Skip to content

Bump discord.js from 14.26.4 to 14.27.0 - #8

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/discord.js-14.27.0
Open

Bump discord.js from 14.26.4 to 14.27.0#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/discord.js-14.27.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown

Bumps discord.js from 14.26.4 to 14.27.0.

Release notes

Sourced from discord.js's releases.

14.27.0

Bug Fixes

Documentation

Features

Refactor

Typings

  • WebhookMessageCreateOptions: Omit sharedClientTheme (b816b79)
  • Message: Specify rawData arg type (#11123) (c4531d4)
  • UserManager: Fix send() return type to Promise<Message> (#11337) (07c4127)

14.26.5

Bug Fixes

Changelog

Sourced from discord.js's changelog.

14.27.0 - (2026-07-15)

Bug Fixes

Documentation

Features

Refactor

Typings

  • WebhookMessageCreateOptions: Omit sharedClientTheme (b816b79)
  • Message: Specify rawData arg type (#11123) (c4531d4)
  • UserManager: Fix send() return type to Promise<Message> (#11337) (07c4127)

14.26.5 - (2026-07-10)

Bug Fixes

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [discord.js](https://github.com/discordjs/discord.js/tree/HEAD/packages/discord.js) from 14.26.4 to 14.27.0.
- [Release notes](https://github.com/discordjs/discord.js/releases)
- [Changelog](https://github.com/discordjs/discord.js/blob/14.27.0/packages/discord.js/CHANGELOG.md)
- [Commits](https://github.com/discordjs/discord.js/commits/14.27.0/packages/discord.js)

---
updated-dependencies:
- dependency-name: discord.js
  dependency-version: 14.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 25, 2026
@diffy-bot

diffy-bot Bot commented Jul 25, 2026

Copy link
Copy Markdown

Summary

  • Bump discord.js in apps/discord-bot from ^14.22.1 to ^14.27.0.
  • Update pnpm-lock.yaml to reflect the upgrade and numerous transitive dependency version bumps and snapshot updates.

Files changed

  • apps/discord-bot/package.json
    • "discord.js": "^14.22.1" → "^14.27.0"
  • pnpm-lock.yaml
    • Updated many package versions, integrity hashes, snapshots and dependency resolutions.

Key changes (notable upgrades)

  • discord.js: 14.26.4 → 14.27.0 (package.json moved from ^14.22.1 → ^14.27.0)
  • discord-api-types: 0.38.49 → 0.38.50
  • @discordjs/rest: 2.6.1 → 2.6.3
  • @discordjs/ws: updated to reference @discordjs/rest@2.6.3 and ws@8.21.1
  • @sapphire/snowflake: removed 3.5.3 entry, bumped to 3.5.5
  • ws: added 8.21.1 (peer deps bufferutil, utf-8-validate marked optional)
  • baseline-browser-mapping: 2.10.40 → 2.11.1
  • browserslist: 4.28.4 → 4.28.7
  • caniuse-lite: 1.0.30001799 → 1.0.30001806
  • electron-to-chromium: 1.5.380 → 1.5.396
  • node-releases: 2.0.50 → 2.0.51
  • Many lockfile snapshots updated to reflect these changes.

Impact / recommended actions

  • Run a fresh install (pnpm install) and run the bot locally and in CI to ensure no runtime regressions.
  • Verify your runtime Node version meets requirements (many updated packages require Node >= 18).
  • Run the test suite and exercise bot features that interact with the Discord API (events, REST calls, websockets).
  • Check discord.js changelog for 14.27.0 for any behavioral changes or migration notes.
  • If you rely on ws native-acceleration (bufferutil / utf-8-validate), consider installing those optional deps for performance; otherwise the pure JS fallback will be used.

Suggestions

  • Confirm CI and deployment environments use Node >= 18 to satisfy updated engine constraints.
  • Review discord.js/@discordjs/rest changelogs for API or behavior changes and update code if necessary.
  • If your project pins Node in engines or Docker images, update them if needed.
  • Keep the pnpm-lock.yaml committed (it is updated here) so installs are deterministic across environments.

TL;DR: discord.js was bumped to 14.27.0 and pnpm lockfile updated for that and many transitive deps. Test the bot on Node >=18 and review discord.js changelog.

You can generate a new summary by commenting @diffy-bot.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addeddiscord.js@​14.27.07310010098100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants