Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 17, 2026

Bumps the bun group with 12 updates in the / directory:

Package From To
@elysiajs/eden 1.3.2 1.4.6
@elysiajs/static 1.3.0 1.4.7
chalk 5.4.1 5.6.2
elysia 1.3.5 1.4.22
jose 6.0.11 6.1.3
nanoid 5.1.5 5.1.6
radashi 12.6.0 12.7.1
@biomejs/biome 2.0.6 2.3.11
@types/bun 1.2.18 1.3.6
newman 6.2.1 6.2.2
pg 8.16.3 8.17.1
typescript 5.8.3 5.9.3

Updates @elysiajs/eden from 1.3.2 to 1.4.6

Release notes

Sourced from @​elysiajs/eden's releases.

1.4.6

What's Changed

New Contributors

Full Changelog: elysiajs/eden@1.4.5...1.4.6

1.4.5

What's Changed

Improvement:

  • export EdenFetchError

Bug fix:

  • #221 better handling for empty header and query types by @​KurtGokhan
  • use ResponseInit['headers'] instead of HeadersInit for response headers type

New Contributors

Full Changelog: elysiajs/eden@1.4.4...1.4.5

1.4.4

What's changed

Bug fix:

  • revert transfer encoding chunk

Full Changelog: elysiajs/eden@1.4.3...1.4.4

1.4.3

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from @​elysiajs/eden's changelog.

1.4.6 - 23 Dec 2025

Bug fix:

  • #235 SSE stream parser with partial chunks
  • #234 Handle network errors in treaty and edenFetch
  • #230 properly await async headers functions in treaty
  • #229 auto-stringify ArrayString/ObjectString in FormData
  • #227 correct type inference for t.Date() in query parameters

1.4.5 - 13 Nov 2025

Improvement:

  • export EdenFetchError

Bug fix:

  • #221 better handling for empty header and query types
  • use ResponseInit['headers'] instead of HeadersInit for response headers type

1.4.4 - 13 Oct 2025

Bug fix:

  • revert streaming transferEncoding chunked

1.4.3 - 12 Oct 2025

Bug fix:

  • elysia#1466 / treaty2: unpack multiple SSE chunk
  • #213, #214 stream response on transfer-encoding: chunked
  • #201, #203 error codes returned in middleware are not inferred by Eden Treaty
  • #179 formdata post, wrong inference of json payload
  • #124 array file upload bug on server
  • #122 ws response data type

1.4.1 - 14 Sep 2025

Bug fix:

  • inline object value / Elysia file cause type error
  • macro should not mark property as required

1.4.0 - 13 Sep 2025

Improvement:

  • support Elysia 1.4

1.3.3 - 24 Aug 2025

Feature:

  • treaty2: support type safe Server-Sent Events (SSE)
  • treaty2: add utility type Treaty.Data, Treaty.Error to extract data and error type from a route

Bug fix:

  • elysia#823 treaty2: not generating for dynamic params at root
  • treaty2: parse Date in object
  • treaty2: #196 allow custom content-type

Change:

  • minimum Elysia version is set to 1.3.18
Commits
  • 675e61a 🧹 chore: use oidc
  • 49173ca 🔧 fix: remove old test case
  • 5bbf6e5 Merge pull request #229 from Teyik0/feat/auto-stringify-formdata
  • 4c2440b Merge branch 'main' into feat/auto-stringify-formdata
  • 40e6fa5 Merge pull request #230 from gulivan/fix/async-headers-support
  • 770a371 Merge pull request #234 from truehazker/bugfix/catch-fetch-connection-errors
  • de2cea0 Merge branch 'main' into bugfix/catch-fetch-connection-errors
  • ff907b8 Merge pull request #235 from ViliamKopecky/main
  • 48f0bc7 Merge pull request #227 from crishoj/type-fix-for-date-in-query
  • a111052 fix: support BunFile for t.File with elysia v1.4.19
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​elysiajs/eden since your current version.


Updates @elysiajs/static from 1.3.0 to 1.4.7

Release notes

Sourced from @​elysiajs/static's releases.

