chore(deps): update npm minor dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@auth/prisma-adapter (source)	2.5.3 -> 2.7.4
@opentelemetry/exporter-trace-otlp-grpc (source)	0.53.0 -> 0.57.0
@opentelemetry/instrumentation-http (source)	0.53.0 -> 0.57.0
@opentelemetry/resources (source)	1.26.0 -> 1.30.0
@opentelemetry/sdk-node (source)	0.53.0 -> 0.57.0
@opentelemetry/sdk-trace-base (source)	1.26.0 -> 1.30.0
@opentelemetry/semantic-conventions (source)	1.27.0 -> 1.28.0
@playwright/test (source)	1.47.2 -> 1.49.1
@prisma/client (source)	5.20.0 -> 5.22.0
@prisma/instrumentation (source)	5.20.0 -> 5.22.0
@testing-library/react	16.0.1 -> 16.1.0
lint-staged	15.2.11 -> 15.3.0
prisma (source)	5.20.0 -> 5.22.0
react-hook-form (source)	7.53.2 -> 7.54.2
typescript (source)	5.6.3 -> 5.7.2
zod (source)	3.23.8 -> 3.24.1

---

Release Notes

nextauthjs/next-auth (@​auth/prisma-adapter)

v2.7.4

Compare Source

Other

• @​auth/core: dependency update (a150f1e)

v2.7.3

Compare Source

Other

• @​auth/core: dependency update (d6d8d4f)

v2.7.2

Compare Source

Other

• @​auth/core: dependency update (2810f6b)

v2.7.1

Compare Source

Other

• @​auth/core: dependency update (e981e4d)

v2.7.0

Compare Source

Other

• @​auth/core: dependency update (2d67f11)

v2.6.0

Compare Source

Features

• adapters: support Prisma's strictUndefinedChecks (#​11952) (56a9564)

open-telemetry/opentelemetry-js (@​opentelemetry/exporter-trace-otlp-grpc)

v0.57.0

Compare Source

v0.56.0

Compare Source

v0.55.0

Compare Source

v0.54.2

Compare Source

v0.54.1

Compare Source

v0.54.0

Compare Source

microsoft/playwright (@​playwright/test)

v1.49.1

Compare Source

Highlights

https://github.com/microsoft/playwright/issues/33802 - [Bug]: Codegen's Clear button doesn't work if not recordinghttps://github.com/microsoft/playwright/issues/338066 - [Bug]: playwright hangs while waiting for pending navigationhttps://github.com/microsoft/playwright/issues/3378787 - [Bug]: VSC extension isn't capturing all entered tehttps://github.com/microsoft/playwright/issues/33788788 - [Regression]: Double clicking the steps in trace viewer doesn't filter actihttps://github.com/microsoft/playwright/issues/337723772 - [Bug]: aria_snapshot generates invalid yaml when combined with an aria-label attrhttps://github.com/microsoft/playwright/issues/3379133791 - [Bug]: text input with number value raises "container is not iterable" with to_match_aria_snahttps://github.com/microsoft/playwright/issues/33644/33644 - [Bug]: getByRole can't find element with the accessible name from label element when aria-labelledby is nothttps://github.com/microsoft/playwright/issues/33660s/33660 - [Regression]: Unable to open Playwright UI in Dark Mode

Browser Versions

• Chromium 131.0.6778.33
• Mozilla Firefox 132.0
• WebKit 18.2

This version was also tested against the following stable channels:

• Google Chrome 130
• Microsoft Edge 130

v1.49.0

Compare Source

v1.48.2

Compare Source

v1.48.1

Compare Source

Highlights

https://github.com/microsoft/playwright/issues/33023 - [Bug]: command line flag --headed has no effect in ui modehttps://github.com/microsoft/playwright/issues/331077 - [REGRESSION]: page.waitForRequest does not get resolved since 1.48.https://github.com/microsoft/playwright/issues/3308585 - [Bug]: WebSocket route does not handle full URLs in Playwrighttps://github.com/microsoft/playwright/issues/33052052 - [Regression]: Inspector not showing recorded sthttps://github.com/microsoft/playwright/issues/331323132 - [Bug]: Wrong Ubuntu release name in Dockerfile.nhttps://github.com/microsoft/playwright/pull/3299632996 - [BUG] Trace attachments have small unusable height

Browser Versions

• Chromium 130.0.6723.19
• Mozilla Firefox 130.0
• WebKit 18.0

This version was also tested against the following stable channels:

• Google Chrome 129
• Microsoft Edge 129

v1.48.0

Compare Source

prisma/prisma (@​prisma/client)

v5.22.0

Compare Source

Today, we are excited to share the 5.22.0 stable release 🎉

🌟 Help us spread the word about Prisma by starring the repo ☝️ or posting on X about the release.

Highlights

Further Tracing Improvements

In our ongoing effort to stabilize the tracing Preview feature, we’ve made our spans compliant with OpenTelemetry Semantic Conventions for Database Client Calls. This should lead to better compatibility with tools such as DataDog and Sentry.

We’ve also included numerous bug fixes that should make this Preview feature easier to work with.

Metrics bug fix

Occasionally, connection pool metrics would become negative or grow unbounded. In this release, connection pool metrics should stay consistent.

Connection Pool Timeout fix

In a specific case, there could be issues where fetching a new connection from the connection pool would time out, regardless of the state of the application and connection pool. If you have experience connection pool issues accessing a PostgreSQL database with TLS encryption in a resource-constrained environment (such as Function-as-a-Service offerings or very small VPS) this should resolve those issues.

Special thanks to @​youxq for their pull request and help resolving this issue!

Join us

Looking to make an impact on Prisma in a big way? We're hiring!

Learn more on our careers page: https://www.prisma.io/careers

Fixes and improvements

Prisma Migrate

• removing @unique in schema.prisma does not generate SQL to do so

Prisma

• Prisma generate randomly fails on Ubuntu due to missing internal .so libquery_engine-debian-openssl-1.1.x.so.node
• Timed out fetching a new connection from the connection pool.
• Some prisma:engine:connection spans have no parent
• Query-related spans outside of prisma:engine:itx_runner are disconnected from the tree
• Tracing with dataproxy/mini-proxy: itx_runner span and it's children are missing sometimes
• Incorrect OpenTelemetry span reported by Prisma
• OTEL spans are not recognised as spans from a database
• SQL Injection bug - D1 adaptor throws "Conversion failed: expected a datetime string in column" when string column contains any ISO date
• Prisma generate randomly fails on Ubuntu due to missing internal .so libquery_engine-debian-openssl-1.1.x.so.node

Credits

Huge thanks to @​tmm1, @​Takur0, @​hinaloe, @​andyjy, and @​youxq for helping!

v5.21.1

Compare Source

• Fixed a bug where migrations were not using shadow database correctly in some edge cases

v5.21.0

Compare Source

Today, we are excited to share the 5.21.0 release 🎉

🌟 Help us spread the word about Prisma by starring the repo ☝️ or posting on X about the release.

Highlights

Better support for tracing in MongoDB

The tracing Preview feature now has full support for MongoDB with previously missing functionality now implemented. This is a part of the ongoing effort to stabilize this Preview feature and release it in General Availability.

tracing is a Preview feature that enables built-in support for OpenTelemetry instrumentation inside the Prisma Client and provides deep insights into the performance and timing of your queries. See our documentation for more information.

For an easy to use and zero-configuration tracing instrumentation tool with a dashboard that provides an overview of your queries, statistics, and AI-powered recommendations, try Prisma Optimize.

WebAssembly engine size decrease for edge functions

Due to recent changes, some users experienced a steep increase of the bundle size in Prisma 5.20 when using the driverAdapters Preview feature, going over the 1 MB limit on the free tier of Cloudflare Workers. This has now been fixed.

Fixes and improvements

Prisma Engines

• Avoid regex crate for wasm bundle size (to keep cloudflare free plan)

Credits

Huge thanks to @​austin-tildei, @​LucianBuzzo, @​mcuelenaere, @​pagewang0, @​key-moon, @​pranayat, @​yubrot, @​skyzh for helping!

testing-library/react-testing-library (@​testing-library/react)

v16.1.0

Compare Source

lint-staged/lint-staged (lint-staged)

v15.3.0

Compare Source

Minor Changes

• #​1495 e69da9e Thanks @​iiroj! - Added more info to the debug logs so that "environment" info doesn't need to be added separately to GitHub issues.

• #​1493 fa0fe98 Thanks @​iiroj! - Added more help messages around the automatic git stash that lint-staged creates as a backup (by default). The console output also displays the short git hash of the stash so that it's easier to recover lost files in case some fatal errors are encountered, or the process is killed before completing.

  For example:

  % npx lint-staged
  ✔ Backed up original state in git stash (20addf8)
  ✔ Running tasks for staged files...
  ✔ Applying modifications from tasks...
  ✔ Cleaning up temporary files...
  

  where the backup can be seen with git show 20addf8, or git stash list:

  % git stash list
  stash@{0}: lint-staged automatic backup (20addf8)
  

react-hook-form/react-hook-form (react-hook-form)

v7.54.2

Compare Source

v7.54.1: Version 7.54.1

Compare Source

Revert "🦥 fix: useForm should return a new object on formState changes (#​12424)" (#​12475)

v7.54.0

Compare Source

microsoft/TypeScript (typescript)

v5.7.2

Compare Source

colinhacks/zod (zod)

v3.24.1

Compare Source

Commits:

• 0c6cbbd Undeprecate .nonempty()
• 4e219d6 Bump min TS version to 5.0
• 65adeea v3.24.1

v3.24.0

Compare Source

Implement @standard-schema/spec

This is the first version of Zod to implement the Standard Schema spec. This is a new community effort among several validation library authors to implement a common interface, with the goal of simplifying the process of integrating schema validators with the rest of the ecosystem. Read more about the project and goals here.

z.string().jwt()

Thanks to @​Mokshit06 and @​Cognition-Labs for this contribution!

To verify that a string is a valid 3-part JWT.

z.string().jwt();

⚠️ This does not verify your JWT cryptographically! It merely ensures its in the proper format. Use a library like jsonwebtoken to verify the JWT signature, parse the token, and read the claims.

To constrain the JWT to a specific algorithm:

z.string().jwt({ alg: "RS256" });

z.string().base64url()

Thank you to @​marvinruder!

To complement the JWT validation, Zod 3.24 implements a standalone .base64url() string validation API. (The three elements of JWTs are base64url-encoded JSON strings.)

z.string().base64url()

This functionality is available along the standard z.string().base64() validator added in Zod 3.23.

z.string().cidr()

Thanks to @​wataryooou for their work on this!

A validator for CIDR notation for specifying IP address ranges, e.g. 192.24.12.0/22.

z.string().cidr()

To specify an IP version:

z.string().cidr({ version: "v4" })
z.string().cidr({ version: "v6" })

---

View the full diff from 3.23.8: colinhacks/zod@v3.23.8...v3.24.0

• 294f54f Update README_ZH.md about Discriminated unions (#​3493)
• 1247caf Add Kubb as X-to-Zod community tool (#​3508)
• 62b7842 Update default branch
• c6bc80d Fix issue #​3582 : ULID should be case insensitive (#​3593)
• a5b9dc3 docs: add zod-schema-faker to ecosystem (#​3605)
• 9818d0e Add zod-sockets (#​3609)
• 7173d0b Add drizzle-zod library to X to Zod README.md section (#​3648)
• c5a4edc Add 'schemql' in Powered by Zod (#​3800)
• 85916b3 docs: add zod-form-renderer to form integration docs (#​3697)
• 51f1dc3 docs: add unplugin-environment in powered by zod (#​3778)
• 8e74db3 fix: ipv6 regex validation (#​3513)
• 1f4f0da refactor: rename ip version types (#​3755)
• f487d74 Remove faulty ip test case
• 48f1c47 docs: Remove invalid semicolon in ERROR_HANDLING.md (#​3857)
• 1d0a4b9 fix: bigint coerce crash (#​3822)
• 14dceaa Add API library (#​3814)
• f82f817 feat: z.string.cidr() - support CIDR notation (#​3820)
• 71a0c33 docs: add info on unqualified local datetime strings (#​3760)
• b85686a Add support for base64url strings (#​3712)
• 6407bed Allow creation of discriminated unions with a readonly array of options (#​3535)
• 3755146 Remove createParams cascade from .array() (#​3530)
• 963386d Fix lint
• 69a1798 Implement Standard Schema spec (#​3850)
• c1dd537 Adds frrm package to documentation (#​3818)
• b68c05f feat: Add JWT string validator (#​3893)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.