fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@cerbos/core (source)	^0.18.0 -> ^0.19.0
@cerbos/grpc (source)	^0.18.0 -> ^0.19.0
@prisma/client (source)	5.20.0 -> 5.22.0
@types/jest (source)	29.5.13 -> 29.5.14
@types/node (source)	20.16.7 -> 20.17.9
prisma (source)	5.20.0 -> 5.22.0
typescript (source)	5.6.2 -> 5.7.2

---

Release Notes

cerbos/cerbos-sdk-javascript (@​cerbos/core)

v0.19.0

Compare Source

Added

• Client.inspectPolicies method to inspect policy details (#​1051)

  Requires a policy decision point server running Cerbos 0.35+.

• Support for filtering Client.listPolicies results by policy ID (#​1051)

  Requires a policy decision point server running Cerbos 0.37+.

• Support for constants (#​1051)

  Requires a policy decision point server running Cerbos 0.40+.

Changed

• Stop adding explicit undefineds in Record values (#​1051)

  TypeScript provides the noUncheckedIndexedAccess compiler option for this purpose.

• Bump dependency on [uuid] to 11.0.3 (#​1037, #​1043)

cerbos/cerbos-sdk-javascript (@​cerbos/grpc)

v0.19.0

Compare Source

Added

• Client.inspectPolicies method to inspect policy details (#​1051)

  Requires a policy decision point server running Cerbos 0.35+.

• Support for filtering Client.listPolicies results by policy ID (#​1051)

  Requires a policy decision point server running Cerbos 0.37+.

• Support for constants (#​1051)

  Requires a policy decision point server running Cerbos 0.40+.

Changed

• Bump dependency on [@​bufbuild/protobuf] to 2.2.2 (#​1035, #​1039)

• Bump dependency on [@​cerbos/core] to 0.19.0 (#​1053)

v0.18.4

Compare Source

Changed

• Bump dependency on [@​bufbuild/protobuf] to 2.2.0 (#​1024)

• Bump dependency on [@​grpc/grpc-js] to 1.12.2 (#​1020, #​1023)

prisma/prisma (@​prisma/client)

v5.22.0

Compare Source

Today, we are excited to share the 5.22.0 stable release 🎉

🌟 Help us spread the word about Prisma by starring the repo ☝️ or posting on X about the release.

Highlights

Further Tracing Improvements

In our ongoing effort to stabilize the tracing Preview feature, we’ve made our spans compliant with OpenTelemetry Semantic Conventions for Database Client Calls. This should lead to better compatibility with tools such as DataDog and Sentry.

We’ve also included numerous bug fixes that should make this Preview feature easier to work with.

Metrics bug fix

Occasionally, connection pool metrics would become negative or grow unbounded. In this release, connection pool metrics should stay consistent.

Connection Pool Timeout fix

In a specific case, there could be issues where fetching a new connection from the connection pool would time out, regardless of the state of the application and connection pool. If you have experience connection pool issues accessing a PostgreSQL database with TLS encryption in a resource-constrained environment (such as Function-as-a-Service offerings or very small VPS) this should resolve those issues.

Special thanks to @​youxq for their pull request and help resolving this issue!

Join us

Looking to make an impact on Prisma in a big way? We're hiring!

Learn more on our careers page: https://www.prisma.io/careers

Fixes and improvements

Prisma Migrate

• removing @unique in schema.prisma does not generate SQL to do so

Prisma

• Prisma generate randomly fails on Ubuntu due to missing internal .so libquery_engine-debian-openssl-1.1.x.so.node
• Timed out fetching a new connection from the connection pool.
• Some prisma:engine:connection spans have no parent
• Query-related spans outside of prisma:engine:itx_runner are disconnected from the tree
• Tracing with dataproxy/mini-proxy: itx_runner span and it's children are missing sometimes
• Incorrect OpenTelemetry span reported by Prisma
• OTEL spans are not recognised as spans from a database
• SQL Injection bug - D1 adaptor throws "Conversion failed: expected a datetime string in column" when string column contains any ISO date
• Prisma generate randomly fails on Ubuntu due to missing internal .so libquery_engine-debian-openssl-1.1.x.so.node

Credits

Huge thanks to @​tmm1, @​Takur0, @​hinaloe, @​andyjy, and @​youxq for helping!

v5.21.1

Compare Source

• Fixed a bug where migrations were not using shadow database correctly in some edge cases

v5.21.0

Compare Source

Today, we are excited to share the 5.21.0 release 🎉

🌟 Help us spread the word about Prisma by starring the repo ☝️ or posting on X about the release.

Highlights

Better support for tracing in MongoDB

The tracing Preview feature now has full support for MongoDB with previously missing functionality now implemented. This is a part of the ongoing effort to stabilize this Preview feature and release it in General Availability.

tracing is a Preview feature that enables built-in support for OpenTelemetry instrumentation inside the Prisma Client and provides deep insights into the performance and timing of your queries. See our documentation for more information.

For an easy to use and zero-configuration tracing instrumentation tool with a dashboard that provides an overview of your queries, statistics, and AI-powered recommendations, try Prisma Optimize.

WebAssembly engine size decrease for edge functions

Due to recent changes, some users experienced a steep increase of the bundle size in Prisma 5.20 when using the driverAdapters Preview feature, going over the 1 MB limit on the free tier of Cloudflare Workers. This has now been fixed.

Fixes and improvements

Prisma Engines

• Avoid regex crate for wasm bundle size (to keep cloudflare free plan)

Credits

Huge thanks to @​austin-tildei, @​LucianBuzzo, @​mcuelenaere, @​pagewang0, @​key-moon, @​pranayat, @​yubrot, @​skyzh for helping!

microsoft/TypeScript (typescript)

v5.7.2

Compare Source

v5.6.3

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - "after 9am and before 5pm Monday" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.