chore(deps)(deps): bump the minor-and-patch group across 1 directory with 27 updates - #89
Conversation
…with 27 updates Bumps the minor-and-patch group with 27 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.10.5` | `2.10.7` | | [@hono/node-server](https://github.com/honojs/node-server) | `2.0.10` | `2.0.12` | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.2.3` | `1.2.4` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.6.23` | `1.6.25` | | [deepagents](https://github.com/langchain-ai/deepagentsjs) | `1.11.1` | `1.12.0` | | [hono](https://github.com/honojs/hono) | `4.12.31` | `4.12.32` | | [mongoose](https://github.com/Automattic/mongoose) | `9.7.4` | `9.9.0` | | [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.3` | `0.41.5` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.1` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.2` | `5.101.4` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.28.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` | | [recharts](https://github.com/recharts/recharts) | `3.9.2` | `3.10.1` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.3` | `6.0.5` | | [postcss](https://github.com/postcss/postcss) | `8.5.20` | `8.5.25` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.5` | `8.2.0` | | [@langchain/anthropic](https://github.com/langchain-ai/langchainjs) | `1.5.1` | `1.5.2` | | [isomorphic-git](https://github.com/isomorphic-git/isomorphic-git) | `1.38.9` | `1.40.0` | | [langchain](https://github.com/langchain-ai/langchainjs) | `1.5.3` | `1.5.4` | | [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.12` | `2.1.15` | | [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.12` | `1.1.15` | | [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.3.0` | `1.3.3` | | [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.13` | `1.2.16` | | [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.3` | `1.6.7` | Updates `turbo` from 2.10.5 to 2.10.7 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.10.5...v2.10.7) Updates `@hono/node-server` from 2.0.10 to 2.0.12 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.0.10...v2.0.12) Updates `@langchain/core` from 1.2.3 to 1.2.4 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.3...@langchain/core@1.2.4) Updates `better-auth` from 1.6.23 to 1.6.25 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.6.25/packages/better-auth) Updates `deepagents` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/langchain-ai/deepagentsjs/releases) - [Commits](https://github.com/langchain-ai/deepagentsjs/compare/deepagents@1.11.1...deepagents@1.12.0) Updates `hono` from 4.12.31 to 4.12.32 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.31...v4.12.32) Updates `mongoose` from 9.7.4 to 9.9.0 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@9.7.4...9.9.0) Updates `@astrojs/starlight` from 0.41.3 to 0.41.5 - [Release notes](https://github.com/withastro/starlight/releases) - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md) - [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.41.5/packages/starlight) Updates `@playwright/test` from 1.61.1 to 1.62.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.61.1...v1.62.1) Updates `@tanstack/react-query` from 5.101.2 to 5.101.4 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query) Updates `lucide-react` from 1.25.0 to 1.28.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.28.0/packages/lucide-react) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `@types/react` from 19.2.17 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `@types/react-dom` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `recharts` from 3.9.2 to 3.10.1 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.9.2...v3.10.1) Updates `@types/react` from 19.2.17 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitejs/plugin-react` from 6.0.3 to 6.0.5 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react) Updates `postcss` from 8.5.20 to 8.5.25 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.20...8.5.25) Updates `vite` from 8.1.5 to 8.2.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite) Updates `@langchain/anthropic` from 1.5.1 to 1.5.2 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/anthropic@1.5.1...@langchain/anthropic@1.5.2) Updates `isomorphic-git` from 1.38.9 to 1.40.0 - [Release notes](https://github.com/isomorphic-git/isomorphic-git/releases) - [Commits](isomorphic-git/isomorphic-git@v1.38.9...v1.40.0) Updates `langchain` from 1.5.3 to 1.5.4 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.3...langchain@1.5.4) Updates `@radix-ui/react-label` from 2.1.12 to 2.1.15 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label) Updates `@radix-ui/react-separator` from 1.1.12 to 1.1.15 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator) Updates `@radix-ui/react-slot` from 1.3.0 to 1.3.3 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot) Updates `@radix-ui/react-tooltip` from 1.2.13 to 1.2.16 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip) Updates `radix-ui` from 1.6.3 to 1.6.7 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/1.6.7/packages/react/radix-ui) --- updated-dependencies: - dependency-name: turbo dependency-version: 2.10.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@hono/node-server" dependency-version: 2.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@langchain/core" dependency-version: 1.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: better-auth dependency-version: 1.6.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: deepagents dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: hono dependency-version: 4.12.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: mongoose dependency-version: 9.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@astrojs/starlight" dependency-version: 0.41.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@playwright/test" dependency-version: 1.62.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@tanstack/react-query" dependency-version: 5.101.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: recharts dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: postcss dependency-version: 8.5.25 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vite dependency-version: 8.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@langchain/anthropic" dependency-version: 1.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: isomorphic-git dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: langchain dependency-version: 1.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-label" dependency-version: 2.1.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-separator" dependency-version: 1.1.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-slot" dependency-version: 1.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@radix-ui/react-tooltip" dependency-version: 1.2.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: radix-ui dependency-version: 1.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
There was a problem hiding this comment.
Threat surface review
Verdict: No new security issues found in this PR. Changes look secure for the surfaces in scope.
Scope of the diff
Dependency-only bump (8 package.json files + pnpm-lock.yaml). No application source, route handlers, MCP server code, auth config, or .env* files changed.
Surfaces checked
| Surface | Result |
|---|---|
| 1. MCP endpoint auth | Not impacted. @modelcontextprotocol/server / @modelcontextprotocol/hono remain at 2.0.0-alpha.2. Auth order stays in apps/api/src/mcp/archmax-route.ts (unchanged). |
| 2. Query execution sandboxing | Not impacted. No changes to DuckDB / execute_query MCP tooling. |
| 3. Admin auth (Better Auth) | better-auth 1.6.23 → 1.6.25. App config in apps/api/src/lib/auth.ts and BETTER_AUTH_SECRET min-32 validation in packages/core/src/config/env.ts are untouched. Cookie attrs remain httpOnly / secure (prod) / sameSite: "lax". 1.6.25 includes a Google One Tap signup-restriction fix; this app does not enable One Tap (username plugin + emailAndPassword.disableSignUp: true). OSV clean at 1.6.25. |
| 4. API input validation | hono 4.12.31 → 4.12.32 and @hono/node-server 2.0.10 → 2.0.12. No Zod schema / route handler changes. Hono 4.12.32 hardens query/header/param parsing with Object.create(null) and scopes CSP callbacks — net positive. @hono/node-server 2.0.12 is OSV-clean; app uses only serve() from that package (no serveStatic). mongoose 9.7.4 → 9.9.0 is past the sanitizeFilter $nor fix (CVE-2026-42334 / ≥9.1.6). |
| 5. Environment secrets | No .env / hardcoded secret changes; nothing in the diff logs or returns secrets. |
| 6. Dependency exposure | Reviewed security-sensitive bumps (better-auth, hono, @hono/node-server, mongoose, deepagents, isomorphic-git, vite). OSV clean at resolved versions. deepagents 1.11.1 → 1.12.0 is a behavioral minor (blank default system prompt, todo middleware opt-in, write_file create/replace); archmax supplies its own systemPrompt and sandboxes writes via ValidatingFilesystemBackend with virtualMode: true, so this is not a new issue for the listed surfaces. |
Pre-existing audit noise (not introduced here)
pnpm audit still reports known carry-forward advisories unchanged by this lockfile resolution: xlsx@0.18.5 / @xmldom/xmldom via markitdown-ts, direct js-yaml@^4.1.1 (resolves to 4.1.1), astro@6.4.8 (docs), and ws@8.20.0. These should be fixed in dedicated PRs (e.g. bump direct js-yaml to ^4.3.0), not treated as regressions from this group update.
Sent by Cursor Automation: archmax Security Review
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 354c1ba. Configure here.
| "@langchain/openai": "^1.5.5", | ||
| "bullmq": "^5.80.9", | ||
| "deepagents": "^1.11.1", | ||
| "deepagents": "^1.12.0", |
There was a problem hiding this comment.
Todo planning disabled by deepagents bump
Medium Severity
Bumping deepagents to 1.12.0 makes todo middleware opt-in, but createDeepAgent in agent.ts and playground-agent.ts never registers it. Agents lose write_todos, todo state, and planning prompt guidance, while the chat UI still special-cases that tool.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 354c1ba. Configure here.
Docker image readydocker pull ghcr.io/archmaxai/archmax:pr-89 |
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |




Bumps the minor-and-patch group with 27 updates in the / directory:
2.10.52.10.72.0.102.0.121.2.31.2.41.6.231.6.251.11.11.12.04.12.314.12.329.7.49.9.00.41.30.41.51.61.11.62.15.101.25.101.41.25.01.28.019.2.719.2.819.2.1719.2.1819.2.719.2.819.2.319.2.43.9.23.10.16.0.36.0.58.5.208.5.258.1.58.2.01.5.11.5.21.38.91.40.01.5.31.5.42.1.122.1.151.1.121.1.151.3.01.3.31.2.131.2.161.6.31.6.7Updates
turbofrom 2.10.5 to 2.10.7Release notes
Sourced from turbo's releases.
... (truncated)
Commits
be76f17publish 2.10.7 to registry2f8a962fix: Support multiple macOS file watch roots (#13484)549fc99chore: Upgrade brace-expansion (#13483)0a329d6chore: Upgrade Next.js (#13482)07ebd1dtest: Add Terminal UI sanity tests (#13475)2a02c34release(turborepo): 2.10.7-canary.1 (#13478)96dc00cfix: Preserve pnpm aliased dependencies during prune (#13477)0746adcfix: Preserve pnpm root dependencies during prune (#13476)f925b44docs: Document service readiness probes (#13472)4778467fix: Prevent mobile homepage overflow (#13453)Updates
@hono/node-serverfrom 2.0.10 to 2.0.12Release notes
Sourced from @hono/node-server's releases.
Commits
a813b6c2.0.12caf48bafix(response): copy headers when init is a foreign Response (#382)3b1dd68test: replace supertest (#379)834e54f2.0.11ba72bcdperf(request): fast-path PATCH method (#380)962baa4perf(request): fast-path QUERY methods (#376)62284d6test: use a custom helper for path traversal tests (#377)Updates
@langchain/corefrom 1.2.3 to 1.2.4Release notes
Sourced from @langchain/core's releases.
Commits
f6dbb88chore: version packages (#11268)9654bdefix(core): coalesce duplicate tracer copies sharing run state (#11190)84ce6d6fix(core): bind splitText when trimMessages receives a TextSplitter instance ...710d74ffix: resolve open Dependabot alerts (#11259)5226cddchore(deps-dev): bump@hono/node-serverfrom 2.0.4 to 2.0.10 in /libs/langcha...d829cb4chore: version packages (#11204)c8bd4c4feat(anthropic): add Claude Opus 5 support (#11255)741f380chore(deps): bump@hono/node-serverfrom 2.0.4 to 2.0.10 (#11244)5103ceechore(deps): bump js-yaml from 5.1.0 to 5.2.2 (#11256)db29a6achore(deps): bump axios from 1.16.1 to 1.18.0 (#11228)Updates
better-authfrom 1.6.23 to 1.6.25Release notes
Sourced from better-auth's releases.
... (truncated)
Changelog
Sourced from better-auth's changelog.
... (truncated)
Commits
07a646echore: release v1.6.25 (#10491)7439359fix(solid): expose $fetch and $store on the solid client (#10444)dac701cchore(deps): bump next from 16.2.6 to 16.2.11 (#10493)5124c34fix(one-tap): enforce google provider signup restrictions (#10479)9a661c7chore: release v1.6.24 (#10323)4e685eefix(open-api): include plugin user fields on sign-up/update bodies (#10453)d3ce782fix(cookies): tighten CookieAttributes index signature type (#10441) (#10442)ae78109fix(client): preserve null in useSession().data type with throw:true (#9787)f6d18fafix(client): restore auth query lifecycle after remount (#10379)086ca91fix(magic-link, email-otp): force-validate Origin on cookieless send endpoint...Updates
deepagentsfrom 1.11.1 to 1.12.0Release notes
Sourced from deepagents's releases.
Commits
bed2d34chore: version packages (#712)b177148chore: exit pre-release (#711)149f458chore: version packages (rc) (#709)79e4654fix(deps): resolve Dependabot alerts (#710)1225a7ffeat(deepagents): make todo middleware opt-in (#708)71000c0build(deps): bump the minor-deps-updates-main group across 1 directory with 1...24ea7fabuild(deps): bump the major-deps-updates-main group across 1 directory with 2...0e6a35bfix(deno): extend reconnect readiness retry (#706)a55022dchore: version packages (rc) (#699)d25097ffeat(deepagents): simplify prompting (#703)Updates
honofrom 4.12.31 to 4.12.32Release notes
Sourced from hono's releases.
Commits
26d8e424.12.32402eb3afix(secure-headers): keep CSP callbacks scoped to their header (#5147)c85aeadfix: useObject.create(null)when parsing query, headers, and params (#5161)a88c89dtest(cloudflare-workers): add coverage for onClose, onError, send, and close ...44f8843fix(sse): emit empty id field to reset Last-Event-ID (#5138)e36f57dfix(aws-lambda): add jwt and lambda authorizer types for API Gateway v2 (#5142)bf8608cci: enable reports for type & bundle size check (#5148)Updates
mongoosefrom 9.7.4 to 9.9.0Release notes
Sourced from mongoose's releases.
Changelog
Sourced from mongoose's changelog.
Commits
650c286chore: release 9.9.00b4ef8atest: improve flakey test2ccf221Merge pull request #16412 from Automattic/vkarpov15/gh-16045-32d7256bfix lint5f998c8types: handle required discriminator keys when inferring embedded discriminat...8b59eeatypes: allow base discriminator to have nullish discriminator key for backwar...a37bfc6types: add explicit discriminator key to embedded discriminator subtypesa8aee7ctest: add test case coverage for #16045