fix(deps): update npm - - package.json by renovate[bot] · Pull Request #1379 · finos/git-proxy

renovate · 2026-02-03T21:39:23Z

This PR contains the following updates:

Package	Change	Type	Update	Pending
@aws-sdk/credential-providers (source)	`^3.980.0` → `^3.993.0`	dependencies	minor	`3.995.0` (+1)
@babel/core (source)	`^7.28.6` → `^7.29.0`	devDependencies	patch
@esbuild/darwin-arm64	`^0.27.2` → `^0.27.3`	optionalDependencies	patch
@esbuild/darwin-x64	`^0.27.2` → `^0.27.3`	optionalDependencies	patch
@esbuild/linux-x64	`0.27.2` → `0.27.3`	optionalDependencies	patch
@esbuild/win32-x64	`0.27.2` → `0.27.3`	optionalDependencies	patch
@primer/octicons-react (source)	`^19.21.2` → `^19.22.0`	dependencies	minor
@types/node (source)	`^22.19.7` → `^22.19.11`	devDependencies	patch
@vitejs/plugin-react (source)	`^5.1.2` → `^5.1.4`	devDependencies	patch
axios (source)	`^1.13.4` → `^1.13.5`	dependencies	patch
cypress (source)	`^15.9.0` → `^15.10.0`	devDependencies	minor
eslint-plugin-cypress	`^5.2.1` → `^5.3.0`	devDependencies	patch
isomorphic-git (source)	`^1.36.3` → `^1.37.1`	dependencies	minor
mongo	`606f8e0` → `81ed620`		digest
node	`c028001` → `94a5714`	final	digest
node	`c028001` → `94a5714`	stage	digest
openid-client	`^6.8.1` → `^6.8.2`	dependencies	patch
simple-git (source)	`^3.30.0` → `^3.31.1`	dependencies	minor	`3.32.1` (+1)
typescript-eslint (source)	`^8.54.0` → `^8.56.0`	devDependencies	patch

Release Notes

aws/aws-sdk-js-v3 (@aws-sdk/credential-providers)

`v3.993.0`

Compare Source

Note: Version bump only for package @aws-sdk/credential-providers

evanw/esbuild (@esbuild/darwin-arm64)

`v0.27.3`

Compare Source

Preserve URL fragments in data URLs (#4370)

Consider the following HTML, CSS, and SVG:

index.html:

<!DOCTYPE html>
<html>
  <head><link rel="stylesheet" href="icons.css"></head>
  <body><div class="triangle"></div></body>
</html>

icons.css:

.triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url(./triangle.svg#x);
}

triangle.svg:

<svg xmlns="http://www.w3.org/2000/svg">
  <defs>
    <clipPath id="x">
      <path d="M0 0H10V10Z"/>
    </clipPath>
  </defs>
</svg>

The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

/* icons.css */
.triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
}

Parse and print CSS @scope rules (#4322)

This release includes dedicated support for parsing @scope rules in CSS. These rules include optional "start" and "end" selector lists. One important consequence of this is that the local/global status of names in selector lists is now respected, which improves the correctness of esbuild's support for CSS modules. Minification of selectors inside @scope rules has also improved slightly.

Here's an example:
```
/* Original code */
@&#8203;scope (:global(.foo)) to (:local(.bar)) {
  .bar {
    color: red;
  }
}

/* Old output (with --loader=local-css --minify) */
@&#8203;scope (:global(.foo)) to (:local(.bar)){.o{color:red}}

/* New output (with --loader=local-css --minify) */
@&#8203;scope(.foo)to (.o){.o{color:red}}
```
Fix a minification bug with lowering of for await (#4378, #4385)

This release fixes a bug where the minifier would incorrectly strip the variable in the automatically-generated catch clause of lowered for await loops. The code that generated the loop previously failed to mark the internal variable references as used.
Update the Go compiler from v1.25.5 to v1.25.7 (#4383, #4388)

This PR was contributed by @MikeWillCook.

primer/octicons (@primer/octicons-react)

`v19.22.0`

Compare Source

Minor Changes

#1157 18e3b9fd Thanks @janmaarten-a11y! - Add book-locked icon
Add comment-locked icon
Add issue-locked icon
Add git-pull-request-locked icon

vitejs/vite-plugin-react (@vitejs/plugin-react)

`v5.1.4`

Compare Source

Fix `canSkipBabel` not accounting for `babel.overrides` (#1098)

When configuring babel.overrides without top-level plugins or presets, Babel was incorrectly skipped. The canSkipBabel function now checks for overrides.length to ensure override configurations are processed.

cypress-io/cypress (cypress)

`v15.10.0`

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-10-0

isomorphic-git/isomorphic-git (isomorphic-git)

`v1.37.1`

Compare Source

Bug Fixes

update sha.js closes #2180 (#2283) (e96e940)

`v1.37.0`

Compare Source

Features

implement single commit cherry pick (#2282) (ba6177f)

panva/openid-client (openid-client)

`v6.8.2`

Compare Source

Fixes

use duplex: half for fetchProtectedResource with ReadableStream body input (f6f84e2)

steveukx/git-js (simple-git)

`v3.31.1`

Compare Source

Patch Changes

a44184f: Resolve NPM publish steps

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-02-03T21:39:29Z

✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name	Link
🔨 Latest commit	`4fbb793`
🔍 Latest deploy log	https://app.netlify.com/projects/endearing-brigadeiros-63f9d0/deploys/699a28d546d8980008b50278

github-actions · 2026-02-03T21:39:57Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 4 package(s) with unknown licenses.

View full job summary

codecov · 2026-02-03T21:41:47Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.39%. Comparing base (f58250b) to head (4fbb793).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1379   +/-   ##
=======================================
  Coverage   81.39%   81.39%           
=======================================
  Files          67       67           
  Lines        4741     4741           
  Branches      819      819           
=======================================
  Hits         3859     3859           
  Misses        867      867           
  Partials       15       15

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

github-actions bot added the maintenance label Feb 3, 2026

renovate bot force-pushed the renovate/manager branch 3 times, most recently from 25d5918 to 9eba341 Compare February 5, 2026 21:30

renovate bot changed the title ~~chore(deps): update npm - - package.json~~ fix(deps): update npm - - package.json Feb 5, 2026

github-actions bot added fix labels Feb 5, 2026

renovate bot force-pushed the renovate/manager branch 20 times, most recently from 9bfc238 to b3c86b6 Compare February 12, 2026 19:07

renovate bot force-pushed the renovate/manager branch 12 times, most recently from 5e32685 to 8a45c2a Compare February 17, 2026 07:45

renovate bot requested a review from a team as a code owner February 17, 2026 07:45

renovate bot force-pushed the renovate/manager branch 7 times, most recently from a69a78a to 3ae34ec Compare February 20, 2026 21:42

fix(deps): update npm - - package.json

4fbb793

renovate bot force-pushed the renovate/manager branch from 3ae34ec to 4fbb793 Compare February 21, 2026 21:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

fix(deps): update npm - - package.json#1379

fix(deps): update npm - - package.json#1379
renovate[bot] wants to merge 1 commit intomainfrom
renovate/manager

renovate bot commented Feb 3, 2026 •

edited

Loading

Uh oh!

netlify bot commented Feb 3, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 3, 2026 •

edited

Loading

Uh oh!

codecov bot commented Feb 3, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

renovate bot commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Minor Changes

Fix canSkipBabel not accounting for babel.overrides (#​1098)

Bug Fixes

Features

Fixes

Patch Changes

Configuration

Uh oh!

netlify bot commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Uh oh!

github-actions bot commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Uh oh!

codecov bot commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Feb 3, 2026 •

edited

Loading

Fix `canSkipBabel` not accounting for `babel.overrides` (#1098)

netlify bot commented Feb 3, 2026 •

edited

Loading

github-actions bot commented Feb 3, 2026 •

edited

Loading

codecov bot commented Feb 3, 2026 •

edited

Loading