Skip to content

chore(deps): bump the frontend-non-major group across 1 directory with 5 updates - #131

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-non-major-1b70b0266c
Open

chore(deps): bump the frontend-non-major group across 1 directory with 5 updates#131
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-non-major-1b70b0266c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the frontend-non-major group with 5 updates in the /frontend directory:

Package From To
@aws-sdk/client-s3 3.1053.0 3.1115.0
bits-ui 2.18.1 2.19.0
jose 6.2.3 6.2.9
meilisearch 0.58.0 0.60.0
pg 8.21.0 8.23.0

Updates @aws-sdk/client-s3 from 3.1053.0 to 3.1115.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1115.0

3.1115.0(2026-08-20)

Documentation Changes
  • client-pricing-plan-manager: Documentation update for the CreateSubscription API to correct the default value of the approval mode parameter. The default value for paid subscriptions is MANUAL, not IMMEDIATE as previously documented. The default value remains IMMEDIATE for FREE tier subscriptions. (50d16ae3)
New Features
  • client-sesv2: Amazon SES now supports per-message tracking overrides. You can use the new ConfigurationOverrides parameter in SendEmail and SendBulkEmail to enable or disable open and click tracking for individual messages without changing your account-level or configuration set settings. (da56caa5)
  • client-arc-region-switch: Adds support for Rds switchover read replica for Oracle databases in Region switch plans (85ffb20a)
  • client-ec2: EC2 marks UEFI instance metadata field as sensitive. (c232746a)
  • client-direct-connect: This release adds custom route prefix pool allocations for Direct Connect. You can set IPv4 and IPv6 route prefix counts on private and transit virtual interfaces, and view pool size and unallocated counts on connections and LAGs, plus direct connect gateway attachment prefix allocation totals. (a94fb978)
  • client-amplify: Increased the maximum allowed length from 255 to 4,096 characters to support longer access tokens. (f7f8ecd1)
  • client-batch: AWS Batch now supports a new compute environment type that provides fully managed EC2 capacity with broader compute flexibility than Fargate, including GPU instances, bare metal, and specific instance type selection, without infrastructure management overhead. (9c559a73)
  • client-sagemaker: Added IAM Identity Center (IdC) support to CreatePartnerApp and UpdatePartnerApp APIs. Added Customer Managed Key (CMK) support to CreateMlflowApp and DescribeMlflowApp. (55485887)
  • client-lambda: Adds support for full JSON resource-based policies, enabling customers to create, retrieve, update, and delete function resource policies as complete JSON documents. (72573a2a)
  • client-cloudfront: Added SigV4a as a supported signing protocol for Origin Access Control (OAC), enabling CloudFront to sign requests to Amazon S3 Multi-Region Access Point (S3-MRAP) origins. (95476293)

For list of updated packages, view updated-packages.md in assets-3.1115.0.zip

v3.1114.0

3.1114.0(2026-08-19)

New Features
  • client-eks: Adds support for EKS cluster certificate authorities (CA) (a1316eae)
  • client-bedrock-agentcore-control: AgentCore Memory now supports Flexible Namespaces (65c89d6d)
  • client-batch: AWS Batch now supports managing CloudWatch Container Insights on compute environments via CreateComputeEnvironment and UpdateComputeEnvironment. (f77fc37f)
  • client-redshift: Amazon Redshift enhanced System Table retention that allows customers to store their system table data directly in S3 Tables in customer's account instead of Redshift Managed Storage (a46d1f96)
  • client-bedrock-agentcore: AgentCore Memory now supports Flexible Namespaces and Non-Conversational Payloads in CreateEvent API (a0d8fb6d)
  • client-medialive: AWS Elemental MediaLive now supports video cropping and output positioning. Use cropRectangle and outputPositionRectangle to position the encoded video within the output frame, with the surrounding area filled with black. (2bf1331a)
  • client-account-access: Adds throttling exceptions to operation outputs that were previously inconsistent with other operations. (1e39b385)
  • client-vpc-lattice: Amazon VPC Lattice now supports modification of private DNS options on Service Network VPC Associations (92c89b27)
  • client-redshift-serverless: Amazon Redshift Enhanced System Table Retention that allows customers to store their system table data directly in S3 Tables in customer's account instead of Redshift Managed Storage (73ad53c3)
  • lib-transfer-manager: add file based download api and worker thread based download. (#8259) (b2d60357)

For list of updated packages, view updated-packages.md in assets-3.1114.0.zip

v3.1113.0

3.1113.0(2026-08-18)

Chores

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1115.0 (2026-08-20)

Note: Version bump only for package @​aws-sdk/client-s3

3.1114.0 (2026-08-19)

Note: Version bump only for package @​aws-sdk/client-s3

3.1113.0 (2026-08-18)

Note: Version bump only for package @​aws-sdk/client-s3

3.1112.0 (2026-08-17)

Note: Version bump only for package @​aws-sdk/client-s3

3.1111.0 (2026-08-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.1110.0 (2026-08-13)

Note: Version bump only for package @​aws-sdk/client-s3

3.1109.0 (2026-08-12)

... (truncated)

Commits

Updates bits-ui from 2.18.1 to 2.19.0

Release notes

Sourced from bits-ui's releases.

bits-ui@2.19.0

Minor Changes

  • feat(Checkbox): pass form to the hidden input (#2089)

Patch Changes

  • fix(DateField): keep focus on the year while correcting its first digit (#2100)

  • fix(Tooltip): close Tooltip.Trigger on pointerdown for any pointer button so right/middle click dismiss the tooltip and cancel a pending delayed open (#2101)

  • fix(RadioGroup): don't select item on pointer-driven focus- #2098 (#2098)

bits-ui@2.18.2

Patch Changes

  • fix(DismissibleLayer): cancel pending afterSleep timer on destroy to prevent derived_inert and stale document listeners (#2080) (#2087)

  • fix(TextSelectionLayer): don't read the ref box in #pointerdown before the enabled check, which emitted derived_inert on every document pointerdown when a leaked listener outlived its component (#2107)

  • fix(AlertDialog): pass disabled through to button in AlertDialog.Cancel (#2068)

Commits
  • d9cc7cc Version Packages (#2108)
  • d131732 fix(DateField): year backspace clearing (#2100)
  • b78f8cc fix(RadioGroup): don't select item on pointer-driven focus (#2098)
  • eeed982 feat(Checkbox): Pass form prop to the hidden input (#2089)
  • 7196014 fix(Tooltip): close trigger on pointerdown for any pointer button (#2101)
  • cb8c904 Version Packages (#2071)
  • e3254e0 docs: Add missing type import to Slider example (#2104)
  • aa0a18d fix(TextSelectionLayer): avoid reading destroyed ref box on document pointe...
  • 0da43b8 test: fix the two races behind the recurring CI failures (#2102)
  • 0522bd1 fix: cancel DismissibleLayer afterSleep timer on destroy (#2080) (#2087)
  • Additional commits viewable in compare view

Updates jose from 6.2.3 to 6.2.9

Release notes

Sourced from jose's releases.

v6.2.9

Fixes

  • reject a JWE whose generated Key Management Parameters collide (6ed19a6)
  • types: undeprecate PBES2 p2c parameter (33bf832)

v6.2.8

Fixes

  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)

v6.2.7

Fixes

  • require own JOSE properties for presence checks (90ab09c)

Refactor

v6.2.6

Fixes

  • types: accept host CryptoKey declarations (b48a15b)

v6.2.5

Fixes

  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)
  • types: correct key resolver and JWT header types (e95f8c4)
  • validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.9 (2026-08-15)

Fixes

  • reject a JWE whose generated Key Management Parameters collide (6ed19a6)
  • types: undeprecate PBES2 p2c parameter (33bf832)

6.2.8 (2026-08-03)

Fixes

  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)

6.2.7 (2026-08-01)

Fixes

  • require own JOSE properties for presence checks (90ab09c)

Refactor

6.2.6 (2026-07-31)

Fixes

  • types: accept host CryptoKey declarations (b48a15b)

6.2.5 (2026-07-29)

Fixes

  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)

... (truncated)

Commits
  • f3a3c78 chore(release): 6.2.9
  • 33bf832 fix(types): undeprecate PBES2 p2c parameter
  • 6ed19a6 fix: reject a JWE whose generated Key Management Parameters collide
  • 944840d ci: use shared release workflows
  • 05bccf2 chore: bump packages
  • f7392d1 test: account for workerd nodejs_compat flag default changes
  • 4e944be ci: drop the wait-for-npm machinery
  • 4285b6f chore(deps-dev): bump undici
  • cb114ec chore: cleanup after release
  • 8b768eb chore(release): 6.2.8
  • Additional commits viewable in compare view

Updates meilisearch from 0.58.0 to 0.60.0

Release notes

Sourced from meilisearch's releases.

v0.60.0

🚀 Enhancements

⚙️ Maintenance/misc

Thanks again to @​Strift and @​dependabot[bot]! 🎉

v0.59.0

🚀 Enhancements

⚙️ Maintenance/misc

Thanks again to @​Strift, @​ecgang, @​qinfenyinluo, and @​tcferreira! 🎉

Commits
  • 8c8d29c Update package.json
  • 11b2c71 build(deps-dev): bump typedoc from 0.28.18 to 0.28.20
  • b74d2ea build(deps): bump brace-expansion from 1.1.15 to 1.1.16
  • 5be5416 Add experimental tags
  • 910813b Add updateNetwork method
  • b69ef09 Update dynamic search rules integration
  • 20b1422 Run formatter
  • 4ad0ec7 build(deps-dev): bump prettier in the prettier group across 1 directory
  • cd8a6f0 build(deps-dev): bump vite from 8.0.16 to 8.1.3
  • 6f02892 Add AGENTS.md
  • Additional commits viewable in compare view

Updates pg from 8.21.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

pg@8.22.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the frontend-non-major group across 1 directory wit…
c0e82e2 
…h 5 updates

Bumps the frontend-non-major group with 5 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1053.0` | `3.1115.0` |
| [bits-ui](https://github.com/huntabyte/bits-ui) | `2.18.1` | `2.19.0` |
| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.9` |
| [meilisearch](https://github.com/meilisearch/meilisearch-js) | `0.58.0` | `0.60.0` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.21.0` | `8.23.0` |



Updates `@aws-sdk/client-s3` from 3.1053.0 to 3.1115.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1115.0/clients/client-s3)

Updates `bits-ui` from 2.18.1 to 2.19.0
- [Release notes](https://github.com/huntabyte/bits-ui/releases)
- [Commits](https://github.com/huntabyte/bits-ui/compare/bits-ui@2.18.1...bits-ui@2.19.0)

Updates `jose` from 6.2.3 to 6.2.9
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.3...v6.2.9)

Updates `meilisearch` from 0.58.0 to 0.60.0
- [Release notes](https://github.com/meilisearch/meilisearch-js/releases)
- [Commits](meilisearch/meilisearch-js@v0.58.0...v0.60.0)

Updates `pg` from 8.21.0 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1115.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-non-major
- dependency-name: bits-ui
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-non-major
- dependency-name: jose
  dependency-version: 6.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-non-major
- dependency-name: meilisearch
  dependency-version: 0.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-non-major
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-non-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants