Skip to content

chore(deps): update all non-major dependencies #1349

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: dev
Choose a base branch
from
Open

chore(deps): update all non-major dependencies #1349

wants to merge 1 commit into from
+157 −120

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 10, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
@formkit/auto-animate ^0.8.4 -> ^0.9.0 age confidence dependencies minor
@iconify/utils (source) ^3.0.1 -> ^3.0.2 age confidence devDependencies patch
@simplewebauthn/browser (source) ^13.1.2 -> ^13.2.0 age confidence dependencies minor
@types/node (source) ^22.18.0 -> ^22.18.3 age confidence devDependencies patch
github.com/casdoor/casdoor-go-sdk v1.19.0 -> v1.20.0 age confidence require minor
github.com/go-acme/lego/v4 v4.25.2 -> v4.26.0 age confidence require minor
github.com/go-webauthn/webauthn v0.13.4 -> v0.14.0 age confidence require minor
github.com/sashabaranov/go-openai v1.41.1 -> v1.41.2 age confidence require patch
github.com/uozi-tech/cosy v1.26.1 -> v1.26.2 age confidence require patch
go ^1.25.0 -> ^1.25.1 age confidence uses-with patch
pnpm (source) 10.15.1+sha512.34e538c329b5553014ca8e8f4535997f96180a1d0f614339357449935350d924e22f8614682191264ec33d1462ac21561aff97f6bb18065351c162c7e8f6de67 -> 10.16.1 age confidence packageManager minor
vue (source) ^3.5.20 -> ^3.5.21 age confidence dependencies patch

Release Notes

formkit/auto-animate (@​formkit/auto-animate)

v0.9.0

Compare Source

MasterKale/SimpleWebAuthn (@​simplewebauthn/browser)

v13.2.0

Compare Source

Changes

  • [server] The return value from verifyRegistrationResponse() has been defined more strictly
    to communicate that registrationInfo will only ever be present if verified is true
    (#​715)
  • [server] verifyRegistrationResponse() can now verify attestations containing SHA256 hashes
    by using EC public keys with the P-384 curve
    (#​721)
  • [server] The Android SafetyNet "CTS profile match" system integrity check can now be disabled
    by setting attestationSafetyNetEnforceCTSCheck: false when calling
    verifyRegistrationResponse(). This check remains enforced by default
    (#​722)
  • [browser] [server] These libraries now have better support in Deno 2.2+ projects which use
    generic typing for Uint8Array via TypeScript 5.7.
    SimpleWebAuthn values of type Uint8Array_ are equivalent to Uint8Array in Deno 2.1 and
    earlier, and Uint8Array<ArrayBuffer> in Deno 2.2 and later.
    (#​717)
casdoor/casdoor-go-sdk (github.com/casdoor/casdoor-go-sdk)

v1.20.0

Compare Source

Features
  • add Invitation and InvitationCode fields into user definition (#​174) (772db3f)
go-acme/lego (github.com/go-acme/lego/v4)

v4.26.0

Compare Source

Added
  • [dnsprovider] Add DNS provider for KeyHelp
  • [dnsprovider] Add DNS provider for Binary Lane
  • [dnsprovider] Add DNS provider for Tencent EdgeOne
  • [dnsprovider] azuredns: pipeline credential support
  • [dnsprovider] oraclecloud: handle instance_principal authentication
Changed
  • [dnsprovider] oraclecloud: add env var aliases
  • [dnsprovider] simply: update to API v2
  • [lib,cli] EAB: fallback to base64.URLEncoding
Fixed
  • [dnsprovider] selectelv2: add missing options
go-webauthn/webauthn (github.com/go-webauthn/webauthn)

v0.14.0

Compare Source

Bug Fixes
Features
sashabaranov/go-openai (github.com/sashabaranov/go-openai)

v1.41.2

Compare Source

What's Changed

New Contributors

Full Changelog: sashabaranov/go-openai@v1.41.1...v1.41.2

uozi-tech/cosy (github.com/uozi-tech/cosy)

v1.26.2

Compare Source

actions/go-versions (go)

v1.25.1: 1.25.1

Compare Source

Go 1.25.1

pnpm/pnpm (pnpm)

v10.16.1

Compare Source

Patch Changes
  • The full metadata cache should be stored not at the same location as the abbreviated metadata. This fixes a bug where pnpm was loading the abbreviated metadata from cache and couldn't find the "time" field as a result #​9963.
  • Forcibly disable ANSI color codes when generating patch diff #​9914.

v10.16.0

Compare Source

Minor Changes

  • There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.

    The new setting is called minimumReleaseAge. It specifies the number of minutes that must pass after a version is published before pnpm will install it. For example, setting minimumReleaseAge: 1440 ensures that only packages released at least one day ago can be installed.

    If you set minimumReleaseAge but need to disable this restriction for certain dependencies, you can list them under the minimumReleaseAgeExclude setting. For instance, with the following configuration pnpm will always install the latest version of webpack, regardless of its release time:

    minimumReleaseAgeExclude:
  - webpack

    Related issue: #​9921.

  • Added support for finders #​9946.

    In the past, pnpm list and pnpm why could only search for dependencies by name (and optionally version). For example:

    pnpm why minimist

    prints the chain of dependencies to any installed instance of minimist:

    verdaccio 5.20.1
├─┬ handlebars 4.7.7
│ └── minimist 1.2.8
└─┬ mv 2.1.1
  └─┬ mkdirp 0.5.6
    └── minimist 1.2.8

    What if we want to search by other properties of a dependency, not just its name? For instance, find all packages that have react@17 in their peer dependencies?

    This is now possible with "finder functions". Finder functions can be declared in .pnpmfile.cjs and invoked with the --find-by=<function name> flag when running pnpm list or pnpm why.

    Let's say we want to find any dependencies that have React 17 in peer dependencies. We can add this finder to our .pnpmfile.cjs:

    module.exports = {
  finders: {
    react17: (ctx) => {
      return ctx.readManifest().peerDependencies?.react === "^17.0.0";
    },
  },
};

    Now we can use this finder function by running:

    pnpm why --find-by=react17

    pnpm will find all dependencies that have this React in peer dependencies and print their exact locations in the dependency graph.

    @&#8203;apollo/client 4.0.4
├── @&#8203;graphql-typed-document-node/core 3.2.0
└── graphql-tag 2.12.6

    It is also possible to print out some additional information in the output by returning a string from the finder. For example, with the following finder:

    module.exports = {
  finders: {
    react17: (ctx) => {
      const manifest = ctx.readManifest();
      if (manifest.peerDependencies?.react === "^17.0.0") {
        return `license: ${manifest.license}`;
      }
      return false;
    },
  },
};

    Every matched package will also print out the license from its package.json:

    @&#8203;apollo/client 4.0.4
├── @&#8203;graphql-typed-document-node/core 3.2.0
│   license: MIT
└── graphql-tag 2.12.6
    license: MIT
Patch Changes
  • Fix deprecation warning printed when executing pnpm with Node.js 24 #​9529.
  • Throw an error if nodeVersion is not set to an exact semver version #​9934.
  • pnpm publish should be able to publish a .tar.gz file #​9927.
  • Canceling a running process with Ctrl-C should make pnpm run return a non-zero exit code #​9626.
vuejs/core (vue)

v3.5.21

Compare Source

Bug Fixes
Performance Improvements

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 44af077 to 781325a Compare September 11, 2025 13:59
@0xJacky 0xJacky force-pushed the dev branch 3 times, most recently from 7e800e2 to b8cfd93 Compare September 11, 2025 14:50
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 5848d77 to ac2d2f6 Compare September 13, 2025 23:45
@renovate Renovate
Copy link
Contributor Author

renovate bot commented Sep 13, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 8 additional dependencies were updated

Details:

Package Change
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.19.0 -> v1.19.1
github.com/alibabacloud-go/darabonba-openapi/v2 v2.1.11 -> v2.1.12
github.com/alibabacloud-go/tea v1.3.11 -> v1.3.12
github.com/go-webauthn/x v0.1.24 -> v0.1.25
github.com/huaweicloud/huaweicloud-sdk-go-v3 v0.1.167 -> v0.1.168
github.com/nrdcg/namesilo v0.2.1 -> v0.5.0
github.com/softlayer/softlayer-go v1.2.0 -> v1.2.1
github.com/yandex-cloud/go-sdk/v2 v2.10.0 -> v2.11.0

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 14cc3a7 to 994c996 Compare September 14, 2025 13:29
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 5a86eb8 to 15beaf4 Compare September 15, 2025 00:38
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 15beaf4 to b4705d8 Compare September 15, 2025 01:24
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 110ec8e to bca84f7 Compare September 15, 2025 02:35
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from bca84f7 to 0612ee1 Compare September 15, 2025 06:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants