fix(deps): update non-major dependencies by renovate[bot] · Pull Request #668 · UI5/typescript

renovate · 2026-10-13T07:10:47Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
@commitlint/cli (source)	`21.2.3` → `21.2.4`	devDependencies	patch
@commitlint/config-conventional (source)	`21.2.3` → `21.2.4`	devDependencies	patch
@microsoft/api-extractor (source)	`7.59.4` → `7.60.1`	devDependencies	minor
@types/lodash (source)	`4.17.25` → `4.17.27`	devDependencies	patch
@types/node (source)	`24.19.1` → `24.19.2`	devDependencies	patch
@typescript-eslint/eslint-plugin (source)	`8.71.1` → `8.72.1`	devDependencies	minor	`8.72.2`
@typescript-eslint/parser (source)	`8.71.1` → `8.72.1`	devDependencies	minor	`8.72.2`
@ui5/cli	`4.0.70` → `4.0.72`	devDependencies	patch	`4.0.73`
@ui5/logger	`4.0.2` → `4.0.3`	dependencies	patch
actions/setup-node	`v7.0.0` → `v7.1.0`	action	minor
argparse	`3.0.2` → `3.0.4`	dependencies	patch
eslint (source)	`10.12.0` → `10.14.0`	devDependencies	minor
github/codeql-action	`v4.38.2` → `v4.39.3`	action	minor
globals	`17.13.0` → `17.14.0`	devDependencies	minor
marked (source)	`18.1.0` → `18.1.3`	dependencies	patch	`18.2.0`
node	`24.21.0` → `24.22.2`	uses-with	minor	`24.22.3`
node	`22.23.3` → `22.23.4`	uses-with	patch	`22.23.5`
npm-run-all2	`9.0.3` → `9.0.4`	devDependencies	patch
pnpm (source)	`12.9.1` → `12.18.0`	packageManager	minor
pnpm/action-setup	`v6.1.0` → `v6.1.1`	action	patch
resolve	`1.22.12` → `1.22.14`	dependencies	patch
semver	`7.8.5` → `7.8.6`	dependencies	patch
ts-jest (source)	`29.4.14` → `29.4.15`	devDependencies	patch
typedoc-plugin-markdown (source)	`4.13.1` → `4.14.1`	dependencies	minor
typescript-eslint (source)	`8.71.1` → `8.72.1`	devDependencies	minor	`8.72.2`
ui5-tooling-transpile (source)	`3.13.1` → `3.14.1`	devDependencies	minor

Release Notes

conventional-changelog/commitlint (@commitlint/cli)

`v21.2.4`

Compare Source

Note: Version bump only for package @commitlint/cli

conventional-changelog/commitlint (@commitlint/config-conventional)

`v21.2.4`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

microsoft/rushstack (@microsoft/api-extractor)

`v7.60.1`

Fri, 30 Oct 2026 21:34:20 GMT

Version update only

`v7.60.0`

Tue, 27 Oct 2026 00:20:25 GMT

Minor changes

Upgrade the bundled compiler engine to TypeScript 6.0.3

typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)

`v8.72.1`

Compare Source

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

❤️ Thank You

Evyatar Daud @StyleShit
Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.72.0`

Compare Source

🚀 Features

eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
eslint-plugin: lazy load rules (#13010)

🩹 Fixes

type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
eslint-plugin: [require-array-sort-compare] check tuples (#13058)
eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

Evyatar Daud @StyleShit
Junichiro Kasuya @jksy
Mitch Fultz @fitchmultz

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.71.2`

Compare Source

🩹 Fixes

eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)

❤️ Thank You

Abraham Guo
Brad Zacher @bradzacher
Josh Goldberg
Vinccool96
Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@typescript-eslint/parser)

`v8.72.1`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.72.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.71.2`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

SAP/ui5-cli (@ui5/cli)

`v4.0.72`

Compare Source

Bug Fixes

Adapt YAML handling for js-yaml v5 4b842bf

Dependency Updates

Bump js-yaml from 4.3.2 to 5.4.3 d3d9d52

`v4.0.71`

Compare Source

[v4.0.71] - 2026-10-09

SAP/ui5-logger (@ui5/logger)

`v4.0.3`

Compare Source

Dependency Updates

Bump uuid and nyc (#577) 591e3f2

actions/setup-node

`v7.1.0`

Compare Source

What's Changed

Enhancements:

Add support for mise.toml file by @gperdomor in #1421
Support absolute paths in node-version-file by @v-mahabaleshwars in #1633

Bug fixes:

Add Node version validation and manifest fetch retry by @v-jitenderpalsingh in #1580

Documentation updates:

README.md: bump actions/checkout to latest version 7 by @deining in #1578
docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @v-gowridurgad in #1593
Fixed cache recommendation syntax by @SubJunk in #1603

Dependency updates:

Update workflow pins and migrate Node matrices to modern versions by @v-HarithaVattikuti in #1583
Upgrade @actions/cache to 6.2.0 by @philip-gai in #1584
Pin @types/node to v24 by @v-priyagupta108 in #1585
Override brace-expansion to 5.0.8 by @v-priyagupta108 with @Copilot in #1599
Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in #1598
Upgrade prettier from 3.8.4 to 3.9.6 by @dependabot in #1590
Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in #1610
Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @dependabot in #1602
Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @dependabot in #1629
Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in #1616
Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in #1615
Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @dependabot in #1631
Upgrade jest-each from 30.4.1 to 30.5.2 by @dependabot in #1636
Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @dependabot in #1638
Update dependencies and add license files by @v-HarithaVattikuti in #1642
Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @dependabot in #1635

New Contributors

@v-jitenderpalsingh made their first contribution in #1580
@philip-gai made their first contribution in #1584
@gperdomor made their first contribution in #1421
@SubJunk made their first contribution in #1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

nodeca/argparse (argparse)

`v3.0.4`

Compare Source

Fixed

Kept UTF-16 surrogate pairs together when wrapping long help text, #195.

`v3.0.3`

Compare Source

Security

Fixed ReDoS in int type conversion. Not critical for typical CLI use:
an attacker with shell access can already run an infinite loop directly.

eslint/eslint (eslint)

`v10.14.0`

Compare Source

Features

d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
9155e14 fix: Update @humanfs/node dependency version (#21434) (Nicholas C. Zakas)
cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
dab466e docs: Update README (GitHub Actions Bot)
97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
7697550 docs: Update README (GitHub Actions Bot)
0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])

`v10.13.0`

Compare Source

Features

48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

4783a68 docs: Update README (GitHub Actions Bot)
43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
47b7063 chore: update dependency @eslint/json to ^2.1.1 (#21398) (renovate[bot])
e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

github/codeql-action

`v4.39.3`

Compare Source

Fixed diff-informed alert filtering incorrectly removing alerts in changed files whose paths contain spaces, special characters, or non-ASCII characters. #4283

`v4.39.2`

Compare Source

Update default CodeQL bundle version to 2.27.4. #4284
Upcoming breaking change: CodeQL version 2.22.3 and earlier were discontinued on 16 October 2026 alongside GitHub Enterprise Server 3.18, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4266
Starting with macOS 27 and Xcode 27, traced analyses are unsupported. See this blog post for more information. The CodeQL Action will now try to identify if a workflow is about to perform a traced analysis on version 27 or above of macOS or Xcode. If so, the CodeQL Action will emit a corresponding warning that will also be visible on the Tool Status Page. This check will be rolled out following this release of the CodeQL Action. #4221
The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable has been removed, as announced in the release notes for CodeQL Action 4.35.2. The analyze Action now warns if this environment variable is set. If you used TRAP cache cleanup to limit Actions cache usage, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #4243

`v4.39.1`

Compare Source

Update default CodeQL bundle version to 2.27.3. #4256

`v4.39.0`

Compare Source

Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #4205
The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #4148
Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #4206
The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #4198

`v4.38.3`

Compare Source

Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188
Update default CodeQL bundle version to 2.27.2. #4203
Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184

sindresorhus/globals (globals)

`v17.14.0`

Compare Source

Update globals (2026-11-01) (#355) 7abfb5d

markedjs/marked (marked)

`v18.1.3`

Compare Source

Bug Fixes

allow trailing tabs after a setext heading underline (#4152) (1f1b480)
avoid quadratic scan for unmatched emphasis delimiters (#4103) (eab1e48), closes #4099
await promise arrays from walkTokens extensions (#4153) (c38704c)
cli: honor defaults and config when outputting tokens (#4146) (9470e8f)
collapse internal whitespace when normalizing link labels (#4157) (02c73e8)
do not allow a blank line inside a link reference definition label (#4165) (f3d21af)
don't treat an escaped ) or quote as an inline link or title closer (#4151) (9cb84e0)
end a list item before a lazy line after an html block (#4159) (7ba42f4)
end blockquote before a lazy line after a table (#4161) (e7dcf52)
isolate extension names from Object.prototype (#4177) (5cb03bd)
keep a block quote open after a lazy line in a nested block quote (#4175) (1d7272f)
only close a code fence with the opening fence character (#4164) (1d4d8fe)
preserve zero-valued custom renderer results (#4162) (e43ceef)
recognize task list items when a tab follows the checkbox (#4163) (64a299d)
start a GFM www autolink only at a word boundary (#4166) (84beefb)

Performance Improvements

fix backtracking in padantic html (#4173) (2d4a23c)

`v18.1.2`

Compare Source

Bug Fixes

allow a tab or end of input after a type 6 html block tag name (#4128) (e09c40d)
apply emphasis flanking and rules 9-10 to the whole delimiter run (#4145) (5d8e234)
cli: await config functions before parsing (#4138) (3a11ad1)
cli: create no-clobber output files atomically (#4135) (e7c4f64)
do not continue a block quote paragraph from a whitespace-only line (#4134) (42f34a8)
expand a tab after the block quote marker to the next tab stop (#4110) (2d3899b)
honor per-call async options when composing hooks (#4139) (379be9d)
keep a line starting with # but no space in the list item ([#4127](

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/non-major-dependencies branch from 36ac2a4 to 88d4619 Compare October 13, 2026 19:35

renovate Bot changed the title ~~chore(deps): update pnpm to v12.10.0~~ chore(deps): update pnpm to v12.10.1 Oct 13, 2026

renovate Bot force-pushed the renovate/non-major-dependencies branch from 88d4619 to 94275a9 Compare October 13, 2026 23:17

renovate Bot changed the title ~~chore(deps): update pnpm to v12.10.1~~ fix(deps): update non-major dependencies Oct 13, 2026

renovate Bot force-pushed the renovate/non-major-dependencies branch 8 times, most recently from a2c77b2 to 7045e69 Compare October 18, 2026 13:46

akudev previously approved these changes Oct 19, 2026

View reviewed changes

renovate Bot force-pushed the renovate/non-major-dependencies branch from 7045e69 to d46b428 Compare October 19, 2026 11:42

renovate Bot dismissed akudev’s stale review via 4799cdf October 20, 2026 04:44

renovate Bot force-pushed the renovate/non-major-dependencies branch 12 times, most recently from 63efb44 to acc7b06 Compare October 26, 2026 20:35

renovate Bot force-pushed the renovate/non-major-dependencies branch 3 times, most recently from fcdcc67 to c3e25e8 Compare October 28, 2026 20:48

renovate Bot force-pushed the renovate/non-major-dependencies branch 8 times, most recently from 61543e2 to d3e93cb Compare November 3, 2026 23:04

renovate Bot force-pushed the renovate/non-major-dependencies branch 9 times, most recently from 512ece3 to ecdf4d1 Compare November 12, 2026 03:11

renovate Bot force-pushed the renovate/non-major-dependencies branch from ecdf4d1 to 9ee0022 Compare November 12, 2026 13:37

fix(deps): update non-major dependencies

2ca09b5

renovate Bot force-pushed the renovate/non-major-dependencies branch from 9ee0022 to 2ca09b5 Compare November 12, 2026 23:02

Navigation Menu

Repository navigation

fix(deps): update non-major dependencies - #668

fix(deps): update non-major dependencies#668
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/non-major-dependencies

renovate Bot commented Oct 13, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Oct 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Minor changes

🩹 Fixes

❤️ Thank You

🚀 Features

🩹 Fixes

❤️ Thank You

🩹 Fixes

❤️ Thank You

Bug Fixes

Dependency Updates

[v4.0.71] - 2026-10-09

Dependency Updates

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Fixed

Security

Features

Bug Fixes

Documentation

Chores

Features

Bug Fixes

Documentation

Chores

Bug Fixes

Performance Improvements

Bug Fixes

Configuration

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Oct 13, 2026 •

edited

Loading