chore(deps): update all-minor-updates #6

Open
renovate-bot wants to merge 1 commits from renovate/minor into main
Collaborator

This PR contains the following updates:

Package Type Update Change
@types/node (source) devDependencies minor 25.1.025.2.2
@types/react (source) devDependencies patch 19.2.1019.2.13
@vitejs/plugin-react (source) devDependencies patch 5.1.25.1.3
axios (source) dependencies patch 1.13.41.13.5
node (source) minor 25.5.025.6.0
pnpm (source) packageManager minor 10.28.210.29.2

Release Notes

vitejs/vite-plugin-react (@​vitejs/plugin-react)

v5.1.3

Compare Source

axios/axios (axios)

v1.13.5

Compare Source

Release 1.13.5

Highlights
  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #​7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #​7368)
Changes
Security
  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #​7369)
Fixes
  • Fix/5657. (PR #​7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #​7368)
Features / Improvements
  • Add input validation to isAbsoluteURL. (PR #​7326)
  • Refactor: bump minor package versions. (PR #​7356)
Documentation
  • Clarify object-check comment. (PR #​7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #​7371)
CI / Maintenance
  • Chore: fix issues with YAML. (PR #​7355)
  • CI: update workflow YAMLs. (PR #​7372)
  • CI: fix run condition. (PR #​7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #​7360)
  • Chore(release): prepare release 1.13.5. (PR #​7379)
New Contributors

Full Changelog: https://github.com/axios/axios/compare/v1.13.4...v1.13.5

nodejs/node (node)

v25.6.0: 2026-02-03, Version 25.6.0 (Current), @​aduh95

Compare Source

Notable Changes
  • [796ff46ae6] - (SEMVER-MINOR) async_hooks: add trackPromises option to createHook() (Joyee Cheung) #​61415
  • [4cf94fae17] - (SEMVER-MINOR) net: add setTOS and getTOS to Socket (Amol Yadav) #​61503
  • [dce657071e] - (SEMVER-MINOR) src: add initial support for ESM in embedder API (Joyee Cheung) #​61548
  • [e62608bbcf] - src: improve TextEncoder encode performance with simdutf (Mert Can Altin) #​61496
  • [93938a4738] - (SEMVER-MINOR) stream: add bytes() method to node:stream/consumers (wantaek) #​60426
  • [5fe2582329] - (SEMVER-MINOR) test_runner: add env option to run function (Ethan Arrowood) #​61367
  • [a181d0c43d] - url: update Ada to v3.4.2 and support Unicode 17 (Yagiz Nizipli) #​61593
Commits
pnpm/pnpm (pnpm)

v10.29.2: pnpm 10.29.2

Compare Source

Patch Changes

  • Reverted a fix shipped in v10.29.1, which caused another issue #​10571.
    Reverted fix: Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists #​10497.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.29.1: pnpm 10.29.1

Compare Source

Minor Changes

  • The pnpm dlx / pnpx command now supports the catalog: protocol. Example: pnpm dlx shx@catalog:.
  • Support configuring auditLevel in the pnpm-workspace.yaml file #​10540.
  • Support bare workspace: protocol without version specifier. It is now treated as workspace:* and resolves to the concrete version during publish #​10436.

Patch Changes

  • Fixed pnpm list --json returning incorrect paths when using global virtual store #​10187.

  • Fix pnpm store path and pnpm store status using workspace root for path resolution when storeDir is relative #​10290.

  • Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists #​10497.

  • Fixed a bug where catalogMode: strict would write the literal string "catalog:" to pnpm-workspace.yaml instead of the resolved version specifier when re-adding an existing catalog dependency #​10176.

  • Fixed the documentation URL shown in pnpm completion --help to point to the correct page at https://pnpm.io/completion #​10281.

  • Skip local file: protocol dependencies during pnpm fetch. This fixes an issue where pnpm fetch would fail in Docker builds when local directory dependencies were not available #​10460.

  • Fixed pnpm audit --json to respect the --audit-level setting for both exit code and output filtering #​10540.

  • update tar to version 7.5.7 to fix security issue

    Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: CVE-2026-24842

  • Fix pnpm audit --fix replacing reference overrides (e.g. $foo) with concrete versions #​10325.

  • Fix shamefullyHoist set via updateConfig in .pnpmfile.cjs not being converted to publicHoistPattern #​10271.

  • pnpm help should correctly report if the currently running pnpm CLI is bundled with Node.js #​10561.

  • Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for node_modules/.bin, causing binaries to not be found when running commands like pnpm exec #​10457.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node) ([source](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)) | devDependencies | minor | [`25.1.0` → `25.2.2`](https://renovatebot.com/diffs/npm/@types%2fnode/25.1.0/25.2.2) | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react) ([source](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react)) | devDependencies | patch | [`19.2.10` → `19.2.13`](https://renovatebot.com/diffs/npm/@types%2freact/19.2.10/19.2.13) | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/main/packages/plugin-react#readme) ([source](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react)) | devDependencies | patch | [`5.1.2` → `5.1.3`](https://renovatebot.com/diffs/npm/@vitejs%2fplugin-react/5.1.2/5.1.3) | | [axios](https://axios-http.com) ([source](https://github.com/axios/axios)) | dependencies | patch | [`1.13.4` → `1.13.5`](https://renovatebot.com/diffs/npm/axios/1.13.4/1.13.5) | | [node](https://nodejs.org) ([source](https://github.com/nodejs/node)) | | minor | `25.5.0` → `25.6.0` | | [pnpm](https://pnpm.io) ([source](https://github.com/pnpm/pnpm/tree/HEAD/pnpm)) | packageManager | minor | [`10.28.2` → `10.29.2`](https://renovatebot.com/diffs/npm/pnpm/10.28.2/10.29.2) | --- ### Release Notes <details> <summary>vitejs/vite-plugin-react (@&#8203;vitejs/plugin-react)</summary> ### [`v5.1.3`](https://github.com/vitejs/vite-plugin-react/blob/HEAD/packages/plugin-react/CHANGELOG.md#513-2026-02-02) [Compare Source](https://github.com/vitejs/vite-plugin-react/compare/f127a24376a90a82acf5b8aad4be750bec3045f3...cf0cb8aa3398e312f4e91b702281806aad004cd7) </details> <details> <summary>axios/axios (axios)</summary> ### [`v1.13.5`](https://github.com/axios/axios/releases/tag/v1.13.5) [Compare Source](https://github.com/axios/axios/compare/v1.13.4...v1.13.5) #### Release 1.13.5 ##### Highlights - **Security:** Fixed a potential **Denial of Service** issue involving the `__proto__` key in `mergeConfig`. (PR [#&#8203;7369](https://github.com/axios/axios/pull/7369)) - **Bug fix:** Resolved an issue where `AxiosError` could be missing the `status` field on and after **v1.13.3**. (PR [#&#8203;7368](https://github.com/axios/axios/pull/7368)) ##### Changes ##### Security - Fix Denial of Service via `__proto__` key in `mergeConfig`. (PR [#&#8203;7369](https://github.com/axios/axios/pull/7369)) ##### Fixes - Fix/5657. (PR [#&#8203;7313](https://github.com/axios/axios/pull/7313)) - Ensure `status` is present in `AxiosError` on and after v1.13.3. (PR [#&#8203;7368](https://github.com/axios/axios/pull/7368)) ##### Features / Improvements - Add input validation to `isAbsoluteURL`. (PR [#&#8203;7326](https://github.com/axios/axios/pull/7326)) - Refactor: bump minor package versions. (PR [#&#8203;7356](https://github.com/axios/axios/pull/7356)) ##### Documentation - Clarify object-check comment. (PR [#&#8203;7323](https://github.com/axios/axios/pull/7323)) - Fix deprecated `Buffer` constructor usage and README formatting. (PR [#&#8203;7371](https://github.com/axios/axios/pull/7371)) ##### CI / Maintenance - Chore: fix issues with YAML. (PR [#&#8203;7355](https://github.com/axios/axios/pull/7355)) - CI: update workflow