fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@cerbos/core (source)	^0.17.0 -> ^0.18.0
@cerbos/grpc (source)	^0.17.0 -> ^0.18.0
@prisma/client (source)	5.13.0 -> 5.14.0
@types/node (source)	20.12.7 -> 20.12.12
mongoose (source)	8.3.2 -> 8.3.5
prisma (source)	5.13.0 -> 5.14.0

---

Release Notes

cerbos/cerbos-sdk-javascript (@​cerbos/core)

v0.18.0

Compare Source

Added

• Support for fetching audit logs (#​945)

  • Client.getAccessLogEntry method
  • Client.getDecisionLogEntry method
  • Client.listAccessLogEntries method
  • Client.listDecisionLogEntries method
  • CheckResourcesResponse.cerbosCallId property
  • PlanResourcesResponse.cerbosCallId property

cerbos/cerbos-sdk-javascript (@​cerbos/grpc)

v0.18.0

Compare Source

Added

• Support for fetching audit logs (#​945)

  • Client.getAccessLogEntry method
  • Client.getDecisionLogEntry method
  • Client.listAccessLogEntries method
  • Client.listDecisionLogEntries method
  • CheckResourcesResponse.cerbosCallId property
  • PlanResourcesResponse.cerbosCallId property

Changed

• Bump dependency on [@​cerbos/core] to 0.18.0 (#​951)

• Bump dependency on [@​grpc/grpc-js] to 1.10.7 (#​942)

• Bump dependency on [protobufjs] to 7.3.0 (#​949)

prisma/prisma (@​prisma/client)

v5.14.0

Compare Source

Today, we are excited to share the 5.14.0 stable release 🎉

🌟 Help us spread the word about Prisma by starring the repo ☝️ or posting on X about the release. 🌟

Highlights

Share your feedback about Prisma ORM

We want to know how you like working with Prisma ORM in your projects! Please take our 2min survey and let us know what you like or where we can improve 🙏

createManyAndReturn()

We’re happy to announce the availability of a new, top-level Prisma Client query: createManyAndReturn(). It works similarly to createMany() but uses a RETURNING clause in the SQL query to retrieve the records that were just created.

Here’s an example of creating multiple posts and then immediately returning those posts.

const postBodies = req.json()['posts']

const posts = prisma.post.createManyAndReturn({
	data: postBodies
});

return posts

Additionally,createManyAndReturn() supports the same options as findMany(), such as the ability to return only specific fields.

const postBodies = req.json()['posts']

const postTitles = prisma.post.createManyAndReturn({
	data: postBodies,
	select: {
	  title: true,
	},
});

return postTitles

Note: Because createManyAndReturn() uses the RETURNING clause, it is only supported by PostgreSQL, CockroachDB, and SQLite databases. At this time, relationLoadStrategy: join is not supported in createManyAndReturn() queries.

MongoDB performance improvements

Previously, Prisma ORM suffered from performance issues when using the in operator or when including related models in queries against a MongoDB database. These queries were translated by the Prisma query engine in such a way that indexes were skipped and collection scans were used, leading to slower queries especially on large datasets.

With 5.14.0, Prisma ORM now rewrites queries to use a combination of $or and $eq operators, leading to dramatic performance increases for queries that include in operators or relation loading.

Fixes and improvements

Prisma Client

• createMany() should return the created records
• Generating Prisma client without any model in its schema
• MongoDB: Performance issue with nested take on many-to-one relationship
• Slow queries on MongoDB using include for relations
• [MongoDB] Performance issue in findMany() query execution with in
• MongoDB nested/include query slow
• MongoDB Connector generates queries which do not take advantage of indices.
• Mongodb Nested Queries Not Using Indexes
• MongoDB slow delete with onDelete: SetNull
• Slow query with many-to-one relationship on MongoDB
• prisma init --with-model
• Fixed version of @opentelemetry/* dependencies
• Usage of deprecated punycode module
• Bug: D1 One-to-Many Relation INSERTs fail with The required connected records were not found. when using indices

Prisma Migrate

• Empty dbgenerated() still breaking for Unsupported() types
• Validation error when shadowDatabaseUrl is identical to url (or directUrl)
• MongoDB Query with 'in' condition will cause COLLSCAN, without leveraging indexes
• "Not Authorised" when directly applying Prisma generated migrations to Cloudflare D1 with PRAGMA foreign_key_check;

Language tools (e.g. VS Code)

• make superior: model generate
• Missing code autocomplete for referential actions with mongodb

Company news

Prisma Changelog

Curious about all things Prisma? Be sure to check out the Prisma Changelog for updates across Prisma's products, including ORM, Accelerate, and Pulse!

Credits

Huge thanks to @​pranayat, @​yubrot, @​skyzh, @​anuraaga, @​gutyerrez, @​avallete, @​ceddy4395, @​Kayoshi-dev for helping!

Automattic/mongoose (mongoose)

v8.3.5

Compare Source

==================

• fix(query): shallow clone $or, $and if merging onto empty query filter #​14580 #​14567
• types(model+query): pass TInstanceMethods to QueryWithHelpers so populated docs have methods #​14581 #​14574
• docs(typescript): clarify that setting THydratedDocumentType on schemas is necessary for correct method context #​14575 #​14573

v8.3.4

Compare Source

==================

• perf(document): avoid cloning options using spread operator for perf reasons #​14565 #​14394
• fix(query): apply translateAliases before casting to avoid strictMode error when using aliases #​14562 #​14521
• fix(model): consistent top-level timestamps option for bulkWrite operations
  #​14546 #​14536
• docs(connections): improve description of connection creation patterns #​14564 #​14528

v8.3.3

Compare Source

==================

• perf(document): add fast path for applying non-nested virtuals to JSON #​14543
• fix: make hydrate() recursively hydrate virtual populate docs if hydratedPopulatedDocs is set #​14533 #​14503
• fix: improve timestamps option handling in bulkWrite #​14546 #​14536 sderrow
• fix(model): make recompileSchema() overwrite existing document array discriminators #​14527
• types(schema): correctly infer Array<Schema.Types.*> #​14534 #​14367
• types(query+populate): apply populate overrides to doc toObject() result #​14525 #​14441
• types: add null to select override return type for findOne #​14545 sderrow

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - "after 9am and before 5pm Monday" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.