chore(deps): update all non-major dependencies#1208
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
94a46c8 to
03992a5
Compare
03992a5 to
9522e4f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.0.184→3.0.1935.16.1→5.17.01.1.6→1.1.71.4.3→1.4.75.2.2→5.4.06.3.0→6.4.09.5.0→9.6.05.100.10→5.100.135.100.145.100.10→5.100.135.100.1419.2.14→19.2.154.1.6→4.1.76.0.182→6.0.1915.0.15→5.0.2112.38.0→12.40.024.15.0→24.16.01.64.0→1.66.011.1.2→11.2.211.3.07.75.0→7.76.07.76.18.0.13→8.0.144.1.6→4.1.7Release Notes
vercel/ai (@ai-sdk/react)
v3.0.193Compare Source
Patch Changes
v3.0.192Compare Source
Patch Changes
v3.0.191Compare Source
Patch Changes
356c3cf]v3.0.190Compare Source
Patch Changes
c98715a]v3.0.189Compare Source
Patch Changes
v3.0.187Compare Source
Patch Changes
v3.0.186Compare Source
Patch Changes
40fc5e4]v3.0.185Compare Source
Patch Changes
DataDog/datadog-ci (@datadog/datadog-ci)
v5.17.0Compare Source
What's Changed
datadog-ci
Dependencies
@aws-sdk/*,fast-xml-parserto fix vuln by @Drarig29 in #2315Documentation
Software Delivery
Serverless
Synthetics
import-testscommand by @Drarig29 in #2304Chores
New Contributors
Full Changelog: DataDog/datadog-ci@v5.16.1...v5.17.0
HarperFast/agent-tools (@harperfast/agent-tools)
v1.1.7Compare Source
Bug Fixes
Dependency Updates
HarperFast/skills (@harperfast/skills)
v1.4.7Compare Source
v1.4.6Compare Source
Bug Fixes
v1.4.5Compare Source
v1.4.4Compare Source
react-hook-form/resolvers (@hookform/resolvers)
v5.4.0Compare Source
Features
Fixes
yupResolver(useForm context) (#835) (3d29924)stripe/react-stripe-js (@stripe/react-stripe-js)
v6.4.0Compare Source
New features
Fixes
Changed
stripe/stripe-js (@stripe/stripe-js)
v9.6.0Compare Source
New features
Fixes
Changed
TanStack/query (@tanstack/react-query)
v5.100.13Compare Source
Patch Changes
d423168]:v5.100.12Compare Source
Patch Changes
v5.100.11Patch Changes
TanStack/query (@tanstack/react-query-devtools)
v5.100.13Compare Source
Patch Changes
v5.100.12Compare Source
Patch Changes
v5.100.11Patch Changes
vitest-dev/vitest (@vitest/coverage-v8)
v4.1.7Compare Source
🐞 Bug Fixes
View changes on GitHub
harperfast/harper (harper)
v5.0.21Compare Source
What's Changed
Full Changelog: HarperFast/harper@v5.0.20...v5.0.21
v5.0.20Compare Source
What's Changed
fix(deps): update all non-major dependencies→v5.0(PR #563)Full Changelog: HarperFast/harper@v5.0.19...v5.0.20
v5.0.19Compare Source
What's Changed
8bbbc4c)Full Changelog: HarperFast/harper@v5.0.18...v5.0.19
v5.0.18Compare Source
What's Changed
fix: skip corrupt audit entries during iteration instead of throwing→v5.0(conflict) (#581)fix: defer and yield audit-store commit notifications→v5.0(conflict) (#544)Full Changelog: HarperFast/harper@v5.0.15...v5.0.18
v5.0.17Compare Source
What's Changed
Full Changelog: HarperFast/harper@v5.1.1...v5.0.17
motiondivision/motion (motion)
v12.40.0Compare Source
Added
pathoption totransition.arc()for motion along an arc.v12.39.0Compare Source
Added
repeatTypeandrepeatDelayin animation sequences.Fixed
dragSnapToOriginno longer leaves the drag transform stranded after a layout swap.LazyMotion: Share React contexts between theframer-motionandframer-motion/m(and thereforemotion/reactandmotion/react-m) CJS bundles so that<m.div>from the/msubpath picks up features loaded by<LazyMotion>from the main entry point.useScroll: Support hydratingtargetandcontainerrefs from anywhere in the tree.<AnimatePresence initial={false} />.dragConstraints, when set as viewport-relative ref, no longer break on scroll.§visualElementhydration order.useAnimate: Now respectsskipAnimations.AnimatePresence: Fix object-forminitialvalues not applied on re-entry after exit completes.scroll: Fixed callback progress when tracking an element.useScroll: Fix hardware acceleration when tracking an element.nodejs/node (node)
v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @aduh95Compare Source
Notable Changes
b267f6bca3] - (SEMVER-MINOR) crypto: implementrandomUUIDv7()(nabeel378) #62553ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes tonode inspect(Joyee Cheung) #627139705f628d9] - (SEMVER-MINOR) fs: add signal option tofs.stat()(Mert Can Altin) #5777540ccfdecf9] - (SEMVER-MINOR) fs: exposefrsizefield instatfs(Jinho Jang) #62277d7188af5c9] - (SEMVER-MINOR) http: hardenClientRequestoptions merge (Matteo Collina) #63082aa1d8a9afc] - (SEMVER-MINOR) http: addreq.signaltoIncomingMessage(Akshat) #625416f37f7e240] - (SEMVER-MINOR) stream: propagate destruction induplexPair(Ahmed Elhor) #61098d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #61747d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #6282001a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support forAbortSignal.timeout(DeveloperViraj) #6075100705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #61556Commits
dd72df060d] - assert,util: fix stale nested cycle memo entries (Ruben Bridgewater) #62509add94f4bc3] - build: track PDL files as inputs in inspector GN build (Robo) #628881b1eb9e334] - build: remove redundant -fuse-linker-plugin from GCC LTO flags (Daniel Lando) #626678752b604ec] - crypto: deduplicate and canonicalize CryptoKey usages (Filip Skokan) #62902341947e7fd] - crypto: reject unintended raw key format string input (Filip Skokan) #6297428a78747fc] - crypto: remove Argon2 KDF derivation from its job setup (Filip Skokan) #6286316e8c2b54d] - crypto: fix unsigned conversion of 4-byte RSA publicExponent (DeepView Autofix) #62839eeae754a87] - crypto: reject inherited key type names (Jonathan Lopes) #628759dd5540325] - crypto: add memory tracking for secureContext openssl objects (Mert Can Altin) #59051b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #625537597d204c1] - crypto: add support forEd25519context parameter (Filip Skokan) #624744bf85845da] - debugger: move ProbeInspectorSession and helpers to separate files (Joyee Cheung) #63013ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes tonode inspect(Joyee Cheung) #6271383e98f77b7] - deps: update corepack to 0.35.0 (Node.js GitHub Bot) #63375ec8c6b939a] - deps: V8: cherry-pick657d8de(Guy Bedford) #62784722c0c3274] - deps: update nghttp3 to 1.14.0 (Node.js GitHub Bot) #611875304db93d3] - deps: update nghttp3 to 1.13.1 (Node.js GitHub Bot) #60046e073b3811d] - deps: update nghttp3 to 1.11.0 (James M Snell) #592491d00313fb2] - deps: update ngtcp2 to 1.14.0 (James M Snell) #592498b3a4fc18f] - deps: update amaro to 1.1.9 (Node.js GitHub Bot) #6309062fe0cfcd1] - deps: update llhttp to 9.4.1 (Node.js GitHub Bot) #63045137e09c8e9] - deps: update corepack to 0.34.7 (Node.js GitHub Bot) #6281014a4cb8fbc] - deps: update timezone to 2026b (Node.js GitHub Bot) #629623e1036583a] - deps: upgrade npm to 11.13.0 (npm team) #6289801dfe5961c] - deps: cherry-pick libuv/libuv@439a54b(skooch) #628816cd368b10c] - deps: update sqlite to 3.53.0 (Node.js GitHub Bot) #62699f218a4f553] - deps: update nbytes to 0.1.4 (Node.js GitHub Bot) #62698b47688524a] - deps: update archs files for openssl-3.5.6 (Node.js GitHub Bot) #62629d202e2d343] - deps: upgrade openssl sources to openssl-3.5.6 (Node.js GitHub Bot) #626292faba66341] - deps: update minimatch to 10.2.5 (Node.js GitHub Bot) #62594fa46c90c5d] - deps: update googletest tod72f9c8(Node.js GitHub Bot) #62593099ded5713] - deps: update simdjson to 4.6.1 (Node.js GitHub Bot) #625927ce95afe96] - deps: libuv: cherry-pickaabb765(Santiago Gimeno) #6256157ef845623] - deps: update icu to 78.3 (Node.js GitHub Bot) #62324493ac40e12] - deps: update libuv to 1.52.1 (Node.js GitHub Bot) #61829b39508b368] - deps: update undici to 7.25.0 (Node.js GitHub Bot) #63011cb67a925e9] - deps: use npm undici@seven tag inupdate-undici.sh(Matteo Collina) #62739aa1e0bc28b] - doc: fix typos and inconsistencies in crypto.md and webcrypto.md (Filip Skokan) #62828f2a1735ed9] - doc: fix duplicate word "to to" in util.styleText (Daijiro Wachi) #62917b6378e215c] - doc: fix node-config-schema (Сковорода Никита Андреевич) #61596233894a9ce] - doc: fix the TypeScript Execute (tsx) project link (David Thornton) #630935d97919f8f] - doc: correct diagnostics_channel built-in channel names (Bryan English) #629952a9ccc927e] - doc: use mjs/cjs blocks for callbackify null reason example (Daijiro Wachi) #62884ef413b5358] - doc: fix typo in test.md (Rich Trott) #6296076f21c5070] - doc: correct typo in PR contribution instructions (Mike McCready) #62738ca02af1f7d] - doc: fix duplicate word "of of" in postMessageToThread (Daijiro Wachi) #6291746c99ed526] - doc: fix duplicate word "for for" in compile cache (Daijiro Wachi) #629171a60851734] - doc: fix typo in dns.lookup options description (Daijiro Wachi) #62882169b5ea2ed] - doc: fix Argon2 parameter bounds (Tobias Nießen) #628689a3a190f4e] - doc: clarify diffieHellman.generateKeys recomputes same key (Kit Dallege) #622050fba9e87d6] - doc: remove Ayase-252 and meixg from triagger team (Antoine du Hamel) #628419c700f3446] - doc: clarify dns.lookup() callback signature when all is true (eungi) #628006b7280bc17] - doc: add experimental modules lifetime policy (Paolo Insogna) #62753ce47ea31c9] - doc: clarify process._debugProcess() in Permission Model (Fahad Khan) #62537ba01633757] - doc: fix typo in devcontainer guide (Rohan Santhosh Kumar) #6268770b4d5839b] - doc: clarify Backport-PR-URL metadata added automatically (Mike McCready) #626688126d1c3eb] - doc: update WPT test runner README.md (Filip Skokan) #62680978afea4b5] - doc: fix spelling in release announcement guidance (Rohan Santhosh Kumar) #626631684ab8ff8] - doc: note non-monotonic clock in crypto.randomUUIDv7 (nabeel378) #6260086d4f07930] - doc: update bug bounty program (Rafael Gonzaga) #62590736ed8a08f] - doc: document TransformStream transformer.cancel option (Tom Pereira) #62566938af9be01] - doc: mention test runner retry attemp is zero based (Moshe Atlow) #6250494433e450f] - doc,src,test: fix dead inspector help URL (semimikoh) #62745ddf1f01659] - esm: addERR_REQUIRE_ESM_RACE_CONDITION(Antoine du Hamel) #624624a506acd16] - fs: add followSymlinks option to glob (Matteo Collina) #62695f4ea495f9b] - fs: restore fs patchability in ESM loader (Joyee Cheung) #6283563c111cd60] - fs: validate position argument before length === 0 early return (Edy Silva) #626749705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #5777540ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #62277717476a24e] - http: emit 'drain' on OutgoingMessage only after buffers drain (Robert Nagy) #62936d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #6308264f15c274a] - http: fix leaked error listener on sync HTTP req create + destroy (Tim Perry) #628725c4798d799] - http: fix no_proxy leading-dot suffix matching (Daijiro Wachi) #623339f3bc70ae5] - http: cleanup pipeline queue (Robert Nagy) #62534aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #62541900dc758ff] - http2: expose writable stream state on compat response (T) #63003b3bfe35912] - inspector: coerce key and value to string in webstorage events (Ali Hassan) #626163dc3fb6ad8] - inspector: return errors when CDP protocol event emission fails (Ryuhei Shima) #621624f3f21bd7c] - inspector: auto collect webstorage data (Ryuhei Shima) #6214536cc04189d] - inspector: initial support storage inspection (Ryuhei Shima) #611391718bc3b9b] - inspector: fix absolute URLs in network http (bugyaluwang) #6295597e32c7a74] - lib: avoid quadratic shift() in startup snapshot callback (Daijiro Wachi) #6291425d2e999de] - lib: harden kKeyOps lookup with null prototype (Filip Skokan) #6287737d3913c8f] - lib: short-circuit WebIDL BufferSource SAB check (Filip Skokan) #62833430c69d25f] - lib: use js-only implementation ofisDataView()(René) #627803ba0add6a0] - lib: fix lint in internal/webstreams/util.js (Filip Skokan) #628069b95c41398] - lib: fix sequence argument handling in Blob constructor (Ms2ger) #62179314dacdbee] - lib: improve Web Cryptography key validation ordering (Filip Skokan) #627493d18162430] - lib: reject SharedArrayBuffer in web APIs per spec (Ali Hassan) #62632ada3ce879d] - lib: defer AbortSignal.any() following (sangwook) #62367b2981ec7eb] - meta: bump actions/download-artifact from 8.0.0 to 8.0.1 (dependabot[bot]) #625497cd20667b5] - meta: bump github/codeql-action from 4.35.1 to 4.35.3 (dependabot[bot]) #6307491a07cfe9f] - meta: bump Mozilla-Actions/sccache-action from 0.0.9 to 0.0.10 (dependabot[bot]) #6307309e17fe47c] - meta: add automation policy (Chengzhong Wu) #6287159e7fb7986] - meta: move VoltrexKeyva to emeritus (Matteo Collina) #628951e2915cfa6] - meta: bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (dependabot[bot]) #628450253c6e2be] - meta: bump step-security/harden-runner from 2.16.1 to 2.19.0 (dependabot[bot]) #62844f503675b86] - meta: bump actions/setup-node from 6.3.0 to 6.4.0 (dependabot[bot]) #628425e14e4d26e] - meta: broaden stale bot (Aviv Keller) #62658795db76f87] - meta: pass release version to release worker (flakey5) #62777ef384fe39f] - meta: add QUIC to CODEOWNERS (Tim Perry) #6265267e0ac568d] - meta: move Michael to emeritus (Michael Dawson) #625365dad616393] - meta: populate apt list for slim runner in update-openssl workflow (René) #62628a869d25d8a] - meta: bump step-security/harden-runner from 2.15.0 to 2.16.1 (dependabot[bot]) #62550769efc0403] - meta: bump actions/setup-node from 6.2.0 to 6.3.0 (dependabot[bot]) #6254873fcc2b055] - meta: bump github/codeql-action from 4.32.4 to 4.35.1 (dependabot[bot]) #625476c001246fe] - meta: bump codecov/codecov-action from 5.5.2 to 6.0.0 (dependabot[bot]) #625455ee40d6a03] - meta: bump actions/cache from 5.0.3 to 5.0.4 (dependabot[bot]) #62543ca16ad8a05] - meta: require DCO signoff in commit message guidelines (James M Snell) #62510db9497fc41] - meta: expand memory leak DoS criteria to all DoS (Joyee Cheung) #6250513b7d08b8d] - module: remove duplicated checks from_resolveFilename(Antoine du Hamel) #627296b53efb53a] - module,win: fix long subpath import (Stefan Stojanovic) #62101841dfbf6fc] - node-api: update libuv ABI stability note (Chengzhong Wu) #6278901090f2aa1] - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis) #6262387443b4355] - node-api: execute tsfn finalizer after queue drains when aborted (Kevin Eady) #61956e95570c054] - process: handle rejections only when needed (Gürgün Dayıoğlu) #6291937d49f3219] - process: optimize asyncHandledRejections by using FixedQueue (Gürgün Dayıoğlu) #60854f697c55e38] - quic: add QuicEndpoint.listening & QuicStream.destroy() and tests (Tim Perry) #62648c128942b69] - quic: fixup token verification to handle zero expiration (James M Snell) #62620abb881ec92] - quic: support multiple ALPN negotiation (James M Snell) #62620476926c2ad] - quic: apply multiple TLS context improvements and SNI support (James M Snell) #6262076d9c24b95] - quic: implement rapidhash for hashing improvements (James M Snell) #6262008726cd43d] - quic: move quic behind compile time flag (Matteo Collina) #61444ea4f19aaa7] - quic: use arena allocation for packets (James M Snell) #6258921e9239e2a] - quic: fixup linting/formatting issues (James M Snell) #62387edeed4303b](https://redirectConfiguration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.