From e8bc413af21c24885b896007246543ca91510505 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 19 Apr 2026 14:20:20 +0000 Subject: [PATCH 1/2] chore(deps): update all dependencies --- .github/workflows/ci.yml | 26 ++++----- .github/workflows/sync-labels-npm.yml | 10 ++-- package-lock.json | 76 ++++++++++++++++++++++++--- package.json | 2 +- poetry.lock | 8 +-- 5 files changed, 93 insertions(+), 29 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0218dab..d522113 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" @@ -32,7 +32,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" @@ -47,7 +47,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" @@ -62,7 +62,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" @@ -77,7 +77,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" @@ -97,7 +97,7 @@ jobs: step: [lint, check-links] steps: - uses: actions/checkout@v6 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" @@ -114,7 +114,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" @@ -171,7 +171,7 @@ jobs: with: github_token: ${{ secrets.GITHUB_TOKEN }} version: 5.x - - uses: actions/setup-node@v5 + - uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" @@ -190,7 +190,7 @@ jobs: exit 1 fi - if: failure() && steps.diff.outcome == 'failure' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: if-no-files-found: error include-hidden-files: true @@ -211,7 +211,7 @@ jobs: with: github_token: ${{ secrets.GITHUB_TOKEN }} version: 5.x - - uses: actions/setup-node@v5 + - uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" @@ -228,7 +228,7 @@ jobs: - uses: actions/checkout@v6 - uses: actions/setup-python@v6 with: - python-version: "3.9" + python-version: "3.14" - run: pip install poetry - uses: go-task/setup-task@v2 with: @@ -245,7 +245,7 @@ jobs: operating-system: [ubuntu-latest, macos-latest, windows-latest] steps: - uses: actions/checkout@v6 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" @@ -260,7 +260,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" diff --git a/.github/workflows/sync-labels-npm.yml b/.github/workflows/sync-labels-npm.yml index 4e3afdc..52f3eec 100644 --- a/.github/workflows/sync-labels-npm.yml +++ b/.github/workflows/sync-labels-npm.yml @@ -36,7 +36,7 @@ jobs: uses: actions/checkout@v6 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" @@ -79,7 +79,7 @@ jobs: file-url: https://raw.githubusercontent.com/arduino/tooling-project-assets/main/workflow-templates/assets/sync-labels/${{ matrix.filename }} - name: Pass configuration files to next job via workflow artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: path: | *.yaml @@ -117,19 +117,19 @@ jobs: uses: actions/checkout@v6 - name: Download configuration file artifacts - uses: actions/download-artifact@v5 + uses: actions/download-artifact@v8 with: merge-multiple: true pattern: ${{ env.CONFIGURATIONS_ARTIFACT_PREFIX }}* path: ${{ env.CONFIGURATIONS_FOLDER }} - name: Remove unneeded artifacts - uses: geekyeggo/delete-artifact@v5 + uses: geekyeggo/delete-artifact@v6 with: name: ${{ env.CONFIGURATIONS_ARTIFACT_PREFIX }}* - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@v6 with: node-version-file: package.json cache: "npm" diff --git a/package-lock.json b/package-lock.json index 30fd229..e25e76e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -22,7 +22,7 @@ "github-label-sync": "3.0.0", "markdown-link-check": "^3.14.2", "markdownlint-cli": "^0.48.0", - "nock": "^13.5.6", + "nock": "^14.0.0", "oxfmt": "^0.45.0", "oxlint": "^1.60.0", "strip-json-comments-cli": "^3.0.0", @@ -129,6 +129,24 @@ "dev": true, "license": "MIT" }, + "node_modules/@mswjs/interceptors": { + "version": "0.41.4", + "resolved": "https://registry.npmjs.org/@mswjs/interceptors/-/interceptors-0.41.4.tgz", + "integrity": "sha512-3B9EinUkrdOUGYzHRzRWSXunQ4YFGboJnyLNRwEJWEde+j8fNhPUHvrN1E3g1DU/iS/s8JQrMNVe+S7AHHVs0w==", + "dev": true, + "license": "MIT", + "dependencies": { + "@open-draft/deferred-promise": "^2.2.0", + "@open-draft/logger": "^0.3.0", + "@open-draft/until": "^2.0.0", + "is-node-process": "^1.2.0", + "outvariant": "^1.4.3", + "strict-event-emitter": "^0.5.1" + }, + "engines": { + "node": ">=18" + } + }, "node_modules/@napi-rs/wasm-runtime": { "version": "1.1.4", "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.4.tgz", @@ -200,6 +218,31 @@ "node": ">=20.0" } }, + "node_modules/@open-draft/deferred-promise": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/@open-draft/deferred-promise/-/deferred-promise-2.2.0.tgz", + "integrity": "sha512-CecwLWx3rhxVQF6V4bAgPS5t+So2sTbPgAzafKkVizyi7tlwpcFpdFqq+wqF2OwNBmqFuu6tOyouTuxgpMfzmA==", + "dev": true, + "license": "MIT" + }, + "node_modules/@open-draft/logger": { + "version": "0.3.0", + "resolved": "https://registry.npmjs.org/@open-draft/logger/-/logger-0.3.0.tgz", + "integrity": "sha512-X2g45fzhxH238HKO4xbSr7+wBS8Fvw6ixhTDuvLd5mqh6bJJCFAPwU9mPDxbcrRtfxv4u5IHCEH77BmxvXmmxQ==", + "dev": true, + "license": "MIT", + "dependencies": { + "is-node-process": "^1.2.0", + "outvariant": "^1.4.0" + } + }, + "node_modules/@open-draft/until": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/@open-draft/until/-/until-2.1.0.tgz", + "integrity": "sha512-U69T3ItWHvLwGg5eJ0n3I62nWuE6ilHlmz7zM0npLBRvPRd7e6NYmg54vvRtP5mZG7kZqZCFVdsTWo7BPtBujg==", + "dev": true, + "license": "MIT" + }, "node_modules/@oxc-project/types": { "version": "0.124.0", "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.124.0.tgz", @@ -2799,6 +2842,13 @@ "url": "https://github.com/sponsors/wooorm" } }, + "node_modules/is-node-process": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/is-node-process/-/is-node-process-1.2.0.tgz", + "integrity": "sha512-Vg4o6/fqPxIjtxgUH5QLJhwZ7gW5diGCVlXpuUfELC62CuxM1iHcRe51f2W1FDy04Ai4KJkagKjx3XaqyfRKXw==", + "dev": true, + "license": "MIT" + }, "node_modules/is-relative-url": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/is-relative-url/-/is-relative-url-4.1.0.tgz", @@ -4171,18 +4221,18 @@ } }, "node_modules/nock": { - "version": "13.5.6", - "resolved": "https://registry.npmjs.org/nock/-/nock-13.5.6.tgz", - "integrity": "sha512-o2zOYiCpzRqSzPj0Zt/dQ/DqZeYoaQ7TUonc/xUPjCGl9WeHpNbxgVvOquXYAaJzI0M9BXV3HTzG0p8IUAbBTQ==", + "version": "14.0.12", + "resolved": "https://registry.npmjs.org/nock/-/nock-14.0.12.tgz", + "integrity": "sha512-kZM3bHV0KzhHH6E2eRszHyML/w87AUzLBwupNTHohtYWP9fZYgUPmCbSKq6ITfEEmHqN4/p0MscvUipT4P5Qsg==", "dev": true, "license": "MIT", "dependencies": { - "debug": "^4.1.0", + "@mswjs/interceptors": "^0.41.0", "json-stringify-safe": "^5.0.1", "propagate": "^2.0.0" }, "engines": { - "node": ">= 10.13" + "node": ">=18.20.0 <20 || >=20.12.1" } }, "node_modules/node-email-verifier": { @@ -4286,6 +4336,13 @@ "wrappy": "1" } }, + "node_modules/outvariant": { + "version": "1.4.3", + "resolved": "https://registry.npmjs.org/outvariant/-/outvariant-1.4.3.tgz", + "integrity": "sha512-+Sl2UErvtsoajRDKCE5/dBz4DIvHXQQnAxtQTF04OJxY0+DyZXSo5P5Bb7XYWOh81syohlYL24hbDwxedPUJCA==", + "dev": true, + "license": "MIT" + }, "node_modules/oxfmt": { "version": "0.45.0", "resolved": "https://registry.npmjs.org/oxfmt/-/oxfmt-0.45.0.tgz", @@ -4982,6 +5039,13 @@ "dev": true, "license": "MIT" }, + "node_modules/strict-event-emitter": { + "version": "0.5.1", + "resolved": "https://registry.npmjs.org/strict-event-emitter/-/strict-event-emitter-0.5.1.tgz", + "integrity": "sha512-vMgjE/GGEPEFnhFub6pa4FmJBRBVOLpIII2hvCZ8Kzb7K0hlHo7mQv6xYrBvCL2LtAIBwFUK8wvuJgTVSQ5MFQ==", + "dev": true, + "license": "MIT" + }, "node_modules/string-width": { "version": "8.1.0", "resolved": "https://registry.npmjs.org/string-width/-/string-width-8.1.0.tgz", diff --git a/package.json b/package.json index 3e08678..3331f20 100644 --- a/package.json +++ b/package.json @@ -32,7 +32,7 @@ "github-label-sync": "3.0.0", "markdown-link-check": "^3.14.2", "markdownlint-cli": "^0.48.0", - "nock": "^13.5.6", + "nock": "^14.0.0", "oxfmt": "^0.45.0", "oxlint": "^1.60.0", "strip-json-comments-cli": "^3.0.0", diff --git a/poetry.lock b/poetry.lock index 5541cc7..612f652 100644 --- a/poetry.lock +++ b/poetry.lock @@ -2,13 +2,13 @@ [[package]] name = "codespell" -version = "2.4.1" +version = "2.4.2" description = "Fix common misspellings in text files" optional = false -python-versions = ">=3.8" +python-versions = ">=3.9" files = [ - {file = "codespell-2.4.1-py3-none-any.whl", hash = "sha256:3dadafa67df7e4a3dbf51e0d7315061b80d265f9552ebd699b3dd6834b47e425"}, - {file = "codespell-2.4.1.tar.gz", hash = "sha256:299fcdcb09d23e81e35a671bbe746d5ad7e8385972e65dbb833a2eaac33c01e5"}, + {file = "codespell-2.4.2-py3-none-any.whl", hash = "sha256:97e0c1060cf46bd1d5db89a936c98db8c2b804e1fdd4b5c645e82a1ec6b1f886"}, + {file = "codespell-2.4.2.tar.gz", hash = "sha256:3c33be9ae34543807f088aeb4832dfad8cb2dae38da61cac0a7045dd376cfdf3"}, ] [package.extras] From fa3f4468b4e53a9d49ebef17691840317822ac6d Mon Sep 17 00:00:00 2001 From: Valentin Maerten Date: Sun, 19 Apr 2026 16:27:38 +0200 Subject: [PATCH 2/2] fix: pin nock to 13.x and block future major bumps nock 14 changes HTTP interception behavior, causing tool-cache downloads to abort in tests and the @actions/http-client retry loop to spin until timeout. --- .github/renovate.json | 10 +++++- package-lock.json | 76 ++++--------------------------------------- package.json | 2 +- 3 files changed, 16 insertions(+), 72 deletions(-) diff --git a/.github/renovate.json b/.github/renovate.json index 5a4d3c6..022f5f0 100644 --- a/.github/renovate.json +++ b/.github/renovate.json @@ -6,5 +6,13 @@ "schedule:weekly", ":semanticCommitTypeAll(chore)" ], - "mode": "full" + "mode": "full", + "packageRules": [ + { + "matchPackageNames": ["nock"], + "matchUpdateTypes": ["major"], + "enabled": false, + "description": "nock 14 changes network interception behavior and breaks tool-cache downloads in tests (requests abort, HTTP retry loops). Pinned to 13.x." + } + ] } diff --git a/package-lock.json b/package-lock.json index e25e76e..30fd229 100644 --- a/package-lock.json +++ b/package-lock.json @@ -22,7 +22,7 @@ "github-label-sync": "3.0.0", "markdown-link-check": "^3.14.2", "markdownlint-cli": "^0.48.0", - "nock": "^14.0.0", + "nock": "^13.5.6", "oxfmt": "^0.45.0", "oxlint": "^1.60.0", "strip-json-comments-cli": "^3.0.0", @@ -129,24 +129,6 @@ "dev": true, "license": "MIT" }, - "node_modules/@mswjs/interceptors": { - "version": "0.41.4", - "resolved": "https://registry.npmjs.org/@mswjs/interceptors/-/interceptors-0.41.4.tgz", - "integrity": "sha512-3B9EinUkrdOUGYzHRzRWSXunQ4YFGboJnyLNRwEJWEde+j8fNhPUHvrN1E3g1DU/iS/s8JQrMNVe+S7AHHVs0w==", - "dev": true, - "license": "MIT", - "dependencies": { - "@open-draft/deferred-promise": "^2.2.0", - "@open-draft/logger": "^0.3.0", - "@open-draft/until": "^2.0.0", - "is-node-process": "^1.2.0", - "outvariant": "^1.4.3", - "strict-event-emitter": "^0.5.1" - }, - "engines": { - "node": ">=18" - } - }, "node_modules/@napi-rs/wasm-runtime": { "version": "1.1.4", "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.4.tgz", @@ -218,31 +200,6 @@ "node": ">=20.0" } }, - "node_modules/@open-draft/deferred-promise": { - "version": "2.2.0", - "resolved": "https://registry.npmjs.org/@open-draft/deferred-promise/-/deferred-promise-2.2.0.tgz", - "integrity": "sha512-CecwLWx3rhxVQF6V4bAgPS5t+So2sTbPgAzafKkVizyi7tlwpcFpdFqq+wqF2OwNBmqFuu6tOyouTuxgpMfzmA==", - "dev": true, - "license": "MIT" - }, - "node_modules/@open-draft/logger": { - "version": "0.3.0", - "resolved": "https://registry.npmjs.org/@open-draft/logger/-/logger-0.3.0.tgz", - "integrity": "sha512-X2g45fzhxH238HKO4xbSr7+wBS8Fvw6ixhTDuvLd5mqh6bJJCFAPwU9mPDxbcrRtfxv4u5IHCEH77BmxvXmmxQ==", - "dev": true, - "license": "MIT", - "dependencies": { - "is-node-process": "^1.2.0", - "outvariant": "^1.4.0" - } - }, - "node_modules/@open-draft/until": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/@open-draft/until/-/until-2.1.0.tgz", - "integrity": "sha512-U69T3ItWHvLwGg5eJ0n3I62nWuE6ilHlmz7zM0npLBRvPRd7e6NYmg54vvRtP5mZG7kZqZCFVdsTWo7BPtBujg==", - "dev": true, - "license": "MIT" - }, "node_modules/@oxc-project/types": { "version": "0.124.0", "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.124.0.tgz", @@ -2842,13 +2799,6 @@ "url": "https://github.com/sponsors/wooorm" } }, - "node_modules/is-node-process": { - "version": "1.2.0", - "resolved": "https://registry.npmjs.org/is-node-process/-/is-node-process-1.2.0.tgz", - "integrity": "sha512-Vg4o6/fqPxIjtxgUH5QLJhwZ7gW5diGCVlXpuUfELC62CuxM1iHcRe51f2W1FDy04Ai4KJkagKjx3XaqyfRKXw==", - "dev": true, - "license": "MIT" - }, "node_modules/is-relative-url": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/is-relative-url/-/is-relative-url-4.1.0.tgz", @@ -4221,18 +4171,18 @@ } }, "node_modules/nock": { - "version": "14.0.12", - "resolved": "https://registry.npmjs.org/nock/-/nock-14.0.12.tgz", - "integrity": "sha512-kZM3bHV0KzhHH6E2eRszHyML/w87AUzLBwupNTHohtYWP9fZYgUPmCbSKq6ITfEEmHqN4/p0MscvUipT4P5Qsg==", + "version": "13.5.6", + "resolved": "https://registry.npmjs.org/nock/-/nock-13.5.6.tgz", + "integrity": "sha512-o2zOYiCpzRqSzPj0Zt/dQ/DqZeYoaQ7TUonc/xUPjCGl9WeHpNbxgVvOquXYAaJzI0M9BXV3HTzG0p8IUAbBTQ==", "dev": true, "license": "MIT", "dependencies": { - "@mswjs/interceptors": "^0.41.0", + "debug": "^4.1.0", "json-stringify-safe": "^5.0.1", "propagate": "^2.0.0" }, "engines": { - "node": ">=18.20.0 <20 || >=20.12.1" + "node": ">= 10.13" } }, "node_modules/node-email-verifier": { @@ -4336,13 +4286,6 @@ "wrappy": "1" } }, - "node_modules/outvariant": { - "version": "1.4.3", - "resolved": "https://registry.npmjs.org/outvariant/-/outvariant-1.4.3.tgz", - "integrity": "sha512-+Sl2UErvtsoajRDKCE5/dBz4DIvHXQQnAxtQTF04OJxY0+DyZXSo5P5Bb7XYWOh81syohlYL24hbDwxedPUJCA==", - "dev": true, - "license": "MIT" - }, "node_modules/oxfmt": { "version": "0.45.0", "resolved": "https://registry.npmjs.org/oxfmt/-/oxfmt-0.45.0.tgz", @@ -5039,13 +4982,6 @@ "dev": true, "license": "MIT" }, - "node_modules/strict-event-emitter": { - "version": "0.5.1", - "resolved": "https://registry.npmjs.org/strict-event-emitter/-/strict-event-emitter-0.5.1.tgz", - "integrity": "sha512-vMgjE/GGEPEFnhFub6pa4FmJBRBVOLpIII2hvCZ8Kzb7K0hlHo7mQv6xYrBvCL2LtAIBwFUK8wvuJgTVSQ5MFQ==", - "dev": true, - "license": "MIT" - }, "node_modules/string-width": { "version": "8.1.0", "resolved": "https://registry.npmjs.org/string-width/-/string-width-8.1.0.tgz", diff --git a/package.json b/package.json index 3331f20..3e08678 100644 --- a/package.json +++ b/package.json @@ -32,7 +32,7 @@ "github-label-sync": "3.0.0", "markdown-link-check": "^3.14.2", "markdownlint-cli": "^0.48.0", - "nock": "^14.0.0", + "nock": "^13.5.6", "oxfmt": "^0.45.0", "oxlint": "^1.60.0", "strip-json-comments-cli": "^3.0.0",