fix(deps): update all non-major dependencies - #2515
renovate[bot] wants to merge 5 commits into
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
30824ac to
a77bee5
Compare
dawsontoth
left a comment
dawsontoth
left a comment
There was a problem hiding this comment.
Blocking on one package in this batch: tar-stream 3.2.0 → 3.2.1 breaks npm run build. Everything else in the batch is clean. Reproduced and isolated locally (macOS, Node 24.19.0, npm 11.17.0).
The failure
tsc --project tsconfig.build.json exits 2 with 10 errors, all in tar usage:
components/Application.ts(867,26): TS2345 Extract<ExtractEvents> has no properties in common with PipelineOptions
components/packageComponent.ts(148,16): TS2339 Property 'on' does not exist on type 'Pack'
components/packageComponent.ts(154,13): TS2769 'Pack' is not assignable to 'PipelineSource<any>'
dataLayer/rocksdbBackup.ts(752,27): TS2769 'Pack' is not assignable to 'PipelineSource<any>'
dataLayer/rocksdbBackup.ts(878,9): TS2339 Property 'end' does not exist on type 'Sink'
dataLayer/rocksdbBackup.ts(899,11): TS2339 Property 'end' does not exist on type 'Sink'
dataLayer/rocksdbBackup.ts(905,40): TS2339 Property 'destroy' does not exist on type 'Sink'
dataLayer/rocksdbBackup.ts(906,16): TS2345 'Sink' is not assignable to 'WritableStream'
dataLayer/rocksdbBackup.ts(919,9): TS2339 Property 'end' does not exist on type 'Sink'
This is what reddens smoke (linux/amd64, ubuntu-latest) and all three Next.js adapter integration jobs — both build harper from source, so they hit the same tsc.
Isolated to tar-stream, and only tar-stream
Reverting only tar-stream to 3.2.0 on this branch, with every other bump in the batch left in place:
| tar-stream | tsc --project tsconfig.build.json |
|---|---|
| 3.2.1 (this PR) | exit 2, 10 errors |
| 3.2.0 | exit 0 |
Root cause — an upstream packaging change
tar-stream@3.2.1 added index.d.ts to its files array. 3.2.0 shipped no declarations at all, so types came from our @types/tar-stream@^3.1.4, which models Pack/Sink/Extract as Node streams. The new bundled declarations win over @types/*, and they model them as streamx streams instead:
import { Readable, Writable, ... } from 'streamx'
interface Sink extends Writable {}
interface Pack extends Readable { entry(...): Sink; finalize(): void }Two things go wrong:
streamx@2.23.0ships no type declarations and there is no@types/streamxin the tree, soReadable/Writableresolve to nothing andPack/Sinkcollapse to empty interfaces — henceProperty 'end' does not exist on type 'Sink'.- Even with types present, streamx streams are genuinely not Node streams. Installing
@types/streamx@2.9.5takes it from 10 errors to 2, but not to 0 — streamx'sWritable.end()returnsvoidwhere Node's returnsthis, sonode:stream.pipeline()still rejects them:dataLayer/rocksdbBackup.ts(906,16): 'Sink' is not assignable to 'WritableStream' The types returned by 'end(...)' are incompatible: 'void' is not assignable to 'WritableStream'
So deleting @types/tar-stream is not the fix (verified — same 10 errors with it removed), and @types/streamx is only a partial one. The code works at runtime; it is the declarations that regressed. Adapting packageComponent.ts / rocksdbBackup.ts / Application.ts to streamx-typed streams is a real code change, not a Renovate change.
Ask
Please split tar-stream out of this batch — pin it to 3.2.0 (or add a Renovate ignore/pin entry) and let the rest land. I'd rather not hold nine good bumps behind one upstream types regression.
The rest of the batch is verified clean
With tar-stream at 3.2.0 and every other bump from this PR in place (axios 1.20.0, @aws-sdk/client-s3 + lib-storage 3.1121.0, cbor-x 1.6.6, msgpackr 2.1.0, papaparse 5.7.0, systeminformation 5.33.6, openai 7.8.0, oxlint 1.80.0, tsx 4.23.13, typescript-eslint 8.68.0, @harperfast/skills 1.12.4, Node 24.20.0):
npm run build— exit 0- Unit suite (
unitTests/**, minusapiTests/harperBridge/resourcesand the two tests that hang in a sandbox): 5337 passing / 203 pending / 25 failing, and the base commit38fcbf1gives the identical 5337 / 203 / 25 with a byte-identical failure set. Zero PR-only failures. - SQL suites (
sqlTranslator,sqlEngine,dataLayer/sql-update,dataLayer/SQLSearch,utility/functions/sql/alaSQLExtension): 258 passing / 8 pending / 0 failing, same as base.
Not caused by this PR
Unit Test (Node.js v22/v24/v26) are red on subscribe to retained record with patch operations (unitTests/apiTests/mqtt-test.mjs:503, AssertionError: 'update 3' == 'update 2'). That is a main defect, not yours: #2516 (alasql only) fails identically on all three Node versions, and so does #2476, an unrelated feature PR run against the same base this morning. Filing separately — don't chase it here.
607971a to
2a29140
Compare
26a59ad to
a893578
Compare
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
|
Status update after the branch moved — the Kris merged Still failing on the current head
Why it's easy to miss in the diffThe bump is not visible in the
So a reviewer scanning the manifest diff ( Root cause is unchanged from my review above: Ask, unchangedHold {
"description": "Hold tar-stream on 3.2.0: 3.2.1 added a bundled index.d.ts that overrides @types/tar-stream and models Pack/Sink/Extract as streamx rather than Node streams, breaking `tsc --project tsconfig.build.json` in 10 places. Neither removing @types/tar-stream nor pinning it fixes it. Drop once our tar usage is ported to the streamx types.",
"matchPackageNames": ["tar-stream"],
"allowedVersions": "<3.2.1"
}There's no such rule in One note for whoever picks this up: Renovate has already posted its "will not automatically rebase … does not recognize the last commit author" notice because of the merge commit, so ticking the rebase box will discard it. Better to add the rule to |
Pull request was converted to draft
Co-Authored-By: GPT-5.6 Sol <noreply@openai.com>
Co-Authored-By: GPT-5.6 Sol <noreply@openai.com>
Co-Authored-By: GPT-5.6 Sol <noreply@openai.com>
Co-Authored-By: GPT-5.6 Sol <noreply@openai.com>
c23fe61 to
de02862
Compare
dawsontoth
left a comment
dawsontoth
left a comment
There was a problem hiding this comment.
My tar-stream block is resolved — clearing the changes-requested. fe35e4fe pins the manifest at 3.2.0 (tightening ^3.1.8 to an exact pin, which is the right call for a package whose packaging regressed) and 3405afa2 adds the Renovate hold so it doesn't come straight back. Verified on the current head de028627:
npm ci exit 0
npm run build exit 0 ← was exit 2 with 10 tsc errors
Unit suite: no regressions
PR de028627 5505 passing / 208 pending / 25 failing
base 1496a18e 5505 passing / 208 pending / 25 failing
Set-diffed the failure titles: zero PR-only failures, zero base-only failures. The 25 are the usual sandbox-blocked categories here.
de028627 reviewed on its own
It is metadata-only — it drops "dev": true / "peer": true from the twelve @cbor-extract/* and @msgpackr-extract/* platform packages. No versions move, nothing is added or removed. Given cbor-x 1.6.5 → 1.6.6 and msgpackr 2.0.6 → 2.1.0 are in this batch, keeping the native accelerators pinned in the published shrinkwrap rather than dev-scoped is correct.
All three red checks are infrastructure, not this PR
I chased each one to its actual cause:
Integration Tests 2/6 (uWS HTTP) — died 25s in, before a single test ran:
npm error code ECONNRESET
npm error network aborted
No test log was even produced (No files were found with the provided path). Pure registry flake.
Integration Tests 2/6 (Windows, Node.js v24) — The action 'Run Integration Test Shard 2' has timed out after 20 minutes. No assertion failure anywhere in the log.
HNSW native plane (Node.js v24) — one test, vectorIndexPlane.test.js:521, timing out against its 15s waitFor budget. This one I took seriously, because msgpackr/cbor-x are exactly the codecs a derived-mapping rebuild runs through. It does not hold up:
| where | rebuilds from primary records when its durable cursor is outside audit retention |
|---|---|
main 1496a18e (run 34838615153) |
✔ 1054 ms |
main eec839ee (run 34805593428) |
✔ 1025 ms |
main 4d375bfe (run 34791149457) |
✔ 1025 ms |
this PR head de028627, run locally |
✔ 1053 ms (22 passing) |
| this PR head, CI run 34847573728 | ✖ blew 15 000 ms |
Ran the whole vectorIndexPlane.test.js file locally on de028627 with the shrinkwrap change in place — 22/22 passing, and the test in question lands at 1053 ms, within 1% of what main does. A test that normally finishes in ~1s doesn't miss a 15s deadline because of a codec change; it does that because the runner stalled. The same run's benchmark neighbour degraded from 4919/s to 3473/s as it went, which is what a starved runner looks like.
Please just re-run those three jobs — there is nothing here to fix in the branch.
Approving.
|
Status nudge — my approval from the 14th still stands, and nothing about this PR has changed since. Head is still
I also re-checked whether the |
2 participants
This PR contains the following updates:
3.1116.0→3.1123.03.1127.0(+3)3.1116.0→3.1123.03.1127.0(+3)1.12.2→1.12.51.12.8(+2)8.67.0→8.69.08.70.01.19.0→1.20.01.6.5→1.6.617.11.0→17.12.02.0.6→2.1.024.19.0→24.20.024.19.0→24.20.07.5.0→7.8.07.10.0(+1)1.79.0→1.81.01.82.05.6.0→5.7.05.33.1→5.33.75.33.9(+1)3.2.0→3.2.14.23.12→4.23.138.67.0→8.69.08.70.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
aws/aws-sdk-js-v3 (@aws-sdk/client-s3)
v3.1123.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1122.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1121.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1120.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1119.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1118.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
v3.1117.0Compare Source
Note: Version bump only for package @aws-sdk/client-s3
aws/aws-sdk-js-v3 (@aws-sdk/lib-storage)
v3.1123.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1122.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1121.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1120.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1119.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1118.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
v3.1117.0Compare Source
Note: Version bump only for package @aws-sdk/lib-storage
HarperFast/skills (@harperfast/skills)
v1.12.5Compare Source
Documentation
677ad21(#77) (d18d832)v1.12.4Compare Source
Documentation
6bf676d(9c2e32d)v1.12.3Compare Source
Documentation
aa74b1c(680ebde)typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v8.69.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.68.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
axios/axios (axios)
v1.20.0Compare Source
v1.20.0 — August 19, 2026
This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.
