build: update all non-major dependencies #2720

angular-robot · 2025-04-07T14:10:00Z

This PR contains the following updates:

Package	Type	Update	Change
@pnpm/dependency-path (source)	devDependencies	patch	`1000.0.6` -> `1000.0.7`
@types/node (source)	dependencies	patch	`22.14.0` -> `22.14.1`
aspect_rules_js	http_archive	patch	`v2.3.4` -> `v2.3.5`
github/codeql-action	action	patch	`v3.28.13` -> `v3.28.15`
marocchino/sticky-pull-request-comment	action	patch	`v2.9.1` -> `v2.9.2`
nock	devDependencies	patch	`14.0.2` -> `14.0.3`
renovate (source)	dependencies	minor	`39.233.3` -> `39.239.0`
typescript (source)	dependencies	patch	`5.8.2` -> `5.8.3`
undici (source)	devDependencies	minor	`7.7.0` -> `7.8.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

aspect-build/rules_js (aspect_rules_js)

`v2.3.5`

Compare Source

Many companies are successfully building with rules_js.
If you're getting value from the project, please let us know!
Just comment on our Adoption Discussion.

Using Bzlmod with Bazel 6:

Add to your MODULE.bazel file:

bazel_dep(name = "aspect_rules_js", version = "2.3.5")

####### Node.js version #########

### By default you get the node version from DEFAULT_NODE_VERSION in @&#8203;rules_nodejs//nodejs:repositories.bzl
### Optionally you can pin a different node version:
bazel_dep(name = "rules_nodejs", version = "6.3.0")
node = use_extension("@&#8203;rules_nodejs//nodejs:extensions.bzl", "node", dev_dependency = True)
node.toolchain(node_version = "16.14.2")

#################################

npm = use_extension("@&#8203;aspect_rules_js//npm:extensions.bzl", "npm", dev_dependency = True)

npm.npm_translate_lock(
    name = "npm",
    pnpm_lock = "//:pnpm-lock.yaml",
    verify_node_modules_ignored = "//:.bazelignore",
)

use_repo(npm, "npm")

pnpm = use_extension("@&#8203;aspect_rules_js//npm:extensions.bzl", "pnpm")

### Allows developers to use the matching pnpm version, for example:
### bazel run -- @&#8203;pnpm --dir /home/runner/work/rules_js/rules_js install
use_repo(pnpm, "pnpm")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "aspect_rules_js",
    sha256 = "1be1a3ec3d3baec4a71bc09ce446eb59bb48ae31af63016481df1532a0d81aee",
    strip_prefix = "rules_js-2.3.5",
    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.5/rules_js-v2.3.5.tar.gz",
)

load("@&#8203;aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")

rules_js_dependencies()

load("@&#8203;aspect_rules_js//js:toolchains.bzl", "DEFAULT_NODE_VERSION", "rules_js_register_toolchains")

rules_js_register_toolchains(node_version = DEFAULT_NODE_VERSION)

load("@&#8203;aspect_rules_js//npm:repositories.bzl", "npm_translate_lock")

npm_translate_lock(
    name = "npm",
    npmrc = "//:.npmrc",
    pnpm_lock = "//:pnpm-lock.yaml",
    verify_node_modules_ignored = "//:.bazelignore",
)

load("@&#8203;npm//:repositories.bzl", "npm_repositories")

npm_repositories()

What's Changed

fix: accept empty, relative or absolute js_image_layer(root) paths by @jbedard in https://github.com/aspect-build/rules_js/pull/2153
fix: npm_translate_lock(exclude_package_contents["*"]) should only be a fallback if no explicit package found by @jbedard in https://github.com/aspect-build/rules_js/pull/2151
chore: remove unused workspace test data by @jbedard in https://github.com/aspect-build/rules_js/pull/2144
feat: add contrib/nextjs rules for building and running nextjs applications by @jbedard in https://github.com/aspect-build/rules_js/pull/2150
chore: add bazel8 ci by @jbedard in https://github.com/aspect-build/rules_js/pull/1929
refactor: move stardoc to docs/ submodule by @alexeagle in https://github.com/aspect-build/rules_js/pull/2154
chore: don't compile protoc under docs/ either by @alexeagle in https://github.com/aspect-build/rules_js/pull/2156

Full Changelog: aspect-build/rules_js@v2.3.4...v2.3.5

github/codeql-action (github/codeql-action)

`v3.28.15`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.15 - 07 Apr 2025

Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #2842

See the full CHANGELOG.md for more information.

`v3.28.14`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.14 - 07 Apr 2025

Update default CodeQL bundle version to 2.21.0. #2838

See the full CHANGELOG.md for more information.

marocchino/sticky-pull-request-comment (marocchino/sticky-pull-request-comment)

`v2.9.2`

Compare Source

What's Changed

Update @octokit/graphql-schema & use biome by @marocchino in https://github.com/marocchino/sticky-pull-request-comment/pull/1517
build(deps): Bump undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/marocchino/sticky-pull-request-comment/pull/1476
build(deps-dev): Bump @types/node from 22.10.7 to 22.14.0 by @dependabot in https://github.com/marocchino/sticky-pull-request-comment/pull/1515
build(deps): Bump @octokit/request-error from 5.0.1 to 5.1.1 by @dependabot in https://github.com/marocchino/sticky-pull-request-comment/pull/1490
build(deps): Bump @octokit/request from 8.1.4 to 8.4.1 by @dependabot in https://github.com/marocchino/sticky-pull-request-comment/pull/1494
build(deps): Bump @octokit/plugin-paginate-rest from 9.1.2 to 9.2.2 by @dependabot in https://github.com/marocchino/sticky-pull-request-comment/pull/1493

Full Changelog: marocchino/sticky-pull-request-comment@v2.9.1...v2.9.2

nock/nock (nock)

`v14.0.3`

Compare Source

Bug Fixes

fetch: cloned response return correct url (#2852) (8348274)

renovatebot/renovate (renovate)

`v39.239.0`

Compare Source

Features

add replacementVersionTemplate to packageRules (#35208) (f5d69a4)

Miscellaneous Chores

deps: update dependency vite to v6.2.6 [security] (main) (#35331) (3bdbd76)

`v39.238.2`

Compare Source

Bug Fixes

workers/auto-replace: correctly handle prefix replacements (#35265) (afd6415)

Miscellaneous Chores

deps: update dependency @types/luxon to v3.6.1 (main) (#35313) (05ebbf3)
deps: update dependency @types/luxon to v3.6.2 (main) (#35319) (790d0ea)
deps: update dependency @types/node to v22.14.0 (main) (#35295) (2188ebb)
deps: update dependency @vitest/eslint-plugin to v1.1.39 (main) (#35293) (043d665)
deps: update dependency type-fest to v4.39.1 (main) (#35302) (21e1e6f)

Code Refactoring

gerrit: remove deprecated source branch as hashtags support (#33329) (e64ca6b)

`v39.238.1`

Compare Source

Bug Fixes

deps: update ghcr.io/containerbase/sidecar docker tag to v13.8.13 (main) (#35289) (25eafdb)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v13.8.13 (main) (#35288) (e0b85f3)

`v39.238.0`

Compare Source

Features

datasource/github-runners: mark Windows Server 2025 as stable (#35284) (ad5c45f)

`v39.237.0`

Compare Source

Features

bitbucket-server: add support for changelogs (#34569) (68a66a0)

`v39.236.2`

Compare Source

Bug Fixes

deps: update ghcr.io/containerbase/sidecar docker tag to v13.8.12 (main) (#35279) (702f18f)

`v39.236.1`

Compare Source

Bug Fixes

tool/pixi: remove v prefix from raw version (#35277) (e938454)

Miscellaneous Chores

deps: update dependency pdm to v2.23.1 (main) (#35275) (78ecd13)
deps: update ghcr.io/containerbase/devcontainer docker tag to v13.8.12 (main) (#35278) (84454cf)

`v39.236.0`

Compare Source

Features

conan: Add support for lockfile maintenance (#28174) (564ee83)

`v39.235.4`

Compare Source

Bug Fixes

changelogs: support massaging self-hosted gitlab URLs (#35258) (8a93407)

Miscellaneous Chores

deps: update dependency @types/node to v22.13.17 (main) (#35263) (12ea7e1)

`v39.235.3`

Compare Source

Bug Fixes

deps: update ghcr.io/containerbase/sidecar docker tag to v13.8.11 (main) (#35260) (e4eefde)

Miscellaneous Chores

deps: update dependency @types/luxon to v3.6.0 (main) (#35236) (3619702)
deps: update dependency @types/node to v22.13.15 (main) (#35237) (6fbcdb3)
deps: update dependency @types/node to v22.13.16 (main) (#35246) (781a9cf)
deps: update dependency pnpm to v10.7.1 (main) (#35249) (b88a306)
deps: update dependency type-fest to v4.39.0 (main) (#35250) (d4da4a1)
deps: update ghcr.io/containerbase/devcontainer docker tag to v13.8.11 (main) (#35259) (f6f5f4e)
deps: update github/codeql-action action to v3.28.15 (main) (#35235) (1de6ec9)
deps: update python:3.13 docker digest to 18ecbd0 (main) (#35243) (1b6f9df)
deps: update python:3.13 docker digest to aaf6d3c (main) (#35247) (e9ba9fc)
deps: update vitest monorepo to v3.1.1 (main) (#35221) (558809f)

Code Refactoring

circleci: Simplify CircleCI extraction (#35233) (8c00b15)

`v39.235.2`

Compare Source

Build System

deps: update dependency @renovatebot/osv-offline to v1.6.5 (main) (#35232) (fcc9b47)

`v39.235.1`

Compare Source

Build System

deps: update dependency luxon to v3.6.1 (main) (#35230) (c91c875)

`v39.235.0`

Compare Source

Features

schema: Add utility for detecting circular data (#35223) (5ad8030)

Miscellaneous Chores

deps: update github/codeql-action action to v3.28.14 (main) (#35220) (a13f5da)
label-actions: capitalize Renovate brandname (#35222) (b53f2a9)

`v39.234.0`

Compare Source

Features

add Azure Pipelines preset (#35207) (4cb2bb2)
manager/nuget: extract msbuild sdk from Import (#35206) (727792a)

Documentation

upgrade best practices: update preset code plus small rewrite (#34837) (0be280b)

`v39.233.6`

Compare Source

Bug Fixes

circleci: Ignore non-image alias items (#35212) (e746331)

Documentation

update references to renovate/renovate (main) (#35213) (73c9fac)

Miscellaneous Chores

deps: lock file maintenance (main) (#35214) (3598dfb)
deps: lock file maintenance (main) (#35217) (57972f6)
deps: update containerbase/internal-tools action to v3.10.19 (main) (#35215) (60ef7bf)
deps: update containerbase/internal-tools action to v3.10.20 (main) (#35218) (7cc1fb2)
deps: update dependency esbuild to v0.25.2 (main) (#35210) (1107833)

Tests

yaml: Fix code block indents (#35211) (5d48319)

`v39.233.5`

Compare Source

Bug Fixes

data: automatic update of static data (#35203) (7dfad3e)

Build System

deps: update dependency @yarnpkg/core to v4.3.1 (main) (#35205) (280a786)

`v39.233.4`

Compare Source

Miscellaneous Chores

deps: update dependency vite to v6.2.5 [security] (main) (#35192) (455e796)
deps: update jaegertracing/jaeger docker tag to v2.5.0 (main) (#35200) (a5f6834)

Tests

manager/docker: add test for COPY --from with digest (#35195) (8e1e8c6)

Build System

deps: update dependency yaml to v2.7.1 (main) (#35201) (35d3baa)

microsoft/TypeScript (typescript)

`v5.8.3`: TypeScript 5.8.3

Compare Source

For release notes, check out the release announcement.

Downloads are available on:

npm

nodejs/undici (undici)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

angular-automatic-lock-bot · 2025-05-12T00:13:41Z

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}

angular-robot added action: merge The PR is ready for merge by the caretaker comp: build renovate managed labels Apr 7, 2025

angular-robot bot added the area: build & ci Related the build and CI infrastructure of the project label Apr 7, 2025

angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch 26 times, most recently from f3c0a13 to 777fb20 Compare April 8, 2025 18:09

angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch 25 times, most recently from 6269e29 to 44fa01c Compare April 11, 2025 21:10

build: update all non-major dependencies

9e16479

angular-robot closed this Apr 11, 2025

angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch from 44fa01c to 9e16479 Compare April 11, 2025 22:11

angular-automatic-lock-bot bot locked and limited conversation to collaborators May 12, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build: update all non-major dependencies #2720

build: update all non-major dependencies #2720

Uh oh!

angular-robot commented Apr 7, 2025 •

edited

Loading

Uh oh!

angular-automatic-lock-bot bot commented May 12, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

build: update all non-major dependencies #2720

build: update all non-major dependencies #2720

Uh oh!

Conversation

angular-robot commented Apr 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Using Bzlmod with Bazel 6:

Using WORKSPACE

What's Changed

CodeQL Action Changelog

3.28.15 - 07 Apr 2025

CodeQL Action Changelog

3.28.14 - 07 Apr 2025

What's Changed

Bug Fixes

Features

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

Code Refactoring

Bug Fixes

Miscellaneous Chores

Features

Features

Bug Fixes

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

Code Refactoring

Build System

Build System

Features

Miscellaneous Chores

Features

Documentation

Bug Fixes

Documentation

Miscellaneous Chores

Tests

Bug Fixes

Build System

Miscellaneous Chores

Tests

Build System

v5.8.3: TypeScript 5.8.3

What's Changed

New Contributors

Configuration

Uh oh!

angular-automatic-lock-bot bot commented May 12, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

angular-robot commented Apr 7, 2025 •

edited

Loading

`v5.8.3`: TypeScript 5.8.3