fix(deps): update all dependencies #109

renovate · 2025-07-17T07:32:57Z

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

This PR contains the following updates:

Package	Change	Type	Update
@aptre/common	`0.22.10` -> `0.22.12`	devDependencies	patch
actions/dependency-review-action	`v4.7.1` -> `v4.8.0`	action	minor
actions/setup-go	`v5.5.0` -> `v6.0.0`	action	major
actions/setup-node	`v4.4.0` -> `v5.0.0`	action	major
github.com/aperturerobotics/common	`v0.22.10` -> `v0.22.12`	require	patch
github/codeql-action	`v3.29.9` -> `v3.30.5`	action	minor
go (source)	`1.24.6` -> `1.25.1`	toolchain	minor
happy-dom	`^18.0.1` -> `^19.0.0`	devDependencies	major
starpc	`0.39.7` -> `0.39.9`	dependencies	patch
typescript (source)	`5.9.2` -> `5.9.3`	devDependencies	patch

Release Notes

aperturerobotics/common (@aptre/common)

`v0.22.12`

Compare Source

`v0.22.11`

Compare Source

actions/dependency-review-action (actions/dependency-review-action)

`v4.8.0`

Compare Source

What's Changed

Make Ruby Code Scannable by @ljones140 in #978
Batch some contributions for release by @brrygrdn in #986
- Make license lists collapsable by @jasperkamerling
- feat: add large summary handling with artifact upload by @MattMencel

New Contributors

@ljones140 made their first contribution in #978
@jasperkamerling made their first contribution in #986
@MattMencel made their first contribution in #986

Full Changelog: actions/dependency-review-action@v4...v4.8.0

`v4.7.4`

Compare Source

`v4.7.3`: 4.7.3

Compare Source

What's Changed

Add explicit permissions to workflow files by @AshelyTC in #966
Claire153/fix spamming mentioned issue by @claire153 in #974

Full Changelog: actions/dependency-review-action@v4...v4.7.3

`v4.7.2`: 4.7.2

Compare Source

What's Changed

Add Missing Languages to CodeQL Advanced Configuration by @KyFaSt in #945
Deprecate deny lists by @claire153 in #958
Address discrepancy between docs and reality by @ahpook in #960

New Contributors

@KyFaSt made their first contribution in #945
@claire153 made their first contribution in #958
@ahpook made their first contribution in #960

Full Changelog: actions/dependency-review-action@v4...v4.7.2

actions/setup-go (actions/setup-go)

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @matthewhughes934 in #460
Upgrade Nodejs runtime from node20 to node 24 by @salmanmkc in #624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] in #589
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in #591
Upgrade @typescript-eslint/parser from 8.31.1 to 8.35.1 by @dependabot[bot] in #590
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #594
Upgrade typescript from 5.4.2 to 5.8.3 by @dependabot[bot] in #538
Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @dependabot[bot] in #603
Upgrade form-data to bring in fix for critical vulnerability by @matthewhughes934 in #618
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #631

New Contributors

@matthewhughes934 made their first contribution in #618
@salmanmkc made their first contribution in #624

Full Changelog: actions/setup-go@v5...v6.0.0

actions/setup-node (actions/setup-node)

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

github/codeql-action (github/codeql-action)

`v3.30.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.5 - 26 Sep 2025

We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

See the full CHANGELOG.md for more information.

`v3.30.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.4 - 25 Sep 2025

We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100
We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107
You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130
Update default CodeQL bundle version to 2.23.1. #3118

See the full CHANGELOG.md for more information.

`v3.30.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.3 - 10 Sep 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.30.2`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.2 - 09 Sep 2025

Fixed a bug which could cause language autodetection to fail. #3084
Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

See the full CHANGELOG.md for more information.

`v3.30.1`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.1 - 05 Sep 2025

Update default CodeQL bundle version to 2.23.0. #3077

See the full CHANGELOG.md for more information.

`v3.30.0`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

See the full CHANGELOG.md for more information.

`v3.29.11`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.11 - 21 Aug 2025

Update default CodeQL bundle version to 2.22.4. #3044

See the full CHANGELOG.md for more information.

`v3.29.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

golang/go (go)

`v1.25.1`

`v1.25.0`

`v1.24.7`

capricorn86/happy-dom (happy-dom)

`v19.0.2`

Compare Source

👷‍♂️ Patch fixes

Fixes issue related to CSS pseudo selector :scope that didn't work correctly for direct descendants to root - By @capricorn86 in task #1620

`v19.0.1`

Compare Source

👷‍♂️ Patch fixes

Fixes issue with sending in URLs as string in @happy-dom/server-renderer config using CLI - By @capricorn86 in task #1908

`v19.0.0`

Compare Source

💣 Breaking Changes

Removes support for CommonJS - By @capricorn86 in task #1730
- Support for CommonJS is no longer needed as Node.js v18 is deprecated and v20 and above supports loading ES modules from CommonJS using require()
Updates Jest to v30 in the @happy-dom/jest-environment package - By @capricorn86 in task #1730
Makes Jest packages peer dependencies to make it easier to align versions with the project using @happy-dom/jest-environment - By @capricorn86 in task #1730

🎨 Features

Adds a new package called @happy-dom/server-renderer - By @capricorn86 in task #1730
- This package provides a simple way to statically render (SSG) or server-side render (SSR) your client-side application
- Read more in the Wiki under Server-Renderer
Adds support for import.meta to the ESM compiler - By @capricorn86 in task #1730
Adds support for the CSS pseudo selector :scope - By @capricorn86 in task #1620
Improves support for MediaList - By @capricorn86 in task #1730
Adds support for CSSKeywordValue, CSSStyleValue, StylePropertyMap, StylePropertyMap, StylePropertyMapReadOnly - By @capricorn86 in task #1730
Improves debug information in the ESM compiler - By @capricorn86 in task #1730
Adds validation of browser settings when creating a new Browser instance - By @capricorn86 in task #1730
Adds support for the browser setting navigation.beforeContentCallback which makes it possible to inject event listeners or logic before content is loaded to the document when navigating a browser frame - By @capricorn86 in task #1730
Adds support for the browser setting fetch.requestHeaders which provides with a declarative and simple way to add request headers - By @capricorn86 in task #1730
Adds support for setting an object to timer.preventTimerLoops which makes it possible to define different settings for setTimeout() and requestAnimationFrame() - By @capricorn86 in task #1730
Adds support for the browser setting viewport which makes it possible to define a default viewport size - By @capricorn86 in task #1730
Adds support for the parameters beforeContentCallback and headers to BrowserFrame.goto(), BrowserFrame.goBack(), BrowserFrame.goForward(), BrowserFrame.goSteps() and BrowserFrame.reload() - By @capricorn86 in task #1730
Adds support for PopStateEvent and trigger the event when navigating the page history using History.pushState() - By @capricorn86 in task #1730
Use local file paths for virtual server files in stack traces - By @capricorn86 in task #1730
Adds support for ResponseCache.fileSystem.load() and ResponseCache.fileSystem.save() for storing and loading cache from the file system - By @capricorn86 in task #1730

👷‍♂️ Patch fixes

Fixes a bug in the ESM compiler that caused it to fail to parse certain code - By @capricorn86 in task #1730
Disables the same origin policy when navigating a browser frame using BrowserFrame.goto() - By @capricorn86 in task #1730
Fixes bug where CSS selectors with the pseudos "+" and ">" failed for selectors without arguments - By @capricorn86 in task #1730
Adds try and catch to listeners for events dispatched from XMLHttpRequest to prevent it from being set to an invalid state if a listener throws an Error - By @capricorn86 in task #1730

aperturerobotics/starpc (starpc)

`v0.39.9`

Compare Source

`v0.39.8`

Compare Source

microsoft/TypeScript (typescript)

`v5.9.3`

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2025-08-18T04:34:49Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Maintenance
	npm/@esbuild/aix-ppc64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/android-arm64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/darwin-arm64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/darwin-x64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/freebsd-arm64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/freebsd-x64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/linux-arm@0.25.8 ⏵ 0.25.10
	npm/@esbuild/linux-arm64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/linux-ia32@0.25.8 ⏵ 0.25.10
	npm/@esbuild/linux-loong64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/linux-mips64el@0.25.8 ⏵ 0.25.10
	npm/@esbuild/linux-ppc64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/linux-riscv64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/linux-s390x@0.25.8 ⏵ 0.25.10
	npm/@esbuild/linux-x64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/openbsd-arm64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/openbsd-x64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/sunos-x64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/win32-arm64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/win32-ia32@0.25.8 ⏵ 0.25.10
	npm/@esbuild/win32-x64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/netbsd-arm64@0.25.8 ⏵ 0.25.10
	npm/@esbuild/netbsd-x64@0.25.8 ⏵ 0.25.10
	npm/@rollup/rollup-linux-loong64-gnu@4.52.3
	npm/@rollup/rollup-win32-x64-gnu@4.52.3
	npm/@rollup/rollup-openharmony-arm64@4.52.3
	npm/@rollup/rollup-freebsd-arm64@4.46.2 ⏵ 4.52.3	⁺¹
	npm/@rollup/rollup-win32-arm64-msvc@4.46.2 ⏵ 4.52.3	⁺¹
	npm/@rollup/rollup-linux-arm64-musl@4.46.2 ⏵ 4.52.3	⁺¹
	npm/@rollup/rollup-linux-arm64-gnu@4.46.2 ⏵ 4.52.3	⁺¹
	npm/@rollup/rollup-darwin-arm64@4.46.2 ⏵ 4.52.3	⁺¹
	npm/@rollup/rollup-android-arm64@4.46.2 ⏵ 4.52.3	⁺¹
See 58 more rows in the dashboard

View full report

renovate bot force-pushed the renovate/all branch from d8d8e11 to 346964d Compare July 21, 2025 16:59

renovate bot changed the title ~~fix(deps): update dependency starpc to v0.39.6~~ fix(deps): update all dependencies Jul 21, 2025

renovate bot force-pushed the renovate/all branch 4 times, most recently from 3cf879b to f54d8fb Compare July 29, 2025 22:51

renovate bot force-pushed the renovate/all branch 5 times, most recently from 5e72547 to 6f73f7b Compare August 7, 2025 07:46

renovate bot changed the title ~~fix(deps): update all dependencies~~ fix(deps): update all dependencies - autoclosed Aug 7, 2025

renovate bot closed this Aug 7, 2025

renovate bot deleted the renovate/all branch August 7, 2025 07:48

renovate bot changed the title ~~fix(deps): update all dependencies - autoclosed~~ fix(deps): update all dependencies Aug 7, 2025

renovate bot reopened this Aug 7, 2025

renovate bot force-pushed the renovate/all branch from 67ec787 to 6f73f7b Compare August 7, 2025 17:26

renovate bot changed the title ~~fix(deps): update all dependencies~~ chore(deps): update github/codeql-action action to v3.29.6 Aug 7, 2025

renovate bot changed the title ~~chore(deps): update github/codeql-action action to v3.29.6~~ chore(deps): update github/codeql-action action to v3.29.7 Aug 7, 2025

renovate bot force-pushed the renovate/all branch from 6f73f7b to 48ea166 Compare August 7, 2025 21:47

renovate bot changed the title ~~chore(deps): update github/codeql-action action to v3.29.7~~ chore(deps): update github/codeql-action action to v3.29.8 Aug 8, 2025

renovate bot force-pushed the renovate/all branch 2 times, most recently from ebb5e9f to cce3199 Compare August 11, 2025 13:50

renovate bot changed the title ~~chore(deps): update github/codeql-action action to v3.29.8~~ chore(deps): update all dependencies Aug 11, 2025

renovate bot force-pushed the renovate/all branch 2 times, most recently from 7023c63 to c898fbe Compare August 12, 2025 22:01

renovate bot changed the title ~~chore(deps): update all dependencies~~ chore(deps): update all dependencies - autoclosed Aug 14, 2025

renovate bot closed this Aug 14, 2025

renovate bot changed the title ~~chore(deps): update all dependencies - autoclosed~~ chore(deps): update all dependencies Aug 14, 2025

renovate bot reopened this Aug 14, 2025

renovate bot force-pushed the renovate/all branch from 3b16955 to c898fbe Compare August 14, 2025 00:14

renovate bot changed the title ~~chore(deps): update all dependencies~~ chore(deps): update dependency go to v1.25.0 Aug 14, 2025

renovate bot changed the title ~~chore(deps): update dependency go to v1.25.0~~ fix(deps): update all dependencies Aug 18, 2025

renovate bot force-pushed the renovate/all branch from c898fbe to 04ef4de Compare August 18, 2025 04:34

renovate bot force-pushed the renovate/all branch 4 times, most recently from 9809306 to bc8922d Compare August 21, 2025 18:00

renovate bot force-pushed the renovate/all branch 3 times, most recently from 55d473f to 400cc75 Compare September 1, 2025 20:15

renovate bot force-pushed the renovate/all branch 4 times, most recently from 4f4baf9 to dd46765 Compare September 9, 2025 14:51

renovate bot force-pushed the renovate/all branch 2 times, most recently from 1a5cbed to 9957532 Compare September 16, 2025 14:50

renovate bot force-pushed the renovate/all branch 5 times, most recently from c3fbed5 to 3347824 Compare September 30, 2025 02:53

fix(deps): update all dependencies

232882b

renovate bot force-pushed the renovate/all branch from 3347824 to 232882b Compare September 30, 2025 21:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all dependencies #109

fix(deps): update all dependencies #109

renovate bot commented Jul 17, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Aug 18, 2025 •

edited

Loading

Uh oh!

Uh oh!

fix(deps): update all dependencies #109

Are you sure you want to change the base?

fix(deps): update all dependencies #109

Conversation

renovate bot commented Jul 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

v4.7.3: 4.7.3

What's Changed

v4.7.2: 4.7.2

What's Changed

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

CodeQL Action Changelog

3.30.5 - 26 Sep 2025

CodeQL Action Changelog

3.30.4 - 25 Sep 2025

CodeQL Action Changelog

3.30.3 - 10 Sep 2025

CodeQL Action Changelog

3.30.2 - 09 Sep 2025

CodeQL Action Changelog

3.30.1 - 05 Sep 2025

CodeQL Action Changelog

3.30.0 - 01 Sep 2025

CodeQL Action Changelog

3.29.11 - 21 Aug 2025

CodeQL Action Changelog

3.29.10 - 18 Aug 2025

👷‍♂️ Patch fixes

👷‍♂️ Patch fixes

💣 Breaking Changes

🎨 Features

👷‍♂️ Patch fixes

Configuration

Uh oh!

socket-security bot commented Aug 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

renovate bot commented Jul 17, 2025 •

edited

Loading

`v4.7.3`: 4.7.3

`v4.7.2`: 4.7.2

socket-security bot commented Aug 18, 2025 •

edited

Loading