Skip to content

renovate/42.83.1 package update #78217

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
octo-sts wants to merge 5 commits into
base: main
Choose a base branch
from
+17 −2
Open

renovate/42.83.1 package update #78217

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
a3b8adc
renovate/42.83.1 package update
Jan 16, 2026
16cc33f
fix: add pnpm overrides for diff and undici
octo-sts[bot] Jan 16, 2026
980b320
fix: add diff 8.0.3 as direct dependency
octo-sts[bot] Jan 16, 2026
37d19fc
fix: override npm>diff to 8.0.3 for CVE
octo-sts[bot] Jan 16, 2026
33bd3d0
fix: patch bundled npm diff to 8.0.3
octo-sts[bot] Jan 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 17 additions & 2 deletions renovate.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
package:
name: renovate
version: "42.81.8"
version: "42.83.1"
epoch: 0 # GHSA-5j98-mcp5-4vw2
description: "Automated dependency updates. Multi-platform and multi-language."
copyright:
Expand Down Expand Up @@ -31,7 +31,7 @@ pipeline:
with:
repository: https://github.com/renovatebot/renovate
tag: ${{package.version}}
expected-commit: 960f0655d69107875080e6502760ab6b2d71f8a4
expected-commit: 5d01c75f349b9dd408885237de11d2afe3cc6b4f

- runs: |
sed -i 's/"version": "0.0.0-semantic-release"/"version": "${{package.version}}"/' package.json
Expand All @@ -41,16 +41,31 @@ pipeline:
jq '.dependencies."js-yaml" = "4.1.1"' package.json > temp.json && mv temp.json package.json
jq '.dependencies."glob" = "11.1.0"' package.json > temp.json && mv temp.json package.json
jq '.dependencies."npm" = "11.6.4"' package.json > temp.json && mv temp.json package.json
jq '.dependencies."diff" = "8.0.3"' package.json > temp.json && mv temp.json package.json
jq '.pnpm.overrides."js-yaml" = "4.1.1"' package.json > temp.json && mv temp.json package.json
jq '.pnpm.overrides."glob" = "11.1.0"' package.json > temp.json && mv temp.json package.json
jq '.pnpm.overrides."npm" = "11.6.4"' package.json > temp.json && mv temp.json package.json
jq '.pnpm.overrides."diff" = "8.0.3"' package.json > temp.json && mv temp.json package.json
jq '.pnpm.overrides."undici" = "7.18.2"' package.json > temp.json && mv temp.json package.json
jq '.pnpm.overrides."npm>diff" = "8.0.3"' package.json > temp.json && mv temp.json package.json

- runs: |
corepack enable
corepack install
pnpm i --no-frozen-lockfile
pnpm build

- name: Patch bundled npm diff dependency
runs: |
find node_modules -path '*/npm/node_modules/diff/package.json' -exec sh -c '
for f; do
dir=$(dirname "$f")
rm -rf "$dir"/*
cd "$dir" && npm pack diff@8.0.3 --quiet && tar -xzf diff-8.0.3.tgz --strip-components=1 && rm diff-8.0.3.tgz
cd - > /dev/null
done
' _ {} +

- runs: |
mkdir -p ${{targets.contextdir}}/usr/bin \
${{targets.contextdir}}/usr/lib/renovate \
Expand Down
Loading