chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #26 · sidclawhq/platform

dependabot · 2026-03-30T15:09:23Z

Bumps the dev-dependencies group with 5 updates in the / directory:

Package	From	To
turbo	`2.8.20`	`2.8.21`
vitest	`4.1.0`	`4.1.2`
@types/pg	`8.11.11`	`8.20.0`
@vitest/coverage-v8	`4.1.0`	`4.1.2`
prisma	`7.5.0`	`7.6.0`

Updates turbo from 2.8.20 to 2.8.21

Release notes

Sourced from turbo's releases.

Turborepo v2.8.21

What's Changed

Docs

fix: Strip JSX components from heading anchors and TOC entries by @anthonyshew in vercel/turborepo#12404

eslint

fix(eslint-plugin-turbo): Guard against missing tasks/pipeline in forEachTaskDef by @sleitor in vercel/turborepo#12411

@turbo/repository

feat: Add packagesFromLockfile() NAPI binding to @turbo/repository by @anthonyshew in vercel/turborepo#12454

release(library): 0.0.1-canary.21 by @github-actions[bot] in vercel/turborepo#12455

Examples

fix(examples): Update of with-svelte example by @floriansalihovic in vercel/turborepo#11952

fix: Use script-shell=bash for cross-platform with-shell-commands example by @Goldyvaiiii in vercel/turborepo#12436

Changelog

docs: Add link to Docker guide in prune --docker flag section by @styfle in vercel/turborepo#12401

feat: Add global configuration key behind futureFlags.globalConfiguration by @anthonyshew in vercel/turborepo#12399

chore: Update CODEOWNERS to remove /docs owner by @anthonyshew in vercel/turborepo#12402

fix: Move docs app icons into app/ directory by @anthonyshew in vercel/turborepo#12403

feat: Add experimental structured logging with --json and --log-file flags by @anthonyshew in vercel/turborepo#12405

docs: Downgrade Next.js by @anthonyshew in vercel/turborepo#12408

chore: Deprecate the turbo scan command by @anthonyshew in vercel/turborepo#12406

chore: Upgrade Next.js by @anthonyshew in vercel/turborepo#12415

Revert "fix: Flush stale mouse tracking events from stdin during TUI cleanup" by @anthonyshew in vercel/turborepo#12416

fix: Add NixOS environment variables to default passthroughs by @anthonyshew in vercel/turborepo#12417

fix: Resolve security vulnerabilities in tar and rustls-webpki by @anthonyshew in vercel/turborepo#12418

docs: Promote turbo query from experimental to stable by @anthonyshew in vercel/turborepo#12421

docs: Clarify turbo-ignore's future by @anthonyshew in vercel/turborepo#12422

feat: Rework turbo ls to use query internals and add turbo query ls shorthand by @anthonyshew in vercel/turborepo#12424

docs: Clarify environment variables across packages dependency behavior by @ramanverse in vercel/turborepo#12390

docs: Expand subpath imports example by @lilianakatrina684-a11y in vercel/turborepo#12412

fix: Preserve source dependencies when adding workspace deps in turbo-gen by @sleitor in vercel/turborepo#11935

docs: Add Git history requirements to turbo query affected docs by @anthonyshew in vercel/turborepo#12426

fix: Prevent horizontal overflow from long inline code on narrow viewports by @anthonyshew in vercel/turborepo#12428

feat: Send git SHA and dirty hash to remote cache by @mehulkar in vercel/turborepo#12427

fix: Upgrade tokio to 1.47.1+ to fix pidfd_reaper panic by @anthonyshew in vercel/turborepo#12431

docs: Add AI guide to sidebar navigation by @anthonyshew in vercel/turborepo#12438

docs: Move experimentalObservability into futureFlags section by @anthonyshew in vercel/turborepo#12439

fix: Skip Unix domain sockets and other special files during file hashing by @anthonyshew in vercel/turborepo#12445

fix: Preserve dedupePeers and unknown pnpm lockfile settings by @attehuhtakangas in vercel/turborepo#12443

fix: Align dry run cache status with normal run by checking caching guards by @anthonyshew in vercel/turborepo#12448

fix: Resolve turbo watch hang with mixed interruptible persistent tasks by @anthonyshew in vercel/turborepo#12449

fix: Avoid setsid() in PTY spawn to prevent macOS Gatekeeper CPU spikes by @anthonyshew in vercel/turborepo#12452

refactor: Move cache hit SHA context to verbose logging by @mehulkar in vercel/turborepo#12435

docs: Add missing --force flag documentation by @Goldyvaiiii in vercel/turborepo#12440

fix: Prevent panic in turbo watch with persistent tasks by @anthonyshew in vercel/turborepo#12459

fix: Support turbo watch in single-package workspaces by @anthonyshew in vercel/turborepo#12460

fix: Missing deps after npm lockfile parsing by @anthonyshew in vercel/turborepo#12464

docs: Add AI agent detection and automatic markdown rewrites by @molebox in vercel/turborepo#12462

fix: Resolve generator name conflicts across workspaces by @anthonyshew in vercel/turborepo#12467

... (truncated)

Commits

84a861a publish 2.8.21 to registry
ffa47d1 fix: Show run summary after TUI exits (#12471)
c5a4690 release(turborepo): 2.8.21-canary.20 (#12470)
91ebb97 fix: Remove root package.json from --affected global triggers (#12469)
7552e93 release(turborepo): 2.8.21-canary.19 (#12468)
d5d37a8 fix: Resolve generator name conflicts across workspaces (#12467)
50bd872 docs: Add AI agent detection and automatic markdown rewrites (#12462)
c014134 release(turborepo): 2.8.21-canary.18 (#12465)
fe5a86e fix: Missing deps after npm lockfile parsing (#12464)
0bafae2 release(turborepo): 2.8.21-canary.17 (#12463)
Additional commits viewable in compare view

Updates vitest from 4.1.0 to 4.1.2

Release notes

Sourced from vitest's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

Don't resolve setupFiles from parent directory - by @hi-ogawa in vitest-dev/vitest#9960 (7aa93)

Ensure sequential mock/unmock resolution - by @hi-ogawa and Claude Opus 4.6 in vitest-dev/vitest#9830 (7c065)

browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot - by @macarie in vitest-dev/vitest#9847 (faace)

coverage: Correct coverageConfigDefaults values and types - by @Arthie in vitest-dev/vitest#9940 (b3c99)

pretty-format: Fix output limit over counting - by @hi-ogawa in vitest-dev/vitest#9965 (d3b7a)

Disable colors if agent is detected - by @sheremet-va and @AriPerkkio in vitest-dev/vitest#9851 (6f97b)

    View changes on GitHub

v4.1.1

   🚀 Features

experimental:

Expose matchesTags to test if the current filter matches tags - by @sheremet-va in vitest-dev/vitest#9913 (eec53)

Introduce experimental.vcsProvider - by @sheremet-va in vitest-dev/vitest#9928 (56115)

   🐞 Bug Fixes

Mark TestProject.testFilesList internal properly - by @sapphi-red in vitest-dev/vitest#9867 (54f26)

Detect fixture that returns without calling use - by @oilater in vitest-dev/vitest#9831 and vitest-dev/vitest#9861 (633ae)

Drop vite 8.beta support - by @AriPerkkio in vitest-dev/vitest#9862 (b78f5)

Type regression in vi.mocked() static class methods - by @purepear and @hi-ogawa in vitest-dev/vitest#9857 (90926)

Properly re-evaluate actual modules of mocked external - by @hi-ogawa in vitest-dev/vitest#9898 (ae5ec)

Preserve coverage report when html reporter overlaps - by @hi-ogawa in vitest-dev/vitest#9889 (2d81a)

Provide vi.advanceTimers to the preview provider - by @sheremet-va in vitest-dev/vitest#9891 (1bc3e)

Don't leak event listener in playwright provider - by @sheremet-va in vitest-dev/vitest#9910 (d9355)

Open browser in --standalone mode without running tests - by @sheremet-va in vitest-dev/vitest#9911 (e78ad)

Guard disposable and optional body - by @sheremet-va in vitest-dev/vitest#9912 (6fdb2)

Resolve retry.condition RegExp serialization issue - by @nstepien and @hi-ogawa in vitest-dev/vitest#9942 (7b605)

collect:

Don't treat extra props on test return as tests - by @sheremet-va in vitest-dev/vitest#9871 (141e7)

coverage:

Simplify provider types - by @AriPerkkio in vitest-dev/vitest#9931 (aaf9f)

Load built-in provider without module runner - by @AriPerkkio in vitest-dev/vitest#9939 (bf892)

expect:

Soft assertions continue after .resolves/.rejects promise errors - by @mixelburg, Maks Pikov, Claude Opus 4.6 (1M context) and @hi-ogawa in vitest-dev/vitest#9843 (6d74b)

Fix sinon-chai style API - by @hi-ogawa in vitest-dev/vitest#9943 (0f08d)

pretty-format:

Limit output for large object - by @hi-ogawa and Claude Opus 4.6 (1M context) in vitest-dev/vitest#9949 (0d5f9)

    View changes on GitHub

Commits

fc6f482 chore: release v4.1.2
6f97b55 feat: disable colors if agent is detected (#9851)
b3c992c fix(coverage): correct coverageConfigDefaults values and types (#9940)
7c06598 fix: ensure sequential mock/unmock resolution (#9830)
f54abad chore: add typo-checker skill and fix typos (#9963)
7aa9377 fix: don't resolve setupFiles from parent directory (#9960)
1f2d318 chore: release v4.1.1
ebfde79 refactor: rename matchesTagsFilter to matchesTags (#9956)
5611500 feat(experimental): introduce experimental.vcsProvider (#9928)
eec53d9 feat(experimental): expose matchesTagsFilter to test if the current filter ...
Additional commits viewable in compare view

Updates @types/pg from 8.11.11 to 8.20.0

Commits

See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.0 to 4.1.2

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

Don't resolve setupFiles from parent directory - by @hi-ogawa in vitest-dev/vitest#9960 (7aa93)

Ensure sequential mock/unmock resolution - by @hi-ogawa and Claude Opus 4.6 in vitest-dev/vitest#9830 (7c065)

browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot - by @macarie in vitest-dev/vitest#9847 (faace)

coverage: Correct coverageConfigDefaults values and types - by @Arthie in vitest-dev/vitest#9940 (b3c99)

pretty-format: Fix output limit over counting - by @hi-ogawa in vitest-dev/vitest#9965 (d3b7a)

Disable colors if agent is detected - by @sheremet-va and @AriPerkkio in vitest-dev/vitest#9851 (6f97b)

    View changes on GitHub

v4.1.1

   🚀 Features

experimental:

Expose matchesTags to test if the current filter matches tags - by @sheremet-va in vitest-dev/vitest#9913 (eec53)

Introduce experimental.vcsProvider - by @sheremet-va in vitest-dev/vitest#9928 (56115)

   🐞 Bug Fixes

Mark TestProject.testFilesList internal properly - by @sapphi-red in vitest-dev/vitest#9867 (54f26)

Detect fixture that returns without calling use - by @oilater in vitest-dev/vitest#9831 and vitest-dev/vitest#9861 (633ae)

Drop vite 8.beta support - by @AriPerkkio in vitest-dev/vitest#9862 (b78f5)

Type regression in vi.mocked() static class methods - by @purepear and @hi-ogawa in vitest-dev/vitest#9857 (90926)

Properly re-evaluate actual modules of mocked external - by @hi-ogawa in vitest-dev/vitest#9898 (ae5ec)

Preserve coverage report when html reporter overlaps - by @hi-ogawa in vitest-dev/vitest#9889 (2d81a)

Provide vi.advanceTimers to the preview provider - by @sheremet-va in vitest-dev/vitest#9891 (1bc3e)

Don't leak event listener in playwright provider - by @sheremet-va in vitest-dev/vitest#9910 (d9355)

Open browser in --standalone mode without running tests - by @sheremet-va in vitest-dev/vitest#9911 (e78ad)

Guard disposable and optional body - by @sheremet-va in vitest-dev/vitest#9912 (6fdb2)

Resolve retry.condition RegExp serialization issue - by @nstepien and @hi-ogawa in vitest-dev/vitest#9942 (7b605)

collect:

Don't treat extra props on test return as tests - by @sheremet-va in vitest-dev/vitest#9871 (141e7)

coverage:

Simplify provider types - by @AriPerkkio in vitest-dev/vitest#9931 (aaf9f)

Load built-in provider without module runner - by @AriPerkkio in vitest-dev/vitest#9939 (bf892)

expect:

Soft assertions continue after .resolves/.rejects promise errors - by @mixelburg, Maks Pikov, Claude Opus 4.6 (1M context) and @hi-ogawa in vitest-dev/vitest#9843 (6d74b)

Fix sinon-chai style API - by @hi-ogawa in vitest-dev/vitest#9943 (0f08d)

pretty-format:

Limit output for large object - by @hi-ogawa and Claude Opus 4.6 (1M context) in vitest-dev/vitest#9949 (0d5f9)

    View changes on GitHub

Commits

fc6f482 chore: release v4.1.2
1f2d318 chore: release v4.1.1
aaf9f18 fix(coverage): simplify provider types (#9931)
See full diff in compare view

Updates prisma from 7.5.0 to 7.6.0

Release notes

Sourced from prisma's releases.

7.6.0

Today, we are excited to share the 7.6.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Features

CLI

Added a prisma postgres link command that connects a local project to a Prisma Postgres database. This is the first command in a new prisma postgres command group for managing Prisma Postgres databases directly from the CLI. (#29352)

Driver Adapters

@prisma/adapter-pg: Added a statementNameGenerator option that accepts a custom prepared statement name generator to allow users to leverage pg statement caching (#29395)

@prisma/adapter-pg: Added support for usage of connection strings directly in the constructor for improved ergonomics (#29287)

@prisma/adapter-mariadb: Added a useTextProtocol option in the constructor to toggle between text and binary protocols (#29392)

Bug Fixes

Prisma Client

Disabled caching of createMany queries to avoid cache bloat and potential Node.js crashes in bulk operations (#29382)

Made NowGenerator lazy to avoid synchronous new Date() calls, fixing Next.js "dynamic usage" errors in cached components (#28724)

Fixed missing export of Get<Model>GroupByPayload type in the new prisma-client generator, making it accessible for TypeScript usage (#29346)

CLI

Added streaming parsing with automatic fallback to handle Prisma schemas that produce extremely large intermediate strings (>500MB) that hit V8's string limits (#29377)

Driver Adapters

@prisma/adapter-pg: Relaxed the @types/pg version constraint to ^8.16.0 for compatibility with newer PostgreSQL type definitions (#29390)

@prisma/adapter-pg: Corrected error handling for ColumnNotFound errors to correctly extract column names from both quoted and unquoted PostgreSQL error messages (#29307)

@prisma/adapter-mariadb: Modified the adapter to disable mariadb statement caching by default to address a reported leak (#29392)

Prisma Studio

We’re continuing our work to improve Prisma Studio with more features being added.

Dark Mode

Need we say more? You’ve all asked for it, and it’s back.

dark-mode-studio.mp4

... (truncated)

Commits

5fece0a chore: bump @prisma/dev to 0.24.3 (#29396)
45d7e0f feat(cli): add prisma postgres link command (#29352)
adbdf15 Pre-bundle Studio frontend assets and replace Hono (#29389)
f8258ad chore: bump effect to fix vulnerability (#29384)
74839a9 feat(cli): update bundled @prisma/studio-core to 0.27.3 (#29376)
309b4bc refactor: extract 'prisma-client-js' into PRISMA_CLIENT_JS_PROVIDER constant ...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 5 updates Bumps the dev-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.8.20` | `2.8.21` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.0` | `4.1.2` | | [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.11.11` | `8.20.0` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.0` | `4.1.2` | | [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `7.5.0` | `7.6.0` | Updates `turbo` from 2.8.20 to 2.8.21 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.8.20...v2.8.21) Updates `vitest` from 4.1.0 to 4.1.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/vitest) Updates `@types/pg` from 8.11.11 to 8.20.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg) Updates `@vitest/coverage-v8` from 4.1.0 to 4.1.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/coverage-v8) Updates `prisma` from 7.5.0 to 7.6.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.6.0/packages/cli) --- updated-dependencies: - dependency-name: turbo dependency-version: 2.8.21 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: vitest dependency-version: 4.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@types/pg" dependency-version: 8.20.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: prisma dependency-version: 7.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 30, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates#26

chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates#26
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/dev-dependencies-9f138a7410

dependabot bot commented on behalf of github Mar 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 30, 2026

Turborepo v2.8.21

What's Changed

Docs

eslint

@​turbo/repository

Examples

Changelog

v4.1.2

🐞 Bug Fixes

View changes on GitHub

v4.1.1

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v4.1.2

🐞 Bug Fixes

View changes on GitHub

v4.1.1

🚀 Features

🐞 Bug Fixes

View changes on GitHub

7.6.0

Highlights

ORM

Features

Bug Fixes

Prisma Studio

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@turbo/repository`