chore: Update all non-major dependencies (v3.x.x)#4596
Merged
pavel-jares-bcm merged 2 commits intov3.x.xfrom May 4, 2026
Merged
chore: Update all non-major dependencies (v3.x.x)#4596pavel-jares-bcm merged 2 commits intov3.x.xfrom
pavel-jares-bcm merged 2 commits intov3.x.xfrom
Conversation
github-project-automation
Bot
moved this to New
in API Mediation Layer Backlog Management
zowe-robot
force-pushed
the
renovate/v3.x.x-all-minor-patch
branch
2 times, most recently
from
74bc83c to
48161ec
Compare
balhar-jakub
moved this from New
to In Progress
in API Mediation Layer Backlog Management
zowe-robot
force-pushed
the
renovate/v3.x.x-all-minor-patch
branch
3 times, most recently
from
9da92c2 to
5a587b5
Compare
Signed-off-by: Renovate Bot <renovate@whitesourcesoftware.com>
zowe-robot
force-pushed
the
renovate/v3.x.x-all-minor-patch
branch
from
5a587b5 to
5112097
Compare
pavel-jares-bcm
approved these changes
May 4, 2026
Signed-off-by: Pavel Jareš <Pavel.Jares@broadcom.com>
|
github-project-automation
Bot
moved this from In Progress
to Done
in API Mediation Layer Backlog Management
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
7.29.2→7.29.32.0.6→2.0.78.59.0→8.59.18.59.0→8.59.18.31.5→8.32.08.31.5→8.32.08.31.5→8.32.08.31.5→8.32.08.18.0→8.20.01.15.2→1.16.01.0.30001790→1.0.3000179115.14.1→15.14.25.7.1→5.7.2v0.150.0→v0.151.07.73.1→7.75.05.32.4→5.32.51.10.3→2.8.42.8.3→2.8.41.80.0→1.81.04.10.21→4.10.224.10.21→4.10.222.1.40→2.1.412.2.48→2.2.492.2.48→2.2.492.2.48→2.2.491.14.3→1.14.41.14.3→1.14.41.14.3→1.14.45.14.3→5.14.42.14.1→2.14.22.21.2→2.21.32.21.2→2.21.32.21.2→2.21.316.1.3→16.1.416.1.3→16.1.416.1.3→16.1.416.1.3→16.1.43.2.3→3.2.41.4.10→1.4.111.4.10→1.4.111.4.10→1.4.11Release Notes
babel/babel (@babel/preset-env)
v7.29.3Compare Source
v7.29.3 (2026-04-30)
👓 Spec Compliance
babel-parser🐛 Bug Fix
babel-helper-create-class-features-plugin,babel-plugin-proposal-decoratorsbabel-register@babel/register(@liuxingbaoyu)babel-compat-data,babel-plugin-bugfix-safari-rest-destructuring-rhs-array,babel-preset-env💅 Polish
babel-parser📝 Documentation
🏃♀️ Performance
babel-helper-import-to-platform-api,babel-plugin-proposal-import-wasm-source,babel-plugin-transform-json-modulesCommitters: 4
eslint/rewrite (@eslint/migrate-config)
v2.0.7Compare Source
Bug Fixes
espreeto the latest (#437) (a8ff72f)typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v8.59.1Compare Source
🩹 Fixes
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v8.59.1Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
zowe/zowe-cli (@zowe/cli)
v8.32.0Compare Source
Zowe CLI
certAccountoption to z/OSMF profile type to support client certificate authentication using certificates stored in system keystores (macOS Keychain or Windows Certificate Store). This enables secure authentication with both exportable and non-exportable private keys on macOS and Windows platforms. #2325zowe zos-files upload file-to-usscommand to support uploading a file to a USS directory using its original filename when the target is a directory (similar to UNIX cp) and added the--make-directoriesoption to automatically create missing target directories and the--skip-directory-checkoption to skip checking if the target path is a directory during upload. #2686Core SDK
certAccountoption to base profile options to support client certificate authentication using certificates stored in system keystores on macOS and Windows platforms. #2325Imperative
certAccountprofile property to specify certificate subject name for authentication. Implemented cross-platform native HTTPS clients (macOS and Windows) that support certificate-based authentication with both exportable and non-exportable private keys. UpdatedAbstractRestClientto use native HTTPS clients whencertAccountis specified on macOS or Windows platforms. #2325z/OS Files SDK
abortDownloadpredicate toIDownloadOptionsto allow downloads inallMembers,allDataSetsandussDirfunctions to be cancelled mid-way. #2715Upload.fileToUssFilemethod to support uploading a file to a USS directory using its original filename when the target is a directory (similar to UNIX cp) and added themakeDirectoriesoption to automatically create missing target directories and theskipDirectoryCheckoption to skip checking if the target path is a directory during upload. #2686Secrets SDK
z/OSMF SDK
certAccountoption to z/OSMF connection options to support client certificate authentication using certificates stored in system keystores on macOS and Windows platforms.ZosmfChangePassword.changePasswordfunction which allows changing the z/OSMF password or passphrase. #2703CLI Test Utils
uuiddependency for technical currency. #2720ajv-validator/ajv (ajv)
v8.20.0Compare Source
What's Changed
Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0
axios/axios (axios)
v1.16.0Compare Source
v1.16.0 — May 2, 2026
This release adds support for the QUERY HTTP method and a new
ECONNREFUSEDerror constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:
maxBodyLengthandmaxContentLength. These limits were silently ignored on the fetch adapter prior to 1.16.0 — anyone relying on them as a safety net (DoS protection, accidental large uploads) had no protection. (#10795)Hostheaders. Previously, the proxy path could overwrite a customHost. Virtual-host-style routing through a proxy will now behave correctly. (#10822)https://user:p%40ss@host), the decoded value is what now goes on the wire. (#10825)parseProtocolnow strictly requires a colon in the protocol separator. Strings that loosely parsed as protocols before may no longer match. (#10729)unescape()replaced with modern UTF-8 encoding. Non-ASCII URL handling is now spec-correct; consumers depending on legacyunescape()quirks may see different output bytes. (#7378)transformRequestinput typing change was reverted. The typing change introduced in #10745 was reverted in #10810 after follow-up review — net behavior is unchanged from 1.15.2. (#10745, #10810)🚀 New Features
ECONNREFUSEDas a constant onAxiosErrorso callers can match connection-refused failures without comparing string literals (closes #6485). (#10680)encodehelper frombuildURLso userland param serializers can reuse the same encoding logic that axios uses internally. (#6897)🐛 Bug Fixes
requestDetailsargument onbeforeRedirect, preserved user-suppliedHostheaders when forwarding through a proxy, and properly URL-decoded basic auth credentials. (#10794, #10800, #6241, #10822, #10825)AxiosErrorwhen a stream is aborted after headers arrive, honoured thetimeoutoption during the connect phase when redirects are disabled, and resolved an unsettled-promise hang when an aborted request was combined with compression andmaxRedirects: 0. (#10708, #10819, #7149)maxBodyLength/maxContentLengthin the fetch adapter, set theUser-Agentheader to match the HTTP adapter, preserved the original abort reason instead of replacing it with a generic error, and deferred global access so importing the module no longer throws aTypeErrorin restricted environments. (#10795, #10772, #10806, #7260)cancelTokenandAbortSignallisteners on the error, timeout, and abort code paths to prevent leaked subscriptions. (#10787)AxiosErrorwhenJSON.parsefails insidedispatchRequest, preventedsettlefrom emittingundefinederror codes, and tightened theparseProtocolregex to require a colon in the protocol separator. (#10724, #7276, #10729)CancelTokentypings with the ESM build, fixed a compiler error caused byRawAxiosHeaders, and re-exportedcreatefrom the package index. (#7414, #6389, #6460)unescape()call with a modern UTF-8 encoding implementation. (#7378)🔧 Maintenance & Chores
utilsmodule and XHR adapter to use ES6 features, and tidied the multipart boundary error message. (#10588, #7419)FormDataEPIPE failures, fixed Win32 platform support for the pipe tests, and corrected an incorrect test assumption. (#10820, #10791, #10796)paramsSerializer.encodefor strict RFC 3986 query encoding, updated theparseReviverTypeScript definitions and configuration docs for ES2023, added timeout guidance to the README's first async example, and expanded notes around the recent type changes. (#10821, #10782, #10759, #10804)transformRequestinput typing change from #10745 after follow-up review. (#10745, #10810)actions/setup-node, thegithub-actionsgroup, andpostcss(in/docs) to their latest versions. (#10785, #10813, #10814)🌟 New Contributors
We are thrilled to welcome our new contributors. Thank you for helping improve axios:
Full Changelog
browserslist/caniuse-lite (caniuse-lite)
v1.0.30001791Compare Source
cypress-io/cypress (cypress)
v15.14.2Compare Source
Changelog: https://docs.cypress.io/app/references/changelog#15-14-2
NaturalIntelligence/fast-xml-parser (fast-xml-parser)
v5.7.2: backward compatibility for numerical external entity, fix #705, #817Compare Source
react-hook-form/react-hook-form (react-hook-form)
v7.75.0Compare Source
Added
getDirtyFieldsto prune empty fieldsFixed
setValuesinFormProvidercontext valueuseWatchre-render when unrelated field validation occursisDirtyafter re-registering a previously unregistered fieldv7.74.0Compare Source
Added
setValuesAPIFixed
useControllername changesNaNas empty whenvalueAsNumberistrueinvalidateFieldswagger-api/swagger-ui (swagger-ui-react)
v5.32.5Compare Source
Bug Fixes
Reverts
eemeli/yaml (yaml)
v2.8.4Compare Source
maxAliasCount:0(#677)e1a1a77)minFractionDigitsonly to decimal strings (#676)grpc/grpc-java (io.grpc:grpc-stub)
v1.81.0In this release we drop support for Android API level 22 or lower (Lollipop or earlier), following Google Play Service’s discontinued updates for Lollipop (API levels 21 & 22) and now requires a minimum of API level 23 (Android 6.0 Marshmallow).
API Changes
Behavior Changes
0675f70). DnsNameResolver ignores re-resolution requests on OpenJDK-like platforms if it has been too soon since the last DNS query because InetAddress.getAllByName() has a cache with a fixed entry lifetime, but this logic was disabled for Android which does not have that style of cache. Android’s cache uses the result TTL, which will rarely be less than 30 seconds. This change would probably be most noticeable when 1) changing to a different network (e.g., from wifi to mobile), 2) the server has different addresses for different networks, and 3) the app is not using AndroidChannelBuilder with anandroid.context.Context. For reference, it seems Chrome caches for 1 minuteBug Fixes
ManagedChannelOrphanWrappercould incorrectly log a "not shutdown properly" warning during garbage collection when using directExecutor(). (#12705) (d459338)typeUrl. (#12740) (eac9fe9)backend_service. This ensures xDS load balancing metrics are reported accurately. (#12735)New Features
0e39b29). This CallOption is copied by grpc-opentelemetry to thegrpc.client.call.customlabel as defined by gRFC A108. See also the gRPC OpenTelemetry Metrics guide (update in-progress)AdvancedTlsX509KeyManagerso that developers can now preserve and use key aliases when dynamically reloading TLS certificates. (#12686)Documentation
a3a9ffc) (#12726) (65ae2ef)3ed732f)Dependencies
16e17ab). Google-auth-library: 1.42.1, animal-sniffer: 1.27, assertj-core:3.27.7, error_prone_annotations:2.48.0, proto-google-common-protos:2.64.1, google-cloud-logging:3.23.10, jetty-http2-server:12.1.7, jetty-ee10-servlet:12.1.7, lincheck:3.4, opentelemetry-api:1.60.1, opentelemetry-exporter-prometheus:1.60.1-alpha, opentelemetry-gcp-resources:1.54.0-alpha, opentelemetry-sdk-extension-autoconfigure:1.60.1, opentelemetry-sdk-testing:1.60.1, robolectric:4.16.1, tomcat-embed-core:10.1.52, tomcat-embed-core9: 9.0.115,1528f80)Thanks to
micronaut-projects/micronaut-core (io.micronaut:micronaut-core-bom)
v4.10.22: Micronaut Core 4.10.22What's Changed
Security 👮🏻♂️🚨
This release contains fixes for these two security advisories:
*Unbounded
formattersCacheinTimeConverterRegistrarAllows Memory Exhaustion viaAccept-LanguageHeader*Unbounded
bundleCacheinResourceBundleMessageSourceAllows Memory Exhaustion viaAccept-LanguageHeaderOther Changes 💡
New Contributors
Full Changelog: micronaut-projects/micronaut-core@v4.10.21...v4.10.22
swagger-api/swagger-parser (io.swagger.parser.v3:swagger-parser-v3)
v2.1.41: Swagger-parser 2.1.41 released!StackOverflowErrorinResolverFully(#2297)swagger-api/swagger-core (io.swagger.core.v3:swagger-models)
v2.2.49: Swagger-core 2.2.49 released!JodaOrg/joda-time (joda-time:joda-time)
✂ Note
PR body was truncated to here.
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.