Skip to content

build(deps): update all dependencies - #15

Open
staxrip-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all
Open

build(deps): update all dependencies#15
staxrip-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all

Conversation

@staxrip-renovate

@staxrip-renovate staxrip-renovate Bot commented Nov 13, 2026

Copy link
Copy Markdown

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
KhronosGroup/Vulkan-Headers patch 1.4.366 → 1.4.367 1.4.368 age confidence
Microsoft.PowerShell.SDK nuget patch 7.6.8 → 7.6.9 7.7.0 (+1) age confidence
System.Runtime.Serialization.Formatters (source) nuget patch 10.0.13 → 10.0.14 11.0.0 (+1) age confidence
System.Security.Cryptography.Pkcs (source) nuget patch 10.0.13 → 10.0.14 11.0.0 (+1) age confidence
System.Security.Cryptography.Xml (source) nuget patch 10.0.13 → 10.0.14 11.0.0 (+1) age confidence
astral-sh/python-build-standalone major 20261021 → 20261026 20261110 age confidence
fribidi/fribidi patch 1.0.17 → 1.0.18 age confidence
harfbuzz/harfbuzz major 14.6.0 → 15.0.0 15.1.0 age confidence
https://github.com/Uranite/svt-av1-tritium.git digest 6c9c898 → 25c3e38
mstorsjo/fdk-aac major 2.0.3 → 3.0.0 age confidence
renovate (source) minor 44.179.2 → 44.198.1 44.238.1 (+102) age confidence
tesseract-ocr/tesseract patch 5.5.3 → 5.5.4 age confidence

Release Notes

KhronosGroup/Vulkan-Headers

v1.4.367

Compare Source

PowerShell/PowerShell (Microsoft.PowerShell.SDK)

v7.6.9: Release of PowerShell

7.6.9

Build and Packaging Improvements

Update to .NET SDK 10.0.403
  • Merged PR 42305: [release/v7.6.9] Update branch for release
SHA256 Hashes of the release artifacts
  • hashes.sha256
    • 638E954664D07A29190570FAF862B8A50B35F7E1C10DBD0F0E8A7E0F70138B45
  • powershell-7.6.9-1.azl4.aarch64.rpm
    • FA959724AE0FB6D68731981DDDF5D35C3CD1F7308E9EAE8EC1F3D5159B4350A6
  • powershell-7.6.9-1.azl4.x86_64.rpm
    • 04607223FDA408A26CDF641BFE38F651965C2769EB30CEB17AEC4D4F570EE4FE
  • powershell-7.6.9-1.cm.aarch64.rpm
    • 80C6ED0A0BEA7D3EF827383C7DDB2F369DEA8F8A7FBBA7E32A510D114C980E1B
  • powershell-7.6.9-1.cm.x86_64.rpm
    • A5F9545679C194F8EB9C55B24D06843A148CF27AFFF40CE0DF55751C6A1607CD
  • powershell-7.6.9-1.rh.x86_64.rpm
    • 91C7F3D518389B1042B1465D70D365BCD040B67A3C0F79849658C695B777A6BE
  • powershell-7.6.9-linux-arm32.tar.gz
    • 16C471C8ADCD5AFD9B533C77943AFC347716345B9859654D0EE7A1C4307A478F
  • powershell-7.6.9-linux-arm64.tar.gz
    • 02EB9991AF447C7E7FE881ACDE195961AFD397C40B8EB1C2B3856B84EC2D85F2
  • powershell-7.6.9-linux-musl-x64.tar.gz
    • F83DF6705EDAAE07DB970DCC6C34AD6583D33A2F6199F1B55CDC5354FBB9001C
  • powershell-7.6.9-linux-x64-fxdependent.tar.gz
    • E62256F057E1D17B0626BEB781A3A0913F15B231E4BCC767AA1B00FCD0CC6AB0
  • powershell-7.6.9-linux-x64-musl-noopt-fxdependent.tar.gz
    • 639A79DBDAAA0F17F05A6E89F67795CD00BB008376E98A3581F1B5D1F23B5B68
  • powershell-7.6.9-linux-x64.tar.gz
    • 1DA6D6D6035D651F20E70DDEE7C4C15AC6AB8B9FB40EE92240D91263F28A884B
  • powershell-7.6.9-osx-arm64.pkg
    • 9002562086AD18DCDC4A1156F6CD6467CFB5A91B28206E56491212193B68E5E6
  • powershell-7.6.9-osx-arm64.tar.gz
    • A1C7E98AC403DA4BE5BA75C1C5855AF272DE7787A91D478C4267466FE58FC1AF
  • powershell-7.6.9-osx-x64.pkg
    • C599B3859DD199E223E237B008B6564961791DD2D849B96296FE4A63FBAA59DC
  • powershell-7.6.9-osx-x64.tar.gz
    • A5AA2308A7E9664510A5C93D5B337FD524FF7DC14B8A637FB6144A2BBAA298AE
  • PowerShell-7.6.9-win-arm64.msi
    • F29D127A798DA0D3FEC9224171AE4D85453ECB466CE53A957237BCA4008C1D2B
  • PowerShell-7.6.9-win-arm64.zip
    • 2157FB002178E606C2A5532C56647118D90D029742F04D4900A71E3B478C2363
  • PowerShell-7.6.9-win-fxdependent.zip
    • 7023CA72E332F43B8532FDE368023CE51DEEB79A5276B2723578BB37644DBD8E
  • PowerShell-7.6.9-win-fxdependentWinDesktop.zip
    • FC63325E0D93FDBF1F6826CA345CD2E3414050F52B0D6DA6D93312739CBFE040
  • PowerShell-7.6.9-win-x64.msi
    • 50D33C7494AAF82B987CFD4DE3F232D04F91FDD4C0DEECA8A669CCED3E7CF8F9
  • PowerShell-7.6.9-win-x64.zip
    • CE7484804C0F0AD4DDA10C958E71ACDAF7EEBFB22505C1B480F89E0E9F1DA94D
  • PowerShell-7.6.9-win-x86.msi
    • 067659D573A953FF93D1BDD87D7CDD3C34BF1B9C8B9226C5C2164215F3C37608
  • PowerShell-7.6.9-win-x86.zip
    • 5B9806943EE5F1CF4AFD1E04AF859D7445449F017550D7E3EAC3B86B3E80A7CE
  • PowerShell-7.6.9.msixbundle
    • DA75C8AA23EDDA52E888FB586A46B923AB37A7C243719C2E8914B00130C5917A
  • powershell-lts-7.6.9-1.azl4.aarch64.rpm
    • 58FBB1EDFFD57952E8D2F23CA4B485D3B84F1E081C566503EAD2B2216C4BF5B8
  • powershell-lts-7.6.9-1.azl4.x86_64.rpm
    • DBA44C4ACE0CA6A3AAAAFFE404A6C13899F47E526D04D13A30490ABDBA2E02CA
  • powershell-lts-7.6.9-1.cm.aarch64.rpm
    • 47BA037C365BB28E90B0A1D748B9A256560BD05EDF8144DDE0C8764CB0136955
  • powershell-lts-7.6.9-1.cm.x86_64.rpm
    • 90F704B2983CF289941193CDE068FA1CFB62A4F5CA7505BB3BC572D1405DDC57
  • powershell-lts-7.6.9-1.rh.x86_64.rpm
    • DB4FA1E039ED23F627F0989D91DC452B44BFBDA2C2651824E402C23F5062EE7C
  • powershell-lts-7.6.9-osx-arm64.pkg
    • D22D04606B4E446F7B989EC48F5D8E12F938EB808FA9B795D0321AFD84C671B2
  • powershell-lts-7.6.9-osx-x64.pkg
    • 25566C66452CB5E91F6C47FD7743F19F1C0FC4DCB630C37C82BEE41047846B22
  • PowerShell-LTS-7.6.9.msixbundle
    • 93C82DD33B98331ED1DF91E3F857C2371B716F9B46B431F7A0155416AA395A98
  • powershell-lts_7.6.9-1.deb_amd64.deb
    • 99448C9E183082323AB1736A0BA6944D4B6219C74F709B56E274DA2F05FCC5D7
  • powershell-lts_7.6.9-1.deb_arm64.deb
    • 03A13B44FEB4CEE290263F2B478787B88A269DC4EB38EC8F214986B42B9C3682
  • powershell_7.6.9-1.deb_amd64.deb
    • 491B1A51E257E2AC86AF33E3A4DC9AA91ADB1B3926A57967AF39D9A1CA38DC79
  • powershell_7.6.9-1.deb_arm64.deb
    • EC7B431576F225B1113BA5BC4BD53797D5E1D129917258B57346B2BE46AA96BC
astral-sh/python-build-standalone

v20261026

Compare Source

Updates

  • 3.11.17 -> 3.11.18
  • 3.12.15 -> 3.12.16
  • 3.13.17 -> 3.13.18
  • 3.14.9 -> 3.14.10
  • 3.15.1 -> 3.15.2

Distribution changes

  • On Windows, Python 3.13+ distributions include a build-details.json file.
  • Linux aarch64 distributions are build with the Cortex-A53 erratum 843419 workaround.
  • Linux Python 3.16 distributions do not include dynamic libgcc_s helper that are not available on manylinux2014 era distributions.

Build system changes

  • Artifacts created in pull requests use a lower compression for faster results. Release artifacts continue to use higher compression for smaller sizes.
  • On Linux the armv7, ppc64le and s390x distributions are cross-compiled using LLVM. All cross-compiled distributions now use LLVM.
  • The mips targets are no longer included as build options.
  • Modifications to the CPython source is done using patch files rather than Python regex on Windows.
  • Dependency paths are passed via MSBuild properties on Windows rather than modifying props files.
  • Linux builds use a uniform Debian Trixie base image. Unused images have been removed.

Full Changelog: 2026102...2026102

fribidi/fribidi

v1.0.18: FriBidi 1.0.18

Compare Source

Overview of changes between 1.0.17 and 1.0.18

  • Security and robustness fixes found by an automated scan (Anthropic's
    OSS Scanner):
    • fribidi_remove_bidi_marks(): fixed an out-of-bounds write before the
      caller's map when the position maps returned by one call are passed to
      a second call. The maps it returns are now correct, and removed
      characters are -1.
    • Fixed unchecked memory allocations in fribidi_reorder_line(),
      fribidi_log2vis() and the bracket pairing code, which could crash
      when memory ran out instead of returning failure.
    • Fixed an out-of-bounds read in the CapRTL decoder on platforms where
      plain char is unsigned (e.g. aarch64, arm, ppc64le, s390x).
    • Fixed quadratic running time on paragraphs made of many back-to-back
      isolates, and on deeply nested isolates containing brackets (N0).
  • Fixed a stack buffer overflow in the CapRTL/UTF-8 output of fribidi and
    fribidi-caprtl2utf8, and an integer overflow in the run-pool allocation
    on 32-bit platforms.
  • Fixed paragraph direction detection to reset isolates at paragraph
    boundaries.
  • Bidi fixes to match UAX #​9 more closely. These can change the output for
    unusual input:
    • Overflow isolates are no longer treated as valid isolates (X5a-X5c),
      and PDF handling checks the overflow counts first (X7).
    • Bracket pairs (BD16/N0) no longer pair across isolates, and a full
      bracket stack no longer stops pairing outside its isolating run
      sequence.
  • fribidi_unicode_to_charset() now null-terminates the output for an
    unknown character set.
  • Added regression tests and a fuzzing seed.
harfbuzz/harfbuzz

v15.0.0

Compare Source

  • Support for the new tables and formats in the ISO Open Font Format (OFF) 5th
    edition is now enabled by default:

    • New tables and formats for 24-bit glyph indices (a.k.a. beyond-64k): the GLYF, LOCA, GVAR, MAXP, HHEA, HMTX, VHEA, and VMTX tables, cmap format 15, VORG version 2, COLR PaintGlyph2, the 24-bit GSUB, GPOS, GDEF, BASE, and JSTF formats, and extended TrueType Collection directories.
      A test font, NotoSans-beyond64k.ttf, which merges the Noto Sans fonts into a single font, can be found at:
      https://drive.google.com/file/d/1vMQI9mZMzfKIMHD96Iie40Oyo9NnnweH/view
    • Cubic curves in GLYF outlines.
    • The DMAP table, supported since 14.6.0.

  • Support instancing axes not referenced by retained VARC data. The latest VARC test fonts can be found at:
    https://github.com/notofonts/noto-cjk-varco/releases/tag/v0.005

  • The raster (libharfbuzz-raster), vector (libharfbuzz-vector), and GPU (libharfbuzz-gpu) libraries are no longer considered experimental.
    This means that the HarfBuzz API and ABI stability guarantees now apply to these libraries as well.

  • Fix possible use-after-free in hb_font_set_face(), which now resets the font functions to the defaults for the new face. The function is now deprecated. Use hb_font_create() instead.

  • Fix heap-buffer-overflow in hb_font_set_variation() after hb_font_set_face() switches to a face with more variation axes.

  • Subsetting CFF and CFF2 fonts whose subroutine calls are not preceded by an immediate subroutine number now fails instead of silently dropping the table, unless desubroutinizing.

  • Overriding atomic operators at compile time is not supported anymore.

  • Rewrite the number parser without Ragel, fixing various edge cases.

  • Harden the experimental WebAssembly shaper against malicious fonts.

  • Update the experimental Rust shaper (HarfRust) to 0.15, and the fontations font functions to read-fonts 0.46.

  • Update the kbts shaping backend to kb_text_shape 2.28g, and support font variations in it.

  • Various subsetting and instancing fixes, especially for CFF2, COLR, and variable layout tables.

  • Various fixes to the raster and vector libraries.

  • Various variable font fixes.

  • Various fixes for malformed fonts.

  • Various documentation fixes.

  • Various build and CI fixes.

  • Deprecated API:
    -hb_font_set_face()

mstorsjo/fdk-aac

v3.0.0

Compare Source

renovatebot/renovate (renovate)

v44.198.1

Compare Source

Bug Fixes
  • datasource/go: treat modules with go-proxy host rule credentials as private (#​47045) (9594e41)
Code Refactoring

v44.198.0

Compare Source

Features
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.57.1 (main) (#​47567) (4b34d0c)
  • deps: update jdx/jactionlint action to v2.4.0 (main) (#​47568) (218c428)

v44.197.1

Compare Source

Miscellaneous Chores
Build System

v44.197.0

Compare Source

Features
  • report: surface additional repository metadata in report (#​44683) (2ab1bb5)
Miscellaneous Chores
Build System

v44.196.1

Compare Source

Documentation
  • minimum-release-age: document package manager integrations (#​47531) (5608a40)
Miscellaneous Chores
  • minimum-release-age: add minimumReleaseAgeExtracted and manager enforcement (#​47501) (cf6c3de)
Build System
  • replace the exec release commands with a local semantic-release plugin (#​47563) (d27a0fe)

v44.196.0

Compare Source

Features
Bug Fixes
Documentation
Miscellaneous Chores

v44.195.1

Compare Source

Bug Fixes
  • platform/codecommit: use default import for aws4 (#​47549) (cc35d3f)
  • util/markdown: support four-backtick fences when sanitizing mentions (#​47550) (50e260a)
Documentation
Miscellaneous Chores
  • use reproduction checkboxes in PR template and add auto:pr-reproduction label action (#​46887) (2cc2e9c)
Code Refactoring
  • vulnerabilities: use default import for ae-cvss-calculator (#​47551) (e20d797)
Tests
Continuous Integration

v44.195.0

Compare Source

Features

v44.194.0

Compare Source

Features

v44.193.1

Compare Source

Bug Fixes
  • dashboard: keep dependencyDashboardIssue in sync with the open dashboard (#​47324) (f269819)

v44.193.0

Compare Source

Features
Documentation

v44.192.2

Compare Source

Build System

v44.192.1

Compare Source

Code Refactoring
Build System

v44.192.0

Compare Source

Features
Miscellaneous Chores

v44.191.0

Compare Source

Features
Bug Fixes
  • datasource: validate release constraints with the constraint versioning (#​47518) (2daf5fc)
  • manager/composer: quote update arguments once (#​47503) (d1dcbfd)
Miscellaneous Chores
  • deps: update astral-sh/setup-uv action to v10.3.3 (main) (#​47523) (55708d6)
  • deps: update dependency vite to v8.3.5 (main) (#​47499) (57ac5e7)
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.56.0 (main) (#​47496) (036fb1e)
Code Refactoring
  • manager/composer: build update arguments with a template literal (#​47512) (e7c8a5c)
Tests
  • datasource: cover release constraints with an overridden constraint versioning (#​47519) (eacbb33)
  • manager/composer: cover quoting of update arguments (#​47511) (05f65d2)
Build System

v44.190.2

Compare Source

Bug Fixes

v44.190.1

Compare Source

Bug Fixes
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.55.2 (main) (#​47493) (9d6f3d3)

v44.190.0

Compare Source

Features

v44.189.0

Compare Source

Features
Miscellaneous Chores
Continuous Integration

v44.188.4

Compare Source

Bug Fixes

v44.188.3

Compare Source

Documentation
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.55.1 (main) (#​47474) (8c785fd)
Tests
Build System

v44.188.2

Compare Source

Build System

v44.188.1

Compare Source

Build System

v44.188.0

Compare Source

Features
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.55.0 (main) (#​47470) (0a947f8)

v44.187.0

Compare Source

Features
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.54.0 (main) (#​47463) (5b17347)
  • deps: update jdx/mise-action action to v5.2.4 (main) (#​47468) (e8df1f2)
Build System

v44.186.8

Compare Source

Bug Fixes

v44.186.7

Compare Source

Bug Fixes

v44.186.6

Compare Source

Build System

v44.186.5

Compare Source

Bug Fixes
Miscellaneous Chores

v44.186.4

Compare Source

Bug Fixes

v44.186.3

Compare Source

Miscellaneous Chores
Build System

v44.186.2

Compare Source

Bug Fixes

v44.186.1

Compare Source

Bug Fixes
  • manager/kustomize: skip helm charts without repo as local charts (#​47430) (52fcc78)

v44.186.0

Compare Source

Features
Build System

v44.185.0

Compare Source

Features
  • manager/github-actions: extract runs.image in Docker container actions (#​47423) (04d4aec)
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.53.0 (main) (#​47431) (2dc18ca)
  • deps: update python docker tag to v3.15.1 (main) (#​47287) (37fdce6)

v44.184.1

Compare Source

Bug Fixes
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.9 (main) (#​47421) (b0118df)

v44.184.0

Compare Source

Features
  • manager/github-actions: report gh actions-lock findings when it fails (#​47375) (dfae938)
Bug Fixes
  • manager/github-actions: only re-pin updated refs in actions.lock and parse findings (#​47373) (e15cd52)
Miscellaneous Chores
  • renovate: keep the documented ghActionsLock version up to date (#​47377) (a077a46)

v44.183.0

Compare Source

Features
Code Refactoring
Continuous Integration

v44.182.2

Compare Source

Bug Fixes

v44.182.1

Compare Source

Build System

v44.182.0

Compare Source

Features

v44.181.12

Compare Source

Bug Fixes
Build System
  • deps: update dependency node-html-parser to v9.0.5 (main) (#​47401) (2605537)

v44.181.11

Compare Source

Bug Fixes
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.7 (main) (#​47398) (7f15352)

v44.181.10

Compare Source

Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.6 (main) (#​47396) (d5c729a)
Build System

v44.181.9

Compare Source

Bug Fixes
  • deps: update renovate-base-image to v13.142.9 (main) (#​47395) ([37e7bc1](ht

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • Between 12:00 PM and 01:59 PM, only on Friday (* 12-13 * * 5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

bundle dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants