This repository has been archived by the owner on Aug 7, 2023. It is now read-only.
chore(deps): update all non-major dependencies #43
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
8.45.0->8.46.018.16.1-bullseye->18.17.0-bullseyeRelease Notes
eslint/eslint (eslint)
v8.46.0Compare Source
Features
8a93438feat:require-unicode-regexpsupportvflag (#17402) (SUZUKI Sosuke)1a2f966feat:no-useless-escapesupportvflag (#17420) (Yosuke Ota)ee68d1dfeat:no-empty-character-classsupportvflag (#17419) (Milos Djermanovic)853d32bfeat: deprecate no-return-await (#17417) (Carlos Lopez)d4f02e4feat:no-control-regexsupportvflag (#17405) (Yosuke Ota)2a35f3efeat:prefer-named-capture-groupsupportvflag (#17409) (Yosuke Ota)8ca8b50feat: Better error message for flat config plugins (#17399) (Nicholas C. Zakas)509f753feat:no-misleading-character-classsupportvflag (#17406) (Yosuke Ota)3caf514feat:no-regex-spacessupportvflag (#17407) (Yosuke Ota)b7fad2bfeat:prefer-regex-literalssupportvflag (#17410) (Yosuke Ota)a6a3ad4feat:no-useless-backreferencesupportvflag (#17408) (Yosuke Ota)94954a7feat:no-invalid-regexpsupportvflag (#17404) (Yosuke Ota)1af6eacfeat: adds option for allowing empty object patterns as parameter (#17365) (Tanuj Kanti)cf03104feat: Improve config error messages (#17385) (Nicholas C. Zakas)Bug Fixes
9803c7cfix: FlatESLint#getRulesMetaForResults shouldn't throw on unknown rules (#17393) (Milos Djermanovic)42faa17fix: Update no-loop-func to not overlap with no-undef (#17358) (Matt Wilkinson)Documentation
4d474e3docs: update with TypeScript info (#17423) (James)091f44edocs: File extension named processor deprecation (#17362) (Matt Wilkinson)9254a6cdocs: Update README (GitHub Actions Bot)6d6dc51docs: fix overlapping ofopen in playgroundbutton (#17403) (Tanuj Kanti)7fc3a2cdocs: Add private class features info to no-underscore-dangle (#17386) (Matt Wilkinson)da73e58docs: Migratingeslint-envconfiguration comments (#17390) (Francesco Trotta)80dffeddocs: fix Ignoring Files section in config migration guide (#17392) (Milos Djermanovic)8a9abb7docs: Update README (GitHub Actions Bot)7e9be4bdocs: Update README (GitHub Actions Bot)0b0bbe0docs: Update README (GitHub Actions Bot)Chores
d1eb7e4chore: Update ecosystem dependencies (#17427) (Nicholas C. Zakas)fab9e97chore: package.json update for eslint-config-eslint release (ESLint Jenkins)6246711chore: package.json update for @eslint/js release (ESLint Jenkins)0aa0bc3chore: Add PRs to triage project (#17421) (Nicholas C. Zakas)nodejs/node (node)
v18.17.0: 2023-07-18, Version 18.17.0 'Hydrogen' (LTS), @danielleadamsCompare Source
Notable Changes
Ada 2.0
Node.js v18.17.0 comes with the latest version of the URL parser, Ada. This update brings significant performance improvements
to URL parsing, including enhancements to the url.domainToASCII and url.domainToUnicode functions in node:url.
Ada 2.0 has been integrated into the Node.js codebase, ensuring that all parts of the application can benefit from the
improved performance. Additionally, Ada 2.0 features a significant performance boost over its predecessor, Ada 1.0.4,
while also eliminating the need for the ICU requirement for URL hostname parsing.
Contributed by Yagiz Nizipli and Daniel Lemire in #47339
Web Crypto API
Web Crypto API functions' arguments are now coerced and validated as per their WebIDL definitions like in other Web Crypto API implementations.
This further improves interoperability with other implementations of Web Crypto API.
Contributed by Filip Skokan in #46067
test(Chemi Atlow) #47909Commits
2ba08ac002] - benchmark: usecluster.isPrimaryinstead ofcluster.isMaster(Deokjin Kim) #4800260ca69d96c] - benchmark: add eventtarget creation bench (Rafael Gonzaga) #47774d8233d96bb] - benchmark: add a benchmark fordefaultResolve(Antoine du Hamel) #47543a1aabb6912] - benchmark: fix invalid requirementsURL (Deokjin Kim) #47378394c61caf9] - bootstrap: support namespaced builtins in snapshot scripts (Joyee Cheung) #474670165a765a0] - bootstrap: do not expand process.argv[1] for snapshot entry points (Joyee Cheung) #47466cca557cdd9] - buffer: combine checking range of sourceStart inbuf.copy(Deokjin Kim) #477584c69be467c] - buffer: use private properties for brand checks in File (Matthew Aitken) #47154d002f9b6e2] - build: revert unkonwn ruff selector (Moshe Atlow) #4875393f77cb762] - build: set v8_enable_webassembly=false when lite mode is enabled (Cheng Shao) #482481662e894f3] - build: add action to close stale PRs (Michael Dawson) #480515ca437b288] - build: use pathlib for paths (Mohammed Keyvanzadeh) #4758172443bc54b] - build: refactor configure.py (Mohammed Keyvanzadeh) #47667d4eecb5be9] - build: add devcontainer configuration (Tierney Cyren) #40825803ed41144] - build: bump ossf/scorecard-action from 2.1.2 to 2.1.3 (dependabot[bot]) #4736748468c4413] - build: replace Python linter flake8 with ruff (Christian Clauss) #475193ceb2c4387] - build: add node-core-utils to setup (Jiawen Geng) #47442fdc59b8e14] - build: bump github/codeql-action from 2.2.6 to 2.2.9 (dependabot[bot]) #473663924893023] - build: update stale action from v7 to v8 (Rich Trott) #47357753185c5b0] - build: remove Python pip--no-useroption (Christian Clauss) #4737267af0a6a2b] - build: avoid usage of pipes library (Mohammed Keyvanzadeh) #47271db910dd6b2] - build, deps, tools: avoid excessive LTO (Konstantin Demin) #4731335d1def891] - child_process: use signal.reason in child process abort (Debadree Chatterjee) #478177692d2e7b9] - cluster: use ObjectPrototypeHasOwnProperty (Daeyeon Jeong) #481417617772762] - crypto: use openssl's own memory BIOs in crypto_context.cc (GauriSpears) #471608cabfe7c6e] - crypto: fix setEngine() when OPENSSL_NO_ENGINE set (Tobias Nießen) #47977de1338da05] - crypto: fix webcrypto private/secret import with empty usages (Filip Skokan) #4787727a696fda9] - crypto: update root certificates to NSS 3.89 (Node.js GitHub Bot) #47659e2292f936e] - crypto: remove INT_MAX restriction in randomBytes (Tobias Nießen) #47559a5f214c00c] - crypto: replace THROW with CHECK for scrypt keylen (Tobias Nießen) #47407dd42214fd4] - crypto: unify validation of checkPrime checks (Tobias Nießen) #4716576e4d12fb3] - crypto: re-add padding for AES-KW wrapped JWKs (Filip Skokan) #465639d894c17dd] - crypto: use WebIDL converters in WebCryptoAPI (Filip Skokan) #460676f3a8b45a5] - deps: update ada to 2.5.0 (Node.js GitHub Bot) #48223075b6db919] - deps: update ada to 2.4.2 (Node.js GitHub Bot) #48092a4ee1f652c] - deps: update ada to 2.4.1 (Node.js GitHub Bot) #4803681b514d3f0] - deps: update ada to 2.4.0 (Node.js GitHub Bot) #47922575ddf694f] - deps: update ada to 2.3.1 (Node.js GitHub Bot) #478932d03d5f458] - deps: update ada to 2.3.0 (Node.js GitHub Bot) #4773742e690f2d5] - deps: update ada to 2.2.0 (Node.js GitHub Bot) #4767808dd271521] - deps: update ada to 2.1.0 (Node.js GitHub Bot) #4759896c50ba71f] - deps: update ada to 2.0.0 (Node.js GitHub Bot) #473394d1c38b758] - deps: update zlib to337322d(Node.js GitHub Bot) #4821874206b2549] - deps: update histogram 0.11.8 (Marco Ippolito) #47742fbb4b3775d] - deps: update histogram to 0.11.7 (Marco Ippolito) #47742e88c079022] - deps: update simdutf to 3.2.12 (Node.js GitHub Bot) #4811848bd1248b9] - deps: update minimatch to 9.0.1 (Node.js GitHub Bot) #48094d4572d31fa] - deps: update corepack to 0.18.0 (Node.js GitHub Bot) #480918090d29dc4] - deps: update uvwasi to 0.0.18 (Node.js GitHub Bot) #47866169c8eea2e] - deps: update uvwasi to 0.0.17 (Node.js GitHub Bot) #478666acbb23380] - deps: upgrade npm to 9.6.7 (npm team) #48062e8f2c0a58b] - deps: update undici to 5.22.1 (Node.js GitHub Bot) #479949309fd3120] - deps: update simdutf to 3.2.9 (Node.js GitHub Bot) #47983b796d3560a] - deps: upgrade npm to 9.6.6 (npm team) #47862cce372e14e] - deps: V8: cherry-pickc5ab3e4(Richard Lau) #477367283486adb] - deps: update undici to 5.22.0 (Node.js GitHub Bot) #476792ea6e03003] - deps: add minimatch as a dependency (Moshe Atlow) #47499261e1d23d1] - deps: update ICU to 73.1 release (Steven R. Loomis) #47456f532f9df5f] - deps: update undici to 5.21.2 (Node.js GitHub Bot) #47508dcb8c038b9] - deps: update simdutf to 3.2.8 (Node.js GitHub Bot) #475076c8456d61f] - deps: update undici to 5.21.1 (Node.js GitHub Bot) #47488d3b2e8a438] - deps: update simdutf to 3.2.7 (Node.js GitHub Bot) #4747364a5fe0499] - deps: update corepack to 0.17.2 (Node.js GitHub Bot) #474746f0f61a7d3] - deps: upgrade npm to 9.6.4 (npm team) #47432443a72e207] - deps: update zlib to upstream5edb52d(Luigi Pinca) #47151dc3bc46914] - deps: update simdutf to 3.2.3 (Node.js GitHub Bot) #47331b2f2bebbc2] - deps: update timezone to 2023c (Node.js GitHub Bot) #47302c10729ffa7] - deps: upgrade npm to 9.6.3 (npm team) #47325420deac1de] - deps: update corepack to 0.17.1 (Node.js GitHub Bot) #47156966ba28491] - deps: V8: cherry-pick3e4952c(Richard Lau) #47236fc6ab26824] - deps: update timezone to 2023b (Node.js GitHub Bot) #472562700e70215] - deps: upgrade npm to 9.6.2 (npm team) #4710829ba98a0a5] - deps: V8: cherry-pick975ff4d(Debadree Chatterjee) #47209be34777be8] - deps: cherry-pick win/arm64/clang fixes (Cheng Zhao) #47011b52aacb614] - deps: update uvwasi to v0.0.16 (Michael Dawson) #4643427a76cf5e0] - deps,test: update postject to 1.0.0-alpha.6 (Node.js GitHub Bot) #48072b171c1a3a4] - dgram: convert macro to template (Tobias Nießen) #47891709bf1c758] - (SEMVER-MINOR) dns: expose getDefaultResultOrder (btea) #469732f202c93e7] - doc: clarify array args to Buffer.from() (Bryan English) #4827427f195f8d8] - doc: document watch option for node:test run() (Moshe Atlow) #482567558ef350a] - doc: update documentation for FIPS support (Richard Lau) #48194f2bb1919e5] - doc: improve the documentation of the stdio option (Kumar Arnav) #48110a2aa52ba92] - doc: update Buffer.allocUnsafe description (sinkhaha) #4818319ad471d52] - doc: update codeowners with website team (Claudio Wunder) #4819767b2c2a98f] - doc: fix broken link to new folder doc/contributing/maintaining (Andrea Fassina) #48205795ca70815] - doc: add atlowChemi to triagers (Chemi Atlow) #48104e437a0aff1] - doc: fix typo in readline completer function section (Vadym) #4818892e0ea496d] - doc: remove broken link for keygen (Rich Trott) #48176fe15dae8e6] - doc: addautointrinsic height to prevent jitter/flicker (Daniel Holbert) #48195230335e21f] - doc: add version info on the SEA docs (Antoine du Hamel) #48173e6f37d1b80] - doc: add Ruy to list of TSC members (Michael Dawson) #4817269205a250c] - doc: update socket.remote* properties documentation (Saba Kharanauli) #48139e4a5d6298c] - doc: update outdated section on TLSv1.3-PSK (Tobias Nießen) #48123d14018ed99] - doc: improve HMAC key recommendations (Tobias Nießen) #48121e9d4baf770] - doc: clarify mkdir() recursive behavior (Stephen Odogwu) #481093e4a469139] - doc: fix typo in crypto legacy streams API section (Tobias Nießen) #48122bdf366ab88] - doc: update SEA source link (Rich Trott) #480802a4f79a75f] - doc: clarify tty.isRaw (Roberto Vidal) #4805598c6e4be03] - doc: use secure key length for HMAC generateKey (Tobias Nießen) #480528ae5c8cf9d] - doc: update broken EVP_BytesToKey link (Rich Trott) #480643c713e7caa] - doc: update broken spkac link (Rich Trott) #48063c22f739e94] - doc: document node-api version process (Chengzhong Wu) #47972ce859f9f9f] - doc: fix typo in binding functions (Deokjin Kim) #48003070c3457b7] - doc: mark Node.js 14 as End-of-Life (Richard Lau) #480233611027d8e] - doc: clarify CRYPTO_CUSTOM_ENGINE_NOT_SUPPORTED (Tobias Nießen) #47976dbffad958c] - doc: add missing deprecated blocks to cluster (Tobias Nießen) #47981035356f711] - doc: update description of global (Tobias Nießen) #47969081a6ffaea] - doc: update measure memory rejection information (Yash Ladha) #416393460cf9c23] - doc: fix broken link to TC39 import attributes proposal (Rich Trott) #479543b018c8aa9] - doc: fix broken link (Rich Trott) #47953244db960a9] - doc: remove broken link (Rich Trott) #479422cc8715bb9] - doc: document make lint-md-clean (Matteo Collina) #47926b80e006c17] - doc: mark global object as legacy (Mert Can Altın) #47819bf4eb058f3] - doc: ntfs junction points must link to directories (Ben Noordhuis) #4790749875f0d69] - doc: fix params names (Dmitry Semigradsky) #4785394b5eaaf17] - doc: update supported version of FreeBSD to 12.4 (Michaël Zasso) #478380114201825] - doc: swap Matteo with Rafael in the stewards (Rafael Gonzaga) #478418bcfcc0af9] - doc: add valgrind suppression details (Kevin Eady) #4776075d397ecab] - doc: replace EOL versions in README (Tobias Nießen) #478332b0c57cb80] - doc: add ovflowd to collaborators (Claudio Wunder) #47844be4966977c] - doc: update BUILDING.md previous versions links (Tobias Nießen) #47835a9e8a20fb8] - doc: create maintaining folder for deps (Marco Ippolito) #47589fd0f362d7c] - doc: remove MoLow from Triagers (Moshe Atlow) #477920927c67ab6] - doc: fix typo in webstreams.md (Christian Takle) #47766994be578da] - doc: move BethGriggs to regular member (Rich Trott) #4777664d19f4678] - doc: move addaleax to TSC emeriti (Anna Henningsen) #4775233ec10e6b8] - doc: add link to news for Node.js core (Michael Dawson) #477042a682b5efe] - doc: async_hooks asynchronous content example add mjs code (btea) #474014f541c3ca3] - doc: clarify concurrency model of test runner (Tobias Nießen) #47642ffcff68f0d] - doc: fix typos (Mohammed Keyvanzadeh) #47685290b2b7afc] - doc: fix capitalization of ASan (Mohammed Keyvanzadeh) #47676b4ca788878] - doc: fix typos in SECURITY.md (Mohammed Keyvanzadeh) #47677971c545a47] - doc: update error code of buffer (Deokjin Kim) #47617ec5c919928] - doc: change offset of example inBuffer.copyBytesFrom(Deokjin Kim) #47606980bf052c7] - doc: remove markdown link from heading (Tobias Nießen) #47585e96451ec5e] - doc: fix release-post script location (Rafael Gonzaga) #4751761ea15339c] - doc: add link for news from uvwasi team (Michael Dawson) #47531d40bcdd73e] - doc: add missing setEncoding call in ESM example (Anna Henningsen) #47558924dc909b3] - doc: fix typo in util.types.isNativeError() (Julian Dax) #47532a24d72a6fb] - doc: add KhafraDev to collaborators (Matthew Aitken) #47510b0196378b6] - doc: create maintaining-brotli.md (Marco Ippolito) #473803902be8fe8] - doc: info on handling unintended breaking changes (Michael Dawson) #47426670f9a591d] - doc: add performance initiative (Yagiz Nizipli) #4742489a5d04a8e] - doc: do not create a backup file (Luigi Pinca) #471517f2bccc5d6] - doc: add MoLow to the TSC (Colin Ihrig) #474367db2e889ac] - doc: add a note about os.cpus() returning an empty list (codedokode) #47363289a8e30d6] - doc: clarify reports are only evaluated on active versions (Rafael Gonzaga) #47341dc22edb4d2] - doc: remove Vladimir de Turckheim from Security release stewards (Vladimir de Turckheim) #473183e74a74da3] - doc: add importing util to example of `process.report.getReport' (Deokjin Kim) #47298ece029f64e] - doc: vm.SourceTextModule() without context option (Axel Kittenberger) #47295c7227204cc] - doc: document process for sharing project news (Michael Dawson) #471892865cbb4bd] - doc: revise example of assert.CallTracker (Deokjin Kim) #4725281ebaf2670] - doc: fix typo in SECURITY.md (Rich Trott) #47282faabd48f11] - doc: use serial comma in cli docs (Tobias Nießen) #472623a85794089] - doc: improve example for Error.captureStackTrace() (Julian Dax) #468862114fa472b] - doc: clarify http error events after calling destroy() (Zach Bjornson) #46903d15f522d1f] - doc: update output of example in AbortController (Deokjin Kim) #47227ab6588e343] - doc: drop one-week branch sync on major releases (Rafael Gonzaga) #471496ac52e3061] - doc: fix grammar in the collaborator guide (Mohammed Keyvanzadeh) #4724513175774a6] - doc: update stream.reduce concurrency note (Raz Luvaton) #471661e97ccd6d4] - doc: remove use of DEFAULT_ENCODING in PBKDF2 docs (Tobias Nießen) #47181d562a7c461] - doc: fix typos in async_context.md (Shubham Sharma) #471559a11788cdf] - doc: update collaborator guide to reflect TSC changes (Rich Trott) #471265fc2bb763f] - doc: clarify thatfs.create{Read,Write}StreamsupportAbortSignal(Antoine du Hamel) #471222dd3b0213e] - doc: improve documentation for util.types.isNativeError() (Julian Dax) #46840ce4636e36b] - doc: rename the startup performance initiative to startup snapshot (#47111) (Joyee Cheung)309d017f15] - doc: fix "maintaining dependencies" heading typos (Keyhan Vakil) #47082230a984eb3] - doc: include webstreams in finished() and Duplex.from() parameters (Debadree Chatterjee) #463128651ea822e] - doc,fs: update description of fs.stat() method (Mert Can Altın) #47654e4539e1f19] - doc,test: update the v8.startupSnapshot doc and test the example (Joyee Cheung) #474683dddc0175f] - doc,test: fix concurrency option of test() (Tobias Nießen) #47734563f9fe06a] - doc,vm: clarify usage of cachedData in vm.compileFunction() (Darshan Sen) #48193316016ffac] - esm: avoid accessing lazy getters for urls (Yagiz Nizipli) #47542e5e385d2b2] - esm: increase test coverage of edge cases (Antoine du Hamel) #47033061fb20660] - (SEMVER-MINOR) events: add getMaxListeners method (Matthew Aitken) #47039ed0b62cc01] - (SEMVER-MINOR) fs: add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #470849b44c56c9a] - fs: make readdir recursive algorithm iterative (Ethan Arrowood) #476507273ef53b3] - (SEMVER-MINOR) fs: add recursive option to readdir and opendir (Ethan Arrowood) #414393f0636d2c1] - (SEMVER-MINOR) fs: add support for mode flag to specify the copy behavior (Tetsuharu Ohzeki) #47084a0b9853251] - (SEMVER-MINOR) fs: implement byob mode for readableWebStream() (Debadree Chatterjee) #46933709e368708] - http: send implicit headers on HEAD with no body (Matteo Collina) #48108dc318f26c0] - (SEMVER-MINOR) http: prevent writing to the body when not allowed by HTTP spec (Gerrard Lindsay) #477324b2a015642] - (SEMVER-MINOR) http: remove internal error in assignSocket (Matteo Collina) #477237cef6aa721] - (SEMVER-MINOR) http: add highWaterMark opt in http.createServer (HinataKah0) #474059186f3a0ef] - http2: improve nghttp2 error callback (Tobias Nießen) #47840cc7e5dd4cd] - inspector: add tips for Session (theanarkh) #4719570c0e882d3] - inspector: log response and requests in the inspector for debugging (Joyee Cheung) #469416099d2d08b] - inspector: fix session.disconnect crash (theanarkh) #46942156292d44a] - lib: create weakRef only if any signals provided (Chemi Atlow) #48448efaa073303] - (SEMVER-MINOR) lib: implement AbortSignal.any() (Chemi Atlow) #47821c46b31f3bf] - lib: support FORCE_COLOR for non TTY streams (Moshe Atlow) #48034286c358832] - lib: do not disable linter for entire files (Antoine du Hamel) #48299a2552ab7c0] - lib: use existingisWindowsvariable (sinkhaha) #481342b65625281] - lib: update comment (sinkhaha) #47884fa447b5120] - lib: use webidl DOMString converter in EventTarget (Matthew Aitken) #4751433f32dc318] - lib: define Event.isTrusted in the prototype (Santiago Gimeno) #4697450789a5e4a] - lib: refactor to usevalidateBuffer(Deokjin Kim) #464893658abea26] - (SEMVER-MINOR) lib: add webstreams to Duplex.from() (Debadree Chatterjee) #46190fcf3781d22] - lib,src,test: lint codebase according new rules for v18.x (Juan José Arboleda) #48697b55dc53422] - meta: bump github/codeql-action from 2.3.3 to 2.3.6 (dependabot[bot]) #482878ac4579d85] - meta: bump actions/setup-python from 4.6.0 to 4.6.1 (dependabot[bot]) #48286b1854fe9c1] - meta: bump codecov/codecov-action from 3.1.3 to 3.1.4 (dependabot[bot]) #48285d9448b8d93] - meta: remove dont-land-on-v14 auto labeling (Shrujal Shah) #48031bb859768b6] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #48010af90fb939b] - meta: bump step-security/harden-runner from 2.3.1 to 2.4.0 (Rich Trott) #479804dcf5e2052] - meta: bump github/codeql-action from 2.3.2 to 2.3.3 (Rich Trott) #47979dab3186ea2] - meta: bump actions/setup-python from 4.5.0 to 4.6.0 (Rich Trott) #47968546224c13c] - meta: add security-wg ping to permission.js (Rafael Gonzaga) #47941353dfbd2d6] - meta: bump step-security/harden-runner from 2.2.1 to 2.3.1 (dependabot[bot]) #4780820a5cc27ec] - meta: bump actions/setup-python from 4.5.0 to 4.6.0 (dependabot[bot]) #47806eef6442d8d] - meta: bump actions/checkout from 3.3.0 to 3.5.2 (dependabot[bot]) #47805e30e6a718a] - meta: remove extra space in scorecard workflow (Mestery) #478052d13cdebc4] - meta: bump github/codeql-action from 2.2.9 to 2.3.2 (dependabot[bot]) #47809f0d8352ed8] - meta: bump codecov/codecov-action from 3.1.1 to 3.1.3 (dependabot[bot]) #478077e95fba0ff] - meta: fix dependabot commit message (Mestery) #47810d31d9c7c28] - meta: ping nodejs/startup for startup test changes (Joyee Cheung) #47771077686055b] - meta: add mailmap entry for KhafraDev (Rich Trott) #47512e50eb6570a] - meta: ping security-wg team on permission model changes (Rafael Gonzaga) #474832df1a36214] - meta: ping startup and realm team on src/node_realm* changes (Joyee Cheung) #47448c7dc6e321b] - meta: fix notable-change comment label url (Filip Skokan) #47300e859ca44d5] - meta: clarify the threat model to explain the JSON.parse case (Matteo Collina) #472761f08f4848d] - meta: update link to collaborators discussion page (Michaël Zasso) #472113b524cbf86] - meta: automate description requests when notable change label is added (Danielle Adams) #47078da16ca7c59] - meta: move TSC voting member(s) to regular member(s) (Node.js GitHub Bot) [#47180](https://togConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.