[dependabot]

Bumps appwrite from 21.5.0 to 29.1.0.

Release notes

Sourced from appwrite's releases.

29.1.0

What's Changed

• Added: account.listMemberships to list the current user's team memberships
• Added: createQuery on databases, tablesDB and documentsDB to send list queries in the request body
• Added: optional bundleId and environment on account.createPushTarget to route APNs tokens
• Added: per-service ES modules and a minified script on sdk.appwrite.io/web/<version>/
• Updated: dist/iife/sdk.js is minified, so CDN script tags load about half the bytes
• Updated: requires Node.js 20 or later to build

Full Changelog: appwrite/sdk-for-web@29.0.0...29.1.0

29.0.0

What's Changed

• Breaking: requests send X-Appwrite-Response-Format: 2.5.0; responses follow the 2.5 shapes
• Breaking: missing response fields are filled with their documented defaults
• Breaking: oauth2 resource params now take string[] on authorize, authorizePost, createDeviceAuthorization, createPAR and createToken
• Breaking: nullable model fields are typed T | null, such as Locale.city, Presence.status and Execution.scheduledAt
• Added: Push service with subscribe, unsubscribe, onNotificationOpened and close for web push
• Added: Topic helper
• Added: Query aggregates (count, countDistinct, sum, avg, min, max and more), groupBy, having, distinct, joins, relationship, covers, spatialEquals and page
• Added: Query.builder() to chain queries; realtime subscriptions accept a builder for queries
• Added: ExecutionTrigger.Email
• Updated: nullable request params accept null, such as account.createEmailPasswordSession duration
• Fixed: list and object defaults filled into a response are copied per model, and object defaults are {} instead of []

28.3.0

What's Changed

• Added: analytics.createEvent in a new Analytics service to send tracking events
• Added: Tracking helper that auto-tracks pageviews, outbound links, downloads, scroll depth and engagement time
• Added: avatars.updatePhoto and avatars.deletePhoto to manage the user's custom profile photo, and the Account model
• Added: Webflow to the OAuthProvider enum
• Added: optional state on account.createOAuth2Session and account.createOAuth2Token, returned unchanged on the success and failure URLs
• Added: optional duration on account.createEmailPasswordSession to set the session length
• Added: optional current on account.deleteSessions to keep the current session signed in
• Added: optional membershipId on teams.createMembership
• Added: optional total on account.listSessions, the locale list methods and listTransactions

Full Changelog: appwrite/sdk-for-web@28.2.0...28.3.0

28.2.0

What's Changed

• Added: account passkey methods listPasskeys, createPasskey, getPasskey, updatePasskey, deletePasskey and updatePasskeyVerification
• Added: account.createPasskeyToken and account.updatePasskeyToken for passkey sign-in
• Added: Passkey, PasskeyList, PasskeyChallenge and TokenSecret models

Full Changelog: appwrite/sdk-for-web@28.1.0...28.2.0

... (truncated)

Changelog

Sourced from appwrite's changelog.

29.1.0

• Added: account.listMemberships to list the current user's team memberships
• Added: createQuery on databases, tablesDB and documentsDB to send list queries in the request body
• Added: optional bundleId and environment on account.createPushTarget to route APNs tokens
• Added: per-service ES modules and a minified script on sdk.appwrite.io/web/<version>/
• Updated: dist/iife/sdk.js is minified, so CDN script tags load about half the bytes
• Updated: requires Node.js 20 or later to build

29.0.0

• Breaking: requests send X-Appwrite-Response-Format: 2.5.0; responses follow the 2.5 shapes
• Breaking: missing response fields are filled with their documented defaults
• Breaking: oauth2 resource params now take string[] on authorize, authorizePost, createDeviceAuthorization, createPAR and createToken
• Breaking: nullable model fields are typed T | null, such as Locale.city, Presence.status and Execution.scheduledAt
• Added: Push service with subscribe, unsubscribe, onNotificationOpened and close for web push
• Added: Topic helper
• Added: Query aggregates (count, countDistinct, sum, avg, min, max and more), groupBy, having, distinct, joins, relationship, covers, spatialEquals and page
• Added: Query.builder() to chain queries; realtime subscriptions accept a builder for queries
• Added: ExecutionTrigger.Email
• Updated: nullable request params accept null, such as account.createEmailPasswordSession duration
• Fixed: list and object defaults filled into a response are copied per model, and object defaults are {} instead of []

28.3.0

• Added: analytics.createEvent in a new Analytics service to send tracking events
• Added: Tracking helper that auto-tracks pageviews, outbound links, downloads, scroll depth and engagement time
• Added: avatars.updatePhoto and avatars.deletePhoto to manage the user's custom profile photo, and the Account model
• Added: Webflow to the OAuthProvider enum
• Added: optional state on account.createOAuth2Session and account.createOAuth2Token, returned unchanged on the success and failure URLs
• Added: optional duration on account.createEmailPasswordSession to set the session length
• Added: optional current on account.deleteSessions to keep the current session signed in
• Added: optional membershipId on teams.createMembership
• Added: optional total on account.listSessions, the locale list methods and listTransactions

28.2.0

• Added: account passkey methods listPasskeys, createPasskey, getPasskey, updatePasskey, deletePasskey and updatePasskeyVerification
• Added: account.createPasskeyToken and account.updatePasskeyToken for passkey sign-in
• Added: Passkey, PasskeyList, PasskeyChallenge and TokenSecret models

28.1.0

• Added: Apps service to create and manage OAuth2 apps, their secrets, keys, and installations
• Added: Oauth2 service for authorization, consent, device, PAR, and token flows
• Added: App, AppSecret, AppKey, AppScope and Oauth2* response models

28.0.0

• Breaking: removed Account.listLogs and the Log, LogList models

... (truncated)

Commits

• 8ba5db3 Merge pull request #192 from appwrite/dev
• 43c953e chore: update Web SDK to 29.1.0
• 0fb781e Merge remote-tracking branch 'origin/dev' into dev
• 1699d10 Merge pull request #191 from appwrite/dev
• 66fd0c8 docs: create tablesDB in the JavaScript typing example
• 73da3f7 docs: refresh README
• 4110020 Merge commit '03267bc28324fc3c186d4e76683b19cd90022adf' into dev
• af41861 Merge pull request #190 from appwrite/dev
• 03267bc feat: SDK update for the 2.5.x majors
• 188db0c Merge remote-tracking branch 'origin/dev' into dev
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for appwrite since your current version.

[hansi-codes]

🟡 Tier B · Needs changes before merging

The previously reported TypeScript failure remains open: npx tsc --noEmit still fails at app/index.tsx:73.

The dependency update raises Appwrite to 29.1.0 and synchronizes the manifest and npm lockfile. The lockfile now includes Appwrite's added runtime dependencies, including MQTT and its supporting packages.

Verdict	New comments	Fixed	Still open
💬 Commented	0	0	1

Fix with agent prompt

### Issue 1
package-lock.json:5908
**Appwrite 29 breaks the project's TypeScript check**

In 29.1.0, `Client.ping()` is typed as `Promise<unknown>`; 21.5.0 declared `Promise<string>`. The existing assignment at `app/index.tsx:73` passes that value to `Log.response: string`, so `npx tsc --noEmit` fails with TS2322 after `npm ci` and the CI typecheck cannot pass until the value is handled.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

📂 Walkthrough · 2

File	Change
package.json	Updates the declared Appwrite dependency to 29.1.0.
package-lock.json	Locks Appwrite 29.1.0 and its additional runtime dependency tree.

⏳ Still open from earlier reviews · 1

• 🟠 Appwrite 29 breaks the project's TypeScript check · package-lock.json:5908

---

_{Reviewed 845a36b · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.}

[hansi-codes]

🟢 Tier S · Looks good to merge. Summary

[hansi-codes]

🟡 Tier B · 1 blocking finding to address. Summary

[hansi-codes]

Appwrite 29 breaks the project's TypeScript check

In 29.1.0, Client.ping() is typed as Promise<unknown>; 21.5.0 declared Promise<string>. The existing assignment at app/index.tsx:73 passes that value to Log.response: string, so npx tsc --noEmit fails with TS2322 after npm ci and the CI typecheck cannot pass until the value is handled.

Prompt To Fix With AI

This is a comment left during a code review.
Path: package-lock.json
Line: 5908

Comment:
**Appwrite 29 breaks the project's TypeScript check**

In 29.1.0, `Client.ping()` is typed as `Promise<unknown>`; 21.5.0 declared `Promise<string>`. The existing assignment at `app/index.tsx:73` passes that value to `Log.response: string`, so `npx tsc --noEmit` fails with TS2322 after `npm ci` and the CI typecheck cannot pass until the value is handled.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

_{🟠 Major · bug · Reply if this doesn't apply.}