chore(deps): update all-minor-updates #6
Reference in New Issue
Block a user
Delete Branch "renovate/minor"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
25.1.0→25.2.219.2.10→19.2.135.1.2→5.1.31.13.4→1.13.525.5.0→25.6.010.28.2→10.29.2Release Notes
vitejs/vite-plugin-react (@vitejs/plugin-react)
v5.1.3Compare Source
axios/axios (axios)
v1.13.5Compare Source
Release 1.13.5
Highlights
__proto__key inmergeConfig. (PR #7369)AxiosErrorcould be missing thestatusfield on and after v1.13.3. (PR #7368)Changes
Security
__proto__key inmergeConfig. (PR #7369)Fixes
statusis present inAxiosErroron and after v1.13.3. (PR #7368)Features / Improvements
isAbsoluteURL. (PR #7326)Documentation
Bufferconstructor usage and README formatting. (PR #7371)CI / Maintenance
karma-sourcemap-loaderfrom 0.3.8 to 0.4.0. (PR #7360)New Contributors
Full Changelog: https://github.com/axios/axios/compare/v1.13.4...v1.13.5
nodejs/node (node)
v25.6.0: 2026-02-03, Version 25.6.0 (Current), @aduh95Compare Source
Notable Changes
796ff46ae6] - (SEMVER-MINOR) async_hooks: addtrackPromisesoption tocreateHook()(Joyee Cheung) #614154cf94fae17] - (SEMVER-MINOR) net: addsetTOSandgetTOStoSocket(Amol Yadav) #61503dce657071e] - (SEMVER-MINOR) src: add initial support for ESM in embedder API (Joyee Cheung) #61548e62608bbcf] - src: improveTextEncoderencode performance withsimdutf(Mert Can Altin) #6149693938a4738] - (SEMVER-MINOR) stream: addbytes()method tonode:stream/consumers(wantaek) #604265fe2582329] - (SEMVER-MINOR) test_runner: addenvoption torunfunction (Ethan Arrowood) #61367a181d0c43d] - url: update Ada to v3.4.2 and support Unicode 17 (Yagiz Nizipli) #61593Commits
9c8d1b0278] - assert: fix loose deepEqual arrays with undefined and null failing (Ruben Bridgewater) #61587796ff46ae6] - (SEMVER-MINOR) async_hooks: add trackPromises option to createHook() (Joyee Cheung) #61415d23ee89693] - benchmark: add streaming TextDecoder benchmark (Сковорода Никита Андреевич) #615498759db9d21] - buffer: disallow ArrayBuffer transfer on pooled buffer (Chengzhong Wu) #61372b2fb82946b] - build: add--shared-liefconfigure flag (Antoine du Hamel) #615360ef99de9da] - build: aix: deoptimize implementation-visitor.cc with --shared (Stewart X Addison) #615508f2083e73a] - build: enable -DV8_ENABLE_CHECKS flag (Ryuhei Shima) #61327150910da70] - build,test: add tests for binary linked with shared libnode (Joyee Cheung) #61463fb7868ba98] - build,win: fix vs2022 compilation (Stefan Stojanovic) #615302c39a9234c] - deps: update undici to 7.19.2 (Node.js GitHub Bot) #615662a74379367] - deps: update archs files for openssl-3.5.5 (Node.js GitHub Bot) #615479e26a15c29] - deps: upgrade openssl sources to openssl-3.5.5 (Node.js GitHub Bot) #61547f16b532e97] - deps: update corepack to 0.34.6 (Node.js GitHub Bot) #61510780e65c5c5] - deps: V8: cherry-pickc5ff7c4(Chengzhong Wu) #613722eb8e9d760] - deps: update nghttp3 to 1.15.0 (Node.js GitHub Bot) #61512a999edd8fd] - deps: update ngtcp2 to 1.20.0 (Node.js GitHub Bot) #61511eedd3bb6b6] - deps: update undici to 7.19.1 (Node.js GitHub Bot) #615147d2bd59984] - deps: update undici to 7.19.0 (Node.js GitHub Bot) #614703ad4d9b11b] - doc: align Buffer.concat documentation with behavior (Gürgün Dayıoğlu) #604057e3eab5963] - doc: fix node-config-schema (Сковорода Никита Андреевич) #61596cbcfaf9a35] - doc: update IBM/Red Hat volunteers with dedicated project time (Beth Griggs) #615883d68811d1a] - doc: regeneratenode.1usingdoc-kit(Aviv Keller) #6153571702c581a] - doc: restore @ChALkeR to collaborators (Сковорода Никита Андреевич) #615530ceb8cad59] - doc: addedrequestOCSPoption totls.connect(ikeyan) #61064da93e2178c] - doc: move Security-Team from TSC to SECURITY (Rafael Gonzaga) #614954bea821b4c] - lib: use utf8 fast path for streaming TextDecoder (Сковорода Никита Андреевич) #61549f05bad91d8] - lib: recycle queues (Robert Nagy) #6146144b1927938] - lib: use StringPrototypeStartsWith from primordials in locks (Taejin Kim) #61492a78259828a] - lib: unify ICU and no-ICU TextDecoder (Сковорода Никита Андреевич) #61409a28ddd4594] - module: do not wrap module._load when tracing is not enabled (Joyee Cheung) #614794cf94fae17] - (SEMVER-MINOR) net: addsetTOSandgetTOStoSocket(Amol Yadav) #61503b861451d57] - process: do not truncate long strings in--print(Mohamed Akram) #614974a2e184753] - sea: print error information when fs operations fail (Joyee Cheung) #6158145d25c47da] - sqlite: change approach to fix segfault SQLTagStore (Bart Louwers) #604626993386320] - sqlite: reserve vectors space (Guilherme Araújo) #61540dce657071e] - (SEMVER-MINOR) src: add initial support for ESM in embedder API (Joyee Cheung) #61548e62608bbcf] - src: improve textEncoder encode performance with simdutf (Mert Can Altin) #614960fce52d22c] - src: expose help texts into node-config-schema.json (Pietro Marchini) #58680be644e2569] - src: throw RangeError on failed ArrayBuffer BackingStore allocation (Chengzhong Wu) #6148093938a4738] - (SEMVER-MINOR) stream: add bytes() method to stream/consumers (wantaek) #6042683b2bf8ea2] - test: split test-fs-watch-ignore-* (Luigi Pinca) #614944726627443] - test: aix: unflake test_threadsafe_function/test flaky on AIX (Stewart X Addison) #615606fbb0b7572] - test: delay writing the files only on macOS (Luigi Pinca) #615320a952b88bb] - test: ensure removeListener event fires for once() listeners (sangwook) #60137945b141c5d] - test: fix flaky debugger test (Ryuhei Shima) #58324256fc6770b] - test: update WPT for url to81a2aed(Node.js GitHub Bot) #615097725c8d596] - test: skip --build-sea tests on platforms where SEA is flaky (Joyee Cheung) #61504915d105ffd] - test_runner: update node-config-schema (Pietro Marchini) #58680fd8be14b33] - test_runner: fix passingexpectFailure(Moshe Atlow) #61568c0dd9826bd] - test_runner: differentiate todo and failure styles (Moshe Atlow) #615645fe2582329] - (SEMVER-MINOR) test_runner: add env option to run function (Ethan Arrowood) #6136739bea2236e] - tools: update gyp-next to 0.21.1 (Node.js GitHub Bot) #61528d5beb4fe1c] - tools: move Quic dependencies behind ad-hoc flag (Antoine du Hamel) #614465c26087c29] - tools: add LIEF to license builder (Chengzhong Wu) #61523a181d0c43d] - url: update ada to v3.4.2 and support unicode 17 (Yagiz Nizipli) #61593pnpm/pnpm (pnpm)
v10.29.2: pnpm 10.29.2Compare Source
Patch Changes
Reverted fix: Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists #10497.
Platinum Sponsors
Gold Sponsors
v10.29.1: pnpm 10.29.1Compare Source
Minor Changes
pnpm dlx/pnpxcommand now supports thecatalog:protocol. Example:pnpm dlx shx@catalog:.auditLevelin thepnpm-workspace.yamlfile #10540.workspace:protocol without version specifier. It is now treated asworkspace:*and resolves to the concrete version during publish #10436.Patch Changes
Fixed
pnpm list --jsonreturning incorrect paths when using global virtual store #10187.Fix
pnpm store pathandpnpm store statususing workspace root for path resolution whenstoreDiris relative #10290.Fixed
pnpm run -rfailing with "No projects matched the filters" when an emptypnpm-workspace.yamlexists #10497.Fixed a bug where
catalogMode: strictwould write the literal string"catalog:"topnpm-workspace.yamlinstead of the resolved version specifier when re-adding an existing catalog dependency #10176.Fixed the documentation URL shown in
pnpm completion --helpto point to the correct page at https://pnpm.io/completion #10281.Skip local
file:protocol dependencies duringpnpm fetch. This fixes an issue wherepnpm fetchwould fail in Docker builds when local directory dependencies were not available #10460.Fixed
pnpm audit --jsonto respect the--audit-levelsetting for both exit code and output filtering #10540.update tar to version 7.5.7 to fix security issue
Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: CVE-2026-24842
Fix
pnpm audit --fixreplacing reference overrides (e.g.$foo) with concrete versions #10325.Fix
shamefullyHoistset viaupdateConfigin.pnpmfile.cjsnot being converted topublicHoistPattern#10271.pnpm helpshould correctly report if the currently running pnpm CLI is bundled with Node.js #10561.Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for
node_modules/.bin, causing binaries to not be found when running commands likepnpm exec#10457.Platinum Sponsors
Gold Sponsors
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
79f327834bto0ce6b26e7dchore(deps): update dependency @types/node to v25.2.0to chore(deps): update all-minor-updates0ce6b26e7dto6ff92a04576ff92a0457to613427893d613427893dto6296a1a59e6296a1a59eto1f7c2781811f7c278181to5f39a2fa6a5f39a2fa6ato3ae438e1853ae438e185to73ebc51e8e73ebc51e8etoe7efff6efbe7efff6efbto109251a7f3109251a7f3to673c9e3fea673c9e3featof0958df853f0958df853toda5a5b7f0eda5a5b7f0etoe7f7deacc0e7f7deacc0to0061e1548d0061e1548dto878c8a3c26878c8a3c26to8f458315448f45831544toaf8bf791f8af8bf791f8to1e315a107d1e315a107dto73b6b359a173b6b359a1to3535ce72e83535ce72e8to9add1bd5979add1bd597tof9f27e96c8f9f27e96c8to8505f5f0ae8505f5f0aeto02a7858c2fView command line instructions
Checkout
From your project repository, check out a new branch and test the changes.