fix(deps): update npm - all minor and patch updates - #583
Merged
ehaldane-digicatapult merged 1 commit intoSep 8, 2026
Conversation
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
renovate
Bot
force-pushed
the
renovate/npm-all-minor-and-patch-updates
branch
from
September 8, 2026 01:59
f9a543a to
ab68576
Compare
ehaldane-digicatapult
approved these changes
Sep 8, 2026
ehaldane-digicatapult
deleted the
renovate/npm-all-minor-and-patch-updates
branch
September 8, 2026 09:48
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^1.16.1→^1.16.2^10.9.1→^10.10.0^8.10.1→^8.10.2bump,lockfileUpdate, orrollbackupdates, so these are raised without a Minimum Release Age check. You will need to manually validate the Minimum Release Age for these package(s).Release Notes
swc-project/swc (@swc/core)
v1.16.2Compare Source
Bug Fixes
(es/compat) Preserve for-of var binding scope (#12158) (f6d5bd1)
(es/decorators) Drop params from getter replacing decorated private method (#12161) (d56f594)
(es/flow) Preserve Flow component type semantics (#12090) (c8d5b49)
(es/minifier) Mark for update and test as executed multiple time (#12131) (1260e36)
(es/minifier) Report for loop var decl as assign (#12136) (783bbc2)
(es/minifier) Don't replace value-used console.*.bind() calls with undefined (#12138) (ed74223)
(es/minifier) Drop spans of cached
globalsvalues (#12129) (9a306b8)(es/minifier) Preserve effects of returned value calls (#12140) (c37b5a9)
(es/minifier) Avoid JSX sequence inlining loop (#12149) (4e79b94)
(es/minifier) Preserve bindings in copied inline arrows (#12141) (cf7b5c9)
(es/minifier) Preserve do-while control-flow targets (#12160) (f62c437)
(es/minifier) Preserve pure annotation ownership (#12180) (ec780f9)
(es/parser) Retry ambiguous Program parsing (#12142) (141a320)
(es/parser) Preserve await grammar boundaries (#12156) (c732683)
(es/quote) Restore await parsing (#12163) (918f517)
(es/typescript) Treat const variable references as enum constants (#12101) (c523551)
(swc) Key optimizer env cache by configured values (#12166) (c0b6f12)
(visit) Panic on invalid AST paths (#12154) (b4d11a9)
Features
(es/minifier) Evaluate Math.floor, Math.ceil, Math.round and Mat… (#12117) (e876e80)
(es/parser) Add opt-in parser-only TSRX lowering (#12120) (61ff097)
Miscellaneous Tasks
(deps) Upgrade reqwest to 0.12 (#12144) (8dd98e4)
(deps) Ignore unpatched Wasmtime advisory (#12170) (5dd7422)
Refactor
Testing
Ci
Only plan completed issues and merged PRs (#12133) (4d9aa8e)
Gate jobs with detected changes (#12147) (3802924)
Tag published misc npm packages (#12173) (a789691)
eslint/eslint (eslint)
v10.10.0Compare Source
nodejs/undici (undici)
v8.10.2Compare Source
High severity
BalancedPoolcould drop function-valued connection options while cloning its configuration, including custom TLS certificate validation callbacks. Undici now preservesconnectand legacytlsoptions when creating upstreams. Fixed by 8f5868fb.TypeErrorthat could terminate the process. Undici now rejects the handshake with protocol error 1002. Fixed by 66e12816.Medium severity
WebSocketStreamclose could create an unobserved rejected promise when its writable stream was locked, potentially terminating the process. Undici now propagates the failure through the retained writable stream controller. Fixed by 662d0ea6.Set-Cookie, disclosing one user's cookies to another caller. Undici now excludes these responses from shared caches, including existing entries and revalidation paths. Fixed by cb75bbb3.maxSize. Fixed by 7aac7f12.Low severity
POSTorDELETE. Undici now restricts cache reads and writes to safe methods while preserving invalidation by successful unsafe requests. Fixed by 2be07bf9.Content-Lengthwas present. Undici now enforcesmaxSizeagainst received bytes and aborts oversized responses. Fixed by 6d583124.Content-Rangeagainst the original response framing before resuming. Fixed by 0160a719.What's Changed
New Contributors
Full Changelog: nodejs/undici@v8.10.1...v8.10.2
Configuration
📅 Schedule: (in timezone Europe/London)
* 0-4,22-23 * * 1-5)* * * * 0,6)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.