chore(deps): bump the production-dependencies group across 1 directory with 13 updates by dependabot[bot] · Pull Request #326 · Neurowealth/Backend

dependabot · 2026-08-17T06:16:44Z

Bumps the production-dependencies group with 12 updates in the / directory:

Package	From	To
@anthropic-ai/sdk	`0.112.3`	`0.117.1`
@opentelemetry/auto-instrumentations-node	`0.78.0`	`0.79.0`
@opentelemetry/exporter-trace-otlp-http	`0.220.0`	`0.221.0`
@opentelemetry/resources	`2.9.0`	`2.10.0`
@opentelemetry/sdk-node	`0.220.0`	`0.221.0`
@prisma/instrumentation	`7.8.0`	`7.9.1`
@sentry/node	`10.66.0`	`10.70.0`
@sentry/profiling-node	`10.66.0`	`10.70.0`
@stellar/stellar-sdk	`16.0.1`	`16.2.0`
express-rate-limit	`8.6.0`	`8.6.2`
js-yaml	`5.2.2`	`5.3.0`
twilio	`6.0.2`	`6.1.0`

Updates @anthropic-ai/sdk from 0.112.3 to 0.117.1

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk: v0.117.1

0.117.1 (2026-08-13)

Full Changelog: sdk-v0.117.0...sdk-v0.117.1

Chores

ci: allow manually re-publishing a package to npm from the release workflow (af60c1f)

internal: tag uploaded preview builds with the branch name (#295) (228f44e)

sdk: v0.117.0

0.117.0 (2026-08-13)

Full Changelog: sdk-v0.116.0...sdk-v0.117.0

Features

api: add output_behavior to dream creation (create a new memory store or update the input store in place) (6a5bd0f)

Bug Fixes

build: include dotfiles when flattening dist during git installs (917dbbb)

client: add models (a7bfbb1)

messages: honor per-request timeout in the non-streaming long-request check (#272) (0fdd8a8)

streaming: apply all message_delta fields when accumulating streamed messages (#289) (7b82659)

tool-runner: forward the response container id to the next request (#271) (5bdee4a)

tools: align path resolution, skill-archive members, and heartbeat bounds with the other SDKs (#264) (5fbc729)

Chores

ci: run breaking-change detection as a ci.yml job on every push (c34c1d5)

internal: switch from yarn to pnpm (f4eeea0)

tools: escape backslashes in skill archive exclusion patterns (#311) (67ede1c)

Documentation

api: clarify that user profile name is optional for resold profiles (1b6fed5)

sdk: v0.116.0

0.116.0 (2026-08-07)

Full Changelog: sdk-v0.115.0...sdk-v0.116.0

Features

api: add mid-conversation-tool-changes-2026-07-01 beta (70e04f6)

api: add support for session budgets, advisor tool, pinned inference location and skills auto-loading from GitHub (1336a4a)

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.117.1 (2026-08-13)

Full Changelog: sdk-v0.117.0...sdk-v0.117.1

Chores

ci: allow manually re-publishing a package to npm from the release workflow (af60c1f)

internal: tag uploaded preview builds with the branch name (#295) (228f44e)

0.117.0 (2026-08-13)

Full Changelog: sdk-v0.116.0...sdk-v0.117.0

Features

api: add output_behavior to dream creation (create a new memory store or update the input store in place) (6a5bd0f)

Bug Fixes

build: include dotfiles when flattening dist during git installs (917dbbb)

client: add models (a7bfbb1)

messages: honor per-request timeout in the non-streaming long-request check (#272) (0fdd8a8)

streaming: apply all message_delta fields when accumulating streamed messages (#289) (7b82659)

tool-runner: forward the response container id to the next request (#271) (5bdee4a)

tools: align path resolution, skill-archive members, and heartbeat bounds with the other SDKs (#264) (5fbc729)

Chores

ci: run breaking-change detection as a ci.yml job on every push (c34c1d5)

internal: switch from yarn to pnpm (f4eeea0)

tools: escape backslashes in skill archive exclusion patterns (#311) (67ede1c)

Documentation

api: clarify that user profile name is optional for resold profiles (1b6fed5)

0.116.0 (2026-08-07)

Full Changelog: sdk-v0.115.0...sdk-v0.116.0

Features

api: add mid-conversation-tool-changes-2026-07-01 beta (70e04f6)

api: add support for session budgets, advisor tool, pinned inference location and skills auto-loading from GitHub (1336a4a)

tools: make bash timeout and abort errors matchable by class (#259) (201b12e)

... (truncated)

Commits

64a1e8e chore: release main
0281a29 chore(ci): allow manually re-publishing a package to npm from the release wor...
f3e060b chore(internal): tag uploaded preview builds with the branch name (#295)
6fcfb2c chore: release main
1a1af33 codegen metadata
d6b8f40 chore: release main
5edda86 chore(tools): escape backslashes in skill archive exclusion patterns (#311)
07cf28c chore(internal): switch from yarn to pnpm
a751543 docs(api): clarify that user profile name is optional for resold profiles
0c74ed0 fix(build): include dotfiles when flattening dist during git installs
Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.78.0 to 0.79.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.79.0

0.79.0 (2026-07-23)

Features

deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Bug Fixes

auto-instrumentations-node: avoid duplicate diag logger warning in register.js (#3601) (3ae8a1b)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.75.0 to ^0.76.0

@opentelemetry/instrumentation-bunyan bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-connect bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-cucumber bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dataloader bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dns bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-express bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-fs bumped from ^0.39.0 to ^0.40.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-graphql bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-hapi bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.3.0 to ^0.4.0

@opentelemetry/instrumentation-ioredis bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.29.0 to ^0.30.0

@opentelemetry/instrumentation-knex bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-koa bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-memcached bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-mongodb bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-mongoose bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-net bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-openai bumped from ^0.18.0 to ^0.19.0

@opentelemetry/instrumentation-oracledb bumped from ^0.45.0 to ^0.46.0

@opentelemetry/instrumentation-pg bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-pino bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-redis bumped from ^0.68.0 to ^0.69.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.79.0 (2026-07-23)

Features

deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Bug Fixes

auto-instrumentations-node: avoid duplicate diag logger warning in register.js (#3601) (3ae8a1b)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.75.0 to ^0.76.0

@opentelemetry/instrumentation-bunyan bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-connect bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-cucumber bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dataloader bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dns bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-express bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-fs bumped from ^0.39.0 to ^0.40.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-graphql bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-hapi bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.3.0 to ^0.4.0

@opentelemetry/instrumentation-ioredis bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.29.0 to ^0.30.0

@opentelemetry/instrumentation-knex bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-koa bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-memcached bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-mongodb bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-mongoose bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-net bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-openai bumped from ^0.18.0 to ^0.19.0

@opentelemetry/instrumentation-oracledb bumped from ^0.45.0 to ^0.46.0

@opentelemetry/instrumentation-pg bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-pino bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-redis bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-restify bumped from ^0.65.0 to ^0.66.0

... (truncated)

Commits

27e172a chore: release main (#3596)
466d5de feat(deps): update deps matching '@opentelemetry/*' (#3629)
b7efd7b chore(*): migrate to sdk-trace (#3599)
3ae8a1b fix(auto-instrumentations-node): avoid duplicate diag logger warning in regis...
See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.220.0 to 0.221.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.221.0

0.221.0

💥 Breaking Changes

feat(sdk-logs)!: configure the force flush timeout per call #6931 @LarryHu0217

(user-facing): LoggerProviderOptions.forceFlushTimeoutMillis has been removed; pass timeoutMillis to LoggerProvider.forceFlush() instead.

feat(instrumentation-http)!: emit only stable HTTP semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes HTTP attribute or metric emission — old (v1.7.0) and duplicate (http/http/dup) semconv outputs have been removed. #6819 @maryliag

feat(instrumentation-fetch)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-xml-http-request)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-grpc)!: emit only stable network semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes attribute emission — net.peer.name and net.peer.port (old) are no longer set; only server.address and server.port (stable). #6819 @maryliag

🚀 Features

feat(sdk-logs): allow modifying ReadWriteLogRecord properties (including hrTime, hrTimeObserved, and spanContext) in accordance with the OpenTelemetry Logs specification #6923 @Babul422

feat(sdk-node): emit a deprecation warning when the JaegerPropagator is selected via OTEL_PROPAGATORS or declarative config; use tracecontext instead. @pichlermarc

feat(instrumentation-http): set error.type to status code in metrics for error requests. #6919 @raphael-theriault-swi

Commits

76fa6b5 chore: prepare next release (#6942)
3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
f6d8fbe chore(deps): lock file maintenance (#6559)
9612732 chore: remove examples/dice from workspaces (#6937)
7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
b9f57c6 chore(deps): update dependency @types/webpack-env to v1.18.8 (#6877)
cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.9.0 to 2.10.0

Release notes

Sourced from @opentelemetry/resources's releases.

v2.10.0

2.10.0

🚀 Features

feat(sdk-logs): implement log processor metrics #6554 @anuraaga

feat(otlp-exporter): implement exporter metrics #6480 @anuraaga

feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @pichlermarc

The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @LarryHu0217

fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @LarryHu0217

🏠 Internal

chore: build on Node 26 in CI #6887 @overbalance

chore: bump to typescript@5.2.2 @pichlermarc

Changelog

Sourced from @opentelemetry/resources's changelog.

2.10.0

🚀 Features

feat(sdk-logs): implement log processor metrics #6554 @anuraaga

feat(otlp-exporter): implement exporter metrics #6480 @anuraaga

feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @pichlermarc

The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @LarryHu0217

fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @LarryHu0217

🏠 Internal

chore: build on Node 26 in CI #6887 @overbalance

chore: bump to typescript@5.2.2 @pichlermarc

Commits

76fa6b5 chore: prepare next release (#6942)
3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
f6d8fbe chore(deps): lock file maintenance (#6559)
9612732 chore: remove examples/dice from workspaces (#6937)
7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
b9f57c6 chore(deps): update dependency @types/webpack-env to v1.18.8 (#6877)
cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-node from 0.220.0 to 0.221.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.221.0

0.221.0

💥 Breaking Changes

feat(sdk-logs)!: configure the force flush timeout per call #6931 @LarryHu0217

(user-facing): LoggerProviderOptions.forceFlushTimeoutMillis has been removed; pass timeoutMillis to LoggerProvider.forceFlush() instead.

feat(instrumentation-http)!: emit only stable HTTP semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes HTTP attribute or metric emission — old (v1.7.0) and duplicate (http/http/dup) semconv outputs have been removed. #6819 @maryliag

feat(instrumentation-fetch)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-xml-http-request)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-grpc)!: emit only stable network semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes attribute emission — net.peer.name and net.peer.port (old) are no longer set; only server.address and server.port (stable). #6819 @maryliag

🚀 Features

feat(sdk-logs): allow modifying ReadWriteLogRecord properties (including hrTime, hrTimeObserved, and spanContext) in accordance with the OpenTelemetry Logs specification #6923 @Babul422

feat(sdk-node): emit a deprecation warning when the JaegerPropagator is selected via OTEL_PROPAGATORS or declarative config; use tracecontext instead. @pichlermarc

feat(instrumentation-http): set error.type to status code in metrics for error requests. #6919 @raphael-theriault-swi

Commits

76fa6b5 chore: prepare next release (#6942)
3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
f6d8fbe chore(deps): lock file maintenance (#6559)
9612732 chore: remove examples/dice from workspaces (#6937)
7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
b9f57c6 chore(deps): update dependency @types/webpack-env to v1.18.8 (#6877)
cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-trace-node from 2.9.0 to 2.10.0

Release notes

Sourced from @opentelemetry/sdk-trace-node's releases.

v2.10.0

2.10.0

🚀 Features

feat(sdk-logs): implement log processor metrics #6554 @anuraaga

feat(otlp-exporter): implement exporter metrics #6480 @anuraaga

feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @pichlermarc

The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @LarryHu0217

fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @LarryHu0217

🏠 Internal

chore: build on Node 26 in CI #6887 @overbalance

chore: bump to typescript@5.2.2 @pichlermarc

Changelog

Sourced from @opentelemetry/sdk-trace-node's changelog.

2.10.0

🚀 Features

feat(sdk-logs): implement log processor metrics #6554 @anuraaga

feat(otlp-exporter): implement exporter metrics #6480 @anuraaga

feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @pichlermarc

The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @LarryHu0217

fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @LarryHu0217

🏠 Internal

chore: build on Node 26 in CI #6887 @overbalance

chore: bump to typescript@5.2.2 @pichlermarc

Commits

76fa6b5 chore: prepare next release (#6942)
3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
f6d8fbe chore(deps): lock file maintenance (#6559)
9612732 chore: remove examples/dice from workspaces (#6937)
7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
b9f57c6 chore(deps): update dependency @types/webpack-env to v1.18.8 (#6877)
cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
Additional commits viewable in compare view

Updates @prisma/instrumentation from 7.8.0 to 7.9.1

Release notes

Sourced from @prisma/instrumentation's releases.

7.9.1

Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).

This fixes prisma/prisma#29780.

It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:
# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish
tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)
@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @AmirSa12 (#28351) — thank you!

prisma.mp4

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.
</tr></table> 

... (truncated)

Commits

See full diff in compare view

Updates @sentry/node from 10.66.0 to 10.70.0

Release notes

Sourced from @sentry/node's releases.

10.70.0

feat(v10/core): Support stable MCP SDK v2 (#22986)

feat(v10/deps): Bump @sentry/node-cpu-profiler to 2.4.3 (#22992)

feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)

fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23189)

fix(v10/cloudflare): Get original waituntil in workflows (#23192)

fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy (#23190)

fix(v10/cloudflare): Set agent conversation id on the onRequest path (#22985)

fix(v10/cloudflare): Set conversation id independent of session name (#23193)

fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)

fix(v10/cloudflare): Use gen_ai.agent.name for class names (#22987)

fix(v10/core,browser): Handle errors from other realms (#23201)

fix(v10/core): Sample errors after beforeSend while preserving session updates (#22819)

fix(v10/hono): Include originalException in captured exception hint (#22990)

fix(v10/nextjs): meriyah issue for standalone build (#23055)

fix(v10/nextjs): Remove tracing from middleware wrappers (#22904)

fix(v10/profiling-node): Respect profileSessionSampleRate in trace profile lifecycle (#22940)

fix(v10/react-router): Preserve sourcemaps.disable when unstable_sentryVitePluginOptions is set (#22966)

fix(v10/react): Remove routes from shared set on <Routes> unmount (#22948)

fix(v10/sveltekit): Export metrics from worker entry point (#23027)

test(v10/e2e): Add missing @sentry/core dep to nextjs-16-userfeedback (#23009)

test(v10/e2e): Fix failing sveltekit-3 test (#23016)

test(v10/e2e): Fix type error in nextjs ai-error tests (#23011)

test(v10/e2e): Pin tanstackstart-react e2e deps to unblock tunnel tests (#23048)

Work in this release was contributed by @davidmurdoch, @Jxxunnn, and @kamilogorek. Thank you for your contributions!

Bundle size 📦

Path Size

@sentry/browser 27.09 KB

@sentry/browser - with treeshaking flags 25.58 KB

@sentry/browser (incl. Tracing) 45.5 KB

@sentry/browser (incl. Tracing + Span Streaming) 47.24 KB

@sentry/browser (incl. Tracing, Profiling) 50.13 KB

@sentry/browser (incl. Tracing, Replay) 83.82 KB

@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.7 KB

@sentry/browser (incl. Tracing, Replay with Canvas) 88.42 KB

@sentry/browser (incl. Tracing, Replay, Feedback) 100.78 KB

@sentry/browser (incl. Feedback) 43.87 KB

@sentry/browser (incl. sendFeedback) 31.78 KB

@sentry/browser (incl. FeedbackAsync) 36.79 KB

@sentry/browser (incl. Metrics) 28.16 KB

... (truncated)

Changelog

Sourced from @sentry/node's changelog.

10.70.0

feat(v10/core): Support stable MCP SDK v2 (#22986)

feat(v10/deps): Bump @sentry/node-cpu-profiler to 2.4.3 (#22992)

feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)

fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23189)

fix(v10/cloudflare): Get original waituntil in workflows (#23192)

fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy (#23190)

fix(v10/cloudflare): Set agent conversation id on the onRequest path (#22985)

fix(v10/cloudflare): Set conversation id independent of session name (#23193)

fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)

fix(v10/cloudflare): Use gen_ai.agent.name for class names (#22987)

fix(v10/core,browser): Handle errors from other realms (#23201)

fix(v10/core): Sample errors after beforeSend while preserving session updates (#22819)

fix(v10/hono): Include originalException in captured exception hint (#22990)

fix(v10/nextjs): meriyah issue for standalone build (#23055)

fix(v10/nextjs): Remove tracing from middleware wrappers (#22904)

fix(v10/profiling-node): Respect profileSessionSampleRate in trace profile lifecycle (#22940)

fix(v10/react-router): Preserve sourcemaps.disable when unstable_sentryVitePluginOptions is s...
Description has been truncated

dependabot · 2026-08-17T06:16:45Z

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

…y with 13 updates Bumps the production-dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.112.3` | `0.117.1` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.78.0` | `0.79.0` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.9.0` | `2.10.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` | | [@prisma/instrumentation](https://github.com/prisma/prisma/tree/HEAD/packages/instrumentation) | `7.8.0` | `7.9.1` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.66.0` | `10.70.0` | | [@sentry/profiling-node](https://github.com/getsentry/sentry-javascript) | `10.66.0` | `10.70.0` | | [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `16.0.1` | `16.2.0` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.6.0` | `8.6.2` | | [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.2` | `5.3.0` | | [twilio](https://github.com/twilio/twilio-node) | `6.0.2` | `6.1.0` | Updates `@anthropic-ai/sdk` from 0.112.3 to 0.117.1 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.112.3...sdk-v0.117.1) Updates `@opentelemetry/auto-instrumentations-node` from 0.78.0 to 0.79.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.79.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.220.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0) Updates `@opentelemetry/resources` from 2.9.0 to 2.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.9.0...v2.10.0) Updates `@opentelemetry/sdk-node` from 0.220.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0) Updates `@opentelemetry/sdk-trace-node` from 2.9.0 to 2.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.9.0...v2.10.0) Updates `@prisma/instrumentation` from 7.8.0 to 7.9.1 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.1/packages/instrumentation) Updates `@sentry/node` from 10.66.0 to 10.70.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.70.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.66.0...10.70.0) Updates `@sentry/profiling-node` from 10.66.0 to 10.70.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.70.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.66.0...10.70.0) Updates `@stellar/stellar-sdk` from 16.0.1 to 16.2.0 - [Release notes](https://github.com/stellar/js-stellar-sdk/releases) - [Changelog](https://github.com/stellar/js-stellar-sdk/blob/main/CHANGELOG.md) - [Commits](stellar/js-stellar-sdk@v16.0.1...v16.2.0) Updates `express-rate-limit` from 8.6.0 to 8.6.2 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.6.0...v8.6.2) Updates `js-yaml` from 5.2.2 to 5.3.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.2.2...5.3.0) Updates `twilio` from 6.0.2 to 6.1.0 - [Release notes](https://github.com/twilio/twilio-node/releases) - [Changelog](https://github.com/twilio/twilio-node/blob/main/CHANGES.md) - [Commits](twilio/twilio-node@6.0.2...6.1.0) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.117.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.79.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/resources" dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-trace-node" dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@prisma/instrumentation" dependency-version: 7.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/node" dependency-version: 10.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/profiling-node" dependency-version: 10.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@stellar/stellar-sdk" dependency-version: 16.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: express-rate-limit dependency-version: 8.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: js-yaml dependency-version: 5.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: twilio dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-f051ff8176 branch from 78a48ef to af15708 Compare August 17, 2026 11:17

Navigation Menu

Uh oh!

chore(deps): bump the production-dependencies group across 1 directory with 13 updates - #326

chore(deps): bump the production-dependencies group across 1 directory with 13 updates#326
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-f051ff8176

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Path	Size
`@sentry/browser`	27.09 KB
`@sentry/browser` - with treeshaking flags	25.58 KB
`@sentry/browser` (incl. Tracing)	45.5 KB
`@sentry/browser` (incl. Tracing + Span Streaming)	47.24 KB
`@sentry/browser` (incl. Tracing, Profiling)	50.13 KB
`@sentry/browser` (incl. Tracing, Replay)	83.82 KB
`@sentry/browser` (incl. Tracing, Replay) - with treeshaking flags	73.7 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas)	88.42 KB
`@sentry/browser` (incl. Tracing, Replay, Feedback)	100.78 KB
`@sentry/browser` (incl. Feedback)	43.87 KB
`@sentry/browser` (incl. sendFeedback)	31.78 KB
`@sentry/browser` (incl. FeedbackAsync)	36.79 KB
`@sentry/browser` (incl. Metrics)	28.16 KB

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

sdk: v0.117.1

0.117.1 (2026-08-13)

Chores

sdk: v0.117.0

0.117.0 (2026-08-13)

Features

Bug Fixes

Chores

Documentation

sdk: v0.116.0

0.116.0 (2026-08-07)

Features

0.117.1 (2026-08-13)

Chores

0.117.0 (2026-08-13)

Features

Bug Fixes

Chores

Documentation

0.116.0 (2026-08-07)

Features

auto-instrumentations-node: v0.79.0

0.79.0 (2026-07-23)

Features

Bug Fixes

Dependencies

0.79.0 (2026-07-23)

Features

Bug Fixes

Dependencies

experimental/v0.221.0

0.221.0

💥 Breaking Changes

🚀 Features

v2.10.0

2.10.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.10.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.221.0

0.221.0

💥 Breaking Changes

🚀 Features

v2.10.0

2.10.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.10.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

7.9.1

7.9.0

Highlights

ORM

Tab completions for the Prisma CLI

Prisma ORM, ready for AI agents

10.70.0

Bundle size 📦

10.70.0

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading