fix: override jws to resolve a security advisory (#28862)
Forcefully override jws to resolve the CI failures due to the security
advisory. `jws` hasn't yet been updated in the transitive chain of
dependencies so we cannot update any packages we directly depend on to
resolve it.
Closes:
https://linear.app/prisma-company/issue/TML-1666/fix-ci-failing-due-to-a-security-advisory-in-a-dependency
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Chores**
* Updated package dependency management to ensure compatibility and
improve stability.
<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
fix: don't leak connections in timed out transactions (#28831)
https://github.com/prisma/prisma/pull/28723 fixed some issues in
transaction startup but introduced a new bug: if the transaction manages
to start in background after we timed out, we would leak a connection in
the connection pool. This PR fixes that by waiting until the transaction
starts in background and immediately rolling it back if it does,
ignoring errors.
Likely fixes
https://linear.app/prisma-company/issue/TML-1648/investigate-itx-tests-failing-with-timeout
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Bug Fixes**
* Improved transaction startup timeout handling: if a transaction times
out but later completes, the system now ensures the transaction is
rolled back and connections are released to prevent resource leaks and
performance issues.
* **Tests**
* Added tests covering timeouts during transaction startup and verifying
cleanup occurs once the transaction eventually starts.
<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
fix: override jws to resolve a security advisory
Forcefully override jws to resolve the CI failures due to the security
advisory. `jws` hasn't yet been updated in the transitive chain of
dependencies so we cannot update any packages we directly depend on to
resolve it.