search

na2na-p / avion

An web application
1 stars 0 forks source link

Update all non-major dependencies #73

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 1 year ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@nestjs/apollo ^12.0.1 -> ^12.0.3 age adoption passing confidence dependencies patch
@nestjs/mapped-types ^2.0.0 -> ^2.0.2 age adoption passing confidence dependencies patch
@prisma/client (source) ^4.15.0 -> ^4.16.1 age adoption passing confidence dependencies minor
@swc/core (source) ^1.3.65 -> ^1.3.66 age adoption passing confidence devDependencies patch
graphql ^16.6.0 -> ^16.7.1 age adoption passing confidence devDependencies minor
graphql ^16.6.0 -> ^16.7.1 age adoption passing confidence dependencies minor
node (source) 18.16.0 -> 18.16.1 age adoption passing confidence patch
pnpm (source) 8.6.3 -> 8.6.4 age adoption passing confidence packageManager patch
pnpm (source) >=8.6.3 -> >=8.6.4 age adoption passing confidence engines patch
pnpm (source) 8.6.3 -> 8.6.4 age adoption passing confidence patch
prisma (source) ^4.15.0 -> ^4.16.1 age adoption passing confidence dependencies minor
turbo (source) ^1.10.3 -> ^1.10.6 age adoption passing confidence devDependencies patch

Release Notes

nestjs/graphql (@​nestjs/apollo) ### [`v12.0.3`](https://togithub.com/nestjs/graphql/compare/v12.0.2...v12.0.3) [Compare Source](https://togithub.com/nestjs/graphql/compare/v12.0.2...v12.0.3) ### [`v12.0.2`](https://togithub.com/nestjs/graphql/compare/v12.0.1...v12.0.2) [Compare Source](https://togithub.com/nestjs/graphql/compare/v12.0.1...v12.0.2)
nestjs/mapped-types (@​nestjs/mapped-types) ### [`v2.0.2`](https://togithub.com/nestjs/mapped-types/releases/tag/2.0.2) [Compare Source](https://togithub.com/nestjs/mapped-types/compare/2.0.1...2.0.2) - Merge pull request [#​1126](https://togithub.com/nestjs/mapped-types/issues/1126) from micalevisk/fix/issue-1124 ([`ae7e3ea`](https://togithub.com/nestjs/mapped-types/commit/ae7e3ea)) - fix(types): `RemoveFieldsWithType` when excluding optional fields ([`ad2293f`](https://togithub.com/nestjs/mapped-types/commit/ad2293f)) - chore(deps): update dependency [@​nestjs/common](https://togithub.com/nestjs/common) to v10.0.3 ([`f5b4b91`](https://togithub.com/nestjs/mapped-types/commit/f5b4b91)) ### [`v2.0.1`](https://togithub.com/nestjs/mapped-types/releases/tag/2.0.1) [Compare Source](https://togithub.com/nestjs/mapped-types/compare/2.0.0...2.0.1) - fix: incorrect inheritance of optional keys [#​1121](https://togithub.com/nestjs/mapped-types/issues/1121) ([`0e1db82`](https://togithub.com/nestjs/mapped-types/commit/0e1db82)) - chore(deps): update typescript-eslint monorepo to v5.60.0 ([`4105d4c`](https://togithub.com/nestjs/mapped-types/commit/4105d4c)) - chore(deps): update dependency [@​nestjs/common](https://togithub.com/nestjs/common) to v10.0.2 ([`750ef2a`](https://togithub.com/nestjs/mapped-types/commit/750ef2a)) - chore(deps): update dependency [@​nestjs/common](https://togithub.com/nestjs/common) to v10.0.1 ([`50e991c`](https://togithub.com/nestjs/mapped-types/commit/50e991c)) - chore(deps): update dependency eslint to v8.43.0 ([`1dc7842`](https://togithub.com/nestjs/mapped-types/commit/1dc7842))
prisma/prisma (@​prisma/client) ### [`v4.16.1`](https://togithub.com/prisma/prisma/releases/tag/4.16.1) [Compare Source](https://togithub.com/prisma/prisma/compare/4.16.0...4.16.1) Today, we are issuing the `4.16.1` patch release. ##### Fixes in Prisma Client - [Field references are not available on extended clients](https://togithub.com/prisma/prisma/issues/19892) - [4.16.x cannot wrap `$extend` in factory function when `compilerOptions.composite` is `true`](https://togithub.com/prisma/prisma/issues/19866) - [Prisma Schema Type inside a Type not generating a right Payload](https://togithub.com/prisma/prisma/issues/19890) - [Query in findMany in prisma extends returns a wrong type](https://togithub.com/prisma/prisma/issues/19854) - [4.16.0 Count query is not returning the right type when in a transaction](https://togithub.com/prisma/prisma/issues/19867) - [FindMany returns wrong type after extending prisma client](https://togithub.com/prisma/prisma/issues/19864) - [Can't specify $queryRawUnsafe return type after extending prisma client](https://togithub.com/prisma/prisma/issues/19862) ### [`v4.16.0`](https://togithub.com/prisma/prisma/releases/tag/4.16.0) [Compare Source](https://togithub.com/prisma/prisma/compare/4.15.0...4.16.0) 🌟 **Help us spread the word about Prisma by starring the repo or [tweeting](https://twitter.com/intent/tweet?text=Check%20out%20the%20latest%20@​prisma%20release%20v4.16.0%20%F0%9F%9A%80%0D%0A%0D%0Ahttps://github.com/prisma/prisma/releases/tag/4.16.0) about the release.** 🌟 ##### Highlights This release promotes the following [Preview](https://www.prisma.io/docs/about/prisma/releases#preview) features to [General Availability](https://www.prisma.io/docs/about/prisma/releases#generally-available-ga): - Prisma Client extensions - Ordering by nulls first and last - Count by filtered relation ##### Prisma Client extensions are Generally Available Today, we’re very excited to announce that [Prisma Client extensions](https://www.prisma.io/docs/concepts/components/prisma-client/client-extensions) are Generally Available and production-ready! This means you can use the feature without the `clientExtensions` Preview feature flag.🚀 Prisma Client extensions are a powerful new feature for adding functionality on top of your Prisma Client in a type-safe manner. With this feature, you can create simple, but flexible solutions. Prisma Client extensions have 4 different types of components that can be included in an extension: - [**Result** extensions](https://www.prisma.io/docs/concepts/components/prisma-client/client-extensions/result) components: add custom fields and methods to query result objects, for example, virtual/computed fields. - [**Model** extensions](https://www.prisma.io/docs/concepts/components/prisma-client/client-extensions/model) components: enable you to add new methods to your models alongside existing model methods such as `findMany`. - [**Query** extensions](https://www.prisma.io/docs/concepts/components/prisma-client/client-extensions/query) components: let you hook into the lifecycle of a query and perform side effects, modify query arguments, or modify the results in a type-safe way. These are an alternative to [middleware](https://www.prisma.io/docs/concepts/components/prisma-client/middleware) that provide complete type safety and can be applied in an ad-hoc manner to different extensions. - [**Client** extensions](https://www.prisma.io/docs/concepts/components/prisma-client/client-extensions/client) components: allow you to add new top-level methods to Prisma Client. You can use this to extend Prisma Client with functionality that isn’t tied to specific models. ```tsx const prisma = new PrismaClient().$extends({ name: "extension-name", result: { /* ... */ }, model: { /* ... */ }, query: { /* ... */ }, client: { /* ... */ }, }); ``` You can also create and publish extensions for others to use. Learn more about how to share extensions in our [documentation](https://www.prisma.io/docs/concepts/components/prisma-client/client-extensions/shared-extensions). ##### More features and changes made to Client Extensions We also made the following improvements to Prisma Client extensions in preparation for General Availability: - Added a top-level `$allOperations` method for `query` component that captures all model operations as well as top-level raw queries. Refer to our [documentation](https://www.prisma.io/docs/concepts/components/prisma-client/client-extensions/query#modify-all-prisma-client-operations) for more information. ```tsx const prisma = new PrismaClient().$extends({ query: { $allOperations({ args, query, operation, model }) { /* your extension's logic here */ } } }) ``` - [`Prisma.validator`](https://www.prisma.io/docs/concepts/components/prisma-client/advanced-type-safety/prisma-validator) can now also be used for extended types: ```tsx const prisma = new PrismaClient().$extends({/* ... */}) const data = Prisma.validator(prisma, 'user', 'findFirst', 'select')({ id: true, }) ``` - `query` callbacks for `$queryRaw` and `$executeRaw` will always receive `Sql` instance as `args`. This instance can be used to compose a new query using `Prisma.sql`: ```tsx const prisma = new PrismaClient().$extends({ query: { $queryRaw({ args, query }) { return query(Prisma.sql`START TRANSACTION; ${args}; COMMIT;`) } } }) ``` - `$on` cannot be called after extending Prisma Client. Therefore, if you want to use event handlers together with extensions, we recommend using the `$on` method before `$extends`. ```tsx const prisma = new PrismaClient() .$on(/* ... */) .$extends({/* ... */}) ``` - We updated the import path for utilities used for authoring extension to `@prisma/client/extension` rather than `@prisma/client` ```diff + import { Prisma } from "@​prisma/client/extension" - import { Prisma } from "@​prisma/client" ``` ##### Deprecating Middleware We also took this opportunity to [deprecate](https://en.wikipedia.org/wiki/Deprecation) Prisma Client’s [middleware](https://www.prisma.io/docs/concepts/components/prisma-client/middleware). We recommend using to using [Prisma Client `query` extension components](https://www.prisma.io/docs/concepts/components/prisma-client/client-extensions/query) which can be used to achieve the same functionality and with better type safety. > 🚧 Middleware will still be available in Prisma Client’s API. However, we recommend using Prisma Client extensions over middleware. ##### Ordering by nulls first and last is now Generally Available Starting with this release, we’re excited to announce that `orderByNulls` is now Generally Available! This means you can use the feature without the `orderByNulls` Preview feature flag.🌟 We introduced this feature in [4.1.0](https://togithub.com/prisma/prisma/releases/tag/4.1.0) to enable you to sort records with null fields to either appear at the beginning or end of the result. The following example query sorts posts by `updatedAt`, with records having a null value at the end of the list: ```tsx await prisma.post.findMany({ orderBy: { updatedAt: { sort: 'asc', nulls: 'last' }, }, }) ``` To learn more about this feature, refer to our [documentation](https://www.prisma.io/docs/concepts/components/prisma-client/filtering-and-sorting#sort-with-null-records-first-or-last). We’re excited to see what you will build! Feel free to share with us what you build on Twitter, Slack, or Discord. ##### Count by filtered relation is now Generally Available This release moves the `filteredRelationCount` Preview feature to General Availability! This means you can use the feature without the `filteredRelationCount` Preview feature flag. We first introduced this feature in [4.3.0](https://togithub.com/prisma/prisma/releases/tag/4.3.0) to add the ability to count by filtered relations. The following query, for example, counts all posts with the title “Hello!”: ```tsx await prisma.user.findMany({ select: { _count: { select: { posts: { where: { title: 'Hello!' } }, }, }, }, }) ``` To learn more about this feature, refer to our [documentation](https://www.prisma.io/docs/concepts/components/prisma-client/aggregation-grouping-summarizing#filter-the-relation-count). ##### Introspection warnings for expression indexes In the last two releases, [4.13.0](https://togithub.com/prisma/prisma/releases/tag/4.13.0) and [4.14.0](https://togithub.com/prisma/prisma/releases/tag/4.14.0), we added 9 introspection warnings. These warnings surface features in use in your database that cannot currently be represented in the Prisma schema. In this release, we’re adding one more introspection warning to the list: [expression indexes](https://togithub.com/prisma/prisma/issues/2504). On database introspection, the Prisma CLI will surface the feature with a warning, and a comment in your Prisma schema for sections for each feature in use. The warnings will also contain instructions for workarounds on how to use the feature. ##### Fixes and improvements ##### Prisma Client - [Attach comments to enum values](https://togithub.com/prisma/prisma/issues/3807) - [Extend Prisma Client](https://togithub.com/prisma/prisma/issues/7161) - [Triple-slash Comments should attach to Composite Types](https://togithub.com/prisma/prisma/issues/13726) - [Nested disconnect fails on MongoDB with extendedWhereUnique](https://togithub.com/prisma/prisma/issues/16869) - [\[ClientExtensions, TypeScript\] Fields of custom type aren't available when using the ClientExtensions preview-feature, unless `select`'d explicitly. ](https://togithub.com/prisma/prisma/issues/17388) - [Extensions incorrect typings generated (casing)](https://togithub.com/prisma/prisma/issues/17405) - [Misleading error message of `prisma generate` when running it directly after installing `prisma`](https://togithub.com/prisma/prisma/issues/17639) - [Prisma.validator: with clientExtensions enabled, Typescript can no longer compute types](https://togithub.com/prisma/prisma/issues/17767) - [enum docstrings do not make it to the prisma client](https://togithub.com/prisma/prisma/issues/17828) - [VScode behavior is very slow while using clientExtensions](https://togithub.com/prisma/prisma/issues/17843) - [Client extensions in interactive transactions are bound to the base client](https://togithub.com/prisma/prisma/issues/17948) - [`$runCommandRaw` is not passing the expected data to middleware or client extension](https://togithub.com/prisma/prisma/issues/18092) - [PCE: Improve runtime types in raw query extensions](https://togithub.com/prisma/prisma/issues/18125) - [Sequential transactions run out of order when using client extensions and middleware](https://togithub.com/prisma/prisma/issues/18276) - [Client Extension: Make `.prismaVersion.client` available on "@​prisma/client/scripts/default-index"](https://togithub.com/prisma/prisma/issues/18829) - [Cannot create record with Prisma.DbNull when clientExtensions enabled](https://togithub.com/prisma/prisma/issues/18854) - [Extended client raw queries fail when using the Prisma.sql helper](https://togithub.com/prisma/prisma/issues/18875) - [jsonProtocol: array shortcut is missing for `distinct` field](https://togithub.com/prisma/prisma/issues/18906) - [Prisma Client Extension: support `Prisma.validator`](https://togithub.com/prisma/prisma/issues/18943) - [Prisma Client: make `clientExtensions` GA ](https://togithub.com/prisma/prisma/issues/19416) - [PCE: Query extensions of `$queryRawUnsafe` also triggers `$allModels.$allOperations`](https://togithub.com/prisma/prisma/issues/19550) - [PCE: `$on` applied to an extended client is also bound to the parent client](https://togithub.com/prisma/prisma/issues/19552) - [Type "never" returned from nested properties when using "select" after enabling data proxy + accelerate](https://togithub.com/prisma/prisma/issues/19572) - [`$queryRaw*` is broken in interactive transactions together with `clientExtensions` in `4.16.0-dev.17`](https://togithub.com/prisma/prisma/issues/19651) - [Deploying to an offline environment fails because it tries to download a Prisma engine checksum file ](https://togithub.com/prisma/prisma/issues/19666) - [jsonProtocol: Wrong error message shown for validation error for checked/unchecked types](https://togithub.com/prisma/prisma/issues/19707) - [Bug: FindXOrThrow don't get batched on the engine](https://togithub.com/prisma/prisma/issues/16625) ##### Prisma Migrate - [Allow skipping sha checksum](https://togithub.com/prisma/prisma/issues/12230) - [Documentation not available in DMMF for MongoDB `type`s](https://togithub.com/prisma/prisma/issues/18551) - [`prisma db pull` gets rid of `@default(uuid())` on re-introspection](https://togithub.com/prisma/prisma/issues/18857) ##### Language tools (e.g. VS Code) - [`Go to Definition` does not work when target model contains a field with a type name that starts with the same name](https://togithub.com/prisma/language-tools/issues/1247) ##### Prisma Studio - [`Error: spawn xdg-open ENOENT` on `prisma studio`](https://togithub.com/prisma/studio/issues/1128) ##### 📺 Join us for another "What's new in Prisma" live stream Learn about the latest release and other news from the Prisma community by joining us for another ["What's new in Prisma"](https://youtube.com/playlist?list=PLn2e1F9Rfr6l1B9RP0A9NdX7i7QIWfBa7) live stream. The stream takes place [on YouTube](https://youtu.be/pLxsipkdQmc) on **Thursday, June 22** at **5 pm Berlin | 8 am San Francisco**.
swc-project/swc (@​swc/core) ### [`v1.3.66`](https://togithub.com/swc-project/swc/blob/HEAD/CHANGELOG.md#​1366---2023-06-20) [Compare Source](https://togithub.com/swc-project/swc/compare/v1.3.65...v1.3.66) ##### Bug Fixes - **(es)** Accept `parse` option for `minify()` ([#​7543](https://togithub.com/swc-project/swc/issues/7543)) ([1d84e95](https://togithub.com/swc-project/swc/commit/1d84e952feefc3cd50e379455bb6648b82c42256)) - **(es/compat)** Visit arrow body from optional chaining pass ([#​7549](https://togithub.com/swc-project/swc/issues/7549)) ([bc6e950](https://togithub.com/swc-project/swc/commit/bc6e95052eaf60d71c544c8a88c8440d7a2b437c)) - **(es/preset-env)** Don't log `Yield` to the console ([#​7548](https://togithub.com/swc-project/swc/issues/7548)) ([8cfc4f9](https://togithub.com/swc-project/swc/commit/8cfc4f9e9ab43a5ed25c9b600b9dd7e5790c2d1e)) - **(es/resolver)** Resolve the super class before registering a class name ([#​7550](https://togithub.com/swc-project/swc/issues/7550)) ([1d9f972](https://togithub.com/swc-project/swc/commit/1d9f972fb44e0722fce8a83090cbada81decf577)) ##### Features - **(es/codegen)** Support `preamble` ([#​7551](https://togithub.com/swc-project/swc/issues/7551)) ([6e5d8b3](https://togithub.com/swc-project/swc/commit/6e5d8b3cf1af74d614d5c073d966da543c26e302)) ##### Testing - **(es)** Add a test for a wrong issue ([#​7542](https://togithub.com/swc-project/swc/issues/7542)) ([70bc605](https://togithub.com/swc-project/swc/commit/70bc605c6769759b0e896e7e5e91bb070d719552)) - **(es)** Add one more test for a wrong issue ([#​7545](https://togithub.com/swc-project/swc/issues/7545)) ([862f095](https://togithub.com/swc-project/swc/commit/862f095e656edf6c0e86f1ad8065d8095e162cfa)) - **(plugin/runner)** Share `target` directory ([#​7544](https://togithub.com/swc-project/swc/issues/7544)) ([aa82e5f](https://togithub.com/swc-project/swc/commit/aa82e5fff3452db38599bb0bf7fef7cd72b6a09f))
graphql/graphql-js (graphql) ### [`v16.7.1`](https://togithub.com/graphql/graphql-js/releases/tag/v16.7.1) [Compare Source](https://togithub.com/graphql/graphql-js/compare/v16.7.0...v16.7.1) #### v16.7.1 (2023-06-22) :loudspeaker: Big shout out to [@​phryneas](https://togithub.com/phryneas), who managed to reproduce this issue and come up with this fix. ##### Bug Fix 🐞 - [#​3923](https://togithub.com/graphql/graphql-js/pull/3923) instanceOf: workaround bundler issue with `process.env` ([@​IvanGoncharov](https://togithub.com/IvanGoncharov)) ##### Committers: 1 - Ivan Goncharov([@​IvanGoncharov](https://togithub.com/IvanGoncharov)) ### [`v16.7.0`](https://togithub.com/graphql/graphql-js/releases/tag/v16.7.0) [Compare Source](https://togithub.com/graphql/graphql-js/compare/v16.6.0...v16.7.0) #### v16.7.0 (2023-06-21) ##### New Feature 🚀 - [#​3887](https://togithub.com/graphql/graphql-js/pull/3887) check "globalThis.process" before accessing it ([@​kettanaito](https://togithub.com/kettanaito)) ##### Bug Fix 🐞 - [#​3707](https://togithub.com/graphql/graphql-js/pull/3707) Fix crash in node when mixing sync/async resolvers (backport of [#​3706](https://togithub.com/graphql/graphql-js/issues/3706)) ([@​chrskrchr](https://togithub.com/chrskrchr)) - [#​3838](https://togithub.com/graphql/graphql-js/pull/3838) Fix/invalid error propagation custom scalars (backport for 16.x.x) ([@​stenreijers](https://togithub.com/stenreijers)) ##### Committers: 3 - Artem Zakharchenko([@​kettanaito](https://togithub.com/kettanaito)) - Chris Karcher([@​chrskrchr](https://togithub.com/chrskrchr)) - Sten Reijers([@​stenreijers](https://togithub.com/stenreijers))
nodejs/node (node) ### [`v18.16.1`](https://togithub.com/nodejs/node/releases/tag/v18.16.1): 2023-06-20, Version 18.16.1 'Hydrogen' (LTS), @​RafaelGSS [Compare Source](https://togithub.com/nodejs/node/compare/v18.16.0...v18.16.1) This is a security release. ##### Notable Changes The following CVEs are fixed in this release: - [CVE-2023-30581](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30581): `mainModule.__proto__` Bypass Experimental Policy Mechanism (High) - [CVE-2023-30585](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30585): Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium) - [CVE-2023-30588](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30588): Process interuption due to invalid Public Key information in x509 certificates (Medium) - [CVE-2023-30589](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30589): HTTP Request Smuggling via Empty headers separated by CR (Medium) - [CVE-2023-30590](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30590): DiffieHellman does not generate keys after setting a private key (Medium) - OpenSSL Security Releases - [OpenSSL security advisory 28th March](https://www.openssl.org/news/secadv/20230328.txt). - [OpenSSL security advisory 20th April](https://www.openssl.org/news/secadv/20230420.txt). - [OpenSSL security advisory 30th May](https://www.openssl.org/news/secadv/20230530.txt) - c-ares vulnerabilities: - [GHSA-9g78-jv2r-p7vc](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-9g78-jv2r-p7vc) - [GHSA-8r8p-23f3-64c2](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-8r8p-23f3-64c2) - [GHSA-54xr-f67r-4pc4](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-54xr-f67r-4pc4) - [GHSA-x6mf-cxr9-8q6v](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-x6mf-cxr9-8q6v) More detailed information on each of the vulnerabilities can be found in [June 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/june-2023-security-releases/) blog post. ##### Commits - \[[`bf3e2c8928`](https://togithub.com/nodejs/node/commit/bf3e2c8928)] - **crypto**: handle cert with invalid SPKI gracefully (Tobias Nießen) [nodejs-private/node-private#​393](https://togithub.com/nodejs-private/node-private/pull/393) - \[[`70f9449072`](https://togithub.com/nodejs/node/commit/70f9449072)] - **deps**: set `CARES_RANDOM_FILE` for c-ares (Richard Lau) [#​48156](https://togithub.com/nodejs/node/pull/48156) - \[[`35d4efb57b`](https://togithub.com/nodejs/node/commit/35d4efb57b)] - **deps**: update c-ares to 1.19.1 (RafaelGSS) [#​48115](https://togithub.com/nodejs/node/pull/48115) - \[[`392dfedc77`](https://togithub.com/nodejs/node/commit/392dfedc77)] - **deps**: update archs files for openssl-3.0.9-quic1 (Node.js GitHub Bot) [#​48402](https://togithub.com/nodejs/node/pull/48402) - \[[`46cd5fe38b`](https://togithub.com/nodejs/node/commit/46cd5fe38b)] - **deps**: upgrade openssl sources to quictls/openssl-3.0.9-quic1 (Node.js GitHub Bot) [#​48402](https://togithub.com/nodejs/node/pull/48402) - \[[`7e3d2d85c2`](https://togithub.com/nodejs/node/commit/7e3d2d85c2)] - **doc,test**: clarify behavior of DH generateKeys (Tobias Nießen) [nodejs-private/node-private#​426](https://togithub.com/nodejs-private/node-private/pull/426) - \[[`4ff6ba050a`](https://togithub.com/nodejs/node/commit/4ff6ba050a)] - **http**: disable request smuggling via rempty headers (Paolo Insogna) [nodejs-private/node-private#​428](https://togithub.com/nodejs-private/node-private/pull/428) - \[[`ab269129a6`](https://togithub.com/nodejs/node/commit/ab269129a6)] - **msi**: do not create AppData\Roaming\npm (Tobias Nießen) [nodejs-private/node-private#​408](https://togithub.com/nodejs-private/node-private/pull/408) - \[[`925e8f5619`](https://togithub.com/nodejs/node/commit/925e8f5619)] - **policy**: handle mainModule.\__proto\_\_ bypass (RafaelGSS) [nodejs-private/node-private#​416](https://togithub.com/nodejs-private/node-private/pull/416) - \[[`d6fae8e47e`](https://togithub.com/nodejs/node/commit/d6fae8e47e)] - **test**: allow SIGBUS in signal-handler abort test (Michaël Zasso) [#​47851](https://togithub.com/nodejs/node/pull/47851)
pnpm/pnpm (pnpm) ### [`v8.6.4`](https://togithub.com/pnpm/pnpm/releases/tag/v8.6.4) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v8.6.3...v8.6.4) #### Patch Changes - In cases where both aliased and non-aliased dependencies exist to the same package, non-aliased dependencies will be used for resolving peer dependencies, addressing issue [#​6588](https://togithub.com/pnpm/pnpm/issues/6588). - Ignore the port in the URL, while searching for authentication token in the `.npmrc` file [#​6354](https://togithub.com/pnpm/pnpm/issues/6354). - Don't add the version of a local directory dependency to the lockfile. This information is not used anywhere by pnpm and is only causing more Git conflicts [#​6695](https://togithub.com/pnpm/pnpm/pull/6695). #### Our Gold Sponsors
#### Our Silver Sponsors
vercel/turbo (turbo) ### [`v1.10.6`](https://togithub.com/vercel/turbo/releases/tag/v1.10.6): Turborepo v1.10.6 [Compare Source](https://togithub.com/vercel/turbo/compare/v1.10.5...v1.10.6) #### What's Changed ##### Changelog - feat(turborepo): Scripts to build a debug version on windows by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5007](https://togithub.com/vercel/turbo/pull/5007) - release(turborepo): 1.10.5 by [@​github-actions](https://togithub.com/github-actions) in [https://github.com/vercel/turbo/pull/5364](https://togithub.com/vercel/turbo/pull/5364) - fix: prevent looking up workspace task if name is not in there by [@​arlyon](https://togithub.com/arlyon) in [https://github.com/vercel/turbo/pull/5370](https://togithub.com/vercel/turbo/pull/5370) - fix(turborepo): Restructure spaces client and test error handling by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5367](https://togithub.com/vercel/turbo/pull/5367) **Full Changelog**: https://github.com/vercel/turbo/compare/v1.10.5...v1.10.6 ### [`v1.10.5`](https://togithub.com/vercel/turbo/releases/tag/v1.10.5): Turborepo v1.10.5 [Compare Source](https://togithub.com/vercel/turbo/compare/v1.10.4...v1.10.5) #### What's Changed ##### Changelog - release(turborepo): 1.10.4 by [@​github-actions](https://togithub.com/github-actions) in [https://github.com/vercel/turbo/pull/5349](https://togithub.com/vercel/turbo/pull/5349) - feat(turborepo) Add timeout to api client json methods by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5350](https://togithub.com/vercel/turbo/pull/5350) - feat(turborepo): Debugging output for e2e tests by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5351](https://togithub.com/vercel/turbo/pull/5351) - feat(turbo): add main pointing to bin by [@​wesleytodd](https://togithub.com/wesleytodd) in [https://github.com/vercel/turbo/pull/5333](https://togithub.com/vercel/turbo/pull/5333) - fix: Removed path slash conversion on unix by [@​NicholasLYang](https://togithub.com/NicholasLYang) in [https://github.com/vercel/turbo/pull/5356](https://togithub.com/vercel/turbo/pull/5356) - fix(turborepo): Fix single package inference by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5362](https://togithub.com/vercel/turbo/pull/5362) #### New Contributors - [@​wesleytodd](https://togithub.com/wesleytodd) made their first contribution in [https://github.com/vercel/turbo/pull/5333](https://togithub.com/vercel/turbo/pull/5333) **Full Changelog**: https://github.com/vercel/turbo/compare/v1.10.4...v1.10.5 ### [`v1.10.4`](https://togithub.com/vercel/turbo/releases/tag/v1.10.4): Turborepo v1.10.4 [Compare Source](https://togithub.com/vercel/turbo/compare/v1.10.3...v1.10.4) #### What's Changed ##### Changelog - release(turborepo): 1.10.3-canary.0 by [@​github-actions](https://togithub.com/github-actions) in [https://github.com/vercel/turbo/pull/5250](https://togithub.com/vercel/turbo/pull/5250) - feat(turborepo): Port Manual hashing by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5237](https://togithub.com/vercel/turbo/pull/5237) - Docs: prior to run testcases, add guides to install dependencies for testcases. by [@​92hackers](https://togithub.com/92hackers) in [https://github.com/vercel/turbo/pull/3090](https://togithub.com/vercel/turbo/pull/3090) - fix(gen): fix ts config interference by [@​tknickman](https://togithub.com/tknickman) in [https://github.com/vercel/turbo/pull/5263](https://togithub.com/vercel/turbo/pull/5263) - release(turborepo): 1.10.3 by [@​github-actions](https://togithub.com/github-actions) in [https://github.com/vercel/turbo/pull/5262](https://togithub.com/vercel/turbo/pull/5262) - feat(examples): update basic name on docs by [@​tknickman](https://togithub.com/tknickman) in [https://github.com/vercel/turbo/pull/5224](https://togithub.com/vercel/turbo/pull/5224) - feat(turborepo): port git-based hashing with inputs by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5251](https://togithub.com/vercel/turbo/pull/5251) - Update .gitignore by [@​ph55](https://togithub.com/ph55) in [https://github.com/vercel/turbo/pull/5269](https://togithub.com/vercel/turbo/pull/5269) - feat(ci): conditionally set jest verbosity by [@​tknickman](https://togithub.com/tknickman) in [https://github.com/vercel/turbo/pull/5271](https://togithub.com/vercel/turbo/pull/5271) - fix(turborepo): Tighten build globs by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5274](https://togithub.com/vercel/turbo/pull/5274) - fix(turborepo): Fix path match for parent dir in subtree match case by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5275](https://togithub.com/vercel/turbo/pull/5275) - chore(turborepo): Move SCM to use vendored wax crate by [@​NicholasLYang](https://togithub.com/NicholasLYang) in [https://github.com/vercel/turbo/pull/5277](https://togithub.com/vercel/turbo/pull/5277) - release(turborepo): 1.10.4-canary.0 by [@​github-actions](https://togithub.com/github-actions) in [https://github.com/vercel/turbo/pull/5278](https://togithub.com/vercel/turbo/pull/5278) - fix(turborepo): avoid globbing directories due to ancestor truncation by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5273](https://togithub.com/vercel/turbo/pull/5273) - release(turborepo): 1.10.4-canary.1 by [@​github-actions](https://togithub.com/github-actions) in [https://github.com/vercel/turbo/pull/5283](https://togithub.com/vercel/turbo/pull/5283) - fix(spaces): read logs correctly when invoked from subdirectory by [@​mehulkar](https://togithub.com/mehulkar) in [https://github.com/vercel/turbo/pull/5284](https://togithub.com/vercel/turbo/pull/5284) - Synthesize --only by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5285](https://togithub.com/vercel/turbo/pull/5285) - feat(turborepo): Run outline pt 2 by [@​NicholasLYang](https://togithub.com/NicholasLYang) in [https://github.com/vercel/turbo/pull/5203](https://togithub.com/vercel/turbo/pull/5203) - feat(lockfiles): add rust implementation for yarn1 by [@​chris-olszewski](https://togithub.com/chris-olszewski) in [https://github.com/vercel/turbo/pull/5255](https://togithub.com/vercel/turbo/pull/5255) - release(turborepo): 1.10.4-canary.2 by [@​github-actions](https://togithub.com/github-actions) in [https://github.com/vercel/turbo/pull/5286](https://togithub.com/vercel/turbo/pull/5286) - feat(turborepo): Report more details when go-turbo exits by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5287](https://togithub.com/vercel/turbo/pull/5287) - docs(examples): update examples and docs to use node 18 by [@​mehulkar](https://togithub.com/mehulkar) in [https://github.com/vercel/turbo/pull/5300](https://togithub.com/vercel/turbo/pull/5300) - update dependencies to sync with next.js by [@​sokra](https://togithub.com/sokra) in [https://github.com/vercel/turbo/pull/5303](https://togithub.com/vercel/turbo/pull/5303) - feat(cache): Add ability to disable remote cache from turbo.json by [@​mehulkar](https://togithub.com/mehulkar) in [https://github.com/vercel/turbo/pull/5305](https://togithub.com/vercel/turbo/pull/5305) - feat(turborepo): Hash with libgit2 by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5309](https://togithub.com/vercel/turbo/pull/5309) - Add --log-order option by [@​rafaeltab](https://togithub.com/rafaeltab) in [https://github.com/vercel/turbo/pull/3916](https://togithub.com/vercel/turbo/pull/3916) - release(turborepo): 1.10.4-canary.3 by [@​github-actions](https://togithub.com/github-actions) in [https://github.com/vercel/turbo/pull/5313](https://togithub.com/vercel/turbo/pull/5313) - feat(turborepo): A few cleanup nits around log grouping by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5312](https://togithub.com/vercel/turbo/pull/5312) - feat(run outline): Hide package graph internals by [@​chris-olszewski](https://togithub.com/chris-olszewski) in [https://github.com/vercel/turbo/pull/5310](https://togithub.com/vercel/turbo/pull/5310) - feat(logging): enable setting log order with an environment variable by [@​mehulkar](https://togithub.com/mehulkar) in [https://github.com/vercel/turbo/pull/5316](https://togithub.com/vercel/turbo/pull/5316) - feat(cli): Add ability to pass --remote-only=false from CLI by [@​mehulkar](https://togithub.com/mehulkar) in [https://github.com/vercel/turbo/pull/5317](https://togithub.com/vercel/turbo/pull/5317) - fix(turborepo): Re-enable some tests on windows by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5319](https://togithub.com/vercel/turbo/pull/5319) - refactor(turborepo): cli::run and args processing by [@​NicholasLYang](https://togithub.com/NicholasLYang) in [https://github.com/vercel/turbo/pull/5297](https://togithub.com/vercel/turbo/pull/5297) - feat(logging): add "auto" options for log prefixing and ordering by [@​mehulkar](https://togithub.com/mehulkar) in [https://github.com/vercel/turbo/pull/5320](https://togithub.com/vercel/turbo/pull/5320) - Fix ESLint script command. by [@​anthonyshew](https://togithub.com/anthonyshew) in [https://github.com/vercel/turbo/pull/5322](https://togithub.com/vercel/turbo/pull/5322) - feat(turborepo): Add context to glob errors by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5323](https://togithub.com/vercel/turbo/pull/5323) - fix(turbo): print help message when turbo called with flags/env vars but no commands by [@​mehulkar](https://togithub.com/mehulkar) in [https://github.com/vercel/turbo/pull/5329](https://togithub.com/vercel/turbo/pull/5329) - refactor(turborepo): Move paths to UTF-8 by [@​NicholasLYang](https://togithub.com/NicholasLYang) in [https://github.com/vercel/turbo/pull/5248](https://togithub.com/vercel/turbo/pull/5248) - Add Vercel to CI providers. by [@​anthonyshew](https://togithub.com/anthonyshew) in [https://github.com/vercel/turbo/pull/5342](https://togithub.com/vercel/turbo/pull/5342) - fix(turborepo): Hashing symlinks is erroring by [@​gsoltis](https://togithub.com/gsoltis) in [https://github.com/vercel/turbo/pull/5340](https://togithub.com/vercel/turbo/pull/5340) - release(turborepo): 1.10.4-canary.4 by [@​github-actions](https://togithub.com/github-actions) in [https://github.com/vercel/turbo/pull/5344](https://togithub.com/vercel/turbo/pull/5344) - fix: update ctrlc to 3.4.0 to allow have new signal handlers overwrite by [@​arlyon](https://togithub.com/arlyon) in [https://github.com/vercel/turbo/pull/5346](https://togithub.com/vercel/turbo/pull/5346) #### New Contributors - [@​aaronbrown-vercel](https://togithub.com/aaronbrown-vercel) made their first contribution in [https://github.com/vercel/turbo/pull/5252](https://togithub.com/vercel/turbo/pull/5252) - [@​younggeeks](https://togithub.com/younggeeks) made their first contribution in [https://github.com/vercel/turbo/pull/4883](https://togithub.com/vercel/turbo/pull/4883) - [@​92hackers](https://togithub.com/92hackers) made their first contribution in [https://github.com/vercel/turbo/pull/3090](https://togithub.com/vercel/turbo/pull/3090) - [@​ph55](https://togithub.com/ph55) made their first contribution in [https://github.com/vercel/turbo/pull/5269](https://togithub.com/vercel/turbo/pull/5269) **Full Changelog**: https://github.com/vercel/turbo/compare/v1.10.3...v1.10.4

Configuration

📅 Schedule: Branch creation - "after 9am,before 12am" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR has been generated by Mend Renovate. View repository job log here.