Bump the all-non-major group with 5 updates by dependabot[bot] · Pull Request #723 · NHSDigital/vaccinations-app

dependabot · 2026-04-30T07:47:49Z

Bumps the all-non-major group with 5 updates:

Package	From	To
@aws-sdk/client-s3	`3.1034.0`	`3.1035.0`
@aws-sdk/signature-v4-crt	`3.1034.0`	`3.1035.0`
@opennextjs/aws	`3.10.2`	`3.10.3`
es-toolkit	`1.45.1`	`1.46.0`
isomorphic-dompurify	`3.9.0`	`3.10.0`

Updates @aws-sdk/client-s3 from 3.1034.0 to 3.1035.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1035.0

3.1035.0(2026-04-22)

New Features

client-iot-wireless: Enable customers to optionally specify a desired confidence level for Cellular and WiFi position estimates. Customers can use this to trade off confidence level and radius of uncertainty based on their needs. (9fcaea59)

client-ecs: GPU health monitoring and auto-repair for ECS Managed Instances (0ffa1090)

client-osis: Update the pipeline configuration body character limit for the CreatePipeline API call. (d19d4063)

client-opensearch: Adds support for RollbackServiceSoftwareUpdate API (e8b37945)

client-batch: Support of S3Files volume type, container start and stop timeouts. (802ac4b8)

client-ec2: Managed resource visibility settings control whether resources that AWS services provision on your behalf within your AWS account appear in your Amazon console views and API list operations. (698293af)

client-emr-serverless: This release adds support for Spark connect sessions starting with release label emr-7.13.0. (966d4934)

client-bedrock-agentcore: Adds support for Amazon Bedrock AgentCore Harness data plane APIs, enabling customers to invoke managed agent loops and execute commands on live agent sessions with streaming responses. (a465bad8)

client-s3-control: This release adds support for five additional checksum algorithms for data integrity checking in Amazon S3 - MD5, SHA-512, XXHash3, XXHash64, and XXHash128. (e8c4a764)

client-bedrock-agentcore-control: Adds support for Amazon Bedrock AgentCore Harness control plane APIs, enabling customers to create, manage, and configure managed agent loops with customizable models, tools, memory, and isolated execution environments. (ace8fec5)

client-ivs: Adds support for Amazon IVS server-side ad insertion (a4a29e9e)

client-s3: This release adds five additional checksum algorithms for S3 data integrity (MD5, SHA-512, XXHash3, XXHash64, XXHash128) and support for S3 Inventory on directory buckets (S3 Express One Zone). (41a6a595)

client-lambda: Add Ruby 4.0 (ruby4.0) support to AWS Lambda. (ece8ce80)

Bug Fixes

client-s3: retry errors with 200 status code (#7945) (7d9d8d17)

client-sts: override IDPCommunicationError to be retryable (#7946) (d75e129a)

Tests

clients: add snapshot tests for http2-default clients (#7947) (189729bb)

client-kinesis: http2 session concurrency tests (#7941) (408d99eb)

For list of updated packages, view updated-packages.md in assets-3.1035.0.zip

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1035.0 (2026-04-22)

Bug Fixes

client-s3: retry errors with 200 status code (#7945) (7d9d8d1)

Features

client-s3: This release adds five additional checksum algorithms for S3 data integrity (MD5, SHA-512, XXHash3, XXHash64, XXHash128) and support for S3 Inventory on directory buckets (S3 Express One Zone). (41a6a59)

Commits

d8fbfbc Publish v3.1035.0
41a6a59 feat(client-s3): This release adds five additional checksum algorithms for S3...
7d9d8d1 fix(client-s3): retry errors with 200 status code (#7945)
See full diff in compare view

Updates @aws-sdk/signature-v4-crt from 3.1034.0 to 3.1035.0

Release notes

Sourced from @aws-sdk/signature-v4-crt's releases.

v3.1035.0

3.1035.0(2026-04-22)

New Features

client-iot-wireless: Enable customers to optionally specify a desired confidence level for Cellular and WiFi position estimates. Customers can use this to trade off confidence level and radius of uncertainty based on their needs. (9fcaea59)

client-ecs: GPU health monitoring and auto-repair for ECS Managed Instances (0ffa1090)

client-osis: Update the pipeline configuration body character limit for the CreatePipeline API call. (d19d4063)

client-opensearch: Adds support for RollbackServiceSoftwareUpdate API (e8b37945)

client-batch: Support of S3Files volume type, container start and stop timeouts. (802ac4b8)

client-ec2: Managed resource visibility settings control whether resources that AWS services provision on your behalf within your AWS account appear in your Amazon console views and API list operations. (698293af)

client-emr-serverless: This release adds support for Spark connect sessions starting with release label emr-7.13.0. (966d4934)

client-bedrock-agentcore: Adds support for Amazon Bedrock AgentCore Harness data plane APIs, enabling customers to invoke managed agent loops and execute commands on live agent sessions with streaming responses. (a465bad8)

client-s3-control: This release adds support for five additional checksum algorithms for data integrity checking in Amazon S3 - MD5, SHA-512, XXHash3, XXHash64, and XXHash128. (e8c4a764)

client-bedrock-agentcore-control: Adds support for Amazon Bedrock AgentCore Harness control plane APIs, enabling customers to create, manage, and configure managed agent loops with customizable models, tools, memory, and isolated execution environments. (ace8fec5)

client-ivs: Adds support for Amazon IVS server-side ad insertion (a4a29e9e)

client-s3: This release adds five additional checksum algorithms for S3 data integrity (MD5, SHA-512, XXHash3, XXHash64, XXHash128) and support for S3 Inventory on directory buckets (S3 Express One Zone). (41a6a595)

client-lambda: Add Ruby 4.0 (ruby4.0) support to AWS Lambda. (ece8ce80)

