fix(deps): update prisma monorepo (7.9.0 → 7.9.1)

[its-miso]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@prisma/adapter-pg (source)	7.9.0 → 7.9.1
@prisma/client (source)	7.9.0 → 7.9.1
prisma (source)	7.9.0 → 7.9.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

prisma/prisma (@​prisma/adapter-pg)

v7.9.1

Compare Source

Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).

This fixes #​29780.

It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.

---

Configuration

📅 Schedule: (in timezone America/Edmonton)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)

PR PR 672 Review: fix(deps): update prisma monorepo (7.9.0 → 7.9.1)

Recommendation

Approve. This is a patch-level Prisma monorepo bump (7.9.0 → 7.9.1) that resolves security advisories in transitive dependencies (find-my-way and valibot via @prisma/dev, plus fast-uri). The change is confined to package-lock.json with no source code modifications.

---

Required Checks

✅ check for breaking API changes in updated dependencies

Verified. Prisma 7.9.1 is a patch release. Per the upstream release notes (GitHub compare metadata, 2 commits between versions), the changes are:

1. Commit 1 (3f492ab): Updates @prisma/dev from 0.24.14 → 0.24.17 to resolve find-my-way and valibot security advisories.
2. Commit 2 (787e3a8): Patches fast-uri override to resolve two additional audit advisories (GHSA-4c8g-83qw-93j6, GHSA-v2hh-gcrm-f6hx).

The release body explicitly states: "It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required." These are security-only patches in transitive dependencies. No Prisma public API surfaces were changed — the patch increments internal package versions (@prisma/debug, @prisma/client, etc.) but the consumer-facing API contracts remain identical.

✅ run full test suite after upgrade

Verified via CI. The CI check results are authoritative and show all checks passed:

• Docker Build: success
• Build: success
• Tests: success
• Lint: success
• Typecheck: success

The full test suite ran successfully against the updated lockfile at commit d5525576, confirming the upgrade is compatible with Dispatch's codebase.

---

Standards Compliance

The PR follows repository conventions:

• No source files modified — only package-lock.json (standard for dependency-only PRs)
• No commit of secrets — no secrets or credentials present
• CI gates passed — lint/typecheck tests blocked CI and all succeeded

---

Tool Harness Findings

The tool harness issued no tool calls; this review was performed by directly analyzing the corpus (diff, linked sources, CI results).

---

Linked Sources Summary

The compare metadata for prisma/prisma@7.9.0...7.9.1 (Source 15) and release tag 7.9.1 (Source 17) confirm:

• Two commits in the release branch
• Both commits are security/transitive-dep fixes only
• No API contract changes in any published Prisma package

---

Unknowns / Needs Verification

None. The patch is fully characterized: it addresses security advisories in transitive dependencies, carries no breaking changes, and has passed the full CI suite.