Skip to content

Bump the bun group across 1 directory with 13 updates#28

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bun/bun-1507e2a8b4
Closed

Bump the bun group across 1 directory with 13 updates#28
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bun/bun-1507e2a8b4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 20, 2026 •
edited
Loading

Bumps the bun group with 13 updates in the / directory:

Package From To
@elysiajs/static 1.3.0 1.4.7
@yolk-oss/elysia-env 3.0.0 3.0.1
chalk 5.4.1 5.6.2
drizzle-orm 0.44.2 0.45.1
elysia 1.3.5 1.4.28
jose 6.0.11 6.2.2
radashi 12.6.0 12.7.2
@biomejs/biome 2.0.6 2.4.8
@types/bun 1.2.18 1.3.11
drizzle-kit 0.31.4 0.31.10
newman 6.2.1 6.2.2
pg 8.16.3 8.20.0
typescript 5.8.3 5.9.3

Updates @elysiajs/static from 1.3.0 to 1.4.7

Release notes

Sourced from @​elysiajs/static's releases.

1.4.7

What's changed

Bug fix:

  • remove trailing slash on Windows

Full Changelog: elysiajs/elysia-static@1.4.6...1.4.7

1.4.6

What's changed

Bug fix:

  • normalize path only when unsafe
  • cache crypto package import

Full Changelog: elysiajs/elysia-static@1.4.5...1.4.6

1.4.5

What's Changed

New Contributors

Full Changelog: elysiajs/elysia-static@1.4.4...1.4.5

1.4.4

What's changed

Bug fix:

  • fix cjs main import

Full Changelog: elysiajs/elysia-static@1.4.3...1.4.4

1.4.3

What's changed

Improvement:

  • adjust build script
  • remove stat cache

Full Changelog: elysiajs/elysia-static@1.4.2...1.4.3

1.4.2

What's changed

Improvement:

  • better caching mechanism
  • scope cache to each instance

... (truncated)

Changelog

Sourced from @​elysiajs/static's changelog.

1.4.7 - 17 Nov 2025

Bug fix:

  • remove trailing slash on Windows

1.4.6 - 3 Nov 2025

Bug fix:

  • normalize path only when unsafe
  • cache crypto package import

1.4.5 - 1 Nov 2025

Bug fix:

  • #52 resolve static paths correctly on Windows

1.4.4 - 14 Oct 2025

Bug fix:

  • fix cjs main import

1.4.3 - 13 Oct 2025

Improvement:

  • adjust build script
  • remove stat cache

1.4.2 - 13 Oct 2025

Improvement:

  • better caching mechanism
  • scope cache to each instance

1.4.1 - 13 Oct 2025

Improvement:

  • enable Bun full stack support
  • general performance improvement
  • #34 log errors, make it easier to debug errors inside @​elysiajs/static
  • #44 fixed edge case when working dir is root
  • use process.getBuiltinModules instead of import
  • refactor codebase to be more readable
  • rename noCache to cache
  • use Bun.Glob if Bun is detected
  • conditional run listFiles only when necessary
  • reduce seed to prefix parameter
  • cache etag generation

Change:

  • remove node-cache dependency
  • remove handle safe sep for windows as Node already handle it

Breaking Change:

  • rename enableDecodeURI to decodeURI
  • remove resolve options, use default path.resolve instead

1.3.0-exp.0 - 23 Apr 2025

... (truncated)

Commits
  • 4d12f68 🔧 fix: remove trailing slash on windows
  • 006fe7e 🔧 fix: normalize path when necessary
  • a6dc9bf 🔧 fix: resolve static paths correctly on Windows
  • c1ca17f Merge pull request #52 from denysovvl/main
  • 6b58da2 fix: resolve static paths correctly on Windows
  • 516491c 📘 doc: fix main import
  • 3527841 📘 doc: fix main import
  • f4f14f3 📘 doc: adjust build script
  • e99692b 📘 doc: adjust build script
  • c095eb8 📘 feat: remove stat cache
  • Additional commits viewable in compare view

Updates @yolk-oss/elysia-env from 3.0.0 to 3.0.1

Release notes

Sourced from @​yolk-oss/elysia-env's releases.

v3.0.1

What's Changed

Security:

  • Bump elysia to 1.4.26 to address a vulnerable dependency version

Full Changelog: yolk-oss/elysia-env@v3.0.0...v3.0.1

Changelog

Sourced from @​yolk-oss/elysia-env's changelog.

3.0.1 - 14 Mar 2026

Security:

  • Bump elysia to 1.4.26 to address a vulnerable dependency version
Commits

Updates chalk from 5.4.1 to 5.6.2

Release notes

Sourced from chalk's releases.

v5.6.2

v5.6.0

  • Make WezTerm terminal use true color a8f5bf7

chalk/chalk@v5.5.0...v5.6.0

v5.5.0

  • Make Ghostty terminal use true color (#653) 79ee2d3

chalk/chalk@v5.4.1...v5.5.0

Commits

Updates drizzle-orm from 0.44.2 to 0.45.1

Release notes

Sourced from drizzle-orm's releases.

0.45.1

  • Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden require() (#5107)

0.45.0

  • Fixed pg-native Pool detection in node-postgres transactions
  • Allowed subqueries in select fields
  • Updated typo algorythm => algorithm
  • Fixed $onUpdate not handling SQL values (fixes #2388, tests implemented by L-Mario564 in #2911)
  • Fixed pg mappers not handling Date instances in bun-sql:postgresql driver responses for date, timestamp types (fixes #4493)

0.44.7

0.44.6

  • feat: add $replicas reference #4874

0.44.5

  • Fixed invalid usage of .one() in durable-sqlite session
  • Fixed spread operator related crash in sqlite blob columns
  • Better browser support for sqlite blob columns
  • Improved sqlite blob mapping

0.44.4

0.44.3

  • Fixed types of $client for clients created by drizzle function
await db.$client.[...]
  • Added the updated_at column to the neon_auth.users_sync table definition.
Commits
  • a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
  • c445637 Merge pull request #5095 from drizzle-team/main-workflows
  • e7b3aaa Merge branch 'main' into main-workflows
  • 0d885a5 refactor: Update condition for run-feature job to improve clarity and functio...
  • 45a1ffb Merge pull request #5087 from drizzle-team/main-workflows
  • 6357645 chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows
  • 53dec98 refactor: Simplify release router workflow by removing unnecessary switch job...
  • ce88a18 Merge remote-tracking branch 'origin/ext-deps-kit' into main-workflows
  • 5c8a4c5 +
  • 73e2ea4 feat: Add release router workflow to manage feature and latest releases
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for drizzle-orm since your current version.


Updates elysia from 1.3.5 to 1.4.28

Release notes

Sourced from elysia's releases.

1.4.28

What's new

Feature:

  • #1803 stream response with pull based backpressure
  • #1802 handle range header for file/blob response
  • #1722, #1741 direct ReadableStream perf blow-up

Bug fix:

  • #1805 dynamic imports inside .guard not registering routes
  • #1771 breaks Bun HTML imports
  • #1797 await mapped error response promise
  • #1794 merge app cookie config into route cookie validator config
  • #1796 check custom parser by full name
  • #1795 write transformed cookie value to cookie entry directly
  • #1793 use cookie schema for cookie noValidate check
  • #1792 throw ValidationError instead of boolean in response encode path
  • detect HTML bundle when inline response is Promise

Change:

  • #1613 export ElysiaTypeCustomErrors
  • remove Bun specific built
  • export AnySchema, UnwrapSchema, ModelsToTypes from root
  • conditional set headers of String and Object when no set.headers is set

New Contributors

Full Changelog: elysiajs/elysia@1.4.27...1.4.28

1.4.27

What's changed

Bug fix:

  • getSchemaValidator: handle TypeBox as sub type
  • handle cookie prototype pollution when parsing cookie

Improvement:

  • conditional async on getSchemaValidator when schema is Standard Schema
  • use Response.json on Bun
  • export AnySchema, UnwrapSchema, ModelsToTypes from root

Full Changelog: elysiajs/elysia@1.4.26...1.4.27

1.4.26

What's changed

Bug fix:

  • #1755 deduplicate local handler from global event

... (truncated)

Changelog

Sourced from elysia's changelog.

1.4.28 - 17 Mar 2025

Feature:

  • #1803 stream response with pull based backpressure
  • #1802 handle range header for file/blob response
  • #1722, #1741 direct ReadableStream perf blow-up

Bug fix:

  • #1805 dynamic imports inside .guard not registering routes
  • #1771 breaks Bun HTML imports
  • #1797 await mapped error response promise
  • #1794 merge app cookie config into route cookie validator config
  • #1796 check custom parser by full name
  • #1795 write transformed cookie value to cookie entry directly
  • #1793 use cookie schema for cookie noValidate check
  • #1792 throw ValidationError instead of boolean in response encode path
  • detect HTML bundle when inline response is Promise

Change:

  • #1613 export ElysiaTypeCustomErrors
  • remove Bun specific built
  • export AnySchema, UnwrapSchema, ModelsToTypes from root
  • conditional set headers of String and Object when no set.headers is set

1.4.27 - 1 Mar 2026

Bug fix:

  • getSchemaValidator: handle TypeBox as sub type
  • handle cookie prototype pollution when parsing cookie

Improvement:

  • conditional async on getSchemaValidator when schema is Standard Schema
  • use Response.json on Bun

1.4.26 - 25 Feb 2026

Bug fix:

  • #1755 deduplicate local handler from global event
  • #1752 system router with trailing path doesn't match with non-trailing
  • url format redos
  • #1747 parsing request from mount hang

1.4.25 - 12 Feb 2026

Feature:

  • export ElysiaStatus

Bug fix:

  • macro with conflict literal value per status
  • recursive macro with conflict value per status

1.4.24 - 11 Feb 2026

Feature:

  • graceful unsigned cookie transition

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for elysia since your current version.


Updates jose from 6.0.11 to 6.2.2

Release notes

Sourced from jose's releases.

v6.2.2

Fixes

  • reject failed decompression with JWEInvalid error (043b181)

v6.2.1

Refactor

  • reorganize internals, less files, smaller footprint (d4231f9)

v6.2.0

Features

  • re-introduce JWE "zip" (Compression Algorithm) Header Parameter support (b13b446)

Documentation

  • clarify return of general jws and jwe (56682b4)

v6.1.3

Refactor

  • avoid export * as for google closure's compiler sake (6303d98), closes #832

v6.1.2

Refactor

v6.1.1

Documentation

  • add link to RFC9864 (767edde)
  • link to ML-DSA for JOSE (ed4252c)
  • remove mention of Edge Runtime from the readme (94fdde7)
  • update README.md (25098ef)

Refactor

  • eliminate named exports in the source code (f6ae30d)
  • expose setKeyManagementParameters also on a GeneralEncrypt Recipient (16e6b23)
  • faster path for symmetric key checks (a44c2ec)
  • improve en/decoding overheads (daee426)

v6.1.0

Features

  • support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.2 (2026-03-18)

Fixes

  • reject failed decompression with JWEInvalid error (043b181)

6.2.1 (2026-03-09)

Refactor

  • reorganize internals, less files, smaller footprint (d4231f9)

6.2.0 (2026-03-05)

Features

  • re-introduce JWE "zip" (Compression Algorithm) Header Parameter support (b13b446)

Documentation

  • clarify return of general jws and jwe (56682b4)

6.1.3 (2025-12-02)

Refactor

  • avoid export * as for google closure's compiler sake (6303d98), closes #832

6.1.2 (2025-11-15)

Refactor

6.1.1 (2025-11-09)

Documentation

  • add link to RFC9864 (767edde)
  • link to ML-DSA for JOSE (ed4252c)
  • remove mention of Edge Runtime from the readme (94fdde7)
  • update README.md (25098ef)

... (truncated)

Commits
  • 9c86586 chore(release): 6.2.2
  • 4984b5c chore(deps): bump the actions group with 4 updates
  • 043b181 fix: reject failed decompression with JWEInvalid error
  • 867cc2c chore(deps-dev): bump undici
  • f4e20e7 chore(deps-dev): bump tar in the npm_and_yarn group across 1 directory
  • d0505bf chore: cleanup after release
  • d491aa9 chore(release): 6.2.1
  • d4231f9 refactor: reorganize internals, less files, smaller footprint
  • 7b22ba8 test: use playwright instead of testcafe
  • 00965b4 chore: bump packages
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for jose since your current version.


Updates radashi from 12.6.0 to 12.7.2

Release notes

Sourced from radashi's releases.

v12.7.2

Fixed

  • Chain type signatures after 3 arguments in 17aef87

v12.7.1

Fixed

  • Ensure DurationParser static properties can be tree-shaked in b9d7529

v12.7.0

New Functions

Add getOrInsert and getOrInsertComputed functions [→ PR #444](radashi-org/radashi#444)

Access or initialize map entries without boilerplate branching. getOrInsert writes the provided value once, while getOrInsertComputed lazily creates an entry only when it is missing.

  • Works with both Map and WeakMap instances
  • Returns the stored entry so you can chain additional logic
  • Avoids unnecessary factory calls when a key already exists
import * as _ from 'radashi'
const counts = new Map<string, number>()
_.getOrInsert(counts, 'clicks', 1) // => 1
_.getOrInsert(counts, 'clicks', 5) // => 1
_.getOrInsertComputed(counts, 'views', () => 10) // => 10
_.getOrInsertComputed(counts, 'views', () => 0) // => 10

Inspired by TC39's upsert proposal.

🔗 Docs: getOrInsert · getOrInsertComputed / Source: getOrInsert.ts · getOrInsertComputed.ts / Tests: getOrInsert.test.ts · getOrInsertComputed.test.ts

Add isArrayEqual function [→ PR #417](radashi-org/radashi#417)

Compare arrays with Object.is precision. isArrayEqual checks length and element identity, correctly handling tricky cases like NaN, sparse arrays, and the +0/-0 distinction.

  • Uses Object.is so NaN matches itself while +0 and -0 stay distinct
  • Short-circuits when lengths differ for a fast inequality check
  • Leaves the original arrays untouched
import * as _ from 'radashi'
_.isArrayEqual([1, 2, 3], [1, 2, 3]) // => true
</tr></table>

... (truncated)

Changelog

Sourced from radashi's changelog.

[radashi@12.7.2] - 2026-02-24

Details

Fixed

  • Chain type signatures after 3 arguments in 17aef87

[radashi@12.7.1] - 2025-11-19

Details

Fixed

  • Ensure DurationParser static properties can be tree-shaked in b9d7529

[radashi@12.7.0] - 2025-10-17

Details

Added

  • Add identity function in 38e2f37
  • Add isArrayEqual function in 095f2b0
  • Add isMapEqual and isSetEqual functions in 0fa566a
  • Add getOrInsert and getOrInsertComputed in 4675076
  • (objectify) Add index parameter to getKey and getValue functions in 1506472
  • Add absoluteJitter and proportionalJitter in ebea7d7

Changed

  • Preserve tuple type in min/max even with a getter in c72a1c4
  • Use identity as default getter for sort in df55a6e

[radashi@12.6.2] - 2025-08-20

Details

Fixed

  • (range) Ensure end parameter works when 0 in 9c8ffa0

[radashi@12.6.1] - 2025-08-09

Details

Fixed

  • (group) Use Object.create(null) for the returned object in 5db8c37
Commits
  • 61b4fe3 chore(release): 12.7.2
  • a54479f chore: set node-version: 24.x for npm trusted publishing
  • b7e0eb1 chore: stop setting NODE_AUTH_TOKEN for npm publish
  • cbb9d10 chore: add id-token: write for npm trusted publishing
  • eedd025 chore: ensure --latest works with patch versions
  • 3c55b50 chore: stop running tests on node 18.x
  • 0e13037 chore: merge all publishing workflows for npm “Trusted Publisher” support
  • 76b41e9 chore: attempt to fix github actions
  • 5329bf8 chore: upgrade pnpm in package.json
  • 17aef87 fix: chain type signatures after 3 arguments (#454)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for radashi since your current version.


Updates @biomejs/biome from 2.0.6 to 2.4.8

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.8

2.4.8

Patch Changes

  • #9488 bc709f6 Thanks @​mvanhorn! - Fixed #9463: the "Biome found a configuration file outside of the current working directory" diagnostic now includes the configuration file path and the working directory, giving users actionable information to debug the issue.

  • #9527 2f8bf80 Thanks @​mdm317! - Fixed #8959: Fixed TypeScript arrow function formatting when a comment appears after =>.

  • #9525 e7b3b10 Thanks @​ViniciusDev26! - Added the rule noDrizzleUpdateWithoutWhere to prevent accidental full-table updates when using Drizzle ORM without a .where() clause.

  • #9531 1302740 Thanks @​ematipico! - Fixed #9187: Astro frontmatter containing regex literals with quotes (/'/, /"/) or dashes (/---/) no longer causes parse errors.

  • #9535 b630d93 Thanks @​leno23! - Fixed #9524: remove extra space before > when bracketSameLine is true and the self-closing slash is absent in HTML formatter.

  • #9537 81e6306 Thanks @​ematipico! - Fixed #9238: The HTML parser no longer incorrectly reports --- inside element content (e.g. <td>---</td>) as an "Unexpected value or character" error.

  • #9532 4b64145 Thanks @​ematipico! - Fixed #9117: biome check --write no longer falsely reports Svelte and Vue files as changed when html.formatter.indentScriptAndStyle is enabled and the files are already correctly formatted.

  • #9528 61451ef Thanks @​ematipico! - Fixed #9341: Fixed an LSP crash that could corrupt file content when saving with format-on-save enabled.

  • #9538 794f79c Thanks @​ematipico! - Fixed #9279: The rule noSubstr now detects .substr() and .substring() calls in all expression contexts, including variable declarations, function arguments, return statements, and arrow function bodies.

  • #9462 c23272c Thanks @​ematipico! - Fixed #9370: The resolver now correctly prioritizes more specific exports patterns over less specific ones. Previously, a pattern like "./*" could match before "./features/*", causing resolution failures for packages with overlapping subpath patterns.

  • #9515 f85c069 Thanks @​shivamtiwari3! - Fixed #9506 and #9479: Biome no longer reports false parse errors on <script type="speculationrules"> and <script type="application/ld+json"> tags. These script types contain non-JavaScript content and are now correctly skipped by the embedded language detector.

  • #9514 7fe43c8 Thanks @​ematipico! - Fixed #6964: Biome now correctly resolves the .gitignore file relative to vcs.root when configured. Previously, the vcs.root setting was ignored and Biome always looked for the ignore file in the workspace directory.

  • #9521 af39936 Thanks @​ematipico! - Fixed #9483. Now the rule noRedeclare doesn't panic when it encounters constructor overloads.

  • #9490 60cf024 Thanks @​willfarrell! - Added support for modern CSS properties, pseudo-classes, and pseudo-elements.

    New known properties: dynamic-range-limit, overlay, reading-flow, reading-order, scroll-marker-group, scroll-target-group.

    New pseudo-elements: ::checkmark, ::column, ::picker, ::picker-icon, ::scroll-button, ::scroll-marker, ::scroll-marker-group.

    New pseudo-classes: :active-view-transition-type, :has-slotted, :target-after, :target-before, :target-current.

  • #9526 4d42823 Thanks @​ematipico! - Fixed #9358 and #9375. Now attributes that have text expressions such as class={buttonClass()} are correctly tracked in Svelte files.

  • #9520 61f53ee Thanks @​ematipico! - Fixed #9519. Now noUnusedVariables doesn't flag variables that are used as typeof type.

  • #9487 331dc0d Thanks @​mvanhorn! - Fixed #9477: source.fixAll.biome no longer sorts imports when source.organizeImports.biome is disabled in editor settings. The organize imports action is now excluded from the fix-all pass unless explicitly requested.

  • #9525 e7b3b10 Thanks @​ViniciusDev26! - Added the rule noDrizzleDeleteWithoutWhere to prevent accidental full-table deletes when using Drizzle ORM without a .where() clause.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.8

Patch Changes

  • #9488 bc709f6 Thanks @​mvanhorn! - Fixed #9463: the "Biome found a configuration file outside of the current working directory" diagnostic now includes the configuration file path and the working directory, giving users actionable information to debug the issue.

  • #9527 2f8bf80 Thanks @​mdm317! - Fixed #8959: Fixed TypeScript arrow function formatting when a comment appears after =>.

  • #9525 e7b3b10 Thanks @​ViniciusDev26! - Added the rule noDrizzleUpdateWithoutWhere to prevent accidental full-table updates when using Drizzle ORM without a .where() clause.

  • #9531 1302740 Thanks @​ematipico! - Fixed #9187: Astro frontmatter containing regex literals with quotes (/'/, /"/) or dashes (/---/) no longer causes parse errors.

  • #9535 b630d93 Thanks @​leno23! - Fixed #9524: remove extra space before > when bracketSameLine is true and the self-closing slash is absent in HTML formatter.

  • #9537 81e6306 Thanks @​ematipico! - Fixed #9238: The HTML parser no longer incorrectly reports --- inside element content (e.g. <td>---</td>) as an "Unexpected value or character" error.

  • #9532 4b64145 Thanks @​ematipico! - Fixed #9117: biome check --write no longer falsely reports Svelte and Vue files as changed when html.formatter.indentScriptAndStyle is enabled and the files are already correctly formatted.

  • #9528 61451ef Thanks @​ematipico! - Fixed #9341: Fixed an LSP crash that could corrupt file content when saving with format-on-save enabled.

  • #9538 794f79c Thanks @​ematipico! - Fixed #9279: The rule noSubstr now detects .substr() and .substring() calls in all expression contexts, including variable declarations, function arguments, return statements, and arrow function bodies.

  • #9462 c23272c Thanks @​ematipico! - Fixed #9370: The resolver now correctly prioritizes more specific exports patterns over less specific ones. Previously, a pattern like "./*" could match before "./features/*", causing resolution failures for packages with overlapping subpath patterns.

  • #9515 f85c069 Thanks @​shivamtiwari3! - Fixed #9506 and #9479: Biome no longer reports false parse errors on <script type="speculationrules"> and <script type="application/ld+json"> tags. These script types contain non-JavaScript content and are now correctly skipped by the embedded language detector.

  • #9514 7fe43c8 Thanks @​ematipico! - Fixed #6964: Biome now correctly resolves the .gitignore file relative to vcs.root when configured. Previously, the vcs.root setting was ignored and Biome always looked for the ignore file in the workspace directory.

  • #9521 af39936 Thanks @​ematipico! - Fixed #9483. Now the rule noRedeclare doesn't panic when it encounters constructor overloads.

  • #9490 60cf024 Thanks @​willfarrell! - Added support for modern CSS properties, pseudo-classes, and pseudo-elements.

    New known properties: dynamic-range-limit, overlay, reading-flow, reading-order, scroll-marker-group, scroll-target-group.

    New pseudo-elements: ::checkmark, ::column, ::picker, ::picker-icon, ::scroll-button, ::scroll-marker, ::scroll-marker-group.

    New pseudo-classes: :active-view-transition-type, :has-slotted, :target-after, :target-before, :target-current.

  • #9526 4d42823 Thanks @​ematipico! - Fixed #9358 and #9375. Now attributes that have text expressions such as class={buttonClass()} are correctly tracked in Svelte files.

  • #9520 61f53ee Thanks @​ematipico! - Fixed #9519. Now noUnusedVariables doesn't flag variables that are used as typeof type.

  • #9487 331dc0d Thanks @​mvanhorn! - Fixed #9477: source.fixAll.biome no longer sorts imports when source.organizeImports.biome is disabled in editor settings. The organize imports action is now excluded from the fix-all pass unless explicitly requested.

  • #9525 e7b3b10 Thanks @​ViniciusDev26! - Added the rule noDrizzleDeleteWithoutWhere to prevent accidental full-table deletes when using Drizzle ORM without a .where() clause.

2.4.7

Patch Changes

... (truncated)

Commits

@dependabot
Bump the bun group across 1 directory with 13 updates
2dc704a 
Bumps the bun group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@elysiajs/static](https://github.com/elysiajs/elysia-static) | `1.3.0` | `1.4.7` |
| [@yolk-oss/elysia-env](https://github.com/yolk-oss/elysia-env) | `3.0.0` | `3.0.1` |
| [chalk](https://github.com/chalk/chalk) | `5.4.1` | `5.6.2` |
| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.44.2` | `0.45.1` |
| [elysia](https://github.com/elysiajs/elysia) | `1.3.5` | `1.4.28` |
| [jose](https://github.com/panva/jose) | `6.0.11` | `6.2.2` |
| [radashi](https://github.com/radashi-org/radashi) | `12.6.0` | `12.7.2` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.0.6` | `2.4.8` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.2.18` | `1.3.11` |
| [drizzle-kit](https://github.com/drizzle-team/drizzle-orm) | `0.31.4` | `0.31.10` |
| [newman](https://github.com/postmanlabs/newman) | `6.2.1` | `6.2.2` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.16.3` | `8.20.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `5.9.3` |



Updates `@elysiajs/static` from 1.3.0 to 1.4.7
- [Release notes](https://github.com/elysiajs/elysia-static/releases)
- [Changelog](https://github.com/elysiajs/elysia-static/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia-static@1.3.0...1.4.7)

Updates `@yolk-oss/elysia-env` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/yolk-oss/elysia-env/releases)
- [Changelog](https://github.com/yolk-oss/elysia-env/blob/main/CHANGELOG.md)
- [Commits](yolk-oss/elysia-env@v3.0.0...v3.0.1)

Updates `chalk` from 5.4.1 to 5.6.2
- [Release notes](https://github.com/chalk/chalk/releases)
- [Commits](chalk/chalk@v5.4.1...v5.6.2)

Updates `drizzle-orm` from 0.44.2 to 0.45.1
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@0.44.2...0.45.1)

Updates `elysia` from 1.3.5 to 1.4.28
- [Release notes](https://github.com/elysiajs/elysia/releases)
- [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md)
- [Commits](elysiajs/elysia@1.3.5...1.4.28)

Updates `jose` from 6.0.11 to 6.2.2
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.0.11...v6.2.2)

Updates `radashi` from 12.6.0 to 12.7.2
- [Release notes](https://github.com/radashi-org/radashi/releases)
- [Changelog](https://github.com/radashi-org/radashi/blob/main/CHANGELOG.md)
- [Commits](radashi-org/radashi@v12.6.0...v12.7.2)

Updates `@biomejs/biome` from 2.0.6 to 2.4.8
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.8/packages/@biomejs/biome)

Updates `@types/bun` from 1.2.18 to 1.3.11
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `drizzle-kit` from 0.31.4 to 0.31.10
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.31.4...drizzle-kit@0.31.10)

Updates `newman` from 6.2.1 to 6.2.2
- [Changelog](https://github.com/postmanlabs/newman/blob/develop/CHANGELOG.yaml)
- [Commits](postmanlabs/newman@v6.2.1...v6.2.2)

Updates `pg` from 8.16.3 to 8.20.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.20.0/packages/pg)

Updates `typescript` from 5.8.3 to 5.9.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.8.3...v5.9.3)

---
updated-dependencies:
- dependency-name: "@elysiajs/static"
  dependency-version: 1.4.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@yolk-oss/elysia-env"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: chalk
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: drizzle-orm
  dependency-version: 0.45.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: elysia
  dependency-version: 1.4.28
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: jose
  dependency-version: 6.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: radashi
  dependency-version: 12.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: "@types/bun"
  dependency-version: 1.3.11
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: drizzle-kit
  dependency-version: 0.31.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: newman
  dependency-version: 6.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun
- dependency-name: pg
  dependency-version: 8.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 20, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 27, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Mar 27, 2026
@dependabot dependabot bot deleted the dependabot/bun/bun-1507e2a8b4 branch March 27, 2026 10:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants