fix(deps): update all non-major dependencies#563
Merged
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
1a4d85d to
f88ca66
Compare
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
There appears to be a regression introduced in it, we can look at the next version.
dawsontoth
force-pushed
the
renovate/all-minor-patch
branch
from
2bd8d03 to
391ca17
Compare
dawsontoth
approved these changes
May 18, 2026
dawsontoth
reviewed
May 18, 2026
Contributor
|
@- |
1 similar comment
Contributor
|
@- |
kriszyp
pushed a commit
that referenced
this pull request
May 19, 2026
…(PR #563) Squashed application of PR #563 onto v5.0: - package.json: bump axios, @aws-sdk/lib-storage, fs-extra, msgpackr, semver, sinon, uuid, yaml to versions matched by PR #563 final state - package-lock.json: regenerated via npm install - .github/workflows: bump slackapi/slack-github-action v3.0.1→v3.0.3, actions/setup-node v6.3.0→v6.4.0, actions/upload-artifact v7.0.0→v7.0.1 - renovate.json: group sinon on its own - unitTests/dataLayer/update.test.js: sandbox.resetHistory() (PR #563) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.1042.0→3.1045.03.1048.0(+2)3.1037.0→3.1045.03.1048.0(+2)8.59.0→8.59.28.59.3v6.3.0→v6.4.0v7.0.0→v7.0.11.1.8→1.1.91.15.2→1.16.01.16.15.8.4→5.8.511.3.4→11.3.516.13.2→16.14.01.11.10→1.11.121.58.0→1.63.01.65.0(+1)3.8.2→3.8.37.7.4→7.8.021.0.3→21.1.2v3.0.2→v3.0.35.31.5→5.31.68.58.0→8.59.28.59.37.24.7→7.25.011.1.0→11.1.12.8.3→2.9.0Release Notes
aws/aws-sdk-js-v3 (@aws-sdk/client-s3)
v3.1045.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1044.0Compare Source
Features
v3.1043.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
aws/aws-sdk-js-v3 (@aws-sdk/lib-storage)
v3.1045.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1044.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1043.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1042.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1041.0Compare Source
Bug Fixes
v3.1040.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1039.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1038.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v8.59.2Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.59.1Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
actions/setup-node (actions/setup-node)
v6.4.0Compare Source
actions/upload-artifact (actions/upload-artifact)
v7.0.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v7...v7.0.1
nodejs/amaro (amaro)
v1.1.9Compare Source
Core
Miscellaneous
axios/axios (axios)
v1.16.0Compare Source
v1.16.0 — May 2, 2026
This release adds support for the QUERY HTTP method and a new
ECONNREFUSEDerror constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:
maxBodyLengthandmaxContentLength. These limits were silently ignored on the fetch adapter prior to 1.16.0 — anyone relying on them as a safety net (DoS protection, accidental large uploads) had no protection. (#10795)Hostheaders. Previously, the proxy path could overwrite a customHost. Virtual-host-style routing through a proxy will now behave correctly. (#10822)https://user:p%40ss@host), the decoded value is what now goes on the wire. (#10825)parseProtocolnow strictly requires a colon in the protocol separator. Strings that loosely parsed as protocols before may no longer match. (#10729)unescape()replaced with modern UTF-8 encoding. Non-ASCII URL handling is now spec-correct; consumers depending on legacyunescape()quirks may see different output bytes. (#7378)transformRequestinput typing change was reverted. The typing change introduced in #10745 was reverted in #10810 after follow-up review — net behavior is unchanged from 1.15.2. (#10745, #10810)🚀 New Features
ECONNREFUSEDas a constant onAxiosErrorso callers can match connection-refused failures without comparing string literals (closes #6485). (#10680)encodehelper frombuildURLso userland param serializers can reuse the same encoding logic that axios uses internally. (#6897)🐛 Bug Fixes
requestDetailsargument onbeforeRedirect, preserved user-suppliedHostheaders when forwarding through a proxy, and properly URL-decoded basic auth credentials. (#10794, #10800, #6241, #10822, #10825)AxiosErrorwhen a stream is aborted after headers arrive, honoured thetimeoutoption during the connect phase when redirects are disabled, and resolved an unsettled-promise hang when an aborted request was combined with compression andmaxRedirects: 0. (#10708, #10819, #7149)maxBodyLength/maxContentLengthin the fetch adapter, set theUser-Agentheader to match the HTTP adapter, preserved the original abort reason instead of replacing it with a generic error, and deferred global access so importing the module no longer throws aTypeErrorin restricted environments. (#10795, #10772, #10806, #7260)cancelTokenandAbortSignallisteners on the error, timeout, and abort code paths to prevent leaked subscriptions. (#10787)AxiosErrorwhenJSON.parsefails insidedispatchRequest, preventedsettlefrom emittingundefinederror codes, and tightened theparseProtocolregex to require a colon in the protocol separator. (#10724, #7276, #10729)CancelTokentypings with the ESM build, fixed a compiler error caused byRawAxiosHeaders, and re-exportedcreatefrom the package index. (#7414, #6389, #6460)unescape()call with a modern UTF-8 encoding implementation. (#7378)🔧 Maintenance & Chores
utilsmodule and XHR adapter to use ES6 features, and tidied the multipart boundary error message. (#10588, #7419)FormDataEPIPE failures, fixed Win32 platform support for the pipe tests, and corrected an incorrect test assumption. (#10820, #10791, #10796)paramsSerializer.encodefor strict RFC 3986 query encoding, updated theparseReviverTypeScript definitions and configuration docs for ES2023, added timeout guidance to the README's first async example, and expanded notes around the recent type changes. (#10821, #10782, #10759, #10804)transformRequestinput typing change from #10745 after follow-up review. (#10745, #10810)actions/setup-node, thegithub-actionsgroup, andpostcss(in/docs) to their latest versions. (#10785, #10813, #10814)🌟 New Contributors
We are thrilled to welcome our new contributors. Thank you for helping improve axios:
Full Changelog
fastify/fastify (fastify)
v5.8.5Compare Source
This fixes CVE CVE-2026-33806 GHSA-247c-9743-5963.
What's Changed
New Contributors
Full Changelog: fastify/fastify@v5.8.4...v5.8.5
jprichardson/node-fs-extra (fs-extra)
v11.3.5Compare Source
ensureLink*/ensureSymlink*identical file detection on Windows (#1068)graphql/graphql-js (graphql)
v16.14.0Compare Source
v16.14.0 (2026-05-03)
New Feature 🚀
ofTypeintrospection depth (@Nols1000)Bug Fix 🐞
(@abishekgiri)
Docs 📝
Committers: 4
kriszyp/msgpackr (msgpackr)
v1.11.12Compare Source
v1.11.11Compare Source
oxc-project/oxc (oxlint)
v1.63.0Compare Source
📚 Documentation
cacbc4alinter: Fix jest settings docs. (#22127) (connorshea)v1.62.0Compare Source
🚀 Features
348f46clinter: AddrespectEslintDisableDirectivesoption (#21384) (Christian Vuerings)🐛 Bug Fixes
8c425dblinter: Allow string for jest version in config schema (#21649) (camc314)v1.61.1Compare Source
v1.61.0Compare Source
🚀 Features
38d8090linter/jest: Implemented jestversionsettings in config file. (#21522) (Said Atrahouch)v1.60.0Compare Source
📚 Documentation
cfd8a4flinter: Don't rely on old eslint doc for available globals (#21334) (Nicolas Le Cam)v1.59.0Compare Source
prettier/prettier (prettier)
v3.8.3Compare Source
npm/node-semver (semver)
v7.8.0Compare Source
Features
0d0a0a2#855 Addtruncatefunction (#855) (@pjohnmeyer, @owlstronaut)Bug Fixes
3905343#859 Warn when defaulting to --inc=patch in CLI (@pjohnmeyer)Documentation
c368af6#853 fix typos in documentation (#853) (@ankitkumar572005)37776c3#846 fix BNF grammar to distinguish prerelease from build identifiers (#846) (@abhu85, @claude)Chores
9542e09#860 template-oss-apply (@owlstronaut)937bc2c#860template-oss-apply@5.0.0(@owlstronaut)6946fef#852 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852) (@dependabot[bot], @npm-cli-bot)sinonjs/sinon (sinon)
v21.1.2Compare Source
53817f7dUpgrade to ESLint 10 and new shared config (#2696) (Carl-Erik Kopseng)
d7a682e0fix: move npm-run-all to devDeps (#2694) (Avi Vahl)
5b8720ecuse latest shared eslint-config (Carl-Erik Kopseng)
Released by Carl-Erik Kopseng on 2026-04-11.
v21.1.1Compare Source
3c8b023bUpdate deps (Carl-Erik Kopseng)
2eabf5dafix(#2692): Remove ESM-only supports-color as it breaks CJS exports (#2693) (Carl-Erik Kopseng)
Released by Carl-Erik Kopseng on 2026-04-10.
v21.1.0Compare Source
0a5526c5updated deps (Carl-Erik Kopseng)
5262204ffix: build artifacts before running bundled tests (Carl-Erik Kopseng)
819bb64bMigration to ECMAScript modules (ESM) (#2683) (Carl-Erik Kopseng)
cd2bf5a3Use newer endpoint (Carl-Erik Kopseng)
Released by Carl-Erik Kopseng on 2026-04-09.
slackapi/slack-github-action (slackapi/slack-github-action)
v3.0.3Compare Source
sebhildebrandt/systeminformation (systeminformation)
v5.31.6Compare Source
Full Changelog: sebhildebrandt/systeminformation@v5.31.5...v5.31.6
typescript-eslint/typescript-eslint (typescript-eslint)
v8.59.2Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.59.1Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.59.0Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.58.2Compare Source
🩹 Fixes
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.58.1Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
nodejs/undici (undici)
v7.25.0Compare Source
What's Changed
Full Changelog: nodejs/undici@v7.24.8...v7.25.0
v7.24.8Compare Source
What's Changed
Full Changelog: nodejs/undici@v7.24.7...v7.24.8
uuidjs/uuid (uuid)
v11.1.1Compare Source
eemeli/yaml (yaml)
v2.9.0Compare Source
v2.8.4Compare Source
maxAliasCount:0(#677)e1a1a77)minFractionDigitsonly to decimal strings (#676)Configuration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.