Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

- Update all non-major dependencies with digest and pinDigest #516

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

blumilk-renovate[bot]
Copy link
Contributor

@blumilk-renovate blumilk-renovate bot commented Jan 1, 2025

This PR contains the following updates:

Package Type Update Change Pending
@inertiajs/vue3 (source) dependencies patch ^2.0.0 -> ^2.0.3
actions/cache action minor v4.1.2 -> v4.2.0
actions/setup-node action minor v4.1.0 -> v4.2.0
alpine stage minor 3.20.3 -> 3.21.2
axllent/mailpit (source) minor v1.20 -> v1.22
barryvdh/laravel-debugbar require-dev patch ^3.14.9 -> ^3.14.10
barryvdh/laravel-dompdf require minor ^3.0 -> ^3.1.0
blumilksoftware/codestyle require-dev patch ^4.0 -> ^4.0.1
composer stage patch 2.8.3 -> 2.8.5
composer/composer stage patch 2.8.3-bin -> 2.8.5-bin
docker/setup-buildx-action action minor v3.7.1 -> v3.8.0
dompdf/dompdf require minor ^3.0 -> ^3.1.0
eslint (source) dependencies minor ^9.18.0 -> ^9.19.0
laragear/cache-query require patch ^4.0 -> ^4.1.0 4.2.2 (+2)
laravel-vite-plugin dependencies minor ^1.1.1 -> ^1.2.0
laravel/dusk (source) require-dev patch ^8.2.12 -> ^8.2.13 8.2.14
laravel/framework (source) require minor ^11.34.2 -> ^11.40.0 11.41.0
laravel/sanctum require patch ^4.0.5 -> ^4.0.7 4.0.8
laravel/socialite (source) require minor ^5.16 -> ^5.17.0 5.17.1
laravel/telescope require minor ^5.2.6 -> ^5.4.0
maatwebsite/excel require patch ^3.1.61 -> ^3.1.62
node stage minor 22.12.0-bullseye-slim -> 22.13.1-bullseye-slim
nunomaduro/collision require-dev minor ^8.5.0 -> ^8.6.1
php minor 8.3.14 -> 8.4.3
php final minor 8.3.14-cli-bullseye -> 8.4.3-cli-bullseye
php stage minor 8.3.14-cli-bullseye -> 8.4.3-cli-bullseye
phpunit/phpunit (source) require-dev patch ^11.5 -> ^11.5.3 11.5.4
postcss (source) dependencies minor ^8.4.49 -> ^8.5.1
postgres service digest 6cbdd61 -> 68bb947
postgres digest 6cbdd61 -> 68bb947
selenium/standalone-chrome digest 9aea0e8 -> 682a2e4
sentry/sentry-laravel (source) require minor ^4.10.1 -> ^4.11.0
shivammathur/setup-php action minor 2.31.1 -> 2.32.0
spatie/laravel-model-states require patch ^2.7.2 -> ^2.10.0

Release Notes

inertiajs/inertia (@​inertiajs/vue3)

v2.0.3

Compare Source

v2.0.2

Compare Source

v2.0.1

Compare Source

  • Fix playground dependencies (#​2070)
  • Removed Vitest tests + dependencies (#​2175)
  • Augment vue instead of @vue/runtime-core (#​2099)
  • Fix prefetch missing cacheFor default value (#​2136)
  • Fix useForm re-renders by memoizing functions in React #​2146
  • WhenVisible useEffect function is not recreated when params change. (#​2153)
  • Ensure callback execution (#​2163)
  • More resilient logic for stripping the origin from page URLs (#​2164)
  • Add helper scripts for running tests (#​2173)
  • Export InertiaFormProps in React (#​2161)
  • Use default empty object in useForm Vue and Svelte (#​2052)
  • Remove data option from useForm options type (#​2060)
  • Take over scroll restoration from browser (#​2051)
actions/cache (actions/cache)

v4.2.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

Full Changelog: actions/cache@v4...v4.2.0

actions/setup-node (actions/setup-node)

v4.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/setup-node@v4...v4.2.0

axllent/mailpit (axllent/mailpit)

v1.22

Feature
  • SMTP auto-forwarding option (#​414)
  • Option to override the From email address in SMTP relay configuration (#​414)
  • Add Chaos functionality to test integration handling of SMTP error responses (#​402, #​110, #​144 & #​268)
Chore
  • Update node dependencies
  • Update Go dependencies
Fix
  • Update command npm run update-caniemail save path (#​422)
  • Correct date formatting in TestMakeHeaders

v1.21

Chore
  • Update node dependencies
  • Update Go dependencies
Fix
  • db: Remove unused FOREIGN KEY REFERENCES in message_tags table (#​374)
barryvdh/laravel-dompdf (barryvdh/laravel-dompdf)

v3.1.0

Compare Source

This release updates the config for dompdf/dompdf v3.1.0 which contains the. following breaking URL:

Breaking Change
This release adds the "data://" scheme to the protocol validation rules. Installations that explicitly define the allowed protocols but do not include the "data://" protocol will no longer render data-URIs. This is a change from previous versions, where data-URIs were not processed through the validated rules. Installations that use the default validation rules included with Dompdf should see no impact.

The update for laravel-dompdf adds this to the default config, but if you have published the config, you need to add the data:// scheme.

What's Changed

New Contributors

Full Changelog: barryvdh/laravel-dompdf@v3.0.1...v3.1.0

docker/setup-buildx-action (docker/setup-buildx-action)

v3.8.0

Compare Source

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

dompdf/dompdf (dompdf/dompdf)

v3.1.0: Dompdf 3.1.0

Compare Source

What's Changed

Breaking Change

This release adds the "data://" scheme to the protocol validation rules. Installations that explicitly define the allowed protocols but do not include the "data://" protocol will no longer render data-URIs. This is a change from previous versions, where data-URIs were not processed through the validated rules. Installations that use the default validation rules included with Dompdf should see no impact.

Full Changelog: dompdf/dompdf@v3.0.2...v3.1.0

We would like to extend our gratitude to the community members who helped make this release possible.

eslint/eslint (eslint)

v9.19.0

Compare Source

Features

  • 1637b8e feat: add --report-unused-inline-configs (#​19201) (Josh Goldberg ✨)

Bug Fixes

  • aae6717 fix: sync rule type header comments automatically (#​19276) (Francesco Trotta)

Documentation

  • cfea9ab docs: Clarify overrideConfig option (#​19370) (Nicholas C. Zakas)
  • 2b84f66 docs: Update README (#​19362) (Nicholas C. Zakas)
  • 044f93c docs: clarify frozen rule description (#​19351) (Pavel)
  • 797ee7c docs: fix Bluesky links (#​19368) (Milos Djermanovic)
  • 81a9c0e docs: Update README (GitHub Actions Bot)
  • 093fb3d docs: replace var with let and const in rule examples (#​19365) (Tanuj Kanti)
  • 417de32 docs: replace var with const in rule examples (#​19352) (jj)
  • 17f2aae docs: update getting-started config to match default generated config (#​19308) (0xDev)
  • 8a0a5a8 docs: better global ignores instruction (#​19297) (Jacopo Marrone)
  • 6671a2c docs: Update README (GitHub Actions Bot)
  • e39d3f2 docs: fix divider for rule category (#​19264) (Tanuj Kanti)
  • e0cf53f docs: fix search result box position for small screens (#​19328) (Tanuj Kanti)
  • f92a680 docs: replace var with let or const in rule examples (#​19331) (Ravi Teja Kolla)
  • b04b84b docs: revert accidental changes in TS config files docs (#​19336) (Francesco Trotta)

Chores

laravel/vite-plugin (laravel-vite-plugin)

v1.2.0

Compare Source

laravel/dusk (laravel/dusk)

v8.2.13

Compare Source

laravel/framework (laravel/framework)

v11.40.0

Compare Source

v11.39.1

Compare Source

v11.39.0

Compare Source

v11.38.2

Compare Source

v11.38.1

Compare Source

v11.38.0

Compare Source

laravel/socialite (laravel/socialite)

v5.17.0

Compare Source

laravel/telescope (laravel/telescope)

v5.4.0

Compare Source

v5.3.0

Compare Source

nodejs/node (node)

v22.13.1: 2025-01-21, Version 22.13.1 'Jod' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High)
  • CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
  • CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

  • CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits

v22.13.0: 2025-01-07, Version 22.13.0 'Jod' (LTS), @​ruyadorno

Compare Source

Notable Changes
Stabilize Permission Model

Upgrades the Permission Model status from Active Development to Stable.

Contributed by Rafael Gonzaga #​56201

Graduate WebCryptoAPI Ed25519 and X25519 algorithms as stable

Following the merge of Curve25519 into the Web Cryptography API Editor's Draft the Ed25519 and X25519 algorithm identifiers are now stable and will no longer emit an ExperimentalWarning upon use.

Contributed by (Filip Skokan) #​56142

Other Notable Changes
  • [05d6227a88] - (SEMVER-MINOR) assert: add partialDeepStrictEqual (Giovanni Bucci) #​54630
  • [a933103499] - (SEMVER-MINOR) cli: implement --trace-env and --trace-env-[js|native]-stack (Joyee Cheung) #​55604
  • [ba9d5397de] - (SEMVER-MINOR) dgram: support blocklist in udp (theanarkh) #​56087
  • [f6d0c01303] - doc: stabilize util.styleText (Rafael Gonzaga) #​56265
  • [34c68827af] - doc: move typescript support to active development (Marco Ippolito) #​55536
  • [dd14b80350] - doc: add LJHarb to collaborators (Jordan Harband) #​56132
  • [5263086169] - (SEMVER-MINOR) doc: add report version and history section (Chengzhong Wu) #​56130
  • [8cb3c2018d] - (SEMVER-MINOR) doc: sort --report-exclude alphabetically (Rafael Gonzaga) #​55788
  • [55239a48b6] - (SEMVER-MINOR) doc,lib,src,test: unflag sqlite module (Colin Ihrig) #​55890
  • [7cbe3de1d8] - (SEMVER-MINOR) module: only emit require(esm) warning under --trace-require-module (Joyee Cheung) #​56194
  • [6575b76042] - (SEMVER-MINOR) module: add module.stripTypeScriptTypes (Marco Ippolito) #​55282
  • [bacfe6d5c9] - (SEMVER-MINOR) net: support blocklist in net.connect (theanarkh) #​56075
  • [b47888d390] - (SEMVER-MINOR) net: support blocklist for net.Server (theanarkh) #​56079
  • [566f0a1d25] - (SEMVER-MINOR) net: add SocketAddress.parse (James M Snell) #​56076
  • [ed7eab1421] - (SEMVER-MINOR) net: add net.BlockList.isBlockList(value) (James M Snell) #​56078
  • [ea4891856d] - (SEMVER-MINOR) process: deprecate features.{ipv6,uv} and features.tls_* (René) #​55545
  • [01eb308f26] - (SEMVER-MINOR) report: fix typos in report keys and bump the version (Yuan-Ming Hsu) #​56068
  • [97c38352d0] - (SEMVER-MINOR) sqlite: aggregate constants in a single property (Edigleysson Silva (Edy)) #​56213
  • [b4041e554a] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.iterate method (tpoisseau) #​54213
  • [2e3ca1bbdd] - (SEMVER-MINOR) src: add cli option to preserve env vars on diagnostic reports (Rafael Gonzaga) #​55697
  • [bcfe9c80fc] - (SEMVER-MINOR) util: add sourcemap support to getCallSites (Marco Ippolito) #​55589
Commits

Configuration

📅 Schedule: Branch creation - "* * 1 */3 *" in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@blumilk-renovate blumilk-renovate bot requested a review from a team as a code owner January 1, 2025 10:13
@blumilk-renovate blumilk-renovate bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code github-actions javascript Pull requests that update Javascript code php Pull requests that update Php code renovate labels Jan 1, 2025
@blumilk-renovate blumilk-renovate bot requested a review from Blusia January 1, 2025 10:13
@blumilk-renovate blumilk-renovate bot force-pushed the renovate/all-minor-patch-digest-pindigest branch 4 times, most recently from b6b30fa to 2f53856 Compare January 8, 2025 10:18
@blumilk-renovate blumilk-renovate bot force-pushed the renovate/all-minor-patch-digest-pindigest branch 5 times, most recently from b8c3b64 to 033758f Compare January 13, 2025 10:19
@blumilk-renovate blumilk-renovate bot removed the javascript Pull requests that update Javascript code label Jan 13, 2025
@blumilk-renovate blumilk-renovate bot force-pushed the renovate/all-minor-patch-digest-pindigest branch 4 times, most recently from 8d93ac5 to 19344cd Compare January 17, 2025 10:13
@blumilk-renovate blumilk-renovate bot added the javascript Pull requests that update Javascript code label Jan 17, 2025
@blumilk-renovate blumilk-renovate bot force-pushed the renovate/all-minor-patch-digest-pindigest branch 5 times, most recently from 59e46f4 to a746917 Compare January 24, 2025 10:23
@blumilk-renovate blumilk-renovate bot force-pushed the renovate/all-minor-patch-digest-pindigest branch 2 times, most recently from 6a8839a to e02163a Compare January 27, 2025 10:15
@blumilk-renovate blumilk-renovate bot force-pushed the renovate/all-minor-patch-digest-pindigest branch from e02163a to 186ced0 Compare January 28, 2025 10:22
@blumilk-renovate blumilk-renovate bot force-pushed the renovate/all-minor-patch-digest-pindigest branch from 186ced0 to 2eb9763 Compare January 29, 2025 10:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file docker Pull requests that update Docker code github-actions javascript Pull requests that update Javascript code php Pull requests that update Php code renovate
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants