Skip to content

Update all non-major dependencies #295

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update all non-major dependencies #295

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 26, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
async 2.24.0 -> 2.25.0 age adoption passing confidence minor
awscli 2.27.22 -> 2.27.45 age adoption passing confidence patch
coveralls_reborn (source, changelog) '~> 0.28.0' -> '~> 0.29.0' age adoption passing confidence minor
csv (changelog) 3.3.4 -> 3.3.5 age adoption passing confidence patch
debug (changelog) 1.10.0 -> 1.11.0 age adoption passing confidence minor
lux-design-system 6.3.1 -> 6.8.2 age adoption passing confidence dependencies minor
node (source) 22.16.0 -> 22.17.0 age adoption passing confidence minor
postcss-import 16.1.0 -> 16.1.1 age adoption passing confidence dependencies patch
sass 1.89.0 -> 1.89.2 age adoption passing confidence dependencies patch
turbo-rails (changelog) 2.0.13 -> 2.0.16 age adoption passing confidence patch
vue (source) 3.5.14 -> 3.5.17 age adoption passing confidence dependencies patch

Release Notes

socketry/async (async)

v2.25.0

Compare Source

  • Added support for io_select hook in the fiber scheduler, allowing non-blocking IO.select operations. This enables better integration with code that uses IO.select for multiplexing IO operations.
Use IO::Event::WorkerPool for Blocking Operations

The Async::WorkerPool implementation has been removed in favor of using IO::Event::WorkerPool directly. This change simplifies the codebase by delegating worker pool functionality to the io-event gem, which provides a more efficient and well-tested implementation.

To enable the worker pool, you can set the ASYNC_SCHEDULER_WORKER_POOL environment variable to true. This will allow the scheduler to use a worker pool for blocking operations, which can help improve performance in applications that perform a lot of CPU-bound operations (e.g. rb_nogvl).

Better handling of IO#close using fiber_interrupt

IO#close interrupts fibers that are waiting on the IO using the new fiber_interrupt hook introduced in Ruby 3.5/4.0. This means that if you close an IO while a fiber is waiting on it, the fiber will be interrupted and will raise an IOError. This is a change from previous versions of Ruby, where closing an IO would not interrupt fibers waiting on it, and would instead interrupt the entire event loop (essentially a bug).

r, w = IO.pipe

Async do
	child = Async do
		r.gets
	end
	
	r.close # This will interrupt the child fiber.
	child.wait # This will raise an `IOError` because the IO was closed.
end
aws/aws-cli (awscli)

v2.27.45

Compare Source

v2.27.44

Compare Source

v2.27.43

Compare Source

v2.27.42

Compare Source

v2.27.41

Compare Source

v2.27.40

Compare Source

v2.27.39

Compare Source

v2.27.38

Compare Source

v2.27.37

Compare Source

v2.27.36

Compare Source

v2.27.35

Compare Source

v2.27.34

Compare Source

v2.27.33

Compare Source

v2.27.32

Compare Source

v2.27.31

Compare Source

v2.27.30

Compare Source

v2.27.29

Compare Source

v2.27.28

Compare Source

v2.27.27

Compare Source

v2.27.26

Compare Source

v2.27.25

Compare Source

v2.27.24

Compare Source

v2.27.23

Compare Source

tagliala/coveralls-ruby-reborn (coveralls_reborn)

v0.29.0

Compare Source

  • [ENHANCEMENT] Prefer require_relative for internal requires #​51
  • [ENHANCEMENT] Remove truthy dependency as obsolete and unsupported #​50
  • [ENHANCEMENT] Test against Ruby 3.4
ruby/csv (csv)

v3.3.5: csv 3.3.5 - 2025-06-01

Compare Source

Improvements
  • docs: Fixed StringScanner document URL.
    • GH-343
    • Patch by Petrik de Heus
Thanks
  • Petrik de Heus
ruby/debug (debug)

v1.11.0

Compare Source

What's Changed

New Contributors

Full Changelog: ruby/debug@v1.10.0...v1.11.0

nodejs/node (node)

v22.17.0: 2025-06-24, Version 22.17.0 'Jod' (LTS), @​aduh95

Compare Source

Notable Changes
⚠️ Deprecations
Instantiating node:http classes without new

Constructing classes like IncomingMessage or ServerResponse without the new
keyword is now discouraged. This clarifies API expectations and aligns with standard
JavaScript behavior. It may warn or error in future versions.

Contributed by Yagiz Nizipli in #​58518.

options.shell = "" in node:child_process

Using an empty string for shell previously had undefined behavior. This change
encourages explicit choices (e.g., shell: true or a shell path) and avoids
relying on implementation quirks.

Contributed by Antoine du Hamel and Renegade334 #​58564.

HTTP/2 priority signaling

The HTTP/2 prioritization API (e.g., stream.priority) is now deprecated due to
poor real-world support. Applications should avoid using priority hints and expect future removal.

Contributed by Matteo Collina and Antoine du Hamel #​58313.

✅ Features graduated to stable
assert.partialDeepStrictEqual()

This method compares only a subset of properties in deep object comparisons,
useful for flexible test assertions. Its stabilization means it's now safe for
general use and won't change unexpectedly in future releases.

Contributed by Ruben Bridgewater in #​57370.

Miscellaneous
  • dirent.parentPath
  • filehandle.readableWebStream()
  • fs.glob()
  • fs.openAsBlob()
  • node:readline/promises
  • port.hasRef()
  • readable.compose()
  • readable.iterator()
  • readable.readableAborted
  • readable.readableDidRead
  • Duplex.fromWeb()
  • Duplex.toWeb()
  • Readable.fromWeb()
  • Readable.isDisturbed()
  • Readable.toWeb()
  • stream.isErrored()
  • stream.isReadable()
  • URL.createObjectURL()
  • URL.revokeObjectURL()
  • v8.setHeapSnapshotNearHeapLimit()
  • Writable.fromWeb()
  • Writable.toWeb()
  • writable.writableAborted
  • Startup Snapshot API
  • ERR_INPUT_TYPE_NOT_ALLOWED
  • ERR_UNKNOWN_FILE_EXTENSION
  • ERR_UNKNOWN_MODULE_FORMAT
  • ERR_USE_AFTER_CLOSE

Contributed by James M Snell in
#​57513 and
#​58541.

Semver-minor features
🔧 fs.FileHandle.readableWebStream gets autoClose option

This gives developers explicit control over whether the file descriptor should
be closed when the stream ends. Helps avoid subtle resource leaks.

Contributed by James M Snell in #​58548.

🔧 fs.Dir now supports explicit resource management

This improves ergonomics around async iteration of directories. Developers can
now manually control when a directory is closed using .close() or with Symbol.asyncDispose.

Contributed by Antoine du Hamel in #​58206.

📊 http2 gains diagnostics channel: http2.server.stream.finish

Adds observability support for when a stream finishes. Useful for logging,
monitoring, and debugging HTTP/2 behavior without patching internals.

Contributed by Darshan Sen in #​58560.

🔐 Permissions: implicit allow-fs-read to entrypoint

Node.js permissions model now allows read access to the entry file by default.
It makes running permission-restricted apps smoother while preserving security.

Contributed by Rafael Gonzaga in #​58579.

🎨 util.styleText() adds 'none' style

This lets developers remove styling cleanly without hacks. Useful for overriding
inherited terminal styles when composing styled strings.

Contributed by James M Snell in #​58437.

🧑‍💻 Community updates
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions GitHub Actions
Copy link

github-actions bot commented May 26, 2025 •
edited
Loading

Container Scanning Status: ✅ Success


ghcr.io/pulibrary/imagecat-rails:pr-295 (debian 12.11)
======================================================
Total: 0 (HIGH: 0, CRITICAL: 0)

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from bc6a276 to 8700ccc Compare May 27, 2025 22:50
@renovate renovate bot changed the title Update dependency vue to v3.5.15 Update all non-major dependencies May 27, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 872a472 to f81ff2b Compare June 3, 2025 21:39
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 5a63e6f to cc14e0b Compare June 10, 2025 22:51
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 930d8c2 to 6aaf5ab Compare June 18, 2025 22:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 5898e34 to ad4c274 Compare June 24, 2025 00:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 50149b6 to d75d85b Compare June 27, 2025 19:50
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from d75d85b to e3e9901 Compare June 27, 2025 22:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants