Skip to content

Bump the server-minor-patch group across 1 directory with 5 updates#3

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/server/server-minor-patch-0ee4fb5eea
Open

Bump the server-minor-patch group across 1 directory with 5 updates#3
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/server/server-minor-patch-0ee4fb5eea

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 12, 2026

Copy link
Copy Markdown

Bumps the server-minor-patch group with 5 updates in the /server directory:

Package From To
@aws-sdk/client-ses 3.991.0 3.1085.0
body-parser 2.2.2 2.3.0
cors 2.8.5 2.8.6
csv-parser 3.2.0 3.2.1
express-rate-limit 8.2.1 8.5.2

Updates @aws-sdk/client-ses from 3.991.0 to 3.1085.0

Release notes

Sourced from @​aws-sdk/client-ses's releases.

v3.1085.0

3.1085.0(2026-07-10)

New Features
  • clients: update client endpoints as of 2026-07-10 (dffbeab0)
  • client-quicksight: Provides CreateKnowledgeBase and UpdateKnowledgeBase APIs (42de5523)
  • client-inspector2: Support for 3 day and 7 day ECR re-scan durations (4b0b5c86)
  • client-lambda: Added TelemetryConfig support for Managed Instances Capacity Provider, enabling customers to configure system log level and custom log group for managed instance logging. (63388139)
  • client-sagemaker: Release support for g4d, c6g, c7g, c8g instance types for SageMaker HyperPod (800976de)
  • client-ec2: New Amazon EC2 instances. M9g, M9gd, C9g, and C9gd on AWS Graviton5. C8in, M8in, and R8in add 600 Gbps network. C8ib, M8ib, and R8ib add 300 Gbps EBS. C8ine, M8ine, M8idn, R8idn, M8idb, and R8idb round out Intel Xeon 6. Mac-m3ultra with Apple M3 Ultra. G7 with NVIDIA RTX PRO 4500 Blackwell GPUs. (35aaf387)
  • client-license-manager: Added the ResetUsage field to the CreateLicenseVersion API. When set to true, the entitlement usage counts for the license are reset to 0. If it is false or not specified, entitlement usage is left unchanged. (52f1c9c0)
  • client-cloudwatch: CloudWatch now assigns a unique identifier to each anomaly detector. PutAnomalyDetector and DescribeAnomalyDetectors return this AnomalyDetectorId, which you can use to describe or delete a specific anomaly detector directly. (36fc0ee5)

For list of updated packages, view updated-packages.md in assets-3.1085.0.zip

v3.1084.0

3.1084.0(2026-07-09)

New Features
  • client-connect: Amazon Connect - Added DeleteContactData API to support PII deletion of customer endpoint, additional email recipients and email subject. (87f4ae0e)
  • client-guardduty: Adding "AI Analyst" enum value for detector (20518a4f)
  • client-synthetics: CloudWatch Synthetics adds support for customer managed KMS keys for canary environment variables. Customers can now encrypt their canary's Lambda function environment variables at rest using their own AWS KMS key, providing additional control over data protection. (c7379151)
  • client-ec2: Added support for additional override parameters in CreateFleet, including LaunchTemplateSpecificationUserData, KeyName, IamInstanceProfile, and MetadataOptions. The CreateFleet response now also includes SubnetId, AvailabilityZone, and AvailabilityZoneId for launched instances. (6fcc95d1)
  • client-ivs: adds support for AWS IVS ad configuration APIs to allow for a postRollConfiguration object on the ad configuration resource (7dd93c48)
Tests
  • client-kinesis: aggregate HTTP/2 sessions across all endpoint pools (#8181) (84b2b62c)

For list of updated packages, view updated-packages.md in assets-3.1084.0.zip

v3.1083.0

3.1083.0(2026-07-08)

Chores
  • core/client: remove TypeScript version user-agent metric (#8177) (9d72bc29)
New Features
  • client-signin: Adds support for OAuth 2.0 token operations in AWS Sign-In, CreateOAuth2TokenWithIAM (client credentials flow), IntrospectOAuth2TokenWithIAM (token inspection), and RevokeOAuth2TokenWithIAM (token revocation). (bc64f6b2)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-ses's changelog.

3.1085.0 (2026-07-10)

Note: Version bump only for package @​aws-sdk/client-ses

3.1084.0 (2026-07-09)

Note: Version bump only for package @​aws-sdk/client-ses

3.1083.0 (2026-07-08)

Note: Version bump only for package @​aws-sdk/client-ses

3.1082.0 (2026-07-08)

Note: Version bump only for package @​aws-sdk/client-ses

3.1081.0 (2026-07-07)

Note: Version bump only for package @​aws-sdk/client-ses

3.1080.0 (2026-07-06)

Note: Version bump only for package @​aws-sdk/client-ses

3.1079.0 (2026-07-02)

... (truncated)

Commits

Updates body-parser from 2.2.2 to 2.3.0

Release notes

Sourced from body-parser's releases.

v2.3.0

Important: Security

What's Changed

New Contributors

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

  • fix: use static exports instead of lazy getters to improve ESM compatibility
  • feat: add subpath exports for individual parsers
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
  • deps:
    • content-type@^2.0.0
    • http-errors@^2.0.1
    • iconv-lite^0.7.2
    • qs@^6.15.2
    • raw-body@^3.0.2
    • type-is@^2.1.0
Commits
  • d0f2ace 2.3.0 (#735)
  • 7d03f2f chore: updated deps to latest (#733)
  • 8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
  • 32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
  • ff0f6b9 docs: update outdated reference to MDN docs (#730)
  • 14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
  • 37f36a2 deps: update content-type and type-is (#728)
  • e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
  • e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
  • a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
  • Additional commits viewable in compare view

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

  • Improve documentation (API, context, examples...)
  • Remove additional markdown files from tarball
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.


Updates csv-parser from 3.2.0 to 3.2.1

Commits

Updates express-rate-limit from 8.2.1 to 8.5.2

Release notes

Sourced from express-rate-limit's releases.

v8.5.2

You can view the changelog here.

v8.5.1

You can view the changelog here.

v8.5.0

You can view the changelog here.

v8.4.1

You can view the changelog here.

v8.4.0

You can view the changelog here.

v8.3.2

You can view the changelog here.

v8.3.1

You can view the changelog here.

v8.3.0

You can view the changelog here.

Commits
  • 9774693 8.5.2
  • 0e94cc0 v8.5.2 changelog
  • 9a583c5 feat: simplify IPv6 key generation (#633)
  • 4f4b3fb chore(deps-dev): bump lint-staged from 16.4.0 to 17.0.4 (#632)
  • 3c1d6c5 chore(deps-dev): bump the development-dependencies group with 7 updates (#631)
  • 18884b6 chore(deps): bump basic-ftp from 5.2.0 to 5.3.1 (#630)
  • dacc980 chore(deps): bump handlebars from 4.7.8 to 4.7.9 (#629)
  • 486d0c6 chore(deps): bump follow-redirects from 1.15.11 to 1.16.0 (#627)
  • 50cc3f6 8.5.1
  • 92c8e3e chore: bump ip-address library to latest (#626)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express-rate-limit since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 12, 2026
@dependabot
dependabot Bot requested a review from jackjusko as a code owner July 12, 2026 18:27
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 12, 2026
Bumps the server-minor-patch group with 5 updates in the /server directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-ses](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ses) | `3.991.0` | `3.1085.0` |
| [body-parser](https://github.com/expressjs/body-parser) | `2.2.2` | `2.3.0` |
| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |
| [csv-parser](https://github.com/mafintosh/csv-parser) | `3.2.0` | `3.2.1` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.2.1` | `8.5.2` |



Updates `@aws-sdk/client-ses` from 3.991.0 to 3.1085.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ses/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1085.0/clients/client-ses)

Updates `body-parser` from 2.2.2 to 2.3.0
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@v2.2.2...v2.3.0)

Updates `cors` from 2.8.5 to 2.8.6
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](expressjs/cors@v2.8.5...v2.8.6)

Updates `csv-parser` from 3.2.0 to 3.2.1
- [Release notes](https://github.com/mafintosh/csv-parser/releases)
- [Commits](mafintosh/csv-parser@v3.2.0...v3.2.1)

Updates `express-rate-limit` from 8.2.1 to 8.5.2
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.2.1...v8.5.2)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-ses"
  dependency-version: 3.1085.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-minor-patch
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-minor-patch
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-minor-patch
- dependency-name: csv-parser
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-minor-patch
- dependency-name: express-rate-limit
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the server-minor-patch group in /server with 5 updates Bump the server-minor-patch group across 1 directory with 5 updates Jul 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/server/server-minor-patch-0ee4fb5eea branch from f25646a to 32e492a Compare July 12, 2026 18:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants