#discord-api-types

5828 messages · Page 6 of 6 (latest)

sudden cypressBOT
sudden cypressBOT
#
Jforjo
[discordjs/discord-api-types] Issue opened: #1482 Creating a forum with tags doesn't work

Issue description

Try to create a forum with available_tags and TypeScript will complain saying that you're missing the 'id' even though you don't require an ID to create a tag as Discord generates the ID for you (it's a Snowflake).

Code sample

# Minimal

available_tags: [
    {
        name: "test",
        moderated: false,
        emoji_name: "🎉",
    }
]

It's using `RESTPostAPIGuildChannelJSONBody` for the body JSON and `ChannelType.GuildForum` as the channel t...
sudden cypressBOT
sudden cypressBOT
#
Inbestigator
[discordjs/discord-api-types] Issue opened: #1486 SendSoundboardSound has reversed naming scheme for body and result

Issue description

The naming for the body and result types of https://discord.com/developers/docs/resources/soundboard#send-soundboard-sound don't match. Renaming the body to RESTPostAPISendSoundboardSoundJSONBody seems to be the correct fix (breaking though).

Code sample

Package version

0.38.37

Runtime

Bun

Runtime version

1.3.6

Priority this issue should have

Low (slightly annoying)

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
nlwillia
[discordjs/discord-api-types] Issue opened: #1491 Add roles to APIInvite

Issue description

According to API docs, the invite resource now has roles. (When creating an invite, the client UI now has the option to pick roles to assign on join, and these are visible in the invites table in the server settings.)

https://discord.com/developers/docs/resources/invite#invite-object

Unfortunately it's not part of the gateway event.

https://discord.com/developers/docs/events/gateway-events#invite-create

But it's part of guild and channel invite request responses.

...

#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/tar-7.5.3
sudden cypressBOT
#
Inbestigator
[discordjs/discord-api-types] Pull request opened: #1493 feat(invites): new target users routes

Please describe the changes this PR makes and why it should be merged:
This MR adds the new routes and their responses for target users. It also adds the target_users_file key in a formdata version of RESTPostAPIChannelInviteJSONBody.

If applicable, please reference Discord API Docs PRs or commits that influenced this PR:
https://discord.com/developers/docs/change-log#new-invite-endpoints

sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/tar-7.5.6
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1494 chore(deps): bump tar from 7.5.2 to 7.5.6

Bumps tar from 7.5.2 to 7.5.6.

Commits

394ece6 7.5.6
7d4cc17 fix race puting a Link ahead of its target File
26ab904 7.5.5
e9a1ddb fix: do not prevent valid linkpaths within archive
911c886 7.5.4
3b1abfa normalize out unicode ligatures
a43478c remove some unused files
970c58f update deps
bb21974 update changelog
0313844 7.5.3
Additional commits viewable in compare view

Maintainer changes
This version was pushed to npm by isaacs, a new releaser for ta...

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: feat/stable-modal-components
sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/tar-7.5.7
sudden cypressBOT
#
vladfrangu
[discordjs/discord-api-types] New tag created: 0.38.38
sudden cypressBOT
sudden cypressBOT
#
lisekilis
[discordjs/discord-api-types] Issue opened: #1507 Add Generic Interaction types

Feature

Generic Interaction types that would allow the casting of interaction types based on known data of the command that produced the interaction
This would significantly improve type safety and remove pointless checks in the handling of incoming discord interactions

Ideal solution or implementation

An ideal solution would be the addition of generic types like
GenericAPIInteraction
GenericAPIChatInputApplicationCommandInteraction,
or somehting of this sorts

Specific impleme...

sudden cypressBOT
sudden cypressBOT
#
lisekilis
[discordjs/discord-api-types] New comment on issue #1507: Add Generic Interaction types

I don't see the benefit for your example. You'd need to check the command name either way to make sure the type is correct before you can call that function. And in that function you already know the value of name etc. and could get it directly from data. What's gained here?

I am terrible at explaining stuff but I'll try either way
name is something that you know either way, yes. That is what I use to identify where the interaction originated,
however when working with options, subcomma...

sudden cypressBOT
sudden cypressBOT
#
tipakA
[discordjs/discord-api-types] New comment on issue #1507: Add Generic Interaction types

I feel like this would make sense exclusively if you could somehow guarantee that your object definition of the command is the only "version" of that command that is valid at all times. By design, unlike for example message content commands where entire thing is contained within your app's process, Discord's interaction commands cannot provide such guarantee as creating or updating a command can happen completely out of band from the process or even codebase that will later on receive those c...

sudden cypressBOT
#
lisekilis
[discordjs/discord-api-types] Issue opened: #1510 SubcommandOption types have a required property

Issue description

try to use type APIApplicationCommandSubcommandOption or APIApplicationCommandSubcommandGroupOption

see that they have a required boolean property instead of being never
Discord Docs: https://discord.com/developers/docs/interactions/application-commands#:~:text=all but,SUB_COMMAND_GROUP

Code sample

const testSubcommandOption: APIApplicationCommandSubcommandOption = {
	description: 'test',
	name: 'test',
	type: ApplicationCommandOptionType....
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/isaacs/brace-expansion-5.0.1
sudden cypressBOT
#
Jforjo
[discordjs/discord-api-types] Issue opened: #1512 Property 'topic' does not exist on type 'APIGuildChannel<GuildChannelType>'.

Issue description

TypeScript just complaining about how 'topic' doesn't exist

Code sample

const channel = channels.find(c => c.topic === "test");
// Tried this and still doesn't work
const channel = channels.find(c => {
    if (c.type !== ChannelType.GuildText) return false;
    return c.topic === "test";
});

Package version

[email protected]

Runtime

Node.js

Runtime version

v24.2.0

Priority this issue should have

Medium (should be f...

sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/webpack-5.105.0
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1515 chore(deps): bump webpack from 5.96.1 to 5.105.0 in /website

Bumps webpack from 5.96.1 to 5.105.0.

Release notes
Sourced from webpack's releases.

v5.105.0
Minor Changes

Allow resolving worker module by export condition name when using new Worker() (by @​hai-x in #20353)

Detect conditional imports to avoid compile-time linking errors for non-existent exports. (by @​hai-x in #20320)

Added the tsconfig option for the resolver options (replacement for tsconfig-paths-webpack-plugin). Can be false (disabled), tru...

sudden cypressBOT
#
AsadHumayun
[discordjs/discord-api-types] Issue opened: #1517 Missing attribute 'invite_cover_image' on type GatewayActivityAssets ts(2353)

Issue description

The property 'invite_cover_image' does not exist on the type GatewayActivityAssets stored in payloads/v10/gateway.

https://github.com/discordjs/discord-api-types/blob/6df197ac4774cc386be383e5a33222c605c5f84d/payloads/v10/gateway.ts#L350-L355

We believe that it would be beneficial for the resolution for this bug to also convert these types to an interface for a better solution. See the below linked PR for more info.

This bug is currently blocking the below linked PR a...

sudden cypressBOT
#
Jiralite
[discordjs/discord-api-types] New branch created: fix/nullable-radio-group
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
AsadHumayun
[discordjs/discord-api-types] Pull request opened: #1519 fix: export missing properties and use interfaces on GatewayActivityAssets

Please describe the changes this PR makes and why it should be merged:

This PR will add a missing property to the GatewayActivityAssets type, and will use an interface on GatewayActivityAssets , andGatewayActivitySecrets.

If applicable, please reference Discord API Docs PRs or commits that influenced this PR:

Activity Assets, [Activity Secrets](https://discord.com/developers/d...

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
PapiOphidian
[discordjs/discord-api-types] Issue opened: #1522 HTTP 204 route result types should be void instead of never

Issue description

The implications of the never type means you will never be able to observe the type which isn't true in the case of 204 as those are usually represented through undefined. 204 is an OK status code, so throwing an Exception to satisfy the semantics of never doesn't make sense.

In the Typescript handbook, they describe it as appropriate for use in methods which always return an exception as you cannot...

sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/multi-a07fd7252a
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1523 chore(deps): bump qs and express in /website

Bumps qs and express. These dependencies needed to be updated together.
Updates qs from 6.13.0 to 6.14.2

Changelog
Sourced from qs's changelog.

6.14.2

[Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit (#546)
[Fix] arrayLimit means max count, not max index, in combine/merge/parseArrayValue
[Fix] parse: throw on arrayLimit exceeded with indexed notation when throwOnLimitExceeded is true (#529...

sudden cypressBOT
#
vladfrangu
[discordjs/discord-api-types] New tag created: 0.38.39
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
PapiOphidian
[discordjs/discord-api-types] Pull request opened: #1526 fix(Types): replace never usage with void

Please describe the changes this PR makes and why it should be merged:
closes #1522

The majority of the usage of never in the project does not align with the semantics of the keyword and this PR replaces them with void. The keyword implies the value being typed as never cannot be observed under any conditions such as in the case of only throwing an exception or process.exit(), which is not true in cases of where these types would be used such as return types for routes that re...

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/tar-7.5.9
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1529 chore(deps): bump tar from 7.5.7 to 7.5.9

Bumps tar from 7.5.7 to 7.5.9.

Commits

1f0c2c9 7.5.9
fbb0851 build minified version as default export
6b8eba0 7.5.8
2cb1120 fix(unpack): improve UnpackSync symlink error "into" path accuracy
d18e4e1 fix: do not write linkpaths through symlinks
See full diff in compare view

Maintainer changes
This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes
This version adds prepare script ...

sudden cypressBOT
#
vladfrangu
[discordjs/discord-api-types] New tag created: 0.38.40
sudden cypressBOT
sudden cypressBOT
#
AsadHumayun
[discordjs/discord-api-types] Issue opened: #1533 docs: several broken links across library need updating

Issue description

I believe the recent update to Discord's documentation site may have lead to various links in this package being broken as a result.

Below are some examples of only the links that I found were broken. I suspect there could be more and am not entirely aware of the full scope that this has affected the docs here yet - some links seem to work just fine, and some are broken.

E.x.:

https://github.com/discordjs/discord-api-types/blob/6b6b256d5fc70d2cedb3613b5f52b3de0651...

sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/multi-00e71425c8
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1534 chore(deps): bump ajv and eslint-config-neon in /website

Bumps ajv to 6.14.0 and updates ancestor dependencies ajv and eslint-config-neon. These dependencies need to be updated together.

Updates ajv from 6.12.6 to 6.14.0

Commits

e3af0a7 6.14.0
b552ed6 add regExp option to address $data exploit via a regular expression (CVE-2025...
72f2286 docs: update v7 info
231e52b Merge pull request #1320 from philsturgeon/patch-1
...

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: revert-1515-dependabot/npm_and_yarn/website/webpack-5.105.0
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/rollup-2.80.0
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1544 chore(deps): bump rollup from 2.79.2 to 2.80.0 in /website

Bumps rollup from 2.79.2 to 2.80.0.

Changelog
Sourced from rollup's changelog.

2.80.0
2026-02-22
Features

Throw when the generated bundle contains paths that would leave the output directory (#6277)

Pull Requests

#6277: Validate bundle stays within output dir (@​lukastaegert)

Commits

d17ae15 2.80.0
d6dee5e Validate bundle stays within output dir (#6277)
See full diff in compare view

Install script changes
This version adds prepare script that r...

sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1545 chore(deps): bump immutable from 5.0.3 to 5.1.5 in /website

Bumps immutable from 5.0.3 to 5.1.5.

Release notes
Sourced from immutable's releases.

v5.1.5
What's Changed

Fix Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable
Upgrade devtools and use immutable version by @​jdeniau in immutable-js/immutable-js#2158

Full Changelog: https://github.com/immutable-js/immutable-js/compare/v5.1.4...v5.1.5
v5.1.4
What's Changed

Migrate some files to TS by @​jd...

#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/immutable-5.1.5
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/svgo-3.3.3
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1546 chore(deps): bump svgo from 3.3.2 to 3.3.3 in /website

Bumps svgo from 3.3.2 to 3.3.3.

Release notes
Sourced from svgo's releases.

v3.3.3
What's Changed
Dependencies

Migrates from our unsupported fork of sax (@​trysound/sax) to the upstream version of sax (sax).

Bug Fixes

No longer throws error when encountering comments in DTD.

Metrics
Before and after of the browser bundle of each respective version:

v3.3.2
v3.3.3
Delta

svgo.browser.js
910.9 kB
912.9 kB
⬆️ 2 kB

Support
SVGO v3 is not officially su...

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/tar-7.5.10
#
vladfrangu
[discordjs/discord-api-types] New tag created: 0.38.41
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
kshitijanurag
[discordjs/discord-api-types] Pull request opened: #1558 docs: update TSDoc comments for `PermissionFlagsBits`

Please describe the changes this PR makes and why it should be merged:
Minor documentation updates to three permission flags to improve accuracy and clarity.

  • AddReactions: Added a clarification that this permission does not apply to reacting with an existing reaction on a message, only to adding new reactions.
  • RequestToSpeak: Added a note that this permission is under active development and may be changed or removed.
  • UseEmbeddedActivities: Updated the applicable channel ...
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/tar-7.5.11
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/split-grouped-dispatch-types
#
almeidx
[discord-api-types] Branch fix/split-grouped-dispatch-types was force-pushed to `90a7df3`

Compare changes

#
almeidx
[discordjs/discord-api-types] Pull request opened: #1563 fix: split grouped gateway dispatch types

Currently, GatewayGuildBanAddDispatch is assigned to a grouped type (GatewayGuildBanModifyDispatch) which uses a union for the t property:

https://github.com/discordjs/discord-api-types/blob/a73d1d0ce2a463c34b282963b5aac5693d5260e0/gateway/v10.ts#L977-L980

This means if you create a generic type to map a GatewayDispatchEvents enum member to its respective dispatch data type, it fails for these grouped types. For example, Extract is never.

The current way it is also means...

#
almeidx
[discordjs/discord-api-types] New branch created: chore/clean-node-on-pre-commit
sudden cypressBOT
sudden cypressBOT
#
AsadHumayun
[discordjs/discord-api-types] New comment on issue #1533: docs: several broken links across library need updating

Hey @advaith1, thanks for fixing. I've done some more looking around and have documented the broken links here: https://gist.github.com/AsadHumayun/51aabdd47b09ca1c3ff77046e29b7873.

They seem to be mostly be gateway, gateway-events, and various others as well but these are the main ones. There are ~200 links that are broken or would need updating. I did this by pinging links at 1 second intervals so did try to keep within respectful rate limits.

sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/role-colors-annotations
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/webhook-nullability
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/send-soundboard-result
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/gateway-invite-compress
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: feat/application-fields
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/guild-member-modify-flags
#
almeidx
[discordjs/discord-api-types] New branch created: feat/guild-member-collectibles
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/guild-scheduled-event
#
almeidx
[discordjs/discord-api-types] Pull request opened: #1573 fix(guildScheduledEvent): entity_type required, channel_id nullable

Please describe the changes this PR makes and why it should be merged:
Seemingly, entity_type was always required from the beginning.
https://github.com/discord/discord-api-docs/commit/1298152172d3359abf069d1b24d4bbc85532b735

If applicable, please reference Discord API Docs PRs or commits that influenced this PR:
https://github.com/discord/discord-api-docs/commit/84f3290e

sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/guild-optionality-nullability
#
almeidx
[discord-api-types] Branch fix/guild-optionality-nullability was force-pushed to `27a0952`

Compare changes

#
almeidx
[discord-api-types] Branch fix/guild-optionality-nullability was force-pushed to `890b9ab`

Compare changes

#
almeidx
[discordjs/discord-api-types] Pull request opened: #1574 fix(Guild): correct optionality and nullability
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/channel-patch-nullability
#
almeidx
[discordjs/discord-api-types] New branch created: fix/poll-expiry-nullability
#
kshitijanurag
[discordjs/discord-api-types] Pull request opened: #1577 feat(BaseThemeType): add `Unset` base theme type

Please describe the changes this PR makes and why it should be merged:
Add Unset base theme type enum.

If applicable, please reference Discord API Docs PRs or commits that influenced this PR:

sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: feat/activity-instance
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: feat/missing-json-error-codes
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/voice-state-audit-log
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/interaction-fields
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/flatted-3.4.2
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1585 chore(deps): bump flatted from 3.2.5 to 3.4.2 in /website

Bumps flatted from 3.2.5 to 3.4.2.

Commits

3bf0909 3.4.2
885ddcc fix CWE-1321
0bdba70 added flatted-view to the benchmark
2a02dce 3.4.1
fba4e8f Merge pull request #89 from WebReflection/python-fix
5fe8648 added "when in Rome" also a test for PHP
53517ad some minor improvement
b3e2a0c Fixing recursion issue in Python too
c4b46db Add SECURITY.md for security policy and reporting
f86d071 Create dependabot.yml for version updates
Additional ...

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
kshitijanurag
[discordjs/discord-api-types] New comment on pull request #1583: feat: guild messages search

According to Discord documentation:

If the entity you are searching is not yet indexed, the endpoint will return a 202 accepted response. The response body will not contain any search results, and will look similar to an error response:

{
  "message": "Index not yet available. Try again later",
  "code": 110000,
  "documents_indexed": 0,
  "retry_after": 2
}

Should we add a response type for this as well which is separate from APIMessageSearchResult?

Also, shoul...

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: refactor/rename-duplicate-error-code
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discord-api-types] Branch refactor/rename-duplicate-error-code was force-pushed to `b5c63a8`

Compare changes

#
almeidx
[discord-api-types] Branch refactor/rename-duplicate-error-code was force-pushed to `6e97642`

Compare changes

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/multi-dc894274ce
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1589 chore(deps): bump picomatch in /website

Bumps and picomatch. These dependencies needed to be updated together.
Updates picomatch from 2.3.1 to 2.3.2

Release notes
Sourced from picomatch's releases.

2.3.2
This is a security release fixing several security relevant issues.
What's Changed

fix: exception when glob pattern contains constructor by @​Jason3S in micromatch/picomatch#144
Fix for CVE-2026-33671
Fix for CVE-2026-33672

Full Changelog: https://github.com/micromatch/picomatch/com...

sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/picomatch-2.3.2
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1590 chore(deps): bump picomatch from 2.3.1 to 2.3.2

Bumps picomatch from 2.3.1 to 2.3.2.

Release notes
Sourced from picomatch's releases.

2.3.2
This is a security release fixing several security relevant issues.
What's Changed

fix: exception when glob pattern contains constructor by @​Jason3S in micromatch/picomatch#144
Fix for CVE-2026-33671
Fix for CVE-2026-33672

Full Changelog: https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2

Changelog
Sourced from picomatch's changelog.

Releas...

sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/node-forge-1.4.0
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1595 chore(deps): bump node-forge from 1.3.3 to 1.4.0 in /website

Bumps node-forge from 1.3.3 to 1.4.0.

Changelog
Sourced from node-forge's changelog.

1.4.0 - 2026-03-24
Security

HIGH: Denial of Service in BigInteger.modInverse()

A Denial of Service (DoS) vulnerability exists due to an infinite loop in
the BigInteger.modInverse() function (inherited from the bundled jsbn
library). When modInverse() is called with a zero value as input, the
internal Extended Euclidean Algorithm enters an unreachable exit conditio...

#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/handlebars-4.7.9
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1596 chore(deps): bump handlebars from 4.7.8 to 4.7.9

Bumps handlebars from 4.7.8 to 4.7.9.

Release notes
Sourced from handlebars's releases.

v4.7.9

fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2
fix type "RuntimeOptions" also accepting string partials - eab1d14
feat(types): set hash to be a Record<string, any> - de4414d
fix non-contiguous program indices - 4512766
refactor: rename i to startPartIndex - e497a35
security: fix security issues - 68d8d...

sudden cypressBOT
sudden cypressBOT
#
vladfrangu
[discordjs/discord-api-types] New branch created: chore/pnpm-migration
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: docs/codeblock-everyone
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/path-to-regexp-0.1.13
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/multi-57404e07ab
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1600 chore(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /website

Bumps path-to-regexp from 0.1.12 to 0.1.13.

Release notes
Sourced from path-to-regexp's releases.

0.1.13
Important

Fix CVE-2026-4867 (GHSA-37ch-88jc-xwx2)

Full Changelog: https://github.com/pillarjs/path-to-regexp/compare/v0.1.12...v.0.1.13

Changelog
Sourced from path-to-regexp's changelog.

0.1.13 / 2026-03-26

Fix CVE-2026-4867 (GHSA-37ch-88jc-xwx2)

0.1.7 / 2015-07-28

Fixed regression with escaped round brackets and matching groups.

0....

#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1601 chore(deps): bump brace-expansion in /website

Bumps and brace-expansion. These dependencies needed to be updated together.
Updates brace-expansion from 1.1.12 to 1.1.13

Commits

6c353ca 1.1.13
7fd684f Backport fix for GHSA-f886-m6hf-6m8v (#95)
See full diff in compare view

Updates brace-expansion from 2.0.2 to 2.0.3

Commits

6c353ca 1.1.13
7fd684f Backport fix for GHSA-f886-m6hf-6m8v (#95)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as...

sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/app-event-webhook-status-optionality
#
almeidx
[discordjs/discord-api-types] New branch created: feat/deprecate-active-developer-user-flag
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/oauth2-current-app-flags
#
almeidx
[discordjs/discord-api-types] New branch created: fix/webhook-delete-query
#
almeidx
[discordjs/discord-api-types] New branch created: fix/user-dm-recipient-snowflake
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/reaction-type-burst
#
almeidx
[discordjs/discord-api-types] New branch created: fix/scheduled-event-dispatch-ref
#
almeidx
[discordjs/discord-api-types] New branch created: fix/forum-form-data-applied-tags
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/team-member-user-partial
sudden cypressBOT
#
Jiralite
[discordjs/discord-api-types] Pull request review submitted: #1616 fix(Teams): use partial user type on team member

I get this:

{
    "id": "618976181026422814",
    "username": "jiralite",
    "global_name": "Jiralite",
    "avatar": "228e9f0be121b4fba276c10f2ca5479b",
    "avatar_decoration_data": null,
    "collectibles": null,
    "discriminator": "0",
    "display_name_styles": null,
    "public_flags": 16640,
    "primary_guild": null,
    "clan": null
}

Seems a lot more than just the avatar, discriminator, and id? The API specification says it's a user response too: https://github.com/...

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: fix/thread-result-types
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
Jiralite
[discordjs/discord-api-types] New branch created: fix/permissions-change
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: feat/deprecate-ChannelSendRateLimit
sudden cypressBOT
#
almeidx
[discordjs/discord-api-types] New branch created: feat/forward-message-error-code
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
kshitijanurag
[discordjs/discord-api-types] Pull request opened: #1629 refactor(RESTJSONErrorCodes): rename `ServerSendRateLimit` to `ServerWriteRateLimit`

Please describe the changes this PR makes and why it should be merged:
The error message for JSON error code 20029 is "The write action you are performing on the server has hit the write rate limit" so I think it is more appropriate to rename it to ServerWriteRateLimit similar to https://github.com/discordjs/discord-api-types/pull/1627

If applicable, please reference Discord API Docs PRs or commits that influenced this PR:

sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/follow-redirects-1.16.0
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1630 chore(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /website

Bumps follow-redirects from 1.15.11 to 1.16.0.

Commits

0c23a22 Release version 1.16.0 of the npm package.
844c4d3 Add sensitiveHeaders option.
5e8b8d0 ci: add Node.js 24.x to the CI matrix
7953e22 ci: upgrade GitHub Actions to use setup-node@v6 and checkout@v6
86dc1f8 Sanitizing input.
See full diff in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name...

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/fast-xml-builder-1.2.0
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1655 chore(deps): bump fast-xml-builder from 1.1.5 to 1.2.0

Bumps fast-xml-builder from 1.1.5 to 1.2.0.

Changelog
Sourced from fast-xml-builder's changelog.

1.2.0 (2026-05-08)

Add support for sanitizeName option
Support xml-naming for validating and sanitizing tag and attribute names

1.1.9 (2026-05-06)

fix: format output for preserve order when indent by is set to empty string

1.1.8 (2026-05-05)

fix: skip text property for PI tags
improve typings

1.1.7 (2026--05-04)

fix security issue...

sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discordjs/discord-api-types] New branch created: dependabot/npm_and_yarn/website/babel/plugin-transform-modules-systemjs-7.29.4
#
dependabot[bot]
[discordjs/discord-api-types] Pull request opened: #1657 chore(deps): bump @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4 in /website

Bumps @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4.

Release notes
Sourced from @​babel/plugin-transform-modules-systemjs's releases.

v7.29.4 (2026-05-05)
:bug: Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

Huáng Jùnliàng (@​JLHwung)

v7.29.3 (2026-04-30)
:eyeglasses: Spec Compli...

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
dependabot[bot]
[discord-api-types] Branch dependabot/npm_and_yarn/website/babel/plugin-transform-modules-systemjs-7.29.4 was force-pushed to `bbbd550`

Compare changes

sudden cypressBOT
sudden cypressBOT
sudden cypressBOT
#
Jiralite
[discordjs/discord-api-types] New review comment on pull request #1631: feat: voice channel status

The specification says VOICE_CHANNEL_STATUS_CREATE rather than VOICE_CHANNEL_STATUS_UPDATE for 192. Is this something we want to bring up?

https://github.com/discord/discord-api-spec/blob/09c232e9f98cb748213600d0461e778a8b70ae15/specs/openapi.json#L20284-L20299

Testing in the client, there is no difference between creation and updating. Not going to block this pull request on it, however.

sudden cypressBOT