build: update all non-major dependencies - #3917
Conversation
angular-robot
added
action: merge
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates several dependencies across the workspace, including upgrades to renovate, firebase-tools, selenium-webdriver, magic-string, @puppeteer/browsers, @google/genai, @conventional-changelog/git-client, and tsx. Feedback is provided regarding a transitive dependency, @xmldom/xmldom@0.8.13, which is marked as deprecated due to critical issues; it is recommended to override this package to a secure version (>=0.8.14) in the root package.json using pnpm.overrides.
| '@xmldom/xmldom@0.8.13': | ||
| resolution: {integrity: sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==} | ||
| engines: {node: '>=10.0.0'} | ||
| deprecated: this version has critical issues, please update to the latest version |
There was a problem hiding this comment.
A transitive dependency, @xmldom/xmldom@0.8.13, is marked as deprecated due to "critical issues". This poses a significant security risk and should be addressed immediately.
This package is a dependency of google-auth-library, which in turn is used by firebase-tools.
You can mitigate this by overriding the package version in your root package.json using pnpm.overrides. I recommend updating to the latest secure version.
Here's an example of how to add the override:
"pnpm": {
"overrides": {
"@xmldom/xmldom": ">=0.8.14"
}
}After adding this, please run pnpm install to apply the change and update pnpm-lock.yaml.
71c7131 to
fa1ac5f
Compare
See associated pull request for more information.
fa1ac5f to
c9bbb9d
Compare
|
This PR was merged into the repository. The changes were merged into the following branches:
|
2 participants
This PR contains the following updates:
3.1.0→3.1.22.15.0→2.17.03.1.0→3.2.015.25.1→15.26.04.14.1→4.14.21.1.0→1.2.044.13.1→44.27.04.46.0→4.47.04.23.7→4.23.12Release Notes
conventional-changelog/conventional-changelog (@conventional-changelog/git-client)
v3.1.2Bug Fixes
v3.1.1Bug Fixes
googleapis/js-genai (@google/genai)
v2.17.0Compare Source
Features
v2.16.0Compare Source
Features
Bug Fixes
puppeteer/puppeteer (@puppeteer/browsers)
v3.2.0Compare Source
♻️ Chores
Dependencies
🎉 Features
🛠️ Fixes
🏗️ Refactor
firebase/firebase-tools (firebase-tools)
v15.26.0Compare Source
firebase login --non-interactive, navigate to the printed link to get an authorization code, and complete the login by runningfirebase login <auth_code>.apps:initwritinggoogle-services.jsonto anapp/apppath when the Android module has nosrcdirectory, by detecting the module from the directory basename instead of the first path segment (#10863).firestore:locationsfailing with anullproject error when run without an active project (#10881).crashlytics:onboard:webCLI command to support Crashlytics onboarding for web apps.hiddensource map support tocrashlytics:sourcemap:upload.appcheck:services:list,appcheck:services:getandappcheck:services:setto read and change App Check enforcement per service.privatenumber/get-tsconfig (get-tsconfig)
v4.14.2Compare Source
Bug Fixes
Rich-Harris/magic-string (magic-string)
v1.2.0Compare Source
Features
1.1.1 (2026-08-12)
Bug Fixes
v1.1.1Compare Source
Features
1.1.1 (2026-08-12)
Bug Fixes
renovatebot/renovate (renovate)
v44.27.0Compare Source
Features
Miscellaneous Chores
v44.26.3Compare Source
Bug Fixes
Tests
v44.26.0Compare Source
Features
Code Refactoring
v44.25.0Compare Source
Features
v44.24.4Compare Source
Bug Fixes
Build System
v44.24.3Compare Source
Bug Fixes
Miscellaneous Chores
v44.24.2Compare Source
Bug Fixes
v44.24.1Compare Source
Bug Fixes
Miscellaneous Chores
v44.24.0Compare Source
Features
Documentation
Miscellaneous Chores
Code Refactoring
v44.23.3Compare Source
Bug Fixes
v44.23.2Compare Source
Bug Fixes
v44.23.1Compare Source
Bug Fixes
v44.23.0Compare Source
Features
v44.22.0Compare Source
Features
v44.21.0Compare Source
Features
v44.20.1Compare Source
Bug Fixes
Miscellaneous Chores
v44.20.0Compare Source
Features
ghtool (#45192) (4537247), closes #44753 #45190Documentation
Code Refactoring
v44.19.0Compare Source
Features
v44.18.0Compare Source
Features
Miscellaneous Chores
v44.17.5Compare Source
Bug Fixes
v44.17.4Compare Source
Bug Fixes
v44.17.3Compare Source
Bug Fixes
v44.17.2Compare Source
Bug Fixes
Documentation
3a9d2dd(main) (#45179) (5ca534a)Miscellaneous Chores
v44.17.1Compare Source
Bug Fixes
Miscellaneous Chores
v44.17.0Compare Source
Features
Miscellaneous Chores
v44.16.1Compare Source
Bug Fixes
v44.16.0Compare Source
Features
Miscellaneous Chores
v44.15.0Compare Source
Features
v44.14.12Compare Source
Bug Fixes
Miscellaneous Chores
v44.14.10Compare Source
Bug Fixes
Miscellaneous Chores
v44.14.9Compare Source
Bug Fixes
Miscellaneous Chores
v44.14.8Compare Source
Bug Fixes
Miscellaneous Chores
Code Refactoring
getToolSettingsOptionsstricter (#45133) (c92c7e2)v44.14.7Compare Source
Bug Fixes
bashcommand (b017c75)Miscellaneous Chores
no-unquoted-exec-interpolationlinting rule (e510b9a)Code Refactoring
v44.14.6Compare Source
Bug Fixes
Documentation
Miscellaneous Chores
Code Refactoring
ToolSettingshas two levels of config (#45125) (a28ecdc)v44.14.5Compare Source
Bug Fixes
Miscellaneous Chores
v44.14.4Compare Source
Bug Fixes
HTTP_PROXYvariable(s) in logs (#45117) (f88212b)Miscellaneous Chores
v44.14.3Compare Source
Bug Fixes
COREPACK_NPM_{TOKEN,PASSWORD}in logs (#45116) (244bfe1)v44.14.2Compare Source
Bug Fixes
Miscellaneous Chores
shell: trueusage (#45110) (52ff375)flux install(#45109) (a36eed3)v44.14.1Compare Source
Bug Fixes
v44.14.0Compare Source
Features
pnpm/setup(#45094) (fa17e59)Miscellaneous Chores
v44.13.3Compare Source
Bug Fixes
Miscellaneous Chores
Continuous Integration
pnpm/setup(#45035) (144ba37)v44.13.2Compare Source
Build System
SeleniumHQ/selenium (selenium-webdriver)
v4.47.0Compare Source
privatenumber/tsx (tsx)
v4.23.12Compare Source
Bug Fixes
import.metawhen tokens are split by comments or newlines (#829) (ed9d330), closes #828This release is also available on:
v4.23.11Compare Source
Bug Fixes
This release is also available on:
v4.23.10Compare Source
Bug Fixes
This release is also available on:
v4.23.9Compare Source
Bug Fixes
This release is also available on:
v4.23.8Compare Source
Bug Fixes
This release is also available on: