Skip to content

chore(deps): update all dependencies - #467

Merged
JounQin merged 3 commits into
masterfrom
renovate/all
Jun 14, 2026
Merged

JounQin merged 3 commits into
masterfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented Jul 10, 2025 •

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action major v4.2.2 → v6.0.3 age confidence
actions/setup-node action major v4.4.0 → v6.4.0 age confidence
actions/stale action major v9.1.0 → v10.3.0 age confidence
autofix-ci/action (changelog) action digest 2891949 → v1.3.4
codecov/codecov-action action major v5.4.2 → v7.0.0 age confidence
node (source) major 22.15.0 → 24.16.0 age confidence
yarn (source) packageManager minor 4.9.1 → 4.16.0 age confidence

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v6

Compare Source

v5.0.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

Compare Source

What's Changed
⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v5

Compare Source

v4.3.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

actions/setup-node (actions/setup-node)

v6.4.0

Compare Source

v6.3.0

Compare Source

What's Changed

Enhancements:

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:
Bug fixes:

New Contributors

Full Changelog: actions/setup-node@v6...v6.3.0

v6.2.0

Compare Source

v6.1.0

Compare Source

What's Changed

Enhancement:
Dependency updates:
Documentation update:

Full Changelog: actions/setup-node@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

Breaking Changes

Dependency Upgrades

Full Changelog: actions/setup-node@v5...v6.0.0

v6

Compare Source

v5.0.0

Compare Source

What's Changed
Breaking Changes

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades
New Contributors

Full Changelog: actions/setup-node@v4...v5.0.0

v5

Compare Source

actions/stale (actions/stale)

v10.3.0

Compare Source

What's Changed

Bug Fix
Dependency Updates

New Contributors

Full Changelog: actions/stale@v10...v10.3.0

v10.2.0

Compare Source

v10.1.1

Compare Source

What's Changed

Bug Fix
Improvement
Dependency Upgrades

New Contributors

Full Changelog: actions/stale@v10...v10.1.1

v10.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/stale@v10...v10.1.0

v10.0.0

Compare Source

What's Changed

Breaking Changes
Enhancement
Dependency Upgrades
Documentation changes

New Contributors

Full Changelog: actions/stale@v9...v10.0.0

v10

Compare Source

codecov/codecov-action (codecov/codecov-action)

v7.0.0

Compare Source

v7

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

What's Changed

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

v6.0.0

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v6

Compare Source

v5.5.5

Compare Source

v5.5.4

Compare Source

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

v5.5.3

Compare Source

What's Changed

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

v5.5.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

nodejs/node (node)

v24.16.0: 2026-05-21, Version 24.16.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
  • [b267f6bca3] - (SEMVER-MINOR) crypto: implement randomUUIDv7() (nabeel378) #​62553
  • [ec2451b9cd] - (SEMVER-MINOR) debugger: add edit-free runtime expression probes to node inspect (Joyee Cheung) #​62713
  • [9705f628d9] - (SEMVER-MINOR) fs: add signal option to fs.stat() (Mert Can Altin) #​57775
  • [40ccfdecf9] - (SEMVER-MINOR) fs: expose frsize field in statfs (Jinho Jang) #​62277
  • [d7188af5c9] - (SEMVER-MINOR) http: harden ClientRequest options merge (Matteo Collina) #​63082
  • [aa1d8a9afc] - (SEMVER-MINOR) http: add req.signal to IncomingMessage (Akshat) #​62541
  • [6f37f7e240] - (SEMVER-MINOR) stream: propagate destruction in duplexPair (Ahmed Elhor) #​61098
  • [d14029be7f] - (SEMVER-MINOR) test_runner: support test order randomization (Pietro Marchini) #​61747
  • [d142c584cd] - (SEMVER-MINOR) test_runner: align mock timeout api (sangwook) #​62820
  • [01a9552585] - (SEMVER-MINOR) test_runner: add mock-timers support for AbortSignal.timeout (DeveloperViraj) #​60751
  • [00705a459a] - (SEMVER-MINOR) util: colorize text with hex colors (Guilherme Araújo) #​61556
Commits

✂ Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

  • Chores
    • Updated development tooling versions: Node.js runtime, package manager, and continuous integration actions to their latest releases for improved stability and security.

@changeset-bot

changeset-bot Bot commented Jul 10, 2025 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: c172d62

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets
Name Type
prettier-eslint-cli Patch

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@codesandbox-ci

codesandbox-ci Bot commented Jul 10, 2025 •

Copy link
Copy Markdown

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

@pkg-pr-new

pkg-pr-new Bot commented Jul 10, 2025 •

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/prettier-eslint-cli@467

commit: c172d62

@coderabbitai

coderabbitai Bot commented Jul 10, 2025 •

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

Node.js is pinned to version 24 in .nvmrc, Yarn is updated from 4.9.1 to 4.16.0 in .yarnrc.yml and package.json, and all five GitHub Actions workflow files receive updated pinned commit SHAs for actions/checkout (v6.0.3), actions/setup-node (v6.4.0), actions/stale (v10.3.0), codecov-action (v7.0.0), and autofix-ci/action.

Changes

Toolchain and CI Updates

Layer / File(s) Summary
Node.js and Yarn version bumps
.nvmrc, .yarnrc.yml, package.json
.nvmrc pins Node.js to 24; .yarnrc.yml updates yarnPath to yarn-4.16.0.cjs; package.json sets packageManager to yarn@4.16.0.
GitHub Actions pinned SHA updates
.github/workflows/autofix.yml, .github/workflows/ci.yml, .github/workflows/pkg-pr-new.yml, .github/workflows/release.yml, .github/workflows/stale.yml
actions/checkout bumped to v6.0.3, actions/setup-node to v6.4.0, actions/stale to v10.3.0, codecov-action to v7.0.0, and autofix-ci/action to a newer commit SHA across all workflows.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested labels

dependencies

Poem

🐇 Hop, hop, hooray for versions new!
Node jumps to twenty-four, crisp and true,
Yarn spins its thread from 4.16,
The freshest GHA pins you've ever seen.
This bunny's CI is squeaky clean! 🌿

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately summarizes the main change: updating dependencies across GitHub Actions, Node.js, and Yarn versions, which is the primary focus of the changeset.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/all

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@ellipsis-dev ellipsis-dev Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Important

Looks good to me! 👍

Reviewed everything up to 36f0b1f in 2 minutes and 18 seconds. Click for details.
  • Reviewed 97 lines of code in 5 files
  • Skipped 2 files when reviewing.
  • Skipped posting 13 draft comments. View those below.
  • Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. .github/workflows/autofix.yml:40
  • Draft comment:
    Updated autofix-ci action digest to 635ffb0c9798bd160680f18fd73371e355b85f27. Please verify that this update remains compatible with your workflow and does not introduce any unexpected behavior.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is asking the PR author to verify compatibility and check for unexpected behavior, which violates the rule against asking for confirmation or verification. It does not provide a specific suggestion or point out a specific issue.
2. .github/workflows/ci.yml:43
  • Draft comment:
    Codecov action has been updated to digest 18283e04ce6e62d37312384ff67231eb8fd56d24 (v5.4.3). Review the changelog to ensure the changes (e.g. OIDC fixes) do not impact your coverage reporting.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is purely informative and asks the PR author to review the changelog, which violates the rules against making purely informative comments and asking the author to double-check things.
3. .nvmrc:1
  • Draft comment:
    Node version updated to 22.17.0. Confirm that this aligns with the project's engine requirements and that all dependencies are compatible with this version.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is asking the PR author to confirm compatibility with the project's engine requirements and dependencies, which violates the rule against asking for confirmation or ensuring compatibility. It does not provide a specific suggestion or point out a specific issue.
4. .yarnrc.yml:10
  • Draft comment:
    Yarn path updated to use yarn-4.9.2.cjs. Ensure that the new Yarn version is fully compatible with your build scripts and plugins.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is asking the PR author to ensure compatibility of the new Yarn version with build scripts and plugins, which falls under the rule of not asking the author to ensure or verify things. It does not provide a specific suggestion or point out a specific issue.
5. package.json:15
  • Draft comment:
    The packageManager field has been updated to 'yarn@4.9.2'. This change is consistent with the Yarn upgrade in .yarnrc.yml. Confirm that this version suits the project's requirements.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is related to a dependency change, specifically the package manager version. It asks the author to confirm if the version suits the project's requirements, which is against the rules. The comment does not provide a specific suggestion or highlight a potential issue with the change.
6. package.json:59
  • Draft comment:
    Dependency 'find-up' has been updated to ^7.0.0. Note that version 7 is now pure ESM and requires Node 18+. Since the project is CommonJS-based, verify that the way 'find-up' is imported and used remains compatible.
  • Reason this comment was not posted:
    Decided after close inspection that this draft comment was likely wrong and/or not actionable: usefulness confidence = 10% vs. threshold = 50% The comment raises a valid compatibility concern, but the project already requires Node 18+ and explicitly declares itself as CommonJS. The package.json shows this is a well-maintained project with careful version management. The maintainers likely knew what they were doing with this update. The comment identifies a real technical consideration. Maybe the maintainers weren't aware of the ESM change? The project's explicit CommonJS type and Node version requirements suggest this was an intentional update with awareness of the implications. Delete the comment. It violates the rule about not asking for verification, and the project setup suggests the maintainers are already aware of the compatibility requirements.
7. package.json:60
  • Draft comment:
    Dependency 'glob' has been updated to ^11.0.0. Review its changelog for any breaking changes affecting glob patterns or its API.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is about a dependency change and suggests reviewing the changelog for breaking changes. According to the rules, comments on dependency changes should be ignored, especially if they are about versions or changelogs.
8. package.json:65
  • Draft comment:
    Dependency 'yargs' has been updated to ^18.0.0. Check for any major changes in the API that might affect command-line parsing in the CLI.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is about a dependency update, specifically 'yargs', and suggests checking for major changes in the API. This falls under the rule of not commenting on dependency changes or library versions that are not recognized. The comment does not provide a specific suggestion or point out a specific issue with the code.
9. package.json:68
  • Draft comment:
    Updated '@1stg/eslint-config' to ^10.0.0. This major bump may include breaking changes in ESLint rules/configurations, so verify that linting behaves as expected.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is about a dependency update and suggests verifying the behavior, which violates the rules. It doesn't provide a specific code suggestion or ask for a specific test to be written.
10. package.json:76
  • Draft comment:
    Updated '@types/jest' to ^30.0.0. Ensure that the new type definitions are compatible with your existing tests.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is related to a dependency change, specifically updating the '@types/jest' package. The comment asks the author to ensure compatibility, which is against the rules. Therefore, this comment should be removed.
11. package.json:80
  • Draft comment:
    Updated 'eslint-plugin-jest' to ^29.0.0. Review the plugin's changelog for rule adjustments or deprecated features that might affect your tests.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is about a dependency change, specifically updating a plugin version. It suggests reviewing the changelog for potential issues, which falls under the category of asking the author to double-check things. This violates the rule against commenting on dependency changes or asking the author to ensure behavior is intended.
12. package.json:82
  • Draft comment:
    Updated 'jest' to ^30.0.0. Since this is a major version bump, run your test suite to ensure no regressions or breaking changes have been introduced.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is about a dependency update and suggests running tests to ensure no regressions. It violates the rule against commenting on dependency changes and asking the author to ensure the change is tested.
13. package.json:86
  • Draft comment:
    Updated 'pify' to ^6.0.0. Verify that any changes in its API are properly handled in the code.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is asking the PR author to verify changes in the API of a dependency, which is not allowed according to the rules. It does not provide a specific suggestion or point out a specific issue.

Workflow ID: wflow_Z4EEXq7l5QmKdcVe

You can customize Ellipsis by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.

@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 220246f to 0ca26a9 Compare August 11, 2025 07:14
@renovate
renovate Bot force-pushed the renovate/all branch 3 times, most recently from 4e9f01b to 80654bb Compare September 5, 2025 11:58
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 0e4ceaa to 36f963b Compare September 19, 2025 03:51
@renovate
renovate Bot force-pushed the renovate/all branch 3 times, most recently from 392c682 to 433eedb Compare September 30, 2025 08:14
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 3afb35b to 1ca2e45 Compare October 10, 2025 23:48
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 771d351 to ac9d344 Compare November 8, 2025 08:08
@renovate
renovate Bot force-pushed the renovate/all branch 3 times, most recently from f0b141e to 9b628a4 Compare November 22, 2025 07:41
@renovate
renovate Bot force-pushed the renovate/all branch 4 times, most recently from 6b26cbc to fd6d7d5 Compare February 24, 2026 07:35
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from e5275a7 to fb292b5 Compare March 8, 2026 08:49
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 54feaef to 625cca1 Compare April 19, 2026 06:05
@renovate
renovate Bot force-pushed the renovate/all branch 3 times, most recently from 005d50c to 99e2042 Compare May 6, 2026 15:36
@renovate
renovate Bot force-pushed the renovate/all branch 3 times, most recently from efb7aa6 to d4d6f64 Compare May 13, 2026 03:26
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 9c92075 to 586fe9f Compare May 21, 2026 08:07
@renovate
renovate Bot force-pushed the renovate/all branch from 586fe9f to 71decf4 Compare May 23, 2026 15:10
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 2d448e0 to 472e8c2 Compare June 3, 2026 04:11
Comment thread .nvmrc Resolved
Signed-off-by: JounQin <admin@1stg.me>
@renovate

renovate Bot commented Jun 14, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@JounQin

JounQin commented Jun 14, 2026

Copy link
Copy Markdown
Member

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Jun 14, 2026 •

Copy link
Copy Markdown
✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Comment thread .github/workflows/autofix.yml Resolved
Signed-off-by: JounQin <admin@1stg.me>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant