jdx
e8a0f70f2f
fix: set ignoreTryCatch: false in rollup commonjs plugin for Windows
...
minimatch 3.x uses `try { return require('path') } catch (e) {}` to
get the path module, falling back to `{ sep: '/' }`. With rollup's
commonjs plugin, `ignoreTryCatch: true` (the default) leaves
require('path') unconverted inside try blocks. At runtime in the ESM
bundle, require() is unavailable, so the catch fires and minimatch
uses '/' as the path separator — breaking all glob matching on Windows
where paths use backslashes.
Setting ignoreTryCatch: false ensures require('path') is converted to
an ESM import, giving minimatch the correct path.sep ('\\' on Windows).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-11 17:35:23 +00:00
jdx
45d1740529
chore: migrate from ncc (CJS) to rollup (ESM)
...
Switch bundler from @vercel/ncc to rollup to support ESM-only
@actions/toolkit v3 packages. This upgrades all @actions/* dependencies
to their latest major versions and adds "type": "module" to package.json.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-11 17:35:08 +00:00
renovate[bot]
0b79532206
chore(deps): update eslint monorepo to v10 (major) ( #429 )
...
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/ ) |
[Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
| [@eslint/js](https://eslint.org )
([source](https://redirect.github.com/eslint/eslint/tree/HEAD/packages/js ))
| [`^9.15.0` →
`^10.0.0`](https://renovatebot.com/diffs/npm/@eslint%2fjs/9.39.4/10.0.1 )
|

|

|
| [eslint](https://eslint.org )
([source](https://redirect.github.com/eslint/eslint )) | [`^9.15.0` →
`^10.0.0`](https://renovatebot.com/diffs/npm/eslint/9.39.4/10.2.0 ) |

