Skip to content

chore(deps): update all non-major dependencies #162

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: master
Choose a base branch
from
Open

chore(deps): update all non-major dependencies #162

renovate wants to merge 1 commit into from
+302 −239

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 8, 2023 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
autoprefixer 10.4.14 → 10.4.24 age confidence devDependencies patch
cssnano 6.0.1 → 6.1.2 age confidence devDependencies minor
node (source) 18.17.1 → 18.20.8 age confidence minor
postcss (source) 8.4.31 → 8.5.6 age confidence devDependencies minor
postcss-nested 6.0.1 → 6.2.0 age confidence devDependencies minor
prettier (source) 3.0.1 → 3.8.1 age confidence devDependencies minor

Release Notes

postcss/autoprefixer (autoprefixer)

v10.4.24

Compare Source

  • Made Autoprefixer a little faster (by @​Cherry).

v10.4.23

Compare Source

v10.4.22

Compare Source

  • Fixed stretch prefixes on new Can I Use database.
  • Updated fraction.js.

v10.4.21

Compare Source

v10.4.20

Compare Source

  • Fixed fit-content prefix for Firefox.

v10.4.19

Compare Source

  • Removed end value has mixed support, consider using flex-end warning
    since end/start now have good support.

v10.4.18

Compare Source

  • Fixed removing -webkit-box-orient on -webkit-line-clamp (@​Goodwine).

v10.4.17

Compare Source

  • Fixed user-select: contain prefixes.

v10.4.16

Compare Source

  • Improved performance (by Romain Menke).
  • Fixed docs (by Christian Oliff).

v10.4.15

Compare Source

  • Fixed ::backdrop prefixes (by 一丝).
  • Fixed docs (by Christian Oliff).
cssnano/cssnano (cssnano)

v6.1.2: v6.1.2

Compare Source

Bug Fixes

  • preserve correct order of gap and column-gap properties

Patch Changes

  • update autoprefixer

v6.1.1: v6.1.1

Compare Source

Patch changes

  • update selector parser
  • in the minify font plugin, you can pass a function to determine whether a css variable is one of font, font-family, and font-weight to determine whether the variable needs to remove quotes.

v6.1.0: v6.1.0

Compare Source

This release contains a lot of fixes to Browserslist support thanks to @​colinrotherham

Features

  • support Browserslist options in more plugins
  • support overriding autoprefixer options

Additionally, this release includes improved TypeScript types.

v6.0.5: v6.0.5

Compare Source

Bug Fixes

  • correctly minify font declaration in edge cases
  • preserve initial property in -webkit-line-clamp

v6.0.4: v6.0.4

Compare Source

Bug Fixes
  • preserve empty @layer declarations
  • avoid crashing when encountering @layer without any braces afterwards
  • update to latest lilconfig dependency to avoid vulnerability

v6.0.3: v6.0.3

Compare Source

Bug fixes
  • do not sort unknown properties

Other

  • Require latest browserslist and postcss-selector-parser

v6.0.2: v6.0.2

Compare Source

  • fix: update cssnano peer dependency to 8.4.31 to avoid security issue
  • fix: update postcss-calc to 9.0.1 to solve disappearing expressions inside two brackets
  • deps(postcss-svgo): update SVGO to 3.0.5 and update doc
  • chore: update css-declaration-sorter
  • fix(postcss-minify-selectors): prevent mangling of timeline range names
  • fix(postcss-convert-values): keep percent unit in @Property
  • chore(cssnano): update lilconfig to 3.0.0
nodejs/node (node)

v18.20.8: 2025-03-27, Version 18.20.8 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes

This release updates OpenSSL to 3.0.16 and root certificates to NSS 3.108.

Commits

v18.20.7: 2025-02-20, Version 18.20.7 'Hydrogen' (LTS), @​aduh95

Compare Source

Notable Changes
Commits

v18.20.6: 2025-01-21, Version 18.20.6 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
  • CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

  • CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits

v18.20.5: 2024-11-12, Version 18.20.5 'Hydrogen' (LTS), @​aduh95

Compare Source

Notable Changes
  • [ac37e554a5] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #​55333
Commits

v18.20.4: 2024-07-08, Version 18.20.4 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
Commits

v18.20.3: 2024-05-21, Version 18.20.3 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes

This release fixes a regression introduced in Node.js 18.19.0 where http.server.close() was incorrectly closing idle connections.

A fix has also been included for compiling Node.js from source with newer versions of Clang.

The list of keys used to sign releases has been synchronized with the current list from the main branch.

Updated dependencies
  • acorn updated to 8.11.3.
  • acorn-walk updated to 8.3.2.
  • ada updated to 2.7.8.
  • c-ares updated to 1.28.1.
  • corepack updated to 0.28.0.
  • nghttp2 updated to 1.61.0.
  • ngtcp2 updated to 1.3.0.
  • npm updated to 10.7.0. Includes a fix from npm@​10.5.1 to limit the number of open connections npm/cli#7324.
  • simdutf updated to 5.2.4.
  • zlib updated to 1.3.0.1-motley-7d77fb7.
Commits

v18.20.2: 2024-04-10, Version 18.20.2 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows
Commits

v18.20.1: 2024-04-03, Version 18.20.1 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
  • CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
  • llhttp version 9.2.1
  • undici version 5.28.4
Commits

v18.20.0: 2024-03-26, Version 18.20.0 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes
Added support for import attributes

Support has been added for import attributes, to replace the old import
assertions syntax. This will aid migration by making the new syntax available
across all currently supported Node.js release lines.

This adds the with keyword which should be used in place of the previous
assert keyword, which will be removed in a future semver-major Node.js
release.

For example,

import "foo" assert { ... }

should be replaced with

import "foo" with { ... }

For more details, see

Contributed by Nicolò Ribaudo in #​51136
and Antoine du Hamel in #​50140.

Doc deprecation for dirent.path

Please use newly added dirent.parentPath instead.

Contributed by Antoine du Hamel in #​50976
and #​51020.

Experimental node-api feature flags

Introduces an experimental feature to segregate finalizers that affect GC state.
A new type called node_api_nogc_env has been introduced as the const version
of napi_env and node_api_nogc_finalize as a variant of napi_finalize that
accepts a node_api_nogc_env as its first argument.

This feature can be turned off by defining
NODE_API_EXPERIMENTAL_NOGC_ENV_OPT_OUT.

Contributed by Gabriel Schulhof in #​50060.

Root certificates updated to NSS 3.98

Certificates added:

  • Telekom Security TLS ECC Root 2020
  • Telekom Security TLS RSA Root 2023

Certificates removed:

  • Security Communication Root CA
Updated dependencies
  • ada updated to 2.7.6.
  • base64 updated to 0.5.2.
  • c-ares updated to 1.27.0.
  • corepack updated to 0.25.2.
  • ICU updated to 74.2. Includes CLDR 44.1 and Unicode 15.1.
  • npm updated to 10.5.0. Fixes a regression in signals not being passed onto child processes.
  • simdutf8 updated to 4.0.8.
  • Timezone updated to 2024a.
  • zlib updated to 1.3.0.1-motley-40e35a7.
vm: fix V8 compilation cache support for vm.Script

Previously repeated compilation of the same source code using vm.Script
stopped hitting the V8 compilation cache after v16.x when support for
importModuleDynamically was added to vm.Script, resulting in a performance
regression that blocked users (in particular Jest users) from upgrading from
v16.x.

The recent fixes allow the compilation cache to be hit again
for vm.Script when --experimental-vm-modules is not used even in the
presence of the importModuleDynamically option, so that users affected by the
performance regression can now upgrade. Ongoing work is also being done to
enable compilation cache support for vm.CompileFunction.

Contributed by Joyee Cheung in #​49950
and [#​50137](htt

Configuration

📅 Schedule: Branch creation - "on the 2nd day instance on Saturday before 7am" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Sep 8, 2023 •
edited
Loading

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock
Command failed: composer update phpunit/phpunit:9.6.19 --with-dependencies --ignore-platform-reqs --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins
Package "phpunit/phpunit:9.6.19" listed for update is not installed. Ignoring.
Loading composer repositories with package information
Warning from https://repo.packagist.org: Support for Composer 1 is deprecated and some packages will not be available. You should upgrade to Composer 2. See https://blog.packagist.com/deprecating-composer-1-support/
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - The requested package phpunit/phpunit (locked at 9.6.10, required as 9.6.19) is satisfiable by phpunit/phpunit[9.6.10] but these conflict with your requirements or minimum-stability.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 2deb3c8 to c930461 Compare September 19, 2023 06:42
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c930461 to 1cb89b9 Compare September 20, 2023 22:11
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1cb89b9 to cda2e33 Compare September 29, 2023 01:56
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 5e60891 to db4764a Compare October 13, 2023 22:58
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from f9c8ad9 to e92aa84 Compare November 13, 2023 04:40
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from fbfabf2 to f035671 Compare December 2, 2023 03:32
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 04f00aa to 5a284f9 Compare December 14, 2023 21:09
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 491f351 to 2e934f9 Compare January 4, 2024 19:40
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from a9eb0cf to cf64461 Compare January 19, 2024 11:01
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from fbc290a to 6bb355b Compare February 5, 2024 19:57
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from f119be9 to 37142b3 Compare March 6, 2024 16:57
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 51d897a to 005beb4 Compare September 14, 2025 09:57
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from d85a524 to bce561c Compare September 25, 2025 21:30
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from bce561c to 65e2856 Compare October 21, 2025 09:06
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 0bb9904 to 1f88a8e Compare November 11, 2025 02:56
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1f88a8e to d8ec637 Compare November 18, 2025 22:57
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 76966be to 786843d Compare December 3, 2025 14:37
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 786843d to ff9a787 Compare December 6, 2025 09:02
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from ff9a787 to 24e5e67 Compare December 14, 2025 20:29
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 24e5e67 to cc289de Compare December 30, 2025 13:13
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 834f0c1 to bf85c83 Compare January 15, 2026 02:54
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from d863030 to 449c028 Compare January 24, 2026 18:23
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from cc84855 to 66a0f7f Compare January 30, 2026 21:59
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 66a0f7f to c1339f4 Compare February 2, 2026 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants