Skip to content

chore(deps): update all dependencies#34

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-deps
Open

chore(deps): update all dependencies#34
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-deps

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate Bot commented Dec 29, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@eslint/js (source) 9.39.2 → 9.39.4 age confidence
@types/node (source) 24.10.4 → 24.12.2 age confidence
@types/pg (source) 8.16.0 → 8.20.0 age confidence
@typescript-eslint/eslint-plugin (source) 8.50.0 → 8.59.1 age confidence
@typescript-eslint/parser (source) 8.50.0 → 8.59.1 age confidence
axios (source) 1.13.2 → 1.16.0 age confidence
cors 2.8.5 → 2.8.6 age confidence
dotenv 17.2.3 → 17.4.2 age confidence
eslint (source) 9.39.2 → 9.39.4 age confidence
eslint-plugin-prettier 5.5.4 → 5.5.5 age confidence
jest (source) 30.2.0 → 30.3.0 age confidence
joi 18.0.2 → 18.1.2 age confidence
jose 6.1.3 → 6.2.3 age confidence
jwks-rsa 3.2.0 → 3.2.2 age confidence
lint-staged 16.2.7 → 16.4.0 age confidence
nodemon (source) 3.1.11 → 3.1.14 age confidence
pg (source) 8.16.3 → 8.20.0 age confidence
prettier (source) 3.7.4 → 3.8.3 age confidence
protobufjs (source) 8.0.0 → 8.0.3 age confidence
protobufjs-cli 2.0.0 → 2.0.3 age confidence
supertest 7.1.4 → 7.2.2 age confidence
ts-jest (source) 29.4.6 → 29.4.9 age confidence
uuid 13.0.0 → 13.0.1 age confidence

Release Notes

eslint/eslint (@​eslint/js)

v9.39.4

Compare Source

v9.39.3

Compare Source

Bug Fixes

  • 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.59.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unnecessary-condition] treat void as nullish in no-unnecessary-condition (#​12241)
  • eslint-plugin: [no-unnecessary-type-arguments] handle instantiation expressions (#​12220)
  • eslint-plugin: [no-unnecessary-type-assertion] avoid false positive in logical assignment assertions (#​12278)
  • eslint-plugin: [no-unnecessary-type-assertion] preserve phantom type arguments in generic inference (#​12269)
  • eslint-plugin: [no-unnecessary-type-assertion] preserve index signatures in undefined unions (#​12257)
  • eslint-plugin: [no-unnecessary-type-assertion] fix crash "TypeError: checker.getTypeArguments is not a function" (#​12246)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.0

Compare Source

🚀 Features
  • eslint-plugin: [no-unnecessary-type-assertion] report more cases based on assignability (#​11789)
❤️ Thank You
  • Ulrich Stark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.2

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unnecessary-condition] use assignability checks in checkTypePredicates (#​12147)
  • remove tsbuildinfo cache file from published packages (#​12187)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unused-vars] fix false negative for type predicate parameter (#​12004)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.0

Compare Source

🚀 Features
🩹 Fixes
  • eslint-plugin: [prefer-regexp-exec] avoid fixing unknown RegExp flags (#​12161)
  • eslint-plugin: [no-extraneous-class] handle index signatures (#​12142)
  • eslint-plugin: crash in no-unnecessary-type-arguments (#​12163)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.2

Compare Source

🩹 Fixes
  • eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#​11954)
  • eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#​12127)
  • eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#​12125)
  • eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#​12120)
  • eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#​11971)
  • eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#​11865)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.1

Compare Source

🩹 Fixes
  • eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#​12126)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

🚀 Features
  • eslint-plugin: [no-unnecessary-condition] allow literal loop conditions in for/do loops (#​12080)
🩹 Fixes
  • eslint-plugin: [no-base-to-string] fix false positive for toString with overloads (#​12089)
  • eslint-plugin: [prefer-promise-reject-errors] add allow TypeOrValueSpecifier to prefer-promise-reject-errors (#​12094)
  • typescript-estree: if the template literal is tagged and the text has an invalid escape, cooked will be null (#​11355)
  • eslint-plugin: guard against negative paramIndex in no-useless-default-assignment (#​12077)
  • eslint-plugin: handle statically analyzable computed keys in prefer-readonly (#​12079)
  • eslint-plugin: [strict-void-return] false positives with overloads (#​12055)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.1

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.0

Compare Source

🚀 Features
🩹 Fixes
  • use parser options from context.languageOptions (#​12043)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

Compare Source

🚀 Features
  • utils: deprecate defaultOptions in favor of meta.defaultOptions (#​11992)
🩹 Fixes
  • eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#​11949)
  • eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#​11984)
  • eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#​11966, #​12000)
  • eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#​11990)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.54.0

Compare Source

🚀 Features
  • eslint-plugin-internal: add prefer-tsutils-methods rule (#​11974, #​11625)
  • typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#​11965, #​11955)
🩹 Fixes
  • eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#​11967, #​11559)
  • deps: update dependency prettier to v3.8.0 (#​11991)
  • scope-manager: fix catch clause scopes def.name (#​11982)
  • eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#​11785)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.53.1

Compare Source

🩹 Fixes
  • utils: make RuleCreator root defaultOptions optional (#​11956)
  • eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#​11951)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.53.0

Compare Source

🚀 Features
  • eslint-plugin: add rule [strict-void-return] (#​9707)
  • eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#​11922)
🩹 Fixes
  • eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#​11916)
  • eslint-plugin: replace unclear "error typed" with more helpful description (#​11704)
  • typescript-estree: forbid invalid extends and implements in interface declaration (#​11935)
  • typescript-estree: forbid invalid class implements (#​11934)
  • typescript-estree: forbid type-only import with both default and named specifiers (#​11930)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.52.0

Compare Source

🚀 Features
  • eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#​11899)
🩹 Fixes
  • eslint-plugin: [no-base-to-string] detect @​@​toPrimitive and valueOf (#​11901)
  • eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#​11908)
❤️ Thank You
  • Josh Goldberg ✨
  • Ulrich Stark

You can read about our versioning strategy and releases on our website.

v8.51.0

Compare Source

🚀 Features
  • eslint-plugin: add namespace to plugin meta (#​11885)
  • eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#​11871)
🩹 Fixes
  • eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#​11835)
  • eslint-plugin: bump ts-api-utils to 2.2.0 (#​11881)
  • eslint-plugin: remove fixable from no-dynamic-delete rule (#​11876)
  • eslint-plugin: fix crash and false positives in no-useless-default-assignment (#​11845)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.50.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#​11826)
  • eslint-plugin: [method-signature-style] ignore methods that return this (#​11813)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.59.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.2

Compare Source

🩹 Fixes
  • remove tsbuildinfo cache file from published packages (#​12187)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.0

Compare Source

🚀 Features
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.2

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.0

Compare Source

🚀 Features
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.54.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.52.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.51.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.50.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

axios/axios (axios)

v1.16.0

Compare Source

v1.16.0 — May 2, 2026

This release adds support for the QUERY HTTP method and a new ECONNREFUSED error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.

⚠️ Notable Changes

A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:

  • Fetch adapter now enforces maxBodyLength and maxContentLength. These limits were silently ignored on the fetch adapter prior to 1.16.0 — anyone relying on them as a safety net (DoS protection, accidental large uploads) had no protection. (#​10795)
  • Proxy requests now preserve user-supplied Host headers. Previously, the proxy path could overwrite a custom Host. Virtual-host-style routing through a proxy will now behave correctly. (#​10822)
  • Basic auth credentials embedded in URLs are now URL-decoded. If you have percent-encoded credentials in a URL (e.g. https://user:p%40ss@host), the decoded value is what now goes on the wire. (#​10825)
  • parseProtocol now strictly requires a colon in the protocol separator. Strings that loosely parsed as protocols before may no longer match. (#​10729)
  • Deprecated unescape() replaced with modern UTF-8 encoding. Non-ASCII URL handling is now spec-correct; consumers depending on legacy unescape() quirks may see different output bytes. (#​7378)
  • transformRequest input typing change was reverted. The typing change introduced in #​10745 was reverted in #​10810 after follow-up review — net behavior is unchanged from 1.15.2. (#​10745, #​10810)

🚀 New Features

  • QUERY HTTP Method: Added support for the QUERY HTTP method across adapters and type definitions. (#​10802)
  • ECONNREFUSED Error Constant: Exposed ECONNREFUSED as a constant on AxiosError so callers can match connection-refused failures without comparing string literals (closes #​6485). (#​10680)
  • Encode Helper Export: Exported the internal encode helper from buildURL so userland param serializers can reuse the same encoding logic that axios uses internally. (#​6897)

🐛 Bug Fixes

  • HTTP Adapter — Redirects & Headers: Cleared stale headers when a redirect targets a no-proxy host, fixed the redirect listener chain so listeners no longer stack across hops, restored the missing requestDetails argument on beforeRedirect, preserved user-supplied Host headers when forwarding through a proxy, and properly URL-decoded basic auth credentials. (#​10794, #​10800, #​6241, #​10822, #​10825)
  • HTTP Adapter — Streams & Timeouts: Preserved the partial response object on AxiosError when a stream is aborted after headers arrive, honoured the timeout option during the connect phase when redirects are disabled, and resolved an unsettled-promise hang when an aborted request was combined with compression and maxRedirects: 0. (#​10708, #​10819, #​7149)
  • Fetch Adapter: Enforced maxBodyLength / maxContentLength in the fetch adapter, set the User-Agent header to match the HTTP adapter, preserved the original abort reason instead of replacing it with a generic error, and deferred global access so importing the module no longer throws a TypeError in restricted environments. (#​10795, #​10772, #​10806, #​7260)
  • XHR Adapter: Unsubscribed the cancelToken and AbortSignal listeners on the error, timeout, and abort code paths to prevent leaked subscriptions. (#​10787)
  • Error Handling: Attached the parsed response to AxiosError when JSON.parse fails inside dispatchRequest, prevented settle from emitting undefined error codes, and tightened the parseProtocol regex to require a colon in the protocol separator. (#​10724, #​7276, #​10729)
  • Types & Exports: Aligned the CommonJS CancelToken typings with the ESM build, fixed a compiler error caused by RawAxiosHeaders, and re-exported create from the package index. (#​7414, #​6389, #​6460)
  • UTF-8 Encoding: Replaced the deprecated unescape() call with a modern UTF-8 encoding implementation. (#​7378)
  • Misc Cleanup: Resolved a batch of small inconsistencies and gadget-level issues across the codebase. (#​10833)

🔧 Maintenance & Chores

  • Refactor — ES6 Modernisation: Modernised the utils module and XHR adapter to use ES6 features, and tidied the multipart boundary error message. (#​10588, #​7419)
  • Tests: Hardened the HTTP test server lifecycle to fix flaky FormData EPIPE failures, fixed Win32 platform support for the pipe tests, and corrected an incorrect test assumption. (#​10820, #​10791, #​10796)
  • Docs: Documented paramsSerializer.encode for strict RFC 3986 query encoding, updated the parseReviver TypeScript definitions and configuration docs for ES2023, added timeout guidance to the README's first async example, and expanded notes around the recent type changes. (#​10821, #​10782, #​10759, #​10804)
  • Reverted: Reverted the transformRequest input typing change from #​10745 after follow-up review. (#​10745, #​10810)
  • Dependencies: Bumped actions/setup-node, the github-actions group, and postcss (in /docs) to their latest versions. (#​10785, #​10813, #​10814)
  • Release: Updated changelog and packages, and prepared the 1.16.0 release. (#​10790, #​10834)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • "before 3am on monday"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/all-deps branch from 28154ca to 4f518f6 Compare December 29, 2025 21:14
@renovate renovate Bot changed the title chore(deps): update all dependencies to v8.50.1 chore(deps): update all dependencies to v8.51.0 Dec 29, 2025
@renovate renovate Bot force-pushed the renovate/all-deps branch 2 times, most recently from 5b73faa to c6d92dc Compare January 5, 2026 17:27
@renovate renovate Bot changed the title chore(deps): update all dependencies to v8.51.0 chore(deps): update all dependencies to v8.52.0 Jan 5, 2026
@renovate renovate Bot force-pushed the renovate/all-deps branch from c6d92dc to 10ca50c Compare January 6, 2026 09:40
@renovate renovate Bot changed the title chore(deps): update all dependencies to v8.52.0 chore(deps): update all dependencies Jan 6, 2026
@renovate renovate Bot force-pushed the renovate/all-deps branch 11 times, most recently from 9b0b575 to 2b97980 Compare January 16, 2026 11:04
@renovate renovate Bot force-pushed the renovate/all-deps branch 6 times, most recently from e637fce to 1beb5e8 Compare January 25, 2026 17:24
@renovate renovate Bot force-pushed the renovate/all-deps branch 3 times, most recently from 7d57e4b to 60a2acc Compare January 30, 2026 21:38
@renovate renovate Bot force-pushed the renovate/all-deps branch 2 times, most recently from 7830b6f to cc389d0 Compare February 5, 2026 18:49
@renovate renovate Bot force-pushed the renovate/all-deps branch 6 times, most recently from e3ba1ee to 30d9399 Compare February 27, 2026 17:20
@renovate renovate Bot force-pushed the renovate/all-deps branch 10 times, most recently from 41f103a to 97b91e2 Compare March 6, 2026 22:46
@renovate renovate Bot force-pushed the renovate/all-deps branch 6 times, most recently from 7523436 to 446dcc0 Compare March 15, 2026 01:01
@renovate renovate Bot force-pushed the renovate/all-deps branch 3 times, most recently from b988650 to 363b5ca Compare March 21, 2026 01:57
@renovate renovate Bot force-pushed the renovate/all-deps branch 2 times, most recently from 3d9bce5 to 2b8be28 Compare March 27, 2026 21:09
@renovate renovate Bot force-pushed the renovate/all-deps branch 2 times, most recently from c5af631 to 492f172 Compare April 1, 2026 17:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants