fix(deps): update all #278

renovate · 2020-03-28T09:20:06Z

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Type	Update
@hot-loader/react-dom	`16.13.0` -> `16.14.0`	dependencies	minor
actions/cache	`v3.0.6` -> `v3.4.3`	action	minor
actions/checkout	`v3.0.2` -> `v3.6.0`	action	minor
actions/setup-node	`v3.5.0` -> `v3.9.1`	action	minor
alex (source)	`9.1.0` -> `9.1.1`	dependencies	patch
alpine	`3.16` -> `3.22`	final	minor
autoprefixer	`9.7.6` -> `9.8.8`	devDependencies	minor
babel-eslint → @babel/eslint-parser	`10.1.0` -> `7.11.0`	devDependencies	replacement
babel-loader	`8.1.0` -> `8.4.1`	devDependencies	minor
babel-plugin-add-module-exports	`1.0.2` -> `1.0.4`	devDependencies	patch
blob-to-buffer	`1.2.8` -> `1.2.9`	dependencies	patch
browser-sync (source)	`2.26.14` -> `2.29.3`	devDependencies	minor
chalk	`4.0.0` -> `4.1.2`	devDependencies	minor
core-js (source)	`3.23.5` -> `3.45.1`	dependencies	minor
coveralls	`3.1.0` -> `3.1.1`	devDependencies	patch
cross-env	`7.0.2` -> `7.0.3`	devDependencies	patch
css-loader	`3.5.3` -> `3.6.0`	devDependencies	minor
cssnano	`4.1.10` -> `4.1.11`	devDependencies	patch
cytoscape (source)	`3.14.2` -> `3.33.1`	dependencies	minor
cytoscape-cola	`2.3.1` -> `2.5.1`	dependencies	minor
cytoscape-elk	`2.0.2` -> `2.3.0`	dependencies	minor
cytoscape-node-html-label	`1.2.0` -> `1.2.2`	dependencies	patch
dotenv-webpack	`1.7.0` -> `1.8.0`	devDependencies	minor
enzyme-adapter-react-16 (source)	`1.15.2` -> `1.15.8`	devDependencies	patch
eslint-config-prettier	`6.11.0` -> `6.15.0`	devDependencies	minor
eslint-plugin-import	`2.26.0` -> `2.32.0`	devDependencies	minor
eslint-plugin-jsx-a11y	`6.5.1` -> `6.10.2`	devDependencies	minor
eslint-plugin-node → eslint-plugin-n	`11.1.0` -> `14.0.0`	devDependencies	replacement
eslint-plugin-promise	`4.2.1` -> `4.3.1`	devDependencies	minor
eslint-plugin-react	`7.28.0` -> `7.37.5`	devDependencies	minor
file-loader	`6.0.0` -> `6.2.0`	devDependencies	minor
github.com/Doozers/gl	`d7477da` -> `543b8bd`	require	digest
github.com/cayleygraph/quad	`v1.2.4` -> `v1.3.0`	require	minor
github.com/go-chi/chi	`v1.5.4` -> `v1.5.5`	require	patch
github.com/go-chi/render	`v1.0.2` -> `v1.0.3`	require	patch
github.com/goccy/go-graphviz	`v0.1.1` -> `v0.2.9`	require	minor
github.com/golang/protobuf	`v1.5.2` -> `v1.5.4`	require	patch
github.com/grpc-ecosystem/go-grpc-middleware	`v1.3.0` -> `v1.4.0`	require	minor
github.com/oklog/run	`v1.1.0` -> `v1.2.0`	require	minor
github.com/peterbourgon/ff/v3	`v3.3.0` -> `v3.4.0`	require	minor
github.com/rs/cors	`v1.8.3` -> `v1.11.1`	require	minor
github.com/stretchr/testify	`v1.8.3` -> `v1.11.1`	require	minor
github.com/tailscale/depaware	`77d1e97` -> `b748de0`	require	digest
github.com/tailscale/depaware	`720c4b4` -> `b748de0`	require	digest
go.uber.org/zap	`v1.24.0` -> `v1.27.0`	require	minor
golang	`1.18-alpine` -> `1.25-alpine`	final	minor
golang	`1.18-alpine` -> `1.25-alpine`	stage	minor
golang	`1.19.0-alpine` -> `1.25.1-alpine`	stage	minor
golang.org/x/exp	`2e198f4` -> `df92998`	require	digest
golang.org/x/oauth2	`v0.0.0-20200902213428-5d25da1a8d43` -> `v0.31.0`	require	minor
golang.org/x/tools	`v0.0.0-20201211185031-d93e913c1a58` -> `v0.37.0`	require	minor
golang.org/x/tools	`v0.0.0-20210106214847-113979e3529a` -> `v0.37.0`	require	minor
golang.org/x/tools	`v0.6.0` -> `v0.37.0`	require	minor
google.golang.org/genproto	`7f2fa6f` -> `9702482`	require	digest
goreleaser/goreleaser-action	`v2.6.1` -> `v2.9.1`	action	minor
history	`5.0.0` -> `5.3.0`	devDependencies	minor
html-webpack-plugin	`4.2.0` -> `4.5.2`	devDependencies	minor
html2canvas (source)	`1.0.0-rc.5` -> `1.4.1`	dependencies	minor
markdownlint-cli	`0.27.1` -> `0.45.0`	dependencies	minor
mini-css-extract-plugin	`0.9.0` -> `0.12.0`	devDependencies	minor
mockdate	`3.0.2` -> `3.0.5`	devDependencies	patch
potrace	`2.1.6` -> `2.1.8`	dependencies	patch
prettier (source)	`2.0.5` -> `2.8.8`	devDependencies	minor
prompt	`1.0.0` -> `1.3.0`	devDependencies	minor
prop-types (source)	`15.7.2` -> `15.8.1`	devDependencies	minor
react-draggable	`4.3.1` -> `4.5.0`	dependencies	minor
react-feather	`2.0.8` -> `2.0.10`	dependencies	patch
react-hook-form (source)	`6.0.1` -> `6.15.8`	dependencies	minor
react-hot-loader	`4.12.20` -> `4.13.1`	devDependencies	minor
replace	`1.2.0` -> `1.2.2`	devDependencies	patch
sass-loader	`9.0.1` -> `9.0.3`	devDependencies	patch
style-loader	`1.2.0` -> `1.3.0`	devDependencies	minor
tabler (source)	`1.0.0-alpha.7` -> `1.0.0-alpha.8`	dependencies	patch
url-loader	`4.1.0` -> `4.1.1`	devDependencies	patch
webpack	`4.43.0` -> `4.47.0`	devDependencies	minor
webpack-bundle-analyzer	`3.7.0` -> `3.9.0`	devDependencies	minor
webpack-hot-middleware	`2.25.1` -> `2.26.1`	devDependencies	minor

This is a special PR that replaces babel-eslint with the community suggested minimal stable replacement version.

This is a special PR that replaces eslint-plugin-node with the community suggested minimal stable replacement version.

Release Notes

actions/cache (actions/cache)

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v3.4.0, see those release notes and the announcement for more details.

Bump @actions/cache to v4.0.1 by @robherley in #1554

Full Changelog: actions/cache@v3.4.0...v3.4.2

`v3.4.1`

Compare Source

[!WARNING]
This version was incorrectly released using a SHA pointing to a newer version for immutable actions only. Please use v3.4.2 (or v3) instead.

`v3.4.0`

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

@actions/core: 1.11.1
@actions/io: 1.1.3
@vercel/ncc: 0.38.3

Full Changelog: actions/cache@v3.3.3...v3.4.0

`v3.3.3`

Compare Source

What's Changed

Cache v3.3.3 by @robherley in #1302

New Contributors

@robherley made their first contribution in #1302

Full Changelog: actions/cache@v3...v3.3.3

`v3.3.2`

Compare Source

What's Changed

Fixed readme with new segment timeout values by @kotewar in #1133
Readme fixes by @kotewar in #1134
Updated description of the lookup-only input for main action by @kotewar in #1130
Change two new actions mention as quoted text by @bishal-pdMSFT in #1131
Update Cross-OS Caching tips by @pdotl in #1122
Bazel example (Take #2️⃣) by @vorburger in #1132
Remove actions to add new PRs and issues to a project board by @jorendorff in #1187
Consume latest toolkit and fix dangling promise bug by @chkimes in #1217
Bump action version to 3.3.2 by @bethanyj28 in #1236

New Contributors

@vorburger made their first contribution in #1132
@jorendorff made their first contribution in #1187
@chkimes made their first contribution in #1217
@bethanyj28 made their first contribution in #1236

Full Changelog: actions/cache@v3...v3.3.2

`v3.3.1`

Compare Source

What's Changed

Reduced download segment size to 128 MB and timeout to 10 minutes by @kotewar in #1129

Full Changelog: actions/cache@v3...v3.3.1

`v3.3.0`

Compare Source

What's Changed

Bug: Permission is missing in cache delete example by @kotokaze in #1123
Add lookup-only option by @cdce8p in #1041

New Contributors

@kotokaze made their first contribution in #1123

Full Changelog: actions/cache@v3...v3.3.0

`v3.2.6`

Compare Source

What's Changed

Updated branch in Force deletion of caches by @t-dedah in #1108
Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners by @pdotl in #1118

Full Changelog: actions/cache@v3...v3.2.6

`v3.2.5`

Compare Source

What's Changed

Rewrite readmes by @jsoref in #1085
Fixed typos and formatting in docs by @kotewar in #1076
Fixing paths for OSes by @kotewar in #1101
Release patch version update by @Phantsure in #1105

New Contributors

@jsoref made their first contribution in #1085

Full Changelog: actions/cache@v3...v3.2.5

`v3.2.4`

Compare Source

What's Changed

Update json5 package version by @vsvipul in #1065
Cache recipes for cache, restore and save actions by @kotewar in #1055
Add gnu tar and zstd as pre-requisites for windows self-hosted runners by @pdotl in #1068
Fix a whitespace typo by @kurtmckee in #1074
📝 #1045 update using the set-output command is deprecated by @siguikesse in #1046
Fix referenced output key in save action readme by @ruudk in #1061
Update workflows to use reusable-workflows by @jongwooo in #1066
Introduce add-to-project step & rename workflow files by @pallavx in #1077
chore: Fix syntax error typo by @vHeemstra in #1081
Update caching-strategies.md by @kpfleming in #1084
Added another usage hint to foresee #1072 by @maybeec in #1089
Add fail-on-cache-miss option by @cdce8p in #1036

New Contributors

@kurtmckee made their first contribution in #1074
@siguikesse made their first contribution in #1046
@ruudk made their first contribution in #1061
@pallavx made their first contribution in #1077
@vHeemstra made their first contribution in #1081
@kpfleming made their first contribution in #1084
@maybeec made their first contribution in #1089
@cdce8p made their first contribution in #1036

Full Changelog: actions/cache@v3...v3.2.4

`v3.2.3`

Compare Source

What's Changed

Add Mint example by @uhooi in #1051
Fixed broken link by @kotewar in #1057
Add support to opt-in enable cross-os caching on windows by @Phantsure in #1056
Release support for cross-os caching as opt-in feature by @Phantsure in #1060

New Contributors

@uhooi made their first contribution in #1051

Full Changelog: actions/cache@v3...v3.2.3

`v3.2.2`

Compare Source

What's Changed

Fix formatting error in restore/README.md by @me-and in #1044
save/README.md: Fix typo in example by @mmuetzel in #1040
README.md: remove outdated Windows cache tip link by @me-and in #1042
Revert compression changes related to windows but keep version logging by @Phantsure in #1049

New Contributors

@me-and made their first contribution in #1044
@mmuetzel made their first contribution in #1040

Full Changelog: actions/cache@v3.2.1...v3.2.2

`v3.2.1`

Compare Source

What's Changed

Release compression related changes for windows by @Phantsure in #1039
Upgrade codeql to v2 by @Phantsure in #1023

Full Changelog: actions/cache@v3.2.0...v3.2.1

`v3.2.0`

Compare Source

What's Changed

fix wrong timeout env var key in README.md by @walterddr in #959
Updated release doc with correct env variable by @kotewar in #960
Create pull_request_template.md by @pdotl in #963
Update README with clearer info about cache-hit and its value by @kotewar in #961
Change datadog/squid to Ubuntu/squid in CI check by @bishal-pdMSFT in #976
Add more details to version section in readme by @bishal-pdMSFT in #971
Update hashFiles documentation reference by @asaf400 in #979
Updated link for cache segment download info by @kotewar in #986
Readme update for deleting caches by @t-dedah in #981
Add oncall logic to assign issues and PRs by @vsvipul in #997
Bump minimatch from 3.0.4 to 3.1.2 by @dependabot in #998
Revert "Bump minimatch from 3.0.4 to 3.1.2" by @vsvipul in #1005
Fix npm vulnerability by @Phantsure in #1007
refactor: Use early return pattern to avoid nested conditions by @jongwooo in #1013
Use cache in check-dist.yml by @jongwooo in #1004
chore: Use built-in cache action to cache dependencies by @jongwooo in #1014
Updated node example by @t-dedah in #1008
Fix: Node npm doc example by @apascualm in #1026
docs: fix an invalid link in workarounds.md by @teatimeguest in #929
General Availability release for granular cache by @kotewar in #1035 More details here on beta release.

New Contributors

@walterddr made their first contribution in #959
@asaf400 made their first contribution in [#979](https://redirect.git

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2025-08-09T06:25:11Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	License
golang/github.com/go-chi/chi@v1.5.4 ⏵ v1.5.5
golang/golang.org/x/oauth2@v0.0.0-20200902213428-5d25da1a8d43 ⏵ v0.30.0	^-18	⁺¹⁵
golang/golang.org/x/oauth2@v0.0.0-20200902213428-5d25da1a8d43 ⏵ v0.31.0	^-18	⁺¹⁵
golang/golang.org/x/tools@v0.0.0-20201211185031-d93e913c1a58 ⏵ v0.37.0	⁺¹
golang/google.golang.org/grpc@v1.31.0 ⏵ v1.74.2	⁺²	⁺¹⁵
npm/alex@9.1.0 ⏵ 9.1.1
golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250826171959-ef028d996bc1
npm/markdownlint-cli@0.27.1 ⏵ 0.45.0	⁺¹		⁺¹
golang/golang.org/x/exp@v0.0.0-20200224162631-6cc2880d07d6 ⏵ v0.0.0-20250911091902-df9299821621	⁺²
golang/github.com/stretchr/testify@v1.8.3 ⏵ v1.11.1	⁺³
golang/github.com/golang/protobuf@v1.4.2 ⏵ v1.5.4	⁺¹
golang/go.uber.org/zap@v1.24.0 ⏵ v1.27.0	⁺¹
golang/github.com/Doozers/gl@v0.0.0-20230526153138-d7477da16375 ⏵ v0.0.0-20231009104428-543b8bd1b541	^-2		⁺²
golang/github.com/go-chi/render@v1.0.2 ⏵ v1.0.3
golang/github.com/peterbourgon/ff/v3@v3.3.0 ⏵ v3.4.0	⁺¹
golang/github.com/cayleygraph/quad@v1.2.4 ⏵ v1.3.0
golang/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0 ⏵ v1.4.0	⁺¹
golang/github.com/goccy/go-graphviz@v0.1.1 ⏵ v0.2.9	⁺³			⁺³¹
golang/github.com/tailscale/depaware@v0.0.0-20201214215404-77d1e9757027 ⏵ v0.0.0-20250112153213-b748de04d81b	⁺¹
golang/github.com/rs/cors@v1.8.3 ⏵ v1.11.1	⁺¹
golang/github.com/oklog/run@v1.1.0 ⏵ v1.2.0

View full report

renovate bot requested a review from moul as a code owner March 28, 2020 09:20

trafico-bot bot added the 🔍 Ready for Review Pull Request is not reviewed yet label Mar 28, 2020

renovate bot force-pushed the renovate/all branch from ab1227b to b82c017 Compare March 28, 2020 10:18

renovate bot changed the title ~~chore(deps): update module cayleygraph/quad to v1.2.2~~ chore(deps): update module cayleygraph/quad to v1.2.3 Mar 28, 2020

renovate bot changed the title ~~chore(deps): update module cayleygraph/quad to v1.2.3~~ chore(deps): update all Mar 28, 2020

renovate bot force-pushed the renovate/all branch 5 times, most recently from 0c509aa to 9661fcf Compare March 30, 2020 12:03

renovate bot changed the title ~~chore(deps): update all~~ Update all Mar 30, 2020

renovate bot changed the title ~~Update all~~ chore(deps): update all Mar 30, 2020

renovate bot force-pushed the renovate/all branch 13 times, most recently from 1c40644 to 777538c Compare April 6, 2020 17:11

renovate bot changed the title ~~chore(deps): update all~~ Update all Apr 6, 2020

renovate bot changed the title ~~Update all~~ chore(deps): update all Apr 6, 2020

renovate bot force-pushed the renovate/all branch 3 times, most recently from a599d83 to 4b33626 Compare April 7, 2020 10:14

renovate bot force-pushed the renovate/all branch from 349a033 to 944a03b Compare June 12, 2025 04:37

renovate bot force-pushed the renovate/all branch from 944a03b to 05a4a94 Compare June 28, 2025 19:58

renovate bot force-pushed the renovate/all branch 3 times, most recently from df5bfcb to de99261 Compare July 7, 2025 21:31

renovate bot force-pushed the renovate/all branch from de99261 to f9cc77d Compare July 20, 2025 11:55

renovate bot force-pushed the renovate/all branch 6 times, most recently from c82f9f6 to 35557c8 Compare August 9, 2025 06:24

renovate bot force-pushed the renovate/all branch 4 times, most recently from 086d8f5 to 7059986 Compare August 16, 2025 11:42

renovate bot force-pushed the renovate/all branch 3 times, most recently from e5ab74e to 1c16a50 Compare August 24, 2025 03:58

renovate bot force-pushed the renovate/all branch 5 times, most recently from 19c251e to b2d0ef4 Compare September 6, 2025 11:28

renovate bot force-pushed the renovate/all branch 3 times, most recently from 7b49c9a to 3edbaeb Compare September 14, 2025 11:51

fix(deps): update all

aa91f22

renovate bot force-pushed the renovate/all branch from 3edbaeb to aa91f22 Compare September 17, 2025 03:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

fix(deps): update all #278

fix(deps): update all #278

Uh oh!

renovate bot commented Mar 28, 2020 •

edited

Loading

Uh oh!

socket-security bot commented Aug 9, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

fix(deps): update all #278

Are you sure you want to change the base?

fix(deps): update all #278

Uh oh!

Conversation

renovate bot commented Mar 28, 2020 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

⚠️ Important Changes

Minor changes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

socket-security bot commented Aug 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

renovate bot commented Mar 28, 2020 •

edited

Loading

socket-security bot commented Aug 9, 2025 •

edited

Loading