YAMLs. (PR [#&#8203;7372](https://github.com/axios/axios/pull/7372)) - CI: fix run condition. (PR [#&#8203;7373](https://github.com/axios/axios/pull/7373)) - Dev deps: bump `karma-sourcemap-loader` from 0.3.8 to 0.4.0. (PR [#&#8203;7360](https://github.com/axios/axios/pull/7360)) - Chore(release): prepare release 1.13.5. (PR [#&#8203;7379](https://github.com/axios/axios/pull/7379)) ##### New Contributors - [@&#8203;sachin11063](https://github.com/sachin11063) (first contribution — PR [#&#8203;7323](https://github.com/axios/axios/pull/7323)) - [@&#8203;asmitha-16](https://github.com/asmitha-16) (first contribution — PR [#&#8203;7326](https://github.com/axios/axios/pull/7326)) **Full Changelog:** <https://github.com/axios/axios/compare/v1.13.4...v1.13.5> </details> <details> <summary>nodejs/node (node)</summary> ### [`v25.6.0`](https://github.com/nodejs/node/releases/tag/v25.6.0): 2026-02-03, Version 25.6.0 (Current), @&#8203;aduh95 [Compare Source](https://github.com/nodejs/node/compare/v25.5.0...v25.6.0) ##### Notable Changes - \[[`796ff46ae6`](https://github.com/nodejs/node/commit/796ff46ae6)] - **(SEMVER-MINOR)** **async\_hooks**: add `trackPromises` option to `createHook()` (Joyee Cheung) [#&#8203;61415](https://github.com/nodejs/node/pull/61415) - \[[`4cf94fae17`](https://github.com/nodejs/node/commit/4cf94fae17)] - **(SEMVER-MINOR)** **net**: add `setTOS` and `getTOS` to `Socket` (Amol Yadav) [#&#8203;61503](https://github.com/nodejs/node/pull/61503) - \[[`dce657071e`](https://github.com/nodejs/node/commit/dce657071e)] - **(SEMVER-MINOR)** **src**: add initial support for ESM in embedder API (Joyee Cheung) [#&#8203;61548](https://github.com/nodejs/node/pull/61548) - \[[`e62608bbcf`](https://github.com/nodejs/node/commit/e62608bbcf)] - **src**: improve `TextEncoder` encode performance with `simdutf` (Mert Can Altin) [#&#8203;61496](https://github.com/nodejs/node/pull/61496) - \[[`93938a4738`](https://github.com/nodejs/node/commit/93938a4738)] - **(SEMVER-MINOR)** **stream**: add `bytes()` method to `node:stream/consumers` (wantaek) [#&#8203;60426](https://github.com/nodejs/node/pull/60426) - \[[`5fe2582329`](https://github.com/nodejs/node/commit/5fe2582329)] - **(SEMVER-MINOR)** **test\_runner**: add `env` option to `run` function (Ethan Arrowood) [#&#8203;61367](https://github.com/nodejs/node/pull/61367) - \[[`a181d0c43d`](https://github.com/nodejs/node/commit/a181d0c43d)] - **url**: update Ada to v3.4.2 and support Unicode 17 (Yagiz Nizipli) [#&#8203;61593](https://github.com/nodejs/node/pull/61593) ##### Commits - \[[`9c8d1b0278`](https://github.com/nodejs/node/commit/9c8d1b0278)] - **assert**: fix loose deepEqual arrays with undefined and null failing (Ruben Bridgewater) [#&#8203;61587](https://github.com/nodejs/node/pull/61587) - \[[`796ff46ae6`](https://github.com/nodejs/node/commit/796ff46ae6)] - **(SEMVER-MINOR)** **async\_hooks**: add trackPromises option to createHook() (Joyee Cheung) [#&#8203;61415](https://github.com/nodejs/node/pull/61415) - \[[`d23ee89693`](https://github.com/nodejs/node/commit/d23ee89693)] - **benchmark**: add streaming TextDecoder benchmark (Сковорода Никита Андреевич) [#&#8203;61549](https://github.com/nodejs/node/pull/61549) - \[[`8759db9d21`](https://github.com/nodejs/node/commit/8759db9d21)] - **buffer**: disallow ArrayBuffer transfer on pooled buffer (Chengzhong Wu) [#&#8203;61372](https://github.com/nodejs/node/pull/61372) - \[[`b2fb82946b`](https://github.com/nodejs/node/commit/b2fb82946b)] - **build**: add `--shared-lief` configure flag (Antoine du Hamel) [#&#8203;61536](https://github.com/nodejs/node/pull/61536) - \[[`0ef99de9da`](https://github.com/nodejs/node/commit/0ef99de9da)] - **build**: aix: deoptimize implementation-visitor.cc with --shared (Stewart X Addison) [#&#8203;61550](https://github.com/nodejs/node/pull/61550) - \[[`8f2083e73a`](https://github.com/nodejs/node/commit/8f2083e73a)] - **build**: enable -DV8\_ENABLE\_CHECKS flag (Ryuhei Shima) [#&#8203;61327](https://github.com/nodejs/node/pull/61327) - \[[`150910da70`](https://github.com/nodejs/node/commit/150910da70)] - **build,test**: add tests for binary linked with shared libnode (Joyee Cheung) [#&#8203;61463](https://github.com/nodejs/node/pull/61463) - \[[`fb7868ba98`](https://github.com/nodejs/node/commit/fb7868ba98)] - **build,win**: fix vs2022 compilation (Stefan Stojanovic) [#&#8203;61530](https://github.com/nodejs/node/pull/61530) - \[[`2c39a9234c`](https://github.com/nodejs/node/commit/2c39a9234c)] - **deps**: update undici to 7.19.2 (Node.js GitHub Bot) [#&#8203;61566](https://github.com/nodejs/node/pull/61566) - \[[`2a74379367`](https://github.com/nodejs/node/commit/2a74379367)] - **deps**: update archs files for openssl-3.5.5 (Node.js GitHub Bot) [#&#8203;61547](https://github.com/nodejs/node/pull/61547) - \[[`9e26a15c29`](https://github.com/nodejs/node/commit/9e26a15c29)] - **deps**: upgrade openssl sources to openssl-3.5.5 (Node.js GitHub Bot) [#&#8203;61547](https://github.com/nodejs/node/pull/61547) - \[[`f16b532e97`](https://github.com/nodejs/node/commit/f16b532e97)] - **deps**: update corepack to 0.34.6 (Node.js GitHub Bot) [#&#8203;61510](https://github.com/nodejs/node/pull/61510) - \[[`780e65c5c5`](https://github.com/nodejs/node/commit/780e65c5c5)] - **deps**: V8: cherry-pick [`c5ff7c4`](https://github.com/nodejs/node/commit/c5ff7c4d6cde) (Chengzhong Wu) [#&#8203;61372](https://github.com/nodejs/node/pull/61372) - \[[`2eb8e9d760`](https://github.com/nodejs/node/commit/2eb8e9d760)] - **deps**: update nghttp3 to 1.15.0 (Node.js GitHub Bot) [#&#8203;61512](https://github.com/nodejs/node/pull/61512) - \[[`a999edd8fd`](https://github.com/nodejs/node/commit/a999edd8fd)] - **deps**: update ngtcp2 to 1.20.0 (Node.js GitHub Bot) [#&#8203;61511](https://github.com/nodejs/node/pull/61511) - \[[`eedd3bb6b6`](https://github.com/nodejs/node/commit/eedd3bb6b6)] - **deps**: update undici to 7.19.1 (Node.js GitHub Bot) [#&#8203;61514](https://github.com/nodejs/node/pull/61514) - \[[`7d2bd59984`](https://github.com/nodejs/node/commit/7d2bd59984)] - **deps**: update undici to 7.19.0 (Node.js GitHub Bot) [#&#8203;61470](https://github.com/nodejs/node/pull/61470) - \[[`3ad4d9b11b`](https://github.com/nodejs/node/commit/3ad4d9b11b)] - **doc**: align Buffer.concat documentation with behavior (Gürgün Dayıoğlu) [#&#8203;60405](https://github.com/nodejs/node/pull/60405) - \[[`7e3eab5963`](https://github.com/nodejs/node/commit/7e3eab5963)] - **doc**: fix node-config-schema (Сковорода Никита Андреевич) [#&#8203;61596](https://github.com/nodejs/node/pull/61596) - \[[`cbcfaf9a35`](https://github.com/nodejs/node/commit/cbcfaf9a35)] - **doc**: update IBM/Red Hat volunteers with dedicated project time (Beth Griggs) [#&#8203;61588](https://github.com/nodejs/node/pull/61588) - \[[`3d68811d1a`](https://github.com/nodejs/node/commit/3d68811d1a)] - **doc**: regenerate `node.1` using `doc-kit` (Aviv Keller) [#&#8203;61535](https://github.com/nodejs/node/pull/61535) - \[[`71702c581a`](https://github.com/nodejs/node/commit/71702c581a)] - **doc**: restore [@&#8203;ChALkeR](https://github.com/ChALkeR) to collaborators (Сковорода Никита Андреевич) [#&#8203;61553](https://github.com/nodejs/node/pull/61553) - \[[`0ceb8cad59`](https://github.com/nodejs/node/commit/0ceb8cad59)] - **doc**: added `requestOCSP` option to `tls.connect` (ikeyan) [#&#8203;61064](https://github.com/nodejs/node/pull/61064) - \[[`da93e2178c`](https://github.com/nodejs/node/commit/da93e2178c)] - **doc**: move Security-Team from TSC to SECURITY (Rafael Gonzaga) [#&#8203;61495](https://github.com/nodejs/node/pull/61495) - \[[`4bea821b4c`](https://github.com/nodejs/node/commit/4bea821b4c)] - **lib**: use utf8 fast path for streaming TextDecoder (Сковорода Никита Андреевич) [#&#8203;61549](https://github.com/nodejs/node/pull/61549) - \[[`f05bad91d8`](https://github.com/nodejs/node/commit/f05bad91d8)] - **lib**: recycle queues (Robert Nagy) [#&#8203;61461](https://github.com/nodejs/node/pull/61461) - \[[`44b1927938`](https://github.com/nodejs/node/commit/44b1927938)] - **lib**: use StringPrototypeStartsWith from primordials in locks (Taejin Kim) [#&#8203;61492](https://github.com/nodejs/node/pull/61492) - \[[`a78259828a`](https://github.com/nodejs/node/commit/a78259828a)] - **lib**: unify ICU and no-ICU TextDecoder (Сковорода Никита Андреевич) [#&#8203;61409](https://github.com/nodejs/node/pull/61409) - \[[`a28ddd4594`](https://github.com/nodejs/node/commit/a28ddd4594)] - **module**: do not wrap module.\_load when tracing is not enabled (Joyee Cheung) [#&#8203;61479](https://github.com/nodejs/node/pull/61479) - \[[`4cf94fae17`](https://github.com/nodejs/node/commit/4cf94fae17)] - **(SEMVER-MINOR)** **net**: add `setTOS` and `getTOS` to `Socket` (Amol Yadav) [#&#8203;61503](https://github.com/nodejs/node/pull/61503) - \[[`b861451d57`](https://github.com/nodejs/node/commit/b861451d57)] - **process**: do not truncate long strings in `--print` (Mohamed Akram) [#&#8203;61497](https://github.com/nodejs/node/pull/61497) - \[[`4a2e184753`](https://github.com/nodejs/node/commit/4a2e184753)] - **sea**: print error information when fs operations fail (Joyee Cheung) [#&#8203;61581](https://github.com/nodejs/node/pull/61581) - \[[`45d25c47da`](https://github.com/nodejs/node/commit/45d25c47da)] - **sqlite**: change approach to fix segfault SQLTagStore (Bart Louwers) [#&#8203;60462](https://github.com/nodejs/node/pull/60462) - \[[`6993386320`](https://github.com/nodejs/node/commit/6993386320)] - **sqlite**: reserve vectors space (Guilherme Araújo) [#&#8203;61540](https://github.com/nodejs/node/pull/61540) - \[[`dce657071e`](https://github.com/nodejs/node/commit/dce657071e)] - **(SEMVER-MINOR)** **src**: add initial support for ESM in embedder API (Joyee Cheung) [#&#8203;61548](https://github.com/nodejs/node/pull/61548) - \[[`e62608bbcf`](https://github.com/nodejs/node/commit/e62608bbcf)] - **src**: improve textEncoder encode performance with simdutf (Mert Can Altin) [#&#8203;61496](https://github.com/nodejs/node/pull/61496) - \[[`0fce52d22c`](https://github.com/nodejs/node/commit/0fce52d22c)] - **src**: expose help texts into node-config-schema.json (Pietro Marchini) [#&#8203;58680](https://github.com/nodejs/node/pull/58680) - \[[`be644e2569`](https://github.com/nodejs/node/commit/be644e2569)] - **src**: throw RangeError on failed ArrayBuffer BackingStore allocation (Chengzhong Wu) [#&#8203;61480](https://github.com/nodejs/node/pull/61480) - \[[`93938a4738`](https://github.com/nodejs/node/commit/93938a4738)] - **(SEMVER-MINOR)** **stream**: add bytes() method to stream/consumers (wantaek) [#&#8203;60426](https://github.com/nodejs/node/pull/60426) - \[[`83b2bf8ea2`](https://github.com/nodejs/node/commit/83b2bf8ea2)] - **test**: split test-fs-watch-ignore-\* (Luigi Pinca) [#&#8203;61494](https://github.com/nodejs/node/pull/61494) - \[[`4726627443`](https://github.com/nodejs/node/commit/4726627443)] - **test**: aix: unflake test\_threadsafe\_function/test flaky on AIX (Stewart X Addison) [#&#8203;61560](https://github.com/nodejs/node/pull/61560) - \[[`6fbb0b7572`](https://github.com/nodejs/node/commit/6fbb0b7572)] - **test**: delay writing the files only on macOS (Luigi Pinca) [#&#8203;61532](https://github.com/nodejs/node/pull/61532) - \[[`0a952b88bb`](https://github.com/nodejs/node/commit/0a952b88bb)] - **test**: ensure removeListener event fires for once() listeners (sangwook) [#&#8203;60137](https://github.com/nodejs/node/pull/60137) - \[[`945b141c5d`](https://github.com/nodejs/node/commit/945b141c5d)] - **test**: fix flaky debugger test (Ryuhei Shima) [#&#8203;58324](https://github.com/nodejs/node/pull/58324) - \[[`256fc6770b`](https://github.com/nodejs/node/commit/256fc6770b)] - **test**: update WPT for url to [`81a2aed`](https://github.com/nodejs/node/commit/81a2aed262) (Node.js GitHub Bot) [#&#8203;61509](https://github.com/nodejs/node/pull/61509) - \[[`7725c8d596`](https://github.com/nodejs/node/commit/7725c8d596)] - **test**: skip --build-sea tests on platforms where SEA is flaky (Joyee Cheung) [#&#8203;61504](https://github.com/nodejs/node/pull/61504) - \[[`915d105ffd`](https://github.com/nodejs/node/commit/915d105ffd)] - **test\_runner**: update node-config-schema (Pietro Marchini) [#&#8203;58680](https://github.com/nodejs/node/pull/58680) - \[[`fd8be14b33`](https://github.com/nodejs/node/commit/fd8be14b33)] - **test\_runner**: fix passing `expectFailure` (Moshe Atlow) [#&#8203;61568](https://github.com/nodejs/node/pull/61568) - \[[`c0dd9826bd`](https://github.com/nodejs/node/commit/c0dd9826bd)] - **test\_runner**: differentiate todo and failure styles (Moshe Atlow) [#&#8203;61564](https://github.com/nodejs/node/pull/61564) - \[[`5fe2582329`](https://github.com/nodejs/node/commit/5fe2582329)] - **(SEMVER-MINOR)** **test\_runner**: add env option to run function (Ethan Arrowood) [#&#8203;61367](https://github.com/nodejs/node/pull/61367) - \[[`39bea2236e`](https://github.com/nodejs/node/commit/39bea2236e)] - **tools**: update gyp-next to 0.21.1 (Node.js GitHub Bot) [#&#8203;61528](https://github.com/nodejs/node/pull/61528) - \[[`d5beb4fe1c`](https://github.com/nodejs/node/commit/d5beb4fe1c)] - **tools**: move Quic dependencies behind ad-hoc flag (Antoine du Hamel) [#&#8203;61446](https://github.com/nodejs/node/pull/61446) - \[[`5c26087c29`](https://github.com/nodejs/node/commit/5c26087c29)] - **tools**: add LIEF to license builder (Chengzhong Wu) [#&#8203;61523](https://github.com/nodejs/node/pull/61523) - \[[`a181d0c43d`](https://github.com/nodejs/node/commit/a181d0c43d)] - **url**: update ada to v3.4.2 and support unicode 17 (Yagiz Nizipli) [#&#8203;61593](https://github.com/nodejs/node/pull/61593) </details> <details> <summary>pnpm/pnpm (pnpm)</summary> ### [`v10.29.2`](https://github.com/pnpm/pnpm/releases/tag/v10.29.2): pnpm 10.29.2 [Compare Source](https://github.com/pnpm/pnpm/compare/v10.29.1...v10.29.2) #### Patch Changes - Reverted a fix shipped in v10.29.1, which caused another issue [#&#8203;10571](https://github.com/pnpm/pnpm/issues/10571). Reverted fix: Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists [#&#8203;10497](https://github.com/pnpm/pnpm/issues/10497). #### Platinum Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://bit.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a> </td> </tr> </tbody> </table> #### Gold Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" /> <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" /> <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" /> <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" /> <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"> </a> </td> </tr> </tbody> </table> ### [`v10.29.1`](https://github.com/pnpm/pnpm/releases/tag/v10.29.1): pnpm 10.29.1 [Compare Source](https://github.com/pnpm/pnpm/compare/v10.28.2...v10.29.1) #### Minor Changes - The `pnpm dlx` / `pnpx` command now supports the `catalog:` protocol. Example: `pnpm dlx shx@catalog:`. - Support configuring `auditLevel` in the `pnpm-workspace.yaml` file [#&#8203;10540](https://github.com/pnpm/pnpm/issues/10540). - Support bare `workspace:` protocol without version specifier. It is now treated as `workspace:*` and resolves to the concrete version during publish [#&#8203;10436](https://github.com/pnpm/pnpm/pull/10436). #### Patch Changes - Fixed `pnpm list --json` returning incorrect paths when using global virtual store [#&#8203;10187](https://github.com/pnpm/pnpm/issues/10187). - Fix `pnpm store path` and `pnpm store status` using workspace root for path resolution when `storeDir` is relative [#&#8203;10290](https://github.com/pnpm/pnpm/issues/10290). - Fixed `pnpm run -r` failing with "No projects matched the filters" when an empty `pnpm-workspace.yaml` exists [#&#8203;10497](https://github.com/pnpm/pnpm/issues/10497). - Fixed a bug where `catalogMode: strict` would write the literal string `"catalog:"` to `pnpm-workspace.yaml` instead of the resolved version specifier when re-adding an existing catalog dependency [#&#8203;10176](https://github.com/pnpm/pnpm/issues/10176). - Fixed the documentation URL shown in `pnpm completion --help` to point to the correct page at <https://pnpm.io/completion> [#&#8203;10281](https://github.com/pnpm/pnpm/issues/10281). - Skip local `file:` protocol dependencies during `pnpm fetch`. This fixes an issue where `pnpm fetch` would fail in Docker builds when local directory dependencies were not available [#&#8203;10460](https://github.com/pnpm/pnpm/issues/10460). - Fixed `pnpm audit --json` to respect the `--audit-level` setting for both exit code and output filtering [#&#8203;10540](https://github.com/pnpm/pnpm/issues/10540). - update tar to version 7.5.7 to fix security issue Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: <a href="https://github.com/advisories/GHSA-34x7-hfp2-rc4v">CVE-2026-24842</a> - Fix `pnpm audit --fix` replacing reference overrides (e.g. `$foo`) with concrete versions [#&#8203;10325](https://github.com/pnpm/pnpm/issues/10325). - Fix `shamefullyHoist` set via `updateConfig` in `.pnpmfile.cjs` not being converted to `publicHoistPattern` [#&#8203;10271](https://github.com/pnpm/pnpm/issues/10271). - `pnpm help` should correctly report if the currently running pnpm CLI is bundled with Node.js [#&#8203;10561](https://github.com/pnpm/pnpm/issues/10561). - Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for `node_modules/.bin`, causing binaries to not be found when running commands like `pnpm exec` [#&#8203;10457](https://github.com/pnpm/pnpm/issues/10457). #### Platinum Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://bit.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a> </td> </tr> </tbody> </table> #### Gold Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" /> <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" /> <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" /> <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" /> <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"> </a> </td> </tr> </tbody> </table> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjgiLCJ1cGRhdGVkSW5WZXIiOiI0My40LjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
renovate-bot added 1 commit 2026-02-01 11:13:43 -05:00
chore(deps): update dependency @types/node to v25.2.0
All checks were successful
Build and Push Docker Image / build (pull_request) Successful in 3m1s
79f327834b
renovate-bot force-pushed renovate/minor from 79f327834b to 0ce6b26e7d 2026-02-02 06:14:10 -05:00 Compare
renovate-bot changed title from chore(deps): update dependency @types/node to v25.2.0 to chore(deps): update all-minor-updates 2026-02-02 06:14:13 -05:00
renovate-bot force-pushed renovate/minor from 0ce6b26e7d to 6ff92a0457 2026-02-02 21:13:57 -05:00 Compare
renovate-bot force-pushed renovate/minor from 6ff92a0457 to 613427893d 2026-02-02 22:14:12 -05:00 Compare
renovate-bot force-pushed renovate/minor from 613427893d to 6296a1a59e 2026-02-03 07:14:01 -05:00 Compare
renovate-bot force-pushed renovate/minor from 6296a1a59e to 1f7c278181 2026-02-03 16:14:00 -05:00 Compare
renovate-bot force-pushed renovate/minor from 1f7c278181 to 5f39a2fa6a 2026-02-04 07:13:58 -05:00 Compare
renovate-bot force-pushed renovate/minor from 5f39a2fa6a to 3ae438e185 2026-02-04 08:14:02 -05:00 Compare
renovate-bot force-pushed renovate/minor from 3ae438e185 to 73ebc51e8e 2026-02-04 11:14:14 -05:00 Compare
renovate-bot force-pushed renovate/minor from 73ebc51e8e to e7efff6efb 2026-02-05 05:14:28 -05:00 Compare
renovate-bot force-pushed renovate/minor from e7efff6efb to 109251a7f3 2026-02-05 10:14:26 -05:00 Compare
renovate-bot force-pushed renovate/minor from 109251a7f3 to 673c9e3fea 2026-02-05 20:14:01 -05:00 Compare
renovate-bot force-pushed renovate/minor from 673c9e3fea to f0958df853 2026-02-05 21:13:59 -05:00 Compare
renovate-bot force-pushed renovate/minor from f0958df853 to da5a5b7f0e 2026-02-07 00:14:24 -05:00 Compare
renovate-bot force-pushed renovate/minor from da5a5b7f0e to e7f7deacc0 2026-02-07 01:14:06 -05:00 Compare
renovate-bot force-pushed renovate/minor from e7f7deacc0 to 0061e1548d 2026-02-07 13:14:06 -05:00 Compare
renovate-bot force-pushed renovate/minor from 0061e1548d to 878c8a3c26 2026-02-07 19:14:14 -05:00 Compare
renovate-bot force-pushed renovate/minor from 878c8a3c26 to 8f45831544 2026-02-07 23:14:54 -05:00 Compare
renovate-bot force-pushed renovate/minor from 8f45831544 to af8bf791f8 2026-02-08 00:16:20 -05:00 Compare
renovate-bot force-pushed renovate/minor from af8bf791f8 to 1e315a107d 2026-02-08 06:14:16 -05:00 Compare
renovate-bot force-pushed renovate/minor from 1e315a107d to 73b6b359a1 2026-02-08 10:14:42 -05:00 Compare
renovate-bot force-pushed renovate/minor from 73b6b359a1 to 3535ce72e8 2026-02-08 11:14:16 -05:00 Compare
renovate-bot force-pushed renovate/minor from 3535ce72e8 to 9add1bd597 2026-02-08 12:14:12 -05:00 Compare
renovate-bot force-pushed renovate/minor from 9add1bd597 to f9f27e96c8 2026-02-08 13:14:11 -05:00 Compare
renovate-bot force-pushed renovate/minor from f9f27e96c8 to 8505f5f0ae 2026-02-08 21:15:55 -05:00 Compare
renovate-bot force-pushed renovate/minor from 8505f5f0ae to 02a7858c2f 2026-02-09 05:14:31 -05:00 Compare
All checks were successful
Build and Push Docker Image / build (pull_request) Successful in 3m1s
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/minor:renovate/minor
git checkout renovate/minor
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: lucasoskorep/mta-sign#6