mirror of
https://github.com/0xJacky/nginx-ui.git
synced 2026-04-25 08:45:58 +03:00
[PR #1349] [MERGED] chore(deps): update all non-major dependencies #7038
Labels
No labels
Q/A
bug
casdoor
dependencies
docker
documentation
duplicate
enhancement
help wanted
invalid
lego
platform:openwrt
platform:windows
pull-request
question
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/nginx-ui#7038
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/0xJacky/nginx-ui/pull/1349
Author: @renovate[bot]
Created: 9/10/2025
Status: ✅ Merged
Merged: 9/18/2025
Merged by: @0xJacky
Base:
dev← Head:renovate/all-minor-patch📝 Commits (1)
296c264chore(deps): update all non-major dependencies📊 Changes
7 files changed (+203 additions, -166 deletions)
View changed files
📝
.github/workflows/build.yml(+2 -2)📝
app/package.json(+7 -7)📝
app/pnpm-lock.yaml(+59 -59)📝
docs/package.json(+3 -3)📝
docs/pnpm-lock.yaml(+82 -82)📝
go.mod(+16 -13)📝
go.sum(+34 -0)📄 Description
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.
This PR contains the following updates:
^0.8.4->^0.9.0^1.2.22->^1.2.23^3.0.1->^3.0.2^13.1.2->^13.2.0^22.18.0->^22.18.6^4.16.8->^4.16.9v1.19.0->v1.20.0v4.25.2->v4.26.0v0.13.4->v0.14.0v1.41.1->v1.41.2v1.26.1->v1.26.2^1.25.0->^1.25.110.15.1+sha512.34e538c329b5553014ca8e8f4535997f96180a1d0f614339357449935350d924e22f8614682191264ec33d1462ac21561aff97f6bb18065351c162c7e8f6de67->10.17.0^7.1.5->^7.1.6^3.5.20->^3.5.21Release Notes
formkit/auto-animate (@formkit/auto-animate)
v0.9.0Compare Source
MasterKale/SimpleWebAuthn (@simplewebauthn/browser)
v13.2.0Compare Source
Changes
verifyRegistrationResponse()has been defined more strictlyto communicate that
registrationInfowill only ever be present ifverifiedistrue(#715)
verifyRegistrationResponse()can now verify attestations containing SHA256 hashesby using EC public keys with the P-384 curve
(#721)
by setting
attestationSafetyNetEnforceCTSCheck: falsewhen callingverifyRegistrationResponse(). This check remains enforced by default(#722)
generic typing for
Uint8Arrayvia TypeScript 5.7.SimpleWebAuthn values of type
Uint8Array_are equivalent toUint8Arrayin Deno 2.1 andearlier, and
Uint8Array<ArrayBuffer>in Deno 2.2 and later.(#717)
uozi-tech/admin-kit (@uozi-admin/curd)
v4.16.9Compare Source
Patch Changes
de719f5Thanks @akinoccc! - fix(curd): adjust disabled state logic in StdFormController and set edit disabled in UserListcasdoor/casdoor-go-sdk (github.com/casdoor/casdoor-go-sdk)
v1.20.0Compare Source
Features
go-acme/lego (github.com/go-acme/lego/v4)
v4.26.0Compare Source
Added
Changed
Fixed
go-webauthn/webauthn (github.com/go-webauthn/webauthn)
v0.14.0Compare Source
Bug Fixes
Features
sashabaranov/go-openai (github.com/sashabaranov/go-openai)
v1.41.2Compare Source
What's Changed
New Contributors
Full Changelog: https://github.com/sashabaranov/go-openai/compare/v1.41.1...v1.41.2
uozi-tech/cosy (github.com/uozi-tech/cosy)
v1.26.2Compare Source
actions/go-versions (go)
v1.25.1: 1.25.1Compare Source
Go 1.25.1
pnpm/pnpm (pnpm)
v10.17.0Compare Source
Minor Changes
The
minimumReleaseAgeExcludesetting now supports patterns. For instance:Related PR: #9984.
Patch Changes
minimumReleaseAgecheck, when the package is requested by exact version and the packument is loaded from cache #9978.minimumReleaseAgeis set and the active version under a dist-tag is not mature enough, do not downgrade to a prerelease version in case the original version wasn't a prerelease one #9979.v10.16.1Compare Source
Patch Changes
v10.16.0Compare Source
Minor Changes
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.
The new setting is called
minimumReleaseAge. It specifies the number of minutes that must pass after a version is published before pnpm will install it. For example, settingminimumReleaseAge: 1440ensures that only packages released at least one day ago can be installed.If you set
minimumReleaseAgebut need to disable this restriction for certain dependencies, you can list them under theminimumReleaseAgeExcludesetting. For instance, with the following configuration pnpm will always install the latest version of webpack, regardless of its release time:Related issue: #9921.
Added support for
finders#9946.In the past,
pnpm listandpnpm whycould only search for dependencies by name (and optionally version). For example:prints the chain of dependencies to any installed instance of
minimist:What if we want to search by other properties of a dependency, not just its name? For instance, find all packages that have
react@17in their peer dependencies?This is now possible with "finder functions". Finder functions can be declared in
.pnpmfile.cjsand invoked with the--find-by=<function name>flag when runningpnpm listorpnpm why.Let's say we want to find any dependencies that have React 17 in peer dependencies. We can add this finder to our
.pnpmfile.cjs:Now we can use this finder function by running:
pnpm will find all dependencies that have this React in peer dependencies and print their exact locations in the dependency graph.
It is also possible to print out some additional information in the output by returning a string from the finder. For example, with the following finder:
Every matched package will also print out the license from its
package.json:Patch Changes
nodeVersionis not set to an exact semver version #9934.pnpm publishshould be able to publish a.tar.gzfile #9927.pnpm runreturn a non-zero exit code #9626.vitejs/vite (vite)
v7.1.6Compare Source
Bug Fixes
$variables correctly (#20761) (7e8e004)skipLibCheckisfalse(#20755) (cc54e29)Miscellaneous Chores
vuejs/core (vue)
v3.5.21Compare Source
Bug Fixes
${configDir}in paths for TypeScript 5.5+ (#13491) (8696e34), closes #13484__VUE_HMR_RUNTIME__from being overwritten by vue runtime in 3rd-party libraries (#13817) (1392734), closes vitejs/vite-plugin-vue#644Performance Improvements
Configuration
📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.