chore(deps-dev): bump @medusajs/framework from 2.8.5 to 2.11.3 by dependabot[bot] · Pull Request #235 · a11rew/medusa-payment-paystack

dependabot · 2025-12-01T02:41:58Z

Bumps @medusajs/framework from 2.8.5 to 2.11.3.

Release notes

Sourced from @medusajs/framework's releases.

v2.11.3: Dependency clean-up

Highlights

Dependency clean-up and restructuring

This release comes with a major clean-up of dependencies used across our packages.

The clean-up includes 1) replacing large dependencies with native code to reduce bundle size, 2) ensuring unified dependency versions across packages, and 3) eliminating security vulnerabilities from dependencies.

As a result of these changes, the production node_modules have been reduced from 1GB+ → 837MB (approx. -16%), and we are down to a single low security vulnerability.

You can read more about the changes in medusajs/medusa#13932, medusajs/medusa#13910, and medusajs/medusa#13940.

Features

feat(dashboard): include missing columns import template by @NicolasGorga in medusajs/medusa#13958

Bugs

fix: Updates to medusa payments provider by @sradevski in medusajs/medusa#13914

fix(): update Integration test enabling index when not necessary by @adrien2p in medusajs/medusa#13904

chore(): Fix dependencies by @adrien2p in medusajs/medusa#13932

fix: Update type Providers by @juanzgc in medusajs/medusa#13927

fix opentelemetry-resources dependency typo by @peterlgh7 in medusajs/medusa#13948

fix(types, medusa): fixes to http types and validators by @shahednasser in medusajs/medusa#13928

Remove fetchPreviousPage/fetchNextPage from dependency array of useEf… by @NicolasGorga in medusajs/medusa#13949

fix(medusa): priced products region_id regression by @NicolasGorga in medusajs/medusa#13961

fix(): Index integration tests flackyness by @adrien2p in medusajs/medusa#13953

Documentation

docs: docs for next release by @shahednasser in medusajs/medusa#13907

chore(docs): Generated DML JSON files (automated) by @github-actions[bot] in medusajs/medusa#13919

docs: document asymmetric encryption by @shahednasser in medusajs/medusa#13922

docs: clarify prices are stored in major units by @shahednasser in medusajs/medusa#13897

chore(docs): Generated References (automated) by @github-actions[bot] in medusajs/medusa#13921

docs: generate OAS for 2.11.2 by @shahednasser in medusajs/medusa#13925

docs: fix deployment error by @shahednasser in medusajs/medusa#13942

docs: fix broken image in billing docs + clarify billing details by @shahednasser in medusajs/medusa#13944

docs: fixes to recipes and examples following latest update by @shahednasser in medusajs/medusa#13933

Include expected Sentry opentelemetry 1.x peer deps by @NicolasGorga in medusajs/medusa#13947

docs: add keywords to Cloud sign up guide by @shahednasser in medusajs/medusa#13950

docs: added product rental tutorial by @shahednasser in medusajs/medusa#13896

docs: refactor analytics + remove segment by @shahednasser in medusajs/medusa#13954

... (truncated)

Changelog

Sourced from @medusajs/framework's changelog.

2.11.3

Patch Changes

#13948 28c3ea68f5634792848f146ac6af5b27c848bf21 Thanks @peterlgh7! - fix typo in opentelemetry-resources.ts name

#13910 224ab39a81e8d3cf3d6fa3ff5eee82541f64728d Thanks @adrien2p! - chore(): Dependencies cleanup and improvements

#13940 afb40d437b3cc4ceb015df70985b2f005f40eaff Thanks @adrien2p! - chore(): Cleanup and organize deps

#13932 37563987b8fe75c9acfe62957a33e8398977647a Thanks @adrien2p! - chore(): Fix dependencies vulnerabilities

#13898 13d7d15be594ca413785eebe8f86b47c36cb9830 Thanks @carlos-r-l-rodrigues! - chore(modules-sdk): parallel migrations

Updated dependencies [42b270ed2df09474f528d8d23816e0affcf4bd25, 224ab39a81e8d3cf3d6fa3ff5eee82541f64728d, afb40d437b3cc4ceb015df70985b2f005f40eaff, e66f7cf59e516f12e5446e191e9fdd1aede9c8ab, 37563987b8fe75c9acfe62957a33e8398977647a, 516e217dbb848b71810e006c4eab914a40d7ecfc, 13d7d15be594ca413785eebe8f86b47c36cb9830]:

@medusajs/types@2.11.3

@medusajs/cli@2.11.3

@medusajs/deps@2.11.3

@medusajs/modules-sdk@2.11.3

@medusajs/orchestration@2.11.3

@medusajs/telemetry@2.11.3

@medusajs/utils@2.11.3

@medusajs/workflows-sdk@2.11.3

2.11.2

Patch Changes

#13869 85b1f3d43aa8d8e0269a545ef7867733fd0eb8e2 Thanks @adrien2p! - feat(index): Add support for API end points to interact with the index module

Updated dependencies [cc2614ded7f83cdbe7e7f7f809d05f5ab6059fe4, 01ee437926f0a4ec587510c65f8282620bf72d3f, 25a20ca95f702dfb8a34fe9e4f3c565a47c2655e, ec4443287601f5fe1544b305873f3aa151ed1bd7, 47572816778e21432d0201f4b2642a765c86fdbc, 66bbe39a8ee812ae88b7f06f7d911b8254b1c87e, c9701c70da33bb81aca1560ac5b96ea53fb61060, 6d7ba778f5ace76350ac6f249b855b21fb43a03e, 85b1f3d43aa8d8e0269a545ef7867733fd0eb8e2, 1defb3c29bfe018fd5f89b5a9e27fc8a31d72cdd]:

@medusajs/types@2.11.2

@medusajs/utils@2.11.2

@medusajs/modules-sdk@2.11.2

@medusajs/orchestration@2.11.2

@medusajs/workflows-sdk@2.11.2

@medusajs/cli@2.11.2

@medusajs/deps@2.11.2

@medusajs/telemetry@2.11.2

2.11.1

Patch Changes

Updated dependencies [d51ae2768be0dad5ece49324aa4866bb591e7ad0, bad0858348dca100533bb6fcdcdefe90b0668407, 5df903f5fb52d1e37d13bfe72ed9c226c1eb46b4]:

@medusajs/orchestration@2.11.1

@medusajs/workflows-sdk@2.11.1

@medusajs/types@2.11.1

@medusajs/modules-sdk@2.11.1

@medusajs/utils@2.11.1

... (truncated)

Commits

645266c chore: Version Packages (#13923)
28c3ea6 chore: fix opentelemetry-resources dependency typo (#13948)
afb40d4 chore(): Cleanup and organize deps (#13940)
3756398 chore(): Fix dependencies (#13932)
224ab39 chore(): Update dependencies usage (#13910)
13d7d15 chore(modules-sdk): parallel migrations (#13898)
31b9ae3 chore: Version Packages (#13853)
85b1f3d feat(index): Add http/module api to interact with the index engine (#13869)
6e73f8b chore: Version Packages (#13800)
e47f0d0 chore: Version Packages (#13545)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [@medusajs/framework](https://github.com/medusajs/medusa/tree/HEAD/packages/core/framework) from 2.8.5 to 2.11.3. - [Release notes](https://github.com/medusajs/medusa/releases) - [Changelog](https://github.com/medusajs/medusa/blob/develop/packages/core/framework/CHANGELOG.md) - [Commits](https://github.com/medusajs/medusa/commits/@medusajs/framework@2.11.3/packages/core/framework) --- updated-dependencies: - dependency-name: "@medusajs/framework" dependency-version: 2.11.3 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2025-12-01T02:42:01Z

⚠️ No Changeset found

Latest commit: a67b471

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump @medusajs/framework from 2.8.5 to 2.11.3#235

chore(deps-dev): bump @medusajs/framework from 2.8.5 to 2.11.3#235
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/medusajs/framework-2.11.3

dependabot Bot commented on behalf of github Dec 1, 2025 •

edited

Loading

Uh oh!

changeset-bot Bot commented Dec 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Dec 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.11.3: Dependency clean-up

Highlights

Dependency clean-up and restructuring

Features

Bugs

Documentation

2.11.3

Patch Changes

2.11.2

Patch Changes

2.11.1

Patch Changes

Uh oh!

changeset-bot Bot commented Dec 1, 2025

⚠️ No Changeset found

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Dec 1, 2025 •

edited

Loading