fix(deps): update external fixes - #341
Merged
Merged
Conversation
|
This PR will trigger a patch release when merged. |
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
solaris007
pushed a commit
that referenced
this pull request
Aug 1, 2026
## [1.16.3](v1.16.2...v1.16.3) (2026-08-01) ### Bug Fixes * **deps:** update external fixes ([#341](#341)) ([02380f7](02380f7))
Member
|
🎉 This PR is included in version 1.16.3 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.1095.0→3.1101.03.1095.0→3.1101.03.1095.0→3.1101.03.1095.0→3.1101.03.972.72→3.972.762.41.0→2.43.217.2.0→17.3.014.0.16→14.0.1724.18.0→24.18.1Release Notes
aws/aws-sdk-js-v3 (@aws-sdk/client-cloudwatch-logs)
v3.1101.0Compare Source
Features
v3.1100.0Compare Source
Note: Version bump only for package @aws-sdk/client-cloudwatch-logs
v3.1099.0Compare Source
Note: Version bump only for package @aws-sdk/client-cloudwatch-logs
v3.1098.0Compare Source
Note: Version bump only for package @aws-sdk/client-cloudwatch-logs
v3.1097.0Compare Source
Note: Version bump only for package @aws-sdk/client-cloudwatch-logs
v3.1096.0Compare Source
Note: Version bump only for package @aws-sdk/client-cloudwatch-logs
aws/aws-sdk-js-v3 (@aws-sdk/client-lambda)
v3.1101.0Compare Source
Note: Version bump only for package @aws-sdk/client-lambda
v3.1100.0Compare Source
Note: Version bump only for package @aws-sdk/client-lambda
v3.1099.0Compare Source
Features
v3.1098.0Compare Source
Note: Version bump only for package @aws-sdk/client-lambda
v3.1097.0Compare Source
Note: Version bump only for package @aws-sdk/client-lambda
v3.1096.0Compare Source
Note: Version bump only for package @aws-sdk/client-lambda
aws/aws-sdk-js-v3 (@aws-sdk/client-s3)
v3.1101.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1100.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1099.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1098.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1097.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1096.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
aws/aws-sdk-js-v3 (@aws-sdk/client-sqs)
v3.1101.0Compare Source
Note: Version bump only for package @aws-sdk/client-sqs
v3.1100.0Compare Source
Note: Version bump only for package @aws-sdk/client-sqs
v3.1099.0Compare Source
Note: Version bump only for package @aws-sdk/client-sqs
v3.1098.0Compare Source
Note: Version bump only for package @aws-sdk/client-sqs
v3.1097.0Compare Source
Note: Version bump only for package @aws-sdk/client-sqs
v3.1096.0Compare Source
3.1096.0(2026-07-27)
New Features
Bug Fixes
For list of updated packages, view updated-packages.md in assets-3.1096.0.zip
aws/aws-sdk-js-v3 (@aws-sdk/credential-provider-node)
v3.972.76Chores
v3.972.75Chores
v3.972.74Chores
v3.972.73Chores
Redocly/redocly-cli (@redocly/cli)
v2.43.2Compare Source
Patch Changes
v2.43.1Compare Source
Patch Changes
v2.43.0Compare Source
Patch Changes
v2.42.0Compare Source
Minor Changes
generate-clientcommand that generates a typed, zero-dependency TypeScript client from an OpenAPI description — auth, retries, middleware, typed SSE streaming, pagination, and multipart included — plus optional companion generators for Zod validation, TanStack Query and SWR hooks, MSW mocks, and date transformers.See the
generate-clientcommand reference and the Use the generated client guide.Patch Changes
v2.41.2Compare Source
Patch Changes
Updated js-yaml from
5.2.1to5.2.2to resolve a vulnerability in YAML parsing.Added support for the Arazzo spec-compliant workflow reference form
$sourceDescriptions.<name>.<workflowId>independsOn, stepworkflowId, and success/failure actionworkflowId.Unresolvable workflow references fail only the affected workflow with a clear error message, and no longer abort the whole run or pass unnoticed.
Updated @redocly/openapi-core to v2.41.2.
Updated @redocly/respect-core to v2.41.2.
v2.41.1Compare Source
Patch Changes
driftcommand'sschema-consistencyrule reported false-positive findings foroneOfschemas with adiscriminator.Payloads are validated only against the branch selected by the discriminator value instead of every
oneOfbranch.Schemas whose discriminator does not meet Ajv's structural requirements keep the previous behavior.
driftcommand's built-in undocumented-header ignore list withx-amz-,x-amzn-andx-github-prefixes, and thex-hub-signature/x-hub-signature-256webhook signature headers.lint-staged/lint-staged (lint-staged)
v17.3.0Compare Source
Minor Changes
#1825
16b3f74- It is now possible to run multiple tasks in parallel for a single glob by configuring it with an array of tasks (which run sequentially), and then placing another array inside it (where the tasks will run in parallel). The following demonstrates the order tasks will start in:{ "*.ts": ["first", "second", ["third", "third"], "fourth"] }As a concrete example, lint-staged's own configuration is:
which means:
oxfmt --check --no-error-on-unmatched-pattern lib/index.jsoxlint --no-error-on-unmatched-pattern lib/index.js*.tsfiles are staged, runtscwithout appending any argumentsPatch Changes
15f7e53- During an in-progress merge, files that are unchanged from the branch being merged are now skipped. Technically, files are only included if there are staged changes against bothHEADandMERGE_HEAD.nock/nock (nock)
v14.0.17Compare Source
Bug Fixes
nodejs/node (node)
v24.18.1: 2026-07-29, Version 24.18.1 'Krypton' (LTS), @juanarbolCompare Source
This is a security release.
Notable Changes
Commits
6cb0475751] - deps: update llhttp to 9.4.3 (Paolo Insogna) nodejs-private/node-private#935bcfe21d3dc] - deps: update undici to 7.29.0 (Node.js GitHub Bot) #647139d0d36cffd] - (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) nodejs-private/node-private#9298a008fb523] - (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) nodejs-private/node-private#922a77c7f7354] - (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) nodejs-private/node-private#92134ed88a069] - (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) #6375295ba2cfde7] - (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) nodejs-private/node-private#904fcbdbe47ea] - (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) nodejs-private/node-private#930ea26c12b56] - (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) nodejs-private/node-private#9119a6b7e343a] - (CVE-2026-58039) permission: check final report output path (RafaelGSS) nodejs-private/node-private#9266c0c990880] - (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) nodejs-private/node-private#927af9ff0490c] - (CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset (Matteo Collina) nodejs-private/node-private#89605f541b5c0] - (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) nodejs-private/node-private#931Configuration
📅 Schedule: (in timezone Europe/Zurich)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.