fix(deps): update all non-major dependencies #839

renovate-bot · 2025-12-08T21:06:12Z

This PR contains the following updates:

Package	Change	Type	Update
@grpc/grpc-js (source)	`1.13.4` -> `1.14.2`	dependencies	minor
@types/express (source)	`4.17.23` -> `4.17.25`	devDependencies	patch
@types/node (source)	`18.19.123` -> `18.19.130`	devDependencies	patch
@vercel/ncc	`0.38.3` -> `0.38.4`	devDependencies	patch
express (source)	`4.21.2` -> `4.22.1`	dependencies	minor
go (source)	`1.24.11` -> `1.25.5`	toolchain	minor
lerna (source)	`8.2.3` -> `8.2.4`	devDependencies	patch
otel/opentelemetry-collector-contrib	`0.133.0` -> `0.141.0`		minor
pino (source)	`9.9.0` -> `9.14.0`	dependencies	minor

Release Notes

grpc/grpc-node (@grpc/grpc-js)

`v1.14.2`: @grpc/grpc-js 1.14.2

Compare Source

Fix server keep alive timeout not properly destroying connections (#3022 contributed by @mattias-wiberg)

`v1.14.1`: @grpc/grpc-js 1.14.1

Compare Source

Fix a regression of the settings used internally for HTTP/2 sessions (#3023)

`v1.14.0`: @grpc/grpc-js 1.14.0

Compare Source

Changelog

Add getAuthContext method to client and server call classes (more details can be found in gRFC L35) (#2920)
Implement custom backend metrics support (gRFC A51) (#2978, #2983, #2985, #2986, #2999)
Add getConnectionInfo method to the ServerInterceptingCall class (#2922)
Implement the weighted_round_robin load balancing policy (#2998)
Fix jitter behavior for client retries (#2960 contributed by @ekscentrysytet)
Start connecting from a random index in the round_robin LB policy (#2979)
Send connection-level WINDOW_UPDATE at session start (#2971 contributed by @KoenRijpstra)

Experimental API Changes

Added:

CHANNEL_ARGS_CONFIG_SELECTOR_KEY
StatusOr<T>
CallStream
statusOrFromValue
statusOrFromError

Modified:

ResolverListener#onSuccessfulResolution now has the signature (endpointList: StatusOr<Endpoint[]>, attributes: { [key: string]: unknown }, serviceConfig: StatusOr<ServiceConfig> | null, resolutionNote: string): boolean
LoadBalancer#updateAddressList now has the signature `updateAddressList(endpointList: StatusOr<Endpoint[]>,lbConfig: TypedLoadBalancingConfig, channelOptions: ChannelOptions, resolutionNote: string): boolean

vercel/ncc (@vercel/ncc)

`v0.38.4`

Compare Source

Bug Fixes

cjs-build: enable evaluating import.meta in cjs build (#1236) (e72d34d), closes /github.com/vercel/ncc/pull/897#discussion_r836916315 #1019

expressjs/express (express)

`v4.22.1`

Compare Source

`v4.22.0`

Compare Source

golang/go (go)

`v1.25.5`

`v1.25.4`

`v1.25.3`

`v1.25.2`

`v1.25.1`

`v1.25.0`

lerna/lerna (lerna)

`v8.2.4`

Compare Source

Bug Fixes

publish: ensure README file names are populated on package.json (#4211) (362875d)

Features

support OIDC trusted publishing (d51e344)

OIDC trusted publishing is now supported by Lerna with no specification configuration required.

A new guide has been added: https://lerna.js.org/docs/recipes/oidc-trusted-publishing
A fully working example repo has been set up here https://github.com/JamesHenry/lerna-v9-oidc-publishing-example

BREAKING CHANGES

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

As this is a major release there are a few breaking changes to be aware of, which may or may not affect your lerna repos, depending on how you are using the tool.

node v18 support is dropped because it is end of life

When a node version becomes end of life (EOL) it means that it does not receive any updates or maintenance whatsoever, even if critical security vulnerabilities have been uncovered.

We strongly encourage all folks here to keep up with the maintenance LTS version of Node at an absolute minimum:

https://github.com/nodejs/release#release-schedule

The versions of node supported by lerna are now ^20.19.0 || ^22.12.0 || >=24.0.0.

The @lerna/legacy-package-management package has been formally removed after 2 years of deprecation.

If you are still using lerna add, lerna bootstrap or lerna link commands, please migrate to using your package manager's long-supported workspaces feature. The updated guide should help with this https://lerna.js.org/docs/legacy-package-management**

8.2.4 (2025-07-27)

Bug Fixes

remove all remaining lodash usage (#4207) (8211512)

8.2.3 (2025-06-29)

Bug Fixes

use internal fork of unmaintained strong-log-transformer (#4195) (7115485)

8.2.2 (2025-04-10)

Note: Version bump only for package lerna

8.2.1 (2025-03-03)

Note: Version bump only for package lerna

open-telemetry/opentelemetry-collector-releases (otel/opentelemetry-collector-contrib)

`v0.141.0`

Compare Source

🛑 Breaking changes 🛑

exporter/carbon: Remove unmaintained component (#1279)

🚀 New components 🚀

ebpf-profiler: Add the healthcheck and pprof extensions to the ebpf-profiler distribution (#1274)

`v0.140.1`

Compare Source

🚀 New components 🚀

ebpf-profiler: Add the opampextension to the ebpf-profiler distribution (#1237)
ebpf-profiler: Add the transformprocessor to the ebpf-profiler distribution (#1251)
exporter/googlecloudstorage: Add google cloud storage exporter to contrib distribution. (#1253)

`v0.140.0`

Compare Source

Check the v0.140.0 contrib changelog and the v0.140.0 core changelog for changelogs on specific components.

Changelog

a5d62ab Update version to 0.140.0 (#1269)
01f39e7 chore(deps): update opentelemetry collector components (#1265)

`v0.139.0`

Compare Source

🛑 Breaking changes 🛑

ecstaskobserver: Removing unmaintained component (#1232)

🚀 New components 🚀

contrib: Add GitLab receiver to contrib distribution (#1225)

💡 Enhancements 💡

opampsupervisor: Add .deb and .rpm packages release artifacts for the OpAMP supervisor (#1209)

`v0.138.0`

Compare Source

🚀 New components 🚀

unrollprocessor: Adds the unroll processor to the Contrib distribution (#1189)

💡 Enhancements 💡

packaging: Allow in-place upgrades for Windows MSI installations (#1197)

`v0.137.0`

Compare Source

`v0.136.0`

Compare Source

💡 Enhancements 💡

service/telemetry: Stops pinning go.opentelemetry.io/otel/exporters/prometheus to v0.58.0 (#1178)

`v0.135.0`

Compare Source

`v0.134.1`

Compare Source

Check the v0.134.1 contrib changelog and the v0.134.1 core changelog for changelogs on specific components.

Changelog

1e3852f [chore] ignore service.version in comparison (#1159)
23173dd Use correct GORELEASE tags for all the gorelease actions. (#1158)

pinojs/pino (pino)

`v9.14.0`

Compare Source

What's Changed

feat(types): add LogFnFields by @samchungy in #2254
[v9.x] Update to pinojs redact by @mcollina in #2322
Revert setlevel opt in 9.x by @mcollina in #2323

Full Changelog: pinojs/pino@v9.13.1...v9.14.0

`v9.13.1`

Compare Source

What's Changed

fix(log): better logfn handling of generics by @rozzilla in #2309

Full Changelog: pinojs/pino@v9.13.0...v9.13.1

`v9.13.0`

Compare Source

What's Changed

build(deps): bump actions/checkout from 4.3.0 to 5.0.0 by @dependabot[bot] in #2301
build(deps): bump actions/github-script from 7 to 8 by @dependabot[bot] in #2303
build(deps-dev): bump @yao-pkg/pkg from 6.3.0 to 6.7.0 by @dependabot[bot] in #2306
perf: optimize .child by @ronag in #2300
docs(ecosystem): add eslint-plugin-pino to ecosystem page by @orzarchi in #2297

New Contributors

@ronag made their first contribution in #2300
@orzarchi made their first contribution in #2297

Full Changelog: pinojs/pino@v9.12.0...v9.13.0

`v9.12.0`

Compare Source

What's Changed

types: expose stdTimeFunctions on nested namespace pino while preserv… by @tawseefnabi in #2263
test: exclude Windows + Node 18.18 from test matrix by @aryamohanan in #2292
Replace fast-redact with slow-redact by @mcollina in #2298

New Contributors

@tawseefnabi made their first contribution in #2263

Full Changelog: pinojs/pino@v9.11.0...v9.12.0

`v9.11.0`

Compare Source

What's Changed

feat: added timestamp rfc3339 format with nanoseconds by @edge33 in #2251
fix: gracefully handle missing diagChannel.tracingChannel on Node < 18.19 by @aryamohanan in #2290

New Contributors

@edge33 made their first contribution in #2251
@aryamohanan made their first contribution in #2290

Full Changelog: pinojs/pino@v9.10.0...v9.11.0

`v9.10.0`

Compare Source

What's Changed

docs: Move pino-logflare out of legacy transports list by @kamilogorek in #2283
Add support for Pear and Bare runtimes by @yassernasc in #2278
Add tracing channels by @jsumners-nr in #2281
Add pino-console to ecoystem page by @mcollina in #2288

New Contributors

@kamilogorek made their first contribution in #2283
@yassernasc made their first contribution in #2278
@jsumners-nr made their first contribution in #2281

Full Changelog: pinojs/pino@v9.9.5...v9.10.0

`v9.9.5`

Compare Source

What's Changed

fix: allow object type in %s placeholder by @mcollina in #2277

Full Changelog: pinojs/pino@v9.9.4...v9.9.5

`v9.9.4`

Compare Source

What's Changed

fix(logfn): use unknown type by @rozzilla in #2276

Full Changelog: pinojs/pino@v9.9.3...v9.9.4

`v9.9.3`

Compare Source

What's Changed

fix(types): compatibility when leveraging parameters by @rozzilla in #2273

New Contributors

@rozzilla made their first contribution in #2273

Full Changelog: pinojs/pino@v9.9.2...v9.9.3

`v9.9.2`

Compare Source

What's Changed

Avoid setLevel in child when possible by @mcollina in #2271

Full Changelog: pinojs/pino@v9.9.1...v9.9.2

`v9.9.1`

Compare Source

What's Changed

build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #2268
build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @dependabot[bot] in #2269
fix: TypeScript regression with boolean values in %s placeholders by @mcollina in #2262

Full Changelog: pinojs/pino@v9.9.0...v9.9.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

dpebot · 2025-12-08T21:06:24Z

/gcbrun

fix(deps): update all non-major dependencies

23fe760

renovate-bot requested a review from a team as a code owner December 8, 2025 21:06

forking-renovate bot added the dependencies Pull requests that update a dependency file label Dec 8, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all non-major dependencies #839

fix(deps): update all non-major dependencies #839

Uh oh!

renovate-bot commented Dec 8, 2025

Uh oh!

dpebot commented Dec 8, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

fix(deps): update all non-major dependencies #839

Are you sure you want to change the base?

fix(deps): update all non-major dependencies #839

Uh oh!

Conversation

renovate-bot commented Dec 8, 2025

Release Notes

v1.14.2: @​grpc/grpc-js 1.14.2

v1.14.1: @​grpc/grpc-js 1.14.1

v1.14.0: @​grpc/grpc-js 1.14.0

Changelog

Experimental API Changes

Bug Fixes

Bug Fixes

Features

BREAKING CHANGES

8.2.4 (2025-07-27)

Bug Fixes

8.2.3 (2025-06-29)

Bug Fixes

8.2.2 (2025-04-10)

8.2.1 (2025-03-03)

🛑 Breaking changes 🛑

🚀 New components 🚀

🚀 New components 🚀

Changelog

🛑 Breaking changes 🛑

🚀 New components 🚀

💡 Enhancements 💡

🚀 New components 🚀

💡 Enhancements 💡

💡 Enhancements 💡

Changelog

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

Configuration

Uh oh!

dpebot commented Dec 8, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`v1.14.2`: @grpc/grpc-js 1.14.2

`v1.14.1`: @grpc/grpc-js 1.14.1

`v1.14.0`: @grpc/grpc-js 1.14.0