chore(deps): update all non-major dependencies (main)#4268
chore(deps): update all non-major dependencies (main)#4268renovate[bot] wants to merge 1 commit into
Conversation
|
View your CI Pipeline Execution ↗ for commit 0dddee3
💡 Dealing with memory or CPU issues? See memory and CPU details with the resource usage add-on ↗. ☁️ Nx Cloud last updated this comment at |
Codecov Report✅ All modified and coverable lines are covered by tests. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
![nx-cloud[bot]](https://avatars.githubusercontent.com/in/80458?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
67924bc to
9cf632a
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
9cf632a to
c3bebff
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
c3bebff to
8005984
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
8005984 to
54d7516
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
54d7516 to
21c34b0
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
21c34b0 to
90d9ead
Compare
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
eea9b06 to
7d7499d
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
7d7499d to
440b336
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
440b336 to
e9ad50d
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
2 times, most recently
from
66b00ba to
d78fee8
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
d78fee8 to
f0143d9
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
f0143d9 to
2cd5250
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
2cd5250 to
2d89f65
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
2d89f65 to
8246f01
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
8246f01 to
8f5d3c2
Compare
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
2 times, most recently
from
66f8343 to
66be729
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
66be729 to
41df751
Compare
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/main-all-minor-patch
branch
from
41df751 to
0dddee3
Compare
There was a problem hiding this comment.
Nx Cloud is proposing a fix for your failed CI:
We added an ambient module declaration for picomatch to fix TS7016 errors in both chrome-devtools:build-panel and chrome-devtools:build-components. The dependency updates in this PR transitively introduced fdir@6.5.0, whose type definitions import picomatch@4.0.4, which no longer ships TypeScript types. Adding declare module 'picomatch'; in src/picomatch.d.ts satisfies the TypeScript compiler without changing any runtime behaviour.
Tip
✅ We verified this fix by re-running chrome-devtools:build-panel.
diff --git a/apps/chrome-devtools/src/picomatch.d.ts b/apps/chrome-devtools/src/picomatch.d.ts
new file mode 100644
index 000000000..26eba8841
--- /dev/null
+++ b/apps/chrome-devtools/src/picomatch.d.ts
@@ -0,0 +1 @@
+declare module 'picomatch';
Or Apply changes locally with:
npx nx-cloud apply-locally jDMY-q4NV
Apply fix locally with your editor ↗ View interactive diff ↗
🎓 Learn more about Self-Healing CI on nx.dev
1 participant
This PR contains the following updates:
~2.4.0→~2.7.0~8.3.0→~8.4.0~8.3.0→~8.4.0~8.3.0→~8.4.0~8.3.0→~8.4.0~2.34.0→~2.38.02.39.0~2.34.0→~2.38.02.39.0~2.31.0→~2.34.0~1.120.0→~1.125.0~0.38.0→~0.44.0v5.2.0→v5.3.0~13.3.0→~13.4.0~13.3.0→~13.4.024.16→24.1724.16→24.17~1.100.0→~1.101.0~1.100.0→~1.101.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
crxjs/chrome-extension-tools (@crxjs/vite-plugin)
v2.7.0Minor Changes
9f00943: Add dev HMR support for manifest-declared MAIN world content scripts.Patch Changes
a9cc89a: Remove unused vite-plugin dependencies and update selected dependencyversions.
v2.6.1Patch Changes
2b88621: Coalesce file writer readiness waits so large dev-server graphupdates do not repeatedly recompute the same dependency traversal. This also
fixes late HMR readiness waits that could miss the shared ready event and
delay content script updates.
v2.6.0Minor Changes
4f5d2ec: feat: add IIFE content script bundlingContent scripts named with
.iife.tsextension are automatically bundled asself-contained IIFE files with all dependencies inlined. This is useful for
MAIN world content scripts used with
chrome.scripting.executeScriptorchrome.scripting.registerContentScripts.Patch Changes
5316e9c: Allowchrome-extension://andmoz-extension://origins in Vitedev-server CORS automatically. This keeps extension pages able to fetch
dev-server files on Vite releases with the stricter localhost-only CORS
default, including Vite
4.5.6,5.4.12, and6.0.9+, without requiringprojects to configure
server.cors.originmanually.1aee9ad: fix: dynamic content scripts failing in build --watch mode2f8bab5: Fix the dev-mode loading page so it waits for the requested extensionHTML file, preserves the page URL query string, allows extension-origin
readiness polling, and throttles automatic reloads to avoid rapid flicker.
1681511: Expand vite-plugin CI to run e2e tests against supported Viteversions and fix compatibility issues exposed by the matrix.
0593d58: fix: publish ESM declarations for the Vite plugin entrypointv2.5.0Minor Changes
4756baf: feat: add HMR support for CSS declared in manifest content_scripts4756baf: add: browser_specific_settings.gecko properties4756baf: Fix "TypeError: plugins is not iterable" error when usingrolldown-vite (Vite 7).
In rolldown-vite, the buildStart hook doesn't receive options.plugins. This
fix uses the configResolved hook to get plugins from the resolved config, with
buildStart kept as a fallback for older Vite versions.
4756baf: Fixed#852, the plugin
now emits a correct URL in
service-worker-loader.jswhen the Vite optionserver.httpsis enabled.4756baf: fix: resolve TypeScript types correctly for ESM and CJS consumers4756baf: feat: add Vite 8 beta supportPatch Changes
4756baf: ci: migrate release workflow to npm trusted publishers570312a: fix: sanitize colons from output filenames on Windows4756baf: fix: copy CSS files declared in manifest content_scripts to output4756baf: Replace cheerio with node-html-parser to fix npm deprecation warningfor whatwg-encoding.
Also adds explicit vite peerDependency declaration (^3.0.0 through ^7.0.0) to
enable proper version resolution when used with different vite versions.
4756baf: ci: run compat tests against stable Vite 8, make the vite8 availableas a peer dependency
4756baf: fix: UnoCSS/TailwindCSS HMR issues with virtual CSS modules8a99b4f: made data_collection_permissions optional4756baf: fix: respect user's build.manifest setting in Vite 4+When users set
build.manifest: falsein their Vite config, the Vite manifestfile (
.vite/manifest.jsonin Vite 5+, ormanifest.jsonin older versions)is now properly removed from the output bundle.
CRXJS internally requires the Vite manifest to derive content script resources
during build, so it forces
build.manifest: true. Previously, this meant theVite manifest was always included in the output even if the user explicitly
disabled it. Now, CRXJS removes the manifest from the bundle after processing
if the user didn't want it.
Closes #1077
d364bd8: chore: upgrade chokidar to 5.0.04756baf: feat(client): Update the style and content of the development modeloading page
jsverse/transloco (@jsverse/transloco)
v8.4.0Compare Source
🚀 Features
🩹 Fixes
❤️ Thank You
OpenAPITools/openapi-generator-cli (@openapitools/openapi-generator-cli)
v2.38.0Compare Source
Features
v2.37.0Compare Source
Features
v2.36.0Compare Source
Features
v2.35.0Compare Source
Features
Redocly/redocly-cli (@redocly/openapi-core)
v2.34.0Compare Source
Minor Changes
Improved CLI install speed by bundling the CLI into a dependency-free package.
Warning: The published package no longer ships runtime dependencies in
node_modules.Plugins that relied on importing packages hoisted from the CLI (such as
@redocly/openapi-core) must now declare those packages as their own dependencies.v2.33.2Compare Source
Patch Changes
splitcommand that might have written files outside the chosen--outDir.v2.33.1Compare Source
Patch Changes
v2.33.0Compare Source
Minor Changes
--component-names-strategyoption to thebundlecommand.This option allows a choice of how inline Schema components are named:
basename(default) ortitle(from each schema'stitlefield).Patch Changes
v2.32.2Compare Source
Patch Changes
v2.32.1Compare Source
Patch Changes
v2.32.0Compare Source
Minor Changes
junitoutput in thelintcommand.Patch Changes
vercel/ncc (@vercel/ncc)
v0.44.0Compare Source
Features
v0.43.0Compare Source
Changes
actions/setup-java (actions/setup-java)
v5.3.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/setup-java@v5...v5.3.0
GoogleChrome/lighthouse (lighthouse)
v13.4.0Compare Source
Full Changelog
We expect this release to ship in the DevTools of Chrome 151, and to PageSpeed Insights within 2 weeks.
New contributors
Thanks to our new contributors 👽🐷🐰🐯🐻!
Core
geolocationelement (#16835)Report
Deps
Clients
I18n
Docs
Tests
Misc
nodejs/node (node)
v24.17.0: 2026-06-18, Version 24.17.0 'Krypton' (LTS), @aduh95Compare Source
This is a security release.
Notable Changes
Commits
9e4dfc7bba] - (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) nodejs-private/node-private#878cb2aed980c] - deps: update llhttp to 9.4.2 (Antoine du Hamel) nodejs-private/node-private#890a8a0d12875] - (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 (Tim Perry) #6289166e6203c1c] - (SEMVER-MAJOR) deps: update nghttp2 to 1.69.0 (Node.js GitHub Bot) #62891dd627ced27] - deps: update archs files for openssl-3.5.7 (Node.js GitHub Bot) #63820684bae568f] - deps: upgrade openssl sources to openssl-3.5.7 (Node.js GitHub Bot) #638203a631e7f83] - deps: fix aix implicit declaration in OpenSSL (Abdirahim Musse) #62656cf44df3996] - deps: update undici to 7.28.0 (Node.js GitHub Bot) #63703138c70294b] - (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) nodejs-private/node-private#868be7e719c3f] - (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) nodejs-private/node-private#846cc7c11b4d1] - (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) nodejs-private/node-private#8559224427b92] - (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) nodejs-private/node-private#867cf85d54839] - (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) nodejs-private/node-private#873a1bbc24f96] - (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) nodejs-private/node-private#870e3723ff2d6] - test: add session reuse host verification regressions (Matteo Collina) nodejs-private/node-private#854a77af4867b] - (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) nodejs-private/node-private#85431beb4f707] - (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) nodejs-private/node-private#8578e75c73f91] - (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) nodejs-private/node-private#869actions/node-versions (node)
v24.17.0: 24.17.0Compare Source
Node.js 24.17.0
sass/dart-sass (sass)
v1.101.0Compare Source
supports resolving import-only variants of Sass files declared in the
exports,sass, andstylefields ofpackage.json. Previously, thesefiles were ignored even when loaded via
@import, so any code relying onloading module-system-only files this way may break.
Configuration
📅 Schedule: (in timezone Europe/Paris)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.