Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jul 1, 2025

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
crate-ci/typos action minor v1.33.1 -> v1.34.0 age adoption passing confidence
github/codeql-action action patch v3.29.0 -> v3.29.2 age adoption passing confidence
node (source) minor 22.16.0 -> 22.17.0 age adoption passing confidence
pnp (source) dependencies minor 0.9.4 -> 0.11.0 age adoption passing confidence
pnpm (source) packageManager patch 10.12.3 -> 10.12.4 age adoption passing confidence
taiki-e/install-action action minor v2.54.0 -> v2.56.0 age adoption passing confidence

Release Notes

crate-ci/typos (crate-ci/typos)

v1.34.0

Compare Source

github/codeql-action (github/codeql-action)

v3.29.2

Compare Source

v3.29.1

Compare Source

nodejs/node (node)

v22.17.0: 2025-06-24, Version 22.17.0 'Jod' (LTS), @​aduh95

Compare Source

Notable Changes
⚠️ Deprecations
Instantiating node:http classes without new

Constructing classes like IncomingMessage or ServerResponse without the new
keyword is now discouraged. This clarifies API expectations and aligns with standard
JavaScript behavior. It may warn or error in future versions.

Contributed by Yagiz Nizipli in #​58518.

options.shell = "" in node:child_process

Using an empty string for shell previously had undefined behavior. This change
encourages explicit choices (e.g., shell: true or a shell path) and avoids
relying on implementation quirks.

Contributed by Antoine du Hamel and Renegade334 #​58564.

HTTP/2 priority signaling

The HTTP/2 prioritization API (e.g., stream.priority) is now deprecated due to
poor real-world support. Applications should avoid using priority hints and expect future removal.

Contributed by Matteo Collina and Antoine du Hamel #​58313.

✅ Features graduated to stable
assert.partialDeepStrictEqual()

This method compares only a subset of properties in deep object comparisons,
useful for flexible test assertions. Its stabilization means it's now safe for
general use and won't change unexpectedly in future releases.

Contributed by Ruben Bridgewater in #​57370.

Miscellaneous
  • dirent.parentPath
  • filehandle.readableWebStream()
  • fs.glob()
  • fs.openAsBlob()
  • node:readline/promises
  • port.hasRef()
  • readable.compose()
  • readable.iterator()
  • readable.readableAborted
  • readable.readableDidRead
  • Duplex.fromWeb()
  • Duplex.toWeb()
  • Readable.fromWeb()
  • Readable.isDisturbed()
  • Readable.toWeb()
  • stream.isErrored()
  • stream.isReadable()
  • URL.createObjectURL()
  • URL.revokeObjectURL()
  • v8.setHeapSnapshotNearHeapLimit()
  • Writable.fromWeb()
  • Writable.toWeb()
  • writable.writableAborted
  • Startup Snapshot API
  • ERR_INPUT_TYPE_NOT_ALLOWED
  • ERR_UNKNOWN_FILE_EXTENSION
  • ERR_UNKNOWN_MODULE_FORMAT
  • ERR_USE_AFTER_CLOSE

Contributed by James M Snell in
#​57513 and
#​58541.

Semver-minor features
🔧 fs.FileHandle.readableWebStream gets autoClose option

This gives developers explicit control over whether the file descriptor should
be closed when the stream ends. Helps avoid subtle resource leaks.

Contributed by James M Snell in #​58548.

🔧 fs.Dir now supports explicit resource management

This improves ergonomics around async iteration of directories. Developers can
now manually control when a directory is closed using .close() or with Symbol.asyncDispose.

Contributed by Antoine du Hamel in #​58206.

📊 http2 gains diagnostics channel: http2.server.stream.finish

Adds observability support for when a stream finishes. Useful for logging,
monitoring, and debugging HTTP/2 behavior without patching internals.

Contributed by Darshan Sen in #​58560.

🔐 Permissions: implicit allow-fs-read to entrypoint

Node.js permissions model now allows read access to the entry file by default.
It makes running permission-restricted apps smoother while preserving security.

Contributed by Rafael Gonzaga in #​58579.

🎨 util.styleText() adds 'none' style

This lets developers remove styling cleanly without hacks. Useful for overriding
inherited terminal styles when composing styled strings.

Contributed by James M Snell in #​58437.

🧑‍💻 Community updates
Commits
yarnpkg/pnp-rs (pnp)

v0.11.0

Fixed
  • fix windows failure (#​22)
Other
  • add release-plz.yml (#​24)
  • remove indexmap
  • remove serde_with (#​32)
  • remove the unused Serialize on PackageLocator (#​31)
  • bump deps (#​30)
  • use fxhash in zip data structures (#​28)
  • remove the lazy_static crate (#​27)
  • improve NODEJS_BUILTINS (#​26)
  • remove unnecessary derive Serialize on Error (#​25)
  • use fxhash (#​23)
  • clippy::result_large_err for the Error type (#​21)
  • run cargo clippy --fix + manual fixes (#​20)
  • run cargo fmt (#​19)
  • add cargo check and cargo test --all-features (#​18)
  • add rust-toolchain.toml (#​17)
  • disable more
  • enable most tests on windows CI
pnpm/pnpm (pnpm)

v10.12.4

Compare Source

Patch Changes
taiki-e/install-action (taiki-e/install-action)

v2.56.0: 2.56.0

Compare Source

v2.55.4: 2.55.4

Compare Source

  • Update trivy@latest to 0.64.0.

  • Update just@latest to 1.41.0.

v2.55.3: 2.55.3

Compare Source

  • Update dprint@latest to 0.50.1.

v2.55.2: 2.55.2

Compare Source

  • Update zizmor@latest to 1.11.0.

  • Update cargo-dinghy@latest to 0.8.1.

v2.55.1: 2.55.1

Compare Source

  • Update vacuum@latest to 0.17.1.

  • Update typos@latest to 1.34.0.

v2.55.0: 2.55.0

Compare Source

v2.54.3: 2.54.3

Compare Source

  • Update cargo-careful@latest to 0.4.8.

v2.54.2: 2.54.2

Compare Source

  • Update rclone@latest to 1.70.2.

  • Update zizmor@latest to 1.10.0.

v2.54.1: 2.54.1

Compare Source

  • Update wasmtime@latest to 34.0.1.

  • Update cargo-tarpaulin@latest to 0.32.8.

  • Update knope@latest to 0.21.0.


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (squash) July 1, 2025 02:56
@coderabbitai
Copy link

coderabbitai bot commented Jul 1, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Explain this complex logic.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai explain this code block.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and explain its main purpose.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Join our Discord community for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link

@ellipsis-dev ellipsis-dev bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Important

Looks good to me! 👍

Reviewed everything up to 1db9b41 in 53 seconds. Click for details.
  • Reviewed 155 lines of code in 6 files
  • Skipped 0 files when reviewing.
  • Skipped posting 6 draft comments. View those below.
  • Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. .github/workflows/ci.yml:63
  • Draft comment:
    Updated the typos action from v1.33.1 to v1.34.0 (commit 392b78fe18a52790c53f42456e46124f77346842). This change correctly pins the action revision. Please verify that any changes in typos' behavior are acceptable.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is about a dependency change, specifically updating a version of an action. It asks the PR author to verify changes in behavior, which is against the rules. The comment does not provide a specific code suggestion or ask for a specific test to be written. Therefore, it should be removed.
2. .github/workflows/zizmor.yml:32
  • Draft comment:
    The install-action and CodeQL upload-sarif action have been updated to v2.55.3 and v3.29.2 respectively. Both are now pinned to new commit hashes. These updates appear appropriate; ensure that any new behavior from these actions is compatible with your workflow.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is purely informative and asks the PR author to ensure compatibility, which violates the rules. It does not provide a specific code suggestion or ask for a specific test to be written. Therefore, it should be removed.
3. .node-version:1
  • Draft comment:
    Node version has been bumped from 22.16.0 to 22.17.0. Verify that any new changes or deprecations in Node v22.17.0 do not adversely affect the build.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is about a dependency change, specifically the Node version. The comment asks the PR author to verify that the new version does not adversely affect the build, which is against the rules. The rules specify not to comment on pure dependency changes or ask the author to verify or ensure things.
4. Cargo.lock:973
  • Draft comment:
    The 'pnp' crate version has been bumped from 0.9.4 to 0.10.0, and the redundant 'regex' dependency has been removed from its dependency list. This likely reflects an upstream change in 'pnp'. Please confirm that this removal does not impact functionality.
  • Reason this comment was not posted:
    Comment was not on a location in the diff, so it can't be submitted as a review comment.
5. Cargo.toml:95
  • Draft comment:
    Updated the 'pnp' dependency in Cargo.toml from version 0.9.4 to 0.10.0, consistent with the change in Cargo.lock.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is purely informative, as it only states that a dependency version was updated in a file. It does not provide any actionable feedback or suggestions for improvement. According to the rules, purely informative comments should be removed.
6. package.json:11
  • Draft comment:
    The packageManager field has been updated to use [email protected], which aligns with the dependency updates in the repository.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is purely informative, as it only states that the packageManager field has been updated to use a specific version of pnpm. It does not provide any actionable feedback or suggestions for improvement.

Workflow ID: wflow_oKFau2fxzMgfuQnN

You can customize Ellipsis by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.

@codecov
Copy link

codecov bot commented Jul 1, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.22%. Comparing base (00bf597) to head (dd96564).
Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #168   +/-   ##
=======================================
  Coverage   92.22%   92.22%           
=======================================
  Files          13       13           
  Lines        3060     3060           
=======================================
  Hits         2822     2822           
  Misses        238      238           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@codspeed-hq
Copy link

codspeed-hq bot commented Jul 1, 2025

CodSpeed Performance Report

Merging #168 will not alter performance

Comparing renovate/all (dd96564) with main (00bf597)

Summary

✅ 3 untouched benchmarks

@renovate renovate bot force-pushed the renovate/all branch from 1db9b41 to dd96564 Compare July 1, 2025 12:06
@sonarqubecloud
Copy link

sonarqubecloud bot commented Jul 1, 2025

@renovate renovate bot merged commit 4154853 into main Jul 1, 2025
25 checks passed
@renovate renovate bot deleted the renovate/all branch July 1, 2025 12:11
@JounQin JounQin mentioned this pull request Jul 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants