; `node --test
scripts/lint-legacy-name.test.mjs
scripts/lint-workflow-triggers.test.mjs` passes (29 tests).

## Skill update

n/a — no user-facing surface changed.

## Checklist

- [x] All commits are signed off (`git commit -s`) per the
[DCO](../CONTRIBUTING.md#developer-certificate-of-origin-dco).
- [x] I read [CONTRIBUTING.md](../CONTRIBUTING.md) and the change is
scoped to one logical concern.
- [x] Tests are updated (the lint test drops the roadmap allowance case
and asserts the new pointer).
- [ ] The PR title is in `TML-NNNN: <sentence-case title>` form. No
Linear ticket exists for this change.
- [x] The **Skill update** section above is filled in.

🤖 Generated with [Claude Code](https://claude.com/claude-code)


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- **Documentation**
  - Removed the Prisma 8 RC1 roadmap page.

- **Bug Fixes**
- Bundle-size checks now report consistently, including for
documentation-only changes.

- **Development Experience**
- Improved local development database connection handling by keeping
idle connections available for longer, reducing unexpected disconnects
during extended development and testing sessions.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Signed-off-by: willbot <[email protected]>
Signed-off-by: Will Madden <[email protected]>
Co-authored-by: Claude Fable 5.1 <[email protected]>
…h 17 updates

Bumps the runtime-deps group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [uniku](https://github.com/jkomyno/uniku/tree/HEAD/packages/uniku) | `0.5.0` | `0.6.0` |
| [wrap-ansi](https://github.com/chalk/wrap-ansi) | `10.0.0` | `10.0.1` |
| [@vercel/detect-agent](https://github.com/vercel/vercel/tree/HEAD/packages/detect-agent) | `1.2.4` | `1.2.5` |
| [jose](https://github.com/panva/jose) | `6.2.8` | `6.2.12` |
| [bson](https://github.com/mongodb/js-bson) | `7.3.1` | `7.3.2` |
| [pg-cursor](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg-cursor) | `2.21.0` | `2.22.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |
| [next](https://github.com/vercel/next.js) | `16.3.0` | `16.3.4` |
| [@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node) | `8.3.0` | `8.3.1` |
| [@react-router/serve](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-serve) | `8.3.0` | `8.3.1` |
| [isbot](https://github.com/omrilotan/isbot) | `5.2.1` | `5.2.2` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `8.3.0` | `8.3.1` |
| [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` |
| @prisma/dev | `0.25.1` | `0.25.2` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |
| [vscode-languageserver-textdocument](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/textDocument) | `1.0.12` | `1.0.14` |
| [vscode-languageserver](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/server) | `10.1.0` | `10.1.1` |



Updates `uniku` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/jkomyno/uniku/releases)
- [Changelog](https://github.com/jkomyno/uniku/blob/main/packages/uniku/CHANGELOG.md)
- [Commits](https://github.com/jkomyno/uniku/commits/[email protected]/packages/uniku)

Updates `wrap-ansi` from 10.0.0 to 10.0.1
- [Release notes](https://github.com/chalk/wrap-ansi/releases)
- [Commits](chalk/wrap-ansi@v10.0.0...v10.0.1)

Updates `@vercel/detect-agent` from 1.2.4 to 1.2.5
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/detect-agent/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/[email protected]/packages/detect-agent)

Updates `jose` from 6.2.8 to 6.2.12
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.8...v6.2.12)

Updates `bson` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/mongodb/js-bson/releases)
- [Changelog](https://github.com/mongodb/js-bson/blob/main/HISTORY.md)
- [Commits](mongodb/js-bson@v7.3.1...v7.3.2)

Updates `pg-cursor` from 2.21.0 to 2.22.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/[email protected]/packages/pg-cursor)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

Updates `next` from 16.3.0 to 16.3.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.0...v16.3.4)

Updates `@react-router/node` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-node/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/[email protected]/packages/react-router-node)

Updates `@react-router/serve` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-serve/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/[email protected]/packages/react-router-serve)

Updates `isbot` from 5.2.1 to 5.2.2
- [Changelog](https://github.com/omrilotan/isbot/blob/main/CHANGELOG.md)
- [Commits](omrilotan/isbot@v5.2.1...v5.2.2)

Updates `react-router` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router)

Updates `postcss` from 8.5.26 to 8.5.28
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.26...8.5.28)

Updates `@prisma/dev` from 0.25.1 to 0.25.2

Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

Updates `vscode-languageserver-textdocument` from 1.0.12 to 1.0.14
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/HEAD/textDocument)

Updates `vscode-languageserver` from 10.1.0 to 10.1.1
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.1.1/server)

---
updated-dependencies:
- dependency-name: "@prisma/dev"
  dependency-version: 0.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: "@react-router/node"
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: "@react-router/serve"
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: "@vercel/detect-agent"
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: bson
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: isbot
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: jose
  dependency-version: 6.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: next
  dependency-version: 16.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: pg-cursor
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-deps
- dependency-name: postcss
  dependency-version: 8.5.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: react-router
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: uniku
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-deps
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: vscode-languageserver
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: vscode-languageserver-textdocument
  dependency-version: 1.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
- dependency-name: wrap-ansi
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/runtime-deps-62323f42be branch from fe42005 to 6fefa2c Compare September 13, 2026 07:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants