deps(deps): bump the production-dependencies group across 1 directory with 5 updates

[dependabot]

Updates the requirements on @imagekit/nodejs, @upstash/redis, bullmq, mongoose and zod to permit the latest version.
Updates @imagekit/nodejs to 7.12.1

Release notes

Sourced from @​imagekit/nodejs's releases.

v7.12.1

7.12.1 (2026-09-17)

Bug Fixes

• lint (2c1c741)

Changelog

Sourced from @​imagekit/nodejs's changelog.

7.12.1 (2026-09-17)

Bug Fixes

• lint (2c1c741)

7.12.0 (2026-09-16)

Features

• serialize density as dn in SDK URL builders (560a326)

Chores

• update github workflow (06e2f43)

Documentation

• remove MCP server section (0163985)

7.11.0 (2026-08-15)

Features

• add description field in custom metadata field api (7c9d0f4)
• api: Named Transformations (a3ceebe)

Chores

• codegen update (a078f58)
• pin next release (28b00ef)

7.10.0 (2026-07-14)

Features

• api: add usage analytics breakdown endpoint (1499fd6)

7.9.1 (2026-07-02)

Bug Fixes

... (truncated)

Commits

• eca0544 Merge pull request #176 from imagekit-developer/release-please--branches--mai...
• dc65618 release: 7.12.1
• 2c1c741 fix: lint
• 6527de6 Build SDK
• 27f14e6 Merge pull request #175 from imagekit-developer/release-please--branches--mai...
• 1ab1b35 release: 7.12.0
• 0163985 docs: remove MCP server section
• 06e2f43 chore: update github workflow
• 560a326 feat: serialize density as dn in SDK URL builders
• 264b40b Build SDK
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​imagekit/nodejs since your current version.

Updates @upstash/redis to 1.38.4

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.38.4

Patch Changes

• 7ac8182: Fix read-your-writes sending a stale upstash-sync-token

  A read issued straight after a write travelled with the token from before that write, so the server was under no obligation to serve the write and readYourWrites silently did not hold.

  HttpClient.request() snapshotted the outgoing headers with mergeHeaders(this.headers, ...) and only afterwards wrote the freshest token into this.headers, so the token learned from response N first shipped with request N+2. The assignment now happens before the merge.

  This regressed in 1.34.5. In 1.34.0–1.34.4 the request options held headers: this.headers by reference, so the late write was still picked up before fetch; 1.34.5 introduced per-request header merging, which turned that reference into a copy without moving the assignment.

Commits

• 73fbe1a chore: version packages (#1448)
• 7ac8182 DX-2995: fix read-your-writes sending a stale upstash-sync-token (#1447)
• 1bec566 ci: poll npm for the ci version instead of a fixed sleep (#1444)
• See full diff in compare view

Updates bullmq from 6.3.8 to 6.3.6

Commits

• e2e96ff chore(release): 6.3.5 (#4745)
• d4b0414 fix(deps): update dependency cron-parser to v5.10.1 (#4738)
• b3d65ac chore(release): vnet1.2.0 (#4735)
• e97e813 feat(delayed): support DelayedException [dotnet] (#4718)
• 8353cd9 chore(deps): lock file maintenance (#4733)
• 020b1ce chore(deps): update security dev patches [security] (#4711)
• 752ca1c chore(deps): lock file maintenance [rust] (#4732)
• 6c04a50 chore(deps): lock file maintenance (#4728)
• 2cd57c7 chore(deps): update dependency redix to v1.9.1 [elixir] (#4726)
• 1450697 chore(deps): update github/codeql-action action to v4.38.0 (#4714)
• Additional commits viewable in compare view

Updates mongoose to 9.10.1

Release notes

Sourced from mongoose's releases.

9.10.1 / 2026-09-14

• types: relax populate Model generics to allow typed virtuals to be passed to populate in TypeScript 7 with skipLibCheck #16503

Changelog

Sourced from mongoose's changelog.

9.10.1 / 2026-09-14

• types: relax populate Model generics to allow typed virtuals to be passed to populate in TypeScript 7 with skipLibCheck #16503

9.10.0 / 2026-09-10

• feat: upgrade mongodb driver -> 7.6.0
• feat(model): add Model.findAndCount() wrapper for limit+skip based pagination with countDocuments #16460 #16454
• feat(schema): add Schema.prototype.queryHelper() to make it easier to define query helpers in TypeScript #16464 #16410
• feat: support middleware skip option for cursors and custom hooks #16350 #15883 #8768 AbdelrahmanHafez
• fix: apply defaults to undefined array elements #16542 #9232
• types: support for type narrowing when using projection in find and findOne #16500 #15545
• types: make Schema.prototype.static() return type with new static #16464

9.9.5 / 2026-09-04

• fix(query): pass schema through when casting a nested $expr comparison #16496 rajanpanth
• fix(projection): build the dotted path correctly in isPathSelectedInclusive #16495 rajanpanth
• fix(document): replace {MODEL} in custom cast error messages from document validation #16480 #8300 AbinMadathil-Celigo
• types(model): add missing properties to listSearchIndexes() return type #16486 lazerg

9.9.4 / 2026-08-25

• fix(query): set strictQuery and strict on _mongooseOptions consistently #16451 #16447
• fix(hydration): use the doc model for looking up a ref #16453 rawmind
• fix(schema): drop the map values subpath when removing a map path #16457 rawmind
• fix(schema): remove a map that lives under a nested path #16461 #16457 luantaraschi
• fix(schema): do not repeat null in a toJSONSchema enum that already lists null #16456 luantaraschi
• fix(schema): clone a document array element with its own constructor signature #16463 #16462 luantaraschi
• fix(schema): keep the map value schematype a single object when cloning #16473 luantaraschi
• fix(schema): clarify duplicate index warning to note index is not created #16476 vjymisal0
• perf(model): index bulkSave write errors by document id #16474 yoominho91
• docs: add Atlas Vector Search and Atlas Search documentation #16395
• docs: fix dead MongoDB driver Collection link #16458 rajanpanth

8.24.4 / 2026-08-21

• fix(discriminator): prevent indexes and callQueue duplication with shared nested schemas #16467 #16466 #15966 (8.x backport) AbinMadathil-Celigo

9.9.3 / 2026-08-17

• perf(document): cache projection metadata and avoid scanning all projected paths for flat projections #16439 #16407 #16373 yogesh968
• fix(cast): reject arrays when casting to Int32 or Double #16446 rajanpanth
• docs: document new/returnOriginal deprecation from 9.2.0 #16449 #16008 #15972 alimughal95
• docs(schematypes): clarify that array default applies to the level it is declared on #16441 #9232

8.24.3 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()

... (truncated)

Commits

• ee7575a chore: release 9.10.1
• 59fae86 Merge pull request #16505 from Automattic/vkarpov15/gh-16503
• 889f18d types: relax populate Model generics to allow typed virtuals to be passed to ...
• 396a2a6 chore: add 9.10 changelog
• 7b28d7a chore: release 9.10.0
• bbc3fd1 Merge pull request #16455 from Automattic/9.10
• f9cef50 Update error handling in findAndCount method
• 0dd4091 Initialize options with an empty object if undefined
• b10301d Merge pull request #16488 from Automattic/dependabot/npm_and_yarn/master/moch...
• a23f167 Merge pull request #16500 from Automattic/vkarpov15/gh-15545
• Additional commits viewable in compare view

Updates zod to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

• d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
• f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
• ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
• cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
• 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
• 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

Commits

• 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
• 0f3f5ee 4.6.5
• cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
• ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
• 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
• de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
• 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
• 743aedb 4.6.4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.