Skip to content

fix(deps): update all non-major dependencies#91

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#91
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented May 14, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action minor v4.2.2v4.3.1 age confidence
chromadb dependencies minor ^3.4.3^3.5.0 age confidence
node (source) engines minor >=24.15.0>=24.18.0 age confidence
node uses-with minor 24.15.024.18.0 age confidence
node final minor 24.15.0-slim24.18.0-slim age confidence
node stage minor 24.15.0-slim24.18.0-slim age confidence
yarn (source) packageManager minor 4.14.14.17.0 age confidence
yarn (source) engines minor >=4.14.1>=4.17.0 age confidence

Release Notes

actions/checkout (actions/checkout)

v4.3.1

Compare Source

v4.3.0

Compare Source

nodejs/node (node)

v24.18.0: 2026-06-23, Version 24.18.0 'Krypton' (LTS), @​richardlau prepared by @​sxa

Compare Source

Notable Changes
  • [e07e7a31e1] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #​63527
  • [44c8ebcbd6] - http: avoid stream listeners on idle agent sockets (Matteo Collina) #​64004
  • [d3ef4122ee] - (SEMVER-MINOR) buffer: increase Buffer.poolSize default to 64 KiB (Matteo Collina) #​63597
  • [bb2857b85a] - (SEMVER-MINOR) crypto: align key argument names in docs and error messages (Filip Skokan) #​62527
  • [b9d5e87880] - (SEMVER-MINOR) crypto: accept key data in crypto.diffieHellman() and cleanup DH jobs (Filip Skokan) #​62527
  • [ccd756d61e] - (SEMVER-MINOR) crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms (Filip Skokan) #​62183
  • [4c9251fc09] - (SEMVER-MINOR) http: add writeInformation to send arbitrary 1xx status codes (Tim Perry) #​63155
  • [8c989ec4a3] - (SEMVER-MINOR) inspector: expose precise coverage start to JS runtime (sangwook) #​63079
  • [3f54c8ba32] - Revert "stream: noop pause/resume on destroyed streams" (Stewart X Addison) #​63834
Commits

v24.17.0: 2026-06-18, Version 24.17.0 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
  • (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
  • (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
  • (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
  • (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
  • (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
  • (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
  • (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
  • (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
  • (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
  • (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low
Commits

v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
  • [b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #​62553
  • [ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #​62713
  • [9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #​57775
  • [40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #​62277
  • [d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #​63082
  • [aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #​62541
  • [6f37f7e240] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #​61098
  • [d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #​61747
  • [d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #​62820
  • [01a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #​60751
  • [00705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #​61556
Commits

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@deepsource-io

deepsource-io Bot commented May 14, 2026

Copy link
Copy Markdown

DeepSource Code Review

We reviewed changes in 32876f8...15b4294 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
Secrets Jun 12, 2026 8:14p.m. Review ↗
JavaScript Jun 12, 2026 8:14p.m. Review ↗
Shell Jun 12, 2026 8:14p.m. Review ↗
Docker Jun 12, 2026 8:14p.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from ea5fb81 to 253f589 Compare May 14, 2026 06:33
@renovate renovate Bot changed the title fix(deps): update dependency jose to ^6.2.3 fix(deps): update all non-major dependencies May 14, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from ade3369 to bc1faae Compare May 14, 2026 17:09
@renovate renovate Bot changed the title fix(deps): update all non-major dependencies fix(deps): update all non-major dependencies - autoclosed May 14, 2026
@renovate renovate Bot closed this May 14, 2026
@renovate renovate Bot deleted the renovate/all-minor-patch branch May 14, 2026 22:57
@renovate renovate Bot changed the title fix(deps): update all non-major dependencies - autoclosed chore(deps): update dependency eslint to ^10.4.0 May 16, 2026
@renovate renovate Bot reopened this May 16, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from bc1faae to 911ed77 Compare May 16, 2026 01:41
@renovate renovate Bot changed the title chore(deps): update dependency eslint to ^10.4.0 chore(deps): update all non-major dependencies May 17, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 911ed77 to 385e849 Compare May 17, 2026 05:44
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies chore(deps): update all non-major dependencies - autoclosed May 18, 2026
@renovate renovate Bot closed this May 18, 2026
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies - autoclosed chore(deps): update all non-major dependencies May 19, 2026
@renovate renovate Bot reopened this May 19, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 4edbd5b to 07ebcd4 Compare May 25, 2026 21:00
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from fbe51b0 to 15df5e4 Compare May 29, 2026 21:47
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 85cda43 to db2991d Compare June 7, 2026 23:51
@renovate renovate Bot changed the title fix(deps): update all non-major dependencies chore(deps): update all non-major dependencies Jun 7, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 15b4294 to f934ea3 Compare June 15, 2026 01:42
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Jun 15, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 9e9db98 to 1801583 Compare June 16, 2026 00:15
@renovate renovate Bot changed the title fix(deps): update all non-major dependencies chore(deps): update all non-major dependencies Jun 17, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from d67a7b2 to 72b958f Compare June 24, 2026 21:37
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 96d6065 to 495766f Compare June 30, 2026 11:05
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 495766f to a3bebf3 Compare June 30, 2026 22:41
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Jun 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants