Skip to content

chore(deps): bump appwrite from 16.1.0 to 29.1.0 - #68

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/appwrite-29.1.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/appwrite-29.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps appwrite from 16.1.0 to 29.1.0.

Release notes

Sourced from appwrite's releases.

29.1.0

What's Changed

  • Added: account.listMemberships to list the current user's team memberships
  • Added: createQuery on databases, tablesDB and documentsDB to send list queries in the request body
  • Added: optional bundleId and environment on account.createPushTarget to route APNs tokens
  • Added: per-service ES modules and a minified script on sdk.appwrite.io/web/<version>/
  • Updated: dist/iife/sdk.js is minified, so CDN script tags load about half the bytes
  • Updated: requires Node.js 20 or later to build

Full Changelog: appwrite/sdk-for-web@29.0.0...29.1.0

29.0.0

What's Changed

  • Breaking: requests send X-Appwrite-Response-Format: 2.5.0; responses follow the 2.5 shapes
  • Breaking: missing response fields are filled with their documented defaults
  • Breaking: oauth2 resource params now take string[] on authorize, authorizePost, createDeviceAuthorization, createPAR and createToken
  • Breaking: nullable model fields are typed T | null, such as Locale.city, Presence.status and Execution.scheduledAt
  • Added: Push service with subscribe, unsubscribe, onNotificationOpened and close for web push
  • Added: Topic helper
  • Added: Query aggregates (count, countDistinct, sum, avg, min, max and more), groupBy, having, distinct, joins, relationship, covers, spatialEquals and page
  • Added: Query.builder() to chain queries; realtime subscriptions accept a builder for queries
  • Added: ExecutionTrigger.Email
  • Updated: nullable request params accept null, such as account.createEmailPasswordSession duration
  • Fixed: list and object defaults filled into a response are copied per model, and object defaults are {} instead of []

28.3.0

What's Changed

  • Added: analytics.createEvent in a new Analytics service to send tracking events
  • Added: Tracking helper that auto-tracks pageviews, outbound links, downloads, scroll depth and engagement time
  • Added: avatars.updatePhoto and avatars.deletePhoto to manage the user's custom profile photo, and the Account model
  • Added: Webflow to the OAuthProvider enum
  • Added: optional state on account.createOAuth2Session and account.createOAuth2Token, returned unchanged on the success and failure URLs
  • Added: optional duration on account.createEmailPasswordSession to set the session length
  • Added: optional current on account.deleteSessions to keep the current session signed in
  • Added: optional membershipId on teams.createMembership
  • Added: optional total on account.listSessions, the locale list methods and listTransactions

Full Changelog: appwrite/sdk-for-web@28.2.0...28.3.0

28.2.0

What's Changed

  • Added: account passkey methods listPasskeys, createPasskey, getPasskey, updatePasskey, deletePasskey and updatePasskeyVerification
  • Added: account.createPasskeyToken and account.updatePasskeyToken for passkey sign-in
  • Added: Passkey, PasskeyList, PasskeyChallenge and TokenSecret models

Full Changelog: appwrite/sdk-for-web@28.1.0...28.2.0

... (truncated)

Changelog

Sourced from appwrite's changelog.

29.1.0

  • Added: account.listMemberships to list the current user's team memberships
  • Added: createQuery on databases, tablesDB and documentsDB to send list queries in the request body
  • Added: optional bundleId and environment on account.createPushTarget to route APNs tokens
  • Added: per-service ES modules and a minified script on sdk.appwrite.io/web/<version>/
  • Updated: dist/iife/sdk.js is minified, so CDN script tags load about half the bytes
  • Updated: requires Node.js 20 or later to build

29.0.0

  • Breaking: requests send X-Appwrite-Response-Format: 2.5.0; responses follow the 2.5 shapes
  • Breaking: missing response fields are filled with their documented defaults
  • Breaking: oauth2 resource params now take string[] on authorize, authorizePost, createDeviceAuthorization, createPAR and createToken
  • Breaking: nullable model fields are typed T | null, such as Locale.city, Presence.status and Execution.scheduledAt
  • Added: Push service with subscribe, unsubscribe, onNotificationOpened and close for web push
  • Added: Topic helper
  • Added: Query aggregates (count, countDistinct, sum, avg, min, max and more), groupBy, having, distinct, joins, relationship, covers, spatialEquals and page
  • Added: Query.builder() to chain queries; realtime subscriptions accept a builder for queries
  • Added: ExecutionTrigger.Email
  • Updated: nullable request params accept null, such as account.createEmailPasswordSession duration
  • Fixed: list and object defaults filled into a response are copied per model, and object defaults are {} instead of []

28.3.0

  • Added: analytics.createEvent in a new Analytics service to send tracking events
  • Added: Tracking helper that auto-tracks pageviews, outbound links, downloads, scroll depth and engagement time
  • Added: avatars.updatePhoto and avatars.deletePhoto to manage the user's custom profile photo, and the Account model
  • Added: Webflow to the OAuthProvider enum
  • Added: optional state on account.createOAuth2Session and account.createOAuth2Token, returned unchanged on the success and failure URLs
  • Added: optional duration on account.createEmailPasswordSession to set the session length
  • Added: optional current on account.deleteSessions to keep the current session signed in
  • Added: optional membershipId on teams.createMembership
  • Added: optional total on account.listSessions, the locale list methods and listTransactions

28.2.0

  • Added: account passkey methods listPasskeys, createPasskey, getPasskey, updatePasskey, deletePasskey and updatePasskeyVerification
  • Added: account.createPasskeyToken and account.updatePasskeyToken for passkey sign-in
  • Added: Passkey, PasskeyList, PasskeyChallenge and TokenSecret models

28.1.0

  • Added: Apps service to create and manage OAuth2 apps, their secrets, keys, and installations
  • Added: Oauth2 service for authorization, consent, device, PAR, and token flows
  • Added: App, AppSecret, AppKey, AppScope and Oauth2* response models

28.0.0

  • Breaking: removed Account.listLogs and the Log, LogList models

... (truncated)

Commits
  • 8ba5db3 Merge pull request #192 from appwrite/dev
  • 43c953e chore: update Web SDK to 29.1.0
  • 0fb781e Merge remote-tracking branch 'origin/dev' into dev
  • 1699d10 Merge pull request #191 from appwrite/dev
  • 66fd0c8 docs: create tablesDB in the JavaScript typing example
  • 73da3f7 docs: refresh README
  • 4110020 Merge commit '03267bc28324fc3c186d4e76683b19cd90022adf' into dev
  • af41861 Merge pull request #190 from appwrite/dev
  • 03267bc feat: SDK update for the 2.5.x majors
  • 188db0c Merge remote-tracking branch 'origin/dev' into dev
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for appwrite since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026
@hansi-codes

hansi-codes Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

🟡 Tier B · Needs changes before merging

The lockfile makes the repository's npm ci CI step fail, so the dependency update needs correction before merging.

Updates the browser Appwrite SDK dependency from 16.1.0 to 29.1.0. Refreshes the npm lockfile with the SDK's new transitive dependencies.

Verdict New comments Fixed Still open
🛑 Changes requested 1 0 0
Finding Where
🟠 Restore nitro's missing lru-cache lock entry package-lock.json:2275
Fix with agent prompt
### Issue 1
package-lock.json:2275
**Restore nitro's missing lru-cache lock entry**

The lockfile refresh drops `node_modules/nitro/node_modules/lru-cache@11.5.3` while nitro's nested `unstorage` still declares an optional `lru-cache@^11.2.6` peer. Running `npm ci` (the command used by `.github/workflows/ci.yml`) fails with `Missing: lru-cache@11.5.3 from lock file`, preventing the CI build from installing dependencies.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.
📂 Walkthrough · 2
File Change
package.json Bumps the direct appwrite dependency to 29.1.0.
package-lock.json Locks Appwrite 29.1.0 and its transitive dependencies.

Reviewed 0938675 · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.

@hansi-codes hansi-codes Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Tier S · Looks good to merge. Summary

Bumps [appwrite](https://github.com/appwrite/sdk-for-web) from 16.1.0 to 29.1.0.
- [Release notes](https://github.com/appwrite/sdk-for-web/releases)
- [Changelog](https://github.com/appwrite/sdk-for-web/blob/main/CHANGELOG.md)
- [Commits](appwrite/sdk-for-web@16.1.0...29.1.0)

---
updated-dependencies:
- dependency-name: appwrite
  dependency-version: 29.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/appwrite-29.1.0 branch from 2ca6d3c to 0938675 Compare November 2, 2026 10:23

@hansi-codes hansi-codes Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Tier B · 1 blocking finding to address. Summary

Comment thread package-lock.json
"node": "20 || >=22"
}
},
"node_modules/nitro/node_modules/unstorage": {

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Restore nitro's missing lru-cache lock entry

The lockfile refresh drops node_modules/nitro/node_modules/lru-cache@11.5.3 while nitro's nested unstorage still declares an optional lru-cache@^11.2.6 peer. Running npm ci (the command used by .github/workflows/ci.yml) fails with Missing: lru-cache@11.5.3 from lock file, preventing the CI build from installing dependencies.

Prompt To Fix With AI
This is a comment left during a code review.
Path: package-lock.json
Line: 2275

Comment:
**Restore nitro's missing lru-cache lock entry**

The lockfile refresh drops `node_modules/nitro/node_modules/lru-cache@11.5.3` while nitro's nested `unstorage` still declares an optional `lru-cache@^11.2.6` peer. Running `npm ci` (the command used by `.github/workflows/ci.yml`) fails with `Missing: lru-cache@11.5.3 from lock file`, preventing the CI build from installing dependencies.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

🟠 Major · bug · Reply if this doesn't apply.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants