Skip to content

Bump the production-dependencies group across 1 directory with 6 updates#88

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/backend/production-dependencies-6ab8be638a
Open

Bump the production-dependencies group across 1 directory with 6 updates#88
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/backend/production-dependencies-6ab8be638a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 16, 2026

Bumps the production-dependencies group with 6 updates in the /backend directory:

Package From To
@aws-sdk/client-s3 3.1000.0 3.1009.0
prisma 7.4.2 7.5.0
@prisma/adapter-pg 7.4.2 7.5.0
@prisma/client 7.4.2 7.5.0
@types/formidable 3.4.7 3.5.0
pg 8.19.0 8.20.0

Updates @aws-sdk/client-s3 from 3.1000.0 to 3.1009.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1009.0

3.1009.0(2026-03-13)

Chores
  • codegen: sync for retry strategy lifecycle fix (#7842) (7bf8888b)
Documentation Changes
  • client-medialive: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. (fa49aa1b)
  • client-sqs: document that SQS supports AWS Query protocol, non-default (#7847) (90772af6)
  • clients: generate readme block about protocols (#7839) (21ffcafc)
New Features
  • clients: update client endpoints as of 2026-03-13 (079cb594)
  • client-api-gateway: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography (663ec588)
  • client-gameliftstreams: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. (9b2dfe80)
  • client-connect: Deprecating PredefinedNotificationID field (20194f10)
  • client-ivs-realtime: Updates maximum reconnect window seconds from 60 to 300 for participant replication (e384ea14)
  • client-glue: Add QuerySessionContext to BatchGetPartitionRequest (e39731fa)
  • client-mediaconvert: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. (11615b9f)
  • client-quicksight: The change adds a new capability named ManageSharedFolders in Custom Permissions (cffca16f)
  • client-mgn: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. (2c814ea8)
  • client-config-service: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. (469faf6f)

For list of updated packages, view updated-packages.md in assets-3.1009.0.zip

v3.1008.0

3.1008.0(2026-03-12)

Chores
  • disable TypeScript detection when env var is 'true' (#7838) (b21a7826)
New Features
  • clients: update client endpoints as of 2026-03-12 (c33f9da7)
  • client-datasync: DataSync's 3 location types, Hadoop Distributed File System (HDFS), FSx for Windows File Server (FSx Windows), and FSx for NetApp ONTAP (FSx ONTAP) now have credentials managed via Secrets Manager, which may be encrypted with service keys or be configured to use customer-managed keys or secret. (dee9cb3e)
  • client-ecr: Add Chainguard to PTC upstreamRegistry enum (4f3727d3)
  • client-s3: Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets. (17910287)
Bug Fixes
  • util-user-agent-node: read typescript version from app package.json (#7840) (5253141c)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1009.0 (2026-03-13)

Note: Version bump only for package @​aws-sdk/client-s3

3.1008.0 (2026-03-12)

Features

  • client-s3: Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets. (1791028)

3.1007.0 (2026-03-11)

Note: Version bump only for package @​aws-sdk/client-s3

3.1006.0 (2026-03-10)

Note: Version bump only for package @​aws-sdk/client-s3

3.1005.0 (2026-03-09)

Note: Version bump only for package @​aws-sdk/client-s3

3.1004.0 (2026-03-06)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits
  • 7888030 Publish v3.1009.0
  • 7bf8888 chore(codegen): sync for retry strategy lifecycle fix (#7842)
  • 21ffcaf docs(clients): generate readme block about protocols (#7839)
  • 543c385 Publish v3.1008.0
  • 1791028 feat(client-s3): Adds support for account regional namespaces for general pur...
  • 7718940 Publish v3.1007.0
  • fa4dc50 Publish v3.1006.0
  • 0e58193 test(snapshot-testing): error response snapshots (#7836)
  • e692718 Publish v3.1005.0
  • 2b96330 test(snapshot-testing): implement response snapshots (#7803)
  • Additional commits viewable in compare view

Updates prisma from 7.4.2 to 7.5.0

Release notes

Sourced from prisma's releases.

7.5.0

Today, we are excited to share the 7.5.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Features

  • Added support for nested transaction rollbacks via savepoints (#21678)

    Adds support for nested transaction rollback behavior for SQL databases: if an outer transaction fails, the inner nested transaction is rolled back as well. Implements this by tracking transaction ID + nesting depth so Prisma can reuse an existing open transaction in the underlying engine, and it also enables using $transaction from an interactive transaction client.

Bug fixes

Driver Adapters

  • Made the adapter-mariadb use the binary MySQL protocol to fix an issue with lossy number conversions (#29285)
  • Made @types/pg a direct dependency of adapter-pg for better TypeScript experience out-of-the-box (#29277)

Prisma Client

  • Resolved Prisma.DbNull serializing as empty object in some bundled environments like Next.js (#29286)
  • Fixed DateTime fields returning Invalid Date with unixepoch-ms timestamps in some cases (#29274)
  • Fixed a cursor-based pagination issue with @db.Date columns (#29327)

Schema Engine

  • Manual partial indexes are now preserved when partialIndexes preview feature is disabled, preventing unnecessary drops and additions in migrations (#5790, #5795)
  • Enhanced partial index predicate comparison to handle quoted vs unquoted identifiers correctly, eliminating needless recreate cycles (#5788)
  • Excluded partial unique indexes from DMMF uniqueFields and uniqueIndexes to prevent incorrect findUnique input type generation (#5792)

Studio

With the launch of Prisma ORM v7, we also introduced a rebuilt version of Prisma Studio. With the feedback we’ve gathered since the release, we’ve added some high requested features to help make Studio a better experience.

Multi-cell Selection & Full Table Search

This release brings the ability to select multiple cells when viewing your database. In addition to being able to select multiple cells, you can also search across your database. You can search for a specific table or for specific cells within that table.

Adobe Express - CleanShot 2026-03-04 at 21 15 08-2

More intuitive filtering

... (truncated)

Commits

Updates @prisma/adapter-pg from 7.4.2 to 7.5.0

Release notes

Sourced from @​prisma/adapter-pg's releases.

7.5.0

Today, we are excited to share the 7.5.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Features

  • Added support for nested transaction rollbacks via savepoints (#21678)

    Adds support for nested transaction rollback behavior for SQL databases: if an outer transaction fails, the inner nested transaction is rolled back as well. Implements this by tracking transaction ID + nesting depth so Prisma can reuse an existing open transaction in the underlying engine, and it also enables using $transaction from an interactive transaction client.

Bug fixes

Driver Adapters

  • Made the adapter-mariadb use the binary MySQL protocol to fix an issue with lossy number conversions (#29285)
  • Made @types/pg a direct dependency of adapter-pg for better TypeScript experience out-of-the-box (#29277)

Prisma Client

  • Resolved Prisma.DbNull serializing as empty object in some bundled environments like Next.js (#29286)
  • Fixed DateTime fields returning Invalid Date with unixepoch-ms timestamps in some cases (#29274)
  • Fixed a cursor-based pagination issue with @db.Date columns (#29327)

Schema Engine

  • Manual partial indexes are now preserved when partialIndexes preview feature is disabled, preventing unnecessary drops and additions in migrations (#5790, #5795)
  • Enhanced partial index predicate comparison to handle quoted vs unquoted identifiers correctly, eliminating needless recreate cycles (#5788)
  • Excluded partial unique indexes from DMMF uniqueFields and uniqueIndexes to prevent incorrect findUnique input type generation (#5792)

Studio

With the launch of Prisma ORM v7, we also introduced a rebuilt version of Prisma Studio. With the feedback we’ve gathered since the release, we’ve added some high requested features to help make Studio a better experience.

Multi-cell Selection & Full Table Search

This release brings the ability to select multiple cells when viewing your database. In addition to being able to select multiple cells, you can also search across your database. You can search for a specific table or for specific cells within that table.

Adobe Express - CleanShot 2026-03-04 at 21 15 08-2

More intuitive filtering

... (truncated)

Commits
  • fc38fb7 Make @​types/pg a direct dependency of adapter-pg (#29277)
  • 6091e02 feat: add support for nested transaction rollbacks via savepoints in sql (#21...
  • See full diff in compare view

Updates @prisma/client from 7.4.2 to 7.5.0

Release notes

Sourced from @​prisma/client's releases.

7.5.0

Today, we are excited to share the 7.5.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Features

  • Added support for nested transaction rollbacks via savepoints (#21678)

    Adds support for nested transaction rollback behavior for SQL databases: if an outer transaction fails, the inner nested transaction is rolled back as well. Implements this by tracking transaction ID + nesting depth so Prisma can reuse an existing open transaction in the underlying engine, and it also enables using $transaction from an interactive transaction client.

Bug fixes

Driver Adapters

  • Made the adapter-mariadb use the binary MySQL protocol to fix an issue with lossy number conversions (#29285)
  • Made @types/pg a direct dependency of adapter-pg for better TypeScript experience out-of-the-box (#29277)

Prisma Client

  • Resolved Prisma.DbNull serializing as empty object in some bundled environments like Next.js (#29286)
  • Fixed DateTime fields returning Invalid Date with unixepoch-ms timestamps in some cases (#29274)
  • Fixed a cursor-based pagination issue with @db.Date columns (#29327)

Schema Engine

  • Manual partial indexes are now preserved when partialIndexes preview feature is disabled, preventing unnecessary drops and additions in migrations (#5790, #5795)
  • Enhanced partial index predicate comparison to handle quoted vs unquoted identifiers correctly, eliminating needless recreate cycles (#5788)
  • Excluded partial unique indexes from DMMF uniqueFields and uniqueIndexes to prevent incorrect findUnique input type generation (#5792)

Studio

With the launch of Prisma ORM v7, we also introduced a rebuilt version of Prisma Studio. With the feedback we’ve gathered since the release, we’ve added some high requested features to help make Studio a better experience.

Multi-cell Selection & Full Table Search

This release brings the ability to select multiple cells when viewing your database. In addition to being able to select multiple cells, you can also search across your database. You can search for a specific table or for specific cells within that table.

Adobe Express - CleanShot 2026-03-04 at 21 15 08-2

More intuitive filtering

... (truncated)

Commits
  • ccce148 chore(deps): update engines to 7.5.0-15.280c870be64f457428992c43c1f6d557fab6e...
  • de1c376 chore(deps): update engines to 7.5.0-14.d684c195f0a8bfb0ba8ca628416376df0625b...
  • ea93809 fix: fix DATE cursor comparison (#29327)
  • f8e742a chore(deps): update engines to 7.5.0-13.0f1690a1b5dcd01b5341a4f411f07767f1f76...
  • 3e2392d chore(deps): update engines to 7.5.0-11.7b8301120d804d084ab24ec6332a889889514...
  • 4b65b60 fix(client): fix browser-imported Prisma.DbNull producing empty object (#29286)
  • 7a1f497 Fix DateTime fields returning Invalid Date with unixepoch-ms (#29274)
  • bee4502 fix: use mysql binary protocol to avoid a lossy conversion (#29285)
  • 455853d fix: use safeJsonStringify for nested Uint8Array in Json fields (#29268)
  • 6586972 fix: fix accidental query plan mutation (#29262)
  • Additional commits viewable in compare view

Updates @types/formidable from 3.4.7 to 3.5.0

Commits

Updates pg from 8.19.0 to 8.20.0

Changelog

Sourced from pg's changelog.

pg@8.20.0

  • Add onConnect callback to pg.Pool constructor options allowing for async initialization of newly created & connected pooled clients.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 6 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1000.0` | `3.1009.0` |
| [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `7.4.2` | `7.5.0` |
| [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg) | `7.4.2` | `7.5.0` |
| [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `7.4.2` | `7.5.0` |
| [@types/formidable](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/formidable) | `3.4.7` | `3.5.0` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.19.0` | `8.20.0` |



Updates `@aws-sdk/client-s3` from 3.1000.0 to 3.1009.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1009.0/clients/client-s3)

Updates `prisma` from 7.4.2 to 7.5.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.5.0/packages/cli)

Updates `@prisma/adapter-pg` from 7.4.2 to 7.5.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.5.0/packages/adapter-pg)

Updates `@prisma/client` from 7.4.2 to 7.5.0
- [Release notes](https://github.com/prisma/prisma/releases)
- [Commits](https://github.com/prisma/prisma/commits/7.5.0/packages/client)

Updates `@types/formidable` from 3.4.7 to 3.5.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/formidable)

Updates `pg` from 8.19.0 to 8.20.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.20.0/packages/pg)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1009.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: prisma
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@prisma/adapter-pg"
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@prisma/client"
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/formidable"
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pg
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants