Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update all non-major dependencies #822

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 10, 2023

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@logtail/pino (source) ^0.4.22 -> ^0.5.0 age adoption passing confidence devDependencies minor
@yornaath/batshit ^0.9.0 -> ^0.10.0 age adoption passing confidence dependencies minor
actions/setup-node v4.1.0 -> v4.2.0 age adoption passing confidence action minor
actions/upload-artifact v4.4.3 -> v4.6.0 age adoption passing confidence action minor
fast-xml-parser 4.2.5 -> 4.5.1 age adoption passing confidence resolutions minor
foundry-rs/foundry-toolchain v1.2.0 -> v1.3.1 age adoption passing confidence action minor
getsentry/action-release v1.9.0 -> v1.10.2 age adoption passing confidence action minor
github/codeql-action v2.22.0 -> v2.28.1 age adoption passing confidence action minor
ipfs/go-ipfs v0.22.0 -> v0.33.1 age adoption passing confidence minor
node (source) 18.19.0 -> 18.20.6 age adoption passing confidence volta minor
node-fetch 2.6.7 -> 2.7.0 age adoption passing confidence resolutions minor
ossf/scorecard-action v2.3.0 -> v2.4.0 age adoption passing confidence action minor
step-security/harden-runner v2.10.3 -> v2.10.4 age adoption passing confidence action patch
vanilla-jsoneditor ^0.21.6 -> ^0.23.0 age adoption passing confidence dependencies minor
vite-plugin-node-polyfills ^0.21.0 -> ^0.23.0 age adoption passing confidence devDependencies minor
vite-plugin-node-polyfills ^0.22.0 -> ^0.23.0 age adoption passing confidence devDependencies minor
yarn (source) 4.5.1 -> 4.6.0 age adoption passing confidence volta minor

Release Notes

logtail/logtail-js (@​logtail/pino)

v0.5.2

Compare Source

What's Changed

Full Changelog: logtail/logtail-js@v0.5.1...v0.5.2

v0.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: logtail/logtail-js@v0.4.23...v0.5.0

yornaath/batshit (@​yornaath/batshit)

v0.10.1

Compare Source

v0.10.0

Compare Source

actions/setup-node (actions/setup-node)

v4.2.0

Compare Source

actions/upload-artifact (actions/upload-artifact)

v4.6.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

v4.5.1

Compare Source

v4.5.0

Compare Source

v4.4.1

Compare Source

v4.4.0

Compare Source

v4.3.6

Compare Source

v4.3.5

Compare Source

v4.3.4

Compare Source

v4.3.3

Compare Source

v4.3.2

Compare Source

v4.3.1

Compare Source

v4.3.0

Compare Source

v4.2.7

Compare Source

v4.2.6

Compare Source

foundry-rs/foundry-toolchain (foundry-rs/foundry-toolchain)

v1.3.1

Compare Source

What's Changed

Full Changelog: foundry-rs/foundry-toolchain@v1.3.0...v1.3.1

v1.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: foundry-rs/foundry-toolchain@v1.2.0...v1.3.0

getsentry/action-release (getsentry/action-release)

v1.10.2: 1.10.2

Compare Source

  • fix(action): Ensure working directory always starts out at repo root (#​250)
  • fix(action): Use npm instead of yarn to install sentry-cli (#​251)

v1.10.1: 1.10.1

Compare Source

This release contains changes concerning maintainers of the repo and has no user-facing changes.

v1.10.0

Compare Source

  • feat(action): Support macos and windows runners
    We now publish a composite action that runs on all runners. Actions can now be properly versioned, allowing pinning versions from here on out.
github/codeql-action (github/codeql-action)

v2.28.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

This is the last planned release of the v2. To continue getting updates for the CodeQL Action, please switch to v3.

2.28.1 - 10 Jan 2025
  • CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #​2677
  • Update default CodeQL bundle version to 2.20.1. #​2678

See the full CHANGELOG.md for more information.

v2.28.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

This is the last planned release of the v2. To continue getting updates for the CodeQL Action, please switch to v3.

2.28.0 - 20 Dec 2024

  • Bump the minimum CodeQL bundle version to 2.15.5. #​2655
  • Don't fail in the unusual case that a file is on the search path. #​2660.

See the full CHANGELOG.md for more information.

v2.27.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v2.27.8

Compare Source

v2.27.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.7 - 10 Dec 2024
  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #​2631
  • Update default CodeQL bundle version to 2.20.0. #​2636

See the full CHANGELOG.md for more information.

v2.27.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.6 - 03 Dec 2024
  • Update default CodeQL bundle version to 2.19.4. #​2626

See the full CHANGELOG.md for more information.

v2.27.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.5 - 19 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v2.27.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v2.27.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v2.27.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.2 - 12 Nov 2024

  • Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #​2590

See the full CHANGELOG.md for more information.

v2.27.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.1 - 08 Nov 2024
  • The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #​2573
  • Update default CodeQL bundle version to 2.19.3. #​2576

See the full CHANGELOG.md for more information.

v2.27.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.0 - 22 Oct 2024

  • Bump the minimum CodeQL bundle version to 2.14.6. #​2549
  • Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #​2557
  • Update default CodeQL bundle version to 2.19.2. #​2552

See the full CHANGELOG.md for more information.

v2.26.13

Compare Source

v2.26.12

Compare Source

v2.26.11

Compare Source

v2.26.10

Compare Source

v2.26.9

Compare Source

v2.26.8

Compare Source

v2.26.7

Compare Source

v2.26.6

Compare Source

v2.26.5

Compare Source

v2.26.4

Compare Source

v2.26.3

Compare Source

v2.26.2

Compare Source

v2.26.1

Compare Source

v2.26.0

Compare Source

v2.25.15

Compare Source

v2.25.14

Compare Source

v2.25.13

Compare Source

v2.25.12

Compare Source

v2.25.11

Compare Source

v2.25.10

Compare Source

v2.25.9

Compare Source

v2.25.8

Compare Source

v2.25.7

Compare Source

v2.25.6

Compare Source

v2.25.5

Compare Source

v2.25.4

Compare Source

v2.25.3

Compare Source

v2.25.2

Compare Source

v2.25.1

Compare Source

v2.25.0

Compare Source

v2.24.11

Compare Source

v2.24.10

Compare Source

v2.24.9

Compare Source

v2.24.8

Compare Source

v2.24.7

Compare Source

v2.24.6

Compare Source

v2.24.5

Compare Source

v2.24.4

Compare Source

v2.24.3

Compare Source

v2.24.2

Compare Source

v2.24.1

Compare Source

v2.24.0

Compare Source

v2.23.2

Compare Source

v2.23.1

Compare Source

v2.23.0

Compare Source

v2.22.12

Compare Source

v2.22.11

Compare Source

v2.22.10

Compare Source

v2.22.9

Compare Source

v2.22.8

Compare Source

v2.22.7

Compare Source

v2.22.6

Compare Source

v2.22.5

Compare Source

v2.22.4

Compare Source

v2.22.3

Compare Source

v2.22.2

Compare Source

v2.22.1

Compare Source

nodejs/node (node)

v18.20.6: 2025-01-21, Version 18.20.6 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
  • CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

  • CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits

v18.20.5: 2024-11-12, Version 18.20.5 'Hydrogen' (LTS), @​aduh95

Compare Source

Notable Changes
  • [ac37e554a5] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #​55333
Commits

Configuration

📅 Schedule: Branch creation - "* 0-3 * * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label May 10, 2023
@netlify
Copy link

netlify bot commented May 10, 2023

Deploy Preview for kleros-v2-testnet ready!

Name Link
🔨 Latest commit 0c12c6e
🔍 Latest deploy log https://app.netlify.com/sites/kleros-v2-testnet/deploys/67a647fa3ebd360008febf0b
😎 Deploy Preview https://deploy-preview-822--kleros-v2-testnet.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from a021c54 to a5febbd Compare May 15, 2023 06:23
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from a5febbd to 109147f Compare May 20, 2023 11:17
@netlify
Copy link

netlify bot commented May 20, 2023

Deploy Preview for kleros-v2-contracts ready!

Name Link
🔨 Latest commit 00fdc00
🔍 Latest deploy log https://app.netlify.com/sites/kleros-v2-contracts/deploys/64f1c287fc2b300008d684b4
😎 Deploy Preview https://deploy-preview-822--kleros-v2-contracts.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 7fc38af to d1075ef Compare May 29, 2023 08:19
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 1b569ef to 2711ffa Compare June 8, 2023 08:56
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 12844ea to bc7f407 Compare January 27, 2025 23:41
@renovate renovate bot requested review from a team and jaybuidl as code owners January 27, 2025 23:41
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 2606100 to f373994 Compare February 3, 2025 21:16
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 6c0f677 to ee0bf6a Compare February 6, 2025 16:31
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from ee0bf6a to 0c12c6e Compare February 7, 2025 17:50
Copy link

codeclimate bot commented Feb 7, 2025

Code Climate has analyzed commit 0c12c6e and detected 0 issues on this pull request.

View more on Code Climate.

Copy link

sonarqubecloud bot commented Feb 7, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant