fix: update all non-major dependencies - #570
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
9.39.4→9.39.52.21.1→2.22.024.13.2→24.13.38.62.1→8.65.08.62.1→8.65.02.1129.0→2.1134.02.260.0→2.263.010.6.0→10.8.09.39.4→9.39.510.9.0→10.9.124.18.0→24.18.14.5.0→4.6.03.9.4→3.9.67.5.21→7.5.2229.4.11→29.4.128.62.1→8.65.0Release Notes
eslint/eslint (@eslint/js)
v9.39.5Compare Source
Bug Fixes
253be16fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)Documentation
74930eddocs: switch build to Node.js 24 (#20894) (Milos Djermanovic)eaec8bbdocs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)Chores
458205fchore: update@eslint/eslintrcand@eslint/jsfor v9.39.5 (#21077) (Francesco Trotta)202117bchore: package.json update for @eslint/js release (Jenkins)d9eb6edtest: disable warning forvm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER(#21074) (Francesco Trotta)7b431a7chore: overridere2dependency for@metascraper/helpers(#21068) (Milos Djermanovic)daf7791chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)daee8baci: use pnpm ineslint-flat-config-utilstype integration test (#20829) (Milos Djermanovic)116d4beci: unpin Node.js 25.x in CI (#20619) (Copilot)slackapi/node-slack-sdk (@slack/types)
v2.22.0Compare Source
Minor Changes
50828f5: feat: add theapp_context_changedevent type for agent active view contexttypescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v8.65.0Compare Source
🚀 Features
🩹 Fixes
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.64.0Compare Source
🚀 Features
using/await usingdeclarations and deprecate the rule (#12500)🩹 Fixes
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.63.0Compare Source
🚀 Features
🩹 Fixes
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v8.65.0Compare Source
🚀 Features
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.64.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.63.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
aws/aws-cdk-cli (aws-cdk)
v2.1134.0Compare Source
2.1134.0 (2026-07-30)
Features
Bug Fixes
v2.1133.0Compare Source
2.1133.0 (2026-07-23)
Features
Bug Fixes
v2.1132.1Compare Source
2.1132.1 (2026-07-22)
Bug Fixes
cdk orphanfor resources inside a stage (#1733) (9398ed0), closes #1727v2.1132.0Compare Source
2.1132.0 (2026-07-16)
Features
v2.1131.0Compare Source
2.1131.0 (2026-07-14)
Features
v2.1130.0Compare Source
2.1130.0 (2026-07-10)
Features
Bug Fixes
aws/aws-cdk (aws-cdk-lib)
v2.263.0Compare Source
Features
Bug Fixes
Alpha modules (2.263.0-alpha.0)
⚠ BREAKING CHANGES
removalPolicyprop removed fromFlowProps,GatewayProps, andBridgeProps. These resources now follow CloudFormation's default deletion behaviour (Delete).Bug Fixes
v2.262.2Compare Source
Bug Fixes
Alpha modules (2.262.2-alpha.0)
v2.262.1Compare Source
Bug Fixes
@aws/cloudformation-validateto 1.5.1-beta to fix install on Node != 22.x (#38382) (d409b96), closes #38380Alpha modules (2.262.1-alpha.0)
v2.262.0Compare Source
Features
Bug Fixes
dropInvalidHeaderFieldsin case of default or switching from true to false (#36483) (208b9db), closes #36409Reverts
Alpha modules (2.262.0-alpha.0)
Bug Fixes
v2.261.0Compare Source
⚠ BREAKING CHANGES
Features
Bug Fixes
Alpha modules (2.261.0-alpha.0)
Features
aws/constructs (constructs)
v10.8.0Compare Source
10.8.0 (2026-07-30)
Features
v10.7.2Compare Source
10.7.2 (2026-07-29)
Bug Fixes
v10.7.1Compare Source
10.7.1 (2026-07-20)
Bug Fixes
v10.7.0Compare Source
10.7.0 (2026-07-15)
Features
googleapis/google-cloud-node (google-auth-library)
v10.9.1Compare Source
Bug Fixes
nodejs/node (node)
v24.18.1: 2026-07-29, Version 24.18.1 'Krypton' (LTS), @juanarbolCompare Source
This is a security release.
Notable Changes
Commits
6cb0475751] - deps: update llhttp to 9.4.3 (Paolo Insogna) nodejs-private/node-private#935bcfe21d3dc] - deps: update undici to 7.29.0 (Node.js GitHub Bot) #647139d0d36cffd] - (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) nodejs-private/node-private#9298a008fb523] - (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) nodejs-private/node-private#922a77c7f7354] - (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) nodejs-private/node-private#92134ed88a069] - (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) #6375295ba2cfde7] - (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) nodejs-private/node-private#904fcbdbe47ea] - (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) nodejs-private/node-private#930ea26c12b56] - (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) nodejs-private/node-private#9119a6b7e343a] - (CVE-2026-58039) permission: check final report output path (RafaelGSS) nodejs-private/node-private#9266c0c990880] - (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) nodejs-private/node-private#927af9ff0490c] - (CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset (Matteo Collina) nodejs-private/node-private#89605f541b5c0] - (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) nodejs-private/node-private#931node-cron/node-cron (node-cron)
v4.6.0Compare Source
Added
Fixed
Configuration
📅 Schedule: (in timezone America/Chicago)
* * 1 * *)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.