fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@prisma/client (source)	^5.19.1 -> ^5.21.0					dependencies	minor
@types/node (source)	^20.16.5 -> ^20.16.12					devDependencies	patch
docker/build-push-action	v6.7.0 -> v6.9.0					action	minor
docker/setup-buildx-action	v3.6.1 -> v3.7.1					action	minor
eslint (source)	^9.11.0 -> ^9.12.0					devDependencies	minor
prisma (source)	^5.19.1 -> ^5.21.0					devDependencies	minor
tslib (source)	^2.7.0 -> ^2.8.0					dependencies	minor

---

Release Notes

prisma/prisma (@​prisma/client)

v5.21.0

Compare Source

Today, we are excited to share the 5.21.0 release 🎉

🌟 Help us spread the word about Prisma by starring the repo ☝️ or posting on X about the release.

Highlights

Better support for tracing in MongoDB

The tracing Preview feature now has full support for MongoDB with previously missing functionality now implemented. This is a part of the ongoing effort to stabilize this Preview feature and release it in General Availability.

tracing is a Preview feature that enables built-in support for OpenTelemetry instrumentation inside the Prisma Client and provides deep insights into the performance and timing of your queries. See our documentation for more information.

For an easy to use and zero-configuration tracing instrumentation tool with a dashboard that provides an overview of your queries, statistics, and AI-powered recommendations, try Prisma Optimize.

WebAssembly engine size decrease for edge functions

Due to recent changes, some users experienced a steep increase of the bundle size in Prisma 5.20 when using the driverAdapters Preview feature, going over the 1 MB limit on the free tier of Cloudflare Workers. This has now been fixed.

Fixes and improvements

Prisma Engines

• Avoid regex crate for wasm bundle size (to keep cloudflare free plan)

Credits

Huge thanks to @​austin-tildei, @​LucianBuzzo, @​mcuelenaere, @​pagewang0, @​key-moon, @​pranayat, @​yubrot, @​skyzh for helping!

v5.20.0

Compare Source

🌟 Help us spread the word about Prisma by starring the repo or posting on X about the release. 🌟

Highlights

strictUndefinedChecks in Preview

With Prisma ORM 5.20.0, the Preview feature strictUndefinedChecks will disallow any value that is explicitly undefined and will be a runtime error. This change is direct feedback from this GitHub issue and follows our latest proposal on the same issue.

To demonstrate the change, take the following code snippet:

prisma.table.deleteMany({
  where: {
    // If `nullableThing` is nullish, this query will remove all data.
    email: nullableThing?.property,
  }
})

In Prisma ORM 5.19.0 and below, this could result in unintended behavior. In Prisma ORM 5.20.0, if the strictUndefinedChecks Preview feature is enabled, you will get a runtime error instead:

Invalid \`prisma.user.findMany()\` invocation in
/client/tests/functional/strictUndefinedChecks/test.ts:0:0
  XX })
  XX 
  XX test('throws on undefined input field', async () => {
→ XX   const result = prisma.user.deleteMany({
         where: {
           email: undefined
                  ~~~~~~~~~
         }
       })
Invalid value for argument \`where\`: explicitly \`undefined\` values are not allowed."

We have also introduced the Prisma.skip symbol, which will allow you to get the previous behavior if desired.

prisma.table.findMany({
  where: {
    // Use Prisma.skip to skip parts of the query
    email: nullableEmail ?? Prisma.skip
  }
})

From Prisma ORM 5.20.0 onward, we recommend enabling strictUndefinedChecks, along with the TypeScript compiler option exactOptionalPropertyTypes, which will help catch cases of undefined values at compile time. Together, these two changes will help protect your Prisma queries from potentially destructive behavior.

strictUndefinedChecks will be a valid Preview feature for the remainder of Prisma ORM 5. With our next major version, this behavior will become the default and the Preview feature will be “graduated” to Generally Available.

If you have any questions or feedback about strictUndefinedChecks, please ask/comment in our dedicated Preview feature GitHub discussion.

typedSql bug fix

Thank you to everyone who has tried out our typedSql Preview feature and provided feedback! This release has a quick fix for typescript files generated when Prisma Schema enums had hyphens.

Fixes and improvements

Prisma

• Prisma incorrectly parses CRDB's FK constraint error as not available.
• Invalid TypeScript files created by generate when typedSql is enabled and enum contains hyphens.
• @prisma/internals didn't list ts-toolbelt in dependencies.
• using $extends prevents model comments from being passed to TypeScript

Prisma Engines

• Planetscale engine tests: interactive_tx
• Fix broken engine size publishing workflow

Credits

Huge thanks to @​mcuelenaere, @​pagewang0, @​key-moon, @​pranayat, @​yubrot, @​thijmenjk, @​mydea, @​HRM, @​haaawk, @​baileywickham, @​brian-dlee, @​nickcarnival, @​eruditmorina, @​nzakas, and @​gutyerrez for helping!

docker/build-push-action (docker/build-push-action)

v6.9.0

Compare Source

• Bump @​docker/actions-toolkit from 0.38.0 to 0.39.0 in https://github.com/docker/build-push-action/pull/1234
• Bump path-to-regexp from 6.2.2 to 6.3.0 in https://github.com/docker/build-push-action/pull/1232

Full Changelog: docker/build-push-action@v6.8.0...v6.9.0

v6.8.0

Compare Source

• Bump @​docker/actions-toolkit from 0.37.1 to 0.38.0 in https://github.com/docker/build-push-action/pull/1230

Full Changelog: docker/build-push-action@v6.7.0...v6.8.0

docker/setup-buildx-action (docker/setup-buildx-action)

v3.7.1

Compare Source

• Switch back to uuid package by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/369

Full Changelog: docker/setup-buildx-action@v3.7.0...v3.7.1

v3.7.0

Compare Source

• Always set buildkitd-flags if opt-in by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/363
• Remove uuid package and switch to crypto by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/366
• Bump @​docker/actions-toolkit from 0.35.0 to 0.39.0 in https://github.com/docker/setup-buildx-action/pull/362
• Bump path-to-regexp from 6.2.2 to 6.3.0 in https://github.com/docker/setup-buildx-action/pull/354

Full Changelog: docker/setup-buildx-action@v3.6.1...v3.7.0

eslint/eslint (eslint)

v9.12.0

Compare Source

Features

• 5a6a053 feat: update to jiti v2 (#​18954) (Arya Emami)
• 17a07fb feat: Hooks for test cases (RuleTester) (#​18771) (Anna Bocharova)
• 2ff0e51 feat: Implement alternate config lookup (#​18742) (Nicholas C. Zakas)
• 2d17453 feat: Implement modified cyclomatic complexity (#​18896) (Dmitry Pashkevich)

Bug Fixes

• ea380ca fix: Upgrade retry to avoid EMFILE errors (#​18986) (Nicholas C. Zakas)
• fdd6319 fix: Issues with type definitions (#​18940) (Arya Emami)

Documentation

• ecbd522 docs: Mention code explorer (#​18978) (Nicholas C. Zakas)
• 7ea4ecc docs: Clarifying the Use of Meta Objects (#​18697) (Amaresh S M)
• d3e4b2e docs: Clarify how to exclude .js files (#​18976) (Milos Djermanovic)
• 57232ff docs: Mention plugin-kit in language docs (#​18973) (Nicholas C. Zakas)
• b80ed00 docs: Update README (GitHub Actions Bot)
• cb69ab3 docs: Update README (GitHub Actions Bot)
• 7fb0d95 docs: Update README (GitHub Actions Bot)
• 493348a docs: Update README (GitHub Actions Bot)
• 87a582c docs: fix typo in id-match rule (#​18944) (Jay)

Chores

• 555aafd chore: upgrade to @eslint/[email protected] (#​18987) (Francesco Trotta)
• 873ae60 chore: package.json update for @​eslint/js release (Jenkins)
• d0a5414 refactor: replace strip-ansi with native module (#​18982) (Cristopher)
• b827029 chore: Enable JSON5 linting (#​18979) (Milos Djermanovic)
• 8f55ca2 chore: Upgrade espree, eslint-visitor-keys, eslint-scope (#​18962) (Nicholas C. Zakas)
• c1a2725 chore: update dependency mocha to ^10.7.3 (#​18945) (Milos Djermanovic)

v9.11.1

Compare Source

Microsoft/tslib (tslib)

v2.8.0

Compare Source

What's Changed

• Validate export structure of every entrypoint by @​andrewbranch in https://github.com/microsoft/tslib/pull/269
• Add rewriteRelativeImportExtension helper by @​andrewbranch in https://github.com/microsoft/tslib/pull/270

Full Changelog: microsoft/tslib@v2.7.0...v2.8.0

---

Configuration

📅 Schedule: Branch creation - "before 12pm on Sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.