Skip to content

chore(deps,middleware)(deps-dev): bump @types/node from 25.9.5 to 26.2.0 in /middleware - #651

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/middleware/types/node-26.1.2
Closed

chore(deps,middleware)(deps-dev): bump @types/node from 25.9.5 to 26.2.0 in /middleware#651
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/middleware/types/node-26.1.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps @types/node from 25.9.5 to 26.2.0.

Commits


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

@dependabot dependabot Bot added deps Dependency updates (Dependabot) middleware middleware/ workspace labels Aug 10, 2026
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.9.5 to 26.2.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps,middleware)(deps-dev): bump @types/node from 25.9.5 to 26.1.2 in /middleware chore(deps,middleware)(deps-dev): bump @types/node from 25.9.5 to 26.2.0 in /middleware Aug 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/middleware/types/node-26.1.2 branch from e0a1454 to bf2389b Compare August 11, 2026 06:22
@Weegy

Weegy commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

Superseded by #658, which consolidates this run into a single verified change — all required checks green (Node 22.22.3, CI job order: npm ci → build → lint → typecheck → test; 6094 pass / 0 fail / 4 skipped; npm audit 0 high / 0 critical).

Closing so the batch is reviewed once instead of four times. Reopen if #658 is dropped.

@Weegy Weegy closed this Aug 11, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/middleware/types/node-26.1.2 branch August 11, 2026 06:37
Weegy added a commit that referenced this pull request Aug 11, 2026
Consolidates the Dependabot PRs raised against main after #638 and #615
merged, superseding #651, #653, #654 and #655. All five PRs in this run
target /middleware only; web-ui is untouched.

openai 6.46.0 -> 7.4.0, @types/node 26.1.1 -> 26.2.0 (dev),
@aws-sdk/client-s3 3.1075.0 -> 3.1107.0, undici 8.5.0 -> 8.10.0.

@types/node is also raised from ^25.9.3 to ^26.2.0 in packages/canvas-core,
packages/conductor-core and packages/dev-runner-shim, and @aws-sdk/client-s3
is mirrored in packages/harness-diagrams, so the workspace manifests stop
skewing from the root. @types/node and @aws-sdk/client-s3 take the current
resolution rather than the bot's, which had already gone stale.

openai 7.0.0's only breaking change is that it requires Node.js 22 — there
are no API changes. That is already satisfied: engines is ">=22.13.0 <23",
.nvmrc is 22.22.3, every CI job pins node 22, and all Dockerfiles are on
node:22.23.2. The import surface is three source locations plus two tests,
deliberately funnelled through llm-adapter-openai's openaiClient.ts.

Excludes #652 (cookie 0.7.2 -> 2.0.1): v2 removed the deprecated `parse`
export in favour of `parseCookie` and went ESM-only, and we import exactly
that removed symbol in src/auth/operatorAuthAccessor.ts. It also sits in the
session-verification path, so it is handled as its own reviewable PR.

Verified on Node 22.22.3 in CI job order: build, lint (0 errors), typecheck
and 6094 pass / 0 fail / 4 skipped, with npm audit reporting 0 high /
0 critical.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps Dependency updates (Dependabot) middleware middleware/ workspace

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant