Skip to content

chore(deps): update mise#1802

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/mise
Open

chore(deps): update mise#1802
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/mise

Conversation

@renovate

@renovate renovate Bot commented Jul 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change Pending
deno patch 2.9.1 → 2.9.3
helm patch 4.2.2 → 4.2.3
usage patch 3.5.4 → 3.5.5 3.5.6
uv patch 0.11.28 → 0.11.29 0.11.31 (+1)

Release Notes

denoland/deno (deno)

v2.9.3

Compare Source

  • feat(cli): deno add --no-save and --save-optional (#​36039)
  • feat(cli): add --min-dep-age alias (#​35914)
  • feat(compile): support aarch64-pc-windows-msvc target (#​36004)
  • feat(ext/fetch): add http2MaxHeaderListSize option to
    Deno.createHttpClient (#​33194)
  • fix(bundle): preserve raw imports in watch mode (#​36040)
  • fix(canvas): don't hold SurfaceData mut borrow over window resize (#​35993)
  • fix(config): reject out-of-range minimum dependency ages (#​36051)
  • fix(core): block user ext imports after resolution (#​36012)
  • fix(core): deactivate idle TTY write handles (#​35886)
  • fix(core): restrict extension loaders to internal modules (#​36013)
  • fix(core): root slow op string coercions (#​36018)
  • fix(desktop): don't let op_desktop_send_error_report target caller-supplied
    URLs (#​35940)
  • fix(ext/http): don't panic recycling cancelled record on native response
    (#​36053)
  • fix(ext/napi): don't free threadsafe function on abort while refs remain
    (#​36032)
  • fix(ext/napi): don't resurrect a released threadsafe function in acquire
    (#​36054)
  • fix(ext/node): add deprecation warning for Duplex.toWeb({ type }) DEP0201
    (#​35972)
  • fix(ext/node): guard sqlite deserialize during callbacks (#​36023)
  • fix(ext/node): handle UTF-16 assert source positions (#​36029)
  • fix(ext/node): handle sqlite conversion failures (#​36024)
  • fix(ext/node): respect base64 buffer ranges (#​36030)
  • fix(ext/process): don't double-close extra stdio pipe handles on Windows
    (#​36005)
  • fix(lsp): respect lint rule exclusion for no-slow-types diagnostics (#​35924)
  • fix(node): stop active read on stream close to avoid leaking Socket/TCPWrap
    (#​35898)
  • fix(node_http2): keep header validation enabled (#​36042)
  • fix(node_http2): validate serialized headers (#​36041)
  • fix(npm): don't fetch registry info for deprecated packages under
    --cached-only (#​35903)
  • fix(npm): normalize path in BYONM read permission check (#​35882)
  • fix(pm): hint about minimumDependencyAge when no version is old enough
    (#​35890)
  • fix(release): only strip Mach-O signature for x86_64-apple-darwin (#​35902)
  • fix(release): strip Mach-O signature before patchver on apple targets (#​35897)
  • fix(runtime): guard usage op output buffers (#​36020)
  • fix(serde_v8): handle deserialization exceptions (#​36021)
  • fix(web): guard encodeInto fallback result buffer (#​36019)
  • fix(web): support Event subclasses with readonly toStringTag (#​35920)
  • fix(worker): remove imported ops during bootstrap (#​36014)
  • fix: don't print duplicate parse diagnostics (#​35933)
  • perf(ext/crypto): batch randomUUID generation (#​35953)
  • perf(ext/fetch): remove quadratic line buffering in EventSource (#​35881)
  • perf(ext/node): cache compiled glob matchers + bump bundled minimatch to
    10.2.5 (#​35873)
  • perf(ext/node): fast path fs cp (#​35856)
  • perf(ext/node): right-size small socket reads instead of pinning the 64KB slab
    (#​35779)
  • perf(ext/node): speed up sqlite.StatementSync.all() and run() (#​35863)
  • perf(ext/web): avoid copy-back in op_base64_atob large path (#​35862)

v2.9.2

Compare Source

  • feat(desktop): autodetect React Router framework (#​35557)
  • feat(desktop): enable --hmr for Vite and Nuxt (#​35851)
  • feat(desktop): run HMR by framework dev server (#​35722)
  • feat(desktop): window opacity and transparency APIs (#​35646)
  • feat(desktop): wire --exclude-unused-npm through to compile (#​35740)
  • feat(ext/node): implement v8.setHeapSnapshotNearHeapLimit (#​35694)
  • feat(ext/telemetry): honor OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT (#​35068)
  • feat(inspector): start inspector server on SIGUSR1 (#​35738)
  • feat(node): implement getTestContext() in node:test (#​35678)
  • feat: support wildcard patterns in minimumDependencyAge.exclude (#​35746)
  • fix(check): don't interleave errors with "Check" lines in a workspace (#​35687)
  • fix(compile): bump libsui to 0.16.1 to survive eu-strip in flatpak (#​35699)
  • fix(compile): bump libsui to 0.16.3 to fix segfault under gVisor/Cloud Run
    (#​35701)
  • fix(core): don't drain microtasks in mod_evaluate_sync mid-evaluation (#​35707)
  • fix(coverage): count a branch-junction line as covered when either arm runs
    (#​35858)
  • fix(coverage): don't count V8 block-boundary gaps as branches (#​35767)
  • fix(coverage): don't let a trailing comment change a line's hit count (#​35741)
  • fix(deploy): disable config discovery and refresh the cached CLI version
    (#​35754)
  • fix(desktop): attribute bind calls to the registering window id (#​35654)
  • fix(desktop): honor desktop.backend from deno.json (#​35815
  • fix(desktop): pin @​std/http in generated Vite SPA entrypoint + add hermetic
    compile test (#​35676)
  • fix(desktop): rename launcher to so it self-loads the runtime (#​35709)
  • fix(desktop): run framework build step before bundling output (#​35603)
  • fix(desktop): surface compiled-app startup errors instead of exiting silently
    (#​35567)
  • fix(dprint): exclude tools/lzld submodule (#​35778)
  • fix(ext): throw DataCloneError when posting non-serializable values (#​35604)
  • fix(ext/cache): implement Cache.keys() (#​35455)
  • fix(ext/fetch): reject transport failures with Node's "fetch failed" shape
    (#​35618)
  • fix(ext/http): error non-Uint8Array response streams (#​35783)
  • fix(ext/http): honor explicit content-length header on HEAD responses (#​35728)
  • fix(ext/http): point legacy abort warning at docs.deno.com/go link (#​35713)
  • fix(ext/napi): add uv_cond_* polyfills for native addons (#​35536)
  • fix(ext/net): abort pending Deno.connect during DNS resolution (#​35729)
  • fix(ext/node): allow adopting inherited extra stdio TCP fds (#​35805)
  • fix(ext/node): don't panic when main module path has invalid percent-encoding
    (#​35534)
  • fix(ext/node): don't schedule a pause in inspector.waitForDebugger() (#​35796)
  • fix(ext/node): flush StringDecoder in cipher final() for stream ciphers
    (#​35800)
  • fix(ext/node): mark TLSWrap dead on teardown before tls_conn check (#​35706)
  • fix(ext/node): report all active resources from process.getActiveResourcesInfo
    (#​35532)
  • fix(ext/node): require --allow-net=unix for node:net unix sockets (#​35835)
  • fix(ext/node): support fd 3 pipes in spawned Deno children (#​34133)
  • fix(ext/signals): unregister handler when SignalStream is dropped (#​35832)
  • fix(ext/web): resolve pending BYOB read when teeing a byte stream that closes
    (#​35828)
  • fix(fmt): format Astro inline scripts as TypeScript (#​35852)
  • fix(fs): support pre-1970 (negative) timestamps in FsStat (#​35517)
  • fix(inspector): close WebSocket connections when the runtime is torn down
    (#​35791)
  • fix(install): don't panic on jsr specifier with a tag like @​latest (#​35605)
  • fix(install): don't write through hardlinks when copying package files
    (#​35735)
  • fix(install): make setup cache packages hash deterministic (#​35825)
  • fix(install): resolve lifecycle script dependency bins against the hoisted
    layout (#​35762)
  • fix(install): support uninstalling multiple global packages (#​29352)
  • fix(lint): don't error on non-analyzable package exports like CSS files
    (#​35732)
  • fix(lint): include config file in workspace member invalid version error
    (#​35759)
  • fix(lsp): fix CPU busy loop by creating tokio runtime before JsRuntime in TSC
    thread (#​35595)
  • fix(node/fs): implement followSymlinks option for fs.glob() (#​35524)
  • fix(npm): don't re-fetch packuments on every run when registry has no time
    data (#​35834)
  • fix(npm): don't retain full npm exports value + fix --watch memory leak
    (#​35677)
  • fix(npm): widen node_modules lock staleness margin to avoid false preemption
    (#​35806)
  • fix(permissions): split comma-separated paths in --ignore-read (#​35661)
  • fix(test): run Node-API finalizers at test worker shutdown (#​35695)
  • fix(watch): accept watch paths in fmt/lint/bench --watch (#​35720)
  • fix(watch): execute preload modules under --watch (#​35792)
  • fix(watch): terminate on Ctrl+C while blocked in synchronous code (#​35826)
  • fix: enable rusqlite "fallible_uint" feature in workspace deps (#​35681)
  • perf(config): literal-suffix reject and prune irrelevant globs per base
    (#​35688)
  • perf(core): defer residual lazy source registration (#​35731)
  • perf(ext/fetch): stream wasm bytes to the compiler from Rust (#​35704)
  • perf(ext/node): remove per-chunk copying on TLSWrap data paths (#​35705)
  • perf(ext/node): zero-copy async Buffer writes on the stream_wrap path (#​35780)
  • perf(ext/web): identity pipeThrough writable bypass (#​35799)
  • perf(ext/web): persistent pump for the generic pipeTo loop (#​35813)
  • perf(ext/web): pump readableStreamCollectIntoUint8Array with a persistent read
    request (#​35790)
  • perf(ext/web): reduce per-chunk allocations on stream read and tee paths
    (#​35786)
  • perf(ext/web): reduce per-chunk overhead in Web Streams (#​35773)
  • perf(ext/web): run synchronous pull completion without a microtask hop
    (#​35788)
  • perf(ext/web): shared underlying-source algorithms, hoist resource-bridge read
    request (#​35810)
  • perf(ext/web): sync fast path for ReadableStream async iterator next()
    (#​35842)
  • perf(ext/web): synchronous transform fast path for TransformStream (#​35844)
  • perf(npm): index packuments with SIMD JSON scanner (#​35698)
  • perf(streams): offload resource-backed pipeTo to Rust via op_pipe (#​35689)
  • perf(workers): optimize message passing (#​35110)
  • perf(workers): return raw buffer from receive ops for no-transferable messages
    (#​35756)
  • perf: use V8 native queueMicrotask instead of op (#​35787)
helm/helm (helm)

v4.2.3: Helm v4.2.3

Compare Source

Helm v4.2.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.2.3. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 43e8b7f (Terry Howe)
jdx/usage (usage)

v3.5.5

Compare Source

🐛 Bug Fixes
📚 Documentation
🧪 Testing
  • invoke typescript compiler through npx package by @​jdx in #​719
🔍 Other Changes
astral-sh/uv (uv)

v0.11.29

Compare Source

Released on 2026-07-15.

Python
  • Use gzip-compressed artifacts for PyPy downloads (#​20265)
Enhancements
  • Add JSON output to uv tree (#​19978)
  • Add CUDA 13.2 as a supported PyTorch backend (#​20267)
  • Prefer local artifacts over URLs when installing from pylock.toml (#​20393)
  • Clarify diagnostics for unsatisfiable direct requirement ranges (#​20227)
  • Include the selected project name in missing-extra errors (#​20358)
Preview features
  • Preserve extras and dependency-group conflict context when selecting locked project tools (#​20078)
  • Split OSV audit queries that exceed the service's 1,000-package limit (#​20398)
  • Apply OSV fixed-version information only to the matching package and ecosystem (#​20399)
  • Skip the virtualenv distutils monkeypatch on Python 3.10 and later (#​20222)
  • Report invalid uv audit --service-url values instead of panicking (#​20374)
  • Include preview settings in the published SchemaStore schema (#​20304)
Performance
  • Reduce resolver work by widening selected versions across ranges without other known candidates (#​20115)
  • Defer client and build setup for no-op uv sync operations (#​20364)
  • Reuse workspace discovery during frozen syncs (#​20363)
  • Reuse workspace discovery after resolving settings (#​20356)
  • Reuse workspace discovery in uv tree, uv export, uv format, and uv audit (#​20359)
  • Avoid cache and interpreter setup when reading a project version (#​20360)
Bug fixes
  • Reject duplicate active package entries in pylock.toml (#​20391)
  • Preserve direct-archive hashes in uv pip freeze output (#​20395)
  • Explain conflicting root requirements instead of displaying an empty version range (#​20228)
  • Prevent build-backend data paths from escaping the project or bypassing wheel exclusions (#​20397)
  • Reject PEP 517 backend paths outside the source tree, including paths that escape through symlinks (#​20387)
  • Redact credentials from failed Git fetch commands (#​20401)
  • Fix exclusive post-release range ordering to match PEP 440 (#​20268)
  • Canonicalize equivalent PEP 440 ranges during dependency resolution (#​20182)
  • Honor Python version pins when initializing scripts (#​20404)
  • Respect package-scoped source filtering for scripts (#​20389)
  • Report existing environment incompatibilities when uv pip install --strict has nothing to install (#​20388)
  • Continue scanning platlib when purelib is missing (#​20405)
  • Handle versionless .egg-info files as legacy package metadata (#​20403)
  • Make repeated locking idempotent for impossible cross-variable platform markers (#​20369)
  • Report invalid cloud credential endpoint URLs instead of panicking (#​20372)
  • Report invalid pylock.toml artifact URLs instead of panicking (#​20373)
  • Report non-UTF-8 virtual environment paths instead of panicking while generating activation scripts (#​20375)
  • Return an unsupported-operation error from unimplemented build-backend requirement hooks (#​20376)
Documentation
  • Clarify --no-build behavior for editable requirements (#​20234)
  • Document uv's threat model (#​20236)
  • Reduce the number of badges in the README (#​11257)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on tuesday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner July 14, 2026 00:46
@renovate
renovate Bot enabled auto-merge (squash) July 14, 2026 00:46
@github-actions

github-actions Bot commented Jul 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Terraform Plan

Shared

⚠️ No modules detected in plan output — the output format may have changed.

Scoped (dev)

⚠️ No modules detected in plan output — the output format may have changed.

Scoped (prod)

⚠️ No modules detected in plan output — the output format may have changed.

Scoped (staging — zitadel customer)

⚠️ No modules detected in plan output — the output format may have changed.

@renovate
renovate Bot force-pushed the renovate/mise branch 3 times, most recently from aba8b2f to e378da7 Compare July 15, 2026 00:26
@renovate renovate Bot changed the title chore(deps): update dependency deno to v2.9.2 chore(deps): update mise Jul 15, 2026
@renovate
renovate Bot force-pushed the renovate/mise branch 3 times, most recently from 117fa79 to 8015628 Compare July 20, 2026 19:35
@renovate
renovate Bot force-pushed the renovate/mise branch from 8015628 to 5fe0dcd Compare July 22, 2026 08:47
@bo0tzz

bo0tzz commented Jul 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

blocked by denoland/deno#36235

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

changelog:skip dependencies renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bo0tzz