fix(deps): update all non-major dependencies#55
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
2 times, most recently
from
e9e8554 to
4366a19
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
4366a19 to
4838353
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.2.0→3.3.00.9.0-alpha.5→0.9.024.14.0→24.15.024.14.0-alpine→24.15.0-alpine19.2.4→19.2.519.2.4→19.2.57.3.1→7.3.2Release Notes
FortAwesome/react-fontawesome (@fortawesome/react-fontawesome)
v3.3.0Compare Source
Features
Chores
CI/CD
PrettyCoffee/pretty-cozy (@pretty-cozy/eslint-config)
v0.9.0Compare Source
actions/node-versions (node)
v24.15.0: 24.15.0Compare Source
Node.js 24.15.0
v24.14.1: 24.14.1Compare Source
Node.js 24.14.1
nodejs/node (node)
v24.15.0: 2026-04-15, Version 24.15.0 'Krypton' (LTS), @aduh95Compare Source
Notable Changes
3d87ecacbc] - (SEMVER-MINOR) cli: add --max-heap-size option (tannal) #5870883c38672f7] - cli: add --require-module/--no-require-module (Joyee Cheung) #6095954ef940e01] - (SEMVER-MINOR) crypto: add raw key formats support to the KeyObject APIs (Filip Skokan) #62240f4a3edc47a] - (SEMVER-MINOR) fs: addthrowIfNoEntryoption for fs.stat and fs.promises.stat (Juan José) #611785cdcba17cc] - (SEMVER-MINOR) http2: add http1Options for HTTP/1 fallback configuration (Amol Yadav) #617138b6be3fe14] - module: mark require(esm) as stable (Joyee Cheung) #6095968fbc0c6cc] - module: mark module compile cache as stable (Joyee Cheung) #60971c851e76f8c] - (SEMVER-MINOR) net: addsetTOSandgetTOStoSocket(Amol Yadav) #615036ac4304c87] - (SEMVER-MINOR) sqlite: add limits property to DatabaseSync (Mert Can Altin) #61298aaf9af1672] - sqlite: mark as release candidate (Matteo Collina) #61262eb77a7a297] - (SEMVER-MINOR) src: add C++ support for diagnostics channels (RafaelGSS) #618696834ca13bb] - (SEMVER-MINOR) stream: renameDuplex.toWeb()type option toreadableType(René) #61632f5f21d36a6] - test_runner: add exports option for module mocks (sangwook) #617271f2025fd1e] - (SEMVER-MINOR) test_runner: expose worker ID for concurrent test execution (Ali Hassan) #613941ca20fc33d] - (SEMVER-MINOR) test_runner: show interrupted test on SIGINT (Matteo Collina) #61676Commits
148373cea1] - assert,util: improve comparison performance (Ruben Bridgewater) #61176e5558b0859] - assert,util: fix deep comparing invalid dates skipping properties (Ruben Bridgewater) #6107683cffd92b5] - async_hooks: enabledHooksExist shall return if hooks are enabled (Gerhard Stöbich) #610542c9436b43d] - benchmark: fix destructuring in dgram/single-buffer (Ali Hassan) #62084837acd7382] - benchmark: add startup benchmark for ESM entrypoint (Joyee Cheung) #61769a6ced7d272] - buffer: improve performance of multiple Buffer operations (Ali Hassan) #61871a82003bf8b] - buffer: optimize buffer.concat performance (Mert Can Altin) #6172183dfd0be1d] - buffer: disallow ArrayBuffer transfer on pooled buffer (Chengzhong Wu) #61372ed2d0cb1bf] - build: support empty libname flags inconfigure.py(Antoine du Hamel) #6247709f7920267] - build: fix timezone-update path references (Chengzhong Wu) #62280af46b15b91] - build: use path-ignore in GHA coverage-windows.yml (Chengzhong Wu) #618112cf77eadd1] - build: generate_config_gypi.py generates valid JSON (Shelley Vohr) #61791e0220f0c35] - build: build with v8 gdbjit support on supported platform (Joyee Cheung) #610105505511dcb] - build: enable -DV8_ENABLE_CHECKS flag (Ryuhei Shima) #613275f8ecf3940] - build: add --debug-symbols to build with -g without enabling DCHECKs (Joyee Cheung) #61100ab18c0867b] - build: fix --node-builtin-modules-path (Filip Skokan) #62115bfa60d5782] - build: fix GN for new merve dep (Shelley Vohr) #619840d1975fe3a] - build,win: add WinGet Visual Studio 2022 Build Tools Edition config (Mike McCready) #6165210b2bb5fa6] - child_process: add tracing channel for spawn (Marco) #618363d87ecacbc] - (SEMVER-MINOR) cli: add --max-heap-size option (tannal) #5870883c38672f7] - cli: add --require-module/--no-require-module (Joyee Cheung) #609599d37233824] - crypto: update root certificates to NSS 3.121 (Node.js GitHub Bot) #62485b0cbfe38a4] - crypto: add crypto::GetSSLCtx API for addon access to OpenSSL contexts (Tim Perry) #62254dc034a4ac9] - crypto: reject ML-KEM/ML-DSA PKCS#8 import without seed in SubtleCrypto (Filip Skokan) #622188aa6e706df] - crypto: refactor WebCrypto AEAD algorithms auth tag handling (Filip Skokan) #6216920cb932bcf] - crypto: read algorithm name property only once in normalizeAlgorithm (Filip Skokan) #62170e2934162b4] - crypto: add missing AES dictionaries (Filip Skokan) #620998b8db52f65] - crypto: fix importKey required argument count check (Filip Skokan) #62099bd5458db29] - crypto: fix missing nullptr check on RSA_new() (ndossche) #618887302c7ed22] - crypto: fix handling of null BUF_MEM* in ToV8Value() (Nora Dossche) #618858d0c22ea20] - crypto: fix potential null pointer dereference when BIO_meth_new() fails (Nora Dossche) #6178872aad8b40f] - crypto: always return certificate serial numbers as uppercase (Anna Henningsen) #617522395fc0f4d] - crypto: rename CShakeParams and KmacParams length to outputLength (Filip Skokan) #61875541be3aaf2] - crypto: recognize raw formats in keygen (Filip Skokan) #6248054ef940e01] - (SEMVER-MINOR) crypto: add raw key formats support to the KeyObject APIs (Filip Skokan) #62240bef1949823] - deps: V8: cherry-pick33e7739(Thibaud Michaud) #625672e1a565a55] - deps: update ada to 3.4.4 (Node.js GitHub Bot) #62414d0418bad10] - deps: update timezone to 2026a (Node.js GitHub Bot) #6216453aad66415] - deps: update googletest to2461743(Node.js GitHub Bot) #6248490fab71a84] - deps: update simdjson to 4.5.0 (Node.js GitHub Bot) #62382a416ddf6d9] - deps: V8: cherry-pickcf1bce4(Richard Lau) #624494d9123e57d] - deps: upgrade npm to 11.12.1 (npm team) #62448952d715028] - deps: update sqlite to 3.51.3 (Node.js GitHub Bot) #62256f3fd7ed426] - deps: update googletest to73a63ea(Node.js GitHub Bot) #6192771a2f82d7c] - deps: upgrade npm to 11.11.1 (npm team) #6221684f60c26f7] - deps: update amaro to 1.1.8 (Node.js GitHub Bot) #6215143159d0e5f] - deps: update sqlite to 3.52.0 (Node.js GitHub Bot) #62150b887657b38] - deps: V8: cherry-pickaa0b288(Richard Lau) #621367ab885b323] - deps: update ada to 3.4.3 (Node.js GitHub Bot) #62049671ddec2b9] - deps: update minimatch to 10.2.4 (Node.js GitHub Bot) #62016290fe37d4d] - deps: update simdjson to 4.3.1 (Node.js GitHub Bot) #61930a13bee76b5] - deps: update acorn-walk to 8.3.5 (Node.js GitHub Bot) #61928f0e40b35b9] - deps: update acorn to 8.16.0 (Node.js GitHub Bot) #61925463dfa023a] - deps: update minimatch to 10.2.2 (Node.js GitHub Bot) #618304b2e4bb108] - deps: update nbytes to 0.1.3 (Node.js GitHub Bot) #618795626cb83d0] - deps: remove stale OpenSSL arch configs (René) #6183452668874fd] - deps: update llhttp to 9.3.1 (Node.js GitHub Bot) #61827b3387b07b1] - deps: update googletest to5a9c3f9(Node.js GitHub Bot) #61731196268cb4c] - deps: V8: cherry-pickc5ff7c4(Chengzhong Wu) #6137236869b52de] - deps: update merve to 1.2.2 (Node.js GitHub Bot) #622133cbac055de] - deps: update merve to 1.2.0 (Node.js GitHub Bot) #621497757cc3495] - deps: V8: backport6a0a25a(Vivian Wang) #61670359797c2fb] - deps,src: prepare for cpplint update (Michaël Zasso) #60901ace802e59b] - diagnostics_channel: add diagnostics channels for web locks (Ilyas Shabi) #62123a072411b03] - doc: remove spawn with shell example from bat/cmd section (Kit Dallege) #622430b152449af] - doc: fix typo in --disable-wasm-trap-handler description (Dmytro Semchuk) #6182073ea387ad7] - doc: remove obsolete Boxstarter automated install (Mike McCready) #617857f234add8e] - doc: deprecatemodule.register()(DEP0205) (Geoffrey Booth) #6239512fc3c6a30] - doc: clarify that features cannot be both experimental and deprecated (Antoine du Hamel) #624561ecc5962a2] - doc: fix 'transfered' typo in quic.md (lilianakatrina684-a11y) #6249256741a1303] - doc: move sqlite type conversion section to correct level (René) #6248212b04d17d5] - doc: add Rafael to last security release steward (Rafael Gonzaga) #62423c4567e4a8d] - doc: fix overstated Date header requirement in response.sendDate (Kit Dallege) #62206384a41047f] - doc: enhance clarification about the main field (Mowafak Almahaini) #6230293d19b1a1c] - doc: minor typo fix (Jeff Matson) #623583db35d2c59] - doc: add path to vulnerabilities.json mention (Rafael Gonzaga) #6235557b105c9d5] - doc: deprecate CryptoKey use in node:crypto (Filip Skokan) #62321490168c993] - doc: fix small environment_variables typo (chris) #622790291be584b] - doc: test and test-only targets do not run linter (Xavier Stouder) #62120ba0a82a1e1] - doc: clarify fs.ReadStream and fs.WriteStream are not constructable (Kit Dallege) #62208125bdbf504] - doc: clarify that any truthy value ofshellis part of DEP0190 (Antoine du Hamel) #62249a141ad0aeb] - doc: remove outdated Chrome 66 and ndb references from debugger (Kit Dallege) #6220244bde8e573] - doc: add note (and caveat) formock.moduleabout customization hooks (Jacob Smith) #620758c46a1ca1a] - doc: copyeditaddons.md(Antoine du Hamel) #620717f989f02f7] - doc: correctutil.convertProcessSignalToExitCodevalidation behavior (René) #62134a4466ebdac] - doc: add efekrskl as triager (Efe) #61876db516eca3a] - doc: fix markdown forexpectFailurevalues (Jacob Smith) #62100ad97045125] - doc: include url.resolve() in DEP0169 application deprecation (Mike McCready) #62002309f37ba42] - doc: expand SECURITY.md with non-vulnerability examples (Rafael Gonzaga) #61972dbb3551b7b] - doc: separate in-types and out-types in SQLite conversion docs (René) #62034191c433db8] - doc: fix small logic error in DETECT_MODULE_SYNTAX (René) #620258511b1c784] - doc: fix module.stripTypeScriptTypes indentation (René) #61992dd1139f52c] - doc: update DEP0040 (punycode) to application type deprecation (Mike McCready) #6191654009e9c62] - doc: explicitly mention Slack handle (Rafael Gonzaga) #6198678fa1a1a49] - doc: support toolchain Visual Studio 2022 & 2026 + Windows 11 SDK (Mike McCready) #61864d8204d3cdb] - doc: rename invalidfunctionparameter (René) #61942a5a14482fb] - doc: clarify status of feature request issues (Antoine du Hamel) #61505bd0688feb6] - doc: add esm and cjs examples to node:vm (Alfredo González) #61498240b512f9f] - doc: clarify build environment is trusted in threat model (Matteo Collina) #618655dd48e3456] - doc: remove incorrect mention ofmoduleintypescript.md(Rob Palmer) #618399502c22055] - doc: simplify addAbortListener example (Chemi Atlow) #618426fec397828] - doc: clean up globals.md (René) #61822a810f5ccef] - doc: clarify async caveats forevents.once()(René) #615722bf990bb1a] - doc: update Juan's security steward info (Juan José) #617540312db948d] - doc: fix methods being documented as properties inprocess.md(Antoine du Hamel) #61765e558b26e7f] - doc: add riscv64 info into platform list (Lu Yahan) #4225149254e3dc0] - doc: fix dropdown menu being obscured at <600px due to stacking context (Jeff) #617354ff01b5c10] - doc: fix spacing in process message event (Aviv Keller) #6175694097a79d6] - doc: move describe/it aliases section before expectFailure (Luca Raveri) #61567b7cd31acbe] - doc: fix broken links of net.md (YuSheng Chen) #61673ae5e353fe2] - doc: clean up Windows code snippet inchild_process.md(reillylm) #61422ea9beb6a3c] - doc: update to Visual Studio 2026 manual install (Mike McCready) #6165542057c84e2] - doc,module: add missing doc for syncHooks.deregister() (Joyee Cheung) #61959a035bd5235] - doc,test: clarify --eval syntax for leading '-' scripts (kovan) #62244deb0b78460] - esm: fix typo in worker loader hook comment (jakecastelli) #62475b93bf7dbfc] - esm: fix source phase identity bug in loadCache eviction (Guy Bedford) #62415679d18b57f] - esm: fix path normalization infinalizeResolution(Antoine du Hamel) #62080171e9fc268] - esm: update outdated FIXME comment in translators.js (Karan Mangtani) #61715cc19728228] - events: avoid cloning listeners array on every emit (Gürgün Dayıoğlu) #62261458c92be52] - events: don't call resume after close (Сковорода Никита Андреевич) #605484691f3e7fb] - fs: fix cpSync to handle non-ASCII characters (Stefan Stojanovic) #61950f4a3edc47a] - (SEMVER-MINOR) fs: addthrowIfNoEntryoption for fs.stat and fs.promises.stat (Juan José) #6117858e4d50cd0] - http: fix use-after-free when freeParser is called during llhttp_execute (Gerhard Stöbich) #620950a4ad85ab0] - http: validate ClientRequest path on set (Matteo Collina) #62030f8178ac3e6] - http: validate headers in writeEarlyHints (Richard Clarke) #61897899884d0ed] - http: remove redundant keepAliveTimeoutBuffer assignment (Efe) #6174308d2e40694] - http: attach error handler to socket synchronously in onSocket (RajeshKumar11) #617701c2064c1f8] - http: fix keep-alive socket reuse race in requestOnFinish (Martin Slota) #6171038e9c66e0f] - http2: add strictSingleValueFields option to relax header validation (Tim Perry) #599175cdcba17cc] - (SEMVER-MINOR) http2: add http1Options for HTTP/1 fallback configuration (Amol Yadav) #61713687c0acd00] - http2: fix FileHandle leak in respondWithFile (sangwook) #617070c8f802ec2] - inspector: add Target.getTargets and extract TargetManager (Kohei) #624877de8a303c1] - inspector: unwrap internal/debugger/inspect imports (René) #6197459ac10a4fd] - lib: make SubtleCrypto.supports enumerable (Filip Skokan) #623079dc102ba90] - lib: prefer primordials in SubtleCrypto (Filip Skokan) #6222678a9aa8f32] - lib: fix source map url parse in dynamic imports (Chengzhong Wu) #6199016b8cc6643] - lib: improve argument handling in Blob constructor (Ms2ger) #61980a03b5d39b8] - lib: reduce cycles in esm loader and load it in snapshot (Joyee Cheung) #617691017bf5f86] - lib: remove top-level getOptionValue() calls in lib/internal/modules (Joyee Cheung) #61769d79984b41b] - lib: optimize styleText when validateStream is false (Rafael Gonzaga) #617926462b89d10] - meta: bump actions/download-artifact from 7.0.0 to 8.0.0 (dependabot[bot]) #620635bb89916ea] - meta: bump actions/upload-artifact from 6.0.0 to 7.0.0 (dependabot[bot]) #62062b067d74d94] - meta: bump step-security/harden-runner from 2.14.2 to 2.15.0 (dependabot[bot]) #62064830e5cd125] - meta: bump github/codeql-action from 4.32.0 to 4.32.4 (dependabot[bot]) #6191116c839a3dd] - meta: bump step-security/harden-runner from 2.14.1 to 2.14.2 (dependabot[bot]) #61909498abf661e] - meta: bump actions/stale from 10.1.1 to 10.2.0 (dependabot[bot]) #6190878ac17f426] - module: fix coverage of mocked CJS modules imported from ESM (Marco) #6213346cfad4138] - module: run require.resolve through module.registerHooks() (Joyee Cheung) #620288b6be3fe14] - module: mark require(esm) as stable (Joyee Cheung) #6095968fbc0c6cc] - module: mark module compile cache as stable (Joyee Cheung) #60971c851e76f8c] - (SEMVER-MINOR) net: addsetTOSandgetTOStoSocket(Amol Yadav) #615034c206ecb31] - quic: remove CryptoKey support from session keys option (Filip Skokan) #623352f9c085cf5] - sqlite: handle stmt invalidation (Guilherme Araújo) #618776ac4304c87] - (SEMVER-MINOR) sqlite: add limits property to DatabaseSync (Mert Can Altin) #61298aaf9af1672] - sqlite: mark as release candidate (Matteo Collina) #612627d67e5d693] - src: convert context_frame field in AsyncWrap to internal field (Anna Henningsen) #62103d8ea1aaa8a] - src: make AsyncWrap subclass internal field counts explicit (Anna Henningsen) #621031dbf3bedbe] - src: improve EC JWK import performance (Filip Skokan) #62396cd84af747b] - src: handle null backing store in ArrayBufferViewContents::Read (Mert Can Altin) #623434f553cdc01] - src: enable compilation/linking with OpenSSL 4.0 (Filip Skokan) #6241070f8057258] - src: use stack allocation in indexOf latin1 path (Mert Can Altin) #62268d788467b6a] - src: expose async context frame debugging helper to JS (Anna Henningsen) #621034213f893ec] - src: release context frame in AsyncWrap::EmitDestroy (Gerhard Stöbich) #6199579fb8cbcf5] - src: use validate_ascii_with_errors instead of validate_ascii (Сковорода Никита Андреевич) #611222df328d59e] - src: fix flags argument offset in JSUdpWrap (Weixie Cui) #61948eb77a7a297] - (SEMVER-MINOR) src: add C++ support for diagnostics channels (RafaelGSS) #618696cda3d30c0] - src: remove unnecessaryc_str()conversions in diagnostic messages (Anna Henningsen) #6178626c6045363] - src: use bool literals in TraceEnvVarOptions (Tobias Nießen) #614253c8f700fd7] - src: track allocations made by zstd streams (Anna Henningsen) #6171794dbb36d4d] - src: do not store compression methods on Brotli classes (Anna Henningsen) #61717bef661f182] - src: extract zlib allocation tracking into its own class (Anna Henningsen) #61717e8079a8297] - src: release memory for zstd contexts inClose()(Anna Henningsen) #617176e1197a3cc] - src: add more checks and clarify docs for external references (Joyee Cheung) #61719c28a22c4be] - src: fix cjs_lexer external reference registration (Joyee Cheung) #617189e2c5fd7c9] - src: simply uint32 to string as it must not fail (Chengzhong Wu) #60846df435d32b8] - src: build v8 tick processor as built-in source text modules (Joyee Cheung) #605182cb3573735] - src,sqlite: fix filterFunc dangling reference (Edy Silva) #62281c44f53b544] - stream: preserve error over AbortError in pipeline (Marco) #62113dc541370b4] - stream: replace bind with arrow function for onwrite callback (Ali Hassan) #62087f6cdfbfaa7] - stream: optimize webstreams pipeTo (Mattias Buelens) #62079fcf2a9f788] - stream: fix brotli error handling in web compression streams (Filip Skokan) #62107cdec579c6b] - stream: improve Web Compression spec compliance (Filip Skokan) #62107dbe5898379] - stream: fix UTF-8 character corruption in fast-utf8-stream (Matteo Collina) #61745531e62cd74] - stream: fix TransformStream race on cancel with pending write (Marco) #62040a3751f2249] - stream: accept ArrayBuffer in CompressionStream and DecompressionStream (조수민) #6191365aa8f68d0] - stream: fix pipeTo to defer writes per WHATWG spec (Matteo Collina) #6180015f32b4935] - stream: fix decoded fromList chunk boundary check (Thomas Watson) #61884569767e52e] - stream: add fast paths for webstreams read and pipeTo (Matteo Collina) #618076834ca13bb] - (SEMVER-MINOR) stream: renameDuplex.toWeb()type option toreadableType(René) #616325ed5474437] - test: update WPT for WebCryptoAPI to2cb332d(Node.js GitHub Bot) #624833c9c0f8577] - test: fix test-buffer-zero-fill-cli to be effective (Сковорода Никита Андреевич) #6062319a52a1abe] - test: update WPT for url tofc3e651(Node.js GitHub Bot) #62379111ba9bd5b] - test: wait for reattach before initial break on restart (Yuya Inoue) #624710897c6cc08] - test: disable flaky WPT Blob test on AIX (James M Snell) #624701c3d93bfab] - test: avoid flaky run wait in debugger restart test (Yuya Inoue) #6211283416a640a] - test: skip test-cluster-dgram-reuse on AIX 7.3 (Stewart X Addison) #62238af8d0922dd] - test: add WebCrypto Promise.prototype.then pollution regression tests (Filip Skokan) #62226fc9a60ec74] - test: update WPT for WebCryptoAPI to6a1c545(Node.js GitHub Bot) #6218712ba2d74fe] - test: update WPT for url toc928b19(Node.js GitHub Bot) #621484e15e5b647] - test: update WPT for WebCryptoAPI toc9e9558(Node.js GitHub Bot) #62147dc66a05558] - test: improve WPT report runner (Filip Skokan) #621079536e5621b] - test: update WPT compression toae05f5c(Filip Skokan) #62107fb1c0bda0a] - test: update WPT for WebCryptoAPI to42e4732(Node.js GitHub Bot) #62048d886f27485] - test: fix skipping behavior fortest-runner-run-files-undefined(Antoine du Hamel) #62026f79df03e0b] - test: remove unnecessaryprocess.exitcalls from test files (Antoine du Hamel) #620201319295467] - test: skiptest-urlon--shared-adabuilds (Antoine du Hamel) #620192ea06727c6] - test: skip strace test with shared openssl (Richard Lau) #61987c0680d5df7] - test: avoid flaky debugger restart waits (Yuya Inoue) #6177322b748ef72] - test: fix typos in test files (Daijiro Wachi) #61408a20bf9a84d] - test: allow filtering async internal frames in assertSnapshot (Joyee Cheung) #61769ec2913f036] - test: unify assertSnapshot stacktrace transform (Chengzhong Wu) [#6166Configuration
📅 Schedule: (UTC)
* 0-3 1 * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.