chore(deps): update support-deps by renovate[bot] · Pull Request #2785 · defenseunicorns/uds-core

renovate · 2026-07-02T18:20:11Z

This PR contains the following updates:

Package	Change	Type	Update	Pending
@commitlint/cli (source)	`21.1.0` → `21.2.1`	devDependencies	minor
@commitlint/config-conventional (source)	`21.1.0` → `21.2.0`	devDependencies	minor
@eslint/eslintrc	`3.3.5` → `3.3.6`	devDependencies	patch
@eslint/js (source)	`9.39.4` → `9.39.5`	devDependencies	patch
@types/node (source)	`24.13.2` → `24.13.3`	devDependencies	patch
@vitest/coverage-v8 (source)	`4.1.9` → `4.1.10`	devDependencies	patch
actions/setup-node	`v6.4.0` → `v7.0.0`	action	major
adm-zip	`^0.5.16` → `^0.6.0`	devDependencies	minor
astral-sh/setup-uv	`v8.2.0` → `v8.3.2`	action	minor
astral-sh/uv	`0.11.25` → `0.11.28`		patch	`0.11.29`
astral-sh/uv	`0.11.25` → `0.11.28`	uses-with	patch	`0.11.29`
csv-parse (source)	`7.0.0` → `7.0.1`	devDependencies	patch
defenseunicorns/uds-cli	`v0.34.0` → `v0.34.2`		patch
defenseunicorns/uds-common	`v1.25.0` → `v1.26.3`		minor
dorny/paths-filter (changelog)	`fbd0ab8` → `7b450ff`	action	digest
ghcr.io/zarf-dev/packages/init	`v0.80.0` → `v0.81.1`		minor
github/codeql-action	`v4.36.2` → `v4.37.0`	action	minor	`v4.37.1`
js-yaml	`5.2.0` → `5.2.1`	devDependencies	patch
slackapi/slack-github-action	`v3.0.3` → `v3.0.5`	action	patch	`v4.0.0` (+2)
typescript (source)	`^6.0.0` → `^7.0.0`	devDependencies	major
vitest (source)	`4.1.9` → `4.1.10`	devDependencies	patch
zarf-dev/zarf	`v0.80.0` → `v0.81.1`		minor

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

conventional-changelog/commitlint (@commitlint/cli)

`v21.2.1`

Compare Source

Note: Version bump only for package @commitlint/cli

`v21.2.0`

Compare Source

Features

resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

conventional-changelog/commitlint (@commitlint/config-conventional)

`v21.2.0`

Compare Source

Features

resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

eslint/eslintrc (@eslint/eslintrc)

`v3.3.6`

Compare Source

Bug Fixes

update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

eslint/eslint (@eslint/js)

`v9.39.5`

Compare Source

Bug Fixes

253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)

Documentation

74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)
eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)
202117b chore: package.json update for @eslint/js release (Jenkins)
d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)
7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)
daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)
daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)
116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

vitest-dev/vitest (@vitest/coverage-v8)

`v4.1.10`

Compare Source

🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in #10680 (5c18d)
vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in #10661 (bae52)

View changes on GitHub

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v7`

Compare Source

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

cthackers/adm-zip (adm-zip)

`v0.6.0`

Compare Source

==================

Security

Fixed CVE-2026-39244: a crafted archive declaring a huge uncompressed size could force an unbounded Buffer.alloc (memory exhaustion / DoS) before any validation. Allocation is now bounded by the data actually present — STORED output is sized from the real bytes, DEFLATED output is grown by the inflater and capped at the declared size (#568)
Hardened the internal entry-name lookup table against object injection: entry names come from untrusted archives, and a name such as __proto__ previously resolved to Object.prototype, crashing addFile and hiding the entry from getEntry/readFile. The table is now prototype-less

Bug fixes

Fixed a regression (0.5.15) that rejected valid archives using a data descriptor (general-purpose bit 3). The payload is now validated against the authoritative central-directory CRC instead of requiring/parsing the trailing descriptor (#548, #533, #554)
Fixed extractAllTo/extractAllToAsync not restoring directory permissions with keepOriginalPermission; directory modes are applied after their contents are written, deepest path first, and no longer lock the extractor out of a restrictive directory (#530)
Fixed infinite recursion in addLocalFolder when a folder contains a symlink pointing back to an ancestor (e.g. workspace node_modules); the walk now tracks resolved real paths and skips already-visited directories (#541)
Fixed an uncaught exception (ERR_INVALID_ARG_TYPE) that crashed the process when writeFileToAsync could not open the target file (bad permissions, invalid filename, exhausted file descriptors); write failures are now reported through the callback and write errors are no longer silently swallowed (#470, #459, #402)
Fixed directory entries reporting an empty name (e.g. a/b/c/ now returns c) (#466)
Fixed extractEntryTo flattening subdirectories when maintainEntryPath is false; the structure below the extracted directory is now preserved instead of collapsing (and overwriting) files by basename (#306)
Fixed a failed utimes aborting extraction; setting the modification time is now best-effort and never fails extraction of already-written content (#379)
Fixed test() always returning false for any archive containing a file (it indexed the entries array with an entry object instead of reading the entry); it now correctly verifies each entry's CRC

Performance

Faster entry sorting when writing archives with many entries: names are decoded once instead of on every comparison (about 6× faster sort for large archives)

Added

Bundled TypeScript type definitions (types.d.ts), so @types/adm-zip is no longer required

Notes

Behavior change: extractEntryTo(dir, target, /* maintainEntryPath */ false) now preserves subdirectories beneath the extracted directory rather than flattening them
Behavior change: extraction no longer fails when the modification time cannot be set

`v0.5.18`

Compare Source

What's Changed

Bump js-yaml from 4.1.1 to 4.3.0 by @dependabot[bot] in #566
Fix corrupted zip when round-tripping entries with a data descriptor (#555) by @JohnJunior in #564
prevent crashes when process.versions is an empty object by @matt-fidd in #551
support for writing zip64 by @mielverkerken in #562
Fix Archive Utility failure on zips with empty directories (#558) by @JohnJunior in #563

New Contributors

@JohnJunior made their first contribution in #564
@matt-fidd made their first contribution in #551
@mielverkerken made their first contribution in #562

Full Changelog: cthackers/adm-zip@v0.5.17...v0.5.18

astral-sh/setup-uv (astral-sh/setup-uv)

astral-sh/uv (astral-sh/uv)

`v0.11.28`

Compare Source

Released on 2026-07-07.

Security

This release updates our ZIP library, astral-async-zip, to v0.0.20, which includes 15 changes that harden our ZIP handling against parser differentials. uv may reject ZIP archives with malformed or ambiguous content that were previously accepted.

See the upstream commits for a full list of changes.

Python

Upgrade GraalPy to 25.1.3 (#20069)

Enhancements

Improve trace logs for unexpected error chains (#20220)
Move lockfile update guidance to a hint (#20219)
Preserve indentation for multiline error causes (#20156)
Render user errors with their cause chains (#20217)
Route final command errors through the printer to respect -q and -qq (#20163)
Use standard rendering for uv build errors (#20159)
Use standard rendering for tool requirement errors (#20160)

Performance

Only compile bytecode for installed distributions in uv pip install (#19914)
Avoid allocating URL-safe Git revisions (#20194)
Avoid allocating canonical Python request strings (#20193)
Avoid allocating custom Astral mirror URLs (#20204)
Avoid allocating expanded compatibility tags (#20190)
Avoid allocating shell strings that need no escaping (#20196)
Avoid allocating static ABI descriptions (#20201)
Avoid allocating static Windows executable names (#20200)
Avoid allocating static dependency table names (#20199)
Avoid allocating static platform triple components (#20195)
Avoid allocating static resolver report labels (#20198)
Avoid allocating static unavailable-version messages (#20197)
Avoid allocating unchanged Python download architectures (#20202)
Avoid allocating unchanged paths during case normalization (#20203)
Avoid allocations when expanding group conflicts (#20211)
Avoid allocations when formatting requirements (#20206)
Avoid cloning credential lookup services (#20210)
Avoid cloning dry-run distributions (#20209)
Avoid cloning owned dependency metadata (#20212)
Avoid redundant direct URL clones (#20207)
Create metadata version errors lazily (#20205)
Optimize expanded tag compatibility checks (#20171)
Optimize parsing of single-digit three-part versions (#20118)

Bug fixes

Avoid overflow when computing HTTP cache age (#20178)
Respect --upgrade when upgrade-package is configured (#19955)
Support uv tree in dependency-group-only projects (#20167)
Treat cache entries as stale at exact expiration (#20183)

`v0.11.27`

Compare Source

Released on 2026-07-06.

Enhancements

Continue on ignored errors when fetching wheel metadata (#12255)
Use caching for --python-downloads-json-url (#16749)

Preview features

Discover extensionless shebang scripts in uv workspace list --scripts (#20099)

Performance

Avoid full site-packages scans for direct reinstalls (#20119)
Avoid redundant pyproject parsing (#20076)
Cache default dependency markers when reading locks (#20125)
Enable SIMD-accelerated TOML parsing (#20079)
Intern requires-python specifiers in Simple API parsing (#20104)
Read cache entries into exact-sized buffers (#20120)
Reduce VersionSpecifiers parsing allocations (#20105)
Reduce site-packages scan allocation overhead (#20087)
Reuse package names when parsing wheel filenames (#20110)
Sort Simple API files after grouping (#20112)

Bug fixes

Always emit packages table for pylock.toml (#20145)
Avoid blank line for empty uv pip tree (#20062)
Encode hashes in file paths (#19807)
Error on a registry uv.lock package without a version instead of panicking (#19855)
Preserve conditional extra markers in exports (#20148)
Skip the ambiguous authority check for file transport VCS URLs (#20086)
Sync index format when uv add --index updates an existing index URL (#19818)

Other changes

Re-add pub APIs used in Pixi (#20074)
Update Rust toolchain to 1.96.1 (#20103)

`v0.11.26`

Compare Source

Released on 2026-06-30.

Performance

Adapt uv to IDs-only PubGrub dependencies (#20048)
Avoid allocations in ForkMap::contains (#20023)
Reuse resolver work across PubGrub iterations (#20020)
Speed up candidate selection for disjoint ranges (#20026)

Bug fixes

Warn when the build cache is inside the source directory (#20056)

adaltas/node-csv (csv-parse)

`v7.0.1`

Compare Source

Bug Fixes

csv-parse: ship stream cjs export (#490)

defenseunicorns/uds-cli (defenseunicorns/uds-cli)

`v0.34.2`

Compare Source

`v0.34.1`

Compare Source

What's Changed

chore(deps): update github-actions by @renovate[bot] in #1408
fix: error with deploying uds packages containing image archives via OCI by @nicleary in #1412
fix: disable bundle format signature explicitly by @brandtkeller in #1410
chore: upgrade zarf to v0.81.0 and oras-go to v2.6.2 by @jasonwashburn in #1414

Full Changelog: defenseunicorns/uds-cli@v0.34.0...v0.34.1

defenseunicorns/uds-common (defenseunicorns/uds-common)

`v1.26.3`

Compare Source

Miscellaneous

deps: update support-deps to v0.1.9 (#719) (d479f5e)
deps: update support-deps to v1.3.3 (#716) (c19976c)
deps: update uds common foundation dependencies to v0.34.1 (#717) (ae4b729)
deps: update uds common support dependencies (#713) (d312343)
update globs in shellcheck linting task to support more usecases (#714) (695b0cf)

`v1.26.2`

Compare Source

Miscellaneous

add a renovate rule to check for versions afer a slash (#708) (0772f11)
deps: update support-deps to v0.1.8 (#711) (7e9bc74)
deps: update uds common foundation dependencies to v1.8.0 (#712) (275d768)
deps: update uds common support dependencies (#709) (2ef9ddf)

`v1.26.1`

Compare Source

Features

license: add paths input to scope addlicense walk (#691) (ef26a64)

Miscellaneous

deps: update uds common package dependencies (#703) (af95b73)
deps: update uds common support dependencies (#686) (3244206)
remove deprecated --no-progress from zarf commands (#707) (cb02504)

github/codeql-action (github/codeql-action)

`v4.37.0`

Compare Source

Update default CodeQL bundle version to 2.26.0. #3995
In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

`v4.36.3`

Compare Source

No user facing changes.

nodeca/js-yaml (js-yaml)

`v5.2.1`

Compare Source

Fixed

Add Map support to !!omap (should work when realMapTag used)

Security

Remove quadratic complexity from !!omap addItem. Regression from v5
(usually not critical, because YAML11_SCHEMA is not default anymore).

slackapi/slack-github-action (slackapi/slack-github-action)

`v3.0.5`: Slack GitHub Action v3.0.5

Compare Source

Patch Changes

96fddbe: fix: revert multiline yaml parsing indentation change

`v3.0.4`: Slack GitHub Action v3.0.4

Compare Source

Patch Changes

fa03fe4: refactor: send webhooks with the @slack/webhook package

microsoft/TypeScript (typescript)

`v7.0.2`

Compare Source

zarf-dev/zarf (zarf-dev/zarf)

`v0.81.1`

Compare Source

Bug Fixes

change adoptExistingResources to takeOwnership (#5010) (c5eb289)
helm: create registry client for http chart with OCI re-direct (#5067) (34d0cf1)
mTLS: prevent negotiation when portforward with mTLS (#5054) (bbce3c3)
proxy: support for system CA with mTLS certs (#5074) (93f4719)
wait: properly wait for crds introduced mid-deploy (#5077) (d15007f)

What's Changed

🚀 Updates

chore(dependabot): remove vendor keyword from dependabot.yaml by @AustinAbro321 in #5066
fix(helm): create registry client for http chart with OCI re-direct by @AustinAbro321 in #5067
fix(mTLS): prevent negotiation when portforward with mTLS by @brandtkeller in #5054
chore: upgrade oras-go to v2.6.2 by @brandtkeller in #5057
fix: change adoptExistingResources to takeOwnership by @AustinAbro321 in #5010
fix(proxy): support for system CA with mTLS certs by @brandtkeller in #5074
chore: upgrade k9s to v0.51.0 by @brandtkeller in #5056
fix(wait): properly wait for crds introduced mid-deploy by @AustinAbro321 in #5077
chore(main): release 0.81.1 by @zarf-release-please[bot] in #5069

📦 Dependencies

chore(deps-dev): bump undici from 7.27.0 to 7.28.0 in /site by @dependabot[bot] in #4994
chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 by @dependabot[bot] in #5063
chore(deps): bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #5059
chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #5062
chore(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3 by @dependabot[bot] in #5060
chore(deps): bump dompurify from 3.4.7 to 3.4.11 in /site by @dependabot[bot] in #4995

Full Changelog: zarf-dev/zarf@v0.81.0...v0.81.1

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.81.1.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.81.1" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.81.1.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.81.1" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.

`v0.81.0`

Compare Source

⚠ BREAKING CHANGES

ocischeme: support per-host transport negotiation for plain http (#5047)
sign: remove legacy signature from production (#5030)
sbom: remove compare tool (#5033)
verification: behavior updates for verification logic (#5011)

Features

add registry logout function (#4976) (c2ab144)
cmd: add viper option for cache (#5051) (36fd721)
deprecate artifact server (#5041) (642ac33)
deprecate sbom viewer (#5046) (32e1479)
deprecate: zarf tools registy export (#5031) (926c008)
direct docker daemon pull (#5001) (97c2388)
group verify flags in CLI help text (#5008) (20c32e8)
lint: warn on images without a domain and archive images without .internal (#4983) (ed73631)
ocischeme: support per-host transport negotiation for plain http (#5047) (7fc1dec)
reduce docker daemon pull storage footprint (#5017) (f5a443d)
sbom: remove compare tool (#5033) (8e4ee75)
schema: update v1beta1 types (#4704) (edc9eb1)
sign: remove legacy signature from production (#5030) (fab4f62)
v1beta1: split target into create time selector and deploy time target (#5042) (d188f07)
verification: behavior updates for verification logic (#5011) (5f3a0a9)

Bug Fixes

flags: depecate --zarf-cache in favor of just --cache (#5032) (9da35b6)
update oras-go and mitigate auto-unpack (#5049) (bc9818d)

What's Changed

🚀 Updates

chore(main): release 0.81.0 by @zarf-release-please[bot] in #5009

Full Changelog: zarf-dev/zarf@v0.81.0-rc1...v0.81.0

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.81.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.81.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.81.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.81.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource | package | from | to | | --------------- | ------------------------------- | ------- | ------- | | npm | @commitlint/cli | 21.1.0 | 21.2.1 | | npm | @commitlint/config-conventional | 21.1.0 | 21.2.0 | | npm | @eslint/eslintrc | 3.3.5 | 3.3.6 | | npm | @eslint/js | 9.39.4 | 9.39.5 | | npm | @types/node | 24.13.2 | 24.13.3 | | npm | @vitest/coverage-v8 | 4.1.9 | 4.1.10 | | github-tags | actions/setup-node | v6.4.0 | v7.0.0 | | npm | adm-zip | 0.5.17 | 0.6.0 | | github-tags | astral-sh/setup-uv | v8.2.0 | v8.3.2 | | github-tags | astral-sh/uv | 0.11.25 | 0.11.28 | | github-releases | astral-sh/uv | 0.11.25 | 0.11.28 | | npm | csv-parse | 7.0.0 | 7.0.1 | | github-tags | defenseunicorns/uds-cli | v0.34.0 | v0.34.2 | | github-tags | defenseunicorns/uds-common | v1.25.0 | v1.26.3 | | docker | ghcr.io/zarf-dev/packages/init | v0.80.0 | v0.81.1 | | github-tags | github/codeql-action | v4.36.2 | v4.37.0 | | npm | js-yaml | 5.2.0 | 5.2.1 | | github-tags | slackapi/slack-github-action | v3.0.3 | v3.0.5 | | npm | typescript | 6.0.3 | 7.0.2 | | npm | vitest | 4.1.9 | 4.1.10 | | github-tags | zarf-dev/zarf | v0.80.0 | v0.81.1 |

renovate · 2026-07-18T01:31:08Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate Bot requested a review from a team as a code owner July 2, 2026 18:20

github-actions Bot added the needs-review Label used for Renovate PRs that are ready for review/test label Jul 2, 2026

renovate Bot force-pushed the renovate/support-deps branch from e48de8f to 9d4ecf7 Compare July 3, 2026 00:00

renovate Bot changed the title ~~chore(deps): update support dependencies to 7b450ff~~ chore(deps): update support-deps Jul 3, 2026

renovate Bot force-pushed the renovate/support-deps branch 8 times, most recently from 0527bed to a97d6f0 Compare July 10, 2026 13:01

renovate Bot force-pushed the renovate/support-deps branch 11 times, most recently from 7d923c5 to 2d7d48a Compare July 17, 2026 15:57

joelmccoy force-pushed the renovate/support-deps branch from 2d7d48a to 94a0709 Compare July 17, 2026 16:55

joelmccoy added renovate-ready Label used to trigger Renovate PR CI and removed needs-review Label used for Renovate PRs that are ready for review/test labels Jul 17, 2026

github-actions Bot added the needs-review Label used for Renovate PRs that are ready for review/test label Jul 17, 2026

joelmccoy added renovate-ready Label used to trigger Renovate PR CI and removed renovate-ready Label used to trigger Renovate PR CI labels Jul 17, 2026

renovate Bot force-pushed the renovate/support-deps branch from 380a136 to 6305d7f Compare July 18, 2026 01:11

fix(deps): pin TypeScript back to 6

0945395

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update support-deps#2785

chore(deps): update support-deps#2785
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/support-deps

renovate Bot commented Jul 2, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jul 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate Bot commented Jul 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Features

Bug Fixes

Bug Fixes

Documentation

Chores

🐞 Bug Fixes

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

What's Changed

What's Changed

New Contributors

Security

Python

Enhancements

Performance

Bug fixes

Enhancements

Preview features

Performance

Bug fixes

Other changes

Performance

Bug fixes

Bug Fixes

What's Changed

Miscellaneous

Miscellaneous

Features

Miscellaneous

Fixed

Security

v3.0.5: Slack GitHub Action v3.0.5

Patch Changes

v3.0.4: Slack GitHub Action v3.0.4

Patch Changes

Bug Fixes

What's Changed

🚀 Updates

📦 Dependencies

Verifying Init Packages

⚠ BREAKING CHANGES

Features

Bug Fixes

What's Changed

🚀 Updates

Verifying Init Packages

Configuration

Uh oh!

renovate Bot commented Jul 18, 2026

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Jul 2, 2026 •

edited

Loading

`v3.0.5`: Slack GitHub Action v3.0.5

`v3.0.4`: Slack GitHub Action v3.0.4