fix(deps): update all patch dependencies - #2754
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/all-patch
branch
8 times, most recently
from
August 12, 2026 17:28
193f818 to
95f864e
Compare
Contributor
Author
|
renovate
Bot
force-pushed
the
renovate/all-patch
branch
from
August 12, 2026 17:43
95f864e to
411ec4e
Compare
renovate
Bot
force-pushed
the
renovate/all-patch
branch
from
August 12, 2026 17:46
411ec4e to
fde4e65
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
6.0.4→6.0.51.43.54→1.43.641.43.69(+4)22.23.1-alpine→22.23.2-alpine22.23.1→22.23.23.19.15→3.19.17Review
Release Notes
vitejs/vite-plugin-react (@vitejs/plugin-react)
v6.0.5Compare Source
Fixed the react compiler preset filter to be linear (#1353)
The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.
boto/boto3 (boto3)
v1.43.64Compare Source
=======
connect: [botocore] Amazon Connect Customer now supports up to 50 attachments per email, increased from the previous limit of 10. The individual maximum attachment size limit of 20 MB and the total email size limit of 25 MB still hold true.dsql: [botocore] UpdateCluster now checks the RemovePeerCluster permission on the specific cluster being removed, not a wildcard and docs now clarify how to set kmsEncryptionKey so the cluster uses the AWS-owned key.dynamodb: [botocore] Vector indexes are a type of index in Amazon DynamoDB that enable similarity search on vector embedding stored in your table items. Vector indexes use approximate nearest neighbor search to find items whose vectors are most similar to a query vector that you provide.ec2: [botocore] Amazon EC2 now supports Application Status Checks, a new status check that monitors your application's health through configurable HTTP(S) paths and ports, so you can detect and automatically respond to application-level impairments.endpoint-rules: [botocore] Update endpoint-rules client to latest versioniam: [botocore] Updating endpoint generation logicinspector2: [botocore] Adding Azure SBOM export capability.organizations: [botocore] Improved accuracy of CloudTrail event documentation for AWS Organizations membership operations.partnercentral-selling: [botocore] Partners can now create leads with only 5 required fields and free-text values for all other fields, reducing import friction. Engagement invitations now include enrichment data (propensity scores, lead readiness) directly in the response.sso-admin: [botocore] AWS IAM Identity Center now lets you create organization-level instances without enabling multi-account permissions. You can enable multi-account permissions during instance creation or later via console or API, which then provisions the necessary service-linked roles.workspaces: [botocore] Added ClientExperiencePolicy to ClientProperties object for ModifyClientProperties and DescribeClientProperties APIs.v1.43.63Compare Source
=======
directconnect: [botocore] Added route visibility support for AWS Direct Connect, allowing customers to call ListVirtualInterfaceRoutes to view the BGP routes including AS path and BGP communities advertised over their virtual interfaces.eks-auth: [botocore] Added eksNodeName, instanceId, and zone optional parameters to the AssumeRoleForPodIdentity API.mediaconvert: [botocore] Updates Kantar server URL validation to accept Fifty5Blue domain. Adds support for output to S3 Glacier Instant Retrieval.network-firewall: [botocore] This launch allows customers to use Network Firewall as an explicit Proxy and protect their workloads against threat of data exfiltration.observabilityadmin: [botocore] Launch CMK support for Telemetry Enablement Organization and Account Rules.timestream-influxdb: [botocore] This release adds support for customer-managed backup restore, and encryption of new DbInstances and DbClusters using customer-managed KMS keys.wafv2: [botocore] Updated descriptions for number of PreParseTextTransformations allowed per rule statementv1.43.62Compare Source
=======
amp: [botocore] Amazon Managed Service for Prometheus adds support for an Amazon OpenSearch Service exporter for managed collectors.bedrock-runtime: [botocore] Added support for mid-conversation tool changes in the Amazon Bedrock Converse and ConverseStream APIsbilling: [botocore] Adds GetEnterpriseSupportChargeSummary, GetEnterpriseSupportContractDetails, and ListEnterpriseSupportLinkedAccountCharges. These APIs provide first-time programmatic access to billing data for Enterprise Support usage previously only available upon request through AWS Concierge or Support.cloudformation: [botocore] Adding enum for sensitive property to DriftIgnoredReasonconnectcampaignsv2: [botocore] Launching feature for abandonment rate pacing control for outbound campaigns.datazone: [botocore] Adding support for enhanced Git experience in Sagemaker Unified Studio.elementalinference: [botocore] AWS Elemental Inference now supports graphic composition on cropped video outputs, enabling branded graphics and other visual elements to be overlaid as part of the inference workflow.endpoint-rules: [botocore] Update endpoint-rules client to latest versionlogs: [botocore] Amazon CloudWatch Logs now lets you create and update lookup tables directly from CloudWatch Logs query results by passing a queryId, and configure a lookup table as a scheduled query destination so it refreshes automatically with the latest query results on each run.marketplace-catalog: [botocore] This release enhances the ListEntities API to support TargetAgreementId, TargetAgreementIntent, and CreatedBySource filters for the Offer entity type.network-firewall: [botocore] Doc Updates for Container Attributesoutposts: [botocore] Adds the "EKS" value to the AWSServiceName enum and marks the Address field as sensitive.quicksight: [botocore] Adding TopicV2 management APIs, adding possibility to use Topics in Analysisrds: [botocore] Adds StorageOperationStatus and StorageOperationPercentProgress to DescribeDBInstances, letting you monitor RDS storage initialization and optimization progress.resiliencehubv2: [botocore] Adding support for new testing capability in AWS Resilience Hub.v1.43.61Compare Source
=======
bcm-pricing-calculator: [botocore] Removing Smithy RPC v2 CBOR support that was added in previous SDK release.bcm-recommended-actions: [botocore] Removing Smithy RPC v2 CBOR support that was added in previous SDK release.v1.43.60Compare Source
=======
bedrock-agentcore-control: [botocore] Adds support for configuring models through the OpenResponses API for custom evaluators. CreateEvaluator and UpdateEvaluator now accept an OpenResponses model configuration for LLM-as-a-Judge evaluations.endpoint-rules: [botocore] Update endpoint-rules client to latest versioniam: [botocore] Improved IAM Policy Simulator accuracy. Simulator now evaluates SCP conditions and resource scoping, returns explicitDeny for explicit SCP denials, and reports accurate cross-account decisions.kafka: [botocore] Amazon MSK Express brokers now support streaming tables for Apache Iceberg, continuously materializing Apache Kafka topics as Iceberg tables in Amazon S3 Tables. Express brokers also now support data delivery to Amazon S3 general purpose buckets.lambda: [botocore] Add Python3.15 (python3.15) and NodeJs 26 (nodejs26.x) support to AWS Lambdanetwork-firewall: [botocore] Adds UPDATING field to Container Association Statuspricing-plan-manager: [botocore] Adds support for Public PricingPlanManager SDKsagemaker: [botocore] Adds support for g7 family instance types for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), PDX (us-west-2), CMH (us-east-2).securityagent: [botocore] Adds support for providing a branch override when configured integrated repositoriesv1.43.59Compare Source
=======
dms: [botocore] Updated documentation for various DMS Schema Conversion operationsec2: [botocore] This release adds support for policy-based routing on AWS Transit Gateway, enabling you to route traffic based on 5-tuple matching (source IP, destination IP, source port, destination port, and protocol) using new policy table entry APIs that direct matching traffic to a target route table.gameliftstreams: [botocore] Adds ListApplicationShaderCaches API to retrieve shader cache metadata for applications and adds stream URLs, which give end users temporary, unauthenticated access to a stream session in their browser. Includes CreateStreamUrl, GetStreamUrl, ListStreamUrls, and RevokeStreamUrl operations.glue: [botocore] Adding filtering, partitioning, and VPC support to AWS Glue REST API connectoriotsitewise: [botocore] We have released a new set of APIs in support of a major new feature within AWS IoT SiteWise called Scenario Discover. Please see user guide about the feature and the API guide in public documentation for new APIs.wafv2: [botocore] AWS WAF now supports pre-parse text transformations, letting you normalize raw query strings before parsing, available on rule statements that use SingleQueryArgument or AllQueryArguments as the FieldToMatch. AWS WAF also added 10 new text transformations, including ModSecurity v3 parity options.v1.43.58Compare Source
=======
bedrock-agentcore-control: [botocore] AgentCore Identity now supports Private Key JWT client authentication for OAuth 2.0 credential providers. Agents can authenticate to identity provider token endpoints with a JWT client assertion signed by a customer-managed AWS KMS asymmetric key, eliminating the need for client secrets.connect: [botocore] Documentation updates for SearchRules, AssociateRoutingProfileQueues, CreateRoutingProfile, AssociateContactWithUser CreateTaskTemplate, and UpdateTaskTemplatedatasync: [botocore] Adds Enhanced mode support for EFS and FSx Lustre locations without an agent, and for HDFS (TDE), Azure Blob, and object storage locations with an agent. HDFS Enhanced mode supports multiple NameNodes for High Availability. Enhanced mode agents can now be deployed on Microsoft Hyper-V.rolesanywhere: [botocore] Increases certificate string length for trust anchor source data to support new adjustable trust anchor limits.trustedadvisor: [botocore] Adds ListRecommendationsForResource API and four CheckSummary fields (resourceArnQueryable, awsResourceTypes, checkGranularity, recommendationId) to retrieve recommendations for a given resource ARN.v1.43.57Compare Source
=======
account: [botocore] This release adds support for the GetPrimaryEmailUpdateStatus API operation, which allows customers to retrieve the current status of a primary email address update request for an AWS account. The operation returns status information including whether the update is pending, completed, or failed.bcm-data-exports: [botocore] With this release, customers can configure their data exports to deliver CSV reports in ZIP compressed format.cleanrooms: [botocore] This release adds support for the CR.8X worker type for SQL (32 vCPU)cleanroomsml: [botocore] This release adds support for the CR.8X worker type for SQL (32 vCPU)emr-containers: [botocore] With this launch, you can now set concurrent job limits on a virtual cluster, giving you fine-grained control over how many job runs execute at once and how many can wait in queue.glue: [botocore] Adds BatchGetDataQualityRulesetEvaluationRun API to retrieve multiple runs in one call, ObservationScope and ObservationMode parameters for anomaly detection, writing evaluation results to Data Catalog tables, and custom log group paths for recommendation runs.partnercentral-account: [botocore] Adds optional headquarters location to StartProfileUpdateTask, letting partners record their headquarters as an ISO 3166 country and subdivision code on their profile. When headquarters is provided, both the country and subdivision codes are required.quicksight: [botocore] Added new Governance fields to Custom Permissions API to support Deny By Default functionality.sagemaker: [botocore] This release adds LoRA adapters, training plans, and new instance types to SageMaker inference optimization. CreateAIRecommendationJob accepts optional AdapterSource and CreateOptimizationJob accepts optional TrainingPlanArns and the ml.g7e and ml.p6-b200 families.securityagent: [botocore] AWS Security Agent adds a new task hours field that reflects the active work done for a task.v1.43.56Compare Source
=======
application-insights: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.artifact: [botocore] Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments.cognito-idp: [botocore] Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool.endpoint-rules: [botocore] Update endpoint-rules client to latest versionneptune-graph: [botocore] Update validations for Tag Keys and KMS Key ARNs.odb: [botocore] Documentation-only update to clarify the operation-specific valid values for the externalIdType field.rtbfabric: [botocore] The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead.v1.43.55Compare Source
=======
appstream: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.backup-gateway: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.bcm-pricing-calculator: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.bcm-recommended-actions: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.bedrock-agentcore: [botocore] Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points.bedrock-agentcore-control: [botocore] Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points.datazone: [botocore] Adds support for notebook sync with S3 ipynb filesgameliftstreams: [botocore] GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping.kendra-ranking: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.mediapackagev2: [botocore] This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels.quicksight: [botocore] Added new capabilities to custom permissions profiles to control access to Amazon Quick through the browser extension and Microsoft Word, Outlook, Excel, and PowerPoint add-ins.redshift-data: [botocore] This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatementsagemaker: [botocore] Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPodworkspaces-instances: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.nodejs/node (node)
v22.23.2: 2026-07-29, Version 22.23.2 'Jod' (LTS), @marco-ippolitoCompare Source
This is a security release.
Notable Changes
Commits
4b12ac38a1] - deps: update llhttp to 9.4.3 (Paolo Insogna) nodejs-private/node-private#9353fd0aa51d0] - deps: update undici to 6.28.0 (Node.js GitHub Bot) #6471422efc051a3] - (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) nodejs-private/node-private#929c8525ac3a6] - (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) nodejs-private/node-private#932daa6d25e3d] - (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) nodejs-private/node-private#921f14d78b9e0] - (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) #6375251123159fe] - (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) nodejs-private/node-private#934acaf4266b2] - (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) nodejs-private/node-private#930440329f624] - (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) nodejs-private/node-private#911ed18b9cc07] - (CVE-2026-58039) permission: check final report output path (RafaelGSS) nodejs-private/node-private#9260566c3cccd] - (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) nodejs-private/node-private#9270d072480c3] - (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) nodejs-private/node-private#931translate/translate (translate-toolkit)
v3.19.17Compare Source
Released on 31 July 2026
This release contains bug fixes.
Changes
Formats and Converters
content
po2rctypes during PO conversion
Other
serialization errors
Contributors
This release was made possible by the following contributors:
Michal Čihař
v3.19.16Compare Source
Released on 30 July 2026
This release contains improvements and bug fixes.
Changes
Formats and Converters
odf2poandpo2odfconvertersdocuments
metadata
silently loading them with the wrong parser
Other
Contributors
This release was made possible by the following contributors:
Michal Čihař
Configuration
📅 Schedule: (in timezone America/Montreal)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.