Bump the bun group across 1 directory with 12 updates
Type: Pull Request
State: Closed
Association: Unknown
Comments: 1
(7 months ago)
(7 months ago)
(7 months ago)
dependencies javascript
Bumps the bun group with 12 updates in the / directory:
| Package | From | To |
|---|---|---|
| @elysiajs/static | 1.3.0 |
1.4.7 |
| chalk | 5.4.1 |
5.6.2 |
| drizzle-orm | 0.44.2 |
0.45.1 |
| elysia | 1.3.5 |
1.4.22 |
| jose | 6.0.11 |
6.1.3 |
| radashi | 12.6.0 |
12.7.1 |
| @biomejs/biome | 2.0.6 |
2.3.11 |
| @types/bun | 1.2.18 |
1.3.6 |
| drizzle-kit | 0.31.4 |
0.31.8 |
| newman | 6.2.1 |
6.2.2 |
| pg | 8.16.3 |
8.17.1 |
| typescript | 5.8.3 |
5.9.3 |
Updates @elysiajs/static from 1.3.0 to 1.4.7
Release notes
Sourced from @elysiajs/static's releases.
1.4.7
What's changed
Bug fix:
- remove trailing slash on Windows
Full Changelog: https://github.com/elysiajs/elysia-static/compare/1.4.6...1.4.7
1.4.6
What's changed
Bug fix:
- normalize path only when unsafe
- cache
cryptopackage importFull Changelog: https://github.com/elysiajs/elysia-static/compare/1.4.5...1.4.6
1.4.5
What's Changed
- fix: resolve static paths correctly on Windows by
@denysovvlin elysiajs/elysia-static#52New Contributors
@denysovvlmade their first contribution in elysiajs/elysia-static#52Full Changelog: https://github.com/elysiajs/elysia-static/compare/1.4.4...1.4.5
1.4.4
What's changed
Bug fix:
- fix cjs main import
Full Changelog: https://github.com/elysiajs/elysia-static/compare/1.4.3...1.4.4
1.4.3
What's changed
Improvement:
- adjust build script
- remove stat cache
Full Changelog: https://github.com/elysiajs/elysia-static/compare/1.4.2...1.4.3
1.4.2
What's changed
Improvement:
- better caching mechanism
- scope cache to each instance
... (truncated)
Changelog
Sourced from @elysiajs/static's changelog.
1.4.7 - 17 Nov 2025
Bug fix:
- remove trailing slash on Windows
1.4.6 - 3 Nov 2025
Bug fix:
- normalize path only when unsafe
- cache
cryptopackage import1.4.5 - 1 Nov 2025
Bug fix:
- #52 resolve static paths correctly on Windows
1.4.4 - 14 Oct 2025
Bug fix:
- fix cjs main import
1.4.3 - 13 Oct 2025
Improvement:
- adjust build script
- remove stat cache
1.4.2 - 13 Oct 2025
Improvement:
- better caching mechanism
- scope cache to each instance
1.4.1 - 13 Oct 2025
Improvement:
- enable Bun full stack support
- general performance improvement
- #34 log errors, make it easier to debug errors inside
@elysiajs/static- #44 fixed edge case when working dir is root
- use process.getBuiltinModules instead of import
- refactor codebase to be more readable
- rename
noCachetocache- use
Bun.Globif Bun is detected- conditional run
listFilesonly when necessary- reduce seed to
prefixparameter- cache etag generation
Change:
- remove node-cache dependency
- remove handle safe sep for windows as Node already handle it
Breaking Change:
- rename
enableDecodeURItodecodeURI- remove
resolveoptions, use default path.resolve instead1.3.0-exp.0 - 23 Apr 2025
... (truncated)
Commits
4d12f68:wrench: fix: remove trailing slash on windows006fe7e:wrench: fix: normalize path when necessarya6dc9bf:wrench: fix: resolve static paths correctly on Windowsc1ca17fMerge pull request #52 from denysovvl/main6b58da2fix: resolve static paths correctly on Windows516491c:blue_book: doc: fix main import3527841:blue_book: doc: fix main importf4f14f3:blue_book: doc: adjust build scripte99692b:blue_book: doc: adjust build scriptc095eb8:blue_book: feat: remove stat cache- Additional commits viewable in compare view
Updates chalk from 5.4.1 to 5.6.2
Release notes
Sourced from chalk's releases.
v5.6.2
- Fix vulnerability in 5.6.1, see: chalk/chalk#656
v5.6.0
- Make WezTerm terminal use true color a8f5bf7
https://github.com/chalk/chalk/compare/v5.5.0...v5.6.0
v5.5.0
- Make Ghostty terminal use true color (#653) 79ee2d3
Commits
Updates drizzle-orm from 0.44.2 to 0.45.1
Release notes
Sourced from drizzle-orm's releases.
0.45.1
- Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden
require()(#5107)0.45.0
- Fixed pg-native Pool detection in node-postgres transactions
- Allowed subqueries in select fields
- Updated typo algorythm => algorithm
- Fixed
$onUpdatenot handlingSQLvalues (fixes #2388, tests implemented by L-Mario564 in #2911)- Fixed
pgmappers not handlingDateinstances inbun-sql:postgresqldriver responses fordate,timestamptypes (fixes #4493)0.44.7
- fix durable sqlite transaction return value #3746 - thanks
@joaocstro0.44.6
- feat: add $replicas reference #4874
0.44.5
- Fixed invalid usage of
.one()indurable-sqlitesession- Fixed spread operator related crash in sqlite
blobcolumns- Better browser support for sqlite
blobcolumns- Improved sqlite
blobmapping0.44.4
- Fix wrong DrizzleQueryError export. thanks
@nathankleyn0.44.3
- Fixed types of
$clientfor clients created by drizzle functionawait db.$client.[...]
- Added the
updated_atcolumn to theneon_auth.users_synctable definition.
Commits
a086f59Fixed pg-native Pool detection in node-postgres transactions breaking in envi...c445637Merge pull request #5095 from drizzle-team/main-workflowse7b3aaaMerge branch 'main' into main-workflows0d885a5refactor: Update condition for run-feature job to improve clarity and functio...45a1ffbMerge pull request #5087 from drizzle-team/main-workflows6357645chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows53dec98refactor: Simplify release router workflow by removing unnecessary switch job...ce88a18Merge remote-tracking branch 'origin/ext-deps-kit' into main-workflows5c8a4c5+73e2ea4feat: Add release router workflow to manage feature and latest releases- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for drizzle-orm since your current version.
Updates elysia from 1.3.5 to 1.4.22
Release notes
Sourced from elysia's releases.
1.4.22
What's Changed
Improvement:
- #1655 decode single values in ArrayQuery by
@zoriya- use imperative check for
replaceURLPathinstead of allocatingnew URL- reduce ts-ignore/ts-expect-error on promise map handler
Bug fix:
- #1671 mount produces incorrect URL path when Elysia instance has prefix option
- elysiajs/elysia#1617, #1623 AOT compilation removes beforeHandle when using arrow function expression by
@tt-a1i- #1667 skip body parsing on mount with dynamic mode
- #1662 custom thenable fallback in
mapCompactResponsecausing runtime crash with undefined variable by@raunak-rpm- #1661, #1663 fix SSE double-wrapping bug when returning pre-formatted Response by
@raunak-rpmin- ValueError with summary missing types
- Elysia not using Bun.routes by default
New Contributors
@raunak-rpmmade their first contribution in elysiajs/elysia#1663Full Changelog: https://github.com/elysiajs/elysia/compare/1.4.21...1.4.22
1.4.21
What's Changed
Improvement:
- #1654 encode t.Date() to iso string by
@zoriya- #1624 apply macros before merging hooks in group method by
@tt-a1iBug fix:
- call Sucrose GC unref when possible (browser fallback)
- add allowUnsafeValidationDetails to Standard Validator
New Contributors
@tt-a1imade their first contribution in elysiajs/elysia#1624@zoriyamade their first contribution in elysiajs/elysia#1654Full Changelog: https://github.com/elysiajs/elysia/compare/1.4.20...1.4.21
1.4.20
What's Changed
Improvement:
- add
ModelValidator.schemafor accessing raw schema- #1636 add
subscriptionstoElysia.wscontext- #1638 unref Sucrose gc by
@akim-bowBug fix:
... (truncated)
Changelog
Sourced from elysia's changelog.
1.4.22 - 14 Jan 2026
Improvement:
- use imperative check for
replaceURLPathinstead of allocatingnew URL- reduce ts-ignore/ts-expect-error on promise map handler
- #1655 decode single values in ArrayQuery
Bug fix:
- #1671 mount produces incorrect URL path when Elysia instance has prefix option
- elysiajs/elysia#1617, #1623 AOT compilation removes beforeHandle when using arrow function expression
- #1667 skip body parsing on mount with dynamic mode
- #1662 custom thenable fallback in
mapCompactResponsecausing runtime crash with undefined variable- #1661, #1663 fix SSE double-wrapping bug when returning pre-formatted Response
- ValueError with summary missing types
- Elysia not using Bun.routes by default
1.4.21 - 4 Jan 2026
Improvement:
Bug fix:
- call Sucrose GC unref when possible (browser fallback)
- add allowUnsafeValidationDetails to Standard Validator
1.4.20 - 3 Jan 2026
Improvement:
- add
ModelValidator.schemafor accessing raw schema- #1636 add
subscriptionstoElysia.wscontext- #1638 unref Sucrose gc
Bug fix:
- #1649 add null check for object properties (t.Record)
- #1646 use constant-time comparison for signed cookie verification
- #1639 compose: ReferenceError: "_r_r is not defined" when onError returns plain object & mapResponse exists
- #1631 update Exact Mirror to 0.2.6
- #1630 enforce fetch to return MaybePromise
Bug fix:
Elysia.modelsbroke when referencing non typebox model1.4.19 - 13 Dec 2025
Security:
- reject invalid cookie signature when using cookie rotation
Improvement
... (truncated)
Commits
f027642:blue_book: doc: document changelog935efe2Merge pull request #1657 from elysiajs/next131a452:blue_book: doc: 1.4.224478914:broom: chore: clean up code review feedback8c42013Merge pull request #1655 from zoriya/patch-2bc882d4:blue_book: doc: document changelog7f8f55cMerge branch 'main' into next4c28294Merge pull request #1662 from raunak-rpm/feature/my-contributionbb45335:blue_book: doc: document changelogd097155Merge branch 'main' into next- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for elysia since your current version.
Updates jose from 6.0.11 to 6.1.3
Release notes
Sourced from jose's releases.
v6.1.3
Refactor
v6.1.2
Refactor
v6.1.1
Documentation
- add link to RFC9864 (767edde)
- link to ML-DSA for JOSE (ed4252c)
- remove mention of Edge Runtime from the readme (94fdde7)
- update README.md (25098ef)
Refactor
- eliminate named exports in the source code (f6ae30d)
- expose setKeyManagementParameters also on a GeneralEncrypt Recipient (16e6b23)
- faster path for symmetric key checks (a44c2ec)
- improve en/decoding overheads (daee426)
v6.1.0
Features
- support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)
- support for the ML-DSA PQC Algorithm Identifiers (25ddce4)
v6.0.13
Refactor
v6.0.12
Documentation
- add known caveats to customFetch (02e1f1e)
- mention the apu/apv parameter names in setKeyManagementParameters (6274d5a)
- update compact setKeyManagementParameters (2f44381)
- use GitHub Flavored Markdown for notes and warnings (f6b4ffc)
Refactor
- createPublicKey is not a constructor (61ded78)
... (truncated)
Changelog
Sourced from jose's changelog.
6.1.3 (2025-12-02)
Refactor
6.1.2 (2025-11-15)
Refactor
6.1.1 (2025-11-09)
Documentation
- add link to RFC9864 (767edde)
- link to ML-DSA for JOSE (ed4252c)
- remove mention of Edge Runtime from the readme (94fdde7)
- update README.md (25098ef)
Refactor
- eliminate named exports in the source code (f6ae30d)
- expose setKeyManagementParameters also on a GeneralEncrypt Recipient (16e6b23)
- faster path for symmetric key checks (a44c2ec)
- improve en/decoding overheads (daee426)
6.1.0 (2025-08-27)
Features
- support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)
- support for the ML-DSA PQC Algorithm Identifiers (25ddce4)
6.0.13 (2025-08-21)
Refactor
6.0.12 (2025-07-15)
... (truncated)
Commits
ebb8774chore(release): 6.1.36303d98refactor: avoid export * as for google closure's compiler sake39c8805chore: bump packagescf5726echore: update error message0154775chore: update threat modeld015cdfchore: add a threat modelc5e285echore: bump packagesd681315chore: bump packages4ae1005chore(deps-dev): bump glob from 11.0.3 to 11.1.0 (#831)aaedc25chore(deps-dev): bump js-yaml from 3.14.1 to 3.14.2 (#830)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for jose since your current version.
Updates radashi from 12.6.0 to 12.7.1
Release notes
Sourced from radashi's releases.
v12.7.1
Fixed
- Ensure DurationParser static properties can be tree-shaked in b9d7529
v12.7.0
New Functions
Add
getOrInsertandgetOrInsertComputedfunctions [→ PR #444](radashi-org/radashi#444)Access or initialize map entries without boilerplate branching.
getOrInsertwrites the provided value once, whilegetOrInsertComputedlazily creates an entry only when it is missing.
- Works with both
MapandWeakMapinstances- Returns the stored entry so you can chain additional logic
- Avoids unnecessary factory calls when a key already exists
import * as _ from 'radashi'const counts = new Map<string, number>()
_.getOrInsert(counts, 'clicks', 1) // => 1 _.getOrInsert(counts, 'clicks', 5) // => 1 _.getOrInsertComputed(counts, 'views', () => 10) // => 10 _.getOrInsertComputed(counts, 'views', () => 0) // => 10
Inspired by TC39's upsert proposal.
🔗 Docs: getOrInsert · getOrInsertComputed / Source: getOrInsert.ts · getOrInsertComputed.ts / Tests: getOrInsert.test.ts · getOrInsertComputed.test.ts
Add
isArrayEqualfunction [→ PR #417](radashi-org/radashi#417)Compare arrays with
Object.isprecision.isArrayEqualchecks length and element identity, correctly handling tricky cases likeNaN, sparse arrays, and the+0/-0distinction.
- Uses
Object.issoNaNmatches itself while+0and-0stay distinct- Short-circuits when lengths differ for a fast inequality check
- Leaves the original arrays untouched
import * as _ from 'radashi'_.isArrayEqual([1, 2, 3], [1, 2, 3]) // => true _.isArrayEqual([0], [-0]) // => false _.isArrayEqual([Number.NaN], [Number.NaN]) // => true
... (truncated)
Changelog
Sourced from radashi's changelog.
[radashi@12.7.1] - 2025-11-19
Details
Fixed
- Ensure DurationParser static properties can be tree-shaked in b9d7529
[radashi@12.7.0] - 2025-10-17
Details
Added
- Add
identityfunction in 38e2f37- Add
isArrayEqualfunction in 095f2b0- Add
isMapEqualandisSetEqualfunctions in 0fa566a- Add
getOrInsertandgetOrInsertComputedin 4675076- (objectify) Add
indexparameter to getKey and getValue functions in 1506472- Add absoluteJitter and proportionalJitter in ebea7d7
Changed
- Preserve tuple type in
min/maxeven with agetterin c72a1c4- Use
identityas default getter forsortin df55a6e[radashi@12.6.2] - 2025-08-20
Details
Fixed
- (range) Ensure
endparameter works when 0 in 9c8ffa0[radashi@12.6.1] - 2025-08-09
Details
Fixed
- (group) Use
Object.create(null)for the returned object in 5db8c37
Commits
478e0cdchore(release): 12.7.1763e630chore: update .cliffignoreb9d7529fix: ensure DurationParser static properties can be tree-shaked (#447)0154943chore(scripts): use dist build for tree-shake-check6207890chore: add tree-shake-check script6c8276aRevert "feat!: transpile to Node18 syntax (#448)"b109d1efeat!: transpile to Node18 syntax (#448)f0c9c33chore(docs): remove unnecessary await in example900f2e8chore(release): 12.7.011d932dchore: prepare release notes- Additional commits viewable in compare view
Updates @biomejs/biome from 2.0.6 to 2.3.11
Release notes
Sourced from @biomejs/biome's releases.
Biome CLI v2.3.11
2.3.11
Patch Changes
#8583
83be210Thanks@dyc3! - Added the new nursery ruleuseVueValidTemplateRoot.This rule validates only root-level
\<template>elements in Vue single-file components. If the\<template>has asrcattribute, it must be empty. Otherwise, it must contain content.Invalid examples:
\<template src="./foo.html">content</template>\<template></template>Valid examples:
\<template>content</template>\<template src="./foo.html"></template>#8586
df8fe06Thanks@dyc3! - Added a new nursery ruleuseVueConsistentVBindStyle. Enforces consistentv-bindstyle (:propshorthand vsv-bind:proplonghand). Default prefers shorthand; configurable via rule options.#8587
9a8c98dThanks@dyc3! - Added the ruleuseVueVForKey, which enforces that any element usingv-foralso specifies akey.Invalid
<li v-for="item in items">{{ item }}</li>Valid
<li v-for="item in items" :key="item.id">{{ item }}</li>#8586
df8fe06Thanks@dyc3! - Added a new nursery ruleuseVueConsistentVOnStyle. Enforces consistentv-onstyle (@eventshorthand vsv-on:eventlonghand). Default prefers shorthand; configurable via rule options.#8583
83be210Thanks@dyc3! - Added the new nursery ruleuseVueValidVOnce. Enforces that usages of thev-oncedirective in Vue.js SFC are valid.
... (truncated)
Changelog
Sourced from @biomejs/biome's changelog.
2.3.11
Patch Changes
#8583
83be210Thanks@dyc3! - Added the new nursery ruleuseVueValidTemplateRoot.This rule validates only root-level
\<template>elements in Vue single-file components. If the\<template>has asrcattribute, it must be empty. Otherwise, it must contain content.Invalid examples:
\<template src="./foo.html">content</template>\<template></template>Valid examples:
\<template>content</template>\<template src="./foo.html"></template>#8586
df8fe06Thanks@dyc3! - Added a new nursery ruleuseVueConsistentVBindStyle. Enforces consistentv-bindstyle (:propshorthand vsv-bind:proplonghand). Default prefers shorthand; configurable via rule options.#8587
9a8c98dThanks@dyc3! - Added the ruleuseVueVForKey, which enforces that any element usingv-foralso specifies akey.Invalid
<li v-for="item in items">{{ item }}</li>Valid
<li v-for="item in items" :key="item.id">{{ item }}</li>#8586
df8fe06Thanks@dyc3! - Added a new nursery ruleuseVueConsistentVOnStyle. Enforces consistentv-onstyle (@eventshorthand vsv-on:eventlonghand). Default prefers shorthand; configurable via rule options.#8583
83be210Thanks@dyc3! - Added the new nursery ruleuseVueValidVOnce. Enforces that usages of thev-oncedirective in Vue.js SFC are valid.<!-- Valid -->
... (truncated)
Commits
1550e73ci: release (#8507)a3a27a7feat(analyze/html/vue): add useVueVapor rule (#8644)9a8c98dfeat(analyze/html/vue): adduseVueVForKey(#8587)ab9af9afeat: no-jsx-props-bind (#7410)df8fe06feat(analyze/html/vue): add v-bind/v-on style rules (#8586)83be210feat(analyze/html/vue): add a few more simple vue lint rules (#8583)a3a1ad2feat(biome_js_analyze): portnoBeforeInteractiveScriptOutsideDocumentfrom ...9dd9ca7feat(graphql_analyze): implement useUniqueArgumentNames (#8591)5e85d43feat(graphql_analyze): implement useUniqueFieldDefinitionNames (#8598)a5f59cdfeat(graphql_analyze): implement useUniqueInputFieldNames (#8592)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @biomejs/biome since your current version.
Updates @types/bun from 1.2.18 to 1.3.6
Commits
- See full diff in compare view
Updates drizzle-kit from 0.31.4 to 0.31.8
Release notes
Sourced from drizzle-kit's releases.
drizzle-kit@0.31.8
Bug fixes
- Fixed
algorythm=>algorithmtypo.- Fixed external dependencies in build configuration.
drizzle-kit@0.31.6
Bug fixes
drizzle-kit@0.31.5
- Add casing support to studio configuration and related functions
Commits
c445637Merge pull request #5095 from drizzle-team/main-workflowse7b3aaaMerge branch 'main' into main-workflows0d885a5refactor: Update condition for run-feature job to improve clarity and functio...45a1ffbMerge pull request #5087 from drizzle-team/main-workflows6357645chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows53dec98refactor: Simplify release router workflow by removing unnecessary switch job...ce88a18Merge remote-tracking branch 'origin/ext-deps-kit' into main-workflows5c8a4c5+73e2ea4feat: Add release router workflow to manage feature and latest releases378b043Merge pull request #5002 from drizzle-team/main-next-pack- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for drizzle-kit since your current version.
Updates newman from 6.2.1 to 6.2.2
Commits
Updates pg from 8.16.3 to 8.17.1
Changelog
Sourced from pg's changelog.
All major and minor releases are briefly explained below.
For richer information consult the commit log on github with referenced pull requests.
We do not include break-fix version release in this file.
pg@8.17.0
- Throw correct error if database URL parsing fails.
pg@8.16.0
- Add support for min connection pool size.
pg@8.15.0
- Add support for esm importing. CommonJS importing is still also supported.
pg@8.14.0
- Add support from SCRAM-SAH-256-PLUS i.e. channel binding.
pg@8.13.0
- Add ability to specify query timeout on per-query basis.
pg@8.12.0
- Add
queryModeconfig option to force use of the extended query protocol on queries without any parameters.pg-pool@8.10.0
- Emit
releaseevent when client is returned to the pool.pg@8.9.0
- Add support for stream factory.
- Better errors for SASL authentication.
- Use native crypto module for SASL authentication.
pg@8.8.0
- Bump minimum required version of native bindings.
- Catch previously uncatchable errors thrown in
pool.query.- Prevent the pool from blocking the event loop if all clients are idle (and
allowExitOnIdleis enabled).- Support
lock_timeoutin client config.- Fix errors thrown in callbacks from interfering with cleanup.
pg-pool@3.5.0
... (truncated)
Commits
4eb7529Publishb94c8e1Don't use prefix import as it breaks in old nodes. (#3578)6bf475cImprove Deno compatibility: config-first and safe env access (#3547)d10e09cPublish9174783test: Replace dead row length check with similar shape check (#3532)27a2754Deprecations (#3510)- See full diff in compare view
Updates typescript from 5.8.3 to 5.9.3
Release notes
Sourced from typescript's releases.
TypeScript 5.9.3
Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.
For release notes, check out the release announcement
- fixed issues query for Typescript 5.9.0 (Beta).
- fixed issues query for Typescript 5.9.1 (RC).
- No specific changes for TypeScript 5.9.2 (Stable)
Package Dependencies
Technical Details
| ID: | 13131405 |
| UUID: | 3825701483 |
| Node ID: | PR_kwDOO8FzmM69zu8g |
| Host: | GitHub |
| Repository: | bedstack/bedstack-stripped |