Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 26, 2020

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package Change Age Confidence Type Update
@hot-loader/react-dom 16.13.0 -> 17.0.2 age confidence dependencies major
actions/cache v3.0.6 -> v4.3.0 age confidence action major
actions/checkout v3.0.2 -> v5.0.0 age confidence action major
actions/checkout v3 -> v5 age confidence action major
actions/setup-go v3 -> v6 age confidence action major
actions/setup-node v3.5.0 -> v5.0.0 age confidence action major
alex (source) 9.1.0 -> 11.0.1 age confidence dependencies major
autoprefixer 9.7.6 -> 10.4.21 age confidence devDependencies major
babel-loader 8.1.0 -> 10.0.0 age confidence devDependencies major
browser-sync (source) 2.26.14 -> 3.0.4 age confidence devDependencies major
chalk 4.0.0 -> 5.6.2 age confidence devDependencies major
codecov/codecov-action v2.1.0 -> v5.5.1 age confidence action major
connect-history-api-fallback 1.6.0 -> 2.0.0 age confidence devDependencies major
cross-env 7.0.2 -> 10.1.0 age confidence devDependencies major
css-loader 3.5.3 -> 7.1.2 age confidence devDependencies major
cssnano 4.1.10 -> 7.1.1 age confidence devDependencies major
dotenv-webpack 1.7.0 -> 8.1.1 age confidence devDependencies major
eslint-config-prettier 6.11.0 -> 10.1.8 age confidence devDependencies major
eslint-plugin-promise 4.2.1 -> 7.2.1 age confidence devDependencies major
eslint-watch 7.0.0 -> 8.0.0 age confidence devDependencies major
ghcr.io/codfish/semantic-release-action v1 -> v4 age confidence docker major
github.com/go-chi/chi v1.5.4 -> v5.2.3 age confidence require major
github.com/google/go-github/v30 v30.1.0 -> v75.0.0 age confidence require major
github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 -> v2.3.2 age confidence require major
github.com/grpc-ecosystem/grpc-gateway v1.16.0 -> v2.27.2 age confidence require major
github/codeql-action v2 -> v3 age confidence action major
gopkg.in/yaml.v2 v2.4.0 -> v3.0.1 age confidence require major
goreleaser/goreleaser-action v2.6.1 -> v6.4.0 age confidence action major
html-webpack-plugin 4.2.0 -> 5.6.4 age confidence devDependencies major
mini-css-extract-plugin 0.9.0 -> 2.9.4 age confidence devDependencies major
open-cli 6.0.1 -> 8.0.0 age confidence devDependencies major
postcss-loader 3.0.0 -> 8.2.0 age confidence devDependencies major
prettier (source) 2.0.5 -> 3.6.2 age confidence devDependencies major
react-hook-form (source) 6.0.1 -> 7.63.0 age confidence dependencies major
rimraf 3.0.2 -> 6.0.1 age confidence devDependencies major
sass-loader 9.0.1 -> 16.0.5 age confidence devDependencies major
style-loader 1.2.0 -> 4.0.0 age confidence devDependencies major
webpack 4.43.0 -> 5.102.0 age confidence devDependencies major
webpack-bundle-analyzer 3.7.0 -> 4.10.2 age confidence devDependencies major

Release Notes

actions/cache (actions/cache)

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

Compare Source

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

Compare Source

What's Changed

New Contributors

Full Changelog: actions/cache@v4.2.2...v4.2.3

v4.2.2

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

Full Changelog: actions/cache@v4.2.1...v4.2.2

v4.2.1

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

New Contributors

Full Changelog: actions/cache@v4.2.0...v4.2.1

v4.2.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

Full Changelog: actions/cache@v4.1.2...v4.2.0

v4.1.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4.1.1...v4.1.2

v4.1.1

Compare Source

What's Changed

Full Changelog: actions/cache@v4.1.0...v4.1.1

v4.1.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4.0.2...v4.1.0

v4.0.2

Compare Source

What's Changed

Full Changelog: actions/cache@v4.0.1...v4.0.2

v4.0.1

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4...v4.0.1

v4.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/cache@v3...v4.0.0

v3.5.0

Compare Source

  • Bump actions/cache to v4.1.0

Full Changelog: actions/cache@v3...v3.5.0

v3.4.3

Compare Source

What's Changed

Full Changelog: actions/cache@v3.4.2...v3.4.3

v3.4.2

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v3.4.0, see those release notes and the announcement for more details.

Full Changelog: actions/cache@v3.4.0...v3.4.2

v3.4.1

Compare Source

[!WARNING]
This version was incorrectly released using a SHA pointing to a newer version for immutable actions only. Please use v3.4.2 (or v3) instead.

v3.4.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

Full Changelog: actions/cache@v3.3.3...v3.4.0

v3.3.3

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v3...v3.3.3

v3.3.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v3...v3.3.2

v3.3.1

Compare Source

What's Changed

Full Changelog: actions/cache@v3...v3.3.1

v3.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v3...v3.3.0

v3.2.6

Compare Source

What's Changed

Full Changelog: actions/cache@v3...v3.2.6

v3.2.5

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v3...v3.2.5

v3.2.4

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v3...v3.2.4

v3.2.3

Compare Source

What's Changed

New Contributors

Full Changelog: actions/cache@v3...v3.2.3

v3.2.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v3.2.1...v3.2.2

v3.2.1

Compare Source

What's Changed

Full Changelog: actions/cache@v3.2.0...v3.2.1

v3.2.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v3...v3.2.0

v3.0.11

Compare Source

What's Changed

New Contributors

Full Changelog: actions/cache@v3...v3.0.11

v3.0.10

Compare Source

  • Fix a bug with sorting inputs.
  • Update definition for restore-keys in README.md

v3.0.9

Compare Source

  • Enhanced the warning message for cache unavailability in case of GHES.

v3.0.8

Compare Source

What's Changed
  • Fix zstd not working for windows on gnu tar in issues.
  • Allow users to provide a custom timeout as input for aborting cache segment download using the environment variable SEGMENT_DOWNLOAD_TIMEOUT_MIN. Default is 60 minutes.

v3.0.7

Compare Source

What's Changed
  • Fix for the download stuck problem has been added in actions/cache for users who were intermittently facing the issue. As part of this fix, new timeout has been introduced in the download step to stop the download if it doesn't complete within an hour and run the rest of the workflow without erroring out.
actions/checkout (actions/checkout)

v5.0.0

Compare Source

What's Changed
⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this re


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from moul as a code owner August 26, 2020 13:37
@renovate
Copy link
Contributor Author

renovate bot commented Aug 26, 2020

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻️ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you check the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: docker run --rm --name=renovate_go --label=renovate_child -v "/mnt/renovate/gh/moul/depviz":"/mnt/renovate/gh/moul/depviz" -v "/tmp/renovate-cache":"/tmp/renovate-cache" -v "/tmp/renovate-cache/others/go":"/tmp/renovate-cache/others/go" -e GOPATH -e CGO_ENABLED -w "/mnt/renovate/gh/moul/depviz" docker.io/renovate/go:1.16.3 bash -l -c "git config --global url.\"https://**redacted**@github.com/\".insteadOf \"https://github.com/\" && go get -d ./... && go mod tidy && go mod tidy"
go: moul.io/graphman/viz@v1.6.0: reading moul.io/graphman/viz/viz/go.mod at revision viz/v1.6.0: unknown revision viz/v1.6.0

File name: tool/go.sum
Command failed: docker run --rm --name=renovate_go --label=renovate_child -v "/mnt/renovate/gh/moul/depviz":"/mnt/renovate/gh/moul/depviz" -v "/tmp/renovate-cache":"/tmp/renovate-cache" -v "/tmp/renovate-cache/others/go":"/tmp/renovate-cache/others/go" -e GOPATH -e CGO_ENABLED -w "/mnt/renovate/gh/moul/depviz/tool" docker.io/renovate/go:1.16.3 bash -l -c "git config --global url.\"https://**redacted**@github.com/\".insteadOf \"https://github.com/\" && go get -d ./... && go mod tidy && go mod tidy"
go: downloading github.com/gilliek/go-opml v1.0.0
go: downloading golang.org/x/oauth2 v0.0.0-20200902213428-5d25da1a8d43
go: downloading golang.org/x/net v0.0.0-20201021035429-f5854403a974
go: downloading google.golang.org/appengine v1.6.6
go: downloading github.com/golang/protobuf v1.4.2
go: downloading google.golang.org/protobuf v1.25.0
go: downloading github.com/google/go-github v17.0.0+incompatible
go: downloading github.com/google/go-github/v30 v30.1.0
go: downloading github.com/google/go-querystring v1.0.0
go: downloading golang.org/x/crypto v0.0.0-20201002170205-7f63de1d35b0
go get: added github.com/google/go-github/v30 v30.1.0
go: downloading github.com/tailscale/depaware v0.0.0-20201214215404-77d1e9757027
go: downloading golang.org/x/tools v0.0.0-20201211185031-d93e913c1a58
go: downloading github.com/pkg/diff v0.0.0-20200914180035-5b29258ca4f7
go: downloading github.com/sergi/go-diff v1.0.0
go: downloading golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1
go: downloading github.com/stretchr/testify v1.4.0
go: downloading golang.org/x/mod v0.4.0
go: downloading github.com/davecgh/go-spew v1.1.0
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading gopkg.in/yaml.v2 v2.2.2
go: downloading github.com/google/go-cmp v0.5.1
moul.io/depviz/v3/tool/internal/tools imports
	github.com/tailscale/depaware/depaware imports
	github.com/pkg/diff/write tested by
	github.com/pkg/diff/write.test imports
	github.com/sergi/go-diff/diffmatchpatch tested by
	github.com/sergi/go-diff/diffmatchpatch.test imports
	github.com/stretchr/testify/assert imports
	gopkg.in/yaml.v2: fstatat /tmp/renovate-cache/others/go/pkg/mod/gopkg.in/yaml.v2@v2.2.2: permission denied

File name: web/package-lock.json
npm notice 
npm notice New minor version of npm available! 7.7.6 -> 7.12.0
npm notice Changelog: <https://github.com/npm/cli/releases/tag/v7.12.0>
npm notice Run `npm install -g npm@7.12.0` to update!
npm notice 
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: Depviz@1.0.0
npm ERR! Found: react@16.13.1
npm ERR! node_modules/react
npm ERR!   react@"16.13.1" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer react@"17.0.1" from @hot-loader/react-dom@17.0.1
npm ERR! node_modules/@hot-loader/react-dom
npm ERR!   @hot-loader/react-dom@"17.0.1" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate-cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate-cache/others/npm/_logs/2021-05-07T03_06_02_819Z-debug.log

@trafico-bot trafico-bot bot added the 🔍 Ready for Review Pull Request is not reviewed yet label Aug 26, 2020
@renovate renovate bot force-pushed the renovate/major-all branch 4 times, most recently from 2ab66a1 to 67ec63a Compare September 8, 2020 17:12
@renovate renovate bot force-pushed the renovate/major-all branch 6 times, most recently from 172b348 to 2fab980 Compare September 19, 2020 07:07
@renovate renovate bot force-pushed the renovate/major-all branch 2 times, most recently from bee05af to bab262f Compare October 2, 2020 13:29
@renovate renovate bot force-pushed the renovate/major-all branch 4 times, most recently from d1dc90f to 318257b Compare October 10, 2020 20:40
@renovate renovate bot force-pushed the renovate/major-all branch 7 times, most recently from a88c9a6 to 22c61dc Compare October 19, 2020 17:57
@renovate renovate bot force-pushed the renovate/major-all branch 2 times, most recently from d949bec to e7654b7 Compare October 21, 2020 01:46
@renovate renovate bot changed the title chore(deps): update all (major) fix(deps): update all (major) Oct 21, 2020
@renovate renovate bot force-pushed the renovate/major-all branch 3 times, most recently from ce2529d to 1c518b4 Compare May 6, 2025 04:13
@renovate renovate bot force-pushed the renovate/major-all branch 3 times, most recently from b0dc93c to 7be6dea Compare May 16, 2025 00:53
@renovate renovate bot force-pushed the renovate/major-all branch 3 times, most recently from 3186736 to 872039b Compare May 24, 2025 03:59
@renovate renovate bot force-pushed the renovate/major-all branch 2 times, most recently from bff2d0f to 7d3e612 Compare June 2, 2025 03:26
@renovate renovate bot force-pushed the renovate/major-all branch from 7d3e612 to 25ef63d Compare June 6, 2025 16:48
@renovate renovate bot force-pushed the renovate/major-all branch 2 times, most recently from cbf7228 to f0ef250 Compare June 15, 2025 16:03
@renovate renovate bot force-pushed the renovate/major-all branch from f0ef250 to 975012a Compare June 28, 2025 19:59
@renovate renovate bot force-pushed the renovate/major-all branch 2 times, most recently from f415d7c to 3f5a63c Compare July 9, 2025 15:35
@renovate renovate bot force-pushed the renovate/major-all branch from 3f5a63c to 2ad089c Compare July 20, 2025 11:57
@renovate renovate bot force-pushed the renovate/major-all branch 3 times, most recently from 1a5611d to b9b3d85 Compare August 7, 2025 15:08
@renovate renovate bot force-pushed the renovate/major-all branch from b9b3d85 to 1ed75fa Compare September 17, 2025 03:58
Copy link

socket-security bot commented Sep 17, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​@​babel/​plugin-syntax-dynamic-import@​7.8.31001006382100
Addednpm/​@​babel/​plugin-proposal-class-properties@​7.10.41001006482100
Addedgolang/​github.com/​go-chi/​chi/​v5@​v5.2.370100100100100
Updatedgolang/​github.com/​go-chi/​chi@​v1.5.4 ⏵ v1.5.570100100100100
Addednpm/​@​babel/​preset-react@​7.10.4991007092100
Addednpm/​@​babel/​plugin-transform-react-constant-elements@​7.10.41001007191100
Addednpm/​bitmap2vector@​0.0.4731009677100
Addednpm/​@​babel/​node@​7.10.5991007492100
Addedgolang/​github.com/​grpc-ecosystem/​grpc-gateway/​v2@​v2.27.274100100100100
Addedgolang/​github.com/​google/​go-github/​v75@​v75.0.075100100100100
Addednpm/​axios@​0.27.2997510097100
Updatedgolang/​golang.org/​x/​tools@​v0.6.0 ⏵ v0.35.075 +3100100100100
Addednpm/​babel-jest@​26.6.3991007697100
Addednpm/​@​babel/​cli@​7.11.61001007693100
Addednpm/​@​babel/​plugin-transform-runtime@​7.11.51001007794100
Addednpm/​babel-plugin-inline-import@​3.0.010010010077100
Addednpm/​blob-to-buffer@​1.2.81001007878100
Addednpm/​@​hot-loader/​react-dom@​16.13.01001009078100
Addednpm/​@​babel/​preset-env@​7.11.5971007894100
Addednpm/​autoprefixer@​9.7.610010010079100
Addednpm/​@​babel/​core@​7.11.6991007995100
Addednpm/​babel-plugin-lodash@​3.3.49910010080100
Addednpm/​babel-plugin-transform-react-remove-prop-types@​0.4.2410010010080100
Addednpm/​@​babel/​polyfill@​7.11.51001008082100
Addednpm/​babel-plugin-add-module-exports@​1.0.210010010081100
Addednpm/​babel-loader@​8.1.09910010083100
Addednpm/​babel-eslint@​10.1.09910010083100
Updatedgolang/​golang.org/​x/​exp@​v0.0.0-20230522175609-2e198f4a06a1 ⏵ v0.0.0-20240325151524-a685a6edb6d895100100100100
Updatedgolang/​github.com/​stretchr/​testify@​v1.8.3 ⏵ v1.10.096 +3100100100100
Updatedgolang/​github.com/​golang/​protobuf@​v1.5.2 ⏵ v1.5.497 +1100100100100
Addedgolang/​github.com/​grpc-ecosystem/​go-grpc-middleware/​v2@​v2.3.299100100100100
Updatedgolang/​github.com/​grpc-ecosystem/​go-grpc-middleware@​v1.3.0 ⏵ v1.0.0100 +1100100100100

View full report

@renovate renovate bot force-pushed the renovate/major-all branch 4 times, most recently from 4eb290a to e86713b Compare September 26, 2025 07:10
@renovate renovate bot force-pushed the renovate/major-all branch from e86713b to f722d65 Compare September 27, 2025 07:32
@renovate renovate bot force-pushed the renovate/major-all branch from f722d65 to a756bd3 Compare September 30, 2025 11:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working 🔍 Ready for Review Pull Request is not reviewed yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants