fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@opentelemetry/api (source)	1.4.1 -> 1.6.0					dependencies	minor
@opentelemetry/exporter-jaeger (source)	1.17.0 -> 1.17.1					dependencies	patch
@opentelemetry/exporter-trace-otlp-grpc (source)	0.43.0 -> 0.44.0					dependencies	minor
@opentelemetry/instrumentation (source)	0.43.0 -> 0.44.0					dependencies	minor
@opentelemetry/instrumentation-express (source)	0.33.1 -> 0.33.2					dependencies	patch
@opentelemetry/instrumentation-http (source)	0.43.0 -> 0.44.0					dependencies	minor
@opentelemetry/instrumentation-pino (source)	0.34.1 -> 0.34.2					dependencies	patch
@opentelemetry/resources (source)	1.17.0 -> 1.17.1					dependencies	patch
@opentelemetry/sdk-trace-base (source)	1.17.0 -> 1.17.1					dependencies	patch
@opentelemetry/sdk-trace-node (source)	1.17.0 -> 1.17.1					dependencies	patch
@opentelemetry/semantic-conventions (source)	1.17.0 -> 1.17.1					dependencies	patch
Hl7.Fhir.R4	5.3.0 -> 5.4.0					nuget	minor
axios (source)	1.5.1 -> 1.6.0					dependencies	minor
charset-normalizer	==3.3.0 -> ==3.3.2						patch
core-js	3.33.0 -> 3.33.2					dependencies	patch
csv-stringify (source)	6.4.3 -> 6.4.4					dependencies	patch
docker.io/curlimages/curl	8.3.0 -> 8.4.0						minor
eslint (source)	8.51.0 -> 8.52.0					devDependencies	minor
eslint-plugin-vue (source)	9.17.0 -> 9.18.1					devDependencies	minor
fhir-pseudonymizer	0.5.6 -> 0.5.7						patch
fhirpath	3.7.1 -> 3.8.1					dependencies	minor
hapi-fhir-jpaserver	0.13.0 -> 0.14.0						minor
ohdsi	0.21.9 -> 0.21.10						patch
pino (source)	8.15.6 -> 8.16.1					dependencies	minor
pino (source)	8.15.6 -> 8.16.1					devDependencies	minor
pino-http	8.5.0 -> 8.5.1					dependencies	patch
pytest (source, changelog)	==7.4.2 -> ==7.4.3						patch
sass	1.69.0 -> 1.69.5					devDependencies	patch
vue (source)	2.7.14 -> 2.7.15					dependencies	patch
vue-template-compiler (source)	2.7.14 -> 2.7.15					devDependencies	patch
jacoco (source)	0.8.10 -> 0.8.11					dependencies	patch
org.apache.commons:commons-text (source)	1.10.0 -> 1.11.0					dependencies	minor
io.micrometer:micrometer-core	1.11.4 -> 1.11.5					dependencies	patch
io.micrometer:micrometer-registry-prometheus	1.11.4 -> 1.11.5					dependencies	patch
com.squareup.okhttp3:okhttp (source)	4.11.0 -> 4.12.0					dependencies	minor
ca.uhn.hapi.fhir:hapi-fhir-client-okhttp (source)	6.8.3 -> 6.8.5					dependencies	patch
com.github.slugify:slugify	3.0.5 -> 3.0.6					dependencies	patch
ca.uhn.hapi.fhir:hapi-fhir-structures-r4 (source)	6.8.3 -> 6.8.4					dependencies	patch
ca.uhn.hapi.fhir:hapi-fhir-client (source)	6.8.3 -> 6.8.5					dependencies	patch
com.fasterxml.jackson.core:jackson-annotations (source)	2.15.2 -> 2.15.3					dependencies	patch
ca.uhn.hapi.fhir:hapi-fhir-base (source)	6.8.3 -> 6.8.5					dependencies	patch
org.apache.camel.springboot:camel-micrometer-starter (source)	4.0.1 -> 4.1.0					dependencies	minor
org.apache.camel.springboot:camel-spring-boot-starter (source)	4.0.1 -> 4.1.0					dependencies	minor
org.apache.camel.springboot:camel-servlet-starter (source)	4.0.1 -> 4.1.0					dependencies	minor
org.apache.camel.springboot:camel-rest-starter (source)	4.0.1 -> 4.1.0					dependencies	minor
org.apache.camel:camel-cron	4.0.1 -> 4.1.0					dependencies	minor
org.apache.camel:camel-http	4.0.1 -> 4.1.0					dependencies	minor
org.apache.camel:camel-fhir	4.0.1 -> 4.1.0					dependencies	minor
org.apache.camel:camel-jsonpath	4.0.1 -> 4.1.0					dependencies	minor
org.apache.camel:camel-jackson	4.0.1 -> 4.1.0					dependencies	minor
org.springframework.boot:spring-boot-gradle-plugin (source)	3.1.4 -> 3.1.5					dependencies	patch
org.apache.camel:camel-sql	4.0.1 -> 4.1.0					dependencies	minor

---

Release Notes

open-telemetry/opentelemetry-js (@​opentelemetry/api)

v1.6.0

Compare Source

🚀 (Enhancement)

• perf(opentelemetry-core): improve hexToBase64 performance #​3178 @​seemk
• feat(sdk-trace-base): move Sampler declaration into sdk-trace-base #​3088 @​legendecas
• fix(grpc-instrumentation): added grpc attributes in instrumentation #​3127 @​andrewzenkov
• feat: support latest @opentelemetry/api #​3177 @​dyladan

🐛 (Bug Fix)

• fix(context-async-hooks): Ensure listeners added using once can be removed using removeListener
  #​3133

📚 (Refine Doc)

• chore: update trace-web example and rename it to opentelemetry-web #​3145 @​pichlermarc
• chore: update https example #​3152 @​pichlermarc

v1.5.0

Compare Source

🚀 (Enhancement)

• feat(sdk-trace-base): Improve extensibility of BasicTracerProvider #​3023 @​Rauno56

open-telemetry/opentelemetry-js-contrib (@​opentelemetry/instrumentation-express)

v0.33.2

Compare Source

FirelyTeam/firely-net-sdk (Hl7.Fhir.R4)

v5.4.0: 5.4.0

Intro:

Highlights of this new release:

Notable changes include modifying error messages, adding support for multiple valuesets and system filters, moving termservice code to shared projects, quantity arithmetic and introducing various improvements and updates to dependencies. Additionally, new contributors have made their first contributions to the project, including @​almostchristian.

Changes:

New Functionality:

• #​1442: [FhirPath] Add support for Quantity arithmetic

Others:

• #​2613: Make DateTime.ToString() locale-insensitive
• #​2608: Bump xunit from 2.5.2 to 2.5.3
• #​2607: Bump xunit.runner.visualstudio from 2.5.1 to 2.5.3
• #​2606: Bump xunit from 2.5.1 to 2.5.2
• #​2602: Bump BenchmarkDotNet from 0.13.8 to 0.13.9
• #​2600: Add subtract operator for Date and DateTime.
• #​2596: Improve performance of EnumUtility generic methods

See More

• #​2598: VONK-5414: Use a variable to control the restore via the GitHub package feed or not
• #​2595: #​1442: Added Quantity arithmetic
• #​2591: Use string also as a valid type for the input value of memberOf()
• #​2593: Bump xunit.runner.visualstudio from 2.5.0 to 2.5.1
• #​2592: Bump xunit from 2.5.0 to 2.5.1
• #​2585: Bump BenchmarkDotNet from 0.13.7 to 0.13.8
• #​2578: Bump Microsoft.NET.Test.Sdk from 17.7.1 to 17.7.2
• #​2574: Bump FluentAssertions from 6.11.0 to 6.12.0
• #​2573: Bump Microsoft.NET.Test.Sdk from 17.7.0 to 17.7.1
• #​2571: Dependabot: ignore updating Moq because of source code analyzer misuse
• #​2565: Bump BenchmarkDotNet from 0.13.6 to 0.13.7
• #​2564: Bump Microsoft.NET.Test.Sdk from 17.6.3 to 17.7.0
• #​2563: Merge the total effect of yesterdays PRs
• #​2560: 2326 Add Expand operation to LocalTerminologyService
• #​2559: Move some termservice code to shared projects
• #​2558: 2555 Add support for multiple valuesets and system filters to ValueSetExpander
• #​2554: Change error message when the ValueSetExpander can't find a specific CodeSystem

This list of changes was auto generated.

axios/axios (axios)

v1.6.0

Compare Source

Bug Fixes

• CSRF: fixed CSRF vulnerability CVE-2023-45857 (#​6028) (96ee232)
• dns: fixed lookup function decorator to work properly in node v20; (#​6011) (5aaff53)
• types: fix AxiosHeaders types; (#​5931) (a1c8ad0)

PRs

• CVE 2023 45857 ( #​6028 )

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

Contributors to this release

• Dmitriy Mozgovoy
• Valentin Panov
• Rinku Chaudhari

1.5.1 (2023-09-26)

Bug Fixes

• adapters: improved adapters loading logic to have clear error messages; (#​5919) (e410779)
• formdata: fixed automatic addition of the Content-Type header for FormData in non-browser environments; (#​5917) (bc9af51)
• headers: allow content-encoding header to handle case-insensitive values (#​5890) (#​5892) (4c89f25)
• types: removed duplicated code (9e62056)

Contributors to this release

• Dmitriy Mozgovoy
• David Dallas
• Sean Sattler
• Mustafa Ateş Uzun
• Przemyslaw Motacki
• Michael Di Prisco

PRs

• CVE 2023 45857 ( #​6028 )

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

Ousret/charset_normalizer (charset-normalizer)

v3.3.2

Compare Source

Fixed

• Unintentional memory usage regression when using large payload that match several encoding (#​376)
• Regression on some detection case showcased in the documentation (#​371)

Added

• Noise (md) probe that identify malformed arabic representation due to the presence of letters in isolated form (credit to my wife)

v3.3.1

Compare Source

Changed

• Optional mypyc compilation upgraded to version 1.6.1 for Python >= 3.8
• Improved the general detection reliability based on reports from the community

zloirock/core-js (core-js)

v3.33.2

Compare Source

• Simplified structuredClone polyfill, avoided second tree pass in cases of transferring
• Added support of SuppressedError to structuredClone polyfill
• Removed unspecified unnecessary ArrayBuffer and DataView dependencies of structuredClone lack of which could cause errors in some entries in IE10-
• Fixed handling of fractional number part in Number.fromString
• Compat data improvements:
  • URL.canParse marked as supported from Chromium 120
  • Updated Opera Android 78 compat data mapping
  • Added Electron 29 compat data mapping

v3.33.1

Compare Source

• Added one more workaround of possible error with Symbol polyfill on global object, #​1289
• Directly specified type: commonjs in package.json of all packages to avoid potential breakage in future Node versions, see this issue
• Prevented potential issue with lack of some dependencies after automatic optimization polyfills of some methods in the pure version
• Some minor internal fixes and optimizations
• Compat data improvements:
  • String.prototype.{ isWellFormed, toWellFormed } marked as supported from FF119
  • Added React Native 0.73 Hermes compat data, mainly fixes of [some issues]

---

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	18		0	0.37s
✅ BASH	bash-exec	4		0	0.05s
✅ BASH	shellcheck	1		0	0.03s
✅ BASH	shfmt	4		0	0.03s
⚠️ CSHARP	csharpier	1		1	0.3s
⚠️ CSHARP	dotnet-format	1		1	1.3s
✅ CSS	stylelint	1		0	1.4s
✅ DOCKERFILE	hadolint	4		0	0.17s
✅ EDITORCONFIG	editorconfig-checker	374		0	2.38s
✅ ENV	dotenv-linter	1		0	0.01s
✅ GROOVY	npm-groovy-lint	7		0	10.27s
✅ HTML	djlint	2		0	1.08s
✅ HTML	htmlhint	2		0	0.34s
✅ JAVA	checkstyle	59		0	6.04s
✅ JSON	eslint-plugin-jsonc	29		0	5.44s
✅ JSON	jsonlint	29		0	0.21s
✅ JSON	prettier	29		0	3.3s
✅ JSON	v8r	29		0	35.98s
⚠️ MARKDOWN	markdownlint	22		117	1.4s
✅ PYTHON	bandit	1		0	1.26s
✅ PYTHON	black	1		0	0.77s
✅ PYTHON	flake8	1		0	0.55s
✅ PYTHON	isort	1		0	0.23s
✅ PYTHON	mypy	1		0	5.72s
✅ PYTHON	ruff	1		0	0.04s
✅ REPOSITORY	checkov	yes		no	23.02s
✅ REPOSITORY	gitleaks	yes		no	1.3s
✅ REPOSITORY	git_diff	yes		no	0.13s
✅ REPOSITORY	grype	yes		no	12.55s
✅ REPOSITORY	kics	yes		no	60.54s
✅ REPOSITORY	secretlint	yes		no	1.86s
✅ REPOSITORY	syft	yes		no	1.21s
✅ REPOSITORY	trivy	yes		no	18.89s
✅ REPOSITORY	trivy-sbom	yes		no	1.53s
✅ REPOSITORY	trufflehog	yes		no	7.86s
✅ SQL	sql-lint	2		0	0.69s
✅ XML	xmllint	3		0	0.01s
✅ YAML	prettier	109		0	2.21s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

• Click here to request the new flavor

MegaLinter is graciously provided by