fix(deps): update all dependencies #188

renovate · 2025-08-20T06:30:19Z

This PR contains the following updates:

Package	Change	Type	Update
@chainsafe/libp2p-yamux	`^7.0.1` -> `^8.0.0`	dependencies	major
@libp2p/interface (source)	`^2.6.1` -> `^3.0.0`	dependencies	major
@typescript-eslint/eslint-plugin (source)	`8.46.1` -> `8.46.2`	devDependencies	patch
@typescript-eslint/parser (source)	`8.46.1` -> `8.46.2`	devDependencies	patch
esbuild	`0.25.10` -> `0.25.11`	devDependencies	patch
eslint (source)	`9.37.0` -> `9.38.0`	devDependencies	minor
github.com/evanw/esbuild	`v0.25.10` -> `v0.25.11`	require	patch
github.com/golangci/golangci-lint/v2	`v2.5.0` -> `v2.6.0`	require	minor
github/codeql-action	`v4.30.8` -> `v4.31.2`	action	minor
lint-staged	`16.2.4` -> `16.2.6`	devDependencies	patch
mvdan.cc/gofumpt	`v0.9.1` -> `v0.9.2`	require	patch
vitest (source)	`^3.0.7` -> `^4.0.0`	devDependencies	major

Release Notes

ChainSafe/js-libp2p-yamux (@chainsafe/libp2p-yamux)

`v8.0.1`

Compare Source

Bug Fixes

make sendReset synchronous to avoid unhandled rejections (#113) (232fb1b)

`v8.0.0`

Compare Source

⚠ BREAKING CHANGES

Must be used with [email protected], it cannot be used with earlier versions

Features

update to libp2p v3 api (#105) (bc5e09e)

libp2p/js-libp2p (@libp2p/interface)

typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)

`v8.46.2`

Compare Source

🩹 Fixes

eslint-plugin: [prefer-optional-chain] skip optional chaining when it could change the result (#11702)

❤️ Thank You

mdm317

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@typescript-eslint/parser)

`v8.46.2`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

evanw/esbuild (esbuild)

`v0.25.11`

Compare Source

Add support for with { type: 'bytes' } imports (#4292)

The import bytes proposal has reached stage 2.7 in the TC39 process, which means that although it isn't quite recommended for implementation, it's generally approved and ready for validation. Furthermore it has already been implemented by Deno and Webpack. So with this release, esbuild will also add support for this. It behaves exactly the same as esbuild's existing binary loader. Here's an example:
```
import data from './image.png' with { type: 'bytes' }
const view = new DataView(data.buffer, 0, 24)
const width = view.getInt32(16)
const height = view.getInt32(20)
console.log('size:', width + '\xD7' + height)
```
Lower CSS media query range syntax (#3748, #4293)

With this release, esbuild will now transform CSS media query range syntax into equivalent syntax using min-/max- prefixes for older browsers. For example, the following CSS:
```
@&#8203;media (640px <= width <= 960px) {
  main {
    display: flex;
  }
}
```
will be transformed like this with a target such as --target=chrome100 (or more specifically with --supported:media-range=false if desired):
```
@&#8203;media (min-width: 640px) and (max-width: 960px) {
  main {
    display: flex;
  }
}
```

eslint/eslint (eslint)

`v9.38.0`

Compare Source

Features

ce40f74 feat: update complexity rule to only highlight function header (#20048) (Atul Nair)
e37e590 feat: correct no-loss-of-precision false positives with e notation (#20187) (Francesco Trotta)

Bug Fixes

50c3dfd fix: improve type support for isolated dependencies in pnpm (#20201) (Francesco Trotta)
a1f06a3 fix: correct SourceCode typings (#20114) (Pixel998)

Documentation

462675a docs: improve web accessibility by hiding non-semantic character (#20205) (루밀LuMir)
c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#20203) (루밀LuMir)
b39e71a docs: Update README (GitHub Actions Bot)
cd39983 docs: move custom-formatters type descriptions to nodejs-api (#20190) (Percy Ma)

Chores

d17c795 chore: upgrade @eslint/js@9.38.0 (#20221) (Milos Djermanovic)
25d0e33 chore: package.json update for @eslint/js release (Jenkins)
c82b5ef refactor: Use types from @eslint/core (#20168) (Nicholas C. Zakas)
ff31609 ci: add Node.js 25 to ci.yml (#20220) (루밀LuMir)
004577e ci: bump github/codeql-action from 3 to 4 (#20211) (dependabot[bot])
eac71fb test: remove use of nodejsScope option of eslint-scope from tests (#20206) (Milos Djermanovic)
4168a18 chore: fix typo in legacy-eslint.js (#20202) (Sweta Tanwar)
205dbd2 chore: fix typos (#20200) (ntnyq)
dbb200e chore: use team member's username when name is not available in data (#20194) (Milos Djermanovic)
8962089 chore: mark deprecated rules as available until v11.0.0 (#20184) (Pixel998)

golangci/golangci-lint (github.com/golangci/golangci-lint/v2)

`v2.6.0`

Compare Source

New linters
- Add modernize analyzer suite
Linters new features or changes
- arangolint: from 0.2.0 to 0.3.1
- dupword: from 0.1.6 to 0.1.7 (new option comments-only)
- go-critic: from 0.13.0 to 0.14.0 (new rules/checkers: zeroByteRepeat, dupOption)
- gofumpt: from 0.9.1 to 0.9.2 ("clothe" naked returns is now controlled by the extra-rules option)
- perfsprint: from 0.9.1 to 0.10.0 (new options: concat-loop, loop-other-ops)
- wsl: from 5.2.0 to 5.3.0
Linters bug fixes
- dupword: from 0.1.6 to 0.1.7
- durationcheck: from 0.0.10 to 0.0.11
- exptostd: from 0.4.4 to 0.4.5
- fatcontext: from 0.8.1 to 0.9.0
- forbidigo: from 2.1.0 to 2.3.0
- ginkgolinter: from 0.21.0 to 0.21.2
- godoc-lint: from 0.10.0 to 0.10.1
- gomoddirectives: from 0.7.0 to 0.7.1
- gosec: from 2.22.8 to 2.22.10
- makezero: from 2.0.1 to 2.1.0
- nilerr: from 0.1.1 to 0.1.2
- paralleltest: from 1.0.14 to 1.0.15
- protogetter: from 0.3.16 to 0.3.17
- unparam: from 0df0534 to 5beb8c8
Misc.
- fix: ignore some files to hash the version for custom build

github/codeql-action (github/codeql-action)

`v4.31.2`

Compare Source

`v4.31.1`

Compare Source

`v4.31.0`

Compare Source

`v4.30.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.9 - 17 Oct 2025

Update default CodeQL bundle version to 2.23.3. #3205
Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

See the full CHANGELOG.md for more information.

lint-staged/lint-staged (lint-staged)

`v16.2.6`

Compare Source

Patch Changes

#1693 33d4502 Thanks @Adrian-Baran-GY! - Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

`v16.2.5`

Compare Source

Patch Changes

#1687 9e02d9d Thanks @iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

mvdan/gofumpt (mvdan.cc/gofumpt)

`v0.9.2`

Compare Source

This release moves the "clothe naked returns" rule under gofumpt -extra, following the discussion in #285.

Binaries built on go version go1.25.3 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

Consider becoming a sponsor if you benefit from the work that went into this release!

Note that this release no longer includes a sha256sums.txt asset; GitHub now provide digests natively.

vitest-dev/vitest (vitest)

`v4.0.5`

Compare Source

🐞 Bug Fixes

Respect ssr.noExternal when externalizing dependencies - by @sheremet-va in #8862 (a4f86)
Allow module in --config - by @sheremet-va in #8864 (b9521)
browser: Allow Locator type in selectOptions element parameter - by @rzzf and @sheremet-va in #8848 (7ee28)
module-runner: Don't return node builtins for getBuiltins unconditionally - by @sapphi-red in #8863 (0e858)
pool: Rename groupId to groupOrder in error message - by @Yohannfra in #8856 (b9aab)

🏎 Performance

Pass testfiles at once when --no-isolate --maxWorkers=1 - by @AriPerkkio in #8835 (584aa)
expect: Optimize checking the input type - by @Connormiha in #8840 (06968)

View changes on GitHub

`v4.0.4`

Compare Source

🐞 Bug Fixes

browser:
- Correct typo - by @benmccann in #8796 (ede1f)
- Publish a missing context file for webdriverio - by @sheremet-va in #8824 (7c7b6)
mocker:
- Support mocking builtins without node: prefix - by @sheremet-va in #8829 (06208)
pool:
- Runner's error listener causing MaxListenersExceededWarning - by @AriPerkkio in #8820 (d1bff)
- Capture workers stdio to logger - by @AriPerkkio in #8809 (fb95f)
spy:
- Allow classes in vi.mocked utility - by @sheremet-va in #8839 (f8756)
worker:
- Rpc listener leak when isolate: false - by @AriPerkkio in #8821 (573dc)

🏎 Performance

utils: Optimized reducer to avoid creating new objects - by @Connormiha in #8818 (d19ce)

View changes on GitHub

`v4.0.3`

Compare Source

🐞 Bug Fixes

Preserve reporter options from config when CLI reporters override them - by @Copilot and sheremet-va in #8794 (15552)
browser: More stable in-source testing validation - by @sheremet-va in #8793 (62297)
happy-dom: Support fetch globals - by @sheremet-va in #8791 (0fb74)
init: Use correct jsx/tsx extension - by @sheremet-va in #8792 (abc04)

View changes on GitHub

`v4.0.2`

Compare Source

🐞 Bug Fixes

browser:
- Don't print the deprecation notice in node_modules - by @sheremet-va in #8779 (588f7)
pool:
- Assign envs before running tests to keep in sync with process.env - by @sheremet-va in #8769 (26ce8)
spy:
- Properly inherit implementation's length - by @sheremet-va in #8778 (d4c2b)
- Reset spies if both restoreMocks and mockReset is set in the config - by @sheremet-va in #8781 (2eedb)

View changes on GitHub

`v4.0.1`

Compare Source

🐞 Bug Fixes

Move the getBuiltins check - by @sheremet-va in #8765 (81000)
pool: Don't teardown the communication channel too soon if something is running after the test - by @sheremet-va in #8767 (3fae7)

View changes on GitHub

`v4.0.0`

Compare Source

🚨 Breaking Changes

Remove 'basic' reporter - by @AriPerkkio in #7884 (82fcf)
Simplify default exclude pattern - by @sheremet-va in #6287 (14c50)
Remove deprecated getSourceMap - by @sheremet-va in #8194 (ff934)
Replace deprecated ErrorWithDiff with TestError - by @sheremet-va in #8195 (da59e)
Remove UserConfig type in favor of ViteUserConfig - by @sheremet-va in #8196 (22f7f)
Remove deprecated coverage options in favor of vitest/node exports - by @sheremet-va in #8197 (dc848)
Remove deprecated internal helpers and environment exports - by @sheremet-va in #8198 (4703c)
Remove deprecated typecheck and runner types - by @sheremet-va in #8199 (89a1c)
Remove Node types from the main entry point, use vitest/node instead - by @sheremet-va in #8200 (1e60c)
Remove support for Vite 5 - by @sheremet-va in #8202 (cb8b0)
Remove deprecated types - by @sheremet-va in #8203 (66bee)
Remove deprecated environmentMatchGlobs and poolMatchGlobs - by @sheremet-va in #8205 (be11d)
Remove deprecated workspace option in favor of projects - by @sheremet-va in #8218 (76fb7)
Ignore --standalone when CLI filename filter is used - by @AriPerkkio in #8262 (013bf)
Use module-runner instead of vite-node - by @sheremet-va and @AriPerkkio in #8208 (9be01)
Rewrite spying implementation to make module mocking more intuitive - by @sheremet-va in #8363 (9e412)
Remove deprecated APIs - by @sheremet-va in #8428 (a1cb9)
Remove minWorkers and set it automatically to 0 in non watch mode - by @sheremet-va in #8454 (2c2d1)
Verbose reporter prints tests in a list, introduce tree reporter - by @sheremet-va and @AriPerkkio in #8500 (25fd3)
Include shadow root contents in pretty-format output - by @wkillerud in #8545 (9e722)
Remove deprecated order from test() API - by @sheremet-va in #8594 (4d419)
Rewrite pools without tinypool - by @AriPerkkio and @sheremet-va in #8705 (4822d)
browser: Require a provider factory instead of a string - by @sheremet-va in #8445 (606cb)
expect: Pass current equality testers to asymmetric matcher - by @hi-ogawa in #6825 (965ce)
projects: Allow only files that have "vitest.config" or "vite.config" in the name - by @sheremet-va in #8542 (304bc)
reporter: Remove deprecated APIs - by @AriPerkkio and @sheremet-va in #8223 (149f8)
runner: Set mode to todo if no function is passed down to test or describe - by @sheremet-va in #8346 (1a81c)
snapshot: Fail test with obsolete snapshot on CI - by @hi-ogawa in #7963 (4d84f)
spy: Support spying on classes - by @sheremet-va in #6160 (abc0d)

🚀 Features

Provide entity to onConsoleLog - by @sheremet-va in #8159 (437d4)
Add onUnhandledError callback - by @sheremet-va in #8162 (924cb)
Add spy option to vi.mockObject - by @rChaoz in #8285 (81d76)
Don't use vite-node in coverage packages - by @sheremet-va (ffdb4)
Clickable dashboard numbers - by @shairez in #7406 (2344c)
Display test "path" when filtering - by @userquin in #8547 (2e491)
Introduce separate packages for browser mode providers - by @sheremet-va in #8629 (0dc93)
Add hooks with type-safe extra context to TestAPI - by @ysfaran in #8623 (6b21c)
Support expect.assert for type narrowing - by @sheremet-va in #8695 (fe589)
Add displayAnnotations option to github-options - by @sheremet-va in #8706 (4a66d)
Add schema validation matchers - by @zirkelc in #8527 (c0b25)
Add a way to dump transformed content - by @sheremet-va in #8711 (931c0)
api:
- Expose experimental_parseSpecifications - by @sheremet-va in #8408 (fdeb2)
- Expose Vitest watcher - by @sheremet-va in #8413 (aaa6e)
- Add enableCoverage and disableCoverage methods - by @sheremet-va and @AriPerkkio in #8412 (61eb7)
- Add getGlobalTestNamePattern method - by @sheremet-va in #8438 (bdb70)
- Add relativeModuleId to TestModule - by @sheremet-va in #8505 (3be09)
- Add getSeed method - by @sheremet-va in #8592 (438c4)
browser:
- Support toBeInViewport utility method to assert element is in viewport or not - by @Shinyaigeek in #8234 (ceed5)
- Add qwik to the vitest init cli command - by @thejackshelton in #8330 (1638b)
- Introduce toMatchScreenshot for Visual Regression Testing - by @macarie in #8041 (d45f9)
- Add trackUnhandledErrors option - by @sheremet-va in #8386 (c0ec0)
- Support iframe locator with playwright provider - by @sheremet-va in #8016 (57b2c)
- Add length property to locators, toHaveLength now accepts locators - by @sheremet-va in #8512 (2308c)
- Support playwright tracing - by @sheremet-va in #8584 (1aac5)
- Expose options on BrowserProviderOption - by @sheremet-va in #8609 (0d0e5)
- Support --inspect option in webdriverio - by @sheremet-va in #8613 (38adc)
- Support custom screenshot comparison algorithms - by @macarie in #8687 (e63b1)
coverage:
- autoUpdate to support percentage formatting - by @Battjmo and @AriPerkkio in #8456 (99e01)
expect:
- Support toBeNullable expect function to check provided value is nullish - by @Shinyaigeek and @sheremet-va in #8294 (eeec5)
mocker:
- Add automocker entry - by @sheremet-va in #8301 (e9c92)

🐞 Bug Fixes

Allow overriding globals in types - by @sheremet-va in #8215 (2248b)
Remove unused dependencies - by @AriPerkkio in #8184 (feadc)
Distribute test files to shards more evenly - by @Shinyaigeek and @AriPerkkio in #8288 (7b489)
Use suite's timeout when test.extend - by @AriPerkkio in #8278 (43977)
Support snapshot with no object key sorting - by @hi-ogawa and @sheremet-va in #8136 (e85e3)
Annotation location always points to the test file - by @sheremet-va in #8315 (88071)
Add --changed flag support to vitest list command - by @haakonjackfloat in #8270 and #8272 (e71a5)
Prevent rpc timeout on slow thread blocking synchronous methods - by @AriPerkkio and @sheremet-va in #8297 (bea87)
Forbid setting environment to browser - by @sheremet-va in #8334 (0417a)
Invalidate modules in all module graphs when the file is changed - by @sheremet-va in #8352 (94ab3)
Screenshot masks with Playwright provider - by @macarie in #8357 (459ef)
Configure oxc instead of esbuild on rolldown-vite - by @hi-ogawa in #8378 (e922e)
Make sure test errors always have stacks property in Node.js context - by @sheremet-va in #8392 (b825e)
Support import.meta.resolve on Vite 7 - by @hi-ogawa in #8493 (549d3)
Show the assertion error first when `ex

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2025-08-20T06:30:38Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Maintenance
npm/@typescript-eslint/parser@8.46.1 ⏵ 8.46.2		^-1
npm/esbuild@0.25.10 ⏵ 0.25.11
golang/github.com/golangci/golangci-lint/v2@v2.5.0 ⏵ v2.6.0	⁺¹
npm/vitest@3.2.4 ⏵ 4.0.5	⁺¹
npm/@typescript-eslint/eslint-plugin@8.46.1 ⏵ 8.46.2		^-1
golang/github.com/evanw/esbuild@v0.25.10 ⏵ v0.25.11	⁺¹
npm/@chainsafe/libp2p-yamux@7.0.4 ⏵ 8.0.1		⁺¹
npm/@libp2p/interface@2.11.0 ⏵ 3.1.0	⁺¹
npm/eslint@9.37.0 ⏵ 9.38.0	⁺¹
npm/lint-staged@16.2.4 ⏵ 16.2.6	⁺¹	^-1
golang/mvdan.cc/gofumpt@v0.9.1 ⏵ v0.9.2	⁺¹

View full report

renovate · 2025-10-15T08:45:39Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: tools/go.sum

Command failed: go get -t ./...
go: module github.com/libp2p/[email protected] requires go >= 1.24.6; switching to go1.24.9
go: downloading go1.24.9 (linux/amd64)
go: download go1.24.9: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off

renovate bot changed the title ~~fix(deps): update dependency @libp2p/interface to v2.11.0~~ fix(deps): update all dependencies Aug 20, 2025

renovate bot force-pushed the renovate/all branch 6 times, most recently from ae2f9d0 to f4729ce Compare August 26, 2025 22:38

renovate bot force-pushed the renovate/all branch 9 times, most recently from 2a584e8 to e1cc4f9 Compare September 7, 2025 18:00

renovate bot force-pushed the renovate/all branch 5 times, most recently from 1417d8f to b67b277 Compare September 10, 2025 21:26

renovate bot force-pushed the renovate/all branch from b67b277 to e16a873 Compare September 16, 2025 03:34

renovate bot changed the title ~~fix(deps): update all dependencies~~ fix(deps): update all dependencies - autoclosed Sep 16, 2025

renovate bot closed this Sep 16, 2025

renovate bot deleted the renovate/all branch September 16, 2025 09:12

renovate bot changed the title ~~fix(deps): update all dependencies - autoclosed~~ fix(deps): update all dependencies Sep 17, 2025

renovate bot reopened this Sep 17, 2025

renovate bot force-pushed the renovate/all branch from 7e4ad27 to e16a873 Compare September 17, 2025 17:53

renovate bot changed the title ~~fix(deps): update all dependencies~~ fix(deps): update all dependencies to v0.25.10 Sep 17, 2025

renovate bot force-pushed the renovate/all branch 6 times, most recently from 2237415 to 9c2a29e Compare October 14, 2025 06:01

renovate bot changed the title ~~fix(deps): update all dependencies~~ fix(deps): update all dependencies - autoclosed Oct 15, 2025

renovate bot closed this Oct 15, 2025

renovate bot changed the title ~~fix(deps): update all dependencies - autoclosed~~ fix(deps): update all dependencies Oct 15, 2025

renovate bot reopened this Oct 15, 2025

renovate bot force-pushed the renovate/all branch 5 times, most recently from b93853f to ffc5fff Compare October 15, 2025 08:45

renovate bot force-pushed the renovate/all branch 7 times, most recently from 088a17e to 9b222e0 Compare October 24, 2025 02:56

renovate bot force-pushed the renovate/all branch 5 times, most recently from c500da3 to f1d84cd Compare October 30, 2025 13:07

fix(deps): update all dependencies

70515a4

renovate bot force-pushed the renovate/all branch from f1d84cd to 70515a4 Compare October 30, 2025 20:13

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all dependencies #188

fix(deps): update all dependencies #188

renovate bot commented Aug 20, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Aug 20, 2025 •

edited

Loading

Uh oh!

renovate bot commented Oct 15, 2025

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

fix(deps): update all dependencies #188

Are you sure you want to change the base?

fix(deps): update all dependencies #188

Conversation

renovate bot commented Aug 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

⚠ BREAKING CHANGES

Features

🩹 Fixes

❤️ Thank You

Features

Bug Fixes

Documentation

Chores

CodeQL Action Changelog

4.30.9 - 17 Oct 2025

Patch Changes

Patch Changes

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🐞 Bug Fixes

🐞 Bug Fixes

🚨 Breaking Changes

🚀 Features

🐞 Bug Fixes

Configuration

Uh oh!

socket-security bot commented Aug 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate bot commented Oct 15, 2025

⚠️ Artifact update problem

File name: tools/go.sum

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

renovate bot commented Aug 20, 2025 •

edited

Loading

socket-security bot commented Aug 20, 2025 •

edited

Loading