Skip to content

Update all non-major dependencies#297

Merged
tpendragon merged 1 commit into
mainfrom
renovate/all-minor-patch
May 4, 2026
Merged

Update all non-major dependencies#297
tpendragon merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 13, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@vitejs/plugin-vue (source) 6.0.5 → 6.0.6 age confidence devDependencies patch
annotate 2.6.5 → 2.7.5 age confidence minor
browser-tools 2.4.0 → 2.4.2 age confidence orb patch
honeybadger (source, changelog) "6.5.3" → "6.5.5" age confidence patch
lux-design-system 7.4.0 → 7.5.0 age confidence dependencies minor 7.6.2 (+2)
node (source) 24.14.1 → 24.15.0 age confidence minor
postcss (source) 8.5.8 → 8.5.10 age confidence dependencies patch 8.5.13 (+2)
rake (changelog) 13.3.1 → 13.4.2 age confidence minor
selenium-webdriver (source, changelog) 4.41.0 → 4.43.0 age confidence minor
solargraph (source, changelog) 0.48.0 → 0.58.3 age confidence minor
sqlite3 (changelog) 2.9.2-aarch64-linux-gnu → 2.9.3 age confidence patch
timecop 0.9.10 → 0.9.11 age confidence patch
vite (source) 8.0.5 → 8.0.9 age confidence devDependencies patch 8.0.10

Release Notes

vitejs/vite-plugin-vue (@​vitejs/plugin-vue)

v6.0.6

Features
  • plugin-vue: propagate multiRoot for template-only vapor components (#​745) (9e07ae9)
Bug Fixes
Miscellaneous Chores
ctran/annotate_models (annotate)

v2.7.5

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.5

v2.7.4

Compare Source

  • Fix with_comment format in annotate_models_rake #​560

v2.7.3

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.3

v2.7.2

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.2

v2.7.1

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.1

v2.7.0

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.0

v2.6.10: Revert incompatible change

Compare Source

Revert "Prefer SQL column type over normalized AR type"

v2.6.9

Compare Source

  • Support foreigh key #​241
  • Check if model has skip tag in annotate_model_file #​167
  • Fix issue where serializer-related flags weren't being honored #​246
  • Prefer SQL column type over normalized AR type #​231

v2.6.8

Compare Source

  • Nothing annotated unless options[:model_dir] is specified, #​234

v2.6.7

Compare Source

  • Nothing annotated unless options[:model_dir] is specified, #​234

v2.6.6

Compare Source

  • Makes it possible to wrap annotations, #​225
  • Fix single model generation, #​214
  • Fix default value for Rails 4.2, #​212
  • Don't crash on inherited models in subdirectories, #​232
  • Process model_dir in rake task, #​197
honeybadger-io/honeybadger-ruby (honeybadger)

v6.5.5

Compare Source

Bug Fixes

v6.5.4

Compare Source

Bug Fixes
nodejs/node (node)

v24.15.0

Compare Source

postcss/postcss (postcss)

v8.5.10

Compare Source

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

v8.5.9

Compare Source

  • Speed up source map encoding paring in case of the error.
ruby/rake (rake)

v13.4.2

Compare Source

What's Changed

Full Changelog: ruby/rake@v13.4.1...v13.4.2

v13.4.1

Compare Source

What's Changed

Full Changelog: ruby/rake@v13.4.0...v13.4.1

v13.4.0

Compare Source

What's Changed

New Contributors

Full Changelog: ruby/rake@v13.3.1...v13.4.0

SeleniumHQ/selenium (selenium-webdriver)

v4.43.0

=========================

  • Support CDP versions: v145, v146, v147

v4.42.0

=========================

  • Support CDP versions: v144, v145, v146
castwide/solargraph (solargraph)

v0.58.3

Compare Source

  • Ignore workspace dependencies in cache processes (#​1174)

v0.58.2

Compare Source

  • Avoid rbs pollution (#​1146)
  • Fix 'solargraph pin --references ClassName' private method call (#​1150)
  • Improve memory efficiency of Position class (#​1054)
  • Raise InvalidOffsetError for offsets > text (#​1155)

v0.58.1

Compare Source

  • Normalize line endings to LF (#​1142)

v0.58.0

Compare Source

  • Faster constant resolution (#​1083)
  • [regression] Handle RBS static method aliases (#​1094)
  • More type fills and shims (#​1005)
  • Fix resolution in blocks in type checker (#​890)
  • Annotation fixes for strong typechecking (#​1057)
  • Remove dead code (#​1077)
  • Fix flakey spec (#​1080)
  • Fix bad sexpr generation in op_asgn (#​1089)
  • Opt-in for MFA requirement (#​730)
  • [regression] Fix resolution issues with namespaces from YARD (#​1097)
  • Improve a pin combination case around selfy types (#​1024)
  • Rescue reference errors in hosts (#​1105)
  • Relax bundler runtime dependency version constraint to support newer versions (#​1125)
  • Remove stale Pathname test (#​1135)
  • Enable strong type checking in CI (#​928)
  • Stale sg-ignore
  • Use rbs 3.9.5 in tests (#​1136)
  • Drop broken 'namespaces' method (#​1065)
  • Add ActiveRecord example from RBS (#​1074)
  • Keep workspace directories as absolute paths (#​1076)
  • Handle bad gem_dir from gemspec object (#​1079)
  • Test for absolute require paths (#​1137)
  • [regression] Fix resolution of ambiguous argument types (#​1098)
  • Remove sg-ignore for String#=~ (#​1138)
  • Allow levels to be changed for typechecking rules in .solargraph.yml (#​1126)

v0.57.0

Compare Source

  • Support ActiveSupport::Concern pattern for class methods (#​948)
  • More CI checks (#​996)
  • Linting / type annotation fixes (#​999)
  • Avoid overlapping chdir calls in multiple threads (#​1007)
  • Fix kwarg generation in ApiMap::SourceToYard (#​1003)
  • Enable Steep typechecking of Solargraph code (#​1004)
  • Fix convention requires (#​1008)
  • Plugin Util: Add Combination Priority (#​1010)
  • [regression] Fix crash while typechecking files with Struct use (#​1031)
  • Remove yard reference from gemfile (#​1033)
  • Allow newer RBS gem versions, exclude incompatible ones (#​995)
  • Look for external requires before cataloging bench (#​1021)
  • Remove Library#folding_ranges (#​904)
  • Complain in strong type-checking if an @​sg-ignore line is not needed (#​1011)
  • Document a log level env variable (#​894)
  • Fix hole in type checking evaluation (#​1009)
  • Improve typechecking error message (#​1014)
  • Internal strict type-checking fixes (#​1013)
  • Reproduce and fix a ||= (or-asgn) evaluation issue (#​1017)
  • Define closure for Pin::Symbol, for completeness (#​1027)
  • Fix 'all!' config to reporters (#​1018)
  • Fix DocMap.all_rbs_collection_gems_in_memory return type (#​1037)
  • Fix RuboCop linting errors in regular expressions (#​1038)
  • Resolve class aliases via Constant pins (#​1029)
  • Speed-up LSP completion response times (#​1035)
  • Revert "Resolve class aliases via Constant pins (#​1029)" (#​1041)
  • Avoid stack errors when resolving method aliases (#​1040)
  • [regression] Refine order of object convention method pins (#​1036)
  • Fix crash while generating activesupport pins (#​1043)
  • Type annotation improvements (#​1016)
  • Resolve class aliases via Constant pins (#​1048)
  • Understand "Parser::AST::Node < AST::Node" in RBS (#​1060)
  • Factor out require_paths logic to its own class (#​1062)
  • Fix type errors found in strong typechecking (#​1045)
  • Run plugin specs separately for perf insights (#​1046)
  • Run specs from solargraph-rails configured against current code in CI (#​892)
  • Fix Convention/Plugin pins not being updated on file change (#​1028)
  • Fix solargraph-rails check (#​1073)
  • Flow sensitive typing handles x.is_a? without an argument (#​1070)
  • Refactor reference pin handling (#​1058)

v0.56.2

Compare Source

  • Add support for Ruby Data.define (#​970)
  • Ensure that pin locations are always populated (#​965)
  • Improve struct support (#​992)
  • Include Rakefile, Gemfile, and gemspec files in config by default (#​984)
  • Use Open3 to cache gemspecs (#​1000)
  • Eager load node processors (#​1002)

v0.56.1

Compare Source

  • Library avoids blocking on pending yardoc caches (#​990)
  • DocMap checks for default Gemfile (#​989)
  • [Bug fix] Fixed an error in rbs/fills/tuple.rbs (#​993)

v0.56.0

Compare Source

  • [regression] Gem caching perf and logging fixes #​983

v0.55.5

Compare Source

  • Flatten results of DocMap external bundle query (#​981)
  • [breaking] Reimplement global conventions (#​877)
  • GemPins pin merging improvements (#​946)
  • Support class-scoped aliases and attributes from RBS (#​952)
  • Restructure ComplexType specs towards YARD doc compliance (#​969)
  • Use Prism (#​974)
  • Document pages (#​977)
  • Enable disabled-but-working specs (#​978)
  • Map RBS 'untyped' type (RBS::Types::Bases::Any) to 'undefined' (#​979)
  • Re-enable support for .gem_rbs_collection directories (#​942)
  • [breaking] Comply with YARD documentation on Hash tag format (#​968)
  • Ignore directory paths in Workspace#would_require? (#​988)

v0.55.4

Compare Source

  • Flatten results of DocMap external bundle query (#​981)

v0.55.3

Compare Source

  • Nil guards in flow-sensitive typing (patch release) (#​980)

v0.55.2

Compare Source

  • Require external bundle (#​972)

v0.55.1

Compare Source

  • Fix inline Struct definition (#​962)
  • Ensure DocMap requires bundler when loading gemspecs (#​963)
  • DelegatedMethod improvements (#​953)

v0.55.0

Compare Source

  • Flow-sensitive typing - automatically downcast from is_a? calls (#​856)
  • Tuple enabler: infer literal types and use them for signature selection (#​836)
  • Signature selection improvements (#​907)
  • Add support for Ruby Structs (#​939)
  • [regression] Fix interface change breaking solargraph-rails (#​940)
  • [regression] Add back bundler/require support for solargraph-rails (#​941)
  • Add specs for initialize capabilities (#​955)
  • Create MethodAlias pins from YARD (#​945)
  • MessageWorker prioritizes synchronization (#​956)
  • initialize/new method pin cleanups (#​949)
  • Clip rebinds blocks when cursor is not part of receiver (#​958)

v0.54.5

Compare Source

v0.54.4

Compare Source

v0.54.3

Compare Source

  • Improve inspect()/desc()/to_s() methods for better debugging output (#​913)
  • Fix generic resolution in Hash types (#​906)
  • Stop parsing RBS type parameter constraints as the type name (#​918)
  • Fix pin inference stack (#​922)
  • Refactor pin equality for performance (#​925)
  • Improve ApiMap catalog speed by preserving static pin indexes (#​930)
  • Update jaro_winkler dependency (#​931)

v0.54.2

Compare Source

  • Resolve generics correctly on mixin inclusion (#​898)
  • Pick correct String#split overload (#​905)
  • Fix type sent into YARD method (#​912)
  • Early CancelRequest handling (#​914)
  • Destructure partial yield types (#​915)
  • Dependency versions (#​916)

v0.54.1

Compare Source

  • Retire more RubyVM-specific code (#​797)
  • Add additional docs for key classes, modules and methods (#​802)
  • Populate location information from RBS files (#​768)
  • Consolidate parameter handling into Pin::Callable (#​844)
  • Adjust local variable presence to start after assignment, not before (#​864)
  • Resolve params from ref tags (#​872)
  • Reduce use of ComplexType.parse() to preserve rooted? information (#​870)
  • Ensure yield return types are qualified (#​886)
  • Understand type of 'def foo; @​foo ||= bar; end' reader methods (#​888)
  • Improvements to #inspect output on pins and chains (#​895)
  • Block method resolution improvements (#​885)
  • Understand mass assignment into instance variables (#​893)
  • Library sync and cache invalidation (#​903)
  • Handle super and yield scenarios from blocks (#​891)
  • Allow core and stdlib documentation to be uncached (#​899)
  • Surface variable names in LSP, e.g., textDocument/hover (#​910)
  • Keep idle progress notifications alive (#​911)

v0.54.0

Compare Source

  • Add support for simple block argument destructuring (#​821)
  • Benchmark the typecheck command (#​852)
  • Send Gem Caching Progress Notifications to LSP Clients (#​855)
  • [breaking] Fix more complex_type_spec.rb cases (#​813)
  • Mass assignment support - e.g., a, b = ['1', '2'] (#​843)
  • Memoize result of Chain#infer (#​857)
  • Ignore malformed mixins and overloads (#​862)
  • Drop Parser::ParserGem::ClassMethods#returns_from_node (#​866)
  • Refactor TypeChecker#argument_problems_for for type safety (#​867)
  • Specify more type behavior for variable reassignment (#​863)
  • One-step source synchronization (#​871)
  • Show cache progress in shell commands (#​874)
  • Fix miscellaneous scan errors (#​875)
  • Synchronous libraries (#​876)
  • Fix parsing of Set#classify method signature from RBS (#​878)
  • Sync Library#diagnose (#​882)
  • Doesn't false-alarm over splatted non-final args in typechecking (#​883)
  • Remove accidental inclusion of Module's methods in objects (#​884)
  • Remove another splat-related false alarm in strict typechecking (#​889)
  • Change require path warn to debug (#​897)

v0.53.4

Compare Source

  • [regression] Restore 'Unresolved call' typecheck for stdlib objects (#​849)
  • Lazy dynamic rebinding (#​851)
  • Restore fill for Class#allocate (#​848)
  • [regression] Ensure YardMap gems have return type for Class.new (#​850)
  • Create implicit .new pins in namespace method queries (#​853)

v0.53.3

Compare Source

  • Remove redundant core fills (#​824, #​841)
  • Resolve self type in variable assignments (#​839)
  • Eliminate splat-related false-alarms in strict typechecking (#​840)
  • Dynamic block binding with yieldreceiver (#​842)
  • Resolve generics by descending through context type (#​847)

v0.53.2

Compare Source

  • Fix a self-type-related false-positive in strict typechecking (#​834)
  • DocMap fetches gem dependencies (#​835)
  • Use configured command path to spawn solargraph processes (#​837)

v0.53.1

Compare Source

  • Reject nil requires in live code (#​831)
  • RbsMap adds mixins to current namespace (#​832)

v0.53.0

Compare Source

  • Fix crash on generic methods (#​762)
  • Add more type annotations to the codebase (#​763 et al.)
  • Address remaining typecheck issues at 'typed' level and add CI task (#​764)
  • Fix crash during strict typechecking (#​766)
  • DeepInference: Fix some bugs, add docs, refactor (#​767)
  • Include "self type" methods like Enumerable#each from RBS files (#​769)
  • Handle RBS global, module alias, class variable and class instance variable declarations (#​770)
  • Add support for generic includes via RBS (#​773)
  • Handle parsing tuples of tuples in tags (#​775)
  • Retire the RubyVM parser (#​776)
  • Improve block handling in signature selection (#​780)
  • Require Ruby >= 3 (#​791)
  • Cache YARD and RBS (#​781)
    • Language server generates gem documentation in the background
  • Fix bug handling Array(A, B) syntax while resolving generics (#​784)
  • Fix typeDefinitions for neovim (#​792)
  • Infer block-pass symbols (#​793)
  • Add #to_rbs methods to pins, use for better .inspect() output (#​789)
  • Remove deprecated commands (#​790)
  • Add :if support to NodeChainer for if statements as lvalues (#​805)
  • Fix ApiMap::Cache (#​806)
  • Map mixins from RBS (#​808)
  • Fix issue with wrong signature selection by call with block node (#​815)
  • Keep gem pins in memory (#​811)
  • Refactor gems command (#​816)
  • Use return type of literal blocks in inference (#​818)
  • Insert Module methods (#​820)
  • Revise documentation formatting (#​823)

v0.52.0

Compare Source

  • Chains resolve identical names with different contexts (#​679)
  • Handle symbol tags in method tag values (#​744)
  • Infer more specific Array types when possible (#​745)
  • Handle interpolated symbol literals (#​747)
  • Handle combined conditions, else clauses in case statements (#​746)
  • fix: support find require xxx.rb in local workspace. (#​722)
  • Don't require redundant attribute @​return and @​param tags (#​748)
  • Use @​yieldreturn tags for type inference (#​749)
  • Fix type annotations identified at 'typed' level (#​750)
  • Support RBS class aliases (#​751)
  • Better support for generics via Class @​param tags (#​743)
  • Generic module support through RBS (#​757)
  • Fix inference of begin expression types (#​754)
  • Add argument to satisfy typechecker on which signature to use (#​755)
  • Fix RBS ingestion implicit initializer issues, missing param types (#​756)
  • Validate zsuper arity
  • Use yard-solargraph plugin (#​759)
  • Add missing RBS types

v0.51.2

Compare Source

  • Fix exception from parser when anonymous block forwarding is used (#​740)
  • Parameterized Object types
  • Remove extraneous comment from method examples

v0.51.1

Compare Source

  • Format example code
  • Block infers yieldreceiver from chain

v0.51.0

Compare Source

  • Resolve self in yieldreceiver tags
  • Include absolute paths in config (#​674)
  • Enable diagnostics by default
  • Fix cache resolution (#​704)
  • Modify rubocop option for rubocop < 1.30 (#​665)
  • Include absolute paths in config (#​674)
  • Enable diagnostics by default
  • Remove RSpec convention (#​716)
  • Include convention pins in document_symbols (#​724)
  • Implement Go To Type Definition (#​717)
  • Remove e2mmap dependency (#​699)
  • Update rbs to 3.0
  • Relax reverse_markdown dependency (#​729)
  • Fix Ruby 3.4 and move all parsing to whitequark (#​739)
  • Add Pin::DelegatedMethod (#​602)
  • Complete global methods from a file inside namespaces (#​714)
  • gemspec dashes and required path slashes (#​697)

v0.50.0

Compare Source

  • Remove .travis.yml as its not longer used (#​627)
  • Fix empty string case when processing requires (#​644)
  • Fix scope() method call on wrong object (#​670)
  • Parse comments that start with multiple hashes (#​667)
  • Use XDG_CACHE_HOME if it exists (#​664)
  • Add rbs mention to readme (#​693)
  • Remove Atom from the readme (#​692)
  • Add more metadata to the gemspec (#​691)
  • Do not deprecate clear command
  • Library#locate_ref returns nil for unresolved requires (#​675)
  • Hide deprecated commands
  • List command
  • Fixes (or ignores) ffi crash (#​676)
  • increase sleep time on cataloger (#​677)
  • YardMap ignores absolute paths (#​678)
  • Clarify macros vs. directives
  • Infer complex types from method calls
  • Default cache uses XDG_CACHE_HOME default (#​664)

v0.49.0

Compare Source

  • Better union type handling
  • First version of RBS support
  • Dependency updates
  • Update RuboCop config options
  • RBS core and stdlib mapping
  • Anonymous splats and multisig arity
  • Infinite loop when checking if a class is a superclass (#​641)
sparklemotion/sqlite3-ruby (sqlite3)

v2.9.3

Compare Source

v2.9.2

Compare Source

travisjeffery/timecop (timecop)

v0.9.11

Compare Source

  • Fix Time.new keyword arguments on JRuby 10 (#​443)
  • Fix time-only DateTime.parse (HH:MM format) incorrectly using host clock under freeze (#​440)
  • Require Ruby >= 2.1.0 (#​423)
  • Revert travel_offset precision change (#​430)
vitejs/vite (vite)

[v8.0.9](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-809-2026-04

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 13, 2026 •
edited
Loading

Container Scanning Status: ❌ Failure

NAME                     INSTALLED        FIXED IN         TYPE  VULNERABILITY        SEVERITY  EPSS           RISK   
net-imap                 0.4.19           0.4.20           gem   GHSA-j3g3-5qv5-52mj  Medium    0.5% (67th)    0.3    
erb                      4.0.3            4.0.3.1          gem   GHSA-q339-8rmv-2mhv  High      0.1% (28th)    < 0.1  
erb                      6.0.1            6.0.1.1          gem   GHSA-q339-8rmv-2mhv  High      0.1% (28th)    < 0.1  
erb                      6.0.2            6.0.4            gem   GHSA-q339-8rmv-2mhv  High      0.1% (28th)    < 0.1  
resolv                   0.3.0            0.3.1            gem   GHSA-xh69-987w-hrp8  Medium    < 0.1% (25th)  < 0.1  
addressable              2.8.10           2.9.0            gem   GHSA-h27x-rffw-24p4  High      < 0.1% (18th)  < 0.1  
libssl3t64               3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28387       High      < 0.1% (12th)  < 0.1  
openssl                  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28387       High      < 0.1% (12th)  < 0.1  
openssl-provider-legacy  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28387       High      < 0.1% (12th)  < 0.1  
libssl3t64               3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28389       High      < 0.1% (12th)  < 0.1  
libssl3t64               3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28390       High      < 0.1% (12th)  < 0.1  
openssl                  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28389       High      < 0.1% (12th)  < 0.1  
openssl                  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28390       High      < 0.1% (12th)  < 0.1  
openssl-provider-legacy  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28389       High      < 0.1% (12th)  < 0.1  
openssl-provider-legacy  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28390       High      < 0.1% (12th)  < 0.1  
picomatch                4.0.3            4.0.4            npm   GHSA-3v7f-55p6-f55p  Medium    < 0.1% (17th)  < 0.1  
json                     2.18.0           2.19.2           gem   GHSA-3m6g-2423-7cp3  High      < 0.1% (10th)  < 0.1  
libssl3t64               3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-31789       Critical  < 0.1% (7th)   < 0.1  
openssl                  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-31789       Critical  < 0.1% (7th)   < 0.1  
openssl-provider-legacy  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-31789       Critical  < 0.1% (7th)   < 0.1  
libssl3t64               3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28388       High      < 0.1% (5th)   < 0.1  
openssl                  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28388       High      < 0.1% (5th)   < 0.1  
openssl-provider-legacy  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-28388       High      < 0.1% (5th)   < 0.1  
picomatch                4.0.3            4.0.4            npm   GHSA-c2c7-rcm5-vvqj  High      < 0.1% (5th)   < 0.1  
libssl3t64               3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-2673        High      < 0.1% (4th)   < 0.1  
openssl                  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-2673        High      < 0.1% (4th)   < 0.1  
openssl-provider-legacy  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-2673        High      < 0.1% (4th)   < 0.1  
libssl3t64               3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-31790       High      < 0.1% (3rd)   < 0.1  
openssl                  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-31790       High      < 0.1% (3rd)   < 0.1  
openssl-provider-legacy  3.5.5-1~deb13u1  3.5.5-1~deb13u2  deb   CVE-2026-31790       High      < 0.1% (3rd)   < 0.1  
zlib                     3.1.1            3.1.2            gem   GHSA-g857-hhfv-j68w  Medium    < 0.1% (2nd)   < 0.1  
rexml                    3.3.9            3.4.2            gem   GHSA-c2f4-jgmc-q2r5  Low       < 0.1% (6th)   < 0.1  
bcrypt                   3.1.21           3.1.22           gem   GHSA-f27w-vcwj-c954  Medium    < 0.1% (0th)   < 0.1  
uri                      0.13.2           0.13.3           gem   GHSA-j4pr-3wm6-xx2r  Low       < 0.1% (0th)   < 0.1

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from a21002d to efc1d34 Compare April 14, 2026 17:03
@renovate renovate Bot changed the title Update all non-major dependencies to v2.7.5 Update all non-major dependencies Apr 14, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from b7c230b to 2b65b55 Compare April 23, 2026 17:12
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from fc6a8b3 to f40d4ed Compare April 29, 2026 01:27
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from f40d4ed to 4ded5f3 Compare May 4, 2026 04:51
@tpendragon tpendragon merged commit 693cd5c into main May 4, 2026
7 checks passed
@tpendragon tpendragon deleted the renovate/all-minor-patch branch May 4, 2026 05:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tpendragon tpendragon tpendragon approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@tpendragon