chore(deps-dev): bump the backend-development group across 1 directory with 5 updates

[dependabot]

Bumps the backend-development group with 5 updates in the /backend directory:

Package	From	To
@types/node	24.3.0	26.6.4
jest	30.2.0	30.5.2
mongodb-memory-server	10.4.3	11.3.0
nodemon	3.1.10	3.1.14
supertest	7.2.2	7.3.0

Updates @types/node from 24.3.0 to 26.6.4

Commits

• See full diff in compare view

Updates jest from 30.2.0 to 30.5.2

Release notes

Sourced from jest's releases.

v30.5.2

Features

• [@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

• [jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)
• [jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)
• [@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

New Contributors

• @​winklemad made their first contribution in jestjs/jest#16345

Full Changelog: jestjs/jest@v30.5.1...v30.5.2

v30.5.1

Fixes

• [jest-config] Don't warn about global-only options in the config that supplies the global config - the root config a project resolves to, or the first entry of --projects when no root config is passed (#16411)
• [jest-config, jest-types] Stop accepting reporters, coverageReporters, workerIdleMemoryLimit, cwd and runnerOptions in a project config - they were silently ignored, and now warn like the other global-only options (#16411)
• [jest-config, jest-validate] Warn about maxWorkers and coverageThreshold in a project config instead of dropping them without a word (#16411)
• [jest-resolve] Match moduleNameMapper patterns against the specifier as written again (reverting #16390) (#16417)
• [jest-runtime] Resolve package imports specifiers like #dep under ESM again (#16413)

Chore & Maintenance

• [jest-util] Name the testEnvironmentOptions.globalsCleanup option and link the docs from the JEST-01 deprecation warning, and document the option's modes (#16404)

New Contributors

• @​HuzaifaChaudary made their first contribution in jestjs/jest#16413

Full Changelog: jestjs/jest@v30.5.0...v30.5.1

v30.5.0

On a personal note: King Harald V of Norway passed away this morning. He ascended the throne 35 years ago, two months before I was born. This release is dedicated to his memory. Hvil i fred 🇳🇴

---

This is a big release. It touches jest-runtime, jest-resolve and jest-haste-map in many places, and with this many changes there might be regressions 😬. If your suite behaves differently after upgrading, please open an issue.

Highlights

whenCalledWith

Mock functions can now configure return values per argument list, contributed by @​timkindberg (#16053):

const fn = jest.fn();
fn.whenCalledWith('apple').mockReturnValue('red');
</tr></table> 

... (truncated)

Changelog

Sourced from jest's changelog.

30.5.2

Features

• [@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

• [jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)
• [jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)
• [@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

30.5.1

Fixes

• [jest-config] Don't warn about global-only options in the config that supplies the global config - the root config a project resolves to, or the first entry of --projects when no root config is passed (#16411)
• [jest-config, jest-types] Stop accepting reporters, coverageReporters, workerIdleMemoryLimit, cwd and runnerOptions in a project config - they were silently ignored, and now warn like the other global-only options (#16411)
• [jest-config, jest-validate] Warn about maxWorkers and coverageThreshold in a project config instead of dropping them without a word (#16411)
• [jest-resolve] Match moduleNameMapper patterns against the specifier as written again (reverting #16390) (#16417)
• [jest-runtime] Resolve package imports specifiers like #dep under ESM again (#16413)

Chore & Maintenance

• [jest-util] Name the testEnvironmentOptions.globalsCleanup option and link the docs from the JEST-01 deprecation warning, and document the option's modes (#16404)

30.5.0

Features

• [@jest/expect-utils, jest-mock] Add mockFn.whenCalledWith(...args) for configuring return values per argument list, with first-class asymmetric-matcher support (#16053)
• [@jest/expect-utils] Export AsymmetricMatcher and FunctionParameters types (previously private to expect) (#16053)
• [jest-circus, jest-core, jest-jasmine2, jest-test-result, jest-types] --collectTests now expands test.each/describe.each cases and reports per-status counts (skipped/todo via the new wouldRun flag for selected tests) plus a summary line that match a real run, including under --testNamePattern and .only/fdescribe focus on both the circus and jasmine2 runners (#16259)
• [jest-circus, jest-environment, jest-runtime, jest-types] Add describe-level retries via jest.retryTimes(..., {entireDescribe: true}) (#16322)
• [jest-circus, jest-message-util, jest-reporters, jest-types] Add retryMessages to AssertionResult and export formatErrorStack, so the retry log renders nested cause and AggregateError sections with code frames instead of serialized [cause]:/[errors]: markers (#16316)
• [jest-circus, jest-types] Add unhandledErrorsDetailed to Circus.RunResult, so an unhandled rejection reports its cause chain and AggregateError entries with code frames instead of a pre-serialized stack (#16316)
• [jest-haste-map] Replace NodeWatcher and FSEventsWatcher with @parcel/watcher for the non-watchman watch path (#16188)
• [jest-resolve] Bump unrs-resolver to 1.12.1, remove jest-pnp-resolver and unnecessary checks (#15721)
• [jest-resolve] Honor Node's --preserve-symlinks / NODE_PRESERVE_SYMLINKS in the default resolver by passing symlinks: false to unrs-resolver (#16260)
• [jest-runtime] Apply automocking and manual __mocks__ files to synchronously evaluable ESM graphs on Node 24.9+ - static imports, dynamic import() and require() of an ESM file now generate an automock from the real module's namespace instead of failing with "Attempting to import a mock without a factory". Graphs that need async evaluation (top-level await) or an async-only resolver or transformer still throw (#16391)
• [jest-runtime] Route process.getBuiltinModule through the sandbox, so it returns the sandbox process and the hooked node:module instead of the host's (#16391)
• [jest-runtime] Throw an actionable error from module.register() and module.registerHooks() inside a test - the hooks attached to the loader running Jest itself, never saw the sandboxed requires they were meant for, and stayed registered for every later test file in the worker (#16391)
• [jest-runtime] Surface resolution and import-attribute errors in an ESM graph before executing any of its CJS dependencies on Node 24.9+, matching Node's run-nothing-on-a-broken-graph behavior; the legacy loader on older versions keeps its linking-time execution order (#16391)
• [jest-runtime] Throw ERR_SOURCE_PHASE_NOT_DEFINED with an actionable message for import source and import.source(), instead of failing at instantiation with V8's bare "Source phase import object is not defined" (#16391)
• [jest-runtime] Emit the JSON-without-import-attribute deprecation warning once per test file instead of once per worker, so it is no longer silently swallowed for every file after the first (#16391)
• [jest-runtime] Set import.meta.main to true in the test file and false in every module it loads, matching Node 24+ (#16367)
• [jest-runtime] Resolve the module-sync export condition, so a package that exposes its ESM entry point for require() loads the same file Node would (#16336)
• [jest-snapshot] Add external snapshot paths to custom reporter failure details (#16374)

Fixes

... (truncated)

Commits

• 202dd8a v30.5.2
• 9ab14fe v30.5.1
• 912baa3 v30.5.0
• b91717a chore: refresh coding agent instructions (#16182)
• 746f2a0 v30.4.2
• b3b4a09 v30.4.1
• 5cbb21e v30.4.0
• db7141a fix: allow collectCoverage and coverageProvider in project config (#16132)
• efb59c2 v30.3.0
• 96c53d3 feat(jest-config): add defineConfig and mergeConfig functions (#15844)
• See full diff in compare view

Updates mongodb-memory-server from 10.4.3 to 11.3.0

Release notes

Sourced from mongodb-memory-server's releases.

v11.3.0

11.3.0 (2026-09-21)

Features

• checksum binaries on extraction and check them (#1023) (174ab53), closes #991

Fixes

• MongoBinaryDownload::attemptDownload: add log when response recieves a error (143588b)
• MongoBinaryDownload::attemptDownload: change "console.error" to a debug "log" (833bcc7)
• MongoBinaryDownload: replace zip implementation with new promise API (3fb04f4), closes #990
• MongoInstance::stop: change to always unset the "mongodProcess" (9e32ef2), closes #1032
• MongoMemoryReplSet: increase "electionTimeoutMillis" timeout to 5000ms (76d727a), closes #995

Style

• utils::killProcess: fix typo "An" -> "A" (c2a18ac)

Refactor

• MongoBinaryDownload: have the 2 extract function be more similar (940b352)

Dependencies

• @​types/tar-stream: remove (7fbd7f2)
• mongodb: lock to 7.5.X (a3cb1d6), closes #1026
• mongodb: upgrade to 7.5.0 (15e5cca)
• semver: upgrade to 7.8.5 (c3c5adc)
• tar-stream: upgrade to 3.2.1 (3e89726)
• yauzl: upgrade to 3.4.0 (e3f6432)

Dev-Dependencies

• @​types/semver: upgrade to 7.8.0 (1705b60)
• @​types/yauzl: upgrade to 3.4.0 (71fe42d)
• doctoc: upgrade to 2.5.0 (833623b)
• eslint-plugin-prettier: upgrade to 5.5.6 (38394c9)
• eslint: upgrade to 10.9.1 (16b408d)
• globals: upgrade to 17.12.0 (1765718)
• jest: upgrade to 30.5.1 (a7d0a44)
• prettier: upgrade to 3.9.6 (46fea46)
• ts-jest: upgrade to 29.4.12 (6166072)
• typedoc: upgrade to 0.28.20 (5dc343f)
• typescript-eslint: upgrade to 8.69.0 (c9b8e55)

v11.3.0-beta.6

11.3.0-beta.6 (2026-09-21)

Dependencies

... (truncated)

Changelog

Sourced from mongodb-memory-server's changelog.

11.3.0 (2026-09-21)

Features

• checksum binaries on extraction and check them (#1023) (174ab53), closes #991

Fixes

• MongoBinaryDownload::attemptDownload: add log when response recieves a error (143588b)
• MongoBinaryDownload::attemptDownload: change "console.error" to a debug "log" (833bcc7)
• MongoBinaryDownload: replace zip implementation with new promise API (3fb04f4), closes #990
• MongoInstance::stop: change to always unset the "mongodProcess" (9e32ef2), closes #1032
• MongoMemoryReplSet: increase "electionTimeoutMillis" timeout to 5000ms (76d727a), closes #995

Style

• utils::killProcess: fix typo "An" -> "A" (c2a18ac)

Refactor

• MongoBinaryDownload: have the 2 extract function be more similar (940b352)

Dependencies

• @​types/tar-stream: remove (7fbd7f2)
• mongodb: lock to 7.5.X (a3cb1d6), closes #1026
• mongodb: upgrade to 7.5.0 (15e5cca)
• semver: upgrade to 7.8.5 (c3c5adc)
• tar-stream: upgrade to 3.2.1 (3e89726)
• yauzl: upgrade to 3.4.0 (e3f6432)

Dev-Dependencies

• @​types/semver: upgrade to 7.8.0 (1705b60)
• @​types/yauzl: upgrade to 3.4.0 (71fe42d)
• doctoc: upgrade to 2.5.0 (833623b)
• eslint-plugin-prettier: upgrade to 5.5.6 (38394c9)
• eslint: upgrade to 10.9.1 (16b408d)
• globals: upgrade to 17.12.0 (1765718)
• jest: upgrade to 30.5.1 (a7d0a44)
• prettier: upgrade to 3.9.6 (46fea46)
• ts-jest: upgrade to 29.4.12 (6166072)
• typedoc: upgrade to 0.28.20 (5dc343f)
• typescript-eslint: upgrade to 8.69.0 (c9b8e55)

11.3.0-beta.6 (2026-09-21)

Dependencies

• mongodb: lock to 7.5.X (a3cb1d6), closes #1026

... (truncated)

Commits

• adb334d release: v11.3.0
• 98f0030 release: v11.3.0-beta.6
• aa2f902 release: v11.3.0-beta.5
• e30d72c release: v11.3.0-beta.4
• d605aa3 release: v11.3.0-beta.3
• 964582d release: v11.3.0-beta.2
• b2e35bd release: v11.3.0-beta.1
• d90ae52 release: v11.2.0
• 1342553 release: v11.1.0
• a9870e8 release: v11.0.1
• Additional commits viewable in compare view

Updates nodemon from 3.1.10 to 3.1.14

Release notes

Sourced from nodemon's releases.

v3.1.14

3.1.14 (2026-02-20)

Bug Fixes

• get watch working on windows (cfebe2f), closes #2270

v3.1.13

3.1.13 (2026-02-19)

Bug Fixes

• TypeScript definition for 'restart' args (5c03715), closes #2265

v3.1.12

3.1.12 (2026-02-19)

Bug Fixes

• bump minimatch (9376af3), closes #2267

v3.1.11

3.1.11 (2025-11-11)

Bug Fixes

• script.start with missing file (8d927f1), closes #2258

Commits

• cfebe2f fix: get watch working on windows
• f34bfa9 chore: fix release to run after tests
• 5c03715 fix: TypeScript definition for 'restart' args
• 28de4b7 chore: semver-release wanted 22-24 🤦
• 6217164 chore: move release workflow to node 20
• 2c458de chore: bump semver-release + update workflow
• 9376af3 fix: bump minimatch
• e045423 chore: website
• f7a4edd chore: website
• f26223f chore: website
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nodemon since your current version.

Updates supertest from 7.2.2 to 7.3.0

Release notes

Sourced from supertest's releases.

v7.3.0

• fix: stabilize ephemeral server requests and assertions 71dc5fb
• Merge pull request #883 from forwardemail/dependabot/npm_and_yarn/multi-acd8535d99 3b5ba5c
• Merge pull request #886 from forwardemail/dependabot/npm_and_yarn/picomatch-2.3.2 c3419b2
• Merge pull request #887 from forwardemail/dependabot/npm_and_yarn/lodash-4.18.1 7e409db
• Merge pull request #898 from forwardemail/dependabot/npm_and_yarn/brace-expansion-1.1.21 b55a7f9
• Merge pull request #899 from forwardemail/dependabot/npm_and_yarn/browserslist-4.29.0 7a5deaa
• Merge pull request #900 from forwardemail/dependabot/npm_and_yarn/fast-uri-3.1.8 a75f6ee
• Merge pull request #901 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.15.2 c2cb33e
• Merge pull request #896 from pnookala-godaddy/codex/ephemeral-loopback-bind 7fb34e7
• chore(deps-dev): bump js-yaml from 3.14.2 to 3.15.2 c357584
• chore(deps-dev): bump browserslist from 4.25.1 to 4.29.0 2a01b57
• chore(deps-dev): bump fast-uri from 3.0.6 to 3.1.8 343394d
• chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.21 6b203e9
• Merge pull request #881 from forwardemail/dependabot/npm_and_yarn/qs-6.14.2 d40ca7e
• fix: match ephemeral server address family b6f5995
• chore(deps-dev): bump lodash from 4.17.21 to 4.18.1 81766ca
• chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 985ac7c
• chore(deps): bump minimatch 58baa5f
• chore(deps): bump qs from 6.14.1 to 6.14.2 c406e82

---

forwardemail/supertest@v7.2.2...v7.3.0

Commits

• a3f5cb8 7.3.0
• 71dc5fb fix: stabilize ephemeral server requests and assertions
• 3b5ba5c Merge pull request #883 from forwardemail/dependabot/npm_and_yarn/multi-acd85...
• c3419b2 Merge pull request #886 from forwardemail/dependabot/npm_and_yarn/picomatch-2...
• 7e409db Merge pull request #887 from forwardemail/dependabot/npm_and_yarn/lodash-4.18.1
• b55a7f9 Merge pull request #898 from forwardemail/dependabot/npm_and_yarn/brace-expan...
• 7a5deaa Merge pull request #899 from forwardemail/dependabot/npm_and_yarn/browserslis...
• a75f6ee Merge pull request #900 from forwardemail/dependabot/npm_and_yarn/fast-uri-3.1.8
• c2cb33e Merge pull request #901 from forwardemail/dependabot/npm_and_yarn/js-yaml-3.15.2
• 7fb34e7 Merge pull request #896 from pnookala-godaddy/codex/ephemeral-loopback-bind
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
frontendatlas	Ready	Preview	Oct 5, 2026 5:15am UTC
frontendatlas-be	Ready	Preview	Oct 5, 2026 5:15am UTC
frontendatlas-fe	Error		Oct 5, 2026 5:15am UTC