chore(deps): update all non-major dependencies #827
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/all-minor-patch-digest-pin
branch
from
59a6b33
to
993884c
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/all-minor-patch-digest-pin
branch
4 times, most recently
from
481feaa
to
a6119df
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch-digest-pin
branch
3 times, most recently
from
0d45e31
to
3df631a
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch-digest-pin
branch
3 times, most recently
from
3125665
to
45ef259
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch-digest-pin
branch
from
45ef259
to
a4dc53c
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.0.2->v4.1.2v4.2.0->v4.2.2v4.0.4->v4.1.04.10.0->4.10.2v3.26.10->v3.27.020.17.0->20.18.016.9.0->16.10.06.7.0->6.8.1Release Notes
actions/cache (actions/cache)
v4.1.2Compare Source
v4.1.1Compare Source
What's Changed
cache-hitoutput by @joshmgross in https://github.com/actions/cache/pull/1467Full Changelog: actions/cache@v4.1.0...v4.1.1
v4.1.0Compare Source
What's Changed
save-alwaysinput by @joshmgross in https://github.com/actions/cache/pull/1452New Contributors
Full Changelog: actions/cache@v4.0.2...v4.1.0
actions/checkout (actions/checkout)
v4.2.2Compare Source
url-helper.tsnow leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941isGhesby @jww3 in https://github.com/actions/checkout/pull/1946v4.2.1Compare Source
actions/setup-node (actions/setup-node)
v4.1.0Compare Source
dequelabs/axe-core (axe-core)
v4.10.2: Release 4.10.2Compare Source
This release prevents axe from sometimes crashing when a page changes in the middle of a test.
Bug Fixes
v4.10.1Compare Source
github/codeql-action (github/codeql-action)
v3.27.0Compare Source
v3.26.13Compare Source
v3.26.12Compare Source
v3.26.11Compare Source
nodejs/node (node)
v20.18.0: 2024-10-03, Version 20.18.0 'Iron' (LTS), @targosCompare Source
Notable Changes
Experimental Network Inspection Support in Node.js
This update introduces the initial support for network inspection in Node.js.
Currently, this is an experimental feature, so you need to enable it using the
--experimental-network-inspectionflag.With this feature enabled, you can inspect network activities occurring within a JavaScript application.
To use network inspection, start your Node.js application with the following command:
$ node --inspect-wait --experimental-network-inspection index.jsPlease note that the network inspection capabilities are in active development.
We are actively working on enhancing this feature and will continue to expand its functionality in future updates.
httpandhttpsmodules only.feature request on the Chrome DevTools side is addressed.
Contributed by Kohei Ueno in #53593 and #54246
Exposes X509_V_FLAG_PARTIAL_CHAIN to tls.createSecureContext
This releases introduces a new option to the API
tls.createSecureContext. Fromnow on,
tls.createSecureContext({ allowPartialTrustChain: true })can be usedto treat intermediate (non-self-signed) certificates in the trust CA certificate
list as trusted.
Contributed by Anna Henningsen in #54790
New option for vm.createContext() to create a context with a freezable globalThis
Node.js implements a flavor of
vm.createContext()and friends that creates a context without contextifying its globalobject when vm.constants.DONT_CONTEXTIFY is used. This is suitable when users want to freeze the context
(impossible when the global is contextified i.e. has interceptors installed) or speed up the global access if they
don't need the interceptor behavior.
Contributed by Joyee Cheung in #54394
Deprecations
64aa31f6e5] - repl: doc-deprecate instantiatingnode:replclasses withoutnew(Aviv Keller) #548424c52ee3d7f] - zlib: deprecate instantiating classes without new (Yagiz Nizipli) #54708Other Notable Changes
b80da2f964] - buffer: optimize createFromString (Robert Nagy) #5432402b36cbd2d] - (SEMVER-MINOR) lib: add EventSource Client (Aras Abbasi) #51575879546a9bf] - (SEMVER-MINOR) src,lib: add performance.uvMetricsInfo (Rafael Gonzaga) #54413f789f4c92d] - (SEMVER-MINOR) test_runner: support module mocking (Colin Ihrig) #528484eb0749b6c] - (SEMVER-MINOR) url: implement parse method for safer URL parsing (Ali Hassan) #52280Commits
013c48f0e9] - benchmark: --no-warnings to avoid DEP/ExpWarn log (Rafael Gonzaga) #54928194fc113ac] - benchmark: add buffer.isAscii benchmark (RafaelGSS) #547407410d51cb9] - benchmark: add buffer.isUtf8 bench (RafaelGSS) #547402393f21e8a] - benchmark: add access async version to bench (Rafael Gonzaga) #54747b8779721f0] - benchmark: enhance dc publish benchmark (Rafael Gonzaga) #547454078aa83ff] - benchmark: add match and doesNotMatch bench (RafaelGSS) #5473466acab9976] - benchmark: add rejects and doesNotReject bench (RafaelGSS) #547346db777fb3a] - benchmark: add throws and doesNotThrow bench (RafaelGSS) #547348f101560ce] - benchmark: add strictEqual and notStrictEqual bench (RafaelGSS) #547342c9e4c936e] - benchmark: adds groups to better separate benchmarks (Giovanni Bucci) #54393671c3ac633] - benchmark: fix benchmark for file path and URL conversion (Early Riser) #541908c8708cb5b] - benchmark: use assert.ok searchparams (Rafael Gonzaga) #543348b71fa79e2] - benchmark: add stream.compose benchmark (jakecastelli) #5430893ee36e3a0] - benchmark: rename count to n (Rafael Gonzaga) #54271f2971b6f0b] - benchmark: change assert() to assert.ok() (Rafael Gonzaga) #54254f48f2c212c] - benchmark: support --help in CLI (Aviv Keller) #533580309b0520b] - benchmark: remove force option as force defaults to true (Yelim Koo) #54203b6e8305b2d] - benchmark: use assert.ok instead of assert (Rafael Gonzaga) #5417690c660d26a] - benchmark: add require-esm benchmark (Joyee Cheung) #521661b8584b52e] - benchmark,doc: add CPU scaling governor to perf (Rafael Gonzaga) #547230b9161b330] - benchmark,doc: mention bar.R to the list of scripts (Rafael Gonzaga) #5472284bf93b7ea] - buffer: allow invalid encoding in from (Robert Nagy) #54533d04246a0d7] - buffer: optimize byteLength for common encodings (Robert Nagy) #54342f36831f694] - buffer: optimize createFromString (Robert Nagy) #54324f5f40c8088] - buffer: optimize for common encodings (Robert Nagy) #5431976c37703be] - buffer: add JSDoc to blob bytes method (Roberto Simonini) #541173012d31404] - buffer: use faster integer argument check (Robert Nagy) #540893505782801] - buffer: make indexOf(byte) faster (Tobias Nießen) #53455d285fc1f68] - build: upgrade clang-format to v18 (Aviv Keller) #53957d288ec3b0a] - build: fix conflicting V8 object print flags (Daeyeon Jeong) #54785e862eecac9] - build: do not build with code cache for core coverage collection (Joyee Cheung) #54633f7a606eb96] - build: turn off-Wrestrict(Richard Lau) #5473771ca2665e4] - build: reclaim disk space on macOS GHA runner (jakecastelli) #5465882d8051c39] - build: don't clean obj.target directory if it doesn't exist (Joyee Cheung) #543376e550b1f26] - build: updateruffto0.5.2(Aviv Keller) #53909e2ea7b26d7] - build: fix ./configure --help format error (Zhenwei Jin) #53066eb2402d569] - build: enable building with shared uvwasi lib (Pooja D P) #4398745732314d4] - build: sync V8 warning cflags with BUILD.gn (Michaël Zasso) #528736e0a2bb54c] - build: harmonize Clang checks (Michaël Zasso) #528733f78d4eb28] - cli: add--expose-gcflag available toNODE_OPTIONS(Juan José) #53078a110409b2a] - console: use validateOneOf for colorMode validation (HEESEUNG) #54245231ab788ea] - crypto: reject dh,x25519,x448 in {Sign,Verify}Final (Huáng Jùnliàng) #53774a5984e4570] - crypto: return a clearer error when loading an unsupported pkcs12 (Tim Perry) #54485f287cd77bd] - crypto: remove unusedkHashTypesinternal (Antoine du Hamel) #546271fc904f8c4] - deps: update cjs-module-lexer to 1.4.1 (Node.js GitHub Bot) #5484695b55c39b1] - deps: update simdutf to 5.5.0 (Node.js GitHub Bot) #54434cf6ded5dd3] - deps: update cjs-module-lexer to 1.4.0 (Node.js GitHub Bot) #547137f8edce3f1] - deps: update c-ares to v1.33.1 (Node.js GitHub Bot) #545499a4a7b7ecc] - deps: update undici to 6.19.8 (Node.js GitHub Bot) #5445687ca1d7fee] - deps: update simdutf to 5.3.4 (Node.js GitHub Bot) #54312d3a743f182] - deps: update zlib to 1.3.0.1-motley-71660e1 (Node.js GitHub Bot) #53464926981aa9f] - deps: update zlib to 1.3.0.1-motley-c2469fd (Node.js GitHub Bot) #53464654c8d1fdc] - deps: update zlib to 1.3.0.1-motley-68e57e6 (Node.js GitHub Bot) #534642477e79172] - deps: update zlib to 1.3.0.1-motley-8b7eff8 (Node.js GitHub Bot) #534643d8113faf5] - deps: update zlib to 1.3.0.1-motley-e432200 (Node.js GitHub Bot) #53464ac294e3db4] - deps: update zlib to 1.3.0.1-motley-887bb57 (Node.js GitHub Bot) #53464239588b968] - deps: update c-ares to v1.33.0 (Node.js GitHub Bot) #541986e7de37ed3] - deps: update undici to 6.19.7 (Node.js GitHub Bot) #5428638aa9d6ea9] - deps: update acorn to 8.12.1 (Node.js GitHub Bot) #53465d30145f663] - deps: update undici to 6.19.5 (Node.js GitHub Bot) #54076c169d9c12b] - deps: update simdutf to 5.3.1 (Node.js GitHub Bot) #5419692f3447957] - doc: add missing EventSource docs to globals (Matthew Aitken) #550222879ce9681] - doc: fix broken Android building link (Niklas Wenzel) #54922096623b59a] - doc: add support link for aduh95 (Antoine du Hamel) #548661dfd238781] - doc: run license-builder (github-actions[bot]) #54854a6c748fffb] - doc: experimental flag for global accessible APIs (Chengzhong Wu) #54330d48a22fa14] - doc: addERR_INVALID_ADDRESStoerrors.md(Aviv Keller) #546614a840cecfa] - doc: add support link for mcollina (Matteo Collina) #54786ec22d86512] - doc: mark--conditionsCLI flag as stable (Guy Bedford) #5420977c702ca07] - doc: fix typo in recognizing-contributors (Tobias Nießen) #5482262953ef9fb] - doc: clarify--max-old-space-sizeand--max-semi-space-sizeunits (Alexandre ABRIOUX) #54477e2bab0f2b2] - doc: replace --allow-fs-read by --allow-fs-write in related section (M1CK431) #544279cbfd5b33a] - doc: add support link for marco-ippolito (Marco Ippolito) #5478953167b29ef] - doc: fix typo (Michael Dawson) #5464087f78a35f7] - doc: fix webcrypto.md AES-GCM backticks (Filip Skokan) #546217c83c15221] - doc: add documentation about os.tmpdir() overrides (Joyee Cheung) #546134bfd832d70] - doc: add support me link for anonrig (Yagiz Nizipli) #5461122a103e5ec] - doc: add alert on REPL from TCP socket (Rafael Gonzaga) #54594b6374c24e1] - doc: fix typo in styleText description (Rafael Gonzaga) #546162f5b98ee1f] - doc: add getHeapStatistics() property descriptions (Benji Marinacci) #54584482302b99b] - doc: fix information about including coverage files (Aviv Keller) #54527b3708e7df4] - doc: support collaborators - talk amplification (Michael Dawson) #54508c86fe23012] - doc: add note about shasum generation failure (Marco Ippolito) #54487d53e6cf755] - doc: fix capitalization in module.md (shallow-beach) #54488cdc6713f18] - doc: add esm examples to node:https (Alfredo González) #543991ac1fe4e65] - doc: fix error description of the max header size (Egawa Ryo) #54125244542b720] - doc: add git node security --cleanup (Rafael Gonzaga) #5438169fb71f54c] - doc: add note on weakness of permission model (Tobias Nießen) #5426883b2cb908b] - doc: add versions when--watch-preserve-outputwas added (Théo LUDWIG) #54328460fb49483] - doc: replace v19 mention in Current release (Rafael Gonzaga) #54361994b46a160] - doc: correct peformance entry types (Jason Zhang) #54263f142e668cb] - doc: fix typo in method name in the sea doc (Eliyah Sundström) #540279529a30dba] - doc: mark process.nextTick legacy (Marco Ippolito) #512807e25fabb91] - doc: add esm examples to node:http2 (Alfredo González) #542926a4f05e384] - doc: explicitly mention node:fs module restriction (Rafael Gonzaga) #5426953f5c54997] - doc: warn for windows build bug (Jason Zhang) #5421707bde054f3] - doc: make some parameters optional intracingChannel.traceCallback(Deokjin Kim) #5406862bf03b5f1] - doc: add esm examples to node:dns (Alfredo González) #54172fb2b19184b] - doc: add KevinEady as a triager (Chengzhong Wu) #5417924976bfba0] - doc: add esm examples to node:console (Alfredo González) #541084e7edc40f7] - doc: fix sea assets example (Sadzurami) #54192322b5d91e1] - doc: add links to security steward companies (Aviv Keller) #529816ab271510e] - doc: moveonreadoption fromsocket.connect()tonew net.socket()(sendoru) #5419439c30ea08f] - doc: move release key for Myles Borins (Richard Lau) #54059e9fc54804a] - doc: refresh instructions for building node from source (Liran Tal) #53768f131dc625a] - doc: add documentation for blob.bytes() method (jaexxin) #541148d41bb900b] - doc: add missing new lines to custom test reporter examples (Eddie Abbondanzio) #541522acaeaba77] - doc: update list of Triagers on theREADME.md(Antoine du Hamel) #54138fff8eb2792] - doc: expand troubleshooting section (Liran Tal) #53808402121520f] - doc: clarifyuseCodeCachesetting for cross-platform SEA generation (Yelim Koo) #53994272484b8b2] - doc: test for cli options (Aras Abbasi) #51623c4d0ca4710] - doc, build: fixup build docs (Aviv Keller) #548992e3e17748b] - doc, child_process: add esm snippets (Aviv Keller) #53616c40b4b4f27] - doc, meta: fix broken link inonboarding.md(Aviv Keller) #54886beff587b94] - doc, meta: add missing,toBUILDING.md(Aviv Keller) #54409c114585430] - doc, meta: replace command with link to keys (Aviv Keller) #537450843077a99] - doc, test: simplify test README table (Aviv Keller) #539712df7bc0e32] - doc,tools: enforce use ofnode:prefix (Antoine du Hamel) #539500dd4639391] - esm: fix support forURLinstances inimport.meta.resolve(Antoine du Hamel) #54690f0c55e206d] - fs: refactor rimraf to avoid using primordials (Yagiz Nizipli) #54834f568384bbd] - fs: refactor handleTimestampsAndMode to remove redundant call (HEESEUNG) #543692fb7cc9715] - fs: fix typings (Yagiz Nizipli) #53626596940cfa0] - http: reduce likelihood of race conditions on keep-alive timeout (jazelly) #548636e13a7ba02] - http: remove prototype primordials (Antoine du Hamel) #5369899f96eb3f7] - http2: remove prototype primordials (Antoine du Hamel) #5369641f5eacc1a] - https: only use default ALPNProtocols when appropriate (Brian White) #5441159a39520e1] - (SEMVER-MINOR) inspector: supportNetwork.loadingFailedevent (Kohei Ueno) #54246d1007fb1a9] - inspector: provide detailed info to fix DevTools frontend errors (Kohei Ueno) #541563b93507949] - (SEMVER-MINOR) inspector: add initial support for network inspection (Kohei Ueno) #53593fc37b801c8] - lib: remove unnecessary async (jakecastelli) #54829d86f24787b] - lib: make WeakRef safe in abort_controller (jazelly) #5479177c59224e5] - lib: add note about removingnode:sysmodule (Rafael Gonzaga) #54743b8c06dce02] - lib: ensure no holey array in fixed_queue (Jason Zhang) #54537b85c8ce1fc] - lib: refactor SubtleCrypto experimental warnings (Filip Skokan) #54620e84812c1b5] - lib: respect terminal capabilities on styleText (Rafael Gonzaga) #54389c004abaf17] - lib: replace spread operator with primordials function (YoonSoo_Shin) #54053b79aeabc4d] - lib: avoid for of loop and remove unnecessary variable in zlib (YoonSoo_Shin) #54258f4085363c6] - lib: fix unhandled errors in webstream adapters (Fedor Indutny) #542061ad857e748] - lib: fix typos in comments within internal/streams (YoonSoo_Shin) #5409302b36cbd2d] - (SEMVER-MINOR) lib: add EventSource Client (Aras Abbasi) #51575afbf2c0530] - lib,permission: support Buffer to permission.has (Rafael Gonzaga) #5410454af47395d] - meta: bump peter-evans/create-pull-request from 6.1.0 to 7.0.1 (dependabot[bot]) #54820a0c10f2ed9] - meta: addWindows ARM64to flaky-tests list (Aviv Keller) #5469327b06880e1] - meta: bump actions/setup-python from 5.1.1 to 5.2.0 (Rich Trott) #546918747af1037] - meta: update sccache to v0.8.1 (Aviv Keller) #547203f753d87a6] - meta: bump step-security/harden-runner from 2.9.0 to 2.9.1 (dependabot[bot]) #547046f103ae25d] - meta: bump actions/upload-artifact from 4.3.4 to 4.4.0 (dependabot[bot]) #547033e6a9bb04e] - meta: bump github/codeql-action from 3.25.15 to 3.26.6 (dependabot[bot]) #54702c666ebc4e4] - meta: fix links inSECURITY.md(Aviv Keller) #546964d361b3bed] - meta: fixcontributingcodeowners (Aviv Keller) #5464136931aa183] - meta: remind users to use a supported version in bug reports (Aviv Keller) #54481cf283d9ca7] - meta: run coverage-windows whenvcbuild.batupdated (Aviv Keller) #5441267ca397c9f] - meta: add test-permission-* CODEOWNERS (Rafael Gonzaga) #54267b61a2f5b79] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #54210dd8ab83667] - meta: add module label for the lib/internal/modules folder (Aviv Keller) #52858db78978d17] - meta: bumpactions/upload-artifactfrom 4.3.3 to 4.3.4 (dependabot[bot]) #54166ca808dd9e5] - meta: bumpactions/download-artifactfrom 4.1.7 to 4.1.8 (dependabot[bot]) #54167a35d980146] - meta: bump actions/setup-python from 5.1.0 to 5.1.1 (dependabot[bot]) #541653a103c3a17] - meta: bumpstep-security/harden-runnerfrom 2.8.1 to 2.9.0 (dependabot[bot]) #54169775ebbe0e8] - meta: bumpactions/setup-nodefrom 4.0.2 to 4.0.3 (dependabot[bot]) #541707d5dd6f1d1] - meta: bumpgithub/codeql-actionfrom 3.25.11 to 3.25.15 (dependabot[bot]) #5416880dd38dde3] - meta: bumpossf/scorecard-actionfrom 2.3.3 to 2.4.0 (dependabot[bot]) #5417190b632ee02] - module: warn on detection in typeless package (Geoffrey Booth) #521683011927aab] - node-api: add external buffer creation benchmark (Chengzhong Wu) #548777611093e11] - node-api: add support for UTF-8 and Latin-1 property keys (Mert Can Altin) #52984d65a8f377c] - node-api: remove RefBase and CallbackWrapper (Vladimir Morozov) #53590309cb1cbd2] - path: removeStringPrototypeCharCodeAtfromposix.extname(Aviv Keller) #545462859b4ba9a] - path: changeposix.jointo use array (Wiyeong Seo) #54331c61cee2138] - path: fix relative on Windows (Hüseyin Açacak) #53991329be5cc35] - path: use the correct name invalidateString(Benjamin Pasero) #53669a9837267cb] - repl: avoid interpreting 'npm' as a command when errors are recoverable (Shima Ryuhei) #54848d6a2317961] - repl: doc-deprecate instantiatingnode:replclasses withoutnew(Aviv Keller) #548427f09d983f3] - sea: don't set code cache flags when snapshot is used (Joyee Cheung) #5412085542b094c] - src: add Cleanable class to Environment (Gabriel Schulhof) #548808422064127] - src: remove redundant AESCipherMode (Tobias Nießen) #54438342c32483a] - src: handle errors correctly inpermission.cc(Michaël Zasso) #5454190ff714699] - src: returnv8::Objectfrom error constructors (Michaël Zasso) #54541872856cfcb] - src: improvebuffer.transcodeperformance (Yagiz Nizipli) #5415391936ebd12] - src: skip inspector wait in internal workers (Chengzhong Wu) #542199759049427] - src: account for OpenSSL unexpected version (Shelley Vohr) #5403887167fa248] - src: useargs.This()instead ofHolder(Michaël Zasso) #53474b05c56e4be] - src: simplifysize() == 0checks (Yagiz Nizipli) #53440d53e53699c] - src: fix execArgv in worker (theanarkh) #5302921776a34b5] - src: make sure pass theargvto worker threads (theanarkh) #528273aaae68ec8] - (SEMVER-MINOR) src,lib: add performance.uvMetricsInfo (Rafael Gonzaga) #54413ef1c0d7def] - src,permission: handle process.chdir on pm (Rafael Gonzaga) #531750c32918eef] - stream: change stream to use index instead offor...of(Wiyeong Seo) #54474337cd412b5] - stream: make checking pendingcb on WritableStream backward compatible (jakecastelli) #54142713fc0c9eb] - stream: throw TypeError when criteria fulfilled in getIterator (jakecastelli) #538259686153616] - stream: fix util.inspect for compression/decompressionStream (Mert Can Altin) #5228376110b0b43] - test: adjust test-tls-junk-server for OpenSSL32 (Michael Dawson) #549264092889371] - test: adjust tls test for OpenSSL32 (Michael Dawson) #549095d48543a16] - test: fix test-http2-socket-close.js (Hüseyin Açacak) #549008048c2eaed] - test: improve test-internal-fs-syncwritestream (Sunghoon) #54671597bc14c90] - test: deflake test-dns (Luigi Pinca) #54902a9fc8d9cfa] - test: fix test test-tls-dhe for OpenSSL32 (Michael Dawson) #549031b3b4f4a9f] - test: use correct file naming syntax forutil-parse-env(Aviv Keller) [#53705](https://redirect.giConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.