-
Notifications
You must be signed in to change notification settings - Fork 9
Update all dependencies #195
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
28ca2f2
to
dcec26f
Compare
dcec26f
to
9be6745
Compare
ebfe8da
to
3eb073b
Compare
fe47d4f
to
2bbc1b9
Compare
2bbc1b9
to
ba342d6
Compare
ba342d6
to
afa9a19
Compare
afa9a19
to
14c7f78
Compare
14c7f78
to
b347c3a
Compare
26ab091
to
60787f9
Compare
60787f9
to
ec9a331
Compare
ec9a331
to
c8a4064
Compare
c8a4064
to
6e6bc76
Compare
6e6bc76
to
6e73d04
Compare
a3d2a90
to
988e9b3
Compare
988e9b3
to
6e56ccc
Compare
6e56ccc
to
266a3dc
Compare
266a3dc
to
a791892
Compare
a791892
to
bdb5c6a
Compare
bdb5c6a
to
59ff01b
Compare
59ff01b
to
6b9b83b
Compare
⚠ Artifact update problemRenovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below: File name: package-lock.json
|
1f30f3c
to
7e5e942
Compare
a5a2821
to
dd555f4
Compare
41d3cf2
to
3af8689
Compare
3af8689
to
091d73d
Compare
091d73d
to
67b387d
Compare
744f681
to
a756ab7
Compare
|
c2ae6b7
to
0b40a51
Compare
1f59645
to
f30eeaa
Compare
f30eeaa
to
e71d550
Compare
c57dbdc
to
28328e9
Compare
a878b00
to
ba70325
Compare
1da1265
to
5e81f29
Compare
This PR contains the following updates:
v3
->v4
v3
->v4
4.3.7
->5.2.1
10.2.0
->11.7.1
18.16.1
->22.17.0
15.2.0
->21.0.0
17.1.0
->17.1.2
17.3.1
->18.0.0
Release Notes
actions/checkout (actions/checkout)
v4
Compare Source
url-helper.ts
now leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941isGhes
by @jww3 in https://github.com/actions/checkout/pull/1946actions/setup-node (actions/setup-node)
v4
Compare Source
chaijs/chai (chai)
v5.2.1
Compare Source
What's Changed
Mostly internal changes but @SuperchupuDev realised the package.json
engines
field was out of date, so it has been updated to reflect that v5.0.0 onwards only supports Node >=18.no-var
rule and fix violations by @koddsson in https://github.com/chaijs/chai/pull/1675New Contributors
Full Changelog: chaijs/chai@v5.2.0...v5.2.1
v5.2.0
Compare Source
What's Changed
chai-subset
and added assert-based negation to containSubset by @BreadInvasion in https://github.com/chaijs/chai/pull/1664New Contributors
Full Changelog: chaijs/chai@v5.1.2...v5.2.0
v5.1.2
Compare Source
What's Changed
Full Changelog: chaijs/chai@v5.1.1...v5.1.2
v5.1.1
Compare Source
What's Changed
toThrow
by @43081j in https://github.com/chaijs/chai/pull/1609New Contributors
Full Changelog: chaijs/chai@v5.1.0...v5.1.1
v5.1.0
Compare Source
What's Changed
iterable
assertion by @koddsson in https://github.com/chaijs/chai/pull/1592New Contributors
Full Changelog: chaijs/chai@v5.0.3...v5.1.0
v5.0.3
Compare Source
Fix bad v5.0.2 publish.
Full Changelog: chaijs/chai@v5.0.2...v5.0.3
v5.0.2
Compare Source
What's Changed
bump-cli
by @koddsson in https://github.com/chaijs/chai/pull/1559??
for node compat (5.x) by @43081j in https://github.com/chaijs/chai/pull/1576loupe
to latest version by @koddsson in https://github.com/chaijs/chai/pull/1579Full Changelog: chaijs/chai@v5.0.1...v5.0.2
v5.0.0
Compare Source
BREAKING CHANGES
import {...} from 'chai'
orimport('chai')
.require('chai')
will cause failures in nodejs. If you're using ESM and seeing failures, it may be due to a bundler or transpiler which is incorrectly converting import statements into require calls.What's Changed
get-func-name
dependency by @koddsson in https://github.com/chaijs/chai/pull/1416deep-eql
to latest version by @koddsson in https://github.com/chaijs/chai/pull/1542type-detect
as a simple function by @koddsson in https://github.com/chaijs/chai/pull/1544assertion-error
to it's latest major version! by @koddsson in https://github.com/chaijs/chai/pull/1543New Contributors
Full Changelog: chaijs/chai@4.3.1...v5.0.0
v4.5.0
Compare Source
1a36d35
What's Changed
Full Changelog: chaijs/chai@v4.4.1...v4.5.0
v4.4.1
Compare Source
What's Changed
??
for node compat by @43081j in https://github.com/chaijs/chai/pull/1574Full Changelog: chaijs/chai@v4.4.0...v4.4.1
v4.4.0
Compare Source
What's Changed
Full Changelog: chaijs/chai@v4.3.10...v4.4.0
v4.3.10
Compare Source
This release simply bumps all dependencies to their latest non-breaking versions.
What's Changed
Full Changelog: chaijs/chai@v4.3.9...v4.3.10
v4.3.9
Compare Source
Upgrade dependencies.
This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.
Full Changelog: chaijs/chai@v4.3.8...v4.3.9
v4.3.8
Compare Source
What's Changed
New Contributors
Full Changelog: chaijs/chai@v4.3.7...v4.3.8
mochajs/mocha (mocha)
v11.7.1
Compare Source
🩹 Fixes
🧹 Chores
v11.7.0
Compare Source
🌟 Features
v11.6.0
Compare Source
🌟 Features
v11.5.0
Compare Source
🌟 Features
v11.4.0
Compare Source
🌟 Features
📚 Documentation
v11.3.0
Compare Source
🌟 Features
📚 Documentation
🧹 Chores
v11.2.2
Compare Source
🩹 Fixes
📚 Documentation
v11.2.1
Compare Source
🩹 Fixes
📚 Documentation
🧹 Chores
v11.2.0
Compare Source
🌟 Features
📚 Documentation
🧹 Chores
fs-extra
with newerfs
built-ins (#5284) (75dcf8c)v11.1.0
Compare Source
🌟 Features
yargs-parser
from^20.2.9
to^21.1.
, which fixed a bug that caused extra quotes in file paths to be removed.See #5341 for more information.
strip-ansi
withutil.stripVTControlCharacters
(#5267) (3c191c0), closes #5265v11.0.2
Compare Source
🩹 Fixes
📚 Documentation
status: accepting prs
link (#5268) (f729cd0)v11.0.1
Compare Source
🌟 Features
📚 Documentation
linkPartialObjects
methods (#5255) (34e0e52)v11.0.0
Compare Source
⚠ BREAKING CHANGES
🌟 Features
🩹 Fixes
📚 Documentation
v10.8.2
Compare Source
🩹 Fixes
📚 Documentation
🧹 Chores
🤖 Automation
v10.8.1
Compare Source
🩹 Fixes
v10.8.0
Compare Source
🌟 Features
🩹 Fixes
:is()
frommocha.css
to support older browsers (#5225) (#5227) (0a24b58)📚 Documentation
SECURITY.md
pointing to Tidelift (#5210) (bd7e63a)🧹 Chores
v10.7.3
Compare Source
🩹 Fixes
v10.7.0
Compare Source
🎉 Enhancements
v10.6.1
Compare Source
🐛 Fixes
v10.6.0
Compare Source
🎉 Enhancements
v10.5.2
Compare Source
🐛 Fixes
v10.5.1
Compare Source
🐛 Fixes
v10.5.0
Compare Source
🎉 Enhancements
🐛 Fixes
🔩 Other
v10.4.0
Compare Source
🎉 Enhancements
.cause
stacks in the error stack traces (@voxpelli)🐛 Fixes
lib/cli/run.js
(@stalet)🔩 Other
v10.3.0
Compare Source
This is a stable release equivalent to 10.30.0-prerelease.
nodejs/node (node)
v22.17.0
: 2025-06-24, Version 22.17.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
Instantiating
node:http
classes withoutnew
Constructing classes like
IncomingMessage
orServerResponse
without thenew
keyword is now discouraged. This clarifies API expectations and aligns with standard
JavaScript behavior. It may warn or error in future versions.
Contributed by Yagiz Nizipli in #58518.
options.shell = ""
innode:child_process
Using an empty string for
shell
previously had undefined behavior. This changeencourages explicit choices (e.g.,
shell: true
or a shell path) and avoidsrelying on implementation quirks.
Contributed by Antoine du Hamel and Renegade334 #58564.
HTTP/2 priority signaling
The HTTP/2 prioritization API (e.g.,
stream.priority
) is now deprecated due topoor real-world support. Applications should avoid using priority hints and expect future removal.
Contributed by Matteo Collina and Antoine du Hamel #58313.
✅ Features graduated to stable
assert.partialDeepStrictEqual()
This method compares only a subset of properties in deep object comparisons,
useful for flexible test assertions. Its stabilization means it's now safe for
general use and won't change unexpectedly in future releases.
Contributed by Ruben Bridgewater in #57370.
Miscellaneous
dirent.parentPath
filehandle.readableWebStream()
fs.glob()
fs.openAsBlob()
node:readline/promises
port.hasRef()
readable.compose()
readable.iterator()
readable.readableAborted
readable.readableDidRead
Duplex.fromWeb()
Duplex.toWeb()
Readable.fromWeb()
Readable.isDisturbed()
Readable.toWeb()
stream.isErrored()
stream.isReadable()
URL.createObjectURL()
URL.revokeObjectURL()
v8.setHeapSnapshotNearHeapLimit()
Writable.fromWeb()
Writable.toWeb()
writable.writableAborted
ERR_INPUT_TYPE_NOT_ALLOWED
ERR_UNKNOWN_FILE_EXTENSION
ERR_UNKNOWN_MODULE_FORMAT
ERR_USE_AFTER_CLOSE
Contributed by James M Snell in
#57513 and
#58541.
Semver-minor features
🔧
fs.FileHandle.readableWebStream
getsautoClose
optionThis gives developers explicit control over whether the file descriptor should
be closed when the stream ends. Helps avoid subtle resource leaks.
Contributed by James M Snell in #58548.
🔧
fs.Dir
now supports explicit resource managementThis improves ergonomics around async iteration of directories. Developers can
now manually control when a directory is closed using
.close()
or withSymbol.asyncDispose
.Contributed by Antoine du Hamel in #58206.
📊
http2
gains diagnostics channel:http2.server.stream.finish
Adds observability support for when a stream finishes. Useful for logging,
monitoring, and debugging HTTP/2 behavior without patching internals.
Contributed by Darshan Sen in #58560.
🔐 Permissions: implicit allow-fs-read to entrypoint
Node.js permissions model now allows read access to the entry file by default.
It makes running permission-restricted apps smoother while preserving security.
Contributed by Rafael Gonzaga in #58579.
🎨
util.styleText()
adds'none'
styleThis lets developers remove styling cleanly without hacks. Useful for overriding
inherited terminal styles when composing styled strings.
Contributed by James M Snell in #58437.
🧑💻 Community updates
0105c13556
] - doc: add Filip Skokan to TSC (Rafael Gonzaga) #584993b857735ef
] - doc: add JonasBa to collaborators (Jonas Badalic) #58355fdf7612735
] - doc: add puskin to collaborators (Giovanni Bucci) #58308Commits
ffe7e1ace0
] - (SEMVER-MINOR) assert: mark partialDeepStrictEqual() as stable (Ruben Bridgewater) #57370269931f289
] - async_hooks: ensure AsyncLocalStore instances work isolated (Gerhard Stöbich) #581499e0746a4ff
] - benchmark: fix broken fs.cpSync benchmark (Dario Piotrowicz) #58472dee8cb5bcb
] - benchmark: add more options to cp-sync (Sonny) #58278e840fd5b85
] - benchmark: fix typo in method name for error-stack (Miguel Marcondes Filho) #58128b9a16e97e0
] - buffer: give names toBuffer.prototype.*Write()
functions (Livia Medeiros) #58258d56a5e40af
] - buffer: use constexpr where possible (Yagiz Nizipli) #58141215587feca
] - build: add support for OpenHarmony operating system (hqzing) #583509bcef6821c
] - build: fix uvwasi pkgname (Antoine du Hamel) #582707c3883c2ae
] - build: search for libnode.so in multiple places (Jan Staněk) #582133f954accb3
] - build: fix pointer compression builds (Joyee Cheung) #5817104c8f59f84
] - build: use FILE_OFFSET_BITS=64 esp. on 32-bit arch (RafaelGSS) #580908c2cf3a372
] - build: use //third_party/simdutf by default in GN (Shelley Vohr) #58115cff8006792
] - child_process: give names toChildProcess
functions (Livia Medeiros) #583706816d779b6
] - child_process: give names to promisifiedexec()
andexecFile()
(LiviaMedeiros) #579165572cecca4
] - crypto: expose crypto.constants.OPENSSL_IS_BORINGSSL (Shelley Vohr) #58387d6aa02889c
] - deps: use proper C standard when building libuv (Yaksh Bariya) #58587375a6413d5
] - deps: update simdjson to 3.12.3 (Node.js GitHub Bot) #57682e0cd138e52
] - deps: update googletest toe9092b1
(Node.js GitHub Bot) #5856531e592631f
] - deps: update corepack to 0.33.0 (Node.js GitHub Bot) #58566386c24260b
] - deps: update sqlite to 3.50.0 (Node.js GitHub Bot) #58272f84998d40b
] - deps: update OpenSSL gen container to Ubuntu 22.04 (Michaël ZassoConfiguration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.