Skip to content

build(deps): bump the server-dependencies group across 1 directory with 28 updates#2425

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/server/server-dependencies-a8176f270f
Open

build(deps): bump the server-dependencies group across 1 directory with 28 updates#2425
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/server/server-dependencies-a8176f270f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the server-dependencies group with 28 updates in the /server directory:

Package From To
@influxdata/influxdb-client 1.25.0 1.35.0
@questdb/nodejs-client 3.0.0 4.2.0
@tdengine/rest 3.0.2 3.0.3
app-root-path 2.2.1 3.1.0
async 3.2.3 3.2.6
bcryptjs 2.4.3 3.0.3
body-parser 1.20.5 2.3.0
csv-parser 3.0.0 3.2.1
dayjs 1.11.9 1.11.21
express 4.22.2 5.2.1
@types/express 5.0.0 5.0.6
express-rate-limit 5.5.1 8.5.2
fs-extra 7.0.1 11.3.6
influx 5.9.3 5.12.0
morgan 1.10.1 1.11.0
mqtt 4.3.7 5.15.1
node-red 4.1.11 5.0.1
nodemailer 8.0.11 9.0.3
nopt 5.0.0 10.0.1
pdfmake 0.2.5 0.3.11
serialport 12.0.0 13.0.0
sqlite3 5.1.7 6.0.1
winston 3.7.2 3.19.0
@mapbox/node-pre-gyp 1.0.11 2.0.3
chai 5.1.2 6.2.2
mocha 10.8.2 11.7.6
sinon 19.0.2 22.0.0
typescript 5.6.3 6.0.3

Updates @influxdata/influxdb-client from 1.25.0 to 1.35.0

Release notes

Sourced from @​influxdata/influxdb-client's releases.

1.35.0

Bug Fixes

  1. #1044: Allow 201 status code in a write response.

1.34.0

Breaking Changes

⚠️ Drop supports for node v14, v15 and v16 in CI.

Features:

  1. #1005: Token stored as a private class property.
  2. #1019: Propagates headers from HTTP response when an error is returned from the server.

CI

  1. #893: Add node v20 to CI.
  2. #953: Add node v21 to CI.

v1.33.2

1.33.2 [2023-02-23]

Bug Fixes

  1. Various updates to dependencies

v1.33.1

1.33.1 [2023-01-26]

Bug Fixes

  1. Various updates to dependencies

v1.33.0

1.33.0 [2022-12-02]

Bug Fixes

  1. Various updates to dependencies

1.32.0

Features

  1. #592: Allow to receive query results using for-await loop.

Breaking Changes

  1. #592: The client packages newly require ES2018 runtime (was ES2015). The javascript code now needs async generators and for-await loop. At least the latest node 14 is required because of mature support for iterable http response. Deno and all current modern browsers support ES2018 for years back. This change shoudn't cause any harm in existing installations. In case of troubles, configure your project with babel ES2018 preset to produce ES2015 code.

... (truncated)

Changelog

Sourced from @​influxdata/influxdb-client's changelog.

1.35.0 [2024-08-15]

Bug Fixes

  1. #1044: Allow 201 status code in a write response.

1.34.0 [2024-07-26]

Breaking Changes

⚠️ Drop supports for node v14, v15 and v16 in CI.

Features:

  1. #1005: Token stored as a private class property.
  2. #1019: Propagates headers from HTTP response when an error is returned from the server.
  3. #1020: Adds example of working with HttpError response.

CI

  1. #893: Add node v20 to CI.
  2. #953: Add node v21 to CI.

1.33.2 [2023-02-23]

Bug Fixes

  1. Various updates to dependencies

1.33.1 [2023-01-26]

Bug Fixes

  1. Various updates to dependencies

1.33.0 [2022-12-02]

Bug Fixes

  1. Various updates to dependencies

1.32.0 [2022-11-01]

Features

  1. #592: Allow to receive query results using for-await loop.

Other

  1. #624: Upgrade to the latest node v18 LTS.

... (truncated)

Commits
  • fe5bc8e chore(release): publish v1.35.0 [skip CI]
  • 187e987 chore(release): prepare to release influxdb-client-js-1.35.0
  • fff3615 fix: handle 201 response from write endpoint (#1044)
  • b11ebbf chore(deps-dev): bump @​typescript-eslint/parser from 7.14.1 to 8.0.0 (#1025)
  • e535fb0 chore(deps-dev): bump prettier from 3.3.2 to 3.3.3 (#1028)
  • d35725e chore(deps-dev): bump esbuild from 0.22.0 to 0.23.0 (#1024)
  • 7cb8e43 Merge pull request #1020 from influxdata/docs/headersExample
  • 3d1ff62 docs: adds httpErrorHandled example and integration test for HttpError
  • 147f6ee chore(release): publish v1.34.0 [skip CI]
  • 4db6db9 chore(release): prepare to release influxdb-client-js-1.34.0
  • Additional commits viewable in compare view

Updates @questdb/nodejs-client from 3.0.0 to 4.2.0

Release notes

Sourced from @​questdb/nodejs-client's releases.

Support for the DECIMAL type

Release Overview

This release adds full support for the DECIMAL data type, aligning the client library with the QuestDB 9.2.0 server update.

DECIMAL Support

With QuestDB 9.2.0 introducing the new DECIMAL data type, this release extends the client API to enable seamless ingestion and handling of decimal values.
The updated API supports DECIMAL values provided as string, number, BigInt or Int8Array with a scale, and supports ingestion in both text and binary forms.

For detailed usage examples, refer to the updated API documentation.

Compatibility

This version remains fully backwards compatible.
However, the new DECIMAL functionality requires a server that supports protocol v3 — available in QuestDB 9.2.0 or later.

Nanosecond precision

Release Overview

This release introduces nanosecond precision support for timestamps, aligning the client library with the recent QuestDB 9.1.0 server update.

Nanosecond Precision Support

Previously, while the API allowed timestamps to be specified in nanoseconds, they were stored on the server with only microsecond precision.
QuestDB 9.1.0 added nanosecond accuracy through the new TIMESTAMP_NS data type, and this library update brings full client-side support for it.

Starting with this release:

  • When using protocol version v2 or higher, and timestamps are provided in nanoseconds, they are now recorded on the server with full nanosecond precision, provided the column type is TIMESTAMP_NS.
  • If the column does not yet exist and the client sends nanosecond timestamps, the server will automatically create the column as TIMESTAMP_NS.
  • This behavior also applies to the designated timestamp column.

For compatibility:

  • Protocol version v1 remains unchanged and continues to store timestamps with microsecond precision, ensuring full backward compatibility.

Export SenderOptions class

A maintenance release to fix exports in the library. SenderOptions was exported only as a type, its methods were not available for use. Many thanks to @​nicochatzi for providing the fix!

This release also exports the createBuffer() and createSender() factory functions, so now we can do this:

    const options: SenderOptions = await SenderOptions.fromConfig('http::addr=localhost:9000');
    const buffer: SenderBuffer = createBuffer(options);
    const transport: SenderTransport = createTransport(options);

buffer.table("test").symbol("sym", "sym1").floatColumn("fp64", 1.123).atNow();
await transport.send(buffer.toBufferNew());



</tr></table>

... (truncated)

Commits

Updates @tdengine/rest from 3.0.2 to 3.0.3

Release notes

Sourced from @​tdengine/rest's releases.

3.0.3.0

New Features:

  • You can now create windowed queries that are triggered by events - just specify any conditions that TDengine supports, including operations on different columns.
  • Indexing on any tag: You can now create an index on any tag, enabling improved query performance when filtering by tag.
  • (Enterprise Edition only) Data compaction: TDengine Enterprise Edition now provides the COMPACT statement to reorganize your database and remove gaps from deleted or updated records. This can greatly improve storage and query performance on deployments that have been running for some time.
  • (Enterprise Edition only) TDengine Explorer: TDengine Enterprise Edition now offers a convenient GUI to make ad hoc time-series operations and instance management even easier.
  • (Enterprise Edition only) Local backup and migration: The latest version of taosX included with TDengine Enterprise Edition 3.0.3.0 can back up and restore a TDengine deployment from a local file. taosX can also migrate data from existing TDengine 2.6 or 3.x deployments to TDengine 3.0.3.0, either incrementally or in full.

Enhancements:

  • Results of stream processing can be stored in existing stables
  • You can specify tags when storing the results of stream processing
  • Data can be subscribed over websocket using Java Connector
  • Data can be subscribed over websocket using Python Connector
  • You can monitor HTTP status code on Grafana Dashboard
  • Grafana plugin supports multi-dimensional alerts
  • taosBenchmark can write data into sepcified range of child tables
  • taosBenchmark can specify the number of vgroups on command line

What's Changed

... (truncated)

Commits
  • 4c69835 Merge pull request #20327 from taosdata/fix/xftan/TS-2827/main
  • c4d2718 Merge pull request #20332 from taosdata/fix/main_bugfix_wxy
  • 5d80e71 fix: check the compatibility of client version and server version
  • 098dddc Merge pull request #20328 from taosdata/fix/TD-22972
  • ac1b924 Merge pull request #20330 from taosdata/fix/msg_check
  • 3db2c59 fix: check the compatibility of client version and server version
  • e034d7a Merge pull request #20321 from taosdata/fix/TD-22247-M
  • 38c9501 docs: this line is inaccurate, in current connector-python repo, it require p...
  • 1439bdc Merge pull request #20306 from taosdata/feat/add-reboot-time
  • 0568838 little fix
  • Additional commits viewable in compare view

Updates app-root-path from 2.2.1 to 3.1.0

Release notes

Sourced from app-root-path's releases.

3.1.0

Added

Fixed

New Contributors

Full Changelog: inxilpro/node-app-root-path@v2.1.0...3.1.0

3.0.0

Improved Plug'n'Play and Webpack support.

Commits

Updates async from 3.2.3 to 3.2.6

Changelog

Sourced from async's changelog.

v3.2.5

  • Ensure Error objects such as AggregateError are propagated without modification (#1920)

v3.2.4

  • Fix a bug in priorityQueue where it didn't wait for the result. (#1725)
  • Fix a bug where unshiftAsync was included in priorityQueue. (#1790)
Commits
  • 85fb18f Version 3.2.6
  • 8c0c941 Update built files
  • 5f756b4 Fix ReDoS (#1980)
  • 39cdc9b build(deps-dev): bump karma from 6.4.3 to 6.4.4 (#1985)
  • 7b8ddeb build(deps-dev): bump @​babel/core from 7.24.7 to 7.25.2 (#1981)
  • 4634a9d build(deps-dev): bump rollup from 4.18.0 to 4.19.2 (#1982)
  • afb176c build(deps-dev): bump chai from 4.4.1 to 4.5.0 (#1983)
  • 3568a74 build(deps-dev): bump @​babel/eslint-parser from 7.24.7 to 7.25.1 (#1984)
  • 9e885fd build(deps-dev): bump babel-plugin-istanbul from 6.1.1 to 7.0.0 (#1986)
  • f9c7f2a build(deps-dev): bump semver from 7.6.2 to 7.6.3 (#1987)
  • Additional commits viewable in compare view

Updates bcryptjs from 2.4.3 to 3.0.3

Release notes

Sourced from bcryptjs's releases.

v3.0.3

Bug fixes

  • Always yield to event loop before nextTick for async versions (#164) (1211e9a2213e0b3ee232a204b3ce899beebce31a)

v3.0.2

Bug fixes

  • Use upstream fix to emit interop helpers (28e510389374f5736c447395443d4a6687325048)

v3.0.1

Bug fixes

  • Separate ESM and UMD type definitions (e7055caf0c723cbcf8bc3f0784b8c30ee332380f)

v3.0.0

Breaking changes

  • Modernize project structure (2f45985738604c743c4b8cc8464e3e7d3e04c73d) The project now exports an ECMAScript module by default, albeit with an UMD fallback, ships with types, the dist/ directory no longer exists in version control, and Closure Compiler externs have been removed.
  • Generate 2b hashes by default (d36bfb42fa642b6d6986a84ce106a7110e5824db) This library was not affected by the bug that led to incrementing the bcrypt version from 2a to 2b, but nowadays most implementations use 2b, including the native bcrypt binding, so this change aligns with them. Existing hashes will continue to work, but test logic that generates hashes and compares them literally might need to be updated to account for the new default.

Features

  • Add helper to check for password input length (d5656b39e2e368c87724a312e4e454456a4e5d1b)

Other

  • Update publish workflow (2a9bea9e276e6be04dbd403f9695937788b3b10a)
  • Add note on using the ESM variant in the browser (e09eb9afb14170069aaea19631b763307ee7b480)
  • Update types (58333a1533dd53838e2697628f84b98d54a5c079)
  • Merge lint and test workflows (2e3b17659e8856696acfe3015631ce2989eb3084)
  • Fix tests (ec02e8a0ada7a8f6c71a91df164db8c25bbbb7b4)
  • Update legacy fallback to handle crypto dependency (9db275fa10b1b40da4a6844480d7f8ae8df27fb8)
  • Update lint workflow title (ac70ac57c2f99ad5639eddf54578e5fdd07b9c4c)
  • Adapt crypto module usage for ESM environments (574d690d4972bcebbd5ca07880a62abab9ae3c0b)
  • Format with prettier (e7465479282d8155852ce88d6407eccb14adc106)
  • Rename default branch to 'main' (548559d032d7dd5ac3e4e16d7afd87b36ebe96ca)
  • Update description to mention TypeScript support (4977df0849eaf8cad5b0d0b543fe452432a2d761)
  • Add stale action for issues and PRs (a84d4e45487df0972d8781feafa477d5db4c1dbd)
  • Fix typo (c8c9c01799bbc13092fcbb20cfab4d9015d14c61)
  • Fix Node.js version in CI (1b54cc48d4120b50e1d9058e5a67f326102fd744)

Backlog from v2

  • Added externs to .npmignore (#124) (7e2e93af99df2952253f9cf32db29aefa8f272f7) The npm package does not need externs as it is needed only for closure compiler. Added it in .npmignore since bcryptjs overrides global module and process in WebStorm IDE.
  • Make sure the bin script uses LF (684fac6814a81d974c805a15e22fd69922c7ca6e)
  • Post-merge; Clean up a bit (b09f7f266a7015456b7b36deeb026dc636f64542)

... (truncated)

Commits
  • 1211e9a fix: Always yield to event loop before nextTick for async versions (#164)
  • 28e5103 fix: Use upstream fix to emit interop helpers
  • e7055ca fix: Separate ESM and UMD type definitions
  • 2a9bea9 Update publish workflow
  • d5656b3 Add helper to check for password input length
  • e09eb9a Add note on using the ESM variant in the browser
  • 58333a1 Update types
  • 2e3b176 Merge lint and test workflows
  • ec02e8a Fix tests
  • 9db275f Update legacy fallback to handle crypto dependency
  • Additional commits viewable in compare view

Updates body-parser from 1.20.5 to 2.3.0

Release notes

Sourced from body-parser's releases.

v2.3.0

What's Changed

New Contributors

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

v2.2.2

What's Changed

... (truncated)

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

  • fix: use static exports instead of lazy getters to improve ESM compatibility
  • feat: add subpath exports for individual parsers
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
  • deps:
    • content-type@^2.0.0
    • http-errors@^2.0.1
    • iconv-lite^0.7.2
    • qs@^6.15.2
    • raw-body@^3.0.2
    • type-is@^2.1.0

2.2.2 / 2026-01-07

  • deps: qs@^6.14.1
  • refactor(json): simplify strict mode error string construction

2.2.1 / 2025-11-24

  • Security fix for GHSA-wqch-xfxh-vrr4
  • deps:
    • type-is@^2.0.1
    • iconv-lite@^0.7.0
      • Handle split surrogate pairs when encoding UTF-8
      • Avoid false positives in encodingExists by using prototype-less objects
    • raw-body@^3.0.1
    • debug@^4.4.3

2.2.0 / 2025-03-27

  • refactor: normalize common options for all parsers
  • deps:
    • iconv-lite@^0.6.3

2.1.0 / 2025-02-10

  • deps:
    • type-is@^2.0.0
    • debug@^4.4.0
    • Removed destroy
  • refactor: prefix built-in node module imports
  • use the node require cache instead of custom caching

... (truncated)

Commits
  • d0f2ace 2.3.0 (#735)
  • 7d03f2f chore: updated deps to latest (#733)
  • 8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
  • 32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
  • ff0f6b9 docs: update outdated reference to MDN docs (#730)
  • 14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
  • 37f36a2 deps: update content-type and type-is (#728)
  • e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
  • e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
  • a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
  • Additional commits viewable in compare view

Updates csv-parser from 3.0.0 to 3.2.1

Commits

Updates dayjs from 1.11.9 to 1.11.21

Release notes

Sourced from dayjs's releases.

v1.11.21

1.11.21 (2026-05-26)

Bug Fixes

v1.11.20

1.11.20 (2026-03-12)

Bug Fixes

  • Update locale km.js to support meridiem (#3017) (9d2b6a1)
  • update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118

v1.11.19

1.11.19 (2025-10-31)

Bug Fixes

  • added usage warnings for diff + updated unit tests (#2948) (269a7a9)
  • dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
  • replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
  • Updated Belarusian locale with relative time (#2656) (1d8746c)

v1.11.18

1.11.18 (2025-08-30)

Bug Fixes

  • error semantic-release dependency (8cfb313)

v1.11.17

1.11.17 (2025-08-29)

Bug Fixes

  • [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

v1.11.16

1.11.16 (2025-08-29)

Bug Fixes

... (truncated)

Changelog

Sourced from dayjs's changelog.

1.11.21 (2026-05-26)

Bug Fixes

1.11.20 (2026-03-12)

Bug Fixes

  • Update locale km.js to support meridiem (#3017) (9d2b6a1)
  • update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118

1.11.19 (2025-10-31)

Bug Fixes

  • added usage warnings for diff + updated unit tests (#2948) (269a7a9)
  • dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
  • replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
  • Updated Belarusian locale with relative time (#2656) (1d8746c)

1.11.18 (2025-08-30)

Bug Fixes

  • error semantic-release dependency (8cfb313)

1.11.17 (2025-08-29)

Bug Fixes

  • [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

1.11.16 (2025-08-29)

Bug Fixes

  • test release workflow (no code changes) (c38c428)

1.11.15 (2025-08-28)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for dayjs since your current version.


Updates express from 4.22.2 to 5.2.1

Release notes

Sourced from express's rele...

Description has been truncated

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 2, 2026
@dependabot
build(deps): bump the server-dependencies group across 1 directory wi…
90f0529 
…th 28 updates

Bumps the server-dependencies group with 28 updates in the /server directory:

| Package | From | To |
| --- | --- | --- |
| [@influxdata/influxdb-client](https://github.com/influxdata/influxdb-client-js/tree/HEAD/packages/core) | `1.25.0` | `1.35.0` |
| [@questdb/nodejs-client](https://github.com/questdb/nodejs-questdb-client) | `3.0.0` | `4.2.0` |
| [@tdengine/rest](https://github.com/taosdata/TDengine) | `3.0.2` | `3.0.3` |
| [app-root-path](https://github.com/inxilpro/node-app-root-path) | `2.2.1` | `3.1.0` |
| [async](https://github.com/caolan/async) | `3.2.3` | `3.2.6` |
| [bcryptjs](https://github.com/dcodeIO/bcrypt.js) | `2.4.3` | `3.0.3` |
| [body-parser](https://github.com/expressjs/body-parser) | `1.20.5` | `2.3.0` |
| [csv-parser](https://github.com/mafintosh/csv-parser) | `3.0.0` | `3.2.1` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.9` | `1.11.21` |
| [express](https://github.com/expressjs/express) | `4.22.2` | `5.2.1` |
| [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `5.0.0` | `5.0.6` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `5.5.1` | `8.5.2` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `7.0.1` | `11.3.6` |
| [influx](https://github.com/node-influx/node-influx) | `5.9.3` | `5.12.0` |
| [morgan](https://github.com/expressjs/morgan) | `1.10.1` | `1.11.0` |
| [mqtt](https://github.com/mqttjs/MQTT.js) | `4.3.7` | `5.15.1` |
| [node-red](https://github.com/node-red/node-red) | `4.1.11` | `5.0.1` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `8.0.11` | `9.0.3` |
| [nopt](https://github.com/npm/nopt) | `5.0.0` | `10.0.1` |
| [pdfmake](https://github.com/bpampuch/pdfmake) | `0.2.5` | `0.3.11` |
| [serialport](https://github.com/serialport/node-serialport) | `12.0.0` | `13.0.0` |
| [sqlite3](https://github.com/TryGhost/node-sqlite3) | `5.1.7` | `6.0.1` |
| [winston](https://github.com/winstonjs/winston) | `3.7.2` | `3.19.0` |
| [@mapbox/node-pre-gyp](https://github.com/mapbox/node-pre-gyp) | `1.0.11` | `2.0.3` |
| [chai](https://github.com/chaijs/chai) | `5.1.2` | `6.2.2` |
| [mocha](https://github.com/mochajs/mocha) | `10.8.2` | `11.7.6` |
| [sinon](https://github.com/sinonjs/sinon) | `19.0.2` | `22.0.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.6.3` | `6.0.3` |



Updates `@influxdata/influxdb-client` from 1.25.0 to 1.35.0
- [Release notes](https://github.com/influxdata/influxdb-client-js/releases)
- [Changelog](https://github.com/influxdata/influxdb-client-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/influxdata/influxdb-client-js/commits/v1.35.0/packages/core)

Updates `@questdb/nodejs-client` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/questdb/nodejs-questdb-client/releases)
- [Commits](questdb/nodejs-questdb-client@v3.0.0...v4.2.0)

Updates `@tdengine/rest` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/taosdata/TDengine/releases)
- [Commits](taosdata/TDengine@ver-3.0.2.0...ver-3.0.3.0)

Updates `app-root-path` from 2.2.1 to 3.1.0
- [Release notes](https://github.com/inxilpro/node-app-root-path/releases)
- [Commits](inxilpro/node-app-root-path@2.2.1...3.1.0)

Updates `async` from 3.2.3 to 3.2.6
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v3.2.3...v3.2.6)

Updates `bcryptjs` from 2.4.3 to 3.0.3
- [Release notes](https://github.com/dcodeIO/bcrypt.js/releases)
- [Commits](dcodeIO/bcrypt.js@2.4.3...v3.0.3)

Updates `body-parser` from 1.20.5 to 2.3.0
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.5...v2.3.0)

Updates `csv-parser` from 3.0.0 to 3.2.1
- [Release notes](https://github.com/mafintosh/csv-parser/releases)
- [Commits](mafintosh/csv-parser@v3.0.0...v3.2.1)

Updates `dayjs` from 1.11.9 to 1.11.21
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.9...v1.11.21)

Updates `express` from 4.22.2 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v4.22.2...v5.2.1)

Updates `@types/express` from 5.0.0 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `express-rate-limit` from 5.5.1 to 8.5.2
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v5.5.1...v8.5.2)

Updates `fs-extra` from 7.0.1 to 11.3.6
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@7.0.1...11.3.6)

Updates `influx` from 5.9.3 to 5.12.0
- [Release notes](https://github.com/node-influx/node-influx/releases)
- [Changelog](https://github.com/node-influx/node-influx/blob/master/CHANGELOG.md)
- [Commits](node-influx/node-influx@v5.9.3...v5.12.0)

Updates `morgan` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/expressjs/morgan/releases)
- [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md)
- [Commits](expressjs/morgan@1.10.1...1.11.0)

Updates `mqtt` from 4.3.7 to 5.15.1
- [Release notes](https://github.com/mqttjs/MQTT.js/releases)
- [Changelog](https://github.com/mqttjs/MQTT.js/blob/main/CHANGELOG.OLD.md)
- [Commits](mqttjs/MQTT.js@v4.3.7...v5.15.1)

Updates `node-red` from 4.1.11 to 5.0.1
- [Release notes](https://github.com/node-red/node-red/releases)
- [Changelog](https://github.com/node-red/node-red/blob/main/CHANGELOG.md)
- [Commits](node-red/node-red@4.1.11...5.0.1)

Updates `nodemailer` from 8.0.11 to 9.0.3
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v8.0.11...v9.0.3)

Updates `nopt` from 5.0.0 to 10.0.1
- [Release notes](https://github.com/npm/nopt/releases)
- [Changelog](https://github.com/npm/nopt/blob/main/CHANGELOG.md)
- [Commits](npm/nopt@v5.0.0...v10.0.1)

Updates `pdfmake` from 0.2.5 to 0.3.11
- [Release notes](https://github.com/bpampuch/pdfmake/releases)
- [Changelog](https://github.com/bpampuch/pdfmake/blob/master/CHANGELOG.md)
- [Commits](bpampuch/pdfmake@0.2.5...0.3.11)

Updates `serialport` from 12.0.0 to 13.0.0
- [Release notes](https://github.com/serialport/node-serialport/releases)
- [Changelog](https://github.com/serialport/node-serialport/blob/main/CHANGELOG.md)
- [Commits](serialport/node-serialport@v12.0.0...v13.0.0)

Updates `sqlite3` from 5.1.7 to 6.0.1
- [Release notes](https://github.com/TryGhost/node-sqlite3/releases)
- [Commits](TryGhost/node-sqlite3@v5.1.7...v6.0.1)

Updates `winston` from 3.7.2 to 3.19.0
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston@v3.7.2...v3.19.0)

Updates `@mapbox/node-pre-gyp` from 1.0.11 to 2.0.3
- [Release notes](https://github.com/mapbox/node-pre-gyp/releases)
- [Changelog](https://github.com/mapbox/node-pre-gyp/blob/master/CHANGELOG.md)
- [Commits](mapbox/node-pre-gyp@v1.0.11...v2.0.3)

Updates `@types/express` from 5.0.0 to 5.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express)

Updates `chai` from 5.1.2 to 6.2.2
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](chaijs/chai@v5.1.2...v6.2.2)

Updates `mocha` from 10.8.2 to 11.7.6
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/v11.7.6/CHANGELOG.md)
- [Commits](mochajs/mocha@v10.8.2...v11.7.6)

Updates `sinon` from 19.0.2 to 22.0.0
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md)
- [Commits](sinonjs/sinon@v19.0.2...v22.0.0)

Updates `typescript` from 5.6.3 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.6.3...v6.0.3)

---
updated-dependencies:
- dependency-name: "@influxdata/influxdb-client"
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: "@mapbox/node-pre-gyp"
  dependency-version: 2.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: "@questdb/nodejs-client"
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: "@tdengine/rest"
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: "@types/express"
  dependency-version: 5.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: app-root-path
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: async
  dependency-version: 3.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: bcryptjs
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: chai
  dependency-version: 6.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: csv-parser
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: dayjs
  dependency-version: 1.11.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-dependencies
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: express-rate-limit
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: fs-extra
  dependency-version: 11.3.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: influx
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: mocha
  dependency-version: 11.7.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: morgan
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: mqtt
  dependency-version: 5.15.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: node-red
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: nodemailer
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: nopt
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: pdfmake
  dependency-version: 0.3.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
- dependency-name: serialport
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: sinon
  dependency-version: 22.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: sqlite3
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: server-dependencies
- dependency-name: winston
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/server/server-dependencies-a8176f270f branch from 4c6fa96 to 90f0529 Compare July 3, 2026 13:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants