Update all non-major dependencies by renovate[bot] · Pull Request #229 · rwx-cloud/cli

renovate · 2025-11-17T00:07:27Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
ginkgo		minor	`2.23.4` → `2.28.1`
github.com/modelcontextprotocol/go-sdk	require	patch	`v1.3.0` → `v1.3.1`
go (source)	toolchain	minor	`1.24.1` → `1.26.0`
golang		minor	`1.24.1` → `1.26.0`
golangci-lint		patch	`1.64.6` → `1.64.8`
node (source)		minor	`22.19.0` → `22.22.0`

Release Notes

onsi/ginkgo (ginkgo)

`v2.28.1`

Compare Source

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

`v2.28.0`

Compare Source

Ginkgo's SemVer filter now supports filtering multiple components by SemVer version:

It("should work in a specific version range (1.0.0, 2.0.0) and third-party dependency redis in [8.0.0, ~)", SemVerConstraint(">= 3.2.0"), ComponentSemVerConstraint("redis", ">= 8.0.0") func() {
    // This test will only run when version is between 1.0.0 (exclusive) and 2.0.0 (exclusive) and redis version is >= 8.0.0
})

can be filtered in or out with an invocation like:

ginkgo --sem-ver-filter="2.1.1, redis=8.2.0"

Huge thanks to @Icarus9913 for working on this!

`v2.27.5`

Compare Source

Fixes

Don't make a new formatter for each GinkgoT(); that's just silly and uses precious memory

`v2.27.4`

Compare Source

Fixes

CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

`v2.27.3`

Compare Source

Fixes

report exit result in case of failure [1c9f356]
fix data race [ece19c8]

`v2.27.2`

Compare Source

Fixes

inline automaxprocs to simplify dependencies; this will be removed when Go 1.26 comes out [a69113a]

Maintenance

Fix syntax errors and typo [a99c6e0]
Fix paragraph position error [f993df5]

`v2.27.1`

Compare Source

Fixes

Fix Ginkgo Reporter slice-bounds panic [606c1cb]
Bug Fix: Add GinkoTBWrapper.Attr() and GinkoTBWrapper.Output() [a6463b3]

`v2.27.0`

Compare Source

Features

Transforming Nodes during Tree Construction

This release adds support for NodeArgsTransformers that can be registered with AddTreeConstructionNodeArgsTransformer.

These are called during the tree construction phase as nodes are constructed and can modify the node strings and decorators. This enables frameworks built on top of Ginkgo to modify Ginkgo nodes and enforce conventions.

Learn more here.

Spec Prioritization

A new SpecPriority(int) decorator has been added. Ginkgo will honor priority when ordering specs, ensuring that higher priority specs start running before lower priority specs

Learn more here.

Maintenance

Bump rexml from 3.4.0 to 3.4.2 in /docs (#1595) [1333dae]
Bump github.com/gkampitakis/go-snaps from 0.5.14 to 0.5.15 (#1600) [17ae63e]

`v2.26.0`

Compare Source

Features

Ginkgo can now generate json-formatted reports that are compatible with the go test json format. Use ginkgo --gojson-report=report.go.json. This is not intended to be a replacement for Ginkgo's native json format which is more information rich and better models Ginkgo's test structure semantics.

`v2.25.3`

Compare Source

Fixes

emit --github-output group only for progress report itself [f01aed1]

`v2.25.2`

Compare Source

Fixes

Add github output group for progress report content

Maintenance

Bump Gomega

`v2.25.1`

Compare Source

Fixes

fix(types): ignore nameless nodes on FullText() [10866d3]
chore: fix some CodeQL warnings [2e42cff]

`v2.25.0`

Compare Source

`AroundNode`

This release introduces a new decorator to support more complex spec setup usecases.

AroundNode registers a function that runs before each individual node. This is considered a more advanced decorator.

Please read the docs for more information and some examples.

Allowed signatures:

AroundNode(func()) - func will be called before the node is run.
AroundNode(func(ctx context.Context) context.Context) - func can wrap the passed in context and return a new one which will be passed on to the node.
AroundNode(func(ctx context.Context, body func(ctx context.Context))) - ctx is the context for the node and body is a function that must be called to run the node. This gives you complete control over what runs before and after the node.

Multiple AroundNode decorators can be applied to a single node and they will run in the order they are applied.

Unlike setup nodes like BeforeEach and DeferCleanup, AroundNode is guaranteed to run in the same goroutine as the decorated node. This is necessary when working with lower-level libraries that must run on a single thread (you can call runtime.LockOSThread() in the AroundNode to ensure that the node runs on a single thread).

Since AroundNode allows you to modify the context you can also use AroundNode to implement shared setup that attaches values to the context.

If applied to a container, AroundNode will run before every node in the container. Including setup nodes like BeforeEach and DeferCleanup.

AroundNode can also be applied to RunSpecs to run before every node in the suite. This opens up new mechanisms for instrumenting individual nodes across an entire suite.

`v2.24.0`

Compare Source

Features

Specs can now be decorated with (e.g.) SemVerConstraint("2.1.0") and ginkgo --sem-ver-filter="2.1.1" will only run constrained specs that match the requested version. Learn more in the docs here! Thanks to @Icarus9913 for the PR.

Fixes

remove -o from run command [3f5d379]. fixes #1582

Maintenance

Numerous dependency bumps and documentation fixes

modelcontextprotocol/go-sdk (github.com/modelcontextprotocol/go-sdk)

`v1.3.1`

Compare Source

This release is a patch release for v1.3.0.

It contains a cherry-pick for a security issue reported in #805, which takes advantage of the default behavior of Go's standard library JSON decoder that allows case-insensitive matches to struct field names (or "json" tags). The issue has been addressed by changing the JSON decoder to one that supports case sensitive matching.

Fixes

all: use case-sensitive JSON unmarshaling by @maciej-kisiel in #807

New external dependencies

https://github.com/segmentio/encoding, which is the package that provides the new decoder.

Full Changelog: modelcontextprotocol/go-sdk@v1.3.0...v1.3.1

golang/go (go)

`v1.26.0`

`v1.25.7`

`v1.25.6`

`v1.25.5`

`v1.25.4`

`v1.25.3`

`v1.25.2`

`v1.25.1`

`v1.25.0`

`v1.24.13`

`v1.24.12`

`v1.24.11`

`v1.24.10`

`v1.24.9`

`v1.24.8`

`v1.24.7`

`v1.24.6`

`v1.24.5`

`v1.24.4`

`v1.24.3`

`v1.24.2`

golangci/golangci-lint (golangci-lint)

`v1.64.8`

Compare Source

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

8b37f14 fix: check version of the configuration (#5564)

`v1.64.7`

Compare Source

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

94946f3 build(deps): bump github.com/OpenPeeDeeP/depguard/v2 from 2.2.0 to 2.2.1 (#5509)
132365e build(deps): bump github.com/golangci/dupl from 3e9179a to f665c8d (#5512)
bddd1bc build(deps): bump github.com/securego/gosec/v2 from 2.22.1 to 2.22.2 (#5515)
624fb4e build(deps): bump golang.org/x/mod from 0.23.0 to 0.24.0 (#5507)
8cffdb7 build(deps): bump golang.org/x/oauth2 from 0.27.0 to 0.28.0 in /scripts/gen_github_action_config in the scripts group (#5521)
7a3f3d7 build(deps): bump golang.org/x/tools from 0.30.0 to 0.31.0 (#5508)
c13fd5b build(deps): bump honnef.co/go/tools from 0.6.0 to 0.6.1 (#5510)

nodejs/node (node)

`v22.22.0`: 2026-01-13, Version 22.22.0 'Jod' (LTS), @marco-ippolito

Compare Source

This is a security release.

Notable Changes

lib:

(CVE-2025-59465) add TLSSocket default error handler
(CVE-2025-55132) disable futimes when permission model is enabled
lib,permission:
(CVE-2025-55130) require full read and write to symlink APIs
src:
(CVE-2025-59466) rethrow stack overflow exceptions in async_hooks
src,lib:
(CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle
tls:
(CVE-2026-21637) route callback exceptions through error handlers

Commits

[6badf4e6f4] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #60997
[37509c3ff0] - deps: update undici to 6.23.0 (Matteo Collina) nodejs-private/node-private#791
[eb8e41f8db] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
[ebbf942a83] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#748
[6b4849583a] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
[ddadc31f09] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
[d4d9f3915f] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
[25d6799df6] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

`v22.21.1`: 2025-10-28, Version 22.21.1 'Jod' (LTS), @aduh95

Compare Source

Commits

[af33e8e668] - benchmark: remove unused variable from util/priority-queue (Bruno Rodrigues) #59872
[6764ce8756] - benchmark: update count to n in permission startup (Bruno Rodrigues) #59872
[4e8d99f0dc] - benchmark: update num to n in dgram offset-length (Bruno Rodrigues) #59872
[af0a8ba7f8] - benchmark: adjust dgram offset-length len values (Bruno Rodrigues) #59708
[78efd1be4a] - benchmark: update num to n in dgram offset-length (Bruno Rodrigues) #59708
[df72dc96e9] - console,util: improve array inspection performance (Ruben Bridgewater) #60037
[ef67d09f50] - http: improve writeEarlyHints by avoiding for-of loop (Haram Jeong) #59958
[23468fd76b] - http2: fix allowHttp1+Upgrade, broken by shouldUpgradeCallback (Tim Perry) #59924
[56abc4ac76] - lib: optimize priority queue (Gürgün Dayıoğlu) #60039
[ea5cfd98c5] - lib: implement passive listener behavior per spec (BCD1me) #59995
[c2dd6eed2f] - process: fix wrong asyncContext under unhandled-rejections=strict (Shima Ryuhei) #60103
[81a3055710] - process: fix default env for process.execve (Richard Lau) #60029
[fe492c7ace] - process: fix hrtime fast call signatures (Renegade334) #59600
[76b4cab8fc] - src: bring permissions macros in line with general C/C++ standards (Anna Henningsen) #60053
[21970970c7] - src: remove AnalyzeTemporaryDtors option from .clang-tidy (iknoom) #60008
[609c063e81] - src: remove unused variables from report (Moonki Choi) #60047
[987841a773] - src: avoid unnecessary string allocations in SPrintF impl (Anna Henningsen) #60052
[6e386c0632] - src: make ToLower/ToUpper input args more flexible (Anna Henningsen) #60052
[c3be1226c7] - src: allow std::string_view arguments to SPrintF() and friends (Anna Henningsen) #60058
[764d35647d] - src: remove unnecessary std::string error messages (Anna Henningsen) #60057
[1289ef89ec] - src: remove unnecessary shadowed functions on Utf8Value & BufferValue (Anna Henningsen) #60056
[d1fb8a538d] - src: avoid unnecessary string -> char* -> string round trips (Anna Henningsen) #60055
[54b439fb5a] - src: fill options_args, options_env after vectors are finalized (iknoom) #59945
[c7c597e2ca] - src: use RAII for uv_process_options_t (iknoom) #59945
[b928ea9716] - test: ensure that the message event is fired (Luigi Pinca) #59952
[e4b95a5158] - test: replace diagnostics_channel stackframe in output snapshots (Chengzhong Wu) #60024
[4206406694] - test: mark test-web-locks skip on IBM i (SRAVANI GUNDEPALLI) #59996
[26394cd5bf] - test: expand tls-check-server-identity coverage (Diango Gavidia) #60002
[b58df47995] - test: fix typo of test-benchmark-readline.js (Deokjin Kim) #59993
[af3a59dba8] - test: verify tracing channel doesn't swallow unhandledRejection (Gerhard Stöbich) #59974
[cee362242b] - timers: fix binding fast call signatures (Renegade334) #59600
[40fea57fdd] - tools: add message on auto-fixing js lint issues in gh workflow (Dario Piotrowicz) #59128
[aac90d351b] - tools: verify signatures when updating nghttp* (Antoine du Hamel) #60113
[9fae03c7d9] - tools: use dependabot cooldown and move tools/doc (Rafael Gonzaga) #59978
[81548abdf6] - wasi: fix WasiFunction fast call signature (Renegade334) #59600

`v22.21.0`: 2025-10-20, Version 22.21.0 'Jod' (LTS), @aduh95

Compare Source

Notable Changes

[1486fedea1] - (SEMVER-MINOR) cli: add --use-env-proxy (Joyee Cheung) #59151
[bedaaa11fc] - (SEMVER-MINOR) http: support http proxy for fetch under NODE_USE_ENV_PROXY (Joyee Cheung) #57165
[af8b5fa29d] - (SEMVER-MINOR) http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry) #59824
[42102594b1] - (SEMVER-MINOR) http,https: add built-in proxy support in http/https.request and Agent (Joyee Cheung) #58980
[686ac49b82] - (SEMVER-MINOR) src: add percentage support to --max-old-space-size (Asaf Federman) #59082

Commits

[a71dd592e3] - benchmark: calibrate config dgram multi-buffer (Bruno Rodrigues) #59696
[16c4b466f4] - benchmark: calibrate config cluster/echo.js (Nam Yooseong) #59836
[53cb9f3b6c] - build: add the missing macro definitions for OpenHarmony (hqzing) #59804
[ec5290fe01] - build: do not include custom ESLint rules testing in tarball (Antoine du Hamel) #59809
[1486fedea1] - (SEMVER-MINOR) cli: add --use-env-proxy (Joyee Cheung) #59151
[1f93913446] - crypto: use return await when returning Promises from async functions (Renegade334) #59841
[f488b2ff73] - crypto: use async functions for non-stub Promise-returning functions (Renegade334) #59841
[aed9fd5ac4] - crypto: avoid calls to promise.catch() (Renegade334) #59841
[37c2d186f0] - deps: update amaro to 1.1.4 (pmarchini) #60044
[28aea13419] - deps: update archs files for openssl-3.5.4 (Node.js GitHub Bot) #60101
[ddbc1aa0bb] - deps: upgrade openssl sources to openssl-3.5.4 (Node.js GitHub Bot) #60101
[badbba2da9] - deps: update googletest to 50b8600 (Node.js GitHub Bot) #59955
[48aaf98a08] - deps: update archs files for openssl-3.5.3 (Node.js GitHub Bot) #59901
[e02a562ea6] - deps: upgrade openssl sources to openssl-3.5.3 (Node.js GitHub Bot) #59901
[7e0e86cb92] - deps: upgrade npm to 10.9.4 (npm team) #60074
[91dda5facf] - deps: update undici to 6.22.0 (Matteo Collina) #60112
[3a3220a2f0] - dgram: restore buffer optimization in fixBufferList (Yoo) #59934
[09bdcce6b8] - diagnostics_channel: fix race condition with diagnostics_channel and GC (Ugaitz Urien) #59910
[b3eeb3bd13] - doc: provide alternative to url.parse() using WHATWG URL (Steven) #59736
[1ddaab1904] - doc: mention reverse proxy and include simple example (Steven) #59736
[3b3b71e99c] - doc: mark .env files support as stable (Santeri Hiltunen) #59925
[d37f67d1bd] - doc: remove optional title prefixes (Aviv Keller) #60087
[ca2dff63f9] - doc: fix typo on child_process.md (Angelo Gazzola) #60114
[3fca564a05] - doc: add automated migration info to deprecations (Augustin Mauroy) #60022
[4bc366fc16] - doc: use "WebAssembly" instead of "Web Assembly" (Tobias Nießen) #59954
[4808dbdd9a] - doc: fix typo in section on microtask order (Tobias Nießen) #59932
[d6e303d645] - doc: update V8 fast API guidance (René) #58999
[0a3a3f729e] - doc: add security escalation policy (Ulises Gascón) #59806
[8fd669c70d] - doc: type improvement of file http.md (yusheng chen) #58189
[9833dc6060] - doc: rephrase dynamic import() description (Nam Yooseong) #59224
[2870a73681] - doc,crypto: update subtle.generateKey and subtle.importKey (Filip Skokan) #59851
[85818db93c] - fs,win: do not add a second trailing slash in readdir (Gerhard Stöbich) #59847
[bedaaa11fc] - (SEMVER-MINOR) http: support http proxy for fetch under NODE_USE_ENV_PROXY (Joyee Cheung) #57165
[af8b5fa29d] - (SEMVER-MINOR) http: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry) #59824
[758271ae66] - http: optimize checkIsHttpToken for short strings (방진혁) #59832
[42102594b1] - (SEMVER-MINOR) http,https: add built-in proxy support in http/https.request and Agent (Joyee Cheung) #58980
[a33ed9bf96] - inspector: ensure adequate memory allocation for Binary::toBase64 (René) #59870
[34c686be2b] - lib: update inspect output format for subclasses (Miguel Marcondes Filho) #59687
[12e553529c] - lib: add source map support for assert messages (Chengzhong Wu) #59751
[d2a70571f8] - lib,src: refactor assert to load error source from memory (Chengzhong Wu) #59751
[20a9e86b5d] - meta: move Michael to emeritus (Michael Dawson) #60070
[c591cca15c] - meta: bump github/codeql-action from 3.30.0 to 3.30.5 (dependabot[bot]) #60089
[090ba141b1] - meta: bump codecov/codecov-action from 5.5.0 to 5.5.1 (dependabot[bot]) #60091
[a0ba6884a5] - meta: bump actions/stale from 9.1.0 to 10.0.0 (dependabot[bot]) #60092
[0feca0c541] - meta: bump actions/setup-node from 4.4.0 to 5.0.0 (dependabot[bot]) #60093
[7cd2b42d18] - meta: bump step-security/harden-runner from 2.12.2 to 2.13.1 (dependabot[bot]) #60094
[1f3b9d66ac] - meta: bump actions/cache from 4.2.4 to 4.3.0 (dependabot[bot]) #60095
[0fedbb3de7] - meta: bump ossf/scorecard-action from 2.4.2 to 2.4.3 (dependabot[bot]) #60096
[04590b8267] - meta: bump actions/setup-python from 5.6.0 to 6.0.0 (dependabot[bot]) #60090
[2bf0a9318f] - meta: add .npmrc with ignore-scripts=true (Joyee Cheung) #59914
[e10dc7b81c] - module: allow overriding linked requests for a ModuleWrap (Chengzhong Wu) #59527
[2237142369] - module: link module with a module request record (Chengzhong Wu) #58886
[6d24b88fbc] - node-api: added SharedArrayBuffer api (Mert Can Altin) #59071
[4cc84c96f4] - node-api: make napi_delete_reference use node_api_basic_env (Jeetu Suthar) #59684
[e790eb6b50] - repl: fix cpu overhead pasting big strings to the REPL (Ruben Bridgewater) #59857
[99ea08dc43] - repl: add isValidParentheses check before wrap input (Xuguang Mei) #59607
[e4a4f63019] - sqlite: fix crash session extension callbacks with workers (Bart Louwers) #59848
[42c5544b97] - src: assert memory calc for max-old-space-size-percentage (Asaf Federman) #59460
[686ac49b82] - (SEMVER-MINOR) src: add percentage support to --max-old-space-size (Asaf Federman) #59082
[84701ff668] - src: clear all linked module caches once instantiated (Chengzhong Wu) #59117
[8e182e561f] - src: remove unnecessary Environment::GetCurrent() calls (Moonki Choi) #59814
[c9cde35c4d] - src: simplify is_callable by making it a concept (Tobias Nießen) #58169
[892b425ee1] - src: rename private fields to follow naming convention (Moonki Choi) #59923
[36b68db7f5] - src: reduce the nearest parent package JSON cache size (Michael Smith) #59888
[26b40bad02] - src: replace FIXED_ONE_BYTE_STRING with Environment-cached strings (Moonki Choi) #59891
[34dcb7dc32] - src: create strings in FIXED_ONE_BYTE_STRING as internalized (Anna Henningsen) #59826
[4d748add05] - src: remove std::array overload of FIXED_ONE_BYTE_STRING (Anna Henningsen) #59826
[bb6fd7c2d1] - src: ensure v8::Eternal is empty before setting it (Anna Henningsen) #59825
[7a91282bf9] - src: use simdjson::pad (0hm☘️) #59391
[ba00875f01] - stream: use new AsyncResource instead of bind (Matteo Collina) #59867
[ebec3ef68b] - (SEMVER-MINOR) test: move http proxy tests to test/client-proxy (Joyee Cheung) #58980
[7067d79fb3] - test: mark sea tests flaky on macOS x64 (Richard Lau) #60068
[ca1942c9d5] - test: testcase demonstrating issue 59541 (Eric Rannaud) #59801
[660d57355e] - test,doc: skip --max-old-space-size-percentage on 32-bit platforms (Asaf Federman) #60144
[19a7b1ef26] - tls: load bundled and extra certificates off-thread (Joyee Cheung) #59856
[095e7a81fc] - tls: only do off-thread certificate loading on loading tls (Joyee Cheung) #59856
[c42c1204c7] - tools: fix tools/make-v8.sh for clang (Richard Lau) #59893
[b632a1d98d] - tools: skip test-internet workflow for draft PRs (Michaël Zasso) #59817
[6021c3ac76] - tools: copyedit build-tarball.yml (Antoine du Hamel) #59808
[ef005d0c9b] - typings: update 'types' binding (René) #59692
[28ef564ecd] - typings: remove unused imports (Nam Yooseong) #59880
[f88752ddb6] - url: replaced slice with at (Mikhail) #59181
[24c224960c] - url: add type checking to urlToHttpOptions() (simon-id) #59753
[f2fbcc576d] - util: fix debuglog.enabled not being present with callback logger (Ruben Bridgewater) #59858
[6277058e43] - vm: sync-ify SourceTextModule linkage (Chengzhong Wu) #59000
[5bf21a4309] - vm: explain how to share promises between contexts w/ afterEvaluate (Eric Rannaud) #59801
[312b33a083] - vm: "afterEvaluate", evaluate() return a promise from the outer context (Eric Rannaud) #59801
[1eadab863c] - win,tools: add description to signature (Martin Costello) #59877
[816e1befb1] - zlib: reduce code duplication (jhofstee) #57810

`v22.20.0`: 2025-09-24, Version 22.20.0 'Jod' (LTS), @richardlau

Compare Source

Notable Changes

OpenSSL updated to 3.5.2

For official Node.js builds, or builds using the default build configuration, Node.js now bundles OpenSSL 3.5.2. This update allows Node.js 22.x to be supported through to the planned End-of-Life date of 2027-04-30 as the previously bundled OpenSSL 3.0.x goes out of support in September 2026.

This change does not affect third-party builds of Node.js that link to an external OpenSSL (or OpenSSL-compatible) library.

Other notable changes

[5b83e1e0a2] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #59571
[34b25fd97b] - doc: stabilize --disable-sigusr1 (Rafael Gonzaga) #59707
[bf41218ed9] - doc: mark path.matchesGlob as stable (Aviv Keller) #59572
[1dbad2058f] - (SEMVER-MINOR) http: add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) #59315
[062e837d5f] - (SEMVER-MINOR) http2: add support for raw header arrays in h2Stream.respond() (Tim Perry) #59455
[b8066611c3] - inspector: add http2 tracking support (Darshan Sen) #59611
[9b7dd40da8] - (SEMVER-MINOR) sea: implement execArgvExtension (Joyee Cheung) #59560
[48bfbd3dca] - (SEMVER-MINOR) sea: support execArgv in sea config (Joyee Cheung) #59314
[cf06e74076] - (SEMVER-MINOR) stream: add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) #59464
[62bb80c17e] - (SEMVER-MINOR) test_runner: support object property mocking (Idan Goshen) #58438
[9e2aa23be9] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428

Commits

[b7b78fd565] - assert: cap input size in myersDiff to avoid Int32Array overflow (Haram Jeong) #59578
[9da50a6c53] - benchmark: sqlite prevent create both tables on prepare selects (Bruno Rodrigues) #59709
[4c1538770e] - benchmark: calibrate config array-vs-concat (Rafael Gonzaga) #59587
[fc3f82d683] - benchmark: calibrate config v8/serialize.js (Rafael Gonzaga) #59586
[e95c9b2950] - benchmark: reduce readfile-permission-enabled config (Rafael Gonzaga) #59589
[e4fea38b31] - benchmark: calibrate length of util.diff (Rafael Gonzaga) #59588
[c5d68c4a0f] - benchmark, test: replace CRLF variable with string literal (Lee Jiho) #59466
[129a1d673b] - build: fix getting OpenSSL version on Windows (Michaël Zasso) #59609
[9f53db7162] - build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) #59547
[3839593e07] - build: use windows-2025 runner (Michaël Zasso) #59673
[e430464669] - build: compile bundled uvwasi conditionally (Carlo Cabrera) #59622
[e2c9cab0cd] - build: do not set -mminimal-toc with clang (Richard Lau) #59484
[208bc810a1] - child_process: remove unsafe array iteration (hotpineapple) #59347
[d74799d90c] - crypto: load system CA certificates off thread (Joyee Cheung) #59550
[5b83e1e0a2] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #59571
[d289b1d1af] - deps: V8: cherry-pick e3df60f (Chengzhong Wu) #58691
[cf5d91e2a6] - deps: update uvwasi to 0.0.23 (Node.js GitHub Bot) #59791
[1cf24a0445] - deps: update histogram to 0.11.9 (Node.js GitHub Bot) #59689
[8638bd3f2e] - deps: update googletest to eb2d85e (Node.js GitHub Bot) #59335
[[3ff4eb5b37](https://redirect.github.com/nodejs/node/c

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-11-17T00:07:28Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`github.com/google/jsonschema-go`	`v0.2.3` -> `v0.3.0`
`golang.org/x/text`	`v0.31.0` -> `v0.32.0`
`golang.org/x/sys`	`v0.38.0` -> `v0.39.0`

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from f6f7a26 to 20f6b3a Compare November 24, 2025 02:32

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 3109c88 to f409e4a Compare December 5, 2025 07:59

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 708fbf4 to ab72ecb Compare December 15, 2025 16:13

renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 493c092 to 8a6635a Compare December 22, 2025 20:34

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 0f932de to d1896ec Compare January 13, 2026 02:26

renovate bot force-pushed the renovate/all-minor-patch branch from d1896ec to f4ac612 Compare January 15, 2026 19:12

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 3eea4f4 to 1af12fd Compare February 4, 2026 18:15

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 14ddd51 to 56f7fbf Compare February 12, 2026 15:06

Update all non-major dependencies

17fee4a

renovate bot force-pushed the renovate/all-minor-patch branch from 56f7fbf to 17fee4a Compare February 18, 2026 20:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update all non-major dependencies#229

Update all non-major dependencies#229
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Nov 17, 2025 •

edited

Loading

Uh oh!

renovate bot commented Nov 17, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

renovate bot commented Nov 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Fixes

Fixes

Fixes

Fixes

Maintenance

Fixes

Features

Transforming Nodes during Tree Construction

Spec Prioritization

Maintenance

Features

Fixes

Fixes

Maintenance

Fixes

AroundNode

Features

Fixes

Maintenance

Fixes

New external dependencies

Changelog

Changelog

v22.22.0: 2026-01-13, Version 22.22.0 'Jod' (LTS), @​marco-ippolito

Notable Changes

Commits

v22.21.1: 2025-10-28, Version 22.21.1 'Jod' (LTS), @​aduh95

Commits

v22.21.0: 2025-10-20, Version 22.21.0 'Jod' (LTS), @​aduh95

Notable Changes

Commits

v22.20.0: 2025-09-24, Version 22.20.0 'Jod' (LTS), @​richardlau

Notable Changes

OpenSSL updated to 3.5.2

Other notable changes

Commits

Configuration

Uh oh!

renovate bot commented Nov 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

renovate bot commented Nov 17, 2025 •

edited

Loading

`AroundNode`

`v22.22.0`: 2026-01-13, Version 22.22.0 'Jod' (LTS), @marco-ippolito

`v22.21.1`: 2025-10-28, Version 22.21.1 'Jod' (LTS), @aduh95

`v22.21.0`: 2025-10-20, Version 22.21.0 'Jod' (LTS), @aduh95

`v22.20.0`: 2025-09-24, Version 22.20.0 'Jod' (LTS), @richardlau

renovate bot commented Nov 17, 2025 •

edited

Loading