This PR contains the following updates:
Package Updates Summary
| Type | Count |
|---|---|
| 📦 NPM Packages | 24 |
| 🔧 System Dependencies | 2 |
| Total | 26 |
📦 npm Dependencies
24 packages will be updated
🔧 System Dependencies
2 packages will be updated across 1 file(s): deps.yml
| Package | Change | Type | File |
|---|---|---|---|
| gnu.org/gettext | ^0.21 → ^0.26 | 🟡 minor | deps.yml |
| zlib.net | ^1.2.11 → ^1.3.2 | 🟡 minor | deps.yml |
Release Notes
Microsoft/vsce (@vscode/vsce)
4.0.0 -> 4.1.0
v4.1.0
Changes:
#1348: cli: Show OIDC publishing in help#1346: Set npm minimum release age and apply audit fixes#1345: publish: send X-Market-CI-Provider header with Marketplace requests#1342: chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 in the github-actions group#1335: chore(deps-dev): bump fast-uri from 3.1.6 to 3.1.8#1338: chore(deps): bump brace-expansion#1337: oidc: align token exchange with the Marketplace contract#1332: Update qs transitive dependency to 6.16.0
This list of changes was auto generated.
Released by lszomoru on 10/28/2026
v4.0.1-6
Changes:
#1348: cli: Show OIDC publishing in help
This list of changes was auto generated.
Released by lszomoru on 10/27/2026
v4.0.1-5
Changes:
#1346: Set npm minimum release age and apply audit fixes#1345: publish: send X-Market-CI-Provider header with Marketplace requests
This list of changes was auto generated.
Released by lszomoru on 10/27/2026
expressjs/express (express)
5.2.1 -> 5.3.0
v5.3.0
Highlights
🐞 Bug fixes
Fixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by [YuryShkoda](https://github.com/YuryShkoda) in
#4893Fixed the behavior of
res.send()to prevent conflicts betweenContent-LengthandTransfer-EncodingHTTP headers in responses. TheContent-Lengthheader inres.send()is now only added when aTransfer-Encodingheader is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of aTransfer-Encodingheader - by [cuishuang](https://github.com/cuishuang) in#7459
- Upgrade
qsto^6.16.0, which fixes CVE-2026-2391 (GHSA-w7fw-mjwx-w883), [CVE-2026-...
[View full release notes]
Released by UlisesGascon on 10/9/2026
stacksjs/stacks (@stacksjs/alias)
0.75.390 -> 0.75.432
v0.75.432
Changelog
🐛 Bug Fixes
- require query builder credential and SQLSTATE corrections (f11e956) (by Chris Breuer chris@stacksjs.com)
📝 Documentation
- forms: describe transaction-owned provisioning locks (dc10ec1) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.432 (f5116ff) (by Chris Breuer chris@stacksjs.com)
Contributors
- Chris Breuer chris@stacksjs.com
Released by github-actions[bot] on 11/2/2026
v0.75.431
Changelog
🐛 Bug Fixes
- encode database connection URL components (70e5aed) (by Chris Breuer chris@stacksjs.com)
- serialize form provisioning and row lease claims (49a3b8f) (by Chris Breuer chris@stacksjs.com)
✅ Tests
- datetime: isolate cold formatter construction from shared cache (7c65a03) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.431 (489adb1) (by Chris Breuer chris@stacksjs.com)
- docs: refresh database capability references (6df8bc4) (by Chris Breuer chris@stacksjs.com)
- database: install published connection and retry fixes ([
39bb5a7](https://github.com/stacksjs/s...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
v0.75.423
Changelog
🐛 Bug Fixes
- defaults: model messages keyed by rules their validators have (6b4d476) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - orm: a model write reports the model's own validation messages (991ba43) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - router: an action's per-rule messages show for the rule that failed (ca24366) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - validation: custom messages reach the errors they name, with no shared state (c2e5b97) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - **validat...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
stacksjs/bun-router (@stacksjs/bun-router)
0.1.20 -> 0.1.24
v0.1.24
Released by github-actions[bot] on 10/6/2026
v0.1.23
Released by github-actions[bot] on 10/6/2026
v0.1.22
Released by github-actions[bot] on 10/5/2026
stacksjs/stacks (@stacksjs/cache)
0.75.390 -> 0.75.432
v0.75.432
Changelog
🐛 Bug Fixes
- require query builder credential and SQLSTATE corrections (f11e956) (by Chris Breuer chris@stacksjs.com)
📝 Documentation
- forms: describe transaction-owned provisioning locks (dc10ec1) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.432 (f5116ff) (by Chris Breuer chris@stacksjs.com)
Contributors
- Chris Breuer chris@stacksjs.com
Released by github-actions[bot] on 11/2/2026
v0.75.431
Changelog
🐛 Bug Fixes
- encode database connection URL components (70e5aed) (by Chris Breuer chris@stacksjs.com)
- serialize form provisioning and row lease claims (49a3b8f) (by Chris Breuer chris@stacksjs.com)
✅ Tests
- datetime: isolate cold formatter construction from shared cache (7c65a03) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.431 (489adb1) (by Chris Breuer chris@stacksjs.com)
- docs: refresh database capability references (6df8bc4) (by Chris Breuer chris@stacksjs.com)
- database: install published connection and retry fixes ([
39bb5a7](https://github.com/stacksjs/s...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
v0.75.423
Changelog
🐛 Bug Fixes
- defaults: model messages keyed by rules their validators have (6b4d476) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - orm: a model write reports the model's own validation messages (991ba43) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - router: an action's per-rule messages show for the rule that failed (ca24366) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - validation: custom messages reach the errors they name, with no shared state (c2e5b97) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - **validat...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
stacksjs/stacks (@stacksjs/cli)
0.75.390 -> 0.75.432
v0.75.432
Changelog
🐛 Bug Fixes
- require query builder credential and SQLSTATE corrections (f11e956) (by Chris Breuer chris@stacksjs.com)
📝 Documentation
- forms: describe transaction-owned provisioning locks (dc10ec1) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.432 (f5116ff) (by Chris Breuer chris@stacksjs.com)
Contributors
- Chris Breuer chris@stacksjs.com
Released by github-actions[bot] on 11/2/2026
v0.75.431
Changelog
🐛 Bug Fixes
- encode database connection URL components (70e5aed) (by Chris Breuer chris@stacksjs.com)
- serialize form provisioning and row lease claims (49a3b8f) (by Chris Breuer chris@stacksjs.com)
✅ Tests
- datetime: isolate cold formatter construction from shared cache (7c65a03) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.431 (489adb1) (by Chris Breuer chris@stacksjs.com)
- docs: refresh database capability references (6df8bc4) (by Chris Breuer chris@stacksjs.com)
- database: install published connection and retry fixes ([
39bb5a7](https://github.com/stacksjs/s...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
v0.75.423
Changelog
🐛 Bug Fixes
- defaults: model messages keyed by rules their validators have (6b4d476) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - orm: a model write reports the model's own validation messages (991ba43) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - router: an action's per-rule messages show for the rule that failed (ca24366) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - validation: custom messages reach the errors they name, with no shared state (c2e5b97) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - **validat...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
stacksjs/stacks (@stacksjs/config)
0.75.390 -> 0.75.432
v0.75.432
Changelog
🐛 Bug Fixes
- require query builder credential and SQLSTATE corrections (f11e956) (by Chris Breuer chris@stacksjs.com)
📝 Documentation
- forms: describe transaction-owned provisioning locks (dc10ec1) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.432 (f5116ff) (by Chris Breuer chris@stacksjs.com)
Contributors
- Chris Breuer chris@stacksjs.com
Released by github-actions[bot] on 11/2/2026
v0.75.431
Changelog
🐛 Bug Fixes
- encode database connection URL components (70e5aed) (by Chris Breuer chris@stacksjs.com)
- serialize form provisioning and row lease claims (49a3b8f) (by Chris Breuer chris@stacksjs.com)
✅ Tests
- datetime: isolate cold formatter construction from shared cache (7c65a03) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.431 (489adb1) (by Chris Breuer chris@stacksjs.com)
- docs: refresh database capability references (6df8bc4) (by Chris Breuer chris@stacksjs.com)
- database: install published connection and retry fixes ([
39bb5a7](https://github.com/stacksjs/s...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
v0.75.423
Changelog
🐛 Bug Fixes
- defaults: model messages keyed by rules their validators have (6b4d476) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - orm: a model write reports the model's own validation messages (991ba43) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - router: an action's per-rule messages show for the rule that failed (ca24366) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - validation: custom messages reach the errors they name, with no shared state (c2e5b97) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - **validat...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
stacksjs/stacks (@stacksjs/database)
0.75.390 -> 0.75.432
v0.75.432
Changelog
🐛 Bug Fixes
- require query builder credential and SQLSTATE corrections (f11e956) (by Chris Breuer chris@stacksjs.com)
📝 Documentation
- forms: describe transaction-owned provisioning locks (dc10ec1) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.432 (f5116ff) (by Chris Breuer chris@stacksjs.com)
Contributors
- Chris Breuer chris@stacksjs.com
Released by github-actions[bot] on 11/2/2026
v0.75.431
Changelog
🐛 Bug Fixes
- encode database connection URL components (70e5aed) (by Chris Breuer chris@stacksjs.com)
- serialize form provisioning and row lease claims (49a3b8f) (by Chris Breuer chris@stacksjs.com)
✅ Tests
- datetime: isolate cold formatter construction from shared cache (7c65a03) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.431 (489adb1) (by Chris Breuer chris@stacksjs.com)
- docs: refresh database capability references (6df8bc4) (by Chris Breuer chris@stacksjs.com)
- database: install published connection and retry fixes ([
39bb5a7](https://github.com/stacksjs/s...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
v0.75.423
Changelog
🐛 Bug Fixes
- defaults: model messages keyed by rules their validators have (6b4d476) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - orm: a model write reports the model's own validation messages (991ba43) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - router: an action's per-rule messages show for the rule that failed (ca24366) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - validation: custom messages reach the errors they name, with no shared state (c2e5b97) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - **validat...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
stacksjs/stacks (@stacksjs/dns)
0.75.390 -> 0.75.432
v0.75.432
Changelog
🐛 Bug Fixes
- require query builder credential and SQLSTATE corrections (f11e956) (by Chris Breuer chris@stacksjs.com)
📝 Documentation
- forms: describe transaction-owned provisioning locks (dc10ec1) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.432 (f5116ff) (by Chris Breuer chris@stacksjs.com)
Contributors
- Chris Breuer chris@stacksjs.com
Released by github-actions[bot] on 11/2/2026
v0.75.431
Changelog
🐛 Bug Fixes
- encode database connection URL components (70e5aed) (by Chris Breuer chris@stacksjs.com)
- serialize form provisioning and row lease claims (49a3b8f) (by Chris Breuer chris@stacksjs.com)
✅ Tests
- datetime: isolate cold formatter construction from shared cache (7c65a03) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.431 (489adb1) (by Chris Breuer chris@stacksjs.com)
- docs: refresh database capability references (6df8bc4) (by Chris Breuer chris@stacksjs.com)
- database: install published connection and retry fixes ([
39bb5a7](https://github.com/stacksjs/s...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
v0.75.423
Changelog
🐛 Bug Fixes
- defaults: model messages keyed by rules their validators have (6b4d476) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - orm: a model write reports the model's own validation messages (991ba43) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - router: an action's per-rule messages show for the rule that failed (ca24366) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - validation: custom messages reach the errors they name, with no shared state (c2e5b97) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - **validat...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
stacksjs/stacks (@stacksjs/env)
0.75.390 -> 0.75.432
v0.75.432
Changelog
🐛 Bug Fixes
- require query builder credential and SQLSTATE corrections (f11e956) (by Chris Breuer chris@stacksjs.com)
📝 Documentation
- forms: describe transaction-owned provisioning locks (dc10ec1) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.432 (f5116ff) (by Chris Breuer chris@stacksjs.com)
Contributors
- Chris Breuer chris@stacksjs.com
Released by github-actions[bot] on 11/2/2026
v0.75.431
Changelog
🐛 Bug Fixes
- encode database connection URL components (70e5aed) (by Chris Breuer chris@stacksjs.com)
- serialize form provisioning and row lease claims (49a3b8f) (by Chris Breuer chris@stacksjs.com)
✅ Tests
- datetime: isolate cold formatter construction from shared cache (7c65a03) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.431 (489adb1) (by Chris Breuer chris@stacksjs.com)
- docs: refresh database capability references (6df8bc4) (by Chris Breuer chris@stacksjs.com)
- database: install published connection and retry fixes ([
39bb5a7](https://github.com/stacksjs/s...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
v0.75.423
Changelog
🐛 Bug Fixes
- defaults: model messages keyed by rules their validators have (6b4d476) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - orm: a model write reports the model's own validation messages (991ba43) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - router: an action's per-rule messages show for the rule that failed (ca24366) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - validation: custom messages reach the errors they name, with no shared state (c2e5b97) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - **validat...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
stacksjs/stacks (@stacksjs/error-handling)
0.75.390 -> 0.75.432
v0.75.432
Changelog
🐛 Bug Fixes
- require query builder credential and SQLSTATE corrections (f11e956) (by Chris Breuer chris@stacksjs.com)
📝 Documentation
- forms: describe transaction-owned provisioning locks (dc10ec1) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.432 (f5116ff) (by Chris Breuer chris@stacksjs.com)
Contributors
- Chris Breuer chris@stacksjs.com
Released by github-actions[bot] on 11/2/2026
v0.75.431
Changelog
🐛 Bug Fixes
- encode database connection URL components (70e5aed) (by Chris Breuer chris@stacksjs.com)
- serialize form provisioning and row lease claims (49a3b8f) (by Chris Breuer chris@stacksjs.com)
✅ Tests
- datetime: isolate cold formatter construction from shared cache (7c65a03) (by Chris Breuer chris@stacksjs.com)
🔧 Chores
- release v0.75.431 (489adb1) (by Chris Breuer chris@stacksjs.com)
- docs: refresh database capability references (6df8bc4) (by Chris Breuer chris@stacksjs.com)
- database: install published connection and retry fixes ([
39bb5a7](https://github.com/stacksjs/s...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
v0.75.423
Changelog
🐛 Bug Fixes
- defaults: model messages keyed by rules their validators have (6b4d476) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - orm: a model write reports the model's own validation messages (991ba43) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - router: an action's per-rule messages show for the rule that failed (ca24366) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - validation: custom messages reach the errors they name, with no shared state (c2e5b97) (by glennmichael123 gtorregosa@gmail.com) (
#3123) - **validat...
[View full release notes]
Released by github-actions[bot] on 11/2/2026
Note: This PR body was truncated due to GitHub's character limit. View the full details in the individual commits.
This PR was generated by Buddy 🤖
{"schemaVersion":1,"updates":[{"name":"@types/vscode","current":"1.109.0","target":"1.144.0","type":"minor","file":"storage/framework/defaults/ide/vscode/package.json","dependencyType":"dependencies"},{"name":"@vscode/vsce","current":"4.0.0","target":"4.1.0","type":"minor","file":"storage/framework/defaults/ide/vscode/package.json","dependencyType":"dependencies"},{"name":"express","current":"5.2.1","target":"5.3.0","type":"minor","file":"bench/routing/package.json","dependencyType":"dependencies"},{"name":"gnu.org/gettext","current":"^0.21","target":"0.26","type":"minor","file":"deps.yml","dependencyType":"dependencies"},{"name":"zlib.net","current":"^1.2.11","target":"1.3.2","type":"minor","file":"deps.yml","dependencyType":"dependencies"},{"name":"@stacksjs/alias","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/docs/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/bun-router","current":"0.1.20","target":"0.1.24","type":"patch","file":"storage/framework/orm/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/cache","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/orm/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/cli","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/cloud/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/config","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/cloud/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/database","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/orm/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/dns","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/cloud/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/env","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/cloud/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/error-handling","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/orm/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/logging","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/api/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/path","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/cloud/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/queue","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/api/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/router","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/api/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/server","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/docs/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/storage","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/api/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/stx-vscode","current":"0.2.359","target":"0.2.785","type":"patch","file":"storage/framework/defaults/ide/vscode/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/utils","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/api/package.json","dependencyType":"dependencies"},{"name":"@stacksjs/validation","current":"0.75.390","target":"0.75.432","type":"patch","file":"storage/framework/cloud/package.json","dependencyType":"dependencies"},{"name":"better-dx","current":"0.2.25","target":"0.2.38","type":"patch","file":"package.json","dependencyType":"dependencies"},{"name":"hono","current":"4.13.11","target":"4.13.16","type":"patch","file":"bench/routing/package.json","dependencyType":"dependencies"},{"name":"stacks","current":"0.75.390","target":"0.75.432","type":"patch","file":"package.json","dependencyType":"dependencies"}],"group":"Non-Major Updates","generatedAt":"2026-11-02T20:04:27.551Z"} -->