Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 10 updates - #723

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-ab9b7f85ef
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-ab9b7f85ef

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 10 updates in the / directory:

Package From To
@sentry/node 10.48.0 10.49.0
discord.js 14.26.2 14.26.3
dotenv 17.4.1 17.4.2
lru-cache 10.4.3 11.3.5
youtube-dl-exec 3.1.4 3.1.5
youtubei.js 16.0.1 17.0.1
@tanstack/react-query 5.97.0 5.99.2
react-router-dom 7.14.0 7.14.1
uuid 13.0.0 14.0.0
@infisical/sdk 5.0.0 5.0.1

Updates @sentry/node from 10.48.0 to 10.49.0

Release notes

Sourced from @​sentry/node's releases.

10.49.0

Important Changes

  • feat(browser): Add View Hierarchy integration (#14981)

    A new viewHierarchyIntegration captures the DOM structure when an error occurs, providing a snapshot of the page state for debugging. Enable it in your Sentry configuration:

    import * as Sentry from '@sentry/browser';
    Sentry.init({
    dsn: 'DSN',
    integrations: [Sentry.viewHierarchyIntegration()],
    });

  • feat(cloudflare): Split alarms into multiple traces and link them (#19373)

    Durable Object alarms now create separate traces for each alarm invocation, with proper linking between related alarms for better observability.

  • feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation (#19991, #20345)

    A new enableRpcTracePropagation option enables automatic trace propagation for Cloudflare RPC calls via .fetch(), ensuring distributed traces flow correctly across service bindings.

  • feat(core): Add enableTruncation option to AI integrations (#20167, #20181, #20182, #20183, #20184)

    All AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, LangGraph) now support an enableTruncation option to control whether large AI inputs/outputs are truncated.

  • feat(opentelemetry): Vendor AsyncLocalStorageContextManager (#20243)

    The OpenTelemetry context manager is now vendored internally, reducing external dependencies and ensuring consistent behavior across environments.

Other Changes

  • feat(core): Export a reusable function to add tracing headers (#20076)
  • feat(core): Expose rewriteSources top level option (#20142)
  • feat(deps): bump defu from 6.1.4 to 6.1.6 (#20104)
  • feat(node-native): Add support for V8 v14 (Node v25+) (#20125)
  • feat(node): Include global scope for eventLoopBlockIntegration (#20108)
  • fix(core, node): Support loading Express options lazily (#20211)
  • fix(core): Set conversation_id only on gen_ai spans (#20274)
  • fix(core): Use ai.operationId for Vercel AI V6 operation name mapping (#20285)
  • fix(deno): Avoid inferring invalid span op from Deno tracer (#20128)
  • fix(deno): Handle reader.closed rejection from releaseLock() in streaming (#20187)
  • fix(nextjs): Preserve directive prologues in turbopack loaders (#20103)
  • fix(nextjs): Skip custom browser tracing setup for bot user agents (#20263)
  • fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory leak (#20328)
  • fix(replay): Use live click attributes in breadcrumbs (#20262)

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.49.0

Important Changes

  • feat(browser): Add View Hierarchy integration (#14981)

    A new viewHierarchyIntegration captures the DOM structure when an error occurs, providing a snapshot of the page state for debugging. Enable it in your Sentry configuration:

    import * as Sentry from '@sentry/browser';
    Sentry.init({
    dsn: 'DSN',
    integrations: [Sentry.viewHierarchyIntegration()],
    });

  • feat(cloudflare): Split alarms into multiple traces and link them (#19373)

    Durable Object alarms now create separate traces for each alarm invocation, with proper linking between related alarms for better observability.

  • feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation (#19991, #20345)

    A new enableRpcTracePropagation option enables automatic trace propagation for Cloudflare RPC calls via .fetch(), ensuring distributed traces flow correctly across service bindings.

  • feat(core): Add enableTruncation option to AI integrations (#20167, #20181, #20182, #20183, #20184)

    All AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, LangGraph) now support an enableTruncation option to control whether large AI inputs/outputs are truncated.

  • feat(opentelemetry): Vendor AsyncLocalStorageContextManager (#20243)

    The OpenTelemetry context manager is now vendored internally, reducing external dependencies and ensuring consistent behavior across environments.

Other Changes

  • feat(core): Export a reusable function to add tracing headers (#20076)
  • feat(core): Expose rewriteSources top level option (#20142)
  • feat(deps): bump defu from 6.1.4 to 6.1.6 (#20104)
  • feat(node-native): Add support for V8 v14 (Node v25+) (#20125)
  • feat(node): Include global scope for eventLoopBlockIntegration (#20108)
  • fix(core, node): Support loading Express options lazily (#20211)
  • fix(core): Set conversation_id only on gen_ai spans (#20274)
  • fix(core): Use ai.operationId for Vercel AI V6 operation name mapping (#20285)
  • fix(deno): Avoid inferring invalid span op from Deno tracer (#20128)
  • fix(deno): Handle reader.closed rejection from releaseLock() in streaming (#20187)
  • fix(nextjs): Preserve directive prologues in turbopack loaders (#20103)
  • fix(nextjs): Skip custom browser tracing setup for bot user agents (#20263)
  • fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory leak (#20328)
  • fix(replay): Use live click attributes in breadcrumbs (#20262)

... (truncated)

Commits
  • 745af79 release: 10.49.0
  • 46dcef1 Merge pull request #20348 from getsentry/prepare-release/10.49.0
  • bf4e188 meta(changelog): Update changelog for 10.49.0
  • 5f72df5 feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation...
  • 50438f9 feat(browser): Emit web vitals as streamed spans (#19827)
  • 3332fec fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory...
  • 684a41f ref(opentelemetry): Replace @opentelemetry/resources with inline `getSentry...
  • 8b2a9dc ci: Remove Docker container for Verdaccio package publishing (#20329)
  • 0007c7b ci: Extract test names for flaky test issues (#20298)
  • 9b9d65c chore(ci): Bump actions/cache to v5 and actions/download-artifact to v7 (#20249)
  • Additional commits viewable in compare view

Updates discord.js from 14.26.2 to 14.26.3

Release notes

Sourced from discord.js's releases.

14.26.3

Bug Fixes

  • TeamMember: Allow a default permissions (dced197)
Changelog

Sourced from discord.js's changelog.

14.26.3 - (2026-04-14)

Bug Fixes

  • TeamMember: Allow a default permissions (dced197)
Commits
  • 666fce0 chore(discord.js): release discord.js@14.26.3
  • dced197 fix(TeamMember): allow a default permissions
  • See full diff in compare view

Updates dotenv from 17.4.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)
Commits

Updates lru-cache from 10.4.3 to 11.3.5

Changelog

Sourced from lru-cache's changelog.

cringe lorg

11.3

  • Add observability features, expand the coverage of LRUCache.Status objects.

11.2

  • Add the perf option to specify performance, Date, or any other object with a now() method that returns a number.

11.1

  • Add the onInsert method

11.0

  • Drop support for node less than v20

10.4

  • Accidental minor update, should've been patch.

10.3

  • add forceFetch() method
  • set disposeReason to 'expire' when it's the result of a TTL expiration, or 'fetch' when it's the result of an aborted or undefined-returning fetch()
  • add memo() method

10.2

  • types: implement the Map<K, V> interface

10.1

  • add cache.info(key) to get value as well as ttl and size information.

10.0

  • cache.fetch() return type is now Promise<V | undefined> instead of Promise<V | void>. This is an irrelevant change practically speaking, but can require changes for TypeScript users.

9.1

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates youtube-dl-exec from 3.1.4 to 3.1.5

Release notes

Sourced from youtube-dl-exec's releases.

v3.1.5

What's Changed

Full Changelog: microlinkhq/youtube-dl-exec@v3.1.4...v3.1.5

Changelog

Sourced from youtube-dl-exec's changelog.

3.1.5 (2026-04-14)

Commits

Updates youtubei.js from 16.0.1 to 17.0.1

Release notes

Sourced from youtubei.js's releases.

v17.0.1

17.0.1 (2026-03-16)

See https://github.com/LuanRT/YouTube.js/releases/tag/v17.0.0 for release notes.

Miscellaneous Chores

  • release: release 17.0.1 (3cae95c)

v17.0.0

17.0.0 (2026-03-16)

⚠ BREAKING CHANGES

  • Search: Update search filters to match YouTube changes (#1136)
  • Innertube: Remove getTrending as YouTube removed the trending feed (#1114)

Features

  • Format: Add support for Voice Boost & Super Resolution formats (#1092) (769721c)
  • parser: Add VideoSummaryContentView and VideoSummaryParagraphView (#1153) (da1fac2)
  • Search: Update search filters to match YouTube changes (#1136) (e830396)
  • Session: Add the ANDROID_VR client (#1149) (f9bd5d0)
  • StreamingInfo: Label Voice Boost audio streams (#1105) (458f881)

Bug Fixes

  • ChannelSubMenu: Handle potential undefined values (543b94c)
  • ContentMetadataView: metadataRows can be undefined (19b33ea)
  • FlexibleActionsView: Update ActionRow actions type (#1129) (5c7b1ba)
  • history: Add support for LockupView content (#1075) (7e10ac9)
  • Innertube: getChannel() if subscribed (#1128) (3df4c61)
  • Innertube: Remove getTrending as YouTube removed the trending feed (#1114) (7c144ee)
  • Parser: Fix ChannelSubMenu parsing (#1144) (5da9dd3)
  • parser: Resolve some old parser issues (#1154) (8130f80), closes #653 #781 #978 #1053 #695 #1098
  • Player: Add support for new variants (#1152) (d8558af)
  • Session: Add the ID for ANDROID_VR, remove the mistaken ANDROID_TV key. (#1151) (c712c54)
  • workflow: Add id-token permission for release-please job (561e69d)
Changelog

Sourced from youtubei.js's changelog.

17.0.1 (2026-03-16)

Miscellaneous Chores

  • release: release 17.0.1 (3cae95c)

17.0.0 (2026-03-16)

⚠ BREAKING CHANGES

  • Search: Update search filters to match YouTube changes (#1136)
  • Innertube: Remove getTrending as YouTube removed the trending feed (#1114)

Features

  • Format: Add support for Voice Boost & Super Resolution formats (#1092) (769721c)
  • parser: Add VideoSummaryContentView and VideoSummaryParagraphView (#1153) (da1fac2)
  • Search: Update search filters to match YouTube changes (#1136) (e830396)
  • Session: Add the ANDROID_VR client (#1149) (f9bd5d0)
  • StreamingInfo: Label Voice Boost audio streams (#1105) (458f881)

Bug Fixes

  • ChannelSubMenu: Handle potential undefined values (543b94c)
  • ContentMetadataView: metadataRows can be undefined (19b33ea)
  • FlexibleActionsView: Update ActionRow actions type (#1129) (5c7b1ba)
  • history: Add support for LockupView content (#1075) (7e10ac9)
  • Innertube: getChannel() if subscribed (#1128) (3df4c61)
  • Innertube: Remove getTrending as YouTube removed the trending feed (#1114) (7c144ee)
  • Parser: Fix ChannelSubMenu parsing (#1144) (5da9dd3)
  • parser: Resolve some old parser issues (#1154) (8130f80), closes #653 #781 #978 #1053 #695 #1098
  • Player: Add support for new variants (#1152) (d8558af)
  • Session: Add the ID for ANDROID_VR, remove the mistaken ANDROID_TV key. (#1151) (c712c54)
  • workflow: Add id-token permission for release-please job (561e69d)
Commits
  • 5cc278f chore(main): release 17.0.1 (#1155)
  • 3cae95c chore(release): release 17.0.1
  • 8bd1534 chore(release-please): update permissions and node version for release workflow
  • 790a54c chore(main): release 17.0.0 (#1093)
  • 6630031 chore: update deps
  • 7e10ac9 fix(history): Add support for LockupView content (#1075)
  • 5c7b1ba fix(FlexibleActionsView): Update ActionRow actions type (#1129)
  • 8130f80 fix(parser): Resolve some old parser issues (#1154)
  • b8d15cb chore(parser): Add 'GenAiFeedbackFormView' to ignored list
  • da1fac2 feat(parser): Add VideoSummaryContentView and VideoSummaryParagraphView (...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for youtubei.js since your current version.


Updates @tanstack/react-query from 5.97.0 to 5.99.2

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.99.2
    • @​tanstack/react-query@​5.99.2

@​tanstack/react-query-next-experimental@​5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.99.2

@​tanstack/react-query-persist-client@​5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.99.2
    • @​tanstack/react-query@​5.99.2

@​tanstack/react-query@​5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.99.2

@​tanstack/react-query-devtools@​5.99.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.99.1
    • @​tanstack/react-query@​5.99.1

@​tanstack/react-query-next-experimental@​5.99.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.99.1

@​tanstack/react-query-persist-client@​5.99.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.99.1
    • @​tanstack/react-query@​5.99.1

@​tanstack/react-query@​5.99.1

Patch Changes

  • Updated dependencies []:

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.99.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.99.2

5.99.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.99.1

5.99.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.99.0

5.98.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.98.0
Commits
  • a3ec7b3 ci: Version Packages (#10520)
  • 69d2757 ci: Version Packages (#10514)
  • 7ffa1ed test({react,preact,solid}-query/useQueries): fix test description from 'useQu...
  • bc83d37 test({react,preact}-query/useMutation): unify destructuring pattern in comple...
  • aad1bd5 test({react,preact}-query/useMutation): add parallel 'mutateAsync' tests with...
  • d7643b5 test({react,preact}-query/useMutation): add optimistic update tests with succ...
  • cd89d6f test({react,preact}-query/useMutation): add conditional handling and retry te...
  • 6e15fe6 test({react,preact}-query/useMutation): add chained 'mutateAsync' tests for s...
  • 792d3a5 test({react,preact}-query/useMutation): add callback tests when 'useMutation'...
  • 1b661b3 test({react,preact}-query/useMutation): add single callback tests for 'mutate...
  • Additional commits viewable in compare view

Updates react-router-dom from 7.14.0 to 7.14.1

Changelog

Sourced from react-router-dom's changelog.

v7.14.1

Patch Changes

Commits

Updates uuid from 13.0.0 to 14.0.0

Release notes

Sourced from uuid's releases.

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)
Changelog

Sourced from uuid's changelog.

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years
Commits
  • 7c1ea08 chore(main): release 14.0.0 (#926)
  • 3d2c5b0 Merge commit from fork
  • f2c235f fix!: expect crypto to be global everywhere (requires node@20+) (#935)
  • 529ef08 chore: upgrade TypeScript and fixup types (#927)
  • 086fd79 chore: update dependencies (#933)
  • dc4ddb8 feat!: drop node@18 support (#934)
  • 0f1f9c9 chore: switch to Biome for parsing and linting (#932)
  • e2879e6 chore: use maintained version of npm-run-all (#930)
  • ffa3138 fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)
  • 0423d49 docs: remove obsolete v1 option notes (#915)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for uuid since your current version.


Updates @infisical/sdk from 5.0.0 to 5.0.1

Release notes

Sourced from @​infisical/sdk's releases.

5.0.1

What's Changed

New Contributors

Full Changelog: Infisical/node-sdk-v2@5.0.0...5.0.1

Commits
  • 0deb91c Merge pull request #36 from Infisical/feat/adilsitos/ENG-4829
  • b83a3da add suport for form url encoded
  • 3826dfe update comment
  • af179c7 remove unused import
  • 2a323a2 add constants back and remove dead code
  • 8e722d1 rename secret folder to be sink
  • 312d7b6 remove unused import
  • 3a0b7c0 apply claude recommendations
  • 45676db fix: remove console.log debug and use the ApiClient to get the api token from...
  • 112188f remove axios from every file
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 10 updates

Bumps the production-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.48.0` | `10.49.0` |
| [discord.js](https://github.com/discordjs/discord.js/tree/HEAD/packages/discord.js) | `14.26.2` | `14.26.3` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.4.1` | `17.4.2` |
| [lru-cache](https://github.com/isaacs/node-lru-cache) | `10.4.3` | `11.3.5` |
| [youtube-dl-exec](https://github.com/microlinkhq/youtube-dl-exec) | `3.1.4` | `3.1.5` |
| [youtubei.js](https://github.com/LuanRT/YouTube.js) | `16.0.1` | `17.0.1` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.97.0` | `5.99.2` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.14.0` | `7.14.1` |
| [uuid](https://github.com/uuidjs/uuid) | `13.0.0` | `14.0.0` |
| [@infisical/sdk](https://github.com/infisical/infisical-node-sdk) | `5.0.0` | `5.0.1` |



Updates `@sentry/node` from 10.48.0 to 10.49.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.48.0...10.49.0)

Updates `discord.js` from 14.26.2 to 14.26.3
- [Release notes](https://github.com/discordjs/discord.js/releases)
- [Changelog](https://github.com/discordjs/discord.js/blob/14.26.3/packages/discord.js/CHANGELOG.md)
- [Commits](https://github.com/discordjs/discord.js/commits/14.26.3/packages/discord.js)

Updates `dotenv` from 17.4.1 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.1...v17.4.2)

Updates `lru-cache` from 10.4.3 to 11.3.5
- [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-lru-cache@v10.4.3...v11.3.5)

Updates `youtube-dl-exec` from 3.1.4 to 3.1.5
- [Release notes](https://github.com/microlinkhq/youtube-dl-exec/releases)
- [Changelog](https://github.com/microlinkhq/youtube-dl-exec/blob/master/CHANGELOG.md)
- [Commits](microlinkhq/youtube-dl-exec@v3.1.4...v3.1.5)

Updates `youtubei.js` from 16.0.1 to 17.0.1
- [Release notes](https://github.com/LuanRT/YouTube.js/releases)
- [Changelog](https://github.com/LuanRT/YouTube.js/blob/main/CHANGELOG.md)
- [Commits](LuanRT/YouTube.js@v16.0.1...v17.0.1)

Updates `@tanstack/react-query` from 5.97.0 to 5.99.2
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.99.2/packages/react-query)

Updates `react-router-dom` from 7.14.0 to 7.14.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.14.1/packages/react-router-dom)

Updates `uuid` from 13.0.0 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v13.0.0...v14.0.0)

Updates `@infisical/sdk` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/infisical/infisical-node-sdk/releases)
- [Commits](Infisical/node-sdk-v2@5.0.0...5.0.1)

---
updated-dependencies:
- dependency-name: "@sentry/node"
  dependency-version: 10.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: discord.js
  dependency-version: 14.26.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lru-cache
  dependency-version: 11.3.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: youtube-dl-exec
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: youtubei.js
  dependency-version: 17.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.99.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-router-dom
  dependency-version: 7.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@infisical/sdk"
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 19, 2026
@vercel

vercel Bot commented Apr 19, 2026 •

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
lucky Ready Ready Preview, Comment Apr 19, 2026 4:40pm

Request Review

LucasSantana-Dev added a commit that referenced this pull request Apr 19, 2026
The preactjs/compressed-size-action defaults to pnpm when both
package-lock.json and pnpm-lock.yaml are present. This project is npm-
managed (all package.json scripts use npm), but a stale pnpm-lock.yaml
was making the action try `pnpm install --frozen-lockfile`, which fails
on the runner with "Unable to locate executable file: pnpm".

Pin install-script: 'npm ci' to override the autodetection. Unblocks
dependency PRs (#723, #705) that were failing this check despite having
no functional regression.
@LucasSantana-Dev
LucasSantana-Dev enabled auto-merge (squash) April 19, 2026 17:57
@LucasSantana-Dev

Copy link
Copy Markdown
Owner

@dependabot rebase

LucasSantana-Dev added a commit that referenced this pull request Apr 19, 2026
The preactjs/compressed-size-action defaults to pnpm when both
package-lock.json and pnpm-lock.yaml are present. This project is npm-
managed (all package.json scripts use npm), but a stale pnpm-lock.yaml
was making the action try `pnpm install --frozen-lockfile`, which fails
on the runner with "Unable to locate executable file: pnpm".

Pin install-script: 'npm ci' to override the autodetection. Unblocks
dependency PRs (#723, #705) that were failing this check despite having
no functional regression.
@dependabot @github

dependabot Bot commented on behalf of github Apr 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 19, 2026
auto-merge was automatically disabled April 19, 2026 18:05

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-ab9b7f85ef branch April 19, 2026 18:05
LucasSantana-Dev added a commit that referenced this pull request May 13, 2026
The preactjs/compressed-size-action defaults to pnpm when both
package-lock.json and pnpm-lock.yaml are present. This project is npm-
managed (all package.json scripts use npm), but a stale pnpm-lock.yaml
was making the action try `pnpm install --frozen-lockfile`, which fails
on the runner with "Unable to locate executable file: pnpm".

Pin install-script: 'npm ci' to override the autodetection. Unblocks
dependency PRs (#723, #705) that were failing this check despite having
no functional regression.

This branch was successfully deployed

1 active deployment
Preview — 4ed91de2 Deployed Apr 19, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bot dependencies Pull requests that update a dependency file frontend javascript Pull requests that update javascript code shared size/l

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant