Update All

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/express (source)	5.0.3 → 5.0.6
@types/node (source)	24.0.14 → 24.10.13
bufferutil	4.0.9 → 4.1.0
discord.js (source)	14.21.0 → 14.25.1
dotenv	17.2.0 → 17.3.1
express (source)	5.1.0 → 5.2.1
globals	16.3.0 → 16.5.0
nodemon (source)	3.1.10 → 3.1.11
typescript (source)	5.8.3 → 5.9.3
utf-8-validate	6.0.5 → 6.0.6
winston	3.17.0 → 3.19.0

---

Release Notes

websockets/bufferutil (bufferutil)

v4.1.0

Compare Source

discordjs/discord.js (discord.js)

v14.25.1

Compare Source

Bug Fixes

• GuildEmojiManager: Allow CreateGuildExpressions for retrieving author data (#​11288) (0d64ea0)

v14.25.0

Compare Source

Bug Fixes

• Remove data conditional check (#​11250) (84197a0)
• Backport only passing relevant options to API when fetching (#​11230) (a7196dc)

Documentation

• MessageManager: Update fetchPins() wording (492039c)

Features

• GuildMemberManager: Handle gateway request rate limit (#​11253) (a3c6bce)
• Optimize role manager cache getter (#​11239) (2da2fa0)

v14.24.2

Compare Source

Bug Fixes

• GuildMember: JoinedAt possibly being NaN (fb2b728)

v14.24.1

Compare Source

Bug Fixes

• Message: Check if in voice based channel for pinnable (#​11215) (c2c8cce)

Documentation

• GuildMemberFlagsBitField: Remove duplicate word (abb84ce)

Typings

• FileUploadModalData: Correct fields (#​11209) (d317ca1)
• LabelModalData: Singular ModalData (#​11207) (072fbb2)
• FileUploadComponentData: boolean (548c254)

v14.24.0

Compare Source

Bug Fixes

• Message: Update pinnable to check for migrated guilds (#​11189) (ee988e3)

Features

• Handle file upload component for v14 (#​11179) (104ad75)

v14.23.2

Compare Source

Bug Fixes

• ModalSubmitInteraction: Better resolving of components (#​11162) (5cc13b7)
• Handle DM modals (1e4d1dc)

v14.23.1

Compare Source

Bug Fixes

• ModalSubmitInteraction: Resolve crash on handling populated select menus (#​11158) (11b236f)
• Ending uncached polls (#​11157) (1d5b983)

v14.23.0

Compare Source

Bug Fixes

• ThreadMemberFlagsBitField: Use ThreadMemberFlags enum in Flags (#​11118) (154c00d)
• Backport in operator fix from main (#​11127) (fcce0d9)
• Ensure discriminator detection respects webhooks too (#​11062) (d8ad181)

Documentation

• Use LocalizationMap where applicable (#​11117) (3b92744)
• GuildEditOptions: Deprecate owner property (fe025c0)
• Deprecate API related to guild ownership (#​11054) (3dd57c2)
• Deprecate setting owner (740da4c)

Features

• Bump builders in v14 (and fix runtime crashes) (#​11153) (67c8953)
• GuildMemberManager: Add new modify self fields (#​11112) (9b821e5)
• Text display and more selects in modal for v14 (#​11096) (93e0f4c)
• Guest invites (#​11079) (79d999e)
• Polls overhaul (#​11058) (4a8aeb6)

Refactor

• ActionsManager: Register actions without using class name (#​11080) (0dff969)

Typings

• ClientEventTypes: Fix messageDeleteBulk event arg (#​11122) (30e35d9)
• Webhook: Specify message type (#​11142) (6a5707c)

v14.22.1

Compare Source

Bug Fixes

• GuildChannel: Account for everyone base permissions (#​11053) (ecef7bd)

v14.22.0

Compare Source

Bug Fixes

• Remove trailing color references (#​11007) (b532df6)
• Emoji: Remove incorrect nullables, add ApplicationEmoji#available (#​10990) (90d3b28)
• GuildChannelManager: Properly resolve avatar for createWebhook (#​10772) (63f5261)
• Message: Forwarded messages are not crosspostable (#​10821) (b36b751)
• DirectoryChannel: Export class (#​10985) (51ceb20)
• Events: WebhooksUpdate enum value (#​10970) (1404e32)

Documentation

• Remove hardcoded locale from links (#​10794) (5be774d)
• ApplicationCommand: Incorrect method in example (#​10837) (040c66a)

Features

• Support user guilds (#​10995) (baa08b8)
• MessageManager: New pinned messages routes (#​10993) (f469f74)
  • fetchPinned() has been renamed to fetchPins(), which is a paginated endpoint to fetch pinned messages.
• User: Add collectibles (#​10939) (8ac0e1e)
• Role gradient colours (#​10986) (9d6fdf8)
• Support animated WebP (#​10987) (cafe58b)

Refactor

• Deprecate ready event in favor of clientReady (#​10969) (82378fc)
• ThreadChannel: Remove trimming of name (#​10984) (d4f742e)

Typings

• Invite: Approximate fields should be nullable (#​10997) (d60e0bf)
• ModalSubmitFields: Fix fields type (#​10816) (500712d)
• InteractionCallbackResponse: Add missing InGuild generic (#​10963) (19e74b1)

motdotla/dotenv (dotenv)

v17.3.1

Compare Source

Changed

• Fix as2 example command in README and update spanish README

v17.3.0

Compare Source

Added

• Add a new README section on dotenv’s approach to the agentic future.

Changed

• Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

v17.2.4

Compare Source

Changed

• Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#​915)

• Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

v17.2.3

Compare Source

Changed

• Fixed typescript error definition (#​912)

v17.2.2

Compare Source

Added

• 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

v17.2.1

Compare Source

Changed

• Fix clickable tip links by removing parentheses (#​897)

expressjs/express (express)

v5.2.1

Compare Source

=======================

• Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

v5.2.0

Compare Source

========================

• Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
• deps: body-parser@^2.2.1
• A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

sindresorhus/globals (globals)

v16.5.0

Compare Source

• Update globals (2025-11-01) (#​316) 6d441ca
• Add Vue, Svelte, and Astro globals (#​314) ea31521

---

v16.4.0

Compare Source

• Update globals (#​309) 8b8a2d6

---

remy/nodemon (nodemon)

v3.1.11

Compare Source

microsoft/TypeScript (typescript)

v5.9.3: TypeScript 5.9.3

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)
• fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

• npm

v5.9.2: TypeScript 5.9

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)

Downloads are available on:

• npm

websockets/utf-8-validate (utf-8-validate)

v6.0.6

Compare Source

winstonjs/winston (winston)

v3.19.0

Compare Source

v3.18.3

Compare Source

• Update diagnostics dependency (removes fix-esm transitive dependency) a15a9e9

---

v3.18.2

Compare Source

• Bump diagnostics package to resolve #​2583 (again) f4582c3

---

v3.18.1

Compare Source

• Bump diagnostics package to resolve #​2583 e668c2c

---

v3.18.0

Compare Source

• Update diagnostics package to latest version to remove vulnerability 376e331
• add @​initd.sg/winston-cloudwatch (#​2532) 71ee92a
• Update transports.md (#​2549) 3547a95
• docs: update transport.md (#​2550) dc88db0
• feat: adds helper function for highest log level (#​2514) c69cdb0

---

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.