fix(deps): update all dependencies #77

renovate · 2024-07-04T00:48:53Z

This PR contains the following updates:

Package	Change	Type	Update
@aptre/common	`^0.16.1` -> `^0.22.0`	devDependencies	minor
@aptre/protobuf-es-lite	`0.4.6` -> `0.4.9`	dependencies	patch
actions/checkout	`v4.1.7` -> `v4.2.2`	action	minor
actions/dependency-review-action	`v4.3.3` -> `v4.6.0`	action	minor
actions/setup-go	`v5.0.1` -> `v5.4.0`	action	minor
actions/setup-node	`v4.0.2` -> `v4.4.0`	action	minor
github.com/aperturerobotics/common	`v0.16.12` -> `v0.22.4`	require	minor
github.com/aperturerobotics/protobuf-go-lite	`v0.6.5` -> `v0.9.1`	require	minor
github.com/aperturerobotics/starpc	`v0.32.15` -> `v0.39.0`	require	minor
github/codeql-action	`v3.25.11` -> `v3.28.17`	action	minor
google.golang.org/protobuf	`v1.34.2` -> `v1.36.6`	require	minor
prettier (source)	`3.3.2` -> `3.5.3`	devDependencies	minor
rimraf	`^5.0.7` -> `^6.0.0`	devDependencies	major
starpc	`^0.32.8` -> `^0.39.0`	dependencies	minor
typescript (source)	`5.5.3` -> `5.8.3`	devDependencies	minor

Release Notes

aperturerobotics/common (@aptre/common)

aperturerobotics/protobuf-es-lite (@aptre/protobuf-es-lite)

`v0.4.9`

Compare Source

`v0.4.8`

Compare Source

`v0.4.7`

Compare Source

actions/checkout (actions/checkout)

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941
Expand unit test coverage for isGhes by @jww3 in https://github.com/actions/checkout/pull/1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in https://github.com/actions/checkout/pull/1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in https://github.com/actions/checkout/pull/1180
Dependency updates by @dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

actions/dependency-review-action (actions/dependency-review-action)

`v4.6.0`

Compare Source

What's Changed

Updating multiple dependency versions by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/870
Grouping minor and patch dependabot updates to lessen the number of PRs by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/876
Bump actions/stale from 9.0.0 to 9.1.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/878
Bump undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/dependency-review-action/pull/877
DR Action should link to the proxima stamp when appropriate in error messages by @AshelyTC in https://github.com/actions/dependency-review-action/pull/891
Allow deny package removal by @ellenfieldn in https://github.com/actions/dependency-review-action/pull/888
Fix typos by @omahs in https://github.com/actions/dependency-review-action/pull/893
Bump esbuild from 0.19.5 to 0.25.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/900
Bump octokit and related dependencies by @RomanIakovlev in https://github.com/actions/dependency-review-action/pull/904
Bump @babel/helpers from 7.23.2 to 7.26.10 by @dependabot in https://github.com/actions/dependency-review-action/pull/905
Bump @octokit/plugin-paginate-rest from 9.1.5 to 9.2.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/899
Update transitive dependency spdx-license-ids by @ailox in https://github.com/actions/dependency-review-action/pull/855
To not print OpenSSF Scorecard section if no dependencies scanned by @fabasoad in https://github.com/actions/dependency-review-action/pull/884
Improve usage of this action in dependency-review.yml by @fabasoad in https://github.com/actions/dependency-review-action/pull/883
Clarify comment-summary-in-pr behaviour by @Pantelis-Santorinios in https://github.com/actions/dependency-review-action/pull/902
Prepare 4.6.0 Release candidate by @brrygrdn in https://github.com/actions/dependency-review-action/pull/910

New Contributors

@AshelyTC made their first contribution in https://github.com/actions/dependency-review-action/pull/891
@ellenfieldn made their first contribution in https://github.com/actions/dependency-review-action/pull/888
@omahs made their first contribution in https://github.com/actions/dependency-review-action/pull/893
@RomanIakovlev made their first contribution in https://github.com/actions/dependency-review-action/pull/904
@ailox made their first contribution in https://github.com/actions/dependency-review-action/pull/855
@fabasoad made their first contribution in https://github.com/actions/dependency-review-action/pull/884
@Pantelis-Santorinios made their first contribution in https://github.com/actions/dependency-review-action/pull/902
@brrygrdn made their first contribution in https://github.com/actions/dependency-review-action/pull/910

Full Changelog: actions/dependency-review-action@v4.5.0...v4.6.0

`v4.5.0`

Compare Source

What's Changed

Bump got from 14.4.2 to 14.4.3 by @dependabot in https://github.com/actions/dependency-review-action/pull/844
Bump nodemon from 3.1.0 to 3.1.7 by @dependabot in https://github.com/actions/dependency-review-action/pull/847
Bump @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in https://github.com/actions/dependency-review-action/pull/849
Overriding the cross-spawn dependency to use a safe version by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/850
fix: add summary comment on failure when warn-only: true by @ebickle in https://github.com/actions/dependency-review-action/pull/827
Prepare for 4.5.0 release by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/851

New Contributors

@ebickle made their first contribution in https://github.com/actions/dependency-review-action/pull/827

Full Changelog: actions/dependency-review-action@v4...v4.5.0

`v4.4.0`

Compare Source

What's Changed

Fix for merge_group event bug by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/846

Full Changelog: actions/dependency-review-action@v4.3.5...v4.4.0

`v4.3.5`

Compare Source

What's Changed

fix: getRefs function to handle merge_group events by @louis-bompart in https://github.com/actions/dependency-review-action/pull/766
Create pull_request_template.md by @jonjanego in https://github.com/actions/dependency-review-action/pull/794
Update CONTRIBUTING.md by @jonjanego in https://github.com/actions/dependency-review-action/pull/793
Bump @types/node from 20.11.28 to 20.16.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/815
Upgrade transitive micromatch library by @elireisman in https://github.com/actions/dependency-review-action/pull/829
Do not list changed dependencies in summary by @hmaurer in https://github.com/actions/dependency-review-action/pull/828
Update stale.yaml by @jonjanego in https://github.com/actions/dependency-review-action/pull/832
Bump got from 14.4.1 to 14.4.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/822
Bump eslint-plugin-jest and ts-jest by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/840

New Contributors

@louis-bompart made their first contribution in https://github.com/actions/dependency-review-action/pull/766
@Ahmed3lmallah made their first contribution in https://github.com/actions/dependency-review-action/pull/840

Full Changelog: actions/dependency-review-action@v4.3.4...v4.3.5

`v4.3.4`

Compare Source

What's Changed

Include all added dependencies in scorecard entries by @elireisman in https://github.com/actions/dependency-review-action/pull/783
Update SPDX Expression Parsing by @febuiles in https://github.com/actions/dependency-review-action/pull/719
- This PR is a significant refactor of SPDX expression parsing that may fix some bugs, but unfortunately there are several related known issues that remain unresolved as of this version.

Full Changelog: actions/dependency-review-action@v4.3.3...v4.3.4

actions/setup-go (actions/setup-go)

`v5.4.0`

Compare Source

What's Changed

Dependency updates :

Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in https://github.com/actions/setup-go/pull/535
Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @dependabot in https://github.com/actions/setup-go/pull/536
Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in https://github.com/actions/setup-go/pull/568
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/setup-go/pull/541

New Contributors

@aparnajyothi-y made their first contribution in https://github.com/actions/setup-go/pull/568

Full Changelog: actions/setup-go@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

Use the new cache service: upgrade @actions/cache to ^4.0.0 by @Link- in https://github.com/actions/setup-go/pull/531
Configure Dependabot settings by @HarithaVattikuti in https://github.com/actions/setup-go/pull/530
Document update - permission section by @HarithaVattikuti in https://github.com/actions/setup-go/pull/533
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in https://github.com/actions/setup-go/pull/534

New Contributors

@Link- made their first contribution in https://github.com/actions/setup-go/pull/531

Full Changelog: actions/setup-go@v5...v5.3.0

`v5.2.0`

Compare Source

What's Changed

Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @Shegox in https://github.com/actions/setup-go/pull/496

New Contributors

@Shegox made their first contribution in https://github.com/actions/setup-go/pull/496

Full Changelog: actions/setup-go@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in https://github.com/actions/setup-go/pull/500
Upgrade IA Publish by @Jcambass in https://github.com/actions/setup-go/pull/502
Add architecture to cache key by @Zxilly in https://github.com/actions/setup-go/pull/493
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.
Enhance workflows and Upgrade micromatch Dependency by @priyagupta108 in https://github.com/actions/setup-go/pull/510

Bug Fixes

Revise isGhes logic by @jww3 in https://github.com/actions/setup-go/pull/511

New Contributors

@Zxilly made their first contribution in https://github.com/actions/setup-go/pull/493
@Jcambass made their first contribution in https://github.com/actions/setup-go/pull/500
@jww3 made their first contribution in https://github.com/actions/setup-go/pull/511
@priyagupta108 made their first contribution in https://github.com/actions/setup-go/pull/510

Full Changelog: actions/setup-go@v5...v5.1.0

`v5.0.2`

Compare Source

What's Changed

Bug fixes:

Fix versions check failure by @HarithaVattikuti in https://github.com/actions/setup-go/pull/479

Dependency updates:

Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @dependabot in https://github.com/actions/setup-go/pull/487

New Contributors

@HarithaVattikuti made their first contribution in https://github.com/actions/setup-go/pull/479

Full Changelog: actions/setup-go@v5...v5.0.2

actions/setup-node (actions/setup-node)

`v4.4.0`

Compare Source

What's Changed

Bug fixes:

Make eslint-compact matcher compatible with Stylelint by @FloEdelmann in https://github.com/actions/setup-node/pull/98
Add support for indented eslint output by @fregante in https://github.com/actions/setup-node/pull/1245

Enhancement:

Support private mirrors by @marco-ippolito in https://github.com/actions/setup-node/pull/1240

Dependency update:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in https://github.com/actions/setup-node/pull/1262

New Contributors

@FloEdelmann made their first contribution in https://github.com/actions/setup-node/pull/98
@fregante made their first contribution in https://github.com/actions/setup-node/pull/1245
@marco-ippolito made their first contribution in https://github.com/actions/setup-node/pull/1240

Full Changelog: actions/setup-node@v4...v4.4.0

`v4.3.0`

Compare Source

What's Changed

Dependency updates

Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in https://github.com/actions/setup-node/pull/1200
Upgrade @action/cache from 4.0.0 to 4.0.2 by @gowridurgad in https://github.com/actions/setup-node/pull/1251
Upgrade @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in https://github.com/actions/setup-node/pull/1203
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot in https://github.com/actions/setup-node/pull/1220

New Contributors

@gowridurgad made their first contribution in https://github.com/actions/setup-node/pull/1251

Full Changelog: actions/setup-node@v4...v4.3.0

`v4.2.0`

Compare Source

What's Changed

Enhance workflows and upgrade publish-actions from 0.2.2 to 0.3.0 by @aparnajyothi-y in https://github.com/actions/setup-node/pull/1174
Add recommended permissions section to readme by @benwells in https://github.com/actions/setup-node/pull/1193
Configure Dependabot settings by @HarithaVattikuti in https://github.com/actions/setup-node/pull/1192
Upgrade @actions/cache to ^4.0.0 by @priyagupta108 in https://github.com/actions/setup-node/pull/1191
Upgrade pnpm/action-setup from 2 to 4 by @dependabot in https://github.com/actions/setup-node/pull/1194
Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in https://github.com/actions/setup-node/pull/1195
Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in https://github.com/actions/setup-node/pull/1196
Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot in https://github.com/actions/setup-node/pull/1201
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/setup-node/pull/1205

New Contributors

@benwells made their first contribution in https://github.com/actions/setup-node/pull/1193

Full Changelog: actions/setup-node@v4...v4.2.0

`v4.1.0`

Compare Source

What's Changed

Resolve High Security Alerts by upgrading Dependencies by @aparnajyothi-y in https://github.com/actions/setup-node/pull/1132
Upgrade IA Publish by @Jcambass in https://github.com/actions/setup-node/pull/1134
Revise isGhes logic by @jww3 in https://github.com/actions/setup-node/pull/1148
Add architecture to cache key by @pengx17 in https://github.com/actions/setup-node/pull/843
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.

New Contributors

@jww3 made their first contribution in https://github.com/actions/setup-node/pull/1148
@pengx17 made their first contribution in https://github.com/actions/setup-node/pull/843

Full Changelog: actions/setup-node@v4...v4.1.0

`v4.0.4`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in https://github.com/actions/setup-node/pull/1125
Enhance Windows ARM64 Setup and Update micromatch Dependency by @priyagupta108 in https://github.com/actions/setup-node/pull/1126

Documentation changes:

Documentation update in the README file by @suyashgaonkar in https://github.com/actions/setup-node/pull/1106
Correct invalid 'lts' version string reference by @fulldecent in https://github.com/actions/setup-node/pull/1124

New Contributors

@suyashgaonkar made their first contribution in https://github.com/actions/setup-node/pull/1106
@priyagupta108 made their first contribution in https://github.com/actions/setup-node/pull/1126
@Jcambass made their first contribution in https://github.com/actions/setup-node/pull/1125
@fulldecent made their first contribution in https://github.com/actions/setup-node/pull/1124

Full Changelog: actions/setup-node@v4...v4.0.4

`v4.0.3`

Compare Source

What's Changed

Bug fixes:

Fix macos latest check failures by @HarithaVattikuti in https://github.com/actions/setup-node/pull/1041

Documentation changes:

Documentation update to update default Node version to 20 by @bengreeley in https://github.com/actions/setup-node/pull/949

Dependency updates:

Bump undici from 5.26.5 to 5.28.3 by @dependabot in https://github.com/actions/setup-node/pull/965
Bump braces from 3.0.2 to 3.0.3 and other dependency updates by @dependabot in https://github.com/actions/setup-node/pull/1087

New Contributors

@bengreeley made their first contribution in https://github.com/actions/setup-node/pull/949
@HarithaVattikuti made their first contribution in https://github.com/actions/setup-node/pull/1041

Full Changelog: actions/setup-node@v4...v4.0.3

aperturerobotics/protobuf-go-lite (github.com/aperturerobotics/protobuf-go-lite)

`v0.9.1`

Compare Source

`v0.9.0`

Compare Source

`v0.8.1`

Compare Source

`v0.8.0`

Compare Source

`v0.7.0`

Compare Source

aperturerobotics/starpc (github.com/aperturerobotics/starpc)

`v0.39.0`

Compare Source

`v0.38.1`

Compare Source

`v0.38.0`

Compare Source

`v0.37.1`

Compare Source

`v0.37.0`

Compare Source

`v0.36.4`

Compare Source

`v0.36.3`

Compare Source

`v0.36.2`

Compare Source

`v0.36.1`

Compare Source

`v0.36.0`

Compare Source

`v0.35.5`

Compare Source

`v0.35.4`

Compare Source

`v0.35.3`

Compare Source

`v0.35.2`

Compare Source

`v0.35.1`

Compare Source

`v0.35.0`

Compare Source

`v0.34.0`

Compare Source

`v0.33.11`

Compare Source

`v0.33.10`

Compare Source

`v0.33.9`

Compare Source

`v0.33.8`

Compare Source

`v0.33.7`

Compare Source

`v0.33.6`

Compare Source

`v0.33.5`

Compare Source

`v0.33.4`

Compare Source

`v0.33.3`

Compare Source

`v0.33.2`

Compare Source

`v0.33.1`

Compare Source

`v0.33.0`

Compare Source

`v0.32.18`

Compare Source

[`v0.32.17`](https://redir

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2024-07-04T00:49:11Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/@esbuild/openbsd-arm64@0.25.4
	npm/@esbuild/aix-ppc64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/android-arm64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/darwin-arm64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/darwin-x64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/freebsd-arm64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/freebsd-x64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/linux-arm@0.21.5 ⏵ 0.25.4
	npm/@esbuild/linux-arm64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/linux-ia32@0.21.5 ⏵ 0.25.4
	npm/@esbuild/linux-loong64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/linux-mips64el@0.21.5 ⏵ 0.25.4
	npm/@esbuild/linux-ppc64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/linux-riscv64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/linux-s390x@0.21.5 ⏵ 0.25.4
	npm/@esbuild/linux-x64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/openbsd-x64@0.21.5 ⏵ 0.25.4
	npm/@esbuild/sunos-x64@0.21.5 ⏵ 0.25.4
See 188 more rows in the dashboard

View full report

renovate bot force-pushed the renovate/all branch 8 times, most recently from 66e408e to 9641ec2 Compare July 11, 2024 01:37

renovate bot force-pushed the renovate/all branch 7 times, most recently from 10acd47 to 5306151 Compare July 16, 2024 08:18

renovate bot force-pushed the renovate/all branch 9 times, most recently from cd427d5 to 3cb31cd Compare July 26, 2024 17:02

renovate bot force-pushed the renovate/all branch 4 times, most recently from 7f59f3f to aa36101 Compare August 5, 2024 13:21

renovate bot force-pushed the renovate/all branch from aa36101 to 4d598be Compare August 6, 2024 08:44

renovate bot force-pushed the renovate/all branch 5 times, most recently from 23b6d78 to 7db3ca5 Compare March 9, 2025 05:53

renovate bot force-pushed the renovate/all branch 4 times, most recently from 1ac8f0c to 736f711 Compare March 17, 2025 17:44

renovate bot force-pushed the renovate/all branch 5 times, most recently from 370af5d to ef33c68 Compare March 24, 2025 17:10

renovate bot force-pushed the renovate/all branch 6 times, most recently from cc693af to 2074829 Compare April 8, 2025 01:53

renovate bot force-pushed the renovate/all branch 3 times, most recently from dc2a0f1 to f00ca56 Compare April 15, 2025 23:36

renovate bot force-pushed the renovate/all branch 4 times, most recently from 286ab0c to 722ea0c Compare April 28, 2025 23:59

renovate bot force-pushed the renovate/all branch from 722ea0c to d574348 Compare May 2, 2025 10:21

fix(deps): update all dependencies

ad80379

renovate bot force-pushed the renovate/all branch from d574348 to ad80379 Compare May 7, 2025 13:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all dependencies #77

fix(deps): update all dependencies #77

renovate bot commented Jul 4, 2024 •

edited

Loading

socket-security bot commented Jul 4, 2024 •

edited

Loading

fix(deps): update all dependencies #77

Are you sure you want to change the base?

fix(deps): update all dependencies #77

Conversation

renovate bot commented Jul 4, 2024 • edited Loading

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

Dependency updates :

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Bug fixes:

Dependency updates:

New Contributors

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

What's Changed

Dependency updates

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Documentation changes:

New Contributors

What's Changed

Bug fixes:

Documentation changes:

Dependency updates:

New Contributors

[v0.32.17](https://redir

Configuration

socket-security bot commented Jul 4, 2024 • edited Loading

renovate bot commented Jul 4, 2024 •

edited

Loading

[`v0.32.17`](https://redir

socket-security bot commented Jul 4, 2024 •

edited

Loading