Repository navigation
Bump code-infra:patchUpdates - #6139
Open
code-infra-renovate[bot] wants to merge 1 commit into
Open
code-infra-renovate[bot] wants to merge 1 commit into
code-infra-renovate[bot] wants to merge 1 commit into
Conversation
code-infra-renovate
Bot
requested review from
atomiks,
flaviendelangle,
jjenzz and
michaldudak
as code owners
October 30, 2026 02:19
commit: |
Bundle size
PerformanceNo regressions in 36 benchmarks · ran 4m 07s · details Check out the code infra dashboard for more information about this PR. |
✅ Deploy Preview for base-ui ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
michaldudak
approved these changes
Oct 30, 2026
github-actions
Bot
added
the
PR: out-of-date
code-infra-renovate
Bot
force-pushed
the
renovate/code-infra-patchupdates
branch
from
October 30, 2026 12:21
e6bfdb9 to
62d593c
Compare
github-actions
Bot
added
PR: out-of-date
code-infra-renovate
Bot
force-pushed
the
renovate/code-infra-patchupdates
branch
from
October 30, 2026 14:15
62d593c to
386cdcd
Compare
github-actions
Bot
removed
the
PR: out-of-date
code-infra-renovate
Bot
force-pushed
the
renovate/code-infra-patchupdates
branch
4 times, most recently
from
November 3, 2026 11:12
4a08b69 to
5bffb9b
Compare
code-infra-renovate
Bot
force-pushed
the
renovate/code-infra-patchupdates
branch
from
November 6, 2026 18:16
5bffb9b to
f12faa0
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^1.53.0→^1.53.1^10.7.4→^10.7.6^8.5.31→^8.5.32^8.22.0→^8.22.1bump,lockfileUpdate, orrollbackupdates, so these are raised without a Minimum Release Age check. You will need to manually validate the Minimum Release Age for these package(s).Release Notes
toss/es-toolkit (es-toolkit)
v1.53.1Compare Source
Released on October 31st, 2026.
This release includes security fixes for
es-toolkit/compat, and we recommend upgrading.The fixes match Lodash, so results may differ if you relied on the previous behavior.
compat/templateto rejectvariablevalues andimportskeys that are notplain parameter names, and to replace all whitespace in
sourceURL, preventing code injection.compat/defaultsDeepto ignore__proto__keys, preventing prototype pollution.compat/unset,compat/omit, andcompat/pullAtto stop when__proto__,constructor, orprototypeappears before the last path key, preventing the deletionof built-in prototype properties.
The following are other fixes in this release.
cloneto preserve the offset and length of aDataView. ([#2166])splitto keep surrogate pairs and combining marks together for an empty separator. ([#2171])withTimeoutto clear its timer after the operation completes. ([#2170])compat/pickByto not treat objects with a numeric length as array-like. ([#2165])compat/findLastandcompat/someto not treatlengthas an element ofarray-likes. ([#2168])
We sincerely thank @arba-octo, @dayongkr, @frogscooper, and @KooYS for their contributions.
We appreciate your great efforts!
beaugunderson/ip-address (ip-address)
v10.7.6Compare Source
Full Changelog: beaugunderson/ip-address@v10.7.5...v10.7.6
v10.7.5Compare Source
Full Changelog: beaugunderson/ip-address@v10.7.4...v10.7.5
postcss/postcss (postcss)
v8.5.32Compare Source
Input#origin()withoutopts.from(by @wleeaf).startinWarning#toString()(by @Don-Yin).Promisesemantics inLazyResult#finally()(by @Don-Yin).websockets/ws (ws)
v8.22.1Compare Source
Bug fixes
:(#2344).Other notable changes
http.websocketMask()andhttp.websocketUnmask()are now usedinstead of the
bufferutilvariants when available (2ab3d3e).Sender.frame()no longer returns empty chunks (85319a7).Configuration
📅 Schedule: (in timezone UTC)
* 2-6 * * 5)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by self-hosted Renovate.