Update all non-breaking dependencies by renovate[bot] · Pull Request #1189 · finos/rune-dsl

renovate · 2026-04-16T08:35:46Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@actions/core (source)	`3.0.0` → `3.0.1`	dependencies	patch
@docusaurus/core (source)	`3.10.1` → `3.10.2`	dependencies	patch
@docusaurus/faster (source)	`3.10.1` → `3.10.2`	dependencies	patch
@docusaurus/module-type-aliases (source)	`3.9.2` → `3.10.2`	devDependencies	minor
@docusaurus/plugin-svgr (source)	`3.10.1` → `3.10.2`	dependencies	patch
@docusaurus/preset-classic (source)	`3.10.1` → `3.10.2`	dependencies	patch
@docusaurus/theme-mermaid (source)	`3.10.1` → `3.10.2`	dependencies	patch
@docusaurus/tsconfig (source)	`3.9.2` → `3.10.2`	devDependencies	minor
@docusaurus/types (source)	`3.9.2` → `3.10.2`	devDependencies	minor
@easyops-cn/docusaurus-search-local (source)	`0.55.1` → `0.55.3`	dependencies	patch
@types/node (source)	`24.12.2` → `24.13.3`	devDependencies	minor
@types/vscode (source)	`1.116.0` → `1.134.0`	devDependencies	minor
@vscode/vsce (source)	`3.9.0` → `3.9.2`	dependencies	patch
docusaurus-plugin-glossary	`3.3.2` → `3.3.4`	dependencies	patch
node (source)	`24.11.1` → `24.19.0`		minor
org.codehaus.mojo:license-maven-plugin (source)	`2.4.0` → `2.7.1`		minor
shx	`^0.3.4` → `^0.4.0`	devDependencies	minor
tar-fs	`3.1.2` → `3.1.3`	overrides	patch
typescript (source)	`~5.6.2` → `~5.9.0`	devDependencies	minor
typescript (source)	`6.0.2` → `6.0.3`	devDependencies	patch
vscode-languageclient (source)	`10.0.0-next.21` → `10.1.0`	dependencies	minor
com.github.eirslett:frontend-maven-plugin	`2.0.0` → `2.0.2`	build	patch
org.apache.maven.plugins:maven-compiler-plugin (source)	`3.13.0` → `3.15.0`	build	minor
org.apache.maven.plugins:maven-plugin-plugin (source)	`3.13.1` → `3.15.2`	build	minor
org.apache.maven.plugins:maven-surefire-plugin (source)	`3.3.0` → `3.5.6`	build	minor
org.apache.maven.plugins:maven-dependency-plugin (source)	`3.7.0` → `3.11.0`	build	minor
org.apache.maven.plugins:maven-resources-plugin (source)	`3.3.1` → `3.5.0`	build	minor
org.codehaus.mojo:build-helper-maven-plugin (source)	`3.6.0` → `3.6.1`	build	patch
org.apache.maven.plugins:maven-clean-plugin (source)	`3.3.2` → `3.5.0`	build	minor
org.codehaus.mojo:exec-maven-plugin (source)	`3.3.0` → `3.6.3`	build	minor
org.apache.maven.plugins:maven-checkstyle-plugin (source)	`3.4.0` → `3.6.0`	build	minor
org.apache.maven.plugins:maven-enforcer-plugin (source)	`3.5.0` → `3.6.3`	build	minor
org.mockito:mockito-core	`5.12.0` → `5.23.0`	test	minor
org.junit:junit-bom (source)	`6.0.1` → `6.1.3`	import	minor
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml	`2.18.10` → `2.22.2`	compile	minor
com.fasterxml.jackson.datatype:jackson-datatype-jdk8	`2.18.10` → `2.22.2`	compile	minor
com.fasterxml.jackson.core:jackson-databind (source)	`2.18.10` → `2.22.2`	compile	minor
ch.qos.logback:logback-core (source, changelog)	`1.5.38` → `1.6.3`	compile	minor
ch.qos.logback:logback-classic (source, changelog)	`1.5.38` → `1.6.3`	compile	minor
org.slf4j:log4j-over-slf4j (source, changelog)	`2.0.13` → `2.0.18`	compile	patch
org.slf4j:slf4j-api (source, changelog)	`2.0.13` → `2.0.18`	compile	patch
org.apache.maven.plugin-tools:maven-plugin-annotations (source)	`3.13.1` → `3.15.2`	compile	minor
org.apache.maven:maven-core (source)	`3.9.14` → `3.9.16`	compile	patch
org.codehaus.plexus:plexus-utils (source)	`3.6.1` → `3.6.2`	compile	patch
org.apache.maven:maven-plugin-api (source)	`3.9.14` → `3.9.16`	compile	patch
org.yaml:snakeyaml	`2.2` → `2.6`	compile	minor
org.apache.commons:commons-text (source)	`1.12.0` → `1.15.0`	compile	minor
org.apache.commons:commons-lang3 (source)	`3.14.0` → `3.20.0`	compile	minor
org.apache.maven.plugins:maven-shade-plugin (source)	`3.6.0` → `3.6.2`	build	patch

Release Notes

actions/toolkit (@actions/core)

`v3.0.1`

Bump undici from 6.23.0 to 6.24.1 #2348

facebook/docusaurus (@docusaurus/core)

`v3.10.2`

Compare Source

Backport and cherry-pick commits from main for v3.10.2 patch release:

easyops-cn/docusaurus-search-local (@easyops-cn/docusaurus-search-local)

`v0.55.3`

Compare Source

Bug Fixes

trigger a release for refining search icon for #577 (9a7eb91)

`v0.55.2`

Compare Source

Bug Fixes

some languages need lunr wordcut (1e60641)
some languages need lunr wordcut (d871555), closes #438

Microsoft/vsce (@vscode/vsce)

`v3.9.2`

Compare Source

Changes:

#1283: fix: skip APIScan
#1282: chore: bump CI to Node 22 and fix build
#1279: Bump the uuid test fixture version to 100.0.0
#1278: Bump tmp from 0.2.4 to 0.2.6
#1277: Bump qs from 6.14.2 to 6.15.2
#1276: Bump uuid and @azure/msal-node
#1274: Run npm audit fix
#1272: Bump fast-uri from 3.0.6 to 3.1.2
#1267: Bump minimatch from 10.2.2 to 10.2.3
#1247: Update minimatch dependency to v10

This list of changes was auto generated.

`v3.9.1`

Compare Source

Changes:

#1266: fix: module type mismatch

This list of changes was auto generated.

mcclowes/docusaurus-plugin-glossary (docusaurus-plugin-glossary)

`v3.3.4`

Compare Source

What's Changed

Bump minimatch and serve-handler in /examples/docusaurus-v3 by @dependabot[bot] in #56
chore: configure Dependabot for monthly batched updates by @mcclowes in #74
Bump qs and express by @dependabot[bot] in #83
Bump the github-actions group with 7 updates by @dependabot[bot] in #76
Bump postcss from 8.5.6 to 8.5.15 in /examples/docusaurus-v3 by @dependabot[bot] in #77
ci: auto-merge green Dependabot patch/minor PRs by @mcclowes in #86
chore(deps-dev): bump the development-dependencies group across 1 directory with 12 updates by @dependabot[bot] in #84
chore(deps): bump ws from 8.20.0 to 8.21.0 by @dependabot[bot] in #78
chore(deps): bump shell-quote from 1.8.3 to 1.8.4 in /examples/docusaurus-v3 by @dependabot[bot] in #87
chore(deps): bump shell-quote from 1.8.3 to 1.8.4 by @dependabot[bot] in #88
chore(deps): bump launch-editor from 2.12.0 to 2.14.1 in /examples/docusaurus-v3 by @dependabot[bot] in #92
chore(deps): bump webpack-dev-server from 5.2.2 to 5.2.5 in /examples/docusaurus-v3 by @dependabot[bot] in #94
chore(deps): bump launch-editor from 2.13.2 to 2.14.1 by @dependabot[bot] in #95
chore(deps): bump webpack-dev-server from 5.2.3 to 5.2.5 by @dependabot[bot] in #96
chore(deps): bump fs-extra from 11.3.4 to 11.3.5 in the production-dependencies group across 1 directory by @dependabot[bot] in #75
chore(deps): bump ws from 7.5.10 to 7.5.11 in /examples/docusaurus-v3 by @dependabot[bot] in #97
fix: add remark glossary terms types by @YfengJ in #91
chore(deps): bump qs and express in /examples/docusaurus-v3 by @dependabot[bot] in #82
Bump postcss from 8.5.9 to 8.5.14 by @dependabot[bot] in #71
cleanup types approach by @mcclowes in #99
feat(tooltip): show the abbreviation expansion in the term tooltip by @gounthar in #89
Bump @babel/plugin-transform-modules-systemjs from 7.28.5 to 7.29.4 in /examples/docusaurus-v3 by @dependabot[bot] in #70

New Contributors

@YfengJ made their first contribution in #91
@gounthar made their first contribution in #89

Full Changelog: mcclowes/docusaurus-plugin-glossary@v3.3.3...v3.3.4

`v3.3.3`

Compare Source

What's Changed

Bump fast-uri from 3.1.0 to 3.1.2 by @dependabot[bot] in #64
Bump fast-uri from 3.1.0 to 3.1.2 in /examples/docusaurus-v3 by @dependabot[bot] in #63
Bump @babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.4 by @dependabot[bot] in #65
chore: bump version to v3.3.3 by @github-actions[bot] in #69

Full Changelog: mcclowes/docusaurus-plugin-glossary@v3.3.2...v3.3.3

nodejs/node (node)

`v24.19.0`: 2026-08-03, Version 24.19.0 'Krypton' (LTS), @aduh95

Compare Source

Notable Changes

[d08872b530] - (SEMVER-MINOR) buffer: implement blob.textStream() (Matthew Aitken) #64036
[35222948be] - (SEMVER-MINOR) deps: update OpenSSL build config to support compression (Tim Perry) #62217
[d6ab039f24] - (SEMVER-MINOR) doc: update blockList stability status to release candidate (alphaleadership) #63050
[1da05fb79d] - doc: mark stream.compose stable (Matteo Collina) #62562
[3c1636dabf] - (SEMVER-MINOR) esm: add --experimental-import-text flag (Efe) #62300
[e323e877be] - (SEMVER-MINOR) fs: support caller-supplied readFile() buffers (Matteo Collina) #63634
[c1248c9544] - (SEMVER-MINOR) http: add httpValidation option to configure header value validation (RajeshKumar11) #61597
[a534b65815] - (SEMVER-MINOR) net: support TCP_KEEPINTVL and TCP_KEEPCNT in setKeepAlive (Guy Bedford) #63825
[a23cdec683] - (SEMVER-MINOR) perf_hooks: sample delay per event loop iteration (Pablo Erhard) #62935
[7428b57a37] - (SEMVER-MINOR) src: allow empty --experimental-config-file (Marco Ippolito) #61610
[e57597173c] - (SEMVER-MINOR) stream: expose ReadableStreamTee (Matteo Collina) #64195
[5396235993] - (SEMVER-MINOR) tls: report negotiated TLS groups (Filip Skokan) #64119
[5e901b5cd9] - (SEMVER-MINOR) tls: add certificateCompression option (Tim Perry) #62217

Commits

[676467fa9f] - benchmark: trim down the argon2 sets (Filip Skokan) #64218
[a77a2000b7] - benchmark: add child_process async path baselines (Yagiz Nizipli) #63929
[dd4482e915] - buffer: remove unreachable overflow check in atob (haramjeong) #60161
[081c41eb86] - buffer: add fast api for isUtf8 and isAscii (Gürgün Dayıoğlu) #64169
[d08872b530] - (SEMVER-MINOR) buffer: implement blob.textStream() (Matthew Aitken) #64036
[6e2f7e6013] - build: remove redundant intermediate node_aix_shared (Chengzhong Wu) #63747
[87e0675f51] - build: build codecache and snapshot with libnode (Chengzhong Wu) #63626
[32174a7bae] - build: support setting an emulator from configure script (Ivan Trubach) #53899
[69cfb2f240] - build: remove duplicated node_use_sqlite and node_use_ffi conditions (Chengzhong Wu) #63629
[37ac6e8cb5] - build: add manually-dispatched stress-test workflow (Joyee Cheung) #64118
[2424207191] - build: suppress compiler warnings for histogram (Richard Lau) #63980
[63502b7404] - build,win: fix VS2022 arm64 PGO build (Stefan Stojanovic) #63413
[fe4e4055d0] - child_process: fix permission model propagation via NODE_OPTIONS (Matteo Collina) #63972
[aa2f3c066e] - child_process: pass spawn options to the binding positionally (Yagiz Nizipli) #63930
[fcf32cf77a] - child_process: serialize advanced IPC messages natively (Yagiz Nizipli) #63933
[7907134734] - crypto: reject small-order EdDSA points during verify (Filip Skokan) #64026
[b505cd5465] - crypto: support non-byte WebCrypto lengths and cSHAKE (Filip Skokan) #63988
[0f54a872e2] - crypto: share WebCrypto method and usage helpers (Filip Skokan) #63975
[824ec11c05] - crypto: refactor keyObject.toCryptoKey() and SubtleCrypto.getPublicKey() (Filip Skokan) #63622
[73aba92689] - crypto: coerce -0 to +0 before native calls (Filip Skokan) #63556
[c83b79874e] - crypto: reject invalid raw key imports (Filip Skokan) #63134
[934fda64b9] - crypto: improve accuracy of SubtleCrypto.supports (Filip Skokan) #63104
[e392e1f791] - crypto: fix large DH generator validation (Tobias Nießen) #64092
[e75a363e70] - crypto: use EVP_MAC for HMAC on OpenSSL >=3 (Filip Skokan) #63942
[adbaf7af9b] - crypto: make webcrypto aliasKeyFormat directional (Filip Skokan) #63910
[bb1aea8897] - crypto: fix unhandled error in Hash._transform (Haram Jeong) #63261
[12c87732c1] - crypto: handle cipher context allocation failures (Tian Teng) #63542
[858496b453] - crypto: deduplicate X509 subject matching logic (Tobias Nießen) #63644
[9a29cb0964] - crypto: fix warnings in test_node_crypto.cc (Maya Lekova) #63490
[8bb536066d] - crypto: optimize normalizeAlgorithm dispatch hot path (Filip Skokan) #62756
[329e5496ff] - crypto,tls: do not ignore BN_get_word error (Tobias Nießen) #63895
[97b7a3f9c7] - debugger: add --max-hit option to probe mode (Joyee Cheung) #63704
[9098585c5e] - debugger: add more logs to probe mode (Joyee Cheung) #63663
[59cca26cd5] - debugger: surface inspector failures in probe mode (Joyee Cheung) #63437
[2922290eae] - debugger: disambiguate probe location binding (Joyee Cheung) #63286
[6fb2c2c7e2] - debugger: lazily wait for initial break output (Trivikram Kamat) #63969
[688e792551] - debugger: defer probe pause handling until startup (Trivikram Kamat) #63608
[1ac93cc05a] - debugger: await initialization after run and restart (Trivikram Kamat) #63607
[92a909cf72] - debugger,test: deflake resume failure test and add debug logs (Joyee Cheung) #63524
[8b37af8b11] - deps: V8: backport bef0d9c (Joyee Cheung) #62132
[8832126422] - deps: V8: cherry-pick 64b36b4 (Dan Carney) #61712
[75990c2cd6] - deps: update googletest to 8b53336 (Node.js GitHub Bot) #64181
[8500c7ba86] - deps: update sqlite to 3.53.3 (Node.js GitHub Bot) #64180
[dc78091b45] - deps: c-ares: cherry-pick 8ba37af (René) #64110
[873cc72125] - deps: update googletest to 0b1e895 (Node.js GitHub Bot) #64039
[1d3d166538] - deps: update acorn to 8.17.0 (Node.js GitHub Bot) #63901
[35222948be] - (SEMVER-MINOR) deps: update OpenSSL build config to support compression (Tim Perry) #62217
[e40cee5f79] - deps: upgrade npm to 11.17.0 (npm team) #63857
[85c6d46606] - deps: add ngtcp2_fmt.c to build configuration (ngtcp2.gyp) (沈鸿飞) #63821
[d2ea8b7a8c] - deps: update googletest to 7140cd4 (Node.js GitHub Bot) #63775
[25b4d57bb6] - deps: update sqlite to 3.53.2 (Node.js GitHub Bot) #63774
[a96368e4c7] - deps: update zlib to 1.3.2.1-motley-3246f1b (Node.js GitHub Bot) #63773
[b59f1f5f37] - deps: update amaro to 1.1.10 (Node.js GitHub Bot) #63670
[0b3b56ee95] - deps: update googletest to 8736d2c (Node.js GitHub Bot) #63669
[aa67b5b9c4] - dgram: add synchronous Socket connectSync() (Guy Bedford) #63932
[ef38374875] - dgram: add synchronous Socket.prototype.bindSync() (Guy Bedford) #63838
[6edc3a9967] - dgram: skip dns.lookup() for literal IP addresses (Ruben Bridgewater) #64133
[d4cfe2d8ac] - dns: coerce -0 to +0 in lookup and resolver inputs (Filip Skokan) #63556
[91c9ce5a45] - doc: improve fs.StatFs properties descriptions (aymanxdev) #62578
[54e21675fa] - doc: fix inconsistencies in CJS code snippets (Antoine du Hamel) #63199
[64c23daa76] - doc: remove typo comma from man page (Vas Sudanagunta) #63080
[bc943cd34a] - doc: update Http2SecureServer.on("timeout") default value (YuSheng Chen) #64187
[a46bc452a6] - doc: add note on visibility of CI failures to new contributor guide (Stewart X Addison) #64256
[c0fb52506c] - doc: clarify HTTP/1.1 response ordering (Matteo Collina) #64213
[d3073a7ba6] - doc: recommend node-stress-single-test for flaky tests (Trivikram Kamat) #64223
[bb9951ead0] - doc: fix typo in examples (Vas Sudanagunta) #64184
[fe674e96fc] - doc: clarify defense-in-depth issues (Matteo Collina) #64215
[faad042184] - doc: add guide and answers to FAQs for first-time contributors (Joyee Cheung) #63685
[79d685adf3] - doc: update Http2Server.close & Http2SecureServer.close (YuSheng Chen) #63298
[744e40e05e] - doc: update list of people in SECURITY.md (Richard Lau) #64152
[185f57c4a4] - doc: add missing option to man page (Richard Lau) #64156
[8933303568] - doc: fix callback example import in fs docs (Kamal Rawal) #63912
[3a0549dacb] - doc: fix keepAliveTimeout default in http.createServer options (Jahanzaib iqbal) #63974
[5a35e48d08] - doc: add sxa GPG key (ed25519) (Stewart X Addison) #64193
[66e7f815f1] - doc: add aduh95 to last security release steward (Antoine du Hamel) #63981
[a7e35040dd] - doc: fix typo in util.md (Daijiro Wachi) #63961
[d74b3a7e90] - doc: clarify callback exceptions (Matteo Collina) #63939
[b7a8f8fabd] - doc: fix incorrect test runner mock examples (Kimaswa Emmanuel Yusufu) #63656
[f11aa690cd] - doc: fix typo in cli.md (Daijiro Wachi) #63883
[df85f50269] - doc: fix typo in vm.md (Daijiro Wachi) #63881
[a00a567175] - doc: fix typo in packages.md (Daijiro Wachi) #63882
[206c1b8437] - doc: fix a/an article typos in module, util, and dns (Daijiro Wachi) #63766
[[`e3e5ef1cff

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/London)

Branch creation
- "before 4am on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-04-20T16:20:50Z

✅ Deploy Preview for finos-rune canceled.

Name	Link
🔨 Latest commit	`42f8452`
🔍 Latest deploy log	https://app.netlify.com/projects/finos-rune/deploys/6a8d904eb82bf500084e10d8

renovate · 2026-07-29T12:46:59Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: rune-ide/vscode/package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code EOVERRIDE
npm error Override for tar-fs@3.1.3 conflicts with direct dependency
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-08-25T12_53_08_454Z-debug-0.log

renovate Bot added the dependencies Issues about dependencies label Apr 16, 2026

renovate Bot assigned SimonCockx Apr 16, 2026

renovate Bot force-pushed the renovate/all-non-breaking branch 7 times, most recently from 644e52c to 5e0eac0 Compare April 20, 2026 16:20

renovate Bot force-pushed the renovate/all-non-breaking branch 4 times, most recently from 7041779 to d614f24 Compare April 23, 2026 17:23

renovate Bot force-pushed the renovate/all-non-breaking branch 10 times, most recently from 73a83b4 to 3766d5f Compare May 5, 2026 13:50

renovate Bot force-pushed the renovate/all-non-breaking branch 6 times, most recently from 13f8505 to 2dbcab3 Compare May 8, 2026 10:16

renovate Bot force-pushed the renovate/all-non-breaking branch 5 times, most recently from 9b0e468 to 667686c Compare May 28, 2026 09:12

renovate Bot force-pushed the renovate/all-non-breaking branch 13 times, most recently from b0fa692 to 378b896 Compare June 4, 2026 14:16

renovate Bot force-pushed the renovate/all-non-breaking branch 3 times, most recently from d3e9a49 to 505be3e Compare June 11, 2026 03:09

renovate Bot force-pushed the renovate/all-non-breaking branch from 505be3e to 1e07bed Compare July 29, 2026 12:46

renovate Bot force-pushed the renovate/all-non-breaking branch 6 times, most recently from a1af6cb to 0c57a2e Compare August 3, 2026 15:42

Update all non-breaking dependencies

42f8452

Navigation Menu

Uh oh!

Update all non-breaking dependencies - #1189

Update all non-breaking dependencies#1189
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-breaking

renovate Bot commented Apr 16, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jul 29, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented Apr 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Changes:

Changes:

What's Changed

New Contributors

What's Changed

v24.19.0: 2026-08-03, Version 24.19.0 'Krypton' (LTS), @​aduh95

Notable Changes

Commits

Configuration

Uh oh!

netlify Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for finos-rune canceled.

Uh oh!

renovate Bot commented Jul 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: rune-ide/vscode/package-lock.json

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Apr 16, 2026 •

edited

Loading

`v24.19.0`: 2026-08-03, Version 24.19.0 'Krypton' (LTS), @aduh95

netlify Bot commented Apr 20, 2026 •

edited

Loading

renovate Bot commented Jul 29, 2026 •

edited

Loading