Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 6, 2025

Bumps the production-dependencies group with 4 updates in the / directory: @types/node, discord.js, dotenv and winston.

Updates @types/node from 20.17.23 to 20.19.19

Commits

Updates discord.js from 14.18.0 to 14.22.1

Release notes

Sourced from discord.js's releases.

14.22.1

14.22.1 - (2025-08-22)

Bug Fixes

  • GuildChannel: Account for everyone base permissions (#11053) (ecef7bd)

14.22.0

Bug Fixes

  • Remove trailing color references (#11007) (b532df6)
  • Emoji: Remove incorrect nullables, add ApplicationEmoji#available (#10990) (90d3b28)
  • GuildChannelManager: Properly resolve avatar for createWebhook (#10772) (63f5261)
  • Message: Forwarded messages are not crosspostable (#10821) (b36b751)
  • DirectoryChannel: Export class (#10985) (51ceb20)
  • Events: WebhooksUpdate enum value (#10970) (1404e32)

Documentation

Features

  • Support user guilds (#10995) (baa08b8)
  • MessageManager: New pinned messages routes (#10993) (f469f74)
    • fetchPinned() has been renamed to fetchPins(), which is a paginated endpoint to fetch pinned messages.
  • User: Add collectibles (#10939) (8ac0e1e)
  • Role gradient colours (#10986) (9d6fdf8)
  • Support animated WebP (#10987) (cafe58b)

Refactor

Typings

  • Invite: Approximate fields should be nullable (#10997) (d60e0bf)
  • ModalSubmitFields: Fix fields type (#10816) (500712d)
  • InteractionCallbackResponse: Add missing InGuild generic (#10963) (19e74b1)

14.21.0

Bug Fixes

Features

... (truncated)

Changelog

Sourced from discord.js's changelog.

14.22.1 - (2025-08-22)

Bug Fixes

  • GuildChannel: Account for everyone base permissions (#11053) (ecef7bd)

14.22.0 - (2025-08-20)

Bug Fixes

  • Remove trailing color references (#11007) (b532df6)
  • Emoji: Remove incorrect nullables, add ApplicationEmoji#available (#10990) (90d3b28)
  • GuildChannelManager: Properly resolve avatar for createWebhook (#10772) (63f5261)
  • Message: Forwarded messages are not crosspostable (#10821) (b36b751)
  • DirectoryChannel: Export class (#10985) (51ceb20)
  • Events: WebhooksUpdate enum value (#10970) (1404e32)

Documentation

Features

  • Support user guilds (#10995) (baa08b8)
  • MessageManager: New pinned messages routes (#10993) (f469f74)
    • fetchPinned() has been renamed to fetchPins(), which is a paginated endpoint to fetch pinned messages.
  • User: Add collectibles (#10939) (8ac0e1e)
  • Role gradient colours (#10986) (9d6fdf8)
  • Support animated WebP (#10987) (cafe58b)

Refactor

Typings

  • Invite: Approximate fields should be nullable (#10997) (d60e0bf)
  • ModalSubmitFields: Fix fields type (#10816) (500712d)
  • InteractionCallbackResponse: Add missing InGuild generic (#10963) (19e74b1)

14.21.0 - (2025-06-25)

Bug Fixes

Features

... (truncated)

Commits

Updates dotenv from 16.4.7 to 16.6.1

Changelog

Sourced from dotenv's changelog.

16.6.1 (2025-06-27)

Changed

  • Default quiet to true – hiding the runtime log message (#874)
  • NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
  • And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@dotenvx/dotenvx').config().

16.6.0 (2025-06-26)

Added

  • Default log helpful message [[email protected]] injecting env (1) from .env (#870)
  • Use { quiet: true } to suppress
  • Aligns dotenv more closely with dotenvx.

16.5.0 (2025-04-07)

Added

  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP] Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

  • Remove _log method. Use _debug #862
Commits

Updates winston from 3.17.0 to 3.18.3

Release notes

Sourced from winston's releases.

v3.18.3

  • Update diagnostics dependency (removes fix-esm transitive dependency) a15a9e9

winstonjs/winston@v3.18.2...v3.18.3

v3.18.2

  • Bump diagnostics package to resolve #2583 (again) f4582c3

winstonjs/winston@v3.18.1...v3.18.2

v3.18.1

  • Bump diagnostics package to resolve #2583 e668c2c

winstonjs/winston@v3.18.0...v3.18.1

v3.18.0

  • Update diagnostics package to latest version to remove vulnerability 376e331
  • add @​initd.sg/winston-cloudwatch (#2532) 71ee92a
  • Update transports.md (#2549) 3547a95
  • docs: update transport.md (#2550) dc88db0
  • feat: adds helper function for highest log level (#2514) c69cdb0

winstonjs/winston@v3.17.0...v3.18.0

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Oct 6, 2025

Assignees

The following users could not be added as assignees: ralphorama. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added dependencies Pull requests that update a project dependency javascript Pull requests that update Javascript code labels Oct 6, 2025
@RalphORama
Copy link
Member

@dependabot rebase

… with 4 updates

Bumps the production-dependencies group with 4 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [discord.js](https://github.com/discordjs/discord.js/tree/HEAD/packages/discord.js), [dotenv](https://github.com/motdotla/dotenv) and [winston](https://github.com/winstonjs/winston).


Updates `@types/node` from 20.17.23 to 20.19.19
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `discord.js` from 14.18.0 to 14.22.1
- [Release notes](https://github.com/discordjs/discord.js/releases)
- [Changelog](https://github.com/discordjs/discord.js/blob/14.22.1/packages/discord.js/CHANGELOG.md)
- [Commits](https://github.com/discordjs/discord.js/commits/14.22.1/packages/discord.js)

Updates `dotenv` from 16.4.7 to 16.6.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.4.7...v16.6.1)

Updates `winston` from 3.17.0 to 3.18.3
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston@v3.17.0...v3.18.3)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 20.19.19
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: discord.js
  dependency-version: 14.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: dotenv
  dependency-version: 16.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: winston
  dependency-version: 3.18.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-8acfe755f9 branch from acf3b86 to 6615c1f Compare November 6, 2025 04:26
@RalphORama RalphORama merged commit 0c875c6 into main Nov 6, 2025
9 checks passed
@RalphORama RalphORama deleted the dependabot/npm_and_yarn/production-dependencies-8acfe755f9 branch November 6, 2025 04:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a project dependency javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants