Skip to content

fix(deps): update all major dependencies (major) #18

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all major dependencies (major) #18

wants to merge 1 commit into from
+24 −24

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Mar 13, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
@neondatabase/serverless (source) 0.10.4 -> 1.0.2 age confidence dependencies major
@types/node (source) 22.13.4 -> 24.9.2 age confidence devDependencies major
@vitest/coverage-v8 (source) 3.0.5 -> 4.0.5 age confidence devDependencies major
actions/checkout v4 -> v5 age confidence action major
actions/setup-node v4 -> v6 age confidence action major
dotenv 16.4.7 -> 17.2.3 age confidence devDependencies major
eslint-import-resolver-typescript 3.8.0 -> 4.4.4 age confidence devDependencies major
vitest (source) 3.0.5 -> 4.0.5 age confidence devDependencies major
wrangler (source) 3.109.1 -> 4.45.2 age confidence devDependencies major
zod (source) 3.24.2 -> 4.1.12 age confidence dependencies major

Release Notes

neondatabase/serverless (@​neondatabase/serverless)

v1.0.2

Compare Source

Update neon.tech references to neon.com domain.

v1.0.1

Compare Source

The package now prints a security warning to the console when a connection is made in a web browser. This behaviour can be suppressed with a new configuration option: disableWarningInBrowsers. There are a few other very minor fixes.

v1.0.0

Compare Source

Breaking change: the HTTP query template function can now only be called as a template function, not as a conventional function. This improves safety from accidental SQL-injection vulnerabilities. For example:

import { neon } from '@​neondatabase/serverless';
const sql = neon(process.env.DATABASE_URL);
const id = 1;

// this is safe and convenient, as before
const result = await sql`SELECT * FROM table WHERE id = ${id}`;

// this looks very similar and was previously allowed, but was open to SQL
// injection attacks because it uses ordinary string interpolation -- it's now
// both a TypeScript type error and a runtime error
const throws = await sql(`SELECT * FROM table WHERE id = ${id}`);

To fill the gap left by this change, the template function has two new properties: a query() function that allows manually parameterized queries, and an unsafe() function that lets you interpolate trusted arbitrary string values. For example:

// this was previously allowed, and was safe, but is now also an error so as to
// prevent the vulnerability seen above
const throws = await sql('SELECT * FROM table WHERE id = $1', [id]);

// the `query()` function is the new way to manually specify placeholders and
// values (the same way it's done by `client.query()` and `pool.query()`)
const result = await sql.query('SELECT * FROM table WHERE id = $1', [id]);

// to interpolate strings like column or table names, **only** if you know
// they're safe, use the `unsafe()` function
const table = condition ? 'table1' : 'table2'; // known-safe string values
const result = await sql`SELECT * FROM ${sql.unsafe(table)} WHERE id = ${id}`;

// but in the above case, you might prefer to do this instead
const table = condition ? sql`table1` : sql`table2`;
const result = await sql`SELECT * FROM ${table} WHERE id = ${id}`;

In addition, HTTP template queries are now fully composable, including those with parameters. For example:

const name = 'Olivia';
const limit = 1;
const whereClause = sql`WHERE name = ${name}`;
const limitClause = sql`LIMIT ${limit}`;

// compilation to raw SQL now happens lazily, at query time, so that parameter
// placeholders can be numbered appropriately
const result = await sql`SELECT * FROM table ${whereClause} ${limitClause}`;

The minimum supported version of Node is now v19 (this avoids having to do dynamic crypto imports, which can cause trouble with bundlers).

Lastly: the repository has been rearranged and refactored, .d.ts files are now generated automatically, packages are published via npm version, and comprehensive tests have been put in place. This should ease the way for future enhancements and contributions.

vitest-dev/vitest (@​vitest/coverage-v8)

v4.0.5

Compare Source

   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub

v4.0.4

Compare Source

   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub

v4.0.3

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v4.0.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v4.0.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v4.0.0

Compare Source

   🚨 Breaking Changes
   🚀 Features
   🐞 Bug Fixes
   🏎 Performance
  • Avoid spawning extra workers if no tests will run there  -  by [@​sheremet-va](https://redirect.git

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from adrianmjim as a code owner March 13, 2025 13:36
@codecov
Copy link

codecov bot commented Mar 13, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (988a527) to head (73056b0).

Additional details and impacted files 
@@            Coverage Diff            @@
##              main       #18   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            4         4           
  Lines           35         8   -27     
  Branches         2         0    -2     
=========================================
- Hits            35         8   -27

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch from b432869 to c73e737 Compare March 17, 2025 03:39
@renovate renovate bot changed the title chore(deps): update dependency wrangler to v4 chore(deps): update all major dependencies to v4 (major) Mar 17, 2025
@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch 9 times, most recently from abbb8c3 to 8987ddf Compare March 22, 2025 17:50
@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch from 8987ddf to 601ac75 Compare March 25, 2025 12:01
@renovate renovate bot changed the title chore(deps): update all major dependencies to v4 (major) fix(deps): update all major dependencies (major) Mar 25, 2025
@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch 6 times, most recently from 09d4f75 to 0bb9bbc Compare March 29, 2025 22:03
@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch 7 times, most recently from f52cbd3 to a2e6329 Compare April 8, 2025 23:05
@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch 5 times, most recently from 82bd4fd to d963434 Compare September 18, 2025 17:15
@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch 5 times, most recently from 14798c5 to 3c9edbf Compare September 26, 2025 13:09
@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch 6 times, most recently from 72453bd to 5bebde3 Compare October 6, 2025 17:12
@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch 3 times, most recently from 9400596 to bd160e8 Compare October 14, 2025 05:33
@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch 2 times, most recently from c4018e2 to f03139b Compare October 21, 2025 14:47
@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch 7 times, most recently from 358f061 to 3273729 Compare October 28, 2025 22:59
@renovate renovate bot force-pushed the renovate/major-all-major-dependencies branch from 3273729 to 73056b0 Compare October 29, 2025 17:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@adrianmjim adrianmjim Awaiting requested review from adrianmjim adrianmjim is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

breaking dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant