chore(deps): update all non-major dependencies - autoclosed #94

renovate · 2023-10-02T01:24:22Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v4.1.0` -> `v4.1.1`
actions/dependency-review-action	action	patch	`v3.1.0` -> `v3.1.5`
actions/first-interaction	action	minor	`v1.1.1` -> `v1.3.0`
actions/setup-node	action	patch	`v3.8.1` -> `v3.8.2`
dorny/paths-filter	action	minor	`v2.11.1` -> `v2.12.0`
github/codeql-action	action	minor	`v2.21.9` -> `v2.24.0`
node		minor	`18.18` -> `18.19`
ossf/scorecard-action	action	minor	`v2.2.0` -> `v2.3.1`
pnpm (source)	packageManager	minor	`8.8.0` -> `8.15.1`
step-security/harden-runner	action	minor	`v2.5.1` -> `v2.7.0`

Release Notes

actions/checkout (actions/checkout)

actions/dependency-review-action (actions/dependency-review-action)

`v3.1.5`: 3.1.5

Compare Source

What's Changed

Smaller per_page when requesting diff by @hmaurer in https://github.com/actions/dependency-review-action/pull/649
Update dependencies:
- Bump @typescript-eslint/parser from 6.10.0 to 6.13.1 by @dependabot in https://github.com/actions/dependency-review-action/pull/630
- Bump prettier from 3.0.3 to 3.1.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/629
- Bump @types/jest from 29.5.8 to 29.5.11 by @dependabot in https://github.com/actions/dependency-review-action/pull/637
- Bump nodemon from 3.0.1 to 3.0.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/636
- Replace pip -> pypi in PURL examples by @febuiles in https://github.com/actions/dependency-review-action/pull/638
- Bump @typescript-eslint/eslint-plugin from 6.12.0 to 6.15.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/644
- Bump eslint from 8.53.0 to 8.56.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/640
- Bump @typescript-eslint/parser from 6.13.1 to 6.16.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/645
- Bump prettier from 3.1.0 to 3.1.1 by @dependabot in https://github.com/actions/dependency-review-action/pull/646

Full Changelog: actions/dependency-review-action@v3.1.4...v3.1.5

`v3.1.4`: 3.1.4

Compare Source

What's Changed

Fixed a bug with severity filtering when using the allow_ghsas option: https://github.com/actions/dependency-review-action/pull/623.
Updates dependencies:
- Bump @types/node from 16.18.61 to 16.18.62 by @dependabot in https://github.com/actions/dependency-review-action/pull/619
  action/pull/620
- Bump @typescript-eslint/eslint-plugin from 6.11.0 to 6.12.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/625
- Bump typescript from 5.2.2 to 5.3.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/624

Full Changelog: actions/dependency-review-action@v3...v3.1.4

`v3.1.3`: 3.1.3

Compare Source

What's Changed

Fixes purl "version must be percent-encoded" by @theztefan in https://github.com/actions/dependency-review-action/pull/617

Full Changelog: actions/dependency-review-action@v3...v3.1.3

`v3.1.2`: 3.1.2

Compare Source

What's Changed

Fix a regression for setups using self-hosted runners behind HTTP proxies:@febuiles in https://github.com/actions/dependency-review-action/pull/611

Full Changelog: actions/dependency-review-action@v3...v3.1.2

`v3.1.1`: 3.1.1

Compare Source

What's Changed

Update a bunch of dependencies, including major version upgrades for octokit, @actions/github and typescript.

Full Changelog: actions/dependency-review-action@v3.1.0...v3.1.1

actions/first-interaction (actions/first-interaction)

`v1.3.0`

Compare Source

Upgrade our base image from node v14 -> v20

Add dependency on @octokit/rest and @actions/http-client.

👉 See the PR for details: https://github.com/actions/first-interaction/pull/287

`v1.2.0`

Compare Source

Upgrade our codeql actions from v1 -> v2

Updates github/codeql-action/init, github/codeql-action/autobuild, and github/codeql-action/analyze to v2.

👉 See the PR for details: https://github.com/actions/first-interaction/pull/275

actions/setup-node (actions/setup-node)

`v3.8.2`

Compare Source

What's Changed

Update semver by @dmitry-shibanov in https://github.com/actions/setup-node/pull/861
Update temp directory creation by @nikolai-laevskii in https://github.com/actions/setup-node/pull/859
Bump @babel/traverse from 7.15.4 to 7.23.2 by @dependabot in https://github.com/actions/setup-node/pull/870
Add notice about binaries not being updated yet by @nikolai-laevskii in https://github.com/actions/setup-node/pull/872
Update toolkit cache and core by @dmitry-shibanov and @seongwon-privatenote in https://github.com/actions/setup-node/pull/875

Full Changelog: actions/setup-node@v3...v3.8.2

dorny/paths-filter (dorny/paths-filter)

`v2.12.0`

Compare Source

github/codeql-action (github/codeql-action)

`v2.24.0`

Compare Source

`v2.23.2`

Compare Source

`v2.23.1`

Compare Source

`v2.23.0`

Compare Source

`v2.22.12`

Compare Source

`v2.22.11`

Compare Source

`v2.22.10`

Compare Source

`v2.22.9`

Compare Source

`v2.22.8`

Compare Source

`v2.22.7`

Compare Source

`v2.22.6`

Compare Source

`v2.22.5`

Compare Source

`v2.22.4`

Compare Source

`v2.22.3`

Compare Source

`v2.22.2`

Compare Source

`v2.22.1`

Compare Source

`v2.22.0`

Compare Source

nodejs/node (node)

`v18.19.0`

Compare Source

`v18.18.2`

Compare Source

`v18.18.1`: 2023-10-10, Version 18.18.1 'Hydrogen' (LTS), @richardlau

Compare Source

Notable Changes

This release addresses some regressions that appeared in Node.js 18.18.0:

(Windows) FS can not handle certain characters in file name #48673
18 and 20 node images give error - Text file busy (after re-build images) nodejs/docker-node#1968
libuv update in 18.18.0 breaks webpack's thread-loader #49911

The libuv 1.45.0 and 1.46.0 updates that were released in Node.js 18.18.0 have been temporarily reverted.

Commits

[3e3a75cc46] - Revert "build: sync libuv header change" (Richard Lau) #50036
[14ece2c479] - Revert "deps: upgrade to libuv 1.45.0" (Richard Lau) #50036
[022352acbe] - Revert "deps: upgrade to libuv 1.46.0" (Richard Lau) #50036
[d9f138189c] - Revert "deps: add missing thread-common.c in uv.gyp" (Richard Lau) #50036
[7a3e1ffbb8] - fs: make sure to write entire buffer (Robert Nagy) #49211
[04cba95a67] - test: add tmpdir.resolve() (Livia Medeiros) #49079

ossf/scorecard-action (ossf/scorecard-action)

`v2.3.1`

Compare Source

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 from v4.13.0 to v4.13.1 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1282
- Adds additional Fuzzing detection and fixes a SAST bug related to detecting CodeQL. For a full changelist of what this includes, see the v4.13.1 release notes

Full Changelog: ossf/scorecard-action@v2.3.0...v2.3.1

`v2.3.0`

Compare Source

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1270
- For a full changelist of what this includes, see the v4.12.0 and v4.13.0 release notes
✨ Send rekor tlog index to webapp when publishing results by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1169
🐛 Prevent url clipping for GHES instances by @rajbos in https://github.com/ossf/scorecard-action/pull/1225

Documentation

📖 Update access rights needed to see the results in code scanning by @rajbos in https://github.com/ossf/scorecard-action/pull/1229
📖 Add package comments. by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1221
📖 Add SECURITY.md file by @david-a-wheeler in https://github.com/ossf/scorecard-action/pull/1250
📖 Fix typo in token input docs by @aabouzaid in https://github.com/ossf/scorecard-action/pull/1258

New Contributors

@david-a-wheeler made their first contribution in https://github.com/ossf/scorecard-action/pull/1250
@aabouzaid made their first contribution in https://github.com/ossf/scorecard-action/pull/1258

Full Changelog: ossf/scorecard-action@v2.2.0...v2.3.0

pnpm/pnpm (pnpm)

`v8.15.1`

Compare Source

Patch Changes

Use the object-hash library instead of node-object-hash for hashing keys of side-effects cache #7591.
bundledDependencies should never be added to the lockfile with false as the value #7576.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

`v8.15.0`

Compare Source

Minor Changes

When the license field does not exist in package.json but a license file exists, try to match and extract the license name #7530.

Patch Changes

Running pnpm update -r --latest will no longer downgrade prerelease dependencies #7436.
--aggregate-output should work on scripts executed from the same project #7556.
Prefer hard links over reflinks on Windows as they perform better #7564.
Reduce the length of the side-effects cache key. Instead of saving a stringified object composed from the dependency versions of the package, use the hash calculated from the said object #7563.
Throw an error if pnpm update --latest runs with arguments containing versions specs. For instance, pnpm update --latest foo@next is not allowed #7567.
Don't fail in Windows CoW if the file already exists #7554.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

`v8.14.3`

Compare Source

Patch Changes

pnpm pack should work as expected when "prepack" modifies the manifest #7558.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

`v8.14.2`

Compare Source

Patch Changes

Registry configuration from previous installation should not override current settings #7507.
pnpm dlx should not fail, when executed from package.json "scripts" 7424.
A git-hosted dependency should not be added to the store if it failed to be built #7407.
pnpm publish should pack "main" file or "bin" files defined in "publishConfig" #4195.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

`v8.14.1`

Compare Source

Patch Changes

Resolve the current working directory to its real location before doing any operations #6524.
Allow using token helpers in pnpm publish #7316.
Handle Git repository names containing capital letters #7488.
When hoisted-workspace-packages is true don't hoist the root package even if it has a name. Otherwise we would create a circular symlink.

Our Gold Sponsors



	config help if that's undesired. If you want to rebase/retry this PR, check this box This PR has been generated by Mend Renovate. View repository job log here.

github-actions · 2024-02-10T16:56:13Z

Thank you for following the naming conventions! 🙏

renovate bot requested a review from prisis as a code owner October 2, 2023 01:24

renovate bot added the c: dependencies label Oct 2, 2023

renovate bot changed the title ~~chore(deps): update actions/first-interaction action to v1.2.0~~ chore(deps): update all non-major dependencies Oct 3, 2023

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 14f39be to 76af6b1 Compare October 9, 2023 12:50

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 1ae5f10 to 0190bde Compare October 17, 2023 19:22

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from fc66f3d to 24f32d2 Compare October 27, 2023 17:03

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 166d9bb to 228803d Compare November 8, 2023 09:45

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from f7e1e7e to 4a6e3b0 Compare November 16, 2023 23:26

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from debadc5 to ee9254e Compare November 28, 2023 07:33

renovate bot force-pushed the renovate/all-minor-patch branch from ee9254e to 8e991db Compare November 29, 2023 18:08

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 0864dc6 to 89902be Compare December 13, 2023 22:45

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 3b23561 to 5e131d8 Compare December 26, 2023 15:33

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 9ca1b4e to 80832d2 Compare January 8, 2024 16:47

renovate bot force-pushed the renovate/all-minor-patch branch from 80832d2 to 2f49146 Compare January 10, 2024 15:46

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 017f9d2 to a8159fa Compare January 23, 2024 11:07

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 0027264 to 70f1c66 Compare January 31, 2024 00:15

chore(deps): update all non-major dependencies

fa9d168

renovate bot force-pushed the renovate/all-minor-patch branch from 70f1c66 to fa9d168 Compare February 2, 2024 22:10

renovate bot changed the title ~~chore(deps): update all non-major dependencies~~ chore(deps): update all non-major dependencies - autoclosed Feb 10, 2024

renovate bot closed this Feb 10, 2024

renovate bot deleted the renovate/all-minor-patch branch February 10, 2024 16:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all non-major dependencies - autoclosed #94

chore(deps): update all non-major dependencies - autoclosed #94

renovate bot commented Oct 2, 2023 •

edited

Loading

github-actions bot commented Feb 10, 2024

chore(deps): update all non-major dependencies - autoclosed #94

chore(deps): update all non-major dependencies - autoclosed #94

Conversation

renovate bot commented Oct 2, 2023 • edited Loading

Release Notes

What's Changed

New Contributors

v3.1.5: 3.1.5

What's Changed

v3.1.4: 3.1.4

What's Changed

v3.1.3: 3.1.3

What's Changed

v3.1.2: 3.1.2

What's Changed

v3.1.1: 3.1.1

What's Changed

Upgrade our base image from node v14 -> v20

Upgrade our codeql actions from v1 -> v2

What's Changed

v18.18.1: 2023-10-10, Version 18.18.1 'Hydrogen' (LTS), @​richardlau

Notable Changes

Commits

What's Changed

What's Changed

Documentation

New Contributors

Patch Changes

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

Minor Changes

Patch Changes

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

Patch Changes

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

Patch Changes

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

Patch Changes

Our Gold Sponsors

github-actions bot commented Feb 10, 2024

renovate bot commented Oct 2, 2023 •

edited

Loading

`v3.1.5`: 3.1.5

`v3.1.4`: 3.1.4

`v3.1.3`: 3.1.3

`v3.1.2`: 3.1.2

`v3.1.1`: 3.1.1

`v18.18.1`: 2023-10-10, Version 18.18.1 'Hydrogen' (LTS), @richardlau