Skip to content

chore(deps): bump the all-non-major group across 7 directories with 18 updates - #278

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-non-major-319e92d928
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-non-major-319e92d928

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-non-major group with 18 updates in the / directory:

Package From To
lint-staged 17.5.1 17.6.0
oxlint 1.83.0 1.86.0
oxlint-tsgolint 7.0.2002 7.0.2003
@modelcontextprotocol/sdk 1.30.0 1.31.0
hono 4.13.8 4.13.10
@cloudflare/vitest-plugin 1.1.13 1.3.1
@cloudflare/workers-types 5.20260919.1 5.20260928.1
@types/node 26.6.2 26.6.3
@better-auth/core 1.7.5 1.7.6
@zenstackhq/better-auth 3.9.4 3.9.6
@zenstackhq/cli 3.9.4 3.9.6
@zenstackhq/orm 3.9.4 3.9.6
@zenstackhq/schema 3.9.4 3.9.6
better-auth 1.7.5 1.7.6
wrangler 4.135.0 4.143.0
@cloudflare/vite-plugin 1.56.0 1.62.0
jsdom 30.1.0 30.1.1
vite 8.3.0 8.3.1

Bumps the all-non-major group with 1 update in the /packages/core directory: @cloudflare/workers-types.
Bumps the all-non-major group with 1 update in the /packages/feature-flags directory: @cloudflare/workers-types.
Bumps the all-non-major group with 1 update in the /packages/framework directory: @cloudflare/workers-types.
Bumps the all-non-major group with 1 update in the /packages/inertia directory: @cloudflare/workers-types.
Bumps the all-non-major group with 1 update in the /packages/inertia-modal directory: @cloudflare/workers-types.
Bumps the all-non-major group with 1 update in the /packages/testing directory: @cloudflare/workers-types.

Updates lint-staged from 17.5.1 to 17.6.0

Release notes

Sourced from lint-staged's releases.

v17.6.0

Minor Changes

  • #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

    import { defineConfig } from 'lint-staged/config'
    export default defineConfig({
    '*': {
    title: 'Fail if PDF files are committed',
    task: async (filepaths, { log }) => {
    const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
    if (pdfFiles.length > 0) {
    log('PDF files should not be committed: %s', pdfFiles)
    throw new Error('Failed')
    }
    },
    },
    })

  • #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

    If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

  • #1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

  • #1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

    import { defineConfig } from 'lint-staged/config'
    export default defineConfig({
    '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
    })

  • #1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

  • #1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

Changelog

Sourced from lint-staged's changelog.

17.6.0

Minor Changes

  • #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

    import { defineConfig } from 'lint-staged/config'
    export default defineConfig({
    '*': {
    title: 'Fail if PDF files are committed',
    task: async (filepaths, { log }) => {
    const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
    if (pdfFiles.length > 0) {
    log('PDF files should not be committed: %s', pdfFiles)
    throw new Error('Failed')
    }
    },
    },
    })

  • #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

    If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

  • #1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

  • #1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

    import { defineConfig } from 'lint-staged/config'
    export default defineConfig({
    '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
    })

  • #1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

  • #1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

Commits
  • 48f9f4e Merge pull request #1857 from lint-staged/changeset-release/main
  • 16b2e21 chore(changeset): release
  • 195f156 docs: improve changeset
  • 0ba6261 fix: create hidden directory only when required
  • 66ac2de docs: fixes to changesets
  • 80af8d7 Merge pull request #1863 from lint-staged/fix-issues
  • e433488 fix: handle task editing a symlinked file to a regular file, and --fail-on-ch...
  • e5019b3 fix: handle trailing newlines when detecting changed files
  • 74efec8 ci: run Cygwin and MSYS2 tests on Node.js 26
  • 655b7dc fix: use TypeScript types instead of JSDoc
  • Additional commits viewable in compare view

Updates oxlint from 1.83.0 to 1.86.0

Release notes

Sourced from oxlint's releases.

oxlint v1.86.0

🚀 Features

  • 9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)
  • e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

🐛 Bug Fixes

  • 8306aa4 linter/typescript/no-unnecessary-parameter-property-assignment: Account for parameter property reassignment (#26955) (camc314)
  • 42dfbb5 linter/eslint/one-var: Keep declare when splitting declarations (#27081) (Cheolhee Lee)
  • 2ba7e33 linter/eslint/require-await: Count await using as an await (#27080) (Cheolhee Lee)
  • 611e4ed linter/plugins: Include executing selectors in JS plugin rule timings (#27111) (overlookmotel)
  • 2cac66f react-compiler: Handle recursive function expressions (#26796) (Brennan Butler)
  • e996e6c react-compiler: Treat zero-argument new Date as impure (#26894) (Boshen)
  • 571cfa3 oxlint: Skip type-aware lint rules in type-check-only mode (#27076) (camc314)
  • d0b2462 oxlint: Skip undefined children in CFG walker (#27075) (camc314)
  • 5186328 parser: Handle HTML comment values (#22933) (Boshen)
  • 0b630e8 linter/typescript/unified-signatures: Align rule with upstream (#26956) (camc314)
  • ebb22f1 linter/node/no-exports-assign: Change category from style to suspicious (#26555) (Bartok)
  • cce28a0 linter/import/no-duplicates: Distinguish import attributes (#26936) (camc314)
  • feb733b linter/unicorn/prefer-spread: Stop checking string split calls (#26935) (camc314)
  • 929e154 linter/eslint/no-unused-vars: Honor ignore patterns inside array rest bindings (#26923) (camc314)
  • 5bdb9b8 linter/eslint/no-unused-vars: Recognize consumed update expressions (#26782) (camc314)
  • 5c05bef linter/eslint/prefer-const: Ignore embedded assignments (#26920) (camc314)

⚡ Performance

  • ded4c29 linter/eslint/no-unused-vars: Skip sequence checks when absent (#26921) (camc314)

oxlint v1.85.0

🚀 Features

  • 415b742 oxlint,oxfmt: Do not discover nested config in Vite+ mode (#26763) (leaysgur)
Changelog

Sourced from oxlint's changelog.

[1.86.0] - 2026-09-28

🚀 Features

  • 9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)
  • e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

[1.82.0] - 2026-09-07

🚀 Features

  • 6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)

[1.81.0] - 2026-08-31

📚 Documentation

  • d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

  • 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

  • 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
  • aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
  • 36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)
  • beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)
  • 4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)
  • 285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)
  • 4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)

[1.78.0] - 2026-08-10

🚀 Features

  • ccb8fe8 linter/jsdoc: Implement no-blank-blocks rule (#25207) (Mikhail Baev)
  • d4a897c linter/eslint: Implement one-var rule (#24470) (Cole Ellison)
  • 5ab9340 linter/jsx-a11y/anchor-has-content: Add options to match eslint (#24571) (Cole Ellison)

🐛 Bug Fixes

  • 9573937 linter/typescript: Validate ban-ts-comment description_format (#25320) (Mikhail Baev)

[1.77.0] - 2026-08-03

🐛 Bug Fixes

... (truncated)

Commits
  • 2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
  • 9d80eed feat(linter/react/only-export-components): support allowCompoundComponents ...
  • e05b155 feat(linter): add typescript/no-generated-empty-object-type (#26958)
  • 88a0096 chore(oxlint): require tsgolint 7.0.2003 (#27021)
  • 288d8cc release(apps): oxlint v1.85.0 && oxfmt v0.70.0 (#26903)
  • f02a64a release(apps): oxlint v1.84.0 && oxfmt v0.69.0 (#26874)
  • See full diff in compare view

Updates oxlint-tsgolint from 7.0.2002 to 7.0.2003

Release notes

Sourced from oxlint-tsgolint's releases.

v7.0.2003

What's Changed

New Contributors

Full Changelog: oxc-project/tsgolint@v7.0.2002...v7.0.2003

Commits
  • eb93391 perf: add experimental checker scheduling modes (#1240)
  • e3a79a5 refactor: extract checker workload scheduling (#1241)
  • 1fdaa0d perf(no-unnecessary-type-assertion): reject incompatible types first (#1181)
  • 364b239 perf: speed up headless file-to-program assignment (#1239)
  • 52500be perf: avoid singleton union type allocations in hot rules (#1237)
  • 22b148a fix(no-unnecessary-condition): check nested logical expressions in truthiness...
  • 356609f fix(no-deprecated): detect deprecated aliases in object shorthand (#1235)
  • cbf3909 fix(no-useless-default-assignment): handle tuples with rest elements (#1223)
  • 7bd5c11 fix: match package specifiers on whole path components (#1225)
  • 6f25883 fix: preserve expression syntax when removing await (#1233)
  • Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.31.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.31.0

Upgrade notes

  • Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.
  • Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.1...1.31.0

1.30.1

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.0...1.30.1

Commits
  • 4b0051f chore: bump version to 1.31.0 (#2890)
  • 51ad4f0 [v1.x] Bind stored OAuth credentials to the authorization server that issued ...
  • 289ac2c chore: bump version to 1.30.1 (#2848)
  • 12b4256 fix(auth): preserve resource URI without trailing slash (#1968) (#1972)
  • a9f6eb7 [v1.x] fix(server): read HTTP request bodies with a size limit and bound JSON...
  • See full diff in compare view

Updates hono from 4.13.8 to 4.13.10

Release notes

Sourced from hono's releases.

v4.13.10

Adapters are now separate packages

The runtime adapters are now published as their own packages: @hono/bun, @hono/deno, @hono/cloudflare-workers, @hono/aws-lambda, @hono/lambda-edge, @hono/netlify, @hono/vercel, and @hono/service-worker. @hono/deno is also on JSR.

hono/<adapter> still works in v4 but is deprecated and will be removed in v5. Migrating is an import change:

- import { serveStatic } from 'hono/bun'
+ import { serveStatic } from '@hono/bun'

hono/cloudflare-pages is deprecated without a replacement package; Cloudflare recommends Workers with static assets.

What's Changed

Full Changelog: honojs/hono@v4.13.9...v4.13.10

v4.13.9

What's Changed

  • fix(jsx): replace Suspense and ErrorBoundary content across newlines in honojs/hono#5380
  • fix(accepts): match media types and language tags case-insensitively in honojs/hono#5376
  • fix(linear-router): don't match an empty path segment as a param in honojs/hono#5373
  • fix(pretty-json): don't break responses with unparseable JSON bodies in honojs/hono#5377
  • fix(jwt): throw JwtTokenInvalid when the signature is not valid base64url in honojs/hono#5379
  • fix(aws-lambda): treat binary +xml archive media types as binary in honojs/hono#5424
  • fix(aws-lambda): preserve empty query parameters in honojs/hono#5292
  • fix(lambda-edge): sync content type detection with aws-lambda in honojs/hono#5426
  • fix(lambda-edge): fail with a descriptive error on a malformed event in honojs/hono#5358

Full Changelog: honojs/hono@v4.13.8...v4.13.9

Commits
  • f3d5e88 4.13.10
  • 645ddd6 test: move adapter runtime tests into adapters/* (#5466)
  • 1c6e060 feat(adapters/deno): publish to JSR (#5465)
  • b877827 feat(adapters): add the seven adapters as workspace packages (#5463)
  • 4d9f2a2 chore(adapters/bun): ship ESM only (#5462)
  • fc2343d feat(adapters): add @​hono/bun as a workspace package (#5447)
  • d7fb697 chore(deps): upgrade vite-plus to 1.0.0-rc.1 (#5459)
  • 52f6c7e ci: remove empty step left in cr.yml by the pnpm migration (#5456)
  • f69c1a5 chore: stop editorconfig-checker from checking Markdown indent size (#5455)
  • ee0622e chore: convert build scripts into plugins (#5448)
  • Additional commits viewable in compare view

Updates @cloudflare/vitest-plugin from 1.1.13 to 1.3.1

Release notes

Sourced from @​cloudflare/vitest-plugin's releases.

@​cloudflare/vitest-plugin@​1.3.1

Patch Changes

  • Updated dependencies [7f0734c]:
    • wrangler@4.143.0

@​cloudflare/vitest-plugin@​1.3.0

Minor Changes

  • #15856 4c2993b Thanks @​Naapperas! - Support Workflows declared in exports on ctx.exports in local development

    A Workflow declared in a Worker's exports is now available on ctx.exports in wrangler dev, the Vite plugin and the Vitest plugin, with the same API as a Workflow binding:

    const instance = await ctx.exports.MyWorkflow.create({
      params: { name: "World" },
    });

    ctx.exports and workflows bindings with the same Workflow name share their instances, including instances created before the Workflow was declared in exports. Two Workers can't export the same Workflow name, and a binding to an exported Workflow must refer to the Worker and class that export it. getPlatformProxy() ignores Workflows declared in exports, since it doesn't run the Worker's code.

    wrangler workflows commands run with --local also work with Workflows declared only in exports, without a workflows binding.

    In the Vitest plugin, introspectWorkflow() and introspectWorkflowInstance() still need a Workflow binding, and now explain how to add one when passed a Workflow from ctx.exports. Instances created through ctx.exports are introspected too. A workflows binding whose script_name is the Worker's own name now resolves to the Worker itself again.

Patch Changes

@​cloudflare/vitest-plugin@​1.2.8

Patch Changes

@​cloudflare/vitest-plugin@​1.2.7

Patch Changes

Changelog

Sourced from @​cloudflare/vitest-plugin's changelog.

1.3.1

Patch Changes

  • Updated dependencies [7f0734c]:
    • wrangler@4.143.0

1.3.0

Minor Changes

  • #15856 4c2993b Thanks @​Naapperas! - Support Workflows declared in exports on ctx.exports in local development

    A Workflow declared in a Worker's exports is now available on ctx.exports in wrangler dev, the Vite plugin and the Vitest plugin, with the same API as a Workflow binding:

    const instance = await ctx.exports.MyWorkflow.create({
      params: { name: "World" },
    });

    ctx.exports and workflows bindings with the same Workflow name share their instances, including instances created before the Workflow was declared in exports. Two Workers can't export the same Workflow name, and a binding to an exported Workflow must refer to the Worker and class that export it. getPlatformProxy() ignores Workflows declared in exports, since it doesn't run the Worker's code.

    wrangler workflows commands run with --local also work with Workflows declared only in exports, without a workflows binding.

    In the Vitest plugin, introspectWorkflow() and introspectWorkflowInstance() still need a Workflow binding, and now explain how to add one when passed a Workflow from ctx.exports. Instances created through ctx.exports are introspected too. A workflows binding whose script_name is the Worker's own name now resolves to the Worker itself again.

Patch Changes

1.2.8

Patch Changes

1.2.7

Patch Changes

1.2.6

... (truncated)

Commits

Updates @cloudflare/workers-types from 5.20260919.1 to 5.20260928.1

Commits

Updates @types/node from 26.6.2 to 26.6.3

Commits

Updates @better-auth/core from 1.7.5 to 1.7.6

Release notes

Sourced from @​better-auth/core's releases.

v1.7.6

better-auth

Features

  • Added support for a bannedUserMessage function that receives the banned user, allowing sign-in errors to include details such as the ban reason. (#11325)
  • Added Vercel BotID as a captcha provider for protected authentication routes. (#11016)

Bug Fixes

  • Passwords over maxPasswordLength are now rejected with PASSWORD_TOO_LONG before hashing or verification. (#11324)
  • Fixed React hydration mismatches when session or plugin auth queries resolve before streamed components hydrate. (#11316)
  • Prevented older auth-query responses from overwriting newer results when requests overlap. (#11376)
  • Fixed model identity when a custom model name matches another schema key. (#11333)
  • Fixed schema validation for Cloudflare D1 when the Kysely dialect cannot introspect the database. (#11366)
  • Fixed social account linking through the OAuth Proxy plugin. (#11268)

For detailed changes, see CHANGELOG

@better-auth/kysely-adapter

Bug Fixes

  • Fixed model identity when a custom model name matches another schema key. (#11333)
  • Fixed schema validation for SQLite-generated primary keys, including INTEGER PRIMARY KEY columns without AUTOINCREMENT. (#11374)
  • Fixed schema validation for Cloudflare D1 when the Kysely dialect cannot introspect the database. (#11366)

For detailed changes, see CHANGELOG

@better-auth/prisma-adapter

Bug Fixes

  • Fixed model identity when a custom model name matches another schema key. (#11333)
  • Fixed schema validation for capitalized custom Prisma model names. (#11319)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Fixed model identity when a custom model name matches another schema key. (#11333)

For detailed changes, see CHANGELOG

@better-auth/drizzle-adapter

Bug Fixes

... (truncated)

Changelog

Sourced from @​better-auth/core's changelog.

1.7.6

Patch Changes

  • #11333 631ac29 Thanks @​bytaesu! - Preserve logical model identity when a custom model name matches another schema key.
Commits

Updates @zenstackhq/better-auth from 3.9.4 to 3.9.6

Release notes

Sourced from @​zenstackhq/better-auth's releases.

ZenStack Release v3.9.6

What's Changed

Fixes

  • Fixed access policy pre-create checks mistaking Json field values for Kysely operation nodes. A payload with a top-level kind key (e.g., { kind: "artwork" }) used to fail with Invariant failed: expecting a ValueNode when the model has a non-constant create policy #2791 - by @​BetterAndBetterII
  • Fixed enum array fields (TestTag[]) with @map-ed values on PostgreSQL: select, insert, and update used to fail with malformed array literal #2818 - by @​DoctorFTB
  • Improved createMany performance under access policies: when the create rule depends only on auth() and not on the row being created, the per-row policy check is now skipped instead of issuing one query per row #2841 - by @​bgowers

Full Changelog: zenstackhq/zenstack@v3.9.5...v3.9.6

ZenStack Release v3.9.5

What's Changed

Fixes

  • Fixed access policy rules that traverse a self relation. Relation subqueries referenced the related table by its bare model name, so when the relation pointed back to the same model, the inner table shadowed the outer row and conditions like parent.tenantId != this.tenantId were evaluated entirely against the inner table - as a result may incorrectly enforce policy rules.

Additional notes

If you use access policies over self relations, we recommend upgrading. Rules that previously appeared to work may have been passing unconditionally; after upgrading they ...

Description has been truncated

…8 updates

Bumps the all-non-major group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.5.1` | `17.6.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.83.0` | `1.86.0` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `7.0.2002` | `7.0.2003` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.30.0` | `1.31.0` |
| [hono](https://github.com/honojs/hono) | `4.13.8` | `4.13.10` |
| [@cloudflare/vitest-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vitest-plugin) | `1.1.13` | `1.3.1` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260919.1` | `5.20260928.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.3` |
| [@better-auth/core](https://github.com/better-auth/better-auth/tree/HEAD/packages/core) | `1.7.5` | `1.7.6` |
| [@zenstackhq/better-auth](https://github.com/zenstackhq/zenstack) | `3.9.4` | `3.9.6` |
| [@zenstackhq/cli](https://github.com/zenstackhq/zenstack) | `3.9.4` | `3.9.6` |
| [@zenstackhq/orm](https://github.com/zenstackhq/zenstack) | `3.9.4` | `3.9.6` |
| [@zenstackhq/schema](https://github.com/zenstackhq/zenstack) | `3.9.4` | `3.9.6` |
| [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.7.5` | `1.7.6` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.135.0` | `4.143.0` |
| [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) | `1.56.0` | `1.62.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.0` | `30.1.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.1` |

Bumps the all-non-major group with 1 update in the /packages/core directory: [@cloudflare/workers-types](https://github.com/cloudflare/workerd).
Bumps the all-non-major group with 1 update in the /packages/feature-flags directory: [@cloudflare/workers-types](https://github.com/cloudflare/workerd).
Bumps the all-non-major group with 1 update in the /packages/framework directory: [@cloudflare/workers-types](https://github.com/cloudflare/workerd).
Bumps the all-non-major group with 1 update in the /packages/inertia directory: [@cloudflare/workers-types](https://github.com/cloudflare/workerd).
Bumps the all-non-major group with 1 update in the /packages/inertia-modal directory: [@cloudflare/workers-types](https://github.com/cloudflare/workerd).
Bumps the all-non-major group with 1 update in the /packages/testing directory: [@cloudflare/workers-types](https://github.com/cloudflare/workerd).


Updates `lint-staged` from 17.5.1 to 17.6.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.5.1...v17.6.0)

Updates `oxlint` from 1.83.0 to 1.86.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.86.0/npm/oxlint)

Updates `oxlint-tsgolint` from 7.0.2002 to 7.0.2003
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](oxc-project/tsgolint@v7.0.2002...v7.0.2003)

Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.31.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.31.0)

Updates `hono` from 4.13.8 to 4.13.10
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.8...v4.13.10)

Updates `@cloudflare/vitest-plugin` from 1.1.13 to 1.3.1
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vitest-plugin/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vitest-plugin@1.3.1/packages/vitest-plugin)

Updates `@cloudflare/workers-types` from 5.20260919.1 to 5.20260928.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@types/node` from 26.6.2 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@better-auth/core` from 1.7.5 to 1.7.6
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.6/packages/core)

Updates `@zenstackhq/better-auth` from 3.9.4 to 3.9.6
- [Release notes](https://github.com/zenstackhq/zenstack/releases)
- [Commits](zenstackhq/zenstack@v3.9.4...v3.9.6)

Updates `@zenstackhq/cli` from 3.9.4 to 3.9.6
- [Release notes](https://github.com/zenstackhq/zenstack/releases)
- [Commits](zenstackhq/zenstack@v3.9.4...v3.9.6)

Updates `@zenstackhq/orm` from 3.9.4 to 3.9.6
- [Release notes](https://github.com/zenstackhq/zenstack/releases)
- [Commits](zenstackhq/zenstack@v3.9.4...v3.9.6)

Updates `@zenstackhq/schema` from 3.9.4 to 3.9.6
- [Release notes](https://github.com/zenstackhq/zenstack/releases)
- [Commits](zenstackhq/zenstack@v3.9.4...v3.9.6)

Updates `better-auth` from 1.7.5 to 1.7.6
- [Release notes](https://github.com/better-auth/better-auth/releases)
- [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md)
- [Commits](https://github.com/better-auth/better-auth/commits/v1.7.6/packages/better-auth)

Updates `wrangler` from 4.135.0 to 4.143.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.143.0/packages/wrangler)

Updates `@cloudflare/vite-plugin` from 1.56.0 to 1.62.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@1.62.0/packages/vite-plugin-cloudflare)

Updates `jsdom` from 30.1.0 to 30.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.0...v30.1.1)

Updates `vite` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite)

Updates `@cloudflare/workers-types` from 5.20260919.1 to 5.20260928.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@cloudflare/workers-types` from 5.20260919.1 to 5.20260928.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@cloudflare/workers-types` from 5.20260919.1 to 5.20260928.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@cloudflare/workers-types` from 5.20260919.1 to 5.20260928.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@cloudflare/workers-types` from 5.20260919.1 to 5.20260928.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@cloudflare/workers-types` from 5.20260919.1 to 5.20260928.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

---
updated-dependencies:
- dependency-name: lint-staged
  dependency-version: 17.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: oxlint
  dependency-version: 1.86.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: oxlint-tsgolint
  dependency-version: 7.0.2003
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-non-major
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: hono
  dependency-version: 4.13.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-non-major
- dependency-name: "@cloudflare/vitest-plugin"
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260928.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-non-major
- dependency-name: "@better-auth/core"
  dependency-version: 1.7.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-non-major
- dependency-name: "@zenstackhq/better-auth"
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-non-major
- dependency-name: "@zenstackhq/cli"
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-non-major
- dependency-name: "@zenstackhq/orm"
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-non-major
- dependency-name: "@zenstackhq/schema"
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-non-major
- dependency-name: better-auth
  dependency-version: 1.7.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-non-major
- dependency-name: wrangler
  dependency-version: 4.143.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: "@cloudflare/vite-plugin"
  dependency-version: 1.62.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: jsdom
  dependency-version: 30.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-non-major
- dependency-name: vite
  dependency-version: 8.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-non-major
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260928.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260928.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260928.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260928.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260928.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-non-major
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260928.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-non-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 1, 2026
@coderabbitai

coderabbitai Bot commented Oct 1, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: strataljs/stratal/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: e630e28c-2956-481c-89af-7b8bb41bb6fa

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@adesege adesege left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Benchmark

Details
Benchmark suite Current: bb317d4 Previous: 33a9b0d Ratio
test/benchmarks/request-response.bench.ts > Request/Response > simple GET - 200 35037.8174529699 ops/sec (±1.30%) 33571.82240506 ops/sec (±1.61%) 0.96
test/benchmarks/request-response.bench.ts > Request/Response > GET with route params - 200 41021.702674698965 ops/sec (±1.58%) 42296.20545659609 ops/sec (±0.81%) 1.03
test/benchmarks/request-response.bench.ts > Request/Response > POST with JSON body - 201 16197.380806526242 ops/sec (±1.28%) 16198.962164891995 ops/sec (±1.14%) 1.00
test/benchmarks/request-response.bench.ts > Request/Response > POST invalid body - validation error 4090.865373943402 ops/sec (±3.47%) 4357.429603749932 ops/sec (±3.06%) 1.07
test/benchmarks/request-response.bench.ts > Request/Response > GET unknown route - 404 6299.253236127499 ops/sec (±1.23%) 6242.12389221152 ops/sec (±1.41%) 0.99
src/__benchmarks__/application.bench.ts > Application - Bootstrap > constructor only 372194.42785076017 ops/sec (±0.46%) 376141.31090912863 ops/sec (±0.45%) 1.01
src/__benchmarks__/application.bench.ts > Application - Bootstrap > full initialize() 39630.94169533387 ops/sec (±0.89%) 37908.79798783361 ops/sec (±1.08%) 0.96
src/__benchmarks__/application.bench.ts > Application - Service Resolution > resolve service after bootstrap 39614.35449894069 ops/sec (±2.66%) 43880.587834925194 ops/sec (±1.35%) 1.11
src/__benchmarks__/application.bench.ts > Application - Multi-Controller Bootstrap > initialize with 5 controllers (8 routes) 42406.88529261897 ops/sec (±0.76%) 42475.946310407635 ops/sec (±0.78%) 1.00
src/__benchmarks__/application.bench.ts > Application - Multi-Controller Bootstrap > resolve service after multi-controller bootstrap 42349.13963487887 ops/sec (±0.89%) 41587.68346141239 ops/sec (±0.83%) 0.98
src/di/__benchmarks__/container.bench.ts > Container - Registration > register class provider 4187769.1121923043 ops/sec (±1.58%) 4153235.8754029158 ops/sec (±0.21%) 0.99
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerSingleton 4064040.3499979875 ops/sec (±2.29%) 4015988.369507708 ops/sec (±1.68%) 0.99
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerValue 4537004.847604732 ops/sec (±1.67%) 4484785.076131648 ops/sec (±2.09%) 0.99
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerFactory 4512249.395361175 ops/sec (±0.93%) 4646900.299235859 ops/sec (±0.73%) 1.03
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve class token 1344105.7204249254 ops/sec (±0.67%) 1399508.2590134072 ops/sec (±0.43%) 1.04
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve symbol token 1411752.5967156384 ops/sec (±1.56%) 1411490.9696135977 ops/sec (±1.33%) 1.00
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve value token 1967798.4100183034 ops/sec (±0.16%) 1991883.3626032965 ops/sec (±1.43%) 1.01
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve singleton token 1340793.6111680383 ops/sec (±0.46%) 1367437.3080772788 ops/sec (±0.43%) 1.02
src/di/__benchmarks__/container.bench.ts > Container - Resolution > isRegistered check 2013178.4729086272 ops/sec (±0.30%) 2032039.9674906908 ops/sec (±0.13%) 1.01
src/di/__benchmarks__/container.bench.ts > Container - Conditional Binding > when().use().give().otherwise() 2274837.1765095657 ops/sec (±3.40%) 2456045.051979611 ops/sec (±2.98%) 1.08
src/di/__benchmarks__/container.bench.ts > Container - Conditional Binding > when() with cached predicate 2473460.565387995 ops/sec (±0.68%) 2468959.111174536 ops/sec (±1.74%) 1.00
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register single module 1254758.2609050693 ops/sec (±0.65%) 1288106.5547444636 ops/sec (±0.75%) 1.03
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register 3-level module tree 672120.3331415346 ops/sec (±0.50%) 670542.5811318906 ops/sec (±0.40%) 1.00
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register dynamic module (forRoot) 1146270.9270900355 ops/sec (±0.41%) 1112476.506823362 ops/sec (±0.42%) 0.97
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Initialization > initialize with lifecycle hooks 810651.828141682 ops/sec (±0.51%) 788390.5430542759 ops/sec (±2.12%) 0.97
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllControllers 589869.8560717691 ops/sec (±0.59%) 588907.9281531516 ops/sec (±0.48%) 1.00
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllConsumers 554884.737082358 ops/sec (±0.53%) 571604.366355137 ops/sec (±1.70%) 1.03
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllJobs 575651.329942022 ops/sec (±3.47%) 610619.7166722866 ops/sec (±0.54%) 1.06
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register controller with 5 OpenAPI routes 16787.772895008493 ops/sec (±7.45%) 16860.786008618084 ops/sec (±8.67%) 1.00
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register single-route controller 84933.22676789873 ops/sec (±8.90%) 81099.36045043867 ops/sec (±8.84%) 0.95
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register multiple controllers 18486.881026065035 ops/sec (±7.02%) 19125.92487336735 ops/sec (±6.68%) 1.03
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 10 routes by specificity 334085.46345872025 ops/sec (±0.49%) 334136.87529524195 ops/sec (±0.63%) 1.00
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 50 routes by specificity 60183.580520447584 ops/sec (±0.45%) 61051.61134544165 ops/sec (±0.50%) 1.01
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 100 routes by specificity 30898.584474049163 ops/sec (±0.48%) 30273.584404234512 ops/sec (±0.43%) 0.98
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - static path 12426426.409420973 ops/sec (±0.12%) 11702814.993550757 ops/sec (±0.12%) 0.94
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - single param 1756684.257367061 ops/sec (±0.54%) 1750608.2003759728 ops/sec (±1.98%) 1.00
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - multiple params 1231581.4211566974 ops/sec (±0.91%) 1371956.2603574654 ops/sec (±0.40%) 1.11

This comment was automatically generated by workflow using github-action-benchmark.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant