Update @elastic/kibana-core dependencies (main)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
@types/getos (source)	devDependencies	patch	^3.0.0 -> ^3.0.4
@types/has-ansi (source)	devDependencies	major	^3.0.0 -> ^5.0.2
@​types/mime	devDependencies	major	^2.0.1 -> ^4.0.0
@types/mime-types (source)	devDependencies	patch	^2.1.0 -> ^2.1.4
@types/mock-fs (source)	devDependencies	patch	^4.13.1 -> ^4.13.4
@types/node-fetch (source)	devDependencies	patch	2.6.4 -> 2.6.12
@types/type-detect (source)	devDependencies	patch	^4.0.1 -> ^4.0.3
axios (source)	dependencies	patch	^1.7.4 -> ^1.7.7
cacheable-lookup	dependencies	major	6 -> 7.0.0
getos	dependencies	patch	^3.1.0 -> ^3.2.1
has-ansi	devDependencies	major	^3.0.0 -> ^6.0.0
load-json-file	dependencies	major	^6.2.0 -> ^7.0.1
mime-types	dependencies	patch	^2.1.27 -> ^2.1.35
mock-fs	devDependencies	minor	^5.1.2 -> ^5.4.1
node-fetch	resolutions	major	^2.6.7 -> ^3.3.2
node-fetch	dependencies	major	^2.6.7 -> ^3.3.2
react-intl (source)	dependencies	major	6.6.6 -> 7.0.1
type-detect	dependencies	minor	^4.0.8 -> ^4.1.0
utility-types	dependencies	minor	^3.10.0 -> ^3.11.0

---

Release Notes

axios/axios (axios)

v1.7.7

Compare Source

Bug Fixes

• fetch: fix stream handling in Safari by fallback to using a stream reader instead of an async iterator; (#​6584) (d198085)
• http: fixed support for IPv6 literal strings in url (#​5731) (364993f)

Contributors to this release

• Rishi556
• Dmitriy Mozgovoy

v1.7.6

Compare Source

Bug Fixes

• fetch: fix content length calculation for FormData payload; (#​6524) (085f568)
• fetch: optimize signals composing logic; (#​6582) (df9889b)

Contributors to this release

• Dmitriy Mozgovoy
• Jacques Germishuys
• kuroino721

v1.7.5

Compare Source

Bug Fixes

• adapter: fix undefined reference to hasBrowserEnv (#​6572) (7004707)
• core: add the missed implementation of AxiosError#status property; (#​6573) (6700a8a)
• core: fix ReferenceError: navigator is not defined for custom environments; (#​6567) (fed1a4b)
• fetch: fix credentials handling in Cloudflare workers (#​6533) (550d885)

Contributors to this release

• Dmitriy Mozgovoy
• Antonin Bas
• Hans Otto Wirtz

szmarczak/cacheable-lookup (cacheable-lookup)

v7.0.0

Compare Source

Breaking

• Require Node.js 14 (#​69) 08a6478
• This package is now pure ESM. Please read this.

Improvements

• Add stats for query and cache requests (#​65) ab8d286

chalk/has-ansi (has-ansi)

v6.0.0

Compare Source

Breaking

• Require Node.js 18 (#​5) 121565b

Improvements

• Add TypeScript types (#​5) 121565b

v5.0.1

Compare Source

• Upgrade dependencies 3e26beb

v5.0.0

Compare Source

Breaking

• Require Node.js 12 05a4012
• This package is now pure ESM. Please read this.

v4.0.1

Compare Source

• Small performance improvement when creating the RegExp (#​4) 709af08

v4.0.0

Compare Source

Breaking

• Require Node.js 8 5922c60

Enhancements

• Update ansi-regex dependency 5922c60

sindresorhus/load-json-file (load-json-file)

v7.0.1

Compare Source

• Fix Node.js 12 compatibility dc9799d

v7.0.0

Compare Source

Breaking

• Require Node.js 12.20 9138c28
• This package is now pure ESM. Please read this.
• Changed from a default export to named exports.

Improvements

• No dependencies!

Other

• It no longer uses graceful-fs
  That package is too hacky and the fs implementation in Node.js has improved a lot.

jshttp/mime-types (mime-types)

v2.1.35

Compare Source

===================

• deps: [email protected]
  • Add extensions from IANA for more image/* types
  • Add extension .asc to application/pgp-keys
  • Add extensions to various XML types
  • Add new upstream MIME types

tschaub/mock-fs (mock-fs)

v5.4.1

Compare Source

• Avoid errors in fs.existsSync (see [#​401][#​401])

v5.4.0

Compare Source

• Use setImmediate instead of process.nextTick (thanks @​regseb, see [#​360][#​360])

Dependency Updates

• bump chai from 4.3.4 to 4.5.0
• bump eslint from 8.21.0 to 8.57.1

v5.3.0

Compare Source

• Remove conditions for untested versions
• Remove disabled tests for mock.fs (thanks @​everett1992, see [#​391][#​391])
• Fix tests on node 20 (thanks @​everett1992, see [#​387][#​387])
• Fix timeout in failing test (thanks @​everett1992, see [#​390][#​390])
• Stop testing on Node 12 and 14

Dependency Updates

• chore(deps-dev): bump rimraf from 3.0.2 to 6.0.1
• chore(deps): bump actions/checkout from 2 to 4
• chore(deps-dev): bump mocha from 9.2.2 to 10.7.3
• chore(deps-dev): bump braces from 3.0.2 to 3.0.3
• chore(deps-dev): bump word-wrap from 1.2.3 to 1.2.4
• chore(deps): bump json5 from 1.0.1 to 1.0.2

v5.2.0

Compare Source

• Fix EACCES error on access by root user (thanks @​danielkatz, see [#​369][#​369])
• Fix bug on utimes and futimes; add support of lutimes (thanks @​3cp, see [#​366][#​366])

v5.1.4

Compare Source

• Fix for BigInt stats in Node 16.7 (thanks @​ahippler, see [#​363][#​363])

v5.1.3

Compare Source

• Fix for BigInt stats in Node 18.7 (thanks @​3cp, see [#​361][#​361])

node-fetch/node-fetch (node-fetch)

v3.3.2

Compare Source

Bug Fixes

• Remove the default connection close header. (#​1736) (8b3320d), closes #​1735 #​1473

v3.3.1

Compare Source

Bug Fixes

• release "Allow URL class object as an argument for fetch()" #​1696 (#​1716) (7b86e94)

v3.3.0

Compare Source

Features

• add static Response.json (#​1670) (55a4870)

v3.2.10

Compare Source

Bug Fixes

• ReDoS referrer (#​1611) (2880238)

v3.2.9

Compare Source

Bug Fixes

• Headers: don't forward secure headers on protocol change (#​1599) (e87b093)

v3.2.8

Compare Source

Bug Fixes

• possibly flaky test (#​1523) (11b7033)

v3.2.7

Compare Source

Bug Fixes

• always warn Request.data (#​1550) (4f43c9e)

v3.2.6

Compare Source

Bug Fixes

• undefined reference to response.body when aborted (#​1578) (1c5ed6b)

v3.2.5

Compare Source

Bug Fixes

• use space in accept-encoding values (#​1572) (a92b5d5), closes #​1571

v3.2.4

Compare Source

Bug Fixes

• don't uppercase unknown methods (#​1542) (004b3ac)

v3.2.3

Compare Source

Bug Fixes

• handle bom in text and json (#​1482) (6425e20)

v3.2.2

Compare Source

Bug Fixes

• add missing formdata export to types (#​1518) (a4ea5f9), closes #​1517

v3.2.1

Compare Source

Bug Fixes

• cancel request example import (#​1513) (61b3b5a)

v3.2.0

Compare Source

Features

• export Blob, File and FormData + utilities (#​1463) (81b1378)

v3.1.1

Compare Source

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

• core: update fetch-blob by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1371
• docs: Fix typo around sending a file by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1381
• core: (http.request): Cast URL to string before sending it to NodeJS core by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1378
• core: handle errors from the request body stream by @​mdmitry01 in https://github.com/node-fetch/node-fetch/pull/1392
• core: Better handle wrong redirect header in a response by @​tasinet in https://github.com/node-fetch/node-fetch/pull/1387
• core: Don't use buffer to make a blob by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1402
• docs: update readme for TS @​types/node-fetch by @​adamellsworth in https://github.com/node-fetch/node-fetch/pull/1405
• core: Fix logical operator priority to disallow GET/HEAD with non-empty body by @​maxshirshin in https://github.com/node-fetch/node-fetch/pull/1369
• core: Don't use global buffer by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1422
• ci: fix main branch by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1429
• core: use more node: protocol imports by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1428
• core: Warn when using data by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1421
• docs: Create SECURITY.md by @​JamieSlome in https://github.com/node-fetch/node-fetch/pull/1445
• core: don't forward secure headers to 3th party by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1449

New Contributors

• @​mdmitry01 made their first contribution in https://github.com/node-fetch/node-fetch/pull/1392
• @​tasinet made their first contribution in https://github.com/node-fetch/node-fetch/pull/1387
• @​adamellsworth made their first contribution in https://github.com/node-fetch/node-fetch/pull/1405
• @​maxshirshin made their first contribution in https://github.com/node-fetch/node-fetch/pull/1369
• @​JamieSlome made their first contribution in https://github.com/node-fetch/node-fetch/pull/1445

Full Changelog: node-fetch/node-fetch@v3.1.0...v3.1.1

v3.1.0

Compare Source

What's Changed

• fix(Body): Discourage form-data and buffer() by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1212
• fix: Pass url string to http.request by @​serverwentdown in https://github.com/node-fetch/node-fetch/pull/1268
• Fix octocat image link by @​lakuapik in https://github.com/node-fetch/node-fetch/pull/1281
• fix(Body.body): Normalize Body.body into a node:stream by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/924
• docs(Headers): Add default Host request header to README.md file by @​robertoaceves in https://github.com/node-fetch/node-fetch/pull/1316
• Update CHANGELOG.md by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1292
• Add highWaterMark to cloned properties by @​davesidious in https://github.com/node-fetch/node-fetch/pull/1162
• Update README.md to fix HTTPResponseError by @​thedanfernandez in https://github.com/node-fetch/node-fetch/pull/1135
• docs: switch url to URL by @​dhritzkiv in https://github.com/node-fetch/node-fetch/pull/1318
• fix(types): declare buffer() deprecated by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1345
• chore: fix lint by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1348
• refactor: use node: prefix for imports by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1346
• Bump data-uri-to-buffer from 3.0.1 to 4.0.0 by @​dependabot in https://github.com/node-fetch/node-fetch/pull/1319
• Bump mocha from 8.4.0 to 9.1.3 by @​dependabot in https://github.com/node-fetch/node-fetch/pull/1339
• Referrer and Referrer Policy by @​tekwiz in https://github.com/node-fetch/node-fetch/pull/1057
• Add typing for Response.redirect(url, status) by @​c-w in https://github.com/node-fetch/node-fetch/pull/1169
• chore: Correct stuff in README.md by @​Jiralite in https://github.com/node-fetch/node-fetch/pull/1361
• docs: Improve clarity of "Loading and configuring" by @​serverwentdown in https://github.com/node-fetch/node-fetch/pull/1323
• feat(Body): Added support for BodyMixin.formData() and constructing bodies with FormData by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1314
• template: Make PR template more task oriented by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1224
• docs: Update code examples by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1365

New Contributors

• @​serverwentdown made their first contribution in https://github.com/node-fetch/node-fetch/pull/1268
• @​lakuapik made their first contribution in https://github.com/node-fetch/node-fetch/pull/1281
• @​robertoaceves made their first contribution in https://github.com/node-fetch/node-fetch/pull/1316
• @​davesidious made their first contribution in https://github.com/node-fetch/node-fetch/pull/1162
• @​thedanfernandez made their first contribution in https://github.com/node-fetch/node-fetch/pull/1135
• @​dhritzkiv made their first contribution in https://github.com/node-fetch/node-fetch/pull/1318
• @​dnalborczyk made their first contribution in https://github.com/node-fetch/node-fetch/pull/1345
• @​dependabot made their first contribution in https://github.com/node-fetch/node-fetch/pull/1319
• @​c-w made their first contribution in https://github.com/node-fetch/node-fetch/pull/1169

Full Changelog: node-fetch/node-fetch@v3.0.0...v3.1.0

v3.0.0

Compare Source

version 3 is going out of a long beta period and switches to stable

One major change is that it's now a ESM only package
See changelog for more information about all the changes.

formatjs/formatjs (react-intl)

v7.0.1

Compare Source

Bug Fixes

• react-intl: remove @​formatjs/ecma402-abstract, use native TS Intl typdefs (289aa91) - by @​longlho

v7.0.0

Compare Source

Features

• react-intl: drop typescript@4 support (12ecc1b) - by @​longlho
• react-intl: remove polyfill packages in deps (31b832f) - by @​longlho

BREAKING CHANGES

• react-intl: This removes @​formatjs/intl-displaynames & @​formatjs/intl-listformat as
  deps which will reduce package size. However, this also means you'll
  need typescript@5 at least since that has new type defs for those native
  Intl APIs.

v6.8.9

Compare Source

Bug Fixes

• remove sourceMap from tsconfig, fix #​4693 (361d13b) - by @​longlho

v6.8.8

Compare Source

Note: Version bump only for package react-intl

v6.8.7

Compare Source

Bug Fixes

• react-intl: fix type inference and overload for formatMessage, fix #​4538 (5073395) - by @​longlho

v6.8.6

Compare Source

Note: Version bump only for package react-intl

v6.8.5

Compare Source

Bug Fixes

• react-intl: relax @​types/react versions (d8f6047) - by @​longlho

v6.8.4

Compare Source

Bug Fixes

• relax tslib req to 2 instead of 2.7 (930c3e8) - by @​longlho

v6.8.3

Compare Source

Note: Version bump only for package react-intl

v6.8.2

Compare Source

Note: Version bump only for package react-intl

v6.8.1

Compare Source

Note: Version bump only for package react-intl

v6.8.0

Compare Source

Bug Fixes

• react-intl: rm stray package-lock.json (00bc9f1) - by @​longlho

Features

• react-intl: adopt React.JSX types in prep for React 19 (96725cb) - by @​nstepien

v6.7.2

Compare Source

v6.7.1

Compare Source

Note: Version bump only for package react-intl

v6.7.0

Compare Source

Bug Fixes

• @​formatjs/intl: add this: void to IntlShape method, fix #​4133 (a9ba729) - by @​longlho

Features

• eslint-plugin-formatjs: add support for eslint v9 (f9a0e1b) - by @​michaelfaith

v6.6.8

Compare Source

Note: Version bump only for package react-intl

v6.6.7

Compare Source

Note: Version bump only for package react-intl

chaijs/type-detect (type-detect)

v4.1.0

Compare Source

What's Changed

• remove xvfb pre-test step in travis by @​koddsson in https://github.com/chaijs/type-detect/pull/136
• Clarify browser usage. #​139 by @​bricksphd in https://github.com/chaijs/type-detect/pull/140
• docs: add type-detect logo to README by @​keithamus in https://github.com/chaijs/type-detect/pull/128
• Update README.md by @​keithamus in https://github.com/chaijs/type-detect/pull/141
• Switch to TypeScript, add support for Deno by @​keithamus in https://github.com/chaijs/type-detect/pull/142
• Fix deno link by @​koddsson in https://github.com/chaijs/type-detect/pull/149
• Update dependencies by @​koddsson in https://github.com/chaijs/type-detect/pull/148
• Add a GitHub action for CI by @​koddsson in https://github.com/chaijs/type-detect/pull/147

New Contributors

• @​koddsson made their first contribution in https://github.com/chaijs/type-detect/pull/136
• @​bricksphd made their first contribution in https://github.com/chaijs/type-detect/pull/140

Full Changelog: chaijs/type-detect@v4.0.9...v4.1.0

piotrwitek/utility-types (utility-types)

v3.11.0

Compare Source

What's Changed

• Fix a typo in README by @​gamtiq in https://github.com/piotrwitek/utility-types/pull/153
• add "Nullish" type alias by @​zhirzh in https://github.com/piotrwitek/utility-types/pull/152
• Fix typo in $Call documentation by @​kumar303 in https://github.com/piotrwitek/utility-types/pull/154
• Link to ReturnType from $Call docs by @​kumar303 in https://github.com/piotrwitek/utility-types/pull/155
• fix: ReadOnly has a typo in its documentation (#​156) by @​cyli2014 in https://github.com/piotrwitek/utility-types/pull/157
• fix: DeepPartial with generic parameter should allow assigning {} by @​mpiniarski in https://github.com/piotrwitek/utility-types/pull/184
• Fix typo in $Call comment by @​Yuddomack in https://github.com/piotrwitek/utility-types/pull/185

New Contributors

• @​gamtiq made their first contribution in https://github.com/piotrwitek/utility-types/pull/153
• @​zhirzh made their first contribution in https://github.com/piotrwitek/utility-types/pull/152
• @​kumar303 made their first contribution in https://github.com/piotrwitek/utility-types/pull/154
• @​cyli2014 made their first contribution in https://github.com/piotrwitek/utility-types/pull/157
• @​mpiniarski made their first contribution in https://github.com/piotrwitek/utility-types/pull/184
• @​Yuddomack made their first contribution in https://github.com/piotrwitek/utility-types/pull/185

Full Changelog: piotrwitek/utility-types@v3.10.0...v3.11.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[elasticmachine]

Pinging @elastic/kibana-core (Team:Core)

[afharo]

/ci

[afharo]

/ci

[elastic-renovate-prod]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[elasticmachine]

💔 Build Failed

• Buildkite Build
• Commit: 5180b54

Failed CI Steps

• Build Kibana Distribution
• Quick Checks
• Checks
• Check OAS Snapshot
• Check Types

History

• 💔 Build #254079 failed 68af32a

[jbudz]

Approving .buildkite/package-lock.json - I haven't reviewed the rest.

It may make sense to set matchFileNames in renovate.json to keep the reviews limited to core, cc @legrego

[TinaHeiligers]

@jbudz what's our preferred approach for resolving conflicts in renovate PRs?

[afharo]

IMO, this PR will be really hard to merge because fixing all their breaking changes will make this PR really hard to review (and even less backporting to all-open branches).

IMO, we should take that list and create individual PRs (and I'd even suggest creating logical renovate groups).

[legrego]

@afharo feel free to split your deps into more logical groups in renovate. The bot should automatically abandon this PR after updating the configuration