Comparing changes

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v4.30.8` -> `v4.30.9` | --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.30.9`](https://redirect.github.com/github/codeql-action/releases/tag/v4.30.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.30.8...v4.30.9) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 4.30.9 - 17 Oct 2025 - Update default CodeQL bundle version to 2.23.3. [#3205](https://redirect.github.com/github/codeql-action/pull/3205) - Experimental: A new `setup-codeql` action has been added which is similar to `init`, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. [#3204](https://redirect.github.com/github/codeql-action/pull/3204) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.30.9/CHANGELOG.md) for more information. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/UI5/webcomponents-react).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [SAP/project-piper-action](https://redirect.github.com/SAP/project-piper-action) | action | patch | `v1.22.6` -> `v1.22.7` | --- ### Release Notes <details> <summary>SAP/project-piper-action (SAP/project-piper-action)</summary> ### [`v1.22.7`](https://redirect.github.com/SAP/project-piper-action/releases/tag/v1.22.7) [Compare Source](https://redirect.github.com/SAP/project-piper-action/compare/v1.22.6...v1.22.7) ##### What's Changed ##### 🧰 Maintenance - chore: use release workflow status to trigger workflow ([#292](https://redirect.github.com/SAP/project-piper-action/issues/292)) [@maxcask](https://redirect.github.com/maxcask) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/UI5/webcomponents-react).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Fixes #7812

This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`7.1.9` -> `7.1.11`](https://renovatebot.com/diffs/npm/vite/7.1.9/7.1.11) | [![age](https://developer.mend.io/api/mc/badges/age/npm/vite/7.1.11?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vite/7.1.9/7.1.11?slim=true)](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2025-62522](https://redirect.github.com/vitejs/vite/security/advisories/GHSA-93m4-6634-74q7) ### Summary Files denied by [`server.fs.deny`](https://vitejs.dev/config/server-options.html#server-fs-deny) were sent if the URL ended with `\` when the dev server is running on Windows. ### Impact Only apps that match the following conditions are affected: - explicitly exposes the Vite dev server to the network (using --host or [`server.host` config option](https://vitejs.dev/config/server-options.html#server-host)) - running the dev server on Windows ### Details `server.fs.deny` can contain patterns matching against files (by default it includes `.env`, `.env.*`, `*.{crt,pem}` as such patterns). These patterns were able to bypass by using a back slash(`\`). The root cause is that `fs.readFile('/foo.png/')` loads `/foo.png`. ### PoC ```shell npm create vite@latest cd vite-project/ cat "secret" > .env npm install npm run dev curl --request-target /.env\ http://localhost:5173 ``` <img width="1593" height="616" alt="image" src="https://github.com/user-attachments/assets/36212f4e-1d3c-4686-b16f-16b35ca9e175" /> --- ### Release Notes <details> <summary>vitejs/vite (vite)</summary> ### [`v7.1.11`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-7111-2025-10-20-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.10...v7.1.11) ##### Bug Fixes - **dev:** trim trailing slash before `server.fs.deny` check ([#20968](https://redirect.github.com/vitejs/vite/issues/20968)) ([f479cc5](https://redirect.github.com/vitejs/vite/commit/f479cc57c425ed41ceb434fecebd63931b1ed4ed)) ##### Miscellaneous Chores - **deps:** update all non-major dependencies ([#20966](https://redirect.github.com/vitejs/vite/issues/20966)) ([6fb41a2](https://redirect.github.com/vitejs/vite/commit/6fb41a260bda443685e719ea4765d3faca3db944)) ##### Code Refactoring - use subpath imports for types module reference ([#20921](https://redirect.github.com/vitejs/vite/issues/20921)) ([d0094af](https://redirect.github.com/vitejs/vite/commit/d0094af639d9ebbb51d4e00910b74f23eb8fe131)) ##### Build System - remove cjs reference in files field ([#20945](https://redirect.github.com/vitejs/vite/issues/20945)) ([ef411ce](https://redirect.github.com/vitejs/vite/commit/ef411cee2696af3ba791879fdae9aad165f178b2)) - remove hash from built filenames ([#20946](https://redirect.github.com/vitejs/vite/issues/20946)) ([a817307](https://redirect.github.com/vitejs/vite/commit/a81730754d655d1371ce0f4354af1c84e12f9f2d)) ### [`v7.1.10`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-7110-2025-10-14-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.9...v7.1.10) ##### Bug Fixes - **css:** avoid duplicate style for server rendered stylesheet link and client inline style during dev ([#20767](https://redirect.github.com/vitejs/vite/issues/20767)) ([3a92bc7](https://redirect.github.com/vitejs/vite/commit/3a92bc79b306a01b8aaf37f80b2239eaf6e488e7)) - **css:** respect emitAssets when cssCodeSplit=false ([#20883](https://redirect.github.com/vitejs/vite/issues/20883)) ([d3e7eee](https://redirect.github.com/vitejs/vite/commit/d3e7eeefa91e1992f47694d16fe4dbe708c4d80e)) - **deps:** update all non-major dependencies ([879de86](https://redirect.github.com/vitejs/vite/commit/879de86935a31b4e47ab907ddd859366518ce268)) - **deps:** update all non-major dependencies ([#20894](https://redirect.github.com/vitejs/vite/issues/20894)) ([3213f90](https://redirect.github.com/vitejs/vite/commit/3213f90ff0d8f274bcec65f40aac6dfcff1ac244)) - **dev:** allow aliases starting with `//` ([#20760](https://redirect.github.com/vitejs/vite/issues/20760)) ([b95fa2a](https://redirect.github.com/vitejs/vite/commit/b95fa2aa7564eda4c9f05ee7616a2dbada35e463)) - **dev:** remove timestamp query consistently ([#20887](https://redirect.github.com/vitejs/vite/issues/20887)) ([6537d15](https://redirect.github.com/vitejs/vite/commit/6537d15591619d7e1cfc1e50599bec16cd88340f)) - **esbuild:** inject esbuild helpers correctly for esbuild 0.25.9+ ([#20906](https://redirect.github.com/vitejs/vite/issues/20906)) ([446eb38](https://redirect.github.com/vitejs/vite/commit/446eb386329ef682d614c77958a542f2dc222880)) - normalize path before calling `fileToBuiltUrl` ([#20898](https://redirect.github.com/vitejs/vite/issues/20898)) ([73b6d24](https://redirect.github.com/vitejs/vite/commit/73b6d243e0398ee5d8d44c7d24162f4a0f4b1cf1)) - preserve original sourcemap file field when combining sourcemaps ([#20926](https://redirect.github.com/vitejs/vite/issues/20926)) ([c714776](https://redirect.github.com/vitejs/vite/commit/c714776aa1dcc24299a81c1495cbcbb1b1ef1dd3)) ##### Documentation - correct `WebSocket` spelling ([#20890](https://redirect.github.com/vitejs/vite/issues/20890)) ([29e98dc](https://redirect.github.com/vitejs/vite/commit/29e98dc3efe35efbd978523367c05db7d2e7a278)) ##### Miscellaneous Chores - **deps:** update rolldown-related dependencies ([#20923](https://redirect.github.com/vitejs/vite/issues/20923)) ([a5e3b06](https://redirect.github.com/vitejs/vite/commit/a5e3b064fa7ca981cb6f15f8e88806b36a99b8bf)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/UI5/webcomponents-react).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [node](https://nodejs.org) ([source](https://redirect.github.com/nodejs/node)) | minor | `22.20.0` -> `22.21.0` | --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v22.21.0`](https://redirect.github.com/nodejs/node/releases/tag/v22.21.0): 2025-10-20, Version 22.21.0 'Jod' (LTS), @aduh95 [Compare Source](https://redirect.github.com/nodejs/node/compare/v22.20.0...v22.21.0) ##### Notable Changes - \[[`1486fedea1`](https://redirect.github.com/nodejs/node/commit/1486fedea1)] - **(SEMVER-MINOR)** **cli**: add `--use-env-proxy` (Joyee Cheung) [#59151](https://redirect.github.com/nodejs/node/pull/59151) - \[[`bedaaa11fc`](https://redirect.github.com/nodejs/node/commit/bedaaa11fc)] - **(SEMVER-MINOR)** **http**: support http proxy for fetch under `NODE_USE_ENV_PROXY` (Joyee Cheung) [#57165](https://redirect.github.com/nodejs/node/pull/57165) - \[[`af8b5fa29d`](https://redirect.github.com/nodejs/node/commit/af8b5fa29d)] - **(SEMVER-MINOR)** **http**: add `shouldUpgradeCallback` to let servers control HTTP upgrades (Tim Perry) [#59824](https://redirect.github.com/nodejs/node/pull/59824) - \[[`42102594b1`](https://redirect.github.com/nodejs/node/commit/42102594b1)] - **(SEMVER-MINOR)** **http,https**: add built-in proxy support in `http`/`https.request` and `Agent` (Joyee Cheung) [#58980](https://redirect.github.com/nodejs/node/pull/58980) - \[[`686ac49b82`](https://redirect.github.com/nodejs/node/commit/686ac49b82)] - **(SEMVER-MINOR)** **src**: add percentage support to `--max-old-space-size` (Asaf Federman) [#59082](https://redirect.github.com/nodejs/node/pull/59082) ##### Commits - \[[`a71dd592e3`](https://redirect.github.com/nodejs/node/commit/a71dd592e3)] - **benchmark**: calibrate config dgram multi-buffer (Bruno Rodrigues) [#59696](https://redirect.github.com/nodejs/node/pull/59696) - \[[`16c4b466f4`](https://redirect.github.com/nodejs/node/commit/16c4b466f4)] - **benchmark**: calibrate config cluster/echo.js (Nam Yooseong) [#59836](https://redirect.github.com/nodejs/node/pull/59836) - \[[`53cb9f3b6c`](https://redirect.github.com/nodejs/node/commit/53cb9f3b6c)] - **build**: add the missing macro definitions for OpenHarmony (hqzing) [#59804](https://redirect.github.com/nodejs/node/pull/59804) - \[[`ec5290fe01`](https://redirect.github.com/nodejs/node/commit/ec5290fe01)] - **build**: do not include custom ESLint rules testing in tarball (Antoine du Hamel) [#59809](https://redirect.github.com/nodejs/node/pull/59809) - \[[`1486fedea1`](https://redirect.github.com/nodejs/node/commit/1486fedea1)] - **(SEMVER-MINOR)** **cli**: add --use-env-proxy (Joyee Cheung) [#59151](https://redirect.github.com/nodejs/node/pull/59151) - \[[`1f93913446`](https://redirect.github.com/nodejs/node/commit/1f93913446)] - **crypto**: use `return await` when returning Promises from async functions (Renegade334) [#59841](https://redirect.github.com/nodejs/node/pull/59841) - \[[`f488b2ff73`](https://redirect.github.com/nodejs/node/commit/f488b2ff73)] - **crypto**: use async functions for non-stub Promise-returning functions (Renegade334) [#59841](https://redirect.github.com/nodejs/node/pull/59841) - \[[`aed9fd5ac4`](https://redirect.github.com/nodejs/node/commit/aed9fd5ac4)] - **crypto**: avoid calls to `promise.catch()` (Renegade334) [#59841](https://redirect.github.com/nodejs/node/pull/59841) - \[[`37c2d186f0`](https://redirect.github.com/nodejs/node/commit/37c2d186f0)] - **deps**: update amaro to 1.1.4 (pmarchini) [#60044](https://redirect.github.com/nodejs/node/pull/60044) - \[[`28aea13419`](https://redirect.github.com/nodejs/node/commit/28aea13419)] - **deps**: update archs files for openssl-3.5.4 (Node.js GitHub Bot) [#60101](https://redirect.github.com/nodejs/node/pull/60101) - \[[`ddbc1aa0bb`](https://redirect.github.com/nodejs/node/commit/ddbc1aa0bb)] - **deps**: upgrade openssl sources to openssl-3.5.4 (Node.js GitHub Bot) [#60101](https://redirect.github.com/nodejs/node/pull/60101) - \[[`badbba2da9`](https://redirect.github.com/nodejs/node/commit/badbba2da9)] - **deps**: update googletest to [`50b8600`](https://redirect.github.com/nodejs/node/commit/50b8600) (Node.js GitHub Bot) [#59955](https://redirect.github.com/nodejs/node/pull/59955) - \[[`48aaf98a08`](https://redirect.github.com/nodejs/node/commit/48aaf98a08)] - **deps**: update archs files for openssl-3.5.3 (Node.js GitHub Bot) [#59901](https://redirect.github.com/nodejs/node/pull/59901) - \[[`e02a562ea6`](https://redirect.github.com/nodejs/node/commit/e02a562ea6)] - **deps**: upgrade openssl sources to openssl-3.5.3 (Node.js GitHub Bot) [#59901](https://redirect.github.com/nodejs/node/pull/59901) - \[[`7e0e86cb92`](https://redirect.github.com/nodejs/node/commit/7e0e86cb92)] - **deps**: upgrade npm to 10.9.4 (npm team) [#60074](https://redirect.github.com/nodejs/node/pull/60074) - \[[`91dda5facf`](https://redirect.github.com/nodejs/node/commit/91dda5facf)] - **deps**: update undici to 6.22.0 (Matteo Collina) [#60112](https://redirect.github.com/nodejs/node/pull/60112) - \[[`3a3220a2f0`](https://redirect.github.com/nodejs/node/commit/3a3220a2f0)] - **dgram**: restore buffer optimization in fixBufferList (Yoo) [#59934](https://redirect.github.com/nodejs/node/pull/59934) - \[[`09bdcce6b8`](https://redirect.github.com/nodejs/node/commit/09bdcce6b8)] - **diagnostics\_channel**: fix race condition with diagnostics\_channel and GC (Ugaitz Urien) [#59910](https://redirect.github.com/nodejs/node/pull/59910) - \[[`b3eeb3bd13`](https://redirect.github.com/nodejs/node/commit/b3eeb3bd13)] - **doc**: provide alternative to `url.parse()` using WHATWG URL (Steven) [#59736](https://redirect.github.com/nodejs/node/pull/59736) - \[[`1ddaab1904`](https://redirect.github.com/nodejs/node/commit/1ddaab1904)] - **doc**: mention reverse proxy and include simple example (Steven) [#59736](https://redirect.github.com/nodejs/node/pull/59736) - \[[`3b3b71e99c`](https://redirect.github.com/nodejs/node/commit/3b3b71e99c)] - **doc**: mark `.env` files support as stable (Santeri Hiltunen) [#59925](https://redirect.github.com/nodejs/node/pull/59925) - \[[`d37f67d1bd`](https://redirect.github.com/nodejs/node/commit/d37f67d1bd)] - **doc**: remove optional title prefixes (Aviv Keller) [#60087](https://redirect.github.com/nodejs/node/pull/60087) - \[[`ca2dff63f9`](https://redirect.github.com/nodejs/node/commit/ca2dff63f9)] - **doc**: fix typo on child\_process.md (Angelo Gazzola) [#60114](https://redirect.github.com/nodejs/node/pull/60114) - \[[`3fca564a05`](https://redirect.github.com/nodejs/node/commit/3fca564a05)] - **doc**: add automated migration info to deprecations (Augustin Mauroy) [#60022](https://redirect.github.com/nodejs/node/pull/60022) - \[[`4bc366fc16`](https://redirect.github.com/nodejs/node/commit/4bc366fc16)] - **doc**: use "WebAssembly" instead of "Web Assembly" (Tobias Nießen) [#59954](https://redirect.github.com/nodejs/node/pull/59954) - \[[`4808dbdd9a`](https://redirect.github.com/nodejs/node/commit/4808dbdd9a)] - **doc**: fix typo in section on microtask order (Tobias Nießen) [#59932](https://redirect.github.com/nodejs/node/pull/59932) - \[[`d6e303d645`](https://redirect.github.com/nodejs/node/commit/d6e303d645)] - **doc**: update V8 fast API guidance (René) [#58999](https://redirect.github.com/nodejs/node/pull/58999) - \[[`0a3a3f729e`](https://redirect.github.com/nodejs/node/commit/0a3a3f729e)] - **doc**: add security escalation policy (Ulises Gascón) [#59806](https://redirect.github.com/nodejs/node/pull/59806) - \[[`8fd669c70d`](https://redirect.github.com/nodejs/node/commit/8fd669c70d)] - **doc**: type improvement of file `http.md` (yusheng chen) [#58189](https://redirect.github.com/nodejs/node/pull/58189) - \[[`9833dc6060`](https://redirect.github.com/nodejs/node/commit/9833dc6060)] - **doc**: rephrase dynamic import() description (Nam Yooseong) [#59224](https://redirect.github.com/nodejs/node/pull/59224) - \[[`2870a73681`](https://redirect.github.com/nodejs/node/commit/2870a73681)] - **doc,crypto**: update subtle.generateKey and subtle.importKey (Filip Skokan) [#59851](https://redirect.github.com/nodejs/node/pull/59851) - \[[`85818db93c`](https://redirect.github.com/nodejs/node/commit/85818db93c)] - **fs,win**: do not add a second trailing slash in readdir (Gerhard Stöbich) [#59847](https://redirect.github.com/nodejs/node/pull/59847) - \[[`bedaaa11fc`](https://redirect.github.com/nodejs/node/commit/bedaaa11fc)] - **(SEMVER-MINOR)** **http**: support http proxy for fetch under NODE\_USE\_ENV\_PROXY (Joyee Cheung) [#57165](https://redirect.github.com/nodejs/node/pull/57165) - \[[`af8b5fa29d`](https://redirect.github.com/nodejs/node/commit/af8b5fa29d)] - **(SEMVER-MINOR)** **http**: add shouldUpgradeCallback to let servers control HTTP upgrades (Tim Perry) [#59824](https://redirect.github.com/nodejs/node/pull/59824) - \[[`758271ae66`](https://redirect.github.com/nodejs/node/commit/758271ae66)] - **http**: optimize checkIsHttpToken for short strings (방진혁) [#59832](https://redirect.github.com/nodejs/node/pull/59832) - \[[`42102594b1`](https://redirect.github.com/nodejs/node/commit/42102594b1)] - **(SEMVER-MINOR)** **http,https**: add built-in proxy support in http/https.request and Agent (Joyee Cheung) [#58980](https://redirect.github.com/nodejs/node/pull/58980) - \[[`a33ed9bf96`](https://redirect.github.com/nodejs/node/commit/a33ed9bf96)] - **inspector**: ensure adequate memory allocation for `Binary::toBase64` (René) [#59870](https://redirect.github.com/nodejs/node/pull/59870) - \[[`34c686be2b`](https://redirect.github.com/nodejs/node/commit/34c686be2b)] - **lib**: update inspect output format for subclasses (Miguel Marcondes Filho) [#59687](https://redirect.github.com/nodejs/node/pull/59687) - \[[`12e553529c`](https://redirect.github.com/nodejs/node/commit/12e553529c)] - **lib**: add source map support for assert messages (Chengzhong Wu) [#59751](https://redirect.github.com/nodejs/node/pull/59751) - \[[`d2a70571f8`](https://redirect.github.com/nodejs/node/commit/d2a70571f8)] - **lib,src**: refactor assert to load error source from memory (Chengzhong Wu) [#59751](https://redirect.github.com/nodejs/node/pull/59751) - \[[`20a9e86b5d`](https://redirect.github.com/nodejs/node/commit/20a9e86b5d)] - **meta**: move Michael to emeritus (Michael Dawson) [#60070](https://redirect.github.com/nodejs/node/pull/60070) - \[[`c591cca15c`](https://redirect.github.com/nodejs/node/commit/c591cca15c)] - **meta**: bump github/codeql-action from 3.30.0 to 3.30.5 (dependabot\[bot]) [#60089](https://redirect.github.com/nodejs/node/pull/60089) - \[[`090ba141b1`](https://redirect.github.com/nodejs/node/commit/090ba141b1)] - **meta**: bump codecov/codecov-action from 5.5.0 to 5.5.1 (dependabot\[bot]) [#60091](https://redirect.github.com/nodejs/node/pull/60091) - \[[`a0ba6884a5`](https://redirect.github.com/nodejs/node/commit/a0ba6884a5)] - **meta**: bump actions/stale from 9.1.0 to 10.0.0 (dependabot\[bot]) [#60092](https://redirect.github.com/nodejs/node/pull/60092) - \[[`0feca0c541`](https://redirect.github.com/nodejs/node/commit/0feca0c541)] - **meta**: bump actions/setup-node from 4.4.0 to 5.0.0 (dependabot\[bot]) [#60093](https://redirect.github.com/nodejs/node/pull/60093) - \[[`7cd2b42d18`](https://redirect.github.com/nodejs/node/commit/7cd2b42d18)] - **meta**: bump step-security/harden-runner from 2.12.2 to 2.13.1 (dependabot\[bot]) [#60094](https://redirect.github.com/nodejs/node/pull/60094) - \[[`1f3b9d66ac`](https://redirect.github.com/nodejs/node/commit/1f3b9d66ac)] - **meta**: bump actions/cache from 4.2.4 to 4.3.0 (dependabot\[bot]) [#60095](https://redirect.github.com/nodejs/node/pull/60095) - \[[`0fedbb3de7`](https://redirect.github.com/nodejs/node/commit/0fedbb3de7)] - **meta**: bump ossf/scorecard-action from 2.4.2 to 2.4.3 (dependabot\[bot]) [#60096](https://redirect.github.com/nodejs/node/pull/60096) - \[[`04590b8267`](https://redirect.github.com/nodejs/node/commit/04590b8267)] - **meta**: bump actions/setup-python from 5.6.0 to 6.0.0 (dependabot\[bot]) [#60090](https://redirect.github.com/nodejs/node/pull/60090) - \[[`2bf0a9318f`](https://redirect.github.com/nodejs/node/commit/2bf0a9318f)] - **meta**: add .npmrc with ignore-scripts=true (Joyee Cheung) [#59914](https://redirect.github.com/nodejs/node/pull/59914) - \[[`e10dc7b81c`](https://redirect.github.com/nodejs/node/commit/e10dc7b81c)] - **module**: allow overriding linked requests for a ModuleWrap (Chengzhong Wu) [#59527](https://redirect.github.com/nodejs/node/pull/59527) - \[[`2237142369`](https://redirect.github.com/nodejs/node/commit/2237142369)] - **module**: link module with a module request record (Chengzhong Wu) [#58886](https://redirect.github.com/nodejs/node/pull/58886) - \[[`6d24b88fbc`](https://redirect.github.com/nodejs/node/commit/6d24b88fbc)] - **node-api**: added SharedArrayBuffer api (Mert Can Altin) [#59071](https://redirect.github.com/nodejs/node/pull/59071) - \[[`4cc84c96f4`](https://redirect.github.com/nodejs/node/commit/4cc84c96f4)] - **node-api**: make napi\_delete\_reference use node\_api\_basic\_env (Jeetu Suthar) [#59684](https://redirect.github.com/nodejs/node/pull/59684) - \[[`e790eb6b50`](https://redirect.github.com/nodejs/node/commit/e790eb6b50)] - **repl**: fix cpu overhead pasting big strings to the REPL (Ruben Bridgewater) [#59857](https://redirect.github.com/nodejs/node/pull/59857) - \[[`99ea08dc43`](https://redirect.github.com/nodejs/node/commit/99ea08dc43)] - **repl**: add isValidParentheses check before wrap input (Xuguang Mei) [#59607](https://redirect.github.com/nodejs/node/pull/59607) - \[[`e4a4f63019`](https://redirect.github.com/nodejs/node/commit/e4a4f63019)] - **sqlite**: fix crash session extension callbacks with workers (Bart Louwers) [#59848](https://redirect.github.com/nodejs/node/pull/59848) - \[[`42c5544b97`](https://redirect.github.com/nodejs/node/commit/42c5544b97)] - **src**: assert memory calc for max-old-space-size-percentage (Asaf Federman) [#59460](https://redirect.github.com/nodejs/node/pull/59460) - \[[`686ac49b82`](https://redirect.github.com/nodejs/node/commit/686ac49b82)] - **(SEMVER-MINOR)** **src**: add percentage support to --max-old-space-size (Asaf Federman) [#59082](https://redirect.github.com/nodejs/node/pull/59082) - \[[`84701ff668`](https://redirect.github.com/nodejs/node/commit/84701ff668)] - **src**: clear all linked module caches once instantiated (Chengzhong Wu) [#59117](https://redirect.github.com/nodejs/node/pull/59117) - \[[`8e182e561f`](https://redirect.github.com/nodejs/node/commit/8e182e561f)] - **src**: remove unnecessary `Environment::GetCurrent()` calls (Moonki Choi) [#59814](https://redirect.github.com/nodejs/node/pull/59814) - \[[`c9cde35c4d`](https://redirect.github.com/nodejs/node/commit/c9cde35c4d)] - **src**: simplify is\_callable by making it a concept (Tobias Nießen) [#58169](https://redirect.github.com/nodejs/node/pull/58169) - \[[`892b425ee1`](https://redirect.github.com/nodejs/node/commit/892b425ee1)] - **src**: rename private fields to follow naming convention (Moonki Choi) [#59923](https://redirect.github.com/nodejs/node/pull/59923) - \[[`36b68db7f5`](https://redirect.github.com/nodejs/node/commit/36b68db7f5)] - **src**: reduce the nearest parent package JSON cache size (Michael Smith) [#59888](https://redirect.github.com/nodejs/node/pull/59888) - \[[`26b40bad02`](https://redirect.github.com/nodejs/node/commit/26b40bad02)] - **src**: replace FIXED\_ONE\_BYTE\_STRING with Environment-cached strings (Moonki Choi) [#59891](https://redirect.github.com/nodejs/node/pull/59891) - \[[`34dcb7dc32`](https://redirect.github.com/nodejs/node/commit/34dcb7dc32)] - **src**: create strings in `FIXED_ONE_BYTE_STRING` as internalized (Anna Henningsen) [#59826](https://redirect.github.com/nodejs/node/pull/59826) - \[[`4d748add05`](https://redirect.github.com/nodejs/node/commit/4d748add05)] - **src**: remove `std::array` overload of `FIXED_ONE_BYTE_STRING` (Anna Henningsen) [#59826](https://redirect.github.com/nodejs/node/pull/59826) - \[[`bb6fd7c2d1`](https://redirect.github.com/nodejs/node/commit/bb6fd7c2d1)] - **src**: ensure `v8::Eternal` is empty before setting it (Anna Henningsen) [#59825](https://redirect.github.com/nodejs/node/pull/59825) - \[[`7a91282bf9`](https://redirect.github.com/nodejs/node/commit/7a91282bf9)] - **src**: use simdjson::pad (0hm☘️) [#59391](https://redirect.github.com/nodejs/node/pull/59391) - \[[`ba00875f01`](https://redirect.github.com/nodejs/node/commit/ba00875f01)] - **stream**: use new AsyncResource instead of bind (Matteo Collina) [#59867](https://redirect.github.com/nodejs/node/pull/59867) - \[[`ebec3ef68b`](https://redirect.github.com/nodejs/node/commit/ebec3ef68b)] - **(SEMVER-MINOR)** **test**: move http proxy tests to test/client-proxy (Joyee Cheung) [#58980](https://redirect.github.com/nodejs/node/pull/58980) - \[[`7067d79fb3`](https://redirect.github.com/nodejs/node/commit/7067d79fb3)] - **test**: mark sea tests flaky on macOS x64 (Richard Lau) [#60068](https://redirect.github.com/nodejs/node/pull/60068) - \[[`ca1942c9d5`](https://redirect.github.com/nodejs/node/commit/ca1942c9d5)] - **test**: testcase demonstrating issue 59541 (Eric Rannaud) [#59801](https://redirect.github.com/nodejs/node/pull/59801) - \[[`660d57355e`](https://redirect.github.com/nodejs/node/commit/660d57355e)] - **test,doc**: skip --max-old-space-size-percentage on 32-bit platforms (Asaf Federman) [#60144](https://redirect.github.com/nodejs/node/pull/60144) - \[[`19a7b1ef26`](https://redirect.github.com/nodejs/node/commit/19a7b1ef26)] - **tls**: load bundled and extra certificates off-thread (Joyee Cheung) [#59856](https://redirect.github.com/nodejs/node/pull/59856) - \[[`095e7a81fc`](https://redirect.github.com/nodejs/node/commit/095e7a81fc)] - **tls**: only do off-thread certificate loading on loading tls (Joyee Cheung) [#59856](https://redirect.github.com/nodejs/node/pull/59856) - \[[`c42c1204c7`](https://redirect.github.com/nodejs/node/commit/c42c1204c7)] - **tools**: fix `tools/make-v8.sh` for clang (Richard Lau) [#59893](https://redirect.github.com/nodejs/node/pull/59893) - \[[`b632a1d98d`](https://redirect.github.com/nodejs/node/commit/b632a1d98d)] - **tools**: skip test-internet workflow for draft PRs (Michaël Zasso) [#59817](https://redirect.github.com/nodejs/node/pull/59817) - \[[`6021c3ac76`](https://redirect.github.com/nodejs/node/commit/6021c3ac76)] - **tools**: copyedit `build-tarball.yml` (Antoine du Hamel) [#59808](https://redirect.github.com/nodejs/node/pull/59808) - \[[`ef005d0c9b`](https://redirect.github.com/nodejs/node/commit/ef005d0c9b)] - **typings**: update 'types' binding (René) [#59692](https://redirect.github.com/nodejs/node/pull/59692) - \[[`28ef564ecd`](https://redirect.github.com/nodejs/node/commit/28ef564ecd)] - **typings**: remove unused imports (Nam Yooseong) [#59880](https://redirect.github.com/nodejs/node/pull/59880) - \[[`f88752ddb6`](https://redirect.github.com/nodejs/node/commit/f88752ddb6)] - **url**: replaced slice with at (Mikhail) [#59181](https://redirect.github.com/nodejs/node/pull/59181) - \[[`24c224960c`](https://redirect.github.com/nodejs/node/commit/24c224960c)] - **url**: add type checking to urlToHttpOptions() (simon-id) [#59753](https://redirect.github.com/nodejs/node/pull/59753) - \[[`f2fbcc576d`](https://redirect.github.com/nodejs/node/commit/f2fbcc576d)] - **util**: fix debuglog.enabled not being present with callback logger (Ruben Bridgewater) [#59858](https://redirect.github.com/nodejs/node/pull/59858) - \[[`6277058e43`](https://redirect.github.com/nodejs/node/commit/6277058e43)] - **vm**: sync-ify SourceTextModule linkage (Chengzhong Wu) [#59000](https://redirect.github.com/nodejs/node/pull/59000) - \[[`5bf21a4309`](https://redirect.github.com/nodejs/node/commit/5bf21a4309)] - **vm**: explain how to share promises between contexts w/ afterEvaluate (Eric Rannaud) [#59801](https://redirect.github.com/nodejs/node/pull/59801) - \[[`312b33a083`](https://redirect.github.com/nodejs/node/commit/312b33a083)] - **vm**: "afterEvaluate", evaluate() return a promise from the outer context (Eric Rannaud) [#59801](https://redirect.github.com/nodejs/node/pull/59801) - \[[`1eadab863c`](https://redirect.github.com/nodejs/node/commit/1eadab863c)] - **win,tools**: add description to signature (Martin Costello) [#59877](https://redirect.github.com/nodejs/node/pull/59877) - \[[`816e1befb1`](https://redirect.github.com/nodejs/node/commit/816e1befb1)] - **zlib**: reduce code duplication (jhofstee) [#57810](https://redirect.github.com/nodejs/node/pull/57810) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/UI5/webcomponents-react).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…7839) __Chrome:__ - scrollbar track height is not updated correctly in some cases <img width="157" height="301" alt="image" src="https://github.com/user-attachments/assets/009128e9-98bb-40d7-a3ed-af5d89c69e82" /> _Here the table is scrolled to the last row_ __Solution:__ force reflow to update scrollbar track height __Firefox:__ - scrollbar container do not automatically adjust to the scrollbar width, leading to hidden scrollbars if no `width` is set. - scrollbars do not scale in Firefox -> scrollbar container width would have to be calculated according to scale value. __Solution:__ Use native scrollbar and add padding in last cells to prevent content from being hidden __General:__ - Improve scroll performance when dragging scrollbar - Fix issue with scroll synchronization when updating `data` ___ Fixes #7831

…7846)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Comparing changes

Open a pull request

Commits on Oct 17, 2025

Commits on Oct 20, 2025

Commits on Oct 21, 2025

This comparison is taking too long to generate.

Uh oh!