t.behrendt/conventional-semantic-git-tag-increment
1
0
Fork 0
Code Issues 1 Pull Requests 3 Actions Releases Activity

chore(deps): update dependencies (non-major) #56

Merged
t.behrendt merged 1 commits from renovate/dependencies-(non-major) into main 2026-02-16 13:49:12 +01:00
Conversation 1 Commits 1 Files Changed 3 +116 -116
renovate-bot commented 2026-02-08 18:19:56 +01:00
Collaborator
Copy Link

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@types/node (source) 24.10.10 → 24.10.12 age confidence devDependencies patch 24.10.13
esbuild 0.27.2 → 0.27.3 age confidence devDependencies patch
https://gitea.t000-n.de/t.behrendt/trivy-actions 1.3.1 → 1.3.2 age confidence action patch 1.4.1 (+6)

Release Notes

evanw/esbuild (esbuild)

v0.27.3

Compare Source

  • Preserve URL fragments in data URLs (#​4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
<html>
  <head><link rel="stylesheet" href="icons.css"></head>
  <body><div class="triangle"></div></body>
</html>

    • icons.css:

      .triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url(./triangle.svg#x);
}

    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
  <defs>
    <clipPath id="x">
      <path d="M0 0H10V10Z"/>
    </clipPath>
  </defs>
</svg>

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
.triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
}

  • Parse and print CSS @scope rules (#​4322)

    This release includes dedicated support for parsing @scope rules in CSS. These rules include optional "start" and "end" selector lists. One important consequence of this is that the local/global status of names in selector lists is now respected, which improves the correctness of esbuild's support for CSS modules. Minification of selectors inside @scope rules has also improved slightly.

    Here's an example:

    /* Original code */
@&#8203;scope (:global(.foo)) to (:local(.bar)) {
  .bar {
    color: red;
  }
}

/* Old output (with --loader=local-css --minify) */
@&#8203;scope (:global(.foo)) to (:local(.bar)){.o{color:red}}

/* New output (with --loader=local-css --minify) */
@&#8203;scope(.foo)to (.o){.o{color:red}}

  • Fix a minification bug with lowering of for await (#​4378, #​4385)

    This release fixes a bug where the minifier would incorrectly strip the variable in the automatically-generated catch clause of lowered for await loops. The code that generated the loop previously failed to mark the internal variable references as used.

  • Update the Go compiler from v1.25.5 to v1.25.7 (#​4383, #​4388)

    This PR was contributed by @​MikeWillCook.

t.behrendt/trivy-actions (https://gitea.t000-n.de/t.behrendt/trivy-actions)

v1.3.2

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | Type | Update | Pending | |---|---|---|---|---|---|---| | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node) ([source](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)) | [`24.10.10` → `24.10.12`](https://renovatebot.com/diffs/npm/@types%2fnode/24.10.10/24.10.12) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fnode/24.10.12?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fnode/24.10.10/24.10.12?slim=true) | devDependencies | patch | `24.10.13` | | [esbuild](https://github.com/evanw/esbuild) | [`0.27.2` → `0.27.3`](https://renovatebot.com/diffs/npm/esbuild/0.27.2/0.27.3) | ![age](https://developer.mend.io/api/mc/badges/age/npm/esbuild/0.27.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/esbuild/0.27.2/0.27.3?slim=true) | devDependencies | patch | | | [https://gitea.t000-n.de/t.behrendt/trivy-actions](https://gitea.t000-n.de/t.behrendt/trivy-actions) | `1.3.1` → `1.3.2` | ![age](https://developer.mend.io/api/mc/badges/age/gitea-tags/t.behrendt%2ftrivy-actions/1.3.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/gitea-tags/t.behrendt%2ftrivy-actions/1.3.1/1.3.2?slim=true) | action | patch | `1.4.1` (+6) | --- ### Release Notes <details> <summary>evanw/esbuild (esbuild)</summary> ### [`v0.27.3`](https://github.com/evanw/esbuild/blob/HEAD/CHANGELOG.md#0273) [Compare Source](https://github.com/evanw/esbuild/compare/v0.27.2...v0.27.3) - Preserve URL fragments in data URLs ([#&#8203;4370](https://github.com/evanw/esbuild/issues/4370)) Consider the following HTML, CSS, and SVG: - `index.html`: ```html <!DOCTYPE html> <html> <head><link rel="stylesheet" href="icons.css"></head> <body><div class="triangle"></div></body> </html> ``` - `icons.css`: ```css .triangle { width: 10px; height: 10px; background: currentColor; clip-path: url(./triangle.svg#x); } ``` - `triangle.svg`: ```xml <svg xmlns="http://www.w3.org/2000/svg"> <defs> <clipPath id="x"> <path d="M0 0H10V10Z"/> </clipPath> </defs> </svg> ``` The CSS uses a URL fragment (the `#x`) to reference the `clipPath` element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the `dataurl` loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS: ```css /* icons.css */ .triangle { width: 10px; height: 10px; background: currentColor; clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x'); } ``` - Parse and print CSS `@scope` rules ([#&#8203;4322](https://github.com/evanw/esbuild/issues/4322)) This release includes dedicated support for parsing `@scope` rules in CSS. These rules include optional "start" and "end" selector lists. One important consequence of this is that the local/global status of names in selector lists is now respected, which improves the correctness of esbuild's support for [CSS modules](https://esbuild.github.io/content-types/#local-css). Minification of selectors inside `@scope` rules has also improved slightly. Here's an example: ```css /* Original code */ @&#8203;scope (:global(.foo)) to (:local(.bar)) { .bar { color: red; } } /* Old output (with --loader=local-css --minify) */ @&#8203;scope (:global(.foo)) to (:local(.bar)){.o{color:red}} /* New output (with --loader=local-css --minify) */ @&#8203;scope(.foo)to (.o){.o{color:red}} ``` - Fix a minification bug with lowering of `for await` ([#&#8203;4378](https://github.com/evanw/esbuild/pull/4378), [#&#8203;4385](https://github.com/evanw/esbuild/pull/4385)) This release fixes a bug where the minifier would incorrectly strip the variable in the automatically-generated `catch` clause of lowered `for await` loops. The code that generated the loop previously failed to mark the internal variable references as used. - Update the Go compiler from v1.25.5 to v1.25.7 ([#&#8203;4383](https://github.com/evanw/esbuild/issues/4383), [#&#8203;4388](https://github.com/evanw/esbuild/pull/4388)) This PR was contributed by [@&#8203;MikeWillCook](https://github.com/MikeWillCook). </details> <details> <summary>t.behrendt/trivy-actions (https://gitea.t000-n.de/t.behrendt/trivy-actions)</summary> ### [`v1.3.2`](https://gitea.t000-n.de/t.behrendt/trivy-actions/compare/1.3.1...1.3.2) [Compare Source](https://gitea.t000-n.de/t.behrendt/trivy-actions/compare/1.3.1...1.3.2) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhY3Rpb24iLCJkZXBzIl19-->
renovate-bot force-pushed renovate/dependencies-(non-major) from ecda5a2fc1 to 9b20177777 2026-02-09 06:01:12 +01:00 Compare
renovate-bot changed title from chore(deps): update dependency @types/node to v24.10.11 to chore(deps): update dependencies (non-major) 2026-02-09 06:01:20 +01:00
renovate-bot force-pushed renovate/dependencies-(non-major) from 9b20177777 to f1c747cbae 2026-02-09 19:47:51 +01:00 Compare
renovate-bot changed title from chore(deps): update dependencies (non-major) to chore(deps): update dependency @types/node to v24.10.11 2026-02-12 18:01:18 +01:00
renovate-bot force-pushed renovate/dependencies-(non-major) from f1c747cbae to db2e626e56 2026-02-12 18:01:18 +01:00 Compare
renovate-bot force-pushed renovate/dependencies-(non-major) from db2e626e56 to d0db1c64e6 2026-02-12 20:06:09 +01:00 Compare
renovate-bot force-pushed renovate/dependencies-(non-major) from d0db1c64e6 to 051c6d53c8 2026-02-12 20:51:50 +01:00 Compare
renovate-bot force-pushed renovate/dependencies-(non-major) from 051c6d53c8 to 4b85d9596c 2026-02-13 06:01:12 +01:00 Compare
renovate-bot changed title from chore(deps): update dependency @types/node to v24.10.11 to chore(deps): update dependencies (non-major) 2026-02-13 06:01:20 +01:00
renovate-bot force-pushed renovate/dependencies-(non-major) from 4b85d9596c to 9e0eae6232 2026-02-14 18:40:22 +01:00 Compare
renovate-bot force-pushed renovate/dependencies-(non-major) from 9e0eae6232 to 85640d7b0c 2026-02-15 00:13:40 +01:00 Compare
renovate-bot force-pushed renovate/dependencies-(non-major) from 85640d7b0c to 153669ce92 2026-02-15 06:01:10 +01:00 Compare
renovate-bot force-pushed renovate/dependencies-(non-major) from 153669ce92 to 2313f922d7 2026-02-15 12:01:12 +01:00 Compare
t.behrendt approved these changes 2026-02-16 13:49:02 +01:00
t.behrendt merged commit 8d27605e8e into main 2026-02-16 13:49:12 +01:00
t.behrendt deleted branch renovate/dependencies-(non-major) 2026-02-16 13:49:12 +01:00
Sign in to join this conversation.
Reviewers
No Reviewers
t.behrendt
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
renovate-bot t.behrendt
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: t.behrendt/conventional-semantic-git-tag-increment#56
Delete Branch "renovate/dependencies-(non-major)"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?