|

|
---
### Release Notes
<details>
<summary>eslint/eslint (@​eslint/js)</summary>
###
[`v10.0.1`](https://redirect.github.com/eslint/eslint/compare/v10.0.0...84fb885d49ac810e79a9491276b4828b53d913e5 )
[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.0.0...v10.0.1 )
###
[`v10.0.0`](https://redirect.github.com/eslint/eslint/releases/tag/v10.0.0 )
[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v9.39.4...v10.0.0 )
#### Breaking Changes
-
[`f9e54f4`](f9e54f43a5 )
feat!: estimate rule-tester failure location
([#​20420](https://redirect.github.com/eslint/eslint/issues/20420 ))
(ST-DDT)
-
[`a176319`](a176319d8a )
feat!: replace `chalk` with `styleText` and add `color` to `ResultsMeta`
([#​20227](https://redirect.github.com/eslint/eslint/issues/20227 ))
(루밀LuMir)
-
[`c7046e6`](c7046e6c1e )
feat!: enable JSX reference tracking
([#​20152](https://redirect.github.com/eslint/eslint/issues/20152 ))
(Pixel998)
-
[`fa31a60`](fa31a60890 )
feat!: add `name` to configs
([#​20015](https://redirect.github.com/eslint/eslint/issues/20015 ))
(Kirk Waiblinger)
-
[`3383e7e`](3383e7ec90 )
fix!: remove deprecated `SourceCode` methods
([#​20137](https://redirect.github.com/eslint/eslint/issues/20137 ))
(Pixel998)
-
[`501abd0`](501abd0e91 )
feat!: update dependency minimatch to v10
([#​20246](https://redirect.github.com/eslint/eslint/issues/20246 ))
(renovate\[bot])
-
[`ca4d3b4`](ca4d3b4008 )
fix!: stricter rule tester assertions for valid test cases
([#​20125](https://redirect.github.com/eslint/eslint/issues/20125 ))
(唯然)
-
[`96512a6`](96512a66c8 )
fix!: Remove deprecated rule context methods
([#​20086](https://redirect.github.com/eslint/eslint/issues/20086 ))
(Nicholas C. Zakas)
-
[`c69fdac`](c69fdacdb2 )
feat!: remove eslintrc support
([#​20037](https://redirect.github.com/eslint/eslint/issues/20037 ))
(Francesco Trotta)
-
[`208b5cc`](208b5cc34a )
feat!: Use `ScopeManager#addGlobals()`
([#​20132](https://redirect.github.com/eslint/eslint/issues/20132 ))
(Milos Djermanovic)
-
[`a2ee188`](a2ee188ea7 )
fix!: add `uniqueItems: true` in `no-invalid-regexp` option
([#​20155](https://redirect.github.com/eslint/eslint/issues/20155 ))
(Tanuj Kanti)
-
[`a89059d`](a89059dbf2 )
feat!: Program range span entire source text
([#​20133](https://redirect.github.com/eslint/eslint/issues/20133 ))
(Pixel998)
-
[`39a6424`](39a6424373 )
fix!: assert 'text' is a string across all RuleFixer methods
([#​20082](https://redirect.github.com/eslint/eslint/issues/20082 ))
(Pixel998)
-
[`f28fbf8`](f28fbf8462 )
fix!: Deprecate `"always"` and `"as-needed"` options of the `radix` rule
([#​20223](https://redirect.github.com/eslint/eslint/issues/20223 ))
(Milos Djermanovic)
-
[`aa3fb2b`](aa3fb2b233 )
fix!: tighten `func-names` schema
([#​20119](https://redirect.github.com/eslint/eslint/issues/20119 ))
(Pixel998)
-
[`f6c0ed0`](f6c0ed0311 )
feat!: report `eslint-env` comments as errors
([#​20128](https://redirect.github.com/eslint/eslint/issues/20128 ))
(Francesco Trotta)
-
[`4bf739f`](4bf739fb53 )
fix!: remove deprecated `LintMessage#nodeType` and `TestCaseError#type`
([#​20096](https://redirect.github.com/eslint/eslint/issues/20096 ))
(Pixel998)
-
[`523c076`](523c076866 )
feat!: drop support for jiti < 2.2.0
([#​20016](https://redirect.github.com/eslint/eslint/issues/20016 ))
(michael faith)
-
[`454a292`](454a292c95 )
feat!: update `eslint:recommended` configuration
([#​20210](https://redirect.github.com/eslint/eslint/issues/20210 ))
(Pixel998)
-
[`4f880ee`](4f880ee029 )
feat!: remove `v10_*` and inactive `unstable_*` flags
([#​20225](https://redirect.github.com/eslint/eslint/issues/20225 ))
(sethamus)
-
[`f18115c`](f18115c363 )
feat!: `no-shadow-restricted-names` report `globalThis` by default
([#​20027](https://redirect.github.com/eslint/eslint/issues/20027 ))
(sethamus)
-
[`c6358c3`](c6358c31fb )
feat!: Require Node.js `^20.19.0 || ^22.13.0 || >=24`
([#​20160](https://redirect.github.com/eslint/eslint/issues/20160 ))
(Milos Djermanovic)
#### Features
-
[`bff9091`](bff9091927 )
feat: handle `Array.fromAsync` in `array-callback-return`
([#​20457](https://redirect.github.com/eslint/eslint/issues/20457 ))
(Francesco Trotta)
-
[`290c594`](290c594bb5 )
feat: add `self` to `no-implied-eval` rule
([#​20468](https://redirect.github.com/eslint/eslint/issues/20468 ))
(sethamus)
-
[`43677de`](43677de07e )
feat: fix handling of function and class expression names in `no-shadow`
([#​20432](https://redirect.github.com/eslint/eslint/issues/20432 ))
(Milos Djermanovic)
-
[`f0cafe5`](f0cafe5f37 )
feat: rule tester add assertion option `requireData`
([#​20409](https://redirect.github.com/eslint/eslint/issues/20409 ))
(fnx)
-
[`f7ab693`](f7ab6937e6 )
feat: output RuleTester test case failure index
([#​19976](https://redirect.github.com/eslint/eslint/issues/19976 ))
(ST-DDT)
-
[`7cbcbf9`](7cbcbf9c3c )
feat: add `countThis` option to `max-params`
([#​20236](https://redirect.github.com/eslint/eslint/issues/20236 ))
(Gerkin)
-
[`f148a5e`](f148a5eaa1 )
feat: add error assertion options
([#​20247](https://redirect.github.com/eslint/eslint/issues/20247 ))
(ST-DDT)
-
[`09e6654`](09e66549ec )
feat: update error loc of `require-yield` and `no-useless-constructor`
([#​20267](https://redirect.github.com/eslint/eslint/issues/20267 ))
(Tanuj Kanti)
#### Bug Fixes
-
[`436b82f`](436b82f3c0 )
fix: update eslint
([#​20473](https://redirect.github.com/eslint/eslint/issues/20473 ))
(renovate\[bot])
-
[`1d29d22`](1d29d22fe3 )
fix: detect default `this` binding in `Array.fromAsync` callbacks
([#​20456](https://redirect.github.com/eslint/eslint/issues/20456 ))
(Francesco Trotta)
-
[`727451e`](727451eff5 )
fix: fix regression of global mode report range in `strict` rule
([#​20462](https://redirect.github.com/eslint/eslint/issues/20462 ))
(ntnyq)
-
[`e80485f`](e80485fcd2 )
fix: remove fake `FlatESLint` and `LegacyESLint` exports
([#​20460](https://redirect.github.com/eslint/eslint/issues/20460 ))
(Francesco Trotta)
-
[`9eeff3b`](9eeff3bc13 )
fix: update esquery
([#​20423](https://redirect.github.com/eslint/eslint/issues/20423 ))
(cryptnix)
-
[`b34b938`](b34b93852d )
fix: use `Error.prepareStackTrace` to estimate failing test location
([#​20436](https://redirect.github.com/eslint/eslint/issues/20436 ))
(Francesco Trotta)
-
[`51aab53`](51aab5393b )
fix: update eslint
([#​20443](https://redirect.github.com/eslint/eslint/issues/20443 ))
(renovate\[bot])
-
[`23490b2`](23490b2662 )
fix: handle space before colon in `RuleTester` location estimation
([#​20433](https://redirect.github.com/eslint/eslint/issues/20433 ))
(Francesco Trotta)
-
[`f244dbf`](f244dbf219 )
fix: use `MessagePlaceholderData` type from `@eslint/core`
([#​20348](https://redirect.github.com/eslint/eslint/issues/20348 ))
(루밀LuMir)
-
[`d186f8c`](d186f8c074 )
fix: update eslint
([#​20427](https://redirect.github.com/eslint/eslint/issues/20427 ))
(renovate\[bot])
-
[`2332262`](2332262deb )
fix: error location should not modify error message in RuleTester
([#​20421](https://redirect.github.com/eslint/eslint/issues/20421 ))
(Milos Djermanovic)
-
[`ab99b21`](ab99b21a67 )
fix: ensure `filename` is passed as third argument to `verifyAndFix()`
([#​20405](https://redirect.github.com/eslint/eslint/issues/20405 ))
(루밀LuMir)
-
[`8a60f3b`](8a60f3bc80 )
fix: remove `ecmaVersion` and `sourceType` from `ParserOptions` type
([#​20415](https://redirect.github.com/eslint/eslint/issues/20415 ))
(Pixel998)
-
[`eafd727`](eafd727a06 )
fix: remove `TDZ` scope type
([#​20231](https://redirect.github.com/eslint/eslint/issues/20231 ))
(jaymarvelz)
-
[`39d1f51`](39d1f51680 )
fix: correct `Scope` typings
([#​20404](https://redirect.github.com/eslint/eslint/issues/20404 ))
(sethamus)
-
[`2bd0f13`](2bd0f13a92 )
fix: update `verify` and `verifyAndFix` types
([#​20384](https://redirect.github.com/eslint/eslint/issues/20384 ))
(Francesco Trotta)
-
[`ba6ebfa`](ba6ebfa78d )
fix: correct typings for `loadESLint()` and `shouldUseFlatConfig()`
([#​20393](https://redirect.github.com/eslint/eslint/issues/20393 ))
(루밀LuMir)
-
[`e7673ae`](e7673ae096 )
fix: correct RuleTester typings
([#​20105](https://redirect.github.com/eslint/eslint/issues/20105 ))
(Pixel998)
-
[`53e9522`](53e95222af )
fix: strict removed formatters check
([#​20241](https://redirect.github.com/eslint/eslint/issues/20241 ))
(ntnyq)
-
[`b017f09`](b017f094d4 )
fix: correct `no-restricted-import` messages
([#​20374](https://redirect.github.com/eslint/eslint/issues/20374 ))
(Francesco Trotta)
#### Documentation
-
[`e978dda`](e978ddaab7 )
docs: Update README (GitHub Actions Bot)
-
[`4cecf83`](4cecf8393a )
docs: Update README (GitHub Actions Bot)
-
[`c79f0ab`](c79f0ab2e2 )
docs: Update README (GitHub Actions Bot)
-
[`773c052`](773c0527c7 )
docs: Update README (GitHub Actions Bot)
-
[`f2962e4`](f2962e46a0 )
docs: document `meta.docs.frozen` property
([#​20475](https://redirect.github.com/eslint/eslint/issues/20475 ))
(Pixel998)
-
[`8e94f58`](8e94f58beb )
docs: fix broken anchor links from gerund heading updates
([#​20449](https://redirect.github.com/eslint/eslint/issues/20449 ))
(Copilot)
-
[`1495654`](14956543d4 )
docs: Update README (GitHub Actions Bot)
-
[`0b8ed5c`](0b8ed5c0aa )
docs: document support for `:is` selector alias
([#​20454](https://redirect.github.com/eslint/eslint/issues/20454 ))
(sethamus)
-
[`1c4b33f`](1c4b33fe86 )
docs: Document policies about ESM-only dependencies
([#​20448](https://redirect.github.com/eslint/eslint/issues/20448 ))
(Milos Djermanovic)
-
[`3e5d38c`](3e5d38cdd5 )
docs: add missing indentation space in rule example
([#​20446](https://redirect.github.com/eslint/eslint/issues/20446 ))
(fnx)
-
[`63a0c7c`](63a0c7c84b )
docs: Update README (GitHub Actions Bot)
-
[`65ed0c9`](65ed0c94e7 )
docs: Update README (GitHub Actions Bot)
-
[`b0e4717`](b0e4717d66 )
docs: \[no-await-in-loop] Expand inapplicability
([#​20363](https://redirect.github.com/eslint/eslint/issues/20363 ))
(Niklas Hambüchen)
-
[`fca421f`](fca421f6a4 )
docs: Update README (GitHub Actions Bot)
-
[`d925c54`](d925c54f04 )
docs: update config syntax in `no-lone-blocks`
([#​20413](https://redirect.github.com/eslint/eslint/issues/20413 ))
(Pixel998)
-
[`7d5c95f`](7d5c95f281 )
docs: remove redundant `sourceType: "module"` from rule examples
([#​20412](https://redirect.github.com/eslint/eslint/issues/20412 ))
(Pixel998)
-
[`02e7e71`](02e7e71263 )
docs: correct `.mts` glob pattern in files with extensions example
([#​20403](https://redirect.github.com/eslint/eslint/issues/20403 ))
(Ali Essalihi)
-
[`264b981`](264b981101 )
docs: Update README (GitHub Actions Bot)
-
[`5a4324f`](5a4324f38e )
docs: clarify `"local"` option of `no-unused-vars`
([#​20385](https://redirect.github.com/eslint/eslint/issues/20385 ))
(Milos Djermanovic)
-
[`e593aa0`](e593aa0fd2 )
docs: improve clarity, grammar, and wording in documentation site README
([#​20370](https://redirect.github.com/eslint/eslint/issues/20370 ))
(Aditya)
-
[`3f5062e`](3f5062ed5f )
docs: Add messages property to rule meta documentation
([#​20361](https://redirect.github.com/eslint/eslint/issues/20361 ))
(Sabya Sachi)
-
[`9e5a5c2`](9e5a5c2b6b )
docs: remove `Examples` headings from rule docs
([#​20364](https://redirect.github.com/eslint/eslint/issues/20364 ))
(Milos Djermanovic)
-
[`194f488`](194f488a8d )
docs: Update README (GitHub Actions Bot)
-
[`0f5a94a`](0f5a94a84b )
docs: \[class-methods-use-this] explain purpose of rule
([#​20008](https://redirect.github.com/eslint/eslint/issues/20008 ))
(Kirk Waiblinger)
-
[`df5566f`](df5566f826 )
docs: add Options section to all rule docs
([#​20296](https://redirect.github.com/eslint/eslint/issues/20296 ))
(sethamus)
-
[`adf7a2b`](adf7a2b202 )
docs: no-unsafe-finally note for generator functions
([#​20330](https://redirect.github.com/eslint/eslint/issues/20330 ))
(Tom Pereira)
-
[`ef7028c`](ef7028c968 )
docs: Update README (GitHub Actions Bot)
-
[`fbae5d1`](fbae5d1885 )
docs: consistently use "v10.0.0" in migration guide
([#​20328](https://redirect.github.com/eslint/eslint/issues/20328 ))
(Pixel998)
-
[`778aa2d`](778aa2d83e )
docs: ignoring default file patterns
([#​20312](https://redirect.github.com/eslint/eslint/issues/20312 ))
(Tanuj Kanti)
-
[`4b5dbcd`](4b5dbcdae5 )
docs: reorder v10 migration guide
([#​20315](https://redirect.github.com/eslint/eslint/issues/20315 ))
(Milos Djermanovic)
-
[`5d84a73`](5d84a7371d )
docs: Update README (GitHub Actions Bot)
-
[`37c8863`](37c8863088 )
docs: fix incorrect anchor link in v10 migration guide
([#​20299](https://redirect.github.com/eslint/eslint/issues/20299 ))
(Pixel998)
-
[`077ff02`](077ff028b6 )
docs: add migrate-to-10.0.0 doc
([#​20143](https://redirect.github.com/eslint/eslint/issues/20143 ))
(唯然)
-
[`3822e1b`](3822e1b768 )
docs: Update README (GitHub Actions Bot)
#### Build Related
-
[`9f08712`](9f0871236e )
Build: changelog update for 10.0.0-rc.2 (Jenkins)
-
[`1e2c449`](1e2c449701 )
Build: changelog update for 10.0.0-rc.1 (Jenkins)
-
[`c4c72a8`](c4c72a8d99 )
Build: changelog update for 10.0.0-rc.0 (Jenkins)
-
[`7e4daf9`](7e4daf93d2 )
Build: changelog update for 10.0.0-beta.0 (Jenkins)
-
[`a126a2a`](a126a2ab13 )
build: add .scss files entry to knip
([#​20389](https://redirect.github.com/eslint/eslint/issues/20389 ))
(Francesco Trotta)
-
[`f5c0193`](f5c01932f6 )
Build: changelog update for 10.0.0-alpha.1 (Jenkins)
-
[`165326f`](165326f046 )
Build: changelog update for 10.0.0-alpha.0 (Jenkins)
#### Chores
-
[`1ece282`](1ece282c22 )
chore: ignore `/docs/v9.x` in link checker
([#​20452](https://redirect.github.com/eslint/eslint/issues/20452 ))
(Milos Djermanovic)
-
[`034e139`](034e139744 )
ci: add type integration test for `@html-eslint/eslint-plugin`
([#​20345](https://redirect.github.com/eslint/eslint/issues/20345 ))
(sethamus)
-
[`f3fbc2f`](f3fbc2f60c )
chore: set `@eslint/js` version to 10.0.0 to skip releasing it
([#​20466](https://redirect.github.com/eslint/eslint/issues/20466 ))
(Milos Djermanovic)
-
[`afc0681`](afc06817bb )
chore: remove scopeManager.addGlobals patch for typescript-eslint parser
([#​20461](https://redirect.github.com/eslint/eslint/issues/20461 ))
(fnx)
-
[`3e5a173`](3e5a173053 )
refactor: use types from `@eslint/plugin-kit`
([#​20435](https://redirect.github.com/eslint/eslint/issues/20435 ))
(Pixel998)
-
[`11644b1`](11644b1dc2 )
ci: rename workflows
([#​20463](https://redirect.github.com/eslint/eslint/issues/20463 ))
(Milos Djermanovic)
-
[`2d14173`](2d14173729 )
chore: fix typos in docs and comments
([#​20458](https://redirect.github.com/eslint/eslint/issues/20458 ))
(o-m12a)
-
[`6742f92`](6742f927ba )
test: add endLine/endColumn to invalid test case in no-alert
([#​20441](https://redirect.github.com/eslint/eslint/issues/20441 ))
(경하)
-
[`3e22c82`](3e22c82a87 )
test: add missing location data to no-template-curly-in-string tests
([#​20440](https://redirect.github.com/eslint/eslint/issues/20440 ))
(Haeun Kim)
-
[`b4b3127`](b4b3127f85 )
chore: package.json update for
[@​eslint/js](https://redirect.github.com/eslint/js ) release
(Jenkins)
-
[`f658419`](f6584191cb )
refactor: remove `raw` parser option from JS language
([#​20416](https://redirect.github.com/eslint/eslint/issues/20416 ))
(Pixel998)
-
[`2c3efb7`](2c3efb728b )
chore: remove `category` from type test fixtures
([#​20417](https://redirect.github.com/eslint/eslint/issues/20417 ))
(Pixel998)
-
[`36193fd`](36193fd9ad )
chore: remove `category` from formatter test fixtures
([#​20418](https://redirect.github.com/eslint/eslint/issues/20418 ))
(Pixel998)
-
[`e8d203b`](e8d203b0d9 )
chore: add JSX language tag validation to `check-rule-examples`
([#​20414](https://redirect.github.com/eslint/eslint/issues/20414 ))
(Pixel998)
-
[`bc465a1`](bc465a1e9d )
chore: pin dependencies
([#​20397](https://redirect.github.com/eslint/eslint/issues/20397 ))
(renovate\[bot])
-
[`703f0f5`](703f0f551d )
test: replace deprecated rules in `linter` tests
([#​20406](https://redirect.github.com/eslint/eslint/issues/20406 ))
(루밀LuMir)
-
[`ba71baa`](ba71baa872 )
test: enable `strict` mode in type tests
([#​20398](https://redirect.github.com/eslint/eslint/issues/20398 ))
(루밀LuMir)
-
[`f9c4968`](f9c49683a6 )
refactor: remove `lib/linter/rules.js`
([#​20399](https://redirect.github.com/eslint/eslint/issues/20399 ))
(Francesco Trotta)
-
[`6f1c48e`](6f1c48e5e7 )
chore: updates for v9.39.2 release (Jenkins)
-
[`54bf0a3`](54bf0a3646 )
ci: create package manager test
([#​20392](https://redirect.github.com/eslint/eslint/issues/20392 ))
(루밀LuMir)
-
[`3115021`](3115021439 )
refactor: simplify JSDoc comment detection logic
([#​20360](https://redirect.github.com/eslint/eslint/issues/20360 ))
(Pixel998)
-
[`4345b17`](4345b172a8 )
chore: update `@eslint-community/regexpp` to `4.12.2`
([#​20366](https://redirect.github.com/eslint/eslint/issues/20366 ))
(루밀LuMir)
-
[`772c9ee`](772c9ee9b6 )
chore: update dependency
[@​eslint/eslintrc](https://redirect.github.com/eslint/eslintrc )
to ^3.3.3
([#​20359](https://redirect.github.com/eslint/eslint/issues/20359 ))
(renovate\[bot])
-
[`0b14059`](0b14059491 )
chore: package.json update for
[@​eslint/js](https://redirect.github.com/eslint/js ) release
(Jenkins)
-
[`d6e7bf3`](d6e7bf3064 )
ci: bump actions/checkout from 5 to 6
([#​20350](https://redirect.github.com/eslint/eslint/issues/20350 ))
(dependabot\[bot])
-
[`139d456`](139d4567d4 )
chore: require mandatory headers in rule docs
([#​20347](https://redirect.github.com/eslint/eslint/issues/20347 ))
(Milos Djermanovic)
-
[`3b0289c`](3b0289c7b6 )
chore: remove unused `.eslintignore` and test fixtures
([#​20316](https://redirect.github.com/eslint/eslint/issues/20316 ))
(Pixel998)
-
[`a463e7b`](a463e7bea0 )
chore: update dependency js-yaml to v4 \[security]
([#​20319](https://redirect.github.com/eslint/eslint/issues/20319 ))
(renovate\[bot])
-
[`ebfe905`](ebfe90533d )
chore: remove redundant rules from eslint-config-eslint
([#​20327](https://redirect.github.com/eslint/eslint/issues/20327 ))
(Milos Djermanovic)
-
[`88dfdb2`](88dfdb23ee )
test: add regression tests for message placeholder interpolation
([#​20318](https://redirect.github.com/eslint/eslint/issues/20318 ))
(fnx)
-
[`6ed0f75`](6ed0f758ff )
chore: skip type checking in `eslint-config-eslint`
([#​20323](https://redirect.github.com/eslint/eslint/issues/20323 ))
(Francesco Trotta)
-
[`1e2cad5`](1e2cad5f6f )
chore: package.json update for
[@​eslint/js](https://redirect.github.com/eslint/js ) release
(Jenkins)
-
[`9da2679`](9da2679848 )
chore: update `@eslint/*` dependencies
([#​20321](https://redirect.github.com/eslint/eslint/issues/20321 ))
(Milos Djermanovic)
-
[`0439794`](0439794181 )
refactor: use types from
[@​eslint/core](https://redirect.github.com/eslint/core )
([#​20235](https://redirect.github.com/eslint/eslint/issues/20235 ))
(jaymarvelz)
-
[`cb51ec2`](cb51ec2d6d )
test: cleanup `SourceCode#traverse` tests
([#​20289](https://redirect.github.com/eslint/eslint/issues/20289 ))
(Milos Djermanovic)
-
[`897a347`](897a3471d6 )
chore: remove restriction for `type` in rule tests
([#​20305](https://redirect.github.com/eslint/eslint/issues/20305 ))
(Pixel998)
-
[`d972098`](d972098857 )
chore: ignore prettier updates in renovate to keep in sync with trunk
([#​20304](https://redirect.github.com/eslint/eslint/issues/20304 ))
(Pixel998)
-
[`a086359`](a086359387 )
chore: remove redundant `fast-glob` dev-dependency
([#​20301](https://redirect.github.com/eslint/eslint/issues/20301 ))
(루밀LuMir)
-
[`564b302`](564b30215c )
chore: install `prettier` as a dev dependency
([#​20302](https://redirect.github.com/eslint/eslint/issues/20302 ))
(michael faith)
-
[`8257b57`](8257b5729d )
refactor: correct regex for `eslint-plugin/report-message-format`
([#​20300](https://redirect.github.com/eslint/eslint/issues/20300 ))
(루밀LuMir)
-
[`e251671`](e2516713bc )
refactor: extract assertions in RuleTester
([#​20135](https://redirect.github.com/eslint/eslint/issues/20135 ))
(唯然)
-
[`2e7f25e`](2e7f25e189 )
chore: add `legacy-peer-deps` to `.npmrc`
([#​20281](https://redirect.github.com/eslint/eslint/issues/20281 ))
(Milos Djermanovic)
-
[`39c638a`](39c638a9ae )
chore: update eslint-config-eslint dependencies for v10 prereleases
([#​20278](https://redirect.github.com/eslint/eslint/issues/20278 ))
(Milos Djermanovic)
-
[`8533b3f`](8533b3fa28 )
chore: update dependency
[@​eslint/json](https://redirect.github.com/eslint/json ) to
^0.14.0
([#​20288](https://redirect.github.com/eslint/eslint/issues/20288 ))
(renovate\[bot])
-
[`796ddf6`](796ddf6db5 )
chore: update dependency
[@​eslint/js](https://redirect.github.com/eslint/js ) to ^9.39.1
([#​20285](https://redirect.github.com/eslint/eslint/issues/20285 ))
(renovate\[bot])
</details>
<details>
<summary>eslint/eslint (eslint)</summary>
###
[`v10.2.0`](https://redirect.github.com/eslint/eslint/releases/tag/v10.2.0 )
[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.1.0...v10.2.0 )
#### Features
-
[`586ec2f`](586ec2f430 )
feat: Add `meta.languages` support to rules
([#​20571](https://redirect.github.com/eslint/eslint/issues/20571 ))
(Copilot)
-
[`14207de`](14207dee39 )
feat: add `Temporal` to `no-obj-calls`
([#​20675](https://redirect.github.com/eslint/eslint/issues/20675 ))
(Pixel998)
-
[`bbb2c93`](bbb2c93a2b )
feat: add Temporal to ES2026 globals
([#​20672](https://redirect.github.com/eslint/eslint/issues/20672 ))
(Pixel998)
#### Bug Fixes
-
[`542cb3e`](542cb3e644 )
fix: update first-party dependencies
([#​20714](https://redirect.github.com/eslint/eslint/issues/20714 ))
(Francesco Trotta)
#### Documentation
-
[`a2af743`](a2af743ea6 )
docs: add `language` to configuration objects
([#​20712](https://redirect.github.com/eslint/eslint/issues/20712 ))
(Francesco Trotta)
-
[`845f23f`](845f23f137 )
docs: Update README (GitHub Actions Bot)
-
[`5fbcf59`](5fbcf5958b )
docs: remove `sourceType` from ts playground link
([#​20477](https://redirect.github.com/eslint/eslint/issues/20477 ))
(Tanuj Kanti)
-
[`8702a47`](8702a47465 )
docs: Update README (GitHub Actions Bot)
-
[`ddeaded`](ddeaded2ab )
docs: Update README (GitHub Actions Bot)
-
[`2b44966`](2b44966912 )
docs: add Major Releases section to Manage Releases
([#​20269](https://redirect.github.com/eslint/eslint/issues/20269 ))
(Milos Djermanovic)
-
[`eab65c7`](eab65c700e )
docs: update `eslint` versions in examples
([#​20664](https://redirect.github.com/eslint/eslint/issues/20664 ))
(루밀LuMir)
-
[`3e4a299`](3e4a29903b )
docs: update ESM Dependencies policies with note for own-usage packages
([#​20660](https://redirect.github.com/eslint/eslint/issues/20660 ))
(Milos Djermanovic)
#### Chores
-
[`8120e30`](8120e30f83 )
refactor: extract no unmodified loop condition
([#​20679](https://redirect.github.com/eslint/eslint/issues/20679 ))
(kuldeep kumar)
-
[`46e8469`](46e8469786 )
chore: update dependency markdownlint-cli2 to ^0.22.0
([#​20697](https://redirect.github.com/eslint/eslint/issues/20697 ))
(renovate\[bot])
-
[`01ed3aa`](01ed3aa684 )
test: add unit tests for unicode utilities
([#​20622](https://redirect.github.com/eslint/eslint/issues/20622 ))
(Manish chaudhary)
-
[`811f493`](811f4930f8 )
ci: remove `--legacy-peer-deps` from types integration tests
([#​20667](https://redirect.github.com/eslint/eslint/issues/20667 ))
(Milos Djermanovic)
-
[`6b86fcf`](6b86fcfc5c )
chore: update dependency npm-run-all2 to v8
([#​20663](https://redirect.github.com/eslint/eslint/issues/20663 ))
(renovate\[bot])
-
[`632c4f8`](632c4f83bf )
chore: add `prettier` update commit to `.git-blame-ignore-revs`
([#​20662](https://redirect.github.com/eslint/eslint/issues/20662 ))
(루밀LuMir)
-
[`b0b0f21`](b0b0f21927 )
chore: update dependency eslint-plugin-regexp to ^3.1.0
([#​20659](https://redirect.github.com/eslint/eslint/issues/20659 ))
(Milos Djermanovic)
-
[`228a2dd`](228a2dd4b2 )
chore: update dependency eslint-plugin-eslint-plugin to ^7.3.2
([#​20661](https://redirect.github.com/eslint/eslint/issues/20661 ))
(Milos Djermanovic)
-
[`3ab4d7e`](3ab4d7e244 )
test: Add tests for eslintrc-style keys
([#​20645](https://redirect.github.com/eslint/eslint/issues/20645 ))
(kuldeep kumar)
###
[`v10.1.0`](https://redirect.github.com/eslint/eslint/releases/tag/v10.1.0 )
[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.0.3...v10.1.0 )
#### Features
-
[`ff4382b`](ff4382be34 )
feat: apply fix for `no-var` in `TSModuleBlock`
([#​20638](https://redirect.github.com/eslint/eslint/issues/20638 ))
(Tanuj Kanti)
-
[`0916995`](0916995b51 )
feat: Implement api support for bulk-suppressions
([#​20565](https://redirect.github.com/eslint/eslint/issues/20565 ))
(Blake Sager)
#### Bug Fixes
-
[`2b8824e`](2b8824e6be )
fix: Prevent `no-var` autofix when a variable is used before declaration
([#​20464](https://redirect.github.com/eslint/eslint/issues/20464 ))
(Amaresh S M)
-
[`e58b4bf`](e58b4bff16 )
fix: update eslint
([#​20597](https://redirect.github.com/eslint/eslint/issues/20597 ))
(renovate\[bot])
#### Documentation
-
[`b7b57fe`](b7b57fe994 )
docs: use correct JSDoc link in require-jsdoc.md
([#​20641](https://redirect.github.com/eslint/eslint/issues/20641 ))
(mkemna-clb)
-
[`58e4cfc`](58e4cfc7db )
docs: add deprecation notice partial
([#​20639](https://redirect.github.com/eslint/eslint/issues/20639 ))
(Milos Djermanovic)
-
[`7143dbf`](7143dbf99d )
docs: update v9 migration guide for `@eslint/js` usage
([#​20540](https://redirect.github.com/eslint/eslint/issues/20540 ))
(fnx)
-
[`035fc4f`](035fc4fbe5 )
docs: note that `globalReturn` applies only with `sourceType: "script"`
([#​20630](https://redirect.github.com/eslint/eslint/issues/20630 ))
(Milos Djermanovic)
-
[`e972c88`](e972c88ab7 )
docs: merge ESLint option descriptions into type definitions
([#​20608](https://redirect.github.com/eslint/eslint/issues/20608 ))
(Francesco Trotta)
-
[`7f10d84`](7f10d84401 )
docs: Update README (GitHub Actions Bot)
-
[`aeed007`](aeed0078ca )
docs: open playground link in new tab
([#​20602](https://redirect.github.com/eslint/eslint/issues/20602 ))
(Tanuj Kanti)
-
[`a0d1a37`](a0d1a37726 )
docs: Add AI Usage Policy
([#​20510](https://redirect.github.com/eslint/eslint/issues/20510 ))
(Nicholas C. Zakas)
#### Chores
-
[`a9f9cce`](a9f9cce82d )
chore: update dependency eslint-plugin-unicorn to ^63.0.0
([#​20584](https://redirect.github.com/eslint/eslint/issues/20584 ))
(Milos Djermanovic)
-
[`1f42bd7`](1f42bd7876 )
chore: update `prettier` to 3.8.1
([#​20651](https://redirect.github.com/eslint/eslint/issues/20651 ))
(루밀LuMir)
-
[`c0a6f4a`](c0a6f4a2b4 )
chore: update dependency
[@​eslint/json](https://redirect.github.com/eslint/json ) to ^1.2.0
([#​20652](https://redirect.github.com/eslint/eslint/issues/20652 ))
(renovate\[bot])
-
[`cc43f79`](cc43f795c4 )
chore: update dependency c8 to v11
([#​20650](https://redirect.github.com/eslint/eslint/issues/20650 ))
(renovate\[bot])
-
[`2ce4635`](2ce4635b03 )
chore: update dependency
[@​eslint/json](https://redirect.github.com/eslint/json ) to v1
([#​20649](https://redirect.github.com/eslint/eslint/issues/20649 ))
(renovate\[bot])
-
[`f0406ee`](f0406eedcc )
chore: update dependency markdownlint-cli2 to ^0.21.0
([#​20646](https://redirect.github.com/eslint/eslint/issues/20646 ))
(renovate\[bot])
-
[`dbb4c95`](dbb4c9582a )
chore: remove trunk
([#​20478](https://redirect.github.com/eslint/eslint/issues/20478 ))
(sethamus)
-
[`c672a2a`](c672a2a705 )
test: fix CLI test for empty output file
([#​20640](https://redirect.github.com/eslint/eslint/issues/20640 ))
(kuldeep kumar)
-
[`c7ada24`](c7ada24556 )
ci: bump pnpm/action-setup from 4.3.0 to 4.4.0
([#​20636](https://redirect.github.com/eslint/eslint/issues/20636 ))
(dependabot\[bot])
-
[`07c4b8b`](07c4b8b4a9 )
test: fix `RuleTester` test without test runners
([#​20631](https://redirect.github.com/eslint/eslint/issues/20631 ))
(Francesco Trotta)
-
[`079bba7`](079bba7ff1 )
test: Add tests for `isValidWithUnicodeFlag`
([#​20601](https://redirect.github.com/eslint/eslint/issues/20601 ))
(Manish chaudhary)
-
[`5885ae6`](5885ae6621 )
ci: unpin Node.js 25.x in CI
([#​20615](https://redirect.github.com/eslint/eslint/issues/20615 ))
(Copilot)
-
[`f65e5d3`](f65e5d3c0d )
chore: update pnpm/action-setup digest to
[`b906aff`](b906aff )
([#​20610](https://redirect.github.com/eslint/eslint/issues/20610 ))
(renovate\[bot])
###
[`v10.0.3`](https://redirect.github.com/eslint/eslint/compare/v10.0.2...bfce7eaa0ec5d6591fd247b7ff57b51e45fb88a1 )
[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.0.2...v10.0.3 )
###
[`v10.0.2`](https://redirect.github.com/eslint/eslint/compare/v10.0.1...55122d6f971119607c85b0df8e62942171c939f7 )
[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.0.1...v10.0.2 )
###
[`v10.0.1`](https://redirect.github.com/eslint/eslint/releases/tag/v10.0.1 )
[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.0.0...v10.0.1 )
#### Bug Fixes
-
[`c87d5bd`](c87d5bded5 )
fix: update eslint
([#​20531](https://redirect.github.com/eslint/eslint/issues/20531 ))
(renovate\[bot])
-
[`d841001`](d84100115c )
fix: update `minimatch` to `10.2.1` to address security vulnerabilities
([#​20519](https://redirect.github.com/eslint/eslint/issues/20519 ))
(루밀LuMir)
-
[`04c2147`](04c21475b3 )
fix: update error message for unused suppressions
([#​20496](https://redirect.github.com/eslint/eslint/issues/20496 ))
(fnx)
-
[`38b089c`](38b089c172 )
fix: update dependency
[@​eslint/config-array](https://redirect.github.com/eslint/config-array )
to ^0.23.1
([#​20484](https://redirect.github.com/eslint/eslint/issues/20484 ))
(renovate\[bot])
#### Documentation
-
[`5b3dbce`](5b3dbce50a )
docs: add AI acknowledgement section to templates
([#​20431](https://redirect.github.com/eslint/eslint/issues/20431 ))
(루밀LuMir)
-
[`6f23076`](6f23076037 )
docs: toggle nav in no-JS mode
([#​20476](https://redirect.github.com/eslint/eslint/issues/20476 ))
(Tanuj Kanti)
-
[`b69cfb3`](b69cfb32a1 )
docs: Update README (GitHub Actions Bot)
#### Chores
-
[`e5c281f`](e5c281ffd0 )
chore: updates for v9.39.3 release (Jenkins)
-
[`8c3832a`](8c3832adb7 )
chore: update
[@​typescript-eslint/parser](https://redirect.github.com/typescript-eslint/parser )
to ^8.56.0
([#​20514](https://redirect.github.com/eslint/eslint/issues/20514 ))
(Milos Djermanovic)
-
[`8330d23`](8330d238ae )
test: add tests for config-api
([#​20493](https://redirect.github.com/eslint/eslint/issues/20493 ))
(Milos Djermanovic)
-
[`37d6e91`](37d6e91e88 )
chore: remove eslint v10 prereleases from eslint-config-eslint deps
([#​20494](https://redirect.github.com/eslint/eslint/issues/20494 ))
(Milos Djermanovic)
-
[`da7cd0e`](da7cd0e791 )
refactor: cleanup error message templates
([#​20479](https://redirect.github.com/eslint/eslint/issues/20479 ))
(Francesco Trotta)
-
[`84fb885`](84fb885d49 )
chore: package.json update for
[@​eslint/js](https://redirect.github.com/eslint/js ) release
(Jenkins)
-
[`1f66734`](1f667344b5 )
chore: add `eslint` to `peerDependencies` of `@eslint/js`
([#​20467](https://redirect.github.com/eslint/eslint/issues/20467 ))
(Milos Djermanovic)
###
[`v10.0.0`](https://redirect.github.com/eslint/eslint/compare/v9.39.2...4e6c4ac042e321da8fc29ce53ed03c86dcaa44a7 )
[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v9.39.4...v10.0.0 )
</details>
---
### Configuration
📅 **Schedule**: (in timezone America/Chicago)
- Branch creation
- Only on Friday (`* * * * 5`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-11 15:41:37 +00:00
renovate[bot]
5dd08e1290
chore(deps): update dependency globals to v17 ( #427 )
...
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/ ) |
[Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
| [globals](https://redirect.github.com/sindresorhus/globals ) |
[`^16.0.0` →
`^17.0.0`](https://renovatebot.com/diffs/npm/globals/16.5.0/17.4.0 ) |

|

|
---
### Release Notes
<details>
<summary>sindresorhus/globals (globals)</summary>
###
[`v17.4.0`](https://redirect.github.com/sindresorhus/globals/compare/v17.3.0...a9cfd7493fb701474d4dc946283c7b9d63d64134 )
[Compare
Source](https://redirect.github.com/sindresorhus/globals/compare/v17.3.0...v17.4.0 )
###
[`v17.3.0`](https://redirect.github.com/sindresorhus/globals/releases/tag/v17.3.0 )
[Compare
Source](https://redirect.github.com/sindresorhus/globals/compare/v17.2.0...v17.3.0 )
- Update globals (2026-02-01)
([#​336](https://redirect.github.com/sindresorhus/globals/issues/336 ))
[`295fba9`](295fba9 )
***
###
[`v17.2.0`](https://redirect.github.com/sindresorhus/globals/releases/tag/v17.2.0 )
[Compare
Source](https://redirect.github.com/sindresorhus/globals/compare/v17.1.0...v17.2.0 )
- `jasmine`: Add `throwUnless` and `throwUnlessAsync` globals
([#​335](https://redirect.github.com/sindresorhus/globals/issues/335 ))
[`97f23a7`](97f23a7 )
***
###
[`v17.1.0`](https://redirect.github.com/sindresorhus/globals/releases/tag/v17.1.0 )
[Compare
Source](https://redirect.github.com/sindresorhus/globals/compare/v17.0.0...v17.1.0 )
- Add `webpack` and `rspack` globals
([#​333](https://redirect.github.com/sindresorhus/globals/issues/333 ))
[`65cae73`](65cae73 )
***
###
[`v17.0.0`](https://redirect.github.com/sindresorhus/globals/releases/tag/v17.0.0 )
[Compare
Source](https://redirect.github.com/sindresorhus/globals/compare/v16.5.0...v17.0.0 )
##### Breaking
- Split `audioWorklet` environment from `browser`
([#​320](https://redirect.github.com/sindresorhus/globals/issues/320 ))
[`7bc293e`](7bc293e )
##### Improvements
- Update globals
([#​329](https://redirect.github.com/sindresorhus/globals/issues/329 ))
[`ebe1063`](ebe1063 )
- Get all browser globals from both `chrome` and `firefox`
([#​321](https://redirect.github.com/sindresorhus/globals/issues/321 ))
[`59ceff8`](59ceff8 )
- Add `bunBuiltin` environment
([#​324](https://redirect.github.com/sindresorhus/globals/issues/324 ))
[`1bc6e3b`](1bc6e3b )
- Add `denoBuiltin` environment
([#​324](https://redirect.github.com/sindresorhus/globals/issues/324 ))
[`1bc6e3b`](1bc6e3b )
- Add `paintWorklet` environment
([#​323](https://redirect.github.com/sindresorhus/globals/issues/323 ))
[`4b78f56`](4b78f56 )
- Add `sharedWorker` environment
([#​322](https://redirect.github.com/sindresorhus/globals/issues/322 ))
[`4a02a85`](4a02a85 )
***
</details>
---
### Configuration
📅 **Schedule**: (in timezone America/Chicago)
- Branch creation
- Only on Friday (`* * * * 5`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-11 14:29:31 +00:00
renovate[bot]
f2530f6d59
chore(deps): update dependency @types/handlebars to v4.1.0 ( #423 )
...
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/ ) |
[Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
| [@types/handlebars](https://redirect.github.com/wycats/handlebars.js )
| [`4.0.40` →
`4.1.0`](https://renovatebot.com/diffs/npm/@types%2fhandlebars/4.0.40/4.1.0 )
|

|

|
---
### Release Notes
<details>
<summary>wycats/handlebars.js (@​types/handlebars)</summary>
###
[`v4.1.0`](https://redirect.github.com/wycats/handlebars.js/blob/HEAD/release-notes.md#v410---February-7th-2019 )
New Features
- import TypeScript typings -
[`27ac1ee`](27ac1ee )
Security fixes:
- disallow access to the constructor in templates to prevent RCE -
[`42841c4`](42841c4 ),
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 )
Housekeeping
- chore: fix components/handlebars package.json and auto-update on
release -
[`bacd473`](bacd473 )
- chore: Use node 10 to build handlebars -
[`78dd89c`](78dd89c )
- chore/doc: Add more release docs -
[`6b87c21`](6b87c21 )
Compatibility notes:
Access to class constructors (i.e. `({}).constructor`) is now prohibited
to prevent
Remote Code Execution. This means that following construct will no work
anymore:
```
class SomeClass {
}
SomeClass.staticProperty = 'static'
var template = Handlebars.compile('{{constructor.staticProperty}}');
document.getElementById('output').innerHTML = template(new SomeClass());
// expected: 'static', but now this is empty.
```
This kind of access is not the intended use of Handlebars and leads to
the vulnerability described in
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 ).
We will **not** increase the major version, because such use is not
intended or documented, and because of the potential impact of the issue
(we fear that most people won't use a new major version and the issue
may not be resolved on many systems).
[Commits](https://redirect.github.com/handlebars-lang/handlebars.js/compare/v4.0.12...v4.1.0 )
</details>
---
### Configuration
📅 **Schedule**: (in timezone America/Chicago)
- Branch creation
- Only on Friday (`* * * * 5`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled because a matching PR was automerged
previously.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 04:52:48 -05:00
renovate[bot]
05f8e725d3
chore(deps): update dependency prettier to v3.8.2 ( #421 )
...
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/ ) |
[Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
| [prettier](https://prettier.io )
([source](https://redirect.github.com/prettier/prettier )) | [`3.8.1` →
`3.8.2`](https://renovatebot.com/diffs/npm/prettier/3.8.1/3.8.2 ) |

|

|
---
### Release Notes
<details>
<summary>prettier/prettier (prettier)</summary>
###
[`v3.8.2`](https://redirect.github.com/prettier/prettier/compare/3.8.1...fbf300f9d89820364ddc9b2efa05b92b8c01b692 )
[Compare
Source](https://redirect.github.com/prettier/prettier/compare/3.8.1...3.8.2 )
</details>
---
### Configuration
📅 **Schedule**: (in timezone America/Chicago)
- Branch creation
- Only on Friday (`* * * * 5`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 05:25:55 +00:00
renovate[bot]
1c992c2b17
chore(deps): lock file maintenance ( #420 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-06 05:25:01 +00:00
renovate[bot]
d93325ba61
chore(deps): update dependency @types/handlebars to v4.1.0 ( #417 )
...
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/ ) |
[Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
| [@types/handlebars](https://redirect.github.com/wycats/handlebars.js )
| [`4.0.40` →
`4.1.0`](https://renovatebot.com/diffs/npm/@types%2fhandlebars/4.0.40/4.1.0 )
|

|

|
---
### Release Notes
<details>
<summary>wycats/handlebars.js (@​types/handlebars)</summary>
###
[`v4.1.0`](https://redirect.github.com/wycats/handlebars.js/blob/HEAD/release-notes.md#v410---February-7th-2019 )
New Features
- import TypeScript typings -
[`27ac1ee`](27ac1ee )
Security fixes:
- disallow access to the constructor in templates to prevent RCE -
[`42841c4`](42841c4 ),
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 )
Housekeeping
- chore: fix components/handlebars package.json and auto-update on
release -
[`bacd473`](bacd473 )
- chore: Use node 10 to build handlebars -
[`78dd89c`](78dd89c )
- chore/doc: Add more release docs -
[`6b87c21`](6b87c21 )
Compatibility notes:
Access to class constructors (i.e. `({}).constructor`) is now prohibited
to prevent
Remote Code Execution. This means that following construct will no work
anymore:
```
class SomeClass {
}
SomeClass.staticProperty = 'static'
var template = Handlebars.compile('{{constructor.staticProperty}}');
document.getElementById('output').innerHTML = template(new SomeClass());
// expected: 'static', but now this is empty.
```
This kind of access is not the intended use of Handlebars and leads to
the vulnerability described in
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 ).
We will **not** increase the major version, because such use is not
intended or documented, and because of the potential impact of the issue
(we fear that most people won't use a new major version and the issue
may not be resolved on many systems).
[Commits](https://redirect.github.com/handlebars-lang/handlebars.js/compare/v4.0.12...v4.1.0 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Only on Friday ( * * * * 5 ) in
timezone America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled because a matching PR was automerged
previously.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-04 18:11:24 +00:00
renovate[bot]
ae16675061
chore(deps): lock file maintenance ( #415 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-30 08:48:56 +00:00
renovate[bot]
b106a2f3b6
chore(deps): lock file maintenance ( #413 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-23 05:26:27 +00:00
mise-en-dev
1648a7812b
chore: release v4.0.1 ( #406 )
...
---
## [4.0.1](https://github.com/jdx/mise-action/compare/v4.0.0..v4.0.1 ) -
2026-03-22
### 🐛 Bug Fixes
- run npm install in pre-commit hook before build (#410 ) by
[@jdx](https://github.com/jdx ) in
[#410 ](https://github.com/jdx/mise-action/pull/410 )
### 🚜 Refactor
- extract getCwd() helper to deduplicate working directory resolution
(#403 ) by [@altendky](https://github.com/altendky ) in
[#403 ](https://github.com/jdx/mise-action/pull/403 )
### 📚 Documentation
- bump versions listed im README.md (#407 ) by
[@deining](https://github.com/deining ) in
[#407 ](https://github.com/jdx/mise-action/pull/407 )
- bump more versions listed in README.md (#408 ) by
[@deining](https://github.com/deining ) in
[#408 ](https://github.com/jdx/mise-action/pull/408 )
### ⚙️ Miscellaneous Tasks
- add workflow to auto-close stale PRs (#409 ) by
[@jdx](https://github.com/jdx ) in
[#409 ](https://github.com/jdx/mise-action/pull/409 )
### New Contributors
* @deining made their first contribution in
[#408 ](https://github.com/jdx/mise-action/pull/408 )
<!-- generated by git-cliff -->
2026-03-22 16:06:38 +00:00
renovate[bot]
71c0f0ac17
chore(deps): lock file maintenance ( #400 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-16 05:13:44 +00:00
mise-en-dev
c1ecc8f748
chore: release v4.0.0 ( #398 )
...
---
## [4.0.0](https://github.com/jdx/mise-action/compare/v3.6.3..v4.0.0 ) -
2026-03-13
### 🚀 Features
- **breaking** Update Node.js version from 20 to 24 (#395 ) by
[@tumerorkun](https://github.com/tumerorkun ) in
[#395 ](https://github.com/jdx/mise-action/pull/395 )
### New Contributors
* @tumerorkun made their first contribution in
[#395 ](https://github.com/jdx/mise-action/pull/395 )
<!-- generated by git-cliff -->
2026-03-13 12:16:02 +01:00
renovate[bot]
9a9bfbd065
chore(deps): lock file maintenance ( #392 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-09 05:10:20 +00:00
mise-en-dev
5228313ee0
chore: release v3.6.3 ( #391 )
...
---
## [3.6.3](https://github.com/jdx/mise-action/compare/v3.6.2..v3.6.3 ) -
2026-03-06
### 🐛 Bug Fixes
- pass cwd to all exec calls in exportMiseEnv() (#390 ) by
[@andrewthauer](https://github.com/andrewthauer ) in
[#390 ](https://github.com/jdx/mise-action/pull/390 )
### New Contributors
* @andrewthauer made their first contribution in
[#390 ](https://github.com/jdx/mise-action/pull/390 )
<!-- generated by git-cliff -->
2026-03-06 10:14:48 -06:00
mise-en-dev
e79ddf65a1
chore: release v3.6.2 ( #385 )
...
---
## [3.6.2](https://github.com/jdx/mise-action/compare/v3.6.1..v3.6.2 ) -
2026-03-02
### 🐛 Bug Fixes
- move file_hash to end of cache key template to prevent prefix matching
(#384 ) by [@altendky](https://github.com/altendky ) in
[#384 ](https://github.com/jdx/mise-action/pull/384 )
### New Contributors
* @altendky made their first contribution in
[#384 ](https://github.com/jdx/mise-action/pull/384 )
<!-- generated by git-cliff -->
2026-03-02 03:45:46 -06:00
renovate[bot]
74b74371ea
chore(deps): lock file maintenance ( #389 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNDMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-02 09:39:28 +00:00
renovate[bot]
3030cd8239
chore(deps): lock file maintenance ( #386 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNi41IiwidXBkYXRlZEluVmVyIjoiNDMuMjYuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-02-23 09:52:04 +00:00
renovate[bot]
60119f926c
chore(deps): update dependency @types/handlebars to v4.1.0 ( #381 )
...
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/ ) |
[Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
| [@types/handlebars](https://redirect.github.com/wycats/handlebars.js )
| [`4.0.40` →
`4.1.0`](https://renovatebot.com/diffs/npm/@types%2fhandlebars/4.0.40/4.1.0 )
|

|

|
---
### Release Notes
<details>
<summary>wycats/handlebars.js (@​types/handlebars)</summary>
###
[`v4.1.0`](https://redirect.github.com/wycats/handlebars.js/blob/HEAD/release-notes.md#v410---February-7th-2019 )
New Features
- import TypeScript typings -
[`27ac1ee`](27ac1ee )
Security fixes:
- disallow access to the constructor in templates to prevent RCE -
[`42841c4`](42841c4 ),
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 )
Housekeeping
- chore: fix components/handlebars package.json and auto-update on
release -
[`bacd473`](bacd473 )
- chore: Use node 10 to build handlebars -
[`78dd89c`](78dd89c )
- chore/doc: Add more release docs -
[`6b87c21`](6b87c21 )
Compatibility notes:
Access to class constructors (i.e. `({}).constructor`) is now prohibited
to prevent
Remote Code Execution. This means that following construct will no work
anymore:
```
class SomeClass {
}
SomeClass.staticProperty = 'static'
var template = Handlebars.compile('{{constructor.staticProperty}}');
document.getElementById('output').innerHTML = template(new SomeClass());
// expected: 'static', but now this is empty.
```
This kind of access is not the intended use of Handlebars and leads to
the vulnerability described in
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 ).
We will **not** increase the major version, because such use is not
intended or documented, and because of the potential impact of the issue
(we fear that most people won't use a new major version and the issue
may not be resolved on many systems).
[Commits](https://redirect.github.com/handlebars-lang/handlebars.js/compare/v4.0.12...v4.1.0 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled because a matching PR was automerged
previously.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNS4xMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1LjExIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-21 14:00:06 +00:00
renovate[bot]
7cba2b160a
chore(deps): update dependency @types/node to v24.10.13 ( #379 )
...
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/ ) |
[Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
|
[@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node )
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ))
| [`24.10.12` →
`24.10.13`](https://renovatebot.com/diffs/npm/@types%2fnode/24.10.12/24.10.13 )
|

|

|
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44LjUiLCJ1cGRhdGVkSW5WZXIiOiI0My44LjUiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-17 19:08:50 +00:00
renovate[bot]
22f3a825ec
chore(deps): lock file maintenance ( #377 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDIuOTUuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-02-09 08:42:58 +00:00
renovate[bot]
10eed64f1f
chore(deps): lock file maintenance ( #372 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-02-02 09:58:12 +00:00
renovate[bot]
f03edced6d
chore(deps): update dependency @types/node to v24.10.9 ( #367 )
...
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/ ) |
[Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
|
[@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node )
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ))
| [`24.10.7` →
`24.10.9`](https://renovatebot.com/diffs/npm/@types%2fnode/24.10.7/24.10.9 )
|

|

|
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi44NS4xIiwidXBkYXRlZEluVmVyIjoiNDIuODUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-23 20:00:16 +00:00
renovate[bot]
b128e09c22
chore(deps): update dependency prettier to v3.8.1 ( #368 )
...
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/ ) |
[Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
| [prettier](https://prettier.io )
([source](https://redirect.github.com/prettier/prettier )) | [`3.7.4` →
`3.8.1`](https://renovatebot.com/diffs/npm/prettier/3.7.4/3.8.1 ) |

|

|
---
### Release Notes
<details>
<summary>prettier/prettier (prettier)</summary>
###
[`v3.8.1`](https://redirect.github.com/prettier/prettier/compare/3.8.0...fbf300f9d89820364ddc9b2efa05b92b8c01b692 )
[Compare
Source](https://redirect.github.com/prettier/prettier/compare/3.8.0...3.8.1 )
###
[`v3.8.0`](https://redirect.github.com/prettier/prettier/releases/tag/3.8.0 )
[Compare
Source](https://redirect.github.com/prettier/prettier/compare/3.7.4...3.8.0 )
[diff](https://redirect.github.com/prettier/prettier/compare/3.7.4...3.8.0 )
🔗 [Release note](https://prettier.io/blog/2026/01/14/3.8.0 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi44NS4xIiwidXBkYXRlZEluVmVyIjoiNDIuODUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-23 08:47:26 +00:00
mise-en-dev
6d1e696aa2
chore: release v3.6.1 ( #365 )
...
---
## [3.6.1](https://github.com/jdx/mise-action/compare/v3.6.0..v3.6.1 ) -
2026-01-20
### 🔍 Other Changes
- Revert "fix(cache): isolate cache keys per working_directory in
monorepos" (#364 ) by [@jdx](https://github.com/jdx ) in
[#364 ](https://github.com/jdx/mise-action/pull/364 )
<!-- generated by git-cliff -->
2026-01-20 12:32:53 +00:00
mise-en-dev
c53b9236f0
chore: release v3.6.0 ( #342 )
...
---
## [3.6.0](https://github.com/jdx/mise-action/compare/v3.5.1..v3.6.0 ) -
2026-01-18
### 🚀 Features
- add option to disable shims in PATH (#340 ) by
[@jdx](https://github.com/jdx ) in
[#340 ](https://github.com/jdx/mise-action/pull/340 )
### 🐛 Bug Fixes
- **(cache)** isolate cache keys per working_directory in monorepos
(#360 ) by [@chadxz](https://github.com/chadxz ) in
[#360 ](https://github.com/jdx/mise-action/pull/360 )
- use mise_dir input when specified (#339 ) by
[@jdx](https://github.com/jdx ) in
[#339 ](https://github.com/jdx/mise-action/pull/339 )
- pass environment variables to mise commands (#341 ) by
[@jdx](https://github.com/jdx ) in
[#341 ](https://github.com/jdx/mise-action/pull/341 )
- make mise self-update output visible in logs (#355 ) by
[@nikobockerman](https://github.com/nikobockerman ) in
[#355 ](https://github.com/jdx/mise-action/pull/355 )
### 📚 Documentation
- fix description for `mise_toml` input (#351 ) by
[@quad](https://github.com/quad ) in
[#351 ](https://github.com/jdx/mise-action/pull/351 )
### New Contributors
* @chadxz made their first contribution in
[#360 ](https://github.com/jdx/mise-action/pull/360 )
* @nikobockerman made their first contribution in
[#355 ](https://github.com/jdx/mise-action/pull/355 )
* @quad made their first contribution in
[#351 ](https://github.com/jdx/mise-action/pull/351 )
<!-- generated by git-cliff -->
2026-01-18 13:57:44 -06:00
renovate[bot]
b5a5c92514
chore(deps): update dependency @types/handlebars to v4.1.0 ( #349 )
...
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/ ) |
[Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
| [@types/handlebars](https://redirect.github.com/wycats/handlebars.js )
| [`4.0.40` →
`4.1.0`](https://renovatebot.com/diffs/npm/@types%2fhandlebars/4.0.40/4.1.0 )
|

|

|
---
### Release Notes
<details>
<summary>wycats/handlebars.js (@​types/handlebars)</summary>
###
[`v4.1.0`](https://redirect.github.com/wycats/handlebars.js/blob/HEAD/release-notes.md#v410---February-7th-2019 )
New Features
- import TypeScript typings -
[`27ac1ee`](27ac1ee )
Security fixes:
- disallow access to the constructor in templates to prevent RCE -
[`42841c4`](42841c4 ),
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 )
Housekeeping
- chore: fix components/handlebars package.json and auto-update on
release -
[`bacd473`](bacd473 )
- chore: Use node 10 to build handlebars -
[`78dd89c`](78dd89c )
- chore/doc: Add more release docs -
[`6b87c21`](6b87c21 )
Compatibility notes:
Access to class constructors (i.e. `({}).constructor`) is now prohibited
to prevent
Remote Code Execution. This means that following construct will no work
anymore:
```
class SomeClass {
}
SomeClass.staticProperty = 'static'
var template = Handlebars.compile('{{constructor.staticProperty}}');
document.getElementById('output').innerHTML = template(new SomeClass());
// expected: 'static', but now this is empty.
```
This kind of access is not the intended use of Handlebars and leads to
the vulnerability described in
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 ).
We will **not** increase the major version, because such use is not
intended or documented, and because of the potential impact of the issue
(we fear that most people won't use a new major version and the issue
may not be resolved on many systems).
[Commits](https://redirect.github.com/handlebars-lang/handlebars.js/compare/v4.0.12...v4.1.0 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled because a matching PR was automerged
previously.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4xIiwidXBkYXRlZEluVmVyIjoiNDIuNzQuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-18 13:39:42 -06:00
renovate[bot]
10c27cdfd4
chore(deps): lock file maintenance ( #358 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDIuNzQuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-12 09:25:53 +00:00
renovate[bot]
cd2d92b2f8
chore(deps): lock file maintenance ( #352 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4xIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-05 06:13:35 +00:00
renovate[bot]
1567366109
chore(deps): lock file maintenance ( #348 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-29 08:59:27 +00:00
renovate[bot]
bf7ce94bf7
chore(deps): lock file maintenance ( #344 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-22 06:49:53 +00:00
renovate[bot]
6f53010992
chore(deps): lock file maintenance ( #338 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi40Mi4yIiwidXBkYXRlZEluVmVyIjoiNDIuNDIuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-12-15 08:53:25 +00:00
renovate[bot]
b0ee52b6a2
chore(deps): lock file maintenance ( #336 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zMi4yIiwidXBkYXRlZEluVmVyIjoiNDIuMzIuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-08 06:05:04 +00:00
renovate[bot]
eb508e65f0
chore(deps): update dependency @eslint/eslintrc to v3.3.3 ( #333 )
...
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/ ) |
[Confidence](https://docs.renovatebot.com/merge-confidence/ ) |
|---|---|---|---|
| [@eslint/eslintrc](https://redirect.github.com/eslint/eslintrc ) |
[`3.3.1` ->
`3.3.3`](https://renovatebot.com/diffs/npm/@eslint%2feslintrc/3.3.1/3.3.3 )
|

|

|
---
### Release Notes
<details>
<summary>eslint/eslintrc (@​eslint/eslintrc)</summary>
###
[`v3.3.3`](https://redirect.github.com/eslint/eslintrc/blob/HEAD/CHANGELOG.md#333-2025-11-28 )
[Compare
Source](https://redirect.github.com/eslint/eslintrc/compare/v3.3.1...fdb529826fd769f2bdcd1281d711412253561231 )
##### Bug Fixes
- release v3.3.3 because publishing v3.3.2 failed
([#​211](https://redirect.github.com/eslint/eslintrc/issues/211 ))
([8aa555a](8aa555a3f5 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zMi4yIiwidXBkYXRlZEluVmVyIjoiNDIuMzIuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-05 09:31:30 +00:00
renovate[bot]
e3592f6c79
chore(deps): update dependency @types/handlebars to v4.1.0 ( #314 )
...
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| [@types/handlebars](https://redirect.github.com/wycats/handlebars.js )
| [`4.0.40` ->
`4.1.0`](https://renovatebot.com/diffs/npm/@types%2fhandlebars/4.0.40/4.1.0 )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>wycats/handlebars.js (@​types/handlebars)</summary>
###
[`v4.1.0`](https://redirect.github.com/wycats/handlebars.js/blob/HEAD/release-notes.md#v410---February-7th-2019 )
New Features
- import TypeScript typings -
[`27ac1ee`](27ac1ee )
Security fixes:
- disallow access to the constructor in templates to prevent RCE -
[`42841c4`](42841c4 ),
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 )
Housekeeping
- chore: fix components/handlebars package.json and auto-update on
release -
[`bacd473`](bacd473 )
- chore: Use node 10 to build handlebars -
[`78dd89c`](78dd89c )
- chore/doc: Add more release docs -
[`6b87c21`](6b87c21 )
Compatibility notes:
Access to class constructors (i.e. `({}).constructor`) is now prohibited
to prevent
Remote Code Execution. This means that following construct will no work
anymore:
```
class SomeClass {
}
SomeClass.staticProperty = 'static'
var template = Handlebars.compile('{{constructor.staticProperty}}');
document.getElementById('output').innerHTML = template(new SomeClass());
// expected: 'static', but now this is empty.
```
This kind of access is not the intended use of Handlebars and leads to
the vulnerability described in
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 ).
We will **not** increase the major version, because such use is not
intended or documented, and because of the potential impact of the issue
(we fear that most people won't use a new major version and the issue
may not be resolved on many systems).
[Commits](https://redirect.github.com/handlebars-lang/handlebars.js/compare/v4.0.12...v4.1.0 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled because a matching PR was automerged
previously.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-03 18:53:08 +00:00
renovate[bot]
ef4aeeb083
chore(deps): update dependency typescript-eslint to v8.48.1 ( #332 )
...
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
|
[typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint )
([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint ))
| [`8.47.0` ->
`8.48.1`](https://renovatebot.com/diffs/npm/typescript-eslint/8.47.0/8.48.1 )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>typescript-eslint/typescript-eslint
(typescript-eslint)</summary>
###
[`v8.48.1`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8481-2025-12-02 )
[Compare
Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.48.0...8fe34456f75c1d1e8a4dc518306d5ab93422efec )
This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.
You can read about our [versioning
strategy](https://typescript-eslint.io/users/versioning ) and
[releases](https://typescript-eslint.io/users/releases ) on our website.
###
[`v8.48.0`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8480-2025-11-24 )
[Compare
Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.47.0...v8.48.0 )
This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.
You can read about our [versioning
strategy](https://typescript-eslint.io/users/versioning ) and
[releases](https://typescript-eslint.io/users/releases ) on our website.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xOS45IiwidXBkYXRlZEluVmVyIjoiNDIuMTkuOSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-02 09:05:30 +00:00
renovate[bot]
1e7d8abe4c
chore(deps): update dependency prettier to v3.7.1 ( #331 )
...
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| [prettier](https://prettier.io )
([source](https://redirect.github.com/prettier/prettier )) | [`3.6.2` ->
`3.7.1`](https://renovatebot.com/diffs/npm/prettier/3.6.2/3.7.1 ) |
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>prettier/prettier (prettier)</summary>
###
[`v3.7.1`](https://redirect.github.com/prettier/prettier/blob/HEAD/CHANGELOG.md#371 )
[Compare
Source](https://redirect.github.com/prettier/prettier/compare/3.7.0...3.7.1 )
[diff](https://redirect.github.com/prettier/prettier/compare/3.7.0...3.7.1 )
##### API: Fix performance regression in doc printer
([#​18342](https://redirect.github.com/prettier/prettier/pull/18342 )
by [@​fisker](https://redirect.github.com/fisker ))
Prettier 3.7.1 can be very slow when formatting big files, the
regression has been fixed.
###
[`v3.7.0`](https://redirect.github.com/prettier/prettier/blob/HEAD/CHANGELOG.md#370 )
[Compare
Source](https://redirect.github.com/prettier/prettier/compare/3.6.2...3.7.0 )
[diff](https://redirect.github.com/prettier/prettier/compare/3.6.2...3.7.0 )
🔗 [Release Notes](https://prettier.io/blog/2025/11/27/3.7.0 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xOS45IiwidXBkYXRlZEluVmVyIjoiNDIuMTkuOSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-28 06:01:26 +00:00
mise-en-dev
146a281750
chore: release v3.5.1 ( #330 )
...
---
## [3.5.1](https://github.com/jdx/mise-action/compare/v3.5.0..v3.5.1 ) -
2025-11-24
### 🔍 Other Changes
- Revert "feat(action): moved save cache to post step" (#329 ) by
[@jdx](https://github.com/jdx ) in
[#329 ](https://github.com/jdx/mise-action/pull/329 )
<!-- generated by git-cliff -->
2025-11-24 06:04:17 -06:00
renovate[bot]
6af9662422
chore(deps): lock file maintenance ( #328 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xNi4xIiwidXBkYXRlZEluVmVyIjoiNDIuMTYuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-24 09:30:19 +00:00
mise-en-dev
d16887ba50
chore: release v3.5.0 ( #322 )
...
---
## [3.5.0](https://github.com/jdx/mise-action/compare/v3.4.1..v3.5.0 ) -
2025-11-21
### 🚀 Features
- **(action)** moved save cache to post step (#321 ) by
[@aamkye](https://github.com/aamkye ) in
[#321 ](https://github.com/jdx/mise-action/pull/321 )
### New Contributors
* @aamkye made their first contribution in
[#321 ](https://github.com/jdx/mise-action/pull/321 )
<!-- generated by git-cliff -->
2025-11-21 04:42:39 -06:00
renovate[bot]
07cd07257f
chore(deps): update dependency @types/node to v24.10.1 ( #320 )
...
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
|
[@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node )
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ))
| [`24.10.0` ->
`24.10.1`](https://renovatebot.com/diffs/npm/@types%2fnode/24.10.0/24.10.1 )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-18 11:35:24 +00:00
mise-en-dev
9dc7d5dd45
chore: release v3.4.1 ( #318 )
...
---
## [3.4.1](https://github.com/jdx/mise-action/compare/v3.4.0..v3.4.1 ) -
2025-11-13
### 🐛 Bug Fixes
- avoid github token downstream issue (#317 ) by
[@acesyde](https://github.com/acesyde ) in
[#317 ](https://github.com/jdx/mise-action/pull/317 )
### New Contributors
* @acesyde made their first contribution in
[#317 ](https://github.com/jdx/mise-action/pull/317 )
<!-- generated by git-cliff -->
2025-11-13 04:53:47 -06:00
renovate[bot]
bccc99f675
chore(deps): lock file maintenance ( #316 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-11-10 07:02:36 +00:00
renovate[bot]
9d78740e26
chore(deps): update eslint monorepo to v9.39.1 ( #313 )
...
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| [@eslint/js](https://eslint.org )
([source](https://redirect.github.com/eslint/eslint/tree/HEAD/packages/js ))
| [`9.39.0` ->
`9.39.1`](https://renovatebot.com/diffs/npm/@eslint%2fjs/9.39.0/9.39.1 )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
| [eslint](https://eslint.org )
([source](https://redirect.github.com/eslint/eslint )) | [`9.39.0` ->
`9.39.1`](https://renovatebot.com/diffs/npm/eslint/9.39.0/9.39.1 ) |
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>eslint/eslint (@​eslint/js)</summary>
###
[`v9.39.1`](https://redirect.github.com/eslint/eslint/compare/v9.39.0...c7ebefc9eaf99b76b30b0d3cf9960807a47367c4 )
[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v9.39.0...v9.39.1 )
</details>
<details>
<summary>eslint/eslint (eslint)</summary>
###
[`v9.39.1`](https://redirect.github.com/eslint/eslint/compare/v9.39.0...e2772811a8595d161870835ff04822b25a2cdf45 )
[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v9.39.0...v9.39.1 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-07 09:14:37 +00:00
renovate[bot]
70d7607bae
chore(deps): lock file maintenance ( #310 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-03 09:32:35 +00:00
renovate[bot]
a3c4726ffe
chore(deps): lock file maintenance ( #309 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-11-03 06:08:56 +00:00
mise-en-dev
be3be2260b
chore: release v3.4.0 ( #291 )
...
---
## [3.4.0](https://github.com/jdx/mise-action/compare/v3.3.1..v3.4.0 ) -
2025-10-31
### 🚀 Features
- use autofix.ci to auto-update dist/ on all PRs by
[@jdx](https://github.com/jdx ) in
[16e9fd5 ](16e9fd5251 )
- use autofix.ci to auto-update dist/ on all PRs (#308 ) by
[@jdx](https://github.com/jdx ) in
[#308 ](https://github.com/jdx/mise-action/pull/308 )
### 🐛 Bug Fixes
- add missing `await` to `core.group` calls (#305 ) by
[@smorimoto](https://github.com/smorimoto ) in
[#305 ](https://github.com/jdx/mise-action/pull/305 )
- auto-update dist folder in Renovate PRs via GitHub Actions (#306 ) by
[@jdx](https://github.com/jdx ) in
[#306 ](https://github.com/jdx/mise-action/pull/306 )
- configure Renovate to ignore github-actions[bot] commits by
[@jdx](https://github.com/jdx ) in
[993e7d0 ](993e7d0bb6 )
- run auto-update-dist workflow on all PRs by
[@jdx](https://github.com/jdx ) in
[6d0fd75 ](6d0fd75ed5 )
### 📚 Documentation
- update to v3 in README (#290 ) by [@pdecat](https://github.com/pdecat )
in [#290 ](https://github.com/jdx/mise-action/pull/290 )
### ⚙️ Miscellaneous Tasks
- upgrade all workflows to Node 24 by [@jdx](https://github.com/jdx ) in
[c7b5f37 ](c7b5f37cad )
- remove unused workflow by [@jdx](https://github.com/jdx ) in
[aecb23d ](aecb23d92f )
### New Contributors
* @smorimoto made their first contribution in
[#305 ](https://github.com/jdx/mise-action/pull/305 )
* @pdecat made their first contribution in
[#290 ](https://github.com/jdx/mise-action/pull/290 )
<!-- generated by git-cliff -->
---------
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-10-31 10:43:55 -05:00
renovate[bot]
e82281ebcf
chore(deps): lock file maintenance ( #301 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency
versions.
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTYuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-10-31 14:58:08 +00:00
renovate[bot]
1a11af3821
chore(deps): update dependency @types/handlebars to v4.1.0 ( #294 )
...
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| [@types/handlebars](https://redirect.github.com/wycats/handlebars.js )
| [`4.0.40` ->
`4.1.0`](https://renovatebot.com/diffs/npm/@types%2fhandlebars/4.0.40/4.1.0 )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>wycats/handlebars.js (@​types/handlebars)</summary>
###
[`v4.1.0`](https://redirect.github.com/wycats/handlebars.js/blob/HEAD/release-notes.md#v410---February-7th-2019 )
New Features
- import TypeScript typings -
[`27ac1ee`](27ac1ee )
Security fixes:
- disallow access to the constructor in templates to prevent RCE -
[`42841c4`](42841c4 ),
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 )
Housekeeping
- chore: fix components/handlebars package.json and auto-update on
release -
[`bacd473`](bacd473 )
- chore: Use node 10 to build handlebars -
[`78dd89c`](78dd89c )
- chore/doc: Add more release docs -
[`6b87c21`](6b87c21 )
Compatibility notes:
Access to class constructors (i.e. `({}).constructor`) is now prohibited
to prevent
Remote Code Execution. This means that following construct will no work
anymore:
```
class SomeClass {
}
SomeClass.staticProperty = 'static'
var template = Handlebars.compile('{{constructor.staticProperty}}');
document.getElementById('output').innerHTML = template(new SomeClass());
// expected: 'static', but now this is empty.
```
This kind of access is not the intended use of Handlebars and leads to
the vulnerability described in
[#​1495](https://redirect.github.com/wycats/handlebars.js/issues/1495 ).
We will **not** increase the major version, because such use is not
intended or documented, and because of the potential impact of the issue
(we fear that most people won't use a new major version and the issue
may not be resolved on many systems).
[Commits](https://redirect.github.com/handlebars-lang/handlebars.js/compare/v4.0.12...v4.1.0 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled because a matching PR was automerged
previously.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-31 09:31:40 -05:00
renovate[bot]
f94c8d5238
chore(deps): update dependency @types/node to v24.9.2 ( #303 )
...
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
|
[@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node )
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ))
| [`24.9.1` ->
`24.9.2`](https://renovatebot.com/diffs/npm/@types%2fnode/24.9.1/24.9.2 )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-31 08:08:39 +00:00