Skip to content

fix(deps): update all dependencies #269

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): update all dependencies #269

renovate wants to merge 1 commit into from
+97 −164

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 13, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@aptre/common ^0.22.13 -> ^0.24.0 age adoption passing confidence devDependencies minor
actions/cache v4 -> v5 age adoption passing confidence action major
actions/checkout v5.0.0 -> v6.0.1 age adoption passing confidence action major
actions/setup-go v6.0.0 -> v6.1.0 age adoption passing confidence action minor
actions/setup-node v6.0.0 -> v6.1.0 age adoption passing confidence action minor
github.com/aperturerobotics/common v0.22.13 -> v0.24.0 age adoption passing confidence require minor
github.com/aperturerobotics/controllerbus ff3f278 -> 10a0463 require digest
github.com/aperturerobotics/starpc v0.39.10 -> v0.41.0 age adoption passing confidence require minor
github.com/klauspost/compress v1.18.1 -> v1.18.2 age adoption passing confidence require patch
github.com/pion/webrtc/v4 v4.1.6 -> v4.1.8 age adoption passing confidence require patch
github.com/quic-go/quic-go v0.56.0 -> v0.57.1 age adoption passing confidence require minor
github/codeql-action v4.31.2 -> v4.31.8 age adoption passing confidence action patch
prettier (source) 3.6.2 -> 3.7.4 age adoption passing confidence devDependencies minor
rimraf 6.1.0 -> 6.1.2 age adoption passing confidence devDependencies patch
starpc ^0.39.0 -> ^0.41.0 age adoption passing confidence dependencies minor

Release Notes

aperturerobotics/common (@​aptre/common)

v0.24.0

Compare Source

v0.23.0

Compare Source

v0.22.14

Compare Source

actions/cache (actions/cache)

v5

Compare Source

actions/checkout (actions/checkout)

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.0.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

actions/setup-go (actions/setup-go)

v6.1.0

Compare Source

What's Changed

Enhancements
Dependency updates

New Contributors

Full Changelog: actions/setup-go@v6...v6.1.0

actions/setup-node (actions/setup-node)

v6.1.0

Compare Source

What's Changed

Enhancement:
Dependency updates:
Documentation update:

Full Changelog: actions/setup-node@v6...v6.1.0

aperturerobotics/starpc (github.com/aperturerobotics/starpc)

v0.41.0

Compare Source

v0.40.1

Compare Source

v0.40.0

Compare Source

klauspost/compress (github.com/klauspost/compress)

v1.18.2

Compare Source

What's Changed

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

New Contributors

Full Changelog: klauspost/compress@v1.18.1...v1.18.2

pion/webrtc (github.com/pion/webrtc/v4)

v4.1.8

Compare Source

Changelog

  • 0936b7d Option to check for fingerprint in DTLS handshake
  • 79d7571 Implement deadlines for mux
  • 21a8b0a Update module github.com/pion/stun/v3 to v3.0.2 (#​3293)
  • 62f6101 Do not invoke OnBufferedAmountLow after close

v4.1.7

Compare Source

Changelog

quic-go/quic-go (github.com/quic-go/quic-go)

v0.57.1

Compare Source

This release resolves a panic during the server handshake when using the upcoming Go 1.26 toolchain, specifically occurring with TLS session tickets disabled (#​5462). This issue does not impact builds on Go 1.25 or earlier versions.

v0.57.0

Compare Source

This release reworks the HTTP/3 header processing logic:

  • Both client and server now send their respective header size constraints using the SETTINGS_MAX_FIELD_SECTION_SIZE setting: #​5431
  • For any QPACK-related errors, the correct error code (QPACK_DECOMPRESSION_FAILED) is now used: #​5439
  • QPACK header parsing is now incremental (instead of parsing all headers at once), which is ~5-10% faster and reduces allocations: #​5435 (and quic-go/qpack#67)
  • The server now sends a 431 status code (Request Header Fields Too Large) when encountering HTTP header fields exceeding the size constraint: #​5452

 

Breaking Changes

  • http3: Transport.MaxResponseBytes is now an int (before: int64): #​5433
     

Notable Fixes

  • qlogwriter: fix storing of event schemas (this prevented qlog event logging from working for HTTP/3): #​5430
  • http3: errors sending the request are now ignored, instead, the response from the server is read (thereby allowing the client to read the status code, for example): #​5432

What's Changed

New Contributors

Full Changelog: quic-go/quic-go@v0.56.0...v0.57.0

github/codeql-action (github/codeql-action)

v4.31.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025
  • Update default CodeQL bundle version to 2.23.8. #​3354

See the full CHANGELOG.md for more information.

v4.31.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025
  • Update default CodeQL bundle version to 2.23.7. #​3343

See the full CHANGELOG.md for more information.

v4.31.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025
  • Update default CodeQL bundle version to 2.23.6. #​3321

See the full CHANGELOG.md for more information.

v4.31.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025
  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
  • Update default CodeQL bundle version to 2.23.5. #​3288

See the full CHANGELOG.md for more information.

prettier/prettier (prettier)

v3.7.4

Compare Source

diff

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)
<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>
TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)
// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;
TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)
// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

v3.7.3

Compare Source

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#​18375 by @​fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

v3.7.2

Compare Source

diff

JavaScript: Fix string print when switching quotes (#​18351 by @​fisker)
// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")

// Prettier 3.7.1
console.log('A descriptor\\'s .kind must be "method" or "field".');

// Prettier 3.7.2
console.log('A descriptor\\\'s .kind must be "method" or "field".');
JavaScript: Preserve quote for embedded HTML attribute values (#​18352 by @​kovsu)
// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

// Prettier 3.7.1
const html = /* HTML */ ` <div class=${styles.banner}></div> `;

// Prettier 3.7.2
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;
TypeScript: Fix comment in empty type literal (#​18364 by @​fisker)
// Input
export type XXX = {
  // tbd
};

// Prettier 3.7.1
export type XXX = { // tbd };

// Prettier 3.7.2
export type XXX = {
  // tbd
};

v3.7.1

Compare Source

diff

API: Fix performance regression in doc printer (#​18342 by @​fisker)

Prettier 3.7.1 can be very slow when formatting big files, the regression has been fixed.

v3.7.0

Compare Source

diff

🔗 Release Notes

isaacs/rimraf (rimraf)

v6.1.2

Compare Source

v6.1.1

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security
Copy link

socket-security bot commented Nov 13, 2025 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​@​aptre/​common@​0.22.13 ⏵ 0.24.0711009995 +4100
Updatedgolang/​github.com/​pion/​webrtc/​v4@​v4.1.6 ⏵ v4.1.873 +1100100100100
Updatednpm/​starpc@​0.39.10 ⏵ 0.41.07910099 +195 +2100
Updatednpm/​rimraf@​6.1.0 ⏵ 6.1.210010010089 +4100
Updatednpm/​prettier@​3.6.2 ⏵ 3.7.490 -810097 -397100
Updatedgolang/​github.com/​klauspost/​compress@​v1.18.1 ⏵ v1.18.292 +1100100100100
Updatedgolang/​github.com/​aperturerobotics/​controllerbus@​v0.51.4-0.20251113002647-ff3f278bc709 ⏵ v0.51.4-0.20251122005227-10a04632479799100100100100
Updatedgolang/​github.com/​aperturerobotics/​starpc@​v0.39.10 ⏵ v0.41.099 +1100100100100
Updatedgolang/​github.com/​aperturerobotics/​common@​v0.22.13 ⏵ v0.24.0100100100100100

View full report

@renovate renovate bot changed the title fix(deps): update all dependencies to v0.22.14 fix(deps): update all dependencies Nov 14, 2025
@renovate renovate bot force-pushed the renovate/all branch 10 times, most recently from cdddd89 to 8b80603 Compare November 22, 2025 00:55
@renovate
Copy link
Contributor Author

renovate bot commented Nov 22, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 14 additional dependencies were updated

Details:

Package Change
github.com/pion/dtls/v3 v3.0.7 -> v3.0.8
github.com/pion/ice/v4 v4.0.10 -> v4.0.13
github.com/pion/interceptor v0.1.41 -> v0.1.42
github.com/pion/mdns/v2 v2.0.7 -> v2.1.0
github.com/pion/rtcp v1.2.15 -> v1.2.16
github.com/pion/rtp v1.8.23 -> v1.8.26
github.com/pion/sctp v1.8.40 -> v1.8.41
github.com/pion/srtp/v3 v3.0.8 -> v3.0.9
github.com/pion/stun/v3 v3.0.0 -> v3.0.2
github.com/pion/transport/v3 v3.0.8 -> v3.1.1
github.com/pion/turn/v4 v4.1.1 -> v4.1.3
golang.org/x/net v0.46.0 -> v0.47.0
golang.org/x/sync v0.17.0 -> v0.18.0
golang.org/x/tools v0.38.0 -> v0.39.0

@renovate renovate bot force-pushed the renovate/all branch 8 times, most recently from 78bf7bc to 0c93902 Compare December 1, 2025 10:06
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from f56c1b1 to 58a6ac0 Compare December 5, 2025 21:15
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 4ee8d8e to 713545f Compare December 12, 2025 03:56
@renovate
Copy link
Contributor Author

renovate bot commented Dec 12, 2025

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 14 additional dependencies were updated

Details:

Package Change
github.com/pion/dtls/v3 v3.0.7 -> v3.0.8
github.com/pion/ice/v4 v4.0.10 -> v4.0.13
github.com/pion/interceptor v0.1.41 -> v0.1.42
github.com/pion/mdns/v2 v2.0.7 -> v2.1.0
github.com/pion/rtcp v1.2.15 -> v1.2.16
github.com/pion/rtp v1.8.23 -> v1.8.26
github.com/pion/sctp v1.8.40 -> v1.8.41
github.com/pion/srtp/v3 v3.0.8 -> v3.0.9
github.com/pion/stun/v3 v3.0.0 -> v3.0.2
github.com/pion/transport/v3 v3.0.8 -> v3.1.1
github.com/pion/turn/v4 v4.1.1 -> v4.1.3
golang.org/x/net v0.46.0 -> v0.47.0
golang.org/x/sync v0.17.0 -> v0.18.0
golang.org/x/tools v0.38.0 -> v0.39.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant