chore(deps): bump the create-seam-vendor group across 1 directory with 55 updates by dependabot[bot] · Pull Request #16 · NotJustAnna/SeamStack

dependabot · 2026-11-08T19:45:32Z

Bumps the create-seam-vendor group with 55 updates in the /packages/create-seam/vendor directory:

Package	From	To
@astrojs/mdx	`7.0.7`	`8.1.2`
@astrojs/preact	`6.0.4`	`6.1.1`
@astrojs/react	`6.0.4`	`7.1.3`
@astrojs/svelte	`9.0.1`	`9.1.2`
@astrojs/vue	`7.0.2`	`7.1.2`
@hono/graphql-server	`0.7.0`	`0.7.1`
@hono/node-server	`2.1.1`	`2.1.6`
@nestjs/apollo	`13.4.5`	`14.2.0`
@nestjs/common	`11.2.1`	`12.3.3`
@nestjs/core	`11.2.1`	`12.3.3`
@nestjs/graphql	`13.4.5`	`14.2.0`
@nestjs/platform-express	`11.2.1`	`12.3.3`
@nestjs/serve-static	`5.0.5`	`12.1.1`
@trpc/client	`11.18.0`	`11.24.0`
@trpc/server	`11.18.0`	`11.24.0`
alpinejs	`3.16.2`	`3.17.5`
astro	`7.2.4`	`7.4.6`
@angular/common	`22.1.3`	`22.2.4`
@angular/compiler	`22.1.3`	`22.2.4`
@angular/core	`22.1.3`	`22.2.4`
@angular/platform-browser	`22.1.3`	`22.2.4`
elysia	`1.4.29`	`1.4.31`
express	`5.2.1`	`5.3.0`
fastify	`5.12.1`	`5.12.8`
graphql	`16.14.2`	`17.1.0`
graphql-http	`1.23.0`	`1.23.1`
graphql-yoga	`5.22.0`	`6.0.1`
hono	`4.13.3`	`4.13.16`
mercurius	`16.10.0`	`16.12.1`
preact	`10.29.8`	`11.1.1`
react	`19.2.8`	`19.3.1`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.1`
@types/react-dom	`19.2.4`	`19.3.0`
solid-js	`1.9.15`	`1.9.18`
svelte	`5.56.10`	`5.57.3`
tailwindcss	`4.3.3`	`4.3.4`
tslib	`2.8.1`	`2.9.1`
vue	`3.5.41`	`3.5.45`
zone.js	`0.16.2`	`0.16.3`
@angular/build	`22.1.5`	`22.2.6`
@angular/cli	`22.1.5`	`22.2.6`
@angular/compiler-cli	`22.1.3`	`22.2.4`
@nestjs/cli	`11.0.24`	`12.0.11`
@sveltejs/vite-plugin-svelte	`7.3.0`	`7.3.1`
@tailwindcss/postcss	`4.3.3`	`4.3.4`
@tailwindcss/vite	`4.3.3`	`4.3.4`
@types/node	`22.20.1`	`26.6.6`
@vitejs/plugin-react	`6.1.0`	`6.2.1`
@vitejs/plugin-vue	`6.0.8`	`6.0.10`
postcss	`8.5.26`	`8.5.32`
tsx	`4.23.12`	`4.23.15`
typescript	`6.0.3`	`7.0.2`
vite	`8.2.2`	`8.3.6`
vite-plugin-solid	`2.11.14`	`2.11.15`

Updates @astrojs/mdx from 7.0.7 to 8.1.2

Release notes

Sourced from @astrojs/mdx's releases.

@astrojs/mdx@8.1.2

Patch Changes

Updated dependencies [edfbf4a]:

@astrojs/markdown-satteri@0.4.6

@astrojs/mdx@8.1.1

Patch Changes

#18475 cf27e70 Thanks @ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

Updated dependencies []:

@astrojs/markdown-satteri@0.4.5

@astrojs/mdx@8.1.0

Minor Changes

#18277 2715958 Thanks @florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Patch Changes

Updated dependencies [b7a1bd9]:

@astrojs/internal-helpers@0.13.0

@astrojs/markdown-satteri@0.4.4

Changelog

Sourced from @astrojs/mdx's changelog.

8.1.2

Patch Changes

Updated dependencies [edfbf4a]:

@astrojs/markdown-satteri@0.4.6

8.1.1

Patch Changes

#18475 cf27e70 Thanks @ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

Updated dependencies []:

@astrojs/markdown-satteri@0.4.5

8.1.0

Minor Changes

#18277 2715958 Thanks @florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Patch Changes

Updated dependencies [b7a1bd9]:

@astrojs/internal-helpers@0.13.0

@astrojs/markdown-satteri@0.4.4

8.0.3

Patch Changes

#18099 6987261 Thanks @renovate! - Adds YAML parsing with timestamp and merge key support, and formats YAML errors consistently across Astro, Markdown, MDX, and Markdoc.

Updated dependencies [6987261, 62b13ba]:

@astrojs/internal-helpers@0.12.0

@astrojs/markdown-satteri@0.4.3

8.0.2

Patch Changes

#18036 f4444eb Thanks @astro-factory! - Fixes an incompatibility where @astrojs/mdx v8 could be installed with astro versions that bundle an older @astrojs/markdown-satteri lacking MDX support. Also improves the error message when the processor is too old to suggest updating astro itself.

Updated dependencies [3fd16ee, 8358d59]:

@astrojs/markdown-satteri@0.4.2

8.0.1

... (truncated)

Commits

fda754d [ci] release (#18478)
34c9535 [ci] release (#18459)
cf27e70 fix: minimal support node version (#18475)
c2c43a9 [ci] release (#18354)
83f5f4d Update dependency vite to ^8.3.4 (#18393)
c96d07e Update dependency preact to v11 (#18389)
2715958 feat: increase minimum Node.js version to 22.22.0 (#18277)
5646f43 Update dependency vite to ^8.3.3 (#18321)
eee0d19 Update markdown (#18302)
e5eae02 Update markdown (#18280)
Additional commits viewable in compare view

Updates @astrojs/preact from 6.0.4 to 6.1.1

Release notes

Sourced from @astrojs/preact's releases.

@astrojs/preact@6.1.1

Patch Changes

#18475 cf27e70 Thanks @ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

@astrojs/preact@6.1.0

Minor Changes

#18389 c96d07e Thanks @renovate! - Adds support for Preact v11

#18277 2715958 Thanks @florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Patch Changes

Updated dependencies [b7a1bd9]:

@astrojs/internal-helpers@0.13.0

Changelog

Sourced from @astrojs/preact's changelog.

6.1.1

Patch Changes

#18475 cf27e70 Thanks @ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

6.1.0

Minor Changes

#18389 c96d07e Thanks @renovate! - Adds support for Preact v11

#18277 2715958 Thanks @florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Patch Changes

Updated dependencies [b7a1bd9]:

@astrojs/internal-helpers@0.13.0

6.0.6

Patch Changes

Updated dependencies [6987261, 62b13ba]:

@astrojs/internal-helpers@0.12.0

6.0.5

Patch Changes

Updated dependencies [f8e9458]:

@astrojs/internal-helpers@0.11.0

Commits

34c9535 [ci] release (#18459)
cf27e70 fix: minimal support node version (#18475)
c2c43a9 [ci] release (#18354)
83f5f4d Update dependency vite to ^8.3.4 (#18393)
c96d07e Update dependency preact to v11 (#18389)
5c48d3b Update dependency devalue to v6 (#18385)
2715958 feat: increase minimum Node.js version to 22.22.0 (#18277)
5646f43 Update dependency vite to ^8.3.3 (#18321)
f44454b Update @astrojs/preact (#18307)
e4f8f46 [ci] release (#18120)
Additional commits viewable in compare view

Updates @astrojs/react from 6.0.4 to 7.1.3

Release notes

Sourced from @astrojs/react's releases.

@astrojs/react@7.1.3

Patch Changes

#18535 b21d724 Thanks @praveen-kumary! - Preserves component-rendered resource links, including stylesheets, preloads, and modulepreloads, in React island output. Automatic React resource hints are also preserved so that authored links are not removed during server rendering.

@astrojs/react@7.1.2

Patch Changes

#18482 9c88994 Thanks @wrostomMM! - Fixes duplicate React.useId() values across components when experimentalDisableStreaming is enabled

@astrojs/react@7.1.1

Patch Changes

#18475 cf27e70 Thanks @ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

@astrojs/react@7.1.0

Minor Changes

#18277 2715958 Thanks @florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Patch Changes

Updated dependencies [b7a1bd9]:

@astrojs/internal-helpers@0.13.0

Changelog

Sourced from @astrojs/react's changelog.

7.1.3

Patch Changes

#18535 b21d724 Thanks @praveen-kumary! - Preserves component-rendered resource links, including stylesheets, preloads, and modulepreloads, in React island output. Automatic React resource hints are also preserved so that authored links are not removed during server rendering.

7.1.2

Patch Changes

#18482 9c88994 Thanks @wrostomMM! - Fixes duplicate React.useId() values across components when experimentalDisableStreaming is enabled

7.1.1

Patch Changes

#18475 cf27e70 Thanks @ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

7.1.0

Minor Changes

#18277 2715958 Thanks @florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Patch Changes

Updated dependencies [b7a1bd9]:

@astrojs/internal-helpers@0.13.0

7.0.1

Patch Changes

Updated dependencies [6987261, 62b13ba]:

@astrojs/internal-helpers@0.12.0

7.0.0

Major Changes
#17951 e5b0ac4 Thanks @hanford! - Migrates the React integration to @vitejs/plugin-react v6, using Oxc for JSX and Fast Refresh. Removes the babel integration option; projects with custom Babel transforms must configure @rolldown/plugin-babel under vite.plugins instead.

Adds an opt-in compiler option for the Oxc-based React Compiler. Install oxc-transform-react and enable it in your Astro config:
import react from '@astrojs/react';

... (truncated)

Commits

7a1255f [ci] release (#18582)
b64567f Update all non-major dependencies (#18615)
b21d724 fix(react): preserve component-rendered link tags in island output (#18535)
fda754d [ci] release (#18478)
9c88994 Pass the React id prefix to renderToString when streaming is disabled (#18482)
34c9535 [ci] release (#18459)
cf27e70 fix: minimal support node version (#18475)
c2c43a9 [ci] release (#18354)
83f5f4d Update dependency vite to ^8.3.4 (#18393)
5c48d3b Update dependency devalue to v6 (#18385)
Additional commits viewable in compare view

Updates @astrojs/svelte from 9.0.1 to 9.1.2

Release notes

Sourced from @astrojs/svelte's releases.

@astrojs/svelte@9.1.2

Patch Changes

5e47636 Thanks @matthewp! - Escapes slot names when rendering the slot wrapper elements for Svelte components

@astrojs/svelte@9.1.1

Patch Changes

#18475 cf27e70 Thanks @ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

@astrojs/svelte@9.1.0

Minor Changes

#18277 2715958 Thanks @florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Changelog

Sourced from @astrojs/svelte's changelog.

9.1.2

Patch Changes

5e47636 Thanks @matthewp! - Escapes slot names when rendering the slot wrapper elements for Svelte components

9.1.1

Patch Changes

#18475 cf27e70 Thanks @ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

9.1.0

Minor Changes

#18277 2715958 Thanks @florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Commits

fda754d [ci] release (#18478)
5e47636 Merge commit from fork
34c9535 [ci] release (#18459)
cf27e70 fix: minimal support node version (#18475)
40e7d54 fix(css): defer client CSS deletion so conditionally rendered component style...
c2c43a9 [ci] release (#18354)
83f5f4d Update dependency vite to ^8.3.4 (#18393)
2715958 feat: increase minimum Node.js version to 22.22.0 (#18277)
3310450 Update dependency svelte to ^5.57.2 (#18363)
5646f43 Update dependency vite to ^8.3.3 (#18321)
Additional commits viewable in compare view

Updates @astrojs/vue from 7.0.2 to 7.1.2

Release notes

Sourced from @astrojs/vue's releases.

@astrojs/vue@7.1.2

Patch Changes

#18475 cf27e70 Thanks @ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

@astrojs/vue@7.1.1

Patch Changes

#18398 9731465 Thanks @ump45nose! - Fixes Vue SSR concatenating Astro slot HTML character by character when the slot value is a String object (Astro's SlotString). StaticHtml now coerces the value with String(...) before passing it to innerHTML.

@astrojs/vue@7.1.0

Minor Changes

#18277 2715958 Thanks @florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Changelog

Sourced from @astrojs/vue's changelog.

7.1.2

Patch Changes

#18475 cf27e70 Thanks @ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

7.1.1

Patch Changes

#18398 9731465 Thanks @ump45nose! - Fixes Vue SSR concatenating Astro slot HTML character by character when the slot value is a String object (Astro's SlotString). StaticHtml now coerces the value with String(...) before passing it to innerHTML.

7.1.0

Minor Changes

#18277 2715958 Thanks @florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

7.0.3

Patch Changes

#17985 7a6e7f7 Thanks @astro-factory! - Fixes Vue render-function components failing to build when @astrojs/react is also enabled. React's renderer check no longer crashes on non-React object components, and Vue's check now recognizes defineComponent() components that use a setup function returning a render function.

Commits

34c9535 [ci] release (#18459)
cf27e70 fix: minimal support node version (#18475)
e943003 Fix inlined Vue styles in dev serving untransformed (unscoped, raw v-bind) CS...
e990df8 [ci] release (#18405)
9731465 fix(vue): coerce SlotString to a primitive for Vue SSR innerHTML (#18398)
c2c43a9 [ci] release (#18354)
83f5f4d Update dependency vite to ^8.3.4 (#18393)
2715958 feat: increase minimum Node.js version to 22.22.0 (#18277)
196d52a Update dependency @vitejs/plugin-vue to ^6.0.10 (#18370)
5646f43 Update dependency vite to ^8.3.3 (#18321)
Additional commits viewable in compare view

Updates @hono/graphql-server from 0.7.0 to 0.7.1

Release notes

Sourced from @hono/graphql-server's releases.

@hono/graphql-server@0.7.1

Patch Changes

#2217 a6ff362 Thanks @yusukebe! - Escape the request path embedded in the GraphiQL page script

Changelog

Sourced from @hono/graphql-server's changelog.

0.7.1

Patch Changes

#2217 a6ff362 Thanks @yusukebe! - Escape the request path embedded in the GraphiQL page script

Commits

3a19fc9 Version Packages (#2218)
a6ff362 fix(graphql-server): escape the request path in the GraphiQL script (#2217)
da4dbb0 chore(deps-dev): bump @types/bun from 1.4.0 to 1.4.2 (#2180)
bffaf3a chore(deps-dev): bump @types/bun from 1.3.14 to 1.4.0 (#2118)
40f956e chore(dev-deps): partial upgrade to TypeScript 7 (#2048)
5e32c00 chore: migrate to pnpm (#2006)
c5ba38b chore(deps-dev): bump tsdown from 0.22.2 to 0.22.3 (#1996)
f89ea30 chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 (#1866)
bf845ad chore: unblock TypeScript v6 (#1937)
2cbc5f0 chore(deps-dev): bump tsdown to 0.22.2 (#1908)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @hono/graphql-server since your current version.

Updates @hono/node-server from 2.1.1 to 2.1.6

Release notes

Sourced from @hono/node-server's releases.

v2.1.6

Security fixes

This release includes fixes for the following security issues:

Backslash in the request path is parsed as a path separator, bypassing path-based access control at a reverse proxy

Affects: all requests. The raw request-target was passed to the WHATWG URL parser, which treats a backslash in the path as / and resolves .. segments, so /admin\secret reached the application as /admin/secret. A reverse proxy that forwards the backslash unchanged applied its path-based rules to the original path. GHSA-jpvv-r467-5p4w

A request whose path contains a raw backslash is now rejected with 400 Bad Request, for HTTP/1.1, HTTP/2 and WebSocket upgrades. A percent-encoded backslash (%5C) and a backslash in the query string are still accepted.

WebSocket upgrade request-target starting with // replaces the host in c.req.url, bypassing Origin checks

Affects: upgradeWebSocket. The URL of an upgrade request was built by resolving the request-target against the Host header, so a request-target such as //attacker.example/ws set the host of c.req.url to a client-chosen value while routing still saw /ws. An application that compared Origin with the origin of c.req.url could be bypassed by a page on another site. GHSA-7v5p-43qr-wch5

The host of upgrade requests now comes from the Host header, as for ordinary requests.

Unhandled ECONNRESET on the socket during an asynchronous WebSocket upgrade crashes the process

Affects: upgradeWebSocket. While the application handled an upgrade request, the socket had no error listener. A client that reset the connection during asynchronous middleware caused an unhandled 'error' event and terminated the process. GHSA-qv5m-9pm6-hqp3

Error and close events on the socket are now handled while the application runs, and a pending upgrade is released when the socket closes.

The backslash fix also ships in @hono/node-server v1.19.18. Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.1.5

What's Changed

fix(listener): abort the request signal when an HTTP/2 client resets the stream by @affanmomin in honojs/node-server#404

fix(serve-static): only serve GET and HEAD requests by @usualoma in honojs/node-server#405

New Contributors

@affanmomin made their first contribution in honojs/node-server#404

Full Changelog: honojs/node-server@v2.1.4...v2.1.5

v2.1.4

What's Changed

chore: allow hono v5 as a peer dependency by @yusukebe in honojs/node-server#406

Full Changelog: honojs/node-server@v2.1.3...v2.1.4

v2.1.3

Security fixes

serveStatic decodes the request path a second time, leading to bypass of middleware on static paths

Affects: @hono/node-server/serve-static. Fixes serveStatic decoding an already-decoded path, where a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix. GHSA-rmxm-3fg6-px4f

... (truncated)

Commits

123f782 2.1.6
cfaa79f Merge commit from fork
61cc026 Merge commit from fork
a152a45 test: wait for the first chunk before sending the second in the readable-stre...
fb97395 Merge commit from fork
4b47a0d 2.1.5
e77824a fix(serve-static): only serve GET and HEAD requests (#405)
1b6e6bf fix(listener): abort the request signal when an HTTP/2 client resets the stre...
d57ed9b 2.1.4
92b014c chore: allow hono v5 as a peer dependency (#406)
Additional commits viewable in compare view

Updates @nestjs/apollo from 13.4.5 to 14.2.0

Release notes

Sourced from @nestjs/apollo's releases.

v14.2.0

This release fixes several security issues and a range of correctness bugs in schema generation, resolver binding and the drivers. Upgrading is recommended for all users of @nestjs/graphql, @nestjs/apollo and @nestjs/mercurius.

Security
...
Description has been truncated

Advisory Severity Package Summary

GHSA-8www-f354-mh8p High @nestjs/graphql Unauthenticated requests can crash applications that enable GraphQL subscriptions

GHSA-f2pj-v3fc-65xp High @nestjs/graphql Guards, interceptors and pipes are silently skipped on resolvers registered with useFactory or useValue

GHSA-c658-2mxh-7pqx High @nestjs/graphql Guards of a subclass resolver can be bypassed when its base resolver is also registered

GHSA-m88h-g79w-v5mc Medium @nestjs/graphql DateTime and Timestamp scalars accept invalid input, so null and invalid dates reach non-null arguments

GHSA-qcfh-v6vh-p698 Medium @nestjs/mercurius MercuriusFederationDriver ignores subscription filters and delivers events to all subscribers

GHSA-fvxv-c29c-43xc Medium @nestjs/apollo Credentials of failed outgoing HTTP requests can be exposed in GraphQL error responses

GHSA-68rj-86jm-2jwh Medium @nestjs/graphql Guarded field resolvers can be dropped when the resolvers option defines the same type

GHSA-5mvw-93v2-cm4m Medium @nestjs/apollo, @nestjs/mercurius Context objects returned by a context function can be shared across requests

GHSA-9c65-35pp-rvj7 Medium @nestjs/graphql Subscription filters receive schema-named arguments, which can deliver other users' events

GHSA-5xqp-272w-2j3q

…h 55 updates Bumps the create-seam-vendor group with 55 updates in the /packages/create-seam/vendor directory: | Package | From | To | | --- | --- | --- | | [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `7.0.7` | `8.1.2` | | [@astrojs/preact](https://github.com/withastro/astro/tree/HEAD/packages/integrations/preact) | `6.0.4` | `6.1.1` | | [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `6.0.4` | `7.1.3` | | [@astrojs/svelte](https://github.com/withastro/astro/tree/HEAD/packages/integrations/svelte) | `9.0.1` | `9.1.2` | | [@astrojs/vue](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vue) | `7.0.2` | `7.1.2` | | [@hono/graphql-server](https://github.com/honojs/middleware/tree/HEAD/packages/graphql-server) | `0.7.0` | `0.7.1` | | [@hono/node-server](https://github.com/honojs/node-server) | `2.1.1` | `2.1.6` | | [@nestjs/apollo](https://github.com/nestjs/graphql) | `13.4.5` | `14.2.0` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.2.1` | `12.3.3` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.2.1` | `12.3.3` | | [@nestjs/graphql](https://github.com/nestjs/graphql) | `13.4.5` | `14.2.0` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.2.1` | `12.3.3` | | [@nestjs/serve-static](https://github.com/nestjs/serve-static) | `5.0.5` | `12.1.1` | | [@trpc/client](https://github.com/trpc/trpc/tree/HEAD/packages/client) | `11.18.0` | `11.24.0` | | [@trpc/server](https://github.com/trpc/trpc/tree/HEAD/packages/server) | `11.18.0` | `11.24.0` | | [alpinejs](https://github.com/alpinejs/alpine/tree/HEAD/packages/alpinejs) | `3.16.2` | `3.17.5` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.4` | `7.4.6` | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `22.1.3` | `22.2.4` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `22.1.3` | `22.2.4` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `22.1.3` | `22.2.4` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `22.1.3` | `22.2.4` | | [elysia](https://github.com/elysiajs/elysia) | `1.4.29` | `1.4.31` | | [express](https://github.com/expressjs/express) | `5.2.1` | `5.3.0` | | [fastify](https://github.com/fastify/fastify) | `5.12.1` | `5.12.8` | | [graphql](https://github.com/graphql/graphql-js) | `16.14.2` | `17.1.0` | | [graphql-http](https://github.com/graphql/graphql-http) | `1.23.0` | `1.23.1` | | [graphql-yoga](https://github.com/graphql-hive/graphql-yoga/tree/HEAD/packages/graphql-yoga) | `5.22.0` | `6.0.1` | | [hono](https://github.com/honojs/hono) | `4.13.3` | `4.13.16` | | [mercurius](https://github.com/mercurius-js/mercurius) | `16.10.0` | `16.12.1` | | [preact](https://github.com/preactjs/preact) | `10.29.8` | `11.1.1` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.1` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.1` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.3.0` | | [solid-js](https://github.com/solidjs/solid) | `1.9.15` | `1.9.18` | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.10` | `5.57.3` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.3` | `4.3.4` | | [tslib](https://github.com/Microsoft/tslib) | `2.8.1` | `2.9.1` | | [vue](https://github.com/vuejs/core) | `3.5.41` | `3.5.45` | | [zone.js](https://github.com/angular/angular/tree/HEAD/packages/zone.js) | `0.16.2` | `0.16.3` | | [@angular/build](https://github.com/angular/angular-cli) | `22.1.5` | `22.2.6` | | [@angular/cli](https://github.com/angular/angular-cli) | `22.1.5` | `22.2.6` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `22.1.3` | `22.2.4` | | [@nestjs/cli](https://github.com/nestjs/nest-cli) | `11.0.24` | `12.0.11` | | [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `7.3.0` | `7.3.1` | | [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.3` | `4.3.4` | | [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.3` | `4.3.4` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.1` | `26.6.6` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.0` | `6.2.1` | | [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) | `6.0.8` | `6.0.10` | | [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.32` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.15` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.6` | | [vite-plugin-solid](https://github.com/solidjs/solid-vite-plugin) | `2.11.14` | `2.11.15` | Updates `@astrojs/mdx` from 7.0.7 to 8.1.2 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.1.2/packages/integrations/mdx) Updates `@astrojs/preact` from 6.0.4 to 6.1.1 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/preact/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/preact@6.1.1/packages/integrations/preact) Updates `@astrojs/react` from 6.0.4 to 7.1.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/react@7.1.3/packages/integrations/react) Updates `@astrojs/svelte` from 9.0.1 to 9.1.2 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/svelte/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/svelte@9.1.2/packages/integrations/svelte) Updates `@astrojs/vue` from 7.0.2 to 7.1.2 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vue/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/vue@7.1.2/packages/integrations/vue) Updates `@hono/graphql-server` from 0.7.0 to 0.7.1 - [Release notes](https://github.com/honojs/middleware/releases) - [Changelog](https://github.com/honojs/middleware/blob/main/packages/graphql-server/CHANGELOG.md) - [Commits](https://github.com/honojs/middleware/commits/@hono/graphql-server@0.7.1/packages/graphql-server) Updates `@hono/node-server` from 2.1.1 to 2.1.6 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.1.1...v2.1.6) Updates `@nestjs/apollo` from 13.4.5 to 14.2.0 - [Release notes](https://github.com/nestjs/graphql/releases) - [Commits](nestjs/graphql@v13.4.5...v14.2.0) Updates `@nestjs/common` from 11.2.1 to 12.3.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.3.3/packages/common) Updates `@nestjs/core` from 11.2.1 to 12.3.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.3.3/packages/core) Updates `@nestjs/graphql` from 13.4.5 to 14.2.0 - [Release notes](https://github.com/nestjs/graphql/releases) - [Commits](nestjs/graphql@v13.4.5...v14.2.0) Updates `@nestjs/platform-express` from 11.2.1 to 12.3.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.3.3/packages/platform-express) Updates `@nestjs/serve-static` from 5.0.5 to 12.1.1 - [Release notes](https://github.com/nestjs/serve-static/releases) - [Commits](nestjs/serve-static@5.0.5...12.1.1) Updates `@trpc/client` from 11.18.0 to 11.24.0 - [Release notes](https://github.com/trpc/trpc/releases) - [Commits](https://github.com/trpc/trpc/commits/v11.24.0/packages/client) Updates `@trpc/server` from 11.18.0 to 11.24.0 - [Release notes](https://github.com/trpc/trpc/releases) - [Commits](https://github.com/trpc/trpc/commits/v11.24.0/packages/server) Updates `alpinejs` from 3.16.2 to 3.17.5 - [Release notes](https://github.com/alpinejs/alpine/releases) - [Commits](https://github.com/alpinejs/alpine/commits/v3.17.5/packages/alpinejs) Updates `astro` from 7.2.4 to 7.4.6 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.4.6/packages/astro) Updates `@angular/common` from 22.1.3 to 22.2.4 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.2.4/packages/common) Updates `@angular/compiler` from 22.1.3 to 22.2.4 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.2.4/packages/compiler) Updates `@angular/core` from 22.1.3 to 22.2.4 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.2.4/packages/core) Updates `@angular/platform-browser` from 22.1.3 to 22.2.4 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.2.4/packages/platform-browser) Updates `elysia` from 1.4.29 to 1.4.31 - [Release notes](https://github.com/elysiajs/elysia/releases) - [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md) - [Commits](elysiajs/elysia@1.4.29...1.4.31) Updates `express` from 5.2.1 to 5.3.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@v5.2.1...v5.3.0) Updates `fastify` from 5.12.1 to 5.12.8 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.12.1...v5.12.8) Updates `graphql` from 16.14.2 to 17.1.0 - [Release notes](https://github.com/graphql/graphql-js/releases) - [Commits](graphql/graphql-js@v16.14.2...v17.1.0) Updates `graphql-http` from 1.23.0 to 1.23.1 - [Release notes](https://github.com/graphql/graphql-http/releases) - [Changelog](https://github.com/graphql/graphql-http/blob/main/CHANGELOG.md) - [Commits](graphql/graphql-http@v1.23.0...v1.23.1) Updates `graphql-yoga` from 5.22.0 to 6.0.1 - [Release notes](https://github.com/graphql-hive/graphql-yoga/releases) - [Changelog](https://github.com/graphql-hive/graphql-yoga/blob/main/packages/graphql-yoga/CHANGELOG.md) - [Commits](https://github.com/graphql-hive/graphql-yoga/commits/graphql-yoga@6.0.1/packages/graphql-yoga) Updates `hono` from 4.13.3 to 4.13.16 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.3...v4.13.16) Updates `mercurius` from 16.10.0 to 16.12.1 - [Release notes](https://github.com/mercurius-js/mercurius/releases) - [Commits](mercurius-js/mercurius@v16.10.0...v16.12.1) Updates `preact` from 10.29.8 to 11.1.1 - [Release notes](https://github.com/preactjs/preact/releases) - [Commits](preactjs/preact@10.29.8...11.1.1) Updates `react` from 19.2.8 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `@types/react-dom` from 19.2.4 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `solid-js` from 1.9.15 to 1.9.18 - [Release notes](https://github.com/solidjs/solid/releases) - [Changelog](https://github.com/solidjs/solid/blob/main/CHANGELOG.md) - [Commits](https://github.com/solidjs/solid/commits) Updates `svelte` from 5.56.10 to 5.57.3 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.3/packages/svelte) Updates `tailwindcss` from 4.3.3 to 4.3.4 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.4/packages/tailwindcss) Updates `tslib` from 2.8.1 to 2.9.1 - [Release notes](https://github.com/Microsoft/tslib/releases) - [Commits](microsoft/tslib@v2.8.1...v2.9.1) Updates `vue` from 3.5.41 to 3.5.45 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.41...v3.5.45) Updates `zone.js` from 0.16.2 to 0.16.3 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/packages/zone.js/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/zone.js-0.16.3/packages/zone.js) Updates `@angular/build` from 22.1.5 to 22.2.6 - [Release notes](https://github.com/angular/angular-cli/releases) - [Commits](angular/angular-cli@v22.1.5...v22.2.6) Updates `@angular/cli` from 22.1.5 to 22.2.6 - [Release notes](https://github.com/angular/angular-cli/releases) - [Commits](angular/angular-cli@v22.1.5...v22.2.6) Updates `@angular/compiler-cli` from 22.1.3 to 22.2.4 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.2.4/packages/compiler-cli) Updates `@nestjs/cli` from 11.0.24 to 12.0.11 - [Release notes](https://github.com/nestjs/nest-cli/releases) - [Commits](nestjs/nest-cli@11.0.24...12.0.11) Updates `@sveltejs/vite-plugin-svelte` from 7.3.0 to 7.3.1 - [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases) - [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.3.1/packages/vite-plugin-svelte) Updates `@tailwindcss/postcss` from 4.3.3 to 4.3.4 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.4/packages/@tailwindcss-postcss) Updates `@tailwindcss/vite` from 4.3.3 to 4.3.4 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.4/packages/@tailwindcss-vite) Updates `@types/node` from 22.20.1 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitejs/plugin-react` from 6.1.0 to 6.2.1 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.2.1/packages/plugin-react) Updates `@vitejs/plugin-vue` from 6.0.8 to 6.0.10 - [Release notes](https://github.com/vitejs/vite-plugin-vue/releases) - [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.10/packages/plugin-vue) Updates `postcss` from 8.5.26 to 8.5.32 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.26...8.5.32) Updates `tsx` from 4.23.12 to 4.23.15 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.12...v4.23.15) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) Updates `vite` from 8.2.2 to 8.3.6 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.6/packages/vite) Updates `vite-plugin-solid` from 2.11.14 to 2.11.15 - [Release notes](https://github.com/solidjs/solid-vite-plugin/releases) - [Changelog](https://github.com/solidjs/solid-vite-plugin/blob/main/CHANGELOG.md) - [Commits](https://github.com/solidjs/solid-vite-plugin/compare/vite-plugin-solid@2.11.14...vite-plugin-solid@2.11.15) --- updated-dependencies: - dependency-name: "@astrojs/mdx" dependency-version: 8.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: "@astrojs/preact" dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@astrojs/react" dependency-version: 7.1.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: "@astrojs/svelte" dependency-version: 9.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@astrojs/vue" dependency-version: 7.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@hono/graphql-server" dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: "@hono/node-server" dependency-version: 2.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: "@nestjs/apollo" dependency-version: 14.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: "@nestjs/common" dependency-version: 12.3.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: "@nestjs/core" dependency-version: 12.3.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: "@nestjs/graphql" dependency-version: 14.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: "@nestjs/platform-express" dependency-version: 12.3.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: "@nestjs/serve-static" dependency-version: 12.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: "@trpc/client" dependency-version: 11.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@trpc/server" dependency-version: 11.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: alpinejs dependency-version: 3.17.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: astro dependency-version: 7.4.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@angular/common" dependency-version: 22.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@angular/compiler" dependency-version: 22.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@angular/core" dependency-version: 22.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@angular/platform-browser" dependency-version: 22.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: elysia dependency-version: 1.4.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: express dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: fastify dependency-version: 5.12.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: graphql dependency-version: 17.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: graphql-http dependency-version: 1.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: graphql-yoga dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: hono dependency-version: 4.13.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: mercurius dependency-version: 16.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: preact dependency-version: 11.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: solid-js dependency-version: 1.9.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: svelte dependency-version: 5.57.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: tailwindcss dependency-version: 4.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: tslib dependency-version: 2.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: vue dependency-version: 3.5.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: zone.js dependency-version: 0.16.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: "@angular/build" dependency-version: 22.2.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@angular/cli" dependency-version: 22.2.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@angular/compiler-cli" dependency-version: 22.2.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@nestjs/cli" dependency-version: 12.0.11 dependency-type: direct:development update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: "@sveltejs/vite-plugin-svelte" dependency-version: 7.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: "@tailwindcss/postcss" dependency-version: 4.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: "@tailwindcss/vite" dependency-version: 4.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: "@vitejs/plugin-react" dependency-version: 6.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: "@vitejs/plugin-vue" dependency-version: 6.0.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: postcss dependency-version: 8.5.32 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: tsx dependency-version: 4.23.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: create-seam-vendor - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: create-seam-vendor - dependency-name: vite dependency-version: 8.3.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: create-seam-vendor - dependency-name: vite-plugin-solid dependency-version: 2.11.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: create-seam-vendor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 8, 2026

Navigation Menu

Repository navigation

chore(deps): bump the create-seam-vendor group across 1 directory with 55 updates - #16

chore(deps): bump the create-seam-vendor group across 1 directory with 55 updates#16
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/packages/create-seam/vendor/create-seam-vendor-e966b42c78

dependabot Bot commented on behalf of github Nov 8, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Advisory	Severity	Package	Summary
GHSA-8www-f354-mh8p	High	`@nestjs/graphql`	Unauthenticated requests can crash applications that enable GraphQL subscriptions
GHSA-f2pj-v3fc-65xp	High	`@nestjs/graphql`	Guards, interceptors and pipes are silently skipped on resolvers registered with `useFactory` or `useValue`
GHSA-c658-2mxh-7pqx	High	`@nestjs/graphql`	Guards of a subclass resolver can be bypassed when its base resolver is also registered
GHSA-m88h-g79w-v5mc	Medium	`@nestjs/graphql`	`DateTime` and `Timestamp` scalars accept invalid input, so `null` and invalid dates reach non-null arguments
GHSA-qcfh-v6vh-p698	Medium	`@nestjs/mercurius`	`MercuriusFederationDriver` ignores subscription filters and delivers events to all subscribers
GHSA-fvxv-c29c-43xc	Medium	`@nestjs/apollo`	Credentials of failed outgoing HTTP requests can be exposed in GraphQL error responses
GHSA-68rj-86jm-2jwh	Medium	`@nestjs/graphql`	Guarded field resolvers can be dropped when the `resolvers` option defines the same type
GHSA-5mvw-93v2-cm4m	Medium	`@nestjs/apollo`, `@nestjs/mercurius`	Context objects returned by a context function can be shared across requests
GHSA-9c65-35pp-rvj7	Medium	`@nestjs/graphql`	Subscription filters receive schema-named arguments, which can deliver other users' events
GHSA-5xqp-272w-2j3q

Conversation

dependabot Bot commented on behalf of github Nov 8, 2026

@​astrojs/mdx@​8.1.2

Patch Changes

@​astrojs/mdx@​8.1.1

Patch Changes

@​astrojs/mdx@​8.1.0

Minor Changes

Patch Changes

8.1.2

Patch Changes

8.1.1

Patch Changes

8.1.0

Minor Changes

Patch Changes

8.0.3

Patch Changes

8.0.2

Patch Changes

8.0.1

@​astrojs/preact@​6.1.1

Patch Changes

@​astrojs/preact@​6.1.0

Minor Changes

Patch Changes

6.1.1

Patch Changes

6.1.0

Minor Changes

Patch Changes

6.0.6

Patch Changes

6.0.5

Patch Changes

@​astrojs/react@​7.1.3

Patch Changes

@​astrojs/react@​7.1.2

Patch Changes

@​astrojs/react@​7.1.1

Patch Changes

@​astrojs/react@​7.1.0

Minor Changes

Patch Changes

7.1.3

Patch Changes

7.1.2

Patch Changes

7.1.1

Patch Changes

7.1.0

Minor Changes

Patch Changes

7.0.1

Patch Changes

7.0.0

Major Changes

@​astrojs/svelte@​9.1.2

Patch Changes

@​astrojs/svelte@​9.1.1

Patch Changes

@​astrojs/svelte@​9.1.0

Minor Changes

9.1.2

Patch Changes

9.1.1

Patch Changes

9.1.0

Minor Changes

@​astrojs/vue@​7.1.2

Patch Changes

@​astrojs/vue@​7.1.1

Patch Changes

@​astrojs/vue@​7.1.0

Minor Changes

7.1.2

Patch Changes

7.1.1

Patch Changes

7.1.0

`@astrojs/mdx@8`.1.2

`@astrojs/mdx@8`.1.1

`@astrojs/mdx@8`.1.0

`@astrojs/preact@6`.1.1

`@astrojs/preact@6`.1.0

`@astrojs/react@7`.1.3

`@astrojs/react@7`.1.2

`@astrojs/react@7`.1.1

`@astrojs/react@7`.1.0

`@astrojs/svelte@9`.1.2

`@astrojs/svelte@9`.1.1

`@astrojs/svelte@9`.1.0

`@astrojs/vue@7`.1.2

`@astrojs/vue@7`.1.1

`@astrojs/vue@7`.1.0

`@hono/graphql-server@0`.7.1

WebSocket upgrade request-target starting with `//` replaces the host in `c.req.url`, bypassing `Origin` checks

Unhandled `ECONNRESET` on the socket during an asynchronous WebSocket upgrade crashes the process

`serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths