Skip to content

fix: update all non-major dependencies - #570

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/all-minor-patch
Aug 1, 2026
Merged

fix: update all non-major dependencies#570
renovate[bot] merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@eslint/js (source) 9.39.49.39.5 age confidence devDependencies patch
@slack/types (source) 2.21.12.22.0 age confidence devDependencies minor
@types/node (source) 24.13.224.13.3 age confidence devDependencies patch
@typescript-eslint/eslint-plugin (source) 8.62.18.65.0 age confidence devDependencies minor
@typescript-eslint/parser (source) 8.62.18.65.0 age confidence devDependencies minor
aws-cdk (source) 2.1129.02.1134.0 age confidence devDependencies minor
aws-cdk-lib (source) 2.260.02.263.0 age confidence dependencies minor
constructs 10.6.010.8.0 age confidence dependencies minor
eslint (source) 9.39.49.39.5 age confidence devDependencies patch
google-auth-library (source) 10.9.010.9.1 age confidence dependencies patch
node (source) 24.18.024.18.1 age confidence patch
node-cron (source) 4.5.04.6.0 age confidence dependencies minor
prettier (source) 3.9.43.9.6 age confidence devDependencies patch
tar 7.5.217.5.22 age confidence dependencies patch
ts-jest (source) 29.4.1129.4.12 age confidence devDependencies patch
typescript-eslint (source) 8.62.18.65.0 age confidence devDependencies minor

Release Notes

eslint/eslint (@​eslint/js)

v9.39.5

Compare Source

Bug Fixes

Documentation

Chores

  • 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
  • 202117b chore: package.json update for @​eslint/js release (Jenkins)
  • d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
  • 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
  • daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
  • daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
  • 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)
slackapi/node-slack-sdk (@​slack/types)

v2.22.0

Compare Source

Minor Changes
typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.65.0

Compare Source

🚀 Features
  • eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#​12578)
  • add warning when TS 7 is detected (#​12529)
  • eslint-plugin: [no-restricted-imports] deprecate extension rule (#​12527, #​19562, #​11889)
🩹 Fixes
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#​12568)
  • eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#​12448)
  • eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#​12515)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

Compare Source

🚀 Features
  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#​12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#​12543)
🩹 Fixes
  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#​12512)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

Compare Source

🚀 Features
  • eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#​12426)
🩹 Fixes
  • eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#​12492)
  • eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#​12491, #​12485)
  • eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#​12447, #​12446)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.65.0

Compare Source

🚀 Features
  • add warning when TS 7 is detected (#​12529)
  • parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#​12465)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

aws/aws-cdk-cli (aws-cdk)

v2.1134.0

Compare Source

2.1134.0 (2026-07-30)

Features
Bug Fixes
  • cli: version check trusts stale registry mirrors and recommends non-upgrades (#​1769) (d818543)
  • route metadata through toolkit-lib (#​1747) (b81e875)

v2.1133.0

Compare Source

2.1133.0 (2026-07-23)

Features
Bug Fixes

v2.1132.1

Compare Source

2.1132.1 (2026-07-22)

Bug Fixes

v2.1132.0

Compare Source

2.1132.0 (2026-07-16)

Features

v2.1131.0

Compare Source

2.1131.0 (2026-07-14)

Features
  • cli: typescript init templates use tsc + tsx and swc/jest, on typescript 7 (#​1719) (9bf08e5)

v2.1130.0

Compare Source

2.1130.0 (2026-07-10)

Features
Bug Fixes
aws/aws-cdk (aws-cdk-lib)

v2.263.0

Compare Source

Features
Bug Fixes

Alpha modules (2.263.0-alpha.0)

⚠ BREAKING CHANGES
  • mediaconnect: removalPolicy prop removed from FlowProps, GatewayProps, and BridgeProps. These resources now follow CloudFormation's default deletion behaviour (Delete).
Bug Fixes

v2.262.2

Compare Source

Bug Fixes

Alpha modules (2.262.2-alpha.0)

v2.262.1

Compare Source

Bug Fixes

Alpha modules (2.262.1-alpha.0)

v2.262.0

Compare Source

Features
Bug Fixes
Reverts

Alpha modules (2.262.0-alpha.0)

Bug Fixes
  • redshift-alpha: quote identifiers and escape literals containing special characters (#​38269) (3cb6844)

v2.261.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
  • aws-cloudwatch: AWS::CloudWatch::LogAlarm: QueryLanguage property has been removed from the ScheduledQueryConfiguration type.
  • aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: Id attribute has been removed and the primary identifier is now LoadBalancerName.
Features
Bug Fixes

Alpha modules (2.261.0-alpha.0)

Features
aws/constructs (constructs)

v10.8.0

Compare Source

10.8.0 (2026-07-30)

Features

v10.7.2

Compare Source

10.7.2 (2026-07-29)

Bug Fixes

v10.7.1

Compare Source

10.7.1 (2026-07-20)

Bug Fixes
  • Node.path takes a lot of time on deep construct trees (#​2873) (857a94f)

v10.7.0

Compare Source

10.7.0 (2026-07-15)

Features
googleapis/google-cloud-node (google-auth-library)

v10.9.1

Compare Source

Bug Fixes
nodejs/node (node)

v24.18.1: 2026-07-29, Version 24.18.1 'Krypton' (LTS), @​juanarbol

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
  • (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
  • (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
  • (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
  • (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
  • (CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset (Matteo Collina) – Medium
  • (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
  • (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
  • (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
  • (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
  • (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
  • deps: update llhttp to 9.4.3 (Paolo Insogna)
  • deps: update undici to 7.29.0 (Node.js GitHub Bot)
Commits
node-cron/node-cron (node-cron)

v4.6.0

Compare Source

Added
Fixed
  • background task state transition on stop/destroy without fork (#​584) (9dbc6de)
  • clear jitter timeout on runner stop (#​583) (28b8146)
  • CommonJS type resolution (#​608) (ee9d294)
  • correct falied->failed typo in daemon task error log (#​594) (66c6961)
  • correct shutdown listener typing that broke the build (#​595) (7aac3ad)
  • correlate execute() by id, isolate event hooks, and stop counting manual runs toward maxExecutions (#​607) (0f039a9)
  • daemon serialized task state with wrong field name (#​587) (688d465)
  • expand inverted ranges with wrap-around instead of silently swapping (#​602) (a10ae53)
  • harden cron.shutdown() teardown (#​598) (a0b0d1f)
  • kill orphan child process on background task stop/destroy timeout (#​582) (8179e10)
  • make concurrent background start() await the daemon and time out coordinator lookups (#​605) (446f03a)
  • make lifecycle calls on a destroyed task safe no-ops (#​600) (7fa9795)
  • prevent double destroy on registry remove (#​585) (8ae9f06)
  • release-please: match existing v-prefixed tags (#​575) (e43c152)
  • runner promise bugs that could hang scheduling or crash process (#​581) (0ae62be)
  • unref the IPC channel so background tasks let the process exit ([#&

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone America/Chicago)

  • Branch creation
    • On day 1 of the month (* * 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependency Updates to one or more dependencies label Aug 1, 2026
@renovate
renovate Bot merged commit 974e0eb into main Aug 1, 2026
1 check passed
@renovate
renovate Bot deleted the renovate/all-minor-patch branch August 1, 2026 16:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependency Updates to one or more dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants