Bump the dependencies group across 1 directory with 92 updates

[dependabot]

Bumps the dependencies group with 23 updates in the / directory:

Package	From	To
prettier	3.4.2	3.6.2
typescript	5.8.3	5.9.3
@trpc/server	11.0.0-rc.730	11.6.0
csv-parse	5.6.0	6.1.0
express	4.21.2	5.1.0
node-cron	3.0.3	4.2.1
uuid	11.1.0	13.0.0
zod	3.24.4	4.1.11
@types/uuid	10.0.0	11.0.0
@vitest/ui	3.0.5	3.2.4
dotenv-cli	8.0.0	10.0.0
globals	15.15.0	16.4.0
next	15.1.7	15.5.4
eslint-config-next	15.1.7	15.5.4
lucide-react	0.474.0	0.544.0
@hookform/resolvers	3.10.0	5.2.2
@trpc/client	11.0.0-rc.730	11.6.0
@trpc/react-query	11.0.0-rc.730	11.6.0
react-scan	0.1.4	0.4.3
sonner	1.7.4	2.0.7
eslint-plugin-react-hooks	5.2.0	6.1.1
cmdk	1.0.0	1.1.1
react-day-picker	8.10.1	9.11.0

Updates prettier from 3.4.2 to 3.6.2

Release notes

Sourced from prettier's releases.

3.6.2

What's Changed

• Add missing blank line around code block by @​fisker in prettier/prettier#17675

🔗 Changelog

3.6.1

• Fix "Warning: File descriptor 39 closed but not opened in unmanaged mode" error when running --experimental-cli

🔗 Changelog

3.6.0

diff

🔗 Release note "Prettier 3.6: Experimental fast CLI and new OXC and Hermes plugins!"

3.5.3

🔗 Changelog

3.5.2

🔗 Changelog

3.5.1

🔗 Changelog

3.5.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.6.2

diff

Markdown: Add missing blank line around code block (#17675 by @​fisker)

<!-- Input -->
1. Some text, and code block below, with newline after code block
---
foo: bar


Another
List

<!-- Prettier 3.6.1 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List



<!-- Prettier 3.6.2 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List

3.6.1

diff

TypeScript: Allow const without initializer (#17650, #17654 by @​fisker)

// Input
</tr></table> 

... (truncated)

Commits

• 7a8b05f Release 3.6.2
• 46526b4 Add missing blank line around code block (#17675)
• a04ec11 chore(deps): update babel to v7.27.7 (#17684)
• 32be5b6 chore(deps): update dependency flow-parser to v0.274.1 (#17676)
• b55e777 Update docs about "TypeScript Configuration Files" (#17677)
• b197c99 chore(deps): update dependency @​vitejs/plugin-react to v4.6.0 (#17674)
• 1185f83 chore(deps): update dependency @​angular/compiler to v20.0.5 (#17680)
• aa1316f chore(deps): update dependency browserslist to v4.25.1 (#17671)
• c468d33 chore(deps): update dependency oxc-parser to v0.75.0 (#17672)
• 3f46d91 chore(deps): update dependency vite to v7 (#17673)
• Additional commits viewable in compare view

Updates turbo from 2.3.4 to 2.5.8

Release notes

Sourced from turbo's releases.

Turborepo v2.5.8

What's Changed

create-turbo

• fix: revert #10847 by @​anthonyshew in vercel/turborepo#10882

Changelog

• chore: add Cursor slash command by @​anthonyshew in vercel/turborepo#10881

Full Changelog: vercel/turborepo@v2.5.7...v2.5.8

Turborepo v2.5.8-canary.0

What's Changed

create-turbo

• fix: revert #10847 by @​anthonyshew in vercel/turborepo#10882

Changelog

• chore: add Cursor slash command by @​anthonyshew in vercel/turborepo#10881

Full Changelog: vercel/turborepo@v2.5.7...v2.5.8-canary.0

Turborepo v2.5.7

What's Changed

Docs

• docs: add TURBO_CONCURRENCY to options overview page by @​anthonyshew in vercel/turborepo#10772
• fix(docs): fix broken anchor links to --graph option by @​anthonyshew in vercel/turborepo#10773
• docs: clarify TURBO_TEAM secret usage by @​vikhyathdevadiga in vercel/turborepo#10795
• docs: add Buildkite example to CI Vendors documentation by @​AndrewDiMola in vercel/turborepo#10721
• docs: rework llms.txt and add .md responses by @​anthonyshew in vercel/turborepo#10811
• docs: add name field mention to migration page by @​anthonyshew in vercel/turborepo#10823
• docs: update configuration reference to use correct turbo.json title by @​xcfio in vercel/turborepo#10843
• docs: correct description of how ^ works by @​anthonyshew in vercel/turborepo#10865

create-turbo

• feat(create-turbo): --no-git flag by @​anthonyshew in vercel/turborepo#10720
• chore(create-turbo): fix lint by @​chris-olszewski in vercel/turborepo#10807
• fix(security): update dependencies to resolve warning for node-plop by @​anthonyshew in vercel/turborepo#10847

eslint

• docs: adjust typo on instructions for eslint-config-turbo legacy config by @​evsasse in vercel/turborepo#10717

@​turbo/repository

• chore: reformat code with 2024 edition by @​ognevny in vercel/turborepo#10775

Examples

• chore(deps-dev): bump the with-svelte group in /examples/with-svelte with 6 updates by @​dependabot[bot] in vercel/turborepo#10752
• chore(deps-dev): bump turbo from 2.5.5 to 2.5.6 in /examples/with-shell-commands by @​dependabot[bot] in vercel/turborepo#10781
• chore(deps-dev): bump @​sveltejs/kit from 2.27.3 to 2.31.1 in /examples/with-svelte in the with-svelte group by @​dependabot[bot] in vercel/turborepo#10780
• chore(deps-dev): bump @​next/eslint-plugin-next from 15.4.2 to 15.4.6 in /examples/with-tailwind by @​dependabot[bot] in vercel/turborepo#10779

... (truncated)

Commits

• 98fe819 publish 2.5.8 to registry
• 132cf58 release(turborepo): 2.5.8-canary.0 (#10883)
• adfdbb1 fix: revert #10847 (#10882)
• 157e277 chore: add Cursor slash command (#10881)
• 0a5070a release(turborepo): 2.5.7 (#10878)
• 1b512ec fix: sanitize logging prefix for GitLab groups (#10850)
• f5ff573 ci: update deprecated turbo setting (#10857)
• 9b85af0 fix: output valid turbo.json for prune with Boundaries definition (#10866)
• 2c6f798 docs: correct description of how ^ works (#10865)
• 7ea16e8 fix: add WINDIR to default passthroughs (#10868)
• Additional commits viewable in compare view

Updates typescript from 5.8.3 to 5.9.3

Release notes

Sourced from typescript's releases.

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)
• fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

• npm

TypeScript 5.9

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)

Downloads are available on:

• npm

TypeScript 5.9 RC

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).

Downloads are available on:

• npm

TypeScript 5.9 Beta

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement.

• fixed issues query for Typescript 5.9.0 (Beta).

Downloads are available on:

• npm

Commits

• c63de15 Bump version to 5.9.3 and LKG
• 8428ca4 🤖 Pick PR #62438 (Fix incorrectly ignored dts file fr...) into release-5.9 (#...
• a131cac 🤖 Pick PR #62351 (Add missing Float16Array constructo...) into release-5.9 (#...
• 0424333 🤖 Pick PR #62423 (Revert PR 61928) into release-5.9 (#62425)
• bdb641a 🤖 Pick PR #62311 (Fix parenthesizer rules for manuall...) into release-5.9 (#...
• 0d9b9b9 🤖 Pick PR #61978 (Restructure CI to prepare for requi...) into release-5.9 (#...
• 2dce0c5 Intentionally regress one buggy declaration output to an older version (#62163)
• 5be3346 Bump version to 5.9.2 and LKG
• ad825f2 Bump version to 5.9.1-rc and LKG
• 463a5bf Update LKG
• Additional commits viewable in compare view

Updates @prisma/client from 6.7.0 to 6.16.3

Release notes

Sourced from @​prisma/client's releases.

6.16.3

Today, we are issuing a 6.16.3 patch release focused on bug fixes.

🛠 Fixes

• Prisma Client (prisma-client generator): fixed missing JSON null type definitions (JsonNull, DbNull, AnyNull) in the browser.ts entrypoint. (prisma/prisma#28186)

• Prisma Migrate: don't add the default schema (namespace) to the generated migrations unless it was specified explicitly in the schema file. This restores the pre-6.13.0 behaviour that was inadvertently changed with enabling multi-schema support by default. Users who rely on database schemas for multi-tenancy can now again use the same migration files for all of their schemas. (prisma/prisma-engines#5614)

• Prisma Client: enabled negative take with findFirst again. (prisma/prisma-engines#5616 — contributed by @​jay-l-e-e)

• Prisma Accelerate: aligned the behaviour of the new Rust-free client with Query Engine to handle self-signed certificates consistently and ensure backward compatibility. (prisma/prisma#28134)

• @prisma/adapter-mariadb: fixed error event listeners leak. (prisma/prisma#28177 — contributed by @​Tiaansu)

⚠️ Known Limitation: JSON null types in browser builds

The fix introduces the missing types, but the singleton instances differ between the client and browser entrypoints of the generated client. This means that values like Prisma.JsonNull imported from browser cannot yet be assigned to fields expected from the client entrypoint, and vice versa. This results in confusing TypeScript errors if you mix them. A follow-up improvement is planned to unify these utility types across entrypoints.

6.16.2

Today, we are issuing a 6.16.2 patch release.

Bug fixes

• In Prisma ORM 6.16.0, we've enabled usage of the new engineType = client with Prisma Postgres, but our validation rules permitted invalid combinations of Prisma Postgres URLs and driver adapters. This now produces a clear error message indicating Prisma Postgres URLs and driver adapters are mutually exclusive.
• In the previous minor release, we've included a change that calls unref() on NodeJS timers to prevent them from keeping the NodeJS event loop active. This change unintentionally affected non-NodeJS runtimes like workerd, where it has resulted in runtime errors. This behavior has been made conditional to prevent these runtime errors.

6.16.1

Today, we are issuing a 6.16.1 patch release.

Bug fixes

• In Prisma ORM 6.16.0, the driverAdapters and queryCompiler features were stabilized, but leftover code in the prisma-client-ts generator required them to still be specified in edge runtimes. This has now been fixed, runtimes like workerd and vercel-edge no longer require these preview features.

6.16.0

Today, we are excited to share the 6.16.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Prisma ORM

This section contains all the updates made in Prisma ORM v6.16.0.

Rust-free ORM and driver adapters are Generally Available

Eight months ago, we published our ORM manifesto with the first hint that we're going to remove the Rust-based query engine from Prisma ORM:

We're addressing this by migrating Prisma's core logic from Rust to TypeScript and redesigning the ORM to make customization and extension easier.

After a lot of hard work and feedback from the community, we're incredibly excited to share that the migration has been completed and you can now use Prisma ORM without its Rust engine in your production apps. 🎉 This is a major milestone in the history of Prisma ORM and comes with a lot of benefits:

... (truncated)

Commits

• 898467b chore(deps): update engines to 6.16.1-1.bb420e667c1820a8c05a38023385f6cc7ef8e83a
• d8d68c0 test: update snapshots
• d8badff fix: correct accelerate validation (#28111)
• abfa3a6 feat(client): add /browser entrypoint to prisma-client (#28068)
• 5715816 fix(qpe): flip condition when choosing whether to enable itx manager (#28069)
• 898066a feat(client-generator-ts): removed "Prisma.Validator" from "prisma-client" ge...
• bc18826 fix(client): add apiKey method for Accelerate extension (#28067)
• 83cd003 feat(client-generator-ts): re-export enums directly in prisma-client genera...
• 38b3397 feat(client): remove node_modules caching check when generator has custom out...
• 9d1b883 feat(qc): stabilize driver adapters and the query compiler (#28046)
• Additional commits viewable in compare view

Updates @trpc/server from 11.0.0-rc.730 to 11.6.0

Release notes

Sourced from @​trpc/server's releases.

v11.6.0

What's Changed

• feat: add precondition required response code by @​y-nk in trpc/trpc#6954
• fix(client): httpBatchStreamLink in React Native "stream ends with TypeError" by @​KATT in trpc/trpc#6960

New Contributors

• @​elrion018 made their first contribution in trpc/trpc#6932

Full Changelog: trpc/trpc@v11.5.1...v11.6.0

v11.5.1

What's Changed

• fix(server): fix property in JSDoc by @​jansepke in trpc/trpc#6928
• fix(server): export DataTransformer interface marked as public by @​BhaskarKulshrestha in trpc/trpc#6927
• fix(client): omit content type header in GET requests by @​anatolzak in trpc/trpc#6914

New Contributors

• @​jansepke made their first contribution in trpc/trpc#6928
• @​BhaskarKulshrestha made their first contribution in trpc/trpc#6927
• @​Strajk made their first contribution in trpc/trpc#6912
• @​cademis made their first contribution in trpc/trpc#6908
• @​iboughtbed made their first contribution in trpc/trpc#6886

Full Changelog: trpc/trpc@v11.5.0...v11.5.1

v11.5.0

What's Changed

• patch: prefer Standard Schema for input/output type inference by @​dzhu in trpc/trpc#6888
• feat(server): expose procedure path in resolver options by @​KATT in trpc/trpc#6902

New Contributors

• @​mrlubos made their first contribution in trpc/trpc#6880
• @​dzhu made their first contribution in trpc/trpc#6888
• @​cristijigau made their first contribution in trpc/trpc#6894

Full Changelog: trpc/trpc@v11.4.4...v11.5.0

v11.4.4

What's Changed

• patch: typescript 5.9 support by @​KATT in trpc/trpc#6877
• fix(client): httpBatchLink with custom transformed object at top level by @​KATT in trpc/trpc#6878
• fix: incompatible types in monorepo due to separate .d.ts for esm/cjs by @​KATT in trpc/trpc#6879

New Contributors

• @​ARAldhafeeri made their first contribution in trpc/trpc#6857
• @​ebg1223 made their first contribution in trpc/trpc#6851
• @​0xlakshan made their first contribution in trpc/trpc#6869

... (truncated)

Commits

• See full diff in compare view

Updates bcryptjs from 3.0.0 to 3.0.2

Release notes

Sourced from bcryptjs's releases.

v3.0.2

Bug fixes

• Use upstream fix to emit interop helpers (28e510389374f5736c447395443d4a6687325048)

v3.0.1

Bug fixes

• Separate ESM and UMD type definitions (e7055caf0c723cbcf8bc3f0784b8c30ee332380f)

Commits

• 28e5103 fix: Use upstream fix to emit interop helpers
• e7055ca fix: Separate ESM and UMD type definitions
• See full diff in compare view

Updates csv-parse from 5.6.0 to 6.1.0

Changelog

Sourced from csv-parse's changelog.

6.1.0 (2025-07-16)

Features

• csv-parse: add generic type argument (#457) (ef71342), closes #278 #407
• csv-parse: boolean and null comment type (b9ac1f0)
• csv-parse: callback records defined type (3d4f225)
• csv-parse: casting context raw export (a26f5d7)
• csv-parse: input as Uint8Array (fix #458) (24af461)
• csv-parse: normailzsed options type (da7a62e)
• csv-parse: normalize_options export (9056293)
• csv-parse: null comment_no_infix type (d8bf4fd)
• csv-parse: on_skip catch thrown error (987a3a9)
• csv-parse: use ts unknown instead of any when possible (a47badf)

Bug Fixes

• csv-parse: normalized columns with auto-detected bom (fix #460) (4abcc44)

6.0.0 (2025-07-10)

⚠ BREAKING CHANGES

• csv-parse: rename group_columns_by_name option
• csv-parse: rename RECORD_INCONSISTENT_FIELDS_LENGTH
• csv-parse: rename RECORD_DONT_MATCH_COLUMNS_LENGTH
• csv-parse: rename skip_records_with_error
• csv-parse: rename skip_records_with_empty_values
• csv-parse: rename relax to relax_quotes

Features

• backport support for node 14 (dbfeb78)
• backward support for node 8 (496231d)
• csv-parse: add columns property in Info object type (#390) (2dd2a92)
• csv-parse: add generic type argument (#457) (ef71342), closes #278 #407
• csv-parse: boolean and null comment type (b9ac1f0)
• csv-parse: callback records defined type (3d4f225)
• csv-parse: cast_date as a function (fix #342) (2807d29)
• csv-parse: casting context raw export (a26f5d7)
• csv-parse: implement TransformStream (#445) (1213de8)
• csv-parse: improve record_delimiter validation (67b7da8)
• csv-parse: input as Uint8Array (fix #458) (24af461)
• csv-parse: new comment_no_infix option (fix #325) (caca5c3)
• csv-parse: normailzsed options type (da7a62e)
• csv-parse: normalize_options export (9056293)
• csv-parse: null comment_no_infix type (d8bf4fd)
• csv-parse: objname index (015b936)
• csv-parse: on_skip catch thrown error (987a3a9)
• csv-parse: skip_line_with_errors used with raw print current buffer (fix #292) (2741990)

... (truncated)

Commits

• c0e42c9 chore(release): publish
• 4abcc44 fix(csv-parse): normalized columns with auto-detected bom (fix #460)
• d6b53b3 chore(release): publish
• e3923c3 test(csv-parse): update legacy exclusion list
• a47badf feat(csv-parse): use ts unknown instead of any when possible
• 24af461 feat(csv-parse): input as Uint8Array (fix #458)
• 388daf8 test(csv-parse): api ts conversion
• e85beb3 refactor(csv-parse): re-order error codes
• cf96584 test(csv-parse): options ts convertion
• da7a62e feat(csv-parse): normailzsed options type
• Additional commits viewable in compare view

Updates dayjs from 1.11.13 to 1.11.18

Release notes

Sourced from dayjs's releases.

v1.11.18

1.11.18 (2025-08-30)

Bug Fixes

• error semantic-release dependency (8cfb313)

v1.11.17

1.11.17 (2025-08-29)

Bug Fixes

• [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

v1.11.16

1.11.16 (2025-08-29)

Bug Fixes

• test release workflow (no code changes) (c38c428)

v1.11.15

1.11.15 (2025-08-28)

Bug Fixes

• Fix misspellings in Irish or Irish Gaelic [ga] (#2861) (9c14a42)

v1.11.14

1.11.14 (2025-08-27)

Bug Fixes

• .utcOffset(0, true) result and its clone are different bug (#2505) (fefdcd4)

Changelog

Sourced from dayjs's changelog.

1.11.18 (2025-08-30)

Bug Fixes

• error semantic-release dependency (8cfb313)

1.11.17 (2025-08-29)

Bug Fixes

• [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

1.11.16 (2025-08-29)

Bug Fixes

• test release workflow (no code changes) (c38c428)

1.11.15 (2025-08-28)

Bug Fixes

• Fix misspellings in Irish or Irish Gaelic [ga] (#2861) (9c14a42)

1.11.14 (2025-08-27)

Bug Fixes

• .utcOffset(0, true) result and its clone are different bug (#2505) (fefdcd4)

Commits

• 9beb3f3 chore(release): 1.11.18 [skip ci]
• d72d0cf Merge pull request #2925 from iamkun/dev
• 9be50d5 chore: update workflow
• 8cfb313 fix: error semantic-release dependency
• b9815f9 chore: update workflow
• 7fcf939 chore(release): 1.11.17 [skip ci]
• b832bab d2m (#2922)
• 1b95ecd fix: [en-AU] locale use the same ordinal as moment (#2878)
• 5465380 chore: update .npmignore
• fcdbc82 chore: update workflow debug @​semantic-release/github
• Additional commits viewable in compare view

Updates dotenv from 16.4.7 to 16.6.1

Changelog

Sourced from dotenv's changelog.

16.6.1 (2025-06-27)

Changed

• Default quiet to true – hiding the runtime log message (#874)
• NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
• And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@dotenvx/dotenvx').config().

16.6.0 (2025-06-26)

Added

• Default log helpful message [[email protected]] injecting env (1) from .env (#870)
• Use { quiet: true } to suppress
• Aligns dotenv more closely with dotenvx.

16.5.0 (2025-04-07)

Added

• 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP] Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

• Remove _log method. Use _debug #862

Commits

• 076ba3b 16.6.1
• 8867fe0 changelog 🪵
• 424c32d Merge pull request #874 from motdotla/default-quiet-to-true
• 5270faf changelog 🪵
• 86ce001 force failure of path.relative in test
• e6799e6 add tests
• ec72534 add to test coverage
• c886084 send coverage to text as well
• a791032 add test
• fa67c02 test quiet: false
• Additional commits viewable in compare view

Updates express from 4.21.2 to 5.1.0

Release notes

Sourced from express's releases.

v5.1.0

What's Changed

• Update captains by @​UlisesGascon in expressjs/express#6027
• build: Node.js 23.0 by @​bjohansebas in expressjs/express#6075
• Add funding field (v5) by @​bjohansebas in expressjs/express#6064
• ✅ add discarded middleware test by @​ctcpip in expressjs/express#5819
• update homepage link http to https by @​bjohansebas in expressjs/express#5920
• Improve readme by @​bjohansebas in expressjs/express#5994
• Add bjohansebas as repo captain for expressjs.com by @​crandmck in expressjs/express#6058
• Remove Object.setPrototypeOf polyfill by @​Phillip9587 in expressjs/express#6081
• fix(buffer): use node:buffer instead of safe-buffer by @​bhavya3024 in expressjs/express#6071
• docs: Add DCO by @​UlisesGascon in expressjs/express#6048
• cleanup: remove promise support check from tests by @​Phillip9587 in expressjs/express#6148
• Use loop for acceptParams by @​blakeembrey in expressjs/express#6066
• Improve documentation step in release process by @​bjohansebas in expressjs/express#6150
• cleanup: remove unnecessary require for global Buffer by @​Phillip9587 in expressjs/express#6146
• cleanup: remove AsyncLocalStorage check by @​Phillip9587 in expressjs/express#6147
• update history.md for acceptParams change by @​jonchurch in expressjs/express#6177
• docs: add @​rxmarbles to the triage team by @​UlisesGascon in expressjs/express#6151
• refactor: improve readability by @​sazk07 in expressjs/express#6173
• docs: clarify the security process in the triage role by @​bjohansebas in expressjs/express#6217
• chore: replace methods dependency with standard library by @​jonkoops in expressjs/express#6196
• Remove utils-merge dependency - use spread syntax instead by @​Phillip9587 in expressjs/express#6091
• fix(securite): fix vulnerabilities by @​Abdel-Monaam-Aouini in expressjs/express#6211
• refactor: prefix built-in node module imports by @​slagiewka in expressjs/express#6236
• fix: remove download size badges by @​wesleytodd in expressjs/express#6266
• Remove unused depd dependency by @​jonkoops in expressjs/express#6197
• fix: usage of Invalid action input 'persist-credentials' for actions/setup-node@v4 in ci.yml by @​hamirmahal in expressjs/express#6256
• Add support for OSSF scorecard reporting by @​UlisesGascon in expressjs/express#5431
• docs: add @​Phillip9587 to the triage team by @​bjohansebas in expressjs/express#6276
• fix: added a missing semicolon in css styles in examples/auth by @​pr4j3sh in expressjs/express#6297
• docs: include team email in the security policy by @​UlisesGascon in expressjs/express#6278
• refactor: simplify normalizeTypes function by @​Ayoub-Mabrouk in expressjs/express#6097
• ci: updated github actions ci workflow by @​Phillip9587 in expressjs/express#6314
• ci: fix npm install --include typo by @​Phillip9587 in expressjs/express#6324
• ci: updated scorecard actions by @​Phillip9587 in expressjs/express#6322
• build(deps): use carat notation for dependency versions by @​dpopp07 in expressjs/express#6317
• chore(deps): update debug to ^4.4.0 by @​Phillip9587 in expressjs/express#6313
• docs: retroactively note 5.0.0-beta.1 api change in history file by

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
letter-space-docs	Ready	Preview	Comment	Oct 6, 2025 3:15pm
letter-space-landing-page	Error			Oct 6, 2025 3:15pm

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Note

Free review on us!

CodeRabbit is offering free reviews until Wed Oct 08 2025 to showcase some of the refinements we've made.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}