Skip to content

chore(deps): bump the npm-dependencies group in /apps/backend with 4 updates - #740

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/backend/npm-dependencies-c4760f7178
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/backend/npm-dependencies-c4760f7178

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group in /apps/backend with 4 updates: @filoz/synapse-core, class-validator, filecoin-pin and joi.

Updates @filoz/synapse-core from 0.8.1 to 0.10.2

Release notes

Sourced from @​filoz/synapse-core's releases.

synapse-core: v0.10.2

0.10.2 (2026-10-16)

Features

  • core: use @​hugomrdias/commp-wasm for PieceCID hashing (#1018) (d9bf76e)

Bug Fixes

  • core: default the data set payer to a session key's root wallet (b5aa6c8), closes #1025
  • core: keep confirmed pieces when another add-pieces tx fails (f218706)
  • core: stop polling add-pieces/create-dataset status on rejected tx (#1020) (96235c1)

Chores

  • synapse-core: align ox with viem and drop ox from mocks (#1021) (a830d0d)
  • synapse-core: update commp-wasm to 0.1.4 (#1030) (91b8502)

synapse-core: v0.10.1

0.10.1 (2026-10-09)

Features

  • core: accept AbortSignal in legacy uploadPiece (#1009) (596f768)
  • core: accept AbortSignal in sp actions and forward timeout in waitForCreateDataSetAddPieces (#998) (603403a)

Bug Fixes

  • core: add is() type guard to WaitForCreateDataSetRejectedError (#1001) (b85f512)
  • core: cancel sibling uploads when one fails in upload() (#1013) (57d84c2)
  • core: skip signing in pullPieces when the abort signal already fired (#1012) (47d5e64)
  • increase max upload size to 64 GiB padded (#997) (290ed9e)

synapse-core: v0.10.0

0.10.0 (2026-09-25)

⚠ BREAKING CHANGES

  • synapse-core: PdpDataSet.provider and Piece.url can now be null. Callers must check these fields before using them.

Bug Fixes

  • remove the temporary 40-piece batch limit (#975) (e03a00c)
  • synapse-core: handle inactive PDP providers (44fee17)

... (truncated)

Commits
  • e775fef chore(master): release synapse-core 0.10.2 (#1019)
  • 91b8502 chore(synapse-core): update commp-wasm to 0.1.4 (#1030)
  • 2e6b8e0 fix(react): reject a session key whose root is not the connected account
  • f218706 fix(core): keep confirmed pieces when another add-pieces tx fails
  • 4edbb1b refactor(core): share one concurrency limit helper in utils
  • f36d697 refactor(core): move the payer default into utils as getPayerAddress
  • 0da72d2 refactor(core): move multi-file upload into SP.uploadPieces
  • b5aa6c8 fix(core): default the data set payer to a session key's root wallet
  • 3a9a3d5 feat(react): add useUploadPieces streaming multi-file upload hook
  • 182e524 feat(react): accept an optional chainId on read hooks
  • Additional commits viewable in compare view

Updates class-validator from 0.14.4 to 0.15.1

Release notes

Sourced from class-validator's releases.

v0.15.1

What's Changed

Full Changelog: typestack/class-validator@v0.15.0...v0.15.1

v0.15.0

What's Changed

New Contributors

Full Changelog: typestack/class-validator@v0.14.4...v0.15.0

Changelog

Sourced from class-validator's changelog.

0.15.1 (2026-02-26)

BREAKING CHANGES

  • Added options argument to IsIBAN validator (#2618), which breaks any existing usage of this decorator that pass an argument to the decorator, e.g. @IsIBAN({forbidUnknownValues: false})

Fixed

  • Updated lockfile to patch vulnerabilities (#2669)
  • Fixed a small grammatical error in the docs (#2596)

Added

  • Added validateIf option to all validators, providing a lot more flexibility in using conditional validation (#1579)
  • Added IsISO31661Numeric validator for country codes (#2657)
  • Added IsISO6391 validator for language codes (#2626)
  • Added more versions to IsUUID validator options. (#2647)
Commits

Updates filecoin-pin from 2.0.0 to 2.2.1

Release notes

Sourced from filecoin-pin's releases.

v2.2.1

2.2.1 (2026-10-12)

Bug Fixes

  • cli: move console link flow from utm_campaign to utm_term (#758) (6f6dae1)

v2.2.0

2.2.0 (2026-10-08)

Features

  • cli: tag console links with utm params for human vs agent attribution (#746) (6d7550a)

Bug Fixes

  • cli: pdp explorer link (#766) (27fc264)
  • data-set: paginate listDataSets to avoid RPC timeouts on large accounts (#708) (913f418)
  • deps: upgrade synapse-core to 0.10.0 (#767) (aedfcb5)

Chores

  • deps-dev: bump @​types/node from 26.1.1 to 26.6.2 (#748) (0b4dcd4)
  • deps: bump env-paths from 3.0.0 to 4.0.0 (#749) (4f43b3f)
  • deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#760) (0dc6dc2)
  • deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 in /upload-action (#761) (9bc4bb0)
  • deps: bump pnpm/action-setup in /upload-action (9bc4bb0)

v2.1.1

2.1.1 (2026-09-16)

Bug Fixes

  • payments: accept a zero piece in setup check (#728) (6bbbd0b)

v2.1.0

2.1.0 (2026-09-16)

Features

  • add: funds preflight for session keys (#702) (40389ae)
  • cli: add balance and dashboard commands (#703) (c068a78)
  • cli: add login and logout commands (#700) (819dc6a)
  • cli: auto-load the login session and add the no-credentials error (#701) (7e431c2)

... (truncated)

Changelog

Sourced from filecoin-pin's changelog.

2.2.1 (2026-10-12)

Bug Fixes

  • cli: move console link flow from utm_campaign to utm_term (#758) (6f6dae1)

2.2.0 (2026-10-08)

Features

  • cli: tag console links with utm params for human vs agent attribution (#746) (6d7550a)

Bug Fixes

  • cli: pdp explorer link (#766) (27fc264)
  • data-set: paginate listDataSets to avoid RPC timeouts on large accounts (#708) (913f418)
  • deps: upgrade synapse-core to 0.10.0 (#767) (aedfcb5)

Chores

  • deps-dev: bump @​types/node from 26.1.1 to 26.6.2 (#748) (0b4dcd4)
  • deps: bump env-paths from 3.0.0 to 4.0.0 (#749) (4f43b3f)
  • deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#760) (0dc6dc2)
  • deps: bump pnpm/action-setup from 6.0.10 to 6.1.0 in /upload-action (#761) (9bc4bb0)
  • deps: bump pnpm/action-setup in /upload-action (9bc4bb0)

2.1.1 (2026-09-16)

Bug Fixes

  • payments: accept a zero piece in setup check (#728) (6bbbd0b)

2.1.0 (2026-09-16)

Features

  • add: funds preflight for session keys (#702) (40389ae)
  • cli: add balance and dashboard commands (#703) (c068a78)
  • cli: add login and logout commands (#700) (819dc6a)
  • cli: auto-load the login session and add the no-credentials error (#701) (7e431c2)
  • logout: deep link to revoke the key (#726) (b81ff57)
  • session: add on-chain authorization watcher (#699) (0663f7a)

... (truncated)

Commits
  • 995d942 chore(master): release 2.2.1 (#769)
  • 6f6dae1 fix(cli): move console link flow from utm_campaign to utm_term (#758)
  • d72a5cc chore(master): release 2.2.0 (#751)
  • aedfcb5 fix(deps): upgrade synapse-core to 0.10.0 (#767)
  • 27fc264 fix(cli): pdp explorer link (#766)
  • 9bc4bb0 chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in /upload-action (#...
  • 0dc6dc2 chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 (#760)
  • 4f43b3f chore(deps): bump env-paths from 3.0.0 to 4.0.0 (#749)
  • 0b4dcd4 chore(deps-dev): bump @​types/node from 26.1.1 to 26.6.2 (#748)
  • 913f418 fix(data-set): paginate listDataSets to avoid RPC timeouts on large accounts ...
  • Additional commits viewable in compare view

Updates joi from 18.2.9 to 18.3.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group in /apps/backend with 4 updates: [@filoz/synapse-core](https://github.com/FilOzone/synapse-sdk), [class-validator](https://github.com/typestack/class-validator), [filecoin-pin](https://github.com/filecoin-project/filecoin-pin) and [joi](https://github.com/hapijs/joi).


Updates `@filoz/synapse-core` from 0.8.1 to 0.10.2
- [Release notes](https://github.com/FilOzone/synapse-sdk/releases)
- [Commits](FilOzone/synapse-sdk@v0.8.1...synapse-core-v0.10.2)

Updates `class-validator` from 0.14.4 to 0.15.1
- [Release notes](https://github.com/typestack/class-validator/releases)
- [Changelog](https://github.com/typestack/class-validator/blob/develop/CHANGELOG.md)
- [Commits](typestack/class-validator@v0.14.4...v0.15.1)

Updates `filecoin-pin` from 2.0.0 to 2.2.1
- [Release notes](https://github.com/filecoin-project/filecoin-pin/releases)
- [Changelog](https://github.com/filecoin-project/filecoin-pin/blob/master/CHANGELOG.md)
- [Commits](filecoin-project/filecoin-pin@v2.0.0...v2.2.1)

Updates `joi` from 18.2.9 to 18.3.0
- [Commits](hapijs/joi@v18.2.9...v18.3.0)

---
updated-dependencies:
- dependency-name: "@filoz/synapse-core"
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: class-validator
  dependency-version: 0.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: filecoin-pin
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: joi
  dependency-version: 18.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
@FilOzzy FilOzzy added this to FOC Oct 20, 2026
@github-project-automation github-project-automation Bot moved this to 📌 Triage in FOC Oct 20, 2026
@FilOzzy FilOzzy moved this from 📌 Triage to 🐱 Todo in FOC Oct 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 27, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/apps/backend/npm-dependencies-c4760f7178 branch October 27, 2026 17:05
@github-project-automation github-project-automation Bot moved this from 🐱 Todo to 🎉 Done in FOC Oct 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: 🎉 Done

Development

Successfully merging this pull request may close these issues.

0 participants