gitchegumi/GitchAlerts

Watch

Fork 0

chore(deps): bump the production-dependencies group across 1 directory with 9 updates #151

Merged

dependabot[bot] merged 1 commit from dependabot/npm_and_yarn/production-dependencies-ff26d7bef5 into main

2026-08-16 21:10:29 -05:00

dependabot[bot] commented

2026-08-16 19:01:52 -05:00

(Migrated from github.com)

Bumps the production-dependencies group with 9 updates in the / directory:

Package	From	To
@next/env	`16.2.10`	`16.3.1`
jose	`6.2.3`	`6.2.8`
next	`16.2.11`	`16.3.1`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`
@prisma/adapter-pg	`7.8.0`	`7.9.1`
@prisma/client	`7.8.0`	`7.9.1`
ioredis	`5.11.1`	`6.0.0`
pg	`8.22.0`	`8.23.0`

Updates @next/env from 16.2.10 to 16.3.1

Release notes

Sourced from @next/env's releases.

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

[backport] Allow literal exports in 'use cache' files by @unstubbable in vercel/next.js#97312

[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in vercel/next.js#97315

[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in vercel/next.js#97314

[backport] Encode the cache item name built by unstable_cache by @unstubbable in vercel/next.js#97313

[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in vercel/next.js#97258

[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in vercel/next.js#97328

[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in vercel/next.js#97326

[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in vercel/next.js#97325

[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in vercel/next.js#97304

[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in vercel/next.js#97330

Full Changelog: https://github.com/vercel/next.js/compare/v16.3.0...v16.3.1

v16.3.1-canary.21

Misc Changes

Anchor the async local storage instances to global symbols: #97255

test: deflake use-cache-size-zero warm reload: #97421

Scaffolding for concurrentRouterQueue flag: #97413

Reorganize client router modules: #97402

Credits

Huge thanks to @unstubbable, @gnoff, and @acdlite for helping!

v16.3.1-canary.20

Misc Changes

Wait for back-before-hydration recoveries in the browser: #97321

Extract metadata resolution primitives: #97388

test: update React 18 redbox snapshot: #97415

Turbopack: retain conditions when replacing resolve request keys: #97372

Remove server route matcher stack: #94157

Credits

Huge thanks to @gaearon, @gnoff, @timneutkens, and @mischnic for helping!

... (truncated)

Commits

3d32eb8 v16.3.1
d73f562 v16.3.0
4fd843f v16.3.0-canary.107
9480f7f v16.3.0-canary.106
a8dcd25 v16.3.0-canary.105
38f0cde v16.3.0-canary.104
f3edea1 v16.3.0-canary.103
0d5ff0d v16.3.0-canary.102
cf1e001 v16.3.0-canary.101
267d6b1 v16.3.0-canary.100
Additional commits viewable in compare view

Updates jose from 6.2.3 to 6.2.8

Release notes

Sourced from jose's releases.

v6.2.8

Fixes

enforce a single recipient when decrypting dir and ECDH-ES (505c383)

reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

index the JWS and JWE registries without a wrapper (925f3bb)

name the "alg" source in unsupported algorithm failures (1500459)

v6.2.7

Fixes

require own JOSE properties for presence checks (90ab09c)

Refactor

reduce bundle size (767d7f1)

v6.2.6

Fixes

types: accept host CryptoKey declarations (b48a15b)

v6.2.5

Fixes

compare claim values for falsy validation options (eb86956)

forward key management parameters for a single JWE recipient (2d4f801)

handle a zero-length JWE additional authenticated data (16ca398)

reject a generateKeyPair crv option the algorithm does not imply (76364e9)

reject an unencoded payload in the JWS Compact Serialization (01d053f)

reject characters outside the Base64URL alphabet (0ebb971), references #879

reject duplicate "crit" values when producing (31d60e1)

reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)

reject truncated ASN.1 key data (7a16c66)

surface non-ASCII token segments as JOSE errors (194fe11)

types: correct JWK and CryptoKey types (62a196d)

types: correct key resolver and JWT header types (e95f8c4)

validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

correct subpaths and API documentation (2daec38)

document consumer-supplied type parameters (9e9f66c)

stop claiming the JWK "use" parameter is used during import (47a07b2)

update CHANGELOG.md (fc51bf5)

Refactor

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.8 (2026-08-03)

Fixes

enforce a single recipient when decrypting dir and ECDH-ES (505c383)

reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

index the JWS and JWE registries without a wrapper (925f3bb)

name the "alg" source in unsupported algorithm failures (1500459)

6.2.7 (2026-08-01)

Fixes

require own JOSE properties for presence checks (90ab09c)

Refactor

reduce bundle size (767d7f1)

6.2.6 (2026-07-31)

Fixes

types: accept host CryptoKey declarations (b48a15b)

6.2.5 (2026-07-29)

Fixes

compare claim values for falsy validation options (eb86956)

forward key management parameters for a single JWE recipient (2d4f801)

handle a zero-length JWE additional authenticated data (16ca398)

reject a generateKeyPair crv option the algorithm does not imply (76364e9)

reject an unencoded payload in the JWS Compact Serialization (01d053f)

reject characters outside the Base64URL alphabet (0ebb971), references #879

reject duplicate "crit" values when producing (31d60e1)

reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)

reject truncated ASN.1 key data (7a16c66)

surface non-ASCII token segments as JOSE errors (194fe11)

types: correct JWK and CryptoKey types (62a196d)

types: correct key resolver and JWT header types (e95f8c4)

validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

correct subpaths and API documentation (2daec38)

document consumer-supplied type parameters (9e9f66c)

... (truncated)

Commits

8b768eb chore(release): 6.2.8
1500459 refactor: name the "alg" source in unsupported algorithm failures
714f870 fix: reject a non-string "alg" in EmbeddedJWK
925f3bb refactor: index the JWS and JWE registries without a wrapper
505c383 fix: enforce a single recipient when decrypting dir and ECDH-ES
514831d chore(deps): bump the actions group with 3 updates
45965db chore: cleanup after release
60b941f chore(release): 6.2.7
90ab09c fix: require own JOSE properties for presence checks
767d7f1 refactor: reduce bundle size
Additional commits viewable in compare view

Updates next from 16.2.11 to 16.3.1

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

[backport] Allow literal exports in 'use cache' files by @unstubbable in vercel/next.js#97312

[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in vercel/next.js#97315

[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in vercel/next.js#97314

[backport] Encode the cache item name built by unstable_cache by @unstubbable in vercel/next.js#97313

[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in vercel/next.js#97258

[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in vercel/next.js#97328

[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in vercel/next.js#97326

[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in vercel/next.js#97325

[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in vercel/next.js#97304

[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in vercel/next.js#97330

Full Changelog: https://github.com/vercel/next.js/compare/v16.3.0...v16.3.1

v16.3.1-canary.21

Misc Changes

Anchor the async local storage instances to global symbols: #97255

test: deflake use-cache-size-zero warm reload: #97421

Scaffolding for concurrentRouterQueue flag: #97413

Reorganize client router modules: #97402

Credits

Huge thanks to @unstubbable, @gnoff, and @acdlite for helping!

v16.3.1-canary.20

Misc Changes

Wait for back-before-hydration recoveries in the browser: #97321

Extract metadata resolution primitives: #97388

test: update React 18 redbox snapshot: #97415

Turbopack: retain conditions when replacing resolve request keys: #97372

Remove server route matcher stack: #94157

Credits

Huge thanks to @gaearon, @gnoff, @timneutkens, and @mischnic for helping!

... (truncated)

Commits

3d32eb8 v16.3.1
2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)
323a17c [backport] Discard only cache entries that predate a tag revalidation, and re...
6d67f46 [backport] Keep the dev validation worker alive across HMR updates (#97315)
Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates @prisma/adapter-pg from 7.8.0 to 7.9.1

Release notes

Sourced from @prisma/adapter-pg's releases.

7.9.1

Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).

This fixes prisma/prisma#29780.

It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:
# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh

echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash

tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish

tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)
@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @AmirSa12 (#28351) — thank you!

https://github.com/user-attachments/assets/1f916a60-ee4d-40be-bb7d-74035d48ca83

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.
</tr></table> 

... (truncated)

Commits

35003fd chore(adapter-pg): remove duplicate values parameter (#29650)
d6d9fc9 chore: remove parameterization from sqlcommenter-query-insights (#29518)
See full diff in compare view

Updates @prisma/client from 7.8.0 to 7.9.1

Release notes

Sourced from @prisma/client's releases.

7.9.1

Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).

This fixes prisma/prisma#29780.

It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:
# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh

echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash

tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish

tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)
@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @AmirSa12 (#28351) — thank you!

https://github.com/user-attachments/assets/1f916a60-ee4d-40be-bb7d-74035d48ca83

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.
</tr></table> 

... (truncated)

Commits

b829850 ci: upgrade pnpm to 11 to restore pnpm audit (#29725)
280fd56 fix(client): mask each quoted string in maskQuery independently (#29723)
4da3774 fix(client): reject invalid raw dates (#29697)
a7cec97 chore(deps): update engines to 7.9.0-1.e922089b7d7502aff4249d5da3420f6fa55fc6...
58f8439 fix(client): pin pg-protocol in prisma-client-imports-postgres e2e test (#29687)
918cf5d fix(client): improve adapter-related Prisma 7 error messages (#29624)
93da6ea ci(e2e): shard client e2e suite across 3 jobs to fix chronic timeouts (#29619)
3937779 fix: remove duplicate 'the the' in test comments (#29610)
fda8fbc chore(deps): bump @prisma/dev to 0.24.9 (resolves hono GHSA-92pp-h63x-v22m) (...
0036baf fix(client-engine-runtime): surface unmapped driver errors as user-facing P20...
See full diff in compare view

Updates ioredis from 5.11.1 to 6.0.0

Release notes

Sourced from ioredis's releases.

v6.0.0

6.0.0 (2026-07-31)

Add RESP3 (#2127) (5d0862e)

Bug Fixes

clear stale socket timeout on reconnect (#2148) (6455dbe)

cluster: recreate stale connection on circular MOVED (#2135) (08c8967)

cluster: validate MOVED slot to prevent Array.prototype pollution (#2151) (9618206), closes #1267

command: serialize large integer arguments in decimal notation (#2136) (09b8d04)

redis: keep reconnecting when connection closes during client setup (#2099) (#2123) (f9a66bc)

sentinel: preserve zero preferred slave priority (#2129) (a3f9f2d)

tracing: redact values for GETSET and PSETEX (#2134) (832765d)

types: export ScanStreamOptions, RedisStatus and ClusterStatus (#2158) (cf3bf71)

Features

add LMOVEM and BLMOVEM command support (#2144) (c26af46)

add Redis 8.10 set cardinality commands (#2143) (301099b)

himport managed fieldsets (#2159) (729f174)

improve default connection resilience (#2160) (6d0716e)

support MAXCOUNT and MAXSIZE for stream reads (#2142) (ae5e41b)

BREAKING CHANGES

ioredis now requires Node.js 20 or newer and uses RESP3 by default. Set protocol: 2 to retain the v5 wire protocol.

v6.0.0-beta.1

6.0.0-beta.1 (2026-07-29)

Add RESP3 (#2127) (5d0862e)

Bug Fixes

clear stale socket timeout on reconnect (#2148) (6455dbe)

cluster: recreate stale connection on circular MOVED (#2135) (08c8967)

cluster: validate MOVED slot to prevent Array.prototype pollution (#2151) (9618206), closes #1267

command: serialize large integer arguments in decimal notation (#2136) (09b8d04)

redis: keep reconnecting when connection closes during client setup (#2099) (#2123) (f9a66bc)

sentinel: preserve zero preferred slave priority (#2129) (a3f9f2d)

tracing: redact values for GETSET and PSETEX (#2134) (832765d)

... (truncated)

Changelog

Sourced from ioredis's changelog.

6.0.0 (2026-07-31)

Add RESP3 (#2127) (5d0862e)

Bug Fixes

clear stale socket timeout on reconnect (#2148) (6455dbe)

cluster: recreate stale connection on circular MOVED (#2135) (08c8967)

cluster: validate MOVED slot to prevent Array.prototype pollution (#2151) (9618206), closes #1267

command: serialize large integer arguments in decimal notation (#2136) (09b8d04)

redis: keep reconnecting when connection closes during client setup (#2099) (#2123) (f9a66bc)

sentinel: preserve zero preferred slave priority (#2129) (a3f9f2d)

tracing: redact values for GETSET and PSETEX (#2134) (832765d)

types: export ScanStreamOptions, RedisStatus and ClusterStatus (#2158) (cf3bf71)

Features

add LMOVEM and BLMOVEM command support (#2144) (c26af46)

add Redis 8.10 set cardinality commands (#2143) (301099b)

himport managed fieldsets (#2159) (729f174)

improve default connection resilience (#2160) (6d0716e)

support MAXCOUNT and MAXSIZE for stream reads (#2142) (ae5e41b)

BREAKING CHANGES

ioredis now requires Node.js 20 or newer and uses RESP3 by default. Set protocol: 2 to retain the v5 wire protocol.

Commits

8ed2946 chore(release): 6.0.0 [skip ci]
3b410f8 docs: clarify managed HIMPORT fieldset behavior (#2161)
729f174 feat: himport managed fieldsets (#2159)
6d0716e feat: improve default connection resilience (#2160)
cf3bf71 fix(types): export ScanStreamOptions, RedisStatus and ClusterStatus (#2158)
aac171b ci: update Redis test image (#2156)
807bb1c chore(release): update repository URL (#2154)
6c889e7 docs: add security policy (#2153)
6455dbe fix: clear stale socket timeout on reconnect (#2148)
9618206 fix(cluster): validate MOVED slot to prevent Array.prototype pollution (#2151)
Additional commits viewable in compare view

Updates pg from 8.22.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

Add support for query pipelineing.

Commits

df274d1 Publish
eb19d0f Add opt-in query pipelining (#3652)
See full diff in compare view

Bumps the production-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@next/env](https://github.com/vercel/next.js/tree/HEAD/packages/next-env) | `16.2.10` | `16.3.1` | | [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.8` | | [next](https://github.com/vercel/next.js) | `16.2.11` | `16.3.1` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.8.0` | `7.9.1` | | [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.8.0` | `7.9.1` | | [ioredis](https://github.com/redis/ioredis) | `5.11.1` | `6.0.0` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` | Updates `@next/env` from 16.2.10 to 16.3.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/next.js/releases">@next/env's releases</a>.</em></p> <blockquote> <h2>v16.3.1</h2> <h2>What's Changed</h2> <ul> <li>[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96653">vercel/next.js#96653</a></li> <li>[16.x] [turbopack] Add <code>turbopack_ecmascript</code> and <code>turbopack_wasm</code>'s embeded FS to <code>internal_assets_conditions</code> by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96655">vercel/next.js#96655</a></li> <li>[16.x] [turbopack] Collapse nested promises in the analyzer by <a href="https://github.com/sampoder"><code>@sampoder</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96675">vercel/next.js#96675</a></li> <li>[16.x] fix(next/image): preserve image response after optimization by <a href="https://github.com/styfle"><code>@styfle</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96733">vercel/next.js#96733</a></li> <li>[16.3.x] Default deploy e2e tests to the repo next version by <a href="https://github.com/eps1lon"><code>@eps1lon</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96900">vercel/next.js#96900</a></li> <li>[backport] Bump <code>@swc/helpers</code> by <a href="https://github.com/mischnic"><code>@mischnic</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96885">vercel/next.js#96885</a></li> <li>[backport] [turbopack] Raise registration calls in hoisted modules to the top by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97308">vercel/next.js#97308</a></li> <li>[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97302">vercel/next.js#97302</a></li> <li>[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97317">vercel/next.js#97317</a></li> <li>[backport] Restore the live <code>headers()</code> view of the incoming request by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97311">vercel/next.js#97311</a></li> <li>[backport] Allow literal exports in <code>'use cache'</code> files by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97312">vercel/next.js#97312</a></li> <li>[backport] Keep the dev validation worker alive across HMR updates by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97315">vercel/next.js#97315</a></li> <li>[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97314">vercel/next.js#97314</a></li> <li>[backport] Encode the cache item name built by <code>unstable_cache</code> by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97313">vercel/next.js#97313</a></li> <li>[16.3] [ci] Use OIDC tokens to read private preview builds by <a href="https://github.com/eps1lon"><code>@eps1lon</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97258">vercel/next.js#97258</a></li> <li>[backport] [test] Compile the middleware redirect routes up front in dev by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97328">vercel/next.js#97328</a></li> <li>[backport] Fix Nav Inspector request loop on repeat captures by <a href="https://github.com/acdlite"><code>@acdlite</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97326">vercel/next.js#97326</a></li> <li>[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by <a href="https://github.com/acdlite"><code>@acdlite</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97325">vercel/next.js#97325</a></li> <li>[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97304">vercel/next.js#97304</a></li> <li>[backport] Revert i18n localization change for dynamic Pages API routes (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/next-env/issues/94905">#94905</a>) by <a href="https://github.com/gaojude"><code>@gaojude</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97330">vercel/next.js#97330</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/next.js/compare/v16.3.0...v16.3.1">https://github.com/vercel/next.js/compare/v16.3.0...v16.3.1</a></p> <h2>v16.3.1-canary.21</h2> <h3>Misc Changes</h3> <ul> <li>Anchor the async local storage instances to global symbols: <a href="https://github.com/vercel/next.js/tree/HEAD/packages/next-env/issues/97255">#97255</a></li> <li>test: deflake use-cache-size-zero warm reload: <a href="https://github.com/vercel/next.js/tree/HEAD/packages/next-env/issues/97421">#97421</a></li> <li>Scaffolding for concurrentRouterQueue flag: <a href="https://github.com/vercel/next.js/tree/HEAD/packages/next-env/issues/97413">#97413</a></li> <li>Reorganize client router modules: <a href="https://github.com/vercel/next.js/tree/HEAD/packages/next-env/issues/97402">#97402</a></li> </ul> <h3>Credits</h3> <p>Huge thanks to <a href="https://github.com/unstubbable"><code>@unstubbable</code></a>, <a href="https://github.com/gnoff"><code>@gnoff</code></a>, and <a href="https://github.com/acdlite"><code>@acdlite</code></a> for helping!</p> <h2>v16.3.1-canary.20</h2> <h3>Misc Changes</h3> <ul> <li>Wait for back-before-hydration recoveries in the browser: <a href="https://github.com/vercel/next.js/tree/HEAD/packages/next-env/issues/97321">#97321</a></li> <li>Extract metadata resolution primitives: <a href="https://github.com/vercel/next.js/tree/HEAD/packages/next-env/issues/97388">#97388</a></li> <li>test: update React 18 redbox snapshot: <a href="https://github.com/vercel/next.js/tree/HEAD/packages/next-env/issues/97415">#97415</a></li> <li>Turbopack: retain conditions when replacing resolve request keys: <a href="https://github.com/vercel/next.js/tree/HEAD/packages/next-env/issues/97372">#97372</a></li> <li>Remove server route matcher stack: <a href="https://github.com/vercel/next.js/tree/HEAD/packages/next-env/issues/94157">#94157</a></li> </ul> <h3>Credits</h3> <p>Huge thanks to <a href="https://github.com/gaearon"><code>@gaearon</code></a>, <a href="https://github.com/gnoff"><code>@gnoff</code></a>, <a href="https://github.com/timneutkens"><code>@timneutkens</code></a>, and <a href="https://github.com/mischnic"><code>@mischnic</code></a> for helping!</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/next.js/commit/3d32eb870fb4c7009d580a31e2de81a626562270"><code>3d32eb8</code></a> v16.3.1</li> <li><a href="https://github.com/vercel/next.js/commit/d73f5622e226358dcef8cf7a8a373333ff265ae7"><code>d73f562</code></a> v16.3.0</li> <li><a href="https://github.com/vercel/next.js/commit/4fd843fb488f770c5b2023ddc58ff4be4ee81f14"><code>4fd843f</code></a> v16.3.0-canary.107</li> <li><a href="https://github.com/vercel/next.js/commit/9480f7f9ffdc271014d959e7b10d681882eaabb5"><code>9480f7f</code></a> v16.3.0-canary.106</li> <li><a href="https://github.com/vercel/next.js/commit/a8dcd2562f0bde39380d48507ec3fffd86c21e53"><code>a8dcd25</code></a> v16.3.0-canary.105</li> <li><a href="https://github.com/vercel/next.js/commit/38f0cdee4659b1b8f987bc46e3f1aacd12ee5c90"><code>38f0cde</code></a> v16.3.0-canary.104</li> <li><a href="https://github.com/vercel/next.js/commit/f3edea1b06730ce507aeb1b10c8e4f652ca5540d"><code>f3edea1</code></a> v16.3.0-canary.103</li> <li><a href="https://github.com/vercel/next.js/commit/0d5ff0d321424b1f1c55b4466406ddee213d11c7"><code>0d5ff0d</code></a> v16.3.0-canary.102</li> <li><a href="https://github.com/vercel/next.js/commit/cf1e001f40b311f5a4f19775ec9ea4f1d8bdece9"><code>cf1e001</code></a> v16.3.0-canary.101</li> <li><a href="https://github.com/vercel/next.js/commit/267d6b1a17fb4b4b03860c4677e6eeefa65ba2b8"><code>267d6b1</code></a> v16.3.0-canary.100</li> <li>Additional commits viewable in <a href="https://github.com/vercel/next.js/commits/v16.3.1/packages/next-env">compare view</a></li> </ul> </details> <br /> Updates `jose` from 6.2.3 to 6.2.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/panva/jose/releases">jose's releases</a>.</em></p> <blockquote> <h2>v6.2.8</h2> <h3>Fixes</h3> <ul> <li>enforce a single recipient when decrypting dir and ECDH-ES (<a href="https://github.com/panva/jose/commit/505c3833ecae19807e32ad7be50ff4677d31bcad">505c383</a>)</li> <li>reject a non-string "alg" in EmbeddedJWK (<a href="https://github.com/panva/jose/commit/714f8704347ccee8b3d0007e028b6e3f546b443c">714f870</a>)</li> </ul> <h3>Refactor</h3> <ul> <li>index the JWS and JWE registries without a wrapper (<a href="https://github.com/panva/jose/commit/925f3bbbee4b8d5e335774ffbf6ec086e71c3a05">925f3bb</a>)</li> <li>name the "alg" source in unsupported algorithm failures (<a href="https://github.com/panva/jose/commit/1500459c6ffce48fb486c15cb213d24064a26673">1500459</a>)</li> </ul> <h2>v6.2.7</h2> <h3>Fixes</h3> <ul> <li>require own JOSE properties for presence checks (<a href="https://github.com/panva/jose/commit/90ab09c461c9bc82fd24af269616be0907a28bc5">90ab09c</a>)</li> </ul> <h3>Refactor</h3> <ul> <li>reduce bundle size (<a href="https://github.com/panva/jose/commit/767d7f12d025ce54e74f3d38fde3571cc23de5f6">767d7f1</a>)</li> </ul> <h2>v6.2.6</h2> <h3>Fixes</h3> <ul> <li><strong>types:</strong> accept host CryptoKey declarations (<a href="https://github.com/panva/jose/commit/b48a15b39696f49c61136b1d4c40d33585f5df97">b48a15b</a>)</li> </ul> <h2>v6.2.5</h2> <h3>Fixes</h3> <ul> <li>compare claim values for falsy validation options (<a href="https://github.com/panva/jose/commit/eb8695699c75f36c736fb8159a7c7b525be5f6ff">eb86956</a>)</li> <li>forward key management parameters for a single JWE recipient (<a href="https://github.com/panva/jose/commit/2d4f8014e027a1e1ace82bdc864fd0f9b5c66248">2d4f801</a>)</li> <li>handle a zero-length JWE additional authenticated data (<a href="https://github.com/panva/jose/commit/16ca398103c4ab1527c6c6c51621fd963545bd7e">16ca398</a>)</li> <li>reject a generateKeyPair crv option the algorithm does not imply (<a href="https://github.com/panva/jose/commit/76364e9f15f2a7d1c2ff0c260e1e2960cf51e620">76364e9</a>)</li> <li>reject an unencoded payload in the JWS Compact Serialization (<a href="https://github.com/panva/jose/commit/01d053f3b02f3627396d4f70686a58f35cf09862">01d053f</a>)</li> <li>reject characters outside the Base64URL alphabet (<a href="https://github.com/panva/jose/commit/0ebb97158a6eed960ec4d5450abd28336b3c20a4">0ebb971</a>), references <a href="https://redirect.github.com/panva/jose/issues/879">#879</a></li> <li>reject duplicate "crit" values when producing (<a href="https://github.com/panva/jose/commit/31d60e1542141ddecf5b0b87bc894c4bc7e58b1d">31d60e1</a>)</li> <li>reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (<a href="https://github.com/panva/jose/commit/5df3fedcc06d4c52815ec9d0cccc51b508a8291c">5df3fed</a>)</li> <li>reject truncated ASN.1 key data (<a href="https://github.com/panva/jose/commit/7a16c66b9f1a48bcc2aae572da38ed06396a5181">7a16c66</a>)</li> <li>surface non-ASCII token segments as JOSE errors (<a href="https://github.com/panva/jose/commit/194fe11450d6501d0c2141a50e60886157d3f393">194fe11</a>)</li> <li><strong>types:</strong> correct JWK and CryptoKey types (<a href="https://github.com/panva/jose/commit/62a196dc8e6582dc6edd20eab31c6c44b745f996">62a196d</a>)</li> <li><strong>types:</strong> correct key resolver and JWT header types (<a href="https://github.com/panva/jose/commit/e95f8c4086cbb81321497cc7d4b78fa5e88312b6">e95f8c4</a>)</li> <li>validate the clockTolerance and currentDate options are finite (<a href="https://github.com/panva/jose/commit/ab2f18dad46a98ecae3f3ac5b2aae9c839fb9388">ab2f18d</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>correct subpaths and API documentation (<a href="https://github.com/panva/jose/commit/2daec382964be1976d5985e0413a56633becdd74">2daec38</a>)</li> <li>document consumer-supplied type parameters (<a href="https://github.com/panva/jose/commit/9e9f66c86bdf0f4b4ccd1e4b7b84cc85ac9c7883">9e9f66c</a>)</li> <li>stop claiming the JWK "use" parameter is used during import (<a href="https://github.com/panva/jose/commit/47a07b2f95c1b2ecf0308c04f35d4b482689568e">47a07b2</a>)</li> <li>update CHANGELOG.md (<a href="https://github.com/panva/jose/commit/fc51bf56f9f752aaed7d31c60a45e89f24e30d00">fc51bf5</a>)</li> </ul> <h3>Refactor</h3>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/panva/jose/blob/main/CHANGELOG.md">jose's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/panva/jose/compare/v6.2.7...v6.2.8">6.2.8</a> (2026-08-03)</h2> <h3>Fixes</h3> <ul> <li>enforce a single recipient when decrypting dir and ECDH-ES (<a href="https://github.com/panva/jose/commit/505c3833ecae19807e32ad7be50ff4677d31bcad">505c383</a>)</li> <li>reject a non-string "alg" in EmbeddedJWK (<a href="https://github.com/panva/jose/commit/714f8704347ccee8b3d0007e028b6e3f546b443c">714f870</a>)</li> </ul> <h3>Refactor</h3> <ul> <li>index the JWS and JWE registries without a wrapper (<a href="https://github.com/panva/jose/commit/925f3bbbee4b8d5e335774ffbf6ec086e71c3a05">925f3bb</a>)</li> <li>name the "alg" source in unsupported algorithm failures (<a href="https://github.com/panva/jose/commit/1500459c6ffce48fb486c15cb213d24064a26673">1500459</a>)</li> </ul> <h2><a href="https://github.com/panva/jose/compare/v6.2.6...v6.2.7">6.2.7</a> (2026-08-01)</h2> <h3>Fixes</h3> <ul> <li>require own JOSE properties for presence checks (<a href="https://github.com/panva/jose/commit/90ab09c461c9bc82fd24af269616be0907a28bc5">90ab09c</a>)</li> </ul> <h3>Refactor</h3> <ul> <li>reduce bundle size (<a href="https://github.com/panva/jose/commit/767d7f12d025ce54e74f3d38fde3571cc23de5f6">767d7f1</a>)</li> </ul> <h2><a href="https://github.com/panva/jose/compare/v6.2.5...v6.2.6">6.2.6</a> (2026-07-31)</h2> <h3>Fixes</h3> <ul> <li><strong>types:</strong> accept host CryptoKey declarations (<a href="https://github.com/panva/jose/commit/b48a15b39696f49c61136b1d4c40d33585f5df97">b48a15b</a>)</li> </ul> <h2><a href="https://github.com/panva/jose/compare/v6.2.4...v6.2.5">6.2.5</a> (2026-07-29)</h2> <h3>Fixes</h3> <ul> <li>compare claim values for falsy validation options (<a href="https://github.com/panva/jose/commit/eb8695699c75f36c736fb8159a7c7b525be5f6ff">eb86956</a>)</li> <li>forward key management parameters for a single JWE recipient (<a href="https://github.com/panva/jose/commit/2d4f8014e027a1e1ace82bdc864fd0f9b5c66248">2d4f801</a>)</li> <li>handle a zero-length JWE additional authenticated data (<a href="https://github.com/panva/jose/commit/16ca398103c4ab1527c6c6c51621fd963545bd7e">16ca398</a>)</li> <li>reject a generateKeyPair crv option the algorithm does not imply (<a href="https://github.com/panva/jose/commit/76364e9f15f2a7d1c2ff0c260e1e2960cf51e620">76364e9</a>)</li> <li>reject an unencoded payload in the JWS Compact Serialization (<a href="https://github.com/panva/jose/commit/01d053f3b02f3627396d4f70686a58f35cf09862">01d053f</a>)</li> <li>reject characters outside the Base64URL alphabet (<a href="https://github.com/panva/jose/commit/0ebb97158a6eed960ec4d5450abd28336b3c20a4">0ebb971</a>), references <a href="https://redirect.github.com/panva/jose/issues/879">#879</a></li> <li>reject duplicate "crit" values when producing (<a href="https://github.com/panva/jose/commit/31d60e1542141ddecf5b0b87bc894c4bc7e58b1d">31d60e1</a>)</li> <li>reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (<a href="https://github.com/panva/jose/commit/5df3fedcc06d4c52815ec9d0cccc51b508a8291c">5df3fed</a>)</li> <li>reject truncated ASN.1 key data (<a href="https://github.com/panva/jose/commit/7a16c66b9f1a48bcc2aae572da38ed06396a5181">7a16c66</a>)</li> <li>surface non-ASCII token segments as JOSE errors (<a href="https://github.com/panva/jose/commit/194fe11450d6501d0c2141a50e60886157d3f393">194fe11</a>)</li> <li><strong>types:</strong> correct JWK and CryptoKey types (<a href="https://github.com/panva/jose/commit/62a196dc8e6582dc6edd20eab31c6c44b745f996">62a196d</a>)</li> <li><strong>types:</strong> correct key resolver and JWT header types (<a href="https://github.com/panva/jose/commit/e95f8c4086cbb81321497cc7d4b78fa5e88312b6">e95f8c4</a>)</li> <li>validate the clockTolerance and currentDate options are finite (<a href="https://github.com/panva/jose/commit/ab2f18dad46a98ecae3f3ac5b2aae9c839fb9388">ab2f18d</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>correct subpaths and API documentation (<a href="https://github.com/panva/jose/commit/2daec382964be1976d5985e0413a56633becdd74">2daec38</a>)</li> <li>document consumer-supplied type parameters (<a href="https://github.com/panva/jose/commit/9e9f66c86bdf0f4b4ccd1e4b7b84cc85ac9c7883">9e9f66c</a>)</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/panva/jose/commit/8b768eb8d2df7b4e25e1a32441ea770663f6d09f"><code>8b768eb</code></a> chore(release): 6.2.8</li> <li><a href="https://github.com/panva/jose/commit/1500459c6ffce48fb486c15cb213d24064a26673"><code>1500459</code></a> refactor: name the "alg" source in unsupported algorithm failures</li> <li><a href="https://github.com/panva/jose/commit/714f8704347ccee8b3d0007e028b6e3f546b443c"><code>714f870</code></a> fix: reject a non-string "alg" in EmbeddedJWK</li> <li><a href="https://github.com/panva/jose/commit/925f3bbbee4b8d5e335774ffbf6ec086e71c3a05"><code>925f3bb</code></a> refactor: index the JWS and JWE registries without a wrapper</li> <li><a href="https://github.com/panva/jose/commit/505c3833ecae19807e32ad7be50ff4677d31bcad"><code>505c383</code></a> fix: enforce a single recipient when decrypting dir and ECDH-ES</li> <li><a href="https://github.com/panva/jose/commit/514831da55bcb1121c1dadc1ccca42049e6c60b9"><code>514831d</code></a> chore(deps): bump the actions group with 3 updates</li> <li><a href="https://github.com/panva/jose/commit/45965db443b120d174a5114c7c84a75a906e9012"><code>45965db</code></a> chore: cleanup after release</li> <li><a href="https://github.com/panva/jose/commit/60b941f6d57e2bb6f87f690ab7fb4da2c9abf4b0"><code>60b941f</code></a> chore(release): 6.2.7</li> <li><a href="https://github.com/panva/jose/commit/90ab09c461c9bc82fd24af269616be0907a28bc5"><code>90ab09c</code></a> fix: require own JOSE properties for presence checks</li> <li><a href="https://github.com/panva/jose/commit/767d7f12d025ce54e74f3d38fde3571cc23de5f6"><code>767d7f1</code></a> refactor: reduce bundle size</li> <li>Additional commits viewable in <a href="https://github.com/panva/jose/compare/v6.2.3...v6.2.8">compare view</a></li> </ul> </details> <br /> Updates `next` from 16.2.11 to 16.3.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/next.js/releases">next's releases</a>.</em></p> <blockquote> <h2>v16.3.1</h2> <h2>What's Changed</h2> <ul> <li>[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96653">vercel/next.js#96653</a></li> <li>[16.x] [turbopack] Add <code>turbopack_ecmascript</code> and <code>turbopack_wasm</code>'s embeded FS to <code>internal_assets_conditions</code> by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96655">vercel/next.js#96655</a></li> <li>[16.x] [turbopack] Collapse nested promises in the analyzer by <a href="https://github.com/sampoder"><code>@sampoder</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96675">vercel/next.js#96675</a></li> <li>[16.x] fix(next/image): preserve image response after optimization by <a href="https://github.com/styfle"><code>@styfle</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96733">vercel/next.js#96733</a></li> <li>[16.3.x] Default deploy e2e tests to the repo next version by <a href="https://github.com/eps1lon"><code>@eps1lon</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96900">vercel/next.js#96900</a></li> <li>[backport] Bump <code>@swc/helpers</code> by <a href="https://github.com/mischnic"><code>@mischnic</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96885">vercel/next.js#96885</a></li> <li>[backport] [turbopack] Raise registration calls in hoisted modules to the top by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97308">vercel/next.js#97308</a></li> <li>[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97302">vercel/next.js#97302</a></li> <li>[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97317">vercel/next.js#97317</a></li> <li>[backport] Restore the live <code>headers()</code> view of the incoming request by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97311">vercel/next.js#97311</a></li> <li>[backport] Allow literal exports in <code>'use cache'</code> files by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97312">vercel/next.js#97312</a></li> <li>[backport] Keep the dev validation worker alive across HMR updates by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97315">vercel/next.js#97315</a></li> <li>[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97314">vercel/next.js#97314</a></li> <li>[backport] Encode the cache item name built by <code>unstable_cache</code> by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97313">vercel/next.js#97313</a></li> <li>[16.3] [ci] Use OIDC tokens to read private preview builds by <a href="https://github.com/eps1lon"><code>@eps1lon</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97258">vercel/next.js#97258</a></li> <li>[backport] [test] Compile the middleware redirect routes up front in dev by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97328">vercel/next.js#97328</a></li> <li>[backport] Fix Nav Inspector request loop on repeat captures by <a href="https://github.com/acdlite"><code>@acdlite</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97326">vercel/next.js#97326</a></li> <li>[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by <a href="https://github.com/acdlite"><code>@acdlite</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97325">vercel/next.js#97325</a></li> <li>[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by <a href="https://github.com/lukesandberg"><code>@lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97304">vercel/next.js#97304</a></li> <li>[backport] Revert i18n localization change for dynamic Pages API routes (<a href="https://redirect.github.com/vercel/next.js/issues/94905">#94905</a>) by <a href="https://github.com/gaojude"><code>@gaojude</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97330">vercel/next.js#97330</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/vercel/next.js/compare/v16.3.0...v16.3.1">https://github.com/vercel/next.js/compare/v16.3.0...v16.3.1</a></p> <h2>v16.3.1-canary.21</h2> <h3>Misc Changes</h3> <ul> <li>Anchor the async local storage instances to global symbols: <a href="https://redirect.github.com/vercel/next.js/issues/97255">#97255</a></li> <li>test: deflake use-cache-size-zero warm reload: <a href="https://redirect.github.com/vercel/next.js/issues/97421">#97421</a></li> <li>Scaffolding for concurrentRouterQueue flag: <a href="https://redirect.github.com/vercel/next.js/issues/97413">#97413</a></li> <li>Reorganize client router modules: <a href="https://redirect.github.com/vercel/next.js/issues/97402">#97402</a></li> </ul> <h3>Credits</h3> <p>Huge thanks to <a href="https://github.com/unstubbable"><code>@unstubbable</code></a>, <a href="https://github.com/gnoff"><code>@gnoff</code></a>, and <a href="https://github.com/acdlite"><code>@acdlite</code></a> for helping!</p> <h2>v16.3.1-canary.20</h2> <h3>Misc Changes</h3> <ul> <li>Wait for back-before-hydration recoveries in the browser: <a href="https://redirect.github.com/vercel/next.js/issues/97321">#97321</a></li> <li>Extract metadata resolution primitives: <a href="https://redirect.github.com/vercel/next.js/issues/97388">#97388</a></li> <li>test: update React 18 redbox snapshot: <a href="https://redirect.github.com/vercel/next.js/issues/97415">#97415</a></li> <li>Turbopack: retain conditions when replacing resolve request keys: <a href="https://redirect.github.com/vercel/next.js/issues/97372">#97372</a></li> <li>Remove server route matcher stack: <a href="https://redirect.github.com/vercel/next.js/issues/94157">#94157</a></li> </ul> <h3>Credits</h3> <p>Huge thanks to <a href="https://github.com/gaearon"><code>@gaearon</code></a>, <a href="https://github.com/gnoff"><code>@gnoff</code></a>, <a href="https://github.com/timneutkens"><code>@timneutkens</code></a>, and <a href="https://github.com/mischnic"><code>@mischnic</code></a> for helping!</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/next.js/commit/3d32eb870fb4c7009d580a31e2de81a626562270"><code>3d32eb8</code></a> v16.3.1</li> <li><a href="https://github.com/vercel/next.js/commit/2b4b1ec111e76c70a18a59a96ef9e05573d916a3"><code>2b4b1ec</code></a> [backport] Revert i18n localization change for dynamic Pages API routes (<a href="https://redirect.github.com/vercel/next.js/issues/949">#949</a>...</li> <li><a href="https://github.com/vercel/next.js/commit/228df5fd74810d5e38d63d08641972cdec53306c"><code>228df5f</code></a> [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...</li> <li><a href="https://github.com/vercel/next.js/commit/16eab3ac5d41d2e13d772cafcba949dba354d4c0"><code>16eab3a</code></a> [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...</li> <li><a href="https://github.com/vercel/next.js/commit/75548c9a2bc9f7031ec74d3dbf9ea3c51a9f802d"><code>75548c9</code></a> [backport] Fix Nav Inspector request loop on repeat captures (<a href="https://redirect.github.com/vercel/next.js/issues/97326">#97326</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/f6bd714a79dda91b759a97761765639e564617fe"><code>f6bd714</code></a> [backport] [test] Compile the middleware redirect routes up front in dev (<a href="https://redirect.github.com/vercel/next.js/issues/97">#97</a>...</li> <li><a href="https://github.com/vercel/next.js/commit/43c1c60bca17164c201810ce35f791b8ffde083b"><code>43c1c60</code></a> [16.3] [ci] Use OIDC tokens to read private preview builds (<a href="https://redirect.github.com/vercel/next.js/issues/97258">#97258</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/9dbb357dbebffbf90a29a51eee7778b6c77abd68"><code>9dbb357</code></a> [backport] Encode the cache item name built by <code>unstable_cache</code> (<a href="https://redirect.github.com/vercel/next.js/issues/97313">#97313</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/323a17c1b3e12651b71ebd465cac02ab4e50aa30"><code>323a17c</code></a> [backport] Discard only cache entries that predate a tag revalidation, and re...</li> <li><a href="https://github.com/vercel/next.js/commit/6d67f46a4dd558191c539a475b8531ee8a5c16b4"><code>6d67f46</code></a> [backport] Keep the dev validation worker alive across HMR updates (<a href="https://redirect.github.com/vercel/next.js/issues/97315">#97315</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vercel/next.js/compare/v16.2.11...v16.3.1">compare view</a></li> </ul> </details> <br /> Updates `react` from 19.2.7 to 19.2.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react/react/releases">react's releases</a>.</em></p> <blockquote> <h2>19.2.8 (July 21st, 2026)</h2> <h2>React Server Components</h2> <ul> <li>Performance improvements when decoding (<a href="https://redirect.github.com/facebook/react/pull/37087">#37087</a> by <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react/react/commit/1dd4ecbdabf826f527fc9a58c05ea70375b7d170"><code>1dd4ecb</code></a> [FlightReply] Performance improvements when decoding (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/37087">#37087</a>)</li> <li><a href="https://github.com/react/react/commit/b0d2fdb78bdfae075a7fa02ddcebbf25f90952c2"><code>b0d2fdb</code></a> [19.2.x] Update required references to GitHub repo (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/36753">#36753</a>)</li> <li>See full diff in <a href="https://github.com/react/react/commits/v19.2.8/packages/react">compare view</a></li> </ul> </details> <br /> Updates `react-dom` from 19.2.7 to 19.2.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react/react/releases">react-dom's releases</a>.</em></p> <blockquote> <h2>19.2.8 (July 21st, 2026)</h2> <h2>React Server Components</h2> <ul> <li>Performance improvements when decoding (<a href="https://redirect.github.com/facebook/react/pull/37087">#37087</a> by <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react/react/commit/1dd4ecbdabf826f527fc9a58c05ea70375b7d170"><code>1dd4ecb</code></a> [FlightReply] Performance improvements when decoding (<a href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/37087">#37087</a>)</li> <li><a href="https://github.com/react/react/commit/b0d2fdb78bdfae075a7fa02ddcebbf25f90952c2"><code>b0d2fdb</code></a> [19.2.x] Update required references to GitHub repo (<a href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/36753">#36753</a>)</li> <li>See full diff in <a href="https://github.com/react/react/commits/v19.2.8/packages/react-dom">compare view</a></li> </ul> </details> <br /> Updates `@prisma/adapter-pg` from 7.8.0 to 7.9.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prisma/prisma/releases">@prisma/adapter-pg's releases</a>.</em></p> <blockquote> <h2>7.9.1</h2> <p>Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via <code>@prisma/dev</code>).</p> <p>This fixes <a href="https://redirect.github.com/prisma/prisma/issues/29780">prisma/prisma#29780</a>.</p> <p>It does not actually affect <code>@prisma/dev</code> or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.</p> <h2>7.9.0</h2> <p>Today, we are excited to share the <code>7.9.0</code> stable release 🎉</p> <p><strong>🌟 Star this repo for notifications about new releases, bug fixes & features — or <a href="https://pris.ly/x">follow us on X</a>!</strong></p> <h1>Highlights</h1> <h2>ORM</h2> <h3>Tab completions for the Prisma CLI</h3> <p>Typing out CLI commands from memory is now optional. Prisma ships <strong>shell tab completions</strong> for <code>bash</code>, <code>zsh</code>, <code>fish</code>, and PowerShell, covering commands, subcommands, options, flags, and even option values.</p> <p><strong>Setting it up.</strong> Most projects run Prisma through a package manager, so completions are enabled through <code>@bomb.sh/tab</code>'s package-manager integration — install it once, then source the completion for your package manager and shell:</p> <pre lang="bash"><code># 1. Install @bomb.sh/tab globally npm install -g @bomb.sh/tab <h1>2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):</h1> <p>echo 'source <(tab pnpm zsh)' >> ~/.zshrc # zsh<br /> echo 'source <(tab pnpm bash)' >> ~/.bashrc # bash<br /> tab pnpm fish > ~/.config/fish/completions/pnpm.fish # fish<br /> tab pnpm powershell > ~/.tab-pnpm.ps1 # PowerShell (then dot-source it from $PROFILE)<br /> </code></pre></p> <p><code>@bomb.sh/tab</code> delegates to any locally-installed CLI that ships completions, so <code>pnpm prisma <TAB></code>, <code>pnpm exec prisma <TAB></code>, <code>yarn prisma <TAB></code>, and <code>bun x prisma <TAB></code> all complete Prisma's commands, options, and values — no per-project setup. (<code>npx</code> and <code>bunx</code> don't support completion themselves; use <code>npm exec</code> and <code>bun x</code>.)</p> <p>If instead you have Prisma installed globally on your <code>PATH</code>, source its own completion directly: <code>source <(prisma complete zsh)</code> (or the <code>bash</code> / <code>fish</code> / <code>powershell</code> variant).</p> <p>This is built on <a href="https://github.com/bombshell-dev/tab/"><code>@bomb.sh/tab</code></a>, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from <a href="https://github.com/AmirSa12"><code>@AmirSa12</code></a> (<a href="https://redirect.github.com/prisma/prisma/pull/28351">#28351</a>) — thank you!</p> <p><a href="https://github.com/user-attachments/assets/1f916a60-ee4d-40be-bb7d-74035d48ca83">https://github.com/user-attachments/assets/1f916a60-ee4d-40be-bb7d-74035d48ca83</a></p> <h3>Prisma ORM, ready for AI agents</h3> <p>Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.</p> <p><strong>Agent skills installed with <code>prisma init</code></strong> (<a href="https://redirect.github.com/prisma/prisma/pull/29689">#29689</a>)</p> <p><code>prisma init</code> now installs the <a href="https://github.com/prisma/skills">prisma/skills</a> catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with <code>--no-skills</code>.</p> <pre lang="terminal"><code></tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prisma/prisma/commit/35003fd86c574741cb5d93a57b773ee33015a79c"><code>35003fd</code></a> chore(adapter-pg): remove duplicate values parameter (<a href="https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg/issues/29650">#29650</a>)</li> <li><a href="https://github.com/prisma/prisma/commit/d6d9fc9ed341946d45c7d0aba35081a7bd741aa1"><code>d6d9fc9</code></a> chore: remove parameterization from sqlcommenter-query-insights (<a href="https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg/issues/29518">#29518</a>)</li> <li>See full diff in <a href="https://github.com/prisma/prisma/commits/7.9.1/packages/adapter-pg">compare view</a></li> </ul> </details> <br /> Updates `@prisma/client` from 7.8.0 to 7.9.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prisma/prisma/releases">@prisma/client's releases</a>.</em></p> <blockquote> <h2>7.9.1</h2> <p>Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via <code>@prisma/dev</code>).</p> <p>This fixes <a href="https://redirect.github.com/prisma/prisma/issues/29780">prisma/prisma#29780</a>.</p> <p>It does not actually affect <code>@prisma/dev</code> or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.</p> <h2>7.9.0</h2> <p>Today, we are excited to share the <code>7.9.0</code> stable release 🎉</p> <p><strong>🌟 Star this repo for notifications about new releases, bug fixes & features — or <a href="https://pris.ly/x">follow us on X</a>!</strong></p> <h1>Highlights</h1> <h2>ORM</h2> <h3>Tab completions for the Prisma CLI</h3> <p>Typing out CLI commands from memory is now optional. Prisma ships <strong>shell tab completions</strong> for <code>bash</code>, <code>zsh</code>, <code>fish</code>, and PowerShell, covering commands, subcommands, options, flags, and even option values.</p> <p><strong>Setting it up.</strong> Most projects run Prisma through a package manager, so completions are enabled through <code>@bomb.sh/tab</code>'s package-manager integration — install it once, then source the completion for your package manager and shell:</p> <pre lang="bash"><code># 1. Install @bomb.sh/tab globally npm install -g @bomb.sh/tab <h1>2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):</h1> <p>echo 'source <(tab pnpm zsh)' >> ~/.zshrc # zsh<br /> echo 'source <(tab pnpm bash)' >> ~/.bashrc # bash<br /> tab pnpm fish > ~/.config/fish/completions/pnpm.fish # fish<br /> tab pnpm powershell > ~/.tab-pnpm.ps1 # PowerShell (then dot-source it from $PROFILE)<br /> </code></pre></p> <p><code>@bomb.sh/tab</code> delegates to any locally-installed CLI that ships completions, so <code>pnpm prisma <TAB></code>, <code>pnpm exec prisma <TAB></code>, <code>yarn prisma <TAB></code>, and <code>bun x prisma <TAB></code> all complete Prisma's commands, options, and values — no per-project setup. (<code>npx</code> and <code>bunx</code> don't support completion themselves; use <code>npm exec</code> and <code>bun x</code>.)</p> <p>If instead you have Prisma installed globally on your <code>PATH</code>, source its own completion directly: <code>source <(prisma complete zsh)</code> (or the <code>bash</code> / <code>fish</code> / <code>powershell</code> variant).</p> <p>This is built on <a href="https://github.com/bombshell-dev/tab/"><code>@bomb.sh/tab</code></a>, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from <a href="https://github.com/AmirSa12"><code>@AmirSa12</code></a> (<a href="https://redirect.github.com/prisma/prisma/pull/28351">#28351</a>) — thank you!</p> <p><a href="https://github.com/user-attachments/assets/1f916a60-ee4d-40be-bb7d-74035d48ca83">https://github.com/user-attachments/assets/1f916a60-ee4d-40be-bb7d-74035d48ca83</a></p> <h3>Prisma ORM, ready for AI agents</h3> <p>Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.</p> <p><strong>Agent skills installed with <code>prisma init</code></strong> (<a href="https://redirect.github.com/prisma/prisma/pull/29689">#29689</a>)</p> <p><code>prisma init</code> now installs the <a href="https://github.com/prisma/skills">prisma/skills</a> catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with <code>--no-skills</code>.</p> <pre lang="terminal"><code></tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prisma/prisma/commit/b82985029d44349849dfbb4990bb19278178ee61"><code>b829850</code></a> ci: upgrade pnpm to 11 to restore pnpm audit (<a href="https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29725">#29725</a>)</li> <li><a href="https://github.com/prisma/prisma/commit/280fd56f28c53f42fb2dfbc190c3d35d046e19fa"><code>280fd56</code></a> fix(client): mask each quoted string in maskQuery independently (<a href="https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29723">#29723</a>)</li> <li><a href="https://github.com/prisma/prisma/commit/4da377494cc27bc0784d3629df21e94989abd153"><code>4da3774</code></a> fix(client): reject invalid raw dates (<a href="https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29697">#29697</a>)</li> <li><a href="https://github.com/prisma/prisma/commit/a7cec97b204e734cf30049ee7a39c9b61da085de"><code>a7cec97</code></a> chore(deps): update engines to 7.9.0-1.e922089b7d7502aff4249d5da3420f6fa55fc6...</li> <li><a href="https://github.com/prisma/prisma/commit/58f8439d020d70bf7cc9a77cca62dfc95d9ddc0f"><code>58f8439</code></a> fix(client): pin pg-protocol in prisma-client-imports-postgres e2e test (<a href="https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29687">#29687</a>)</li> <li><a href="https://github.com/prisma/prisma/commit/918cf5d72c1ba85ed0bb85c50c34d483b02a19e1"><code>918cf5d</code></a> fix(client): improve adapter-related Prisma 7 error messages (<a href="https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29624">#29624</a>)</li> <li><a href="https://github.com/prisma/prisma/commit/93da6ea2dcd65b8b4b9d58daf2e2821f1a4e9320"><code>93da6ea</code></a> ci(e2e): shard client e2e suite across 3 jobs to fix chronic timeouts (<a href="https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29619">#29619</a>)</li> <li><a href="https://github.com/prisma/prisma/commit/3937779e617c743966ebb50901d013167dd9171e"><code>3937779</code></a> fix: remove duplicate 'the the' in test comments (<a href="https://github.com/prisma/prisma/tree/HEAD/packages/client/issues/29610">#29610</a>)</li> <li><a href="https://github.com/prisma/prisma/commit/fda8fbce23b3af6b1651bd539da09e62c863ed6e"><code>fda8fbc</code></a> chore(deps): bump <code>@prisma/dev</code> to 0.24.9 (resolves hono GHSA-92pp-h63x-v22m) (...</li> <li><a href="https://github.com/prisma/prisma/commit/0036baf8c9bb0b53e18c04fb27de4acf0535a306"><code>0036baf</code></a> fix(client-engine-runtime): surface unmapped driver errors as user-facing P20...</li> <li>See full diff in <a href="https://github.com/prisma/prisma/commits/7.9.1/packages/client">compare view</a></li> </ul> </details> <br /> Updates `ioredis` from 5.11.1 to 6.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/redis/ioredis/releases">ioredis's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h1><a href="https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0">6.0.0</a> (2026-07-31)</h1> <ul> <li>Add RESP3 (<a href="https://redirect.github.com/redis/ioredis/issues/2127">#2127</a>) (<a href="https://github.com/redis/ioredis/commit/5d0862e078c1252470872fa3a96d7435bb34f078">5d0862e</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>clear stale socket timeout on reconnect (<a href="https://redirect.github.com/redis/ioredis/issues/2148">#2148</a>) (<a href="https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac">6455dbe</a>)</li> <li><strong>cluster:</strong> recreate stale connection on circular MOVED (<a href="https://redirect.github.com/redis/ioredis/issues/2135">#2135</a>) (<a href="https://github.com/redis/ioredis/commit/08c89671790d5121853e51ed3465dc6b248e8803">08c8967</a>)</li> <li><strong>cluster:</strong> validate MOVED slot to prevent Array.prototype pollution (<a href="https://redirect.github.com/redis/ioredis/issues/2151">#2151</a>) (<a href="https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc">9618206</a>), closes <a href="https://redirect.github.com/redis/ioredis/issues/1267">#1267</a></li> <li><strong>command:</strong> serialize large integer arguments in decimal notation (<a href="https://redirect.github.com/redis/ioredis/issues/2136">#2136</a>) (<a href="https://github.com/redis/ioredis/commit/09b8d04b62481e68521359a43cb3638e09e92565">09b8d04</a>)</li> <li><strong>redis:</strong> keep reconnecting when connection closes during client setup (<a href="https://redirect.github.com/redis/ioredis/issues/2099">#2099</a>) (<a href="https://redirect.github.com/redis/ioredis/issues/2123">#2123</a>) (<a href="https://github.com/redis/ioredis/commit/f9a66bc0d9022bb21c479ef5580c65e544aa6629">f9a66bc</a>)</li> <li><strong>sentinel:</strong> preserve zero preferred slave priority (<a href="https://redirect.github.com/redis/ioredis/issues/2129">#2129</a>) (<a href="https://github.com/redis/ioredis/commit/a3f9f2dded99f55a59713a8e8d3e395c015d51c1">a3f9f2d</a>)</li> <li><strong>tracing:</strong> redact values for GETSET and PSETEX (<a href="https://redirect.github.com/redis/ioredis/issues/2134">#2134</a>) (<a href="https://github.com/redis/ioredis/commit/832765dbe8c13d23b57392bdd3d88a0a37131732">832765d</a>)</li> <li><strong>types:</strong> export ScanStreamOptions, RedisStatus and ClusterStatus (<a href="https://redirect.github.com/redis/ioredis/issues/2158">#2158</a>) (<a href="https://github.com/redis/ioredis/commit/cf3bf7111bc3de71c6556d1d4897868ab0ec827f">cf3bf71</a>)</li> </ul> <h3>Features</h3> <ul> <li>add LMOVEM and BLMOVEM command support (<a href="https://redirect.github.com/redis/ioredis/issues/2144">#2144</a>) (<a href="https://github.com/redis/ioredis/commit/c26af46dc91874b1da58aec9da337822a4851d97">c26af46</a>)</li> <li>add Redis 8.10 set cardinality commands (<a href="https://redirect.github.com/redis/ioredis/issues/2143">#2143</a>) (<a href="https://github.com/redis/ioredis/commit/301099b77d059dfc47ec591e7f011790ed475a84">301099b</a>)</li> <li>himport managed fieldsets (<a href="https://redirect.github.com/redis/ioredis/issues/2159">#2159</a>) (<a href="https://github.com/redis/ioredis/commit/729f174fca093641d1788480369d00b64c6cc901">729f174</a>)</li> <li>improve default connection resilience (<a href="https://redirect.github.com/redis/ioredis/issues/2160">#2160</a>) (<a href="https://github.com/redis/ioredis/commit/6d0716ef9b3c7c5676c8d866388075e927f6b8b7">6d0716e</a>)</li> <li>support MAXCOUNT and MAXSIZE for stream reads (<a href="https://redirect.github.com/redis/ioredis/issues/2142">#2142</a>) (<a href="https://github.com/redis/ioredis/commit/ae5e41b231d9c1e6d6289848f58355f01f5ba6ec">ae5e41b</a>)</li> </ul> <h3>BREAKING CHANGES</h3> <ul> <li>ioredis now requires Node.js 20 or newer and uses RESP3 by default. Set <code>protocol: 2</code> to retain the v5 wire protocol.</li> </ul> <h2>v6.0.0-beta.1</h2> <h1><a href="https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0-beta.1">6.0.0-beta.1</a> (2026-07-29)</h1> <ul> <li>Add RESP3 (<a href="https://redirect.github.com/redis/ioredis/issues/2127">#2127</a>) (<a href="https://github.com/redis/ioredis/commit/5d0862e078c1252470872fa3a96d7435bb34f078">5d0862e</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>clear stale socket timeout on reconnect (<a href="https://redirect.github.com/redis/ioredis/issues/2148">#2148</a>) (<a href="https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac">6455dbe</a>)</li> <li><strong>cluster:</strong> recreate stale connection on circular MOVED (<a href="https://redirect.github.com/redis/ioredis/issues/2135">#2135</a>) (<a href="https://github.com/redis/ioredis/commit/08c89671790d5121853e51ed3465dc6b248e8803">08c8967</a>)</li> <li><strong>cluster:</strong> validate MOVED slot to prevent Array.prototype pollution (<a href="https://redirect.github.com/redis/ioredis/issues/2151">#2151</a>) (<a href="https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc">9618206</a>), closes <a href="https://redirect.github.com/redis/ioredis/issues/1267">#1267</a></li> <li><strong>command:</strong> serialize large integer arguments in decimal notation (<a href="https://redirect.github.com/redis/ioredis/issues/2136">#2136</a>) (<a href="https://github.com/redis/ioredis/commit/09b8d04b62481e68521359a43cb3638e09e92565">09b8d04</a>)</li> <li><strong>redis:</strong> keep reconnecting when connection closes during client setup (<a href="https://redirect.github.com/redis/ioredis/issues/2099">#2099</a>) (<a href="https://redirect.github.com/redis/ioredis/issues/2123">#2123</a>) (<a href="https://github.com/redis/ioredis/commit/f9a66bc0d9022bb21c479ef5580c65e544aa6629">f9a66bc</a>)</li> <li><strong>sentinel:</strong> preserve zero preferred slave priority (<a href="https://redirect.github.com/redis/ioredis/issues/2129">#2129</a>) (<a href="https://github.com/redis/ioredis/commit/a3f9f2dded99f55a59713a8e8d3e395c015d51c1">a3f9f2d</a>)</li> <li><strong>tracing:</strong> redact values for GETSET and PSETEX (<a href="https://redirect.github.com/redis/ioredis/issues/2134">#2134</a>) (<a href="https://github.com/redis/ioredis/commit/832765dbe8c13d23b57392bdd3d88a0a37131732">832765d</a>)</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/redis/ioredis/blob/main/CHANGELOG.md">ioredis's changelog</a>.</em></p> <blockquote> <h1><a href="https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0">6.0.0</a> (2026-07-31)</h1> <ul> <li>Add RESP3 (<a href="https://redirect.github.com/redis/ioredis/issues/2127">#2127</a>) (<a href="https://github.com/redis/ioredis/commit/5d0862e078c1252470872fa3a96d7435bb34f078">5d0862e</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>clear stale socket timeout on reconnect (<a href="https://redirect.github.com/redis/ioredis/issues/2148">#2148</a>) (<a href="https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac">6455dbe</a>)</li> <li><strong>cluster:</strong> recreate stale connection on circular MOVED (<a href="https://redirect.github.com/redis/ioredis/issues/2135">#2135</a>) (<a href="https://github.com/redis/ioredis/commit/08c89671790d5121853e51ed3465dc6b248e8803">08c8967</a>)</li> <li><strong>cluster:</strong> validate MOVED slot to prevent Array.prototype pollution (<a href="https://redirect.github.com/redis/ioredis/issues/2151">#2151</a>) (<a href="https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc">9618206</a>), closes <a href="https://redirect.github.com/redis/ioredis/issues/1267">#1267</a></li> <li><strong>command:</strong> serialize large integer arguments in decimal notation (<a href="https://redirect.github.com/redis/ioredis/issues/2136">#2136</a>) (<a href="https://github.com/redis/ioredis/commit/09b8d04b62481e68521359a43cb3638e09e92565">09b8d04</a>)</li> <li><strong>redis:</strong> keep reconnecting when connection closes during client setup (<a href="https://redirect.github.com/redis/ioredis/issues/2099">#2099</a>) (<a href="https://redirect.github.com/redis/ioredis/issues/2123">#2123</a>) (<a href="https://github.com/redis/ioredis/commit/f9a66bc0d9022bb21c479ef5580c65e544aa6629">f9a66bc</a>)</li> <li><strong>sentinel:</strong> preserve zero preferred slave priority (<a href="https://redirect.github.com/redis/ioredis/issues/2129">#2129</a>) (<a href="https://github.com/redis/ioredis/commit/a3f9f2dded99f55a59713a8e8d3e395c015d51c1">a3f9f2d</a>)</li> <li><strong>tracing:</strong> redact values for GETSET and PSETEX (<a href="https://redirect.github.com/redis/ioredis/issues/2134">#2134</a>) (<a href="https://github.com/redis/ioredis/commit/832765dbe8c13d23b57392bdd3d88a0a37131732">832765d</a>)</li> <li><strong>types:</strong> export ScanStreamOptions, RedisStatus and ClusterStatus (<a href="https://redirect.github.com/redis/ioredis/issues/2158">#2158</a>) (<a href="https://github.com/redis/ioredis/commit/cf3bf7111bc3de71c6556d1d4897868ab0ec827f">cf3bf71</a>)</li> </ul> <h3>Features</h3> <ul> <li>add LMOVEM and BLMOVEM command support (<a href="https://redirect.github.com/redis/ioredis/issues/2144">#2144</a>) (<a href="https://github.com/redis/ioredis/commit/c26af46dc91874b1da58aec9da337822a4851d97">c26af46</a>)</li> <li>add Redis 8.10 set cardinality commands (<a href="https://redirect.github.com/redis/ioredis/issues/2143">#2143</a>) (<a href="https://github.com/redis/ioredis/commit/301099b77d059dfc47ec591e7f011790ed475a84">301099b</a>)</li> <li>himport managed fieldsets (<a href="https://redirect.github.com/redis/ioredis/issues/2159">#2159</a>) (<a href="https://github.com/redis/ioredis/commit/729f174fca093641d1788480369d00b64c6cc901">729f174</a>)</li> <li>improve default connection resilience (<a href="https://redirect.github.com/redis/ioredis/issues/2160">#2160</a>) (<a href="https://github.com/redis/ioredis/commit/6d0716ef9b3c7c5676c8d866388075e927f6b8b7">6d0716e</a>)</li> <li>support MAXCOUNT and MAXSIZE for stream reads (<a href="https://redirect.github.com/redis/ioredis/issues/2142">#2142</a>) (<a href="https://github.com/redis/ioredis/commit/ae5e41b231d9c1e6d6289848f58355f01f5ba6ec">ae5e41b</a>)</li> </ul> <h3>BREAKING CHANGES</h3> <ul> <li>ioredis now requires Node.js 20 or newer and uses RESP3 by default. Set <code>protocol: 2</code> to retain the v5 wire protocol.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/redis/ioredis/commit/8ed2946504a36ae9b1e186b9dccc56afcd046d78"><code>8ed2946</code></a> chore(release): 6.0.0 [skip ci]</li> <li><a href="https://github.com/redis/ioredis/commit/3b410f80681d006ebef160493b85ce575aea0d8c"><code>3b410f8</code></a> docs: clarify managed HIMPORT fieldset behavior (<a href="https://redirect.github.com/redis/ioredis/issues/2161">#2161</a>)</li> <li><a href="https://github.com/redis/ioredis/commit/729f174fca093641d1788480369d00b64c6cc901"><code>729f174</code></a> feat: himport managed fieldsets (<a href="https://redirect.github.com/redis/ioredis/issues/2159">#2159</a>)</li> <li><a href="https://github.com/redis/ioredis/commit/6d0716ef9b3c7c5676c8d866388075e927f6b8b7"><code>6d0716e</code></a> feat: improve default connection resilience (<a href="https://redirect.github.com/redis/ioredis/issues/2160">#2160</a>)</li> <li><a href="https://github.com/redis/ioredis/commit/cf3bf7111bc3de71c6556d1d4897868ab0ec827f"><code>cf3bf71</code></a> fix(types): export ScanStreamOptions, RedisStatus and ClusterStatus (<a href="https://redirect.github.com/redis/ioredis/issues/2158">#2158</a>)</li> <li><a href="https://github.com/redis/ioredis/commit/aac171b02ee0fd0b959087e379eda97024b41ac6"><code>aac171b</code></a> ci: update Redis test image (<a href="https://redirect.github.com/redis/ioredis/issues/2156">#2156</a>)</li> <li><a href="https://github.com/redis/ioredis/commit/807bb1c8660fd47d27a2f19a9a5c08aabec1ca43"><code>807bb1c</code></a> chore(release): update repository URL (<a href="https://redirect.github.com/redis/ioredis/issues/2154">#2154</a>)</li> <li><a href="https://github.com/redis/ioredis/commit/6c889e75df8488246dcc234ff8b0e83dc9f78f75"><code>6c889e7</code></a> docs: add security policy (<a href="https://redirect.github.com/redis/ioredis/issues/2153">#2153</a>)</li> <li><a href="https://github.com/redis/ioredis/commit/6455dbe6c7dbbd801aae112c8be935aa2896d7ac"><code>6455dbe</code></a> fix: clear stale socket timeout on reconnect (<a href="https://redirect.github.com/redis/ioredis/issues/2148">#2148</a>)</li> <li><a href="https://github.com/redis/ioredis/commit/9618206b93d7022e9fb76f300503a53e1aefb4bc"><code>9618206</code></a> fix(cluster): validate MOVED slot to prevent Array.prototype pollution (<a href="https://redirect.github.com/redis/ioredis/issues/2151">#2151</a>)</li> <li>Additional commits viewable in <a href="https://github.com/redis/ioredis/compare/v5.11.1...v6.0.0">compare view</a></li> </ul> </details> <br /> Updates `pg` from 8.22.0 to 8.23.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md">pg's changelog</a>.</em></p> <blockquote> <h2>pg@8.23.0</h2> <ul> <li>Add support for query <a href="https://redirect.github.com/brianc/node-postgres/pull/3652"><code>pipelineing</code></a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/brianc/node-postgres/commit/df274d1ba9ad9d11a8f1079314faeafde7208207"><code>df274d1</code></a> Publish</li> <li><a href="https://github.com/brianc/node-postgres/commit/eb19d0fe6d7da11e7f1c5e73e4026350e42f9156"><code>eb19d0f</code></a> Add opt-in query pipelining (<a href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3652">#3652</a>)</li> <li>See full diff in <a href="https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg">compare view</a></li> </ul> </details> <br />

Gitchegumi (Migrated from github.com) approved these changes

2026-08-16 20:24:17 -05:00

No reviewers

Gitchegumi

No milestone

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

gitchegumi/GitchAlerts!151

No description provided.

Rows
Columns