Skip to content

chore: Update all non-major dependencies (v3.x.x) - #5021

Merged
achmelo merged 6 commits into
v3.x.xfrom
renovate/v3.x.x-all-minor-patch
Oct 22, 2026
Merged

achmelo merged 6 commits into
v3.x.xfrom
renovate/v3.x.x-all-minor-patch

Conversation

@zowe-robot

@zowe-robot zowe-robot commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@typescript-eslint/eslint-plugin (source) 8.71.2 → 8.72.0 age confidence devDependencies minor
@typescript-eslint/parser (source) 8.71.2 → 8.72.0 age confidence devDependencies minor
@zowe/cli (source) 8.39.0 → 8.40.0 age confidence devDependencies minor
@zowe/cli-test-utils (source) 8.39.0 → 8.40.0 age confidence devDependencies minor
@zowe/imperative (source) 8.39.0 → 8.40.0 age confidence peerDependencies minor
@zowe/imperative (source) 8.39.0 → 8.40.0 age confidence devDependencies minor
browserslist 4.29.3 → 4.29.4 age confidence overrides patch
caniuse-lite 1.0.30001815 → 1.0.30001818 age confidence devDependencies patch
eslint-plugin-prettier 5.5.6 → 5.5.7 age confidence devDependencies patch
ghcr.io/open-telemetry/opentelemetry-collector-contrib/golden v0.162.0 → v0.163.0 age confidence minor
gradle (source) 9.8.1 → 9.8.2 age confidence patch
node (source) =24.21.0 → =24.22.1 age confidence engines minor
node 24.21.0 → 24.22.1 age confidence uses-with minor
qs 6.16.0 → 6.16.1 age confidence overrides patch
renovatebot/github-action v46.3.8 → v46.3.9 age confidence action patch
sass 1.105.1 → 1.106.1 age confidence dependencies minor
swagger-ui-react 5.33.2 → 5.34.0 age confidence dependencies minor
ts-jest (source) 29.4.14 → 29.4.15 age confidence devDependencies patch
vite (source) 8.3.4 → 8.3.5 age confidence devDependencies patch
io.grpc:grpc-stub 1.84.2 → 1.85.1 age confidence dependencies minor
io.micronaut:micronaut-core-bom (source) 4.10.31 → 4.10.33 age confidence dependencies patch
io.micronaut:micronaut-http-client (source) 4.10.31 → 4.10.33 age confidence dependencies patch
io.rest-assured:spring-mock-mvc (source) 6.1.0 → 6.2.0 age confidence dependencies minor
io.rest-assured:spring-web-test-client (source) 6.1.0 → 6.2.0 age confidence dependencies minor
io.rest-assured:xml-path (source) 6.1.0 → 6.2.0 age confidence dependencies minor
io.rest-assured:json-path (source) 6.1.0 → 6.2.0 age confidence dependencies minor
io.rest-assured:rest-assured (source) 6.1.0 → 6.2.0 age confidence dependencies minor
io.opentelemetry:opentelemetry-exporter-sender-okhttp 1.66.0 → 1.67.0 age confidence dependencies minor
io.opentelemetry:opentelemetry-exporter-common 1.66.0 → 1.67.0 age confidence dependencies minor
io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi 1.66.0 → 1.67.0 age confidence dependencies minor
io.opentelemetry:opentelemetry-sdk-testing 1.66.0 → 1.67.0 age confidence dependencies minor
io.opentelemetry:opentelemetry-bom 1.66.0 → 1.67.0 age confidence dependencies minor
tools.jackson.core:jackson-databind (source) 3.2.3 → 3.2.4 age confidence dependencies patch
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.22.3 → 2.22.4 age confidence dependencies patch
com.fasterxml.jackson.core:jackson-databind (source) 2.22.3 → 2.22.4 age confidence dependencies patch
com.fasterxml.jackson.core:jackson-core 2.22.3 → 2.22.4 age confidence dependencies patch
org.infinispan:infinispan-component-annotations (source) 16.2.3 → 16.3.1 age confidence dependencies minor
org.infinispan:infinispan-jboss-marshalling (source) 16.2.3 → 16.3.1 age confidence dependencies minor
org.infinispan:infinispan-clustered-lock (source) 16.2.3 → 16.3.1 age confidence dependencies minor
org.infinispan:infinispan-spring-boot3-starter-embedded (source) 16.2.3 → 16.3.1 age confidence dependencies minor

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.72.0

Compare Source

🚀 Features
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#​12992)
  • eslint-plugin: lazy load rules (#​13010)
🩹 Fixes
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#​13054)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#​13055)
  • eslint-plugin: [require-array-sort-compare] check tuples (#​13058)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#​13053)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#​12704)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#​13016)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#​12991)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.72.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

zowe/zowe-cli (@​zowe/cli)

v8.40.0

Compare Source

Imperative
  • Enhancement: Updated connection prompting logic to honor the allowedLoginMethod property. A user is now prompted only for the credentials that the method allows (direct-basic, direct-cert-pem, apiml-basic, apiml-cert-pem, or prompt), apiml-* methods exchange credentials for an APIML token and store only that token, and direct-* methods store credentials directly. Defaults to prompt when omitted.#​2906
  • BugFix: Censored secure values in the arguments and response objects written to the log at trace level by the CommandProcessor class. #​2955
  • BugFix: Censored sensitive request information in REST client errors. #​2949
z/OS TSO SDK
  • BugFix: Added validation to reject values containing illegal characters for the servletKey and appKey parameters in the SendTSO, StopTso, AddressSpaceApps, and PingTso classes. #​2953

v8.39.1

Compare Source

Zowe CLI
  • BugFix: Fixed the postinstall plugin validation script so that it no longer runs through a shell. #​2948
Core SDK
  • BugFix: Replaced trace log for data chunks with a byte-count message to keep log size minimal. #​2931
Imperative
  • BugFix: Improved diagnostic logging to reduce unnecessary trace data. #​2945
  • BugFix: Censored secure values in the arguments and response objects included in error details. #​2930
  • BugFix: Censored diagnostic information in the event of an error during execution of the Imperative.init function. #​2943
  • BugFix: Fixed ProfileInfo.initSessCfg to include the allowedLoginMethod and authOrder properties when creating a session from a profile. #​2929
  • BugFix: Censored secure values in the arguments and response objects included in error details when a chained handler argument mapping fails. #​2930
  • BugFix: Updated the EnvQuery.getEnvItemVal function to censor additional Zowe-prefixed environment variables. #​2936
z/OS Console SDK
  • BugFix: Fixed an issue where the zowe zos-console collect sync-responses command did not stop collecting console output after the expected keyword was found or the follow-up attempts ran out. #​2932
z/OSMF SDK
  • BugFix: Fixed ZosmfSession.createSessCfgFromArgs to include the allowedLoginMethod and authOrder properties into the session, so isUsingApiml and getApimlDecision reflect them for sessions built directly from command arguments. #​2929
browserslist/browserslist (browserslist)

v4.29.4

Compare Source

  • Fixed joined version bounds in version ray and range queries (by @​ybai08).
  • Fixed whitespaces processing (by @​abhu85).
browserslist/caniuse-lite (caniuse-lite)

v1.0.30001818

Compare Source

v1.0.30001817

Compare Source

v1.0.30001816

Compare Source

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

v5.5.7

Compare Source

Patch Changes
  • #​796 7e53ecd Thanks @​OskarEichler! - Fix fallback diagnostic locations for all supported line endings.

  • #​805 1b7c433 Thanks @​JounQin! - Report a clear error when the sync worker fails to load, so a missing prettier dependency now fails fast with Cannot find package 'prettier' instead of hanging ESLint indefinitely.

gradle/gradle (gradle)

v9.8.2: 9.8.2

Compare Source

The Gradle team is excited to announce Gradle 9.8.2.

Here are the highlights of this release:

  • Java 27 support
  • Maven mirror settings reuse
  • Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.2 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.2 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

nodejs/node (node)

v24.22.1: 2026-10-21, Version 24.22.1 'Krypton' (LTS), @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
  • (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
  • (CVE-2026-105483) tls: fix ip normalization regression (James M Snell)
  • (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
  • (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
  • (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
  • (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)
  • (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov)
  • crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
  • deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
  • deps: update timezone to 2026e (Node.js GitHub Bot)
  • deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
  • deps: update undici to 7.30.1 (Node.js GitHub Bot)
Commits

v24.22.0: 2026-10-14, Version 24.22.0 'Krypton' (LTS), @​richardlau prepared by @​aduh95

Compare Source

Notable Changes
  • [ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #​65627
  • [c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #​65553
  • [a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #​65484
  • [c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #​65484
  • [51aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #​63411
  • [d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #​66090
  • [acc1578179] - doc: deprecate Server.prototype._listen2 in node:net (Antoine du Hamel) #​65593
  • [a7f8de6362] - (SEMVER-MINOR) net: support sending net.BoundSocket to threads and child processes (Guy Bedford) #​64725
  • [60c3eb61bd] - (SEMVER-MINOR) perf_hooks: implement SlidingWindowHistogram (James M Snell) #​65825
  • [6b3e6f9d5c] - (SEMVER-MINOR) perf_hooks: implement qrde analysis support in Histogram (James M Snell) #​65806
  • [75456a3512] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #​65606
  • [72d1b40c56] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #​65434
  • [41161dda87] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo) #​64232
  • [adbc757d70] - (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #​64232
  • [241339f072] - (SEMVER-MINOR) src,lib: add util.markPromiseAsHandled (James M Snell) #​65805
  • [63b0974d9e] - (SEMVER-MINOR) util: implement util.throttle (James M Snell) #​65899
  • [a3bbb5a26f] - (SEMVER-MINOR) util: implement debounce (James M Snell) #​65899
Commits

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@zowe-robot zowe-robot added the dependencies Pull requests that update a dependency file label Oct 14, 2026
@zowe-robot
zowe-robot force-pushed the renovate/v3.x.x-all-minor-patch branch from 2a798f4 to f027701 Compare October 15, 2026 00:46
@zowe-robot
zowe-robot force-pushed the renovate/v3.x.x-all-minor-patch branch from f027701 to ac17aef Compare October 16, 2026 00:47
@pull-request-size pull-request-size Bot added size/M and removed size/S labels Oct 16, 2026
@zowe-robot
zowe-robot force-pushed the renovate/v3.x.x-all-minor-patch branch 3 times, most recently from 12fbccf to 2fdcbaa Compare October 21, 2026 00:47
Signed-off-by: Renovate Bot <renovate@whitesourcesoftware.com>
@zowe-robot
zowe-robot force-pushed the renovate/v3.x.x-all-minor-patch branch from 2fdcbaa to 11aede3 Compare October 22, 2026 00:47
@sonarqubecloud

Copy link
Copy Markdown

@achmelo
achmelo merged commit 7725ed0 into v3.x.x Oct 22, 2026
53 of 54 checks passed
@achmelo
achmelo deleted the renovate/v3.x.x-all-minor-patch branch October 22, 2026 09:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file size/M

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants