build: update all non-major dependencies

[angular-robot]

This PR contains the following updates:

Package	Type	Update	Change
@pnpm/dependency-path (source)	devDependencies	patch	1000.0.6 -> 1000.0.7
@types/node (source)	dependencies	patch	22.14.0 -> 22.14.1
aspect_rules_js	http_archive	patch	v2.3.4 -> v2.3.5
github/codeql-action	action	patch	v3.28.13 -> v3.28.15
marocchino/sticky-pull-request-comment	action	patch	v2.9.1 -> v2.9.2
nock	devDependencies	patch	14.0.2 -> 14.0.3
renovate (source)	dependencies	minor	39.233.3 -> 39.239.0
typescript (source)	dependencies	patch	5.8.2 -> 5.8.3
undici (source)	devDependencies	minor	7.7.0 -> 7.8.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aspect-build/rules_js (aspect_rules_js)

v2.3.5

Compare Source

Many companies are successfully building with rules_js.
If you're getting value from the project, please let us know!
Just comment on our Adoption Discussion.

Using Bzlmod with Bazel 6:

Add to your MODULE.bazel file:

bazel_dep(name = "aspect_rules_js", version = "2.3.5")

####### Node.js version #########

### By default you get the node version from DEFAULT_NODE_VERSION in @​rules_nodejs//nodejs:repositories.bzl
### Optionally you can pin a different node version:
bazel_dep(name = "rules_nodejs", version = "6.3.0")
node = use_extension("@​rules_nodejs//nodejs:extensions.bzl", "node", dev_dependency = True)
node.toolchain(node_version = "16.14.2")

#################################

npm = use_extension("@​aspect_rules_js//npm:extensions.bzl", "npm", dev_dependency = True)

npm.npm_translate_lock(
    name = "npm",
    pnpm_lock = "//:pnpm-lock.yaml",
    verify_node_modules_ignored = "//:.bazelignore",
)

use_repo(npm, "npm")

pnpm = use_extension("@​aspect_rules_js//npm:extensions.bzl", "pnpm")

### Allows developers to use the matching pnpm version, for example:
### bazel run -- @​pnpm --dir /home/runner/work/rules_js/rules_js install
use_repo(pnpm, "pnpm")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "aspect_rules_js",
    sha256 = "1be1a3ec3d3baec4a71bc09ce446eb59bb48ae31af63016481df1532a0d81aee",
    strip_prefix = "rules_js-2.3.5",
    url = "https://github.com/aspect-build/rules_js/releases/download/v2.3.5/rules_js-v2.3.5.tar.gz",
)

load("@​aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")

rules_js_dependencies()

load("@​aspect_rules_js//js:toolchains.bzl", "DEFAULT_NODE_VERSION", "rules_js_register_toolchains")

rules_js_register_toolchains(node_version = DEFAULT_NODE_VERSION)

load("@​aspect_rules_js//npm:repositories.bzl", "npm_translate_lock")

npm_translate_lock(
    name = "npm",
    npmrc = "//:.npmrc",
    pnpm_lock = "//:pnpm-lock.yaml",
    verify_node_modules_ignored = "//:.bazelignore",
)

load("@​npm//:repositories.bzl", "npm_repositories")

npm_repositories()

What's Changed

• fix: accept empty, relative or absolute js_image_layer(root) paths by @​jbedard in https://github.com/aspect-build/rules_js/pull/2153
• fix: npm_translate_lock(exclude_package_contents["*"]) should only be a fallback if no explicit package found by @​jbedard in https://github.com/aspect-build/rules_js/pull/2151
• chore: remove unused workspace test data by @​jbedard in https://github.com/aspect-build/rules_js/pull/2144
• feat: add contrib/nextjs rules for building and running nextjs applications by @​jbedard in https://github.com/aspect-build/rules_js/pull/2150
• chore: add bazel8 ci by @​jbedard in https://github.com/aspect-build/rules_js/pull/1929
• refactor: move stardoc to docs/ submodule by @​alexeagle in https://github.com/aspect-build/rules_js/pull/2154
• chore: don't compile protoc under docs/ either by @​alexeagle in https://github.com/aspect-build/rules_js/pull/2156

Full Changelog: aspect-build/rules_js@v2.3.4...v2.3.5

github/codeql-action (github/codeql-action)

v3.28.15

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.15 - 07 Apr 2025

• Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #​2842

See the full CHANGELOG.md for more information.

v3.28.14

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.14 - 07 Apr 2025

• Update default CodeQL bundle version to 2.21.0. #​2838

See the full CHANGELOG.md for more information.

marocchino/sticky-pull-request-comment (marocchino/sticky-pull-request-comment)

v2.9.2

Compare Source

What's Changed

• Update @​octokit/graphql-schema & use biome by @​marocchino in https://github.com/marocchino/sticky-pull-request-comment/pull/1517
• build(deps): Bump undici from 5.28.4 to 5.28.5 by @​dependabot in https://github.com/marocchino/sticky-pull-request-comment/pull/1476
• build(deps-dev): Bump @​types/node from 22.10.7 to 22.14.0 by @​dependabot in https://github.com/marocchino/sticky-pull-request-comment/pull/1515
• build(deps): Bump @​octokit/request-error from 5.0.1 to 5.1.1 by @​dependabot in https://github.com/marocchino/sticky-pull-request-comment/pull/1490
• build(deps): Bump @​octokit/request from 8.1.4 to 8.4.1 by @​dependabot in https://github.com/marocchino/sticky-pull-request-comment/pull/1494
• build(deps): Bump @​octokit/plugin-paginate-rest from 9.1.2 to 9.2.2 by @​dependabot in https://github.com/marocchino/sticky-pull-request-comment/pull/1493

Full Changelog: marocchino/sticky-pull-request-comment@v2.9.1...v2.9.2

nock/nock (nock)

v14.0.3

Compare Source

Bug Fixes

• fetch: cloned response return correct url (#​2852) (8348274)

renovatebot/renovate (renovate)

v39.239.0

Compare Source

Features

• add replacementVersionTemplate to packageRules (#​35208) (f5d69a4)

Miscellaneous Chores

• deps: update dependency vite to v6.2.6 [security] (main) (#​35331) (3bdbd76)

v39.238.2

Compare Source

Bug Fixes

• workers/auto-replace: correctly handle prefix replacements (#​35265) (afd6415)

Miscellaneous Chores

• deps: update dependency @​types/luxon to v3.6.1 (main) (#​35313) (05ebbf3)
• deps: update dependency @​types/luxon to v3.6.2 (main) (#​35319) (790d0ea)
• deps: update dependency @​types/node to v22.14.0 (main) (#​35295) (2188ebb)
• deps: update dependency @​vitest/eslint-plugin to v1.1.39 (main) (#​35293) (043d665)
• deps: update dependency type-fest to v4.39.1 (main) (#​35302) (21e1e6f)

Code Refactoring

• gerrit: remove deprecated source branch as hashtags support (#​33329) (e64ca6b)

v39.238.1

Compare Source

Bug Fixes

• deps: update ghcr.io/containerbase/sidecar docker tag to v13.8.13 (main) (#​35289) (25eafdb)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v13.8.13 (main) (#​35288) (e0b85f3)

v39.238.0

Compare Source

Features

• datasource/github-runners: mark Windows Server 2025 as stable (#​35284) (ad5c45f)

v39.237.0

Compare Source

Features

• bitbucket-server: add support for changelogs (#​34569) (68a66a0)

v39.236.2

Compare Source

Bug Fixes

• deps: update ghcr.io/containerbase/sidecar docker tag to v13.8.12 (main) (#​35279) (702f18f)

v39.236.1

Compare Source

Bug Fixes

• tool/pixi: remove v prefix from raw version (#​35277) (e938454)

Miscellaneous Chores

• deps: update dependency pdm to v2.23.1 (main) (#​35275) (78ecd13)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v13.8.12 (main) (#​35278) (84454cf)

v39.236.0

Compare Source

Features

• conan: Add support for lockfile maintenance (#​28174) (564ee83)

v39.235.4

Compare Source

Bug Fixes

• changelogs: support massaging self-hosted gitlab URLs (#​35258) (8a93407)

Miscellaneous Chores

• deps: update dependency @​types/node to v22.13.17 (main) (#​35263) (12ea7e1)

v39.235.3

Compare Source

Bug Fixes

• deps: update ghcr.io/containerbase/sidecar docker tag to v13.8.11 (main) (#​35260) (e4eefde)

Miscellaneous Chores

• deps: update dependency @​types/luxon to v3.6.0 (main) (#​35236) (3619702)
• deps: update dependency @​types/node to v22.13.15 (main) (#​35237) (6fbcdb3)
• deps: update dependency @​types/node to v22.13.16 (main) (#​35246) (781a9cf)
• deps: update dependency pnpm to v10.7.1 (main) (#​35249) (b88a306)
• deps: update dependency type-fest to v4.39.0 (main) (#​35250) (d4da4a1)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v13.8.11 (main) (#​35259) (f6f5f4e)
• deps: update github/codeql-action action to v3.28.15 (main) (#​35235) (1de6ec9)
• deps: update python:3.13 docker digest to 18ecbd0 (main) (#​35243) (1b6f9df)
• deps: update python:3.13 docker digest to aaf6d3c (main) (#​35247) (e9ba9fc)
• deps: update vitest monorepo to v3.1.1 (main) (#​35221) (558809f)

Code Refactoring

• circleci: Simplify CircleCI extraction (#​35233) (8c00b15)

v39.235.2

Compare Source

Build System

• deps: update dependency @​renovatebot/osv-offline to v1.6.5 (main) (#​35232) (fcc9b47)

v39.235.1

Compare Source

Build System

• deps: update dependency luxon to v3.6.1 (main) (#​35230) (c91c875)

v39.235.0

Compare Source

Features

• schema: Add utility for detecting circular data (#​35223) (5ad8030)

Miscellaneous Chores

• deps: update github/codeql-action action to v3.28.14 (main) (#​35220) (a13f5da)
• label-actions: capitalize Renovate brandname (#​35222) (b53f2a9)

v39.234.0

Compare Source

Features

• add Azure Pipelines preset (#​35207) (4cb2bb2)
• manager/nuget: extract msbuild sdk from Import (#​35206) (727792a)

Documentation

• upgrade best practices: update preset code plus small rewrite (#​34837) (0be280b)

v39.233.6

Compare Source

Bug Fixes

• circleci: Ignore non-image alias items (#​35212) (e746331)

Documentation

• update references to renovate/renovate (main) (#​35213) (73c9fac)

Miscellaneous Chores

• deps: lock file maintenance (main) (#​35214) (3598dfb)
• deps: lock file maintenance (main) (#​35217) (57972f6)
• deps: update containerbase/internal-tools action to v3.10.19 (main) (#​35215) (60ef7bf)
• deps: update containerbase/internal-tools action to v3.10.20 (main) (#​35218) (7cc1fb2)
• deps: update dependency esbuild to v0.25.2 (main) (#​35210) (1107833)

Tests

• yaml: Fix code block indents (#​35211) (5d48319)

v39.233.5

Compare Source

Bug Fixes

• data: automatic update of static data (#​35203) (7dfad3e)

Build System

• deps: update dependency @​yarnpkg/core to v4.3.1 (main) (#​35205) (280a786)

v39.233.4

Compare Source

Miscellaneous Chores

• deps: update dependency vite to v6.2.5 [security] (main) (#​35192) (455e796)
• deps: update jaegertracing/jaeger docker tag to v2.5.0 (main) (#​35200) (a5f6834)

Tests

• manager/docker: add test for COPY --from with digest (#​35195) (8e1e8c6)

Build System

• deps: update dependency yaml to v2.7.1 (main) (#​35201) (35d3baa)

microsoft/TypeScript (typescript)

v5.8.3: TypeScript 5.8.3

Compare Source

For release notes, check out the release announcement.

• fixed issues query for Typescript 5.8.0 (Beta).
• fixed issues query for Typescript 5.8.1 (RC).
• fixed issues query for Typescript 5.8.2 (Stable).
• fixed issues query for Typescript 5.8.3 (Stable).

Downloads are available on:

• npm

nodejs/undici (undici)

v7.8.0

Compare Source

What's Changed

• cache: more efficient sqlite indices by @​ronag in https://github.com/nodejs/undici/pull/4142
• skip now failing wpts by @​mcollina in https://github.com/nodejs/undici/pull/4145
• apply some sqlite pragma optimizations by @​ronag in https://github.com/nodejs/undici/pull/4147
• types(websocket): Import from stream/web by @​Jiralite in https://github.com/nodejs/undici/pull/4038
• cache: don't check size if not necessary by @​ronag in https://github.com/nodejs/undici/pull/4140
• docs: fix inteceptors typo by @​dario-piotrowicz in https://github.com/nodejs/undici/pull/4151
• Update WPT by @​github-actions in https://github.com/nodejs/undici/pull/4141
• build(deps-dev): bump esbuild from 0.24.2 to 0.25.2 by @​dependabot in https://github.com/nodejs/undici/pull/4130

New Contributors

• @​Jiralite made their first contribution in https://github.com/nodejs/undici/pull/4038
• @​dario-piotrowicz made their first contribution in https://github.com/nodejs/undici/pull/4151

Full Changelog: nodejs/undici@v7.7.0...v7.8.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.