Skip to content

Bump the npm_and_yarn group across 4 directories with 2 updates - #489

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/gateway/npm_and_yarn-ca1db576da
Open

Bump the npm_and_yarn group across 4 directories with 2 updates#489
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/gateway/npm_and_yarn-ca1db576da

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 2 updates in the /apps/gateway directory: drizzle-orm and @faker-js/faker.
Bumps the npm_and_yarn group with 2 updates in the /apps/registry directory: drizzle-orm and @faker-js/faker.
Bumps the npm_and_yarn group with 1 update in the /packages/client-configurator directory: @faker-js/faker.
Bumps the npm_and_yarn group with 1 update in the /packages/mcp directory: @faker-js/faker.

Updates drizzle-orm from 0.43.1 to 0.45.2

Release notes

Sourced from drizzle-orm's releases.

0.45.2

  • Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability

Thanks to @​EthanKim88, @​0x90sh and @​wgoodall01 for reaching out to us with a reproduction and suggested fix

0.45.1

  • Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden require() (#5107)

0.45.0

  • Fixed pg-native Pool detection in node-postgres transactions
  • Allowed subqueries in select fields
  • Updated typo algorythm => algorithm
  • Fixed $onUpdate not handling SQL values (fixes #2388, tests implemented by L-Mario564 in #2911)
  • Fixed pg mappers not handling Date instances in bun-sql:postgresql driver responses for date, timestamp types (fixes #4493)

0.44.7

0.44.6

  • feat: add $replicas reference #4874

0.44.5

  • Fixed invalid usage of .one() in durable-sqlite session
  • Fixed spread operator related crash in sqlite blob columns
  • Better browser support for sqlite blob columns
  • Improved sqlite blob mapping

0.44.4

0.44.3

  • Fixed types of $client for clients created by drizzle function
await db.$client.[...]
  • Added the updated_at column to the neon_auth.users_sync table definition.

0.44.2

  • [BUG]: Fixed type issues with joins with certain variations of tsconfig: #4535, #4457

0.44.1

0.44.0

Error handling

Starting from this version, we’ve introduced a new DrizzleQueryError that wraps all errors from database drivers and provides a set of useful information:

... (truncated)

Commits
  • 273c780 + 0.45.2 (#5534)
  • 4aa6ecf Kit updates (#5490)
  • e8e6edf feat(drizzle-kit): support d1 via binding (#5302)
  • a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
  • c445637 Merge pull request #5095 from drizzle-team/main-workflows
  • e7b3aaa Merge branch 'main' into main-workflows
  • 0d885a5 refactor: Update condition for run-feature job to improve clarity and functio...
  • 45a1ffb Merge pull request #5087 from drizzle-team/main-workflows
  • 6357645 chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows
  • 53dec98 refactor: Simplify release router workflow by removing unnecessary switch job...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for drizzle-orm since your current version.


Updates @faker-js/faker from 9.9.0 to 10.6.0

Release notes

Sourced from @​faker-js/faker's releases.

v10.6.0

What's Changed

... (truncated)

Changelog

Sourced from @​faker-js/faker's changelog.

10.6.0 (2026-08-14)

New Locales

  • locale: add 060 Japanese mobile phone number formats (#3922) (afa272d)
  • locale: add Norwegian (nb_NO) animal module (#3901) (1232937)
  • locale: add Norwegian (nb_NO) food module (#3900) (bd23594)
  • locale: add vehicle data for de (#3958) (974490f)
  • locale: better middle names by gender for en locale (#3932) (aba3fb1)
  • locale: better organize first_name by gender for en (#3924) (119386b)

Features

Changed Locales

Bug Fixes

  • apidocs: scope code group tab identifiers (#3976) (3125eaf)
  • color: give the LCH hue its full 360 degree range (#3978) (1ce5994)
  • color: stop scaling the HSLA alpha into a percentage (#3979) (1143329)
  • groupBy handling for prototype property keys (#3906) (c898ff1)
  • internet: exclude reserved port 0 from internet.port() (#3948) (d4b35a4)
  • internet: generate long passwords without stack overflow (#3946) (4782978)
  • internet: validate CIDR prefix length and octet range in ipv4() (#3933) (15cb8fb)
  • locale: exclude forbidden letter combinations from nl postcodes (#3888) (9bebe67)
  • locale: only generate valid French postal codes (#3905) (711f36f)
  • locale: update nl_BE phone number patterns (#3981) (9616076)
  • locale: use only common surnames for zh_CN last names (#3938) (58394eb)
  • locale: use only valid letters in en_CA postcodes (#3951) (3b184d6)
  • string: reject refDates that a ULID timestamp cannot encode (#3982) (81717bc)
  • vehicle: calculate VIN check digit (#3954) (a4c6757)
  • word: pick nearest length for closest strategy (#3943) (42fd322)

10.5.0 (2026-06-17)

New Locales

... (truncated)

Commits
  • 2cb0423 chore(release): 10.6.0 (#3986)
  • 531588f chore(deps): lock file maintenance (#3923)
  • 328f018 chore(deps): update eslint (#3930)
  • a5c8bd7 chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24 docker...
  • fe3f17b chore(deps): update all non-major dependencies (#3974)
  • ae38b18 docs(lorem): document the fail default strategy for word (#3944)
  • 1ce5994 fix(color): give the LCH hue its full 360 degree range (#3978)
  • 1143329 fix(color): stop scaling the HSLA alpha into a percentage (#3979)
  • a4c6757 fix(vehicle): calculate VIN check digit (#3954)
  • d68f978 infra: ensure markdown rendered is only ever initialized once (#3984)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​faker-js/faker since your current version.


Updates drizzle-orm from 0.43.1 to 0.45.2

Release notes

Sourced from drizzle-orm's releases.

0.45.2

  • Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability

Thanks to @​EthanKim88, @​0x90sh and @​wgoodall01 for reaching out to us with a reproduction and suggested fix

0.45.1

  • Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden require() (#5107)

0.45.0

  • Fixed pg-native Pool detection in node-postgres transactions
  • Allowed subqueries in select fields
  • Updated typo algorythm => algorithm
  • Fixed $onUpdate not handling SQL values (fixes #2388, tests implemented by L-Mario564 in #2911)
  • Fixed pg mappers not handling Date instances in bun-sql:postgresql driver responses for date, timestamp types (fixes #4493)

0.44.7

0.44.6

  • feat: add $replicas reference #4874

0.44.5

  • Fixed invalid usage of .one() in durable-sqlite session
  • Fixed spread operator related crash in sqlite blob columns
  • Better browser support for sqlite blob columns
  • Improved sqlite blob mapping

0.44.4

0.44.3

  • Fixed types of $client for clients created by drizzle function
await db.$client.[...]
  • Added the updated_at column to the neon_auth.users_sync table definition.

0.44.2

  • [BUG]: Fixed type issues with joins with certain variations of tsconfig: #4535, #4457

0.44.1

0.44.0

Error handling

Starting from this version, we’ve introduced a new DrizzleQueryError that wraps all errors from database drivers and provides a set of useful information:

... (truncated)

Commits
  • 273c780 + 0.45.2 (#5534)
  • 4aa6ecf Kit updates (#5490)
  • e8e6edf feat(drizzle-kit): support d1 via binding (#5302)
  • a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
  • c445637 Merge pull request #5095 from drizzle-team/main-workflows
  • e7b3aaa Merge branch 'main' into main-workflows
  • 0d885a5 refactor: Update condition for run-feature job to improve clarity and functio...
  • 45a1ffb Merge pull request #5087 from drizzle-team/main-workflows
  • 6357645 chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows
  • 53dec98 refactor: Simplify release router workflow by removing unnecessary switch job...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for drizzle-orm since your current version.


Updates @faker-js/faker from 9.9.0 to 10.6.0

Release notes

Sourced from @​faker-js/faker's releases.

v10.6.0

What's Changed

... (truncated)

Changelog

Sourced from @​faker-js/faker's changelog.

10.6.0 (2026-08-14)

New Locales

  • locale: add 060 Japanese mobile phone number formats (#3922) (afa272d)
  • locale: add Norwegian (nb_NO) animal module (#3901) (1232937)
  • locale: add Norwegian (nb_NO) food module (#3900) (bd23594)
  • locale: add vehicle data for de (#3958) (974490f)
  • locale: better middle names by gender for en locale (#3932) (aba3fb1)
  • locale: better organize first_name by gender for en (#3924) (119386b)

Features

Changed Locales

Bug Fixes

  • apidocs: scope code group tab identifiers (#3976) (3125eaf)
  • color: give the LCH hue its full 360 degree range (#3978) (1ce5994)
  • color: stop scaling the HSLA alpha into a percentage (#3979) (1143329)
  • groupBy handling for prototype property keys (#3906) (c898ff1)
  • internet: exclude reserved port 0 from internet.port() (#3948) (d4b35a4)
  • internet: generate long passwords without stack overflow (#3946) (4782978)
  • internet: validate CIDR prefix length and octet range in ipv4() (#3933) (15cb8fb)
  • locale: exclude forbidden letter combinations from nl postcodes (#3888) (9bebe67)
  • locale: only generate valid French postal codes (#3905) (711f36f)
  • locale: update nl_BE phone number patterns (#3981) (9616076)
  • locale: use only common surnames for zh_CN last names (#3938) (58394eb)
  • locale: use only valid letters in en_CA postcodes (#3951) (3b184d6)
  • string: reject refDates that a ULID timestamp cannot encode (#3982) (81717bc)
  • vehicle: calculate VIN check digit (#3954) (a4c6757)
  • word: pick nearest length for closest strategy (#3943) (42fd322)

10.5.0 (2026-06-17)

New Locales

... (truncated)

Commits
  • 2cb0423 chore(release): 10.6.0 (#3986)
  • 531588f chore(deps): lock file maintenance (#3923)
  • 328f018 chore(deps): update eslint (#3930)
  • a5c8bd7 chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24 docker...
  • fe3f17b chore(deps): update all non-major dependencies (#3974)
  • ae38b18 docs(lorem): document the fail default strategy for word (#3944)
  • 1ce5994 fix(color): give the LCH hue its full 360 degree range (#3978)
  • 1143329 fix(color): stop scaling the HSLA alpha into a percentage (#3979)
  • a4c6757 fix(vehicle): calculate VIN check digit (#3954)
  • d68f978 infra: ensure markdown rendered is only ever initialized once (#3984)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​faker-js/faker since your current version.


Updates @faker-js/faker from 9.9.0 to 10.6.0

Release notes

Sourced from @​faker-js/faker's releases.

v10.6.0

What's Changed

@dependabot
Bump the npm_and_yarn group across 4 directories with 2 updates
c11da42 
Bumps the npm_and_yarn group with 2 updates in the /apps/gateway directory: [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) and [@faker-js/faker](https://github.com/faker-js/faker).
Bumps the npm_and_yarn group with 2 updates in the /apps/registry directory: [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) and [@faker-js/faker](https://github.com/faker-js/faker).
Bumps the npm_and_yarn group with 1 update in the /packages/client-configurator directory: [@faker-js/faker](https://github.com/faker-js/faker).
Bumps the npm_and_yarn group with 1 update in the /packages/mcp directory: [@faker-js/faker](https://github.com/faker-js/faker).


Updates `drizzle-orm` from 0.43.1 to 0.45.2
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.43.1...0.45.2)

Updates `@faker-js/faker` from 9.9.0 to 10.6.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v9.9.0...v10.6.0)

Updates `drizzle-orm` from 0.43.1 to 0.45.2
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.43.1...0.45.2)

Updates `@faker-js/faker` from 9.9.0 to 10.6.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v9.9.0...v10.6.0)

Updates `@faker-js/faker` from 9.9.0 to 10.6.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v9.9.0...v10.6.0)

Updates `@faker-js/faker` from 9.9.0 to 10.6.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v9.9.0...v10.6.0)

---
updated-dependencies:
- dependency-name: drizzle-orm
  dependency-version: 0.45.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@faker-js/faker"
  dependency-version: 10.6.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: drizzle-orm
  dependency-version: 0.45.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@faker-js/faker"
  dependency-version: 10.6.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@faker-js/faker"
  dependency-version: 10.6.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@faker-js/faker"
  dependency-version: 10.6.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants