chore(deps): bump the major group across 2 directories with 2 updates by dependabot[bot] · Pull Request #279 · strataljs/stratal

dependabot · 2026-10-01T19:16:52Z

Bumps the major group with 2 updates in the / directory: better-call and msw.
Bumps the major group with 1 update in the /packages/framework directory: better-call.

Updates better-call from 1.4.0 to 2.0.6

Release notes

Sourced from better-call's releases.

v2.0.6

   🐞 Bug Fixes

Include README in published package - by @bytaesu in better-auth/better-call#170 (1c850)

    View changes on GitHub

v2.0.5

   🐞 Bug Fixes

router: Only strip basePath when it is a leading prefix - by @Bekacru in better-auth/better-call#149 (de595)

    View changes on GitHub

v2.0.4

   🚀 Features

context: Expose responseHeaders on EndpointContext - by @bytaesu in better-auth/better-call#131 (97837)

   🐞 Bug Fixes

Return HTTP 400 for empty JSON body - by @ping-maxwell and @bytaesu in better-auth/better-call#130 (3cb8c)

client:

Correct return types when throw option is true - by @Iulian-Dragomirescu in better-auth/better-call#127 (31e5f)

node:

Move res.send() outside streaming loop - by @SUVAJIT-KARMAKAR in better-auth/better-call#124 (394fd)

to-response:

Only mark true cycles in safeStringify - by @bytaesu in better-auth/better-call#140 (f5e54)

Preserve multiple Set-Cookie when merging headers - by @bytaesu and @rastislavcore in better-auth/better-call#137 (faf74)

    View changes on GitHub

v2.0.3

   🐞 Bug Fixes

Strip request-only headers from toResponse() to prevent Content-Length mismatch - by @thefotios in better-auth/better-call#120 (d619e)

Make Endpoint properties readonly and fix OpenAPI schema types - by @gustavovalverde in better-auth/better-call#122 (c4903)

    View changes on GitHub

v2.0.2

No significant changes

    View changes on GitHub

v2.0.1

   🐞 Bug Fixes

Make kAPIErrorHeaderSymbol configurable to prevent TypeError on nested middleware - by @Daymannovaes in better-auth/better-call#114 (9787b)

... (truncated)

Commits

86a79a9 chore: release v2.0.6
1c85038 fix: include README in published package (#170)
566c850 chore: release v2.0.5
de59505 fix(router): only strip basePath when it is a leading prefix (#149)
d9de25a chore: release v2.0.4
6718b44 ci: migrate release to npm OIDC trusted publishing (#146)
31e5f8f fix(client): correct return types when throw option is true (#127)
faf741d fix(to-response): preserve multiple Set-Cookie when merging headers (#137)
f5e54a1 fix(to-response): only mark true cycles in safeStringify (#140)
b021012 test(router): add streaming response test (#138)
Additional commits viewable in compare view

Updates msw from 2.15.0 to 3.0.0

Release notes

Sourced from msw's releases.

v3.0.0 (2026-09-28)

v3.0.0 (#2692) (2bb43428b79ac06f94bb8ea8aeacd6102fe31f56) @kettanaito @Andarist

⚠️ BREAKING CHANGES

MSW is now ESM-only (#2765).

Deprecate support for Node.js v18 and v20 (#2729). The minimal supported Node.js version is v22.

msw/native is removed in favor of @msw/react-native.

Require TypeScript 5.9 as the minimal version.

Deprecate support for TypeScript 5.1 and 5.2 (#2730)

worker.stop() returns a Promise (#2724). Awaiting it is relevant only for in-flight critical scenarios.

graphql is now exported as msw/graphql (#2691). GraphQL is now handled as a proper optional peer dependency.

Removes the handleRequest() utility. Please use the defineNetwork() API instead.

GraphQLLinkHandlers type has been renamed to GraphQLLink.

The file:// requests now throw in Node.js as they normally do (not supported by fetch).

The Content-Length request header is now removed by bypass().

HTTP-to-WebSocket upgrade requests performed via fetch() now throw in Node.js as they normally do (not supported by fetch).

Cookies are no longer managed in Node.js for better compatibilty. Instead, whatever is the default behavior of your environment that's the cookie behavior you get. This has no effect on the browser.

WebSocket connection life cycle event has been renamed to websocket:connection (#2783).

onUnhandledRequest option has been renamed to onUnhandledFrame.

The library no longer patches setTimeout to circumvent fake timers in test runners. You should advance the fake timers normally for delayed mocked responses to resolve.

The library no longer returns a mocked cookie string on request.headers.get('cookie') in the handlers. It returns null in all environments. Please use the cookies resolver argument to have cookie-based logic.

Features

Supports Node.js v24 and v26.

Supports TypeScript v6.0 and v7.0.

You can import individual utilities, like delay or passthrough, from the new msw/utils entrypoint for smaller footprint on your bundle.

Support GraphQL v17.0.

Support intercepting page navigations and form submissions (#2721).

Support GraphQL subscriptions (#285, #2763).

Migrate from path-to-regexp to @msw/url (#2678).

Remove the following dependencies:

graphql

path-to-regexp

picocolors

statuses

strict-event-emitter

Adds a Vite plugin for MSW (#2781).

Adds a websocket:error life cycle event to listen to WebSocket connection errors (#2784).

Support modifying the intercepted request headers in passthrough scenarios (#2786).

Support a new WebSocket Extension API that allows for better custom experiences (#2791).

Bug fixes

Fix an issue where preventing a page closure via the beforeunload listener would unregister the MSW worker (#1105).

Fix an issue that caused intermittent test failures in Vitest Browser Mode and Firefox if using maxWorkers: 1 (#2726).

Fix an issue where in-flight requests were incorrectly passthrough when performed before calling worker.stop() (#2724, #2597).

Fix an issue where persisting cookies in localStorage would cause a maximum quota exceeded errors.

... (truncated)

Commits

b6b50f0 chore(release): v3.0.0
32cf523 chore: run release job on ubuntu-latest to unlock provenance
2bb4342 feat!: v3.0.0 (#2692)
85f4bf3 docs: add blacksmith mention (#2780)
17cb3bf chore: switch to blacksmith action runners (#2777)
81e00d2 chore: switch actions to ubuntu
See full diff in compare view

Updates better-call from 1.4.0 to 2.0.6

Release notes

Sourced from better-call's releases.

v2.0.6

   🐞 Bug Fixes

Include README in published package - by @bytaesu in better-auth/better-call#170 (1c850)

    View changes on GitHub

v2.0.5

   🐞 Bug Fixes

router: Only strip basePath when it is a leading prefix - by @Bekacru in better-auth/better-call#149 (de595)

    View changes on GitHub

v2.0.4

   🚀 Features

context: Expose responseHeaders on EndpointContext - by @bytaesu in better-auth/better-call#131 (97837)

   🐞 Bug Fixes

Return HTTP 400 for empty JSON body - by @ping-maxwell and @bytaesu in better-auth/better-call#130 (3cb8c)

client:

Correct return types when throw option is true - by @Iulian-Dragomirescu in better-auth/better-call#127 (31e5f)

node:

Move res.send() outside streaming loop - by @SUVAJIT-KARMAKAR in better-auth/better-call#124 (394fd)

to-response:

Only mark true cycles in safeStringify - by @bytaesu in better-auth/better-call#140 (f5e54)

Preserve multiple Set-Cookie when merging headers - by @bytaesu and @rastislavcore in better-auth/better-call#137 (faf74)

    View changes on GitHub

v2.0.3

   🐞 Bug Fixes

Strip request-only headers from toResponse() to prevent Content-Length mismatch - by @thefotios in better-auth/better-call#120 (d619e)

Make Endpoint properties readonly and fix OpenAPI schema types - by @gustavovalverde in better-auth/better-call#122 (c4903)

    View changes on GitHub

v2.0.2

No significant changes

    View changes on GitHub

v2.0.1

   🐞 Bug Fixes

Make kAPIErrorHeaderSymbol configurable to prevent TypeError on nested middleware - by @Daymannovaes in better-auth/better-call#114 (9787b)

... (truncated)

Commits

86a79a9 chore: release v2.0.6
1c85038 fix: include README in published package (#170)
566c850 chore: release v2.0.5
de59505 fix(router): only strip basePath when it is a leading prefix (#149)
d9de25a chore: release v2.0.4
6718b44 ci: migrate release to npm OIDC trusted publishing (#146)
31e5f8f fix(client): correct return types when throw option is true (#127)
faf741d fix(to-response): preserve multiple Set-Cookie when merging headers (#137)
f5e54a1 fix(to-response): only mark true cycles in safeStringify (#140)
b021012 test(router): add streaming response test (#138)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the major group with 2 updates in the / directory: [better-call](https://github.com/better-auth/better-call/tree/HEAD/packages/better-call) and [msw](https://github.com/mswjs/msw). Bumps the major group with 1 update in the /packages/framework directory: [better-call](https://github.com/better-auth/better-call/tree/HEAD/packages/better-call). Updates `better-call` from 1.4.0 to 2.0.6 - [Release notes](https://github.com/better-auth/better-call/releases) - [Commits](https://github.com/better-auth/better-call/commits/v2.0.6/packages/better-call) Updates `msw` from 2.15.0 to 3.0.0 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v2.15.0...v3.0.0) Updates `better-call` from 1.4.0 to 2.0.6 - [Release notes](https://github.com/better-auth/better-call/releases) - [Commits](https://github.com/better-auth/better-call/commits/v2.0.6/packages/better-call) --- updated-dependencies: - dependency-name: better-call dependency-version: 2.0.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major - dependency-name: msw dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major - dependency-name: better-call dependency-version: 2.0.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-01T19:17:23Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: strataljs/stratal/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: d8df65c0-d88d-434f-a265-a2e73becdd93

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

adesege

Benchmark

Details

Benchmark suite	Current: `758f5ef`	Previous: `33a9b0d`	Ratio
`test/benchmarks/request-response.bench.ts > Request/Response > simple GET - 200`	`33458.982846920095` ops/sec (`±1.48%`)	`33571.82240506` ops/sec (`±1.61%`)	`1.00`
`test/benchmarks/request-response.bench.ts > Request/Response > GET with route params - 200`	`37834.29110074131` ops/sec (`±1.01%`)	`42296.20545659609` ops/sec (`±0.81%`)	`1.12`
`test/benchmarks/request-response.bench.ts > Request/Response > POST with JSON body - 201`	`14713.612943697706` ops/sec (`±1.36%`)	`16198.962164891995` ops/sec (`±1.14%`)	`1.10`
`test/benchmarks/request-response.bench.ts > Request/Response > POST invalid body - validation error`	`4234.246776248249` ops/sec (`±3.46%`)	`4357.429603749932` ops/sec (`±3.06%`)	`1.03`
`test/benchmarks/request-response.bench.ts > Request/Response > GET unknown route - 404`	`6482.334623411828` ops/sec (`±1.24%`)	`6242.12389221152` ops/sec (`±1.41%`)	`0.96`
`src/__benchmarks__/application.bench.ts > Application - Bootstrap > constructor only`	`366625.1934245893` ops/sec (`±0.71%`)	`376141.31090912863` ops/sec (`±0.45%`)	`1.03`
`src/__benchmarks__/application.bench.ts > Application - Bootstrap > full initialize()`	`39452.35696714217` ops/sec (`±0.94%`)	`37908.79798783361` ops/sec (`±1.08%`)	`0.96`
`src/__benchmarks__/application.bench.ts > Application - Service Resolution > resolve service after bootstrap`	`40753.40597835556` ops/sec (`±1.84%`)	`43880.587834925194` ops/sec (`±1.35%`)	`1.08`
`src/__benchmarks__/application.bench.ts > Application - Multi-Controller Bootstrap > initialize with 5 controllers (8 routes)`	`43334.579492486424` ops/sec (`±0.76%`)	`42475.946310407635` ops/sec (`±0.78%`)	`0.98`
`src/__benchmarks__/application.bench.ts > Application - Multi-Controller Bootstrap > resolve service after multi-controller bootstrap`	`42848.110055561` ops/sec (`±0.70%`)	`41587.68346141239` ops/sec (`±0.83%`)	`0.97`
`src/di/__benchmarks__/container.bench.ts > Container - Registration > register class provider`	`4222825.73818502` ops/sec (`±1.65%`)	`4153235.8754029158` ops/sec (`±0.21%`)	`0.98`
`src/di/__benchmarks__/container.bench.ts > Container - Registration > registerSingleton`	`4020597.260213362` ops/sec (`±2.39%`)	`4015988.369507708` ops/sec (`±1.68%`)	`1.00`
`src/di/__benchmarks__/container.bench.ts > Container - Registration > registerValue`	`4504273.000054578` ops/sec (`±1.86%`)	`4484785.076131648` ops/sec (`±2.09%`)	`1.00`
`src/di/__benchmarks__/container.bench.ts > Container - Registration > registerFactory`	`4443222.364888759` ops/sec (`±3.09%`)	`4646900.299235859` ops/sec (`±0.73%`)	`1.05`
`src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve class token`	`1341845.7369986956` ops/sec (`±1.50%`)	`1399508.2590134072` ops/sec (`±0.43%`)	`1.04`
`src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve symbol token`	`1372521.785886344` ops/sec (`±1.61%`)	`1411490.9696135977` ops/sec (`±1.33%`)	`1.03`
`src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve value token`	`1964016.9708616037` ops/sec (`±1.57%`)	`1991883.3626032965` ops/sec (`±1.43%`)	`1.01`
`src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve singleton token`	`1325391.3664660924` ops/sec (`±0.54%`)	`1367437.3080772788` ops/sec (`±0.43%`)	`1.03`
`src/di/__benchmarks__/container.bench.ts > Container - Resolution > isRegistered check`	`2095021.9203911826` ops/sec (`±0.22%`)	`2032039.9674906908` ops/sec (`±0.13%`)	`0.97`
`src/di/__benchmarks__/container.bench.ts > Container - Conditional Binding > when().use().give().otherwise()`	`2359164.8534461884` ops/sec (`±3.46%`)	`2456045.051979611` ops/sec (`±2.98%`)	`1.04`
`src/di/__benchmarks__/container.bench.ts > Container - Conditional Binding > when() with cached predicate`	`2377443.2344650347` ops/sec (`±0.63%`)	`2468959.111174536` ops/sec (`±1.74%`)	`1.04`
`src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register single module`	`1305439.1801841483` ops/sec (`±0.75%`)	`1288106.5547444636` ops/sec (`±0.75%`)	`0.99`
`src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register 3-level module tree`	`593332.4324157055` ops/sec (`±0.49%`)	`670542.5811318906` ops/sec (`±0.40%`)	`1.13`
`src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register dynamic module (forRoot)`	`1138637.5187412493` ops/sec (`±0.39%`)	`1112476.506823362` ops/sec (`±0.42%`)	`0.98`
`src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Initialization > initialize with lifecycle hooks`	`805580.5854003297` ops/sec (`±0.58%`)	`788390.5430542759` ops/sec (`±2.12%`)	`0.98`
`src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllControllers`	`552421.0398924091` ops/sec (`±0.61%`)	`588907.9281531516` ops/sec (`±0.48%`)	`1.07`
`src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllConsumers`	`523276.2334193481` ops/sec (`±2.84%`)	`571604.366355137` ops/sec (`±1.70%`)	`1.09`
`src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllJobs`	`558275.8291676582` ops/sec (`±0.39%`)	`610619.7166722866` ops/sec (`±0.54%`)	`1.09`
`src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register controller with 5 OpenAPI routes`	`15551.179395365867` ops/sec (`±8.72%`)	`16860.786008618084` ops/sec (`±8.67%`)	`1.08`
`src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register single-route controller`	`76955.72080464318` ops/sec (`±9.91%`)	`81099.36045043867` ops/sec (`±8.84%`)	`1.05`
`src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register multiple controllers`	`19547.883064563037` ops/sec (`±6.71%`)	`19125.92487336735` ops/sec (`±6.68%`)	`0.98`
`src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 10 routes by specificity`	`342158.64915763587` ops/sec (`±0.54%`)	`334136.87529524195` ops/sec (`±0.63%`)	`0.98`
`src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 50 routes by specificity`	`59961.40997972882` ops/sec (`±1.57%`)	`61051.61134544165` ops/sec (`±0.50%`)	`1.02`
`src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 100 routes by specificity`	`30115.56326410135` ops/sec (`±0.54%`)	`30273.584404234512` ops/sec (`±0.43%`)	`1.01`
`src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - static path`	`12276839.975434363` ops/sec (`±0.14%`)	`11702814.993550757` ops/sec (`±0.12%`)	`0.95`
`src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - single param`	`1766243.0391654277` ops/sec (`±0.50%`)	`1750608.2003759728` ops/sec (`±1.98%`)	`0.99`
`src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - multiple params`	`1250967.4645843694` ops/sec (`±0.61%`)	`1371956.2603574654` ops/sec (`±0.40%`)	`1.10`

This comment was automatically generated by workflow using github-action-benchmark.

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 1, 2026

adesege reviewed Oct 1, 2026

View reviewed changes

Navigation Menu

Repository navigation

chore(deps): bump the major group across 2 directories with 2 updates - #279

chore(deps): bump the major group across 2 directories with 2 updates#279
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-4f28f6b0e4

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

coderabbitai Bot commented Oct 1, 2026

Review skipped

Uh oh!

adesege left a comment

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

v2.0.6

🐞 Bug Fixes

v2.0.5

🐞 Bug Fixes

v2.0.4

🚀 Features

🐞 Bug Fixes

v2.0.3

🐞 Bug Fixes

v2.0.2

v2.0.1

🐞 Bug Fixes

v3.0.0 (2026-09-28)

⚠️ BREAKING CHANGES

Features

Bug fixes

v2.0.6

🐞 Bug Fixes

v2.0.5

🐞 Bug Fixes

v2.0.4

🚀 Features

🐞 Bug Fixes

v2.0.3

🐞 Bug Fixes

v2.0.2

v2.0.1

🐞 Bug Fixes

Uh oh!

coderabbitai Bot commented Oct 1, 2026

Review skipped

Uh oh!

adesege left a comment

Choose a reason for hiding this comment

Benchmark

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant