chore(deps): update all non-major dependencies #69
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.
This PR contains the following updates:
^6.15.0->^6.16.1^24.3.0->^24.5.0^0.28.5->^0.28.8^0.4.0->^0.4.2^9.34.0->^9.35.0^0.30.18->^0.30.19^4.20250823.1->^4.20250906.210.15.1->10.16.1^4.50.0->^4.50.2^7.1.4->^7.1.5Release Notes
prisma/prisma (@prisma/client)
v6.16.1Compare Source
Today, we are issuing a 6.16.1 patch release.
Bug fixes
driverAdaptersandqueryCompilerfeatures were stabilized, but leftover code in theprisma-client-tsgenerator required them to still be specified in edge runtimes. This has now been fixed, runtimes likeworkerdandvercel-edgeno longer require these preview features.v6.16.0Compare Source
Today, we are excited to share the
6.16.0stable release 🎉🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!
Prisma ORM
This section contains all the updates made in Prisma ORM v6.16.0.
Rust-free ORM and driver adapters are Generally Available
Eight months ago, we published our ORM manifesto with the first hint that we're going to remove the Rust-based query engine from Prisma ORM:
After a lot of hard work and feedback from the community, we're incredibly excited to share that the migration has been completed and you can now use Prisma ORM without its Rust engine in your production apps. 🎉 This is a major milestone in the history of Prisma ORM and comes with a lot of benefits:
… and overall a much better DX since you don't need to worry about the extra binary in your generated Prisma Client code any more.
While the Rust-free ORM will become the default in Prisma ORM v7 soon, for now you still need to opt-into using it:
generatorblock in your Prisma schema:queryCompileranddriverAdapterfeature flags from thepreviewFeaturesarray. And if you usedbinaryTargets, you can also get rid of these.pgfor PostgreSQL:PrismaClientusing thePrismaPgdriver adapter as follows:📚 To learn more and see instructions for all other supported databases, check out the documentation.
New ESM-first
prisma-clientgenerator is Generally AvailableAnother major milestone has been achieved in this release: The new, flexible and ESM-first
prisma-clientgenerator is ready for production too. Here's a quick overview of its main benefits:node_modules; generated code is fully under control by the developerIn addition to making it production-ready, we also made some changes to the
prisma-clientgenerator:Prisma.validator; you can use TypeScript nativesatisfieskeyword instead./generared/prisma/browserentrypoint for importing types in browser environmentsIf you want to try out the new generator with your favorite framework, check out one of our ready-to-run examples (e.g. for Next.js, Nuxt or React Router).
📚 Learn more in the docs.
Type check performance optimizations
Runtime performance is not the only performance category that matters. In fact, when it comes to DX, type checking performance is equally important: if your TypeScript types become too complex and the compiler needs to do too much work (e.g. inferring types), it may slow down your editor, lead to laggy auto-completion or prevent jump-to-definition from working.
We've worked with TypeScript expert David Blass to find ways for improving the type checking performance in Prisma ORM and created benchmarks comparing the type checking performance with Drizzle.
You can read about the results here: Why Prisma ORM Checks Types Faster Than Drizzle
Deprecating the
postgresqlExtensionsPreview featureWe're deprecating the
postgresqlExtensionsPreview feature. Note that this doesn't mean that you can't use extensions with Prisma ORM any more. Instead of setting the Preview feature, you can install extensions manually with a customized migration via the--create-onlyflag:You can then install an extension with plain SQL in the newly created, empty migration file:
CREATE EXTENSION IF NOT EXISTS "pgcrypto";Prisma Postgres
Prisma Postgres is our fully managed Postgres service designed with the same philosophy of great DX that has guided Prisma for close to a decade. With this release we are introducing the following improvements:
Manage OAuth apps in Prisma Console
In Prisma Console, you can now manage all of the 3rd party applications that you've granted access to perform actions on behalf of yourself in your Prisma Console account. Find the 🧩 Integrations tab in the sidenav to see which applications currently have access.
Rust-free Prisma ORM with Prisma Accelerate and Prisma Postgres
With this release, the Rust-free Prisma ORM (Query Compiler) can now be used together with Prisma Postgres and also Prisma Accelerate. This means you can take advantage of connection pooling and caching while using the new TypeScript-based ORM architecture.
To enable it, update your Prisma schema:
We'd love for you to try this out and share your feedback as we prepare for General Availability. Please open an issue on GitHub if you encounter any problems or have suggestions.
Enterprise support
Thousands of teams use Prisma and many of them already tap into our Enterprise & Agency Support Program for hands-on help with everything from schema integrations and performance tuning to security and compliance.
With this program you also get priority issue triage and bug fixes, expert scalability advice, and custom training so that your Prisma-powered apps stay rock-solid at any scale. Learn more or join: https://prisma.io/enterprise.
AssemblyScript/assemblyscript (assemblyscript)
v0.28.8Compare Source
New features
50bf2b7)v0.28.7Compare Source
Bug fixes
9b5b78d)v0.28.6Compare Source
New features
9664c5b)unjs/automd (automd)
v0.4.2Compare Source
compare changes
v0.4.1Compare Source
compare changes
🩹 Fixes
pnpm addinstead ofpnpm install(#122)npm:prefix for deno (#115)📖 Documentation
🏡 Chore
❤️ Contributors
eslint/eslint (eslint)
v9.35.0Compare Source
rich-harris/magic-string (magic-string)
v0.30.19Compare Source
Bug Fixes
Features
replace(All)support replacement for functions when the first parameter is a string (#304) (fd1d887)cloudflare/workers-sdk (miniflare)
v4.20250906.2Compare Source
Minor Changes
735785eThanks @penalosa! - Add Miniflare & Wrangler support for unbound Durable Objectsv4.20250906.1Compare Source
Minor Changes
336a75dThanks @dxh9845! - Add support for dynamically loading 'external' Miniflare plugins for unsafe Worker bindings (developed outside of the workers-sdk repo)Patch Changes
e2b838fThanks @pombosilva! - Include workflow binding name in workflow plugin.v4.20250906.0Compare Source
Patch Changes
#10568
dac302cThanks @dependabot! - chore: update dependencies of "miniflare" packageThe following dependency versions have been updated:
v4.20250902.0Compare Source
Patch Changes
#10535
4cb3370Thanks @dependabot! - chore: update dependencies of "miniflare" packageThe following dependency versions have been updated:
v4.20250829.0Compare Source
Patch Changes
#10502
22c8ae6Thanks @dependabot! - chore: update dependencies of "miniflare" packageThe following dependency versions have been updated:
#10471
38bdb78Thanks @clintonsteiner! - chore: bumpdevalueversion to 5.3.2pnpm/pnpm (pnpm)
v10.16.1Compare Source
Patch Changes
v10.16.0Compare Source
Minor Changes
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.
The new setting is called
minimumReleaseAge. It specifies the number of minutes that must pass after a version is published before pnpm will install it. For example, settingminimumReleaseAge: 1440ensures that only packages released at least one day ago can be installed.If you set
minimumReleaseAgebut need to disable this restriction for certain dependencies, you can list them under theminimumReleaseAgeExcludesetting. For instance, with the following configuration pnpm will always install the latest version of webpack, regardless of its release time:Related issue: #9921.
Added support for
finders#9946.In the past,
pnpm listandpnpm whycould only search for dependencies by name (and optionally version). For example:prints the chain of dependencies to any installed instance of
minimist:What if we want to search by other properties of a dependency, not just its name? For instance, find all packages that have
react@17in their peer dependencies?This is now possible with "finder functions". Finder functions can be declared in
.pnpmfile.cjsand invoked with the--find-by=<function name>flag when runningpnpm listorpnpm why.Let's say we want to find any dependencies that have React 17 in peer dependencies. We can add this finder to our
.pnpmfile.cjs:Now we can use this finder function by running:
pnpm will find all dependencies that have this React in peer dependencies and print their exact locations in the dependency graph.
It is also possible to print out some additional information in the output by returning a string from the finder. For example, with the following finder:
Every matched package will also print out the license from its
package.json:Patch Changes
nodeVersionis not set to an exact semver version #9934.pnpm publishshould be able to publish a.tar.gzfile #9927.pnpm runreturn a non-zero exit code #9626.rollup/rollup (rollup)
v4.50.2Compare Source
2025-09-15
Bug Fixes
Pull Requests
v4.50.1Compare Source
2025-09-07
Bug Fixes
Pull Requests
Configuration
📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.