fix(deps): update all non-major dependencies

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@grpc/grpc-js (source)	1.11.3 -> 1.12.4					dependencies	minor
@types/node (source)	16.18.109 -> 16.18.122					devDependencies	patch
@vercel/ncc	0.38.2 -> 0.38.3					devDependencies	patch
axios (source)	1.7.7 -> 1.7.9					dependencies	patch
express (source)	4.21.0 -> 4.21.2					dependencies	patch
google-auth-library	9.14.1 -> 9.15.0					dependencies	minor
nock	13.5.5 -> 13.5.6					devDependencies	patch
otel/opentelemetry-collector-contrib	0.110.0 -> 0.115.1						minor

---

Release Notes

grpc/grpc-node (@​grpc/grpc-js)

v1.12.4: @​grpc/grpc-js 1.12.4

Compare Source

• Prioritize reporting UNAVAILABLE status when handing connection drops (#​2862)

v1.12.3: @​grpc/grpc-js 1.12.3

Compare Source

• Report UNAVAILABLE if possible when handling connection drops (#​2861)

v1.12.2: @​grpc/grpc-js 1.12.2

Compare Source

• Use util.promisify instead of fs/promises for Node 12 compatibility (#​2838)

v1.12.1: @​grpc/grpc-js 1.12.1

Compare Source

• Port bugfixes from 1.11.x into 1.12.x (#​2836)

v1.12.0: @​grpc/grpc-js 1.12.0

Compare Source

Changelog

• Provide the method_name for the CallCredentials callback generateMetadata (#​2814 contributed by @​becoded)
• Add an optional rejectUnauthorized field to the VerifyOptions interface, which can be passed as an argument to credentials.createSsl and createFromSecureContext (#​2812 contributed by @​vinothsa4891)

Experimental API changes

Added:

• CaCertificateUpdate
• CaCertificateUpdateListener
• IdentityCertificateUpdate
• IdentityCertificateUpdateListener
• CertificateProvider
• FileWatcherCertificateProvider
• FileWatcherCertificateProviderConfig
• createCertificateProviderChannelCredentials
• createCertificateProviderServerCredentials

Modified:

• LoadBalancer: The constructor now takes an additional argument of type ChannelCredentials.
• ChannelControlHelper#createSubchannel: Now takes an additional argument of type ChannelCredentials | null. This should be passed along if overriding this function.
• LeafLoadBalancer: The constructor now takes an additional argument of type ChannelCredentials.

vercel/ncc (@​vercel/ncc)

v0.38.3

Compare Source

Bug Fixes

• add missing --asset-builds to cli help message (#​1228) (84f8c52)

axios/axios (axios)

v1.7.9

Compare Source

Reverts

• Revert "fix(types): export CJS types from ESM (#​6218)" (#​6729) (c44d2f2), closes #​6218 #​6729

Contributors to this release

• Jay

v1.7.8

Compare Source

Bug Fixes

• allow passing a callback as paramsSerializer to buildURL (#​6680) (eac4619)
• core: fixed config merging bug (#​6668) (5d99fe4)
• fixed width form to not shrink after 'Send Request' button is clicked (#​6644) (7ccd5fd)
• http: add support for File objects as payload in http adapter (#​6588) (#​6605) (6841d8d)
• http: fixed proxy-from-env module import (#​5222) (12b3295)
• http: use globalThis.TextEncoder when available (#​6634) (df956d1)
• ios11 breaks when build (#​6608) (7638952)
• types: add missing types for mergeConfig function (#​6590) (00de614)
• types: export CJS types from ESM (#​6218) (c71811b)
• updated stream aborted error message to be more clear (#​6615) (cc3217a)
• use URL API instead of DOM to fix a potential vulnerability warning; (#​6714) (0a8d6e1)

Contributors to this release

• Remco Haszing
• Jay
• Aayush Yadav
• Dmitriy Mozgovoy
• Ell Bradshaw
• Amit Saini
• Tommaso Paulon
• Akki
• Sampo Silvennoinen
• Kasper Isager Dalsgarð
• Christian Clauss
• Pavan Welihinda
• Taylor Flatt
• Kenzo Wada
• Ngole Lawson
• Haven
• Shrivali Dutt
• Henco Appel

expressjs/express (express)

v4.21.2

Compare Source

v4.21.1

Compare Source

What's Changed

• Backport a fix for CVE-2024-47764 to the 4.x branch by @​joshbuker in https://github.com/expressjs/express/pull/6029
• Release: 4.21.1 by @​UlisesGascon in https://github.com/expressjs/express/pull/6031

Full Changelog: expressjs/express@4.21.0...4.21.1

googleapis/google-auth-library-nodejs (google-auth-library)

v9.15.0

Compare Source

Features

• Impersonated Universe Domain Support (#​1875) (902bf8b)

v9.14.2

Compare Source

Bug Fixes

• Disable Universe Domain Check (#​1878) (8adb44c)

nock/nock (nock)

v13.5.6

Compare Source

Bug Fixes

• types: return type of BackOptions.afterRecord (#​2782) (fc90bd3)

open-telemetry/opentelemetry-collector-releases (otel/opentelemetry-collector-contrib)

v0.115.1

Compare Source

Check the v0.115.1 contrib changelog and the v0.115.1 core changelog for changelogs on specific components.

Changelog

• a61f843 Revert "test: run linux package tests nightly against latest contrib main (#​666)" (#​761)

v0.114.0

Compare Source

Check the v0.114.0 contrib changelog and the v0.114.0 core changelog for changelogs on specific components.

Changelog

• dc1bada prepare v0.114.0 release (#​740)
• 1705981 [chore] fix renovate regex config (#​733)
• ee3ebeb chore(deps): update github-actions deps (#​732)
• 9c3ca38 Bump github.com/goreleaser/goreleaser-pro/v2 from 2.3.2-pro to 2.4.1-pro (#​724)
• 26c3dee Update GoReleaser templating to support all collector distros (#​708)
• 067599e Set up default renovate config with regex to handle goreleaser-pro updates (#​728)

v0.113.0

Compare Source

Check the v0.113.0 contrib changelog and the v0.113.0 core changelog for changelogs on specific components.

Changelog

• 703f46e Prepare v0.113.0 (#​729)
• ad9097b remove go flag from distribution build script (#​727)
• 2df84d1 Add ntpreceiver to contrib (#​723)
• 11530fd Remove otel-version usage, removed from builder (#​722)
• 4201470 revert removal of googlecloudspanner receiver (#​721)
• 3ba7931 chore(deps): update dependency ubuntu to v24 (#​719)
• 9a506ce chore(deps): update alpine docker tag to v3.20 (#​718)
• 7871272 chore: Configure Renovate (#​709)
• 6ebf4c2 Bump actions/checkout from 4.2.1 to 4.2.2 (#​711)
• d60d8cc Bump anchore/sbom-action from 0.17.4 to 0.17.6 (#​717)
• 3853563 Bump actions/setup-go from 5.0.2 to 5.1.0 (#​712)
• c106f40 Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 (#​713)
• e2e1ec2 Add AWS S3 Receiver to contrib distribution (#​698)
• d69f1bf Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 (#​714)

v0.112.0

Compare Source

Check the v0.112.0 contrib changelog and the v0.112.0 core changelog for changelogs on specific components.

Changelog

• e4e8f94 [chore] Prepare v0.112.0 release (#​705)
• 240fd27 Add Google Cloud Monitoring receiver to contrib distribution (#​699)
• ba44d42 Update manifest with new alpha components (#​704)
• 8bef0bf fix: add missing http ports to dockerfile expose statements (#​702)
• b07732c Bump anchore/sbom-action from 0.17.3 to 0.17.4 (#​700)
• 226dd5d [enhancement] Add OCB docker image release (#​671)
• 38ce901 Bump actions/upload-artifact from 4.4.0 to 4.4.3 (#​695)
• 60b1d38 Bump anchore/sbom-action from 0.17.2 to 0.17.3 (#​696)
• 13edbb7 Bump actions/checkout from 4.2.0 to 4.2.1 (#​694)
• 3b59b8c Added a step to tidy go.mod files (#​687)
• d745106 [chore] Update goreleaser used in CI to v2.3.2 (#​689)
• 1d10b81 Bump github.com/goreleaser/goreleaser-pro/v2 from 2.2.0-pro to 2.3.2-pro (#​672)
• 7a0e2c0 Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 (#​690)
• adc2e29 Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 (#​691)
• 7c1c3a9 remove unmaintained component (#​686)
• 16ccd56 [chore] refactor(contrib): remove replace directive for go-ieproxy package (#​678)

v0.111.0

Compare Source

⚠️ Starting on this release, the logging exporter is no longer available on the core and contrib distros. See open-telemetry/opentelemetry-collector#11337 for instructions on how to migrate to the debug exporter.

🆕 This release adds a new OTLP-only distro. Feel free to leave us feedback on this new distro on the opentelemetry-collector-releases issue tracker.

Check the v0.111.0 contrib changelog and the v0.111.0 core changelog for changelogs on specific components.

Changelog

• 38a2931 Prepare for v0.111.0 release (#​688)
• edc8e94 [chore] refactor(contrib): remove unused replace directive for go-connections package (#​677)
• 545bd7c Remove the deprecated logging exporter (#​682)
• f754260 Bump actions/checkout from 4.1.7 to 4.2.0 (#​680)
• 24c11af add appropriate version tag in cmd/builder goreleaser config (#​665)
• 1e1b2fa [chore] refactor(contrib): remove unused replace directive for gnostic package (#​675)
• 4800eb6 Add minimal OTLP-only distribution (#​663)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun