chore(deps): update all non-major dependencies #289
Closed
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^7.24.4
->^7.24.6
^7.24.4
->^7.24.6
1.x
->1.4.1
^9.5.0
->^9.6.0
3.x
->3.37.1
^3.36.1
->^3.37.1
^4.0.2
->^4.0.3
16
->16.20.2
Release Notes
babel/babel (@babel/core)
v7.24.6
Compare Source
🐛 Bug Fix
babel-helper-create-class-features-plugin
,babel-plugin-transform-class-properties
babel-core
,babel-generator
,babel-plugin-transform-modules-commonjs
babel-helper-create-class-features-plugin
,babel-plugin-proposal-decorators
babel-helpers
,babel-plugin-proposal-decorators
,babel-runtime-corejs3
babel-parser
,babel-plugin-transform-typescript
cls.fn<C> = x
(@liuxingbaoyu)🏠 Internal
babel-core
,babel-helpers
,babel-plugin-transform-runtime
,babel-preset-env
,babel-runtime-corejs2
,babel-runtime-corejs3
,babel-runtime
babel-helpers
tsconfig.json
for@babel/helpers/src/helpers
(@nicolo-ribaudo)babel-cli
,babel-helpers
,babel-plugin-external-helpers
,babel-plugin-proposal-decorators
,babel-plugin-transform-class-properties
,babel-plugin-transform-modules-commonjs
,babel-plugin-transform-modules-systemjs
,babel-plugin-transform-runtime
,babel-preset-env
,babel-runtime-corejs2
,babel-runtime-corejs3
,babel-runtime
babel-parser
,babel-traverse
v7.24.5
Compare Source
🐛 Bug Fix
babel-plugin-transform-classes
,babel-traverse
babel-helpers
,babel-plugin-proposal-explicit-resource-management
,babel-runtime-corejs3
💅 Polish
babel-parser
using
declaration (@JLHwung)🏠 Internal
babel-parser
@babel/parser
AST types (@nicolo-ribaudo).startNode
(@nicolo-ribaudo)babel-helper-create-class-features-plugin
,babel-helper-member-expression-to-functions
,babel-helper-module-transforms
,babel-helper-split-export-declaration
,babel-helper-wrap-function
,babel-helpers
,babel-plugin-bugfix-firefox-class-in-computed-class-key
,babel-plugin-proposal-explicit-resource-management
,babel-plugin-transform-block-scoping
,babel-plugin-transform-destructuring
,babel-plugin-transform-object-rest-spread
,babel-plugin-transform-optional-chaining
,babel-plugin-transform-parameters
,babel-plugin-transform-private-property-in-object
,babel-plugin-transform-react-jsx-self
,babel-plugin-transform-typeof-symbol
,babel-plugin-transform-typescript
,babel-traverse
NodePath<T | U>
distributive (@nicolo-ribaudo)babel-plugin-proposal-partial-application
,babel-types
JSXNamespacedName
from validCallExpression
args (@nicolo-ribaudo)babel-plugin-transform-class-properties
,babel-preset-env
🏃♀️ Performance
babel-helpers
,babel-preset-env
,babel-runtime-corejs3
objectWithoutPropertiesLoose
on V8 (@romgrk)zloirock/core-js (core-js)
v3.37.1
Compare Source
URL.parse
feature detection for some specific casesSet
methods proposal added and marked as supported from FF 127Symbol.dispose
added and marked as supported from V8 ~ Chromium 125Math.f16round
andDataView.prototype.{ getFloat16, setFloat16 }
added and marked as supported from Deno 1.43URL.parse
added and marked as supported from Chromium 126URL.parse
added and marked as supported from NodeJS 22.0URL.parse
added and marked as supported from Deno 1.43v3.37.0
Compare Source
Set
methods proposal:Set.prototype.intersection
Set.prototype.union
Set.prototype.difference
Set.prototype.symmetricDifference
Set.prototype.isSubsetOf
Set.prototype.isSupersetOf
Set.prototype.isDisjointFrom
es.
namespace modules,/es/
and/stable/
namespaces entriesMath.sumPrecise
stage 2.7 proposal:Math.sumPrecise
Promise.try
proposal:Promise.try
RegExp.escape
stage 2 proposal:Symbol.customMatcher
Symbol.customMatcher
Symbol.customMatcher
well-known symbol from the pattern matching proposal is also used in the exactors proposal, added an entry also for this proposalURL.parse
, url/825{ Object, Map }.groupBy
bug that does not support iterable primitivesArray.fromAsync
URL.parse
added and marked as supported from FF 126URL.parse
added and marked as supported from Bun 1.1.4URL.canParse
fixed and marked as supported from Bun 1.1.0Set
methods fixed in JavaScriptCore and marked as supported from Bun 1.1.1jsdoc/jsdoc (jsdoc)
v4.0.3
Compare Source
nodejs/node (node)
v16.20.2
: 2023-08-09, Version 16.20.2 'Gallium' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.
Commits
40c3958a5a
] - deps: update archs files for OpenSSL-1.1.1v (RafaelGSS) #49043a9ac9da89a
] - deps: fix openssl crypto clean (RafaelGSS) #49043362d4c7494
] - deps: upgrade openssl sources to OpenSSL_1_1_1v (RafaelGSS) #49043d8ccfe9ad4
] - policy: handle Module.constructor and main.extensions bypass (RafaelGSS) nodejs-private/node-private#445242aaa0caa
] - policy: disable process.binding() when enabled (Tobias Nießen) nodejs-private/node-private#459v16.20.1
: 2023-06-20, Version 16.20.1 'Gallium' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
mainModule.__proto__
Bypass Experimental Policy Mechanism (High)More detailed information on each of the vulnerabilities can be found in June 2023 Security Releases blog post.
Commits
5a92ea7a3b
] - crypto: handle cert with invalid SPKI gracefully (Tobias Nießen)5df04e893a
] - deps: setCARES_RANDOM_FILE
for c-ares (Richard Lau) #48156c171cbd124
] - deps: update c-ares to 1.19.1 (RafaelGSS) #48115155d3aac02
] - deps: update archs files for OpenSSL-1.1.1u+quic (RafaelGSS) #483698d4c8f8ebe
] - deps: upgrade openssl sources to OpenSSL_1_1_1u (RafaelGSS) #483691a5c9284eb
] - doc,test: clarify behavior of DH generateKeys (Tobias Nießen) nodejs-private/node-private#426e42ff4b018
] - http: disable request smuggling via empty headers (Paolo Insogna) nodejs-private/node-private#42910042683c8
] - msi: do not create AppData\Roaming\npm (Tobias Nießen) nodejs-private/node-private#408a6f4e87bc9
] - policy: handle mainModule.__proto__ bypass (RafaelGSS) nodejs-private/node-private#416b77000f4d7
] - test: allow SIGBUS in signal-handler abort test (Michaël Zasso) #47851v16.20.0
: 2023-03-29, Version 16.20.0 'Gallium' (LTS), @BethGriggsCompare Source
Notable Changes
Commits
de6dd67790
] - crypto: avoid hang when no algorithm available (Richard Lau) #462374617512788
] - crypto: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) #4618524972164fc
] - deps: update undici to 5.20.0 (Node.js GitHub Bot) #4671185f88c6a8d
] - deps: V8: cherry-pick90be99f
(Michaël Zasso) #46646b4ebe6d47b
] - deps: update c-ares to 1.19.0 (Michaël Zasso) #4641556cbc7fdda
] - deps: V8: cherry-pickc2792e5
(Jiawen Geng) #449617af9bdb31e
] - deps: upgrade npm to 8.19.4 (npm team) #46677962a7471b5
] - deps: update corepack to 0.17.0 (Node.js GitHub Bot) #46842748bc96e35
] - deps: update corepack to 0.16.0 (Node.js GitHub Bot) #46710a467782499
] - deps: update corepack to 0.15.3 (Node.js GitHub Bot) #460371913b6763d
] - deps: update corepack to 0.15.2 (Node.js GitHub Bot) #45635809371a15f
] - module: require.resolve.paths returns null with node schema (MURAKAMI Masahiko) #45147086bb2f8d4
] - Revert "src: let http2 streams end after session close" (Rich Trott) #467216a01d39120
] - (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) #44376d081032a60
] - test: fix test-net-connect-reset-until-connected (Vita Batrla) #46781efe1be47ec
] - test: skip test depending onoverlapped-checker
when not available (Antoine du Hamel) #45015fc47d58abe
] - test: remove cjs loader from stack traces (Geoffrey Booth) #44197cf76d0790d
] - test: fix WPT title when no META title is present (Filip Skokan) #468040d1485b924
] - test: fix default WPT titles (Filip Skokan) #46778088e9cde3d
] - test: add WPTRunner support for variants and generating WPT reports (Filip Skokan) #46498908c4dff44
] - test: mark test-crypto-key-objects flaky on Linux (Richard Lau) #46684768e56227e
] - tools: makeutils.SearchFiles
deterministic (Bruno Pitrus) #44496v16.19.1
: 2023-02-16, Version 16.19.1 'Gallium' (LTS), @richardlauCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
Fixed by an update to undici:
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.
This security release includes OpenSSL security updates as outlined in the recent
OpenSSL security advisory.
Commits
7fef050447
] - build: build ICU with ICU_NO_USER_DATA_OVERRIDE (RafaelGSS) nodejs-private/node-private#374b558e9f476
] - crypto: clear OpenSSL error on invalid ca cert (RafaelGSS) nodejs-private/node-private#375160adb7ffc
] - crypto: clear OpenSSL error queue after calling X509_check_private_key() (Filip Skokan) #45495d0ece30948
] - crypto: clear OpenSSL error queue after calling X509_verify() (Takuro Sato) #453772d9ae4f184
] - deps: update undici to v5.19.1 (Matteo Collina) nodejs-private/node-private#388d80e8312fd
] - deps: cherry-pick Windows ARM64 fix for openssl (Richard Lau) #46568de5c8d2c2f
] - deps: update archs files for quictls/openssl-1.1.1t+quic (RafaelGSS) #465681a8ccfe908
] - deps: upgrade openssl sources to OpenSSL_1_1_1t+quic (RafaelGSS) #46568693789780b
] - doc: clarify release notes for Node.js 16.19.0 (Richard Lau) #45846f95ef064f4
] - lib: makeRequireFunction patch when experimental policy (RafaelGSS) nodejs-private/node-private#358b02d895137
] - policy: makeRequireFunction on mainModule.require (RafaelGSS) nodejs-private/node-private#358d7f83c420c
] - test: avoid left behind child processes (Richard Lau) #46276v16.19.0
: 2022-12-13, Version 16.19.0 'Gallium' (LTS), @richardlauCompare Source
Notable Changes
OpenSSL 1.1.1s
This update is a bugfix release and does not address any security
vulnerabilities.
Root certificates updated to NSS 3.85
Certificates added:
A626340
Certificates removed:
Time zone update to 2022f
Time zone data has been updated to 2022f. This includes changes to Daylight
Savings Time (DST) for Fiji and Mexico. For more information, see
https://mm.icann.org/pipermail/tz-announce/2022-October/000075.html.
Other Notable Changes
33707dcd03
] - dgram: add dgram send queue info (theanarkh) #44149Dependency updates:
3b2b70d792
] - deps: upgrade npm to 8.19.3 (npm team) #45322Experimental features:
1e0dcd1ee0
] - cli: add--watch
(Moshe Atlow) #443668c73279ebb
] - util: add default value option to parsearg (Manuel Spigolon) #44631Commits
bbef3c42f6
] - build: add version info to timezone update PR (Darshan Sen) #45021cc2c7648e0
] - build: support Python 3.11 (Luigi Pinca) #45191ac24c80663
] - build: remove redundant condition from common.gypi (Richard Lau) #4507603dcbe3030
] - build: fix bad upstream merge (Stephen Gallagher) #446421e0dcd1ee0
] - cli: add--watch
(Moshe Atlow) #4436696d131665e
] - cluster: use inspector utils (Moshe Atlow) #44592704836033a
] - crypto: update root certificates (Luigi Pinca) #454905a776d4a69
] - deps: update timezone to 2022f (Richard Lau) #456133b2b70d792
] - deps: upgrade npm to 8.19.3 (npm team) #453229fbc8b21db
] - deps: update corepack to 0.15.1 (Node.js GitHub Bot) #4533187e3d002ca
] - deps: update corepack to 0.15.0 (Node.js GitHub Bot) #45235e972ff7b13
] - deps: V8: backportbbd800c
(Chengzhong Wu) #44947af9d8217c0
] - deps: V8: cherry-pickb953542
(Chengzhong Wu) #4494738202d321b
] - deps: update undici to 5.12.0 (Node.js GitHub Bot) #452367c0da6adf9
] - deps: update archs files for OpenSSL-1.1.1s (RafaelGSS) #452741149ead6f7
] - deps: upgrade openssl sources to OpenSSL_1_1_1s (RafaelGSS) #45274cd54bce4f5
] - deps: update timezone (Node.js GitHub Bot) #449502901abe4f0
] - deps: update undici to 5.11.0 (Node.js GitHub Bot) #44929c80cf97033
] - deps: update corepack to 0.14.2 (Node.js GitHub Bot) #4477533707dcd03
] - dgram: add dgram send queue info (theanarkh) #44149c708d9bb94
] - doc: fix typo in parseArgs default value (Tobias Nießen) #450835a0efa05d2
] - node-api: handle no support for external buffers (Michael Dawson) #45181db31de634e
] - readline: refactor to avoid unsafe regex primordials (Antoine du Hamel) #43475fbc52e5729
] - src: disambiguate terms used to refer to builtins and addons (Joyee Cheung) #44135953072d3db
] - src: let http2 streams end after session close (Santiago Gimeno) #4515354608d8dc3
] - src: split property helpers from node::Environment (Chengzhong Wu) #440566733556783
] - test: add test to validate changelogs for releases (Richard Lau) #45325821d832cef
] - test: mark test-watch-mode* as flaky on all platforms (Pierrick Bouvier) #4504902a18eac69
] - test: fix test-runner-inspect (Moshe Atlow) #44620197df63f74
] - test: add a test to ensure the correctness of timezone upgrades (Darshan Sen) #4529942e9d8016a
] - test: fix textdecoder test for small-icu builds (Richard Lau) #452256d736a56d8
] - test: fix watch mode test flake (Moshe Atlow) #44739543d3d2bf3
] - test: deflake watch mode tests (Moshe Atlow) #4462197f6caf4eb
] - test: split watch mode inspector tests to sequential (Moshe Atlow) #44551499750ff7a
] - test: update list of known globals (Antoine du Hamel) #4525564d343af74
] - test_runner: support using--inspect
with--test
(Moshe Atlow) #4452099ee5e484d
] - test_runner: fixduration_ms
to be milliseconds (Moshe Atlow) #4445037e909251c
] - test_runner: support programmatically running--test
(Moshe Atlow) #442410ae5694f88
] - tools: update certdata.txt (Luigi Pinca) #45490891368cefd
] - tools: remove faulty early termination logic from update-timezone.mjs (Darshan Sen) #44870543493c242
] - tools: fix timezone update tool (Darshan Sen) #44870c77f660b75
] - tools: fixcreate-or-update-pull-request-action
hash on GHA (Antoine du Hamel) #4516658c30dd049
] - tools: update gr2m/create-or-update-pull-request-action (Luigi Pinca) #45022749a4b3e5e
] - tools: use Python 3.11 in GitHub Actions workflows (Luigi Pinca) #451916f541d99a5
] - tools: have test-asan use ubuntu-20.04 (Filip Skokan) #45581e7ed56f501
] - tools: make license-builder.sh comply with shellcheck 0.8.0 (Rich Trott) #41258cc819b4bf8
] - tools: fix typo inavoid-prototype-pollution
lint rule (Antoine du Hamel) #44446254358c81e
] - tools: refactoravoid-prototype-pollution
lint rule (Antoine du Hamel) #434768c73279ebb
] - util: add default value option to parsearg (Manuel Spigolon) #44631v16.18.1
: 2022-11-04, Version 16.18.1 'Gallium' (LTS), @BethGriggsCompare Source
This is a security release.
Notable changes
The following CVEs are fixed in this release:
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.
Commits
9ffddd7098
] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354v16.18.0
: 2022-10-12, Version 16.18.0 'Gallium' (LTS), @juanarbolCompare Source
Notable changes
1cc050eaa8
] - (SEMVER-MINOR) assert: addgetCalls
andreset
to callTracker (Moshe Atlow) #44191e5c9975f11
] - (SEMVER-MINOR) crypto: allow zero-length secret KeyObject (Filip Skokan) #44201317cd051ce
] - (SEMVER-MINOR) crypto: allow zero-length IKM in HKDF and in webcrypto PBKDF2 (Filip Skokan) #44201f80bdc5ef3
] - (SEMVER-MINOR) doc: deprecate modp1, modp2, and modp5 groups (Tobias Nießen) #445888398e98b1b
] - (SEMVER-MINOR) http: make idle http parser count configurable (theanarkh) #439742cd2f56962
] - (SEMVER-MINOR) http: throw error on content-length mismatch (sidwebworks) #443786be761e8a9
] - (SEMVER-MINOR) lib: add diagnostics channel for process and worker (theanarkh) #440451400796cef
] - (SEMVER-MINOR) net,tls: pass a valid socket ontlsClientError
(Daeyeon Jeong) #44021092239a7f1
] - (SEMVER-MINOR) net: add local family (theanarkh) #43975381e11e18e
] - (SEMVER-MINOR) report: expose report public native apis (Chengzhong Wu) #442552ba547aa5b
] - (SEMVER-MINOR) src: expose environment RequestInterrupt api (Chengzhong Wu) #443626ed3367155
] - (SEMVER-MINOR) stream: addReadableByteStream.tee()
(Daeyeon Jeong) #445050fbedac6ce
] - (SEMVER-MINOR) test_runner: add before/after/each hooks (Moshe Atlow) #4373070563b53c5
] - (SEMVER-MINOR) util: addmaxArrayLength
option to Set and Map (Kohei Ueno) #43576Commits
1cc050eaa8
] - (SEMVER-MINOR) assert: addgetCalls
andreset
to callTracker (Moshe Atlow) #441912e87cdd1e6
] - benchmark: fix startup benchmark (Evan Lucas) #4472729c0f9ef30
] - benchmark: add stream destroy benchmark (SindreXie) #44533f01bb58c1e
] - bootstrap: update comments in bootstrap/node.js (Joyee Cheung) #44726db151e182f
] - bootstrap: stop delaying instantiation of maps in per-context scripts (Darshan Sen) #42934f700074c57
] - buffer: fixatob
input validation (Austin Kelleher) #42662e10095a759
] - build: update timezone-update.yml (Alex) #44717bec2ede687
] - build: remove redundant entry in crypto (Jiawen Geng) #446047b3a2c3353
] - build: rewritten the Android build system (BuShe Pie) #44207e96bb14942
] - build: add --libdir flag to configure (Stephen Gallagher) #443612a4491b34d
] - build: added NINJA env to customize ninja binary (Jeff Dickey) #44293aaad7a64b4
] - build: enable pointer authentication for branch protection on arm64 (Jeremiah Gowdy) #43200041bb54143
] - build: add workflow to label flaky-test platform (Rafael Gonzaga) #4404258d85c1109
] - build: optimized and fixed building configuration to Android (BuShe) #440165cd8b7bc8b
] - build: allow test-internet on forks if not scheduled (Rich Trott) #440739698be9347
] - build: skip test-internet run on forks (Rich Trott) #4405425e6f48e4a
] - child_process: remove lookup of undefined property (Colin Ihrig) #44766a3bdd07321
] - cluster: fix cluster rr distribute error (theanarkh) #44202317cd051ce
] - (SEMVER-MINOR) crypto: allow zero-length IKM in HKDF and in webcrypto PBKDF2 (Filip Skokan) #44201e5c9975f11
] - (SEMVER-MINOR) crypto: allow zero-length secret KeyObject (Filip Skokan) #442017e705d8d74
] - crypto: fix webcrypto deriveBits validations (Filip Skokan) #441737ad2a268b9
] - crypto: fix webcrypto EC key namedCurve validation errors (Filip Skokan) #441722c938d73ff
] - crypto: fix webcrypto operation errors to be OperationError (Filip Skokan) #44171a6e2cb40a6
] - crypto: fix webcrypto generateKey() AES key length validation error (Filip Skokan) #441707e07cce24b
] - crypto: use EVP_PKEY_CTX_set_dsa_paramgen_q_bits when available (David Benjamin) #445611fc6394741
] - crypto: restrict PBKDF2 args to signed int (Tobias Nießen) #445759a52ee7577
] - crypto: handle invalid prepareAsymmetricKey JWK inputs (Filip Skokan) #444757100baee40
] - crypto: use actual option name in error message (Tobias Nießen) #44455579e066c3a
] - crypto: add digest name to INVALID_DIGEST errors (Tobias Nießen) #44468566d80f622
] - crypto: improve RSA-PSS digest error messages (Tobias Nießen) #44307f717c1e06a
] - debugger: decrease timeout used to wait for the port to be free (Joyee Cheung) #443590f2fcaf771
] - deps: update to ngtcp2 0.8.1 and nghttp3 0.7.0 (Tobias Nießen) #446221a8aada69d
] - deps: update corepack to 0.14.1 (Node.js GitHub Bot) #44704e4f18b4f34
] - **dConfiguration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.