fix(deps): update all dependencies #38

renovate · 2024-08-13T21:47:04Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@aptre/common	`^0.18.3` → `^0.30.0`	devDependencies	minor
@aptre/protobuf-es-lite	`0.4.8` → `1.0.1`	resolutions	major
@aptre/protobuf-es-lite	`^0.4.8` → `^1.0.0`	dependencies	major
actions/cache	`v4` → `v5`	action	major
actions/checkout	`v4.2.1` → `v6.0.2`	action	major
actions/dependency-review-action	`v4.3.4` → `v4.8.2`	action	minor
actions/setup-go	`v5.0.2` → `v6.2.0`	action	major
actions/setup-node	`v4.0.4` → `v6.2.0`	action	major
github.com/aperturerobotics/common	`v0.20.3` → `v0.30.3`	require	minor
github.com/aperturerobotics/controllerbus	`v0.49.0` → `v0.52.2`	require	minor
github.com/aperturerobotics/protobuf-go-lite	`v0.8.0` → `v0.12.1`	require	minor
github.com/sirupsen/logrus	`v1.9.3` → `v1.9.4`	require	patch
github/codeql-action	`v3.26.12` → `v4.32.2`	action	major
go (source)	`1.23.3` → `1.26.0`	toolchain	minor
prettier (source)	`3.3.3` → `3.8.1`	devDependencies	minor
starpc	`^0.35.0` → `^0.46.0`	dependencies	minor
typescript (source)	`5.6.3` → `5.9.3`	devDependencies	minor

Release Notes

aperturerobotics/common (@aptre/common)

What's Changed

fix(deps): update all dependencies by @renovate[bot] in #44

Full Changelog: aperturerobotics/common@v0.26.2...v0.26.3

`v0.26.2`

Compare Source

Full Changelog: aperturerobotics/common@v0.26.1...v0.26.2

`v0.24.0`

Compare Source

`v0.23.0`

Compare Source

`v0.22.14`

Compare Source

`v0.22.13`

Compare Source

`v0.22.12`

Compare Source

`v0.22.11`

Compare Source

`v0.22.10`

Compare Source

`v0.22.9`

Compare Source

`v0.22.8`

Compare Source

`v0.22.7`

Compare Source

`v0.22.6`

Compare Source

`v0.22.5`

Compare Source

`v0.22.4`

Compare Source

`v0.22.3`

Compare Source

`v0.22.2`

Compare Source

`v0.22.1`

Compare Source

`v0.22.0`

Compare Source

`v0.21.2`

Compare Source

`v0.21.1`

Compare Source

`v0.21.0`

Compare Source

`v0.20.3`

Compare Source

`v0.20.2`

Compare Source

`v0.20.1`

Compare Source

`v0.20.0`

Compare Source

`v0.19.1`

Compare Source

aperturerobotics/protobuf-es-lite (@aptre/protobuf-es-lite)

`v1.0.1`

Compare Source

What's Changed

chore(deps): update all dependencies to v6 by @renovate[bot] in #15

Full Changelog: aperturerobotics/protobuf-es-lite@v0.5.3...v1.0.1

`v0.5.3`

Compare Source

What's Changed

chore(deps): update all dependencies by @renovate[bot] in #9
Update Node.js to 25.x in GitHub Actions workflows and DeepWiki badge by @Copilot in #11
[WIP] Update Node.js version in CodeQL analysis workflow by @Copilot in #12
chore(deps): update all dependencies by @renovate[bot] in #10
chore(deps): update dependency vitest to v4.0.7 by @renovate[bot] in #13
chore(deps): update all dependencies by @renovate[bot] in #14

New Contributors

@Copilot made their first contribution in #11

Full Changelog: aperturerobotics/protobuf-es-lite@v0.5.2...v0.5.3

`v0.5.2`

Compare Source

`v0.5.1`

Compare Source

`v0.5.0`

Compare Source

`v0.4.9`

Compare Source

actions/cache (actions/cache)

`v5`

Compare Source

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

`v6.0.0`

Compare Source

`v5.0.1`

Compare Source

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

`v5.0.0`

Compare Source

What's Changed

Update actions checkout to use node 24 by @salmanmkc in #2226
Prepare v5.0.0 release by @salmanmkc in #2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236
Prepare release v4.3.0 by @salmanmkc in #2237

New Contributors

@motss made their first contribution in #1971
@mouismail made their first contribution in #1977
@benwells made their first contribution in #2043
@nebuk89 made their first contribution in #2194
@salmanmkc made their first contribution in #2236

Full Changelog: actions/checkout@v4...v4.3.0

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in #1941
Expand unit test coverage for isGhes by @jww3 in #1946

actions/dependency-review-action (actions/dependency-review-action)

`v4.8.2`

Compare Source

Minor fixes:

Fix PURL parsing for scoped packages (#1008 from @danielhardej)
Fix for large summaries (#1007 from @gitulisca)
README includes a working example for allow-dependencies-licenses (#1009 from @danielhardej)

`v4.8.1`: Dependency Review Action v4.8.1

Compare Source

What's Changed

(bug) Fix spamming link test in deprecation warning (again) by @ahpook in #1000
Bump version for 4.8.1 release by @ahpook in #1001

Full Changelog: actions/dependency-review-action@v4...v4.8.1

`v4.8.0`

Compare Source

What's Changed

Make Ruby Code Scannable by @ljones140 in #978
Batch some contributions for release by @brrygrdn in #986
- Make license lists collapsable by @jasperkamerling
- feat: add large summary handling with artifact upload by @MattMencel

New Contributors

@ljones140 made their first contribution in #978
@jasperkamerling made their first contribution in #986
@MattMencel made their first contribution in #986

Full Changelog: actions/dependency-review-action@v4...v4.8.0

`v4.7.4`

Compare Source

`v4.7.3`: 4.7.3

Compare Source

What's Changed

Add explicit permissions to workflow files by @AshelyTC in #966
Claire153/fix spamming mentioned issue by @claire153 in #974

Full Changelog: actions/dependency-review-action@v4...v4.7.3

`v4.7.2`: 4.7.2

Compare Source

What's Changed

Add Missing Languages to CodeQL Advanced Configuration by @KyFaSt in #945
Deprecate deny lists by @claire153 in #958
Address discrepancy between docs and reality by @ahpook in #960

New Contributors

@KyFaSt made their first contribution in #945
@claire153 made their first contribution in #958
@ahpook made their first contribution in #960

Full Changelog: actions/dependency-review-action@v4...v4.7.2

`v4.7.1`

Compare Source

Packages added to allow-dependencies-licenses will be allowed even if the package in question has no license information #889
License expressions (e.g. Ruby OR GPL-2.0) in the allow list are automatically discarded so that they don't invalidate the whole allow list, which should just be license identifier (e.g. Ruby)

`v4.7.0`

Compare Source

Handle complex license expressions (e.g. MIT AND GPL-2.0) in allow lists (fixes #809 and probably others)
Replace OTHER in package licenses with LicenseRef-clearlydefined-OTHER so that parsing passes

`v4.6.0`

Compare Source

What's Changed

Updating multiple dependency versions by @Ahmed3lmallah in #870
Grouping minor and patch dependabot updates to lessen the number of PRs by @Ahmed3lmallah in #876
Bump actions/stale from 9.0.0 to 9.1.0 by @dependabot in #878
Bump undici from 5.28.4 to 5.28.5 by @dependabot in #877
DR Action should link to the proxima stamp when appropriate in error messages by @AshelyTC in #891
Allow deny package removal by @ellenfieldn in #888
Fix typos by @omahs in #893
Bump esbuild from 0.19.5 to 0.25.0 by @dependabot in #900
Bump octokit and related dependencies by @RomanIakovlev in #904
Bump @babel/helpers from 7.23.2 to 7.26.10 by @dependabot in #905
Bump @octokit/plugin-paginate-rest from 9.1.5 to 9.2.2 by @dependabot in #899
Update transitive dependency spdx-license-ids by @ailox in #855
To not print OpenSSF Scorecard section if no dependencies scanned by @fabasoad in #884
Improve usage of this action in dependency-review.yml by @fabasoad in #883
Clarify comment-summary-in-pr behaviour by @Pantelis-Santorinios in #902
Prepare 4.6.0 Release candidate by @brrygrdn in #910

New Contributors

@AshelyTC made their first contribution in #891
@ellenfieldn made their first contribution in #888
@omahs made their first contribution in #893
@RomanIakovlev made their first contribution in #904
@ailox made their first contribution in #855
@fabasoad made their first contribution in #884
@Pantelis-Santorinios made their first contribution in #902
@brrygrdn made their first contribution in #910

Full Changelog: actions/dependency-review-action@v4.5.0...v4.6.0

`v4.5.0`

Compare Source

What's Changed

Bump got from 14.4.2 to 14.4.3 by @dependabot in #844
Bump nodemon from 3.1.0 to 3.1.7 by @dependabot in #847
Bump @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in #849
Overriding the cross-spawn dependency to use a safe version by @Ahmed3lmallah in #850
fix: add summary comment on failure when warn-only: true by @ebickle in #827
Prepare for 4.5.0 release by @Ahmed3lmallah in #851

New Contributors

@ebickle made their first contribution in #827

Full Changelog: actions/dependency-review-action@v4...v4.5.0

`v4.4.0`

Compare Source

What's Changed

Fix for merge_group event bug by @Ahmed3lmallah in #846

Full Changelog: actions/dependency-review-action@v4.3.5...v4.4.0

`v4.3.5`

Compare Source

What's Changed

fix: getRefs function to handle merge_group events by @louis-bompart in #766
Create pull_request_template.md by @jonjanego in #794
Update CONTRIBUTING.md by @jonjanego in #793
Bump @types/node from 20.11.28 to 20.16.0 by @dependabot in #815
Upgrade transitive micromatch library by @elireisman in #829
Do not list changed dependencies in summary by @hmaurer in #828
Update stale.yaml by @jonjanego in #832
Bump got from 14.4.1 to 14.4.2 by @dependabot in #822
Bump eslint-plugin-jest and ts-jest by @Ahmed3lmallah in #840

New Contributors

@louis-bompart made their first contribution in #766
@Ahmed3lmallah made their first contribution in #840

Full Changelog: actions/dependency-review-action@v4.3.4...v4.3.5

actions/setup-go (actions/setup-go)

`v6.2.0`

Compare Source

What's Changed

Enhancements

Example for restore-only cache in documentation by @aparnajyothi-y in #696
Update Node.js version in action.yml by @ccoVeille in #691
Documentation update of actions/checkout by @deining in #683

Dependency updates

Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot in #682
Upgrade @actions/cache to v5 by @salmanmkc in #695
Upgrade actions/checkout from 5 to 6 by @dependabot in #686
Upgrade qs from 6.14.0 to 6.14.1 by @dependabot in #703

New Contributors

@ccoVeille made their first contribution in #691
@deining made their first contribution in #683

Full Changelog: actions/setup-go@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancements

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @nicholasngai in #665
Add support for .tool-versions file and update workflow by @priya-kinthali in #673
Add comprehensive breaking changes documentation for v6 by @mahabaleshwars in #674

Dependency updates

Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @dependabot in #617
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #641
Upgrade semver and @types/semver by @dependabot in #652

New Contributors

@nicholasngai made their first contribution in #665
@priya-kinthali made their first contribution in #673
@mahabaleshwars made their first contribution in #674

Full Changelog: actions/setup-go@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @matthewhughes934 in #460
Upgrade Nodejs runtime from node20 to node 24 by @salmanmkc in #624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] in #589
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in #591
Upgrade @typescript-eslint/parser from 8.31.1 to 8.35.1 by @dependabot[bot] in #590
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #594
Upgrade typescript from 5.4.2 to 5.8.3 by @dependabot[bot] in #538
Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @dependabot[bot] in #603
Upgrade form-data to bring in fix for critical vulnerability by @matthewhughes934 in #618
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #631

New Contributors

@matthewhughes934 made their first contribution in #618
@salmanmkc made their first contribution in #624

Full Changelog: actions/setup-go@v5...v6.0.0

`v5.6.0`

Compare Source

What's Changed

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @aparnajyothi-y in #689

Full Changelog: actions/setup-go@v5...v5.6.0

`v5.5.0`

Compare Source

What's Changed

Bug fixes:

Update self-hosted environment validation by @priyagupta108 in #556
Add manifest validation and improve error handling by @priyagupta108 in #586
Update template link by @jsoref in #527

Dependency updates:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in #574
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #573
Upgrade ts-jest from 29.1.2 to 29.3.2 by @dependabot in #582
Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot in #537

New Contributors

@jsoref made their first contribution in #527

Full Changelog: actions/setup-go@v5...v5.5.0

`v5.4.0`

Compare Source

What's Changed

Dependency updates :

Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in #535
Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @dependabot in #536
Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in #568
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in #541

New Contributors

@aparnajyothi-y made their first contribution in #568

Full Changelog: <https://githu

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-02-03T10:41:46Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

renovate bot force-pushed the renovate/all branch from fc47fc0 to b8f56a3 Compare August 14, 2024 05:24

renovate bot changed the title ~~chore(deps): update github/codeql-action action to v3.26.1~~ chore(deps): update all dependencies Aug 14, 2024

renovate bot force-pushed the renovate/all branch 7 times, most recently from cb50f57 to ff7b1b4 Compare August 21, 2024 06:14

renovate bot force-pushed the renovate/all branch 3 times, most recently from 9218482 to c7a1839 Compare August 28, 2024 11:08

renovate bot force-pushed the renovate/all branch from c7a1839 to 0b77871 Compare August 29, 2024 12:34

renovate bot force-pushed the renovate/all branch 5 times, most recently from 686a235 to 4572c9d Compare September 14, 2024 01:51

renovate bot force-pushed the renovate/all branch 4 times, most recently from 4bbd136 to 04910d6 Compare September 20, 2024 00:40

renovate bot force-pushed the renovate/all branch 4 times, most recently from 3deb01d to b80a679 Compare September 30, 2024 14:11

renovate bot force-pushed the renovate/all branch 4 times, most recently from c09ffb2 to 7d97925 Compare October 7, 2024 18:13

renovate bot force-pushed the renovate/all branch 7 times, most recently from 6688833 to 173f0b5 Compare January 19, 2026 18:01

renovate bot force-pushed the renovate/all branch 7 times, most recently from 257a033 to 2ed3638 Compare January 27, 2026 13:43

renovate bot force-pushed the renovate/all branch 6 times, most recently from c9f8080 to e4d09af Compare February 3, 2026 10:41

renovate bot force-pushed the renovate/all branch 7 times, most recently from ffbd97c to 2c89114 Compare February 11, 2026 04:43

fix(deps): update all dependencies

5ca875a

renovate bot force-pushed the renovate/all branch from 2c89114 to 5ca875a Compare February 11, 2026 08:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all dependencies #38

fix(deps): update all dependencies #38

renovate bot commented Aug 13, 2024 •

edited

Loading

Uh oh!

socket-security bot commented Feb 3, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

fix(deps): update all dependencies #38

Are you sure you want to change the base?

fix(deps): update all dependencies #38

Conversation

renovate bot commented Aug 13, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

⚠️ Minimum Compatible Runner Version

What's Changed

What's Changed

New Contributors

v4.8.1: Dependency Review Action v4.8.1

What's Changed

What's Changed

New Contributors

v4.7.3: 4.7.3

What's Changed

v4.7.2: 4.7.2

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

What's Changed

What's Changed

Bug fixes:

Dependency updates:

New Contributors

What's Changed

Dependency updates :

New Contributors

Configuration

Uh oh!

socket-security bot commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

renovate bot commented Aug 13, 2024 •

edited

Loading

`v4.8.1`: Dependency Review Action v4.8.1

`v4.7.3`: 4.7.3

`v4.7.2`: 4.7.2

socket-security bot commented Feb 3, 2026 •

edited

Loading