chore(deps): bump the prisma group with 2 updates by dependabot[bot] · Pull Request #1813 · guardian/service-catalogue

dependabot · 2026-02-01T20:28:51Z

Prisma 6->7 has a few breaking changes. Most of this PR is modifications to imports and the lockfile, so I'll highlight the key bits below

prisma schema file - Prisma now generates typescript code that can be placed alongside your regular code. It has deprecated datasource->url, and this is now handled by the @prisma/adapter-pg library. The autogenerated code needs to be excluded from the lint step.

Node CA certs are no longer loaded by default in lambdas running node 20+. To fix this, we are now including NODE_EXTRA_CA_CERTS as an environment variable in lambdas that use prisma, as this is required for the TLS handshake to the DB

tsconfig - prisma v7 is not compatible with NodeNext. We are now using ESNext, so have adjusted the build scripts of the relavent lambdas to make this compatible. It also doesn't play very nicely with octokit's types so we've disabled some warnings for now. This PR is already large enough that resolving those issues should be a separate PR

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

github-actions · 2026-02-16T09:17:42Z

Deploy build 8376 of `deploy::service-catalogue` to CODE

All deployment options

From guardian/actions-riff-raff.

Co-authored-by: Natasha <novembertang@users.noreply.github.com>

add esm format, copy package.json

…ervices-rds.html

tjsilver

Looks good! I tested this branch locally by deleting all node_modules folders and reinstalling packages. This failed until I also deleted the prisma client in \packages/common/src/prisma-client\, which I guess makes sense.

kelvin-chappell

Looks good as far as I can tell! Interested to see copilot's take on it

Copilot

Pull request overview

Updates the repository to Prisma v7, adapting runtime/database setup and build tooling to Prisma’s new client generation and Postgres adapter approach, plus Node 20 Lambda TLS CA handling.

Changes:

Switch Prisma type/client imports from @prisma/client to generated code at common/prisma-client/client.js and update Prisma schema/config for v7.
Update database setup to use @prisma/adapter-pg and adjust lint/tsconfig to accommodate generated client + ESM constraints.
Update Lambda build/deployment configuration (esbuild ESM banner, postbuild package.json copy, and NODE_EXTRA_CA_CERTS env var) for Prisma + Node 20.

Reviewed changes

Copilot reviewed 63 out of 66 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
scripts/build.sh	Adjust Prisma Lambda packaging
packages/repocop/src/types.ts	Update Prisma type imports
packages/repocop/src/remediation/vuln-digest/vuln-digest.ts	Update Prisma type imports
packages/repocop/src/remediation/vuln-digest/vuln-digest.test.ts	Update Prisma type imports
packages/repocop/src/remediation/topics/topic-monitor-production.ts	Update Prisma type imports
packages/repocop/src/remediation/topics/topic-monitor-interactive.ts	Update Prisma type imports
packages/repocop/src/remediation/topics/topic-monitor-interactive.test.ts	Update Prisma type imports
packages/repocop/src/remediation/shared-utilities.ts	Update Prisma type imports
packages/repocop/src/remediation/dependency_graph-integrator/send-to-sns.ts	Update Prisma type imports
packages/repocop/src/remediation/dependency_graph-integrator/send-to-sns.test.ts	Update Prisma type imports
packages/repocop/src/remediation/branch-protector/branch-protection.ts	Update Prisma type imports
packages/repocop/src/remediation/branch-protector/branch-protection.test.ts	Update Prisma type imports
packages/repocop/src/query.ts	Update Prisma type imports
packages/repocop/src/metrics.ts	Update Prisma type imports
packages/repocop/src/index.ts	Update Prisma type imports
packages/repocop/src/evaluation/repository.ts	Update Prisma type imports
packages/repocop/src/evaluation/repository.test.ts	Update Prisma type imports
packages/repocop/package.json	esbuild ESM + postbuild
packages/refresh-materialized-view/package.json	esbuild ESM + postbuild
packages/obligatron/src/obligations/github-topics.ts	Update Prisma type imports
packages/obligatron/src/obligations/github-topics.test.ts	Update Prisma type imports
packages/obligatron/src/obligations/dependency-vulnerabilities.ts	Update Prisma type imports
packages/obligatron/src/obligations/aws-vulnerabilities.ts	Update Prisma type imports
packages/obligatron/src/index.ts	Update Prisma type imports
packages/obligatron/package.json	esbuild ESM + postbuild
packages/github-actions-usage/src/db-write.ts	Update Prisma type imports
packages/github-actions-usage/src/db-read.ts	Update Prisma type imports
packages/github-actions-usage/package.json	esbuild ESM + postbuild
packages/data-audit/src/audit/database.ts	Update Prisma type imports
packages/data-audit/src/audit/aws-s3-buckets.ts	Update Prisma type imports
packages/data-audit/src/audit/aws-lambda.ts	Update Prisma type imports
packages/data-audit/src/audit/aws-accounts.ts	Update Prisma type imports
packages/data-audit/package.json	esbuild ESM + postbuild
packages/common/tsconfig.json	Adjust TS config for Prisma v7
packages/common/src/types.ts	Update Prisma type imports
packages/common/src/projects-graphql.ts	Add eslint disables for Octokit typing
packages/common/src/functions.ts	Add eslint disables for Octokit typing
packages/common/src/database-setup.ts	Switch to adapter-pg + generated client
packages/common/src/database-queries.ts	Update Prisma type imports
packages/common/prisma/schema.prisma	Prisma v7 generator/output changes
packages/common/prisma.config.ts	New Prisma config datasource url
packages/common/package.json	Bump Prisma deps + add adapter
packages/cloudquery-usage/src/transform.ts	Update Prisma type imports
packages/cloudquery-usage/src/transform.test.ts	Update Prisma type imports
packages/cloudquery-usage/src/db-write.ts	Update Prisma type imports
packages/cloudquery-usage/package.json	esbuild ESM + postbuild
packages/cloudbuster/src/types.ts	Update Prisma type imports
packages/cloudbuster/src/index.ts	Update Prisma type imports
packages/cloudbuster/src/findings.ts	Update Prisma type imports
packages/cloudbuster/src/findings.test.ts	Update Prisma type imports
packages/cloudbuster/src/digests.ts	Update Prisma type imports
packages/cloudbuster/src/digests.test.ts	Update Prisma type imports
packages/cloudbuster/package.json	esbuild ESM + postbuild
packages/cli/src/database.ts	Update migration flow for Prisma v7
packages/cdk/lib/repocop.ts	Add NODE_EXTRA_CA_CERTS env
packages/cdk/lib/refresh-materialized-view.ts	Add NODE_EXTRA_CA_CERTS env
packages/cdk/lib/obligatron.ts	Add NODE_EXTRA_CA_CERTS env
packages/cdk/lib/github-actions-usage.ts	Add NODE_EXTRA_CA_CERTS env
packages/cdk/lib/data-audit.ts	Add NODE_EXTRA_CA_CERTS env
packages/cdk/lib/cloudquery-usage.ts	Add NODE_EXTRA_CA_CERTS env
packages/cdk/lib/cloudbuster.ts	Add NODE_EXTRA_CA_CERTS env
packages/cdk/lib/snapshots/service-catalogue.test.ts.snap	Snapshot updates for env
eslint.config.mjs	Ignore generated Prisma client dir
.gitignore	Ignore generated Prisma client dir
.github/workflows/ci.yml	Provide DATABASE_URL for CI migration

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

packages/cli/src/database.ts

+	const dbConfig = await getDevDatabaseConfig();
+	const connectionString = getDatabaseConnectionString(dbConfig);
+
+	console.log('Setting DATABASE_URL');
+	process.env.DATABASE_URL = connectionString;
+
 	console.log(`Running prisma migrate reset --force`);
-	const { stdout } = await $`npx -w common prisma migrate reset --force`;
+	const { stdout } =
+		await $`npx -w common prisma migrate reset --force --config prisma.config.ts --schema prisma/schema.prisma`;
 	console.log(stdout);


packages/common/src/functions.ts

+/* eslint-disable @typescript-eslint/no-unsafe-assignment  -- this is not unsafe */
+/* eslint-disable @typescript-eslint/no-unsafe-call  -- this is not unsafe */
 export async function getGithubClient(


packages/common/src/projects-graphql.ts

+/* eslint-disable @typescript-eslint/no-unsafe-assignment  -- this is not unsafe */
+/* eslint-disable @typescript-eslint/no-unsafe-call  -- this is not unsafe */
+
 export async function addPrToProject(
 	stage: string,
 	shortRepoName: string,
 	boardNumber: number,
 	author: string,
 ) {
+	// eslint-disable-next-line @typescript-eslint/no-unsafe-member-access  -- this is not unsafe
 	const graphqlWithAuth = (await stageAwareOctokit(stage)).graphql;



packages/cloudbuster/package.json

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 1, 2026

dependabot bot requested review from a team as code owners February 1, 2026 20:28

dependabot bot force-pushed the dependabot/npm_and_yarn/prisma-5c76de4efe branch 6 times, most recently from c1896dc to c171b71 Compare February 4, 2026 16:11

dependabot bot force-pushed the dependabot/npm_and_yarn/prisma-5c76de4efe branch 2 times, most recently from ae48384 to 9f707b2 Compare February 9, 2026 15:03

NovemberTang marked this pull request as draft February 9, 2026 17:25

NovemberTang marked this pull request as ready for review February 10, 2026 08:41

NovemberTang marked this pull request as draft February 10, 2026 08:43

NovemberTang force-pushed the dependabot/npm_and_yarn/prisma-5c76de4efe branch 8 times, most recently from 4c20be5 to b69f405 Compare February 12, 2026 11:24

akash1810 force-pushed the dependabot/npm_and_yarn/prisma-5c76de4efe branch 4 times, most recently from 5eb57e0 to 561dd98 Compare February 12, 2026 15:20

NovemberTang force-pushed the dependabot/npm_and_yarn/prisma-5c76de4efe branch 5 times, most recently from e5733ee to 509933e Compare March 10, 2026 18:07

NovemberTang marked this pull request as ready for review March 11, 2026 11:23

dependabot bot and others added 13 commits March 11, 2026 11:23

upgrade prisma client

c85004c

attempt to fix CI job

640503e

fix: Set Prisma URL correctly

5b0016c

Co-authored-by: Natasha <novembertang@users.noreply.github.com>

chore: Pretty print schema.prisma

5035e8b

fix build script

e74bad5

only load env file locally

24c6e45

fix runtime error

47470f8

temporarily disable lint errors

ea3b6fc

include package.json in build to force node to run lambda in ESM

948dfcb

add esm format, copy package.json

remove tsup

c5d71d1

Load CA certificates - https://docs.aws.amazon.com/lambda/latest/dg/s…

316654a

…ervices-rds.html

fix other prisma-based lambdas

90540c1

tidying up

fb59712

NovemberTang force-pushed the dependabot/npm_and_yarn/prisma-5c76de4efe branch from 509933e to fb59712 Compare March 11, 2026 11:23

tjsilver approved these changes Mar 18, 2026

View reviewed changes

kelvin-chappell approved these changes Mar 18, 2026

View reviewed changes

kelvin-chappell requested a review from Copilot March 18, 2026 13:09

Copilot started reviewing on behalf of kelvin-chappell March 18, 2026 13:09 View session

Copilot AI reviewed Mar 18, 2026

View reviewed changes

NovemberTang and others added 2 commits March 18, 2026 17:28

Remove trailing whitespace

6477504

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

construct db url instead of reading from env file

21945f0

NovemberTang force-pushed the dependabot/npm_and_yarn/prisma-5c76de4efe branch from ba990b8 to 21945f0 Compare March 19, 2026 12:06

NovemberTang added 2 commits March 19, 2026 12:11

fix postinstall

2e517b4

stop using dotenv

26820b2

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the prisma group with 2 updates#1813

chore(deps): bump the prisma group with 2 updates#1813
dependabot[bot] wants to merge 17 commits intomainfrom
dependabot/npm_and_yarn/prisma-5c76de4efe

dependabot bot commented on behalf of github Feb 1, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 16, 2026 •

edited

Loading

Uh oh!

tjsilver left a comment

Uh oh!

kelvin-chappell left a comment

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Conversation

dependabot bot commented on behalf of github Feb 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploy build 8376 of deploy::service-catalogue to CODE

Uh oh!

tjsilver left a comment

Choose a reason for hiding this comment

Uh oh!

kelvin-chappell left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

dependabot bot commented on behalf of github Feb 1, 2026 •

edited

Loading

github-actions bot commented Feb 16, 2026 •

edited

Loading

Deploy build 8376 of `deploy::service-catalogue` to CODE