chore(deps): update all non-major dependencies - #794
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
commit: |
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
6 times, most recently
from
September 10, 2026 19:26
3eaad68 to
ec5aad0
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
9 times, most recently
from
September 23, 2026 01:41
e492336 to
34c4639
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
September 26, 2026 12:41
2c95f57 to
d18c6d5
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 27, 2026 00:25
d18c6d5 to
cd7711a
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^24.13.3→^24.19.0^5.0.0→^5.0.2v0.6.9→v0.6.10^10.9.1→^10.11.0^6.33.0→^6.38.0^0.11.0→^0.11.222→22.23.3^2.3.1→^2.3.3^1.3.0→^1.3.1^0.22.14→^0.23.0^5.0.0→^5.0.2^3.5.42→^3.5.43^3.5.42→^3.5.43^0.2.5→^0.3.0Release Notes
vitest-dev/vitest (@vitest/coverage-v8)
v5.0.2Compare Source
🐞 Bug Fixes
processin case global is overwritten - by @AriPerkkio in #11343 (0b792)process.stdiohandles - by @AriPerkkio in #11333 (0fd6b)toMatchObjectwith asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in #11100 (42523)RequestwithBlobbody on jsdom 28+ - by @harshit-d3v in #11295 (d1c3e)agentto respect--silent- by @Raj4478 and @AriPerkkio in #11271 (5b95e)createReportcalls - by @7rulnik in #11278 (e8e55)hanging-processto use ESM entrypoint - by @AriPerkkio in #11316 (4e91e)Set.prototype.add- by @fengmk2 in #11299 (a0a93)View changes on GitHub
v5.0.1Compare Source
🚀 Features
🐞 Bug Fixes
extends- by @sheremet-va in #11034 (23dda)deps.optimizer.webis used - by @im10furry in #11214 (2ce29)config.define- by @sheremet-va in #11198 (972e2)toMatchAriaSnapshot- by @sheremet-va in #11208 (c119b)queueMicrotaskandnextTickintoNotFake- by @kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @hi-ogawa in #11261 (a47d7)deepMergeto handle prototype - by @hi-ogawa, Hiroshi Ogawa and Codex in #11215 (4944c)View changes on GitHub
danielroe/uppt (danielroe/uppt)
v0.6.10Compare Source
compare changes
🚀 Enhancements
🩹 Fixes
🏡 Chore
✅ Tests
🤖 CI
❤️ Contributors
eslint/eslint (eslint)
v10.11.0Compare Source
v10.10.0Compare Source
webpro-nl/knip (knip)
v6.38.0: Release 6.38.0Compare Source
0c33410)617f70d)260dbb9) - thanks @matchai!argsexample to that doc page (50b271b)e49d3db) - thanks @changbaebang!import-x/*settings in ESLint plugin (#2050) (1a34cf8) - thanks @bytedoe!9b5c5f6) - thanks @giaBaoJS!a149a98) - thanks @matthewnitschke-wk!8b0c850) - thanks @vdavid!8a8805e) - thanks @devYRPauli!584e53f)34dbccf) - thanks @gioboa!11e9450)7b58251)25a380c)v6.37.0: Release 6.37.0Compare Source
06a68fc) - thanks @RobHannay!5b21dc9) - thanks @addielaruee!c5bdb69)54af171)e67dfcb)c1d7d75)4237010)038ea17)4aaf77c)1269e98) - thanks @bytedoe!v6.36.0: Release 6.36.0Compare Source
b5ac0cf) - thanks @igas!23419b4)3c2c1a5) - thanks @gioboa!parserOptions.parserhandling in ESLint plugin (#2028) (c79463c) - thanks @bytedoe!68bbe51) - thanks @thanadolps!30ff756) - thanks @gioboa!adfaf4f) - thanks @gioboa!a05e155)1c26560)d911c18)c1f18d5) - thanks @kenfdev!66e966b)e4fbf46) - thanks @Joehoel!c8df8a2) - thanks @giaBaoJS!import/resolversetting in ESLint plugin (#2041) (a80d386) - thanks @bytedoe!4c67685) - thanks @shoutoutuoadi325!ce387b0) - thanks @giaBaoJS!532dab5) - thanks @anandghegde!84a4943) - thanks @CruseCtrl!3f756a7)43b3f9b)f1e97b9)0188e7d)extendsfiles in eslintrc configs (#2044) (62b5bf5) - thanks @bytedoe!a85eb4e) - thanks @bytedoe!882ba3a) - thanks @gioboa!v6.35.1: Release 6.35.1Compare Source
37b2642) - thanks @WooWan!0d9cf34)2659063)7be11aa)v6.35.0: Release 6.35.0Compare Source
c6497a1) - thanks @gioboa!9ce68ed) - thanks @gioboa!2e7d498) - thanks @devYRPauli!a21f972) - thanks @gioboa!3178940) - thanks @s-h-a-d-o-w!aaab35a) - thanks @gioboa!6c27aab) - thanks @gioboa!a092e40) - thanks @gioboa!pnpm.overridesis read from the root manifest only (f69a7f6)3662c95)90b384d) - thanks @renovate[bot]!16d03f7) - thanks @bytedoe!a4c7a93)cwdif its missing at therootlevel (#2020) (f66c9f1) - thanks @JayaKrishnaNamburu!75d5628) - thanks @gioboa!cyclesissue type/reporter (resolve #2021) (f1e690b)e2bd3fc)1cc979b)db6d891)4afbbcf)v6.34.0: Release 6.34.0Compare Source
3c785f5)node:fs/promisesglob(#1977) (44faf08) - thanks @DreamLongYT!f93ad09)1c90b49)964085d)8f9490a)ab90e24) - thanks @devYRPauli!462ae45) - thanks @gioboa!#sharedimports from the shared directory (#1991) (cc47061) - thanks @DreamLongYT!c4e0f08)@types/webpack(96ff2df)f0cf11d)unjs/magic-regexp (magic-regexp)
v0.11.2Compare Source
👉 Changelog
compare changes
🔥 Performance
🩹 Fixes
6c38003)d4981f5)2565619)🏡 Chore
fast-check(df9938e)✅ Tests
caa6f9c)❤️ Contributors
v0.11.1Compare Source
👉 Changelog
compare changes
🔥 Performance
🩹 Fixes
89f0758)3ef51aa)📖 Documentation
🏡 Chore
dc69251)pnpm-workspace.yaml(ef88629)bb21188)bb16953)✅ Tests
🤖 CI
pnpm/setupanddevEngines(#750)12833d6)48d82ba)🎉 New Contributors
❤️ Contributors
nodejs/node (node)
v22.23.3: 2026-09-23, Version 22.23.3 'Jod' (LTS), @aduh95 prepared by @juanarbolCompare Source
Notable Changes
fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #64884e306521444] - deps: update icu to 78.3 (Node.js GitHub Bot) #62324a9cb31129f] - deps: update OpenSSL 3.5.8 (Node.js GitHub Bot) #655422a3548e51c] - deps: update Undici to 6.28.1 (mcollina) #657903909ff2c4a] - node-api: supportSharedArrayBufferinnapi_create_typedarray(Yilong Li) #6271066de6349ad] - node-api: addnapi_create_external_sharedarraybuffer(Ben Noordhuis) #62623Commits
44cf27b8fa] - build: update binary-upload to use correct tarball name (Stewart X Addison) #65282fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #6474671feba6b69] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #656532a3548e51c] - deps: update undici to 6.28.1 (mcollina) #6579059d853a4df] - deps: update archs files for openssl-3.5.8 (Node.js GitHub Bot) #65542a9cb31129f] - deps: upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #655423376e27de2] - deps: V8: cherry-picka6eaf75(Camillo Bruni) #65402b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #648844e4bd1b104] - deps: update timezone to 2026c (Node.js GitHub Bot) #645887d82841b4e] - deps: update c-ares to 1.34.8 (Node.js GitHub Bot) #6433001855a19d3] - deps: c-ares: cherry-pick8ba37af(René) #6411023fb398c3d] - deps: update corepack to 0.35.0 (Node.js GitHub Bot) #633755286330365] - deps: update corepack to 0.34.7 (Node.js GitHub Bot) #628106d6c3c98b1] - deps: update timezone to 2026b (Node.js GitHub Bot) #62962e306521444] - deps: update icu to 78.3 (Node.js GitHub Bot) #62324d9cb8468a3] - doc: clarifyfilteroption ofsqlite.database.applyChangeset(Antoine du Hamel) #63515c9c5662d91] - doc: add sxa GPG key (ed25519) (Stewart X Addison) #6419337f21068c4] - fs: restore fs patchability in ESM loader (Joyee Cheung) #628357c2df5dd96] - http2: avoid uaf while receiving and sending rst_stream (esgor) #641663909ff2c4a] - node-api: support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #6271066de6349ad] - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623ce9139107f] - src: escape Windows environment variables in task runner (Antoine du Hamel) #65217839480a471] - test: fix link-local dgram scope assertion (Filip Skokan) #6562940eac4a32f] - test: account for varied OpenSSL CCM final behaviours (Filip Skokan) #6554275098a9e8c] - tools: update gr2m/create-or-update-pull-request-action to v1.10.1 (Mike McCready) #6306508b6ac0416] - tools: revert OpenSSL update workflow to ubuntu-latest (Richard Lau) #6262702cafc479f] - tools: fix commit linter for semver-major release proposals (Antoine du Hamel) #629936f6cd3768d] - tools: sync mk-ca-bundle.pl with curl (Archkon) #64753bc5753d438] - tools: removeenvinfofrom our workflows (Antoine du Hamel) #64259d68ee9f8a5] - tools: validate version number in release proposal commit message lint (Antoine du Hamel) #6407038ee2e895f] - tools: avoid test/fixtures/wpt/README.md conflicts (Filip Skokan) #63938fdc65e489f] - tools: use different branch for tool updates on staging branches (Antoine du Hamel) #63110e5a6fde002] - tools: update gyp-next to 0.22.1 (Node.js GitHub Bot) #629615fbbad6e82] - url: handle unparsable serialized URLs in setters (Matteo Collina) #64651ed019e4854] - util: preserve function names without source map names (Hiroki Osame) #65108v22.23.2: 2026-07-29, Version 22.23.2 'Jod' (LTS), @marco-ippolitoCompare Source
This is a security release.
Notable Changes
Commits
4b12ac38a1] - deps: update llhttp to 9.4.3 (Paolo Insogna) nodejs-private/node-private#9353fd0aa51d0] - deps: update undici to 6.28.0 (Node.js GitHub Bot) #6471422efc051a3] - (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) nodejs-private/node-private#929c8525ac3a6] - (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) nodejs-private/node-private#932daa6d25e3d] - (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) nodejs-private/node-private#921f14d78b9e0] - (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) #6375251123159fe] - (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) nodejs-private/node-private#934acaf4266b2] - (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) nodejs-private/node-private#930440329f624] - (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) nodejs-private/node-private#911ed18b9cc07] - (CVE-2026-58039) permission: check final report output path (RafaelGSS) [nodejs-private/node-priConfiguration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.