Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@swc/core (source)	1.4.0 -> 1.4.2					devDependencies	patch
@tsconfig/strictest (source)	2.0.2 -> 2.0.3					devDependencies	patch
@vitest/coverage-v8 (source)	1.2.2 -> 1.3.0					devDependencies	minor
argocd	2.10.0 -> 2.10.1						patch
dotenv	16.4.1 -> 16.4.5					dependencies	patch
kubectl	1.29.1 -> 1.29.2						patch
node	20.11.0-bookworm-slim -> 20.11.1-bookworm-slim					final	patch
node	20.11.0-bookworm -> 20.11.1-bookworm					stage	patch
node (source)	20.11.0 -> 20.11.1						patch
pnpm (source)	8.15.2 -> 8.15.3						patch
tsx	4.7.0 -> 4.7.1					devDependencies	patch
typescript-eslint (source)	7.0.1 -> 7.0.2					devDependencies	patch
vite (source)	5.1.1 -> 5.1.3					resolutions	patch
vitest (source)	1.2.2 -> 1.3.0					devDependencies	minor

---

Release Notes

swc-project/swc (@​swc/core)

v1.4.2

Compare Source

Bug Fixes

• (es/helpers) Add addInitializer to field decorators (#​8619) (cd38ef3)

• (es/minifier) Abort property hoister on this usage (#​8647) (9715320)

• (es/react) Validate pragma before parsing (#​8637) (5f1cf01)

• (es/typescript) Handle exported JSX members (#​8642) (22c8e2e)

Features

• (es/minifier) Remove unused parameters of arrow functions (#​8636) (8cd4813)

• (swc_core) Expose ES linter (#​8635) (762959c)

Testing

• (es/parser) Add a test for << (#​8634) (2c63b31)

• (es/transforms) Add a test for reserved_words pass (#​8638) (a0b77e0)

v1.4.1

Compare Source

Bug Fixes

• (binding/types) Update typings for options.envs to match implementation (#​8620) (2a115cf)

• (es/compat) Visit AssignExpr right branch in FnEnvHoister (#​8633) (e5d6de0)

• (es/decorators) Do not insert duplicate constructors (#​8631) (21a447f)

• (es/parser) Set class property to abstract or override even in error states (#​8610) (5a77306)

• (es/parser) Fix parsing of dynamic source phase imports (#​8611) (7d724d8)

• (es/parser) Rescan << as < when parsing type args (#​8607) (9e6dad9)

• (es/parser) Fix detection of use strict directive (#​8617) (95236e9)

• (es/plugin) Fix schema version issue (#​8621) (132be95)

• (es/quote) Allow variables typed AssignTarget (#​8602) (6a48be4)

• (es/quote) Support AssignTarget, really (#​8603) (ef91661)

• (es/quote) Fix code generation of AssignTarget (#​8604) (16e9d4c)

Features

• (es/minifier) Implement correct hoist_props (#​8593) (3122e94)

Miscellaneous Tasks

• (config) Remove an empty file in swc_config (#​8609) (d87fef0)

• (preset-env) Update browserslist-rs (#​8614) (e5585e9)

Refactor

• (bindings) Remove bindings for experimental packages (#​8600) (6c50ff1)

Testing

• (es) Update tsc conformance test suite (#​8615) (c0beba7)

• Update @swc/plguin-jest used for plugin e2e testing (#​8601) (95fe3db)

Build

• (cargo) Update rustc to nightly-2024-02-06 (#​8618) (6726b63)

• (plugin) Update wasmer to v4.2.5 (#​8624) (4e0d240)

tsconfig/bases (@​tsconfig/strictest)

v2.0.3

Compare Source

vitest-dev/vitest (@​vitest/coverage-v8)

v1.3.0

Compare Source

🚀 Features

• Deprecate watchExclude - by @​patak-dev in https://github.com/vitest-dev/vitest/issues/5171 (82885)
• browser:
  • Run test files in isolated iframes - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5036 (4f401)
• config:
  • Add snapshotSerializers option - by @​fenghan34 in https://github.com/vitest-dev/vitest/issues/5092 (5b102)
• reporters:
  • Support custom options - by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5111 (fec9c)
• runner:
  • Support automatic fixtures - by @​fenghan34 and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5102 (0441f)
• ui:
  • Save splitpanes size to local storage - by @​posva in https://github.com/vitest-dev/vitest/issues/5166 (c28b4)
• vitest:
  • Add onTestFinished hook - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5128 (6f5b4)
  • Add github actions reporter - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5093 (40afb)
  • Expose jsdom global if jsdom environment is enabled - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5155 (567d2)
  • Add new CLI options - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5163 (4e179)
  • "test" accepts options object as the second parameter - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5142 (7d9b1)
• vm:
  • Support wasm module - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5131 (5ed53)

🐞 Bug Fixes

• Fix sourcemap in vm pools - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5063 (81105)
• Don't optimize react/jsx-runtime by default when running in Node - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5079 (0d2bf)
• Rpc timeout error messages to include caller - by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5103 (a6e04)
• Requires fixed version across the monorepo - by @​antfu in https://github.com/vitest-dev/vitest/issues/5208 (68f51)
• Prevent merging of poolOptions - by @​penalosa in https://github.com/vitest-dev/vitest/issues/5221 (bc5b2)
• browser:
  • Don't exclude node builtins from optimization - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5082 (714c9)
  • Support coverage.reportsDirectory with multiple directories - by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5056 (ae73f)
• cli:
  • Parse --browser=<name> correctly - by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5179 (656e2)
• coverage:
  • .tmp directory conflicts with --shard option - by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5184 (5749d)
• deps:
  • Update dependency strip-literal to v2 - by @​renovate[bot] inhttps://github.com/vitest-dev/vitest/issues/51366 (ef557)
• reporters:
  • Testsuite name should include project root in Junit output - by @​fenghan34 in https://github.com/vitest-dev/vitest/issues/5116 (2494f)
• typecheck:
  • Fix suite collection while-loop - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5065 (35675)
• ui:
  • Fix tests duration time - by @​vovsemenv in https://github.com/vitest-dev/vitest/issues/5219 (58103)
• utils:
  • Fix asymmetric matcher diff inside array - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5189 (3ffcd)
• vitest:
  • Correctly report failed test files as failures in json reporter, export json reporter types - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5081 (0417b)
  • Don't run typecheck tests in browser if both are enabled - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5080 (1045b)
  • Handle function config inside defineWorkspace - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5089 (0bf52)
  • Remove excessive listeners when running without isolation, don't reset the state - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5132 (b607f)
  • Auto-enable "github-actions" only where users didn't configure reporters - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5158 (ef044)
  • Support more array cli options - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5162 (3afe6)
  • Add types for the new global jsdom variable - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5164 (0f898)
  • Expose onTestFinished globally - by @​sheremet-va (1304f)
  • Disable optimizer by default until it's stable - by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5156 (e1bd8)
  • Delegate snapshot options to workspace from root config - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5199 (86297)
  • Fix optimizeDeps.disabled warnings on Vite 5.1 - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5215 (1aecd)
• vm:
  • Handle disableConsoleIntercept config - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5074 (a55ad)
  • Improve error when module is not found - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5053 (79a50)

View changes on GitHub

argoproj/argo-cd (argocd)

v2.10.1

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.10.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.10.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 7 contributions from 3 contributors with 0 features and 5 bug fixes.

Bug fixes (5)

• fix(controller): add missing workqueue metrics (#​16315) (#​17013) (#​17209)
• fix: infer correct shard in statefulset setup (#​17124, #​17016) (#​17167) (#​17204)
• fix: stop initializing deployment informer if dynamic sharding is disabled (#​17097) (#​17202)
• fix(kustomize): set build dir (#​15057) #​16229 #​16652 (#​16653) (#​17129)
• fix(manifests): applicationset-controller dir is not added to cluster-rbac/kustomization.yaml. (#​16810) (#​17120)

Other (1)

• chore(manifests): add ClsuterRole/ClusterRoleBinding for applicationset controller. (#​16699) (#​17119)

motdotla/dotenv (dotenv)

v16.4.5

Compare Source

Changed

• 🐞 fix recent regression when using path option. return to historical behavior: do not attempt to auto find .env if path set. (regression was introduced in 16.4.3) #​814

v16.4.4

Compare Source

Changed

• 🐞 Replaced chaining operator ?. with old school && (fixing node 12 failures) #​812

v16.4.3

Compare Source

Changed

• Fixed processing of multiple files in options.path #​805

v16.4.2

Compare Source

Changed

• Changed funding link in package.json to dotenvx.com

kubernetes/kubernetes (kubectl)

v1.29.2: Kubernetes v1.29.2

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

nodejs/node (node)

v20.11.1: 2024-02-14, Version 20.11.1 'Iron' (LTS), @​RafaelGSS prepared by @​marco-ippolito

Compare Source

Notable changes

This is a security release.

Notable changes

• CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- (High)
• CVE-2024-22019 - http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks- (High)
• CVE-2024-21896 - Path traversal by monkey-patching Buffer internals- (High)
• CVE-2024-22017 - setuid() does not drop all privileges due to io_uring - (High)
• CVE-2023-46809 - Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) - (Medium)
• CVE-2024-21891 - Multiple permission model bypasses due to improper path traversal sequence sanitization - (Medium)
• CVE-2024-21890 - Improper handling of wildcards in --allow-fs-read and --allow-fs-write (Medium)
• CVE-2024-22025 - Denial of Service by resource exhaustion in fetch() brotli decoding - (Medium)
• undici version 5.28.3
• libuv version 1.48.0
• OpenSSL version 3.0.13+quic1

Commits

• [7079c062bb] - crypto: disable PKCS#1 padding for privateDecrypt (Michael Dawson) nodejs-private/node-private#525
• [186a6e1ffb] - deps: fix GHSA-f74f-cvh7-c6q6/CVE-2024-24806 (Santiago Gimeno) #​51737
• [686da19abb] - deps: disable io_uring support in libuv by default (Tobias Nießen) nodejs-private/node-private#529
• [f7b44bfbce] - deps: update archs files for openssl-3.0.13+quic1 (Node.js GitHub Bot) #​51614
• [7a30fecea2] - deps: upgrade openssl sources to quictls/openssl-3.0.13+quic1 (Node.js GitHub Bot) #​51614
• [480fc169a8] - fs: protect against modified Buffer internals in possiblyTransformPath (Tobias Nießen) nodejs-private/node-private#497
• [77ac7c3153] - http: add maximum chunk extension size (Paolo Insogna) nodejs-private/node-private#519
• [ed7d149675] - lib: use cache fs internals against path traversal (RafaelGSS) nodejs-private/node-private#516
• [89bd5fc38f] - lib: update undici to v5.28.3 (Matteo Collina) nodejs-private/node-private#539
• [d01dd4291d] - permission: fix wildcard when children > 1 (Rafael Gonzaga) #​51209
• [40ff37dfcc] - src: fix HasOnly(capability) in node::credentials (Tobias Nießen) nodejs-private/node-private#505
• [3f6addd590] - src,deps: disable setuid() etc if io_uring enabled (Tobias Nießen) nodejs-private/node-private#529
• [d6da413aa4] - test,doc: clarify wildcard usage (RafaelGSS) nodejs-private/node-private#517
• [c213910aea] - zlib: pause stream if outgoing buffer is full (Matteo Collina) nodejs-private/node-private#541

pnpm/pnpm (pnpm)

v8.15.3

Compare Source

Patch Changes

• Remove vulnerable "ip" package from the dependencies #​7652.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

privatenumber/tsx (tsx)

v4.7.1

Compare Source

Bug Fixes

• escape import.meta.url passed to esbuild (#​474) (e23592e)
• remove the pipe file before starting the ipc server (#​459) (0ed0097)

---

This release is also available on:

• npm package (@​latest dist-tag)

typescript-eslint/typescript-eslint (typescript-eslint)

v7.0.2

Compare Source

🩹 Fixes

• fix tsconfig-less check errors, fix @types/eslint incompatibilities, add tests

❤️ Thank You

• Brad Zacher
• Gareth Jones

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v5.1.3

Compare Source

• fix: cachedTransformMiddleware for direct css requests (#​15919) (5099028), closes #​15919
• refactor(runtime): minor tweaks (#​15904) (63a39c2), closes #​15904
• refactor(runtime): seal ES module namespace object instead of feezing (#​15914) (4172f02), closes #​15914

v5.1.2

Compare Source

• fix: normalize import file path info (#​15772) (306df44), closes #​15772
• fix(build): do not output build time when build fails (#​15711) (added3e), closes #​15711
• fix(runtime): pass path instead of fileURL to isFilePathESM (#​15908) (7b15607), closes #​15908
• fix(worker): support UTF-8 encoding in inline workers (fixes #​12117) (#​15866) (570e0f1), closes #​12117 #​15866
• chore: update license file (#​15885) (d9adf18), closes #​15885
• chore(deps): update all non-major dependencies (#​15874) (d16ce5d), closes #​15874
• chore(deps): update dependency dotenv-expand to v11 (#​15875) (642d528), closes #​15875

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.