Skip to content

Update npm dependencies - #92

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/npm-dependencies
Open

renovate[bot] wants to merge 1 commit into
masterfrom
renovate/npm-dependencies

Conversation

@renovate

@renovate renovate Bot commented Aug 31, 2026 •

Copy link
Copy Markdown

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@aws-sdk/client-cognito-identity (source) 3.991.0 → 3.1152.0 age confidence
@types/node (source) 25.2.3 → 25.9.9 age confidence
@vercel/ncc ^0.38.3 → ^0.45.0 age confidence
fast-xml-parser 5.8.0 → 5.11.2 age confidence
picomatch 4.0.5 → 4.0.7 age confidence
postcss (source) 8.5.26 → 8.5.31 age confidence
rollup (source) 4.62.4 → 4.64.10 age confidence

Release Notes

aws/aws-sdk-js-v3 (@​aws-sdk/client-cognito-identity)

v3.1152.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1151.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1150.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1149.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1148.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1147.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1146.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1145.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1144.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1143.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1142.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1141.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1140.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1139.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1138.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1137.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1136.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1135.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1134.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1133.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1132.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1131.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1130.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1129.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1128.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1127.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1126.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1125.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1124.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1123.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1122.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1121.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1120.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1119.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1118.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1117.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1116.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1115.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1114.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1113.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1112.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1111.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1110.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1109.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1108.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1107.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1106.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1105.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1104.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1103.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1102.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1101.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1100.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1099.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1098.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1097.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1096.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1095.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1094.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1093.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1092.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1091.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1090.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1089.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1088.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1087.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1086.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1085.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1084.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1083.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1082.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1081.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1080.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1079.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1078.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1077.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1076.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1075.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1074.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1073.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1072.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1071.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1070.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1069.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1068.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1067.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1066.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1065.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1064.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1063.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1062.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1061.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1060.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1059.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1058.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1057.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1056.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1055.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1054.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1053.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1052.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1051.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1050.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1049.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1048.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1047.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1046.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1045.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1044.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1043.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1042.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1041.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1040.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1039.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1038.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1037.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1036.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1035.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1034.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1033.0

Compare Source

Features
  • clients: use binary decision diagrams for endpoint resolution (#​7931) (ff1b2ba)

v3.1032.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1031.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1030.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1029.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1028.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1027.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1026.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1025.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1024.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1023.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1022.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1021.0

Compare Source

Bug Fixes
  • codegen: sync for adaptive retry throttling detection fix (#​7905) (03f108d)

v3.1020.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1019.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1018.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1017.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1016.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1015.0

Compare Source

Bug Fixes
  • core/protocols: use composite error registry for error handling, revert default error message to "UnknownError" (#​7877) (55f7726)

v3.1014.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1013.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

v3.1012.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity

[v3.1011.0](https://redirect

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • "after 7am every weekday,before 8pm every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner August 31, 2026 12:39
@renovate

renovate Bot commented Aug 31, 2026 •

Copy link
Copy Markdown
Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code EOVERRIDE
npm error Override for fast-xml-parser@5.11.2 conflicts with direct dependency
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-10-24T15_04_17_737Z-debug-0.log

@renovate
renovate Bot force-pushed the renovate/npm-dependencies branch 2 times, most recently from df7506e to 668f8d9 Compare September 14, 2026 13:59
@sonarqubecloud

Copy link
Copy Markdown

@sonarqube-cloud-us

Copy link
Copy Markdown

@renovate
renovate Bot force-pushed the renovate/npm-dependencies branch from 668f8d9 to e10e4f8 Compare October 23, 2026 09:10
Comment thread package.json
"devDependencies": {
"@types/node": "^25.2.3",
"@vercel/ncc": "^0.38.3",
"@vercel/ncc": "^0.45.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Bug: package-lock.json not updated; still pins @vercel/ncc 0.38.4

The PR bumps @vercel/ncc to ^0.45.0 in package.json, but package-lock.json was not changed. Its root entry still declares "@vercel/ncc": "^0.38.3" (line 16) and node_modules/@vercel/ncc still resolves to 0.38.4 (lines 2241-2244). For 0.x versions a caret range only allows patch updates, so 0.38.4 does not satisfy ^0.45.0. That means npm ci will fail with a 'package.json and package-lock.json are not in sync' error, and npm install will quietly rewrite the lockfile. The committed ncc bundles (*/dist/index.js, which CLAUDE.md says must be rebuilt and committed) were also not rebuilt with the new ncc version, so the upgrade is never actually used. Fix: run npm install to regenerate package-lock.json, run npm run build, and commit both the lockfile and the rebuilt dist bundles.

Regenerate the lockfile and rebuild the bundles with ncc 0.45.0:

npm install && npm run build && git add package-lock.json */dist
  • Apply fix

Check the box to apply the fix or reply for a change | Was this helpful? React with 👍 / 👎

@renovate
renovate Bot force-pushed the renovate/npm-dependencies branch from e10e4f8 to d2d3c3e Compare October 24, 2026 15:04
@sonarqubecloud

Copy link
Copy Markdown

@gitar-bot

gitar-bot Bot commented Oct 24, 2026

Copy link
Copy Markdown
Code Review ⚠️ Changes requested 0 closed / 1 findings

🟡 Medium risk

Bumps dependencies including @vercel/ncc to ^0.45.0 in package.json, but package-lock.json was not regenerated and still pins 0.38.4, so npm ci will fail on the out-of-sync lockfile. The committed dist/index.js bundles were also not rebuilt with the new ncc version, so the upgrade is not actually used. Run npm install, run npm run build, and commit both the lockfile and rebuilt bundles before merge.

⚠️ Bug: package-lock.json not updated; still pins @vercel/ncc 0.38.4

📄 package.json:20

The PR bumps @vercel/ncc to ^0.45.0 in package.json, but package-lock.json was not changed. Its root entry still declares "@vercel/ncc": "^0.38.3" (line 16) and node_modules/@vercel/ncc still resolves to 0.38.4 (lines 2241-2244). For 0.x versions a caret range only allows patch updates, so 0.38.4 does not satisfy ^0.45.0. That means npm ci will fail with a 'package.json and package-lock.json are not in sync' error, and npm install will quietly rewrite the lockfile. The committed ncc bundles (*/dist/index.js, which CLAUDE.md says must be rebuilt and committed) were also not rebuilt with the new ncc version, so the upgrade is never actually used. Fix: run npm install to regenerate package-lock.json, run npm run build, and commit both the lockfile and the rebuilt dist bundles.

Regenerate the lockfile and rebuild the bundles with ncc 0.45.0
npm install && npm run build && git add package-lock.json */dist
🤖 Prompt for agents
Code Review: Bumps dependencies including `@vercel/ncc` to `^0.45.0` in `package.json`, but `package-lock.json` was not regenerated and still pins 0.38.4, so `npm ci` will fail on the out-of-sync lockfile. The committed `dist/index.js` bundles were also not rebuilt with the new ncc version, so the upgrade is not actually used. Run `npm install`, run `npm run build`, and commit both the lockfile and rebuilt bundles before merge.

1. ⚠️ Bug: package-lock.json not updated; still pins @vercel/ncc 0.38.4
   Files: package.json:20

   The PR bumps `@vercel/ncc` to `^0.45.0` in package.json, but package-lock.json was not changed. Its root entry still declares `"@vercel/ncc": "^0.38.3"` (line 16) and `node_modules/@vercel/ncc` still resolves to 0.38.4 (lines 2241-2244). For 0.x versions a caret range only allows patch updates, so 0.38.4 does not satisfy `^0.45.0`. That means `npm ci` will fail with a 'package.json and package-lock.json are not in sync' error, and `npm install` will quietly rewrite the lockfile. The committed ncc bundles (`*/dist/index.js`, which CLAUDE.md says must be rebuilt and committed) were also not rebuilt with the new ncc version, so the upgrade is never actually used. Fix: run `npm install` to regenerate package-lock.json, run `npm run build`, and commit both the lockfile and the rebuilt dist bundles.

   Fix (Regenerate the lockfile and rebuild the bundles with ncc 0.45.0):
   npm install && npm run build && git add package-lock.json */dist

Verification Rules 2/2 met PRs 1 inspected

Functional validation No results

Rules 2 passed 1 not applicable

✅ Internal artifact registries
✅ Repository license compliance

Broader impact PRs 1 inspected
Cross-PR 1 PR inspected 0 open impacts

PR 93: Update npm dependencies (major) Inspected

Auto-approval Not enabled

Set up

For more verification details, comment gitar display:verbose.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.
Unblock → Override a blocking verdict and allow merging.

Comment with these commands to change the behavior for this request:

Auto-apply Compact Unblock
gitar auto-apply:on         
gitar display:verbose         
gitar unblock         

Was this helpful? React with 👍 / 👎 | Gitar

@sonarqube-cloud-us

Copy link
Copy Markdown

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants