chore(deps): update all dependencies by renovate[bot] · Pull Request #1197 · prettier/prettier-eslint

renovate · 2025-06-01T02:35:18Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v4.2.2` → `v6.0.3`
actions/setup-node	action	major	`v4.4.0` → `v6.4.0`
actions/stale	action	major	`v9.1.0` → `v10.3.0`
autofix-ci/action	action	patch	`v1.3.2` → `v1.3.4`
codecov/codecov-action	action	major	`v5.4.3` → `v7.0.0`
node (source)		major	`v22` → `24`

Release Notes

actions/checkout (actions/checkout)

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

`v5.0.0`

Compare Source

What's Changed

Update actions checkout to use node 24 by @salmanmkc in #2226
Prepare v5.0.0 release by @salmanmkc in #2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

`v5`

Compare Source

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236
Prepare release v4.3.0 by @salmanmkc in #2237

New Contributors

@motss made their first contribution in #1971
@mouismail made their first contribution in #1977
@benwells made their first contribution in #2043
@nebuk89 made their first contribution in #2194
@salmanmkc made their first contribution in #2236

Full Changelog: actions/checkout@v4...v4.3.0

actions/setup-node (actions/setup-node)

`v6.4.0`

Compare Source

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v6`

Compare Source

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

`v5`

Compare Source

actions/stale (actions/stale)

`v10.3.0`

Compare Source

What's Changed

Bug Fix

Enhancement: ignore stale labeling events by @shamoon in #1311

Dependency Updates

Upgrade dependencies (@actions/core, @octokit/plugin-retry, @typescript-eslint) by @Copilot in #1335

New Contributors

@shamoon made their first contribution in #1311

Full Changelog: actions/stale@v10...v10.3.0

`v10.2.0`

Compare Source

`v10.1.1`

Compare Source

What's Changed

Bug Fix

Add Missing Input Reading for only-issue-types by @Bibo-Joshi in #1298

Improvement

Improves error handling when rate limiting is disabled on GHES. by @chiranjib-swain in #1300

Dependency Upgrades

Upgrade eslint-config-prettier from 8.10.0 to 10.1.8 by @dependabot in #1276
Upgrade @types/node from 20.10.3 to 24.2.0 and document breaking changes in v10 by @dependabot in #1280
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #1291
Upgrade actions/checkout from 4 to 6 by @dependabot in #1306

New Contributors

@chiranjib-swain made their first contribution in #1300

Full Changelog: actions/stale@v10...v10.1.1

`v10.1.0`

Compare Source

What's Changed

Add only-issue-types option to filter issues by type by @Bibo-Joshi in #1255

New Contributors

@Bibo-Joshi made their first contribution in #1255

Full Changelog: actions/stale@v10...v10.1.0

`v10.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in #1279
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. Release Notes

Enhancement

Introducing sort-by option by @suyashgaonkar in #1254

Dependency Upgrades

Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot[bot] in #1186
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot[bot] in #1201
Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in #1226
Upgrade @action/cache from 4.0.2 to 4.0.3 by @suyashgaonkar in #1233
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1251
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1277

Documentation changes

Changelog update for recent releases by @suyashgaonkar in #1224
Permissions update in Readme by @ghadimir in #1248

New Contributors

@suyashgaonkar made their first contribution in #1224
@GhadimiR made their first contribution in #1248
@gowridurgad made their first contribution in #1277
@salmanmkc made their first contribution in #1279

Full Changelog: actions/stale@v9...v10.0.0

`v10`

Compare Source

autofix-ci/action (autofix-ci/action)

`v1.3.4`: autofix-ci/action 1.3.4

Compare Source

What's Changed

Update action to use Node 24

Full Changelog: autofix-ci/action@v1...v1.3.4

`v1.3.3`: autofix-ci/action 1.3.3

Compare Source

What's Changed

Move Autofix API from .ci to .com TLD.
This aims to improve overall reliability (#32). api.autofix.ci will remain available as an alias for the time being.

