chore(repo): Update dependencies by renovate[bot] · Pull Request #805 · ExpediaGroup/github-helpers

renovate · 2026-09-07T00:31:49Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@octokit/plugin-retry	`8.1.0` → `8.1.1`
@types/bun (source)	`1.3.14` → `1.4.1`
axios (source)	`1.18.0` → `1.20.0`
bun (source)	`1.3.14` → `1.4.2`
eslint (source)	`10.5.0` → `10.10.0`
js-yaml	`5.0.0` → `5.4.1`
prettier (source)	`3.8.4` → `3.9.6`
typescript-eslint (source)	`8.61.1` → `8.69.0`

Release Notes

octokit/plugin-retry.js (@octokit/plugin-retry)

`v8.1.1`

Compare Source

Bug Fixes

deps: update dependency @octokit/types to v17 (#685) (a323a9a)

axios/axios (axios)

`v1.20.0`

Compare Source

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)
Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)
XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)
Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)
Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#11096)

🔧 Maintenance & Chores

Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (#11092, #11098, #11099, #11106, #11107, #11122, #11123, #11126, #11127, #11133, #11140, #11143, #11144)
Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (#11101, #11113, #11097, #11119)
Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (#11124, #11136, #11137)
CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (#11128, #11152)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog (axios/axios@v1.19.0...v1.20.0)

`v1.19.0`

Compare Source

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

`v1.18.1`

Compare Source

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)
Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)
Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)
AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)
Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

oven-sh/bun (bun)

`v1.4.2`: Bun v1.4.2

Compare Source

To install Bun v1.4.2

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.4.2:

bun upgrade

Read Bun v1.4.2's release notes on Bun's blog

Thanks to 3 contributors!

`v1.4.1`

Compare Source

`v1.4.0`: Bun v1.4

Compare Source

To install Bun v1.4

curl -fsSL https://bun.com/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.com/install.ps1|iex"

To upgrade to Bun v1.4.0:

bun upgrade

Read the blog post:

Thank you

Bun is free, open source, and MIT-licensed. We receive a lot of contributions from the community, and we'd like to thank everyone who fixed a bug or contributed since Bun v1.3.

eslint/eslint (eslint)

Bug Fixes

18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

7d0cbf8 docs: Update README (GitHub Actions Bot)
0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
678c90b docs: Update README (GitHub Actions Bot)
8a10424 docs: Update README (GitHub Actions Bot)
69bb948 docs: Update README (GitHub Actions Bot)

Chores

0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])
05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)
5611035 test: add error locations info to no-void (#21185) (Lee Daeun)
ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])
f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)
1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)
d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)
65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)
22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)
55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])
7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])
eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)
60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)
f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)
d086293 test: add error locations to no-undef (#21147) (JIYEON)
cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)
688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)
7c1e175 test: add error locations to require-await (#21145) (Grit)
588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)
059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)
5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)

`v10.8.0`

Compare Source

Features

2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
c5963f7 docs: Update README (GitHub Actions Bot)

Chores

4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

`v10.7.0`

Compare Source

Features

cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)
557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)
0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)
96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)
0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)
75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)
b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)
e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)
a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)
d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)
8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)
a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)
8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

c30d808 docs: Update README (GitHub Actions Bot)
5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)
04174cb docs: Update README (GitHub Actions Bot)
026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)
9d42fef docs: Update README (GitHub Actions Bot)
b230159 docs: Update README (GitHub Actions Bot)
0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

9489379 chore: update dependency @eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])
81a4774 chore: updates for v9.39.5 release (Jenkins)
9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)
72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)
833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])
7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)
8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)
e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])
0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)
1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])
4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)
993539f chore: update dependency @eslint/json to ^2.0.1 (#21042) (renovate[bot])
53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)
5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)
a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)
7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

`v10.6.0`

Compare Source

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)
f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)
bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)
8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)
5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)
9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)
d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)
2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)
63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)
7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)
399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

a83683d docs: Update README (GitHub Actions Bot)
f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)
bea49f7 docs: Update README (GitHub Actions Bot)
e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)
8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)
3eb3d9b docs: Update README (GitHub Actions Bot)
c5bb59c docs: Update README (GitHub Actions Bot)
eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)
3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])
c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)
a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)
27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)
865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])
27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)
970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)
b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])
6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

nodeca/js-yaml (js-yaml)

`v5.4.1`

Compare Source

`v5.4.0`

Compare Source

Added

Added the scalarStyleRules dumper option to customize string formatting.
See Scalar styling for details.

Changed

[breaking] Flattened the low-level AST node style representation. Scalar
and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values;
explicit tags use the separate tagged property. Alias nodes now contain
only kind and anchor. This only affects code that directly constructs or
edits AST nodes.
[breaking] The sortKeys option was rewritten using AST mutation to avoid
side effects.
Reworked scalar style selection. This can change formatting without changing
loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

Accept a byte order mark at the start of each document in a stream, #791.
Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace,
including alias and property-only keys, #786.
Preserve empty scalar items when converting block sequences to flow style.
Do not apply the 1024-character simple-key limit to flow mapping keys.
Count Unicode code points, rather than UTF-16 code units, for the
1024-character simple-key limit.
Add an explicit document-end marker after keep-chomped block scalars when
needed to preserve trailing newlines.

`v5.3.0`

Compare Source

This release focuses on reworking the documentation and making small
architectural improvements before moving forward.

Added

Added completely new documentation.

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

renovate · 2026-09-07T05:52:17Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

github-actions · 2026-09-15T03:23:02Z

This issue is stale because it has been open 7 days with no activity. Remove stale label or comment or this will be closed in 7 days.

chore(repo): Update dependencies

7102307

renovate Bot requested a review from a team as a code owner September 7, 2026 00:31

renovate Bot added dependencies Pull requests that update a dependency file minor-version patch-version renovate labels Sep 7, 2026

chore: committing generated dist

5bdc694

github-actions Bot added the Stale label Sep 15, 2026

Navigation Menu

chore(repo): Update dependencies - #805

chore(repo): Update dependencies#805
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/dependencies

renovate Bot commented Sep 7, 2026

Uh oh!

renovate Bot commented Sep 7, 2026

Uh oh!

github-actions Bot commented Sep 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 7, 2026

Release Notes

Bug Fixes

v1.20.0 — August 19, 2026

⚠️ Breaking Changes & Deprecations

🔒 Security Fixes

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v1.18.1 — June 21, 2026

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v1.4.2: Bun v1.4.2

Thanks to 3 contributors!

v1.4.0: Bun v1.4

Thank you

Bug Fixes

Documentation

Chores

Features

Bug Fixes

Documentation

Chores

Features

Bug Fixes

Documentation

Chores

Features

Bug Fixes

Documentation

Chores

Added

Changed

Fixed

Added

Configuration

Uh oh!

renovate Bot commented Sep 7, 2026

Edited/Blocked Notification

Uh oh!

github-actions Bot commented Sep 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v1.4.2`: Bun v1.4.2

`v1.4.0`: Bun v1.4