chore(deps): update dependencies

[tradeshift-renovate-bulk]

This PR contains the following updates:

Package	Type	Update	Change
@types/node (source)	devDependencies	minor	22.10.7 -> 22.13.0
eslint-plugin-github	devDependencies	patch	5.1.5 -> 5.1.7
node (source)		patch	22.13.0 -> 22.13.1
semver	dependencies	minor	7.6.3 -> 7.7.0

---

Release Notes

github/eslint-plugin-github (eslint-plugin-github)

v5.1.7

Compare Source

What's Changed

• Upgrade eslint-plugin-import for eslint 9 support by @​tomups in https://github.com/github/eslint-plugin-github/pull/603
• chore(deps): bump the all-dependencies group with 3 updates by @​dependabot in https://github.com/github/eslint-plugin-github/pull/604
• Update names back to original for eslint-comments and no-only-tests by @​gracepark in https://github.com/github/eslint-plugin-github/pull/605

New Contributors

• @​tomups made their first contribution in https://github.com/github/eslint-plugin-github/pull/603

Full Changelog: github/eslint-plugin-github@v5.1.6...v5.1.7

v5.1.6

Compare Source

What's Changed

• fix: upgrade eslint-plugin-jsx-a11y by @​hyldmo in https://github.com/github/eslint-plugin-github/pull/597
• chore(deps): bump the all-dependencies group with 5 updates by @​dependabot in https://github.com/github/eslint-plugin-github/pull/598
• chore(deps): bump the all-dependencies group across 1 directory with 7 updates by @​dependabot in https://github.com/github/eslint-plugin-github/pull/601
• Update naming of plugins by @​gracepark in https://github.com/github/eslint-plugin-github/pull/602

New Contributors

• @​hyldmo made their first contribution in https://github.com/github/eslint-plugin-github/pull/597

Full Changelog: github/eslint-plugin-github@v5.1.5...v.5.1.6

nodejs/node (node)

v22.13.1: 2025-01-21, Version 22.13.1 'Jod' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

• CVE-2025-23083 - src,loader,permission: throw on InternalWorker use when permission model is enabled (High)
• CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
• CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

• CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Commits

• [520da342e0] - (CVE-2025-22150) deps: update undici to v6.21.1 (Matteo Collina) nodejs-private/node-private#662
• [99f217369f] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555
• [984f735e35] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#650
• [2446870618] - (CVE-2025-23083) src,loader,permission: throw on InternalWorker use (RafaelGSS) nodejs-private/node-private#651

npm/node-semver (semver)

v7.7.0

Compare Source

Features

• 0864b3c #​753 add "release" inc type (#​753) (@​mbtools)

Bug Fixes

• d588e37 #​755 diff: fix prerelease to stable version diff logic (#​755) (@​eminberkayd, berkay.daglar)
• 8a34bde #​754 add identifier validation to inc() (#​754) (@​mbtools)

Documentation

• 67e5478 #​756 readme: added missing period for consistency (#​756) (@​shaymolcho)
• 868d4bb #​749 clarify comment about obsolete prefixes (#​749) (@​mbtools, @​ljharb)

Chores

• 145c554 #​741 bump @​npmcli/eslint-config from 4.0.5 to 5.0.0 (@​dependabot[bot])
• 753e02b #​747 bump @​npmcli/template-oss from 4.23.3 to 4.23.4 (#​747) (@​dependabot[bot], @​npm-cli-bot)
• 0b812d5 #​744 postinstall for dependabot template-oss PR (@​hashtagchris)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - "every weekday in 2125" in timezone Europe/Copenhagen.

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.