🔒 Security Fixes
🐛 Bug Fixes
🔧 Maintenance & Chores
🌟 New Contributors
We are thrilled to welcome our new contributors. Thank you for helping improve axios:
Full Changelog (axios/axios@v1.19.0...v1.20.0)
kriszyp/cbor-x (cbor-x)
v1.6.6Compare Source
sindresorhus/globals (globals)
v17.12.0Compare Source
50a2119__webpack_layer__global (#351)779a11akriszyp/msgpackr (msgpackr)
v2.1.0Compare Source
nodejs/node (node)
v24.20.0: 2026-08-26, Version 24.20.0 'Krypton' (LTS), @aduh95Compare Source
Notable Changes
b12bcc9ae1] - (SEMVER-MINOR) async_hooks: addusingscopes toAsyncLocalStorage(Stephen Belanger) #61674e2eb88b36b] - (SEMVER-MINOR) buffer: addendparameter (Robert Nagy) #623901fefdda18e] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #647464a158cf1ab] - doc: add MikeMcC399 as collaborator (Mike McCready) #64656d4cafce076] - (SEMVER-MINOR) lib,permission: addpermission.drop(Rafael Gonzaga) #62672b3cfb55267] - (SEMVER-MINOR) loader: implement package maps (Maël Nison) #62239cd1eb3e60b] - (SEMVER-MINOR) src,permission: add--permission-audit(RafaelGSS) #6186928dc85d8d2] - (SEMVER-MINOR) stream: addnode:stream/iterimplementation (James M Snell) #62066d31c168740] - (SEMVER-MINOR) test_runner: addcontext.log()and test:log event (Moshe Atlow) #64389add1edbc42] - (SEMVER-MINOR) test_runner: reportentryFileinTestStreamevents (Moshe Atlow) #64309d937c8c6cd] - (SEMVER-MINOR) wasm: enable JSPI (Guy Bedford) #59941Commits
1822c0f335] - assert,util: fix TypeError on Maps with null keys (Paul Bouchon) #64441b12bcc9ae1] - (SEMVER-MINOR) async_hooks: add using scopes to AsyncLocalStorage (Stephen Belanger) #61674984260bf44] - async_hooks: use validateBoolean for trackPromises (Soul Lee) #64731ba2612cca2] - benchmark: fix calibrate-n option handling (Luan Muniz) #64146236dc4d2d7] - benchmark: add bytes variant to webstreams async-iterator (Matteo Collina) #64291b022a1419c] - benchmark: respect stream/iter broadcast backpressure (Trivikram Kamat) #63314a290f51f15] - (SEMVER-MINOR) benchmark: add benchmarks for experimental stream/iter (James M Snell) #62066465f2bfb74] - buffer: use Clamp conversion in Blob slice (Donghoon Kang) #6473974a22cd0c5] - buffer: validate copyArrayBuffer offsets against buffer length (Ilia Alshanetsky) #6390421e24208dc] - buffer: normalize lone "\r" in Blob native line endings (Daijiro Wachi) #64115ddacb3ff10] - buffer: fix Blob.stream() leaking source buffer (semimikoh) #6357749198d2313] - buffer: fix end parameter bugs in indexOf/lastIndexOf (Robert Nagy) #62711e2eb88b36b] - (SEMVER-MINOR) buffer: add end parameter (Robert Nagy) #62390e2e5c4fe88] - build: update binary-upload to use correct tarball name (Stewart X Addison) #65282b78a212553] - build: pin envinfo versions in github actions (Joyee Cheung) #64117094fb840aa] - build: add QUIC CI job for PRs matching QUIC related paths (Tim Perry) #6387591f5003cad] - build: fix flags for ngtcp2 on IBM i (SRAVANI GUNDEPALLI) #60073e83648effd] - build,test: add tests for binary linked with shared libnode (Joyee Cheung) #614634a425b41d9] - build,tools: fix shared library cross-compile (Kirill Saied) #63963fe8fa45ff2] - cli: style node --help output with util.styleText (Adrián Estrada) #644843cd1576cb2] - crypto: preserve OpenSSL errors from KDF failures (Filip Skokan) #6477674b3023565] - crypto: handle XOF output allocation failure (Filip Skokan) #64851fea0666a1b] - crypto: clarify missing cipher error (Filip Skokan) #6485233fec91b54] - crypto: reuse X509 issuer result (Filip Skokan) #6485244c1473348] - crypto: validate key generation options (Filip Skokan) #64852c2c53a18e5] - crypto: fix Argon2 validation errors (Filip Skokan) #64852edc1f2126d] - crypto: initialize KeyObjectData mutex eagerly (Filip Skokan) #64851be8237240c] - crypto: handle DH operation failures (Filip Skokan) #64851b65a8f3875] - crypto: preserve RSA-PSS legacy pubkey DER (Filip Skokan) #6454749f2ae204b] - crypto: cleanse provider private key copies (Filip Skokan) #64547a5d4ac8208] - crypto: handle incomplete RSA private keys (Filip Skokan) #64547b72c0b9616] - crypto: retain legacy DH validation (Filip Skokan) #6454724a1be5886] - crypto: limit KangarooTwelveParams customization to 512 bytes (Filip Skokan) #645570290e0a61e] - crypto: split OpenSSL 3, BoringSSL, and legacy backends (Filip Skokan) #64211ba27e72ff8] - crypto: fix Argon2 bypassing FIPS mode (Filip Skokan) #647761fefdda18e] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746c0dd022081] - crypto: use user-facing error for output encoding changes (Archkon) #64692ff485a9410] - crypto: make --use-system-ca per-env rather than per-process (Aditi) #606781329d9b9f1] - debugger: preserve overlapping CDP request state (Trivikram Kamat) #6446782a02336aa] - deps: V8: backportd259a9e(Leszek Swirski) #63865f0fc82d404] - deps: update ngtcp2 to 1.25.0 (Node.js GitHub Bot) #64944c4e02f0fbc] - deps: upgrade npm to 11.19.0 (npm team) #64883d5a57ed4dd] - deps: update nghttp3 to 1.18.0 (Node.js GitHub Bot) #6494351d413150a] - deps: update minimatch to 10.2.6 (Node.js GitHub Bot) #6494521f79ce140] - deps: update simdjson to 4.6.6 (Node.js GitHub Bot) #649427a4960d6a9] - deps: update acorn to 8.18.0 (Node.js GitHub Bot) #649415c423aa113] - deps: update googletest to1b6f64d(Node.js GitHub Bot) #6494040561e61b0] - deps: update nghttp2 to 1.70.0 (Node.js GitHub Bot) #6493951090925b0] - deps: update zlib to 1.3.2.1-motley-42c2f19 (Node.js GitHub Bot) #647447c534bf8e5] - deps: V8: backport5177b10(avivkeller) #646317b1898a341] - deps: update ada to 4.0.0 (Node.js GitHub Bot) #647909209cc4095] - deps: update sqlite to 3.53.4 (Node.js GitHub Bot) #647453833fceff6] - deps: update googletest tofa005b2(Node.js GitHub Bot) #64587bc7ce488d1] - deps: histogram: cherry-pick62ea52b(StefanStojanovic) #64296e3fa05841d] - deps: update histogram to 0.11.10 (Node.js GitHub Bot) #64296e75bdb9bbe] - deps: update amaro to 1.1.11 (Node.js GitHub Bot) #645861e034e6e40] - deps: update timezone to 2026c (Node.js GitHub Bot) #645882b8f1f27bd] - deps: update googletest to8240fa7(Node.js GitHub Bot) #64439241ece0417] - deps: enable OpenSSL asm support for riscv64 (Jamie Magee) #62606215105eb90] - deps: update c-ares to 1.34.8 (Node.js GitHub Bot) #643307ac97fc84e] - deps: upgrade npm to 11.18.0 (npm team) #641998d4cb9ae46] - deps: update zlib to 1.3.2.1-motley-8b3aa8a (Node.js GitHub Bot) #64295564c0f4592] - deps: update ngtcp2 to 1.24.0 (Node.js GitHub Bot) #64297e3304cd31a] - deps: update nghttp3 to 1.17.0 (Node.js GitHub Bot) #64182345d6ad4eb] - deps: update ngtcp2 to 1.23.0 (Node.js GitHub Bot) #63777a53db015e6] - deps: update nghttp3 to 1.16.0 (Node.js GitHub Bot) #637761f4a5c1c76] - deps: update ngtcp2 to 1.22.1 (Node.js GitHub Bot) #62812080c4d7cda] - deps: update ngtcp2 to 1.22.0 (Node.js GitHub Bot) #625954309e7c82f] - deps: update ngtcp2 to 1.21.0 (Node.js GitHub Bot) #6205190cf11cfb5] - deps: update nghttp3 to 1.15.0 (Node.js GitHub Bot) #61512e1f315a554] - deps: update ngtcp2 to 1.20.0 (Node.js GitHub Bot) #615119a3f690c9d] - deps: update ngtcp2 to 1.19.0 (Node.js GitHub Bot) #61156fe88f31764] - deps: add ngtcp2 test binaries (James M Snell) #599466d60fce138] - diagnostics_channel: grow native channel storage (Stephen Belanger) #6449730ae8ab091] - doc: document --permission-audit audit mode behavior (Adrián Estrada) #647918cefc6efa8] - doc: fix guaranteed typo (lilianakatrina684-a11y) #623742e78e4b120] - doc: add throwIfNoEntry version history to fs.stat (kovan) #62204c7a04401cb] - doc: fix grammar and punctuation in dgram documentation (Kamal Rawal) #64957331e5e8f62] - doc: fix grammar and editorial issues in addons documentation (Kamal Rawal) #64952232287fcc6] - doc: formalize fn/name as part of TestOptions API (Christopher Hiller) #649467f9efeb445] - doc: remove references toca/crlas per-context QuicSession options (René) #64769b54aa83cc6] - doc: fix typo in maintaining-dependencies.md (greenhead) #64896f4e427803c] - doc: add RafaelGSS as last security release stewards (Rafael Gonzaga) #64843f2cd6df3f3] - doc: fix typos in documentation (greenhead) #64900d5627162bd] - doc: improve TestContext hook descriptions (Kamal Rawal) #6489972ee03bd2e] - doc: document stream.isDestroyed() (YspritanHyzygy) #64789995141eb81] - doc: add contributing detail for git Signed-off-by trailer (Mike McCready) #64862dc30379310] - doc: fix duplicated word in test snapshot docs (Kamal Rawal) #64837205d4d0472] - doc: remove obsolete cctest node.gyp instructions (Soul Lee) #64814108b883d0b] - doc: report proper return type on url.format (Brian Muenzenmeyer) #64806b03bd3a8ed] - doc: clarify tlsSocket.authorized on resumption (soreavis) #64584093098ad7f] - doc: stabilize --disable-warning (Jean Michelet) #647422de1d76d80] - doc: add MDN links for explicit resource management in fs (lluisemper) #595572e0f36a891] - doc: mention constructor check in deepStrictEqual (Sumit Kumar Das) #620101c9d354d09] - doc: update technical priorities (Jacob Smith) #6450530c99bf08f] - doc: deprecation add more codemod (Augustin Mauroy) #631758a971a09eb] - doc: run license-builder (Node.js GitHub Bot) #63918707f6eacfc] - doc: clarify rules for adding new built-in modules (Antoine du Hamel) #64648928208cffc] - doc: mention DEPENDENCY custom field for H1 reports (Rafael Gonzaga) #64634ee593cadf5] - doc: fix dnsPromises.lookup verbatim default (Shivam S) #646589c228b32d1] - doc: fix typo in releases guide (Jihwan) #646214a158cf1ab] - doc: add MikeMcC399 as collaborator (Mike McCready) #646568125809853] - doc: use promote wording in release guide (Md Muhtasim Munif Fahim) #643712a2effadf6] - doc: fix import.meta example for vm.SourceTextModule (Muhammad Zeeshan) #64112c879f912bf] - doc: mention crypto.hash() for better perf (Steven) #63420634afda904] - doc: update sea example by fixing wrong code example (Maxence Robinet) #64025bced1433a3] - doc: fix socket.readyState state descriptions (YuSheng Chen) #644684b2c18938f] - doc: replace large tables in crypto.md and webcrypto.md with lists (Filip Skokan) #645825207231996] - doc: note --env-file is not applied to --run (Paul Bouchon) #64442329a2884fd] - doc: fix typo in embedding.md (greenhead) #64425fab3f56aa1] - doc: fix typos in contributing docs (Donghoon Kang) #64520cbc2bed4e8] - doc: document TLS alpnProtocol and servername fields (Tim Perry) #64362dada3ae60e] - doc: fix spelling in devcontainer guide (한만욱) #6445971343b28aa] - doc: clarify PEM format for signing keys (Harjoth Khara) #644040544ec1c78] - doc: fix typo in tls.md (Daijiro Wachi) #644588fe58078e7] - doc: document net Socket server property (Efe Karasakal) #64364d54fd03fa4] - doc: update a Dispatcher undici doc link (Filip Skokan) #643581bdebecd41] - doc: fix typos in documentation (Jungwon Sohn) #6446686bca58641] - doc: clarify fixes and refs trailer guidance (Trivikram Kamat) #64421b5b84c9394] - doc: add scope overview tables for TestsStream events (Moshe Atlow) #64386004238d77c] - doc: clarify proxy threat model (Matteo Collina) #643666851b8d55f] - doc: add note about restricted CI to pull-requests.md (Stewart X Addison) #64321662e33714a] - doc: various updates to releases.md (Stewart X Addison) #64198949bc3cfd3] - doc: remove obsolete --napi-modules doc entry (Chengzhong Wu) #64220830d16067f] - doc: clarify QUIC stream state wording (EduardF1) #6366079b6704630] - doc: fix typo in node-config-schema.json (Hamid Reza Ghavami) #641889f5bf554db] - doc: fix broken link (Antoine du Hamel) #6507842b27ed428] - doc: remove unsupported syntax fromstream_iter.md(Antoine du Hamel) #64649f1a9df7f22] - doc: clarify fromReadable() duck-typed contract (Trivikram Kamat) #63682c7a3d450ac] - doc: improve quic documentation (James M Snell) #63157cc425bc659] - doc: fix promise nomenclature instream_iter.md(Antoine du Hamel) #63406859a02da96] - doc: minor structural stream/iter edits (René) #63089630b15eb20] - doc: fix doubled word typo in stream_iter.md (Daijiro Wachi) #6291650791fa8fa] - doc,test: widen fsPromises.appendFile()'s data type, add missing tests (Jimmy Leung) #642799e39360a09] - esm: improve ERR_REQUIRE_ASYNC_MODULE (Joyee Cheung) #64260d2b02e443a] - esm: print required top-level await locations without evaluating (Joyee Cheung) #64154e8c153f3f4] - events: avoid retaining removed event names (Matteo Collina) #6447573e1701bad] - events: optimize once() and removeListener() (Matteo Collina) #6437312f7fc0558] - fs: key glob matcher cache by platform (Archkon) #64571e5af022302] - fs: add pattern cache for matchGlobPattern() (bq) #6391563321eeb11] - fs: fix cp symlink and EEXIST handling on Windows (Kirill Saied) #643530ad55e5618] - http: fix writableFinished and 'finish' after write errors (Tim Perry) #64847ee54d9d4d2] - http: avoid aborting IncomingMessage signal on normal close (Archkon) #6439214cb8b0a06] - http: guard invalid timeout values in checkConnections (Efe Karasakal) #64506f24177ccc6] - http: propagate highWaterMark to ClientRequest OutgoingMessage (trivenay) #6465355e2c2da8c](https://rConfiguration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.
Review-Coverage: authored=codex; ran=gemini,claude,cursor-grok; adjudicated=domain; declined=cursor-composer; rounds=12; full=1 @ c23fe61
Human-Review-Need: 4 (decisions: tar-stream-hold-layer, grouped-runtime-upgrades) @ c23fe61