Update all non-major dependencies #544

renovate · 2024-07-13T13:25:20Z

This PR contains the following updates:

Package	Change	Type	Update
@types/jest (source)	`29.5.12` -> `29.5.14`	devDependencies	patch
@types/lodash (source)	`4.17.6` -> `4.17.14`	devDependencies	patch
@types/node (source)	`22.8.2` -> `22.10.10`	devDependencies	minor
@types/ws (source)	`8.5.11` -> `8.5.14`	devDependencies	patch
@typescript-eslint/eslint-plugin (source)	`7.16.0` -> `7.18.0`	devDependencies	minor
@typescript-eslint/parser (source)	`7.16.0` -> `7.18.0`	devDependencies	minor
dotenv	`16.4.5` -> `16.4.7`	dependencies	patch
eslint (source)	`8.57.0` -> `8.57.1`	devDependencies	patch
eslint-plugin-jest	`28.6.0` -> `28.11.0`	devDependencies	minor
eslint-plugin-prettier	`5.1.3` -> `5.2.3`	devDependencies	minor
luxon	`3.4.4` -> `3.5.0`	dependencies	minor
mqtt	`5.8.0` -> `5.10.3`	dependencies	minor
node	`18.20.5-alpine` -> `18.20.6-alpine`	final	patch
prettier (source)	`3.3.2` -> `3.4.2`	devDependencies	minor
ts-jest (source)	`29.2.2` -> `29.2.5`	devDependencies	patch
typescript (source)	`5.5.3` -> `5.7.3`	devDependencies	minor
uuid	`11.0.0` -> `11.0.5`	dependencies	patch
winston	`3.13.1` -> `3.17.0`	dependencies	minor
zod (source)	`3.23.8` -> `3.24.1`	dependencies	minor

Release Notes

typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)

`v7.18.0`

Compare Source

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] prevent runtime error when asserting a variable declared in default TS lib
eslint-plugin: [unbound-method] report on destructuring in function parameters
eslint-plugin: [no-duplicate-type-constituents] shouldn't report on error types
eslint-plugin: [strict-boolean-expressions] support branded booleans

❤️ Thank You

auvred
Oliver Salzburg
Vinccool96
Yukihiro Hasegawa

You can read about our versioning strategy and releases on our website.

`v7.17.0`

Compare Source

🚀 Features

eslint-plugin: backport no-unsafe-function type, no-wrapper-object-types from v8 to v7
eslint-plugin: [return-await] add option to report in error-handling scenarios only, and deprecate "never"

🩹 Fixes

eslint-plugin: [no-floating-promises] check top-level type assertions (and more)
eslint-plugin: [strict-boolean-expressions] consider assertion function argument a boolean context
eslint-plugin: [no-unnecessary-condition] false positive on optional private field

❤️ Thank You

Armano
Josh Goldberg ✨
Kirk Waiblinger
StyleShit

You can read about our versioning strategy and releases on our website.

`v7.16.1`

Compare Source

🩹 Fixes

eslint-plugin: [no-unnecessary-type-parameters] descend into all parts of mapped types in no-unnecessary-type-parameters

❤️ Thank You

Dan Vanderkam

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@typescript-eslint/parser)

`v7.18.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v7.17.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v7.16.1`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

motdotla/dotenv (dotenv)

`v16.4.7`

Compare Source

Changed

Ignore .tap folder when publishing. (oops, sorry about that everyone. - @motdotla) #848

`v16.4.6`

Compare Source

Changed

Clean up stale dev dependencies #847
Various README updates clarifying usage and alternative solutions using dotenvx

eslint/eslint (eslint)

`v8.57.1`

Compare Source

jest-community/eslint-plugin-jest (eslint-plugin-jest)

`v28.11.0`

Compare Source

Features

valid-expect: allow calling expect with no arguments (#1688) (ff0349e)

28.10.1 (2025-01-15)

Bug Fixes

padding-around-test-blocks: update description (#1691) (9cb4ecc)

`v28.10.1`

Compare Source

Bug Fixes

padding-around-test-blocks: update description (#1691) (9cb4ecc)

`v28.10.0`

Compare Source

Features

unbound-method: ignore functions passed to jest.mocked (#1681) (d868636)

`v28.9.0`

Compare Source

Features

add TypeScript types (#1667) (1ce1258)

28.8.3 (2024-09-04)

Bug Fixes

prefer-importing-jest-globals: don't add imports in the middle of statements (#1645) (9c4197c)

28.8.2 (2024-09-02)

Performance Improvements

prefer-importing-jest-globals: stop collecting import specifiers for no reason (#1646) (0660242)

28.8.1 (2024-08-29)

Bug Fixes

prefer-importing-jest-globals: support typescript-eslint parser (#1639) (307f6a7)

`v28.8.3`

Compare Source

Bug Fixes

prefer-importing-jest-globals: don't add imports in the middle of statements (#1645) (9c4197c)

`v28.8.2`

Compare Source

Performance Improvements

prefer-importing-jest-globals: stop collecting import specifiers for no reason (#1646) (0660242)

`v28.8.1`

Compare Source

Bug Fixes

prefer-importing-jest-globals: support typescript-eslint parser (#1639) (307f6a7)

`v28.8.0`

Compare Source

Features

import formatting rules from eslint-plugin-jest-formatting (#1563) (74078ee)

`v28.7.0`

Compare Source

Features

allow [@typescript-eslint](https://redirect.github.com/typescript-eslint) v8 (#1636) (fb43171)

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

`v5.2.3`

Compare Source

Patch Changes

#703 9c6141f Thanks @BPScott! - Add name field to recommended flat config

`v5.2.2`

Compare Source

Patch Changes

#700 aa5b59f Thanks @ntnyq! - fix: report node when loc not found

`v5.2.1`

Compare Source

Patch Changes

#668 ac036cc Thanks @OrlovAlexei! - build(deps): Bump synckit from 0.8.6 to 0.9.1

moment/luxon (luxon)

`v3.5.0`

Compare Source

Various performance improvements
throwOnInvalid causes the constructor to throw if the year is invalid

mqttjs/MQTT.js (mqtt)

`v5.10.3`

Compare Source

Bug Fixes

add option to reconnect if connack has an error code (#1948) (fa19586)

`v5.10.2`

Compare Source

Features

electron-test: move third hosted broker to self hosted broker (#1926) (1ca3f9e)

`v5.10.1`

Compare Source

Bug Fixes

browser: handle Blob payloads (#1930) (86b7959)

`v5.10.0`

Compare Source

Bug Fixes

test: close all open connections in abstract_client test (#1917) (661c30a)
types: unsubscribe options type (#1921) (18a357c)

Features

add suback packet to subscribe callback (#1923) (93f4482)
add unsubscribe ack packet to the unsubscribe callback (#1922) (8bcf304)

5.9.1 (2024-08-01)

Bug Fixes

browser: ensure proxy is defined (ffc9805)
browser: prevent error stream.push() after EOF (#1915) (b5cc835), closes #1914
test: close open connections (#1911) (053a7be)

`v5.9.1`

Compare Source

Bug Fixes

browser: ensure proxy is defined (ffc9805)
browser: prevent error stream.push() after EOF (#1915) (b5cc835), closes #1914
test: close open connections (#1911) (053a7be)

`v5.9.0`

Compare Source

Bug Fixes

tets hang up (#1906) (c462530)
types: add connectAsync overload signature with allowRetries (#1909) (6b278dc)

Features

add forceNativeWebSocket client option (#1910) (103d172), closes #1796 #1895

5.8.1 (2024-07-18)

Bug Fixes

connect after client.end not working (#1902) (fbe5294)
reschedule pings problem (#1904) (8e14d3e)

`v5.8.1`

Compare Source

Bug Fixes

connect after client.end not working (#1902) (fbe5294)
reschedule pings problem (#1904) (8e14d3e)

nodejs/node (node)

`v18.20.6`: 2025-01-21, Version 18.20.6 'Hydrogen' (LTS), @RafaelGSS

Compare Source

This is a security release.

Notable Changes

CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Commits

[c03ad5ed63] - build: use rclone instead of aws CLI (Michaël Zasso) #55617
[8232463294] - build, tools: drop leading / from r2dir (Richard Lau) #53951
[b26bcd3394] - build, tools: copy release assets to staging R2 bucket once built (flakey5) #51394
[56df127b7b] - build,tools: simplify upload of shasum signatures (Michaël Zasso) #53892
[a63e9372ed] - (CVE-2025-22150) deps: update undici to v5.28.5 (Matteo Collina) nodejs-private/node-private#657
[da2d177f91] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555
[6cc8d58e6f] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#650

prettier/prettier (prettier)

`v3.4.2`

Compare Source

diff

Treat U+30A0 & U+30FB in Katakana Block as CJK (#16796 by @tats-u)

Prettier doesn't treat U+30A0 & U+30FB as Japanese. U+30FB is commonly used in Japanese to represent the delimitation of first and last names of non-Japanese people or “and”. The following “C言語・C++・Go・Rust” means “C language & C++ & Go & Rust” in Japanese.

<!-- Input (--prose-wrap=never) -->

C言
語
・
C++
・
Go
・
Rust

<!-- Prettier 3.4.1 -->
C言語・ C++ ・ Go ・ Rust

<!-- Prettier 3.4.2 -->
C言語・C++・Go・Rust

U+30A0 can be used as the replacement of the - in non-Japanese names (e.g. “Saint-Saëns” (Charles Camille Saint-Saëns) can be represented as “サン゠サーンス” in Japanese), but substituted by ASCII hyphen (U+002D) or U+FF1D (full width hyphen) in many cases (e.g. “サン=サーンス” or “サン＝サーンス”).

Fix comments print on class methods with decorators (#16891 by @fisker)

// Input
class A {
  @&#8203;decorator
  /** 
   * The method description
   *
  */
  async method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}

// Prettier 3.4.1
class A {
  @&#8203;decorator
  async /**
   * The method description
   *
   */
  method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}

// Prettier 3.4.2
class A {
  @&#8203;decorator
  /**
   * The method description
   *
   */
  async method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}

Fix non-idempotent formatting (#16899 by @seiyab)

This bug fix is not language-specific. You may see similar change in any languages. This fixes regression in 3.4.0 so change caused by it should yield same formatting as 3.3.3.

// Input
<div>
  foo
  <span>longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo</span>
  , abc
</div>;

// Prettier 3.4.1 (first)
<div>
  foo
  <span>
    longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo
  </span>, abc
</div>;

// Prettier 3.4.1 (second)
<div>
  foo
  <span>longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo</span>
  , abc
</div>;

// Prettier 3.4.2
<div>
  foo
  <span>longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo</span>
  , abc
</div>;

`v3.4.1`

Compare Source

diff

Remove unnecessary parentheses around assignment in `v-on` (#16887 by @fisker)

<!-- Input -->
<template>
  <button @&#8203;click="foo += 2">Click</button>
</template>

<!-- Prettier 3.4.0 -->
<template>
  <button @&#8203;click="(foo += 2)">Click</button>
</template>

<!-- Prettier 3.4.1 -->
<template>
  <button @&#8203;click="foo += 2">Click</button>
</template>

`v3.4.0`

Compare Source

diff

🔗 Release Notes

`v3.3.3`

Compare Source

diff

Add parentheses for nullish coalescing in ternary (#16391 by @cdignam-segment)

This change adds clarity to operator precedence.

// Input
foo ? bar ?? foo : baz;
foo ?? bar ? a : b;
a ? b : foo ?? bar;

// Prettier 3.3.2
foo ? bar ?? foo : baz;
foo ?? bar ? a : b;
a ? b : foo ?? bar;

// Prettier 3.3.3
foo ? (bar ?? foo) : baz;
(foo ?? bar) ? a : b;
a ? b : (foo ?? bar);

Add parentheses for decorator expressions (#16458 by @y-schneider)

Prevent parentheses around member expressions or tagged template literals from being removed to follow the stricter parsing rules of TypeScript 5.5.

// Input
@&#8203;(foo`tagged template`)
class X {}

// Prettier 3.3.2
@&#8203;foo`tagged template`
class X {}

// Prettier 3.3.3
@&#8203;(foo`tagged template`)
class X {}

Support `@let` declaration syntax (#16474 by @sosukesuzuki)

Adds support for Angular v18 @let declaration syntax.

Please see the following code example. The @let declaration allows you to define local variables within the template:

@&#8203;let name = 'Frodo';

<h1>Dashboard for {{name}}</h1>
Hello, {{name}}

For more details, please refer to the excellent blog post by the Angular Team: Introducing @let in Angular.

We also appreciate the Angular Team for kindly answering our questions to implement this feature.

kulshekhar/ts-jest (ts-jest)

microsoft/TypeScript (typescript)

`v5.7.3`

Compare Source

`v5.7.2`

Compare Source

`v5.6.3`

Compare Source

`v5.6.2`

Compare Source

`v5.5.4`: TypeScript 5.5.4

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

npm
NuGet package (soon!)

uuidjs/uuid (uuid)

`v11.0.5`

Compare Source

Bug Fixes

add TS unit test, pin to [email protected] (#860) (24ac2fd)

`v11.0.4`

Compare Source

Bug Fixes

docs: insure -> ensure (#843) (d2a61e1)
exclude tests from published package (#840) (f992ff4)
Test for invalid byte array sizes and ranges in v1(), v4(), and v7() (#845) (e0ee900)

`v11.0.3`

Compare Source

Bug Fixes

apply stricter typing to the v* signatures (#831) (c2d3fed)
export internal uuid types (#833) (341edf4)
remove sourcemaps (#827) (b93ea10)
revert "simplify type for v3 and v5" (#835) (e2dee69)

`v11.0.2`

Compare Source

Bug Fixes

remove wrapper.mjs (2a18871)
remove wrapper.mjs (#822) (6683ad3)

`v11.0.1`

Compare Source

Bug Fixes

restore package.json#browser field (#817) (ae8f386)

winstonjs/winston (winston)

`v3.17.0`

Compare Source

Try winston-transport 4.9.0 3e87128
Revert "Try bumping winston-transport to 4.8.0" 69625fc
Revert "Try bumping winston-transport to 4.8.0" 876ef7a
Try bumping winston-transport to 4.8.0 7ef2c1d
Try bumping winston-transport to 4.8.0 fe4b64e
Bump logform c9fd9a4
Revert "Update logform and winston-transport" 14fef0f
Merge branch 'master' of github.com:winstonjs/winston 545b683
Update logform and winston-transport cceb265
Bump mocha from 10.7.3 to 10.8.2 (#2523) bb529b6
Bump async from 3.2.5 to 3.2.6 (#2516) ae847ab

`v3.16.0`

Compare Source

Feature - optionally include Error.cause property (#2447) 201b6f1

`v3.15.0`

Compare Source

Note: we removed LogCallback from the TS definitions because the underlying library didn't actually support these. If this causes issues in your apps, we recommend you remove references to LogCallbacks, since such code was not being executed anyways. See #2513 and the issue linked therein.

remove logcallback (#2513) 3a54777
chore(docs): Update README.md w/ usage comments (#2507) f110f61
Bump nyc from 15.1.0 to 17.1.0 (#2511) f5dde86
Bump @babel/cli from 7.24.7 to 7.25.6 (#2512) d1b8dc6
Bump @babel/preset-env from 7.24.8 to 7.25.4 (#2506) 564161a
Bump mocha from 10.7.0 to 10.7.3 (#2500) eb7e315
Unified Handler Tests (#2020) 22aab6d

`v3.14.2`

Compare Source

`v3.14.1`

Compare Source

`v3.14.0`

Compare Source

colinhacks/zod (zod)

`v3.24.1`

Compare Source

Commits:

0c6cbbd Undeprecate .nonempty()
4e219d6 Bump min TS version to 5.0
65adeea v3.24.1

`v3.24.0`

Compare Source

Implement `@standard-schema/spec`

This is the first version of Zod to implement the Standard Schema spec. This is a new community effort among several validation library authors to implement a common interface, with the goal of simplifying the process of integrating schema validators with the rest of the ecosystem. Read more about the project and goals here.

`z.string().jwt()`

Thanks to @Mokshit06 and @Cognition-Labs for this contribution!

To verify that a string is a valid 3-part JWT.

z.string().jwt();

⚠️ This does not verify your JWT cryptographically! It merely ensures its in the proper format. Use a library like jsonwebtoken to verify the JWT signature, parse the token, and read the claims.

To constrain the JWT to a specific algorithm:

z.string().jwt({ alg: "RS256" });

`z.string().base64url()`

Thank you to @marvinruder!

To complement the JWT validation, Zod 3.24 implements a standalone .base64url() string validation API. (The three elements of JWTs are base64url-encoded JSON strings.)

z.string().base64url()

This functionality is available along the standard z.string().base64() validator added in Zod 3.23.

`z.string().cidr()`

Thanks to @wataryooou for their work on this!

A validator for CIDR notation for specifying IP address ranges, e.g. 192.24.12.0/22.

z.string().cidr()

To specify an IP version:

z.string().cidr({ version: "v4" })
z.string().cidr({ version: "v6" })

View the full diff from 3.23.8: colinhacks/zod@v3.23.8...v3.24.0

294f54f Update README_ZH.md about Discriminated unions (#3493)
1247caf Add Kubb as X-to-Zod commun

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

sonarqubecloud · 2025-01-23T18:27:05Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

renovate bot force-pushed the renovate/all-minor-patch branch from f1045cf to 9525b5c Compare July 15, 2024 04:53

renovate bot changed the title ~~Update dependency prettier to v3.3.3~~ Update all non-major dependencies Jul 15, 2024

renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 8613c86 to 68eab27 Compare July 22, 2024 08:10

renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from aeea1b8 to f11b54e Compare July 29, 2024 18:02

renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 6bfad82 to 739d531 Compare August 8, 2024 05:03

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 3cec04b to 78bffd3 Compare August 11, 2024 13:09

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 0f7bcd5 to 6a44177 Compare December 4, 2024 07:22

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 1deebde to 77a8246 Compare December 16, 2024 03:39

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from a9f3ef6 to a996d3d Compare December 23, 2024 04:00

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 349c2e2 to 880baab Compare January 5, 2025 17:23

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from e37a5df to f8363b4 Compare January 10, 2025 01:53

renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 2f00d3b to 0490360 Compare January 20, 2025 05:23

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 675e111 to 4b9e3f2 Compare January 23, 2025 08:54

Update all non-major dependencies

55426a3

renovate bot force-pushed the renovate/all-minor-patch branch from 4b9e3f2 to 55426a3 Compare January 23, 2025 18:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update all non-major dependencies #544

Update all non-major dependencies #544

renovate bot commented Jul 13, 2024 •

edited

Loading

sonarqubecloud bot commented Jan 23, 2025

Update all non-major dependencies #544

Are you sure you want to change the base?

Update all non-major dependencies #544

Conversation

renovate bot commented Jul 13, 2024 • edited Loading

Release Notes

🩹 Fixes

❤️ Thank You

🚀 Features

🩹 Fixes

❤️ Thank You

🩹 Fixes

❤️ Thank You

Changed

Changed

Features

28.10.1 (2025-01-15)

Bug Fixes

Bug Fixes

Features

Features

28.8.3 (2024-09-04)

Bug Fixes

28.8.2 (2024-09-02)

Performance Improvements

28.8.1 (2024-08-29)

Bug Fixes

Bug Fixes

Performance Improvements

Bug Fixes

Features

Features

Patch Changes

Patch Changes

Patch Changes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

5.9.1 (2024-08-01)

Bug Fixes

Bug Fixes

Bug Fixes

Features

5.8.1 (2024-07-18)

Bug Fixes

Bug Fixes

v18.20.6: 2025-01-21, Version 18.20.6 'Hydrogen' (LTS), @​RafaelGSS

Notable Changes

Commits

Treat U+30A0 & U+30FB in Katakana Block as CJK (#​16796 by @​tats-u)

Fix comments print on class methods with decorators (#​16891 by @​fisker)

Fix non-idempotent formatting (#​16899 by @​seiyab)

Remove unnecessary parentheses around assignment in v-on (#​16887 by @​fisker)

Add parentheses for nullish coalescing in ternary (#​16391 by @​cdignam-segment)

Add parentheses for decorator expressions (#​16458 by @​y-schneider)

Support @let declaration syntax (#​16474 by @​sosukesuzuki)

v5.5.4: TypeScript 5.5.4

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Commits:

Implement @standard-schema/spec

z.string().jwt()

z.string().base64url()

z.string().cidr()

Configuration

sonarqubecloud bot commented Jan 23, 2025

Quality Gate passed

renovate bot commented Jul 13, 2024 •

edited

Loading

`v18.20.6`: 2025-01-21, Version 18.20.6 'Hydrogen' (LTS), @RafaelGSS

Treat U+30A0 & U+30FB in Katakana Block as CJK (#16796 by @tats-u)

Fix comments print on class methods with decorators (#16891 by @fisker)

Fix non-idempotent formatting (#16899 by @seiyab)

Remove unnecessary parentheses around assignment in `v-on` (#16887 by @fisker)

Add parentheses for nullish coalescing in ternary (#16391 by @cdignam-segment)

Add parentheses for decorator expressions (#16458 by @y-schneider)

Support `@let` declaration syntax (#16474 by @sosukesuzuki)

`v5.5.4`: TypeScript 5.5.4

Implement `@standard-schema/spec`

`z.string().jwt()`

`z.string().base64url()`

`z.string().cidr()`