chore(deps-dev): bump the dev-dependencies group across 1 directory with 11 updates by dependabot[bot] · Pull Request #170 · mediar-ai/web

dependabot · 2026-06-04T02:58:59Z

Bumps the dev-dependencies group with 11 updates in the / directory:

Package	From	To
@clerk/backend	`2.33.5`	`3.5.0`
@types/jest	`29.5.14`	`30.0.0`
@types/node	`20.19.41`	`25.9.1`
@types/uuid	`10.0.0`	`11.0.0`
eslint	`9.39.4`	`10.4.1`
eslint-config-next	`15.5.19`	`16.2.7`
jest	`29.7.0`	`30.4.2`
jest-environment-node	`29.7.0`	`30.4.1`
typescript	`5.9.3`	`6.0.3`
jsdom	`28.1.0`	`29.1.1`
lint-staged	`16.4.0`	`17.0.7`

Updates @clerk/backend from 2.33.5 to 3.5.0

Release notes

Sourced from @clerk/backend's releases.

@clerk/backend@3.5.0

Minor Changes

Add support for new Backend API user endpoints: (#8694) by @dmoerner

users.replaceUserEmailAddress(userId, { emailAddress }) replaces all of a user's email addresses with a single verified, primary email address (PUT /users/{user_id}/email_address).

users.replaceUserPhoneNumber(userId, { phoneNumber }) replaces all of a user's phone numbers with a single verified, primary phone number (PUT /users/{user_id}/phone_number).

users.createUser now accepts banned and locked parameters to create a user that is already banned or locked.

Patch Changes

Emit the "session token from cookie is missing the azp claim" warning once per process instead of on every authenticated request. An azp-less cookie token is reused across requests, so the previous unguarded console.warn could flood production logs. (#8698) by @jacekradko

Stop authenticateRequest from consuming the incoming request body, which previously left downstream handlers unable to read it (for example a Hono POST route calling c.req.json()). (#8708) by @jacekradko

Prevent keyless mode from activating in CI and other automated environments in framework SDKs. (#8676) by @mwickett

Preserve custom claims when verifying JWT-format M2M tokens. M2MToken.fromJwtPayload previously hardcoded claims to null, so client.m2m.verify() (and request-level auth()) dropped any custom claims embedded in the token. Custom claims are now reconstructed from the verified payload by stripping only the structural claims the backend adds when minting the token (iss, sub, exp, nbf, iat, jti). User-supplied claims such as aud are preserved. Tokens without custom claims still return claims: null, consistent with the opaque-token path. (#8697) by @jacekradko

Strip private_metadata from the backend resource _raw payload in stripPrivateDataFromObject, preventing it from leaking into __clerk_ssr_state when a User/Organization resource is passed to buildClerkProps. (#8702) by @dominic-clerk

Updated dependencies [afb75e6, c3df67a, 86fd38f, 8d6bb56, 43dfefa, 5fc7b21, c2ba134]:

@clerk/shared@4.15.0

@clerk/backend@3.4.14

Patch Changes

Updated dependencies [79cdd1f, 4d5027b, 4e08924, bcf0e77]:

@clerk/shared@4.14.0

Changelog

Sourced from @clerk/backend's changelog.

3.5.0

Minor Changes

Add support for new Backend API user endpoints: (#8694) by @dmoerner

users.replaceUserEmailAddress(userId, { emailAddress }) replaces all of a user's email addresses with a single verified, primary email address (PUT /users/{user_id}/email_address).

users.replaceUserPhoneNumber(userId, { phoneNumber }) replaces all of a user's phone numbers with a single verified, primary phone number (PUT /users/{user_id}/phone_number).

users.createUser now accepts banned and locked parameters to create a user that is already banned or locked.

Patch Changes

Emit the "session token from cookie is missing the azp claim" warning once per process instead of on every authenticated request. An azp-less cookie token is reused across requests, so the previous unguarded console.warn could flood production logs. (#8698) by @jacekradko

Stop authenticateRequest from consuming the incoming request body, which previously left downstream handlers unable to read it (for example a Hono POST route calling c.req.json()). (#8708) by @jacekradko

Prevent keyless mode from activating in CI and other automated environments in framework SDKs. (#8676) by @mwickett

Preserve custom claims when verifying JWT-format M2M tokens. M2MToken.fromJwtPayload previously hardcoded claims to null, so client.m2m.verify() (and request-level auth()) dropped any custom claims embedded in the token. Custom claims are now reconstructed from the verified payload by stripping only the structural claims the backend adds when minting the token (iss, sub, exp, nbf, iat, jti). User-supplied claims such as aud are preserved. Tokens without custom claims still return claims: null, consistent with the opaque-token path. (#8697) by @jacekradko

Strip private_metadata from the backend resource _raw payload in stripPrivateDataFromObject, preventing it from leaking into __clerk_ssr_state when a User/Organization resource is passed to buildClerkProps. (#8702) by @dominic-clerk

Updated dependencies [afb75e6, c3df67a, 86fd38f, 8d6bb56, 43dfefa, 5fc7b21, c2ba134]:

@clerk/shared@4.15.0

3.4.14

Patch Changes

Updated dependencies [79cdd1f, 4d5027b, 4e08924, bcf0e77]:

@clerk/shared@4.14.0

3.4.13

Patch Changes

Updated dependencies [a036ce8]:

@clerk/shared@4.13.1

3.4.12

Patch Changes

Updated dependencies [6eaf4d6, 1aab31e]:

@clerk/shared@4.13.0

3.4.11

Patch Changes

Adds agentTaskId and deprecates taskId to Agent Tasks Create response. (#8013) by @tmilewski

... (truncated)

Commits

c9d9e6a ci(repo): Version packages (#8679)
86fd38f fix(repo): harden keyless accountless requests (#8676)
fb184de fix(backend): strip private_metadata from resource _raw in SSR sanitizer (#8702)
ff0cfef fix(backend): stop authenticateRequest from consuming the request body (#8708)
be55c4e fix(backend): preserve custom claims when verifying JWT M2M tokens (#8697)
1701e0f feat(backend): Support recent BAPI users and email/phone features (#8694)
1c42351 fix(backend): warn once for azp-less cookie token instead of per request (#8698)
bbbe654 ci(repo): Version packages (#8635)
0796911 docs(backend,expo,nextjs): Fix broken BAPI links in JSDoc comments (#8655)
1fc2a2e chore(repo): Discord (support → community), X, and support email updates (#8650)
Additional commits viewable in compare view

Updates @types/jest from 29.5.14 to 30.0.0

Commits

See full diff in compare view

Updates @types/node from 20.19.41 to 25.9.1

Commits

See full diff in compare view

Updates @types/uuid from 10.0.0 to 11.0.0

Commits

See full diff in compare view

Updates eslint from 9.39.4 to 10.4.1

Release notes

Sourced from eslint's releases.

v10.4.1

Bug Fixes

e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930) (Francesco Trotta)

d4ce898 fix: propagate failures from delegated commands (#20917) (Minh Vu)

f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916) (kuldeep kumar)

c5bc78b fix: false positive for reference in finally block (#20655) (Tanuj Kanti)

27538c0 fix: add missing CodePath and CodePathSegment types (#20853) (Pixel998)

Documentation

61b0add docs: remove deprecated rule from related rules of max-params (#20921) (Tanuj Kanti)

305d5b9 docs: remove deprecated rules from related rules section (#20911) (Tanuj Kanti)

49b0202 docs: fix display: none of ad (#20901) (Tanuj Kanti)

9067f94 docs: switch build to Node.js 24 (#20893) (Milos Djermanovic)

c91b041 docs: Update README (GitHub Actions Bot)

e349265 docs: clarify semver strings in rule deprecation objects (#20885) (Milos Djermanovic)

Chores

b0e466b test: add data property to invalid tests cases for rules (#20924) (Tanuj Kanti)

f78838b test: add CodePath type coverage (#20904) (Pixel998)

1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20922) (Francesco Trotta)

002942c ci: declare contents:read on update-readme workflow (#20919) (Arpit Jain)

64bca24 chore: update ecosystem plugins (#20912) (ESLint Bot)

6d7c832 chore: ignore fflate updates in renovate (#20908) (Pixel998)

b2c8638 ci: bump pnpm/action-setup from 6.0.7 to 6.0.8 (#20889) (dependabot[bot])

a9b8d7f chore: increase maxBuffer for ecosystem tests (#20881) (sethamus)

b702ead chore: update ecosystem update PR settings (#20884) (Pixel998)

507f60e chore: update ecosystem plugins (#20882) (ESLint Bot)

92f5c5b test: add unit test for message-count (#20878) (kuldeep kumar)

df32108 chore: add @eslint/markdown and typescript-eslint ecosystem tests (#20837) (sethamus)

327f91d chore: use includeIgnoreFile internally (#20876) (Kirk Waiblinger)

f0dc4bd chore: pin fflate@0.8.2 (#20877) (Milos Djermanovic)

0f4bd25 ci: run Discord alert for ecosystem test failures (#20873) (Copilot)

v10.4.0

Features

1a45ec5 feat: check sequence expressions in for-direction (#20701) (kuldeep kumar)

450040b feat: add includeIgnoreFile() to eslint/config (#20735) (Kirk Waiblinger)

Bug Fixes

544c0c3 fix: escape code path DOT labels in debug output (#20866) (Pixel998)

6799431 fix: update dependency @eslint/config-helpers to ^0.6.0 (#20850) (renovate[bot])

f078fef fix: handle non-array deprecated rule replacements (#20825) (xbinaryx)

Documentation

7e52a71 docs: add mention of @eslint-react/eslint-plugin (#20869) (Pavel)

db3468b docs: tweak wording around ambiguous CJS-vs-ESM config (#20865) (Kirk Waiblinger)

9084664 docs: Update README (GitHub Actions Bot)

9cc7387 docs: Update README (GitHub Actions Bot)

3d7b548 docs: Update README (GitHub Actions Bot)

191ec3c docs: Update README (GitHub Actions Bot)

... (truncated)

Commits

4a3d15a 10.4.1
43e7e2b Build: changelog update for 10.4.1
e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930)
b0e466b test: add data property to invalid tests cases for rules (#20924)
d4ce898 fix: propagate failures from delegated commands (#20917)
f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916)
f78838b test: add CodePath type coverage (#20904)
61b0add docs: remove deprecated rule from related rules of max-params (#20921)
1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20...
002942c ci: declare contents:read on update-readme workflow (#20919)
Additional commits viewable in compare view

Updates eslint-config-next from 15.5.19 to 16.2.7

Release notes

Sourced from eslint-config-next's releases.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)

[backport] Propagate adapter preferred regions (#94200)

[16.2.x] Don't drop FormData entries (#94240)

[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

v16.2.6

[!NOTE] This release contains security fixes and backported bug fixes. It does not include all pending features/changes on canary.

Security Fixes

The following advisories have been addressed:

High:

GHSA-8h8q-6873-q5fj: Denial of Service with Server Components

GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

GHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components

GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection

GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades

GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

GHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces

GHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input

GHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API

GHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses

Low:

GHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting

GHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned

... (truncated)

Commits

9bd3c26 v16.2.7
ee6e79b v16.2.6
766148f v16.2.5
2275bd8 v16.2.4
d5f649b v16.2.3
52faae3 v16.2.2
ed7d2ce v16.2.1
c5c94df v16.2.0
3683192 v16.2.0-canary.104
6689814 v16.2.0-canary.103
Additional commits viewable in compare view

Updates jest from 29.7.0 to 30.4.2

Release notes

Sourced from jest's releases.

v30.4.2

Fixes

[jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

Full Changelog: jestjs/jest@v30.4.1...v30.4.2

v30.4.1

Features

[jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

[jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

Full Changelog: jestjs/jest@v30.4.0...v30.4.1

v30.4.0

Big release! 😀

Main feature is a rewrite of our custom runtime in preparation for stabilisation of native support of ESM. As part of that work require(esm) module is now supported on Node 24.9+ (still requires --experimental-vm-modules like before).

In addition we now support fake timers for the recently released Temporal API in Node v26.

React 19 is also supported properly in pretty-format, meaning snapshots of React components now work like they should.

Due to all the changes, there might be regressions that snuck in. Please report them!

Full list of changes below

Features

[babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)

[jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)

[jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)

[jest-config] Add support for jest.config.mts as a valid configuration file (#16005)

[jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)

[@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)

[@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)

[@jest/fake-timers] Support faking Temporal.Now.* (#16131)

[jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)

[jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)

[jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)

[jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)

[jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)

[@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)

[jest-util] Add isError helper (#16076)

... (truncated)

Changelog

Sourced from jest's changelog.

30.4.2

Fixes

[jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

30.4.1

Features

[jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

[jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

30.4.0

Features

[babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)

[jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)

[jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)

[jest-config] Add support for jest.config.mts as a valid configuration file (#16005)

[jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)

[@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)

[@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)

[@jest/fake-timers] Support faking Temporal.Now.* (#16131)

[jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)

[jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)

[jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)

[jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)

[jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)

[@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)

[jest-util] Add isError helper (#16076)

[pretty-format] Support React 19 (#16123)

Fixes

[expect-utils] Fix toStrictEqual failing on structuredClone results due to cross-realm constructor mismatch (#15959)

[@jest/expect-utils] Prevent toMatchObject/subset matching from throwing when encountering exotic iterables (#15952)

[fake-timers] Convert Date to milliseconds before passing to @sinonjs/fake-timers (#16029)

[jest] Export GlobalConfig and ProjectConfig TypeScript types (#16132)

[jest-circus] Prevent crash when asyncError is undefined for non-Error throws (#16003)

[jest-circus, jest-jasmine2] Include Error.cause in JSON failureMessages output (#15967)

[jest-config] Fix preset path resolution on Windows when the preset uses subpath exports (#15961)

[jest-config] Allow collectCoverage and coverageProvider in project config without a validation warning (#16132)

[jest-config] Project config validator now emits "is not supported in an individual project configuration" instead of "probably a typing mistake" for known global-only options (#16132)

[jest-environment-node] Fix --localstorage-file warning on Node 25+ (#16086)

[jest-reporters] Apply global coverage threshold to unmatched pattern files in addition to glob/path thresholds (#16137)

... (truncated)

Commits

746f2a0 v30.4.2
b3b4a09 v30.4.1
5cbb21e v30.4.0
db7141a fix: allow collectCoverage and coverageProvider in project config (#16132)
efb59c2 v30.3.0
96c53d3 feat(jest-config): add defineConfig and mergeConfig functions (#15844)
855864e v30.2.0
da9b532 v30.1.3
ebfa31c v30.1.2
d347c0f v30.1.1
Additional commits viewable in compare view

Updates jest-environment-node from 29.7.0 to 30.4.1

Release notes

Sourced from jest-environment-node's releases.

v30.4.1

Features

[jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

[jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

Full Changelog: jestjs/jest@v30.4.0...v30.4.1

v30.4.0

Big release! 😀

Main feature is a rewrite of our custom runtime in preparation for stabilisation of native support of ESM. As part of that work require(esm) module is now supported on Node 24.9+ (still requires --experimental-vm-modules like before).

In addition we now support fake timers for the recently released Temporal API in Node v26.

React 19 is also supported properly in pretty-format, meaning snapshots of React components now work like they should.

Due to all the changes, there might be regressions that snuck in. Please report them!

Full list of changes below

Features

[babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)

[jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)

[jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)

[jest-config] Add support for jest.config.mts as a valid configuration file (#16005)

[jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)

[@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)

[@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)

[@jest/fake-timers] Support faking Temporal.Now.* (#16131)

[jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)

[jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)

[jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)

[jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)

[jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)

[@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)

[jest-util] Add isError helper (#16076)

[pretty-format] Support React 19 (#16123)

Fixes

[expect-utils] Fix toStrictEqual failing on structuredClone results due to cross-realm constructor mismatch (#15959)

[@jest/expect-utils] Prevent toMatchObject/subset matching from throwing when encountering exotic iterables (#15952)

[fake-timers] Convert Date to milliseconds before passing to @sinonjs/fake-timers (#16029)

[jest] Export GlobalConfig and ProjectConfig TypeScript types (#16132)

... (truncated)

Changelog

Sourced from jest-environment-node's changelog.

30.4.1

Features

[jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

[jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

30.4.0

Features

[babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)

[jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)

[jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)

[jest-config] Add support for jest.config.mts as a valid configuration file (#16005)

[jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)

[@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)

[@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)

[@jest/fake-timers] Support faking Temporal.Now.* (#16131)

[jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)

[jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)

[jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)

[jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)

[jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)

[@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)

[jest-util] Add isError helper (#16076)

[pretty-format] Support React 19 (#16123)

Fixes

[expect-utils] Fix toStrictEqual failing on structuredClone results due to cross-realm constructor mismatch (#15959)

[@jest/expect-utils] Prevent toMatchObject/subset matching from throwing when encountering exotic iterables (#15952)

[fake-timers] Convert Date to milliseconds before passing to @sinonjs/fake-timers (#16029)

[jest] Export GlobalConfig and ProjectConfig TypeScript types (#16132)

[jest-circus] Prevent crash when asyncError is undefined for non-Error throws (#16003)

[jest-circus, jest-jasmine2] Include Error.cause in JSON failureMessages output (#15967)

[jest-config] Fix preset path resolution on Windows when the preset uses subpath exports (#15961)

[jest-config] Allow collectCoverage and coverageProvider in project config without a validation warning (#16132)

[jest-config] Project config validator now emits "is not supported in an individual project configuration" instead of "probably a typing mistake" for known global-only options (#16132)

[jest-environment-node] Fix --localstorage-file warning on Node 25+ (#16086)

[jest-reporters] Apply global coverage threshold to unmatched pattern files in addition to glob/path thresholds (#16137)

[jest-reporters, jest-runner, jest-runtime, jest-transform] Fix coverage report not showing correct code coverage when using projects config option (#16140)

[jest-runtime] Resolve expect and @jest/expect from the internal module registry so test-file imports share the same JestAssertionError as the global expect (#16130)

[jest-runtime] Improve CJS-from-ESM interop: __esModule/Babel default unwrap, broader named-export coverage, and shared CJS singleton across importers (#16050)

[jest-runtime] Load .js files with ESM syntax but no "type":"module" marker as native ESM (Description has been truncated

…ith 11 updates Bumps the dev-dependencies group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@clerk/backend](https://github.com/clerk/javascript/tree/HEAD/packages/backend) | `2.33.5` | `3.5.0` | | [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.14` | `30.0.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.41` | `25.9.1` | | [@types/uuid](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/uuid) | `10.0.0` | `11.0.0` | | [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.4.1` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `15.5.19` | `16.2.7` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.4.2` | | [jest-environment-node](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-node) | `29.7.0` | `30.4.1` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` | | [jsdom](https://github.com/jsdom/jsdom) | `28.1.0` | `29.1.1` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.4.0` | `17.0.7` | Updates `@clerk/backend` from 2.33.5 to 3.5.0 - [Release notes](https://github.com/clerk/javascript/releases) - [Changelog](https://github.com/clerk/javascript/blob/main/packages/backend/CHANGELOG.md) - [Commits](https://github.com/clerk/javascript/commits/@clerk/backend@3.5.0/packages/backend) Updates `@types/jest` from 29.5.14 to 30.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) Updates `@types/node` from 20.19.41 to 25.9.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/uuid` from 10.0.0 to 11.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/uuid) Updates `eslint` from 9.39.4 to 10.4.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.4.1) Updates `eslint-config-next` from 15.5.19 to 16.2.7 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.2.7/packages/eslint-config-next) Updates `jest` from 29.7.0 to 30.4.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest) Updates `jest-environment-node` from 29.7.0 to 30.4.1 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.1/packages/jest-environment-node) Updates `typescript` from 5.9.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) Updates `jsdom` from 28.1.0 to 29.1.1 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v28.1.0...v29.1.1) Updates `lint-staged` from 16.4.0 to 17.0.7 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.4.0...v17.0.7) --- updated-dependencies: - dependency-name: "@clerk/backend" dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@types/jest" dependency-version: 30.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@types/node" dependency-version: 25.9.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@types/uuid" dependency-version: 11.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: eslint dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: eslint-config-next dependency-version: 16.2.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: jest dependency-version: 30.4.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: jest-environment-node dependency-version: 30.4.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: jsdom dependency-version: 29.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: lint-staged dependency-version: 17.0.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-04T02:59:00Z

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-06-04T02:59:02Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
mediar-web-app	Error		Jun 4, 2026 2:59am

vercel Bot had a problem deploying to Preview June 4, 2026 02:59 Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump the dev-dependencies group across 1 directory with 11 updates#170

chore(deps-dev): bump the dev-dependencies group across 1 directory with 11 updates#170
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-8cdac5396a

dependabot Bot commented on behalf of github Jun 4, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 4, 2026

Uh oh!

vercel Bot commented Jun 4, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​clerk/backend@​3.5.0

Minor Changes

Patch Changes

@​clerk/backend@​3.4.14

Patch Changes

3.5.0

Minor Changes

Patch Changes

3.4.14

Patch Changes

3.4.13

Patch Changes

3.4.12

Patch Changes

3.4.11

Patch Changes

v10.4.1

Bug Fixes

Documentation

Chores

v10.4.0

Features

Bug Fixes

Documentation

v16.2.7

Core Changes

Credits

v16.2.6

Security Fixes

v30.4.2

Fixes

v30.4.1

Features

Fixes

v30.4.0

Features

30.4.2

Fixes

30.4.1

Features

Fixes

30.4.0

Features

Fixes

v30.4.1

Features

Fixes

v30.4.0

Features

Fixes

30.4.1

Features

Fixes

30.4.0

Features

Fixes

Uh oh!

dependabot Bot commented on behalf of github Jun 4, 2026

Labels

Uh oh!

vercel Bot commented Jun 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 4, 2026 •

edited

Loading

`@clerk/backend@3`.5.0

`@clerk/backend@3`.4.14

vercel Bot commented Jun 4, 2026 •

edited

Loading