Lock file maintenance non-breaking - #94
Merged
Merged
Conversation
renovate
Bot
force-pushed
the
renovate/non-breaking
branch
4 times, most recently
from
October 1, 2025 02:48
04d5af9 to
82f0502
Compare
renovate
Bot
force-pushed
the
renovate/non-breaking
branch
2 times, most recently
from
October 10, 2025 12:46
632875f to
bd3977f
Compare
renovate
Bot
force-pushed
the
renovate/non-breaking
branch
from
October 11, 2025 17:55
bd3977f to
19dfcc3
Compare
firecow
approved these changes
Oct 14, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
22.18.6->22.18.104.0.8->4.0.922.19.0-alpine->22.20.0-alpine22.19.0-alpine->22.20.0-alpine29.4.4->29.4.55.9.2->5.9.3🔧 This Pull Request updates lock files to use the latest dependency versions.
Release Notes
apocas/dockerode (dockerode)
v4.0.9Compare Source
What's Changed
Full Changelog: apocas/dockerode@v4.0.8...v4.0.9
nodejs/node (node)
v22.20.0: 2025-09-24, Version 22.20.0 'Jod' (LTS), @richardlauCompare Source
Notable Changes
OpenSSL updated to 3.5.2
For official Node.js builds, or builds using the default build configuration, Node.js now bundles OpenSSL 3.5.2. This update allows Node.js 22.x to be supported through to the planned End-of-Life date of 2027-04-30 as the previously bundled OpenSSL 3.0.x goes out of support in September 2026.
This change does not affect third-party builds of Node.js that link to an external OpenSSL (or OpenSSL-compatible) library.
Other notable changes
5b83e1e0a2] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #5957134b25fd97b] - doc: stabilize --disable-sigusr1 (Rafael Gonzaga) #59707bf41218ed9] - doc: markpath.matchesGlobas stable (Aviv Keller) #595721dbad2058f] - (SEMVER-MINOR) http: add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) #59315062e837d5f] - (SEMVER-MINOR) http2: add support for raw header arrays in h2Stream.respond() (Tim Perry) #59455b8066611c3] - inspector: add http2 tracking support (Darshan Sen) #596119b7dd40da8] - (SEMVER-MINOR) sea: implement execArgvExtension (Joyee Cheung) #5956048bfbd3dca] - (SEMVER-MINOR) sea: support execArgv in sea config (Joyee Cheung) #59314cf06e74076] - (SEMVER-MINOR) stream: add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) #5946462bb80c17e] - (SEMVER-MINOR) test_runner: support object property mocking (Idan Goshen) #584389e2aa23be9] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428Commits
b7b78fd565] - assert: cap input size in myersDiff to avoid Int32Array overflow (Haram Jeong) #595789da50a6c53] - benchmark: sqlite prevent create both tables on prepare selects (Bruno Rodrigues) #597094c1538770e] - benchmark: calibrate config array-vs-concat (Rafael Gonzaga) #59587fc3f82d683] - benchmark: calibrate config v8/serialize.js (Rafael Gonzaga) #59586e95c9b2950] - benchmark: reduce readfile-permission-enabled config (Rafael Gonzaga) #59589e4fea38b31] - benchmark: calibrate length of util.diff (Rafael Gonzaga) #59588c5d68c4a0f] - benchmark, test: replace CRLF variable with string literal (Lee Jiho) #59466129a1d673b] - build: fix getting OpenSSL version on Windows (Michaël Zasso) #596099f53db7162] - build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) #595473839593e07] - build: usewindows-2025runner (Michaël Zasso) #59673e430464669] - build: compile bundled uvwasi conditionally (Carlo Cabrera) #59622e2c9cab0cd] - build: do not set-mminimal-tocwithclang(Richard Lau) #59484208bc810a1] - child_process: remove unsafe array iteration (hotpineapple) #59347d74799d90c] - crypto: load system CA certificates off thread (Joyee Cheung) #595505b83e1e0a2] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #59571d289b1d1af] - deps: V8: cherry-picke3df60f(Chengzhong Wu) #58691cf5d91e2a6] - deps: update uvwasi to 0.0.23 (Node.js GitHub Bot) #597911cf24a0445] - deps: update histogram to 0.11.9 (Node.js GitHub Bot) #596898638bd3f2e] - deps: update googletest toeb2d85e(Node.js GitHub Bot) #593353ff4eb5b37] - deps: update amaro to 1.1.2 (Node.js GitHub Bot) #596164d268ac034] - deps: V8: cherry-pick7b91e3e(Milad Fa) #5948583410eb0e3] - deps: V8: cherry-pick59d52e3(Milad Fa) #594855780af02cb] - deps: update amaro to 1.1.1 (Node.js GitHub Bot) #591412986eca821] - deps: V8: cherry-pick6b1b9bc(zhoumingtao) #5928398e399b3ea] - deps: update archs files for openssl-3.5.2 (Node.js GitHub Bot) #593712b983a7520] - deps: upgrade openssl sources to openssl-3.5.2 (Node.js GitHub Bot) #593717ffbb42454] - deps: update archs files for openssl-3.5.1 (Node.js GitHub Bot) #59234bd48a60a75] - deps: upgrade openssl sources to openssl-3.5.1 (Node.js GitHub Bot) #5923424762a10ca] - deps: fix OpenSSL security level at 1 (Richard Lau) #598591233e92d10] - diagnostics_channel: revoke DEP0163 (René) #5975834b25fd97b] - doc: stabilize --disable-sigusr1 (Rafael Gonzaga) #59707d7adf8be64] - doc: update "Type stripping in dependencies" section (Josh Kelley) #59652a1d7e4fdbf] - doc: add Miles Guicent as triager (Miles Guicent) #59562bf41218ed9] - doc: markpath.matchesGlobas stable (Aviv Keller) #59572afaa1ccb74] - doc: improve documentation for raw headers in HTTP/2 APIs (Tim Perry) #59633b95ff56102] - doc: update install_tools.bat free disk space (Stefan Stojanovic) #595796ff939b8d3] - doc: fix filehandle.read typo (Ruy Adorno) #59635963bfa9d6f] - doc: fix missing link to the Error documentation in thehttppage (Alexander Makarenko) #590800e10a8ea27] - doc: improvesqlite.backup()progress/fulfillment documentation (René) #5959818ceefbabd] - doc: clarify experimental platform vulnerability policy (Matteo Collina) #5959166cdd00368] - doc: link toTypedArray.from()in signature (Aviv Keller) #592269f058ce7c0] - doc: fix typos inenvironment_variables.md(PhistucK) #595363cfec820e9] - doc: add security incident reponse plan (Rafael Gonzaga) #5947046aa3434e6] - doc: clarify maxRSS unit inprocess.resourceUsage()(Alex Yang) #59511adf98f600a] - doc: add missing Zstd strategy constants (RANDRIAMANANTENA Narindra Tiana Annaick) #59312f335989942] - doc: fix the version tls.DEFAULT_CIPHERS was added (Allon Murienik) #592477fa14fcf54] - doc: clarify glob's exclude option behavior (hotpineapple) #5924585b8d255c9] - doc: add RafaelGSS as performance strategic lead (Rafael Gonzaga) #5944516b1f7a602] - doc: add new environment variables doc page (Dario Piotrowicz) #59052b4a43ed83a] - doc: add missing environment variables to manpage (amir lavasani) #58963c923cfe898] - doc: fix links in test.md (Vas Sudanagunta) #58876a93a8b5eda] - doc: mark type stripping as release candidate (Marco Ippolito) #57705d302cb3bb2] - esm: add experimental support for addon modules (Chengzhong Wu) #55844d55c3e7f0b] - esm: link modules synchronously when no async loader hooks are used (Joyee Cheung) #595199e1fbb620f] - esm: show race error message for inner module job race (Joyee Cheung) #595198c4dcd5199] - esm: sync-ify module translation (Joyee Cheung) #5945371038932d3] - fs: fix wrong order of file names in cpSync error message (Nicholas Paun) #597755692dec451] - fs: fix dereference: false on cpSync (Nicholas Paun) #59681dafd561d37] - fs: fix return value of fs APIs (theanarkh) #58996da6e8cb75b] - http: unbreak keepAliveTimeoutBuffer (Robert Nagy) #59784673a48f0a2] - http: use cached '1.1' http version string (Robert Nagy) #597171dbad2058f] - (SEMVER-MINOR) http: add Agent.agentKeepAliveTimeoutBuffer option (Haram Jeong) #59315062e837d5f] - (SEMVER-MINOR) http2: add support for raw header arrays in h2Stream.respond() (Tim Perry) #594554d4fb51b89] - http2: report sent headers object in client stream dcs (Darshan Sen) #59419b8066611c3] - inspector: add http2 tracking support (Darshan Sen) #596119b2c013032] - inspector: prevent propagation of promise hooks to noPromise hooks (Shima Ryuhei) #58841a2329895e7] - lib: fix DOMException subclass support (Chengzhong Wu) #59680edb9248bdd] - lib: make domexception a native error (Chengzhong Wu) #58691ccf29cda19] - Revert "lib: optimize writable stream buffer clearing" (Yoo) #59743f291eda277] - lib: fix isReadable and isWritable return type value (Gabriel Quaresma) #5908910ae8684ea] - lib: revert to using default derived class constructors (René) #596505d3b80d62d] - lib: do not modify prototype deprecated asyncResource (encore) (Szymon Łągiewka) #595183c4541f878] - lib: simplify IPv6 checks in isLoopback() (Krishnadas) #593750b631bbffa] - lib: handle windows reserved device names on UNC (Rafael Gonzaga) #59286297f62ba1f] - meta: bumpcodecov/codecov-action(dependabot[bot]) #597263dcd8446b6] - meta: bump actions/download-artifact from 4.3.0 to 5.0.0 (dependabot[bot]) #59729d0d357f683] - meta: bump github/codeql-action from 3.29.2 to 3.30.0 (dependabot[bot]) #597282a0e264949] - meta: bump actions/cache from 4.2.3 to 4.2.4 (dependabot[bot]) #597270a013d1da1] - meta: bump actions/checkout from 4.2.2 to 5.0.0 (dependabot[bot]) #59725c690b53d24] - meta: update devcontainer to the latest schema (Aviv Keller) #5434761171c7756] - module: correctly detect top-level await in ambiguous contexts (Shima Ryuhei) #5864675bf3f4a87] - node-api: link to other programming language bindings (Chengzhong Wu) #595169a05107558] - node-api: clarify enum value ABI stability (Chengzhong Wu) #59085658c31d60c] - path: refactor path joining logic for clarity and performance (Lee Jiho) #597819cc89f55f7] - path,win: fix bug in resolve and normalize (Hüseyin Açacak) #5562324e825f8f5] - sea: implement sea.getAssetKeys() (Joyee Cheung) #59661c66af21e55] - sea: allow using inspector command line flags with SEA (Joyee Cheung) #595689b7dd40da8] - (SEMVER-MINOR) sea: implement execArgvExtension (Joyee Cheung) #5956048bfbd3dca] - (SEMVER-MINOR) sea: support execArgv in sea config (Joyee Cheung) #593145559456fe4] - sqlite: add sqlite-type symbol for DatabaseSync (Alex Yang) #594053478130da3] - sqlite: handle ?NNN parameters as positional (Edy Silva) #59350312bc4e5d1] - sqlite: avoid useless call to FromMaybe() (Tobias Nießen) #59490937e9bb1c6] - src: track BaseObjects with an efficient list (Chengzhong Wu) #55104be2a5e170d] - src: track async resources via pointers to stack-allocated handles (Anna Henningsen) #59704f232bf2c11] - src: fix build on NetBSD (Thomas Klausner) #59718e9a685bc3d] - src: fix race on process exit and off thread CA loading (Chengzhong Wu) #5963224428fc8fb] - src: add name for more threads (theanarkh) #59601fd7559f8c3] - src: remove JSONParser (Joyee Cheung) #596198c296bac99] - src: enforce assumptions in FIXED_ONE_BYTE_STRING (Tobias Nießen) #581551b4885a3f2] - src: use simdjson to parse --snapshot-config (Joyee Cheung) #594739f798de6b0] - src: fix order of CHECK_NOT_NULL/dereference (Tobias Nießen) #59487f764be27dc] - src: move shared_ptr objects in KeyObjectData (Tobias Nießen) #59472d30287fe12] - src: iterate metadata version entries with std::array (Chengzhong Wu) #57866b2bf620c7b] - src: internalizev8::ConvertableToTraceFormatin traces (Chengzhong Wu) #57866b3c507c8ef] - src: remove duplicate assignment ofO_EXCLin node_constants.cc (Daniel Osvaldo R) #5904920aec239d4] - src: add Intel CET properties to large_pages.S (tjuhaszrh) #593638e0f9cd061] - src: remove unused DSAKeyExportJob (Filip Skokan) #592910c2b6df94f] - src,sqlite: refactor value conversion (Edy Silva) #59659b95cfdf0e5] - stream: replace manual function validation with validateFunction (방진혁) #59529cf06e74076] - (SEMVER-MINOR) stream: add brotli support to CompressionStream and DecompressionStream (Matthew Aitken) #59464903ebd373a] - test: skip more sea tests on Linux ppc64le (Richard Lau) #59755e961060bb6] - test: fix internet/test-dns (Michaël Zasso) #59660c2b22f50a8] - test: mark test-inspector-network-fetch as flaky again (Joyee Cheung) #596404ae958e59b] - test: skip test-fs-cp* tests that are constantly failing on Windows (Joyee Cheung) #59637d5b0a64598] - test: deflake test-http-keep-alive-empty-line (Luigi Pinca) #59595eb311f1754] - test: use mustSucceed in test-repl-tab-complete-import (Sohyeon Kim) #593688e047e32be] - test: skip sea tests on Linux ppc64le (Richard Lau) #595634a250479d8] - test: rename test-net-server-drop-connections-in-cluster.js to -http- (Meghan Denny) #59532d22f113aaf] - test: lazy-load internalTTy (Pietro Marchini) #5951736dd856897] - test: fixtest-setproctitlestatus whenpsis not available (Antoine du Hamel) #59523fd02295da6] - test: update WPT for WebCryptoAPI toff26d9b(Node.js GitHub Bot) #59497cce938c5f9] - test: make test-debug-process locale-independent (BCD1me) #592545a8f03df9e] - test: mark test-wasi-pthread as flaky (Joyee Cheung) #5948894f6d6b969] - test: split test-wasi.js (Joyee Cheung) #59488162ac9393c] - test: use case-insensitive path checking on Windows in fs.cpSync tests (Joyee Cheung) #59475ce9d6776c9] - test: add missing hasPostData in test-inspector-emit-protocol-event (Shima Ryuhei) #59412717ea2866d] - test: refactor error checks to use assert.ifError/mustSucceed (Sohyeon Kim) #59424b1c3e4a17c] - test: fix typos (Lee Jiho) #593303f4bd94b1f] - test: skip test-watch-mode inspect when no inspector (James M Snell) #594408b7a8efe96] - test: exclude mock from coverage (Shima Ryuhei) #59348f39352b55c] - test: split test-fs-cp.js (Joyee Cheung) #59408fb4180e9f6] - test_runner: fix todo inheritance (Moshe Atlow) #5972176bf6b908d] - test_runner: set mock timer's interval undefined (hotpineapple) #594790a05d06fcc] - test_runner: do not error when gettingfullNameof root context (René) #593773fdfb187d6] - test_runner: fix isSkipped check in junit (Sungwon) #5941437c6f7d7d8] - test_runner: remove unused callee convertion (Alex Yang) #5922157c30093e3] - test_runner: clean up promisified interval generation (René) #5882488bf1bab91] - test_runner: correct "already mocked" error punctuation placement (Jacob Smith) #58840d3259d660a] - test_runner: preferAtomicsprimordials (Renegade334) #5871662bb80c17e] - (SEMVER-MINOR) test_runner: support object property mocking (Idan Goshen) #584384b19439dea] - tools: print appropriate output when test aborted (hotpineapple) #59794847963bbba] - tools: use sparse checkout inbuild-tarball.yml(Antoine du Hamel) #59788ef11d118a4] - tools: remove unused actions frombuild-tarball.yml(Antoine du Hamel) #59787daa0615967] - tools: do not attempt to compress tgz archive (Antoine du Hamel) #59785fdc85e5045] - tools: add v8windbg target (Chengzhong Wu) #5976725801b9009] - tools: improve error handling in node_mksnapshot (James M Snell) #5943792100a813f] - tools: add sccache totest-internetworkflow (Antoine du Hamel) #597205f0090af53] - tools: update gyp-next to 0.20.4 (Node.js GitHub Bot) #5969031ee7fc3e9] - tools: add script to make reviewing backport PRs easier (Antoine du Hamel) #5916145906b0d5c] - tools: update gyp-next to 0.20.3 (Node.js GitHub Bot) #596036197eeee9b] - tools: avoid parsing test files twice (Pietro Marchini) #59526027ae4f67e] - tools: fix return value of try_check_compiler (theanarkh) #5943477682b52a1] - tools: bump @eslint/plugin-kit from 0.3.3 to 0.3.4 in /tools/eslint (dependabot[bot]) #5927191fa83fffd] - tools: disable nullability-completeness warnings (Michaël Zasso) #59392079a68d392] - typings: add typing for 'uv' (방진혁) #59606b8927967d9] - typings: add missing properties in ConfigBinding (Lee Jiho) #595859b66ce5ef7] - typings: add missing URLBinding methods (성우현 | Woohyun Sung) #59468ba5b6597aa] - url: add err.input to ERR_INVALID_FILE_URL_PATH (Joyee Cheung) #59730f660943471] - util: fix numericSeparator with negative fractional numbers (sangwook) #59379aed1b883f1] - util: remove unnecessary template strings (btea) #5920191e9b8d135] - util: remove outdated TODO comment (haramjeong) #59760421ab3c294] - util: use getOptionValue('--no-deprecation') in deprecated() (haramjeong) #597607864ad13bb] - util: hide duplicated stack frames when using util.inspect (Ruben Bridgewater) #59447a2d2003daa] - util: fix error's namespaced node_modules highlighting using inspect (Ruben Bridgewater) #59446f64d0def94] - util: add some additional error classes towellKnownPrototypes(Mark S. Miller) #594569807ffd6a0] - vm: expose import attributes on SourceTextModule.moduleRequests (Chengzhong Wu) #58829f334e2d539] - wasi: fixcleantarget intest/wasi/Makefile(Antoine du Hamel) #595769e2aa23be9] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428c5a93a3355] - worker: fix worker name with \0 (theanarkh) #59214a5ed96bb97] - worker: add worker name to report (theanarkh) #5893598cd7e27d4] - worker: add name for worker (theanarkh) #59213kulshekhar/ts-jest (ts-jest)
v29.4.5Compare Source
Bug Fixes
microsoft/TypeScript (typescript)
v5.9.3Compare Source
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.