chore: Update all non-major dependencies (v3.x.x) #4437

zowe-robot · 2025-12-22T00:39:33Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@babel/core (source)	`7.28.5` → `7.28.6`	devDependencies	patch
@babel/eslint-parser (source)	`7.28.5` → `7.28.6`	devDependencies	patch
@babel/preset-env (source)	`7.28.5` → `7.28.6`	devDependencies	patch
@babel/traverse (source)	`7.28.5` → `7.28.6`	overrides	patch
@types/node (source)	`20.19.27` → `20.19.30`	devDependencies	patch
@typescript-eslint/eslint-plugin (source)	`8.50.0` → `8.53.0`	devDependencies	minor
@typescript-eslint/parser (source)	`8.50.0` → `8.53.0`	devDependencies	minor
@zowe/cli (source)	`8.29.5` → `8.29.8`	devDependencies	patch
@zowe/cli-test-utils (source)	`8.29.4` → `8.29.8`	devDependencies	patch
@zowe/imperative (source)	`8.29.4` → `8.29.8`	peerDependencies	patch
@zowe/imperative (source)	`8.29.4` → `8.29.8`	devDependencies	patch
caniuse-lite	`1.0.30001760` → `1.0.30001764`	devDependencies	patch
eslint-plugin-prettier	`5.5.4` → `5.5.5`	devDependencies	patch
got	`14.6.5` → `14.6.6`	overrides	patch
node (source)	`=20.19.6` → `=20.20.0`	engines	minor
prettier (source)	`3.7.4` → `3.8.0`	devDependencies	minor
python	`3.12` → `3.14`	final	minor
react-hook-form (source)	`7.68.0` → `7.71.1`	dependencies	minor
react-router (source)	`7.11.0` → `7.12.0`	dependencies	minor
sass	`1.97.0` → `1.97.2`	dependencies	patch
typedoc (source)	`0.28.15` → `0.28.16`	devDependencies	patch
ch.qos.logback:logback-classic (source, changelog)	`1.5.22` → `1.5.24`	dependencies	patch
com.bucket4j:bucket4j_jdk17-core (source)	`8.15.0` → `8.16.0`	dependencies	minor
io.micronaut:micronaut-core-bom (source)	`4.10.12` → `4.10.14`	dependencies	patch
io.micronaut:micronaut-http-client (source)	`4.10.12` → `4.10.14`	dependencies	patch
io.swagger.parser.v3:swagger-parser-v3	`2.1.36` → `2.1.37`	dependencies	patch
org.springdoc:springdoc-openapi-starter-webflux-ui (source)	`2.8.14` → `2.8.15`	dependencies	patch
org.springdoc:springdoc-openapi-starter-webflux-api (source)	`2.8.14` → `2.8.15`	dependencies	patch
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	`2.8.14` → `2.8.15`	dependencies	patch
org.mozilla:rhino (source)	`1.8.1` → `1.9.0`	dependencies	minor
io.projectreactor:reactor-test	`3.8.1` → `3.8.2`	dependencies	patch
io.projectreactor:reactor-core	`3.8.1` → `3.8.2`	dependencies	patch
com.nimbusds:nimbus-jose-jwt	`10.6` → `10.7`	dependencies	minor
io.projectreactor.netty:reactor-netty-http	`1.3.1` → `1.3.2`	dependencies	patch
org.junit.platform:junit-platform-engine (source)	`1.14.1` → `1.14.2`	dependencies	patch
org.junit.platform:junit-platform-commons (source)	`1.14.1` → `1.14.2`	dependencies	patch
org.junit.platform:junit-platform-launcher (source)	`1.14.1` → `1.14.2`	dependencies	patch
org.junit.jupiter:junit-jupiter (source)	`5.14.1` → `5.14.2`	dependencies	patch
org.apache.httpcomponents.client5:httpclient5 (source)	`5.5.1` → `5.6`	dependencies	minor
com.google.errorprone:error_prone_annotations (source)	`2.45.0` → `2.46.0`	dependencies	minor
org.checkerframework:checker-qual (source)	`3.52.1` → `3.53.0`	dependencies	minor
com.amazonaws:aws-java-sdk-bom (source)	`1.12.795` → `1.12.797`	dependencies	patch
org.springframework.modulith:spring-modulith-starter-test (source)	`1.4.5` → `1.4.6`	dependencies	patch
org.springframework.modulith:spring-modulith-starter-core (source)	`1.4.5` → `1.4.6`	dependencies	patch
org.springframework.modulith:spring-modulith-bom (source)	`1.4.5` → `1.4.6`	dependencies	patch
org.springframework.boot:spring-boot-starter-graphql (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-gradle-plugin (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter-oauth2-client (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter-webflux (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter-cache (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter-thymeleaf (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter-aop (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter-test (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter-websocket (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter-web (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter-validation (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter-security (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter-actuator (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-starter (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-dependencies (source)	`3.5.8` → `3.5.9`	dependencies	patch
org.springframework.boot:spring-boot-configuration-processor (source)	`3.5.8` → `3.5.9`	dependencies	patch

Release Notes

babel/babel (@babel/core)

`v7.28.6`

Compare Source

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types
- #17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)
babel-plugin-transform-regenerator
- #17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)
babel-plugin-transform-react-jsx
- #17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone
- #17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex
- #17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-plugin-transform-react-jsx
- #17555 perf: Use lighter traversal for jsx __source,__self (@liuxingbaoyu)

Committers: 7

Babel Bot (@babel-bot)
Eliot Pontarelli (@kolvian)
Huáng Jùnliàng (@JLHwung)
Kadhirash Sivakumar (@kadhirash)
Nicolò Ribaudo (@nicolo-ribaudo)
@liuxingbaoyu
coderaiser (@coderaiser)

typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)

`v8.53.0`

Compare Source

🚀 Features

eslint-plugin: add rule [strict-void-return] (#9707)
eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)

🩹 Fixes

eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)
eslint-plugin: replace unclear "error typed" with more helpful description (#11704)
typescript-estree: forbid invalid extends and implements in interface declaration (#11935)
typescript-estree: forbid invalid class implements (#11934)
typescript-estree: forbid type-only import with both default and named specifiers (#11930)

❤️ Thank You

Brad Zacher @bradzacher
fisker Cheung @fisker
Josh Goldberg
Josh Goldberg ✨
Kirk Waiblinger
Niki @phaux
Nikita
SungHyun627 @SungHyun627
Will Harney @wjhsf

You can read about our versioning strategy and releases on our website.

`v8.52.0`

Compare Source

🚀 Features

eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)

🩹 Fixes

eslint-plugin: [no-base-to-string] detect @@toPrimitive and valueOf (#11901)
eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)

❤️ Thank You

Josh Goldberg ✨
Ulrich Stark

You can read about our versioning strategy and releases on our website.

`v8.51.0`

Compare Source

🚀 Features

eslint-plugin: add namespace to plugin meta (#11885)
eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)
eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)

❤️ Thank You

Josh Goldberg ✨
Kirk Waiblinger @kirkwaiblinger
mdm317
Ulrich Stark
Yannick Decat @mho22

You can read about our versioning strategy and releases on our website.

`v8.50.1`

Compare Source

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)
eslint-plugin: [method-signature-style] ignore methods that return this (#11813)

❤️ Thank You

Josh Goldberg ✨
Tamashoo @Tamashoo

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@typescript-eslint/parser)

`v8.53.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.52.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.51.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.50.1`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

zowe/zowe-cli (@zowe/cli)

`v8.29.8`

Compare Source

Imperative

BugFix: Updated diff and diff2html dependencies for technical currency. #2664

`v8.29.7`

Compare Source

Zowe CLI

Enhancement: Added instructions for obtaining a token to be displayed when a command prompts for a token. #2660

Imperative

Enhancement: Added instructions for obtaining a token to be displayed when a command prompts for a token. #2660

`v8.29.6`

Compare Source

Imperative

BugFix: Stopped supporting IE 11 browser in web help pages for technical currency. #2654
BugFix: Fixed truncation that could occur when the AbstractRestClient request method downloads gzip-encoded data. #2658

z/OS Files SDK

Enhancement: Added a download destination field to the API response for the Download.ussFile and Download.dataSet functions. #2641
BugFix: Fixed an issue where if a file failed to download and an older version of it already existed in the destination, the old file was deleted. #2618
BugFix: Fixed an issue where the preserve letter case option was not preserving the case in generated directory names in the download data-sets-matching command. #2618

browserslist/caniuse-lite (caniuse-lite)

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

`v5.5.5`

Compare Source

Patch Changes

#772 7264ed0 Thanks @BPScott! - Bump prettier-linter-helpers dependency to v1.0.1
#776 77651a3 Thanks @aswils! - fix: bump synckit for yarn PnP ESM issue

sindresorhus/got (got)

`v14.6.6`

Compare Source

Fix stream auto-end for empty PATCH/DELETE/OPTIONS 4d5168c
- The bug was introduced in b65b0e1, where it incorrectly auto-closed streams for empty PATCH/DELETE/OPTIONS when using streams. This broke the documented use case of piping data to a got stream for these methods.
- Docs:
  
  got.stream does not auto-end for OPTIONS, DELETE, or PATCH so you can pipe or write a body without getting write after end. Call stream.end() when you are not piping a body.

nodejs/node (node)

`v20.20.0`: 2026-01-13, Version 20.20.0 'Iron' (LTS), @marco-ippolito

Compare Source

This is a security release.

Notable Changes

lib:

(CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#802
(CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
lib,permission:
(CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
src:
(CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
src,lib:
(CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
tls:
(CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

Commits

[8f9ba3f623] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #60997
[97fc9b0eb7] - deps: update undici to 6.23.0 (Matteo Collina) nodejs-private/node-private#792
[14fbbb510c] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#802
[1febc48d5b] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
[494f62dc23] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
[d7a5c587c0] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
[51f4de4b4a] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
[85f73e7057] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

prettier/prettier (prettier)

`v3.8.0`

Compare Source

diff

🔗 Release Notes

react-hook-form/react-hook-form (react-hook-form)

`v7.71.1`: Version v7.71.1

Compare Source

🐞 fix #13250 issue with booleans_as_integers (#13252)

`v7.71.0`: Version 7.71.0

Compare Source

⚡ perf: memoize FormProvider context value to prevent unnecessary rerenders (#13235)
🚄 perf: separate control context to prevent unnecessary rerenders (#13234)
🐞 fix: update isValid when field disabled state changes (#13231)
👌 chore: optimize bundle size via safe terser options (#13243) (#13244)

thanks to @kamja44, @a28689604 & @newsiberian

`v7.70.0`: Version 7.70.0

Compare Source

✅ watch type improvement (#13228)
🐞 fix: prevent field array ghost elements with keepDirtyValues (#13188)
🐞 fix: improve invalid date handling in deepEqual and validation (#13230)
🐞 fix(types): handle branded types correctly in DeepPartial (#13222)
🐞 fix native validation focus issue (#13220)
🐞 change spread operator to set name with depricated names prop, then override with new name prop is supplied (#13214)
🐞 fix: prevent duplicate subscription trigger in setValue (#13206) (#13209)
👌 chore: fix lib type check include tests (#13229)

thanks to @EdwardEB, @constantly-dev & @a28689604

`v7.69.0`: 🎄 Version 7.69.0

Compare Source

📏 feat: align API with useWatch (#13192)
🤦🏻‍♂️ chore: update @deprecated names prop on (#13198)
🏥 chore: safely call function methods on elements (#13190)
🪖 chore: cve-2025-67779 (#13196)
🪖 chore: cve-2025-55184 & cve-2025-55183 (#13194)
🪖 chore: CVE-2025-55182 Critical RCE vulnerabilty (#13175)
🔬 test: add regression tests for #12837 and #13136 (#13187)
🐞 fix(reset): preserve isValid state when keepIsValid option is used (#13173)
🐞 fix: ensure each createFormControl.subscribe subscription listens only to the changes it subscribes to (#12968)
🐞 fix(validation): batch isValidating state updates with validation result (#13181)
🐞 fix(createFormControl): resolve race condition between setError and setFocus (#13138) (#13169)
🧿 fix control prop type (#13189)
🔔 chore: clean cloneObject logic (#13179)

thanks to @PierreCrb, @a28689604, @AnuragM7666, @ap0nia, @dusan233 & @hlongc

remix-run/react-router (react-router)

`v7.12.0`

Compare Source

Minor Changes

Add additional layer of CSRF protection by rejecting submissions to UI routes from external origins. If you need to permit access to specific external origins, you can specify them in the react-router.config.ts config allowedActionOrigins field. (#14708)

Patch Changes

Fix generatePath when used with suffixed params (i.e., "/books/:id.json") (#14269)
Export UNSAFE_createMemoryHistory and UNSAFE_createHashHistory alongside UNSAFE_createBrowserHistory for consistency. These are not intended to be used for new apps but intended to help apps usiong unstable_HistoryRouter migrate from v6->v7 so they can adopt the newer APIs. (#14663)
Escape HTML in scroll restoration keys (#14705)
Validate redirect locations (

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Signed-off-by: Renovate Bot <[email protected]>

sonarqubecloud · 2026-01-16T00:56:34Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

zowe-robot added the dependencies Pull requests that update a dependency file label Dec 22, 2025

github-project-automation bot added this to API Mediation Layer Backlog Management Dec 22, 2025

github-project-automation bot moved this to New in API Mediation Layer Backlog Management Dec 22, 2025

pull-request-size bot added the size/S label Dec 22, 2025

zowe-robot force-pushed the renovate/v3.x.x-all-minor-patch branch from ce221c2 to b412db8 Compare December 23, 2025 00:37

pull-request-size bot added size/M and removed size/S labels Dec 23, 2025

zowe-robot force-pushed the renovate/v3.x.x-all-minor-patch branch 4 times, most recently from 42f3af3 to 3d42e70 Compare January 2, 2026 00:37

zowe-robot force-pushed the renovate/v3.x.x-all-minor-patch branch 3 times, most recently from 4ad208b to a4a65c6 Compare January 7, 2026 00:37

EvaJavornicka moved this from New to In Progress in API Mediation Layer Backlog Management Jan 7, 2026

zowe-robot force-pushed the renovate/v3.x.x-all-minor-patch branch 6 times, most recently from 364090a to 23a1dac Compare January 15, 2026 00:35

chore: Update all non-major dependencies

2b48761

Signed-off-by: Renovate Bot <[email protected]>

zowe-robot force-pushed the renovate/v3.x.x-all-minor-patch branch from 23a1dac to 2b48761 Compare January 16, 2026 00:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: Update all non-major dependencies (v3.x.x) #4437

chore: Update all non-major dependencies (v3.x.x) #4437

Uh oh!

zowe-robot commented Dec 22, 2025 •

edited

Loading

Uh oh!

sonarqubecloud bot commented Jan 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

chore: Update all non-major dependencies (v3.x.x) #4437

Are you sure you want to change the base?

chore: Update all non-major dependencies (v3.x.x) #4437

Uh oh!

Conversation

zowe-robot commented Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 7

🚀 Features

🩹 Fixes

❤️ Thank You

🚀 Features

🩹 Fixes

❤️ Thank You

🚀 Features

🩹 Fixes

❤️ Thank You

🩹 Fixes

❤️ Thank You

Imperative

Zowe CLI

Imperative

Imperative

z/OS Files SDK

Patch Changes

v20.20.0: 2026-01-13, Version 20.20.0 'Iron' (LTS), @​marco-ippolito

Notable Changes

Commits

v7.71.1: Version v7.71.1

v7.71.0: Version 7.71.0

v7.70.0: Version 7.70.0

v7.69.0: 🎄 Version 7.69.0

Minor Changes

Patch Changes

Configuration

Uh oh!

sonarqubecloud bot commented Jan 16, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

zowe-robot commented Dec 22, 2025 •

edited

Loading

`v20.20.0`: 2026-01-13, Version 20.20.0 'Iron' (LTS), @marco-ippolito

`v7.71.1`: Version v7.71.1

`v7.71.0`: Version 7.71.0

`v7.70.0`: Version 7.70.0

`v7.69.0`: 🎄 Version 7.69.0