chore(repo): Update dependencies by renovate[bot] · Pull Request #766 · ExpediaGroup/github-helpers

renovate · 2026-03-02T01:58:15Z

This PR contains the following updates:

Package	Change	Age	Confidence
@octokit/plugin-retry	`8.0.3` → `8.1.0`
@types/bun (source)	`1.3.8` → `1.3.9`
axios (source)	`1.13.4` → `1.13.6`
bun (source)	`1.3.8` → `1.3.10`
eslint (source)	`10.0.0` → `10.0.2`
simple-git (source)	`3.30.0` → `3.32.3`
typescript-eslint (source)	`8.54.0` → `8.56.1`

Release Notes

octokit/plugin-retry.js (@octokit/plugin-retry)

`v8.1.0`

Compare Source

Features

add types (#661) (e8bdeb7)

axios/axios (axios)

`v1.13.6`

Compare Source

This release focuses on platform compatibility, error handling improvements, and code quality maintenance.

⚠️ Important Changes

Breaking Changes: None identified in this release.
Action Required: Users targeting React Native should verify their integration, particularly if relying on specific Blob or FormData behaviours, as improvements have been made to support these objects.

🚀 New Features

React Native Blob Support: Axios now includes support for React Native Blob objects. Thanks to @moh3n9595 for the initial implementation. (#5764)
Code Quality: Implemented prettier across the codebase and resolved associated formatting issues. (#7385)

🐛 Bug Fixes

Environment Compatibility:
- Fixed module exports for React Native and Browserify environments. (#7386)
- Added safe FormData detection for the WeChat Mini Program environment. (#7324)
Error Handling:
- AxiosError.message is now correctly enumerable. (#7392)
- AxiosError.from now correctly copies the status property from the source error, ensuring better error propagation. (#7403)

🔧 Maintenance & Chores

Dependencies: Updated the development_dependencies group (5 updates). (#7432)
Infrastructure: Migrated @rollup/plugin-babel from v5.3.1 to v6.1.0. (#7424)
Documentation: Added missing JSDoc comments to utilities. (#7427)

🌟 New Contributors

We are thrilled to welcome our new contributors! Thank you for helping improve the project:

Full Changelog: v1.13.5...v1.13.6

`v1.13.5`

Compare Source

Release 1.13.5

Highlights

Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

Fix/5657. (PR #7313)
Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

Add input validation to isAbsoluteURL. (PR #7326)
Refactor: bump minor package versions. (PR #7356)

Documentation

Clarify object-check comment. (PR #7323)
Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

Chore: fix issues with YAML. (PR #7355)
CI: update workflow YAMLs. (PR #7372)
CI: fix run condition. (PR #7373)
Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

@sachin11063 (first contribution — PR #7323)
@asmitha-16 (first contribution — PR #7326)

Full Changelog: axios/axios@v1.13.4...v1.13.5

oven-sh/bun (bun)

`v1.3.10`: Bun v1.3.10

Compare Source

To install Bun v1.3.10

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.10:

bun upgrade

Read Bun v1.3.10's release notes on Bun's blog

Thanks to 11 contributors!

`v1.3.9`: Bun v1.3.9

Compare Source

To install Bun v1.3.9

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.9:

bun upgrade

Read Bun v1.3.9's release notes on Bun's blog

Thanks to 10 contributors!

eslint/eslint (eslint)

`v10.0.2`

Compare Source

`v10.0.1`

Compare Source

Bug Fixes

c87d5bd fix: update eslint (#20531) (renovate[bot])
d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
04c2147 fix: update error message for unused suppressions (#20496) (fnx)
38b089c fix: update dependency @eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

e5c281f chore: updates for v9.39.3 release (Jenkins)
8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
84fb885 chore: package.json update for @eslint/js release (Jenkins)
1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

steveukx/git-js (simple-git)

`v3.32.3`

Compare Source

Patch Changes

f704208: Enhanced protocol.allow checks in allowUnsafeExtProtocol handling.

Thanks to @CodeAnt-AI-Security for identifying the issue

`v3.32.2`

Compare Source

Patch Changes

8d02097: Enhanced clone unsafe switch detection.

`v3.32.1`

Compare Source

Patch Changes

23b070f: Fix regex for detecting unsafe clone options

Thanks to @stevenwdv for reporting this issue.

`v3.32.0`

Compare Source

Minor Changes

1effd8e: Enhances the unsafe plugin to block additional cases where the -u switch may be disguised
along with other single character options.

Thanks to @JuHwiSang for identifying this as vulnerability.

Patch Changes

d5fd4fe: Use task runner for logging use of deprecated (already no-op) functions.

`v3.31.1`

Compare Source

Patch Changes

a44184f: Resolve NPM publish steps

typescript-eslint/typescript-eslint (typescript-eslint)

`v8.56.1`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.56.0`

Compare Source

🚀 Features

support ESLint v10 (#12057)

❤️ Thank You

Brad Zacher @bradzacher
Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.55.0`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

renovate · 2026-03-02T09:43:33Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

chore(repo): Update dependencies

05ba25e

renovate bot requested a review from a team as a code owner March 2, 2026 01:58

renovate bot added dependencies Pull requests that update a dependency file minor-version patch-version renovate labels Mar 2, 2026

chore: committing generated dist

184ee4e

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(repo): Update dependencies#766

chore(repo): Update dependencies#766
renovate[bot] wants to merge 2 commits intomainfrom
renovate/dependencies

renovate bot commented Mar 2, 2026

Uh oh!

renovate bot commented Mar 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 2, 2026

Release Notes

Features

⚠️ Important Changes

🚀 New Features

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

Release 1.13.5

Highlights

Changes

Security

Fixes

Features / Improvements

Documentation

CI / Maintenance

New Contributors

v1.3.10: Bun v1.3.10

Thanks to 11 contributors!

v1.3.9: Bun v1.3.9

Thanks to 10 contributors!

Bug Fixes

Documentation

Chores

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

🚀 Features

❤️ Thank You

Configuration

Uh oh!

renovate bot commented Mar 2, 2026

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v1.3.10`: Bun v1.3.10

`v1.3.9`: Bun v1.3.9