Skip to content

chore(deps): pin dependencies#104

Open
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
renovate/frontend-dependencies
Open

chore(deps): pin dependencies#104
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
renovate/frontend-dependencies

Conversation

@renovate-sh-app

@renovate-sh-app renovate-sh-app Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
node (source) engines pin >=24v26.3.0 age confidence
turbo (source) devDependencies patch 2.9.162.9.18 age confidence
yarn (source) packageManager minor 4.15.04.16.0 4.17.0 age confidence
yarn (source) engines pin >=4.15.04.17.0 age confidence
yarn (source) packageManager minor 4.14.14.16.0 4.17.0 age confidence

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.


Release Notes

vercel/turborepo (turbo)

v2.9.18: Turborepo v2.9.18

Compare Source

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.9.17...v2.9.18

v2.9.17: Turborepo v2.9.17

Compare Source

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.9.16...v2.9.17

yarnpkg/berry (yarn)

v4.16.0: v4.16.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.15.0...@​yarnpkg/cli/4.16.0


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

@github-actions

github-actions Bot commented Jun 8, 2026

Copy link
Copy Markdown

TruffleHog Scan Results

Summary: Found 4 potential secrets (0 verified, 4 unverified)

  • Possible secret (NpmToken) at .yarn/releases/yarn-4.16.0.cjs:7111de6***4a2f
  • Possible secret (NpmToken) at .yarn/releases/yarn-4.16.0.cjs:7111de6***4a2f
  • Possible secret (Gitlab) at .yarn/releases/yarn-4.16.0.cjs:711npmP***ance
  • Possible secret (Gitlab) at .yarn/releases/yarn-4.16.0.cjs:711npmP***ance

Review: Check if unverified secrets are false positives.


Ignoring False Positives:
To mark a false positive, add # trufflehog:ignore as an inline comment on the same line as the detected secret:

my_fake_secret = "AKIAIOSFODNN7EXAMPLE"  # trufflehog:ignore

This works for files that support line numbers (most source files). After adding the comment, push your changes and the scan will re-run.

yesoreyeram
yesoreyeram previously approved these changes Jun 8, 2026
@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/frontend-dependencies branch from 83c74bf to e8b5d74 Compare June 12, 2026 16:31
@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/frontend-dependencies branch from e8b5d74 to 2225a22 Compare June 14, 2026 01:25
| datasource   | package      | from    | to      |
| ------------ | ------------ | ------- | ------- |
| node-version | node         | v26.3.0 | v26.3.0 |
| npm          | turbo        | 2.9.16  | 2.9.18  |
| npm          | @yarnpkg/cli | 4.15.0  | 4.16.0  |
| npm          | @yarnpkg/cli | 4.17.0  | 4.17.0  |
| npm          | @yarnpkg/cli | 4.14.1  | 4.16.0  |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/frontend-dependencies branch from 2225a22 to 8153f49 Compare June 15, 2026 10:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant