Skip to content

chore(deps): bump the prod-deps group with 8 updates - #116

Merged
scolastico merged 2 commits into
mainfrom
dependabot/npm_and_yarn/prod-deps-ae66e337f6
Jul 30, 2026
Merged

chore(deps): bump the prod-deps group with 8 updates#116
scolastico merged 2 commits into
mainfrom
dependabot/npm_and_yarn/prod-deps-ae66e337f6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group with 8 updates:

Package From To
@aws-sdk/client-s3 3.1079.0 3.1098.0
@aws-sdk/s3-presigned-post 3.1079.0 3.1098.0
@aws-sdk/s3-request-presigner 3.1079.0 3.1098.0
@nestjs/common 11.1.27 11.1.28
@nestjs/core 11.1.27 11.1.28
@nestjs/platform-express 11.1.27 11.1.28
@nestjs/swagger 11.4.5 11.4.6
nanoid 5.1.16 6.0.0

Updates @aws-sdk/client-s3 from 3.1079.0 to 3.1098.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1098.0

3.1098.0(2026-07-29)

Chores
Documentation Changes
  • client-database-migration-service: Updated documentation for various DMS Schema Conversion operations (aea8b4eb)
New Features
  • clients: update client endpoints as of 2026-07-29 (d2fe87e7)
  • client-iotsitewise: We have released a new set of APIs in support of a major new feature within AWS IoT SiteWise called Scenario Discover. Please see user guide about the feature and the API guide in public documentation for new APIs. (61dd73b2)
  • client-glue: Adding filtering, partitioning, and VPC support to AWS Glue REST API connector (d43351c5)
  • client-wafv2: AWS WAF now supports pre-parse text transformations, letting you normalize raw query strings before parsing, available on rule statements that use SingleQueryArgument or AllQueryArguments as the FieldToMatch. AWS WAF also added 10 new text transformations, including ModSecurity v3 parity options. (1b06f488)
  • client-gameliftstreams: Adds ListApplicationShaderCaches API to retrieve shader cache metadata for applications and adds stream URLs, which give end users temporary, unauthenticated access to a stream session in their browser. Includes CreateStreamUrl, GetStreamUrl, ListStreamUrls, and RevokeStreamUrl operations. (03de2149)
  • client-ec2: This release adds support for policy-based routing on AWS Transit Gateway, enabling you to route traffic based on 5-tuple matching (source IP, destination IP, source port, destination port, and protocol) using new policy table entry APIs that direct matching traffic to a target route table. (8ef115c8)

For list of updated packages, view updated-packages.md in assets-3.1098.0.zip

v3.1097.0

3.1097.0(2026-07-28)

Chores
Documentation Changes
  • client-connect: Documentation updates for SearchRules, AssociateRoutingProfileQueues, CreateRoutingProfile, AssociateContactWithUser CreateTaskTemplate, and UpdateTaskTemplate (c87ac126)
  • client-datasync: Adds Enhanced mode support for EFS and FSx Lustre locations without an agent, and for HDFS (TDE), Azure Blob, and object storage locations with an agent. HDFS Enhanced mode supports multiple NameNodes for High Availability. Enhanced mode agents can now be deployed on Microsoft Hyper-V. (5ef349f0)
New Features
  • client-trustedadvisor: Adds ListRecommendationsForResource API and four CheckSummary fields (resourceArnQueryable, awsResourceTypes, checkGranularity, recommendationId) to retrieve recommendations for a given resource ARN. (16e67f16)
  • client-rolesanywhere: Increases certificate string length for trust anchor source data to support new adjustable trust anchor limits. (20c913fd)
  • client-bedrock-agentcore-control: AgentCore Identity now supports Private Key JWT client authentication for OAuth 2.0 credential providers. Agents can authenticate to identity provider token endpoints with a JWT client assertion signed by a customer-managed AWS KMS asymmetric key, eliminating the need for client secrets. (fa2b1a0a)

For list of updated packages, view updated-packages.md in assets-3.1097.0.zip

v3.1096.0

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1098.0 (2026-07-29)

Note: Version bump only for package @​aws-sdk/client-s3

3.1097.0 (2026-07-28)

Note: Version bump only for package @​aws-sdk/client-s3

3.1096.0 (2026-07-27)

Note: Version bump only for package @​aws-sdk/client-s3

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/client-s3

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/client-s3

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/client-s3

3.1092.0 (2026-07-21)

... (truncated)

Commits

Updates @aws-sdk/s3-presigned-post from 3.1079.0 to 3.1098.0

Release notes

Sourced from @​aws-sdk/s3-presigned-post's releases.

v3.1098.0

3.1098.0(2026-07-29)

Chores
Documentation Changes
  • client-database-migration-service: Updated documentation for various DMS Schema Conversion operations (aea8b4eb)
New Features
  • clients: update client endpoints as of 2026-07-29 (d2fe87e7)
  • client-iotsitewise: We have released a new set of APIs in support of a major new feature within AWS IoT SiteWise called Scenario Discover. Please see user guide about the feature and the API guide in public documentation for new APIs. (61dd73b2)
  • client-glue: Adding filtering, partitioning, and VPC support to AWS Glue REST API connector (d43351c5)
  • client-wafv2: AWS WAF now supports pre-parse text transformations, letting you normalize raw query strings before parsing, available on rule statements that use SingleQueryArgument or AllQueryArguments as the FieldToMatch. AWS WAF also added 10 new text transformations, including ModSecurity v3 parity options. (1b06f488)
  • client-gameliftstreams: Adds ListApplicationShaderCaches API to retrieve shader cache metadata for applications and adds stream URLs, which give end users temporary, unauthenticated access to a stream session in their browser. Includes CreateStreamUrl, GetStreamUrl, ListStreamUrls, and RevokeStreamUrl operations. (03de2149)
  • client-ec2: This release adds support for policy-based routing on AWS Transit Gateway, enabling you to route traffic based on 5-tuple matching (source IP, destination IP, source port, destination port, and protocol) using new policy table entry APIs that direct matching traffic to a target route table. (8ef115c8)

For list of updated packages, view updated-packages.md in assets-3.1098.0.zip

v3.1097.0

3.1097.0(2026-07-28)

Chores
Documentation Changes
  • client-connect: Documentation updates for SearchRules, AssociateRoutingProfileQueues, CreateRoutingProfile, AssociateContactWithUser CreateTaskTemplate, and UpdateTaskTemplate (c87ac126)
  • client-datasync: Adds Enhanced mode support for EFS and FSx Lustre locations without an agent, and for HDFS (TDE), Azure Blob, and object storage locations with an agent. HDFS Enhanced mode supports multiple NameNodes for High Availability. Enhanced mode agents can now be deployed on Microsoft Hyper-V. (5ef349f0)
New Features
  • client-trustedadvisor: Adds ListRecommendationsForResource API and four CheckSummary fields (resourceArnQueryable, awsResourceTypes, checkGranularity, recommendationId) to retrieve recommendations for a given resource ARN. (16e67f16)
  • client-rolesanywhere: Increases certificate string length for trust anchor source data to support new adjustable trust anchor limits. (20c913fd)
  • client-bedrock-agentcore-control: AgentCore Identity now supports Private Key JWT client authentication for OAuth 2.0 credential providers. Agents can authenticate to identity provider token endpoints with a JWT client assertion signed by a customer-managed AWS KMS asymmetric key, eliminating the need for client secrets. (fa2b1a0a)

For list of updated packages, view updated-packages.md in assets-3.1097.0.zip

v3.1096.0

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-presigned-post's changelog.

3.1098.0 (2026-07-29)

Note: Version bump only for package @​aws-sdk/s3-presigned-post

3.1097.0 (2026-07-28)

Note: Version bump only for package @​aws-sdk/s3-presigned-post

3.1096.0 (2026-07-27)

Note: Version bump only for package @​aws-sdk/s3-presigned-post

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/s3-presigned-post

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/s3-presigned-post

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/s3-presigned-post

3.1092.0 (2026-07-21)

... (truncated)

Commits

Updates @aws-sdk/s3-request-presigner from 3.1079.0 to 3.1098.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1098.0

3.1098.0(2026-07-29)

Chores
Documentation Changes
  • client-database-migration-service: Updated documentation for various DMS Schema Conversion operations (aea8b4eb)
New Features
  • clients: update client endpoints as of 2026-07-29 (d2fe87e7)
  • client-iotsitewise: We have released a new set of APIs in support of a major new feature within AWS IoT SiteWise called Scenario Discover. Please see user guide about the feature and the API guide in public documentation for new APIs. (61dd73b2)
  • client-glue: Adding filtering, partitioning, and VPC support to AWS Glue REST API connector (d43351c5)
  • client-wafv2: AWS WAF now supports pre-parse text transformations, letting you normalize raw query strings before parsing, available on rule statements that use SingleQueryArgument or AllQueryArguments as the FieldToMatch. AWS WAF also added 10 new text transformations, including ModSecurity v3 parity options. (1b06f488)
  • client-gameliftstreams: Adds ListApplicationShaderCaches API to retrieve shader cache metadata for applications and adds stream URLs, which give end users temporary, unauthenticated access to a stream session in their browser. Includes CreateStreamUrl, GetStreamUrl, ListStreamUrls, and RevokeStreamUrl operations. (03de2149)
  • client-ec2: This release adds support for policy-based routing on AWS Transit Gateway, enabling you to route traffic based on 5-tuple matching (source IP, destination IP, source port, destination port, and protocol) using new policy table entry APIs that direct matching traffic to a target route table. (8ef115c8)

For list of updated packages, view updated-packages.md in assets-3.1098.0.zip

v3.1097.0

3.1097.0(2026-07-28)

Chores
Documentation Changes
  • client-connect: Documentation updates for SearchRules, AssociateRoutingProfileQueues, CreateRoutingProfile, AssociateContactWithUser CreateTaskTemplate, and UpdateTaskTemplate (c87ac126)
  • client-datasync: Adds Enhanced mode support for EFS and FSx Lustre locations without an agent, and for HDFS (TDE), Azure Blob, and object storage locations with an agent. HDFS Enhanced mode supports multiple NameNodes for High Availability. Enhanced mode agents can now be deployed on Microsoft Hyper-V. (5ef349f0)
New Features
  • client-trustedadvisor: Adds ListRecommendationsForResource API and four CheckSummary fields (resourceArnQueryable, awsResourceTypes, checkGranularity, recommendationId) to retrieve recommendations for a given resource ARN. (16e67f16)
  • client-rolesanywhere: Increases certificate string length for trust anchor source data to support new adjustable trust anchor limits. (20c913fd)
  • client-bedrock-agentcore-control: AgentCore Identity now supports Private Key JWT client authentication for OAuth 2.0 credential providers. Agents can authenticate to identity provider token endpoints with a JWT client assertion signed by a customer-managed AWS KMS asymmetric key, eliminating the need for client secrets. (fa2b1a0a)

For list of updated packages, view updated-packages.md in assets-3.1097.0.zip

v3.1096.0

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1098.0 (2026-07-29)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1097.0 (2026-07-28)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1096.0 (2026-07-27)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1092.0 (2026-07-21)

... (truncated)

Commits

Updates @nestjs/common from 11.1.27 to 11.1.28

Release notes

Sourced from @​nestjs/common's releases.

v11.1.28 (2026-07-08)

Bug fixes

  • core
    • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
  • common
    • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
  • websockets
    • #17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

  • core
    • #17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

Committers: 4

Commits
  • dfaa376 chore(release): publish v11.1.28 release
  • a5e86d8 fix(common): Add missing exception classes to HttpErrorByCode
  • See full diff in compare view

Updates @nestjs/core from 11.1.27 to 11.1.28

Release notes

Sourced from @​nestjs/core's releases.

v11.1.28 (2026-07-08)

Bug fixes

  • core
    • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
  • common
    • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
  • websockets
    • #17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

  • core
    • #17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

Committers: 4

Commits
  • dfaa376 chore(release): publish v11.1.28 release
  • 053a316 Merge pull request #17239 from jyx-07/fix/sse-interceptor-teardown
  • 8e7a2ee feat(core): include auto-converted route in legacy route path warning
  • c5b7164 fix(core): trigger sse observable teardown on disconnect
  • See full diff in compare view

Updates @nestjs/platform-express from 11.1.27 to 11.1.28

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.1.28 (2026-07-08)

Bug fixes

  • core
    • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
  • common
    • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
  • websockets
    • #17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

  • core
    • #17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

Committers: 4

Commits
  • dfaa376 chore(release): publish v11.1.28 release
  • 541977a fix(deps): update dependency multer to v2.2.0 [security]
  • See full diff in compare view

Updates @nestjs/swagger from 11.4.5 to 11.4.6

Release notes

Sourced from @​nestjs/swagger's releases.

Release 11.4.6

11.4.6 (2026-07-17)

Features

Bug fixes

Enhancements

Dependencies

Committers: 4

Commits
  • aec1a22 chore(): release v11.4.6
  • f9eec4f Merge pull request #3986 from nestjs/renovate/js-yaml-5.x
  • b6b6eaf chore(deps): support fastify/static v10
  • e891246 Merge pull request #3949 from yogeshwaran-c/feat/api-query-extensions
  • c8608cf Merge pull request #3947 from yogeshwaran-c/fix/deep-partial-type-array-of-dto
  • 1f55cc1 Merge pull request #3946 from yogeshwaran-c/fix/swagger-html-dollar-substitution
  • 76b7202 Merge pull request #4013 from nestjs/renovate/fastify-compress-9.x-lockfile
  • f60c738 Merge pull request #4012 from nestjs/renovate/vite-8.x-lockfile
  • e8e0eab fix(deps): update dependency js-yaml to v5
  • 880a39e chore(deps): update dependency @​fastify/compress to v9.1.0
  • Additional commits viewable in compare view

Updates nanoid from 5.1.16 to 6.0.0

Release notes

Sourced from nanoid's releases.

6.0.0

  • Made nanoid() and customAlphabet() 4 times faster (by @​orhanayd).
  • Removed Node.js 18 and 20 support.
Changelog

Sourced from nanoid's changelog.

6.0.0

  • Made nanoid() and customAlphabet() 4 times faster (by @​orhanayd).
  • Removed Node.js 18 and 20 support.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1079.0` | `3.1098.0` |
| [@aws-sdk/s3-presigned-post](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-presigned-post) | `3.1079.0` | `3.1098.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1079.0` | `3.1098.0` |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.27` | `11.1.28` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.27` | `11.1.28` |
| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.1.27` | `11.1.28` |
| [@nestjs/swagger](https://github.com/nestjs/swagger) | `11.4.5` | `11.4.6` |
| [nanoid](https://github.com/ai/nanoid) | `5.1.16` | `6.0.0` |


Updates `@aws-sdk/client-s3` from 3.1079.0 to 3.1098.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1098.0/clients/client-s3)

Updates `@aws-sdk/s3-presigned-post` from 3.1079.0 to 3.1098.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-presigned-post/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1098.0/packages/s3-presigned-post)

Updates `@aws-sdk/s3-request-presigner` from 3.1079.0 to 3.1098.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1098.0/packages/s3-request-presigner)

Updates `@nestjs/common` from 11.1.27 to 11.1.28
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/common)

Updates `@nestjs/core` from 11.1.27 to 11.1.28
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/core)

Updates `@nestjs/platform-express` from 11.1.27 to 11.1.28
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/platform-express)

Updates `@nestjs/swagger` from 11.4.5 to 11.4.6
- [Release notes](https://github.com/nestjs/swagger/releases)
- [Commits](nestjs/swagger@11.4.5...11.4.6)

Updates `nanoid` from 5.1.16 to 6.0.0
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.1.16...6.0.0)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1098.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@aws-sdk/s3-presigned-post"
  dependency-version: 3.1098.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1098.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@nestjs/common"
  dependency-version: 11.1.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@nestjs/core"
  dependency-version: 11.1.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@nestjs/platform-express"
  dependency-version: 11.1.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@nestjs/swagger"
  dependency-version: 11.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: nanoid
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 30, 2026
The bumped @aws-sdk 3.1098.0 packages (and their @smithy transitives)
were published less than 24h ago, so pnpm's minimumReleaseAge
supply-chain check rejected the lockfile in CI. Pin the AWS SDK to
^3.1097.0 and rebuild the lockfile from a fresh policy-aware
resolution. Also add a 2-day dependabot cooldown so future update PRs
only propose versions that already satisfy the policy.
@scolastico
scolastico merged commit ccfeadb into main Jul 30, 2026
3 checks passed
@scolastico
scolastico deleted the dependabot/npm_and_yarn/prod-deps-ae66e337f6 branch July 30, 2026 03:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant