search

hmcts / civil-camunda-bpmn-definition

MIT License
7 stars 1 forks source link

Update all non-major dependencies #1010

Closed renovate[bot] closed 4 months ago

renovate[bot] commented 4 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
camunda-bpm patch 0.0.28 -> 0.0.47 age adoption passing confidence
gradle (source) patch 7.6.1 -> 7.6.4 age adoption passing confidence
java patch 5.2.0 -> 5.2.1 age adoption passing confidence
node (source) minor 18.17.0 -> 18.20.3 age adoption passing confidence
junit:junit (source) dependencies patch 4.13.1 -> 4.13.2 age adoption passing confidence
org.yaml:snakeyaml dependencies minor 2.0 -> 2.2 age adoption passing confidence
com.fasterxml.jackson:jackson-bom dependencies minor 2.14.0-rc1 -> 2.17.1 age adoption passing confidence
com.fasterxml.jackson.core:jackson-databind (source) dependencies patch 2.17.0 -> 2.17.1 age adoption passing confidence
org.camunda.bpm:camunda-external-task-client (source) dependencies minor 7.18.0 -> 7.21.0 age adoption passing confidence
org.springframework:spring-beans dependencies patch 5.3.27 -> 5.3.36 age adoption passing confidence
org.springframework:spring-core dependencies patch 5.3.27 -> 5.3.36 age adoption passing confidence
org.junit.platform:junit-platform-engine (source) dependencies minor 1.9.2 -> 1.10.2 age adoption passing confidence
org.junit.platform:junit-platform-commons (source) dependencies minor 1.9.2 -> 1.10.2 age adoption passing confidence
org.junit.jupiter:junit-jupiter-params (source) dependencies minor 5.9.2 -> 5.10.2 age adoption passing confidence
org.junit.jupiter:junit-jupiter-engine (source) dependencies minor 5.9.2 -> 5.10.2 age adoption passing confidence
org.junit.jupiter:junit-jupiter-api (source) dependencies minor 5.9.2 -> 5.10.2 age adoption passing confidence
org.springframework.cloud:spring-cloud-dependencies (source) dependencies patch 2021.0.6 -> 2021.0.9 age adoption passing confidence
ch.qos.logback:logback-core (source, changelog) dependencies minor 1.4.14 -> 1.5.6 age adoption passing confidence
ch.qos.logback:logback-classic (source, changelog) dependencies minor 1.4.14 -> 1.5.6 age adoption passing confidence
com.squareup.okhttp3:okhttp (source) dependencies minor 4.9.2 -> 4.12.0 age adoption passing confidence
com.squareup.okio:okio dependencies minor 3.4.0 -> 3.9.0 age adoption passing confidence
org.jetbrains.kotlin:kotlin-reflect (source) dependencies minor 1.8.20 -> 1.9.24 age adoption passing confidence
org.jetbrains.kotlin:kotlin-stdlib (source) dependencies minor 1.8.20 -> 1.9.24 age adoption passing confidence
org.jetbrains.kotlin:kotlin-stdlib-common (source) dependencies minor 1.8.20 -> 1.9.24 age adoption passing confidence
org.camunda.bpm:camunda-engine (source) dependencies minor 7.18.0 -> 7.21.0 age adoption passing confidence
org.springframework.security:spring-security-rsa (source) dependencies patch 1.1.1 -> 1.1.3 age adoption passing confidence
org.springframework.security:spring-security-crypto (source) dependencies patch 5.8.7 -> 5.8.12 age adoption passing confidence
commons-io:commons-io (source) dependencies minor 2.10.0 -> 2.16.1 age adoption passing confidence
jacoco (source) dependencies patch 0.8.8 -> 0.8.12 age adoption passing confidence
checkstyle (source) dependencies minor 10.4 -> 10.17.0 age adoption passing confidence
org.sonarqube plugin minor 3.4.0.2513 -> 3.5.0.2730 age adoption passing confidence
com.github.ben-manes.versions plugin minor 0.47.0 -> 0.51.0 age adoption passing confidence
org.owasp.dependencycheck plugin minor 9.0.4 -> 9.2.0 age adoption passing confidence
io.spring.dependency-management plugin minor 1.0.12.RELEASE -> 1.1.5 age adoption passing confidence

Release Notes

gradle/gradle (gradle) ### [`v7.6.4`](https://togithub.com/gradle/gradle/releases/tag/v7.6.4): 7.6.4 [Compare Source](https://togithub.com/gradle/gradle/compare/v7.6.3...v7.6.4) This is a patch release for 7.6. We recommend using 7.6.4 instead of 7.6. [Read the Release Notes](https://docs.gradle.org/7.6.4/release-notes.html) #### Upgrade instructions Switch your build to use Gradle 7.6.4 by updating your wrapper: ./gradlew wrapper --gradle-version=7.6.4 See the Gradle [7.x upgrade guide](https://docs.gradle.org/7.6.4/userguide/upgrading_version\_7.html) to learn about deprecations, breaking changes and other considerations when upgrading. For Java, Groovy, Kotlin and Android compatibility, see the [full compatibility notes](https://docs.gradle.org/7.6.4/userguide/compatibility.html). #### Reporting problems If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). We hope you will build happiness with Gradle, and we look forward to your feedback via [Twitter](https://twitter.com/gradle) or on [GitHub](https://togithub.com/gradle). ### [`v7.6.3`](https://togithub.com/gradle/gradle/releases/tag/v7.6.3): 7.6.3 [Compare Source](https://togithub.com/gradle/gradle/compare/v7.6.2...v7.6.3) This is a patch release for 7.6. We recommend using 7.6.3 instead of 7.6. This release addresses two security vulnerabilities: - [Incorrect permission assignment for symlinked files used in copy or archiving operations](https://togithub.com/gradle/gradle/security/advisories/GHSA-43r3-pqhv-f7h9) - [Possible local text file exfiltration by XML External entity injection](https://togithub.com/gradle/gradle/security/advisories/GHSA-mrff-q8qj-xvg8) It also fixes the following issues: - [#​25781](https://togithub.com/gradle/gradle/issues/25781) Backport finalized task performance fix to 7.6.x - [#​25802](https://togithub.com/gradle/gradle/issues/25802) Backport cgroups fix to 7.6.x [Read the Release Notes](https://docs.gradle.org/7.6.3/release-notes.html) #### Upgrade Instructions Switch your build to use Gradle 7.6.3 by updating your wrapper: ./gradlew wrapper --gradle-version=7.6.3 See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6.3/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.3. #### Reporting Problems If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). ### [`v7.6.2`](https://togithub.com/gradle/gradle/releases/tag/v7.6.2): 7.6.2 [Compare Source](https://togithub.com/gradle/gradle/compare/v7.6.1...v7.6.2) This is a patch release for 7.6. We recommend using 7.6.2 instead of 7.6. This release addresses two security vulnerabilities: - [Dependency cache path traversal](https://togithub.com/gradle/gradle/security/advisories/GHSA-2h6c-rv6q-494v) - [Path traversal vulnerabilities in handling of Tar archives](https://togithub.com/gradle/gradle/security/advisories/GHSA-84mw-qh6q-v842) It also fixes the following issues: - [#​23201](https://togithub.com/gradle/gradle/issues/23201) Backport dependency upgrades to 7.x - [#​23202](https://togithub.com/gradle/gradle/issues/23202) Backport Scala incremental compilation fixes - [#​23325](https://togithub.com/gradle/gradle/issues/23325) Backport JSoup update to resolve CVE-2022-36033 - [#​23458](https://togithub.com/gradle/gradle/issues/23458) Backport JUnit5 dynamic test logging bug fix - [#​23681](https://togithub.com/gradle/gradle/issues/23681) Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations \[backport 7.x] - [#​23922](https://togithub.com/gradle/gradle/issues/23922) Backport "Use Compiler API data for incremental compilation after a failure" to 7.x - [#​23951](https://togithub.com/gradle/gradle/issues/23951) Exclude rule merging: missing optimization \[Backport 7.x] - [#​24132](https://togithub.com/gradle/gradle/issues/24132) Extending an already resolved configuration no longer works correctly \[backport 7.x] - [#​24234](https://togithub.com/gradle/gradle/issues/24234) 7.6.1 breaks gradle-consistent-versions - [#​24390](https://togithub.com/gradle/gradle/issues/24390) Gradle 7.4 fails on multi release jar's with JDK 19 code - [#​24439](https://togithub.com/gradle/gradle/issues/24439) Gradle complains about invalid tool chain - picking up the source package location - it should just ignore them \[Backport] - [#​24443](https://togithub.com/gradle/gradle/issues/24443) Maven artifact referenced only in dependency constraints raises IllegalStateException: Corrupt serialized resolution result \[backport] - [#​24901](https://togithub.com/gradle/gradle/issues/24901) Backport fix for test exception that cannot be deserialized to 7.x [Read the Release Notes](https://docs.gradle.org/7.6.2/release-notes.html) #### Upgrade Instructions Switch your build to use Gradle 7.6.2 by updating your wrapper: ./gradlew wrapper --gradle-version=7.6.2 See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6.2/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.2. #### Reporting Problems If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss).
nodejs/node (node) ### [`v18.20.3`](https://togithub.com/nodejs/node/releases/tag/v18.20.3): 2024-05-21, Version 18.20.3 'Hydrogen' (LTS), @​richardlau [Compare Source](https://togithub.com/nodejs/node/compare/v18.20.2...v18.20.3) ##### Notable Changes This release fixes a regression introduced in Node.js 18.19.0 where `http.server.close()` was incorrectly closing idle connections. A fix has also been included for compiling Node.js from source with newer versions of Clang. The list of keys used to sign releases has been synchronized with the current list from the `main` branch. ##### Updated dependencies - acorn updated to 8.11.3. - acorn-walk updated to 8.3.2. - ada updated to 2.7.8. - c-ares updated to 1.28.1. - corepack updated to 0.28.0. - nghttp2 updated to 1.61.0. - ngtcp2 updated to 1.3.0. - npm updated to 10.7.0. Includes a fix from npm@10.5.1 to limit the number of open connections [npm/cli#7324](https://togithub.com/npm/cli/pull/7324). - simdutf updated to 5.2.4. - zlib updated to 1.3.0.1-motley-7d77fb7. ##### Commits - \[[`0c260e10e7`](https://togithub.com/nodejs/node/commit/0c260e10e7)] - **deps**: update zlib to 1.3.0.1-motley-7d77fb7 (Node.js GitHub Bot) [#​52516](https://togithub.com/nodejs/node/pull/52516) - \[[`1152d7f919`](https://togithub.com/nodejs/node/commit/1152d7f919)] - **deps**: update zlib to 1.3.0.1-motley-24c07df (Node.js GitHub Bot) [#​52199](https://togithub.com/nodejs/node/pull/52199) - \[[`755399db9d`](https://togithub.com/nodejs/node/commit/755399db9d)] - **deps**: update zlib to 1.3.0.1-motley-24342f6 (Node.js GitHub Bot) [#​52123](https://togithub.com/nodejs/node/pull/52123) - \[[`af3e32073b`](https://togithub.com/nodejs/node/commit/af3e32073b)] - **deps**: update ada to 2.7.8 (Node.js GitHub Bot) [#​52517](https://togithub.com/nodejs/node/pull/52517) - \[[`e4ea2db58b`](https://togithub.com/nodejs/node/commit/e4ea2db58b)] - **deps**: update c-ares to 1.28.1 (Node.js GitHub Bot) [#​52285](https://togithub.com/nodejs/node/pull/52285) - \[[`14e857bea2`](https://togithub.com/nodejs/node/commit/14e857bea2)] - **deps**: update corepack to 0.28.0 (Node.js GitHub Bot) [#​52616](https://togithub.com/nodejs/node/pull/52616) - \[[`7f5dd44ca6`](https://togithub.com/nodejs/node/commit/7f5dd44ca6)] - **deps**: upgrade npm to 10.7.0 (npm team) [#​52767](https://togithub.com/nodejs/node/pull/52767) - \[[`78f84ebb09`](https://togithub.com/nodejs/node/commit/78f84ebb09)] - **deps**: update ngtcp2 to 1.3.0 (Node.js GitHub Bot) [#​51796](https://togithub.com/nodejs/node/pull/51796) - \[[`1f489a3753`](https://togithub.com/nodejs/node/commit/1f489a3753)] - **deps**: update ngtcp2 to 1.2.0 (Node.js GitHub Bot) [#​51584](https://togithub.com/nodejs/node/pull/51584) - \[[`3034968225`](https://togithub.com/nodejs/node/commit/3034968225)] - **deps**: update ngtcp2 to 1.1.0 (Node.js GitHub Bot) [#​51319](https://togithub.com/nodejs/node/pull/51319) - \[[`1aa9da467f`](https://togithub.com/nodejs/node/commit/1aa9da467f)] - **deps**: add nghttp3/\*\*/.deps to .gitignore (Luigi Pinca) [#​51400](https://togithub.com/nodejs/node/pull/51400) - \[[`28c0c78c9a`](https://togithub.com/nodejs/node/commit/28c0c78c9a)] - **deps**: update ngtcp2 and nghttp3 (James M Snell) [#​51291](https://togithub.com/nodejs/node/pull/51291) - \[[`8fd5a35364`](https://togithub.com/nodejs/node/commit/8fd5a35364)] - **deps**: upgrade npm to 10.5.2 (npm team) [#​52458](https://togithub.com/nodejs/node/pull/52458) - \[[`2c53ff31c9`](https://togithub.com/nodejs/node/commit/2c53ff31c9)] - **deps**: update acorn-walk to 8.3.2 (Node.js GitHub Bot) [#​51457](https://togithub.com/nodejs/node/pull/51457) - \[[`12f28f33c2`](https://togithub.com/nodejs/node/commit/12f28f33c2)] - **deps**: update acorn to 8.11.3 (Node.js GitHub Bot) [#​51317](https://togithub.com/nodejs/node/pull/51317) - \[[`dddb7eb3e0`](https://togithub.com/nodejs/node/commit/dddb7eb3e0)] - **deps**: update acorn-walk to 8.3.1 (Node.js GitHub Bot) [#​50457](https://togithub.com/nodejs/node/pull/50457) - \[[`c86550e607`](https://togithub.com/nodejs/node/commit/c86550e607)] - **deps**: update acorn-walk to 8.3.0 (Node.js GitHub Bot) [#​50457](https://togithub.com/nodejs/node/pull/50457) - \[[`9500817f66`](https://togithub.com/nodejs/node/commit/9500817f66)] - **deps**: update acorn to 8.11.2 (Node.js GitHub Bot) [#​50460](https://togithub.com/nodejs/node/pull/50460) - \[[`7a8c7b6275`](https://togithub.com/nodejs/node/commit/7a8c7b6275)] - **deps**: update ada to 2.7.7 (Node.js GitHub Bot) [#​52028](https://togithub.com/nodejs/node/pull/52028) - \[[`b199889943`](https://togithub.com/nodejs/node/commit/b199889943)] - **deps**: update corepack to 0.26.0 (Node.js GitHub Bot) [#​52027](https://togithub.com/nodejs/node/pull/52027) - \[[`052b0ba0c6`](https://togithub.com/nodejs/node/commit/052b0ba0c6)] - **deps**: upgrade npm to 10.5.1 (npm team) [#​52351](https://togithub.com/nodejs/node/pull/52351) - \[[`209823d3af`](https://togithub.com/nodejs/node/commit/209823d3af)] - **deps**: update simdutf to 5.2.4 (Node.js GitHub Bot) [#​52473](https://togithub.com/nodejs/node/pull/52473) - \[[`5114cbe18a`](https://togithub.com/nodejs/node/commit/5114cbe18a)] - **deps**: update simdutf to 5.2.3 (Yagiz Nizipli) [#​52381](https://togithub.com/nodejs/node/pull/52381) - \[[`be30309ea0`](https://togithub.com/nodejs/node/commit/be30309ea0)] - **deps**: update simdutf to 5.0.0 (Daniel Lemire) [#​52138](https://togithub.com/nodejs/node/pull/52138) - \[[`b56f66e250`](https://togithub.com/nodejs/node/commit/b56f66e250)] - **deps**: update simdutf to 4.0.9 (Node.js GitHub Bot) [#​51655](https://togithub.com/nodejs/node/pull/51655) - \[[`a9f3b9d9d1`](https://togithub.com/nodejs/node/commit/a9f3b9d9d1)] - **deps**: update nghttp2 to 1.61.0 (Node.js GitHub Bot) [#​52395](https://togithub.com/nodejs/node/pull/52395) - \[[`1b6fa70620`](https://togithub.com/nodejs/node/commit/1b6fa70620)] - **deps**: update nghttp2 to 1.60.0 (Node.js GitHub Bot) [#​51948](https://togithub.com/nodejs/node/pull/51948) - \[[`3c9dbbf4d4`](https://togithub.com/nodejs/node/commit/3c9dbbf4d4)] - **deps**: update nghttp2 to 1.59.0 (Node.js GitHub Bot) [#​51581](https://togithub.com/nodejs/node/pull/51581) - \[[`e28316da54`](https://togithub.com/nodejs/node/commit/e28316da54)] - **deps**: update nghttp2 to 1.58.0 (Node.js GitHub Bot) [#​50441](https://togithub.com/nodejs/node/pull/50441) - \[[`678641f470`](https://togithub.com/nodejs/node/commit/678641f470)] - **deps**: V8: cherry-pick [`d15d49b`](https://togithub.com/nodejs/node/commit/d15d49b09dc7) (Bo Anderson) [#​52337](https://togithub.com/nodejs/node/pull/52337) - \[[`1147fee7d9`](https://togithub.com/nodejs/node/commit/1147fee7d9)] - **doc**: remove ableist language from crypto (Jamie King) [#​52063](https://togithub.com/nodejs/node/pull/52063) - \[[`5e93eae972`](https://togithub.com/nodejs/node/commit/5e93eae972)] - **doc**: add release key for marco-ippolito (marco-ippolito) [#​52257](https://togithub.com/nodejs/node/pull/52257) - \[[`6689a98488`](https://togithub.com/nodejs/node/commit/6689a98488)] - **http**: remove closeIdleConnections function while calling server close (Kumar Rishav) [#​52336](https://togithub.com/nodejs/node/pull/52336) - \[[`71616e8a8a`](https://togithub.com/nodejs/node/commit/71616e8a8a)] - **node-api**: make tsfn accept napi_finalize once more (Gabriel Schulhof) [#​51801](https://togithub.com/nodejs/node/pull/51801) - \[[`d9d9e62474`](https://togithub.com/nodejs/node/commit/d9d9e62474)] - **src**: avoid draining platform tasks at FreeEnvironment (Chengzhong Wu) [#​51290](https://togithub.com/nodejs/node/pull/51290) - \[[`e5fc8ec9fc`](https://togithub.com/nodejs/node/commit/e5fc8ec9fc)] - **test**: skip v8-updates/test-linux-perf (Michaël Zasso) [#​49639](https://togithub.com/nodejs/node/pull/49639) - \[[`351ef189ca`](https://togithub.com/nodejs/node/commit/351ef189ca)] - **test**: v8: Add test-linux-perf-logger test suite (Luke Albao) [#​50352](https://togithub.com/nodejs/node/pull/50352) - \[[`5cec2efc31`](https://togithub.com/nodejs/node/commit/5cec2efc31)] - **test**: reduce the number of requests and parsers (Luigi Pinca) [#​50240](https://togithub.com/nodejs/node/pull/50240) - \[[`5186e453d9`](https://togithub.com/nodejs/node/commit/5186e453d9)] - **test**: deflake test-http-regr-[gh-2928](https://togithub.com/nodejs/node/issues/2928) (Luigi Pinca) [#​49574](https://togithub.com/nodejs/node/pull/49574) - \[[`c60cd67e1c`](https://togithub.com/nodejs/node/commit/c60cd67e1c)] - **test**: skip test for dynamically linked OpenSSL (Richard Lau) [#​52542](https://togithub.com/nodejs/node/pull/52542) ### [`v18.20.2`](https://togithub.com/nodejs/node/releases/tag/v18.20.2): 2024-04-10, Version 18.20.2 'Hydrogen' (LTS), @​RafaelGSS [Compare Source](https://togithub.com/nodejs/node/compare/v18.20.1...v18.20.2) This is a security release. ##### Notable Changes - CVE-2024-27980 - Command injection via args parameter of `child_process.spawn` without shell option enabled on Windows ##### Commits - \[[`6627222409`](https://togithub.com/nodejs/node/commit/6627222409)] - **src**: disallow direct .bat and .cmd file spawning (Ben Noordhuis) [nodejs-private/node-private#564](https://togithub.com/nodejs-private/node-private/pull/564) ### [`v18.20.1`](https://togithub.com/nodejs/node/compare/v18.20.0...v18.20.1) [Compare Source](https://togithub.com/nodejs/node/compare/v18.20.0...v18.20.1) ### [`v18.20.0`](https://togithub.com/nodejs/node/compare/v18.19.1...v18.20.0) [Compare Source](https://togithub.com/nodejs/node/compare/v18.19.1...v18.20.0) ### [`v18.19.1`](https://togithub.com/nodejs/node/compare/v18.19.0...v18.19.1) [Compare Source](https://togithub.com/nodejs/node/compare/v18.19.0...v18.19.1) ### [`v18.19.0`](https://togithub.com/nodejs/node/compare/v18.18.2...v18.19.0) [Compare Source](https://togithub.com/nodejs/node/compare/v18.18.2...v18.19.0) ### [`v18.18.2`](https://togithub.com/nodejs/node/compare/v18.18.1...v18.18.2) [Compare Source](https://togithub.com/nodejs/node/compare/v18.18.1...v18.18.2) ### [`v18.18.1`](https://togithub.com/nodejs/node/releases/tag/v18.18.1): 2023-10-10, Version 18.18.1 'Hydrogen' (LTS), @​richardlau [Compare Source](https://togithub.com/nodejs/node/compare/v18.18.0...v18.18.1) ##### Notable Changes This release addresses some regressions that appeared in Node.js 18.18.0: - (Windows) FS can not handle certain characters in file name [#​48673](https://togithub.com/nodejs/node/issues/48673) - 18 and 20 node images give error - Text file busy (after re-build images) [nodejs/docker-node#1968](https://togithub.com/nodejs/docker-node/issues/1968) - libuv update in 18.18.0 breaks webpack's thread-loader [#​49911](https://togithub.com/nodejs/node/issues/49911) The libuv 1.45.0 and 1.46.0 updates that were released in Node.js 18.18.0 have been temporarily reverted. ##### Commits - \[[`3e3a75cc46`](https://togithub.com/nodejs/node/commit/3e3a75cc46)] - ***Revert*** "**build**: sync libuv header change" (Richard Lau) [#​50036](https://togithub.com/nodejs/node/pull/50036) - \[[`14ece2c479`](https://togithub.com/nodejs/node/commit/14ece2c479)] - ***Revert*** "**deps**: upgrade to libuv 1.45.0" (Richard Lau) [#​50036](https://togithub.com/nodejs/node/pull/50036) - \[[`022352acbe`](https://togithub.com/nodejs/node/commit/022352acbe)] - ***Revert*** "**deps**: upgrade to libuv 1.46.0" (Richard Lau) [#​50036](https://togithub.com/nodejs/node/pull/50036) - \[[`d9f138189c`](https://togithub.com/nodejs/node/commit/d9f138189c)] - ***Revert*** "**deps**: add missing thread-common.c in uv.gyp" (Richard Lau) [#​50036](https://togithub.com/nodejs/node/pull/50036) - \[[`7a3e1ffbb8`](https://togithub.com/nodejs/node/commit/7a3e1ffbb8)] - **fs**: make sure to write entire buffer (Robert Nagy) [#​49211](https://togithub.com/nodejs/node/pull/49211) - \[[`04cba95a67`](https://togithub.com/nodejs/node/commit/04cba95a67)] - **test**: add `tmpdir.resolve()` (Livia Medeiros) [#​49079](https://togithub.com/nodejs/node/pull/49079) ### [`v18.18.0`](https://togithub.com/nodejs/node/releases/tag/v18.18.0): 2023-09-18, Version 18.18.0 'Hydrogen' (LTS), @​ruyadorno [Compare Source](https://togithub.com/nodejs/node/compare/v18.17.1...v18.18.0) ##### Notable Changes - \[[`7dc731d4bf`](https://togithub.com/nodejs/node/commit/7dc731d4bf)] - **build**: sync libuv header change (Jiawen Geng) [#​48078](https://togithub.com/nodejs/node/pull/48078) - \[[`490fc004b0`](https://togithub.com/nodejs/node/commit/490fc004b0)] - **crypto**: update root certificates to NSS 3.93 (Node.js GitHub Bot) [#​49341](https://togithub.com/nodejs/node/pull/49341) - \[[`dd8cd97d4d`](https://togithub.com/nodejs/node/commit/dd8cd97d4d)] - **crypto**: update root certificates to NSS 3.90 (Node.js GitHub Bot) [#​48416](https://togithub.com/nodejs/node/pull/48416) - \[[`ea23870bec`](https://togithub.com/nodejs/node/commit/ea23870bec)] - **deps**: add missing thread-common.c in uv.gyp (Santiago Gimeno) [#​48078](https://togithub.com/nodejs/node/pull/48078) - \[[`88855e0b1b`](https://togithub.com/nodejs/node/commit/88855e0b1b)] - **deps**: upgrade to libuv 1.46.0 (Santiago Gimeno) [#​48078](https://togithub.com/nodejs/node/pull/48078) - \[[`fb2b80fca0`](https://togithub.com/nodejs/node/commit/fb2b80fca0)] - **deps**: upgrade to libuv 1.45.0 (Santiago Gimeno) [#​48078](https://togithub.com/nodejs/node/pull/48078) - \[[`249879e46c`](https://togithub.com/nodejs/node/commit/249879e46c)] - **doc**: add atlowChemi to collaborators (atlowChemi) [#​48757](https://togithub.com/nodejs/node/pull/48757) - \[[`e8dc7bde6a`](https://togithub.com/nodejs/node/commit/e8dc7bde6a)] - **doc**: add vmoroz to collaborators (Vladimir Morozov) [#​48527](https://togithub.com/nodejs/node/pull/48527) - \[[`a30f2fbcc1`](https://togithub.com/nodejs/node/commit/a30f2fbcc1)] - **doc**: add kvakil to collaborators (Keyhan Vakil) [#​48449](https://togithub.com/nodejs/node/pull/48449) - \[[`c39b7c240e`](https://togithub.com/nodejs/node/commit/c39b7c240e)] - **(SEMVER-MINOR)** **esm**: add `--import` flag (Moshe Atlow) [#​43942](https://togithub.com/nodejs/node/pull/43942) - \[[`a68a67f54d`](https://togithub.com/nodejs/node/commit/a68a67f54d)] - **(SEMVER-MINOR)** **events**: allow safely adding listener to abortSignal (Chemi Atlow) [#​48596](https://togithub.com/nodejs/node/pull/48596) - \[[`3a8586bee2`](https://togithub.com/nodejs/node/commit/3a8586bee2)] - **fs, stream**: initial `Symbol.dispose` and `Symbol.asyncDispose` support (Moshe Atlow) [#​48518](https://togithub.com/nodejs/node/pull/48518) - \[[`863bdb785d`](https://togithub.com/nodejs/node/commit/863bdb785d)] - **net**: add autoSelectFamily global getter and setter (Paolo Insogna) [#​45777](https://togithub.com/nodejs/node/pull/45777) - \[[`c59ae86ba0`](https://togithub.com/nodejs/node/commit/c59ae86ba0)] - **(SEMVER-MINOR)** **url**: add value argument to has and delete methods (Sankalp Shubham) [#​47885](https://togithub.com/nodejs/node/pull/47885) ##### Commits - \[[`d1f43317ea`](https://togithub.com/nodejs/node/commit/d1f43317ea)] - **benchmark**: add bar.R (Rafael Gonzaga) [#​47729](https://togithub.com/nodejs/node/pull/47729) - \[[`4f74be3c92`](https://togithub.com/nodejs/node/commit/4f74be3c92)] - **benchmark**: refactor crypto oneshot (Filip Skokan) [#​48267](https://togithub.com/nodejs/node/pull/48267) - \[[`fe9da9df0f`](https://togithub.com/nodejs/node/commit/fe9da9df0f)] - **benchmark**: add crypto.create\*Key (Filip Skokan) [#​48284](https://togithub.com/nodejs/node/pull/48284) - \[[`9cb18b3e9d`](https://togithub.com/nodejs/node/commit/9cb18b3e9d)] - **build**: do not pass target toolchain flags to host toolchain (Ivan Trubach) [#​48597](https://togithub.com/nodejs/node/pull/48597) - \[[`7dc731d4bf`](https://togithub.com/nodejs/node/commit/7dc731d4bf)] - **build**: sync libuv header change (Jiawen Geng) [#​48078](https://togithub.com/nodejs/node/pull/48078) - \[[`211a4f88a9`](https://togithub.com/nodejs/node/commit/211a4f88a9)] - **build**: update action to close stale PRs (Michael Dawson) [#​48196](https://togithub.com/nodejs/node/pull/48196) - \[[`cc33a1864b`](https://togithub.com/nodejs/node/commit/cc33a1864b)] - **child_process**: harden against prototype pollution (Livia Medeiros) [#​48726](https://togithub.com/nodejs/node/pull/48726) - \[[`b5df084e1e`](https://togithub.com/nodejs/node/commit/b5df084e1e)] - **child_process**: use addAbortListener (atlowChemi) [#​48550](https://togithub.com/nodejs/node/pull/48550) - \[[`611db8df1a`](https://togithub.com/nodejs/node/commit/611db8df1a)] - **child_process**: support `Symbol.dispose` (Moshe Atlow) [#​48551](https://togithub.com/nodejs/node/pull/48551) - \[[`490fc004b0`](https://togithub.com/nodejs/node/commit/490fc004b0)] - **crypto**: update root certificates to NSS 3.93 (Node.js GitHub Bot) [#​49341](https://togithub.com/nodejs/node/pull/49341) - \[[`dd8cd97d4d`](https://togithub.com/nodejs/node/commit/dd8cd97d4d)] - **crypto**: update root certificates to NSS 3.90 (Node.js GitHub Bot) [#​48416](https://togithub.com/nodejs/node/pull/48416) - \[[`b2bc839d4c`](https://togithub.com/nodejs/node/commit/b2bc839d4c)] - **crypto**: remove OPENSSL_FIPS guard for OpenSSL 3 (Richard Lau) [#​48392](https://togithub.com/nodejs/node/pull/48392) - \[[`c8da8c80b9`](https://togithub.com/nodejs/node/commit/c8da8c80b9)] - **deps**: update nghttp2 to 1.55.0 (Node.js GitHub Bot) [#​48746](https://togithub.com/nodejs/node/pull/48746) - \[[`7e04242dcb`](https://togithub.com/nodejs/node/commit/7e04242dcb)] - **deps**: update minimatch to 9.0.3 (Node.js GitHub Bot) [#​48704](https://togithub.com/nodejs/node/pull/48704) - \[[`ea23870bec`](https://togithub.com/nodejs/node/commit/ea23870bec)] - **deps**: add missing thread-common.c in uv.gyp (Santiago Gimeno) [#​48078](https://togithub.com/nodejs/node/pull/48078) - \[[`88855e0b1b`](https://togithub.com/nodejs/node/commit/88855e0b1b)] - **deps**: upgrade to libuv 1.46.0 (Santiago Gimeno) [#​48078](https://togithub.com/nodejs/node/pull/48078) - \[[`fb2b80fca0`](https://togithub.com/nodejs/node/commit/fb2b80fca0)] - **deps**: upgrade to libuv 1.45.0 (Santiago Gimeno) [#​48078](https://togithub.com/nodejs/node/pull/48078) - \[[`59fca4e09a`](https://togithub.com/nodejs/node/commit/59fca4e09a)] - **deps**: update acorn to 8.10.0 (Node.js GitHub Bot) [#​48713](https://togithub.com/nodejs/node/pull/48713) - \[[`bcb255d5a8`](https://togithub.com/nodejs/node/commit/bcb255d5a8)] - **deps**: V8: cherry-pick [`cb00db4`](https://togithub.com/nodejs/node/commit/cb00db4dba6c) (Keyhan Vakil) [#​48671](https://togithub.com/nodejs/node/pull/48671) - \[[`65a6c90fc6`](https://togithub.com/nodejs/node/commit/65a6c90fc6)] - **deps**: update acorn to 8.9.0 (Node.js GitHub Bot) [#​48484](https://togithub.com/nodejs/node/pull/48484) - \[[`6b6d5d91e9`](https://togithub.com/nodejs/node/commit/6b6d5d91e9)] - **deps**: update zlib to 1.2.13.1-motley-f81f385 (Node.js GitHub Bot) [#​48541](https://togithub.com/nodejs/node/pull/48541) - \[[`56249b0770`](https://togithub.com/nodejs/node/commit/56249b0770)] - **deps**: update googletest to [`ec4fed9`](https://togithub.com/nodejs/node/commit/ec4fed9) (Node.js GitHub Bot) [#​48538](https://togithub.com/nodejs/node/pull/48538) - \[[`8914a5204a`](https://togithub.com/nodejs/node/commit/8914a5204a)] - **deps**: update minimatch to 9.0.2 (Node.js GitHub Bot) [#​48542](https://togithub.com/nodejs/node/pull/48542) - \[[`1b960d9988`](https://togithub.com/nodejs/node/commit/1b960d9988)] - **deps**: update icu to 73.2 (Node.js GitHub Bot) [#​48502](https://togithub.com/nodejs/node/pull/48502) - \[[`f0e2e3c549`](https://togithub.com/nodejs/node/commit/f0e2e3c549)] - **deps**: update zlib to 1.2.13.1-motley-3ca9f16 (Node.js GitHub Bot) [#​48413](https://togithub.com/nodejs/node/pull/48413) - \[[`9cf8fe6b93`](https://togithub.com/nodejs/node/commit/9cf8fe6b93)] - **deps**: upgrade npm to 9.8.1 (npm team) [#​48838](https://togithub.com/nodejs/node/pull/48838) - \[[`d9ff473ff3`](https://togithub.com/nodejs/node/commit/d9ff473ff3)] - **deps**: upgrade npm to 9.8.0 (npm team) [#​48665](https://togithub.com/nodejs/node/pull/48665) - \[[`4a6177daad`](https://togithub.com/nodejs/node/commit/4a6177daad)] - **deps**: upgrade npm to 9.7.2 (npm team) [#​48514](https://togithub.com/nodejs/node/pull/48514) - \[[`104b58feb1`](https://togithub.com/nodejs/node/commit/104b58feb1)] - **deps**: update ada to 2.6.0 (Node.js GitHub Bot) [#​48896](https://togithub.com/nodejs/node/pull/48896) - \[[`7f7a125d78`](https://togithub.com/nodejs/node/commit/7f7a125d78)] - **deps**: update corepack to 0.19.0 (Node.js GitHub Bot) [#​48540](https://togithub.com/nodejs/node/pull/48540) - \[[`5e1eb451d1`](https://togithub.com/nodejs/node/commit/5e1eb451d1)] - **deps**: update corepack to 0.18.1 (Node.js GitHub Bot) [#​48483](https://togithub.com/nodejs/node/pull/48483) - \[[`3be53358bc`](https://togithub.com/nodejs/node/commit/3be53358bc)] - **deps**: add loong64 config into openssl gypi (Shi Pujin) [#​48043](https://togithub.com/nodejs/node/pull/48043) - \[[`555982c59e`](https://togithub.com/nodejs/node/commit/555982c59e)] - **deps**: upgrade npm to 9.7.1 (npm team) [#​48378](https://togithub.com/nodejs/node/pull/48378) - \[[`3c03ec0832`](https://togithub.com/nodejs/node/commit/3c03ec0832)] - **deps**: update simdutf to 3.2.14 (Node.js GitHub Bot) [#​48344](https://togithub.com/nodejs/node/pull/48344) - \[[`a2964a4583`](https://togithub.com/nodejs/node/commit/a2964a4583)] - **deps**: update ada to 2.5.1 (Node.js GitHub Bot) [#​48319](https://togithub.com/nodejs/node/pull/48319) - \[[`38f6e0d8cd`](https://togithub.com/nodejs/node/commit/38f6e0d8cd)] - **deps**: update zlib to [`982b036`](https://togithub.com/nodejs/node/commit/982b036) (Node.js GitHub Bot) [#​48327](https://togithub.com/nodejs/node/pull/48327) - \[[`f4617a4f81`](https://togithub.com/nodejs/node/commit/f4617a4f81)] - **deps**: add loongarch64 into openssl Makefile and gen openssl-loongarch64 (Shi Pujin) [#​46401](https://togithub.com/nodejs/node/pull/46401) - \[[`573eb4be12`](https://togithub.com/nodejs/node/commit/573eb4be12)] - **dgram**: socket add `asyncDispose` (atlowChemi) [#​48717](https://togithub.com/nodejs/node/pull/48717) - \[[`f3c4300e00`](https://togithub.com/nodejs/node/commit/f3c4300e00)] - **dgram**: use addAbortListener (atlowChemi) [#​48550](https://togithub.com/nodejs/node/pull/48550) - \[[`d3041df738`](https://togithub.com/nodejs/node/commit/d3041df738)] - **doc**: expand on squashing and rebasing to land a PR (Chengzhong Wu) [#​48751](https://togithub.com/nodejs/node/pull/48751) - \[[`249879e46c`](https://togithub.com/nodejs/node/commit/249879e46c)] - **doc**: add atlowChemi to collaborators (atlowChemi) [#​48757](https://togithub.com/nodejs/node/pull/48757) - \[[`42ecd46d1f`](https://togithub.com/nodejs/node/commit/42ecd46d1f)] - **doc**: fix ambiguity in http.md and https.md (an5er) [#​48692](https://togithub.com/nodejs/node/pull/48692) - \[[`e78824e053`](https://togithub.com/nodejs/node/commit/e78824e053)] - **doc**: add release key for Ulises Gascon (Ulises Gascón) [#​49196](https://togithub.com/nodejs/node/pull/49196) - \[[`1aa798d69f`](https://togithub.com/nodejs/node/commit/1aa798d69f)] - **doc**: clarify transform.\_transform() callback argument logic (Rafael Sofi-zada) [#​48680](https://togithub.com/nodejs/node/pull/48680) - \[[`d723e870a2`](https://togithub.com/nodejs/node/commit/d723e870a2)] - **doc**: mention git node release prepare (Rafael Gonzaga) [#​48644](https://togithub.com/nodejs/node/pull/48644) - \[[`a9a1394388`](https://togithub.com/nodejs/node/commit/a9a1394388)] - **doc**: fix options order (Luigi Pinca) [#​48617](https://togithub.com/nodejs/node/pull/48617) - \[[`989e

Configuration

📅 Schedule: Branch creation - "after 5pm on monday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR has been generated by Mend Renovate. View repository job log here.

github-actions[bot] commented 4 months ago

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.