chore(deps): update all non-major dependencies - #1526
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
16 times, most recently
from
September 14, 2026 08:22
ba0e6b1 to
ccc31a2
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 14, 2026 08:51
ccc31a2 to
7e9c4f0
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^9.3.0→^9.5.1^1.7.0→^1.8.01.8.1^1.7.0→^1.8.01.8.1^4.2.0→^4.3.2^24.13.3→^24.13.4^0.1.0→^0.1.1^0.2.4→^0.3.1^10.9.1→^10.10.064.3.2→64.3.10^4.9.0→^4.10.0^6.33.0→^6.35.122→22.23.224.20.0→24.21.0^0.6.9→^0.6.10^2.3.1→^2.3.3^2.3.1→^2.3.3^3.0.1→^3.1.0^4.63.1→^4.63.2^1.0.3→^1.0.4^1.3.0→^1.3.1^1.3.0→^1.3.1^0.22.14→^0.23.0^8.10.0→^8.10.2^5.3.0→^5.3.1^5.3.0→^5.3.15.3.0→5.3.1Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
antfu/eslint-config (@antfu/eslint-config)
v9.5.1Compare Source
🐞 Bug Fixes
antislopplugins composition, refactor - by @antfu (a213d)View changes on GitHub
v9.5.0Compare Source
🚀 Features
View changes on GitHub
v9.4.1Compare Source
🚀 Features
View changes on GitHub
v9.4.0Compare Source
🚀 Features
jsdoc v64unicorn v74e18e v0.8solid v0.17- by @antfu (33a41)minimumReleaseAgeExcludePruneby default - by @antfu (9526c)View changes on GitHub
bombshell-dev/clack (@clack/prompts)
v1.8.0Compare Source
Minor Changes
#592
caa32e8Thanks @gameroman! - ExportCANCEL_SYMBOLconstant from@clack/coreand@clack/prompts#594
37fca4eThanks @dreyfus92! - Add tab-completion to thepathprompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type/and Tab again). Powered by a new opt-incompleteOnTaboption onautocomplete, which also shows aTab: completehint in the instructions footer. Defaultautocompletebehavior is unchanged.#583
ae636ddThanks @43081j! - Add async validation support to prompts, and validation state rendering to text prompts.Patch Changes
#588
6506135Thanks @danielroe! - Style the guide bar rendered bybox({ withGuide: true })in grey so it matches the gutter drawn bylog,noteand the spinner#599
0547d6fThanks @43081j! - Fixes a withGuide rendering issue leaving extra spaces in text prompts.Updated dependencies [
227583e,caa32e8,37fca4e,ae636dd,b20fa2b]:nuxt/test-utils (@nuxt/test-utils)
v4.3.2Compare Source
👉 Changelog
compare changes
🩹 Fixes
vitest/environmentsimport opaque to rolldown (6d1195d38)❤️ Contributors
v4.3.1Compare Source
👉 Changelog
compare changes
🩹 Fixes
^5as peer dependency (#1809)🏡 Chore
e68ecfa28)🎉 New Contributors
❤️ Contributors
v4.3.0Compare Source
👉 Changelog
compare changes
🚀 Enhancements
unmockNuxtImporthelper (#1795)🩹 Fixes
✅ Tests
🎉 New Contributors
❤️ Contributors
danielroe/clickable-path (clickable-path)
v0.1.1Compare Source
👉 Changelog
compare changes
🚀 Enhancements
hyperlink()export (#25)🤖 CI
❤️ Contributors
eslint/eslint (eslint)
v10.10.0Compare Source
gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)
v64.3.10Compare Source
Bug Fixes
convert-to-jsdoc-comments: merge stacked line comments into a single JSDoc block (64a8dca), closes #1764v64.3.9Compare Source
Bug Fixes
no-undefined-types: recognize class members from the class's own JSDoc (eade377), closes #1762v64.3.8Compare Source
Bug Fixes
getJsdocProcessorPlugin: key positions by file; drop suggestions (1b3c339)v64.3.7Compare Source
Bug Fixes
no-undefined-types: recognize sibling class members from a property's JSDoc (5cac70a), closes #1760v64.3.6Compare Source
Bug Fixes
no-unnecessarry-type-assertion: avoid treating as redundant object annotations which clarify method argument types (342b6f6)no-unnecessary-type-assertion: handle array literal annotations whose element type is a literal or union of literals narrowing element type (543b24f)v64.3.5Compare Source
Bug Fixes
no-unnecessary-type-assertion: don't flag array-to-tuple assertions; addpreferConstToLiteralTuples(8546f77), closes #1756v64.3.4Compare Source
Bug Fixes
require-asterisk-prefix: avoid crashing on custom languages (8f78214)v64.3.3Compare Source
Bug Fixes
convert-to-jsdoc-comments: handle "any" context and avoid extra line break when there is already multiline text; fixes #1747 (ca2668b)no-blank-block-descriptions: strip out initial line breaks when text is present (with or without tags); fixes #1748 (0ad1ae2)dubzzz/fast-check (fast-check)
v4.10.0Compare Source
New plugin API and deprecations ahead of v5
[Code][Diff]
Features
beforeEachplugin to hook in life-cycleafterEachpluginbeforeEachplugintimeoutplugin to stop long running predicatesonAllRunsCompletereporterandasyncReporterfrom parametersfailOnInterrupton the plugingeneratevia Pluginsunbiasedplugin to generate without biasFixes
interruptAfterTimeLimitwebpro-nl/knip (knip)
v6.35.1: Release 6.35.1Compare Source
37b2642) - thanks @WooWan!0d9cf34)2659063)7be11aa)v6.35.0: Release 6.35.0Compare Source
c6497a1) - thanks @gioboa!9ce68ed) - thanks @gioboa!2e7d498) - thanks @devYRPauli!a21f972) - thanks @gioboa!3178940) - thanks @s-h-a-d-o-w!aaab35a) - thanks @gioboa!6c27aab) - thanks @gioboa!a092e40) - thanks @gioboa!pnpm.overridesis read from the root manifest only (f69a7f6)3662c95)90b384d) - thanks @renovate[bot]!16d03f7) - thanks @bytedoe!a4c7a93)cwdif its missing at therootlevel (#2020) (f66c9f1) - thanks @JayaKrishnaNamburu!75d5628) - thanks @gioboa!cyclesissue type/reporter (resolve #2021) (f1e690b)e2bd3fc)1cc979b)db6d891)4afbbcf)v6.34.0: Release 6.34.0Compare Source
3c785f5)node:fs/promisesglob(#1977) (44faf08) - thanks @DreamLongYT!f93ad09)1c90b49)964085d)8f9490a)ab90e24) - thanks @devYRPauli!462ae45) - thanks @gioboa!#sharedimports from the shared directory (#1991) (cc47061) - thanks @DreamLongYT!c4e0f08)@types/webpack(96ff2df)f0cf11d)nodejs/node (node)
v22.23.2: 2026-07-29, Version 22.23.2 'Jod' (LTS), @marco-ippolitoCompare Source
This is a security release.
Notable Changes
Commits
4b12ac38a1] - deps: update llhttp to 9.4.3 (Paolo Insogna) nodejs-private/node-private#9353fd0aa51d0] - deps: update undici to 6.28.0 (Node.js GitHub Bot) #6471422efc051a3] - (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) nodejs-private/node-private#929c8525ac3a6] - (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) nodejs-private/node-private#932daa6d25e3d] - (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) nodejs-private/node-private#921f14d78b9e0] - (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) #6375251123159fe] - (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) nodejs-private/node-private#934acaf4266b2] - (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) nodejs-private/node-private#930440329f624] - (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) nodejs-private/node-private#911ed18b9cc07] - (CVE-2026-58039) permission: check final report output path (RafaelGSS) nodejs-private/node-private#9260566c3cccd] - (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) nodejs-private/node-private#9270d072480c3] - (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) nodejs-private/node-private#931v22.23.1: 2026-06-23, Version 22.23.1 'Jod' (LTS), @RafaelGSSCompare Source
This release includes a fix for an unexpected behavior introduced
by the recent security release (22.23.0).
Commits
41d2ee13be] - build: switch coverage-windows towindows-2022(Richard Lau) #63940eaa292549e] - http: avoid stream listeners on idle agent sockets (Matteo Collina) #64004v22.23.0: 2026-06-18, Version 22.23.0 'Jod' (LTS), @aduh95Compare Source
This is a security release.
Notable Changes
Commits
38b4c5ed51] - (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) nodejs-private/node-private#878ad8a10c1bb] - deps: update llhttp to 9.4.2 (Antoine du Hamel) nodejs-private/node-private#890ca825a87cc] - deps: update undici to 6.27.0 (aduh95) #63711a1a5bb9683] - (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 (Tim Perry) #628910f48583512] - (SEMVER-MAJOR) deps: update nghttp2 to 1.69.0 (Node.js GitHub Bot) #6289138c869fc05] - deps: update nghttp2 to 1.68.0 (nodejs-github-bot) #61136290667c84f] - deps: update nghttp2 to 1.67.1 (nodejs-github-bot) #59790c9f3da76aa] - deps: update nghttp2 to 1.66.0 (Node.js GitHub Bot) #5878660890be563] - deps: update nghttp2 to 1.65.0 (Node.js GitHub Bot) #572695024c7d5d8] - deps: update archs files for openssl-3.5.7 (Node.js GitHub Bot) #638207f4eb5af2e] - deps: upgrade openssl sources to openssl-3.5.7 (Node.js GitHub Bot) #63820ebb4ec78a8] - deps: fix aix implicit declaration in OpenSSL (Abdirahim Musse) #626565763d40826] - deps: update llhttp to 9.4.1 (Node.js GitHub Bot) #63045c551a51d0c] - (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) nodejs-private/node-private#8680a22d40180] - (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) nodejs-private/node-private#846c79968e108] - (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) nodejs-private/node-private#8550c37bff2ff] - http2: fix DEP0194 message (KaKa) #58669ea5dc6b529] - (SEMVER-MAJOR) http2: remove support for priority signaling (Matteo Collina) #582939b6af26132] - (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) nodejs-private/node-private#86728dcd38864] - (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) nodejs-private/node-private#8732f62693801] - (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) nodejs-private/node-private#8701662a3ea09] - test: add session reuse host verification regressions (Matteo Collina) nodejs-private/node-private#854718d5d0e2c] - test: skiptest-fs-utimes-y2K38on armv7 (Richard Lau) #63836041185b61f] - test: skip test-cluster-dgram-reuse on AIX 7.3 (Stewart X Addison) #62238fd890ba01d] - (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) nodejs-private/node-private#85439d1d09684] - (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) nodejs-private/node-private#8572197a47144] - (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) nodejs-private/node-private#869v22.22.3: 2026-05-13, Version 22.22.3 'Jod' (LTS), @marco-ippolitoCompare Source
Commits
4f780905c5] - crypto: fix potential null pointer dereference when BIO_meth_new() fails (Nora Dossche) #617884a09efb947] - crypto: update root certificates to NSS 3.121 (Node.js GitHub Bot) #62485e4c0d99839] - deps: update timezone to 2026a (Node.js GitHub Bot) #621640226c8dd7a] - deps: update simdjson to 4.5.0 (Node.js GitHub Bot) #62382e742ab748c] - deps: update sqlite to 3.51.3 (Node.js GitHub Bot) #6225673cac0571a] - deps: update amaro to 1.1.8 (Node.js GitHub Bot) #62151ae5c162b93] - deps: update amaro to 1.1.7 (Node.js GitHub Bot) #61730b819cb9977] - deps: update amaro to 1.1.6 (Node.js GitHub Bot) #61603bbcce09dc7] - deps: update sqlite to 3.52.0 (Node.js GitHub Bot) #6215022ff2d81ce] - deps: update simdjson to 4.3.1 (Node.js GitHub Bot) #61930f49b51d75c] - deps: update acorn-walk to 8.3.5 (Node.js GitHub Bot) #619281a5cec0d49] - deps: update acorn to 8.16.0 (Node.js GitHub Bot) #61925d339497688] - deps: update nbytes to 0.1.3 (Node.js GitHub Bot) #618793ff8ffd459] - deps: remove stale OpenSSL arch configs (René) #61834b8ddbc1e9a] - deps: update llhttp to 9.3.1 (Node.js GitHub Bot) #61827ffda97afd4] - deps: update googletest to2461743(Node.js GitHub Bot) #6248479aa32cf4f] - deps: update googletest to73a63ea(Node.js GitHub Bot) #61927b6957e13b6] - deps: update archs files for openssl-3.5.6 (Node.js GitHub Bot) #626293a27669063] - deps: upgrade openssl sources to openssl-3.5.6 (Node.js GitHub Bot) #62629d568a1bb53] - deps: upgrade npm to 10.9.8 (npm team) #62463ec11f3c1d5] - deps: V8: backport85b3900(Thibaud Michaud) #6278308609712ed] - deps: V8: backport1b27e46(Thibaud Michaud) #62783dcc60d5ab2] - deps: V8: backport9997fc0(Thibaud Michaud) #627831d1f4451fb] - deps: V8: cherry-pickb96e40d(Clemens Backes) #627832268567237] - deps: V8: cherry-pick7cb6188(Thibaud Michaud) #6278392804cdbea] - deps: V8: cherry-picke7ccf0a(Thibaud Michaud) #62783eae2c27a40] - deps: V8: cherry-pick8e214ec(Thibaud Michaud) #62783a1799a49bb] - deps: V8: backport63b8849(Thibaud Michaud) #62783a2df2d8731] - deps: V8: backport3239427(Thibaud Michaud) #62783e3d65c7dca] - deps: V8: backport89dc6ea(Thibaud Michaud) #627835e7db133de] - deps: V8: backport [910cb91](https://redirect.github.com/noConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.