chore(deps): update all non-major dependencies #14
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.29.4
->2.29.6
9.28.0
->9.34.0
1.8.0
->1.8.1
2.8.18
->2.8.19
4.17.22
->4.17.23
20.19.0
->20.19.11
1.8.0
->1.8.1
9.0.2
->9.2.0
9.28.0
->9.34.0
22.16.0
->22.18.0
3.5.3
->3.6.2
7.1.1
->7.1.4
29.3.4
->29.4.1
5.8.3
->5.9.2
8.33.1
->8.40.0
Release Notes
changesets/changesets (@changesets/cli)
v2.29.6
Compare Source
Patch Changes
a3563b0
Thanks @benmccann! - Switch to maintained fork ofexternal-editor
v2.29.5
Compare Source
Patch Changes
#1693
6352819
Thanks @Andarist! - Fixed an issue withworkspace:^
andworkspace:~
dependency ranges not being semantically treated as, respectively,^CURRENT_VERSION
and~CURRENT_VERSION
. This led to dependent packages being, at times, bumped too often when their dependencies with those ranges were bumped.Updated dependencies [
6352819
]:eslint/eslint (@eslint/js)
v9.34.0
Compare Source
v9.33.0
Compare Source
v9.32.0
Compare Source
v9.31.0
Compare Source
v9.30.1
Compare Source
v9.30.0
Compare Source
v9.29.0
Compare Source
expressjs/compression (compression)
v1.8.1
Compare Source
==========
streetsidesoftware/cspell (cspell)
v9.2.0
Compare Source
refactor: Support url based cache entries (#7639)
refactor: Support url based cache entries (#7639)
Features
fix: Support remote dependencies in cache (#7642)
fix: Support remote dependencies in cache (#7642)
Fixes
fix: Remove `flat-cache` dependency (#7636)
fix: Remove
flat-cache
dependency (#7636)flat-cache
v6 is not compatible with the cspell cache. Sinceflat-cache
was mostly a pass through toflatted
, it was better to just replace it.refactor: move towards caching URLs (#7634)
refactor: move towards caching URLs (#7634)
fix: Support async cache (#7631)
fix: Support async cache (#7631)
fix: Replace file-entry-cache (#6579)
fix: Replace file-entry-cache (#6579)
Deprecating the use of file-entry-cache.
v10 of
file-entry-cache
breaks the spell checker and bloats the cache size.This PR is the first step in reducing the dependency upon file-entry-cache and its dependencies.
fix: Clean cspell-lib type exports (#7615)
fix: Clean cspell-lib type exports (#7615)
Dictionary Updates
fix: Workflow Bot -- Update Dictionaries (main) (#7618)
fix: Workflow Bot -- Update Dictionaries (main) (#7618)
v9.1.5
Compare Source
Fixes
fix: Compile before publish (#7610)
fix: Compile before publish (#7610)
v9.1.3
Compare Source
Fixes
fix: Add toml config reader/writer (#7565)
fix: Add toml config reader/writer (#7565)
fixes #7563
Dictionary Updates
fix: Workflow Bot -- Update Dictionaries (main) (#7569)
fix: Workflow Bot -- Update Dictionaries (main) (#7569)
v9.1.2
Compare Source
Fixes
fix: Do not double encode stdin urls (#7536)
fix: Do not double encode stdin urls (#7536)
fixes #7517
fix: cspell trace output (#7528)
fix: cspell trace output (#7528)
It was incorrectly trimming ansi strings.
Dictionary Updates
fix: Workflow Bot -- Update Dictionaries (main) (#7526)
fix: Workflow Bot -- Update Dictionaries (main) (#7526)
v9.1.1
Compare Source
Changes
Fixes
fix: Use the native JSON parser if possible (#7502)
fix: Use the native JSON parser if possible (#7502)
Some of the cspell settings have grow large. The fix is to use the native JSON parser instead of one that accepts comments.
v9.1.0
Compare Source
Changes
Features
feat: Add command `dictionaries` (#7445)
feat: Add command
dictionaries
(#7445)Add new
dictionaries
command to the clifeat: Add lint option `--dictionary` (#7441)
feat: Add lint option
--dictionary
(#7441)Add lint options:
--dictionary
- enable a dictionary by name--disable-dictionary
- disable a dictionary by namefeat: Add init command to command-line. (#7414)
feat: Add init command to command-line. (#7414)
New command:
feat: Add command line option to set reporting level (#7380)
feat: Add command line option to set reporting level (#7380)
eslint/eslint (eslint)
v9.34.0
Compare Source
v9.33.0
Compare Source
v9.32.0
Compare Source
v9.31.0
Compare Source
v9.30.1
Compare Source
v9.30.0
Compare Source
v9.29.0
Compare Source
nodejs/node (node)
v22.18.0
Compare Source
v22.17.1
Compare Source
v22.17.0
: 2025-06-24, Version 22.17.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
Instantiating
node:http
classes withoutnew
Constructing classes like
IncomingMessage
orServerResponse
without thenew
keyword is now discouraged. This clarifies API expectations and aligns with standard
JavaScript behavior. It may warn or error in future versions.
Contributed by Yagiz Nizipli in #58518.
options.shell = ""
innode:child_process
Using an empty string for
shell
previously had undefined behavior. This changeencourages explicit choices (e.g.,
shell: true
or a shell path) and avoidsrelying on implementation quirks.
Contributed by Antoine du Hamel and Renegade334 #58564.
HTTP/2 priority signaling
The HTTP/2 prioritization API (e.g.,
stream.priority
) is now deprecated due topoor real-world support. Applications should avoid using priority hints and expect future removal.
Contributed by Matteo Collina and Antoine du Hamel #58313.
✅ Features graduated to stable
assert.partialDeepStrictEqual()
This method compares only a subset of properties in deep object comparisons,
useful for flexible test assertions. Its stabilization means it's now safe for
general use and won't change unexpectedly in future releases.
Contributed by Ruben Bridgewater in #57370.
Miscellaneous
dirent.parentPath
filehandle.readableWebStream()
fs.glob()
fs.openAsBlob()
node:readline/promises
port.hasRef()
readable.compose()
readable.iterator()
readable.readableAborted
readable.readableDidRead
Duplex.fromWeb()
Duplex.toWeb()
Readable.fromWeb()
Readable.isDisturbed()
Readable.toWeb()
stream.isErrored()
stream.isReadable()
URL.createObjectURL()
URL.revokeObjectURL()
v8.setHeapSnapshotNearHeapLimit()
Writable.fromWeb()
Writable.toWeb()
writable.writableAborted
ERR_INPUT_TYPE_NOT_ALLOWED
ERR_UNKNOWN_FILE_EXTENSION
ERR_UNKNOWN_MODULE_FORMAT
ERR_USE_AFTER_CLOSE
Contributed by James M Snell in
#57513 and
#58541.
Semver-minor features
🔧
fs.FileHandle.readableWebStream
getsautoClose
optionThis gives developers explicit control over whether the file descriptor should
be closed when the stream ends. Helps avoid subtle resource leaks.
Contributed by James M Snell in #58548.
🔧
fs.Dir
now supports explicit resource managementThis improves ergonomics around async iteration of directories. Developers can
now manually control when a directory is closed using
.close()
or withSymbol.asyncDispose
.Contributed by Antoine du Hamel in #58206.
📊
http2
gains diagnostics channel:http2.server.stream.finish
Adds observability support for when a stream finishes. Useful for logging,
monitoring, and debugging HTTP/2 behavior without patching internals.
Contributed by Darshan Sen in #58560.
🔐 Permissions: implicit allow-fs-read to entrypoint
Node.js permissions model now allows read access to the entry file by default.
It makes running permission-restricted apps smoother while preserving security.
Contributed by Rafael Gonzaga in #58579.
🎨
util.styleText()
adds'none'
styleThis lets developers remove styling cleanly without hacks. Useful for overriding
inherited terminal styles when composing styled strings.
Contributed by James M Snell in #58437.
🧑💻 Community updates
0105c13556
] - doc: add Filip Skokan to TSC (Rafael Gonzaga) #584993b857735ef
] - doc: add JonasBa to collaborators (Jonas Badalic) #58355fdf7612735
] - doc: add puskin to collaborators (Giovanni Bucci) #58308Commits
ffe7e1ace0
] - (SEMVER-MINOR) assert: mark partialDeepStrictEqual() as stable (Ruben Bridgewater) #57370269931f289
] - async_hooks: ensure AsyncLocalStore instances work isolated (Gerhard Stöbich) #581499e0746a4ff
] - benchmark: fix broken fs.cpSync benchmark (Dario Piotrowicz) #58472dee8cb5bcb
] - benchmark: add more options to cp-sync (Sonny) #58278e840fd5b85
] - benchmark: fix typo in method name for error-stack (Miguel Marcondes Filho) #58128b9a16e97e0
] - buffer: give names toBuffer.prototype.*Write()
functions (Livia Medeiros) #58258d56a5e40af
] - buffer: use constexpr where possible (Yagiz Nizipli) #58141215587feca
] - build: add support for OpenHarmony operating system (hqzing) #583509bcef6821c
] - build: fix uvwasi pkgname (Antoine du Hamel) #582707c3883c2ae
] - build: search for libnode.so in multiple places (Jan Staněk) #582133f954accb3
] - build: fix pointer compression builds (Joyee Cheung) #5817104c8f59f84
] - build: use FILE_OFFSET_BITS=64 esp. on 32-bit arch (RafaelGSS) #580908c2cf3a372
] - build: use //third_party/simdutf by default in GN (Shelley Vohr) #58115cff8006792
] - child_process: give names toChildProcess
functions (Livia Medeiros) #583706816d779b6
] - child_process: give names to promisifiedexec()
andexecFile()
(LiviaMedeiros) #579165572cecca4
] - crypto: expose crypto.constants.OPENSSL_IS_BORINGSSL (Shelley Vohr) #58387d6aa02889c
] - deps: use proper C standard when building libuv (Yaksh Bariya) #58587375a6413d5
] - deps: update simdjson to 3.12.3 (Node.js GitHub Bot) #57682e0cd138e52
] - deps: update googletest toe9092b1
(Node.js GitHub Bot) #5856531e592631f
] - deps: update corepack to 0.33.0 (Node.js GitHub Bot) #58566386c24260b
] - deps: update sqlite to 3.50.0 (Node.js GitHub Bot) #58272f84998d40b
] - deps: update OpenSSL gen container to Ubuntu 22.04 (Michaël Zasso) #58432d49fd29859
] - deps: update llhttp to 9.3.0 (Fedor Indutny) #58144e397980a1a
] - deps: update libuv to 1.51.0 (Node.js GitHub Bot) #58124a28c33645c
] - dns: fix dns query cache implementation (Ethan Arrowood) #584046939b0c624
] - doc: fix the order ofprocess.md
sections (Allon Murienik) #584031ca253c363
] - doc: add support link for panva (Filip Skokan) #585918319edbcf6
] - doc: update metadata for _transformState deprecation (James M Snell) #58530697d258136
] - doc: deprecate passing an empty string tooptions.shell
(Antoine du Hamel) #58564132fc804e8
] - doc: correct formatting of example definitions for--test-shard
(Jacob Smith) #585717d0df646f6
] - doc: clarify DEP0194 scope (Antoine du Hamel) #585041e6d7da0ce
] - doc: deprecate HTTP/2 priority signaling (Matteo Collina) #583135a917bc1d0
] - doc: explain child_process code and signal null values everywhere (Darshan Sen) #584790105c13556
] - doc: add Filip Skokan to TSC (Rafael Gonzaga) #584992bdc87cd64
] - doc: updategit node release
example (Antoine du Hamel) #5847528f9b43186
] - doc: add missing options.info for ZstdOptions (Jimmy Leung) #58360e19496dfc1
] - doc: add missing options.info for BrotliOptions (Jimmy Leung) #583597f905863db
] - doc: clarify x509.checkIssued only checks metadata (Filip Skokan) #584575cc97df637
] - doc: add links to parent class fornode:zlib
classes (Antoine du Hamel) #5843336e0d5539b
] - doc: remove remaining uses of@@​wellknown
syntax (René) #584132f36f8e863
] - doc: clarify behavior of --watch-path and --watch flags (Juan Ignacio Benito) #581363b857735ef
] - doc: add JonasBa to collaborators (Jonas Badalic) #583559d5e969bb6
] - doc: add latest security release steward (Rafael Gonzaga) #58339b22bb03167
] - doc: fix CryptoKey.algorithm type and other interfaces in webcrypto.md (Filip Skokan) #58294670f31060b
] - doc: mark the callback argument of crypto.generatePrime as mandatory (Allon Murienik) #5829939d9a61239
] - doc: remove comma delimiter mention on permissions doc (Rafael Gonzaga) #58297573b0b7bfe
] - doc: make Stability labels not sticky in Stability index (Livia Medeiros) #58291a5a686a3ae
] - doc: update commit-queue documentation (Dario Piotrowicz) #58275fdf7612735
] - doc: add puskin to collaborators (Giovanni Bucci) #58308be492a1708
] - doc: update stability status for diagnostics_channel to experimental (Idan Goshen) #582617d00fc2206
] - doc: clarify napi_get_value_string_* for bufsize 0 (Tobias Nießen) #58158c8500a2c4a
] - doc: fix typo of filehttp.md
,outgoingMessage.setTimeout
section (yusheng chen) #5818834a9b856c3
] - doc: update return types for eventNames method in EventEmitter (Yukihiro Hasegawa) #58083faedee59d2
] - doc: fix typo in benchmark script path (Miguel Marcondes Filho) #58129570d8d3f10
] - doc: clarify future Corepack removal in v25+ (Trivikram Kamat) #57825a71b9fc2ff
] - doc: mark multiple APIs stable (James M Snell) #5751373a97d47f3
] - doc,lib: update source map links to ECMA426 (Chengzhong Wu) #585978b41429499
] - doc,src,test: fix typos (Noritaka Kobayashi) #584770cea14ec7f
] - errors: show url of unsupported attributes in the error message (Aditi) #58303b9586bf898
] - (SEMVER-MINOR) fs: add autoClose option to FileHandle readableWebStream (James M Snell) #5854872a1b061f3
] - fs: unexpose internal constants (Chengzhong Wu) #583275c36510dec
] - fs: add support forURL
forfs.glob
'scwd
option (Antoine du Hamel) #581823642b0d944
] - fs: improve cpSync no-filter copyDir performance (Dario Piotrowicz) #5846124865bc7e8
] - fs: improvecpSync
dest overriding performance (Dario Piotrowicz) #581601b3847694d
] - (SEMVER-MINOR) fs: add toDir
support for explicit resource management (Antoine du Hamel) #58206cff62e3265
] - fs: ensuredir.read()
does not throw synchronously (Antoine du Hamel) #58228cb39e4ca1f
] - fs: glob is stable, so should not emit experimental warnings (Théo LUDWIG) #58236597bfefbe1
] - http: deprecate instantiating classes without new (Yagiz Nizipli) #585185298da0102
] - http: remove unused functions and add todos (Yagiz Nizipli) #58143cff440e0fa
] - http,https: give names to anonymous or misnamed functions (Livia Medeiros) #5818043bf1f619a
] - http2: add raw header array support to h2Session.request() (Tim Perry) #57917e8a0f5b063
] - http2: add lenient flag for RFC-9113 (Carlos Fuentes) #5811649cb90d4a5
] - (SEMVER-MINOR) http2: add diagnostics channel 'http2.server.stream.finish' (Darshan Sen) #585606a56c68728
] - http2: add diagnostics channel 'http2.server.stream.error' (Darshan Sen) #5851259806b41d3
] - http2: add diagnostics channel 'http2.server.stream.start' (Darshan Sen) #58449d3d662ae47
] - http2: remove no longer userful options.selectPadding (Jimmy Leung) #58373dec6c9af8c
] - http2: add diagnostics channel 'http2.server.stream.created' (Darshan Sen) #583909e98899986
] - http2: add diagnostics channel 'http2.client.stream.close' (Darshan Sen) #5832986610389d8
] - http2: add diagnostics channel 'http2.client.stream.finish' (Darshan Sen) #583172d3071671e
] - http2: add diagnostics channel 'http2.client.stream.error' (Darshan Sen) #583066c3e426d6f
] - http2: add diagnostics channel 'http2.client.stream.start' (Darshan Sen) #58292b99d131a61
] - http2: add diagnostics channel 'http2.client.stream.created' (Darshan Sen) #58246b0644330f5
] - http2: give name to promisifiedconnect()
(LiviaMedeiros) #579164092d3611a
] - inspector: add mimeType and charset support to Network.Response (Shima Ryuhei) #58192d7d8599f7c
] - inspector: add protocol method Network.dataReceived (Chengzhong Wu) #58001aabafbc28f
] - inspector: support for worker inspection in chrome devtools (Shima Ryuhei) #5675920d978de9a
] - lib: make ERM functions into wrappers returning undefined (Livia Medeiros) #5840013567eac5f
] - (SEMVER-MINOR) lib: graduate error codes that have been around for years (James M Snell) #58541342b5a0d7a
] - lib: remove no-mixed-operators eslint rule (Ruben Bridgewater) #58375af7baef75a
] - lib: fix sourcemaps with ts module mocking (Marco Ippolito) #581938f73f42d4e
] - meta: bump github/codeql-action from 3.28.16 to 3.28.18 (dependabot[bot]) #585525dfedbeb86
] - meta: bump codecov/codecov-action from 5.4.2 to 5.4.3 (dependabot[bot]) #5855153c50f66f5
] - meta: bump step-security/harden-runner from 2.11.0 to 2.12.0 (dependabot[bot]) #58109a1a7024831
] - meta: bump ossf/scorecard-action from 2.4.1 to 2.4.2 (dependabot[bot]) #58550a379988ef6
] - meta: bump rtCamp/action-slack-notify from 2.3.2 to 2.3.3 (dependabot[bot]) #58108f6a46c87f2
] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #5845698b6aa0dcd
] - meta: bump github/codeql-action from 3.28.11 to 3.28.16 (dependabot[bot]) #581125202b262e3
] - meta: bump codecov/codecov-action from 5.4.0 to 5.4.2 (dependabot[bot]) #58110d97616ac6e
] - meta: bump actions/download-artifact from 4.2.1 to 4.3.0 (dependabot[bot]) #58106f4065074cf
] - meta: ignore mailmap changes in linux ci (Jonas Badalic) #58356e6d1224e54
] - meta: bump actions/setup-node from 4.3.0 to 4.4.0 (dependabot[bot]) #5811126da160ab2
] - meta: bump actions/setup-python from 5.5.0 to 5.6.0 (dependabot[bot]) #581074cc4195493
] - module: handle instantiated async module jobs in require(esm) (Joyee Cheung) #5806772fac71b92
] - module: clarify cjs global-like error on ModuleJobSync (Carlos Espa) #56491fecd841c93
] - net: always publish to 'net.client.socket' diagnostics channel (Darshan Sen) #5834925ee328d2b
] - path: improve path.resolve() performance when used as process.cwd() (Ruben Bridgewater) #583626fd1b23260
] - permission: remove useless conditional (Juan José) #585145b2cca51a3
] - report: use uv_getrusage_thread in report (theanarkh) #5840563ec23e84b
] - sqlite: add build option to build without sqlite (Michael Dawson) #581229d8677bff5
] - sqlite: handle thrown errors in result callback (Colin Ihrig) #584263490c75760
] - sqlite: setname
andlength
onsqlite.backup()
(Livia Medeiros) #5825150bdd94e0b
] - src: update std::vector<v8::Local<T>> to use v8::LocalVector<T> (Aditi) #585007de58417cc
] - src: env_vars caching and local variable scope optimization (Mert Can Altin) #576246d99ec33a4
] - src: fix FIPS init error handling (Tobias Nießen) #583794c23a9575e
] - src: fix possible dereference of null pointer (Eusgor) #58459eb143e902b
] - src: fix -Wreturn-stack-address error (Shelley Vohr) #5843931058b8785
] - src: reorganize ContextifyFunction methods (Chengzhong Wu) #584347521077299
] - src: improve CompileFunctionAndCacheResult error handling (Chengzhong Wu) #584340c9efccb12
] - src: fix build when using shared simdutf (Antoine du Hamel) #58407aa00f5946f
] - src: add a variant of ToV8Value() for primitive arrays (Aditi) #5757629a11506fc
] - src: remove unusedcheckMessagePort
internal binding (Dario Piotrowicz) #582670ce3feed5b
] - src: remove unusedshouldRetryAsESM
internal binding (Dario Piotrowicz) #58265517219613d
] - src: add a couple fast apis in node_os (James M Snell) #582103f834da09e
] - src: fix module buffer allocation (X-BW) #57738a793706db0
] - src: remove overzealous tcsetattr error check (Ben Noordhuis) #582005656c74517
] - src: remove NonCopyableMaybe (Tobias Nießen) #58168cab242334b
] - src: improve parsing of boolean options (Edy Silva) #58039a5df778150
] - src,lib: obtain sourceURL in magic comments from V8 (Chengzhong Wu) #58389bd6743b434
] - src,permission: implicit allow-fs-read to app entrypoint (Rafael Gonzaga) #585795bd99e4a4d
](https://redirect.github.com/nodejs/noConfiguration
📅 Schedule: Branch creation - "every weekend" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.