1.4.7

What's changed

Bug fix:

  • remove trailing slash on Windows

Full Changelog: elysiajs/elysia-static@1.4.6...1.4.7

1.4.6

What's changed

Bug fix:

  • normalize path only when unsafe
  • cache crypto package import

Full Changelog: elysiajs/elysia-static@1.4.5...1.4.6

1.4.5

What's Changed

New Contributors

Full Changelog: elysiajs/elysia-static@1.4.4...1.4.5

1.4.4

What's changed

Bug fix:

  • fix cjs main import

Full Changelog: elysiajs/elysia-static@1.4.3...1.4.4

1.4.3

What's changed

Improvement:

  • adjust build script
  • remove stat cache

Full Changelog: elysiajs/elysia-static@1.4.2...1.4.3

1.4.2

What's changed

Improvement:

  • better caching mechanism
  • scope cache to each instance

... (truncated)

Changelog

Sourced from @​elysiajs/static's changelog.

1.4.7 - 17 Nov 2025

Bug fix:

  • remove trailing slash on Windows

1.4.6 - 3 Nov 2025

Bug fix:

  • normalize path only when unsafe
  • cache crypto package import

1.4.5 - 1 Nov 2025

Bug fix:

  • #52 resolve static paths correctly on Windows

1.4.4 - 14 Oct 2025

Bug fix:

  • fix cjs main import

1.4.3 - 13 Oct 2025

Improvement:

  • adjust build script
  • remove stat cache

1.4.2 - 13 Oct 2025

Improvement:

  • better caching mechanism
  • scope cache to each instance

1.4.1 - 13 Oct 2025

Improvement:

  • enable Bun full stack support
  • general performance improvement
  • #34 log errors, make it easier to debug errors inside @​elysiajs/static
  • #44 fixed edge case when working dir is root
  • use process.getBuiltinModules instead of import
  • refactor codebase to be more readable
  • rename noCache to cache
  • use Bun.Glob if Bun is detected
  • conditional run listFiles only when necessary
  • reduce seed to prefix parameter
  • cache etag generation

Change:

  • remove node-cache dependency
  • remove handle safe sep for windows as Node already handle it

Breaking Change:

  • rename enableDecodeURI to decodeURI
  • remove resolve options, use default path.resolve instead

1.3.0-exp.0 - 23 Apr 2025

... (truncated)

Commits
  • 4d12f68 🔧 fix: remove trailing slash on windows
  • 006fe7e 🔧 fix: normalize path when necessary
  • a6dc9bf 🔧 fix: resolve static paths correctly on Windows
  • c1ca17f Merge pull request #52 from denysovvl/main
  • 6b58da2 fix: resolve static paths correctly on Windows
  • 516491c 📘 doc: fix main import
  • 3527841 📘 doc: fix main import
  • f4f14f3 📘 doc: adjust build script
  • e99692b 📘 doc: adjust build script
  • c095eb8 📘 feat: remove stat cache
  • Additional commits viewable in compare view

Updates chalk from 5.4.1 to 5.6.2

Release notes

Sourced from chalk's releases.

v5.6.2

v5.6.0

  • Make WezTerm terminal use true color a8f5bf7

chalk/chalk@v5.5.0...v5.6.0

v5.5.0

  • Make Ghostty terminal use true color (#653) 79ee2d3

chalk/chalk@v5.4.1...v5.5.0

Commits

Updates elysia from 1.3.5 to 1.4.22

Release notes

Sourced from elysia's releases.

1.4.22

What's Changed

Improvement:

  • #1655 decode single values in ArrayQuery by @​zoriya
  • use imperative check for replaceURLPath instead of allocating new URL
  • reduce ts-ignore/ts-expect-error on promise map handler

Bug fix:

  • #1671 mount produces incorrect URL path when Elysia instance has prefix option
  • elysiajs/elysia#1617, #1623 AOT compilation removes beforeHandle when using arrow function expression by @​tt-a1i
  • #1667 skip body parsing on mount with dynamic mode
  • #1662 custom thenable fallback in mapCompactResponse causing runtime crash with undefined variable by @​raunak-rpm
  • #1661, #1663 fix SSE double-wrapping bug when returning pre-formatted Response by @​raunak-rpm in
  • ValueError with summary missing types
  • Elysia not using Bun.routes by default

New Contributors

Full Changelog: elysiajs/elysia@1.4.21...1.4.22

1.4.21

What's Changed

Improvement:

Bug fix:

  • call Sucrose GC unref when possible (browser fallback)
  • add allowUnsafeValidationDetails to Standard Validator

New Contributors

Full Changelog: elysiajs/elysia@1.4.20...1.4.21

1.4.20

What's Changed

Improvement:

  • add ModelValidator.schema for accessing raw schema
  • #1636 add subscriptions to Elysia.ws context
  • #1638 unref Sucrose gc by @​akim-bow

Bug fix:

  • #1649 add null check for object properties (t.Record) by @​aymaneallaoui
  • #1646 use constant-time comparison for signed cookie verification by @​JNX03
  • #1639 compose: ReferenceError: "_r_r is not defined" when onError returns plain object & mapResponse exists
  • #1631 update Exact Mirror to 0.2.6

... (truncated)

Changelog

Sourced from elysia's changelog.

1.4.22 - 14 Jan 2026

Improvement:

  • use imperative check for replaceURLPath instead of allocating new URL
  • reduce ts-ignore/ts-expect-error on promise map handler
  • #1655 decode single values in ArrayQuery

Bug fix:

  • #1671 mount produces incorrect URL path when Elysia instance has prefix option
  • elysiajs/elysia#1617, #1623 AOT compilation removes beforeHandle when using arrow function expression
  • #1667 skip body parsing on mount with dynamic mode
  • #1662 custom thenable fallback in mapCompactResponse causing runtime crash with undefined variable
  • #1661, #1663 fix SSE double-wrapping bug when returning pre-formatted Response
  • ValueError with summary missing types
  • Elysia not using Bun.routes by default

1.4.21 - 4 Jan 2026

Improvement:

  • #1654 encode t.Date() to iso string
  • #1624 apply macros before merging hooks in group method

Bug fix:

  • call Sucrose GC unref when possible (browser fallback)
  • add allowUnsafeValidationDetails to Standard Validator

1.4.20 - 3 Jan 2026

Improvement:

  • add ModelValidator.schema for accessing raw schema
  • #1636 add subscriptions to Elysia.ws context
  • #1638 unref Sucrose gc

Bug fix:

  • #1649 add null check for object properties (t.Record)
  • #1646 use constant-time comparison for signed cookie verification
  • #1639 compose: ReferenceError: "_r_r is not defined" when onError returns plain object & mapResponse exists
  • #1631 update Exact Mirror to 0.2.6
  • #1630 enforce fetch to return MaybePromise

Bug fix:

  • Elysia.models broke when referencing non typebox model

1.4.19 - 13 Dec 2025

Security:

  • reject invalid cookie signature when using cookie rotation

Improvement

  • #1609 calling afterResponse with aot: false
  • #1607, #1606, #1139 data coercion on nested form data
  • #1604 save lazy compilation of Elysia.fetch for up to 45x performance improvement
  • #1588, #1587 add seen weakset during mergeDeep

... (truncated)

Commits
  • f027642 📘 doc: document changelog
  • 935efe2 Merge pull request #1657 from elysiajs/next
  • 131a452 📘 doc: 1.4.22
  • 4478914 🧹 chore: clean up code review feedback
  • 8c42013 Merge pull request #1655 from zoriya/patch-2
  • bc882d4 📘 doc: document changelog
  • 7f8f55c Merge branch 'main' into next
  • 4c28294 Merge pull request #1662 from raunak-rpm/feature/my-contribution
  • bb45335 📘 doc: document changelog
  • d097155 Merge branch 'main' into next
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for elysia since your current version.


Updates jose from 6.0.11 to 6.1.3

Release notes

Sourced from jose's releases.

v6.1.3

Refactor

  • avoid export * as for google closure's compiler sake (6303d98), closes #832

v6.1.2

Refactor

v6.1.1

Documentation

  • add link to RFC9864 (767edde)
  • link to ML-DSA for JOSE (ed4252c)
  • remove mention of Edge Runtime from the readme (94fdde7)
  • update README.md (25098ef)

Refactor

  • eliminate named exports in the source code (f6ae30d)
  • expose setKeyManagementParameters also on a GeneralEncrypt Recipient (16e6b23)
  • faster path for symmetric key checks (a44c2ec)
  • improve en/decoding overheads (daee426)

v6.1.0

Features

  • support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)
  • support for the ML-DSA PQC Algorithm Identifiers (25ddce4)

v6.0.13

Refactor

  • more readability in ecdhes.ts (84da9de)
  • update asn1.ts helpers (b4f8fb3)

v6.0.12

Documentation

  • add known caveats to customFetch (02e1f1e)
  • mention the apu/apv parameter names in setKeyManagementParameters (6274d5a)
  • update compact setKeyManagementParameters (2f44381)
  • use GitHub Flavored Markdown for notes and warnings (f6b4ffc)

Refactor

  • createPublicKey is not a constructor (61ded78)

... (truncated)

Changelog

Sourced from jose's changelog.

6.1.3 (2025-12-02)

Refactor

  • avoid export * as for google closure's compiler sake (6303d98), closes #832

6.1.2 (2025-11-15)

Refactor

6.1.1 (2025-11-09)

Documentation

  • add link to RFC9864 (767edde)
  • link to ML-DSA for JOSE (ed4252c)
  • remove mention of Edge Runtime from the readme (94fdde7)
  • update README.md (25098ef)

Refactor

  • eliminate named exports in the source code (f6ae30d)
  • expose setKeyManagementParameters also on a GeneralEncrypt Recipient (16e6b23)
  • faster path for symmetric key checks (a44c2ec)
  • improve en/decoding overheads (daee426)

6.1.0 (2025-08-27)

Features

  • support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)
  • support for the ML-DSA PQC Algorithm Identifiers (25ddce4)

6.0.13 (2025-08-21)

Refactor

  • more readability in ecdhes.ts (84da9de)
  • update asn1.ts helpers (b4f8fb3)

6.0.12 (2025-07-15)

... (truncated)

Commits
  • ebb8774 chore(release): 6.1.3
  • 6303d98 refactor: avoid export * as for google closure's compiler sake
  • 39c8805 chore: bump packages
  • cf5726e chore: update error message
  • 0154775 chore: update threat model
  • d015cdf chore: add a threat model
  • c5e285e chore: bump packages
  • d681315 chore: bump packages
  • 4ae1005 chore(deps-dev): bump glob from 11.0.3 to 11.1.0 (#831)
  • aaedc25 chore(deps-dev): bump js-yaml from 3.14.1 to 3.14.2 (#830)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for jose since your current version.


Updates nanoid from 5.1.5 to 5.1.6

Release notes

Sourced from nanoid's releases.

5.1.6

  • Fixed infinite loop on 0 size for customAlphabet.
Changelog

Sourced from nanoid's changelog.

5.1.6

  • Fixed infinite loop on 0 size for customAlphabet.
Commits

Updates radashi from 12.6.0 to 12.7.1

Release notes

Sourced from radashi's releases.

v12.7.1

Fixed

  • Ensure DurationParser static properties can be tree-shaked in b9d7529

v12.7.0

New Functions

Add getOrInsert and getOrInsertComputed functions [→ PR #444](radashi-org/radashi#444)

Access or initialize map entries without boilerplate branching. getOrInsert writes the provided value once, while getOrInsertComputed lazily creates an entry only when it is missing.

  • Works with both Map and WeakMap instances
  • Returns the stored entry so you can chain additional logic
  • Avoids unnecessary factory calls when a key already exists
import * as _ from 'radashi'
const counts = new Map<string, number>()
_.getOrInsert(counts, 'clicks', 1) // => 1
_.getOrInsert(counts, 'clicks', 5) // => 1
_.getOrInsertComputed(counts, 'views', () => 10) // => 10
_.getOrInsertComputed(counts, 'views', () => 0) // => 10

Inspired by TC39's upsert proposal.

🔗 Docs: getOrInsert · getOrInsertComputed / Source: getOrInsert.ts · getOrInsertComputed.ts / Tests: getOrInsert.test.ts · getOrInsertComputed.test.ts

Add isArrayEqual function [→ PR #417](radashi-org/radashi#417)

Compare arrays with Object.is precision. isArrayEqual checks length and element identity, correctly handling tricky cases like NaN, sparse arrays, and the +0/-0 distinction.

  • Uses Object.is so NaN matches itself while +0 and -0 stay distinct
  • Short-circuits when lengths differ for a fast inequality check
  • Leaves the original arrays untouched
import * as _ from 'radashi'
_.isArrayEqual([1, 2, 3], [1, 2, 3]) // => true
_.isArrayEqual([0], [-0]) // => false
_.isArrayEqual([Number.NaN], [Number.NaN]) // => true

🔗 Docs / Source / Tests

... (truncated)

Changelog

Sourced from radashi's changelog.

[radashi@12.7.1] - 2025-11-19

Details

Fixed

  • Ensure DurationParser static properties can be tree-shaked in b9d7529

[radashi@12.7.0] - 2025-10-17

Details

Added

  • Add identity function in 38e2f37
  • Add isArrayEqual function in 095f2b0
  • Add isMapEqual and isSetEqual functions in 0fa566a
  • Add getOrInsert and getOrInsertComputed in 4675076
  • (objectify) Add index parameter to getKey and getValue functions in 1506472
  • Add absoluteJitter and proportionalJitter in ebea7d7

Changed

  • Preserve tuple type in min/max even with a getter in c72a1c4
  • Use identity as default getter for sort in df55a6e

[radashi@12.6.2] - 2025-08-20

Details

Fixed

  • (range) Ensure end parameter works when 0 in 9c8ffa0

[radashi@12.6.1] - 2025-08-09

Details

Fixed

  • (group) Use Object.create(null) for the returned object in 5db8c37
Commits
  • 478e0cd chore(release): 12.7.1
  • 763e630 chore: update .cliffignore
  • b9d7529 fix: ensure DurationParser static properties can be tree-shaked (#447)
  • 0154943 chore(scripts): use dist build for tree-shake-check
  • 6207890 chore: add tree-shake-check script
  • 6c8276a Revert "feat!: transpile to Node18 syntax (#448)"
  • b109d1e feat!: transpile to Node18 syntax (#448)
  • f0c9c33 chore(docs): remove unnecessary await in example
  • 900f2e8 chore(release): 12.7.0
  • 11d932d chore: prepare release notes
  • Additional commits viewable in compare view

Updates @biomejs/biome from 2.0.6 to 2.3.11

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.3.11

2.3.11

Patch Changes

  • #8583 83be210 Thanks @​dyc3! - Added the new nursery rule useVueValidTemplateRoot.

    This rule validates only root-level \<template> elements in Vue single-file components. If the \<template> has a src attribute, it must be empty. Otherwise, it must contain content.

    Invalid examples:

    \<template src="./foo.html">content</template>
    \<template></template>

    Valid examples:

    \<template>content</template>
    \<template src="./foo.html"></template>
  • #8586 df8fe06 Thanks @​dyc3! - Added a new nursery rule useVueConsistentVBindStyle. Enforces consistent v-bind style (:prop shorthand vs v-bind:prop longhand). Default prefers shorthand; configurable via rule options.

  • #8587 9a8c98d Thanks @​dyc3! - Added the rule useVueVForKey, which enforces that any element using v-for also specifies a key.

    Invalid

    <li v-for="item in items">{{ item }}</li>

    Valid

    <li v-for="item in items" :key="item.id">{{ item }}</li>
  • #8586 df8fe06 Thanks @​dyc3! - Added a new nursery rule useVueConsistentVOnStyle. Enforces consistent v-on style (@event shorthand vs v-on:event longhand). Default prefers shorthand; configurable via rule options.

  • #8583 83be210 Thanks @​dyc3! - Added the new nursery rule useVueValidVOnce. Enforces that usages of the v-once directive in Vue.js SFC are valid.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.3.11

Patch Changes

  • #8583 83be210 Thanks @​dyc3! - Added the new nursery rule useVueValidTemplateRoot.

    This rule validates only root-level \<template> elements in Vue single-file components. If the \<template> has a src attribute, it must be empty. Otherwise, it must contain content.

    Invalid examples:

    \<template src="./foo.html">content</template>
    \<template></template>

    Valid examples:

    \<template>content</template>
    \<template src="./foo.html"></template>
  • #8586 df8fe06 Thanks @​dyc3! - Added a new nursery rule useVueConsistentVBindStyle. Enforces consistent v-bind style (:prop shorthand vs v-bind:prop longhand). Default prefers shorthand; configurable via rule options.

  • #8587 9a8c98d Thanks @​dyc3! - Added the rule useVueVForKey, which enforces that any element using v-for also specifies a key.

    Invalid

    <li v-for="item in items">{{ item }}</li>

    Valid

    <li v-for="item in items" :key="item.id">{{ item }}</li>
  • #8586 df8fe06 Thanks @​dyc3! - Added a new nursery rule useVueConsistentVOnStyle. Enforces consistent v-on style (@event shorthand vs v-on:event longhand). Default prefers shorthand; configurable via rule options.

  • #8583 83be210 Thanks @​dyc3! - Added the new nursery rule useVueValidVOnce. Enforces that usages of the v-once directive in Vue.js SFC are valid.

    <!-- Valid -->

... (truncated)

Commits
  • 1550e73 ci: release (#8507)
  • a3a27a7 feat(analyze/html/vue): add useVueVapor rule (#8644)
  • 9a8c98d feat(analyze/html/vue): add useVueVForKey (#8587)
  • ab9af9a feat: no-jsx-props-bind (#7410)
  • df8fe06 feat(analyze/html/vue): add v-bind/v-on style rules (#8586)
  • 83be210 feat(analyze/html/vue): add a few more simple vue lint rules (#8583)
  • a3a1ad2 feat(biome_js_analyze): port noBeforeInteractiveScriptOutsideDocument from ...
  • 9dd9ca7 feat(graphql_analyze): implement useUniqueArgumentNames (#8591)
  • 5e85d43 feat(graphql_analyze): implement useUniqueFieldDefinitionNames (#8598)
  • a5f59cd feat(graphql_analyze): implement useUniqueInputFieldNames (#8592)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​biomejs/biome since your current version.


Updates @types/bun from 1.2.18 to 1.3.6

Commits

Updates newman from 6.2.1 to 6.2.2

Changelog

Sourced from newman's changelog.

6.2.2: date: 2026-01-16 chores: - Update dependencies

Commits

Updates pg from 8.16.3 to 8.17.1

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

pg@8.17.0

  • Throw correct error if database URL parsing fails.

pg@8.16.0

Bumps the bun group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@elysiajs/eden](https://github.com/elysiajs/eden) | `1.3.2` | `1.4.6` |
| [@elysiajs/static](https://github.com/elysiajs/elysia-static) | `1.3.0` | `1.4.7` |
| [chalk](https://github.com/chalk/chalk) | `5.4.1` | `5.6.2` |
| [elysia](https://github.com/elysiajs/elysia) | `1.3.5` | `1.4.22` |
| [jose](https://github.com/panva/jose) | `6.0.11` | `6.1.3` |
| [nanoid](https://github.com/ai/nanoid) | `5.1.5` | `5.1.6` |
| [radashi](https://github.com/radashi-org/radashi) | `12.6.0` | `12.7.1` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.0.6` | `2.3.11` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.2.18` | `1.3.6` |
| [newman](https://github.com/postmanlabs/newman) | `6.2.1` | `6.2.2` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.16.3` | `8.17.1` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `5.9.3` |



Updates `@elysiajs/eden` from 1.3.2 to 1.4.6
- [Release notes](https://github.com/elysiajs/eden/releases)
- [Changelog](https://github.com/elysiajs/eden/blob/main/CHANGELOG.md)
- [Commits](elysiajs/eden@1.3.2...1.4.6)

Updates `@elysiajs/static` from 1.3.0 to 1.4.7
- [Release notes](https://github.com/elysiajs/elysia-static/releases)
- [Changelog](https://github.com/elysiajs/elysia-static/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia-static@1.3.0...1.4.7)

Updates `chalk` from 5.4.1 to 5.6.2
- [Release notes](https://github.com/chalk/chalk/releases)
- [Commits](chalk/chalk@v5.4.1...v5.6.2)

Updates `elysia` from 1.3.5 to 1.4.22
- [Release notes](https://github.com/elysiajs/elysia/releases)
- [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia@1.3.5...1.4.22)

Updates `jose` from 6.0.11 to 6.1.3
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.0.11...v6.1.3)

Updates `nanoid` from 5.1.5 to 5.1.6
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.1.5...5.1.6)

Updates `radashi` from 12.6.0 to 12.7.1
- [Release notes](https://github.com/radashi-org/radashi/releases)
- [Changelog](https://github.com/radashi-org/radashi/blob/main/CHANGELOG.md)
- [Commits](radashi-org/radashi@v12.6.0...v12.7.1)

Updates `@biomejs/biome` from 2.0.6 to 2.3.11
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.11/packages/@biomejs/biome)

Updates `@types/bun` from 1.2.18 to 1.3.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `newman` from 6.2.1 to 6.2.2
- [Changelog](https://github.com/postmanlabs/newman/blob/develop/CHANGELOG.yaml)
- [Commits](postmanlabs/newman@v6.2.1...v6.2.2)

Updates `pg` from 8.16.3 to 8.17.1
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.17.1/packages/pg)

Updates `typescript` from 5.8.3 to 5.9.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.8.3...v5.9.3)

---
updated-dependencies:
- dependency-name: "@elysiajs/eden"
  dependency-version: 1.4.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@elysiajs/static"
  dependency-version: 1.4.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: chalk
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: elysia
  dependency-version: 1.4.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: jose
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: nanoid
  dependency-version: 5.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: radashi
  dependency-version: 12.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@biomejs/biome"
  dependency-version: 2.3.11
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/bun"
  dependency-version: 1.3.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: newman
  dependency-version: 6.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: pg
  dependency-version: 8.17.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant