chore(deps): update all non-major dependencies (patch) #1254
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.20.2
->1.20.5
5.59.9
->5.59.11
5.59.9
->5.59.11
0.32.0
->0.32.2
0.8.7
->0.8.9
0.1.14
->0.1.15
13.2.2
->13.2.3
18.16.0
->18.16.1
20.3.0
->20.3.1
3.59.1
->3.59.2
5.1.3
->5.1.5
0.32.0
->0.32.2
Release Notes
sveltejs/kit (@sveltejs/kit)
v1.20.5
Compare Source
Patch Changes
fix: batch synchronous invalidate invocations (#10145)
fix: allow rest params to be empty in resolvePath (#10146)
fix: correctly close dialogs when form is enhanced (#10093)
fix: precompress filter (#10185)
v1.20.4
Compare Source
Patch Changes
v1.20.3
Compare Source
Patch Changes
chore: remove
tiny-glob
as a dependency (#10166)fix: don't import types from
svelte/internal
(#10172)fix: don't skip rest parameter's matcher when there is a non-matching optional parameter (#10020)
fix: ensure
fetch
respects headers from providedRequest
(#10136)typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v5.59.11
Compare Source
Note: Version bump only for package @typescript-eslint/eslint-plugin
v5.59.10
Compare Source
Note: Version bump only for package @typescript-eslint/eslint-plugin
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v5.59.11
Compare Source
Note: Version bump only for package @typescript-eslint/parser
v5.59.10
Compare Source
Note: Version bump only for package @typescript-eslint/parser
vitest-dev/vitest (@vitest/ui)
v0.32.2
Compare Source
🐞 Bug Fixes
View changes on GitHub
v0.32.1
Compare Source
🚀 Features
registerConsoleShortcuts
fromvitest/node
- by @deot in https://github.com/vitest-dev/vitest/issues/3563 (bc49b)expect.unreachable
- by @fenghan34 and @sheremet-va in https://github.com/vitest-dev/vitest/issues/3556 (8e385)describe
/test
name support anonymous function - by @btea in https://github.com/vitest-dev/vitest/issues/3562 (3d436)🐞 Bug Fixes
performance
fromperf_hooks
- by @Max10240 and wangbaolong.wbl in https://github.com/vitest-dev/vitest/issues/3578 and https://github.com/vitest-dev/vitest/issues/3579 (24ec8)vitest
- by @userquin in https://github.com/vitest-dev/vitest/issues/3580 (b4ac8)View changes on GitHub
DavidWells/analytics (analytics)
v0.8.9
Compare Source
elaichenkov/cy-verify-downloads (cy-verify-downloads)
v0.1.15
Compare Source
5a78d61
)359c286
)79de182
)ba1166d
)8f31a9a
)6016298
)1a1f81e
)c21b7b5
)5939c55
)c5ec48b
)2fc42de
)28e6c5d
)e6c4399
)09877cf
)be78a1f
)2a165d8
)c34323e
)03759c7
)4fcf03b
)18645b8
)6251b6e
)3559f62
)878238e
)59e8ee7
)836f392
)08567c3
)064bfb1
)a7b8d9d
)47e4df2
)6a27fa8
)okonet/lint-staged (lint-staged)
v13.2.3
Compare Source
Bug Fixes
--diff
option implies--no-stash
(66a716d)nodejs/node (node)
v18.16.1
: 2023-06-20, Version 18.16.1 'Hydrogen' (LTS), @RafaelGSSCompare Source
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
mainModule.__proto__
Bypass Experimental Policy Mechanism (High)More detailed information on each of the vulnerabilities can be found in June 2023 Security Releases blog post.
Commits
bf3e2c8928
] - crypto: handle cert with invalid SPKI gracefully (Tobias Nießen) nodejs-private/node-private#39370f9449072
] - deps: setCARES_RANDOM_FILE
for c-ares (Richard Lau) #4815635d4efb57b
] - deps: update c-ares to 1.19.1 (RafaelGSS) #48115392dfedc77
] - deps: update archs files for openssl-3.0.9-quic1 (Node.js GitHub Bot) #4840246cd5fe38b
] - deps: upgrade openssl sources to quictls/openssl-3.0.9-quic1 (Node.js GitHub Bot) #484027e3d2d85c2
] - doc,test: clarify behavior of DH generateKeys (Tobias Nießen) nodejs-private/node-private#4264ff6ba050a
] - http: disable request smuggling via rempty headers (Paolo Insogna) nodejs-private/node-private#428ab269129a6
] - msi: do not create AppData\Roaming\npm (Tobias Nießen) nodejs-private/node-private#408925e8f5619
] - policy: handle mainModule.__proto__ bypass (RafaelGSS) nodejs-private/node-private#416d6fae8e47e
] - test: allow SIGBUS in signal-handler abort test (Michaël Zasso) #47851sveltejs/svelte (svelte)
v3.59.2
Compare Source
<textarea bind:value={...}>
values in SSRMicrosoft/TypeScript (typescript)
v5.1.5
: TypeScript 5.1.5Compare Source
For release notes, check out the release announcement.
For the complete list of fixed issues, check out the
Downloads are available on:
Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.