chore(deps)!: squash dependency updates#333
Merged
Merged
Conversation
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #333 +/- ##
==========================================
- Coverage 41.92% 38.58% -3.34%
==========================================
Files 14 14
Lines 2092 2340 +248
Branches 42 42
==========================================
+ Hits 877 903 +26
- Misses 1197 1419 +222
Partials 18 18 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Member
Author
|
I'm going to remove mapbox dep first. |
aabmass
force-pushed
the
squash-deps
branch
4 times, most recently
from
5f83f4a to
e0deab9
Compare
aabmass
commented
Jun 30, 2026
aabmass
changed the title
aabmass
commented
Jun 30, 2026
aabmass
commented
Jun 30, 2026
Member
Author
There was a problem hiding this comment.
Allowlist configurations in js-green-licenses.json were added because the tool flags valid, permissive licenses like BlueOak-1.0.0 (used by minipass) as failures due to its hardcoded default list. These are existing transitive dev dependencies (e.g., from glob), not new ones.
aabmass
force-pushed
the
squash-deps
branch
2 times, most recently
from
d504d39 to
d1d0032
Compare
aabmass
added a commit
to aabmass/pprof-nodejs
that referenced
this pull request
Jun 30, 2026
PR google#333 claimed to squash and merge several devDependency upgrades from Renovate, but only updated package-lock.json without modifying package.json. This commit updates package.json to match those intended versions: - @types/pretty-ms to ^5.0.0 (google#289) - @types/sinon to ^21.0.0 (google#322) - linkinator to ^7.0.0 (google#318) - mocha to ^11.0.0 (google#319) - protobufjs-cli to 1.3.2 (google#330) - tmp to 0.2.6 (google#332) - Bump protobufjs from ~7.4.0 to ~7.6.4 to address critical prototype pollution and DoS advisories - Regenerate proto/profile.js and proto/profile.d.ts with updated pbjs/pbts compiler
BREAKING CHANGE: Node.js 14 and 16 are no longer supported.
Squashed Renovate PRs: - google#332 (tmp to v0.2.6) - google#330 (protobufjs-cli to v1.3.2) - google#328 (protobufjs to ~7.6.0) - google#325/google#317 (debian docker tag to 12) - google#323 (@mapbox/node-pre-gyp to v2) - google#322 (@types/sinon to v21) - google#319 (mocha to v11) - google#318 (linkinator to v7) - google#316 (golang docker tag to 1.24) - google#289 (@types/pretty-ms to v5) Excluded: - google#326 (p-limit to v7) because versions >= 4.0.0 are ESM-only. TAG=agy CONV=4ca117e0-d8fa-4e4c-8cfa-b52e896710d3
PR google#333 claimed to squash and merge several devDependency upgrades from Renovate, but only updated package-lock.json without modifying package.json. This commit updates package.json to match those intended versions: - @types/pretty-ms to ^5.0.0 (google#289) - @types/sinon to ^21.0.0 (google#322) - linkinator to ^7.0.0 (google#318) - mocha to ^11.0.0 (google#319) - protobufjs-cli to 1.3.2 (google#330) - tmp to 0.2.6 (google#332) - Bump protobufjs from ~7.4.0 to ~7.6.4 to address critical prototype pollution and DoS advisories - Regenerate proto/profile.js and proto/profile.d.ts with updated pbjs/pbts compiler
psx95
approved these changes
Jun 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
BREAKING CHANGE: Node.js 14 and 16 are no longer supported.
Squashed Renovate PRs:
Excluded:
Dropping Support:
Fixes:
busyLoopTick) so V8 attributes samples to our own script instead of(anonymous)ornode:internal/timers.