chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
cspell (source)	8.6.1 -> 8.7.0					devDependencies	minor
node (source)	20.12.1 -> 20.12.2					volta	patch
npm (source)	10.5.1 -> 10.5.2					volta	patch
typescript (source)	5.4.4 -> 5.4.5					devDependencies	patch

---

Release Notes

streetsidesoftware/cspell (cspell)

v8.7.0

Compare Source

Note: Version bump only for package cspell

nodejs/node (node)

v20.12.2: 2024-04-10, Version 20.12.2 'Iron' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

• CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows

Commits

• [69ffc6d50d] - src: disallow direct .bat and .cmd file spawning (Ben Noordhuis) nodejs-private/node-private#563

npm/cli (npm)

v10.5.2

Compare Source

Bug Fixes

• ef381b1 #​7363 use @​npmcli/redact for url cleaning (#​7363) (@​lukekarrys)
• 3760dd2 #​7361 perf: do less work loading config (#​7361) (@​wraithgar)
• 64bcf4c #​7360 perf: only initialize workpaces when we are inside a workspace (#​7360) (@​H4ad)
• 5a28a29 #​7352 perf: lazy load workspace dependency (#​7352) (@​H4ad)
• 5fc0f9d #​7347 lazy load validate npm package name on error message (#​7347) (@​H4ad)
• c929ed1 #​7321 prioritize CLI flags over publishConfig settings (#​7321) (@​roni-berlin)
• 70497cb #​7346 perf: avoid importing the entire semver package for update-notifier (#​7346) (@​H4ad)

Documentation

• 90ba1c9 #​7340 fix incorrect ISO 8601 reference (#​7340) (@​emmanuel-ferdman)

Dependencies

• 699a1de #​7362 @npmcli/[email protected]
• 49fb9b7 #​7362 [email protected]
• f69052e #​7362 @npmcli/[email protected]
• c18a0ad #​7357 [email protected]
• fd4153b #​7357 [email protected]
• d6b705a #​7357 [email protected]
• 248c177 #​7357 [email protected]
• 4af9e86 #​7357 [email protected]
• 7546b56 #​7357 @npmcli/[email protected]
• d38fd4f #​7357 [email protected]
• 913b326 #​7357 [email protected]
• 84bbbd4 #​7357 @npmcli/[email protected]
• a0f5048 #​7357 @npmcli/[email protected]
• workspace: @npmcli/[email protected]
• workspace: @npmcli/[email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]

Chores

• 81be28d #​7357 dev dependency updates (@​wraithgar)

Microsoft/TypeScript (typescript)

v5.4.5: TypeScript 5.4.5

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 5.4.0 (Beta).
• fixed issues query for Typescript 5.4.1 (RC).
• fixed issues query for Typescript 5.4.2 (Stable).
• fixed issues query for Typescript 5.4.3 (Stable).
• fixed issues query for Typescript 5.4.4 (Stable).
• fixed issues query for Typescript 5.4.5 (Stable).

Downloads are available on:

• NuGet package

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.