chore(deps)(deps): bump the runtime-deps group across 1 directory with 5 updates by dependabot[bot] · Pull Request #30138 · prisma/orm

dependabot · 2026-08-26T08:23:07Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the runtime-deps group with 5 updates in the / directory:

Package	From	To
wrap-ansi	`10.0.0`	`10.0.1`
@vercel/detect-agent	`1.2.4`	`1.2.5`
jose	`6.2.8`	`6.2.9`
bson	`7.3.1`	`7.3.2`
next	`16.3.0`	`16.3.1`

Updates wrap-ansi from 10.0.0 to 10.0.1

Release notes

Sourced from wrap-ansi's releases.

v10.0.1

Fix handling of hyperlinks 1f23be6

chalk/wrap-ansi@v10.0.0...v10.0.1

Commits

c6b6259 10.0.1
f3287cf Rewrite tests
1f23be6 Fix handling of hyperlinks
See full diff in compare view

Updates @vercel/detect-agent from 1.2.4 to 1.2.5

Release notes

Sourced from @vercel/detect-agent's releases.

@vercel/h3@0.1.116

Patch Changes

@vercel/node@5.9.3

@vercel/h3@0.1.115

Patch Changes

@vercel/node@5.9.2

@vercel/h3@0.1.114

Patch Changes

@vercel/node@5.9.1

@vercel/h3@0.1.113

Patch Changes

Updated dependencies [4502520]

@vercel/node@5.9.0

@vercel/h3@0.1.112

Patch Changes

@vercel/node@5.8.27

Commits

See full diff in compare view

Updates jose from 6.2.8 to 6.2.9

Release notes

Sourced from jose's releases.

v6.2.9

Fixes

reject a JWE whose generated Key Management Parameters collide (6ed19a6)

types: undeprecate PBES2 p2c parameter (33bf832)

Changelog

Sourced from jose's changelog.

6.2.9 (2026-08-15)

Fixes

reject a JWE whose generated Key Management Parameters collide (6ed19a6)

types: undeprecate PBES2 p2c parameter (33bf832)

Commits

f3a3c78 chore(release): 6.2.9
33bf832 fix(types): undeprecate PBES2 p2c parameter
6ed19a6 fix: reject a JWE whose generated Key Management Parameters collide
944840d ci: use shared release workflows
05bccf2 chore: bump packages
f7392d1 test: account for workerd nodejs_compat flag default changes
4e944be ci: drop the wait-for-npm machinery
4285b6f chore(deps-dev): bump undici
cb114ec chore: cleanup after release
See full diff in compare view

Updates bson from 7.3.1 to 7.3.2

Release notes

Sourced from bson's releases.

v7.3.2

7.3.2 (2026-07-31)

The MongoDB Node.js team is pleased to announce version 7.3.2 of the bson package!

Release Notes

calculateObjectSize() now returns accurate byte counts for Int32 and BSONSymbol

Previously, each Int32 or BSONSymbol value caused a 12-byte overcount.

calculateObjectSize() now yields proper size calculations on ES Map's

This release of js-bson fixes an issue where we were incorrectly considering ES Map objects inside calculateObjectSize. This issue did not impact serialization, just size calculation.

Fixed incorrect date boundary in relaxed EJSON

This release of js-bson fixes an issue where the date boundary for relaxed EJSON was incorrectly set to a date 5 hours after the maximum limit of 10,000 AD.

Fixed an issue with ObjectId initialization in Cloudflare Workers

This release of js-bson fixes an issue where we were making crypto calls during module initialization, which is forbidden by Cloudflare Workers and other environments.

Memory optimization via smaller ObjectIds

ObjectId now stores its 12 bytes as four inline integers instead of a Uint8Array, cutting per-ObjectId memory by about 63% (and roughly 45 to 47% across large result sets) with no serialization slowdown. Deep equality and cloning are preserved (assert.deepStrictEqual, and lodash isEqual / cloneDeep).

Thanks to @spokodev for contributing their fixes! (NODE-7631 (#901), NODE-7645 (#917), NODE-7646 (#910))

Bug Fixes

NODE-7631: count Int32 and BSONSymbol in calculateObjectSize (#901) (7f948a6)

NODE-7645: use the first instant of year 10000 as the relaxed EJSON date bound (#917) (9272c9a)

NODE-7646: count ES Map entries in calculateObjectSize (#910) (8d28b12)

NODE-7667: remove early initialization from ObjectId (#916) (665286f)

Performance Improvements

NODE-6246: store ObjectId bytes as four packed integers (#893) (a84229c)

Documentation

API

Changelog

We invite you to try the bson library immediately, and report any issues to the NODE project.

Changelog

Sourced from bson's changelog.

7.3.2 (2026-07-31)

Bug Fixes

NODE-7631: count Int32 and BSONSymbol in calculateObjectSize (#901) (7f948a6)

NODE-7645: use the first instant of year 10000 as the relaxed EJSON date bound (#917) (9272c9a)

NODE-7646: count ES Map entries in calculateObjectSize (#910) (8d28b12)

NODE-7667: remove early initialization from ObjectId (#916) (665286f)

Performance Improvements

NODE-6246: store ObjectId bytes as four packed integers (#893) (a84229c)

Commits

9cd2e68 chore(main): release 7.3.2 (#902)
9272c9a fix(NODE-7645): use the first instant of year 10000 as the relaxed EJSON date...
8d28b12 fix(NODE-7646): count ES Map entries in calculateObjectSize (#910)
665286f fix(NODE-7667): remove early initialization from ObjectId (#916)
1fc57e4 chore(NODE-7681): allow git fetch for npm12 (#914)
57b5bf0 chore: use bundled version of NPM (#913)
a84229c perf(NODE-6246): store ObjectId bytes as four packed integers (#893)
7f948a6 fix(NODE-7631): count Int32 and BSONSymbol in calculateObjectSize (#901)
See full diff in compare view

Updates next from 16.3.0 to 16.3.1

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in vercel/next.js#96653

[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in vercel/next.js#96655

[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in vercel/next.js#96675

[16.x] fix(next/image): preserve image response after optimization by @styfle in vercel/next.js#96733

[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in vercel/next.js#96900

[backport] Bump @swc/helpers by @mischnic in vercel/next.js#96885

[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in vercel/next.js#97308

[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in vercel/next.js#97302

[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in vercel/next.js#97317

[backport] Restore the live headers() view of the incoming request by @unstubbable in vercel/next.js#97311

[backport] Allow literal exports in 'use cache' files by @unstubbable in vercel/next.js#97312

[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in vercel/next.js#97315

[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in vercel/next.js#97314

[backport] Encode the cache item name built by unstable_cache by @unstubbable in vercel/next.js#97313

[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in vercel/next.js#97258

[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in vercel/next.js#97328

[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in vercel/next.js#97326

[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in vercel/next.js#97325

[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in vercel/next.js#97304

[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in vercel/next.js#97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.26

Misc Changes

docs: document deploymentId build ID override and Pages Router skew in 16.2: #97645

Upgrade React from eb8feb71-20260814 to eafeac09-20260819: #97636

Turbopack: rename to use turbopack: no side effects: #94427

refactor: move useDynamic{Route,Search}Params to reduce snapshot churn: #97360

[PPF] unstable_navigation(): #96908

[PPF] Scaffold unstable_navigation(): #97236

docs: Explicit cache output description: #97548

Improve Cache Components sync IO migration guidance: #97572

[test] Use a non-native stub for the server externals list test: #97614

Avoid GitHub API rate limits for create-next-app examples: #97612

[test] Cover the prerender worker-thread backend with an addon we control: #97543

[test] Convert the prerender-native-module suite to local fixture packages: #97542

[test] Replace the turbopack-reports sqlite3 dependency with a local addon fixture: #97541

[test] Drop the dead sqlite3 build approval from the sharp-basic suite: #97540

[ci] Authenticate Turborepo remote caching with OIDC instead of a static PAT: #97590

Remove HmrTarget: #97253

Keep HMR instructions typed until serialization: #96569

Serialize frozen collections by value only: #96686

Credits

... (truncated)

Commits

3d32eb8 v16.3.1
2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)
323a17c [backport] Discard only cache entries that predate a tag revalidation, and re...
6d67f46 [backport] Keep the dev validation worker alive across HMR updates (#97315)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 5 updates Bumps the runtime-deps group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [wrap-ansi](https://github.com/chalk/wrap-ansi) | `10.0.0` | `10.0.1` | | [@vercel/detect-agent](https://github.com/vercel/vercel/tree/HEAD/packages/detect-agent) | `1.2.4` | `1.2.5` | | [jose](https://github.com/panva/jose) | `6.2.8` | `6.2.9` | | [bson](https://github.com/mongodb/js-bson) | `7.3.1` | `7.3.2` | | [next](https://github.com/vercel/next.js) | `16.3.0` | `16.3.1` | Updates `wrap-ansi` from 10.0.0 to 10.0.1 - [Release notes](https://github.com/chalk/wrap-ansi/releases) - [Commits](chalk/wrap-ansi@v10.0.0...v10.0.1) Updates `@vercel/detect-agent` from 1.2.4 to 1.2.5 - [Release notes](https://github.com/vercel/vercel/releases) - [Changelog](https://github.com/vercel/vercel/blob/main/packages/detect-agent/CHANGELOG.md) - [Commits](https://github.com/vercel/vercel/commits/@vercel/ruby@1.2.5/packages/detect-agent) Updates `jose` from 6.2.8 to 6.2.9 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.8...v6.2.9) Updates `bson` from 7.3.1 to 7.3.2 - [Release notes](https://github.com/mongodb/js-bson/releases) - [Changelog](https://github.com/mongodb/js-bson/blob/main/HISTORY.md) - [Commits](mongodb/js-bson@v7.3.1...v7.3.2) Updates `next` from 16.3.0 to 16.3.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.0...v16.3.1) --- updated-dependencies: - dependency-name: wrap-ansi dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-deps - dependency-name: "@vercel/detect-agent" dependency-version: 1.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-deps - dependency-name: jose dependency-version: 6.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-deps - dependency-name: bson dependency-version: 7.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-deps - dependency-name: next dependency-version: 16.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-deps ... Signed-off-by: dependabot[bot] <support@github.com>

pkg-pr-new · 2026-08-26T08:27:04Z

Open in StackBlitz

@prisma/orm-extension-arktype-json

npm i https://pkg.pr.new/@prisma/orm-extension-arktype-json@30138

@prisma/orm-extension-middleware-cache

npm i https://pkg.pr.new/@prisma/orm-extension-middleware-cache@30138

@prisma/orm-extension-paradedb

npm i https://pkg.pr.new/@prisma/orm-extension-paradedb@30138

@prisma/orm-extension-pgvector

npm i https://pkg.pr.new/@prisma/orm-extension-pgvector@30138

@prisma/orm-extension-postgis

npm i https://pkg.pr.new/@prisma/orm-extension-postgis@30138

@prisma/orm-extension-supabase

npm i https://pkg.pr.new/@prisma/orm-extension-supabase@30138

@prisma/orm-family-mongo

npm i https://pkg.pr.new/@prisma/orm-family-mongo@30138

@prisma/orm-family-sql

npm i https://pkg.pr.new/@prisma/orm-family-sql@30138

@prisma/orm-framework

npm i https://pkg.pr.new/@prisma/orm-framework@30138

@prisma/orm-mongo

npm i https://pkg.pr.new/@prisma/orm-mongo@30138

@prisma/orm-postgres

npm i https://pkg.pr.new/@prisma/orm-postgres@30138

@prisma/orm-sqlite

npm i https://pkg.pr.new/@prisma/orm-sqlite@30138

@prisma/orm-target-mongo

npm i https://pkg.pr.new/@prisma/orm-target-mongo@30138

@prisma/orm-target-postgres

npm i https://pkg.pr.new/@prisma/orm-target-postgres@30138

@prisma/orm-target-sqlite

npm i https://pkg.pr.new/@prisma/orm-target-sqlite@30138

@prisma/orm-toolchain

npm i https://pkg.pr.new/@prisma/orm-toolchain@30138

commit: 7aed930

github-actions · 2026-08-26T08:27:25Z

size-limit report 📦

Path	Size
postgres / no-emit	174.86 KB (0%)
postgres / emit	152.08 KB (0%)
mongo / no-emit	101.65 KB (+0.55% 🔺)
mongo / emit	91.49 KB (+0.6% 🔺)
cf-worker / no-emit	198.74 KB (0%)
cf-worker / emit	173.36 KB (0%)

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 26, 2026

dependabot Bot requested a review from a team as a code owner August 26, 2026 08:23

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 26, 2026

Navigation Menu

Uh oh!

chore(deps)(deps): bump the runtime-deps group across 1 directory with 5 updates - #30138

chore(deps)(deps): bump the runtime-deps group across 1 directory with 5 updates#30138
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/runtime-deps-3ff491da43

dependabot Bot commented on behalf of github Aug 26, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Aug 26, 2026

Uh oh!

github-actions Bot commented Aug 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v10.0.1

@​vercel/h3@​0.1.116

Patch Changes

@​vercel/h3@​0.1.115

Patch Changes

@​vercel/h3@​0.1.114

Patch Changes

@​vercel/h3@​0.1.113

Patch Changes

@​vercel/h3@​0.1.112

Patch Changes

v6.2.9

Fixes

6.2.9 (2026-08-15)

Fixes

v7.3.2

7.3.2 (2026-07-31)

Release Notes

calculateObjectSize() now returns accurate byte counts for Int32 and BSONSymbol

calculateObjectSize() now yields proper size calculations on ES Map's

Fixed incorrect date boundary in relaxed EJSON

Fixed an issue with ObjectId initialization in Cloudflare Workers

Memory optimization via smaller ObjectIds

Bug Fixes

Performance Improvements

Documentation

7.3.2 (2026-07-31)

Bug Fixes

Performance Improvements

v16.3.1

What's Changed

v16.3.1-canary.26

Misc Changes

Credits

Uh oh!

pkg-pr-new Bot commented Aug 26, 2026

Uh oh!

github-actions Bot commented Aug 26, 2026

size-limit report 📦

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 26, 2026 •

edited

Loading

`@vercel/h3@0`.1.116

`@vercel/h3@0`.1.115

`@vercel/h3@0`.1.114

`@vercel/h3@0`.1.113

`@vercel/h3@0`.1.112

`calculateObjectSize()` now returns accurate byte counts for `Int32` and `BSONSymbol`

`calculateObjectSize()` now yields proper size calculations on ES Map's