fix(deps): update shared components packages (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@types/node (source)	22.8.2 → 24.12.2			devDependencies	major
actions/checkout	v4 → v6			action	major
actions/setup-node	v4 → v6			action	major
express (source)	4.18.2 → 5.2.1			dependencies	major
node	16.3.0 → 24.15.0			uses-with	major
node	22.10.0-alpine → 24.15.0-alpine			final	major
peter-evans/create-pull-request	v7 → v8			action	major
typescript (source)	5.0.2 → 6.0.3			devDependencies	major
wait-on	8.0.0 → 9.0.5			devDependencies	major
yargs (source)	17.7.1 → 18.0.0			dependencies	major

---

Release Notes

actions/checkout (actions/checkout)

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.0.1

Compare Source

What's Changed

• Port v6 cleanup to v5 by @​ericsciple in #​2301

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

Compare Source

What's Changed

• Update actions checkout to use node 24 by @​salmanmkc in #​2226
• Prepare v5.0.0 release by @​salmanmkc in #​2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

actions/setup-node (actions/setup-node)

v6.3.0

Compare Source

What's Changed

Enhancements:

• Support parsing devEngines field by @​susnux in #​1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

• Fix npm audit issues by @​gowridurgad in #​1491
• Replace uuid with crypto.randomUUID() by @​trivikr in #​1378
• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​1498

Bug fixes:

• Remove hardcoded bearer for mirror-url @​marco-ippolito in #​1467
• Scope test lockfiles by package manager and update cache tests by @​gowridurgad in #​1495

New Contributors

• @​susnux made their first contribution in #​1283

Full Changelog: actions/setup-node@v6...v6.3.0

v6.2.0

Compare Source

v6.1.0

Compare Source

What's Changed

Enhancement:

• Remove always-auth configuration handling by @​priyagupta108 in #​1436

Dependency updates:

• Upgrade @​actions/cache from 4.0.3 to 4.1.0 by @​dependabot[bot] in #​1384
• Upgrade actions/checkout from 5 to 6 by @​dependabot[bot] in #​1439
• Upgrade js-yaml from 3.14.1 to 3.14.2 by @​dependabot[bot] in #​1435

Documentation update:

• Add example for restore-only cache in documentation by @​aparnajyothi-y in #​1419

Full Changelog: actions/setup-node@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

Breaking Changes

• Limit automatic caching to npm, update workflows and documentation by @​priyagupta108 in #​1374

Dependency Upgrades

• Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @​dependabot[bot] in #​1336
• Upgrade prettier from 2.8.8 to 3.6.2 by @​dependabot[bot] in #​1334
• Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @​dependabot[bot] in #​1362

Full Changelog: actions/setup-node@v5...v6.0.0

v5.0.0

Compare Source

What's Changed

Breaking Changes

• Enhance caching in setup-node with automatic package manager detection by @​priya-kinthali in #​1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

• Upgrade action to use node24 by @​salmanmkc in #​1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

• Upgrade @​octokit/request-error and @​actions/github by @​dependabot[bot] in #​1227
• Upgrade uuid from 9.0.1 to 11.1.0 by @​dependabot[bot] in #​1273
• Upgrade undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in #​1295
• Upgrade form-data to bring in fix for critical vulnerability by @​gowridurgad in #​1332
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in #​1345

New Contributors

• @​priya-kinthali made their first contribution in #​1348
• @​salmanmkc made their first contribution in #​1325

Full Changelog: actions/setup-node@v4...v5.0.0

expressjs/express (express)

v5.2.1

Compare Source

=======================

• Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

v5.2.0

Compare Source

========================

• Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
• deps: body-parser@^2.2.1
• A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

v5.1.0

Compare Source

========================

• Add support for Uint8Array in res.send()
• Add support for ETag option in res.sendFile()
• Add support for multiple links with the same rel in res.links()
• Add funding field to package.json
• perf: use loop for acceptParams
• refactor: prefix built-in node module imports
• deps: remove setprototypeof
• deps: remove safe-buffer
• deps: remove utils-merge
• deps: remove methods
• deps: remove depd
• deps: debug@^4.4.0
• deps: body-parser@^2.2.0
• deps: router@^2.2.0
• deps: content-type@^1.0.5
• deps: finalhandler@^2.1.0
• deps: qs@^6.14.0
• deps: server-static@2.2.0
• deps: type-is@2.0.1

v5.0.1

Compare Source

==========

• Update cookie semver lock to address CVE-2024-47764

v5.0.0

Compare Source

=========================

• remove:
  • path-is-absolute dependency - use path.isAbsolute instead
• breaking:
  • res.status() accepts only integers, and input must be greater than 99 and less than 1000
    • will throw a RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000. for inputs outside this range
    • will throw a TypeError: Invalid status code: ${code}. Status code must be an integer. for non integer inputs
  • deps: send@​1.0.0
  • res.redirect('back') and res.location('back') is no longer a supported magic string, explicitly use req.get('Referrer') || '/'.
• change:
  • res.clearCookie will ignore user provided maxAge and expires options
• deps: cookie-signature@^1.2.1
• deps: debug@​4.3.6
• deps: merge-descriptors@^2.0.0
• deps: serve-static@^2.1.0
• deps: qs@​6.13.0
• deps: accepts@^2.0.0
• deps: mime-types@^3.0.0
  • application/javascript => text/javascript
• deps: type-is@^2.0.0
• deps: content-disposition@^1.0.0
• deps: finalhandler@^2.0.0
• deps: fresh@^2.0.0
• deps: body-parser@^2.0.1
• deps: send@^1.1.0

v4.22.1

Compare Source

v4.22.0

Compare Source

v4.21.2

Compare Source

What's Changed

• Add funding field (v4) by @​bjohansebas in #​6065
• deps: path-to-regexp@​0.1.11 by @​blakeembrey in #​5956
• deps: bump path-to-regexp@​0.1.12 by @​jonchurch in #​6209
• Release: 4.21.2 by @​UlisesGascon in #​6094

Full Changelog: expressjs/express@4.21.1...4.21.2

v4.21.1

Compare Source

What's Changed

• Backport a fix for CVE-2024-47764 to the 4.x branch by @​joshbuker in #​6029
• Release: 4.21.1 by @​UlisesGascon in #​6031

Full Changelog: expressjs/express@4.21.0...4.21.1

v4.21.0

Compare Source

What's Changed

• Deprecate "back" magic string in redirects by @​blakeembrey in #​5935
• finalhandler@​1.3.1 by @​wesleytodd in #​5954
• fix(deps): serve-static@​1.16.2 by @​wesleytodd in #​5951
• Upgraded dependency qs to 6.13.0 to match qs in body-parser by @​agadzinski93 in #​5946

New Contributors

• @​agadzinski93 made their first contribution in #​5946

Full Changelog: expressjs/express@4.20.0...4.21.0

v4.20.0

Compare Source

==========

• deps: serve-static@​0.16.0
  • Remove link renderization in html while redirecting
• deps: send@​0.19.0
  • Remove link renderization in html while redirecting
• deps: body-parser@​0.6.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
• Remove link renderization in html while using res.redirect
• deps: path-to-regexp@​0.1.10
  • Adds support for named matching groups in the routes using a regex
  • Adds backtracking protection to parameters without regexes defined
• deps: encodeurl@~2.0.0
  • Removes encoding of \, |, and ^ to align better with URL spec
• Deprecate passing options.maxAge and options.expires to res.clearCookie
  • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

v4.19.2

Compare Source

==========

• Improved fix for open redirect allow list bypass

v4.19.1

Compare Source

==========

• Allow passing non-strings to res.location with new encoding handling checks

v4.19.0

Compare Source

==========

• Prevent open redirect allow list bypass due to encodeurl
• deps: cookie@​0.6.0

v4.18.3

Compare Source

==========

• Fix routing requests without method
• deps: body-parser@​1.20.2
  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
  • deps: raw-body@​2.5.2
• deps: cookie@​0.6.0
  • Add partitioned option

actions/node-versions (node)

v24.15.0: 24.15.0

Compare Source

Node.js 24.15.0

v24.14.1: 24.14.1

Compare Source

Node.js 24.14.1

v24.14.0: 24.14.0

Compare Source

Node.js 24.14.0

v24.13.1: 24.13.1

Compare Source

Node.js 24.13.1

v24.13.0: 24.13.0

Compare Source

Node.js 24.13.0

v24.12.0: 24.12.0

Compare Source

Node.js 24.12.0

v24.11.1: 24.11.1

Compare Source

Node.js 24.11.1

v24.11.0: 24.11.0

Compare Source

Node.js 24.11.0

v24.10.0: 24.10.0

Compare Source

Node.js 24.10.0

v24.9.0: 24.9.0

Compare Source

Node.js 24.9.0

v24.8.0: 24.8.0

Compare Source

Node.js 24.8.0

v24.7.0: 24.7.0

Compare Source

Node.js 24.7.0

v24.6.0: 24.6.0

Compare Source

Node.js 24.6.0

v24.5.0: 24.5.0

Compare Source

Node.js 24.5.0

v24.4.1: 24.4.1

Compare Source

Node.js 24.4.1

v24.4.0: 24.4.0

Compare Source

Node.js 24.4.0

v24.3.0: 24.3.0

Compare Source

Node.js 24.3.0

v24.2.0: 24.2.0

Compare Source

Node.js 24.2.0

v24.1.0: 24.1.0

Compare Source

Node.js 24.1.0

v24.0.2: 24.0.2

Compare Source

Node.js 24.0.2

v24.0.1: 24.0.1

Compare Source

Node.js 24.0.1

v24.0.0: 24.0.0

Compare Source

Node.js 24.0.0

v22.22.2: 22.22.2

Compare Source

Node.js 22.22.2

v22.22.1: 22.22.1

Compare Source

Node.js 22.22.1

v22.22.0: 22.22.0

Compare Source

Node.js 22.22.0

v22.21.1: 22.21.1

Compare Source

Node.js 22.21.1

v22.21.0: 22.21.0

Compare Source

Node.js 22.21.0

v22.20.0: 22.20.0

Compare Source

Node.js 22.20.0

v22.19.0: 22.19.0

Compare Source

Node.js 22.19.0

v22.18.0: 22.18.0

Compare Source

Node.js 22.18.0

v22.17.1: 22.17.1

Compare Source

Node.js 22.17.1

v22.17.0: 22.17.0

Compare Source

Node.js 22.17.0

v22.16.0: 22.16.0

Compare Source

Node.js 22.16.0

v22.15.1: 22.15.1

Compare Source

Node.js 22.15.1

v22.15.0: 22.15.0

Compare Source

Node.js 22.15.0

v22.14.0: 22.14.0

Compare Source

Node.js 22.14.0

v22.13.1: 22.13.1

Compare Source

Node.js 22.13.1

v22.13.0: 22.13.0

Compare Source

Node.js 22.13.0

v22.12.0: 22.12.0

Compare Source

Node.js 22.12.0

v22.11.0: 22.11.0

Compare Source

Node.js 22.11.0

v22.10.0: 22.10.0

Compare Source

Node.js 22.10.0

v22.9.0: 22.9.0

Compare Source

Node.js 22.9.0

v22.8.0: 22.8.0

Compare Source

Node.js 22.8.0

v22.7.0: 22.7.0

Compare Source

Node.js 22.7.0

v22.6.0: 22.6.0

Compare Source

Node.js 22.6.0

v22.5.1: 22.5.1

Compare Source

Node.js 22.5.1

v22.5.0: 22.5.0

Compare Source

Node.js 22.5.0

v22.4.1: 22.4.1

Compare Source

Node.js 22.4.1

v22.4.0: 22.4.0

Compare Source

Node.js 22.4.0

v22.3.0: 22.3.0

Compare Source

Node.js 22.3.0

v22.2.0: 22.2.0

Compare Source

Node.js 22.2.0

v22.1.0: 22.1.0

Compare Source

Node.js 22.1.0

v22.0.0: 22.0.0

Compare Source

Node.js 22.0.0

v20.20.2: 20.20.2

Compare Source

Node.js 20.20.2

v20.20.1: 20.20.1

Compare Source

Node.js 20.20.1

v20.20.0: 20.20.0

Compare Source

Node.js 20.20.0

v20.19.6: 20.19.6

Compare Source

Node.js 20.19.6

v20.19.5: 20.19.5

Compare Source

Node.js 20.19.5

v20.19.4: 20.19.4

Compare Source

Node.js 20.19.4

v20.19.3: 20.19.3

Compare Source

Node.js 20.19.3

v20.19.2: 20.19.2

Compare Source

Node.js 20.19.2

v20.19.1: 20.19.1

Compare Source

Node.js 20.19.1

v20.19.0: 20.19.0

Compare Source

Node.js 20.19.0

v20.18.3: 20.18.3

Compare Source

Node.js 20.18.3

v20.18.2: 20.18.2

Compare Source

Node.js 20.18.2

v20.18.1: 20.18.1

Compare Source

Node.js 20.18.1

v20.18.0: 20.18.0

Compare Source

Node.js 20.18.0

v20.17.0: 20.17.0

Compare Source

Node.js 20.17.0

v20.16.0: 20.16.0

Compare Source

Node.js 20.16.0

v20.15.1: 20.15.1

Compare Source

Node.js 20.15.1

v20.15.0: 20.15.0

Compare Source

Node.js 20.15.0

v20.14.0: 20.14.0

Compare Source

Node.js 20.14.0

v20.13.1: 20.13.1

Compare Source

Node.js 20.13.1

v20.13.0: 20.13.0

Compare Source

Node.js 20.13.0

v20.12.2: 20.12.2

Compare Source

Node.js 20.12.2

v20.12.1: 20.12.1

Compare Source

Node.js 20.12.1

v20.12.0: 20.12.0

Compare Source

Node.js 20.12.0

v20.11.1: 20.11.1

Compare Source

Node.js 20.11.1

v20.11.0: 20.11.0

Compare Source

Node.js 20.11.0

v20.10.0: 20.10.0

Compare Source

Node.js 20.10.0

v20.9.0: 20.9.0

Compare Source

Node.js 20.9.0

v20.8.1: 20.8.1

Compare Source

Node.js 20.8.1

v20.8.0: 20.8.0

Compare Source

Node.js 20.8.0

v20.7.0: 20.7.0

Compare Source

Node.js 20.7.0

v20.6.1: 20.6.1

Compare Source

Node.js 20.6.1

v20.6.0: 20.6.0

Compare Source

Node.js 20.6.0

v20.5.1: 20.5.1

Compare Source

Node.js 20.5.1

v20.5.0: 20.5.0

Compare Source

Node.js 20.5.0

v20.4.0: 20.4.0

Compare Source

Node.js 20.4.0

v20.3.1: 20.3.1

Compare Source

Node.js 20.3.1

v20.3.0: 20.3.0

Compare Source

Node.js 20.3.0

v20.2.0: 20.2.0

Compare Source

Node.js 20.2.0

v20.1.0: 20.1.0

Compare Source

Node.js 20.1.0

v20.0.0: 20.0.0

Compare Source

Node.js 20.0.0

v18.20.8: 18.20.8

Compare Source

Node.js 18.20.8

v18.20.7: 18.20.7

Compare Source

Node.js 18.20.7

v18.20.6: 18.20.6

Compare Source

Node.js 18.20.6

v18.20.5: 18.20.5

Compare Source

Node.js 18.20.5

v18.20.4: 18.20.4

Compare Source

Node.js 18.20.4

v18.20.3: 18.20.3

Compare Source

Node.js 18.20.3

v18.20.2: 18.20.2

Compare Source

Node.js 18.20.2

v18.20.1: 18.20.1

Compare Source

Node.js 18.20.1

v18.20.0: 18.20.0

Compare Source

Node.js 18.20.0

v18.19.1: 18.19.1

Compare Source

Node.js 18.19.1

v18.19.0: 18.19.0

Compare Source

Node.js 18.19.0

v18.18.2: 18.18.2

Compare Source

Node.js 18.18.2

v18.18.1: 18.18.1

Compare Source

Node.js 18.18.1

v18.18.0: 18.18.0

Compare Source

Node.js 18.18.0

v18.17.1: 18.17.1

Compare Source

Node.js 18.17.1

v18.17.0: 18.17.0

Compare Source

Node.js 18.17.0

v18.16.1: 18.16.1

Compare Source

Node.js 18.16.1

v18.16.0: 18.16.0

Compare Source

Node.js 18.16.0

v18.15.0: 18.15.0

Compare Source

Node.js 18.15.0

v18.14.2: 18.14.2

Compare Source

Node.js 18.14.2

v18.14.1: 18.14.1

Compare Source

Node.js 18.14.1

v18.14.0: 18.14.0

Compare Source

Node.js 18.14.0

v18.13.0: 18.13.0

Compare Source

Node.js 18.13.0

v18.12.1: 18.12.1

Compare Source

Node.js 18.12.1

v18.12.0: 18.12.0

Compare Source

Node.js 18.12.0

v18.11.0: 18.11.0

Compare Source

Node.js 18.11.0

v18.10.0: 18.10.0

Compare Source

Node.js 18.10.0

v18.9.1: 18.9.1

Compare Source

Node.js 18.9.1

v18.9.0: 18.9.0

Compare Source

Node.js 18.9.0

v18.8.0: 18.8.0

Compare Source

Node.js 18.8.0

v18.7.0: 18.7.0

Compare Source

Node.js 18.7.0

v18.6.0: 18.6.0

Compare Source

Node.js 18.6.0

v18.5.0: 18.5.0

Compare Source

Node.js 18.5.0

v18.4.0: 18.4.0

Compare Source

Node.js 18.4.0

v18.3.0: 18.3.0

Compare Source

Node.js 18.3.0

v18.2.0: 18.2.0

Compare Source

Node.js 18.2.0

v18.1.0: 18.1.0

Compare Source

Node.js 18.1.0

v18.0.0: 18.0.0

Compare Source

Node.js 18.0.0

v16.20.2: 16.20.2

Compare Source

Node.js 16.20.2

v16.20.1: 16.20.1

Compare Source

Node.js 16.20.1

v16.20.0: 16.20.0

Compare Source

Node.js 16.20.0

v16.19.1: 16.19.1

Compare Source

Node.js 16.19.1

v16.19.0: 16.19.0

Compare Source

Node.js 16.19.0

v16.18.1: 16.18.1

Compare Source

Node.js 16.18.1

v16.18.0: 16.18.0

Compare Source

Node.js 16.18.0

v16.17.1: 16.17.1

Compare Source

Node.js 16.17.1

v16.17.0: 16.17.0

Compare Source

Node.js 16.17.0

v16.16.0: 16.16.0

[Compare Source](https://redirect.github.com/actions/node-versions/compare/16.15.1-2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.