chore(deps): bump the npm-minor-patch group across 1 directory with 10 updates by dependabot[bot] · Pull Request #277 · CaQuick/caquick-be

dependabot · 2026-09-02T19:41:08Z

Bumps the npm-minor-patch group with 10 updates in the / directory:

Package	From	To
@aws-sdk/client-s3	`3.1116.0`	`3.1121.0`
@aws-sdk/s3-request-presigner	`3.1116.0`	`3.1121.0`
@nestjs/common	`11.2.1`	`11.2.3`
@nestjs/core	`11.2.1`	`11.2.3`
@nestjs/platform-express	`11.2.1`	`11.2.3`
@nestjs/testing	`11.2.1`	`11.2.3`
jest	`30.4.2`	`30.5.0`
knip	`6.32.2`	`6.33.0`
lint-staged	`17.3.0`	`17.4.1`
typescript-eslint	`8.67.0`	`8.68.0`

Updates @aws-sdk/client-s3 from 3.1116.0 to 3.1121.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1121.0

3.1121.0(2026-08-28)

New Features

client-ecs: Amazon Elastic Container Service - This release adds support for early success criteria on ECS rolling deployments, letting deployment complete once a configurable percentage of tasks are healthy, with configurable BLOCKING (required) or DEFERRED (asynchronous) cleanup of previous service revisions. (ef22d750)

client-healthlake: New HealthLake API, RestoreFHIRDatastore, providing the capability to restore active datastores to a point in time within the last 30 days or recover a deleted datastore from the delete snapshot. (62491742)

client-bedrock-agentcore: AgentCore Memory now supports direct ingestion into long-term memory via IngestData API (20d652de)

client-partnercentral-selling: Releasing PARC, new APN Program that lets sellers add solftware revenue details to aws opportunity summary (2b6350f0)

client-cognito-identity-provider: Adds two new operations - GetClientToken which allows M2M auth through the SDK, and DescribeTermsByClient to find which Terms are associated with a user-pool client without knowing the Terms resource id. (86dffd28)

client-bedrock-agent: Adds an optional syncSchedule field to CreateDataSource and UpdateDataSource for Managed Knowledge Bases data source connectors, so a data source can sync automatically on a daily, weekly, or monthly schedule. (a8d3714a)

For list of updated packages, view updated-packages.md in assets-3.1121.0.zip

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

client-opensearch: Updating SDK and CLI documentation for AttachDataSource API. (d696fe76)

New Features

client-lambda-microvms: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs. (72a8ff80)

client-codedeploy: Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration. (78d4f964)

client-cloudwatch-logs: Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters. (0e4d242b)

client-datazone: Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain. (3a74dc4b)

client-rds: Adding support for the full snapshot size, in bytes, of DB instance snapshots. (ab2f66f5)

client-ec2: EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types. (311b3b26)

client-cognito-identity-provider: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool. (f661bebc)

For list of updated packages, view updated-packages.md in assets-3.1120.0.zip

v3.1119.0

3.1119.0(2026-08-26)

Chores

codegen: smithy-aws-typescript-codegen 0.53.0 (#8276) (dffb383b)

New Features

client-sagemaker: Amazon SageMaker AI now supports ml.g7 instances for model optimization. You can now run model optimization jobs on ml.g7 instances, in supported AWS Regions. (6d5e1066)

client-devops-agent: AWS DevOps Agent now supports trigger filter groups for Release Readiness Review, letting you control when the capability auto-triggers based on webhook events and target branches. (bc3d53d5)

... (truncated)

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1121.0 (2026-08-28)

Note: Version bump only for package @aws-sdk/client-s3

3.1120.0 (2026-08-27)

Note: Version bump only for package @aws-sdk/client-s3

3.1119.0 (2026-08-26)

Note: Version bump only for package @aws-sdk/client-s3

3.1118.0 (2026-08-25)

Note: Version bump only for package @aws-sdk/client-s3

3.1117.0 (2026-08-24)

Note: Version bump only for package @aws-sdk/client-s3

Commits

e53a25a Publish v3.1121.0
d6be6f8 Publish v3.1120.0
ba4e449 Publish v3.1119.0
c65dd65 Publish v3.1118.0
78b069a Publish v3.1117.0
See full diff in compare view

Updates @aws-sdk/s3-request-presigner from 3.1116.0 to 3.1121.0

Release notes

Sourced from @aws-sdk/s3-request-presigner's releases.

v3.1121.0

3.1121.0(2026-08-28)

New Features

client-ecs: Amazon Elastic Container Service - This release adds support for early success criteria on ECS rolling deployments, letting deployment complete once a configurable percentage of tasks are healthy, with configurable BLOCKING (required) or DEFERRED (asynchronous) cleanup of previous service revisions. (ef22d750)

client-healthlake: New HealthLake API, RestoreFHIRDatastore, providing the capability to restore active datastores to a point in time within the last 30 days or recover a deleted datastore from the delete snapshot. (62491742)

client-bedrock-agentcore: AgentCore Memory now supports direct ingestion into long-term memory via IngestData API (20d652de)

client-partnercentral-selling: Releasing PARC, new APN Program that lets sellers add solftware revenue details to aws opportunity summary (2b6350f0)

client-cognito-identity-provider: Adds two new operations - GetClientToken which allows M2M auth through the SDK, and DescribeTermsByClient to find which Terms are associated with a user-pool client without knowing the Terms resource id. (86dffd28)

client-bedrock-agent: Adds an optional syncSchedule field to CreateDataSource and UpdateDataSource for Managed Knowledge Bases data source connectors, so a data source can sync automatically on a daily, weekly, or monthly schedule. (a8d3714a)

For list of updated packages, view updated-packages.md in assets-3.1121.0.zip

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

client-opensearch: Updating SDK and CLI documentation for AttachDataSource API. (d696fe76)

New Features

client-lambda-microvms: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs. (72a8ff80)

client-codedeploy: Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration. (78d4f964)

client-cloudwatch-logs: Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters. (0e4d242b)

client-datazone: Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain. (3a74dc4b)

client-rds: Adding support for the full snapshot size, in bytes, of DB instance snapshots. (ab2f66f5)

client-ec2: EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types. (311b3b26)

client-cognito-identity-provider: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool. (f661bebc)

For list of updated packages, view updated-packages.md in assets-3.1120.0.zip

v3.1119.0

3.1119.0(2026-08-26)

Chores

codegen: smithy-aws-typescript-codegen 0.53.0 (#8276) (dffb383b)

New Features

client-sagemaker: Amazon SageMaker AI now supports ml.g7 instances for model optimization. You can now run model optimization jobs on ml.g7 instances, in supported AWS Regions. (6d5e1066)

client-devops-agent: AWS DevOps Agent now supports trigger filter groups for Release Readiness Review, letting you control when the capability auto-triggers based on webhook events and target branches. (bc3d53d5)

... (truncated)

Changelog

Sourced from @aws-sdk/s3-request-presigner's changelog.

3.1121.0 (2026-08-28)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1120.0 (2026-08-27)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1119.0 (2026-08-26)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1118.0 (2026-08-25)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1117.0 (2026-08-24)

Note: Version bump only for package @aws-sdk/s3-request-presigner

Commits

e53a25a Publish v3.1121.0
d6be6f8 Publish v3.1120.0
ba4e449 Publish v3.1119.0
c65dd65 Publish v3.1118.0
78b069a Publish v3.1117.0
See full diff in compare view

Updates @nestjs/common from 11.2.1 to 11.2.3

Release notes

Sourced from @nestjs/common's releases.

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

Commits

2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
7ebaa88 chore: drop skip instrumentation - duplicated api
4593b0a fix(core): preserve middleware arity #17554
See full diff in compare view

Updates @nestjs/core from 11.2.1 to 11.2.3

Release notes

Sourced from @nestjs/core's releases.

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

Commits

2b36ee5 chore(release): publish v11.2.3 release
e12b47b fix(core): circular durable providers issue #17562
7e65752 chore(release): publish v11.2.2 release
7ebaa88 chore: drop skip instrumentation - duplicated api
4593b0a fix(core): preserve middleware arity #17554
35a29cc fix(core): instrument middleware fallback issue
See full diff in compare view

Updates @nestjs/platform-express from 11.2.1 to 11.2.3

Release notes

Sourced from @nestjs/platform-express's releases.

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

Commits

2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
See full diff in compare view

Updates @nestjs/testing from 11.2.1 to 11.2.3

Release notes

Sourced from @nestjs/testing's releases.

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

Commits

2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
See full diff in compare view

Updates jest from 30.4.2 to 30.5.0

Release notes

Sourced from jest's releases.

v30.5.0

On a personal note: King Harald V of Norway passed away this morning. He ascended the throne 35 years ago, two months before I was born. This release is dedicated to his memory. Hvil i fred 🇳🇴

This is a big release. It touches jest-runtime, jest-resolve and jest-haste-map in many places, and with this many changes there might be regressions 😬. If your suite behaves differently after upgrading, please open an issue.

Highlights

whenCalledWith

Mock functions can now configure return values per argument list, contributed by @timkindberg (#16053):
const fn = jest.fn();
fn.whenCalledWith('apple').mockReturnValue('red');
fn.whenCalledWith('banana').mockReturnValue('yellow');
fn.whenCalledWith(expect.any(Number)).mockReturnValue('numeric');
fn('apple'); // 'red'
fn('banana'); // 'yellow'
fn(42); // 'numeric'
fn('grape'); // undefined
The returned object is a real Mock, so mockReturnValueOnce, mockResolvedValue, mockImplementation etc. all chain here too. Argument slots accept literals or any asymmetric matcher, with the same equality semantics as toHaveBeenCalledWith(). Calls that match nothing fall through to the base mock. See the Mock Functions docs for matching and precedence details.

Describe-level retries

jest.retryTimes() can now retry a whole describe block instead of a single test, contributed by @soltonigiri (#16322). Each attempt reruns the block's beforeAll/afterAll hooks, child tests and nested describes, which helps when tests in a block depend on shared state:
describe('workflow', () => {
  jest.retryTimes(3, {entireDescribe: true});
test('first step', () => {});
test('second step', () => {}); // a failure retries the entire block
});
New file watcher

The non-watchman path of jest-haste-map is rewritten. @parcel/watcher replaces the homegrown NodeWatcher and FSEventsWatcher (#16188), and fdir replaces the hand-rolled directory recursion in the crawler (#16187). A batch of fixes also makes watching and indexing survive locked files on Windows, watchman failures, and duplicate manual mocks (#16295, #16358, #16355, #16360).

If you can, please run your suite with --no-watchman (in and out of watch mode) to exercise the new crawler and watchers, and report anything odd 👍

Long-requested dependency updates

babel-plugin-istanbul is updated to v8 (#16049)

glob is updated to v13 (#16397)

... (truncated)

Changelog

Sourced from jest's changelog.

30.5.0

Features

[@jest/expect-utils, jest-mock] Add mockFn.whenCalledWith(...args) for configuring return values per argument list, with first-class asymmetric-matcher support (#16053)

[@jest/expect-utils] Export AsymmetricMatcher and FunctionParameters types (previously private to expect) (#16053)

[jest-circus, jest-core, jest-jasmine2, jest-test-result, jest-types] --collectTests now expands test.each/describe.each cases and reports per-status counts (skipped/todo via the new wouldRun flag for selected tests) plus a summary line that match a real run, including under --testNamePattern and .only/fdescribe focus on both the circus and jasmine2 runners (#16259)

[jest-circus, jest-environment, jest-runtime, jest-types] Add describe-level retries via jest.retryTimes(..., {entireDescribe: true}) (#16322)

[jest-circus, jest-message-util, jest-reporters, jest-types] Add retryMessages to AssertionResult and export formatErrorStack, so the retry log renders nested cause and AggregateError sections with code frames instead of serialized [cause]:/[errors]: markers (#16316)

[jest-circus, jest-types] Add unhandledErrorsDetailed to Circus.RunResult, so an unhandled rejection reports its cause chain and AggregateError entries with code frames instead of a pre-serialized stack (#16316)

[jest-haste-map] Replace NodeWatcher and FSEventsWatcher with @parcel/watcher for the non-watchman watch path (#16188)

[jest-resolve] Bump unrs-resolver to 1.12.1, remove jest-pnp-resolver and unnecessary checks (#15721)

[jest-resolve] Honor Node's --preserve-symlinks / NODE_PRESERVE_SYMLINKS in the default resolver by passing symlinks: false to unrs-resolver (#16260)

[jest-runtime] Apply automocking and manual __mocks__ files to synchronously evaluable ESM graphs on Node 24.9+ - static imports, dynamic import() and require() of an ESM file now generate an automock from the real module's namespace instead of failing with "Attempting to import a mock without a factory". Graphs that need async evaluation (top-level await) or an async-only resolver or transformer still throw (#16391)

[jest-runtime] Route process.getBuiltinModule through the sandbox, so it returns the sandbox process and the hooked node:module instead of the host's (#16391)

[jest-runtime] Throw an actionable error from module.register() and module.registerHooks() inside a test - the hooks attached to the loader running Jest itself, never saw the sandboxed requires they were meant for, and stayed registered for every later test file in the worker (#16391)

[jest-runtime] Surface resolution and import-attribute errors in an ESM graph before executing any of its CJS dependencies on Node 24.9+, matching Node's run-nothing-on-a-broken-graph behavior; the legacy loader on older versions keeps its linking-time execution order (#16391)

[jest-runtime] Throw ERR_SOURCE_PHASE_NOT_DEFINED with an actionable message for import source and import.source(), instead of failing at instantiation with V8's bare "Source phase import object is not defined" (#16391)

[jest-runtime] Emit the JSON-without-import-attribute deprecation warning once per test file instead of once per worker, so it is no longer silently swallowed for every file after the first (#16391)

[jest-runtime] Set import.meta.main to true in the test file and false in every module it loads, matching Node 24+ (#16367)

[jest-runtime] Resolve the module-sync export condition, so a package that exposes its ESM entry point for require() loads the same file Node would (#16336)

[jest-snapshot] Add external snapshot paths to custom reporter failure details (#16374)

Fixes

[jest-console, jest-reporters] CustomConsole now buffers console output so TestResult.console is populated for reporters when verbose is enabled, while GitHubActionsReporter avoids replaying buffered output in verbose mode (#16155)

[expect, jest-message-util, jest-pattern, jest-regex-util, jest-util] Revert node: protocol imports to restore webpack/browser-bundle compatibility (#16167)

[expect] Widen toMatchObject and objectContaining parameter type from Record<string, unknown> to object so class instances are accepted (#16196)

[jest-circus] Call a generator test body with the shared test context, so this matches what a regular test function receives (#16347)

[jest-circus] Capture the error listeners of the parent process instead of the in-sandbox process, so listeners registered before the test file survive teardown and sandbox listeners no longer leak onto the parent (#16347)

[jest-circus] Clear currentlyRunningTest after skipped and todo tests (#16342)

[jest-circus] Prevent late done() callbacks from affecting later test or hook invocations (#16343)

[jest-circus, jest-jasmine2] Honor --expand when formatting node:assert failures, instead of always collapsing the diff (#16347)

[jest-circus, jest-jasmine2, jest-message-util] Serialize the inner errors of an AggregateError into failureMessages, retryReasons and unhandledErrors, so --json output and reporter annotations include them (#16316)

[jest-circus, jest-snapshot] Keep snapshot state and counts correct when a test retries (#16344)

[@jest/create-cache-key-function] Include the caller support flags in the generated key, so a transformer that emits ESM or CJS based on them no longer shares one cache entry between the two (#16331)

[@jest/create-cache-key-function] Include the stringified project config in the generated key, so editing a transformer's own settings invalidates what it cached (#16331)

[@jest/transform] Include the caller support flags in a transform's cache key, so a file transformed both as ESM and as CJS no longer serves one shape's output for the other (#16331)

[jest-config] Add missing findRelatedTests, outputFile, and replname entries to ValidConfig so they no longer trigger spurious "Unknown option" warnings (#16224)

[jest-config] Use --config for the global config when multiple --projects are specified (#16273)

[jest-core] Serialize bigint values in --json and --outputFile output as their literal form (4n), instead of failing the run with TypeError: Do not know how to serialize a BigInt (#16338)

[jest-core] Do not report a CustomGC async resource (used by N-API addons such as napi-rs for per-isolate GC bookkeeping) as an open handle, since it is napi_unref'd by the addon and can never keep the event loop alive (#16379)

[jest-each] Keep a $&, $`, $' or $$ inside a %p param value out of the replacement, so the title shows the value instead of the text around it (#16338)

[jest-each] Interpolate a bigint into a %j title as its literal form ("4n") at any depth, instead of throwing TypeError: Do not know how to serialize a BigInt while collecting the tests (#16338)

[jest-environment, jest-runtime] Bind sandboxInjectedGlobals to the right values when injectGlobals is false, instead of shifting every one of them by a position (#16377)

[jest-environment-node, jest-util] Only warn about a conflicting globalsCleanup mode when one was explicitly configured, and follow the mode that is actually in effect (#16323)

[jest-environment-node, jest-util] Stop resolving lazy globals when setting up an environment, so Node 26's builtin module globals are no longer loaded (and no longer emit their deprecation warnings) for every test file (#16324)

[jest-haste-map] Keep watch mode alive when an outside process briefly makes a file unreadable on Windows, instead of tearing the watcher down on EPERM (#16295)

[jest-haste-map] Keep indexing when an outside process holds a file open on Windows, instead of failing the whole crawl on EPERM (#16358)

[jest-haste-map] Keep a duplicated manual mock resolving when the file it pointed at is deleted in watch mode (#16360)

... (truncated)

Commits

912baa3 v30.5.0
b91717a chore: refresh coding agent instructions (#16182)
See full diff in compare view

Updates knip from 6.32.2 to 6.33.0

Release notes

Sourced from knip's releases.

Release 6.33.0

Support package manifest resolution under Yarn PnP (#1946) (a82efb62b290e004bdabee40bcb337baf3701a1b) - thanks @WooWan!

Resolve oxlint jsPlugins from .oxlintrc.jsonc (#1973) (d055023182789555a574eaefde80dac997190437) - thanks @DreierF!

Update dependency bun to v1.4.0 (#1964) (937ab38ad514a00edafecff4ca04603b015bf921) - thanks @renovate[bot]!

Expose defineConfig on a ./config entrypoint (#1960) (17f7a6051d9781860f248cc2a745dbe837713cd9) - thanks @theRizwan!

Preserve all environment variables in exec.ts (#1979) (c0a9ecf8d1c0cdd7789c1e1bea893706c060239d) - thanks @DreamLongYT!

Add support for TypeScript content mappers (#1978) (db67f9bd8cebf0ea3c298690d462c154827aa462) - thanks @remcohaszing!

fix(vitest): resolve array entries and root-relative setup dependencies (#1982) (0ecf48538c339437e6f9dfe9a6013d307783cbd3) - thanks @DreamLongYT!

Fix type annotation in dynamic configuration function example (ada88c7f01563b73643af34a147a71fd9ab9d2dc)

Format docs with remark (7764c2a4ebecdbf226c19494d255d9cb14550822)

Throw on configuration that is not an object (d7ac0cf1de8f79be6ec53412cac9f7edf8f35ba7)

Clarify dependency inputs, isTypeOnly and toConfig in plugin docs (2bd367961554ad1addb520bdfad5e31125885969)

Resolve content mapper process from package.json#typescript.contentMapper.exec (74640c03e450624409692f4cc17699775108fd7e)

Encode argv arrays before parsing them as shell commands (b79234c15153fbf592e82c94e4e4e9f41b4479e0)

Update dependencies (28510146c2b97d88f7188f1239b9307aac7dbf0c)

Replace non-breaking space in module graph comment (4e22bfcd09deccc92ed158f5554fe3e03f3a2c51)

Update fix format test for oxfmt package.json key sorting (65011bf6054d03fb5580f3381867b07d1b8a9a0c)

fix(webpack): resolve entry descriptors using import field (#1981) (cad8910e7fb89c2510fc9f5885289335dd4e60da) - thanks @DreamLongYT!

fix: count enum element access as a whole-object read (#1958) (5a47d603aa23b388ae7ce4fe301656f1abc43b14) - thanks @addielaruee!

Resolve oxlint/vite-plus import resolvers from settings (#1983) (c1165b70efe27398b86fa50bcea7d85c253d3ee7) - thanks @DreierF!

fix(nuxt): resolve string extends configs (#1984) (4a5d7068d6264ea45c78c832abe7ba052763517e) - thanks @DreamLongYT!

Wrap up webpack entry resolution (505decdb821f9b76d194742cee7e98c75ef7d8e9)

Keep element access precise for number-like enum member names (bcbac3a8b8283da3b32256584b3cc6569ae5c02f)

Resolve Object.* enum enumeration through import aliases (347967daaed817ca20e1ad6148388a66ec8b421b)

Resolve named string-key access on namespace-qualified enums (2ac1fbc1e92f3dae662ca4d4701cf010346be49a)

Normalize line endings in nuxt-config-string fixture (9fe2b2b2db8690685ec7c6cf8b3d39b9ed7b3fdc)

Resolve nuxt layer sources from all extends entry shapes (db136151d9f98801837b33646ef7b02ae7b5a86d)

Report unused exports behind Vitest module promise mocks (resolve #1966) (74954c219367ca1577184cca08c30dbb3fb6222e)

Check line endings against .gitattributes in pnpm run ci (ddc9fd0cc3328260665203c8573702bb6c9d0dd6)

Release 6.32.3

Update sentry production snapshot (9f18cba93c91de8554636b13692d6e7a937b7697)

Pin TypeScript ecosystem test (de5162952d223050f3135afb02d4e8de6d46f381)

Update query snapshot (f6964dd577d8f7967f9be6778f5c3953632e3c96)

fix(tsup): match config files with .cts and .mts extensions (#1938) (68d6f52f7913cfa1e36618e6b03f90734da34149) - thanks @codeAnqiang-ma!

fix(lefthook): match all config file names and extensions (#1940) (4015ae0330c78e97360a2c8f697d17f82c5c24ae) - thanks @codeAnqiang-ma!

fix(binaries): resolve missing pnpm subcommands (#1945) (deedbf69dcbd6a59d6705a72cadb4e40ad9c8029) - thanks @marcalexiei!

Fix nested gitignore negation inside ignored dot-directories (#1913) (#1942) (0201641af48f52edfbe72076118944ee6273718e) - thanks @DSeaStar!

fix(webdriver-io): match all supported config file extensions (#1948) (dc7aca5a865d1762a41dd97493b73398ec3abc19) - thanks @solomonaustin!

Resolve vitest include patterns relative to test.dir (#1929) (ee555d227208dd6a34e002318bd6710dedb4d5ca) - thanks @kirthi-b!

Change GitHub stars badge style to flat (#1967) (ff0d791e8130430524dc88c4df73ad87f82879f7) - thanks @DreamLongYT!

Ignore printf as global binary (#1972) (a0c0b0805a8a26a6efdedfe2561b168da2a22b68) - thanks @taracutie!

fix: add bun 1.4 dedupe subcommand (#1969) (d1d5d4276ece6daf2215f5ff3f4224b5b50dcac3) - thanks @NimmLor!

Resolve Vitest mocks from test root (e655b0ba0192546a2688d702323c8e7c58fecde1)

Resolve local Vitest reporters from test root (resolve #1953) (f4ff31ad0385c5955627ec1b3bed2bc0000b14fe)

Commits

fb25ece Release knip@6.33.0
74954c2 Report unused exports behind Vitest module promise mocks (resolve #1966)
db13615 Resolve nuxt layer sources from all extends entry shapes
9fe2b2b Normalize line endings in nuxt-config-string fixture
2ac1fbc Resolve named string-key access on namespace-qualified enums
347967d Resolve Object.* enum enumeration through import aliases
bcbac3a Keep element access precise for number-like enum member names
505decd Wrap up webpack entry resolution
4a5d706 fix(nuxt): resolve string extends configs (#1984)
c1165b7 Resolve oxlint/vite-plus import resolvers from settings (#1983)
Additional commits viewable in compare view

Updates lint-staged from 17.3.0 to 17.4.1

Release notes

Sourced from lint-staged's releases.

v17.4.1

17.4.1

Patch Changes

#1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes
#1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:
// lint-staged.config.ts
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': ['prettier --check', 'eslint'],
})
#1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.
Patch Changes

#1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

#1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Changelog

Sourced from lint-staged's changelog.

17.4.1

Patch Changes

#1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes
#1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:
// lint-staged.config.ts
import { defineConfig } from 'lint-staged/config'
export default defineConfig({
'*.js': ['prettier --check', 'eslint'],
})
#1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.
Patch Changes

#1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

#1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Commits

d0c1517 Merge pull request #1841 from lint-staged/changeset-release/main
f061335 chore(changeset): release
d2721af Merge pull request #1840 from lint-staged/updates
efe5b63 ci: update Changesets action because it failed to publish
cd76ce3 build: update dependencies
ea195e1 Merge pull request #1837 from lint-staged/changeset-release/main
a6a0d61 chore(changeset): release
0a09098 Merge pull request #1832 from lint-staged/add-all-flag
7fd685b fix: further fix parsing options logic
510a27c feat: add --all flag for including all files tracked by Git instead of just...
Additional commits viewable in compare view

Updates typescript-eslint from 8.67.0 to 8.68.0

Release notes

Sourced from typescript-eslint's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [no-unnecessary-type-...
Description has been truncated

…0 updates Bumps the npm-minor-patch group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1116.0` | `3.1121.0` | | [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1116.0` | `3.1121.0` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.2.1` | `11.2.3` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.2.1` | `11.2.3` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.2.1` | `11.2.3` | | [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.2.1` | `11.2.3` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.4.2` | `30.5.0` | | [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.33.0` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.3.0` | `17.4.1` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.67.0` | `8.68.0` | Updates `@aws-sdk/client-s3` from 3.1116.0 to 3.1121.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1121.0/clients/client-s3) Updates `@aws-sdk/s3-request-presigner` from 3.1116.0 to 3.1121.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1121.0/packages/s3-request-presigner) Updates `@nestjs/common` from 11.2.1 to 11.2.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.3/packages/common) Updates `@nestjs/core` from 11.2.1 to 11.2.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.3/packages/core) Updates `@nestjs/platform-express` from 11.2.1 to 11.2.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.3/packages/platform-express) Updates `@nestjs/testing` from 11.2.1 to 11.2.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.3/packages/testing) Updates `jest` from 30.4.2 to 30.5.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.0/packages/jest) Updates `knip` from 6.32.2 to 6.33.0 - [Release notes](https://github.com/webpro-nl/knip/releases) - [Commits](https://github.com/webpro-nl/knip/commits/knip@6.33.0/packages/knip) Updates `lint-staged` from 17.3.0 to 17.4.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.3.0...v17.4.1) Updates `typescript-eslint` from 8.67.0 to 8.68.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1121.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@aws-sdk/s3-request-presigner" dependency-version: 3.1121.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@nestjs/common" dependency-version: 11.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@nestjs/core" dependency-version: 11.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@nestjs/platform-express" dependency-version: 11.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@nestjs/testing" dependency-version: 11.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: jest dependency-version: 30.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: knip dependency-version: 6.33.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: lint-staged dependency-version: 17.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: typescript-eslint dependency-version: 8.68.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-02T19:42:16Z

🧹 knip — dead-code 리포트

Unused dependencies (1)
Duplicate exports (1)

전체 리포트

Unused dependencies (1)
graphql-ws  package.json:63:6
Duplicate exports (1)
KEYWORD_RANK_SNAPSHOT_SIZE|MAX_POPULAR_KEYWORDS_LIMIT  src/features/search/constants/search.constants.ts

청소 후보(오탐 가능) · 기준 docs/guide/architecture-conventions.md

github-actions · 2026-09-02T19:42:37Z

🩺 NestJS Doctor — 90/100 (Excellent)

진단 303건 (error 0).

Category	warning	info
architecture	0	9
correctness	154	0
performance	24	17
schema	0	86
security	13	0

architecture / security 상위 항목

info architecture/architecture/no-barrel-export-internals: Barrel file re-exports internal type 'IAuditLogRepository'.
warning security/security/no-exposed-env-vars: Direct 'process.env.NODE_ENV' access in 'AuthController'. Use ConfigService instead.
warning security/security/require-guards-on-endpoints: Endpoint 'start' has no @UseGuards() at class or method level.
warning security/security/require-guards-on-endpoints: Endpoint 'callback' has no @UseGuards() at class or method level.
warning security/security/require-guards-on-endpoints: Endpoint 'refresh' has no @UseGuards() at class or method level.
warning security/security/require-guards-on-endpoints: Endpoint 'logout' has no @UseGuards() at class or method level.
warning security/security/require-guards-on-endpoints: Endpoint 'sellerLogin' has no @UseGuards() at class or method level.
warning security/security/require-guards-on-endpoints: Endpoint 'sellerRefresh' has no @UseGuards() at class or method level.
warning security/security/require-guards-on-endpoints: Endpoint 'sellerLogout' has no @UseGuards() at class or method level.
warning security/security/require-guards-on-endpoints: Endpoint 'devIssueToken' has no @UseGuards() at class or method level.
info architecture/architecture/no-barrel-export-internals: Barrel file re-exports internal module '@/features/conversation/repositories/conversation.repository'.
info architecture/architecture/no-barrel-export-internals: Barrel file re-exports internal type 'ConversationRepository'.
info architecture/architecture/no-barrel-export-internals: Barrel file re-exports internal module '@/features/order/repositories/order.repository'.
info architecture/architecture/no-barrel-export-internals: Barrel file re-exports internal type 'OrderRepository'.
info architecture/architecture/no-barrel-export-internals: Barrel file re-exports internal module '@/features/product/repositories/product.repository'.

오탐 포함 가능 · 기준 docs/guide/architecture-conventions.md

github-actions · 2026-09-02T19:45:31Z

Coverage report

St.^❔	Category	Percentage	Covered / Total
🟢	Statements	97.68%	5895/6035
🟢	Branches	93.12%	2316/2487
🟢	Functions	96.44%	1165/1208
🟢	Lines	98.26%	5368/5463

Test suite run success

1868 tests passing in 225 suites.

Report generated by 🧪jest coverage report action from a680bd6

codecov · 2026-09-02T19:46:11Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

dependabot Bot added the 📦 Dependencies 의존성 업데이트 (Dependabot 등) label Sep 2, 2026

Navigation Menu

Uh oh!

chore(deps): bump the npm-minor-patch group across 1 directory with 10 updates - #277

chore(deps): bump the npm-minor-patch group across 1 directory with 10 updates#277
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-e767ef3a41

dependabot Bot commented on behalf of github Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

codecov Bot commented Sep 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 2, 2026

v3.1121.0

3.1121.0(2026-08-28)

New Features

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

New Features

v3.1119.0

3.1119.0(2026-08-26)

Chores

New Features

3.1121.0 (2026-08-28)

3.1120.0 (2026-08-27)

3.1119.0 (2026-08-26)

3.1118.0 (2026-08-25)

3.1117.0 (2026-08-24)

v3.1121.0

3.1121.0(2026-08-28)

New Features

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

New Features

v3.1119.0

3.1119.0(2026-08-26)

Chores

New Features

3.1121.0 (2026-08-28)

3.1120.0 (2026-08-27)

3.1119.0 (2026-08-26)

3.1118.0 (2026-08-25)

3.1117.0 (2026-08-24)

v11.2.3

What's Changed

v11.2.2

What's changed

v11.2.3

What's Changed

v11.2.2

What's changed

v11.2.3

What's Changed

v11.2.2

What's changed

v11.2.3

What's Changed

v11.2.2

What's changed

v30.5.0

Highlights

whenCalledWith

Describe-level retries

New file watcher

Long-requested dependency updates

30.5.0

Features

Fixes

Release 6.33.0

Release 6.32.3

v17.4.1

17.4.1

Patch Changes

17.4.0

Minor Changes

Patch Changes

17.4.1

Patch Changes

17.4.0

Minor Changes

Patch Changes

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

Uh oh!

github-actions Bot commented Sep 2, 2026

🧹 knip — dead-code 리포트

`whenCalledWith`