Skip to content

build(deps): bump @duckdb/node-api from 1.5.2-r.1 to 1.5.2-r.2#125

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/duckdb/node-api-1.5.2-r.2
Closed

build(deps): bump @duckdb/node-api from 1.5.2-r.1 to 1.5.2-r.2#125
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/duckdb/node-api-1.5.2-r.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 20, 2026

Bumps @duckdb/node-api from 1.5.2-r.1 to 1.5.2-r.2.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@duckdb/node-api](https://github.com/duckdb/duckdb-node-neo) from 1.5.2-r.1 to 1.5.2-r.2.
- [Commits](https://github.com/duckdb/duckdb-node-neo/commits)

---
updated-dependencies:
- dependency-name: "@duckdb/node-api"
  dependency-version: 1.5.2-r.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 20, 2026
@dependabot dependabot Bot requested a review from theagenticguy as a code owner May 20, 2026 13:13
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 20, 2026
@theagenticguy
Copy link
Copy Markdown
Owner

Superseded by #137 — consolidated into one merge with the rest of this week's bumps. Lockfile regenerated, full local gate (lint + typecheck + test + banned-strings) is green.

@theagenticguy theagenticguy deleted the dependabot/npm_and_yarn/duckdb/node-api-1.5.2-r.2 branch May 28, 2026 16:43
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 28, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

theagenticguy added a commit that referenced this pull request May 28, 2026
## Summary

Consolidates the 11 open Dependabot PRs into a single merge to cut CI
churn. Lockfile regenerated and full local gate (`pnpm run check` — lint
+ typecheck + test + banned-strings) is green.

### npm bumps

| Package | From | To |
| --- | --- | --- |
| `@aws-sdk/client-bedrock-runtime` | 3.1045.0 | 3.1054.0 |
| `@aws-sdk/client-sagemaker-runtime` | 3.1045.0 | 3.1054.0 |
| `@duckdb/node-api` | 1.5.2-r.1 | 1.5.2-r.2 |
| `@types/node` (typescript-tooling group) | 25.7.0 | 25.9.1 |
| `astro` | 6.3.3 | 6.3.8 |
| `lefthook` | 2.1.6 | 2.1.8 |
| `lru-cache` | 11.3.6 | 11.5.0 |
| `tsx` | 4.21.0 | 4.22.3 |
| `web-tree-sitter` (tree-sitter group) | 0.26.8 | 0.26.9 |

### github-actions bumps (SHA-pinned)

| Action | From | To |
| --- | --- | --- |
| `github/codeql-action` | v4.35.4 (`68bde55…`) | v4.35.5 (`9e0d7b8…`) |
| `github/codeql-action` (release.yml, codeql-bundle) | `9887d98…` |
`f4d0a7a…` |
| `pnpm/action-setup` | v4.1.0 (`a7487c7…`) | v6.0.8 (`0e279bb…`) |

### Held back

- **license-checker-rseidelsohn 4.4.2 → 5.0.0** — v5 requires Node >= 24
but the repo's `engines.node` is `>=22.0.0` and CI's `node-version`
matrix runs both 22 and 24. Pick this up when the repo drops Node 22
support. PR #135 stays open as a tracking marker if the user prefers;
otherwise it should be closed with a comment.

## Closes

#123, #124, #125, #126, #127, #128, #129, #133, #134, #136

(also supersedes #135 modulo the Node 22 caveat above)

## Test plan

- [x] `pnpm install --no-frozen-lockfile` (lockfile regen clean)
- [x] `pnpm run lint` — biome clean across 670 files
- [x] `pnpm run typecheck` — clean across all 19 workspace projects
- [x] `pnpm run test` — 1959 tests, 0 failures across 16 packages
- [x] `pnpm run banned-strings` — PASS
- [ ] CI green on Node 22 + Node 24 matrix
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant