-
Notifications
You must be signed in to change notification settings - Fork 133
fix(deps): update all non-major dependencies #2859
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
renovate
wants to merge
1
commit into
main
Choose a base branch
from
renovate/all-minor-patch
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
+824
−742
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Contributor
💻 Website PreviewThe latest changes are available as preview in: https://15fa2fee.envelop.pages.dev |
d919534 to
fdd8c35
Compare
fdd8c35 to
0c96e0b
Compare
0c96e0b to
0d21537
Compare
0d21537 to
cd74dd3
Compare
cd74dd3 to
91ae7cb
Compare
91ae7cb to
ae7f00a
Compare
ae7f00a to
eeacd74
Compare
eeacd74 to
5329b8e
Compare
5329b8e to
a7f19c0
Compare
3652dd7 to
c83abf0
Compare
c83abf0 to
57d8225
Compare
57d8225 to
0b74c6f
Compare
0b74c6f to
6b989f7
Compare
6b989f7 to
8ee0d3a
Compare
8ee0d3a to
bdb8bbd
Compare
bdb8bbd to
a2070b1
Compare
a2070b1 to
74e3422
Compare
74e3422 to
eb2713a
Compare
eb2713a to
0db03e6
Compare
0db03e6 to
62f1368
Compare
62f1368 to
bdfad99
Compare
bdfad99 to
309c384
Compare
309c384 to
146e553
Compare
146e553 to
4c8603c
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.11.0→4.11.27.28.6→7.29.07.28.6→7.29.07.28.6→7.29.04.20260127.0→4.20260207.00.5.1→0.6.04.7.0→4.7.124.10.9→24.10.1218.3.27→18.3.281.13.4→1.13.55.7.3→5.7.413.6.0→13.6.17.0.3→7.0.513.0.0→13.0.110.28.2→10.29.25.104.1→5.105.04.61.0→4.63.0Release Notes
Azure/azure-functions-nodejs-library (@azure/functions)
v4.11.1Compare Source
Removing Long as depndency
Removing dependency from lib.DOM
babel/babel (@babel/core)
v7.29.0Compare Source
v7.29.0 (2026-01-31)
Thanks @simbahax for your first PR!
🚀 New Feature
babel-typesbabel-standalone🐛 Bug Fix
babel-parserextendsclause (@nicolo-ribaudo)babel-traversebabel-plugin-transform-block-scoping,babel-traverse🏃♀️ Performance
babel-generator,babel-runtime-corejs3Committers: 6
cloudflare/workerd (@cloudflare/workers-types)
v4.20260207.0Compare Source
v4.20260206.0Compare Source
v4.20260205.0Compare Source
v4.20260203.0Compare Source
v4.20260131.0Compare Source
v4.20260130.0Compare Source
v4.20260129.0Compare Source
v4.20260128.0Compare Source
eslint/rewrite (@eslint/plugin-kit)
v0.6.0Compare Source
Features
CustomRuleVisitorWithExittype to@eslint/plugin-kit(#351) (e7d1be4)@eslint/plugin-kit(#355) (8ac8530)Dependencies
ianvs/prettier-plugin-sort-imports (@ianvs/prettier-plugin-sort-imports)
v4.7.1Compare Source
What's Changed
Fixes
Dependencies
Docs
New Contributors
Full Changelog: IanVS/prettier-plugin-sort-imports@v4.7.0...v4.7.1
axios/axios (axios)
v1.13.5Compare Source
Release 1.13.5
Highlights
__proto__key inmergeConfig. (PR #7369)AxiosErrorcould be missing thestatusfield on and after v1.13.3. (PR #7368)Changes
Security
__proto__key inmergeConfig. (PR #7369)Fixes
statusis present inAxiosErroron and after v1.13.3. (PR #7368)Features / Improvements
isAbsoluteURL. (PR #7326)Documentation
Bufferconstructor usage and README formatting. (PR #7371)CI / Maintenance
karma-sourcemap-loaderfrom 0.3.8 to 0.4.0. (PR #7360)New Contributors
Full Changelog: axios/axios@v1.13.4...v1.13.5
fastify/fastify (fastify)
v5.7.4Compare Source
Full Changelog: fastify/fastify@v5.7.3...v5.7.4
firebase/firebase-admin-node (firebase-admin)
v13.6.1: Firebase Admin Node.js SDK v13.6.1Compare Source
Bug Fixes
isURL()to use Built-inURLConstructor (#3061)Miscellaneous
firebase/firebase-functions (firebase-functions)
v7.0.5Compare Source
graphql. (#1795)v7.0.4Compare Source
isaacs/node-glob (glob)
v13.0.1Compare Source
pnpm/pnpm (pnpm)
v10.29.2Compare Source
v10.29.1: pnpm 10.29.1Compare Source
Minor Changes
pnpm dlx/pnpxcommand now supports thecatalog:protocol. Example:pnpm dlx shx@catalog:.auditLevelin thepnpm-workspace.yamlfile #10540.workspace:protocol without version specifier. It is now treated asworkspace:*and resolves to the concrete version during publish #10436.Patch Changes
Fixed
pnpm list --jsonreturning incorrect paths when using global virtual store #10187.Fix
pnpm store pathandpnpm store statususing workspace root for path resolution whenstoreDiris relative #10290.Fixed
pnpm run -rfailing with "No projects matched the filters" when an emptypnpm-workspace.yamlexists #10497.Fixed a bug where
catalogMode: strictwould write the literal string"catalog:"topnpm-workspace.yamlinstead of the resolved version specifier when re-adding an existing catalog dependency #10176.Fixed the documentation URL shown in
pnpm completion --helpto point to the correct page at https://pnpm.io/completion #10281.Skip local
file:protocol dependencies duringpnpm fetch. This fixes an issue wherepnpm fetchwould fail in Docker builds when local directory dependencies were not available #10460.Fixed
pnpm audit --jsonto respect the--audit-levelsetting for both exit code and output filtering #10540.update tar to version 7.5.7 to fix security issue
Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: CVE-2026-24842
Fix
pnpm audit --fixreplacing reference overrides (e.g.$foo) with concrete versions #10325.Fix
shamefullyHoistset viaupdateConfigin.pnpmfile.cjsnot being converted topublicHoistPattern#10271.pnpm helpshould correctly report if the currently running pnpm CLI is bundled with Node.js #10561.Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for
node_modules/.bin, causing binaries to not be found when running commands likepnpm exec#10457.Platinum Sponsors
Gold Sponsors
webpack/webpack (webpack)
v5.105.0Compare Source
Minor Changes
Allow resolving worker module by export condition name when using
new Worker()(by @hai-x in #20353)Detect conditional imports to avoid compile-time linking errors for non-existent exports. (by @hai-x in #20320)
Added the
tsconfigoption for theresolveroptions (replacement fortsconfig-paths-webpack-plugin). Can befalse(disabled),true(use the defaulttsconfig.jsonfile to search for it), a string path totsconfig.json, or an object withconfigFileandreferencesoptions. (by @alexander-akait in #20400)Support
import.defer()for context modules. (by @ahabhgk in #20399)Added support for array values to the
devtooloption. (by @hai-x in #20191)Improve rendering node built-in modules for ECMA module output. (by @hai-x in #20255)
Unknown import.meta properties are now determined at runtime instead of being statically analyzed at compile time. (by @xiaoxiaojx in #20312)
Patch Changes
Fixed ESM default export handling for
.mjsfiles in Module Federation (by @y-okt in #20189)Optimized
import.meta.envhandling in destructuring assignments by using cached stringified environment definitions. (by @xiaoxiaojx in #20313)Respect the
stats.errorStackoption in stats output. (by @samarthsinh2660 in #20258)Fixed a bug where declaring a
modulevariable in module scope would conflict with the defaultmoduleArgument. (by @xiaoxiaojx in #20265)Fix VirtualUrlPlugin to set resourceData.context for proper module resolution. Previously, when context was not set, it would fallback to the virtual scheme path (e.g.,
virtual:routes), which is not a valid filesystem path, causing subsequent resolve operations to fail. (by @xiaoxiaojx in #20390)Fixed Worker self-import handling to support various URL patterns (e.g.,
import.meta.url,new URL(import.meta.url),new URL(import.meta.url, import.meta.url),new URL("./index.js", import.meta.url)). Workers that resolve to the same module are now properly deduplicated, regardless of the URL syntax used. (by @xiaoxiaojx in #20381)Reuse the same async entrypoint for the same Worker URL within a module to avoid circular dependency warnings when multiple Workers reference the same resource. (by @xiaoxiaojx in #20345)
Fixed a bug where a self-referencing dependency would have an unused export name when imported inside a web worker. (by @samarthsinh2660 in #20251)
Fix missing export generation when concatenated modules in different chunks share the same runtime in module library bundles. (by @hai-x in #20346)
Fixed
import.meta.env.xxxbehavior: when accessing a non-existent property, it now returns empty object instead of full object at runtime. (by @xiaoxiaojx in #20289)Improved parsing error reporting by adding a link to the loader documentation. (by @gaurav10gg in #20244)
Fix typescript types. (by @alexander-akait in #20305)
Add declaration for unused harmony import specifier. (by @hai-x in #20286)
Fix compressibility of modules while retaining portability. (by @dmichon-msft in #20287)
Optimize source map generation: only include
ignoreListproperty when it has content, avoiding empty arrays in source maps. (by @xiaoxiaojx in #20319)Preserve star exports for dependencies in ECMA module output. (by @hai-x in #20293)
Consider asset modulem to be side-effect free. (by @hai-x in #20352)
Avoid generating JavaScript modules for CSS exports that are not used, reducing unnecessary output and bundle size. (by @xiaoxiaojx in #20337)
cloudflare/workers-sdk (wrangler)
v4.63.0Compare Source
Minor Changes
#12386
447daa3Thanks @NuroDev! - Added new "open local explorer" hotkey for experimental/WIP local resource explorerWhen running
wrangler devwith the experimental local explorer feature enabled, you can now press theehotkey to open the local resource explorer UI in your browser.Patch Changes
#11350
ee9b81fThanks @dario-piotrowicz! - fix: improve error message when the entrypoint is incorrectError messages for incorrect entrypoint configuration have been improved to provide clearer and more actionable feedback. The updated messages help users understand what went wrong and how to fix their configuration.
#12402
63f1adbThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12418
ba13de9Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12216
fe3af35Thanks @ichernetsky-cf! - Deprecate 'wrangler cloudchamber apply' in favor of 'wrangler deploy'#12368
bd4bb98Thanks @KianNH! - Preserve Containers configuration when usingversionscommandsPreviously, commands like
wrangler versions uploadwould inadvertently disable Containers on associated Durable Object namespaces because thecontainersproperty was being omitted from the API request body.#12396
dab4bc9Thanks @petebacondarwin! - fix: redact email addresses and account names in non-interactive modeTo prevent sensitive information from being exposed in public CI logs, email addresses and account names are now redacted when running in non-interactive mode (e.g., CI environments). Account IDs remain visible to aid debugging.
#12378
18c0784Thanks @X6TXY! - Truncate Pages commit messages at UTF-8 boundaries to avoid invalid UTF-8Updated dependencies [
63f1adb,ba13de9,83adb2c]:v4.62.0Compare Source
Minor Changes
#12064
964a39dThanks @G4brym! - Add AI Search OAuth scopes to loginAdds
ai-search:writeandai-search:runOAuth scopes to the default login scopes, enabling wrangler to authenticate with AI Search APIs.#11867
253a85dThanks @rahulsuresh-git! - Addwrangler r2 bucket local-uploadscommand to manage local uploads for R2 bucketsWhen enabled, object data is written to the nearest region first, then asynchronously replicated to the bucket's primary region.
Docs: https://developers.cloudflare.com/r2/buckets/local-uploads
#11803
1bd1488Thanks @dario-piotrowicz! - Add a newsubrequestslimit to thelimitsfield of the Wrangler configuration fileBefore only the
cpu_mslimit was supported in thelimitsfield of the Wrangler configuration file, now asubrequestslimit can be specified as well which enables the user to limit the number of fetch requests that a Worker's invocation can make.Example:
{ "$schema": "./node_modules/wrangler/config-schema.json", "limits": { "cpu_ms": 1000, "subrequests": 150 // newly added field } }#12185
f7aa8c7Thanks @penalosa! - Addtimestampfield to the version metadata binding in local development. The version metadata binding now includesid,tag, andtimestampfields, making it easier to test version-aware logic locally.Patch Changes
#12190
ce736b9Thanks @dario-piotrowicz! - Update autoconfig logic to handle Next.js projects by using the new@opennextjs/cloudflare migratecommand#12065
47944d1Thanks @langningchen! - Improve error message whend1 export --outputpoints to a directory#12292
4c4d5a5Thanks @dario-piotrowicz! - AddversionCommandto theautoconfig_summaryfield in the autoconfig output entryAdd the version upload command to the output being printed by
wrangler deploytoWRANGLER_OUTPUT_FILE_DIRECTORY/WRANGLER_OUTPUT_FILE_PATH. This complements the existingbuildCommandanddeployCommandfields and allows CI systems to know how to upload new versions of Workers.For example, for a standard npm project this would be:
npx wrangler versions uploadWhile for a Next.js project it would be:
npx @​opennextjs/cloudflare upload#12050
b05b919Thanks @NuroDev! - Fixed Wrangler's error handling for both invalid commands with and without the--helpflag, ensuring consistent and clear error messages.Additionally, it also ensures that if you provide an invalid argument to a valid command, Wrangler will now correctly display that specific commands help menu.
#12289
0aaf080Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12295
b981db5Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12355
a113c0dThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#11971
fdd7a9fThanks @dario-piotrowicz! - Add framework id, build command, and deploy command to theautoconfig_summaryfield in the deploy output entryAdd the framework id alongside the commands to build and deploy the project to the output being printed by
wrangler deploytoWRANGLER_OUTPUT_FILE_DIRECTORYorWRANGLER_OUTPUT_FILE_PATH.For example for an npm Astro project these would be:
astronpm run buildnpx wrangler deployWhile for a Next.js project they would instead be:
nextnpx @​opennextjs/cloudflare buildnpx @​opennextjs/cloudflare deploy#12211
a5fca2cThanks @elithrar! - Remove the 'pubsub' sub-command and related functionalityThe Pub/Sub product was never made publicly available and has been discontinued. This removes the
wrangler pubsubcommand and all associated functionality.Updated dependencies [
0c9625a,0aaf080,b981db5,a113c0d,f7aa8c7]:v4.61.1Compare Source
Patch Changes
#12189
eb8a415Thanks @NuroDev! - Fixed Durable Object missing migrations warning message.If a Workers project includes some
durable_objectsin it but nomigrationswe show a warning to the user to addmigrationsto their config. However, this warning recommendednew_classesfor their migrations, but we instead now recommend all users usenew_sqlite_classesinstead.#11804
3b06b18Thanks @emily-shen! - fix: allowd1 execute,d1 export, andd1 migrationsto work locally withoutdatabase_idin config.#12183
17961bbThanks @dependabot! - chore: update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12196
52fdfe7Thanks @dependabot! - chore: update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12199
6d8d9cdThanks @petebacondarwin! - Preventwrangler logoutfrom failing when the Wrangler configuration file is invalidPreviously, if your
wrangler.tomlorwrangler.jsonfile contained syntax errors or invalid values, thewrangler logoutcommand would fail. Now, configuration parsing errors are caught and logged at debug level, allowing you to log out regardless of the state of your configuration file.#12153
cb72c11Thanks @petebacondarwin! - Sanitize commands and arguments in telemetry to prevent accidentally capturing sensitive information.Changes:
command/argstosanitizedCommand/sanitizedArgsto distinguish from historical fields that may have contained sensitive data in older versionsCOMMAND_ARG_ALLOW_LISTUpdated dependencies [
8a210af,17961bb,52fdfe7,5f060c9]:Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.