Skip to content

chore(deps): update all dependencies#124

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-dependencies
Open

chore(deps): update all dependencies#124
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-dependencies

Conversation

@renovate

@renovate renovate Bot commented Mar 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@codspeed/vitest-plugin (source) 5.4.0 → 5.5.0 age confidence pnpm.catalog.default minor 5.6.0
@playwright/test (source) 1.60.0 → 1.61.0 age confidence pnpm.catalog.default minor
@types/node (source) 25.9.1 → 25.9.3 age confidence pnpm.catalog.default patch 25.9.4
@vitest/coverage-istanbul (source) 4.1.7 → 4.1.9 age confidence pnpm.catalog.default patch
CodSpeedHQ/action v4.15.1 → v4.17.5 age confidence action minor v4.17.6
actions/checkout v6.0.2 → v6.0.3 age confidence action patch
aqua:anchore/syft 1.44.0 → 1.45.1 age confidence minor
aqua:aquasecurity/trivy 0.70.0 → 0.71.1 age confidence minor 0.71.2
aqua:astral-sh/uv 0.11.16 → 0.11.21 age confidence patch 0.11.23 (+1)
aqua:cargo-bins/cargo-binstall 1.19.1 → 1.20.0 age confidence minor 1.20.1
aqua:cli/cli 2.92.0 → 2.94.0 age confidence minor 2.95.0
aqua:crate-ci/typos 1.46.3 → 1.47.2 age confidence minor
codecov/codecov-action v6.0.1 → v6.0.2 age confidence action patch
electron 42.2.0 → 42.4.0 age confidence pnpm.catalog.default minor 42.4.1
github/codeql-action v4.36.0 → v4.36.2 age confidence action patch
github:EmbarkStudios/cargo-deny 0.19.7 → 0.19.8 age confidence patch 0.19.9
github:mikefarah/yq 4.53.2 → v4.53.3 age confidence patch
github:nextest-rs/nextest 0.9.136 → 0.9.137 age confidence patch 0.9.138
jdx/mise v2026.5.15 → v2026.6.10 age confidence minor v2026.6.12 (+1)
jdx/mise-action v4.0.1 → v4.1.0 age confidence action minor v4.2.0
node (source) 24.15.0 → 24.16.0 age confidence minor v24.17.0
npm:pnpm (source) 11.2.2 → 11.7.0 age confidence minor 11.8.0
oxfmt (source) 0.51.0 → 0.54.0 age confidence pnpm.catalog.default minor 0.56.0 (+1)
oxlint (source) 1.66.0 → 1.69.0 age confidence pnpm.catalog.default minor 1.71.0 (+1)
pnpm (source) 11.2.2+sha512.36e6621fad506178936455e70247b8808ef4ec25797a9f437a93281a020484e2607f6a469a22e982987c3dbb8866e3071514ab10a4a1749e06edcd1ec118436f → 11.7.0 age confidence packageManager minor 11.8.0
quay.io/pypa/manylinux_2_28 65f13b3 → f3c6d96 final digest
regex 1.12.3 → 1.12.4 age confidence workspace.dependencies patch
ruff (source, changelog) ==0.15.14 → ==0.15.17 age confidence dependency-groups patch 0.15.18
rust (source, changelog) nightly-2026-05-24 → nightly-2026-06-15 age confidence toolchain patch nightly-2026-06-22 (+6)
rustlang/rust nightly-2026-05-24 → nightly-2026-06-15 age confidence minor nightly-2026-06-22 (+6)
tsx (source) 4.22.3 → 4.22.4 age confidence pnpm.catalog.default patch
undici (source) 8.3.0 → 8.4.1 age confidence minor 8.5.0
undici (source) 8.3.0 → 8.4.1 age confidence pnpm.catalog.default minor 8.5.0
vite (source) 8.0.14 → 8.0.16 age confidence pnpm.catalog.default patch
vite-plugin-dts (source) 5.0.1 → 5.0.2 age confidence pnpm.catalog.default patch
vitest (source) 4.1.7 → 4.1.9 age confidence pnpm.catalog.default patch

Release Notes

CodSpeedHQ/codspeed-node (@​codspeed/vitest-plugin)

v5.5.0

Compare Source

Highlights

We are introducing @codspeed/playwright, for walltime benchmarking and profiling of end to end browser applications through playwright.

Here's an example usage, but head to the docs for more information

import { bench, type Page } from "@​codspeed/playwright-plugin";
import electronExecutable from "electron";
import path from "node:path";
import { fileURLToPath } from "node:url";

const __dirname = path.dirname(fileURLToPath(import.meta.url));
const appRoot = path.resolve(__dirname, "..");

async function waitUntilSettled(page: Page): Promise<void> {
  await page.waitForFunction(() => {
    const main = document.getElementById("main");
    return !!main && !main.classList.contains("loading");
  });
}

await bench(
  "inbox-search-archive-threads",
  async ({ page }) => {
    await page.fill("#search", "update");
    await waitUntilSettled(page);

    await page.click("#select-visible-btn");
    await page.click("#archive-btn");
    await waitUntilSettled(page);

    await page.click('#sidebar nav button[data-view="threads"]');
    await waitUntilSettled(page);
  },
  {
    target: {
      kind: "electron",
      appPath: path.join(appRoot, "out/main/index.js"),
      cwd: appRoot,
    },
    beforeRound: async ({ page }) => {
      page.setDefaultTimeout(180_000);
      await page.waitForSelector("#main");
      await waitUntilSettled(page);
    },
  },
);

Note: this plugin is only compatible with the walltime instrument.

What's Changed

Full Changelog: CodSpeedHQ/codspeed-node@v5.4.0...v5.5.0

microsoft/playwright (@​playwright/test)

v1.61.0

Compare Source

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();

// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
  id: credentialId,
  userHandle,
  privateKey,
  publicKey,
});
await context.credentials.install();

const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();
New APIs
Network
Browser and Screencast
  • New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
  • New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
  • The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.
Test runner
  • The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
  • Supported expect.soft.poll(...).
  • New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
  • New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
  • testInfo.errors now lists each sub-error of an AggregateError as a separate entry.
  • New -G command line shorthand for --grep-invert.
🛠️ Other improvements
  • Playwright now supports Ubuntu 26.04.
  • HAR and trace recordings now include WebSocket requests.
Browser Versions
  • Chromium 149.0.7827.55
  • Mozilla Firefox 151.0
  • WebKit 26.5

This version was also tested against the following stable channels:

  • Google Chrome 149
  • Microsoft Edge 149
vitest-dev/vitest (@​vitest/coverage-istanbul)

v4.1.9

Compare Source

🐞 Bug Fixes
  • Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in #​10546 (a5180)
  • browser:
    • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in #​10555 (7fb29)
    • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in #​10497 and #​10556 (fbc62)
  • mocker:
    • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in #​10548 (2c955)
  • pool:
    • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in #​10543 and #​10564 (934b0)
View changes on GitHub

v4.1.8

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
CodSpeedHQ/action (CodSpeedHQ/action)

v4.17.5

Compare Source

Release Notes

This release bundles all runner changes from 4.17.1 through 4.17.5.

🚀 Features
🐛 Bug Fixes
💼 Other
🏗️ Refactor
⚙️ Internals

Install codspeed-runner 4.17.5

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.17.5/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.17.5

File Platform Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.17.0...v4.17.5

v4.17.0

Compare Source

Release Notes

🚀 Features
🐛 Bug Fixes
💼 Other
🏗️ Refactor
🧪 Testing
⚙️ Internals

Install codspeed-runner 4.17.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.17.0/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.17.0

File Platform Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.15.1...v4.17.0

actions/checkout (actions/checkout)

v6.0.3

Compare Source

anchore/syft (aqua:anchore/syft)

v1.45.1

Compare Source

Bug Fixes

(Full Changelog)

v1.45.0

Compare Source

Added Features
Bug Fixes
Additional Changes

(Full Changelog)

aquasecurity/trivy (aqua:aquasecurity/trivy)

v0.71.1

Compare Source

Changelog

  • 164b383 release: v0.71.1 [release/v0.71] (#​10818)
  • a72d9a4 fix(oci): validate artifact filename
  • 3dd9847 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#​10825)
  • a62cbe4 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#​10821)
  • 43d1d26 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#​10812)
  • ac7696c ci: expect GitHub App bot as backport PR author [backport: release/v0.71] (#​10815)

v0.71.0

Compare Source

⚡ Highlights ⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/10767

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0710-2026-06-01

astral-sh/uv (aqua:astral-sh/uv)

v0.11.21

Compare Source

Released on 2026-06-11.

Python
Preview features
  • Add environment.root to uv workspace metadata --sync (#​19760)
  • Allow uv upgrade to update a single dependency constraint (#​19738)
  • Compute and pass uv workspace metadata payload in ty check (#​19763)
  • Make packaged applications the default for uv init (#​17841)
Performance
  • Add parallel discovery of Python versions for uv python list (#​18684)
  • Avoid normalizing source distribution names twice (#​19784)
Bug fixes
  • Improve cache robustness and pruning behavior
    • Allow CI cache pruning without an sdist bucket (#​19802)
    • Avoid overflow when reading malformed cache entries (#​19799)
    • Preserve cached Python downloads during cache pruning (#​19795)
    • Reject running inside the cache (#​19659)
  • Fix Python discovery and version request edge cases
    • Avoid panics for Unicode Python version requests (#​19797)
    • Fix handling of non-critical errors in uv python list with path requests (#​19774)
    • Fix stop-discovery-at regression (#​19769)
  • Harden parsing and validation for package metadata, requirements, markers, URLs, and conflict sets
    • Allow trailing commas in version specifiers (#​19806)
    • Avoid panics for invalid UTF-8 URL credentials (#​19800)
    • Avoid panics for malformed source distribution filenames (#​19776)
    • Avoid panics for trailing extra separators (#​19779)
    • Avoid stack overflow for recursive requirements path aliases (#​19777)
    • Ignore reversed string compatible-release markers (#​19782)
    • Reject duplicate entries in conflict sets (#​19801)
    • Reject malformed hash options in requirements files (#​19783)
    • Reject source distribution filenames without a separator (#​19803)
    • Use UTF-8 lengths for requirement errors (#​19781)
    • Use UTF-8 lengths for trailing marker errors (#​19796)
    • Use byte offsets when peeking over requirements (#​19780)
    • Validate GraalPy ABI suffixes (#​19805)
  • Improve wheel entry-point error handling and virtual environment activation quoting
    • Propagate errors when reading wheel entry points (#​19794)
    • Quote virtual environment activation paths with shell metacharacters (#​19798)

v0.11.20

Compare Source

Released on 2026-06-10.

Enhancements
  • Add --emit-index-url and --emit-find-links to uv export (#​18370)
  • Add --find-links support for uv pip list (#​16103)
  • Group executable install errors during uv python install (#​19691)
  • Use ICF in macOS release builds to reduce binary sizes (#​19615)
Preview features
  • Add initial hidden uv upgrade command (#​19678)
  • Reject Git revisions in uv upgrade (#​19742)
Configuration
  • Recognize UV_NO_INSTALL_PROJECT, UV_NO_INSTALL_WORKSPACE, UV_NO_INSTALL_LOCAL (#​19323)
Performance
  • Speed up discovery of large workspaces (#​18311)
Bug fixes
  • Allow unknown preview flags with a warning again (#​19669)
  • Apply dependency exclusions to direct requirements (#​19699)
  • Avoid following external symlinks during cache clean (#​19682)
  • Avoid following symlinks during cache prune (#​19543)
  • Fix Git cache keys for worktrees and packed refs (#​19706)
  • Make resolver error handling iterative to avoid stack overflows (#​19695)
  • Pass VIRTUAL_ENV through cygpath inside fish on Windows (#​19703)
  • Rebuild explicit local directory tool installs (#​19591)
  • Validate egg top-level entries as identifiers (#​19679)
Documentation
  • Document --find-links caching behavior (#​19585)
  • Add a small section for malware checks (#​19680)

v0.11.19

Compare Source

Released on 2026-06-03.

Python
Enhancements
  • Always compute SHA256 for remote distributions (#​19662)
  • Add PyEmscripten platform (PEP 783) (#​19629)
  • Add Pyodide 2025 target triple (#​19653)
Preview features
  • Make preview features for commands have names that aren't ambiguous with the command (#​19645)
  • Respect --isolated in uv check (#​19666)
Bug fixes
  • Continue tool uninstall after dangling receipts (#​19623)
  • Skip Unix-specific installation steps when cross-installing Windows Python distributions (#​19424)

v0.11.18

Compare Source

Released on 2026-06-01.

Performance
  • Fix performance regression in unzip of local wheels (#​19637)
Preview
Bug fixes
  • Update activation scripts with upstream fixes (#​19628)
Other changes

v0.11.17

Compare Source

Released on 2026-05-28.

Enhancements
  • Add a diagnostic for uv add with standard library modules (#​19572)
  • Expose uv workspace and its list subcommand in help output (#​19533)
  • Improve the "403 forbidden" hint to suggest ignore-error-codes when applicable (#​19521)
  • Skip direct URL lock freshness checks while offline (#​19596)
  • Add import-names and import-namespaces support to uv-build (PEP 794) (#​19380)
  • Add a --no-editable-package flag to various commands (#​19584)
  • Infer Python version requests from source trees in uv tool invocations (#​19577)
Preview features
  • Add module owners to uv workspace metadata (#​19122)
  • Do not allow uv venv --clear to remove non-virtual environments (#​19595)
Bug fixes
  • Improve the performance of large entrie

✂ Note

PR body was truncated to here.

@renovate

renovate Bot commented Mar 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package.json
Command failed: corepack use pnpm@11.7.0

@greptile-apps

greptile-apps Bot commented Mar 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Greptile Summary

This is a routine automated dependency update PR from Renovate Bot, bumping a wide range of dependencies across the stack: GitHub Actions (setup-node v6.3.0, mise-action v3.6.3, zizmor-action v0.5.2, codeql-action v4.32.6), Node.js packages (pnpm 10.32.1, vitest/vite 4.1.0/8.0.0 stable releases from beta, oxfmt, oxlint, undici, electron, node-addon-slsa), Rust crates (tempfile 3.27.0), Python tools (ruff, semgrep, pyrefly, zizmor), and various aqua-managed CLI tools (uv, gh, gitleaks, shfmt, nextest). All GitHub Action references continue to be pinned by full commit SHA, which is good practice for this repository.

  • Most changes are straightforward version bumps with no behavioral impact on the codebase itself.
  • Several beta versions (vitest, vite) graduate to stable releases — a positive change.
  • The packageManager field in package.json was updated to pnpm@10.32.1 but the SHA512 integrity hash that was present in the old value was dropped, removing Corepack's ability to verify the pnpm binary on download.

Confidence Score: 4/5

  • This PR is safe to merge; the only notable finding is a non-critical omission of the Corepack integrity hash for pnpm.
  • All changes are automated dependency bumps. GitHub Actions remain SHA-pinned, Dockerfile images are digest-pinned, and lock files are fully regenerated. The one notable point is the missing SHA512 hash in the packageManager field, which is a best-practice/supply-chain hygiene issue rather than an active vulnerability. Everything else is routine.
  • package.json — missing SHA512 hash in the packageManager field.

Important Files Changed

Filename Overview
package.json Updated pnpm to 10.32.1 but dropped the SHA512 integrity hash from the packageManager field, removing Corepack's ability to verify the binary's integrity on download.
Dockerfile Updated docker/dockerfile syntax to 1.22 and manylinux_2_28 base image to a new digest. Both references are pinned by SHA256. No issues found.
Cargo.lock Updated tempfile from 3.26.0 to 3.27.0 which pulls in getrandom 0.3.4 instead of 0.4.2, and resolves different windows-sys versions for various crates. Standard lock file update.
mise.toml Updated gitleaks, uv, gh CLI, nextest, and mvdan/sh (shfmt) to newer patch/minor versions. No issues found.
pyproject.toml Updated pyrefly, ruff, semgrep, and zizmor to newer versions. No issues found.
pnpm-workspace.yaml Updated catalog versions for @vitest/coverage-istanbul, electron, oxfmt, oxlint, undici, vite, and vitest from beta/older versions to stable releases. No issues found.

Comments Outside Diff (1)

  1. package.json, line 202 (link)

    P2 Missing Corepack integrity hash for pnpm

    The previous packageManager value included a +sha512 integrity hash that Corepack uses to cryptographically verify the pnpm binary on download. The new value omits this hash entirely, so Corepack will skip integrity verification when bootstrapping pnpm from this field.

    You can restore supply-chain integrity by running:

    corepack use pnpm@10.32.1

    This will update package.json with the correct hash for 10.32.1, e.g.:

    Consider asking Renovate to preserve the hash when bumping the packageManager field (the pinDigests option may help, or a custom packageRules entry targeting packageManager).

    Prompt To Fix With AI 
    This is a comment left during a code review.
Path: package.json
Line: 202

Comment:
**Missing Corepack integrity hash for pnpm**

The previous `packageManager` value included a `+sha512` integrity hash that Corepack uses to cryptographically verify the pnpm binary on download. The new value omits this hash entirely, so Corepack will skip integrity verification when bootstrapping pnpm from this field.

You can restore supply-chain integrity by running:

```bash
corepack use pnpm@10.32.1
```

This will update `package.json` with the correct hash for 10.32.1, e.g.:



Consider asking Renovate to preserve the hash when bumping the `packageManager` field (the [`pinDigests`](https://docs.renovatebot.com/configuration-options/#pindigests) option may help, or a custom `packageRules` entry targeting `packageManager`).

How can I resolve this? If you propose a fix, please make it concise.
Prompt To Fix All With AI 
This is a comment left during a code review.
Path: package.json
Line: 202

Comment:
**Missing Corepack integrity hash for pnpm**

The previous `packageManager` value included a `+sha512` integrity hash that Corepack uses to cryptographically verify the pnpm binary on download. The new value omits this hash entirely, so Corepack will skip integrity verification when bootstrapping pnpm from this field.

You can restore supply-chain integrity by running:

```bash
corepack use pnpm@10.32.1
```

This will update `package.json` with the correct hash for 10.32.1, e.g.:

```suggestion
  "packageManager": "pnpm@10.32.1+sha512.<hash-for-10.32.1>",
```

Consider asking Renovate to preserve the hash when bumping the `packageManager` field (the [`pinDigests`](https://docs.renovatebot.com/configuration-options/#pindigests) option may help, or a custom `packageRules` entry targeting `packageManager`).

How can I resolve this? If you propose a fix, please make it concise.

Last reviewed commit: "Update all dependenc..."

@renovate renovate Bot force-pushed the renovate/all-dependencies branch 4 times, most recently from 1c2d5e5 to 40653e4 Compare March 22, 2026 02:03
github-advanced-security[bot]
github-advanced-security AI found potential problems Mar 22, 2026
View reviewed changes
Comment thread .github/workflows/release.yaml Fixed
Comment thread .github/workflows/release.yaml Fixed
@renovate renovate Bot force-pushed the renovate/all-dependencies branch from 40653e4 to 757f335 Compare March 22, 2026 04:59
github-advanced-security[bot]
github-advanced-security AI found potential problems Mar 22, 2026
View reviewed changes
Comment thread .github/workflows/release.yaml Fixed
Comment thread .github/workflows/release.yaml Fixed
@renovate renovate Bot force-pushed the renovate/all-dependencies branch from 757f335 to a2c2755 Compare March 22, 2026 21:02
github-advanced-security[bot]
github-advanced-security AI found potential problems Mar 22, 2026
View reviewed changes
Comment thread .github/workflows/release.yaml Fixed
Comment thread .github/workflows/release.yaml Fixed
@renovate renovate Bot force-pushed the renovate/all-dependencies branch from a2c2755 to 4501313 Compare March 23, 2026 01:45
github-advanced-security[bot]
github-advanced-security AI found potential problems Mar 23, 2026
View reviewed changes
Comment thread .github/workflows/release.yaml Fixed
Comment thread .github/workflows/release.yaml Fixed
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 17 times, most recently from c433c4d to 7fe5e47 Compare March 27, 2026 13:13
github-advanced-security[bot]
github-advanced-security AI found potential problems Apr 19, 2026
View reviewed changes
Comment thread .github/workflows/release.yaml Fixed
Comment thread .github/workflows/release.yaml Fixed
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 9 times, most recently from 5bce89e to 366fde0 Compare April 20, 2026 21:11
@codecov

codecov Bot commented Apr 20, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@renovate renovate Bot force-pushed the renovate/all-dependencies branch 9 times, most recently from e033171 to c00b714 Compare April 27, 2026 22:59
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 6 times, most recently from 48dd3a8 to 5e27d67 Compare April 30, 2026 15:12
@codspeed-hq

codspeed-hq Bot commented May 18, 2026 •
edited
Loading

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 15 untouched benchmarks

Comparing renovate/all-dependencies (a483481) with main (32fd41a)

Open in CodSpeed

@socket-security

socket-security Bot commented Jun 7, 2026 •
edited
Loading

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@socket-security

socket-security Bot commented Jun 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednpm/​undici@​8.4.1977010098100
Addednpm/​vitest@​4.1.9981007999100
Addednpm/​@​types/​node@​25.9.31001008196100
Addednpm/​tsx@​4.22.41001008291100
Addednpm/​@​vitest/​coverage-istanbul@​4.1.9991008298100
Addednpm/​vite@​8.0.16991008298100
Addednpm/​vite-plugin-dts@​5.0.21001008691100
Addednpm/​oxfmt@​0.54.0861008996100
Addednpm/​oxlint@​1.69.0991009296100
Addednpm/​@​codspeed/​vitest-plugin@​5.5.0971009896100
Addednpm/​electron@​42.4.010010010098100
Addednpm/​@​playwright/​test@​1.61.010010010099100
Updatedpypi/​ruff@​0.15.14 ⏵ 0.15.17100100100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@github-advanced-security