Update dependency upgrades - non-major #292

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

renovate merged 1 commit into main from renovate/dependency-upgrades-non-major

May 22, 2025

+279 −670

Contributor

renovate bot commented May 22, 2025

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node (source)	`22.15.18` -> `22.15.21`
@types/react (source)	`19.1.4` -> `19.1.5`
dompurify	`3.2.5` -> `3.2.6`
eslint (source)	`9.26.0` -> `9.27.0`
postgres	`3.4.5` -> `3.4.7`
sass	`1.88.0` -> `1.89.0`
sharp (source, changelog)	`0.34.1` -> `0.34.2`
zod (source)	`3.24.4` -> `3.25.20`

Release Notes

cure53/DOMPurify (dompurify)

`v3.2.6`: DOMPurify 3.2.6

Fixed several typos and removed clutter from our documentation, thanks @Rotzbua
Added matrix: as an allowed URI scheme, thanks @kleinesfilmroellchen
Added better config hardening against prototype pollution, thanks @EffectRenan
Added better handling of attribute removal, thanks @michalnieruchalski-tiugo
Added better configuration for aggressive mXSS scrubbing behavior, thanks @BryanValverdeU
Removed the script that caused the fake entry CVE-2025-48050

eslint/eslint (eslint)

`v9.27.0`

porsager/postgres (postgres)

`v3.4.7`

`v3.4.6`

Fix failures in sql.reserve() connect shadowing real errors e8bb3b8
Fix stuck queries on non busy connections 76c13f2
Ensure non object errors thrown are handled properly a39dfef
Fixed typings for generic error code variants ad0ed44
support env.PGAPPNAME and env.PGUSERNAME ef7afdb 9f38ea1

sass/dart-sass (sass)

`v1.89.0`

Allow the Node package importer to load files even when there are multiple
potential resolutions, as long as those resolutions all point to the same
file.

lovell/sharp (sharp)

`v0.34.2`

colinhacks/zod (zod)

`v3.25.20`

Commits:

709dfe3 Add global File fallback

`v3.25.18`

Commits:

17ee03e v3.25.18

`v3.25.17`

`v3.25.16`

`v3.25.15`

`v3.25.14`

`v3.25.13`

`v3.25.12`

`v3.25.11`

`v3.25.10`

Commits:

c172c19 Fix module resolution issue

`v3.25.9`

`v3.25.8`

`v3.25.7`

`v3.25.6`

`v3.25.5`

`v3.25.4`

`v3.25.3`

`v3.25.1`

`v3.25.0`

Configuration

📅 Schedule: Branch creation - "after 4pm on thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


          Update dependency upgrades - non-major

55bfc6d

renovate bot enabled auto-merge (squash)

May 22, 2025 17:48

renovate-approve bot approved these changes

View reviewed changes

socket-security bot commented May 22, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License

View full report

renovate bot merged commit cc70f6d into main

6 checks passed

renovate bot deleted the renovate/dependency-upgrades-non-major branch

May 22, 2025 17:51

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet