chore(deps): update dev tools - #5
Open
renovate-bot-lohn[bot] wants to merge 1 commit into
Open
Conversation
renovate-bot-lohn
Bot
force-pushed
the
renovate/dev-tools
branch
26 times, most recently
from
July 16, 2026 17:55
484d30d to
347db31
Compare
renovate-bot-lohn
Bot
force-pushed
the
renovate/dev-tools
branch
29 times, most recently
from
July 22, 2026 09:42
15a65ff to
3762bef
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.54.0→0.55.20.22.0→0.23.02.16.0→2.17.124.17.0→24.19.043.231.1→43.288.04.16.3→4.17.00.4.5→0.4.1343.227.0→43.288.00.11.21→0.12.3Note: The
pre-commitmanager in Renovate is not supported by thepre-commitmaintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.Release Notes
dprint/dprint (dprint)
v0.55.2Compare Source
Changes
Install
Run
dprint upgradeor see https://dprint.dev/install/Checksums
v0.55.1Compare Source
Changes
(#1194)
Install
Run
dprint upgradeor see https://dprint.dev/install/Checksums
v0.55.0Compare Source
dprint is a pluggable and configurable code formatting platform that unifies all your formatters.
This substantial release adds npm specifier plugins, brings dprint to many more CPU architectures, adds richer LSP support, and gives you finer-grained configuration with per-file overrides and config inheritance.
It includes two behaviour changes worth reading before you upgrade.
Highlights
npm:@​scope/name@versiondprint fmt --dirty— format only the files with uncommitted git changes"inherit": truefor nested configuration filesThere's also a new website: https://dprint.dev
npm specifier plugins
You can now reference plugins via an
npm:specifier in your config:{ "plugins": [ "npm:@​dprint/typescript@0.95.15", "npm:@​dprint/json" ] }npm:@​scope/name@version) downloads and locks an exact version.npm:@​scope/name) resolves the plugin fromnode_modules, walking up from the config file so npm and your lockfile stay the source of truth.dprint add npm:@​scope/nameresolves the latest version and writes the pinned form, unless the package is in a nearbypackage.jsonunderdevDependencies, in which case the unversioned form is written, in which case node resolution will occur.More architectures supported
dprint now runs on a much wider range of CPU architectures, including:
aarch64-pc-windows-msvc) - Now native—previously dprint was shipping the x64 binary.This is made possible by migrating the Wasm plugin runtime from Wasmer to Wasmtime, with equivalent performance and a smaller dependency tree:
LSP completions and hover for config files
dprint lspnow provides autocompletion and hover documentation when editingdprint.json/dprint.jsonc, making it easier to discover plugins and configuration options without leaving your editor.dprint fmt --dirtyFormat only the files with uncommitted changes in your git working directory — staged, unstaged, and untracked (but not gitignored):
This complements the existing
--stagedflag."inherit": truefor nested config filesA nested configuration file can now opt in to inheriting its ancestor's plugins and configuration. Given a config at the repo root:
A config in a subdirectory can inherit it with
"inherit": true:includesare not inherited.Per-file plugin config overrides
Plugins now support
"overrides"blocks to apply different configuration to specific files:{ "json": { "overrides": { "files": ["**/package.json", "**/composer.json"], "indentWidth": 4 } } }Use an array for multiple overrides:
{ "json": { "overrides": [ { "files": ["**/package.json", "**/composer.json"], "indentWidth": 4 }, { "files": "**/special-package.json", "lineWidth": 80 } ] } }Overrides are honoured consistently across CLI formatting, stdin, the editor service, the LSP, and host formatting. Note that overrides only change configuration — they don't include or exclude files.
Previously, adding an
"associations"glob to a plugin silently replaced the file extensions and file names it matched by default. Now associations are additive:**/*.foo) routes extra files to the plugin while its defaults keep matching.!**/*.js) cancels a default extension, file name, or path.If you previously relied on a positive association to replace the defaults, add a negated glob to opt back out. Fixes the surprising behaviour in #841 and #794.
File pattern matching for
includes/excludesglobs is now case-sensitive (#1082). If your patterns relied on case-insensitive matching, update them to match the actual file casing.Read a list of files from stdin
The new
--stdin-filesflag reads a newline-separated list of file paths from stdin instead of from the command line arguments. It works with thefmt,check,file-paths, andformat-timessubcommands, which is handy when piping the output of another tool into dprint:generate_files | dprint fmt --stdin-filesSmarter
dprint initdprint initnow scans the current directory and pre-selects the plugins whose files it finds, so the defaults match your project out of the box. The plugin picker scrolls to fit your terminal and supports type-to-filter, keeping it usable even when many plugins are available.Pass
--yes(-y) to skip the prompt entirely and accept those defaults — handy for scripts and CI:The prompt is also skipped automatically when there's no interactive terminal.
Other notable additions
DPRINT_GLOBAL_GITIGNORE=1— opt in to respecting git's global excludes file (core.excludesFile). Opt-in because it's machine-specific and won't exist on CI.NO_COLOR/FORCE_COLORsupport for controlling colored output.dprint config update --dry-run— preview config updates without writing.dprint resolved-config --file <path>— show only the plugins that would format a given file.dprint incremental-state— print the exact signal dprint uses to decide cache reuse, so you can diff it between revisions.output-resolved-config,output-file-paths, andoutput-format-timesare nowresolved-config,file-paths, andformat-times.Changelog
Features
--dirtyflag to format git working directory changes (#1171)"inherit": truein nested configuration files (#1160)DPRINT_GLOBAL_GITIGNORE(#1163)NO_COLORandFORCE_COLORenv vars (#1155)--dry-runtodprint config update(#1156)--fileflag toresolved-configto filter plugins by file (#1167)dprint incremental-statecommand (#1149)output-from some subcommands (#1150)--checksumflag to dprint add (#1184)--yesflag (#1185)(#1187)
Performance
similarfor LSP diffing and dropdissimilar(#1176)Bug Fixes
clear-cache(#1169)dprint clear-cache(#1154).git/info/excludewhen respecting gitignore (#1151).exepath, resolve relativeDPRINT_INSTALL(#1131)Internal
Install
Run
dprint upgradeor see https://dprint.dev/install/Checksums
dprint/dprint-plugin-json (dprint/dprint-plugin-json)
v0.23.0Compare Source
Changes
Install
Install and setup dprint.
Then in your project's dprint configuration file:
"plugins"array (can be done viadprint config add json)."json"configuration property if desired.{ // ...etc... "json": { // json config goes here }, "plugins": [ "https://plugins.dprint.dev/json-0.23.0.wasm" ] }JS Formatting API
v0.22.1Compare Source
Changes
Install
Install and setup dprint.
Then in your project's dprint configuration file:
"plugins"array (can be done viadprint config add json)."json"configuration property if desired.{ // ...etc... "json": { // json config goes here }, "plugins": [ "https://plugins.dprint.dev/json-0.22.1.wasm" ] }JS Formatting API
goreleaser/goreleaser (goreleaser)
v2.17.1Compare Source
Announcement
Read the official announcement: Announcing GoReleaser v2.17.
Changelog
Bug fixes
a734383: fix(builder/go): parse GORISCV64 and GOPPC64 for riscv64 and ppc64le targets (#6698) (@upuddu)dfc7f06: fix(builders/go): sort targets (@caarlos0)7630cd1: fix(deps): go1.26.5 (@caarlos0)9dbb266: fix(notary): poll notarization status every 10s, not 10ns (#6726) (@caarlos0)1ebf881: fix: anchor goarm64 validation regex to reject invalid values (#6727) (@semx)70f6921: fix: migrate from deprecated s3/manager to s3/transfermanager (#6706) (@joeyberkovitz)Documentation updates
eafb0ec: docs(users): update charm domain (#6699) (@andreynering)ae4debb: docs: add /.well-known/security.txt (RFC 9116) (#6710) (@kobihikri)d3764c8: docs: fix typo (@caarlos0)742ae5f: docs: move images to a bucket (#6691) (@caarlos0)55a466e: docs: publish to GitLab package registries with the http upload pipe (#6697) (@ajuijas)65240d8: docs: update users (@caarlos0)Other work
0eb5b0f: chore(ci): update dependabot config (@caarlos0)4bcb2a5: chore(ci): update deps (@caarlos0)5f3f435: chore: auto-update generated files (#6693) (@goreleaserbot)9b85924: chore: auto-update generated files (#6694) (@goreleaserbot)1aab79e: chore: auto-update generated files (#6700) (@goreleaserbot)11d0150: chore: auto-update generated files (#6705) (@goreleaserbot)5747ca7: chore: auto-update generated files (#6707) (@goreleaserbot)83f4c19: chore: auto-update generated files (#6730) (@goreleaserbot)f3a0e63: chore: svu config (@caarlos0)Full Changelog: goreleaser/goreleaser@v2.17.0...v2.17.1
Helping out
This release is only possible thanks to all the support of some awesome people!
Want to be one of them?
You can sponsor, get a Pro License or contribute with code.
Where to go next?
v2.17.0Compare Source
Announcement
Read the official announcement: Announcing GoReleaser v2.17.
Changelog
New Features
31d4279: feat(brew,cask,krew,nix,scoop,winget): default pull request branch name (#6685) (@caarlos0)e5f075b: feat(dockers/v2): retry build (@caarlos0)cd5f16b: feat(nfpm): support msix packages (#6647) (@umaidshahid and @caarlos0)43be34a: feat(scm): allow a custom token on the release repository (#6689) (@caarlos0)5ed70f2: feat(winget): allow configuring the manifest locale (#6680) (@caarlos0)6f7175a: feat: Allow GOARM softfloat and hardfloat (#6198) (@MDr164 and @caarlos0)Security updates
b985ca8: sec(deps): bump go-pkcs12 to v0.7.2 (GO-2026-5052) (#6683) (@caarlos0)7c73b82: sec(deps): update golang.org/x/net (@caarlos0)Bug fixes
7d602ff: fix(builders): reject empty target string (#6679) (@sueun-dev)355d706: fix(client): skip merge-upstream when target repo is not a fork (#6646) (@jamessawle and @caarlos0)944bbb2: fix(deps): drop dep on docker/docker (#6682) (@caarlos0)a85ce26: fix(mcp): clean subfolder path (#6649) (@caarlos0)99a7173: fix(nfpm): produce valid arch for Termux packages (#6668) (@bltavares and @caarlos0)7200ec7: fix(winget): default head branch to a versioned template (#6684) (@Sanjays2402)6645820: fix: return error when go.mod is unreadable in CheckGoModPipe (#6644) (@SebTardif)Documentation updates
da7ce30: docs(casks): fix private-repo example broken by Homebrew 5.1.14 (#6639) (@caarlos0)09ebd03: docs(nfpm): note tilde ConventionalFileName (@caarlos0)ab7481e: docs: doc authoring skill (@caarlos0)b945ca3: docs: fix (@caarlos0)7e87fd3: docs: fix "lets" -> "let's" in quick-start guide (#6661) (@s3onghyun)698dae5: docs: fix typo in notarize.md (#6655) (@albertchae)f09c887: docs: good bye discord (@caarlos0)2642319: docs: improve home (@caarlos0)6b7710e: docs: updates (@caarlos0)Other work
2e6f200: chore: auto-update generated files (#6662) (@goreleaserbot)4bd4e38: chore: auto-update generated files (#6671) (@goreleaserbot)dcf5a6b: chore: auto-update generated files (#6675) (@goreleaserbot)baf110d: chore: auto-update generated files (#6688) (@goreleaserbot)3fa8a94: chore: godoc (@caarlos0)Full Changelog: goreleaser/goreleaser@v2.16.0...v2.17.0
Helping out
This release is only possible thanks to all the support of some awesome people!
Want to be one of them?
You can sponsor, get a Pro License or contribute with code.
Where to go next?
nodejs/node (node)
v24.19.0: 2026-08-03, Version 24.19.0 'Krypton' (LTS), @aduh95Compare Source
Notable Changes
d08872b530] - (SEMVER-MINOR) buffer: implementblob.textStream()(Matthew Aitken) #6403635222948be] - (SEMVER-MINOR) deps: update OpenSSL build config to support compression (Tim Perry) #62217d6ab039f24] - (SEMVER-MINOR) doc: updateblockListstability status to release candidate (alphaleadership) #630501da05fb79d] - doc: markstream.composestable (Matteo Collina) #625623c1636dabf] - (SEMVER-MINOR) esm: add--experimental-import-textflag (Efe) #62300e323e877be] - (SEMVER-MINOR) fs: support caller-suppliedreadFile()buffers (Matteo Collina) #63634c1248c9544] - (SEMVER-MINOR) http: addhttpValidationoption to configure header value validation (RajeshKumar11) #61597a534b65815] - (SEMVER-MINOR) net: supportTCP_KEEPINTVLandTCP_KEEPCNTinsetKeepAlive(Guy Bedford) #63825a23cdec683] - (SEMVER-MINOR) perf_hooks: sample delay per event loop iteration (Pablo Erhard) #629357428b57a37] - (SEMVER-MINOR) src: allow empty--experimental-config-file(Marco Ippolito) #61610e57597173c] - (SEMVER-MINOR) stream: exposeReadableStreamTee(Matteo Collina) #641955396235993] - (SEMVER-MINOR) tls: report negotiated TLS groups (Filip Skokan) #641195e901b5cd9] - (SEMVER-MINOR) tls: addcertificateCompressionoption (Tim Perry) #62217Commits
676467fa9f] - benchmark: trim down the argon2 sets (Filip Skokan) #64218a77a2000b7] - benchmark: add child_process async path baselines (Yagiz Nizipli) #63929dd4482e915] - buffer: remove unreachable overflow check in atob (haramjeong) #60161081c41eb86] - buffer: add fast api for isUtf8 and isAscii (Gürgün Dayıoğlu) #64169d08872b530] - (SEMVER-MINOR) buffer: implement blob.textStream() (Matthew Aitken) #640366e2f7e6013] - build: remove redundant intermediate node_aix_shared (Chengzhong Wu) #6374787e0675f51] - build: build codecache and snapshot with libnode (Chengzhong Wu) #6362632174a7bae] - build: support setting an emulator from configure script (Ivan Trubach) #5389969cfb2f240] - build: remove duplicated node_use_sqlite and node_use_ffi conditions (Chengzhong Wu) #6362937ac6e8cb5] - build: add manually-dispatched stress-test workflow (Joyee Cheung) #641182424207191] - build: suppress compiler warnings for histogram (Richard Lau) #6398063502b7404] - build,win: fix VS2022 arm64 PGO build (Stefan Stojanovic) #63413fe4e4055d0] - child_process: fix permission model propagation via NODE_OPTIONS (Matteo Collina) #63972aa2f3c066e] - child_process: pass spawn options to the binding positionally (Yagiz Nizipli) #63930fcf32cf77a] - child_process: serialize advanced IPC messages natively (Yagiz Nizipli) #639337907134734] - crypto: reject small-order EdDSA points during verify (Filip Skokan) #64026b505cd5465] - crypto: support non-byte WebCrypto lengths and cSHAKE (Filip Skokan) #639880f54a872e2] - crypto: share WebCrypto method and usage helpers (Filip Skokan) #63975824ec11c05] - crypto: refactor keyObject.toCryptoKey() and SubtleCrypto.getPublicKey() (Filip Skokan) #6362273aba92689] - crypto: coerce -0 to +0 before native calls (Filip Skokan) #63556c83b79874e] - crypto: reject invalid raw key imports (Filip Skokan) #63134934fda64b9] - crypto: improve accuracy of SubtleCrypto.supports (Filip Skokan) #63104e392e1f791] - crypto: fix large DH generator validation (Tobias Nießen) #64092e75a363e70] - crypto: use EVP_MAC for HMAC on OpenSSL >=3 (Filip Skokan) #63942adbaf7af9b] - crypto: make webcrypto aliasKeyFormat directional (Filip Skokan) #63910bb1aea8897] - crypto: fix unhandled error in Hash._transform (Haram Jeong) #6326112c87732c1] - crypto: handle cipher context allocation failures (Tian Teng) #63542858496b453] - crypto: deduplicate X509 subject matching logic (Tobias Nießen) #636449a29cb0964] - crypto: fix warnings in test_node_crypto.cc (Maya Lekova) #634908bb536066d] - crypto: optimize normalizeAlgorithm dispatch hot path (Filip Skokan) #62756329e5496ff] - crypto,tls: do not ignore BN_get_word error (Tobias Nießen) #6389597b7a3f9c7] - debugger: add --max-hit option to probe mode (Joyee Cheung) #637049098585c5e] - debugger: add more logs to probe mode (Joyee Cheung) #6366359cca26cd5] - debugger: surface inspector failures in probe mode (Joyee Cheung) #634372922290eae] - debugger: disambiguate probe location binding (Joyee Cheung) #632866fb2c2c7e2] - debugger: lazily wait for initial break output (Trivikram Kamat) #63969688e792551] - debugger: defer probe pause handling until startup (Trivikram Kamat) #636081ac93cc05a] - debugger: await initialization after run and restart (Trivikram Kamat) #6360792a909cf72] - debugger,test: deflake resume failure test and add debug logs (Joyee Cheung) #635248b37af8b11] - deps: V8: backportbef0d9c(Joyee Cheung) #621328832126422] - deps: V8: cherry-pick64b36b4(Dan Carney) #6171275990c2cd6] - deps: update googletest to8b53336(Node.js GitHub Bot) #641818500c7ba86] - deps: update sqlite to 3.53.3 (Node.js GitHub Bot) #64180dc78091b45] - deps: c-ares: cherry-pick8ba37af(René) #64110873cc72125] - deps: update googletest to0b1e895(Node.js GitHub Bot) #640391d3d166538] - deps: update acorn to 8.17.0 (Node.js GitHub Bot) #6390135222948be] - (SEMVER-MINOR) deps: update OpenSSL build config to support compression (Tim Perry) #62217e40cee5f79] - deps: upgrade npm to 11.17.0 (npm team) #6385785c6d46606] - deps: add ngtcp2_fmt.c to build configuration (ngtcp2.gyp) (沈鸿飞) #63821d2ea8b7a8c] - deps: update googletest to7140cd4(Node.js GitHub Bot) #6377525b4d57bb6] - deps: update sqlite to 3.53.2 (Node.js GitHub Bot) #63774a96368e4c7] - deps: update zlib to 1.3.2.1-motley-3246f1b (Node.js GitHub Bot) #63773b59f1f5f37] - deps: update amaro to 1.1.10 (Node.js GitHub Bot) #636700b3b56ee95