Skip to content

chore(deps): bump the npm-production-minor-patch group across 1 directory with 22 updates - #886

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-minor-patch-5b4af2ad9a
Open

chore(deps): bump the npm-production-minor-patch group across 1 directory with 22 updates#886
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-minor-patch-5b4af2ad9a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-production-minor-patch group with 21 updates in the / directory:

Package From To
mongodb-connection-string-url 7.0.1 7.0.2
mongodb 7.5.0 7.6.0
socks 2.8.3 2.8.10
resolve-mongodb-srv 1.1.3 1.1.7
mongodb-client-encryption 7.0.0 7.2.1
lru-cache 11.3.5 11.5.2
@aws-sdk/client-s3 3.1098.0 3.1126.0
ajv 8.18.0 8.20.0
semver 7.7.4 7.8.5
ipaddr.js 2.2.0 2.5.0
acorn 8.16.0 8.18.0
bson 7.3.1 7.3.2
tar 7.5.11 7.5.22
heap-js 2.3.0 2.7.1
@peculiar/x509 2.0.0 2.1.0
yargs 18.0.0 18.1.0
@mongosh/shell-api 5.1.6 5.5.0
@types/ssh2 1.11.19 1.15.6
eslint-plugin-filename-rules 1.2.0 1.3.1
eslint-plugin-react 7.30.1 7.37.5
chai-dom 1.11.0 1.12.1

Updates mongodb-connection-string-url from 7.0.1 to 7.0.2

Release notes

Sourced from mongodb-connection-string-url's releases.

v7.0.2

7.0.2 (2026-07-15)

The MongoDB Node.js team is pleased to announce version 7.0.2 of the mongodb-connection-string-url package!

Release Notes

Loosened type restriction on generic arugments

  • .typedSearchParams<...>()
  • CommaAndColonSeparatedRecord<...>

The generics passed into these APIs were inadvertently made stricter than desirable. They've been updated to use the extends {} condition which permits string keyed types as a type argument. Notably improving the compatibility with the driver's AuthMechanismProperties type, a possible output of connection string parsing.

Fixed parsing issue

Unescaped @ in credentials now throws instead of silently misparsing.

Error messages no longer reveal invalid connection strings

Invalid connection strings are no longer revealed in error messages, reducing sensitive information disclosure. Historically we've had URI's embedded in error messages from validation failures.

Bug Fixes

  • NODE-7449: loosen type requirement for generics on typedSearchParams and CommaAndColonSeparatedRecord (#116) (69bd1af)
  • NODE-7597: handle unescaped @ in the password (#125) (9b39443)
  • NODE-7663: uri disclosure on error (#131) (7a1f4ce)

Documentation

We invite you to try the mongodb-connection-string-url library immediately, and report any issues to the NODE project.

Changelog

Sourced from mongodb-connection-string-url's changelog.

7.0.2 (2026-07-09)

Bug Fixes

  • NODE-7449: loosen type requirement for generics on typedSearchParams and CommaAndColonSeparatedRecord (#116) (69bd1af)
  • NODE-7597: handle unescaped @ in the password COMPASS-10688 (#125) (9b39443)
  • NODE-7663: uri disclosure on error (#131) (7a1f4ce)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mongodb-connection-string-url since your current version.


Updates mongodb from 7.5.0 to 7.6.0

Release notes

Sourced from mongodb's releases.

v7.6.0

7.6.0 (2026-08-21)

The MongoDB Node.js team is pleased to announce version 7.6.0 of the mongodb package!

Release Notes

Support for MongoDB 4.2 is removed

[!WARNING] When the driver connects to a MongoDB server of version 4.2 or less, it will now throw an error.

HTTP proxy support for KMS requests in CSFLE and Queryable Encryption

In-use encryption can now route KMS requests through an HTTP proxy. Set kmsConnectCallback on your ClientEncryption or auto-encryption options to control how the driver connects to a KMS host. The callback receives the target host and port and returns a connected socket (for example, a tunnel opened with HTTP CONNECT); the driver then performs the KMS TLS handshake over that socket using the provider's configured TLS options. This unblocks CSFLE and Queryable Encryption in environments that require an HTTP forward proxy for outbound KMS traffic, which the existing SOCKS5 proxyOptions does not cover.

const clientEncryption = new ClientEncryption(keyVaultClient, {
  keyVaultNamespace,
  kmsProviders,
  // Establish the KMS connection through your HTTP proxy; the driver adds TLS.
  kmsConnectCallback: ({ host, port }) => connectThroughHttpProxy(host, port)
});

Improved Intelligent Workload Management

Improved performance for MongoDB 9.0's Intelligent Workload Management (IWM) by only retrying overload errors when doing so is expected to not worsen server conditions

Bundling the driver into ESM no longer throws ReferenceError: require is not defined

v7.2.0 introduced the experimental runtimeAdapters option and, as part of it, replaced the driver’s static import of Node’s os module with a runtime require('os'). That works in a CommonJS build, but when the driver is bundled into ESM output (e.g. a Vite/esbuild/rollup server build with "type": "module"), there is no require in module scope, so constructing a client threw ReferenceError: require is not defined. The driver now loads the default os adapter through a dynamic import() that survives bundling, so new MongoClient() works in ESM bundles. CommonJS usage is unchanged, and supplying your own runtimeAdapters.os continues to work.

Bulk writes serialize each document only once

insertMany and bulkWrite previously processed each document twice - once to measure its size for batch splitting (a full recursive walk via calculateObjectSize) and again to serialize it into the command sent to the server. Documents are now serialized a single time and the resulting bytes are reused for both, decreasing the BSON-encoding CPU spent on bulk writes and reducing event-loop blocking during large batches. The improvement is most noticeable with high document counts and documents that have many fields.

Features

  • NODE-7546: add HTTP Proxy support for QE & CSFLE (#5007) (3366c21)
  • NODE-7547: bump minimum support server/wire versions to '4.4' & '9' respectively (#4994) (3d97028)
  • NODE-7624: support baseBackoffMS and update client backpressure backoff (#5020) (560837b)

Bug Fixes

  • NODE-7603: emit dynamic import('os') via tsconfig (#4992) (52f5e61)

Performance Improvements

... (truncated)

Changelog

Sourced from mongodb's changelog.

7.6.0 (2026-08-21)

Features

  • NODE-7546: add HTTP Proxy support for QE & CSFLE (#5007) (3366c21)
  • NODE-7547: bump minimum support server/wire versions to '4.4' & '9' respectively (#4994) (3d97028)
  • NODE-7624: support baseBackoffMS and update client backpressure backoff (#5020) (560837b)

Bug Fixes

  • NODE-7603: emit dynamic import('os') via tsconfig (#4992) (52f5e61)

Performance Improvements

  • NODE-7660: serialize bulk write documents a single time (#4999) (1217aa1)
Commits
  • 0fb2c13 chore(main): release 7.6.0 (#5001)
  • bb35ded docs: Add preliminary checks to release instructions (#5028)
  • 560837b feat(NODE-7624): support baseBackoffMS and update client backpressure backoff...
  • ce33c59 chore(NODE-7767): bson compat tests snappy fix (#5025)
  • 0f2ed29 chore(NODE-7770): add server 9.0 to the test matrix (#5024)
  • bc92c29 chore(NODE-7767): snappy 7.4 is incompatible in CI (#5021)
  • dce7939 chore(NODE-7759): pin bson-compat server (#5018)
  • 7f8edf3 chore: run bson compat tests against latest server (#5017)
  • 30c31e5 ci(deps): bump drivers-evergreen-tools from 3741fa9 to e86753e (#5016)
  • 3366c21 feat(NODE-7546): add HTTP Proxy support for QE & CSFLE (#5007)
  • Additional commits viewable in compare view

Updates socks from 2.8.3 to 2.8.10

Release notes

Sourced from socks's releases.

2.8.10

What's Changed

Full Changelog: JoshGlazebrook/socks@2.8.9...2.8.10

2.8.9

No release notes provided.

2.8.8

No release notes provided.

2.8.6

No release notes provided.

2.8.5

No release notes provided.

2.8.4

No release notes provided.

Commits

Updates resolve-mongodb-srv from 1.1.3 to 1.1.7

Commits

Updates mongodb-client-encryption from 7.0.0 to 7.2.1

Release notes

Sourced from mongodb-client-encryption's releases.

v7.2.1

7.2.1 (2026-07-29)

The MongoDB Node.js team is pleased to announce version 7.2.1 of the mongodb-client-encryption package!

Release Notes

macOS x64 prebuild

Fixes ERR_DLOPEN_FAILED when loading the addon in an x64 Node.js process on macOS. The x86_64 half of the universal binary in 7.1.0 and 7.2.0 was missing libmongocrypt's symbols. arm64 processes and 7.0.0 are not affected.

Bug Fixes

  • NODE-7704: build libmongocrypt for both macOS architectures (#137) (9335322)

[!IMPORTANT] This library provides encryption functionality for the MongoDB Node.js driver but is not intended to be consumed in isolation. The public API that uses the functionality in this library is available in the mongodb package.

v7.2.0

7.2.0 (2026-07-06)

Features

  • NODE-7653: bump libmongocrypt to 1.20.0 (#135) (e9d1a1c)

v7.1.0

7.1.0 (2026-06-25)

Features

  • NODE-7569: upgrade libmongocrypt to 1.19.2 (#133) (952c6cb)
Changelog

Sourced from mongodb-client-encryption's changelog.

7.2.1 (2026-07-29)

Bug Fixes

  • NODE-7704: build libmongocrypt for both macOS architectures (#137) (9335322)

7.2.0 (2026-07-06)

Features

  • NODE-7653: bump libmongocrypt to 1.20.0 (#135) (e9d1a1c)

7.1.0 (2026-06-24)

Features

  • NODE-7569: upgrade to libmongocrypt 1.19.2 from GitHub Releases (#133) (952c6cb)
Commits
  • d068409 chore(main): release 7.2.1 (#138)
  • 9335322 fix(NODE-7704): build libmongocrypt for both macOS architectures (#137)
  • ab0a1a3 chore(main): release 7.2.0 (#136)
  • e9d1a1c feat(NODE-7653): bump libmongocrypt to 1.20.0 (#135)
  • e34e350 chore(NODE-7523): update prod/dev dependencies (#131)
  • 5e42621 chore(main): release 7.1.0 (#134)
  • 952c6cb feat(NODE-7569): upgrade to libmongocrypt 1.19.2 from GitHub Releases (#133)
  • 3a2f2fb chore(NODE-7599): update release integrity docs (#130)
  • 2c6fa35 chore: fix release job, remove unused id-token permission (#129)
  • bb1633c chore(NODE-7565): migrate release workflow to npm Trusted Publishing (#128)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mongodb-client-encryption since your current version.


Updates lru-cache from 11.3.5 to 11.5.2

Changelog

Sourced from lru-cache's changelog.

cringe lorg

11.5

  • Add backgroundFetchSize option, defaulting to 1, to set an effective size for provisional background fetch objects while in flight, if they do not shadow an existing stale entry.

11.4

  • Add cache property to status objects, in order to differentiate which cache is emitting the metric or trace.
  • Several small bugs regarding fetch behavior edge cases.
    • onInsert does not fire for background fetch internal promises.
    • dispose() and disposeAfter() now fire for the stale value left behind when an in-process background fetch is pre-empted by eviction.
    • fetchMethod that returns a non-Promise value is handled correctly.
    • No Error is created, or abort() signaled, when a background fetch promise is resolved. (Presumably the implementation is done by that point.)

11.3

  • Add observability features, expand the coverage of LRUCache.Status objects.

11.2

  • Add the perf option to specify performance, Date, or any other object with a now() method that returns a number.

11.1

  • Add the onInsert method

11.0

  • Drop support for node less than v20

10.4

  • Accidental minor update, should've been patch.

10.3

  • add forceFetch() method
  • set disposeReason to 'expire' when it's the result of a TTL

... (truncated)

Commits

Updates @aws-sdk/client-s3 from 3.1098.0 to 3.1126.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1126.0

3.1126.0(2026-09-03)

Documentation Changes
  • client-sfn: Updates Step Functions API documentation around CloudTrail, Execution name reuse and sort order of ListExecutions API (8dda8b4b)
  • client-elastic-load-balancing-v2: This release adds support for sending TCP resets for Gateway Load Balancer when a flow's idle timeout expires, or when a target becomes unhealthy or is deregistered. This adds updates the CLI documentation. (a16f1659)
New Features
  • client-socialmessaging: Adding support for WhatsApp Flows with endpoints. (3a3a6205)
  • client-transfer: AWS Transfer Family SFTP Connectors now support specifying an ordered list of AWS Secrets Manager version stages for secret retrieval. This enables seamless credential rotation workflows where external partners may take time to update their systems with new credentials. (e4bf3ecc)
  • client-transcribe: Amazon Transcribe now supports specifying up to 29 PII entity types in the ContentRedaction configuration of a StartTranscriptionJob request, allowing all supported entity types to be redacted in a single batch transcription job. (5fb0b9a5)
  • client-connect: This release enables TagOnCreate for Rule resource on CreateRule API. It also introduces a new field called PreEvaluationFilters to Rule resource, thereby impacting all Create, Update, Describe and Search APIs for Rules (18bb14bc)
  • client-ecs: Adds a critical parameter to the Amazon ECS managed daemon APIs that controls whether a daemon task failure drains the container instance. Non-critical daemon failures no longer drain the instance or block instance registration. (2e6a07d5)
  • client-evs: Amazon EVS now allows users to set, update, and retrieve values for parameters that apply across all EVS Environments in their account at a regional level, such as the VCF License portability core count. (803b694c)
  • client-drs: AWS Elastic Disaster Recovery now includes source server architecture in SourceProperties to identify x86 and ARM64 systems. (20f19e0e)
  • client-bedrock-agentcore: Adds log group name prefix trace source selection, custom or source log group result destinations, and metrics namespace customization (823b2d33)
  • client-bedrock-agentcore-control: AgentCore Identity adds Consent Portal APIs to manage portals that let end users grant OAuth authorization for agents to access resources. AgentCore Evaluation adds trace source selection by log group prefix, custom or source log group result destinations, and metrics namespace customization. (2f826477)
  • client-eks: Deprecate EncryptionConfig resources field. Amazon EKS encrypts all Kubernetes API data with envelope encryption by default for clusters running Kubernetes version 1.28 or higher, so this field no longer affects which resources are encrypted. (c66ca41b)
  • client-guardduty: Adding support for Sequence Activities in GuardDuty Findings (5c12a0eb)
  • lib-transfer-manager: add download directory functionality (#8274) (6e591ee8)

For list of updated packages, view updated-packages.md in assets-3.1126.0.zip

v3.1125.0

3.1125.0(2026-09-02)

New Features
  • client-ec2: This release adds support to retain interruptible Capacity Reservations in an active state when all capacity is reclaimed. (336c7896)
  • client-sagemaker-featurestore-runtime: Amazon SageMaker Feature Store now supports the UpdateRecord API, enabling partial updates to individual feature values in an existing Online Store record without rewriting the entire record. This reduces write payloads and latency for high-frequency feature-level writes . (71920960)
  • client-sagemaker: Amazon SageMaker Feature Store now supports the Standard V2 online store type, which enables feature-level writes to feature groups. You can select Standard V2 when creating a feature group, and update the storage type of an existing feature group via UpdateFeatureGroup. (5287db7f)
  • client-odb: Adds the ListFlexComponents API for listing the flex components available for a given DB system shape. (551174bf)
  • client-mgn: AWS Transform for migrations adds a second network migration option - apply your source security posture to existing VPCs. Upload a source network file with firewall rules, tag the in-scope VPCs, and AWS Transform matches source subnets to them by CIDR and generates the security groups. (822144b2)
  • client-mwaa: Enabled customers to clear optional S3 paths (plugins, requirements, and startup script) for their Amazon MWAA environments by accepting empty strings for the associated fields in UpdateEnvironment requests. (9fa2e0c1)
  • client-bedrock-agentcore: Batch evaluation now supports up to 10 CloudWatch log groups per CloudWatchLogsSource (cebd3179)
  • client-medialive: AWS Elemental MediaLive now supports AB forensic video watermarking (d48e9e15)
  • client-appintegrations: This release adds a force parameter to DeleteApplication and a ConflictException to UpdateApplication, letting customers delete applications with existing associations in one call and get a clear error when an update conflicts with the application's current state. (62b7304c)
Bug Fixes
  • cloudfront-signer: preserve plus in query strings when signing URLs (#8283) (dd76a0dd)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1126.0 (2026-09-03)

Note: Version bump only for package @​aws-sdk/client-s3

3.1125.0 (2026-09-02)

Note: Version bump only for package @​aws-sdk/client-s3

3.1124.0 (2026-09-01)

Note: Version bump only for package @​aws-sdk/client-s3

3.1123.0 (2026-08-31)

Note: Version bump only for package @​aws-sdk/client-s3

3.1122.0 (2026-08-31)

Note: Version bump only for package @​aws-sdk/client-s3

3.1121.0 (2026-08-28)

Note: Version bump only for package @​aws-sdk/client-s3

3.1120.0 (2026-08-27)

... (truncated)

Commits

Updates ajv from 8.18.0 to 8.20.0

Release notes

Sourced from ajv's releases.

v8.20.0

What's Changed

Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0

v8.19.0

What's Changed

Full Changelog: ajv-validator/ajv@v8.18.0...v8.19.0

Commits

Updates semver from 7.7.4 to 7.8.5

Release notes

Sourced from semver's releases.

v7.8.5

7.8.5 (2026-06-19)

Bug Fixes

v7.8.4

7.8.4 (2026-06-09)

Bug Fixes

v7.8.3

7.8.3 (2026-06-08)

Bug Fixes

Chores

v7.8.2

7.8.2 (2026-06-04)

Bug Fixes

v7.8.1

7.8.1 (2026-05-21)

Bug Fixes

v7.8.0

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

Changelog

Sourced from semver's changelog.

7.8.5 (2026-06-19)

Bug Fixes

7.8.4 (2026-06-09)

Bug Fixes

7.8.3 (2026-06-08)

Bug Fixes

Chores

7.8.2 (2026-06-04)

Bug Fixes

7.8.1 (2026-05-21)

Bug Fixes

7.8.0 (2026-05-08)

Features

Bug Fixes

Documentation

Chores

Commits
  • 6e05b76 chore: release 7.8.5 (#879)
  • 9c8692a fix: include prereleases in tilde range lower bound with includePrerelease (#...
  • 8640bd6 chore: release 7.8.4 (#875)
  • e583226 fix: reject numeric segments after x-ranges
  • 6b77aa8 chore: release 7.8.3 (#873)
  • 3485dda chore: bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866)Description has been truncated

@dependabot
chore(deps): bump the npm-production-minor-patch group across 1 direc…
fc49db2 
…tory with 22 updates

Bumps the npm-production-minor-patch group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [mongodb-connection-string-url](https://github.com/mongodb-js/mongodb-connection-string-url) | `7.0.1` | `7.0.2` |
| [mongodb](https://github.com/mongodb/node-mongodb-native) | `7.5.0` | `7.6.0` |
| [socks](https://github.com/JoshGlazebrook/socks) | `2.8.3` | `2.8.10` |
| [resolve-mongodb-srv](https://github.com/mongodb-js/resolve-mongodb-srv) | `1.1.3` | `1.1.7` |
| [mongodb-client-encryption](https://github.com/mongodb-js/mongodb-client-encryption) | `7.0.0` | `7.2.1` |
| [lru-cache](https://github.com/isaacs/node-lru-cache) | `11.3.5` | `11.5.2` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1098.0` | `3.1126.0` |
| [ajv](https://github.com/ajv-validator/ajv) | `8.18.0` | `8.20.0` |
| [semver](https://github.com/npm/node-semver) | `7.7.4` | `7.8.5` |
| [ipaddr.js](https://github.com/whitequark/ipaddr.js) | `2.2.0` | `2.5.0` |
| [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.18.0` |
| [bson](https://github.com/mongodb/js-bson) | `7.3.1` | `7.3.2` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.11` | `7.5.22` |
| [heap-js](https://github.com/ignlg/heap-js) | `2.3.0` | `2.7.1` |
| [@peculiar/x509](https://github.com/PeculiarVentures/x509) | `2.0.0` | `2.1.0` |
| [yargs](https://github.com/yargs/yargs) | `18.0.0` | `18.1.0` |
| [@mongosh/shell-api](https://github.com/mongodb-js/mongosh) | `5.1.6` | `5.5.0` |
| [@types/ssh2](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ssh2) | `1.11.19` | `1.15.6` |
| [eslint-plugin-filename-rules](https://github.com/dolsem/eslint-plugin-filename-rules) | `1.2.0` | `1.3.1` |
| [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) | `7.30.1` | `7.37.5` |
| [chai-dom](https://github.com/nathanboktae/chai-dom) | `1.11.0` | `1.12.1` |



Updates `mongodb-connection-string-url` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/mongodb-js/mongodb-connection-string-url/releases)
- [Changelog](https://github.com/mongodb-js/mongodb-connection-string-url/blob/main/HISTORY.md)
- [Commits](mongodb-js/mongodb-connection-string-url@v7.0.1...v7.0.2)

Updates `mongodb` from 7.5.0 to 7.6.0
- [Release notes](https://github.com/mongodb/node-mongodb-native/releases)
- [Changelog](https://github.com/mongodb/node-mongodb-native/blob/main/HISTORY.md)
- [Commits](mongodb/node-mongodb-native@v7.5.0...v7.6.0)

Updates `socks` from 2.8.3 to 2.8.10
- [Release notes](https://github.com/JoshGlazebrook/socks/releases)
- [Commits](JoshGlazebrook/socks@2.8.3...2.8.10)

Updates `resolve-mongodb-srv` from 1.1.3 to 1.1.7
- [Release notes](https://github.com/mongodb-js/resolve-mongodb-srv/releases)
- [Commits](mongodb-js/resolve-mongodb-srv@v1.1.3...v1.1.7)

Updates `mongodb-client-encryption` from 7.0.0 to 7.2.1
- [Release notes](https://github.com/mongodb-js/mongodb-client-encryption/releases)
- [Changelog](https://github.com/mongodb-js/mongodb-client-encryption/blob/main/HISTORY.md)
- [Commits](mongodb-js/mongodb-client-encryption@v7.0.0...v7.2.1)

Updates `lru-cache` from 11.3.5 to 11.5.2
- [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-lru-cache@v11.3.5...v11.5.2)

Updates `@aws-sdk/client-s3` from 3.1098.0 to 3.1126.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1126.0/clients/client-s3)

Updates `ajv` from 8.18.0 to 8.20.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v8.18.0...v8.20.0)

Updates `semver` from 7.7.4 to 7.8.5
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.4...v7.8.5)

Updates `ipaddr.js` from 2.2.0 to 2.5.0
- [Changelog](https://github.com/whitequark/ipaddr.js/blob/main/Changes.md)
- [Commits](https://github.com/whitequark/ipaddr.js/commits)

Updates `acorn` from 8.16.0 to 8.18.0
- [Commits](acornjs/acorn@8.16.0...8.18.0)

Updates `bson` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/mongodb/js-bson/releases)
- [Changelog](https://github.com/mongodb/js-bson/blob/main/HISTORY.md)
- [Commits](mongodb/js-bson@v7.3.1...v7.3.2)

Updates `tar` from 7.5.11 to 7.5.22
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.11...v7.5.22)

Updates `heap-js` from 2.3.0 to 2.7.1
- [Release notes](https://github.com/ignlg/heap-js/releases)
- [Commits](ignlg/heap-js@v2.3.0...v2.7.1)

Updates `@peculiar/x509` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/PeculiarVentures/x509/releases)
- [Commits](PeculiarVentures/x509@v2...v2.1.0)

Updates `yargs` from 18.0.0 to 18.1.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v18.0.0...v18.1.0)

Updates `@mongosh/shell-api` from 5.1.6 to 5.5.0
- [Release notes](https://github.com/mongodb-js/mongosh/releases)
- [Commits](https://github.com/mongodb-js/mongosh/compare/@mongosh/shell-api@5.1.6...@mongosh/shell-api@5.5.0)

Updates `node-addon-api` from 8.3.1 to 8.9.2
- [Release notes](https://github.com/nodejs/node-addon-api/releases)
- [Changelog](https://github.com/nodejs/node-addon-api/blob/main/CHANGELOG.md)
- [Commits](nodejs/node-addon-api@v8.3.1...v8.9.2)

Updates `@types/ssh2` from 1.11.19 to 1.15.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ssh2)

Updates `eslint-plugin-filename-rules` from 1.2.0 to 1.3.1
- [Commits](dolsem/eslint-plugin-filename-rules@v1.2.0...v1.3.1)

Updates `eslint-plugin-react` from 7.30.1 to 7.37.5
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](jsx-eslint/eslint-plugin-react@v7.30.1...v7.37.5)

Updates `chai-dom` from 1.11.0 to 1.12.1
- [Commits](nathanboktae/chai-dom@v1.11.0...v1.12.1)

---
updated-dependencies:
- dependency-name: mongodb-connection-string-url
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-minor-patch
- dependency-name: mongodb
  dependency-version: 7.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: socks
  dependency-version: 2.8.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-minor-patch
- dependency-name: resolve-mongodb-srv
  dependency-version: 1.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-minor-patch
- dependency-name: mongodb-client-encryption
  dependency-version: 7.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: lru-cache
  dependency-version: 11.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1126.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: ajv
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: semver
  dependency-version: 7.8.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: ipaddr.js
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: acorn
  dependency-version: 8.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: bson
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-minor-patch
- dependency-name: tar
  dependency-version: 7.5.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production-minor-patch
- dependency-name: heap-js
  dependency-version: 2.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: "@peculiar/x509"
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: yargs
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: "@mongosh/shell-api"
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: node-addon-api
  dependency-version: 8.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: "@types/ssh2"
  dependency-version: 1.15.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: eslint-plugin-filename-rules
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: eslint-plugin-react
  dependency-version: 7.37.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
- dependency-name: chai-dom
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team as code owners September 11, 2026 13:20
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 11, 2026
@dependabot
dependabot Bot requested a review from paula-stacho September 11, 2026 13:20
@codeowners-service-app

codeowners-service-app Bot commented Sep 11, 2026 •
edited
Loading

Copy link
Copy Markdown

Assigned esvm for team mongosh-developers because paula-stacho is out of office.
Assigned alenakhineika for team compass-developers because paula-stacho is out of office.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@paula-stacho paula-stacho Awaiting requested review from paula-stacho paula-stacho is a code owner automatically assigned from mongodb-js/mongosh-developers
@esvm esvm Awaiting requested review from esvm
@alenakhineika alenakhineika Awaiting requested review from alenakhineika

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants