[dependabot]

Bumps @orpc/client from 2.0.0-beta.40 to 2.0.0-beta.44.

Release notes

Sourced from @​orpc/client's releases.

v2.0.0-beta.44

   🚨 Breaking Changes

• rpc,openapi: Throw MalformedResponseError instead of a MALFORMED_ORPC_RESPONSE ORPCError  -  by @​dinwwwh in middleapi/orpc#2238 (44e5b)
• server: Remove prototype pollution protection plugin  -  by @​dinwwwh and Claude in middleapi/orpc#2249 (ef6bc)

   🚀 Features

• server: Stream buffered batches when a sub-response is a stream  -  by @​dinwwwh in middleapi/orpc#2239 (e8e98)

   🐞 Bug Fixes

• Upgrade standard-server/* packages to 0.10.3  -  by @​dinwwwh and Claude in middleapi/orpc#2215 (f2d38)
• Compare non-plain objects by reference, not structure  -  by @​dinwwwh in middleapi/orpc#2220 (d8664)
• arktype:
  • Respect direction in JSON schema conversion  -  by @​dinwwwh in middleapi/orpc#2218 (32f3e)
• client:
  • Stop retrying after iterator is closed  -  by @​dinwwwh in middleapi/orpc#2221 (491b5)
  • Reject opaque and opaqueredirect responses  -  by @​dinwwwh and Claude in middleapi/orpc#2224 (5ee1d)
• json-schema:
  • Only coerce date strings with a valid time suffix  -  by @​dinwwwh and Claude in middleapi/orpc#2212 (42c2b)
  • Prevent exponential smart coercion of recursive union schemas  -  by @​dinwwwh in middleapi/orpc#2229 (6fdd5)
• node:
  • Keep small uploads in memory in TmpFileUploadHandlerPlugin  -  by @​dinwwwh in middleapi/orpc#2232 (a9dd6)
• openapi:
  • Prefer static routes when matching paths that need normalization  -  by @​dinwwwh in middleapi/orpc#2211 (f0c18)
  • Encode leading slash in catch-all path params in OpenAPILink  -  by @​dinwwwh in middleapi/orpc#2242 (d2d57)
• publisher:
  • Cap resumed events at maxBufferedEvents  -  by @​dinwwwh in middleapi/orpc#2240 (715d7)
• publisher,bun:
  • Report Redis subscriber connection errors via onError  -  by @​dinwwwh in middleapi/orpc#2222 (6618a)
• rpc:
  • Bound lazy router prefix scan in RPC matcher  -  by @​dinwwwh in middleapi/orpc#2231 (a2ca0)
  • Reject meta paths that descend into already deserialized values  -  by @​dinwwwh in middleapi/orpc#2247 (aef5c)
• rpc,json-schema:
  • Limit bigint digit count in RPC serializer and smart coercion  -  by @​dinwwwh in middleapi/orpc#2233 (f254e)
• server:
  • Keep the response Content-Type when compressing Blob bodies  -  by @​dinwwwh in middleapi/orpc#2214 (0dd69)
  • Reject non-canonical base64url in unsign and decrypt  -  by @​dinwwwh in middleapi/orpc#2252 (e30a3)
  • Start streaming batch at first message, not immediately  -  by @​dinwwwh in middleapi/orpc#2255 (2dc47)
• tanstack-query:
  • Give skipToken queries a distinct query key  -  by @​dinwwwh in middleapi/orpc#2210 (937af)
• tanstack-query,pinia-colada:
  • Let object overrides beat function base modifiers in query utils  -  by @​dinwwwh in middleapi/orpc#2213 (10e2d)

   🏎 Performance

• rpc: Reuse the shared path prefix of consecutive meta entries in deserialize  -  by @​dinwwwh in middleapi/orpc#2251 (200d8)

    View changes on GitHub

... (truncated)

Commits

• fc12fe0 chore: release v2.0.0-beta.44
• 200d8c2 perf(rpc): reuse the shared path prefix of consecutive meta entries in deseri...
• aef5cca fix(rpc): reject meta paths that descend into already deserialized values (#2...
• e8e9816 feat(server): stream buffered batches when a sub-response is a stream (#2239)
• 44e5bba fix(rpc,openapi)!: throw MalformedResponseError instead of a MALFORMED_ORPC_R...
• f254e8a fix(rpc,json-schema): limit bigint digit count in RPC serializer and smart co...
• 5ee1d2f fix(client): reject opaque and opaqueredirect responses (#2224)
• 491b548 fix(client): stop retrying after iterator is closed (#2221)
• f2d3822 fix: upgrade standard-server/* packages to 0.10.3 (#2215)
• 5f441da docs: serve the DeepWiki badge from shields.io (#2204)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[Mearman]

@codex security review

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-10-22T18:30:09.744030Z	75fa58b	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

🛡️ Codex Security Review

Security review completed. No security issues were found in this pull request.

Reviewed commit: 03643feae1

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

• You comment "@codex security review"
• A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

[Mearman]

@dependabot recreate

[Mearman]

@codex security review

[chatgpt-codex-connector]

🛡️ Codex Security Review

Security review completed. No security issues were found in this pull request.

Reviewed commit: 75fa58bd07

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

• You comment "@codex security review"
• A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.