chore(deps): bump the dependencies group with 7 updates by dependabot[bot] · Pull Request #194 · CaseyHoover/FullStackSkeleton

dependabot · 2026-07-21T05:16:06Z

Bumps the dependencies group with 7 updates:

Package	From	To
@hono/node-server	`2.0.10`	`2.0.11`
@prisma/client	`7.8.0`	`7.9.0`
recharts	`3.9.2`	`3.10.0`
@eslint-react/eslint-plugin	`5.17.2`	`5.17.3`
typescript-eslint	`8.64.0`	`8.65.0`
@prisma/adapter-pg	`7.8.0`	`7.9.0`
prisma	`7.8.0`	`7.9.0`

Updates @hono/node-server from 2.0.10 to 2.0.11

Release notes

Sourced from @hono/node-server's releases.

v2.0.11

What's Changed

test: use a custom helper for path traversal tests by @BlankParticle in honojs/node-server#377

perf(request): fast-path QUERY methods by @usualoma in honojs/node-server#376

perf(request): fast-path PATCH method by @yusukebe in honojs/node-server#380

Full Changelog: honojs/node-server@v2.0.10...v2.0.11

Commits

834e54f 2.0.11
ba72bcd perf(request): fast-path PATCH method (#380)
962baa4 perf(request): fast-path QUERY methods (#376)
62284d6 test: use a custom helper for path traversal tests (#377)
See full diff in compare view

Updates @prisma/client from 7.8.0 to 7.9.0

Commits

b829850 ci: upgrade pnpm to 11 to restore pnpm audit (#29725)
280fd56 fix(client): mask each quoted string in maskQuery independently (#29723)
4da3774 fix(client): reject invalid raw dates (#29697)
a7cec97 chore(deps): update engines to 7.9.0-1.e922089b7d7502aff4249d5da3420f6fa55fc6...
58f8439 fix(client): pin pg-protocol in prisma-client-imports-postgres e2e test (#29687)
918cf5d fix(client): improve adapter-related Prisma 7 error messages (#29624)
93da6ea ci(e2e): shard client e2e suite across 3 jobs to fix chronic timeouts (#29619)
3937779 fix: remove duplicate 'the the' in test comments (#29610)
fda8fbc chore(deps): bump @prisma/dev to 0.24.9 (resolves hono GHSA-92pp-h63x-v22m) (...
0036baf fix(client-engine-runtime): surface unmapped driver errors as user-facing P20...
See full diff in compare view

Updates recharts from 3.9.2 to 3.10.0

Release notes

Sourced from recharts's releases.

v3.10.0

What's Changed

Legend position

Legend now supports position and offset props, same as Label and LabeList. This replaces the previous align and verticalAlign for a more convenient positioning, and fixes couple visual bugs too. See https://recharts.github.io/en-US/examples/LegendPosition/

Legend position and offset by @PavelVanecek in recharts/recharts#7564

XAxis auto height

XAxis now supports height="auto" prop, similar to YAxis width="auto".

feat(XAxis): support height="auto" to size the axis to its tick labels by @kimlj in recharts/recharts#7570

Other features

feat(Sankey): support accessibilityLayer, title and desc props by @MahinAnowar in recharts/recharts#7546

Bugfixes

fix: clear stale active bar layer state by @pupuking723 in recharts/recharts#7547

fix(Brush): slide snaps back to original position on mouseup when start/endIndex are controlled by @MaksZhukov in recharts/recharts#7542

fix(Tooltip): find the active sector in the angle-axis wrap-around gap by @MahinAnowar in recharts/recharts#7550

fix(Brush): keep controlled startIndex/endIndex on data updates by @momomuchu in recharts/recharts#7530

Fix Legend type by @PavelVanecek in recharts/recharts#7560

fix(Label): pass computed position attributes to custom label content by @MahinAnowar in recharts/recharts#7549

fix(CartesianAxis): skip renderedTicks dispatch when tick values are unchanged by @kimlj in recharts/recharts#7565

fix: prevent getBandSizeOfAxis from collapsing band size due to floating-point tick gaps by @xianjianlf2 in recharts/recharts#7556

fix(Area): connectNulls connects across stacked points where every series is null by @kimlj in recharts/recharts#7566

New Contributors

@MahinAnowar made their first contribution in recharts/recharts#7546

@MaksZhukov made their first contribution in recharts/recharts#7542

@momomuchu made their first contribution in recharts/recharts#7530

@kimlj made their first contribution in recharts/recharts#7565

@xianjianlf2 made their first contribution in recharts/recharts#7556

Full Changelog: recharts/recharts@v3.9.2...v3.10.0

Commits

770191a 3.10.0
9d9b15d feat(XAxis): support height="auto" to size the axis to its tick labels (#7570)
38020e8 chore(deps-dev): bump the storybook group with 8 updates (#7568)
e9795a1 Clarify Legend comments and examples (#7567)
9817ae5 fix(Area): connectNulls connects across stacked points where every series is ...
082495a Legend position and offset (#7564)
2ea9ca0 fix: prevent getBandSizeOfAxis from collapsing band size due to floating-poin...
ccdd02a fix(CartesianAxis): skip renderedTicks dispatch when tick values are unchange...
ca62d1c fix(Label): pass computed position attributes to custom label content (#7549)
ea3eef3 chore(deps-dev): bump babel-loader from 9.2.1 to 10.1.1 (#7562)
Additional commits viewable in compare view

Updates @eslint-react/eslint-plugin from 5.17.2 to 5.17.3

Release notes

Sourced from @eslint-react/eslint-plugin's releases.

v5.17.3 (2026-07-20)

What's Changed

🏗️ Internal

@eslint-react/ast: reworked the Extract API — replaced getRootIdentifier with the position-based getIdentifierAt, renamed getStaticPropertyName to getPropertyName (with a min/max effort option), and added findProperty for finding properties in nested object expressions; added Check.isConditional for matching conditional expressions and control flow statements. (#1918)

Bumped eslint-plugin-jsdoc to 63.1.0, expect-type to 1.4.0, @preact/preset-vite to 2.10.6, and pnpm to 11.15.0.

Full Changelog: Rel1cx/eslint-react@v5.17.2...v5.17.3

Attestation

https://github.com/Rel1cx/eslint-react/attestations/36106563

Changelog

Sourced from @eslint-react/eslint-plugin's changelog.

v5.17.3 (2026-07-20)

🏗️ Internal

@eslint-react/ast: reworked the Extract API — replaced getRootIdentifier with the position-based getIdentifierAt, renamed getStaticPropertyName to getPropertyName (with a min/max effort option), and added findProperty for finding properties in nested object expressions; added Check.isConditional for matching conditional expressions and control flow statements. (#1918)

Bumped eslint-plugin-jsdoc to 63.1.0, expect-type to 1.4.0, @preact/preset-vite to 2.10.6, and pnpm to 11.15.0.

Full Changelog: Rel1cx/eslint-react@v5.17.2...v5.17.3

Commits

3026dc6 release: 5.17.3
See full diff in compare view

Updates typescript-eslint from 8.64.0 to 8.65.0

Release notes

Sourced from typescript-eslint's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)

eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)

parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)

eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)

eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

Serhii Leniv @Serhii-Leniv

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

❤️ Thank You

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

63ba81b chore(release): publish 8.65.0
eaf4576 feat: add warning when TS 7 is detected (#12529)
0d06406 chore: add attw validation to repo (#12437)
c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
See full diff in compare view

Updates @prisma/adapter-pg from 7.8.0 to 7.9.0

Commits

35003fd chore(adapter-pg): remove duplicate values parameter (#29650)
d6d9fc9 chore: remove parameterization from sqlcommenter-query-insights (#29518)
See full diff in compare view

Updates prisma from 7.8.0 to 7.9.0

Commits

537583c feat(cli): add @bomb.sh/tab completions (#28351)
bf7c40f fix(cli): update Studio to 0.33.0 and suppress aborted response errors (#29720)
9acd8dc feat(cli): install Prisma agent skills during prisma init (#29689)
aef8cb5 fix(cli): remove the migrate-reset tool from the MCP server (#29691)
cdca333 chore(deps): update @prisma/dev to 0.24.14 (#29686)
fda8fbc chore(deps): bump @prisma/dev to 0.24.9 (resolves hono GHSA-92pp-h63x-v22m) (...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [@hono/node-server](https://github.com/honojs/node-server) | `2.0.10` | `2.0.11` | | [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.8.0` | `7.9.0` | | [recharts](https://github.com/recharts/recharts) | `3.9.2` | `3.10.0` | | [@eslint-react/eslint-plugin](https://github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin) | `5.17.2` | `5.17.3` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.64.0` | `8.65.0` | | [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.8.0` | `7.9.0` | | [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `7.8.0` | `7.9.0` | Updates `@hono/node-server` from 2.0.10 to 2.0.11 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.0.10...v2.0.11) Updates `@prisma/client` from 7.8.0 to 7.9.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.0/packages/client) Updates `recharts` from 3.9.2 to 3.10.0 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.9.2...v3.10.0) Updates `@eslint-react/eslint-plugin` from 5.17.2 to 5.17.3 - [Release notes](https://github.com/Rel1cx/eslint-react/releases) - [Changelog](https://github.com/Rel1cx/eslint-react/blob/main/CHANGELOG.md) - [Commits](https://github.com/Rel1cx/eslint-react/commits/v5.17.3/plugins/eslint-plugin) Updates `typescript-eslint` from 8.64.0 to 8.65.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint) Updates `@prisma/adapter-pg` from 7.8.0 to 7.9.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.0/packages/adapter-pg) Updates `prisma` from 7.8.0 to 7.9.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.0/packages/cli) --- updated-dependencies: - dependency-name: "@hono/node-server" dependency-version: 2.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@prisma/client" dependency-version: 7.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: recharts dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@eslint-react/eslint-plugin" dependency-version: 5.17.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: typescript-eslint dependency-version: 8.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@prisma/adapter-pg" dependency-version: 7.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: prisma dependency-version: 7.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-21T05:16:28Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
❌ 2 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 8 package(s) with unknown licenses.
⚠️ 3 packages with OpenSSF Scorecard issues.

View full job summary

dependabot · 2026-07-22T05:18:10Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026

github-actions Bot enabled auto-merge July 21, 2026 05:16

dependabot Bot closed this Jul 22, 2026

auto-merge was automatically disabled July 22, 2026 05:18
Pull request was closed

dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-2e6a4fb4bf branch July 22, 2026 05:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the dependencies group with 7 updates#194

chore(deps): bump the dependencies group with 7 updates#194
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-2e6a4fb4bf

dependabot Bot commented on behalf of github Jul 21, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.0.11

What's Changed

v3.10.0

What's Changed

Legend position

XAxis auto height

Other features

Bugfixes

New Contributors

v5.17.3 (2026-07-20)

What's Changed

🏗️ Internal

Attestation

v5.17.3 (2026-07-20)

🏗️ Internal

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

🩹 Fixes

❤️ Thank You

8.65.0 (2026-07-20)

🚀 Features

❤️ Thank You

Uh oh!

github-actions Bot commented Jul 21, 2026

Dependency Review

Uh oh!

dependabot Bot commented on behalf of github Jul 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 21, 2026 •

edited

Loading