📦 Update subpackage devDependencies #40106
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.3.3
->v4.3.4
v4.3.4
->v4.3.6
9.6.0
->9.8.0
v3.25.11
->v3.25.15
5.1.0
->5.2.0
6.4.3
->6.4.4
v2.3.3
->v2.4.0
4.18.1
->4.20.0
4.0.0
->4.0.0
7.6.2
->7.6.3
v2.8.1
->v2.9.1
See all other Renovate PRs on the Dependency Dashboard
How to resolve breaking changes
This PR may introduce breaking changes that require manual intervention. In such cases, you will need to check out this branch, fix the cause of the breakage, and commit the fix to ensure a green CI build. To check out and update this PR, follow the steps below:
This is a special PR that replaces
rollup-plugin-json
with the community suggested minimal stable replacement version.Release Notes
actions/dependency-review-action (actions/dependency-review-action)
v4.3.4
Compare Source
What's Changed
Full Changelog: actions/dependency-review-action@v4.3.3...v4.3.4
actions/upload-artifact (actions/upload-artifact)
v4.3.6
Compare Source
v4.3.5
Compare Source
eslint/eslint (eslint)
v9.8.0
Compare Source
v9.7.0
Compare Source
Features
7bd9839
feat: add support for es2025 duplicate named capturing groups (#18630) (Yosuke Ota)1381394
feat: addregex
option inno-restricted-imports
(#18622) (Nitin Kumar)Bug Fixes
14e9f81
fix: destructuring in catch clause inno-unused-vars
(#18636) (Francesco Trotta)Documentation
9f416db
docs: Add Powered by Algolia label to the search. (#18633) (Amaresh S M)c8d26cb
docs: Open JS Foundation -> OpenJS Foundation (#18649) (Milos Djermanovic)6e79ac7
docs:loadESLint
does not support optioncwd
(#18641) (Francesco Trotta)Chores
793b718
chore: upgrade @eslint/js@9.7.0 (#18680) (Francesco Trotta)7ed6f9a
chore: package.json update for @eslint/js release (Jenkins)7bcda76
refactor: Add type references (#18652) (Nicholas C. Zakas)51bf57c
chore: add tech sponsors through actions (#18624) (Strek)6320732
refactor: don't useparent
property inNodeEventGenerator
(#18653) (Milos Djermanovic)9e6d640
refactor: move "Parsing error" prefix adding to Linter (#18650) (Milos Djermanovic)github/codeql-action (github/codeql-action)
v3.25.15
Compare Source
v3.25.14
Compare Source
v3.25.13
Compare Source
v3.25.12
Compare Source
jasmine/jasmine-npm (jasmine)
v5.2.0
Compare Source
Please see the release notes.
karma-runner/karma (karma)
v6.4.4
Compare Source
ossf/scorecard-action (ossf/scorecard-action)
v2.4.0
Compare Source
What's Changed
This update bumps the Scorecard version to the v5 release. For a complete list of changes, please refer to the v5.0.0 release notes. Of special note to Scorecard Action is the Maintainer Annotation feature, which can be used to suppress some Code Scanning false positives. Alerts will not be generated for any Scorecard Check with an annotation.
Documentation
New Contributors
Full Changelog: ossf/scorecard-action@v2.3.3...v2.4.0
rollup/rollup (rollup)
v4.20.0
Compare Source
2024-08-03
Features
Pull Requests
v4.19.2
Compare Source
2024-08-01
Bug Fixes
Pull Requests
v4.19.1
Compare Source
2024-07-27
Bug Fixes
Pull Requests
v4.19.0
Compare Source
2024-07-20
Features
Bug Fixes
Pull Requests
npm/node-semver (semver)
v7.6.3
Compare Source
Bug Fixes
73a3d79
#726 optimize Range parsing and formatting (#726) (@jviide)Documentation
2975ece
#719 fix extra backtick typo (#719) (@stdavis)step-security/harden-runner (step-security/harden-runner)
v2.9.1
Compare Source
What's Changed
Release v2.9.1 by @h0x0er and @varunsh-coder in #440
This release includes two changes:
Full Changelog: step-security/harden-runner@v2...v2.9.1
v2.9.0
Compare Source
What's Changed
Release v2.9.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/435
This release includes:
For the enterprise tier, this change helps overcome size constraints, allowing for more reliable telemetry uploads from the Harden-Runner agent to the StepSecurity backend API. No configuration change is needed to enable this.
The Harden-Runner agent now uses a per-job key to authenticate to the StepSecurity backend API to submit telemetry. This change prevents the submission of telemetry data anonymously for a given job, improving the integrity of the data collection process. No configuration change is needed to enable this.
A Table of Contents has been added to the README file to improve navigation. This makes it easier for users to find the information they need quickly.
Updated the
braces
npm package dependency to a non-vulnerable version. The vulnerability inbraces
did not affect the Harden Runner ActionFull Changelog: step-security/harden-runner@v2...v2.9.0
Configuration
📅 Schedule: Branch creation - "after 12am every weekday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Never, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.