Skip to content

Bump the dev-minor-and-patch group across 1 directory with 5 updates - #20

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-minor-and-patch-26c6f61e32
Open

Bump the dev-minor-and-patch group across 1 directory with 5 updates#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-minor-and-patch-26c6f61e32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the dev-minor-and-patch group with 5 updates in the / directory:

Package From To
express 5.2.1 5.3.0
mongodb-memory-server 11.2.0 11.3.0
parse 8.6.0 8.6.2
parse-server 9.10.0 9.10.4
ts-jest 29.4.12 29.4.14

Updates express from 5.2.1 to 5.3.0

Release notes

Sourced from express's releases.

v5.3.0

Highlights

🐞 Bug fixes

  • Fixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by @​YuryShkoda in #4893

    Fixed the behavior of res.send() to prevent conflicts between Content-Length and Transfer-Encoding HTTP headers in responses. The Content-Length header in res.send() is now only added when a Transfer-Encoding header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a Transfer-Encoding header - by @​cuishuang in #7459

🚀 Improvements

  • Allow conditional revalidation for QUERY requests. req.fresh previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by @​Cherry in #7366

    // QUERY /reports with If-None-Match: "12345"
app.query('/reports', (req, res) => {
  res.set('ETag', '"12345"');
  res.send(results); // now responds 304 Not Modified
});

  • Improve HTML structure in res.redirect() responses when HTML format is accepted by adding <!DOCTYPE html>, <title>, and <body> tags for better browser compatibility - by @​Bernice55231 in #5167

  • When calling app.render with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by AkaHarshit in #6903

    app.render('index', null, callback); // now works as expected

  • Upgrade content-type to ^2.0.0, bringing a faster parser (~1.5x quicker Content-Type parsing/formatting in res.send()) along with a behavior change: res.send() now keeps any existing parameters when adding the charset and no longer throws on a Content-Type that fails to parse. type-is is upgraded to ^2.1.0 as part of the same change - by @​blakeembrey in #7234

    res.set('Content-Type', 'text/plain; foo=bar').send('hey');
// -> Content-Type: text/plain; foo=bar; charset=utf-8

  • The default error handler now logs the full error object instead of only its stack trace, so nested details such as Error.cause and library-specific properties (e.g. Sequelize's parent/original) are no longer swallowed - by @​Nitin-Mohapatra in #6464

  • Upgrade content-disposition to ^2.0.1, which changes the Content-Disposition header emitted by res.download(), res.attachment(), and res.sendFile(): file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by @​blakeembrey in #7233

    res.attachment('user.html');
// before -> Content-Disposition: attachment; filename="user.html"
// after  -> Content-Disposition: attachment; filename=user.html

... (truncated)

Changelog

Sourced from express's changelog.

5.3.0

🐞 Bug fixes

  • Fixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by @​YuryShkoda in #4893

    Fixed the behavior of res.send() to prevent conflicts between Content-Length and Transfer-Encoding HTTP headers in responses. The Content-Length header in res.send() is now only added when a Transfer-Encoding header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a Transfer-Encoding header - by @​cuishuang in #7459

🚀 Improvements

  • Allow conditional revalidation for QUERY requests. req.fresh previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by @​Cherry in #7366

    // QUERY /reports with If-None-Match: "12345"
app.query('/reports', (req, res) => {
  res.set('ETag', '"12345"');
  res.send(results); // now responds 304 Not Modified
});

  • Improve HTML structure in res.redirect() responses when HTML format is accepted by adding <!DOCTYPE html>, <title>, and <body> tags for better browser compatibility - by @​Bernice55231 in #5167

  • When calling app.render with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by AkaHarshit in #6903

    app.render('index', null, callback); // now works as expected

  • Upgrade content-type to ^2.0.0, bringing a faster parser (~1.5x quicker Content-Type parsing/formatting in res.send()) along with a behavior change: res.send() now keeps any existing parameters when adding the charset and no longer throws on a Content-Type that fails to parse. type-is is upgraded to ^2.1.0 as part of the same change - by @​blakeembrey in #7234

    res.set('Content-Type', 'text/plain; foo=bar').send('hey');
// -> Content-Type: text/plain; foo=bar; charset=utf-8

  • The default error handler now logs the full error object instead of only its stack trace, so nested details such as Error.cause and library-specific properties (e.g. Sequelize's parent/original) are no longer swallowed - by @​Nitin-Mohapatra in #6464

  • Upgrade content-disposition to ^2.0.1, which changes the Content-Disposition header emitted by res.download(), res.attachment(), and res.sendFile(): file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by @​blakeembrey in #7233

    res.attachment('user.html');
// before -> Content-Disposition: attachment; filename="user.html"
// after  -> Content-Disposition: attachment; filename=user.html

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express since your current version.


Updates mongodb-memory-server from 11.2.0 to 11.3.0

Release notes

Sourced from mongodb-memory-server's releases.

v11.3.0

11.3.0 (2026-09-21)

Features

Fixes

  • MongoBinaryDownload::attemptDownload: add log when response recieves a error (143588b)
  • MongoBinaryDownload::attemptDownload: change "console.error" to a debug "log" (833bcc7)
  • MongoBinaryDownload: replace zip implementation with new promise API (3fb04f4), closes #990
  • MongoInstance::stop: change to always unset the "mongodProcess" (9e32ef2), closes #1032
  • MongoMemoryReplSet: increase "electionTimeoutMillis" timeout to 5000ms (76d727a), closes #995

Style

  • utils::killProcess: fix typo "An" -> "A" (c2a18ac)

Refactor

  • MongoBinaryDownload: have the 2 extract function be more similar (940b352)

Dependencies

Dev-Dependencies

  • @​types/semver: upgrade to 7.8.0 (1705b60)
  • @​types/yauzl: upgrade to 3.4.0 (71fe42d)
  • doctoc: upgrade to 2.5.0 (833623b)
  • eslint-plugin-prettier: upgrade to 5.5.6 (38394c9)
  • eslint: upgrade to 10.9.1 (16b408d)
  • globals: upgrade to 17.12.0 (1765718)
  • jest: upgrade to 30.5.1 (a7d0a44)
  • prettier: upgrade to 3.9.6 (46fea46)
  • ts-jest: upgrade to 29.4.12 (6166072)
  • typedoc: upgrade to 0.28.20 (5dc343f)
  • typescript-eslint: upgrade to 8.69.0 (c9b8e55)

v11.3.0-beta.6

11.3.0-beta.6 (2026-09-21)

Dependencies

... (truncated)

Changelog

Sourced from mongodb-memory-server's changelog.

11.3.0 (2026-09-21)

Features

Fixes

  • MongoBinaryDownload::attemptDownload: add log when response recieves a error (143588b)
  • MongoBinaryDownload::attemptDownload: change "console.error" to a debug "log" (833bcc7)
  • MongoBinaryDownload: replace zip implementation with new promise API (3fb04f4), closes #990
  • MongoInstance::stop: change to always unset the "mongodProcess" (9e32ef2), closes #1032
  • MongoMemoryReplSet: increase "electionTimeoutMillis" timeout to 5000ms (76d727a), closes #995

Style

  • utils::killProcess: fix typo "An" -> "A" (c2a18ac)

Refactor

  • MongoBinaryDownload: have the 2 extract function be more similar (940b352)

Dependencies

Dev-Dependencies

  • @​types/semver: upgrade to 7.8.0 (1705b60)
  • @​types/yauzl: upgrade to 3.4.0 (71fe42d)
  • doctoc: upgrade to 2.5.0 (833623b)
  • eslint-plugin-prettier: upgrade to 5.5.6 (38394c9)
  • eslint: upgrade to 10.9.1 (16b408d)
  • globals: upgrade to 17.12.0 (1765718)
  • jest: upgrade to 30.5.1 (a7d0a44)
  • prettier: upgrade to 3.9.6 (46fea46)
  • ts-jest: upgrade to 29.4.12 (6166072)
  • typedoc: upgrade to 0.28.20 (5dc343f)
  • typescript-eslint: upgrade to 8.69.0 (c9b8e55)

11.3.0-beta.6 (2026-09-21)

Dependencies

... (truncated)

Commits

Updates parse from 8.6.0 to 8.6.2

Release notes

Sourced from parse's releases.

8.6.2

8.6.2 (2026-09-23)

Bug Fixes

8.6.2-alpha.1

8.6.2-alpha.1 (2026-09-23)

Bug Fixes

8.6.1

8.6.1 (2026-09-23)

Bug Fixes

8.6.1-alpha.1

8.6.1-alpha.1 (2026-07-13)

Bug Fixes

Commits

Updates parse-server from 9.10.0 to 9.10.4

Release notes

Sourced from parse-server's releases.

9.10.4

9.10.4 (2026-10-09)

Bug Fixes

  • Batch and direct access requests fail for object IDs without alphanumeric characters or class names without letters (#10761) (c8d5ebb)
  • GraphQL API fails when a class name or mutation alias collides with a built-in name (#10757) (866e82b)
  • Object write with a reserved field name can make reads fail on MongoDB (GHSA-gwrq-q25v-g8mr) (#10763) (d90b841)
  • Unauthenticated deletion of class schemas removes class-level permissions on MongoDB (GHSA-qmg9-m772-5rm7) (#10767) (2114fca)

9.10.4-alpha.4

9.10.4-alpha.4 (2026-10-08)

Bug Fixes

9.10.4-alpha.3

9.10.4-alpha.3 (2026-10-08)

Bug Fixes

9.10.4-alpha.2

9.10.4-alpha.2 (2026-10-07)

Bug Fixes

  • Batch and direct access requests fail for object IDs without alphanumeric characters or class names without letters (#10761) (c8d5ebb)

9.10.4-alpha.1

9.10.4-alpha.1 (2026-10-07)

Bug Fixes

  • GraphQL API fails when a class name or mutation alias collides with a built-in name (#10757) (866e82b)

9.10.3

9.10.3 (2026-10-05)

Bug Fixes

... (truncated)

Commits
  • 66d33d3 chore(release): 9.10.4 [skip ci]
  • 547b4b6 build: Release (#10769)
  • f05d255 empty commit to trigger CI
  • ffc453e chore(release): 9.10.4-alpha.4 [skip ci]
  • 2114fca fix: Unauthenticated deletion of class schemas removes class-level permission...
  • 12ae0c3 chore(release): 9.10.4-alpha.3 [skip ci]
  • d90b841 fix: Object write with a reserved field name can make reads fail on MongoDB (...
  • 0c4db0a chore(release): 9.10.4-alpha.2 [skip ci]
  • c8d5ebb fix: Batch and direct access requests fail for object IDs without alphanumeri...
  • f907c03 chore(release): 9.10.4-alpha.1 [skip ci]
  • Additional commits viewable in compare view

Updates ts-jest from 29.4.12 to 29.4.14

Release notes

Sourced from ts-jest's releases.

v29.4.14

Please refer to CHANGELOG.md for details.

v29.4.13

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.14 (2026-09-25)

Reverts

29.4.13 (2026-09-22)

Features

Performance Improvements

Commits
  • 2d152f6 chore(release): 29.4.14
  • 01e5a2e revert: bring back prior changes of compiler util (#5471)
  • 8e35da6 build(deps): update dependency typescript-eslint to ^8.70.1
  • 76ec454 build(deps): bump image-size from 2.0.2 to 2.0.4 in /website
  • a0c364f chore(release): 29.4.13
  • 697d337 perf(compiler): cache module resolution modes (#5419)
  • c3a0b57 feat: support Babel 8 (#5466)
  • 5fb44c4 build(deps): update dependency jest-environment-jsdom to ^30.5.2
  • 257a524 build(deps): update dependency jest to v30.5.2
  • 89ba4d9 build(deps): update dependency babel-jest to ^30.5.2
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dev-minor-and-patch group across 1 directory with 5 updates
362efe1 
Bumps the dev-minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [express](https://github.com/expressjs/express) | `5.2.1` | `5.3.0` |
| [mongodb-memory-server](https://github.com/typegoose/mongodb-memory-server/tree/HEAD/packages/mongodb-memory-server) | `11.2.0` | `11.3.0` |
| [parse](https://github.com/parse-community/Parse-SDK-JS) | `8.6.0` | `8.6.2` |
| [parse-server](https://github.com/parse-community/parse-server) | `9.10.0` | `9.10.4` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.12` | `29.4.14` |



Updates `express` from 5.2.1 to 5.3.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.2.1...v5.3.0)

Updates `mongodb-memory-server` from 11.2.0 to 11.3.0
- [Release notes](https://github.com/typegoose/mongodb-memory-server/releases)
- [Changelog](https://github.com/typegoose/mongodb-memory-server/blob/master/CHANGELOG.md)
- [Commits](https://github.com/typegoose/mongodb-memory-server/commits/v11.3.0/packages/mongodb-memory-server)

Updates `parse` from 8.6.0 to 8.6.2
- [Release notes](https://github.com/parse-community/Parse-SDK-JS/releases)
- [Changelog](https://github.com/parse-community/Parse-SDK-JS/blob/alpha/CHANGELOG.md)
- [Commits](parse-community/Parse-SDK-JS@8.6.0...8.6.2)

Updates `parse-server` from 9.10.0 to 9.10.4
- [Release notes](https://github.com/parse-community/parse-server/releases)
- [Changelog](https://github.com/parse-community/parse-server/blob/alpha/CHANGELOG.md)
- [Commits](parse-community/parse-server@9.10.0...9.10.4)

Updates `ts-jest` from 29.4.12 to 29.4.14
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.4.12...v29.4.14)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch
- dependency-name: mongodb-memory-server
  dependency-version: 11.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch
- dependency-name: parse
  dependency-version: 8.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: parse-server
  dependency-version: 9.10.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: ts-jest
  dependency-version: 29.4.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 17, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants