-
Notifications
You must be signed in to change notification settings - Fork 5
fix(deps): update all dependencies #188
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
ae2f9d0
to
f4729ce
Compare
2a584e8
to
e1cc4f9
Compare
1417d8f
to
b67b277
Compare
b67b277
to
e16a873
Compare
7e4ad27
to
e16a873
Compare
cb21065
to
edb6a64
Compare
edb6a64
to
b401b76
Compare
ℹ Artifact update noticeFile name: tools/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
dbe7bb9
to
b38f259
Compare
7a1e1f7
to
0bc2011
Compare
0bc2011
to
23283dd
Compare
23283dd
to
f341a8b
Compare
|
This PR contains the following updates:
^7.0.1
->^8.0.0
^2.6.1
->^3.0.0
8.44.0
->8.46.0
8.44.0
->8.46.0
v4.7.3
->v4.8.0
0.25.9
->0.25.10
9.35.0
->9.37.0
v0.25.9
->v0.25.10
v2.4.0
->v2.5.0
v0.43.0
->v0.44.0
v3.30.3
->v4.30.7
v1.36.9
->v1.36.10
16.1.6
->16.2.3
4.20.5
->4.20.6
5.9.2
->5.9.3
Release Notes
ChainSafe/js-libp2p-yamux (@chainsafe/libp2p-yamux)
v8.0.0
Compare Source
⚠ BREAKING CHANGES
libp2p@3.x.x
, it cannot be used with earlier versionsFeatures
libp2p/js-libp2p (@libp2p/interface)
v3.0.2
Compare Source
v3.0.1
Compare Source
v3.0.0
Compare Source
typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v8.46.0
Compare Source
🚀 Features
🩹 Fixes
export import
s (#11603)this: void
and binding (#11634)❤️ Thank You
You can read about our versioning strategy and releases on our website.
v8.45.0
Compare Source
🚀 Features
🩹 Fixes
❤️ Thank You
You can read about our versioning strategy and releases on our website.
v8.44.1
Compare Source
🩹 Fixes
❤️ Thank You
You can read about our versioning strategy and releases on our website.
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v8.46.0
Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
v8.45.0
Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
v8.44.1
Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
actions/dependency-review-action (actions/dependency-review-action)
v4.8.0
Compare Source
What's Changed
New Contributors
Full Changelog: actions/dependency-review-action@v4...v4.8.0
v4.7.4
Compare Source
evanw/esbuild (esbuild)
v0.25.10
Compare Source
Fix a panic in a minification edge case (#4287)
This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value
undefined
in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):Fix
@supports
nested inside pseudo-element (#4265)When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as
::placeholder
for correctness. The CSS nesting specification says the following:However, it seems like this behavior is different for nested at-rules such as
@supports
, which do work with pseudo-elements. So this release modifies esbuild's behavior to now take that into account:eslint/eslint (eslint)
v9.37.0
Compare Source
v9.36.0
Compare Source
golangci/golangci-lint (github.com/golangci/golangci-lint/v2)
v2.5.0
Compare Source
godoclint
linter https://github.com/godoc-lint/godoc-lintunqueryvet
linter https://github.com/MirrexOne/unqueryvetiotamixing
linter https://github.com/AdminBenni/iota-mixingembeddedstructfieldcheck
: from 0.3.0 to 0.4.0 (new option:empty-line
)err113
: fromaea10b5
to 0.1.1 (skip internals ofIs
methods forerror
type)ginkgolinter
: from 0.20.0 to 0.21.0 (new option:force-tonot
)gofumpt
: from 0.8.0 to 0.9.1 (new rule is to "clothe" naked returns for the sake of clarity)ineffassign
: from 0.1.0 to 0.2.0 (new option:check-escaping-errors
)musttag
: from 0.13.1 to 0.14.0 (support interface methods)revive
: from 1.11.0 to 1.12.0 (new options:identical-ifelseif-branches
,identical-ifelseif-conditions
,identical-switch-branches
,identical-switch-conditions
,package-directory-mismatch
,unsecure-url-scheme
,use-waitgroup-go
,useless-fallthrough
)thelper
: from 0.6.3 to 0.7.1 (skipt.Helper
in functions passed tosynctest.Test
)wsl
: from 5.1.1 to 5.2.0 (improvements related to subexpressions)asciicheck
: from 0.4.1 to 0.5.0errname
: from 1.1.0 to 1.1.1fatcontext
: from 0.8.0 to 0.8.1go-printf-func-name
: from 0.1.0 to 0.1.1godot
: from 1.5.1 to 1.5.4gosec
: from 2.22.7 to 2.22.8nilerr
: from 0.1.1 to a temporary forknilnil
: from 1.1.0 to 1.1.1protogetter
: from 0.3.15 to 0.3.16tagliatelle
: from 0.7.1 to 0.7.2testifylint
: from 1.6.1 to 1.6.4libp2p/go-libp2p (github.com/libp2p/go-libp2p)
v0.44.0
Compare Source
Highlights
Address Pipeline:
github.com/libp2p/go-libp2p/p2p/host/obsaddrs
DisableObservedAddrManager
Option. The top level libp2p optionDisableIdentifyAddressDiscovery
works as it used to.What's Changed
New Contributors
Full Changelog: libp2p/go-libp2p@v0.43.0...v0.44.0
github/codeql-action (github/codeql-action)
v4.30.7
Compare Source
v3.30.7
Compare Source
v3.30.6
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.6 - 02 Oct 2025
See the full CHANGELOG.md for more information.
v3.30.5
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.5 - 26 Sep 2025
3.30.4
withupload-sarif
which resulted in files without a.sarif
extension not getting uploaded. #3160See the full CHANGELOG.md for more information.
v3.30.4
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.4 - 25 Sep 2025
codeql-action/init
step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of thecodeql-action/init
step. #3099 and #3100tools: nightly
to theinit
action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130See the full CHANGELOG.md for more information.
protocolbuffers/protobuf-go (google.golang.org/protobuf)
v1.36.10
Compare Source
lint-staged/lint-staged (lint-staged)
v16.2.3
Compare Source
Patch Changes
27cd541
Thanks @iiroj! - When using--fail-on-changes
, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.v16.2.2
Compare Source
Patch Changes
#1667
699f95d
Thanks @iiroj! - The backup stash will not be dropped when using--fail-on-changes
and there are errors. When reverting to original state is disabled (via--no-revert
or--fail-on-changes
), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:
v16.2.1
Compare Source
Patch Changes
#1664
8277b3b
Thanks @iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions isreadonly string[]
and can't be mutated. Thanks @outslept!#1654
70b9af3
Thanks @iiroj! - This version has been published from GitHub Actions using Trusted Publishing for npm packages.#1659
4996817
Thanks @iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there arepackage.json
files in the working directory. This situation might happen when running lint-staged for a single package in a monorepo.#1654
7021f0a
Thanks @iiroj! - Return the caret semver range (^
) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates to lint-staged. This was changed in 16.2.0 after the vulnerability issues withchalk
anddebug
, which were also removed in the same version.Given the recent vulnerabilities in the npm ecosystem, it's best to be very careful when updating dependencies.
v16.2.0
Compare Source
Minor Changes
#1615
99eb742
Thanks @iiroj! - Added a new option--fail-on-changes
to make lint-staged exit with code 1 when tasks modify any files, making theprecommit
hook fail. This is similar to thegit diff --exit-code
option. Using this flag also implies the--no-revert
flag which means any changes made my tasks will be left in the working tree after failing, so that they can be manually staged and the commit tried again.#1611
cd05fd3
Thanks @rlorenzo! - Added a new option--continue-on-error
so that lint-staged will run all tasks to completion even if some of them fail. By default, lint-staded will exit early on the first failure.#1637
82fcc07
Thanks @iiroj! - Internal lint-staged errors are now thrown and visible in the console output. Previously they were caught with the process exit code set to 1, but not logged. This happens when, for example, there's a syntax error in the lint-staged configuration file.#1647
a5ecc06
Thanks @iiroj! - Remove debug as a dependency due to recent malware issue; read more at debug-js/debug#1005. Because of this, theDEBUG
environment variable is no longer supported — use the--debug
to enable debugging#1636
8db2717
Thanks @iiroj! - Added a new option--hide-unstaged
so that lint-staged will hide all unstaged changes to tracked files before running tasks. The changes will be applied back after running the tasks. Note that the combination of flags--hide-unstaged --no-hide-partially-staged
isn't meaningful and behaves the same as just--hide-unstaged
.Thanks to @ItsNickBarry for the idea and initial implementation in #1552.
#1648
7900b3b
Thanks @iiroj! - Remove lilconfig to reduce reliance on third-party dependencies. It was used to find possible config files outside of those tracked in Git, including from the parent directories. This behavior has been moved directly into lint-staged and should work about the same.Patch Changes
#1633
7f9e485
Thanks @dependabot! - Bumps listr2 from 9.0.3 to 9.0.4.#1626
99d5a9b
Thanks @iiroj! - Due to recent phishing attacks, for example chalk@5.6.1 was released with malware. To avoid lint-staged's users being at risk the direct dependencies are pinned to exact versions, instead of allowing future patch versions with the caret (^
) range.#1588
035bbf2
Thanks @outslept! - Increase performance by listing staged files and searching for configuration concurrently.#1645
deba3ad
Thanks @iiroj! - Remove chalk as a dependency due to recent malware issue; read more at chalk/chalk#656.If you are having trouble with ANSI color codes when using lint-staged, you can try setting either
FORCE_COLOR=true
orNO_COLOR=true
env variables.privatenumber/tsx (tsx)
v4.20.6
Compare Source
Bug Fixes
This release is also available on:
microsoft/TypeScript (typescript)
v5.9.3
Compare Source
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.