Skip to content

Comments

Bump the npm_and_yarn group across 12 directories with 14 updates#38

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/frameworks/JavaScript/koa/npm_and_yarn-53cc5912fa
Closed

Bump the npm_and_yarn group across 12 directories with 14 updates#38
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/frameworks/JavaScript/koa/npm_and_yarn-53cc5912fa

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 22, 2025

Bumps the npm_and_yarn group with 3 updates in the /frameworks/JavaScript/koa directory: handlebars, koa and mongoose.
Bumps the npm_and_yarn group with 2 updates in the /frameworks/JavaScript/express directory: mongoose and pg-promise.
Bumps the npm_and_yarn group with 2 updates in the /frameworks/TypeScript/typescript-rest directory: knex and objection.
Bumps the npm_and_yarn group with 5 updates in the /frameworks/TypeScript/nest directory:

Package From To
handlebars 4.7.3 4.7.7
@nestjs/core 6.11.11 9.0.5
fastify 2.12.1 2.15.1
hbs 4.1.0 4.2.0
typeorm 0.2.29 0.3.0

Bumps the npm_and_yarn group with 2 updates in the /frameworks/TypeScript/feathersjs directory: mysql2 and axios.
Bumps the npm_and_yarn group with 3 updates in the /frameworks/JavaScript/nodejs directory: handlebars, mongoose and async.
Bumps the npm_and_yarn group with 3 updates in the /frameworks/JavaScript/hapi directory: handlebars, mongoose and async.
Bumps the npm_and_yarn group with 1 update in the /frameworks/PHP/laravel directory: axios.
Bumps the npm_and_yarn group with 1 update in the /frameworks/JavaScript/spliffy directory: cookie.
Bumps the npm_and_yarn group with 1 update in the /frameworks/JavaScript/sailsjs directory: handlebars.
Bumps the npm_and_yarn group with 1 update in the /frameworks/JavaScript/hyperexpress directory: cookie.
Bumps the npm_and_yarn group with 2 updates in the /frameworks/JavaScript/fastify directory: handlebars and mysql2.

Updates handlebars from 4.3.0 to 4.7.7

Changelog

Sourced from handlebars's changelog.

v4.7.7 - February 15th, 2021

  • fix weird error in integration tests - eb860c0
  • fix: check prototype property access in strict-mode (#1736) - b6d3de7
  • fix: escape property names in compat mode (#1736) - f058970
  • refactor: In spec tests, use expectTemplate over equals and shouldThrow (#1683) - 77825f8
  • chore: start testing on Node.js 12 and 13 - 3789a30

(POSSIBLY) BREAKING CHANGES:

  • the changes from version 4.6.0 now also apply in when using the compile-option "strict: true". Access to prototype properties is forbidden completely by default, specific properties or methods can be allowed via runtime-options. See #1633 for details. If you are using Handlebars as documented, you should not be accessing prototype properties from your template anyway, so the changes should not be a problem for you. Only the use of undocumented features can break your build.

That is why we only bump the patch version despite mentioning breaking changes.

Commits

v4.7.6 - April 3rd, 2020

Chore/Housekeeping:

Compatibility notes:

  • Restored Node.js compatibility

Commits

v4.7.5 - April 2nd, 2020

Chore/Housekeeping:

  • Node.js version support has been changed to v6+ Reverted in 4.7.6

Compatibility notes:

  • Node.js < v6 is no longer supported Reverted in 4.7.6

Commits

v4.7.4 - April 1st, 2020

Chore/Housekeeping:

Compatibility notes:

... (truncated)

Commits

Updates koa from 2.5.0 to 3.0.3

Release notes

Sourced from koa's releases.

v3.0.3

What's Changed

Full Changelog: koajs/koa@v3.0.2...v3.0.3

v3.0.2

What's Changed

New Contributors

Full Changelog: koajs/koa@v3.0.1...v3.0.2

v3.0.1

What's Changed

Full Changelog: koajs/koa@v3.0.0...v3.0.1

v3.0.0

This is a major release.

Breaking

  • Minimum node v18
  • Removes .redirect('back'), adds .back(fallback_url) @​fl0w koajs/koa#1115
  • For .redirect(), don't render redirect values in anchor ref koajs/koa@ff25eb4
  • req.origin should display the origin header if it exists, not the current hostname koajs/koa#1008. origin now aligns with the Origin header as used in CORS.
  • .body=<json> should not overwrite type if type already json koajs/koa#1120
  • Remove special ENOENT support koajs/koa#1861 - this is a big change and will require any file servers to adapt to this change for handling 404s / files not found
  • Removes generator deprecation messages. Generators are no longer supported. Koa no longer asserts if generators are used. Set content-length: 0 if body is explicitly set to null @​ognjenjevremovic #1528 Remove obsolete createAsyncCtxStorageMiddleware koajs/koa#1817
  • ctx.throw now requires a format of ctx.throw(status, error, properties). See: https://www.npmjs.com/package/http-errors

... (truncated)

Changelog

Sourced from koa's changelog.

[!IMPORTANT] Moving forwards we are using the GitHub releases page at https://github.com/koajs/koa/releases in combination with np for publishing releases and their changelogs.

3.0.0-alpha.3 / 2025-02-11

fixes

  • Avoid redos on host and protocol getter

3.0.0-alpha.2 / 2024-11-04

breaking changes

  • Update http-errors to v2.0.0 #1486
  • Remove res.redirect('back'), add back() method to ctx #1115
  • Replace node querystring with URLSearchParams #1828
  • Remove obsolete createAsyncCtxStorageMiddleware #1817

features

  • Add support for web WHATWG #1830

updates

  • Update cookies to ~0.9.1 #1846
  • Update statuses to ^2.0.1
  • Update supertest to ^7.0.0 #1841

fixes

  • Fix exports.defaults in package.json #1630
  • Fix leaky handles in tests #1838
  • Fix body null checks #1814
  • Fix reformatting redirect URLs #1805 #1804
  • Fix passing ctx in error handler #1758

migrations

  • Migrate from jest to the native node test runner #1845

3.0.0-alpha.1 / 2023-04-12

fixes

3.0.0-alpha.0 / 2023-01-02

Breaking Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for koa since your current version.


Updates mongoose from 5.13.20 to 6.13.6

Release notes

Sourced from mongoose's releases.

6.13.6 / 2025-01-13

  • fix: disallow nested $where in populate match
Changelog

Sourced from mongoose's changelog.

6.13.6 / 2025-01-13

8.9.4 / 2025-01-09

  • fix(document): fix document not applying manual populate when using a function in schema.options.ref #15138 IchirokuXVI
  • fix(model): make Model.validate() static correctly cast document arrays #15169 #15164
  • fix(model): allow passing validateBeforeSave option to bulkSave() to skip validation #15161 #15156
  • fix(schema): allow multiple self-referencing discriminator schemas using Schema.prototype.discriminator #15142 #15120
  • types: avoid BufferToBinary<> wiping lean types when passed to generic functions #15160 #15158
  • docs: fix <code> in header ids #15159
  • docs: fix header in field-level-encryption.md #15137 damieng

8.9.3 / 2024-12-30

  • fix(schema): make duplicate index error a warning for now to prevent blocking upgrading #15135 #15112 #15109
  • fix(model): handle document array paths set to non-array values in Model.castObject() #15124 #15075
  • fix(document): avoid using childSchemas.path for compatibility with pre-Mongoose-8.8 schemas #15131 #15071
  • fix(model): avoid throwing unnecessary error if updateOne() returns null in save() #15126
  • perf(cursor): clear the stack every time if using populate with batchSize to avoid stack overflows with large docs #15136 #10449
  • types: make BufferToBinary avoid Document instances #15123 #15122
  • types(model+query): avoid stripping out virtuals when calling populate with paths generic #15132 #15111
  • types(schema): add missing removeIndex #15134
  • types: add cleanIndexes() to IndexManager interface #15127
  • docs: move search endpoint to netlify #15119

8.9.2 / 2024-12-19

  • fix(schema): avoid throwing duplicate index error if index spec keys have different order or index has a custom name #15112 #15109
  • fix(map): clean modified subpaths when overwriting values in map of subdocs #15114 #15108
  • fix(aggregate): pull session from transaction local storage for aggregation cursors #15094 IchirokuXVI
  • types: correctly handle union types in BufferToBinary and related helpers #15103 #15102 #15057
  • types: add UUID to RefType #15115 #15101
  • docs: remove link to Mongoose 5.x docs from dropdown #15116
  • docs(connection+document+model): remove remaining references to remove(), clarify that deleteOne() does not execute until then() or exec() #15113 #15107

8.9.1 / 2024-12-16

  • fix(connection): remove heartbeat check in load balanced mode #15089 #15042 #14812
  • fix(discriminator): gather childSchemas when creating discriminator to ensure $getAllSubdocs() can properly get all subdocs #15099 #15088 #15092
  • fix(model): handle discriminators in castObject() #15096 #15075
  • fix(schema): throw error if duplicate index definition using unique in schema path and subsequent .index() call #15093 #15056
  • fix: mark documents that are populated using hydratedPopulatedDocs option as populated in top-level doc #15080 #15048
  • fix(document+schema): improve error message for get() on invalid path #15098 #15071
  • docs: remove more callback doc references & some small other changes #15095

8.9.0 / 2024-12-13

  • feat: upgrade mongodb -> 6.12

... (truncated)

Commits
  • e59e342 chore: release 6.13.6
  • 64a9f97 fix: disallow nested $where in populate match
  • 15bdccf chore: release 6.13.5
  • 33679bc fix: disallow using $where in match
  • 22210b1 chore: release 6.13.4
  • d21a239 Merge pull request #15043 from Automattic/vkarpov15/gh-15039
  • 68377ff fix: save execution stack in query as string
  • 6fbe9f0 Merge pull request #14998 from markstos/UT-8434-doc-strict-query-flipflop
  • 3e3dc2e docs: clarify strictQuery default will flip-flop in "Migrating to 6.x"
  • d98b2e7 docs: Add missing closing tag for Lodash entry.
  • Additional commits viewable in compare view

Updates mongoose from 8.3.2 to 8.9.5

Release notes

Sourced from mongoose's releases.

6.13.6 / 2025-01-13

  • fix: disallow nested $where in populate match
Changelog

Sourced from mongoose's changelog.

6.13.6 / 2025-01-13

8.9.4 / 2025-01-09

  • fix(document): fix document not applying manual populate when using a function in schema.options.ref #15138 IchirokuXVI
  • fix(model): make Model.validate() static correctly cast document arrays #15169 #15164
  • fix(model): allow passing validateBeforeSave option to bulkSave() to skip validation #15161 #15156
  • fix(schema): allow multiple self-referencing discriminator schemas using Schema.prototype.discriminator #15142 #15120
  • types: avoid BufferToBinary<> wiping lean types when passed to generic functions #15160 #15158
  • docs: fix <code> in header ids #15159
  • docs: fix header in field-level-encryption.md #15137 damieng

8.9.3 / 2024-12-30

  • fix(schema): make duplicate index error a warning for now to prevent blocking upgrading #15135 #15112 #15109
  • fix(model): handle document array paths set to non-array values in Model.castObject() #15124 #15075
  • fix(document): avoid using childSchemas.path for compatibility with pre-Mongoose-8.8 schemas #15131 #15071
  • fix(model): avoid throwing unnecessary error if updateOne() returns null in save() #15126
  • perf(cursor): clear the stack every time if using populate with batchSize to avoid stack overflows with large docs #15136 #10449
  • types: make BufferToBinary avoid Document instances #15123 #15122
  • types(model+query): avoid stripping out virtuals when calling populate with paths generic #15132 #15111
  • types(schema): add missing removeIndex #15134
  • types: add cleanIndexes() to IndexManager interface #15127
  • docs: move search endpoint to netlify #15119

8.9.2 / 2024-12-19

  • fix(schema): avoid throwing duplicate index error if index spec keys have different order or index has a custom name #15112 #15109
  • fix(map): clean modified subpaths when overwriting values in map of subdocs #15114 #15108
  • fix(aggregate): pull session from transaction local storage for aggregation cursors #15094 IchirokuXVI
  • types: correctly handle union types in BufferToBinary and related helpers #15103 #15102 #15057
  • types: add UUID to RefType #15115 #15101
  • docs: remove link to Mongoose 5.x docs from dropdown #15116
  • docs(connection+document+model): remove remaining references to remove(), clarify that deleteOne() does not execute until then() or exec() #15113 #15107

8.9.1 / 2024-12-16

  • fix(connection): remove heartbeat check in load balanced mode #15089 #15042 #14812
  • fix(discriminator): gather childSchemas when creating discriminator to ensure $getAllSubdocs() can properly get all subdocs #15099 #15088 #15092
  • fix(model): handle discriminators in castObject() #15096 #15075
  • fix(schema): throw error if duplicate index definition using unique in schema path and subsequent .index() call #15093 #15056
  • fix: mark documents that are populated using hydratedPopulatedDocs option as populated in top-level doc #15080 #15048
  • fix(document+schema): improve error message for get() on invalid path #15098 #15071
  • docs: remove more callback doc references & some small other changes #15095

8.9.0 / 2024-12-13

  • feat: upgrade mongodb -> 6.12

... (truncated)

Commits
  • e59e342 chore: release 6.13.6
  • 64a9f97 fix: disallow nested $where in populate match
  • 15bdccf chore: release 6.13.5
  • 33679bc fix: disallow using $where in match
  • 22210b1 chore: release 6.13.4
  • d21a239 Merge pull request #15043 from Automattic/vkarpov15/gh-15039
  • 68377ff fix: save execution stack in query as string
  • 6fbe9f0 Merge pull request #14998 from markstos/UT-8434-doc-strict-query-flipflop
  • 3e3dc2e docs: clarify strictQuery default will flip-flop in "Migrating to 6.x"
  • d98b2e7 docs: Add missing closing tag for Lodash entry.
  • Additional commits viewable in compare view

Updates pg-promise from 10.7.3 to 11.5.5

Release notes

Sourced from pg-promise's releases.

11.5.5

  • Addressing sql injection issue; All negative numbers are now wrapped in parentheses.
  • Dev dependencies updated.

Thanks to @​paul-gerste-sonarsource!

11.5.4

  • Dependencies updated, including the driver, to v8.11.3

11.5.3

  • Following up on driver fix-update, see issue #888

11.5.2

This update is to clarify the full range of environments officially supported:

  • PostgreSql v10 - v15
  • NodeJS v14 - v18

It is worth noting that:

  • It may work with PostgreSql v9, but it is no longer officially supported.
  • It should work with NodeJS v20, but it is not officially supported yet (we support LTS versions of NodeJS only).

The CI has been updated accordingly. No functional changes.

11.5.1

  • Updated dependencies, including the driver, to v8.11.1
  • Fixed #884 - CI build issue in test

11.5.0

  • Many dependencies updated, including Postgres driver.
  • Minor documentation updates.

Please note that at the time of publishing this, GitHub CI started showing problems again, unrelated to the project. All tests pass locally fine, disregard Failed Build status for the time being.

11.4.3

  • Updated dependencies
  • Marked method batch as deprecated.

11.4.2

  • Dev dependencies updated
  • Semantic refactoring of the code

11.4.1

  • Corrected TypeScript signature for the Pool's property log.

11.4.0

  • Updated dependencies: "pg" -> "8.10.0" and "pg-query-stream" -> "4.4.0"
  • Extended IPool TypeScript declaration with properties expiredCount + log. The latter in case you want to log what the pool is doing:

... (truncated)

Commits

Updates knex from 0.15.2 to 3.1.0

Release notes

Sourced from knex's releases.

3.1.0 - 8 December, 2023

Bug fixes

  • andWhereNotJsonObject calling wrong function (#5683)
  • PostgreSQL: fix error when setting query_timeout (#5673)
  • MySQL: Missing comments on delete, update and insert (#5738)
  • MySQL: Fixed issue with bigincrements not working with composite primary key - #5341 (#5343)

New features

  • Add transactor.parentTransaction (#5567)
  • MySQL: Added implementation for upsert (#5743)
  • Oracle: Support Object Names Greater than 30 Characters for Oracle DB Versions 12.2 and Greater (#5197)

Types

  • Add type definitions for orHavingNull and orHavingNotNull (#5669)
  • Import knex as type in TS migration template (#5741)
  • Fix conditional constraint error (#5747)
  • PostgreSQL: Fix typing to reflect pg typing change (#5647)

3.0.1

  • Fix broken release

3.0.0 - 6 October, 2023

  • Fix raw bindings typing (#5401)
  • Fix migrate:unlock when used with custom identifier wrapping. (#5353)
  • Fix driver options specified with .options() method being ignored for oracledb dialect (#5123)
  • Drop compatibility for Node < 16
  • Fix knex d.ts to work with mixed modules (#5659)
  • Fix Lexical error from "Instaed" to "Instead" (#5655)

2.5.1 - 12 July, 2023

Bug fixes

2.5.0 - 08 July, 2023

New features

  • Add uuid helper function #5617
  • Add nativeBindings option to better-sqlite3 options #5461
  • Add QueryBuilder#updateFrom #5386
  • Add readonly transaction access mode #5445
  • Add readonly option to Better-SQLite3 #5530
  • Add EXCEPT as a valid keyword #5357

... (truncated)

Changelog

Sourced from knex's changelog.

3.1.0 - 8 December, 2023

Bug fixes

  • andWhereNotJsonObject calling wrong function (#5683)
  • PostgreSQL: fix error when setting query_timeout (#5673)
  • MySQL: Missing comments on delete, update and insert (#5738)
  • MySQL: Fixed issue with bigincrements not working with composite primary key - #5341 (#5343)

Types

  • Add type definitions for orHavingNull and orHavingNotNull (#5669)
  • Import knex as type in TS migration template (#5741)
  • Fix conditional constraint error (#5747)
  • PostgreSQL: Fix typing to reflect pg typing change (#5647)

New features

  • Add transactor.parentTransaction (#5567)
  • MySQL: Added implementation for upsert (#5743)
  • Oracle: Support Object Names Greater than 30 Characters for Oracle DB Versions 12.2 and Greater (#5197)

3.0.1 - 6 October, 2023

  • Build fix

3.0.0 - 6 October, 2023

  • Fix raw bindings typing (#5401)
  • Fix migrate:unlock when used with custom identifier wrapping. (#5353)
  • Fix driver options specified with .options() method being ignored for oracledb dialect (#5123)
  • Drop compatibility for Node < 16
  • Fix knex d.ts to work with mixed modules (#5659)
  • Fix Lexical error from "Instaed" to "Instead" (#5655)

Bug fixes

2.5.1 - 12 July, 2023

Bug fixes

2.5.0 - 08 July, 2023

New features

  • Add uuid helper function (#5617)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by kibertoad, a new releaser for knex since your current version.


Updates objection from 1.6.11 to 3.1.5

Commits
Maintainer changes

This version was pushed to npm by lehni, a new releaser for objection since your current version.


Updates handlebars from 4.7.3 to 4.7.7

Changelog

Sourced from handlebars's changelog.

v4.7.7 - February 15th, 2021

  • fix weird error in integration tests - eb860c0
  • fix: check prototype property access in strict-mode (#1736) - b6d3de7
  • fix: escape property names in compat mode (#1736) - f058970
  • refactor: In spec tests, use expectTemplate over equals and shouldThrow (#1683) - 77825f8
  • chore: start testing on Node.js 12 and 13 - 3789a30

(POSSIBLY) BREAKING CHANGES:

  • the changes from version 4.6.0 now also apply in when using the compile-option "strict: true". Access to prototype properties is forbidden completely by default, specific properties or methods can be allowed via runtime-options. See #1633 for details. If you are using Handlebars as documented, you should not be accessing prototype properties from your template anyway, so the changes should not be a problem for you. Only the use of undocumented features can break your build.

That is why we only bump the patch version despite mentioning breaking changes.

Commits

v4.7.6 - April 3rd, 2020

Chore/Housekeeping:

Compatibility notes:

  • Restored Node.js compatibility

Commits

v4.7.5 - April 2nd, 2020

Chore/Housekeeping:

  • Node.js version support has been changed to v6+ Reverted in 4.7.6

Compatibility notes:

  • Node.js < v6 is no longer supported Reverted in 4.7.6

Commits

v4.7.4 - April 1st, 2020

Chore/Housekeeping:

Compatibility notes:

... (truncated)

Commits

Updates @nestjs/core from 6.11.11 to 9.0.5

Release notes

Sourced from @​nestjs/core's releases.

v9.0.5 (2022-07-20)

Bug fixes

  • common, platform-express

Enhancements

  • microservices
  • platform-express, platform-fastify
    • #9926 fix(express,fastify): raw body for urlencoded requests (@​tolgap)

Dependencies

  • Other
    • #9959 chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/30-event-emitter (@​dependabot[bot])
    • #9960 chore(deps): bump terser from 5.14.1 to 5.14.2 in /sample/32-graphql-federation-schema-first/users-application (@​dependabot[bot])
    • #9961 chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/31-graphql-federation-code-first/gateway (@​dependabot[bot])
    • #9962 chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/31-graphql-federation-code-first/users-application (@​dependabot[bot])
    • #9963 chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/32-graphql-federati...

      Description has been truncated

@dependabot
Bump the npm_and_yarn group across 12 directories with 14 updates
a4cd3e7 
Bumps the npm_and_yarn group with 3 updates in the /frameworks/JavaScript/koa directory: [handlebars](https://github.com/handlebars-lang/handlebars.js), [koa](https://github.com/koajs/koa) and [mongoose](https://github.com/Automattic/mongoose).
Bumps the npm_and_yarn group with 2 updates in the /frameworks/JavaScript/express directory: [mongoose](https://github.com/Automattic/mongoose) and [pg-promise](https://github.com/vitaly-t/pg-promise).
Bumps the npm_and_yarn group with 2 updates in the /frameworks/TypeScript/typescript-rest directory: [knex](https://github.com/knex/knex) and [objection](https://github.com/vincit/objection.js).
Bumps the npm_and_yarn group with 5 updates in the /frameworks/TypeScript/nest directory:

| Package | From | To |
| --- | --- | --- |
| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.3` | `4.7.7` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `6.11.11` | `9.0.5` |
| [fastify](https://github.com/fastify/fastify) | `2.12.1` | `2.15.1` |
| [hbs](https://github.com/pillarjs/hbs) | `4.1.0` | `4.2.0` |
| [typeorm](https://github.com/typeorm/typeorm) | `0.2.29` | `0.3.0` |

Bumps the npm_and_yarn group with 2 updates in the /frameworks/TypeScript/feathersjs directory: [mysql2](https://github.com/sidorares/node-mysql2) and [axios](https://github.com/axios/axios).
Bumps the npm_and_yarn group with 3 updates in the /frameworks/JavaScript/nodejs directory: [handlebars](https://github.com/handlebars-lang/handlebars.js), [mongoose](https://github.com/Automattic/mongoose) and [async](https://github.com/caolan/async).
Bumps the npm_and_yarn group with 3 updates in the /frameworks/JavaScript/hapi directory: [handlebars](https://github.com/handlebars-lang/handlebars.js), [mongoose](https://github.com/Automattic/mongoose) and [async](https://github.com/caolan/async).
Bumps the npm_and_yarn group with 1 update in the /frameworks/PHP/laravel directory: [axios](https://github.com/axios/axios).
Bumps the npm_and_yarn group with 1 update in the /frameworks/JavaScript/spliffy directory: [cookie](https://github.com/jshttp/cookie).
Bumps the npm_and_yarn group with 1 update in the /frameworks/JavaScript/sailsjs directory: [handlebars](https://github.com/handlebars-lang/handlebars.js).
Bumps the npm_and_yarn group with 1 update in the /frameworks/JavaScript/hyperexpress directory: [cookie](https://github.com/jshttp/cookie).
Bumps the npm_and_yarn group with 2 updates in the /frameworks/JavaScript/fastify directory: [handlebars](https://github.com/handlebars-lang/handlebars.js) and [mysql2](https://github.com/sidorares/node-mysql2).


Updates `handlebars` from 4.3.0 to 4.7.7
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.3.0...v4.7.7)

Updates `koa` from 2.5.0 to 3.0.3
- [Release notes](https://github.com/koajs/koa/releases)
- [Changelog](https://github.com/koajs/koa/blob/master/History.md)
- [Commits](koajs/koa@2.5.0...v3.0.3)

Updates `mongoose` from 5.13.20 to 6.13.6
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@5.13.20...6.13.6)

Updates `mongoose` from 8.3.2 to 8.9.5
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@5.13.20...6.13.6)

Updates `pg-promise` from 10.7.3 to 11.5.5
- [Release notes](https://github.com/vitaly-t/pg-promise/releases)
- [Commits](vitaly-t/pg-promise@10.7.3...11.5.5)

Updates `knex` from 0.15.2 to 3.1.0
- [Release notes](https://github.com/knex/knex/releases)
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md)
- [Commits](knex/knex@0.15.2...3.1.0)

Updates `objection` from 1.6.11 to 3.1.5
- [Commits](Vincit/objection.js@1.6.11...3.1.5)

Updates `handlebars` from 4.7.3 to 4.7.7
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.3.0...v4.7.7)

Updates `@nestjs/core` from 6.11.11 to 9.0.5
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v9.0.5/packages/core)

Updates `fastify` from 2.12.1 to 2.15.1
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v2.12.1...v2.15.1)

Updates `hbs` from 4.1.0 to 4.2.0
- [Changelog](https://github.com/pillarjs/hbs/blob/master/HISTORY.md)
- [Commits](pillarjs/hbs@v4.1.0...v4.2.0)

Updates `typeorm` from 0.2.29 to 0.3.0
- [Release notes](https://github.com/typeorm/typeorm/releases)
- [Changelog](https://github.com/typeorm/typeorm/blob/master/CHANGELOG.md)
- [Commits](typeorm/typeorm@0.2.29...0.3.0)

Updates `mysql2` from 2.3.3 to 3.15.3
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v2.3.3...v3.15.3)

Updates `axios` from 0.25.0 to 1.12.2
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.25.0...v1.12.2)

Updates `handlebars` from 4.3.0 to 4.7.7
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.3.0...v4.7.7)

Updates `mongoose` from 5.13.20 to 6.13.6
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@5.13.20...6.13.6)

Updates `async` from 2.5.0 to 2.6.4
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md)
- [Commits](caolan/async@v2.5.0...v2.6.4)

Updates `handlebars` from 4.3.0 to 4.7.7
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.3.0...v4.7.7)

Updates `mongoose` from 5.13.20 to 6.13.6
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@5.13.20...6.13.6)

Updates `async` from 2.1.5 to 2.6.4
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md)
- [Commits](caolan/async@v2.5.0...v2.6.4)

Updates `axios` from 0.18.1 to 1.12.2
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.25.0...v1.12.2)

Updates `cookie` from 0.4.1 to 1.0.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.4.1...v1.0.2)

Updates `handlebars` from 4.7.6 to 4.7.7
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.3.0...v4.7.7)

Updates `cookie` from 0.4.2 to 1.0.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.4.1...v1.0.2)

Updates `handlebars` from 4.7.6 to 4.7.7
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.3.0...v4.7.7)

Updates `mysql2` from 3.9.7 to 3.9.8
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v2.3.3...v3.15.3)

---
updated-dependencies:
- dependency-name: handlebars
  dependency-version: 4.7.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: koa
  dependency-version: 3.0.3
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mongoose
  dependency-version: 6.13.6
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mongoose
  dependency-version: 8.9.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: pg-promise
  dependency-version: 11.5.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: knex
  dependency-version: 3.1.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: objection
  dependency-version: 3.1.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: handlebars
  dependency-version: 4.7.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@nestjs/core"
  dependency-version: 9.0.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: fastify
  dependency-version: 2.15.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: hbs
  dependency-version: 4.2.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: typeorm
  dependency-version: 0.3.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mysql2
  dependency-version: 3.15.3
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.12.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: handlebars
  dependency-version: 4.7.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mongoose
  dependency-version: 6.13.6
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-version: 2.6.4
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: handlebars
  dependency-version: 4.7.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mongoose
  dependency-version: 6.13.6
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-version: 2.6.4
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.12.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 1.0.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: handlebars
  dependency-version: 4.7.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 1.0.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: handlebars
  dependency-version: 4.7.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mysql2
  dependency-version: 3.9.8
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 22, 2025
@coderabbitai
Copy link

coderabbitai bot commented Oct 22, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Comment @coderabbitai help to get the list of available commands and usage tips.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 20, 2026

Superseded by #42.

@dependabot dependabot bot closed this Feb 20, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/frameworks/JavaScript/koa/npm_and_yarn-53cc5912fa branch February 20, 2026 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants