fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #6035 · canonical/maas-ui

renovate · 2026-05-18T02:33:12Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@eslint/eslintrc	`3.3.5` → `3.3.6`
@eslint/js (source)	`9.39.4` → `9.39.5`
@playwright/test (source)	`1.60.0` → `1.61.1`
@tanstack/react-query (source)	`5.100.11` → `5.101.4`
@tanstack/react-query-devtools (source)	`5.100.11` → `5.101.4`
@types/node (source)	`25.9.0` → `25.9.5`
@typescript-eslint/parser (source)	`8.59.4` → `8.65.0`
concurrently	`9.2.1` → `9.2.4`
eslint-import-resolver-typescript	`4.4.4` → `4.4.5`
eslint-plugin-playwright	`2.10.3` → `2.10.5`
eslint-plugin-prettier	`5.5.5` → `5.5.6`
js-sha256	`0.11.1` → `0.12.0`
msw (source)	`2.14.6` → `2.15.0`
nanoid	`5.1.11` → `5.1.16`
sass	`1.99.0` → `1.101.7`
timezone-mock	`1.4.2` → `1.4.3`
typescript-eslint (source)	`8.59.4` → `8.65.0`
webpack	`5.106.2` → `5.109.0`

Release Notes

eslint/eslintrc (@eslint/eslintrc)

`v3.3.6`

Compare Source

Bug Fixes

update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

eslint/eslint (@eslint/js)

`v9.39.5`

Compare Source

Bug Fixes

253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)

Documentation

74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)
eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)
202117b chore: package.json update for @eslint/js release (Jenkins)
d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)
7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)
daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)
daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)
116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

microsoft/playwright (@playwright/test)

`v1.61.1`

Compare Source

`v1.61.0`

Compare Source

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();

// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
  id: credentialId,
  userHandle,
  privateKey,
  publicKey,
});
await context.credentials.install();

const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.

Test runner

The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
Supported expect.soft.poll(...).
New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
testInfo.errors now lists each sub-error of an AggregateError as a separate entry.
New -G command line shorthand for --grep-invert.

🛠️ Other improvements

Playwright now supports Ubuntu 26.04.
HAR and trace recordings now include WebSocket requests.

Browser Versions

Chromium 149.0.7827.55
Mozilla Firefox 151.0
WebKit 26.5

This version was also tested against the following stable channels:

Google Chrome 149
Microsoft Edge 149

TanStack/query (@tanstack/react-query)

`v5.101.4`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-core@5.101.4

`v5.101.3`

Compare Source

Patch Changes

Updated dependencies [7e3c822]:
- @tanstack/query-core@5.101.3

`v5.101.2`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-core@5.101.2

`v5.101.1`

Compare Source

Patch Changes

Updated dependencies [9eff92e]:
- @tanstack/query-core@5.101.1

`v5.101.0`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-core@5.101.0

`v5.100.14`

Compare Source

Patch Changes

fix(react-query): do not go into optimistic fetching state when not subscribed (#10759)
Updated dependencies []:
- @tanstack/query-core@5.100.14

`v5.100.13`

Compare Source

Patch Changes

Updated dependencies [d423168]:
- @tanstack/query-core@5.100.13

`v5.100.12`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-core@5.100.12

TanStack/query (@tanstack/react-query-devtools)

Patch Changes

Updated dependencies []:
- @tanstack/query-devtools@5.100.13
- @tanstack/react-query@5.100.13

`v5.100.12`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-devtools@5.100.12
- @tanstack/react-query@5.100.12

typescript-eslint/typescript-eslint (@typescript-eslint/parser)

`v8.65.0`

Compare Source

🚀 Features

add warning when TS 7 is detected (#12529)
parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

Evyatar Daud @StyleShit
Josh Goldberg ✨
Kirk Waiblinger @kirkwaiblinger
송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.64.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.63.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.62.1`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.62.0`

Compare Source

🚀 Features

remove redundant package.json "files" (#12444)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.61.1`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.61.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.60.1`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.60.0`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

open-cli-tools/concurrently (concurrently)

`v9.2.4`

Compare Source

upgrade shell-quote to 1.9.0 - #597, #600

Full Changelog: open-cli-tools/concurrently@v9.2.3...v9.2.4

`v9.2.3`

Compare Source

Full Changelog: open-cli-tools/concurrently@v9.2.2...v9.2.3

import-js/eslint-import-resolver-typescript (eslint-import-resolver-typescript)

`v4.4.5`

Compare Source

Patch Changes

#473 32c61ab Thanks @leey0818! - fix: check tsconfig matching before using resolver

mskelton/eslint-plugin-playwright (eslint-plugin-playwright)

`v2.10.5`

Compare Source

Bug Fixes

handle optional chaining in missing-playwright-await (#472) (c02becc)

`v2.10.4`

Compare Source

Bug Fixes

valid-title: Skip title checks for anonymous describe blocks (894c0ec)

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

`v5.5.6`

Compare Source

Patch Changes

#791 b5c96a3 Thanks @JounQin! - chore: bump all (dev)Dependencies

emn178/js-sha256 (js-sha256)

`v0.12.0`

Compare Source

Added

support ESM #44
Set up GitHub release action / provenance #46

Fixed

Fix uploading coverage to coveralls #52
fix recognize environment is node when use browserfs #53

mswjs/msw (msw)

`v2.15.0`

Compare Source

v2.15.0 (2026-07-08)

Features

sse: invoke finalize on response stream end (#2741) (7fae0cc) @kettanaito

`v2.14.7`

Compare Source

v2.14.7 (2026-07-07)

Bug Fixes

sse: proper logging for concurrent requests (#2762) (5c0ae1c) @kettanaito

ai/nanoid (nanoid)

`v5.1.16`

Compare Source

Fixed forever loop on negative size (by @spokodev).

`v5.1.15`

Compare Source

Fixed random pool corruption on big ID sizes.

`v5.1.14`

Compare Source

Fixed npm package size regression.

`v5.1.13`

Compare Source

Fixed npm package size regression.

`v5.1.12`

Compare Source

Moved to npm Provenance and Staged Publishing.

sass/dart-sass (sass)

`v1.101.7`

Compare Source

No user-visible changes.

`v1.101.6`

Compare Source

No user-visible changes.

`v1.101.5`

Compare Source

No user-visible changes.

`v1.101.4`

Compare Source

Avoid emitting rgb() or rgba() functions with non-percent decimal
channels. Older browsers only support integer values or (potentially decimal)
percentages for these functions, so in order to preserve
backwards-compatibility while retaining full precision for modern browsers,
legacy colors that contain at least one non-integer channel will now use
percentages for their channels (for example, rgb(0%, 100%, 50%) rather than
rgb(0, 255, 127.5)).
Fix a bug where the values of plain-CSS if() expressions were emitted using
their meta.inspect() format rather than their CSS serialization format.

`v1.101.3`

Compare Source

No user-visible changes.

`v1.101.0`

Compare Source

Potentially breaking bug fix: The Node package importer now properly
supports resolving import-only variants of Sass files declared in the
exports, sass, and style fields of package.json. Previously, these
files were ignored even when loaded via @import, so any code relying on
loading module-system-only files this way may break.

`v1.100.0`

Compare Source

Writing two compound selectors adjacent to one another without any whitespace
between them, such as [class]a, is now deprecated. This was always an error
in CSS and Sass only supported it by mistake.

See the Sass website for
details.

Jimbly/timezone-mock (timezone-mock)

`v1.4.3`

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

`v8.65.0`

Compare Source

🚀 Features

add warning when TS 7 is detected (#12529)

❤️ Thank You

Josh Goldberg ✨
Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.64.0`

Compare Source

8.64.0 (2026-07-13)

🚀 Features

support parsing import defer (#12513)
eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

Evyatar Daud @StyleShit
송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.63.0`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.62.1`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.62.0`

Compare Source

🚀 Features

remove redundant package.json "files" (#12444)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.61.1`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.61.0`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.60.1`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.60.0`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

webpack/webpack (webpack)

`v5.109.0`

Compare Source

Minor Changes

Default experiments.typescript to "auto", enabling built-in TypeScript support on Node.js >= 22.6 when no TypeScript loader is registered. (by @alexander-akait in #21477)
Default experiments.css, experiments.html and experiments.asyncWebAssembly to "auto", enabling built-in support unless a loader is registered for those files; modules with inline or hook-injected loaders (e.g. html-webpack-plugin templates) keep being parsed as JavaScript. (by @alexander-akait in #21477)
Add output.resourceHints to emit resource hints (preload/prefetch/modulepreload/preconnect), on by default for ESM output, plus module.parser.<type>.urlHints, css.fontPreload and javascript.dynamicImportCssPreload. (by @alexander-akait in #21477)
Add built-in build progress via infrastructureLogging.progress, plus estimatedTime, phaseTimings, progress bar width and progressBar: "auto" on ProgressPlugin. (by @alexander-akait in #21477)
Concatenate CommonJS modules with statically analyzable exports; opt out via optimization.concatenateModules: { commonjs: false }. (by @alexander-akait in #21477)
Wrap "weird" CommonJS modules into module concatenation instead of bailing out. (by @alexander-akait in #21477)
Add output.html.inline (true | "script" | "style") and the webpackInline magic comment to inline chunk content into HTML. (by @alexander-akait in #21477)
Add output.html.inject to control where chunk tags are injected. (by @alexander-akait in #21477)
Add output.html.title, output.html.meta and output.html.base options for head generation. (by @alexander-akait in #21477)
Support per-icon link attributes (sizes, media, color, type, crossorigin) and arrays in output.html.favicon. (by @alexander-akait in #21487)
Add output.html.manifest to generate and link a web app manifest with hashed icons. (by @alexander-akait in #21487)
Add output.html.csp to inject a Content-Security-Policy meta with inline-content hashes and an optional nonce. (by @alexander-akait in #21487)
Add the output.html injectTags compilation hook to inject tags (script/link/meta/…) with injectTo placement. (by @alexander-akait in #21487)
Add the output.html transformTags compilation hook to mutate, remove, or move (between <head> and <body>) a page's existing <script>/<link>/<style>/<meta> tags. (by @alexander-akait in #21487)
Extend the HTML pipeline with html link sources (bundled as their own emitted page) and rel="preload"/"prefetch" links bundled as chunks. (by @alexander-akait in #21477)
Recognize more asset-bearing HTML sources: the twitter:player:stream meta, legacy SVG references, and Web App Manifest icons/screenshots/shortcuts URLs. (by @alexander-akait in #21477)
Add module.parser.html.as to parse HTML as a document or an element fragment. (by @alexander-akait in #21477)
Allow disabling a built-in HTML parser source via type: false in sources. (by @alexander-akait in #21477)
Export webpack.html.HtmlModulesPlugin with transformHtml/htmlEmitted compilation hooks. (by @alexander-akait in #21477)
Resolve @custom-media (including media-type values) and @custom-selector in native CSS. (by @alexander-akait in #21477)
Scope view-transition-name/-group/-class names and ::view-transition-*() pseudo references in CSS modules under customIdents. (by @alexander-akait in #21486)
Add import.meta.glob support, with a caseSensitive option and consistent hidden/node_modules matching. (by @alexander-akait in #21477)
Resolve import.meta.resolve("./asset") to the emitted asset URL via the importMeta.resolve parser option. (by @alexander-akait in #21477)
Add import.meta.env defaults: MODE, DEV, PROD, SSR and BASE_URL. (by @alexander-akait in #21477)
Add fine-grained import.meta parser options. (by @alexander-akait in #21477)
Deprecate the importMetaContext parser option in favor of importMeta.webpackContext. (by @alexander-akait in #21477)
Emit analyzable new URL(…, import.meta.url), worker/worklet URL and import() references with literal specifiers for ESM module output. (by @alexander-akait in #21477)
Compile async modules to generators for targets without async/await. (by @alexander-akait in #21477)
Evaluate and validate the second argument of dynamic import(specifier, options). (by @alexander-akait in #21477)
Add module.parser.javascript.worklet to bundle Worklet addModule() entries. (by @alexander-akait in #21477)
Add ?raw, ?url, ?inline and ?no-inline asset query suffixes under experiments.futureDefaults. (by @alexander-akait in #21477)
Add an interop ("default" | "esModule") hint for object externals to control default-export interop. (by @alexander-akait in #21477)
Add an amd-async externals type that loads AMD externals without an AMD library wrapper. (by @alexander-akait in #21477)
Support cache.compression: "zstd" for the filesystem cache. (by @alexander-akait in #21477)
Warn on strict-mode-only syntax and semantic hazards in ES module output, configurable via the strictModeViolations parser option. (by @alexander-akait in [#&Correct positioning of the action menus #820

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/London)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the Maintenance 🔨 label May 18, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch from 37525d1 to 15d6f4f Compare May 18, 2026 06:42

renovate Bot changed the title ~~chore(deps): update github/gh-aw-actions action to v0.74.4~~ chore(deps): update all non-major dependencies May 18, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 22 times, most recently from a98120f to 1200f61 Compare May 25, 2026 07:10

renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from ef22a8e to b6123ce Compare May 28, 2026 23:27

renovate Bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 6e573fe to e9deaac Compare June 12, 2026 07:57

renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 71e3dd2 to 2b2d4b1 Compare June 22, 2026 16:17

renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 745d099 to 8bf2ef7 Compare June 28, 2026 00:44

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from b8cd592 to 9106611 Compare June 30, 2026 18:32

renovate Bot changed the title ~~fix(deps): update all non-major dependencies~~ chore(deps): update all non-major dependencies Jun 30, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch from 9106611 to eef7829 Compare July 2, 2026 02:09

fix(deps): update all non-major dependencies

27987a5

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all non-major dependencies#6035

fix(deps): update all non-major dependencies#6035
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented May 18, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented May 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Documentation

Chores

🔑 WebAuthn passkeys

🗃️ Web Storage

New APIs

Network

Browser and Screencast

Test runner

🛠️ Other improvements

Browser Versions

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

🚀 Features

❤️ Thank You

🚀 Features

❤️ Thank You

Patch Changes

Bug Fixes

Bug Fixes

Patch Changes

Added

Fixed

v2.15.0 (2026-07-08)

Features

v2.14.7 (2026-07-07)

Bug Fixes

🚀 Features

❤️ Thank You

8.64.0 (2026-07-13)

🚀 Features

🩹 Fixes

❤️ Thank You

🚀 Features

❤️ Thank You

Minor Changes

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented May 18, 2026 •

edited

Loading