Skip to content

chore: Update all non-major dependencies (v3.x.x)#4654

Open
zowe-robot wants to merge 1 commit into
v3.x.xfrom
renovate/v3.x.x-all-minor-patch
Open

chore: Update all non-major dependencies (v3.x.x)#4654
zowe-robot wants to merge 1 commit into
v3.x.xfrom
renovate/v3.x.x-all-minor-patch

Conversation

@zowe-robot
Copy link
Copy Markdown
Contributor

@zowe-robot zowe-robot commented May 29, 2026

This PR contains the following updates:

Package Change Age Confidence
eslint-plugin-prettier 5.5.55.5.6 age confidence
js-yaml 4.1.14.2.0 age confidence
react-hook-form (source) 7.76.17.77.0 age confidence
react-router (source) 7.15.17.16.0 age confidence
com.nimbusds:nimbus-jose-jwt 10.910.9.1 age confidence
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.21.32.22.0 age confidence
com.fasterxml.jackson.core:jackson-databind (source) 2.21.32.22.0 age confidence
com.fasterxml.jackson.core:jackson-core 2.21.32.21.4 age confidence
com.fasterxml.jackson.core:jackson-annotations (source) 2.212.22 age confidence

Release Notes

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

v5.5.6

Compare Source

Patch Changes
nodeca/js-yaml (js-yaml)

v4.2.0

Compare Source

Added
  • Added docs/safety.md with notes about processing untrusted YAML.
  • Added maxDepth (100) loader option. Not a problem, but gives a better
    exception instead of RangeError on stack overflow.
  • Added maxMergeSeqLength (20) loader option. Not a problem after merge fix,
    but an additional restriction for safety.
  • Added sourcemaps to dist/ builds.
Changed
  • Stop resolving numbers with underscores as numeric scalars, #​627.
  • Switched dev toolchains to Vite / neostandard.
  • Updated demo.
  • Reorganized tests.
  • dist/ files are no longer kept in the repository.
Fixed
  • Fix parsing of properties on the first implicit block mapping key, #​62.
  • Fix trailing whitespace handling when folding flow scalar lines, #​307.
  • Reject top-level block scalars without content indentation, #​280.
  • Ensure numbers survive round-trip, #​737.
  • Fix test coverage for issue #​221.
  • Fix flow scalar trailing whitespace folding, #​307.
  • Fix digits in YAML named tag handles.
Security
  • Fix potential DoS via quadratic complexity in merge - deduplicate repeated
    elements (makes sense for malformed files > 10K).
react-hook-form/react-hook-form (react-hook-form)

v7.77.0

Compare Source

Added
  • resetDefaultValues API
Fixed
  • Stale isDirty in subscribe payload after reset(..., { keepValues: true })
  • Preserve values with shouldUnregister
  • Inconsistent reset({}) behavior requiring double-call to take effect
  • FieldArray errors overriding nested fields
Security
  • Harden get() against prototype-path traversal (__proto__ / constructor / prototype)
Performance
  • Bundle size reduction
remix-run/react-router (react-router)

v7.16.0

Compare Source

Minor Changes
  • Stabilize future.unstable_trailingSlashAwareDataRequests as future.v8_trailingSlashAwareDataRequests (#​15098)
Patch Changes
  • Disable manifest path when lazy route dicovery is disabled (#​15068)

  • Fix browser URL creation to use the configured history window instead of the global window. (#​15066)

    • Pass the history/router window through to createBrowserURLImpl so custom window contexts keep the correct URL origin.
  • Fix useNavigation() return type to preserve discriminated union across navigation states (#​15095)

  • Widen MetaDescriptor script:ld+json type from LdJsonObject to LdJsonObject | LdJsonObject[] to permit multiple JSON-LD schemas in a single <script type="application/ld+json"> tag emitted by <Meta /> (#​15082)

connect2id/nimbus-jose-jwt (com.nimbusds:nimbus-jose-jwt)

v10.9.1

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@sonarqubecloud
Copy link
Copy Markdown

Signed-off-by: Renovate Bot <renovate@whitesourcesoftware.com>
@zowe-robot zowe-robot force-pushed the renovate/v3.x.x-all-minor-patch branch from 88bf8f4 to 296360b Compare June 1, 2026 01:17
@pull-request-size pull-request-size Bot added size/S and removed size/XS labels Jun 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file size/S

Projects

Development

Successfully merging this pull request may close these issues.

2 participants