Skip to content

build(deps-dev): bump all #1602

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 30, 2025
Merged

build(deps-dev): bump all #1602

merged 1 commit into from
Jun 30, 2025

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 30, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@11ty/eleventy (source) 3.1.1 -> 3.1.2 age adoption passing confidence devDependencies patch
@types/node (source) 22.15.32 -> 22.15.34 age adoption passing confidence devDependencies patch
github/codeql-action v3.29.0 -> v3.29.1 age adoption passing confidence action patch
gulp-rename 2.0.0 -> 2.1.0 age adoption passing confidence devDependencies minor
node (source) 22.16.0 -> 22.17.0 age adoption passing confidence engines minor
pnpm (source) 10.12.2 -> 10.12.4 age adoption passing confidence packageManager patch
pnpm (source) 10.12.2 -> 10.12.4 age adoption passing confidence engines patch
prettier (source) 3.6.0 -> 3.6.2 age adoption passing confidence devDependencies patch
returntocorp/semgrep 16783c5 -> 435374f container digest

Release Notes

11ty/eleventy (@​11ty/eleventy)

v3.1.2: Eleventy v3.1.2 (we fixed 15 more things)

Compare Source

Try it out in your project

npm install @​11ty/eleventy@latest

Release notes

  • Bug fix: issue with Computed Data with Array -> Object -> Template Strings #​3850
  • Bug fix:Workaround dependency bug in tinyglobby when using ../ for input directory (and/or passthrough copy) #​3854 #​3862
  • Bug fix: issue with absolute path for input directory resulting in incorrect output directory #​3853
  • Bug fix: issue with pagination over collections missing the all collection #​3860
  • Bug fix: Custom template engines should inherit aliased the parent cacheable value for advanced control of internal cache (related docs). Fixes issues with JavaScript import cache busting in Windows #​3824 #​3832
  • Bug fix: Server cache issue with newly created directory data file not picked up during --watch or --serve (on subsequent builds) #​3569
  • Bug fix: Saving your Configuration file may keep the process open after ⌘+C or CTRL+C #​3873
  • Bug fix: Incremental builds may result in templateRender has not yet initialized error after Configuration reset #​3870
  • Bug fix: #​3874 Config reset for dev server restart
  • Bug fix: #​3875 #​1525 numeric tags for collection names
  • Audit fix: npm audit with brace-expansion dependency #​3866
  • Dependency update: bump entities from 6.0.0 to 6.0.1 in https://github.com/11ty/eleventy/pull/3855
github/codeql-action (github/codeql-action)

v3.29.1

Compare Source

hparra/gulp-rename (gulp-rename)

v2.1.0

Compare Source

  • Updated deps to gulp 5 + vinyl 3
nodejs/node (node)

v22.17.0: 2025-06-24, Version 22.17.0 'Jod' (LTS), @​aduh95

Compare Source

Notable Changes
⚠️ Deprecations
Instantiating node:http classes without new

Constructing classes like IncomingMessage or ServerResponse without the new
keyword is now discouraged. This clarifies API expectations and aligns with standard
JavaScript behavior. It may warn or error in future versions.

Contributed by Yagiz Nizipli in #​58518.

options.shell = "" in node:child_process

Using an empty string for shell previously had undefined behavior. This change
encourages explicit choices (e.g., shell: true or a shell path) and avoids
relying on implementation quirks.

Contributed by Antoine du Hamel and Renegade334 #​58564.

HTTP/2 priority signaling

The HTTP/2 prioritization API (e.g., stream.priority) is now deprecated due to
poor real-world support. Applications should avoid using priority hints and expect future removal.

Contributed by Matteo Collina and Antoine du Hamel #​58313.

✅ Features graduated to stable
assert.partialDeepStrictEqual()

This method compares only a subset of properties in deep object comparisons,
useful for flexible test assertions. Its stabilization means it's now safe for
general use and won't change unexpectedly in future releases.

Contributed by Ruben Bridgewater in #​57370.

Miscellaneous
  • dirent.parentPath
  • filehandle.readableWebStream()
  • fs.glob()
  • fs.openAsBlob()
  • node:readline/promises
  • port.hasRef()
  • readable.compose()
  • readable.iterator()
  • readable.readableAborted
  • readable.readableDidRead
  • Duplex.fromWeb()
  • Duplex.toWeb()
  • Readable.fromWeb()
  • Readable.isDisturbed()
  • Readable.toWeb()
  • stream.isErrored()
  • stream.isReadable()
  • URL.createObjectURL()
  • URL.revokeObjectURL()
  • v8.setHeapSnapshotNearHeapLimit()
  • Writable.fromWeb()
  • Writable.toWeb()
  • writable.writableAborted
  • Startup Snapshot API
  • ERR_INPUT_TYPE_NOT_ALLOWED
  • ERR_UNKNOWN_FILE_EXTENSION
  • ERR_UNKNOWN_MODULE_FORMAT
  • ERR_USE_AFTER_CLOSE

Contributed by James M Snell in
#​57513 and
#​58541.

Semver-minor features
🔧 fs.FileHandle.readableWebStream gets autoClose option

This gives developers explicit control over whether the file descriptor should
be closed when the stream ends. Helps avoid subtle resource leaks.

Contributed by James M Snell in #​58548.

🔧 fs.Dir now supports explicit resource management

This improves ergonomics around async iteration of directories. Developers can
now manually control when a directory is closed using .close() or with Symbol.asyncDispose.

Contributed by Antoine du Hamel in #​58206.

📊 http2 gains diagnostics channel: http2.server.stream.finish

Adds observability support for when a stream finishes. Useful for logging,
monitoring, and debugging HTTP/2 behavior without patching internals.

Contributed by Darshan Sen in #​58560.

🔐 Permissions: implicit allow-fs-read to entrypoint

Node.js permissions model now allows read access to the entry file by default.
It makes running permission-restricted apps smoother while preserving security.

Contributed by Rafael Gonzaga in #​58579.

🎨 util.styleText() adds 'none' style

This lets developers remove styling cleanly without hacks. Useful for overriding
inherited terminal styles when composing styled strings.

Contributed by James M Snell in #​58437.

🧑‍💻 Community updates
Commits
pnpm/pnpm (pnpm)

v10.12.4

Compare Source

Patch Changes

v10.12.3

Compare Source

Patch Changes
  • Restore hoisting of optional peer dependencies when installing with an outdated lockfile.
    Regression introduced in v10.12.2 by #​9648; resolves #​9685.
prettier/prettier (prettier)

v3.6.2

Compare Source

diff

Markdown: Add missing blank line around code block (#​17675 by @​fisker)
<!-- Input -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

<!-- Prettier 3.6.1 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```
   1. Another
   2. List

<!-- Prettier 3.6.2 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

v3.6.1

Compare Source

diff

TypeScript: Allow const without initializer (#​17650, #​17654 by @​fisker)
If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Copy link

netlify bot commented Jun 30, 2025

Deploy Preview for gh-pages-openinf ready!

Name Link
🔨 Latest commit 09f713d
🔍 Latest deploy log https://app.netlify.com/projects/gh-pages-openinf/deploys/6862033e3a55da00084a2e4d
😎 Deploy Preview https://deploy-preview-1602--gh-pages-openinf.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License

View full report

@renovate renovate bot merged commit a2d6c94 into live Jun 30, 2025
12 checks passed
@renovate renovate bot deleted the renovate/all branch June 30, 2025 06:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants