chore(deps): Bump the patch-updates group across 1 directory with 7 updates by dependabot[bot] · Pull Request #432 · credebl/agent-controller

dependabot · 2026-08-10T03:36:06Z

Bumps the patch-updates group with 7 updates in the / directory:

Package	From	To
@opentelemetry/api	`1.9.0`	`1.9.1`
cors	`2.8.5`	`2.8.6`
ws	`8.21.0`	`8.21.3`
@types/express-serve-static-core	`5.1.0`	`5.1.3`
eslint-import-resolver-typescript	`4.4.4`	`4.4.5`
eslint-plugin-prettier	`5.5.4`	`5.5.6`
ts-jest	`29.4.6`	`29.4.12`

Updates @opentelemetry/api from 1.9.0 to 1.9.1

Release notes

Sourced from @opentelemetry/api's releases.

api/v1.9.1

1.9.1

🐛 (Bug Fix)

fix(api): prioritize esnext export condition as it is more specific #5458

fix(api): update diag consoleLogger to use original console methods to prevent infinite loop when a console instrumentation is present #6395

fix(api): use Attributes instead of deprecated SpanAttributes in SpanOptions #6478 @overbalance

fix(diag): change types in DiagComponentLogger from any to unknown#5478 @loganrosen

fix(api): re-introduce fallback chain for global utils #6523 @pichlermarc

🏠 (Internal)

refactor(api): refactor to avoid circular deps by merging observable types into Metric.ts #6441 @pichlermarc

refactor(api): remove "export *" in favor of explicit named exports #4880 @robbkidd

chore: enable tsconfig isolatedModules #5697 @legendecas

chore: disallow constructor parameter property syntax #6187 @legendecas

refactor(api): remove platform-specific globalThis, use globalThis directly #6208 @overbalance

chore(api): mark ProxyTracerProvider as deprecated #6328 @cjihrig

chore: enforce import type for type-only imports via ESLint #6467 @overbalance

perf(api): improve isValidSpanId, isValidTraceId performance #5714 @seemk

Changelog

Sourced from @opentelemetry/api's changelog.

1.9.1

🐛 (Bug Fix)

fix: avoid grpc types dependency #3551 @flarna

fix(otlp-proto-exporter-base): Match Accept header with Content-Type in the proto exporter #3562 @scheler

fix: include tracestate in export #3569 @flarna

🏠 (Internal)

chore: fix cross project links and missing implicitly exported types #3533 @legendecas

feat(sdk-metrics): add exponential histogram mapping functions #3504 @mwear

Commits

279458e Release 1.9.1 / 0.35.1 (#3573)
4978743 fix(http): remove outgoing headers normalization (#3557)
d1f9594 chore(deps): update dependency rimraf to v4 (#3532)
e0abcc0 fix: remove JSON syntax error and regenerate tsconfig files (#3566)
a90c558 fix(sdk-node): register instrumentations early (#3502)
5b070b8 fix: include TraceState in trace exports (#3569)
dcb09b7 chore(deps): update dependency gh-pages to v5 (#3571)
3bc93a9 feat: exponential histogram - part 1 - mapping functions (#3504)
3670071 fix: avoid grpc types dependency (#3551)
b5ef0e4 chore: fix proto generation (#3567)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @opentelemetry/api since your current version.

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

Build: Node.js@12.16 and Node.js.13.12 by @smondal in expressjs/cors#189

Update README.md for origin function callback parameters by @dstudzinski in expressjs/cors#180

Suggest passing false for disallowed domains, not erroring by @shackpank in expressjs/cors#175

Changed the term whitelist to allowlist in Documentation by @jkasun in expressjs/cors#200

Fix typo in README by @alex-grover in expressjs/cors#207

Added new link & website in the README by @manjunath00 in expressjs/cors#269

Fix functions call with extra parameter by @LuisEGR in expressjs/cors#245

🐛 Fix readme status badge by @homersimpsons in expressjs/cors#306

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/cors#321

ci: fix errors in ci github action for node 8 by @inigomarquinez in expressjs/cors#322

test: improved test robustness by @Alex-GF in expressjs/cors#320

chore: upgrade scorecard workflow pinned action versions by @carpasse in expressjs/cors#341

ci: add CodeQL (SAST) by @bjohansebas in expressjs/cors#340

docs: remove broken link to demo site by @dpopp07 in expressjs/cors#344

OSSF Scorecard recommendations by @UlisesGascon in expressjs/cors#350

build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 by @dependabot[bot] in expressjs/cors#351

build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @dependabot[bot] in expressjs/cors#353

build(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @dependabot[bot] in expressjs/cors#354

build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 by @dependabot[bot] in expressjs/cors#355

build(deps-dev): bump express from 4.17.1 to 4.21.2 by @dependabot[bot] in expressjs/cors#356

build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by @dependabot[bot] in expressjs/cors#352

build(deps-dev): bump mocha from 9.1.1 to 9.2.2 by @dependabot[bot] in expressjs/cors#358

update the docs for per request config by @jonchurch in expressjs/cors#338

(fix): readme updated for #271 origin option for * by @dhananjaysa92 in expressjs/cors#289

ci: upgrade Node versions by @UlisesGascon in expressjs/cors#359

chore: add funding to package.json by @bjohansebas in expressjs/cors#363

build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 by @dependabot[bot] in expressjs/cors#371

build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in expressjs/cors#370

docs: Cleanup README by @efekrskl in expressjs/cors#374

chore: add node v25 by @imangas in expressjs/cors#375

Extend CI test matrix by @imangas in expressjs/cors#376

docs: simplify code examples with header comments by @jonchurch in expressjs/cors#386

docs: tweak intro, add note w/ browser enforcement, FAQ by @jonchurch in expressjs/cors#385

chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball by @Phillip9587 in expressjs/cors#388

Release: 2.8.6 by @UlisesGascon in expressjs/cors#390

New Contributors

@smondal made their first contribution in expressjs/cors#189

@dstudzinski made their first contribution in expressjs/cors#180

@shackpank made their first contribution in expressjs/cors#175

@jkasun made their first contribution in expressjs/cors#200

@alex-grover made their first contribution in expressjs/cors#207

@manjunath00 made their first contribution in expressjs/cors#269

@LuisEGR made their first contribution in expressjs/cors#245

@homersimpsons made their first contribution in expressjs/cors#306

@inigomarquinez made their first contribution in expressjs/cors#321

@Alex-GF made their first contribution in expressjs/cors#320

@carpasse made their first contribution in expressjs/cors#341

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

Improve documentation (API, context, examples...)

Remove additional markdown files from tarball

Commits

f00a8c1 2.8.6 (#390)
848e2bd chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball (#388)
cf8947e docs: tweak intro, add note w/ browser enforcement, FAQ (#385)
bbf62a5 docs: simplify code examples with header comments (#386)
f442e77 Extend CI test matrix (#376)
d5cf6cd ci: add support for node@25 (#375)
7e6f7ee docs: revamp content (#374)
b25644c build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#370)
f881e91 build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 (#371)
9a9a760 chore: add funding to package.json (#363)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.

Updates ws from 8.21.0 to 8.21.3

Release notes

Sourced from ws's releases.

8.21.3

Bug fixes

The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

8.21.2

Bug fixes

Fixed a test for CITGM (2eb3be0b).

8.21.1

Bug fixes

Empty fragments are now counted toward the limit (a2f4e7c0).

The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).

Commits

c791e70 [dist] 8.21.3
e97a20e [fix] Reject offers with client_max_window_bits below config
787ebf2 [dist] 8.21.2
b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
e4bb883 [security] Use GitHub PVR as main reporting channel
2eb3be0 [test] Skip test on Node.js versions where it does not apply
ae1de54 [dist] 8.21.1
8e9511b [ci] Trust Coveralls Homebrew tap
f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
8df8265 [ci] Update actions/checkout action to v7
Additional commits viewable in compare view

Updates @types/express-serve-static-core from 5.1.0 to 5.1.3

Commits

See full diff in compare view

Updates eslint-import-resolver-typescript from 4.4.4 to 4.4.5

Release notes

Sourced from eslint-import-resolver-typescript's releases.

v4.4.5

Patch Changes

#473 32c61ab Thanks @leey0818! - fix: check tsconfig matching before using resolver

Changelog

Sourced from eslint-import-resolver-typescript's changelog.

4.4.5

Patch Changes

#473 32c61ab Thanks @leey0818! - fix: check tsconfig matching before using resolver

Commits

724c47d chore: release eslint-import-resolver-typescript (#480)
32c61ab fix: check tsconfig matching before using resolver (#473)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-import-resolver-typescript since your current version.

Updates eslint-plugin-prettier from 5.5.4 to 5.5.6

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.5.6

Patch Changes

#791 b5c96a3 Thanks @JounQin! - chore: bump all (dev)Dependencies

v5.5.5

Patch Changes

#772 7264ed0 Thanks @BPScott! - Bump prettier-linter-helpers dependency to v1.0.1

#776 77651a3 Thanks @aswils! - fix: bump synckit for yarn PnP ESM issue

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.5.6

Patch Changes

#791 b5c96a3 Thanks @JounQin! - chore: bump all (dev)Dependencies

5.5.5

Patch Changes

#772 7264ed0 Thanks @BPScott! - Bump prettier-linter-helpers dependency to v1.0.1

#776 77651a3 Thanks @aswils! - fix: bump synckit for yarn PnP ESM issue

Commits

4f33ea5 chore: release eslint-plugin-prettier (#792)
4745b54 ci: declare workflow-level contents: read on 2 workflows (#790)
b5c96a3 chore: bump all (dev)Dependencies (#791)
e867680 chore(deps): update all dependencies (#766)
e8e2f7f chore: testing eslint v10 (#779)
ca076d9 chore: update dev dependencies (#780)
42e6369 build(deps): Bump the actions group with 2 updates (#778)
53ff214 Remove empty NPM_TOKEN from release.yml
e2c154a chore: release eslint-plugin-prettier (#773)
6795c1a build(deps): Bump the actions group across 1 directory with 2 updates (#774)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-prettier since your current version.

Updates ts-jest from 29.4.6 to 29.4.12

Release notes

Sourced from ts-jest's releases.

v29.4.12

Please refer to CHANGELOG.md for details.

v29.4.11

Please refer to CHANGELOG.md for details.

v29.4.10

Please refer to CHANGELOG.md for details.

v29.4.9

Please refer to CHANGELOG.md for details.

v29.4.8

No release notes provided.

v29.4.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.12 (2026-07-22)

Features

compiler: support TypeScript 7 projects through compatibility aliases (#5386)

29.4.11 (2026-05-21)

Bug Fixes

preserve Bundler on the CJS path under TypeScript >= 6 (3941818), closes #4198

29.4.10 (2026-05-18)

Bug Fixes

pass resolutionMode to ts.resolveModuleName for hybrid module support (b557a85)

rebuild Program when consecutive compiles need different module kinds (a82a2b3), closes #4774

respect tsconfig moduleResolution instead of forcing Node10 (1bffffc)

transformer: transpile mjs files from node_modules for CJS mode (96d025d)

transformer: use a consistent comparator in hoist-jest sortStatements (8a8fd2f)

29.4.9 (2026-04-01)

Bug Fixes

use correct registry for npm OIDC trusted publishing (f8a9cc9)

29.4.8 (2026-04-01)

Bug Fixes

wrong published assets

29.4.7 (2026-04-01)

... (truncated)

Commits

3f05625 chore(release): 29.4.12
df28b27 docs: clarify TypeScript version prerequisites
c8a614a docs: mention TypeScript 7 setup in README
06c79d4 fix: address TypeScript 7 review feedback
f107460 docs: explain TypeScript 7 compatibility setup
3388227 test(e2e): add TypeScript compatibility matrix
891dc73 fix(compiler): support TypeScript 7 compatibility aliases
eb135eb build(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 in /examples
d5d80a3 ci: pin google osv scan action at v2.3.5
6bf293f build(deps): bump shell-quote from 1.8.4 to 1.10.0 in /website
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ts-jest since your current version.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot · 2026-08-10T03:36:07Z

Labels

The following labels could not be found: yarn. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

…pdates Bumps the patch-updates group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@opentelemetry/api](https://github.com/open-telemetry/opentelemetry-js) | `1.9.0` | `1.9.1` | | [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` | | [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.3` | | [@types/express-serve-static-core](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express-serve-static-core) | `5.1.0` | `5.1.3` | | [eslint-import-resolver-typescript](https://github.com/import-js/eslint-import-resolver-typescript) | `4.4.4` | `4.4.5` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.4` | `5.5.6` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.6` | `29.4.12` | Updates `@opentelemetry/api` from 1.9.0 to 1.9.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.9.0...v1.9.1) Updates `cors` from 2.8.5 to 2.8.6 - [Release notes](https://github.com/expressjs/cors/releases) - [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md) - [Commits](expressjs/cors@v2.8.5...v2.8.6) Updates `ws` from 8.21.0 to 8.21.3 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.21.0...8.21.3) Updates `@types/express-serve-static-core` from 5.1.0 to 5.1.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express-serve-static-core) Updates `eslint-import-resolver-typescript` from 4.4.4 to 4.4.5 - [Release notes](https://github.com/import-js/eslint-import-resolver-typescript/releases) - [Changelog](https://github.com/import-js/eslint-import-resolver-typescript/blob/master/CHANGELOG.md) - [Commits](import-js/eslint-import-resolver-typescript@v4.4.4...v4.4.5) Updates `eslint-plugin-prettier` from 5.5.4 to 5.5.6 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.5.4...v5.5.6) Updates `ts-jest` from 29.4.6 to 29.4.12 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.6...v29.4.12) --- updated-dependencies: - dependency-name: "@opentelemetry/api" dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@types/express-serve-static-core" dependency-version: 5.1.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: cors dependency-version: 2.8.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: eslint-import-resolver-typescript dependency-version: 4.4.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: eslint-plugin-prettier dependency-version: 5.5.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: ts-jest dependency-version: 29.4.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: ws dependency-version: 8.21.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-09-13T18:04:27Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: a815ca05-9cb2-4a26-83d9-2e4b9e302cfb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

sonarqubecloud · 2026-09-13T18:04:52Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/main/patch-updates-455a971465 branch from 68c0511 to 8b76906 Compare August 17, 2026 03:37

dependabot Bot force-pushed the dependabot/npm_and_yarn/main/patch-updates-455a971465 branch from 8b76906 to 74e5404 Compare August 31, 2026 03:35

ajile-in approved these changes Sep 12, 2026

View reviewed changes

ajile-in force-pushed the dependabot/npm_and_yarn/main/patch-updates-455a971465 branch from 74e5404 to 8159449 Compare September 13, 2026 18:04

Navigation Menu

Uh oh!

chore(deps): Bump the patch-updates group across 1 directory with 7 updates - #432

chore(deps): Bump the patch-updates group across 1 directory with 7 updates#432
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/patch-updates-455a971465

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

coderabbitai Bot commented Sep 13, 2026

Review skipped

Uh oh!

sonarqubecloud Bot commented Sep 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

api/v1.9.1

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

1.9.1

🐛 (Bug Fix)

🏠 (Internal)

v2.8.6

What's Changed

New Contributors

2.8.6 / 2026-01-22

8.21.3

Bug fixes

8.21.2

Bug fixes

8.21.1

Bug fixes

v4.4.5

Patch Changes

4.4.5

Patch Changes

v5.5.6

Patch Changes

v5.5.5

Patch Changes

5.5.6

Patch Changes

5.5.5

Patch Changes

v29.4.12

v29.4.11

v29.4.10

v29.4.9

v29.4.8

v29.4.7

29.4.12 (2026-07-22)

Features

29.4.11 (2026-05-21)

Bug Fixes

29.4.10 (2026-05-18)

Bug Fixes

29.4.9 (2026-04-01)

Bug Fixes

29.4.8 (2026-04-01)

Bug Fixes

29.4.7 (2026-04-01)

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Labels

Uh oh!

coderabbitai Bot commented Sep 13, 2026

Review skipped

Uh oh!

sonarqubecloud Bot commented Sep 13, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading