Skip to content

fix(deps): update all dependencies #192

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): update all dependencies #192

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 29, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@typescript-eslint/eslint-plugin (source) 8.48.0 -> 8.49.0 age adoption passing confidence devDependencies minor
@typescript-eslint/parser (source) 8.48.0 -> 8.49.0 age adoption passing confidence devDependencies minor
actions/cache v4 -> v5 age adoption passing confidence action major
actions/checkout v6.0.0 -> v6.0.1 age adoption passing confidence action patch
actions/setup-node v6.0.0 -> v6.1.0 age adoption passing confidence action minor
esbuild 0.27.0 -> 0.27.1 age adoption passing confidence devDependencies patch
eslint (source) 9.39.1 -> 9.39.2 age adoption passing confidence devDependencies patch
github.com/evanw/esbuild v0.27.0 -> v0.27.1 age adoption passing confidence require patch
github.com/golangci/golangci-lint/v2 v2.6.2 -> v2.7.2 age adoption passing confidence require minor
github.com/libp2p/go-libp2p v0.45.0 -> v0.46.0 age adoption passing confidence require minor
github/codeql-action v4.31.5 -> v4.31.8 age adoption passing confidence action patch
golang.org/x/tools v0.39.0 -> v0.40.0 age adoption passing confidence require minor
google.golang.org/protobuf v1.36.10 -> v1.36.11 age adoption passing confidence require patch
prettier (source) 3.7.2 -> 3.7.4 age adoption passing confidence devDependencies patch
tsx (source) 4.20.6 -> 4.21.0 age adoption passing confidence devDependencies minor
vitest (source) 4.0.14 -> 4.0.15 age adoption passing confidence devDependencies patch

Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.49.0

Compare Source

🚀 Features
  • eslint-plugin: use Intl.Segmenter instead of graphemer (#​11804)
🩹 Fixes
  • deps: update dependency prettier to v3.7.2 (#​11820)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.48.1

Compare Source

🩹 Fixes
  • eslint-plugin: [restrict-template-expressions] check base types in allow list (#​11764, #​11759)
  • eslint-plugin: honor ignored base types on generic classes (#​11767)
  • eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#​11769)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.49.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.48.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

actions/cache (actions/cache)

v5

Compare Source

actions/checkout (actions/checkout)

v6.0.1

Compare Source

actions/setup-node (actions/setup-node)

v6.1.0

Compare Source

What's Changed

Enhancement:
Dependency updates:
Documentation update:

Full Changelog: actions/setup-node@v6...v6.1.0

evanw/esbuild (esbuild)

v0.27.1

Compare Source

  • Fix bundler bug with var nested inside if (#​4348)

    This release fixes a bug with the bundler that happens when importing an ES module using require (which causes it to be wrapped) and there's a top-level var inside an if statement without being wrapped in a { ... } block (and a few other conditions). The bundling transform needed to hoist these var declarations outside of the lazy ES module wrapper for correctness. See the issue for details.

  • Fix minifier bug with for inside try inside label (#​4351)

    This fixes an old regression from version v0.21.4. Some code was introduced to move the label inside the try statement to address a problem with transforming labeled for await loops to avoid the await (the transformation involves converting the for await loop into a for loop and wrapping it in a try statement). However, it introduces problems for cross-compiled JVM code that uses all three of these features heavily. This release restricts this transform to only apply to for loops that esbuild itself generates internally as part of the for await transform. Here is an example of some affected code:

    // Original code
d: {
  e: {
    try {
      while (1) { break d }
    } catch { break e; }
  }
}

// Old output (with --minify)
a:try{e:for(;;)break a}catch{break e}

// New output (with --minify)
a:e:try{for(;;)break a}catch{break e}

  • Inline IIFEs containing a single expression (#​4354)

    Previously inlining of IIFEs (immediately-invoked function expressions) only worked if the body contained a single return statement. Now it should also work if the body contains a single expression statement instead:

    // Original code
const foo = () => {
  const cb = () => {
    console.log(x())
  }
  return cb()
}

// Old output (with --minify)
const foo=()=>(()=>{console.log(x())})();

// New output (with --minify)
const foo=()=>{console.log(x())};

  • The minifier now strips empty finally clauses (#​4353)

    This improvement means that finally clauses containing dead code can potentially cause the associated try statement to be removed from the output entirely in minified builds:

    // Original code
function foo(callback) {
  if (DEBUG) stack.push(callback.name);
  try {
    callback();
  } finally {
    if (DEBUG) stack.pop();
  }
}

// Old output (with --minify --define:DEBUG=false)
function foo(a){try{a()}finally{}}

// New output (with --minify --define:DEBUG=false)
function foo(a){a()}

  • Allow tree-shaking of the Symbol constructor

    With this release, calling Symbol is now considered to be side-effect free when the argument is known to be a primitive value. This means esbuild can now tree-shake module-level symbol variables:

    // Original code
const a = Symbol('foo')
const b = Symbol(bar)

// Old output (with --tree-shaking=true)
const a = Symbol("foo");
const b = Symbol(bar);

// New output (with --tree-shaking=true)
const b = Symbol(bar);
eslint/eslint (eslint)

v9.39.2

Compare Source

golangci/golangci-lint (github.com/golangci/golangci-lint/v2)

v2.7.2

Compare Source

Released on 2025-12-07

  1. Linter bug fixes

v2.7.1

Compare Source

Released on 2025-12-04

  1. Linter bug fixes
    • modernize: disable stringscut analyzer

v2.7.0

Compare Source

  1. Bug fixes
    • fix: clone args used by custom command
  2. Linters new features or changes
    • no-sprintf-host-port: from 0.2.0 to 0.3.1 (ignore string literals without a colon)
    • unqueryvet: from 1.2.1 to 1.3.0 (handles const and var declarations)
    • revive: from 1.12.0 to 1.13.0 (new option: enable-default-rules, new rules: forbidden-call-in-wg-go, unnecessary-if, inefficient-map-lookup)
    • modernize: from 0.38.0 to 0.39.0 (new analyzers: plusbuild, stringscut)
  3. Linters bug fixes
    • perfsprint: from 0.10.0 to 0.10.1
    • wrapcheck: from 2.11.0 to 2.12.0
    • godoc-lint: from 0.10.1 to 0.10.2
  4. Misc.
    • Add some flags to the custom command
  5. Documentation
    • docs: split changelog v1 and v2
libp2p/go-libp2p (github.com/libp2p/go-libp2p)

v0.46.0

Compare Source

What's Changed

Full Changelog: libp2p/go-libp2p@v0.45.0...v0.46.0

github/codeql-action (github/codeql-action)

v4.31.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025
  • Update default CodeQL bundle version to 2.23.8. #​3354

See the full CHANGELOG.md for more information.

v4.31.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025
  • Update default CodeQL bundle version to 2.23.7. #​3343

See the full CHANGELOG.md for more information.

v4.31.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.11

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.10...v1.36.11

User-visible changes:
CL/726780: encoding/prototext: Support URL chars in type URLs in text-format.

Bug fixes:
CL/728680: internal/impl: check recursion limit in lazy decoding validation
CL/711015: reflect/protodesc: fix handling of import options in dynamic builds

Maintenance:
CL/728681: reflect/protodesc: add support for edition unstable
CL/727960: all: add EDITION_UNSTABLE support
CL/727940: types: regenerate using latest protobuf v33.2 release
CL/727140: internal/testprotos/lazy: convert .proto files to editions
CL/723440: cmd/protoc-gen-go: add missing annotations for few generated protobuf symbols.
CL/720980: internal/filedesc: remove duplicative Message.unmarshalOptions
CL/716360: internal/encoding/tag: use proto3 defaults if proto3
CL/716520: proto: un-flake TestHasExtensionNoAlloc
CL/713342: compiler/protogen: properly filter option dependencies in go-protobuf plugin.
CL/711200: proto: add test for oneofs containing messages with required fields
CL/710855: proto: add explicit test for a non-nil but empty byte slice

prettier/prettier (prettier)

v3.7.4

Compare Source

diff

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)
<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>
TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)
// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;
TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)
// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

v3.7.3

Compare Source

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#​18375 by @​fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

privatenumber/tsx (tsx)

v4.21.0

Compare Source

vitest-dev/vitest (vitest)

v4.0.15

Compare Source

   🚀 Experimental Features
   🐞 Bug Fixes
    View changes on GitHub

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security
Copy link

socket-security bot commented Nov 29, 2025 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​@​typescript-eslint/​parser@​8.48.0 ⏵ 8.49.01001007198100
Updatednpm/​esbuild@​0.27.0 ⏵ 0.27.1911007392100
Updatedgolang/​github.com/​golangci/​golangci-lint/​v2@​v2.6.2 ⏵ v2.7.274 +110010010070
Updatedgolang/​golang.org/​x/​tools@​v0.39.0 ⏵ v0.40.075 +1100100100100
Updatedgolang/​google.golang.org/​protobuf@​v1.36.10 ⏵ v1.36.1175 +1100100100100
Updatednpm/​vitest@​4.0.14 ⏵ 4.0.1597 -110079 +198 -1100
Updatednpm/​@​typescript-eslint/​eslint-plugin@​8.48.0 ⏵ 8.49.099 +11008098100
Updatednpm/​tsx@​4.20.6 ⏵ 4.21.01001008189100
Updatedgolang/​github.com/​evanw/​esbuild@​v0.27.0 ⏵ v0.27.184 +1100100100100
Updatednpm/​prettier@​3.7.2 ⏵ 3.7.490 +110097 +197100
Updatednpm/​eslint@​9.39.1 ⏵ 9.39.294 -310010097 +1100

View full report

@renovate renovate bot changed the title chore(deps): update dependency prettier to v3.7.3 chore(deps): update all dependencies Nov 30, 2025
@renovate renovate bot force-pushed the renovate/all branch 8 times, most recently from 516d6d5 to 7be4a0f Compare December 3, 2025 21:31
@renovate renovate bot changed the title chore(deps): update all dependencies fix(deps): update all dependencies Dec 3, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Dec 3, 2025 •
edited
Loading

ℹ Artifact update notice

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 16 additional dependencies were updated

Details:

Package Change
github.com/MirrexOne/unqueryvet v1.2.1 -> v1.3.0
github.com/catenacyber/perfsprint v0.10.0 -> v0.10.1
github.com/godoc-lint/godoc-lint v0.10.1 -> v0.10.2
github.com/hashicorp/go-version v1.7.0 -> v1.8.0
github.com/mgechev/revive v1.12.0 -> v1.13.0
github.com/securego/gosec/v2 v2.22.10 -> v2.22.11-0.20251204091113-daccba6b93d7
github.com/spf13/afero v1.14.0 -> v1.15.0
github.com/spf13/cobra v1.10.1 -> v1.10.2
github.com/stbenjam/no-sprintf-host-port v0.2.0 -> v0.3.1
github.com/tomarrell/wrapcheck/v2 v2.11.0 -> v2.12.0
golang.org/x/crypto v0.43.0 -> v0.45.0
golang.org/x/mod v0.30.0 -> v0.31.0
golang.org/x/sync v0.18.0 -> v0.19.0
golang.org/x/sys v0.38.0 -> v0.39.0
golang.org/x/telemetry v0.0.0-20251111182119-bc8e575c7b54 -> v0.0.0-20251203150158-8fff8a5912fc
golang.org/x/text v0.30.0 -> v0.31.0

@renovate renovate bot force-pushed the renovate/all branch 5 times, most recently from cccade0 to 6db969a Compare December 9, 2025 03:59
@renovate
Copy link
Contributor Author

renovate bot commented Dec 11, 2025 •
edited
Loading

ℹ️ Artifact update notice

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 18 additional dependencies were updated

Details:

Package Change
github.com/MirrexOne/unqueryvet v1.2.1 -> v1.3.0
github.com/catenacyber/perfsprint v0.10.0 -> v0.10.1
github.com/godoc-lint/godoc-lint v0.10.1 -> v0.10.2
github.com/hashicorp/go-version v1.7.0 -> v1.8.0
github.com/libp2p/go-libp2p v0.45.0 -> v0.46.0
github.com/mgechev/revive v1.12.0 -> v1.13.0
github.com/securego/gosec/v2 v2.22.10 -> v2.22.11-0.20251204091113-daccba6b93d7
github.com/spf13/afero v1.14.0 -> v1.15.0
github.com/spf13/cobra v1.10.1 -> v1.10.2
github.com/stbenjam/no-sprintf-host-port v0.2.0 -> v0.3.1
github.com/tomarrell/wrapcheck/v2 v2.11.0 -> v2.12.0
golang.org/x/crypto v0.43.0 -> v0.45.0
golang.org/x/mod v0.30.0 -> v0.31.0
golang.org/x/sync v0.18.0 -> v0.19.0
golang.org/x/sys v0.38.0 -> v0.39.0
golang.org/x/telemetry v0.0.0-20251111182119-bc8e575c7b54 -> v0.0.0-20251203150158-8fff8a5912fc
golang.org/x/text v0.30.0 -> v0.31.0
google.golang.org/protobuf v1.36.10 -> v1.36.11

@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from bb1d40c to 9de65e0 Compare December 13, 2025 02:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant