Skip to content

chore(deps): update all-dependencies (major) - #38

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-all-dependencies
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-all-dependencies

Conversation

@renovate

@renovate renovate Bot commented May 10, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
grafana/k6 major 1.6.1 → 2.3.0 age confidence
node (source) tools major 25.8.1 → 26.13.0 age confidence
pinact tools major 3.8.0 → 5.0.2 age confidence
pnpm (source) tools major 10.32.1 → 12.16.1 age confidence

Release Notes

nodejs/node (node)

v26.13.0: 2026-10-28, Version 26.13.0 'Lithium' (LTS), @​richardlau

Compare Source

Notable Changes

This release marks the transition of Node.js 26.x into Long Term Support (LTS)
with the codename 'Lithium'. It will continue to receive updates through to
the end of April 2029.

Other than updating metadata, such as the process.release object, to reflect
that the release is LTS, no further changes from Node.js 26.12.1 are included.

If you are updating from an earlier Long Term Support release (e.g. Node.js 24
or 22 or earlier) please note that since Node.js 25 the official binaries for
Linux are linked against libatomic, which may need to be installed separately
depending on your Linux distribution.

v26.12.1: 2026-10-21, Version 26.12.1 (Current), @​aduh95 prepared by @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-106069, CVE-2026-106072) tls: reject non-canonical IP addresses (Matteo Collina) – High
  • (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) – High
  • (CVE-2026-105483) tls: fix ip normalization regression (James M Snell) – High
  • (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel) – High
  • (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov) – High
  • (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell) – Medium
  • (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan) – Medium
  • (CVE-2026-106070) zlib: avoid caching invalid ZIP local headers (Matteo Collina) – Low
  • (CVE-2026-106071) src: fix the fs permission tree node on wildcard nodes (James M Snell) – Low
  • (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS) – Low
  • deps: V8: backport 93cd21e (Joyee Cheung)
  • crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
  • tls: reject chains containing blocked public keys (Ulises Gascon)
  • deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
  • tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett)
  • crypto: harden X.509 conversion and formatting (Filip Skokan)
Commits

v26.12.0: 2026-10-14, Version 26.12.0 (Current), @​richardlau

Compare Source

Notable Changes
  • [1ebd6d3677] - (SEMVER-MINOR) doc,lib,src: throw on missing WebAssembly or RX support (Paolo Insogna) #​66533
  • [7f1937d2b9] - (SEMVER-MINOR) http: add websocketMask() and websocketUnmask() (James M Snell) #​66335
Commits

v26.11.1: 2026-10-07, Version 26.11.1 (Current), @​aduh95

Compare Source

Commits
  • [2dc4638e85] - Revert "build: toggle doc-kit verbosity based on V" (Antoine du Hamel)
  • [3febbc54ec] - Revert "build, doc: move to redesign" (Antoine du Hamel)
  • [173250e2e7] - Revert "tools: bump the doc group in /tools/doc with 4 updates" (Antoine du Hamel)

v26.11.0: 2026-10-07, Version 26.11.0 (Current), @​aduh95

Compare Source

Notable Changes
  • [232f178825] - (SEMVER-MINOR) buffer: add isLatin1 (James M Snell) #​66298
  • [27778036de] - (SEMVER-MINOR) buffer: add Buffer.stringLength() (Matteo Collina) #​66064
  • [4f84c4bda2] - build, doc: move to redesign (Aviv Keller) #​62045
  • [6f6296fef9] - (SEMVER-MINOR) doc: promote Alpine Linux to tier 2 support (Stewart X Addison) #​63737
  • [e998d260d0] - (SEMVER-MINOR) http: add isValidHeaderName() and isValidHeaderValue() (James M Snell) #​66334
  • [7702a50e08] - (SEMVER-MINOR) http2: add connectionWindowSize option (Tim Perry) #​65619
  • [e06aa62cec] - (SEMVER-MINOR) perf_hooks: fix truncation of monitorEventLoopDelay() resolution (James M Snell) #​66115
  • [ee126e37e8] - (SEMVER-MINOR) perf_hooks: allow RecordableHistogram to record 0 (James M Snell) #​66114
  • [1fef8f54db] - (SEMVER-MINOR) perf_hooks: add histogram.diff() (James M Snell) #​66099
  • [f1b9758c4e] - (SEMVER-MINOR) perf_hooks: add histogram.snapshot() (James M Snell) #​66099
  • [291d56ea3e] - (SEMVER-MINOR) perf_hooks: harden histogram CBOR import validation (James M Snell) #​66098
  • [6299b09d5c] - (SEMVER-MINOR) process: graduate process.ref/unref to stable (James M Snell) #​66213
  • [41d6707b63] - (SEMVER-MINOR) sqlite: rename DatabaseSync and StatementSync (Guilherme Araújo) #​65988
  • [60d0aa0cd4] - (SEMVER-MINOR) src: add --process-timeout=N (James M Snell) #​66138
  • [f39916a7e3] - (SEMVER-MINOR) src: expose size and count in heap profile output (Ilyas Shabi) #​65737
  • [0b00d5ea59] - (SEMVER-MINOR) src: let embedders exempt linked bindings from the addon permission (Shelley Vohr) #​66067
Commits

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • "on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 2 times, most recently from 4173ed1 to 0650814 Compare May 14, 2026 13:36
@renovate renovate Bot changed the title chore(deps): update dependency pnpm to v11 chore(deps): update all-dependencies (major) May 14, 2026
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 4 times, most recently from 79b4dc8 to 49c03f0 Compare May 21, 2026 14:43
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 5 times, most recently from c24db8a to 6abb64d Compare May 28, 2026 19:56
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 3 times, most recently from 1e309cd to f152c6c Compare June 5, 2026 09:55
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 4 times, most recently from 526b773 to f8027f8 Compare June 15, 2026 01:38
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 2 times, most recently from 59bc87c to cfc6709 Compare June 21, 2026 14:01
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 2 times, most recently from 75b72d6 to 3f8d43f Compare July 3, 2026 14:38
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 2 times, most recently from d683855 to a47ca48 Compare July 12, 2026 23:13
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 5 times, most recently from 73e2e24 to cc7e7ff Compare July 21, 2026 18:42
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 3 times, most recently from 2049e57 to d92ff51 Compare August 27, 2026 16:56
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 8 times, most recently from a7ff020 to 5dced32 Compare September 6, 2026 01:58
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 7 times, most recently from 89b3a29 to bcafd14 Compare September 11, 2026 18:25
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 3 times, most recently from 6f59f6b to 9c7eae2 Compare September 18, 2026 20:09
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 4 times, most recently from f84a7f2 to 1014c0d Compare September 25, 2026 20:38
@renovate
renovate Bot force-pushed the renovate/major-all-dependencies branch 4 times, most recently from 1e322ea to f77e70d Compare October 3, 2026 21:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants