Update all dependencies by renovate[bot] · Pull Request #82 · nbe95/KeinPlan

renovate · 2026-08-17T10:51:20Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@fortawesome/fontawesome-svg-core (source)	`^6.5.1` → `^7.0.0`	dependencies	major
@fortawesome/free-brands-svg-icons (source)	`^6.5.1` → `^7.0.0`	dependencies	major
@fortawesome/free-solid-svg-icons (source)	`^6.5.1` → `^7.0.0`	dependencies	major
@tanstack/react-query (source)	`5.102.6` → `5.102.8`	dependencies	patch
@tanstack/react-query-devtools (source)	`5.102.1` → `5.102.8`	dependencies	patch
@types/node (source)	`26.2.0` → `26.4.0`	devDependencies	minor
actions/checkout	`v4` → `v7`	action	major
actions/setup-node	`v4` → `v7`	action	major
axios (source)	`1.19.0` → `1.20.0`	dependencies	minor
cypress-io/github-action	`v6` → `v7.4.3`	action	major
docker/build-push-action	`v5` → `v7`	action	major
docker/login-action	`v3` → `v4`	action	major
docker/setup-buildx-action	`v3` → `v4`	action	major
filesize (source)	`^10.1.2` → `^11.0.0`	dependencies	major
jefflinse/pr-semver-bump	`v1.7.0` → `v1.7.4`	action	patch
next (source)	`16.3.2` → `16.3.3`	dependencies	patch
node (source)	`24.13-slim` → `24.20-slim`	final	minor
node (source)	`24.13-slim` → `24.20-slim`	stage	minor
pdm-project/setup-pdm	`v3` → `v4`	action	major
react-cookie (source)	`^7.1.4` → `^8.0.0`	dependencies	major
react-router (source)	`8.3.0` → `8.3.1`	dependencies	patch
react-toastify	`^10.0.5` → `^11.0.0`	dependencies	major

Release Notes

FortAwesome/Font-Awesome (@fortawesome/fontawesome-svg-core)

TanStack/query (@tanstack/react-query)

`v5.102.8`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-core@5.102.8

`v5.102.7`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-core@5.102.7

TanStack/query (@tanstack/react-query-devtools)

`v5.102.8`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-devtools@5.102.8
- @tanstack/react-query@5.102.8

`v5.102.7`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-devtools@5.102.7
- @tanstack/react-query@5.102.7

`v5.102.6`

Compare Source

Patch Changes

Updated dependencies [ac2b612]:
- @tanstack/react-query@5.102.6
- @tanstack/query-devtools@5.102.6

`v5.102.5`

Compare Source

Patch Changes

Updated dependencies [ef1eff1]:
- @tanstack/query-devtools@5.102.5
- @tanstack/react-query@5.102.5

`v5.102.4`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-devtools@5.102.4
- @tanstack/react-query@5.102.4

`v5.102.3`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-devtools@5.102.3
- @tanstack/react-query@5.102.3

`v5.102.2`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-devtools@5.102.2
- @tanstack/react-query@5.102.2

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.1.0`

Compare Source

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v5.1.0`

Compare Source

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v5.0.0`

Compare Source

Update actions checkout to use node 24 by @salmanmkc in #2226

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

`v6.4.0`

Compare Source

What's Changed

Dependency updates:

Upgrade @actions dependencies by @Copilot in #1525
Update Node.js versions in versions.yml and bump package to v6.4.0 by @priya-kinthali in #1533

New Contributors

@Copilot made their first contribution in #1525

Full Changelog: actions/setup-node@v6...v6.4.0

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Documentation

Documentation update related to absence of Lockfile by @mahabaleshwars in #1454
Correct mirror option typos by @MikeMcC399 in #1442
Readme update on checkout version v6 by @deining in #1446
Readme typo fixes @munyari in #1226
Advanced document update on checkout version v6 by @aparnajyothi-y in #1468

Dependency updates:

Upgrade @actions/cache to v5.0.1 by @salmanmkc in #1449

New Contributors

@mahabaleshwars made their first contribution in #1454
@MikeMcC399 made their first contribution in #1442
@deining made their first contribution in #1446
@munyari made their first contribution in #1226

Full Changelog: actions/setup-node@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

axios/axios (axios)

`v1.20.0`

Compare Source

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)
Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)
XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)
Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)
Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#11096)

🔧 Maintenance & Chores

Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (#11092, #11098, #11099, #11106, #11107, #11122, #11123, #11126, #11127, #11133, #11140, #11143, #11144)
Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (#11101, #11113, #11097, #11119)
Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (#11124, #11136, #11137)
CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (#11128, #11152)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog (axios/axios@v1.19.0...v1.20.0)

cypress-io/github-action (cypress-io/github-action)

`v7.4.3`

Compare Source

Bug Fixes

deps: update @vercel/ncc to 0.45.0 (#1865) (0909094)

`v7.4.2`

Compare Source

Bug Fixes

deps: execute npm audit fix (#1857) (c32f127)

`v7.4.1`

Compare Source

Bug Fixes

deps: update transient dependency to undici 6.27.0 (#1807) (fa4a118)

`v7.4.0`

Compare Source

Features

deps: remove Node.js 25 (#1781) (948d67d)

`v7.3.0`

Compare Source

Features

add expose input for Cypress.expose() API (#1749) (dace029)

`v7.2.0`

Compare Source

Features

deps: remove Node.js 20 (#1747) (b7a7441)

`v7.1.10`

Compare Source

Bug Fixes

deps: update fast-xml-parser to 5.7.1 (#1737) (c495c3d)

`v7.1.9`

Compare Source

Bug Fixes

deps: update vulnerable transient dependencies (#1714) (783cb3f)

`v7.1.8`

Compare Source

Bug Fixes

deps: update fast-xml-parser to 5.5.7 (#1703) (4c06c48)

`v7.1.7`

Compare Source

Bug Fixes

update fast-xml-parser to 5.5.6 (#1688) (ed2d88c)

`v7.1.6`

Compare Source

Bug Fixes

deps: update transient dependencies flatted & undici (#1683) (8248214)

`v7.1.5`

Compare Source

Bug Fixes

update fast-xml-parser to 5.4.1 (#1667) (bc22e01)

`v7.1.4`

Compare Source

Bug Fixes

update minimatch to 3.1.5 (#1665) (f9ffb60)

`v7.1.3`

Compare Source

Bug Fixes

deps: update fast-xml-parser to 5.3.6 (#1656) (e44ee0f)

`v7.1.2`

Compare Source

Bug Fixes

deps: update fast-xml-parser to 5.3.4 (#1648) (9992daa)

`v7.1.1`

Compare Source

Bug Fixes

deps: update @actions/* (#1645) (0f330eb)

`v7.1.0`

Compare Source

`v7.0.0`

Compare Source

Features

deps: update action from node20 to node24 (#1639) (dca9861)

BREAKING CHANGES

deps: Update action from node20 to node24
cypress-io/github-action@v6, using node20, is deprecated

docker/build-push-action (docker/build-push-action)

`v7.3.0`

Compare Source

`v7.2.0`

Compare Source

Bump @actions/core from 3.0.0 to 3.0.1 in #1525
Bump @docker/actions-toolkit from 0.87.0 to 0.90.0 in #1517
Bump brace-expansion from 2.0.2 to 5.0.6 in #1534
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #1529
Bump fast-xml-parser from 5.5.7 to 5.8.0 in #1521
Bump postcss from 8.5.6 to 8.5.10 in #1526
Bump tar from 6.2.1 to 7.5.15 in #1533

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

`v7.1.0`

Compare Source

Git context query format support by @crazy-max in #1505
Bump @docker/actions-toolkit from 0.79.0 to 0.87.0 by @crazy-max in #1505
Bump brace-expansion from 1.1.12 to 1.1.13 in #1500
Bump fast-xml-parser from 5.4.2 to 5.5.7 in #1489
Bump flatted from 3.3.3 to 3.4.2 in #1491
Bump glob from 10.3.12 to 10.5.0 in #1490
Bump handlebars from 4.7.8 to 4.7.9 in #1497
Bump lodash from 4.17.23 to 4.18.1 in #1510
Bump picomatch from 4.0.3 to 4.0.4 in #1496
Bump undici from 6.23.0 to 6.24.1 in #1486
Bump vite from 7.3.1 to 7.3.2 in #1509

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

`v7.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #1470
Remove deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS envs by @crazy-max in #1473
Remove legacy export-build tool support for build summary by @crazy-max in #1474
Switch to ESM and update config/test wiring by @crazy-max in #1466
Bump @actions/core from 1.11.1 to 3.0.0 in #1454
Bump @docker/actions-toolkit from 0.62.1 to 0.79.0 in #1453 #1472 #1479
Bump minimatch from 3.1.2 to 3.1.5 in #1463

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

`v6.19.2`

Compare Source

Preserve port in GIT_AUTH_TOKEN host by @crazy-max in #1458

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

`v6.19.1`

Compare Source

Derive GIT_AUTH_TOKEN host from GitHub server URL by @crazy-max in #1456

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

`v6.19.0`

Compare Source

Scope default git auth token to github.com by @crazy-max in #1451
Bump brace-expansion from 1.1.11 to 1.1.12 in #1396
Bump form-data from 2.5.1 to 2.5.5 in #1391
Bump js-yaml from 3.14.1 to 3.14.2 in #1429
Bump lodash from 4.17.21 to 4.17.23 in #1446
Bump tmp from 0.2.3 to 0.2.4 in #1398
Bump undici from 5.28.4 to 5.29.0 in #1397

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

`v6.18.0`

Compare Source

Bump @docker/actions-toolkit from 0.61.0 to 0.62.1 in #1381

[!NOTE]
[Build summary](https://docs.docker.com

✂ Note

PR body was truncated to here.

renovate Bot added the patch Patch release label Aug 17, 2026

renovate Bot assigned nbe95 Aug 17, 2026

nbe95 changed the title ~~Update all dependencies~~ rebase! Update all dependencies Aug 17, 2026

renovate Bot force-pushed the renovate/all branch from 049f4b1 to b47e79e Compare August 17, 2026 11:19

renovate Bot changed the title ~~rebase! Update all dependencies~~ Update all dependencies Aug 17, 2026

nbe95 changed the title ~~Update all dependencies~~ rebase! Update all dependencies Aug 18, 2026

renovate Bot force-pushed the renovate/all branch from c249cd6 to a123f69 Compare August 18, 2026 18:10

renovate Bot changed the title ~~rebase! Update all dependencies~~ Update all dependencies Aug 18, 2026

renovate Bot force-pushed the renovate/all branch from a123f69 to 4b65d90 Compare August 23, 2026 03:52

nbe95 changed the title ~~Update all dependencies~~ rebase! Update all dependencies Aug 27, 2026

renovate Bot force-pushed the renovate/all branch from b35434c to 1462791 Compare August 27, 2026 08:18

renovate Bot changed the title ~~rebase! Update all dependencies~~ Update all dependencies Aug 27, 2026

renovate Bot deployed to testing August 27, 2026 08:20 Active

renovate Bot deployed to testing August 27, 2026 08:24 Active

Update all dependencies

b9ad4b4

renovate Bot force-pushed the renovate/all branch from 1462791 to b9ad4b4 Compare August 30, 2026 11:59

renovate Bot deployed to testing August 30, 2026 12:01 Active

renovate Bot deployed to testing August 30, 2026 12:05 Active

Navigation Menu

Update all dependencies - #82

Update all dependencies#82
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

renovate Bot commented Aug 17, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

What's Changed

What's Changed

Dependency updates:

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

Documentation

Dependency updates:

New Contributors

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

v1.20.0 — August 19, 2026

⚠️ Breaking Changes & Deprecations

🔒 Security Fixes

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

Bug Fixes

Bug Fixes

Bug Fixes

Features

Features

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

BREAKING CHANGES

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Aug 17, 2026 •

edited

Loading