Skip to content

chore: bump the npm-minor-and-patch group with 7 updates - #1552

Merged
andreaangiolillo merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-baf559bb37
Oct 15, 2026
Merged

chore: bump the npm-minor-and-patch group with 7 updates#1552
andreaangiolillo merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-baf559bb37

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 7 updates:

Package From To
@aws-sdk/client-s3 3.1146.0 3.1149.0
dotenv 18.0.5 18.0.7
eslint-plugin-jest 29.16.6 29.16.11
openapi-to-postmanv2 6.3.3 6.4.0
@babel/core 8.0.6 8.0.7
@babel/preset-env 8.0.6 8.0.7
prettier 3.9.9 3.9.10

Updates @aws-sdk/client-s3 from 3.1146.0 to 3.1149.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1149.0

3.1149.0(2026-10-09)

Chores
  • codegen: sync for endpoint cache fix and pre-schema error fallback (#8341) (5773a751)
New Features
  • client-quicksight: Adds granular custom permissions for the Gong action connector (GongAction, CreateAndUpdateGongAction, ShareGongAction, UseGongAction) and for create, update, and share operations on 45 data source connectors, such as Amazon S3 and Snowflake, through the Custom Permissions APIs. (c5d26e39)
  • client-deadline: The new ListMemberships API enables users to discover their memberships across Deadline Cloud resources, enabling scoped users of Deadline resources to discover and interact with the resources they have been provided scoped access to. (0d7406c7)
  • client-marketplace-metering: AWS Marketplace Metering Service adds AgreementId to ResolveCustomer API response. (9653f5cc)
  • client-mediatailor: Add caching settings to http functions (7ac7530b)
  • client-securityagent: Adds a test scope field to specify whether a pentest targets a web application or a generative AI application. (1cc5ba6a)
Bug Fixes
  • lib-transfer-manager:
    • retry UploadPart on worker-thread upload path (#8345) (0e357d90)
    • avoid full-body copy for SharedArrayBuffer uploads (#8338) (5473caf9)

For list of updated packages, view updated-packages.md in assets-3.1149.0.zip

v3.1148.0

3.1148.0(2026-10-08)

Documentation Changes
  • client-sesv2: SESV2 DEED - Documentation Update (3d227df4)
New Features
  • client-pi: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (1d99c7c8)
  • client-marketplace-agreement: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (404943ce)
  • client-emr-serverless: This release adds support for system profile logs for lakeformation enabled Spark connect sessions . (f9ed2f83)
  • client-cost-explorer: Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (7e0afd11)
  • client-guardduty: Added support for GuardDuty RDS Data Activity Monitoring (aa200020)
  • client-gamelift: Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance. (18121840)
  • client-datazone: Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook. (37214f3f)
  • client-devops-agent: Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC. (55b389d1)
  • client-security-ir: Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership. (f4f6dfe5)
  • client-cloudformation: CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback. (07e146a5)
  • client-opensearch: This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains. (393fb011)
  • client-lambda: AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry. (c7696bfa)
  • client-securityhub: Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket. (f53e8a2a)
  • client-medialive: AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates. (e335e5dc)
  • client-eks: Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration. (82f87e7c)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1149.0 (2026-10-09)

Note: Version bump only for package @​aws-sdk/client-s3

3.1148.0 (2026-10-08)

Note: Version bump only for package @​aws-sdk/client-s3

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates dotenv from 18.0.5 to 18.0.7

Changelog

Sourced from dotenv's changelog.

18.0.7 (2026-10-09)

Changed

  • Treat undefined settings like quiet: true as null rather than falsey (#1070)
  • CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

  • Use smarter parseBoolean not Boolean() to fix override (#1069)
Commits
  • 2953207 18.0.7
  • 9944723 make more readable for undefined -> null
  • d455db0 Merge branch 'master' of github.com:motdotla/dotenv
  • e411e02 changelog
  • 6237c35 Merge pull request #1070 from Utkarsh-Singhal-26/fix/ignore-undefined-config-...
  • 9af8c28 Merge pull request #1071 from himanshu748/fix-cli-env-quiet
  • c7161c6 fix(cli): honor quiet settings loaded from .env
  • 3990466 fix: ignore undefined options so they don't mask DOTENV_* env settings
  • 5d7cc39 18.0.6
  • 750ba03 changelog
  • Additional commits viewable in compare view

Updates eslint-plugin-jest from 29.16.6 to 29.16.11

Release notes

Sourced from eslint-plugin-jest's releases.

v29.16.11

29.16.11 (2026-10-10)

Bug Fixes

v29.16.10

29.16.10 (2026-10-10)

Bug Fixes

  • make sure most rules account for optional chaining (#2038) (2d68f61)

v29.16.9

29.16.9 (2026-10-10)

Bug Fixes

  • consistent-test-it: don't drop only and skip from each chains (#2037) (3f6b5aa)

Performance Improvements

  • cache parsing of nodes that turn out not to be jest function calls (#2035) (7b11cbd)

v29.16.8

29.16.8 (2026-10-10)

Bug Fixes

  • prefer-to-have-been-called-times: don't crash if there is no argument passed to expect (#2036) (4dc58f0)

v29.16.7

29.16.7 (2026-10-10)

Bug Fixes

  • unbound-method: account for optional chaining (#2034) (b918d73)
Changelog

Sourced from eslint-plugin-jest's changelog.

29.16.11 (2026-10-10)

Bug Fixes

29.16.10 (2026-10-10)

Bug Fixes

  • make sure most rules account for optional chaining (#2038) (2d68f61)

29.16.9 (2026-10-10)

Bug Fixes

  • consistent-test-it: don't drop only and skip from each chains (#2037) (3f6b5aa)

Performance Improvements

  • cache parsing of nodes that turn out not to be jest function calls (#2035) (7b11cbd)

29.16.8 (2026-10-10)

Bug Fixes

  • prefer-to-have-been-called-times: don't crash if there is no argument passed to expect (#2036) (4dc58f0)

29.16.7 (2026-10-10)

Bug Fixes

  • unbound-method: account for optional chaining (#2034) (b918d73)
Commits
  • 1a7fc77 chore(release): 29.16.11 [skip ci]
  • 3e363d1 fix(no-mocks-import): check dynamic imports (#2039)
  • 3ca13a7 fix(no-export): report export all declarations (#2040)
  • 169fda0 chore(release): 29.16.10 [skip ci]
  • 2d68f61 fix: make sure most rules account for optional chaining (#2038)
  • 68a144d chore(release): 29.16.9 [skip ci]
  • 3f6b5aa fix(consistent-test-it): don't drop only and skip from each chains (#2037)
  • 7b11cbd perf: cache parsing of nodes that turn out not to be jest function calls (#2035)
  • 6ceff2c chore(release): 29.16.8 [skip ci]
  • 4dc58f0 fix(prefer-to-have-been-called-times): don't crash if there is no argument pa...
  • Additional commits viewable in compare view

Updates openapi-to-postmanv2 from 6.3.3 to 6.4.0

Changelog

Sourced from openapi-to-postmanv2's changelog.

[v6.4.0] - 2026-10-07

Added

  • Added support for OpenAPI 3.2 specifications (query and additionalOperations operations, querystring parameters, hierarchical tags, itemSchema streaming responses, response summary, discriminator.defaultMapping and OAuth 2.0 Device Authorization flow).

Fixed

  • Fixed an issue where non-operation fields of a webhook Path Item (e.g. summary, description) were converted into requests by the v2 converter.
Commits
  • 49ab860 Merge pull request #981 from postmanlabs/release/v6.4.0
  • a9579ae Prepare release v6.4.0
  • 4450afe Merge pull request #955 from postmanlabs/feature/openapi-3-2
  • 491d3af Share OAS 3.2 querystring expansion and align example key lookup
  • 623ee5a Address OAS 3.2 review: custom methods, SSE, tag cycles and shared helpers
  • 421eb18 Fix remaining OAS 3.2 review gaps for refs and defaultMapping.
  • 9a1fe57 Address OAS 3.2 review feedback
  • ef39fc0 Fix OAS 3.2 operation selection and refs
  • 881ebf9 Merge branch 'develop' into feature/openapi-3-2
  • f2774ba Merge pull request #973 from postmanlabs/release/v6.3.3
  • See full diff in compare view

Updates @babel/core from 8.0.6 to 8.0.7

Release notes

Sourced from @​babel/core's releases.

v8.0.7 (2026-10-07)

Thanks @​brunoborta, @​CINC0S, @​hoobnn, and @​jpradelle for your first PRs!

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 11

Changelog

Sourced from @​babel/core's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
Commits

Updates @babel/preset-env from 8.0.6 to 8.0.7

Release notes

Sourced from @​babel/preset-env's releases.

v8.0.7 (2026-10-07)

Thanks @​brunoborta, @​CINC0S, @​hoobnn, and @​jpradelle for your first PRs!

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 11

Changelog

Sourced from @​babel/preset-env's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
Commits

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore: bump the npm-minor-and-patch group with 7 updates
ddc702e 
Bumps the npm-minor-and-patch group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1146.0` | `3.1149.0` |
| [dotenv](https://github.com/motdotla/dotenv) | `18.0.5` | `18.0.7` |
| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `29.16.6` | `29.16.11` |
| [openapi-to-postmanv2](https://github.com/postmanlabs/openapi-to-postman) | `6.3.3` | `6.4.0` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `8.0.6` | `8.0.7` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `8.0.6` | `8.0.7` |
| [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` |


Updates `@aws-sdk/client-s3` from 3.1146.0 to 3.1149.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1149.0/clients/client-s3)

Updates `dotenv` from 18.0.5 to 18.0.7
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.5...v18.0.7)

Updates `eslint-plugin-jest` from 29.16.6 to 29.16.11
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](jest-community/eslint-plugin-jest@v29.16.6...v29.16.11)

Updates `openapi-to-postmanv2` from 6.3.3 to 6.4.0
- [Release notes](https://github.com/postmanlabs/openapi-to-postman/releases)
- [Changelog](https://github.com/postmanlabs/openapi-to-postman/blob/develop/CHANGELOG.md)
- [Commits](postmanlabs/openapi-to-postman@v6.3.3...v6.4.0)

Updates `@babel/core` from 8.0.6 to 8.0.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-core)

Updates `@babel/preset-env` from 8.0.6 to 8.0.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-preset-env)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1149.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: dotenv
  dependency-version: 18.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: eslint-plugin-jest
  dependency-version: 29.16.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: openapi-to-postmanv2
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@babel/core"
  dependency-version: 8.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@babel/preset-env"
  dependency-version: 8.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 14, 2026 18:53
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 14, 2026
@dependabot
dependabot Bot requested a review from andreaangiolillo October 14, 2026 18:53
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Oct 14, 2026
@andreaangiolillo
andreaangiolillo merged commit 82a2204 into main Oct 15, 2026
7 checks passed
@andreaangiolillo
andreaangiolillo deleted the dependabot/npm_and_yarn/npm-minor-and-patch-baf559bb37 branch October 15, 2026 13:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andreaangiolillo andreaangiolillo andreaangiolillo approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@andreaangiolillo