Full Changelog: autofix-ci/action@v1.3.2...v1.3.3

codecov/codecov-action (codecov/codecov-action)

`v7.0.0`

Compare Source

`v7`

Compare Source

`v6.0.2`

Compare Source

`v6.0.1`

Compare Source

What's Changed

fix: prevent template injection in run: steps (VULN-1652) by @thomasrockhu-codecov in #1947
chore(release): 6.0.1 by @thomasrockhu-codecov in #1949

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

`v6.0.0`

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by @thomasrockhu-codecov in #1929
Th/6.0.0 by @thomasrockhu-codecov in #1928

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

`v6`

Compare Source

`v5.5.5`

Compare Source

`v5.5.4`

Compare Source

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by @thomasrockhu-codecov in #1926
chore(release): 5.5.4 by @thomasrockhu-codecov in #1927

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

`v5.5.3`

Compare Source

What's Changed

build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in #1874
chore(release): bump to 5.5.3 by @thomasrockhu-codecov in #1922

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

`v5.5.2`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

`v5.5.1`

Compare Source

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in #1871
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in #1868
build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in #1867
fix: update to use local app/ dir by @thomasrockhu-codecov in #1872
docs: fix typo in README by @datalater in #1866
Document a codecov-cli version reference example by @webknjaz in #1774
build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in #1861
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in #1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

`v5.5.0`

Compare Source

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in #1864
Pin actions/github-script by Git SHA by @martincostello in #1859
fix: check reqs exist by @joseph-sentry in #1835
fix: Typo in README by @spalmurray in #1838
docs: Refine OIDC docs by @spalmurray in #1837
build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in #1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

nodejs/node (node)

`v24.16.0`: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @aduh95

Compare Source

Notable Changes

[b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #62553
[ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #62713
[9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #57775
[40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #62277
[d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #63082
[aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #62541
[6f37f7e240] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #61098
[d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #61747
[d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #62820
[01a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #60751
[00705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #61556

Commits

[dd72df060d] - assert,util: fix stale nested cycle memo entries (Ruben Bridgewater) #62509
[add94f4bc3] - build: track PDL files as inputs in inspector GN build (Robo) #62888
[1b1eb9e334] - build: remove redundant -fuse-linker-plugin from GCC LTO flags (Daniel Lando) #62667
[8752b604ec] - crypto: deduplicate and canonicalize CryptoKey usages (Filip Skokan) #62902
[341947e7fd] - crypto: reject unintended raw key format string input (Filip Skokan) #62974
[28a78747fc] - crypto: remove Argon2 KDF derivation from its job setup (Filip Skokan) #62863
[16e8c2b54d] - crypto: fix unsigned conversion of 4-byte RSA publicExponent (DeepView Autofix) #62839
[eeae754a87] - crypto: reject inherited key type names (Jonathan Lopes) #62875
[9dd5540325] - crypto: add memory tracking for secureContext openssl objects (Mert Can Altin) #59051
[b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #62553
[7597d204c1] - crypto: add support for Ed25519 context parameter (Filip Skokan) #62474
[4bf85845da] - debugger: move ProbeInspectorSession and helpers to separate files (Joyee Cheung) #63013
[ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #62713
[83e98f77b7] - deps: update corepack to 0.35.0 (Node.js GitHub Bot) #63375
[ec8c6b939a] - deps: V8: cherry-pick 657d8de (Guy Bedford) #62784
[722c0c3274] - deps: update nghttp3 to 1.14.0 (Node.js GitHub Bot) #61187
[5304db93d3] - deps: update nghttp3 to 1.13.1 (Node.js GitHub Bot) #60046
[e073b3811d] - deps: update nghttp3 to 1.11.0 (James M Snell) #59249
[1d00313fb2] - deps: update ngtcp2 to 1.14.0 (James M Snell) #59249
[8b3a4fc18f] - deps: update amaro to 1.1.9 (Node.js GitHub Bot) #63090
[62fe0cfcd1] - deps: update llhttp to 9.4.1 (Node.js GitHub Bot) #63045
[137e09c8e9] - deps: update corepack to 0.34.7 (Node.js GitHub Bot) #62810
[14a4cb8fbc] - deps: update timezone to 2026b (Node.js GitHub Bot) #62962
[3e1036583a] - deps: upgrade npm to 11.13.0 (npm team) #62898
[01dfe5961c] - deps: cherry-pick libuv/libuv@439a54b (skooch) #62881
[6cd368b10c] - deps: update sqlite to 3.53.0 (Node.js GitHub Bot) #62699
[f218a4f553] - deps: update nbytes to 0.1.4 (Node.js GitHub Bot) #62698
[b47688524a] - deps: update archs files for openssl-3.5.6 (Node.js GitHub Bot) #62629
[d202e2d343] - deps: upgrade openssl sources to openssl-3.5.6 (Node.js GitHub Bot) #62629
[2faba66341] - deps: update minimatch to 10.2.5 (Node.js GitHub Bot) #62594
[fa46c90c5d] - deps: update googletest to d72f9c8 (Node.js GitHub Bot) #62593
[099ded5713] - deps: update simdjson to 4.6.1 (Node.js GitHub Bot) #62592
[7ce95afe96] - deps: libuv: cherry-pick aabb765 (Santiago Gimeno) #62561
[57ef845623] - deps: update icu to 78.3 (Node.js GitHub Bot) #62324
[493ac40e12] - deps: update libuv to 1.52.1 (Node.js GitHub Bot) #61829
[b39508b368] - deps: update undici to 7.25.0 (Node.js GitHub Bot) #63011
[cb67a925e9] - deps: use npm undici@seven tag in update-undici.sh (Matteo Collina) #62739
[aa1e0bc28b] - doc: fix typos and inconsistencies in crypto.md and webcrypto.md (Filip Skokan) #62828
[f2a1735ed9] - doc: fix duplicate word "to to" in util.styleText (Daijiro Wachi) #62917
[b6378e215c] - doc: fix node-config-schema (Сковорода Никита Андреевич) #61596
[233894a9ce] - doc: fix the TypeScript Execute (tsx) project link (David Thornton) #63093
[5d97919f8f] - doc: correct diagnostics_channel built-in channel names (Bryan English) #62995
[2a9ccc927e] - doc: use mjs/cjs blocks for callbackify null reason example (Daijiro Wachi) #62884
[ef413b5358] - doc: fix typo in test.md (Rich Trott) #62960
[76f21c5070] - doc: correct typo in PR contribution instructions (Mike McCready) #62738
[ca02af1f7d] - doc: fix duplicate word "of of" in postMessageToThread (Daijiro Wachi) #62917
[46c99ed526] - doc: fix duplicate word "for for" in compile cache (Daijiro Wachi) #62917
[1a60851734] - doc: fix typo in dns.lookup options description (Daijiro Wachi) #62882
[169b5ea2ed] - doc: fix Argon2 parameter bounds (Tobias Nießen) #62868
[9a3a190f4e] - doc: clarify diffieHellman.generateKeys recomputes same key (Kit Dallege) #62205
[0fba9e87d6] - doc: remove Ayase-252 and meixg from triagger team (Antoine du Hamel) #62841
[9c700f3446] - doc: clarify dns.lookup() callback signature when all is true (eungi) #62800
[6b7280bc17] - doc: add experimental modules lifetime policy (Paolo Insogna) #62753
[ce47ea31c9] - doc: clarify process._debugProcess() in Permission Model (Fahad Khan) #62537
[ba01633757] - doc: fix typo in devcontainer guide (Rohan Santhosh Kumar) #62687
[70b4d5839b] - doc: clarify Backport-PR-URL metadata added automatically (Mike McCready) #62668
[8126d1c3eb] - doc: update WPT test runner README.md (Filip Skokan) #62680
[978afea4b5] - doc: fix spelling in release announcement guidance (Rohan Santhosh Kumar) #62663
[1684ab8ff8] - doc: note non-monotonic clock in crypto.randomUUIDv7 (nabeel378) #62600
[86d4f07930] - doc: update bug bounty program (Rafael Gonzaga) #62590
[736ed8a08f] - doc: document TransformStream transformer.cancel option (Tom Pereira) #62566
[938af9be01] - doc: mention test runner retry attemp is zero based (Moshe Atlow) #62504
[94433e450f] - doc,src,test: fix dead inspector help URL (semimikoh) #62745
[ddf1f01659] - esm: add ERR_REQUIRE_ESM_RACE_CONDITION (Antoine du Hamel) #62462
[4a506acd16] - fs: add followSymlinks option to glob (Matteo Collina) #62695
[f4ea495f9b] - fs: restore fs patchability in ESM loader (Joyee Cheung) #62835
[63c111cd60] - fs: validate position argument before length === 0 early return (Edy Silva) #62674
[9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #57775
[40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #62277
[717476a24e] - http: emit 'drain' on OutgoingMessage only after buffers drain (Robert Nagy) #62936
[d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #63082
[64f15c274a] - http: fix leaked error listener on sync HTTP req create + destroy (Tim Perry) #62872
[5c4798d799] - http: fix no_proxy leading-dot suffix matching (Daijiro Wachi) #62333
[9f3bc70ae5] - http: cleanup pipeline queue (Robert Nagy) #62534
[aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #62541
[900dc758ff] - http2: expose writable stream state on compat response (T) #63003
[b3bfe35912] - inspector: coerce key and value to string in webstorage events (Ali Hassan) #62616
[3dc3fb6ad8] - inspector: return errors when CDP protocol event emission fails (Ryuhei Shima) #62162
[4f3f21bd7c] - inspector: auto collect webstorage data (Ryuhei Shima) #62145
[36cc04189d] - inspector: initial support storage inspection (Ryuhei Shima) #61139
[1718bc3b9b] - inspector: fix absolute URLs in network http (bugyaluwang) #62955
[97e32c7a74] - lib: avoid quadratic shift() in startup snapshot callback (Daijiro Wachi) #62914
[25d2e999de] - lib: harden kKeyOps lookup with null prototype (Filip Skokan) #62877
[37d3913c8f] - lib: short-circuit WebIDL BufferSource SAB check (Filip Skokan) #62833
[430c69d25f] - lib: use js-only implementation of isDataView() (René) #62780
[3ba0add6a0] - lib: fix lint in internal/webstreams/util.js (Filip Skokan) #62806
[9b95c41398] - lib: fix sequence argument handling in Blob constructor (Ms2ger) #62179
[314dacdbee] - lib: improve Web Cryptography key validation ordering (Filip Skokan) #62749
[3d18162430] - lib: reject SharedArrayBuffer in web APIs per spec (Ali Hassan) #62632
[ada3ce879d] - lib: defer AbortSignal.any() following (sangwook) #62367
[b2981ec7eb] - meta: bump actions/download-artifact from 8.0.0 to 8.0.1 (dependabot[bot]) #62549
[7cd20667b5] - meta: bump github/codeql-action from 4.35.1 to 4.35.3 (dependabot[bot]) #63074
[91a07cfe9f] - meta: bump Mozilla-Actions/sccache-action from 0.0.9 to 0.0.10 (dependabot[bot]) #63073
[09e17fe47c] - meta: add automation policy (Chengzhong Wu) #62871
[59e7fb7986] - meta: move VoltrexKeyva to emeritus (Matteo Collina) #62895
[1e2915cfa6] - meta: bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (dependabot[bot]) #62845
[0253c6e2be] - meta: bump step-security/harden-runner from 2.16.1 to 2.19.0 (dependabot[bot]) #62844
[f503675b86] - meta: bump actions/setup-node from 6.3.0 to 6.4.0 (dependabot[bot]) #62842
[5e14e4d26e] - meta: broaden stale bot (Aviv Keller) #62658
[795db76f87] - meta: pass release version to release worker (flakey5) #62777
[ef384fe39f] - meta: add QUIC to CODEOWNERS (Tim Perry) #62652
[67e0ac568d] - meta: move Michael to emeritus (Michael Dawson) #62536
[5dad616393] - meta: populate apt list for slim runner in update-openssl workflow (René) #62628
[a869d25d8a] - meta: bump step-security/harden-runner from 2.15.0 to 2.16.1 (dependabot[bot]) #62550
[769efc0403] - meta: bump actions/setup-node from 6.2.0 to 6.3.0 (dependabot[bot]) #62548
[73fcc2b055] - meta: bump github/codeql-action from 4.32.4 to 4.35.1 (dependabot[bot]) #62547
[6c001246fe] - meta: bump codecov/codecov-action from 5.5.2 to 6.0.0 (dependabot[bot]) #62545
[5ee40d6a03] - meta: bump actions/cache from 5.0.3 to 5.0.4 (dependabot[bot]) #62543
[ca16ad8a05] - meta: require DCO signoff in commit message guidelines (James M Snell) #62510
[db9497fc41] - meta: expand memory leak DoS criteria to all DoS (Joyee Cheung) #62505
[13b7d08b8d] - module: remove duplicated checks from `_resolveFilena

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2025-06-01T02:35:23Z

⚠️ No Changeset found

Latest commit: 9520680

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

coderabbitai · 2025-06-01T02:35:25Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 3446a3f2-95e0-4af9-93a8-1da9c0183ecf

📥 Commits

Reviewing files that changed from the base of the PR and between 3c73270 and 9520680.

📒 Files selected for processing (6)

.github/workflows/autofix.yml
.github/workflows/ci.yml
.github/workflows/pkg-pr-new.yml
.github/workflows/release.yml
.github/workflows/stale.yml
.nvmrc

📝 Walkthrough

Walkthrough

Five GitHub Actions workflow files (.github/workflows/autofix.yml, ci.yml, pkg-pr-new.yml, release.yml, stale.yml) have their pinned action SHAs updated: actions/checkout to v6.0.3, actions/setup-node to v6.4.0, codecov/codecov-action to v7.0.0, autofix-ci/action to v1.3.4, and actions/stale to v10.3.0. The .nvmrc Node.js version is bumped from v22 to 24.

Changes

CI Toolchain Version Updates

Layer / File(s)	Summary
Node.js version bump `.nvmrc`	Node.js version changed from `v22` to `24`.
GitHub Actions pinned SHA updates `.github/workflows/autofix.yml`, `.github/workflows/ci.yml`, `.github/workflows/pkg-pr-new.yml`, `.github/workflows/release.yml`, `.github/workflows/stale.yml`	Pinned commit SHAs updated: `actions/checkout` → v6.0.3, `actions/setup-node` → v6.4.0, `codecov/codecov-action` → v7.0.0, `autofix-ci/action` → v1.3.4, `actions/stale` → v10.3.0. No workflow logic, triggers, or step commands changed.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related issues

Dependency Dashboard #1153: This PR implements the exact GitHub Actions and Node.js version updates tracked in the Renovate Dependency Dashboard referenced by that issue, including matching version upgrades for actions/checkout, actions/setup-node, codecov/codecov-action, autofix-ci/action, actions/stale, and the .nvmrc Node.js bump.

Possibly related PRs

prettier/prettier-eslint#1184: Updates the same workflow files (autofix.yml, pkg-pr-new.yml) with pinned GitHub Action revisions, directly related to this PR's changes in those same files.
prettier/prettier-eslint#1188: Adds Node.js 24 to the CI matrix, directly related to the .nvmrc bump to Node 24 in this PR.

Suggested labels

ci, dependencies

Poem

🐇 Hop, hop, hooray for versions new!
The actions are pinned, fresh through and through,
Node twenty-four hops into .nvmrc land,
Stale issues beware — v10 is at hand!
The rabbit updates all with a twitchy nose,
And off to the meadow, the pipeline goes! 🌿

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'chore(deps): update all dependencies' is vague and overly broad, failing to specify which dependencies were updated or highlight the most significant changes (major version upgrades to GitHub Actions and Node.js v22→v24).	Consider a more specific title that highlights the major changes, such as 'chore(deps): upgrade GitHub Actions and Node.js to latest versions' or 'chore(deps): update to Node.js v24 and major Action versions'.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch renovate/all

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

codesandbox-ci · 2025-06-01T02:35:43Z

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

pkg-pr-new · 2025-06-01T02:35:57Z

Open in StackBlitz

npm i https://pkg.pr.new/prettier-eslint@1197

commit: 9520680

JounQin · 2026-06-14T12:47:47Z

@coderabbitai review

coderabbitai · 2026-06-14T12:47:53Z

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

renovate Bot force-pushed the renovate/all branch 3 times, most recently from f073458 to c014158 Compare June 10, 2025 08:11

renovate Bot changed the title ~~chore(deps): update all dependencies~~ fix(deps): update all dependencies Jun 10, 2025

renovate Bot force-pushed the renovate/all branch 2 times, most recently from b8d7c53 to a4f740b Compare June 18, 2025 16:48

renovate Bot force-pushed the renovate/all branch from a4f740b to db60e22 Compare June 25, 2025 01:49

renovate Bot force-pushed the renovate/all branch 2 times, most recently from a6d46f1 to 4e5983f Compare July 22, 2025 04:40

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 4b9dca7 to 2e71c7c Compare July 31, 2025 22:37

renovate Bot force-pushed the renovate/all branch 3 times, most recently from dfbaa95 to 428763c Compare August 13, 2025 14:54

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 95d1f27 to 3fa1250 Compare August 26, 2025 15:02

renovate Bot force-pushed the renovate/all branch 3 times, most recently from ba10f39 to 6c5e610 Compare August 31, 2025 10:07

renovate Bot force-pushed the renovate/all branch from 6c5e610 to ff34076 Compare September 8, 2025 00:05

renovate Bot force-pushed the renovate/all branch 4 times, most recently from 4a3ba31 to a96aa65 Compare September 24, 2025 14:54

renovate Bot force-pushed the renovate/all branch from a96aa65 to ad464b1 Compare September 25, 2025 18:54

renovate Bot force-pushed the renovate/all branch 4 times, most recently from 796206f to ea71356 Compare December 8, 2025 23:42

renovate Bot force-pushed the renovate/all branch 8 times, most recently from 081f1d8 to 1d05c5f Compare December 15, 2025 17:08

renovate Bot force-pushed the renovate/all branch 5 times, most recently from 21d48c9 to d9fe6bd Compare December 29, 2025 00:34

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 436f999 to 1446fdd Compare January 3, 2026 00:43

renovate Bot force-pushed the renovate/all branch 5 times, most recently from f450af8 to 8f8437e Compare January 15, 2026 06:53

renovate Bot force-pushed the renovate/all branch from 8f8437e to 7e3b75c Compare January 15, 2026 18:50

chore(deps): update all dependencies

9520680

JounQin approved these changes Jun 14, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update all dependencies#1197

chore(deps): update all dependencies#1197
JounQin merged 1 commit into
masterfrom
renovate/all

renovate Bot commented Jun 1, 2025 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jun 1, 2025 •

edited

Loading

Uh oh!

coderabbitai Bot commented Jun 1, 2025 •

edited

Loading

Walkthrough

Changes

Estimated code review effort

Possibly related issues

Possibly related PRs

Suggested labels

Poem

❌ Failed checks (1 inconclusive)

Uh oh!

codesandbox-ci Bot commented Jun 1, 2025 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Jun 1, 2025 •

edited

Loading

Uh oh!

JounQin commented Jun 14, 2026

Uh oh!

coderabbitai Bot commented Jun 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

renovate Bot commented Jun 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

⚠️ Minimum Compatible Runner Version

What's Changed

What's Changed

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

What's Changed

Bug Fix

Dependency Updates

New Contributors

What's Changed

Bug Fix

Improvement

Dependency Upgrades

New Contributors

What's Changed

New Contributors

What's Changed

Breaking Changes

Enhancement

Dependency Upgrades

Documentation changes

New Contributors

v1.3.4: autofix-ci/action 1.3.4

What's Changed

v1.3.3: autofix-ci/action 1.3.3

What's Changed

What's Changed

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @​aduh95

Notable Changes

Commits

Configuration

Uh oh!

changeset-bot Bot commented Jun 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

coderabbitai Bot commented Jun 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Possibly related issues

Possibly related PRs

Suggested labels

Poem

❌ Failed checks (1 inconclusive)

Uh oh!

codesandbox-ci Bot commented Jun 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new Bot commented Jun 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

renovate Bot commented Jun 1, 2025 •

edited

Loading

`v1.3.4`: autofix-ci/action 1.3.4

`v1.3.3`: autofix-ci/action 1.3.3

`v24.16.0`: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @aduh95

changeset-bot Bot commented Jun 1, 2025 •

edited

Loading

coderabbitai Bot commented Jun 1, 2025 •

edited

Loading

codesandbox-ci Bot commented Jun 1, 2025 •

edited

Loading

pkg-pr-new Bot commented Jun 1, 2025 •

edited

Loading

coderabbitai Bot commented Jun 14, 2026 •

edited

Loading