Bug Fixes

client-s3: retry errors with 200 status code (#7945) (7d9d8d17)

client-sts: override IDPCommunicationError to be retryable (#7946) (d75e129a)

Tests

clients: add snapshot tests for http2-default clients (#7947) (189729bb)

client-kinesis: http2 session concurrency tests (#7941) (408d99eb)

For list of updated packages, view updated-packages.md in assets-3.1035.0.zip

Changelog

Sourced from @aws-sdk/signature-v4-crt's changelog.

3.1035.0 (2026-04-22)

Note: Version bump only for package @aws-sdk/signature-v4-crt

Commits

d8fbfbc Publish v3.1035.0
See full diff in compare view

Updates @opennextjs/aws from 3.10.2 to 3.10.3

Release notes

Sourced from @opennextjs/aws's releases.

v3.10.3

Changes

#1145 1e19ae2f5427c56d882c6393a1cdd77c6a5a4a0f Thanks @314systems! - fix: exclude unsupported Next.js 16 releases from peer dependencies.

#1148 4836a91e2e04b5e168b66c1f84c8679f777a913d Thanks @vicb! - Define globalThis.nextVersion globally

Changelog

Sourced from @opennextjs/aws's changelog.

3.10.3

Patch Changes

#1145 1e19ae2f5427c56d882c6393a1cdd77c6a5a4a0f Thanks @314systems! - fix: exclude unsupported Next.js 16 releases from peer dependencies.

The previous range allowed Next.js 16.0.0 through 16.2.2 without a peer dependency warning because >=16.2.3 was already covered by >=15.5.15.

The range now explicitly supports Next.js 15.5.15 and above in the 15.x line, and Next.js 16.2.3 and above in the 16.x line.

#1148 4836a91e2e04b5e168b66c1f84c8679f777a913d Thanks @vicb! - Define globalThis.nextVersion globally

Before globalThis.nextVersion was defined in the cache handler only and then not accessible from the OpenNext config.

Commits

f9b88a4 Version Packages (#1147)
4836a91 Define globalThis.nextVersion globally (#1148)
1e19ae2 fix: narrow peerDependencies next range to exclude 16.0.0–16.2.2 (#1145)
See full diff in compare view

Updates es-toolkit from 1.45.1 to 1.46.0

Release notes

Sourced from es-toolkit's releases.

v1.46.0

Released on April 22th, 2026.

Changed AbortError and TimeoutError to extend DOMException. ([#1660])

Added keyBy to the map entrypoint exports. ([#1650])

Added Claude Code plugin marketplace and es-toolkit usage skills. ([#1644])

Fixed isBuffer to add a browser export condition to avoid a 44KB Buffer polyfill. ([#1671])

Fixed toCamelCaseKeys and toSnakeCaseKeys to be exported from compat for the browser bundle. ([#1685])

Fixed partial by adding missing full-application overloads for 2/3/4 arguments. ([#1684])

Added Agent Skills and Claude Code Plugin guide to the AI Integration page. ([#1664])

We sincerely thank @raon0211, @jantimon, @jaydeep-pipaliya, @ethanresnick, @zaewc, @minsoo-web, @wondonghwi, @xxxxxxjun, @jiji-hoon96, @james-rae, @Gamez0, and @dayongkr for their contributions. We appreciate your great efforts!

Changelog

Sourced from es-toolkit's changelog.

Version v1.46.0

Released on April 22th, 2026.

Changed AbortError and TimeoutError to extend DOMException. (#1660)

Added keyBy to the map entrypoint exports. (#1650)

Added Claude Code plugin marketplace and es-toolkit usage skills. (#1644)

Fixed isBuffer to add a browser export condition to avoid a 44KB Buffer polyfill. (#1671)

Fixed toCamelCaseKeys and toSnakeCaseKeys to be exported from compat for the browser bundle. (#1685)

Fixed partial by adding missing full-application overloads for 2/3/4 arguments. (#1684)

Added Agent Skills and Claude Code Plugin guide to the AI Integration page. (#1664)

We sincerely thank @raon0211, @jantimon, @jaydeep-pipaliya, @ethanresnick, @zaewc, @minsoo-web, @wondonghwi, @xxxxxxjun, @jiji-hoon96, @james-rae, @Gamez0, and @dayongkr for their contributions. We appreciate your great efforts!

Commits

95111dd v1.46.0
fd22605 fix(globalThis): Fix type of globalThis
7cc004b fix(isBuffer): add browser export condition to avoid 44KB Buffer polyfill (#1...
c8fec98 fix: export toCamelCaseKeys and toSnakeCaseKeys from compat for browser bundl...
923b636 fix: Fix a type error in AbortError & TimeoutError
d9ae20e fix: add missing full-application overloads for partial with 2/3/4 args (#1684)
d76754d feat: Change AbortError/TimeoutError to extend DOMException (#1660)
0ced89c build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#1688)
5da8e7a build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 (#1687)
b4c3cb4 feat: add keyBy export to /map/index.ts (#1650)
Additional commits viewable in compare view

Updates isomorphic-dompurify from 3.9.0 to 3.10.0

Release notes

Sourced from isomorphic-dompurify's releases.

3.10.0: Updated dependencies

What's Changed

chore(deps-dev): bump lefthook from 2.1.5 to 2.1.6 by @dependabot[bot] in kkomelin/isomorphic-dompurify#422

chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @dependabot[bot] in kkomelin/isomorphic-dompurify#423

chore(deps-dev): bump vitest from 4.1.4 to 4.1.5 by @dependabot[bot] in kkomelin/isomorphic-dompurify#425

chore(deps): bump dompurify from 3.4.0 to 3.4.1 by @dependabot[bot] in kkomelin/isomorphic-dompurify#424

Full Changelog: kkomelin/isomorphic-dompurify@3.9.0...3.10.0

Commits

f8acfc4 chore: Updated deps and incremented project version.
cb199e5 chore(deps): bump dompurify from 3.4.0 to 3.4.1
f950ad7 chore(deps-dev): bump vitest from 4.1.4 to 4.1.5
b2a5fc0 chore(deps-dev): bump typescript from 6.0.2 to 6.0.3
42fcdce chore(deps-dev): bump lefthook from 2.1.5 to 2.1.6
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-non-major group with 5 updates: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1034.0` | `3.1035.0` | | [@aws-sdk/signature-v4-crt](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/signature-v4-crt) | `3.1034.0` | `3.1035.0` | | [@opennextjs/aws](https://github.com/opennextjs/opennextjs-aws/tree/HEAD/packages/open-next) | `3.10.2` | `3.10.3` | | [es-toolkit](https://github.com/toss/es-toolkit) | `1.45.1` | `1.46.0` | | [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) | `3.9.0` | `3.10.0` | Updates `@aws-sdk/client-s3` from 3.1034.0 to 3.1035.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1035.0/clients/client-s3) Updates `@aws-sdk/signature-v4-crt` from 3.1034.0 to 3.1035.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/signature-v4-crt/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1035.0/packages/signature-v4-crt) Updates `@opennextjs/aws` from 3.10.2 to 3.10.3 - [Release notes](https://github.com/opennextjs/opennextjs-aws/releases) - [Changelog](https://github.com/opennextjs/opennextjs-aws/blob/main/packages/open-next/CHANGELOG.md) - [Commits](https://github.com/opennextjs/opennextjs-aws/commits/@opennextjs/aws@3.10.3/packages/open-next) Updates `es-toolkit` from 1.45.1 to 1.46.0 - [Release notes](https://github.com/toss/es-toolkit/releases) - [Changelog](https://github.com/toss/es-toolkit/blob/main/CHANGELOG.md) - [Commits](toss/es-toolkit@v1.45.1...v1.46.0) Updates `isomorphic-dompurify` from 3.9.0 to 3.10.0 - [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases) - [Commits](kkomelin/isomorphic-dompurify@3.9.0...3.10.0) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1035.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-non-major - dependency-name: "@aws-sdk/signature-v4-crt" dependency-version: 3.1035.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-non-major - dependency-name: "@opennextjs/aws" dependency-version: 3.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-non-major - dependency-name: es-toolkit dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-non-major - dependency-name: isomorphic-dompurify dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-non-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 30, 2026

dependabot Bot requested a review from a team as a code owner April 30, 2026 07:47

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 30, 2026

This was referenced Apr 30, 2026

Bump isomorphic-dompurify from 3.9.0 to 3.10.0 #720

Closed

Bump es-toolkit from 1.45.1 to 1.46.0 #721

Closed

dependabot Bot temporarily deployed to dev April 30, 2026 07:51 Inactive

sophie-poole-nhs approved these changes Apr 30, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all-non-major group with 5 updates#723

Bump the all-non-major group with 5 updates#723
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-non-major-17b4a0965b

dependabot Bot commented on behalf of github Apr 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Apr 30, 2026

v3.1035.0

3.1035.0(2026-04-22)

New Features

Bug Fixes

Tests

3.1035.0 (2026-04-22)

Bug Fixes

Features

v3.1035.0

3.1035.0(2026-04-22)

New Features

Bug Fixes

Tests

3.1035.0 (2026-04-22)

v3.10.3

Changes

3.10.3

Patch Changes

v1.46.0

Version v1.46.0

3.10.0: Updated dependencies

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant