Update npm dependencies - #99
Merged
Merged
Conversation
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
No767
approved these changes
Aug 26, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
10.9.0→10.9.11.79.0→1.80.026.7.0→26.8.0^0.64.0→^0.65.01.79.0→1.80.011.23.0→11.24.08.67.0→8.68.0Release Notes
eslint/eslint (eslint)
v10.9.1Compare Source
oxc-project/eslint-plugin-oxlint (eslint-plugin-oxlint)
v1.80.0Compare Source
What's Changed
Full Changelog: oxc-project/eslint-plugin-oxlint@v1.79.0...v1.80.0
nodejs/node (node)
v26.8.0: 2026-08-26, Version 26.8.0 (Current), @aduh95Compare Source
Notable Changes
74234ee30e] - (SEMVER-MINOR) benchmark: add --analyze mode to compare.js (James M Snell) #654164232997fa2] - crypto: update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495f0531f1c87] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #634113f4b80ebb5] - diagnostics_channel: mark TracingChannel as stable (Abdelrahman Awad) #64525753033c110] - (SEMVER-MINOR) lib,src: improve histogram implementation (James M Snell) #650243d7d277493] - (SEMVER-MINOR) net: improve performance of net.BlockList (James M Snell) #649749e8e9080fd] - (SEMVER-MINOR) perf_hooks: add statistical hypothesis testing to histogram (James M Snell) #65416c18b0aa54e] - repl: add basic syntax highlighting (Aviv Keller) #6459158ea88e1d3] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo) #642327c61b08aed] - (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #642324299cd5897] - (SEMVER-MINOR) util: add non-throwing MIMEType.parse (James M Snell) #64965df48191061] - (SEMVER-MINOR) zlib: add ZipEntry, ZipFile, and ZipBuffer (Philipp Dunkel) #64339Commits
162257b403] - assert: improve documentation wording (Kamal Rawal) #6495374234ee30e] - (SEMVER-MINOR) benchmark: add --analyze mode to compare.js (James M Snell) #654162cb96dd462] - benchmark: add test-only and mock timers cases (Luan Muniz) #64097562168f93f] - benchmark: applyhighWaterMarkin webstreamspipe-to(Matteo Collina) #65138fbec4eb386] - benchmark: complete the sqlite is-transaction fix (Edy Silva) #65218d8acfc45f1] - benchmark: add test runner hooks and options (Luan Muniz) #6375413e7d54f67] - buffer: prevent string write offset overflow (Matteo Collina) #65043615273deac] - buffer: support aligned allocations (Robert Nagy) #65003bc6b630e21] - buffer: treat detached ArrayBuffers as empty (Archkon) #64504ddf9f9d265] - build: target Power 9 and z14 (Richard Lau) #65439fda8ee894e] - build: use build-ci for benchmark merge-commit rebuild (Yagiz Nizipli) #6536203692786ef] - build: add simdutf dir to include path in GN build (Shelley Vohr) #653823da555a3ed] - build: pass target architecture to small-icu genccode (ulofiai) #65095ffe1e7cbea] - build: update binary-upload to use correct tarball name (Stewart X Addison) #6528250174cb94a] - build: deprecate always enabled--enable-static(Chengzhong Wu) #6510328f662b424] - build: check FIPS option value in node.gyp (Filip Skokan) #6498229a2ecefeb] - build: handle malformed OpenSSL macros (Filip Skokan) #649826deeef1801] - build: enable perfetto updater (Chengzhong Wu) #64966312f0c6a7e] - build: add host toolset to perfetto_sdk (Ryuhei Shima) #647511a4f5e537b] - build,win: add PGO workload scripts (Stefan Stojanovic) #6369621655dccbc] - child_process: keep SIGWINCH from killing on Win (Kirill Saied) #645104232997fa2] - crypto: update root certificates to NSS 3.126 (Node.js GitHub Bot) #65495f0531f1c87] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411109566a2f7] - crypto: fix missing error checks on ASN1_STRING_to_UTF8() (Nora Dossche) #65200501f81612d] - crypto: improve SubtleCrypto.supports() accuracy (Filip Skokan) #65222137ff67fd3] - crypto: use available BoringSSL APIs (Filip Skokan) #654230e87576ed4] - crypto: remove obsolete BoringSSL shims (Filip Skokan) #65423af867ce3e4] - crypto: add mgf1Hash for RSA-OAEP (Adam Mcgrath) #6507366ee4792bf] - crypto: disable non-FIPS WebCrypto paths in FIPS mode (Filip Skokan) #651726a142c03e9] - crypto: read WebCrypto inputs through primordials (Filip Skokan) #6511592e3110462] - crypto: fix disabling FIPS mode (Filip Skokan) #64982d69bed2f49] - debugger: wait for target startup (Filip Skokan) #651945c7c0b8b15] - deps: update zlib to 1.3.2.1-motley-8002e91 (Node.js GitHub Bot) #653164cb6b1335e] - deps: update simdjson to 4.6.7 (Node.js GitHub Bot) #65318a39ad67482] - deps: update googletest to49495ea(Node.js GitHub Bot) #6531746762dad57] - deps: cherry-pick libuv/libuv@e640dc9(ulofiai) #65118abb7a15a8d] - deps: update perfetto to 57.2 (Node.js GitHub Bot) #65114ebd8c6ba52] - deps: float ICU-23262 patch for icu78 (René) #64678f2cc681109] - deps: enable AVX-512 OpenSSL asm with clang (Daniel Lemire) #65136f45dc92913] - deps: update undici to 8.10.0 (Node.js GitHub Bot) #651554160dfdf81] - deps: update googletest tod89aac5(Node.js GitHub Bot) #65153631d3aa37b] - deps: update libffi to 3.8.0 (Node.js GitHub Bot) #65154788976c626] - dgram: don't swallow bind errors when callback is provided (armanmikoyan) #62602d286423043] - diagnostics_channel: validate before channel activation (Trivikram Kamat) #653133f4b80ebb5] - diagnostics_channel: mark TracingChannel as stable (Abdelrahman Awad) #64525152a326f92] - dns: validate address type in lookupService (Lazizbek Ergashev) #6487800c71fec93] - dns: validate port range insetServers()(René) #65021e9327d1422] - dns: fix crash on setServers with port 0 (Lazizbek Ergashev) #650099e227ef20d] - doc: update AHAFS reference link (Taeuk Ha) #654815fbf6c57af] - doc: fix property names in os.networkInterfaces() example (Jihwan) #6546913f16d28d1] - doc: fix broken links in cli.md (Donghoon Kang) #654120f36ee3755] - doc: remove outdated WASI version fallback (이혜미) #653031ad09f712a] - doc: fix broken GYP link in n-api.md (Donghoon Kang) #6541324cd694237] - doc: document that an empty OPENSSL_CONF skips config loading (Orgad Shaneh) #64949dae434132e] - doc: fix broken TLS security level example (soreavis) #6539196b91dc987] - doc: clarify socket destroyed behavior (Dayun) #653959d8d27d444] - doc: update outdated nodejs.org guide links (Donghoon Kang) #6539465f675086e] - doc: clarify that ipv4 mapped to ipv6 are classified as ipv6 (Vedant Kulkarni) #6211789aba0c311] - doc: clarify how fs.Dirent file types are determined (soreavis) #645323ed0492f52] - doc: update security release prepare command (Rafael Gonzaga) #6469963583c4e75] - doc: clarify copyFile symlink behavior (T) #62941abfc51f757] - doc: document setRawMode write access on Windows (Erik Demaine) #638564a784cb3e6] - doc: document per-architecture fast FFI argument limits (Seongeun Lee) #65207262f966155] - doc: add missing return types in fs.md (Chaseton Collins) #65307695cd896a7] - doc: add missing return types in buffer.md (Yuya Inoue) #65308676a1228cd] - doc: fix lint clean command (greenhead) #652749ea318d4e3] - doc: fix typo in onboarding.md (서울민트초코) #652953b6a918ab4] - doc: add missingadded:tags tofs.lchmod(Lazizbek Ergashev) #65283a77b1e61df] - doc: fix SQLite changeset constant descriptions (greenhead) #65265ab50ae60e4] - doc: document open pull request limit (Matteo Collina) #65250e2f4ea03a3] - doc: document http2 header constants (Harjoth Khara) #645485b5509d0d3] - doc: create ai-guidelines and include to CONTRIBUTING (Rafael Gonzaga) #62105c63e873073] - doc: fix broken fs.BigIntStats link in vfs.md (greenhead) #65045d6059e84c0] - doc: update synopsis (Augustin Mauroy) #6517143f1dc03e7] - doc: document close() error when in a sqlite callback (Trivikram Kamat) #650908f5f48ad96] - doc: fix broken internal links (greenhead) #649015b64b37739] - doc: report proper return type on urlPattern.test (Brian Muenzenmeyer) #648319633bb0f29] - doc: fix permission documentation examples (greenhead) #64897e52e573fd7] - doc: document sqlite parameter binding (Guilherme Araújo) #65089fa52f11d3b] - doc: finalize statements in sqlite examples (Guilherme Araújo) #650880157c45012] - doc: document quic stopSending() and resetStream() (Issac) #64888003a913799] - doc: clarify sqlite bare parameter default (Sumit Kumar Das) #62009c5588d71ad] - doc: remove usage ofutil.inherits(Augustin Mauroy) #60817673db40fbf] - doc: fix grammar in worker_threads.md (이혜미) #64913ee5f72cf16] - doc: fix broken link (Antoine du Hamel) #650780450ab6c6a] - doc: updatenode.1to fix linter (Antoine du Hamel) #650539a256b0693] - doc: clarify OpenSSL FIPS configuration (Filip Skokan) #64982c321752dcb] - doc: remove--expose-gcflag from CLI documentation (Dario Piotrowicz) #589090cf79931bb] - doc: document ArrayBuffer support in pbkd2Sync (kyungrae2002) #649763b8a0bacaa] - doc: correct default highWaterMark values (Yilong Li) #64617be313012e4] - doc: use ffi.suffix in permission example (agape1225) #649144a1c9a7ee0] - esm: avoid super-linear data URL MIME regex (Sumit Kumar Das) #61951b1770bc196] - esm: only register text format when enabled (Efe Karasakal) #64992f48927fe5b] - esm: fix wasm import name in error message (이혜미) #649508d48adf688] - events: inline iterationCondition hybrid dispatch closure (Szymon Łągiewka) #64473b827c0047e] - events: inline createEvent hybrid dispatch closure (Szymon Łągiewka) #644737670c81d99] - ffi: prefer canonical type names (Trivikram Kamat) #654171fe7a1c33d] - ffi: validate the value passed to the float setters (Soul Lee) #65342537feecd0b] - ffi: reject direct SharedArrayBuffer pointers (Trivikram Kamat) #652330002f0a718] - ffi: remove dead null check in callback arguments (Trivikram Kamat) #649989024ec27b6] - ffi: keep FFI functions non-constructible (Trivikram Kamat) #651849b4f349b01] - ffi: refresh cached string buffers on every call (Trivikram Kamat) #65051eacd65e9c2] - ffi: reject detached ArrayBufferViews (Trivikram Kamat) #65086be2ab89730] - ffi: reject detached ArrayBuffers as pointers (Trivikram Kamat) #650836f9e0846ea] - ffi: validate fast pointer BigInt argument ranges (Trivikram Kamat) #650323e6688c5e3] - ffi: reuse the callable created per symbol (Trivikram Kamat) #649718b0bdd931c] - ffi: shrink trampoline placement probe window (Trivikram Kamat) #649699c282c4532] - ffi: accept pointer BigInts in multi-argument fast calls (Trivikram Kamat) #64964b98294b57d] - ffi: support SharedArrayBuffer in getRawPointer (Junsoo Ha) #648645cac7c2c55] - ffi: reuse libffi call plans (Yilong Li) #64958262f0ec82a] - fs: stop stat()ing every entry in recursive readdir (Shelley Vohr) #65487e3ae912e9a] - fs: use sized reads for large files in readFileUtf8 (Shelley Vohr) #65328bc1e19b4b7] - fs: fix realpath of namespaced drive paths (Jason Zhang) #653786673ebadf2] - fs: abort in-flight stat operations (Mert Can Altin) #6314374dcdbb5f1] - fs: fix glob early return skipping sibling entries (Srinu desetti) #648956305a744df] - fs: pass symlink type in cp when filter is provided (Jerry Zhao) #62654c5cb6bc7e2] - fs: allocate FSReqPromise stat arrays lazily (Samuel Attard) #63886992af05719] - fs: fix out-of-bounds write in mkdtemp for long prefixes (Hierax_Umbra) #647702de845b2dd] - fs: treatstd::errc::permission_deniedasEPERMerror (Kirill Saied) #6469877fedbd350] - fs: read small files in one thread pool round trip (Shelley Vohr) #65327810929b6dd] - Revert "fs: fix close listener leak in FileHandle streams" (Mike McCready) #653878873b91fce] - fs: fix close listener leak in FileHandle streams (Y1D7NG) #64227656cfaeb2d] - fs: add windowsHandle option to file streams (Kirill Saied) #63851c2c31d69fd] - http: improve performance with known-length calls to end() (Tim Perry) #654667e9204f4b3] - http: use intrusive lists in ConnectionsList (Matteo Collina) #6529698e6272c70] - http: cache maxHeaderPairs per header section (GetThatCookie) #649886c3516f179] - http: fix keylog listener setup on existing agent sockets (Shani Singh) #65066dad9548fbc] - http: emit drain on socket takeover and avoid stale HWM reuse (Naman Trivedi) #64991563cab119b] - http2: avoid uaf while receiving and sending rst_stream (esgor) #64166099801641b] - inspector: avoid calling into JS from V8 interrupts (Joyee Cheung) #65028b71d5de0b8] - lib: use bracket notation instead of startsWith/endsWith for single char (Taejin Kim) #61500e8e2abcc8d] - lib: load fewer builtins when bootstrapping without a snapshot (Shelley Vohr) #653293619dc0601] - lib: fix ERR_INVALID_ARG_TYPE with --enable-source-maps (June) #63215ad7c67026b] - lib: harden webidl dictionary member reads (Filip Skokan) #65115b5182f0a1c] - lib: use validateArray for array arguments (greenhead) #649597f7df06821] - lib: add and test [EnforceRange] in webcrypto dictionaries (Filip Skokan) #65091753033c110] - (SEMVER-MINOR) lib,src: improve histogram implementation (James M Snell) #650248d39d0d660] - meta: add a root-level AGENTS.md (James M Snell) #654933770f9baea] - meta: move targos to emeritus (Michaël Zasso) #65393a9b31dfe30] - meta: add unified http api initiative (James M Snell) #651396bffc306aa] - meta: move one or more collaborators to emeritus (Node.js GitHub Bot) #651824abd1c8100] - meta: add support for alpha prerelease tag (Antoine du Hamel) #63135132c578e97] - meta: add Aviv Keller to.mailmap(Aviv Keller) #650487aff78d231] - meta: update sccache to 0.17.0 (René) #6498597a437e7ea] - module: add a read-only mode to the compile cache (Shelley Vohr) #653025821362819] - module: do not split a portable compile cache by uid (Shelley Vohr) #65293eb5d66e856] - module: report unreadable package.json (Paul Bouchon) #6522343757d07c1] - module: cache nearest parent package.json per directory (Shelley Vohr) #65326d7805e00dc] - module: fix --check on ambiguous ESM files (Paul Bouchon) #65203646221a495] - net: handle undefined parent in _unrefTimer and _destroy (Shivay-98) #646443d7d277493] - (SEMVER-MINOR) net: improve performance of net.BlockList (James M Snell) #649749e8e9080fd] - (SEMVER-MINOR) perf_hooks: add statistical hypothesis testing to histogram (James M Snell) #6541601a8ae0ce6] - permission: guard UDP handle adoption (Rafael Gonzaga) #65358ac3c412aaf] - permission: enforce addon permission in GetLinkedBinding (Rafael Gonzaga) #654328765afd4c2] - process: validate resource stats array offsets (Archkon) #65098d0447c93f6] - quic: changes for nghttp3_conn_close_stream2 (Marten Richter) #6457491393898b5] - quic: mark drain promise handled (James M Snell) #653195c9576bf50] - quic: reset rejected HTTP/3 request streams with H3_REQUEST_REJECTED (trivenay) #65442ec956f2abc] - quic: write desired size needs update on maxstream (Marten Richter) #6476841c510803d] - quic: do not destroy incoming streams that have a consumer (trivenay) #65335009e376581] - quic: fix wake up blob (Marten Richter) #640444674a10368] - quic: convert incoming :status header to number (Hallison Pereira Melo) #635895953165f53] - quic: fix infinite loop if STOP_SENDING received on a buffering stream (Tim Perry) #64715bb499c312e] - repl: keep entries added while history file is loading (Mhayk Whandson) #64513825fcfe4d5] - repl: add benchmarks (Aviv Keller) #64590c18b0aa54e] - repl: add basic syntax highlighting (Aviv Keller) #64591f32a8631ad] - sea: avoid dangling CLI option pointers (Archkon) #647553126ce5779] - sea: handle NUL bytes in asset keys (Archkon) #6477364a8843ff2] - sea: reject trailing content in config JSON (Archkon) #647741d9dd252f1] - sea: reject malformed --node-options values (Archkon) #648036ec735c910] - sqlite: reject reentry while binding parameters (Trevor Burnham) #6529460cb384c15] - sqlite: remove unused column name helper (Trivikram Kamat) #65401fce6754a83] - sqlite: reject busy statement finalization in authorizer (Trivikram Kamat) #65369e2f952f2ff] - sqlite: prevent reentrant session.close() (Trivikram Kamat) #653490e8af3378a] - sqlite: reuse cached column names in statement all() and get() (Edy Silva) #65276e6bfec91be] - sqlite: validate StatementSync.run() integers (Trivikram Kamat) #65178bbb1226dbe] - sqlite: add diagnostic channel (Guilherme Araújo) #622416302168de8] - sqlite: add stmt persistent flag (Guilherme Araújo) #627572989311d81] - sqlite: reject connection access from authorizer callbacks (Trevor Burnham) #6515672c37b133e] - sqlite: expose prepared statement statistics (Edy Silva) #645413e50a2f1e9] - sqlite: manage sqlite3_stmt lifetime with RAII (Guilherme Araújo) #624193ab7e72555] - sqlite: check sqlite3_step() and sqlite3_reset() results (semimikoh) #633195e387ce979] - sqlite: reject statement-less SQL in prepare() (Trevor Burnham) #6515783169e58f3] - sqlite: reject statement-less SQL in SQLTagStore (Trevor Burnham) #651577f31f6226e] - sqlite: isolate applyChangeset filter errors (Trivikram Kamat) #64823c89878c3c8] - sqlite: reject deserialize() while in a callback (Trivikram Kamat) #647965a852b22d4] - sqlite: check null returns from sqlite value functions (Nora Dossche) #632885cb78ed300] - sqlite: validate maxSize argument in createTagStore() (Anshika Jain) #63792ca885876f6] - sqlite: refactor error helpers and user function pointers (Ali Hassan) #6279406b1758dcd] - sqlite: reject non-positive backup rates (Trivikram Kamat) #64893ce0ca47023] - sqlite: clear SQLTagStore bindings (Matteo Collina) #6504149fb028714] - sqlite: bind Boolean (mike-git374) #6200109d0da99e9] - sqlite: fix undefined behaviour inSession::Changeset()(Nora Dossche) #6363758ea88e1d3] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.close() (Guilherme Araújo) #642327c61b08aed] - (SEMVER-MINOR) sqlite: add StatementSync.prototype[Symbol.dispose]() (Guilherme Araújo) #642329167ebd32b] - sqlite: bind ArrayBuffer (mike-git374) #620615da6eaa8af] - sqlite: prevent database close during callbacks (Matteo Collina) #6474329d794bc84] - src: fix heap value deduplication in embedder graph (Ilyas Shabi) #64801b405e9b039] - src: fix out-of-bounds write when transcoding odd-length ucs2 (nashit hayat) #64512101a215472] - src: use simdutf for two-byte utf8 conversion (Mert Can Altin) #62248340b98346f] - src: run same-priority platform tasks in posting order (Shelley Vohr) #6535383a7949c18] - src: define O_SYNC, O_DSYNC and O_DIRECT on Windows (Kirill Saied) #6470732bb197f2a] - src: use simdutf for two-byte strings in UTF-8 writes (Shelley Vohr) #65324613be79cf4] - src: add v8::Local specialization for MaybeStackBuffer (James M Snell) #65159922d47cbd7] - src: escape Windows environment variables in task runner (Antoine du Hamel) #652173a47f1f282] - src: apply minor namespace format tweak in permissions (James M Snell) #65158981cfa537d] - src: simplify permissions with BooleanPermissions (James M Snell) #651585954b13f88] - src: simplify includes in permissions (James M Snell) #65158d4ced88c09] - src: apply a modest performance perf to permissions (James M Snell) #65158efb649ec26] - src: make permission storage a bit more efficient (James M Snell) #65158521aaf10fc] - src: apply multiple general cleanups to permissions (James M Snell) #65158ac920e0d2b] - src: simplify c++ diagnostics channel API (James M Snell) #65158ec8fe275a1] - src: make minor cleanup to permission checks (James M Snell) #65158968bdd0135] - src: use DictionaryTemplate for permission diag channel message (James M Snell) #65158f77aa2f703] - src: cache permission strings (James M Snell) #651584018f3a776] - src: shave about 20 bytes off each TLSWrap instance (James M Snell) #65144b7a23426d9] - src: add SetAbortHandler (Max H Fisher) #646843cfe19489c] - src: use concepts where appropriate (James M Snell) #65148d8a0f288ab] - src: match cmd.exe case-insensitively in task runner (Archkon) #64907262d88e6c2] - src: reuse cached env strings in remaining files (Seongeun Lee) #65039ad35fe97f0] - src: expose Windows-only fs open flags (Kirill Saied) #647758c4531bbc9] - src: report why --enable-fips failed (Filip Skokan) #64979a293dbf0e1] - src: update repeated use strings to env (James M Snell) #64760044402cf0e] - src: use UTF-8 for task runner filesystem paths (Archkon) #648685b7d02e401] - stream: normalize fused stateless transform results (Trivikram Kamat) #653671d6ec2ddc5] - stream: encode whole chunks in TextEncoderStream (Matteo Collina) #654140afda47ca4] - stream: prevent share from eagerly draining source (Trivikram Kamat) #65338dc51c7926e] - stream: drain pending writes before broadcast end (Trivikram Kamat) #65334a77f9f7a32] - stream: reuse unexposed managed read buffers (GetThatCookie) #64990c42fbcc0d1] - stream: avoid duplicated endReadableNT scheduling (Matteo Collina) #653109ec9383d1d] - stream: decouple transform backpressure changes (Matteo Collina) #65143a9dc50d275] - stream: reject pull on signal abort during flush (Trivikram KamaConfiguration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.