Skip to content

TCS-3: Bump the minor-and-patch group across 1 directory with 16 updates#145

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-e06c39e0b2
Open

TCS-3: Bump the minor-and-patch group across 1 directory with 16 updates#145
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-e06c39e0b2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps the minor-and-patch group with 16 updates in the / directory:

Package From To
@aws-sdk/client-s3 3.1038.0 3.1041.0
@aws-sdk/client-ssm 3.1038.0 3.1041.0
openapi-typescript 7.7.3 7.13.0
@nx/devkit 22.4.2 22.7.1
@nx/eslint 22.4.2 22.7.1
@nx/eslint-plugin 22.4.2 22.7.1
@nx/js 22.4.2 22.7.1
@nx/plugin 22.4.2 22.7.1
@nx/vitest 22.4.2 22.7.1
@nx/web 22.4.2 22.7.1
@vitest/coverage-v8 4.0.9 4.1.5
@vitest/ui 4.0.9 4.1.5
create-nx-workspace 22.4.2 22.7.1
nx 22.4.2 22.7.1
vitest 4.0.9 4.1.5
enquirer 2.3.6 2.4.1

Updates @aws-sdk/client-s3 from 3.1038.0 to 3.1041.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1041.0

3.1041.0(2026-05-01)

Chores
  • core/client: emit warning for Node.js 20.x end-of-support (#7973) (00383767)
  • workflows: migrate git-sync SSH key from GitHub secret to Secrets Manager via OIDC (#7978) (c056a2e3)
  • codegen: smithy-aws-typescript-codegen 0.49.1 (#7980) (7bb42b39)
Documentation Changes
  • client-iam: Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates (b4bb6928)
New Features
  • clients: update client endpoints as of 2026-05-01 (d48b40d5)
  • client-iot: AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests. (82edd29f)
  • client-appstream: Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail. (5ca40b43)
  • client-quicksight: Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API. (a625879c)
  • client-cloudwatch: This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources. (e87c1479)
  • client-entityresolution: Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels. (20487961)
  • client-cloudwatch-logs: Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter. (25dc6d23)
  • client-qconnect: Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics. (2c668c9d)
Bug Fixes
  • lib-storage: use Math.ceil in default partSize calculation to prevent exceeding 10,000 parts (#7982) (8a58046b)

For list of updated packages, view updated-packages.md in assets-3.1041.0.zip

v3.1040.0

3.1040.0(2026-04-30)

New Features
  • clients: update client endpoints as of 2026-04-30 (2620ccbd)
  • client-bedrock-agentcore-control: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. (6b9d13e3)
  • client-route53globalresolver: Adds support for regions in the UpdateGlobalResolver input. (84b15b2e)
  • client-sagemaker: Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations. (05c49aa9)
  • client-sso-admin: Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API (d46aaf53)
  • client-payment-cryptography: Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations. (4d7fdfa8)
  • client-datazone: Adds support for asynchronous notebook runs (e562cc0f)
  • client-kafka: Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity. (34de26bd)
  • client-observabilityadmin: Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement. (8cea5eb6)
  • client-eks: Vended logs update param for capability vended logs feature (7741c8f5)
  • client-bedrock-agentcore: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. (948fd098)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1041.0 (2026-05-01)

Note: Version bump only for package @​aws-sdk/client-s3

3.1040.0 (2026-04-30)

Note: Version bump only for package @​aws-sdk/client-s3

3.1039.0 (2026-04-29)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates @aws-sdk/client-ssm from 3.1038.0 to 3.1041.0

Release notes

Sourced from @​aws-sdk/client-ssm's releases.

v3.1041.0

3.1041.0(2026-05-01)

Chores
  • core/client: emit warning for Node.js 20.x end-of-support (#7973) (00383767)
  • workflows: migrate git-sync SSH key from GitHub secret to Secrets Manager via OIDC (#7978) (c056a2e3)
  • codegen: smithy-aws-typescript-codegen 0.49.1 (#7980) (7bb42b39)
Documentation Changes
  • client-iam: Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates (b4bb6928)
New Features
  • clients: update client endpoints as of 2026-05-01 (d48b40d5)
  • client-iot: AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests. (82edd29f)
  • client-appstream: Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail. (5ca40b43)
  • client-quicksight: Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API. (a625879c)
  • client-cloudwatch: This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources. (e87c1479)
  • client-entityresolution: Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels. (20487961)
  • client-cloudwatch-logs: Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter. (25dc6d23)
  • client-qconnect: Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics. (2c668c9d)
Bug Fixes
  • lib-storage: use Math.ceil in default partSize calculation to prevent exceeding 10,000 parts (#7982) (8a58046b)

For list of updated packages, view updated-packages.md in assets-3.1041.0.zip

v3.1040.0

3.1040.0(2026-04-30)

New Features
  • clients: update client endpoints as of 2026-04-30 (2620ccbd)
  • client-bedrock-agentcore-control: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. (6b9d13e3)
  • client-route53globalresolver: Adds support for regions in the UpdateGlobalResolver input. (84b15b2e)
  • client-sagemaker: Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations. (05c49aa9)
  • client-sso-admin: Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API (d46aaf53)
  • client-payment-cryptography: Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations. (4d7fdfa8)
  • client-datazone: Adds support for asynchronous notebook runs (e562cc0f)
  • client-kafka: Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity. (34de26bd)
  • client-observabilityadmin: Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement. (8cea5eb6)
  • client-eks: Vended logs update param for capability vended logs feature (7741c8f5)
  • client-bedrock-agentcore: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. (948fd098)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-ssm's changelog.

3.1041.0 (2026-05-01)

Note: Version bump only for package @​aws-sdk/client-ssm

3.1040.0 (2026-04-30)

Note: Version bump only for package @​aws-sdk/client-ssm

3.1039.0 (2026-04-29)

Note: Version bump only for package @​aws-sdk/client-ssm

Commits

Updates openapi-typescript from 7.7.3 to 7.13.0

Release notes

Sourced from openapi-typescript's releases.

openapi-typescript@7.13.0

Minor Changes

  • #2549 a690e52 Thanks @​abumalick! - Add readOnly/writeOnly support via --read-write-markers flag. When enabled, readOnly properties are wrapped with $Read<T> and writeOnly properties with $Write<T>. openapi-fetch uses Readable<T> and Writable<T> helpers to exclude these properties from responses and request bodies respectively.

openapi-typescript@7.12.0

Minor Changes

Patch Changes

  • #2536 e3c05a4 Thanks @​darkbasic! - Fix enumValues: true output for schemas that use oneOf/anyOf unions by narrowing union types with Extract<> before accessing variant-specific properties. This prevents invalid type paths when an accessed property only exists on some union members.

openapi-typescript@7.10.1

Patch Changes

openapi-typescript@7.10.0

Minor Changes

openapi-typescript@7.9.1

Patch Changes

openapi-typescript@7.9.0

Minor Changes

openapi-typescript@7.8.0

Minor Changes

Changelog

Sourced from openapi-typescript's changelog.

7.13.0

Minor Changes

  • #2549 a690e52 Thanks @​abumalick! - Add readOnly/writeOnly support via --read-write-markers flag. When enabled, readOnly properties are wrapped with $Read<T> and writeOnly properties with $Write<T>. openapi-fetch uses Readable<T> and Writable<T> helpers to exclude these properties from responses and request bodies respectively.

7.12.0

Minor Changes

Patch Changes

  • #2536 e3c05a4 Thanks @​darkbasic! - Fix enumValues: true output for schemas that use oneOf/anyOf unions by narrowing union types with Extract<> before accessing variant-specific properties. This prevents invalid type paths when an accessed property only exists on some union members.

7.11.0

Minor Changes

7.10.2

Patch Changes

  • #2139 12f9c29 Thanks @​darkbasic! - All kinds of enum related fixes (enums in arrays, in optional props, in unions, in request body, with record types...)

  • #2548 4385590 Thanks @​mynnx! - Fixes the --redocly flag so that it no longer hangs and is able to lookup the Redocly file at a custom path

7.10.1

Patch Changes

7.10.0

Minor Changes

7.9.1

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for openapi-typescript since your current version.


Updates @nx/devkit from 22.4.2 to 22.7.1

Release notes

Sourced from @​nx/devkit's releases.

22.7.1 (2026-04-28)

🩹 Fixes

  • core: prevent spinner flicker when sync applying (#35445)
  • core: exclude hyperfine env vars from daemon env reflection (5095b4be7d)
  • core: provide actionable feedback when running migrations and pre-install fails with npm peer dep errors (#33961, #33942)
  • core: consider virtual trees in multiGlobWithWorkspaceContext (#35447, #31805, #35373, #32588)
  • core: surface ./nx --version stderr and force devDeps install (#35469)
  • core: keep continuous children alive when nx:noop orchestrator completes (#35388)
  • core: start TUI event reader synchronously in enter() to prevent stdin race (#35465, #34619, #34144)
  • core: use require for global to local Nx handoff so Windows drive paths work (#35478)
  • core: prevent daemon shutdown from cache-poisoned in-process nx loads (#35482, #35444, #34463, #34111)
  • detox: generate valid JSON in .detoxrc for non-expo apps (eb2fa8ced4)
  • js: include extended tsconfigs from project references in typecheck inputs (#35457)
  • linter: detect root lint target added in same generator run (#35296, #23147, #34531)
  • misc: exclude stories and specs from tailwind content scanning (#35470)
  • misc: resolve pnpm catalog: refs in version lookups (#35459, #35453)
  • nextjs: use cached project graph in withNx (#35475, #34518, #32880)
  • node: include tsconfig input in node-app esbuild scaffold (#35466)
  • release: handle short and full project names in commit scopes (#34219)
  • testing: convert executor-based jest.config.ts and preserve type-only imports (#35286, #34593)

❤️ Thank You

22.7.0 (2026-04-24)

🚀 Features

  • core: add .nx/self-healing to .gitignore (#34855)
  • core: decouple DB version from Nx version and share DB across worktrees (#34942)
  • core: auto-open browser for Cloud setup URL during create-nx-workspace (#35014)
  • core: allow generate command to skip project graph creation (#35170)
  • core: remove polygraph cloud passthrough (#35153)
  • core: use CNW variant 1 cloud prompt in nx init (#35155)
  • core: add source map annotations to nx show target (#35225)
  • core: prompt for setup mode when running nx init in empty git directory (#35226)
  • core: add json input type for selective JSON field hashing (#35248)
  • core: update nx-set-shas usage to v5 (#34934)
  • core: add NX_BAIL environment variable (#34711)
  • core: add page up/down to tui shortcuts (#34525)
  • core: add logging and progress message types to daemon (#35342)
  • dotnet: add ci-workflow generator (#33321)

... (truncated)

Commits
  • ac465a0 fix(bundling): declare tsconfig.json as input for esbuild targets (#35432)
  • a97bd37 chore(testing): stub plugin imports in devkit specs to avoid cross-project re...
  • 4bbd4b1 chore(repo): migrate nx repo to eslint v9 flat config (#35359)
  • 2665550 fix(core): update and pin ejs to 5.0.1 (#35157)
  • facec58 fix(misc): use workspace root for package manager detection and normalize pat...
  • 887fca4 fix(repo): narrow copy-assets outputs to prevent overlap with build-base (#35...
  • fa7eb3b chore(repo): make build-base depend on copy-assets instead of reverse (#35102)
  • a040a93 fix(repo): add copy-assets plugin and migrate all packages from legacy-post-b...
  • 1fc3841 fix(core): split-target should handle projects with colons in name better (#3...
  • 732a08c chore(core): build nx to local dist and use nodenext (#34111)
  • Additional commits viewable in compare view

Updates @nx/eslint from 22.4.2 to 22.7.1

Release notes

Sourced from @​nx/eslint's releases.

22.7.1 (2026-04-28)

🩹 Fixes

  • core: prevent spinner flicker when sync applying (#35445)
  • core: exclude hyperfine env vars from daemon env reflection (5095b4be7d)
  • core: provide actionable feedback when running migrations and pre-install fails with npm peer dep errors (#33961, #33942)
  • core: consider virtual trees in multiGlobWithWorkspaceContext (#35447, #31805, #35373, #32588)
  • core: surface ./nx --version stderr and force devDeps install (#35469)
  • core: keep continuous children alive when nx:noop orchestrator completes (#35388)
  • core: start TUI event reader synchronously in enter() to prevent stdin race (#35465, #34619, #34144)
  • core: use require for global to local Nx handoff so Windows drive paths work (#35478)
  • core: prevent daemon shutdown from cache-poisoned in-process nx loads (#35482, #35444, #34463, #34111)
  • detox: generate valid JSON in .detoxrc for non-expo apps (eb2fa8ced4)
  • js: include extended tsconfigs from project references in typecheck inputs (#35457)
  • linter: detect root lint target added in same generator run (#35296, #23147, #34531)
  • misc: exclude stories and specs from tailwind content scanning (#35470)
  • misc: resolve pnpm catalog: refs in version lookups (#35459, #35453)
  • nextjs: use cached project graph in withNx (#35475, #34518, #32880)
  • node: include tsconfig input in node-app esbuild scaffold (#35466)
  • release: handle short and full project names in commit scopes (#34219)
  • testing: convert executor-based jest.config.ts and preserve type-only imports (#35286, #34593)

❤️ Thank You

22.7.0 (2026-04-24)

🚀 Features

  • core: add .nx/self-healing to .gitignore (#34855)
  • core: decouple DB version from Nx version and share DB across worktrees (#34942)
  • core: auto-open browser for Cloud setup URL during create-nx-workspace (#35014)
  • core: allow generate command to skip project graph creation (#35170)
  • core: remove polygraph cloud passthrough (#35153)
  • core: use CNW variant 1 cloud prompt in nx init (#35155)
  • core: add source map annotations to nx show target (#35225)
  • core: prompt for setup mode when running nx init in empty git directory (#35226)
  • core: add json input type for selective JSON field hashing (#35248)
  • core: update nx-set-shas usage to v5 (#34934)
  • core: add NX_BAIL environment variable (#34711)
  • core: add page up/down to tui shortcuts (#34525)
  • core: add logging and progress message types to daemon (#35342)
  • dotnet: add ci-workflow generator (#33321)

... (truncated)

Commits
  • d8cf210 fix(linter): detect root lint target added in same generator run (#35296)
  • 2f5e5b1 chore(linter): declare @​nx/jest as optional peer dependency (#35377)
  • 4bbd4b1 chore(repo): migrate nx repo to eslint v9 flat config (#35359)
  • a884f55 fix(linter): add missing inputs to eslint executor target defaults (#35236)
  • 3ece32d fix(linter): infer extended tsconfig files as task inputs (#35190)
  • d64aeef fix(linter): remove custom eslint hasher
  • facec58 fix(misc): use workspace root for package manager detection and normalize pat...
  • 887fca4 fix(repo): narrow copy-assets outputs to prevent overlap with build-base (#35...
  • a040a93 fix(repo): add copy-assets plugin and migrate all packages from legacy-post-b...
  • 732a08c chore(core): build nx to local dist and use nodenext (#34111)
  • Additional commits viewable in compare view

Updates @nx/eslint-plugin from 22.4.2 to 22.7.1

Release notes

Sourced from @​nx/eslint-plugin's releases.

22.7.1 (2026-04-28)

🩹 Fixes

  • core: prevent spinner flicker when sync applying (#35445)
  • core: exclude hyperfine env vars from daemon env reflection (5095b4be7d)
  • core: provide actionable feedback when running migrations and pre-install fails with npm peer dep errors (#33961, #33942)
  • core: consider virtual trees in multiGlobWithWorkspaceContext (#35447, #31805, #35373, #32588)
  • core: surface ./nx --version stderr and force devDeps install (#35469)
  • core: keep continuous children alive when nx:noop orchestrator completes (#35388)
  • core: start TUI event reader synchronously in enter() to prevent stdin race (#35465, #34619, #34144)
  • core: use require for global to local Nx handoff so Windows drive paths work (#35478)
  • core: prevent daemon shutdown from cache-poisoned in-process nx loads (#35482, #35444, #34463, #34111)
  • detox: generate valid JSON in .detoxrc for non-expo apps (eb2fa8ced4)
  • js: include extended tsconfigs from project references in typecheck inputs (#35457)
  • linter: detect root lint target added in same generator run (#35296, #23147, #34531)
  • misc: exclude stories and specs from tailwind content scanning (#35470)
  • misc: resolve pnpm catalog: refs in version lookups (#35459, #35453)
  • nextjs: use cached project graph in withNx (#35475, #34518, #32880)
  • node: include tsconfig input in node-app esbuild scaffold (#35466)
  • release: handle short and full project names in commit scopes (#34219)
  • testing: convert executor-based jest.config.ts and preserve type-only imports (#35286, #34593)

❤️ Thank You

22.7.0 (2026-04-24)

🚀 Features

  • core: add .nx/self-healing to .gitignore (#34855)
  • core: decouple DB version from Nx version and share DB across worktrees (#34942)
  • core: auto-open browser for Cloud setup URL during create-nx-workspace (#35014)
  • core: allow generate command to skip project graph creation (#35170)
  • core: remove polygraph cloud passthrough (#35153)
  • core: use CNW variant 1 cloud prompt in nx init (#35155)
  • core: add source map annotations to nx show target (#35225)
  • core: prompt for setup mode when running nx init in empty git directory (#35226)
  • core: add json input type for selective JSON field hashing (#35248)
  • core: update nx-set-shas usage to v5 (#34934)
  • core: add NX_BAIL environment variable (#34711)
  • core: add page up/down to tui shortcuts (#34525)
  • core: add logging and progress message types to daemon (#35342)
  • dotnet: add ci-workflow generator (#33321)

... (truncated)

Commits
  • 4bbd4b1 chore(repo): migrate nx repo to eslint v9 flat config (#35359)
  • dc479c5 fix(js): stop generating baseUrl in tsconfig, use ./ prefix for path mappings...
  • 887fca4 fix(repo): narrow copy-assets outputs to prevent overlap with build-base (#35...
  • a040a93 fix(repo): add copy-assets plugin and migrate all packages from legacy-post-b...
  • 732a08c chore(core): build nx to local dist and use nodenext (#34111)
  • d5f51d6 fix(linter): prepend framework configs before baseConfig in flat config gener...
  • 0f0f996 fix(linter): detect require() calls in enforce-module-boundaries rule (#34896)
  • 997d6d8 fix(linter): add catalog: references when fixing missing dependencies (#34734)
  • ac2ef1a fix(linter): allow for wildcards paths in enforce-module-boundaries rule (#34...
  • e3eedf9 docs(misc): update the docs to use more direct language (#34264)
  • See full diff in compare view

Updates @nx/js from 22.4.2 to 22.7.1

Release notes

Sourced from @​nx/js's releases.

22.7.1 (2026-04-28)

🩹 Fixes

  • core: prevent spinner flicker when sync applying (#35445)
  • core: exclude hyperfine env vars from daemon env reflection (5095b4be7d)
  • core: provide actionable feedback when running migrations and pre-install fails with npm peer dep errors (#33961, #33942)
  • core: consider virtual trees in multiGlobWithWorkspaceContext (#35447, #31805, #35373, #32588)
  • core: surface ./nx --version stderr and force devDeps install (#35469)
  • core: keep continuous children alive when nx:noop orchestrator completes (#35388)
  • core: start TUI event reader synchronously in enter() to prevent stdin race (#35465, #34619, #34144)
  • core: use require for global to local Nx handoff so Windows drive paths work (#35478)
  • core: prevent daemon shutdown from cache-poisoned in-process nx loads (#35482,

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 1, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 1, 2026 04:09
@dependabot dependabot Bot requested a review from kai-nguyen-aligent May 1, 2026 04:09
Comment thread package-lock.json
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 Open source vulnerabilities detected - medium severity
Aikido detected 2 vulnerabilities across 2 packages, it includes 2 medium vulnerabilities.

Details

Remediation Aikido suggests bumping the vulnerable packages to a safe version.

Reply @AikidoSec ignore: [REASON] to ignore this issue.
More info

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-e06c39e0b2 branch from 2cabe25 to 98b1657 Compare May 1, 2026 23:38
Bumps the minor-and-patch group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1038.0` | `3.1041.0` |
| [@aws-sdk/client-ssm](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ssm) | `3.1038.0` | `3.1041.0` |
| [openapi-typescript](https://github.com/openapi-ts/openapi-typescript/tree/HEAD/packages/openapi-typescript) | `7.7.3` | `7.13.0` |
| [@nx/devkit](https://github.com/nrwl/nx/tree/HEAD/packages/devkit) | `22.4.2` | `22.7.1` |
| [@nx/eslint](https://github.com/nrwl/nx/tree/HEAD/packages/eslint) | `22.4.2` | `22.7.1` |
| [@nx/eslint-plugin](https://github.com/nrwl/nx/tree/HEAD/packages/eslint-plugin) | `22.4.2` | `22.7.1` |
| [@nx/js](https://github.com/nrwl/nx/tree/HEAD/packages/js) | `22.4.2` | `22.7.1` |
| [@nx/plugin](https://github.com/nrwl/nx/tree/HEAD/packages/plugin) | `22.4.2` | `22.7.1` |
| [@nx/vitest](https://github.com/nrwl/nx/tree/HEAD/packages/vitest) | `22.4.2` | `22.7.1` |
| [@nx/web](https://github.com/nrwl/nx/tree/HEAD/packages/web) | `22.4.2` | `22.7.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.9` | `4.1.5` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.0.9` | `4.1.5` |
| [create-nx-workspace](https://github.com/nrwl/nx/tree/HEAD/packages/create-nx-workspace) | `22.4.2` | `22.7.1` |
| [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) | `22.4.2` | `22.7.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.9` | `4.1.5` |
| [enquirer](https://github.com/enquirer/enquirer) | `2.3.6` | `2.4.1` |



Updates `@aws-sdk/client-s3` from 3.1038.0 to 3.1041.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1041.0/clients/client-s3)

Updates `@aws-sdk/client-ssm` from 3.1038.0 to 3.1041.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ssm/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1041.0/clients/client-ssm)

Updates `openapi-typescript` from 7.7.3 to 7.13.0
- [Release notes](https://github.com/openapi-ts/openapi-typescript/releases)
- [Changelog](https://github.com/openapi-ts/openapi-typescript/blob/main/packages/openapi-typescript/CHANGELOG.md)
- [Commits](https://github.com/openapi-ts/openapi-typescript/commits/openapi-typescript@7.13.0/packages/openapi-typescript)

Updates `@nx/devkit` from 22.4.2 to 22.7.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.1/packages/devkit)

Updates `@nx/eslint` from 22.4.2 to 22.7.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.1/packages/eslint)

Updates `@nx/eslint-plugin` from 22.4.2 to 22.7.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.1/packages/eslint-plugin)

Updates `@nx/js` from 22.4.2 to 22.7.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.1/packages/js)

Updates `@nx/plugin` from 22.4.2 to 22.7.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.1/packages/plugin)

Updates `@nx/vitest` from 22.4.2 to 22.7.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.1/packages/vitest)

Updates `@nx/web` from 22.4.2 to 22.7.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.1/packages/web)

Updates `@vitest/coverage-v8` from 4.0.9 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/coverage-v8)

Updates `@vitest/ui` from 4.0.9 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/ui)

Updates `create-nx-workspace` from 22.4.2 to 22.7.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.1/packages/create-nx-workspace)

Updates `nx` from 22.4.2 to 22.7.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.1/packages/nx)

Updates `vitest` from 4.0.9 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)

Updates `enquirer` from 2.3.6 to 2.4.1
- [Changelog](https://github.com/enquirer/enquirer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/enquirer/enquirer/commits)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1040.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@aws-sdk/client-ssm"
  dependency-version: 3.1040.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nx/devkit"
  dependency-version: 22.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nx/eslint"
  dependency-version: 22.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nx/eslint-plugin"
  dependency-version: 22.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nx/js"
  dependency-version: 22.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nx/plugin"
  dependency-version: 22.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nx/vitest"
  dependency-version: 22.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nx/web"
  dependency-version: 22.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vitest/ui"
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: create-nx-workspace
  dependency-version: 22.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: enquirer
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: nx
  dependency-version: 22.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: openapi-typescript
  dependency-version: 7.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-e06c39e0b2 branch from 98b1657 to 39a1321 Compare May 2, 2026 00:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants