Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps the bun group with 12 updates in the / directory:

Package From To
@elysiajs/eden 1.3.2 1.4.1
@elysiajs/static 1.3.0 1.4.0
@prisma/client 6.11.1 6.16.2
chalk 5.4.1 5.6.2
elysia 1.3.5 1.4.8
jose 6.0.11 6.1.0
nanoid 5.1.5 5.1.6
prisma 6.11.1 6.16.2
radashi 12.6.0 12.6.2
@biomejs/biome 2.0.6 2.2.4
@types/bun 1.2.18 1.2.23
typescript 5.8.3 5.9.2

Updates @elysiajs/eden from 1.3.2 to 1.4.1

Release notes

Sourced from @​elysiajs/eden's releases.

1.4.1

What's changed

Bug fix:

  • inline object value / Elysia file cause type error
  • macro should not mark property as required

Full Changelog: elysiajs/eden@1.4.0...1.4.1

1.4.0

What's changed

Improvement:

  • support Elysia 1.4

Full Changelog: elysiajs/eden@1.3.3...1.4.0

1.3.3

What's changed

Feature:

  • treaty2: support type safe Server-Sent Events (SSE)
  • treaty2: add utility type Treaty.Data, Treaty.Error to extract data and error type from a route

Bug fix:

  • elysia#823 treaty2: not generating for dynamic params at root
  • treaty2: parse Date in object
  • treaty2: #196 allow custom content-type

Change:

  • minimum Elysia version is set to 1.3.18

Full Changelog: elysiajs/eden@1.3.2...1.3.3

Changelog

Sourced from @​elysiajs/eden's changelog.

1.4.1 - 14 Sep 2025

Bug fix:

  • inline object value / Elysia file cause type error
  • macro should not mark property as required

1.4.0 - 13 Sep 2025

Improvement:

  • support Elysia 1.4

1.3.3 - 24 Aug 2025

Feature:

  • treaty2: support type safe Server-Sent Events (SSE)
  • treaty2: add utility type Treaty.Data, Treaty.Error to extract data and error type from a route

Bug fix:

  • elysia#823 treaty2: not generating for dynamic params at root
  • treaty2: parse Date in object
  • treaty2: #196 allow custom content-type

Change:

  • minimum Elysia version is set to 1.3.18
Commits

Updates @elysiajs/static from 1.3.0 to 1.4.0

Release notes

Sourced from @​elysiajs/static's releases.

1.4.0

What's changed

Improvement:

  • support Elysia 1.4

Full Changelog: elysiajs/elysia-static@1.3.0...1.4.0

Commits

Updates @prisma/client from 6.11.1 to 6.16.2

Release notes

Sourced from @​prisma/client's releases.

6.16.2

Today, we are issuing a 6.16.2 patch release.

Bug fixes

  • In Prisma ORM 6.16.0, we've enabled usage of the new engineType = client with Prisma Postgres, but our validation rules permitted invalid combinations of Prisma Postgres URLs and driver adapters. This now produces a clear error message indicating Prisma Postgres URLs and driver adapters are mutually exclusive.
  • In the previous minor release, we've included a change that calls unref() on NodeJS timers to prevent them from keeping the NodeJS event loop active. This change unintentionally affected non-NodeJS runtimes like workerd, where it has resulted in runtime errors. This behavior has been made conditional to prevent these runtime errors.

6.16.1

Today, we are issuing a 6.16.1 patch release.

Bug fixes

  • In Prisma ORM 6.16.0, the driverAdapters and queryCompiler features were stabilized, but leftover code in the prisma-client-ts generator required them to still be specified in edge runtimes. This has now been fixed, runtimes like workerd and vercel-edge no longer require these preview features.

6.16.0

Today, we are excited to share the 6.16.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Prisma ORM

This section contains all the updates made in Prisma ORM v6.16.0.

Rust-free ORM and driver adapters are Generally Available

Eight months ago, we published our ORM manifesto with the first hint that we're going to remove the Rust-based query engine from Prisma ORM:

We're addressing this by migrating Prisma's core logic from Rust to TypeScript and redesigning the ORM to make customization and extension easier.

After a lot of hard work and feedback from the community, we're incredibly excited to share that the migration has been completed and you can now use Prisma ORM without its Rust engine in your production apps. 🎉 This is a major milestone in the history of Prisma ORM and comes with a lot of benefits:

  • Reduced bundle size by ~90%
  • Faster queries (check out our latest benchmarks)
  • Lower CPU footprint
  • Less deployment complexity
  • Easier to make open-source contributions

… and overall a much better DX since you don't need to worry about the extra binary in your generated Prisma Client code any more.

While the Rust-free ORM will become the default in Prisma ORM v7 soon, for now you still need to opt-into using it:

  1. Configure the generator block in your Prisma schema:
    generator client {
      provider   = "prisma-client" // (or "prisma-client-js") 
      output     = "../src/generated/prisma"
      engineType = "client"
    }

... (truncated)

Commits
  • 125ba79 fix: correct accelerate validation (#28111)
  • 96d8c2d chore: bump execa version to 8.0.1 (#28099)
  • c1ca645 chore: remove rimraf (#28094)
  • abfa3a6 feat(client): add /browser entrypoint to prisma-client (#28068)
  • 5715816 fix(qpe): flip condition when choosing whether to enable itx manager (#28069)
  • 898066a feat(client-generator-ts): removed "Prisma.Validator" from "prisma-client" ge...
  • bc18826 fix(client): add apiKey method for Accelerate extension (#28067)
  • 83cd003 feat(client-generator-ts): re-export enums directly in prisma-client genera...
  • 38b3397 feat(client): remove node_modules caching check when generator has custom out...
  • 9d1b883 feat(qc): stabilize driver adapters and the query compiler (#28046)
  • Additional commits viewable in compare view

Updates chalk from 5.4.1 to 5.6.2

Release notes

Sourced from chalk's releases.

v5.6.2

v5.6.0

  • Make WezTerm terminal use true color a8f5bf7

chalk/chalk@v5.5.0...v5.6.0

v5.5.0

  • Make Ghostty terminal use true color (#653) 79ee2d3

chalk/chalk@v5.4.1...v5.5.0

Commits

Updates elysia from 1.3.5 to 1.4.8

Release notes

Sourced from elysia's releases.

1.4.8

What's Changed

Improvement:

  • automatically clear up sucrose cache when not used
  • remove Bun.hash from checksum calculation

Change:

  • make file-type optional to reduce bundle size
  • #1432 missing context (set) in mapResponse for ElysiaFile
  • #1435 missing cookies in SSE

New Contributors

Full Changelog: elysiajs/elysia@1.4.7...1.4.8

1.4.7

Good morning, Cloudflare

You can now run Elysia on Cloudflare Worker

What's changed

Feature:

  • experimental adapter/cloudflare-worker
  • add ElysiaAdapter.beforeCompile

Change:

  • do not prettify routes when using guard, group
  • use process.getBuiltinModule instead of dynamic import for file
  • Elysia.file.value on Web Standard Adapter now is not a promise

Full Changelog: elysiajs/elysia@1.4.6...1.4.7

1.4.6

What's changed

Improvement:

  • #1406 strictly check for 200 inline status code
  • coerce union status value and return type
  • add BunHTMLBundleLike to Elysia inline handler
  • #1405 prevent Elysia from being a dependency of itself
  • #1416 check if object is frozen before merging, add try-catch to prevent crash
  • #1419 guard doesn't apply scoped/global schema to object macro
  • #1425 DELETE doesn't inherit derive/resolve type

Change:

  • #1409 onTransform now doesn't include type as it isn't validated yet, creating confusion

... (truncated)

Changelog

Sourced from elysia's changelog.

1.4.8 - 27 Sep 2025

Improvement:

  • automatically clear up sucrose cache when not used
  • remove Bun.hash from checksum calculation

Change:

  • make file-type optional to reduce bundle size
  • #1432 missing context (set) in mapResponse for ElysiaFile
  • #1435 missing cookies in SSE

1.4.7 - 22 Sep 2025

Feature:

  • experimental adapter/cloudflare-worker
  • add ElysiaAdapter.beforeCompile

Change:

  • do not prettify routes when using guard, group
  • use process.getBuiltinModule instead of dynamic import for file
  • Elysia.file.value on Web Standard Adapter now is not a promise

1.4.6 - 18 Sep 2025

Improvement:

  • #1406 strictly check for 200 inline status code
  • coerce union status value and return type
  • add BunHTMLBundleLike to Elysia inline handler
  • #1405 prevent Elysia from being a dependency of itself
  • #1416 check if object is frozen before merging, add try-catch to prevent crash
  • #1419 guard doesn't apply scoped/global schema to object macro
  • #1425 DELETE doesn't inherit derive/resolve type

Change:

  • #1409 onTransform now doesn't include type as it isn't validated yet, creating confusion

Bug fix:

  • #1410 handle union derive/resolve property
  • probably fix mergeDeep attempted to assign to readonly property
  • derive/resolve inherit type in inline handler

1.4.5 - 15 Sep 2025

Improvement:

  • soundness for guard, group
  • overwrite primitive value if collide (intersectIfObject)

Bug fix:

  • standard schema incorrectly validate cookie and coercion
  • merge nested guard, group standalone schema properly

Breaking Change:

  • no longer coerce type for .model with t.Ref by default

... (truncated)

Commits

Updates jose from 6.0.11 to 6.1.0

Release notes

Sourced from jose's releases.

v6.1.0

Features

  • support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)
  • support for the ML-DSA PQC Algorithm Identifiers (25ddce4)

v6.0.13

Refactor

  • more readability in ecdhes.ts (84da9de)
  • update asn1.ts helpers (b4f8fb3)

v6.0.12

Documentation

  • add known caveats to customFetch (02e1f1e)
  • mention the apu/apv parameter names in setKeyManagementParameters (6274d5a)
  • update compact setKeyManagementParameters (2f44381)
  • use GitHub Flavored Markdown for notes and warnings (f6b4ffc)

Refactor

  • createPublicKey is not a constructor (61ded78)
  • update asn1.ts helper functions (b2b611c)
Changelog

Sourced from jose's changelog.

6.1.0 (2025-08-27)

Features

  • support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)
  • support for the ML-DSA PQC Algorithm Identifiers (25ddce4)

6.0.13 (2025-08-21)

Refactor

  • more readability in ecdhes.ts (84da9de)
  • update asn1.ts helpers (b4f8fb3)

6.0.12 (2025-07-15)

Documentation

  • add known caveats to customFetch (02e1f1e)
  • mention the apu/apv parameter names in setKeyManagementParameters (6274d5a)
  • update compact setKeyManagementParameters (2f44381)
  • use GitHub Flavored Markdown for notes and warnings (f6b4ffc)

Refactor

  • createPublicKey is not a constructor (61ded78)
  • update asn1.ts helper functions (b2b611c)
Commits
  • 6f3e004 chore(release): 6.1.0
  • 25ddce4 feat: support for the ML-DSA PQC Algorithm Identifiers
  • cf2092a feat: support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri
  • 2c519cc chore: cleanup after release
  • 1e36dd2 chore(release): 6.0.13
  • b4f8fb3 refactor: update asn1.ts helpers
  • 413fa45 chore: bump packages
  • 84da9de refactor: more readability in ecdhes.ts
  • 475a3ed chore: npm run format
  • b59c547 chore: bump packages
  • Additional commits viewable in compare view

Updates nanoid from 5.1.5 to 5.1.6

Release notes

Sourced from nanoid's releases.

5.1.6

  • Fixed infinite loop on 0 size for customAlphabet.
Changelog

Sourced from nanoid's changelog.

5.1.6

  • Fixed infinite loop on 0 size for customAlphabet.
Commits

Updates prisma from 6.11.1 to 6.16.2

Release notes

Sourced from prisma's releases.

6.16.2

Today, we are issuing a 6.16.2 patch release.

Bug fixes

  • In Prisma ORM 6.16.0, we've enabled usage of the new engineType = client with Prisma Postgres, but our validation rules permitted invalid combinations of Prisma Postgres URLs and driver adapters. This now produces a clear error message indicating Prisma Postgres URLs and driver adapters are mutually exclusive.
  • In the previous minor release, we've included a change that calls unref() on NodeJS timers to prevent them from keeping the NodeJS event loop active. This change unintentionally affected non-NodeJS runtimes like workerd, where it has resulted in runtime errors. This behavior has been made conditional to prevent these runtime errors.

6.16.1

Today, we are issuing a 6.16.1 patch release.

Bug fixes

  • In Prisma ORM 6.16.0, the driverAdapters and queryCompiler features were stabilized, but leftover code in the prisma-client-ts generator required them to still be specified in edge runtimes. This has now been fixed, runtimes like workerd and vercel-edge no longer require these preview features.

6.16.0

Today, we are excited to share the 6.16.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Prisma ORM

This section contains all the updates made in Prisma ORM v6.16.0.

Rust-free ORM and driver adapters are Generally Available

Eight months ago, we published our ORM manifesto with the first hint that we're going to remove the Rust-based query engine from Prisma ORM:

We're addressing this by migrating Prisma's core logic from Rust to TypeScript and redesigning the ORM to make customization and extension easier.

After a lot of hard work and feedback from the community, we're incredibly excited to share that the migration has been completed and you can now use Prisma ORM without its Rust engine in your production apps. 🎉 This is a major milestone in the history of Prisma ORM and comes with a lot of benefits:

  • Reduced bundle size by ~90%
  • Faster queries (check out our latest benchmarks)
  • Lower CPU footprint
  • Less deployment complexity
  • Easier to make open-source contributions

… and overall a much better DX since you don't need to worry about the extra binary in your generated Prisma Client code any more.

While the Rust-free ORM will become the default in Prisma ORM v7 soon, for now you still need to opt-into using it:

  1. Configure the generator block in your Prisma schema:
    generator client {
      provider   = "prisma-client" // (or "prisma-client-js") 
      output     = "../src/generated/prisma"
      engineType = "client"
    }

... (truncated)

Commits

Updates radashi from 12.6.0 to 12.6.2

Release notes

Sourced from radashi's releases.

v12.6.2

Fixed

  • (range) Ensure end parameter works when 0 in 9c8ffa0

v12.6.1

Fixed

  • (group) Use Object.create(null) for the returned object in 5db8c37
Changelog

Sourced from radashi's changelog.

[radashi@12.6.2] - 2025-08-20

Details

Fixed

  • (range) Ensure end parameter works when 0 in 9c8ffa0

[radashi@12.6.1] - 2025-08-09

Details

Fixed

  • (group) Use Object.create(null) for the returned object in 5db8c37
Commits
  • 7d519d3 chore(release): 12.6.2
  • 9c8ffa0 fix(range): ensure end parameter works when 0 (#432)
  • 2e880d5 chore(release): 12.6.1
  • 5db8c37 fix(group): use Object.create(null) for the returned object (#427)
  • 53f3e0e chore(docs): mention upperize and lowerize in the mapKeys docs
  • 1e3adbd chore: fix build badge in README-pt_br.md
  • 4787f81 chore(docs): fix broken link
  • 7d40c7d chore: fix typo in mdx file
  • 9d7964c chore: fix reference link
  • See full diff in compare view

Updates @biomejs/biome from 2.0.6 to 2.2.4

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.2.4

2.2.4

Patch Changes

  • #7453 aa8cea3 Thanks @​arendjr! - Fixed #7242: Aliases specified in package.json's imports section now support having multiple targets as part of an array.

  • #7454 ac17183 Thanks @​arendjr! - Greatly improved performance of noImportCycles by eliminating allocations.

    In one repository, the total runtime of Biome with only noImportCycles enabled went from ~23s down to ~4s.

  • #7447 7139aad Thanks @​rriski! - Fixes #7446. The GritQL $... spread metavariable now correctly matches members in object literals, aligning its behavior with arrays and function calls.

  • #6710 98cf9af Thanks @​arendjr! - Fixed #4723: Type inference now recognises index signatures and their accesses when they are being indexed as a string.

    Example

    type BagOfPromises = {
      // This is an index signature definition. It declares that instances of type
      // `BagOfPromises` can be indexed using arbitrary strings.
      [property: string]: Promise<void>;
    };
    let bag: BagOfPromises = {};
    // Because bag.iAmAPromise is equivalent to bag[&quot;iAmAPromise&quot;], this is
    // considered an access to the string index, and a Promise is expected.
    bag.iAmAPromise;

  • #7415 d042f18 Thanks @​qraqras! - Fixed #7212, now the useOptionalChain rule recognizes optional chaining using typeof (e.g., typeof foo !== 'undefined' && foo.bar).

  • #7419 576baf4 Thanks @​Conaclos! - Fixed #7323. noUnusedPrivateClassMembers no longer reports as unused TypeScript private members if the rule encounters a computed access on this.

    In the following example, member as previously reported as unused. It is no longer reported.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.2.4

Patch Changes

  • #7453 aa8cea3 Thanks @​arendjr! - Fixed #7242: Aliases specified in package.json's imports section now support having multiple targets as part of an array.

  • #7454 ac17183 Thanks @​arendjr! - Greatly improved performance of noImportCycles by eliminating allocations.

    In one repository, the total runtime of Biome with only noImportCycles enabled went from ~23s down to ~4s.

  • #7447 7139aad Thanks @​rriski! - Fixes #7446. The GritQL $... spread metavariable now correctly matches members in object literals, aligning its behavior with arrays and function calls.

  • #6710 98cf9af Thanks @​arendjr! - Fixed #4723: Type inference now recognises index signatures and their accesses when they are being indexed as a string.

    Example

    type BagOfPromises = {
      // This is an index signature definition. It declares that instances of type
      // `BagOfPromises` can be indexed using arbitrary strings.
      [property: string]: Promise<void>;
    };
    let bag: BagOfPromises = {};
    // Because bag.iAmAPromise is equivalent to bag[&quot;iAmAPromise&quot;], this is
    // considered an access to the string index, and a Promise is expected.
    bag.iAmAPromise;

  • #7415 d042f18 Thanks @​qraqras! - Fixed #7212, now the useOptionalChain rule recognizes optional chaining using typeof (e.g., typeof foo !== 'undefined' && foo.bar).

  • #7419 576baf4 Thanks @​Conaclos! - Fixed #7323. noUnusedPrivateClassMembers no longer reports as unused TypeScript private members if the rule encounters a computed access on this.

    In the following example, member as previously reported as unused. It is no longer reported.

    class TsBioo {
      private member: number;
    set_with_name(name: string, value: number) {
    this[name] = value;
    }
    }

... (truncated)

Commits

Updates @types/bun from 1.2.18 to 1.2.23

Commits

Updates typescript from 5.8.3 to 5.9.2

Release notes

Sourced from typescript's releases.

TypeScript 5.9

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9 RC

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • be86783 Give more specific errors for verbatimModuleSyntax (#62113)
  • 22ef577 LEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250714...
  • d5a414c Don't use noErrorTruncation when printing types with maximumLength set (#...
  • f14b5c8 Remove unused and confusing dom.iterable.d.ts file (#62037)
  • 2778e84 Restore AbortSignal.abort (#62086)
  • 65cb4bd LEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250710...
  • 9e20e03 Clear out checker-level stacks on pop (#62016)
  • 87740bc Fix for Issue 61081 (#61221)
  • 833a8d4 Fix Symbol completion priority and cursor positioning (#61945)
  • 0018c9f LEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250702...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bun group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@elysiajs/eden](https://github.com/elysiajs/eden) | `1.3.2` | `1.4.1` |
| [@elysiajs/static](https://github.com/elysiajs/elysia-static) | `1.3.0` | `1.4.0` |
| [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `6.11.1` | `6.16.2` |
| [chalk](https://github.com/chalk/chalk) | `5.4.1` | `5.6.2` |
| [elysia](https://github.com/elysiajs/elysia) | `1.3.5` | `1.4.8` |
| [jose](https://github.com/panva/jose) | `6.0.11` | `6.1.0` |
| [nanoid](https://github.com/ai/nanoid) | `5.1.5` | `5.1.6` |
| [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `6.11.1` | `6.16.2` |
| [radashi](https://github.com/radashi-org/radashi) | `12.6.0` | `12.6.2` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.0.6` | `2.2.4` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.2.18` | `1.2.23` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `5.9.2` |



Updates `@elysiajs/eden` from 1.3.2 to 1.4.1
- [Release notes](https://github.com/elysiajs/eden/releases)
- [Changelog](https://github.com/elysiajs/eden/blob/main/CHANGELOG.md)
- [Commits](elysiajs/eden@1.3.2...1.4.1)

Updates `@elysiajs/static` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/elysiajs/elysia-static/releases)
- [Changelog](https://github.com/elysiajs/elysia-static/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia-static@1.3.0...1.4.0)

Updates `@prisma/client` from 6.11.1 to 6.16.2
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/6.16.2/packages/client)

Updates `chalk` from 5.4.1 to 5.6.2
- [Release notes](https://github.com/chalk/chalk/releases)
- [Commits](chalk/chalk@v5.4.1...v5.6.2)

Updates `elysia` from 1.3.5 to 1.4.8
- [Release notes](https://github.com/elysiajs/elysia/releases)
- [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia@1.3.5...1.4.8)

Updates `jose` from 6.0.11 to 6.1.0
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.0.11...v6.1.0)

Updates `nanoid` from 5.1.5 to 5.1.6
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.1.5...5.1.6)

Updates `prisma` from 6.11.1 to 6.16.2
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/6.16.2/packages/cli)

Updates `radashi` from 12.6.0 to 12.6.2
- [Release notes](https://github.com/radashi-org/radashi/releases)
- [Changelog](https://github.com/radashi-org/radashi/blob/main/CHANGELOG.md)
- [Commits](radashi-org/radashi@v12.6.0...v12.6.2)

Updates `@biomejs/biome` from 2.0.6 to 2.2.4
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.2.4/packages/@biomejs/biome)

Updates `@types/bun` from 1.2.18 to 1.2.23
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `typescript` from 5.8.3 to 5.9.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](microsoft/TypeScript@v5.8.3...v5.9.2)

---
updated-dependencies:
- dependency-name: "@elysiajs/eden"
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@elysiajs/static"
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@prisma/client"
  dependency-version: 6.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: chalk
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: elysia
  dependency-version: 1.4.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: jose
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: nanoid
  dependency-version: 5.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: prisma
  dependency-version: 6.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: radashi
  dependency-version: 12.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: "@biomejs/biome"
  dependency-version: 2.2.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/bun"
  dependency-version: 1.2.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: typescript
  dependency-version: 5.9.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 29, 2025
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Sep 29, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant