Skip to content

build(deps): bump rate-limiter-flexible from 11.3.0 to 11.4.0 - #8477

Merged
github-actions[bot] merged 1 commit into
developfrom
dependabot/npm_and_yarn/rate-limiter-flexible-11.4.0
Nov 11, 2026
Merged

github-actions[bot] merged 1 commit into
developfrom
dependabot/npm_and_yarn/rate-limiter-flexible-11.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Bumps rate-limiter-flexible from 11.3.0 to 11.4.0.

Release notes

Sourced from rate-limiter-flexible's releases.

Fix Prisma and Drizzle atomicity

What's Changed

Fixed atomicity: RateLimiterPrisma and RateLimiterDrizzle now count concurrent requests atomically. Before, concurrent requests could get past the limit.

Duration 0 fix: with duration 0, Prisma, Drizzle and DrizzleNonAtomic limiters now keep counting and never expire, as documented. Before, the points were overwritten on every call and the limit never applied. Keys from block(key, 0) or set(key, points, 0) now stay forever after a consume, instead of being reset.

New Contributors

Full Changelog: animir/node-rate-limiter-flexible@v11.3.0...v11.4.0

🐎

Commits
  • 4bba534 Prisma: fix clearExpiredByTimeout
  • 645f4ae 11.4.0
  • 3f4d0b8 Merge pull request #374 from efeesrefinal/fix/atomic-prisma-drizzle-upsert
  • 7607664 more tests
  • 99d39c9 Update RateLimiterDrizzlePostgres.test.js
  • eb0c073 Merge branch 'master' into fix/atomic-prisma-drizzle-upsert
  • bfea5bb fix Github Actions Valkey image
  • 68b3c33 Make the Prisma and Drizzle upserts atomic and count duration 0
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rate-limiter-flexible](https://github.com/animir/node-rate-limiter-flexible) from 11.3.0 to 11.4.0.
- [Release notes](https://github.com/animir/node-rate-limiter-flexible/releases)
- [Commits](animir/node-rate-limiter-flexible@v11.3.0...v11.4.0)

---
updated-dependencies:
- dependency-name: rate-limiter-flexible
  dependency-version: 11.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 11, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) November 11, 2026 15:35
@github-actions
github-actions Bot merged commit 2bc03e6 into develop Nov 11, 2026
26 of 35 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/rate-limiter-flexible-11.4.0 branch November 11, 2026 15:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants