chore(deps): update all non-major dependencies (#3464)

fpaul-1A · web-flow · commit 8a5cfe0beec9 · 2025-09-10T09:54:04.000Z
This PR contains the following updates: | Package | Change | Age | Confidence | Type | Update | Pending | |---|---|---|---|---|---|---| | [@figma/rest-api-spec](https://redirect.github.com/figma/rest-api-spec) | [`~0.32.0` -> `~0.33.0`](https://renovatebot.com/diffs/npm/@figma%2frest-api-spec/0.32.0/0.33.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@figma%2frest-api-spec/0.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@figma%2frest-api-spec/0.32.0/0.33.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | | | [@openapitools/openapi-generator-cli](https://redirect.github.com/OpenAPITools/openapi-generator-cli) | [`~2.21.0` -> `~2.23.0`](https://renovatebot.com/diffs/npm/@openapitools%2fopenapi-generator-cli/2.21.5/2.23.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@openapitools%2fopenapi-generator-cli/2.23.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@openapitools%2fopenapi-generator-cli/2.21.5/2.23.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | | | [@openapitools/openapi-generator-cli](https://redirect.github.com/OpenAPITools/openapi-generator-cli) | [`~2.21.0` -> `~2.23.0`](https://renovatebot.com/diffs/npm/@openapitools%2fopenapi-generator-cli/2.21.5/2.23.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@openapitools%2fopenapi-generator-cli/2.23.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@openapitools%2fopenapi-generator-cli/2.21.5/2.23.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | | | [@types/chrome](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/chrome) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome)) | [`^0.0.328` -> `^0.1.0`](https://renovatebot.com/diffs/npm/@types%2fchrome/0.0.328/0.1.6) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fchrome/0.1.6?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fchrome/0.0.328/0.1.6?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | `0.1.9` (+2) | | [@types/vscode](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/vscode) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode)) | [`~1.102.0` -> `~1.103.0`](https://renovatebot.com/diffs/npm/@types%2fvscode/1.102.0/1.103.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fvscode/1.103.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fvscode/1.102.0/1.103.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | | | [@vscode/codicons](https://redirect.github.com/microsoft/vscode-codicons) | [`^0.0.36` -> `^0.0.39`](https://renovatebot.com/diffs/npm/@vscode%2fcodicons/0.0.36/0.0.39) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@vscode%2fcodicons/0.0.39?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@vscode%2fcodicons/0.0.36/0.0.39?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch | `0.0.40` | | [@vscode/codicons](https://redirect.github.com/microsoft/vscode-codicons) | [`^0.0.36` -> `^0.0.39`](https://renovatebot.com/diffs/npm/@vscode%2fcodicons/0.0.36/0.0.39) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@vscode%2fcodicons/0.0.39?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@vscode%2fcodicons/0.0.36/0.0.39?slim=true)](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | `0.0.40` | | [actions/cache](https://redirect.github.com/actions/cache) | `v4.2.3` -> `v4.2.4` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/actions%2fcache/v4.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/actions%2fcache/v4.2.3/v4.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | action | patch | | | [actions/github-script](https://redirect.github.com/actions/github-script) | `v7.0.1` -> `v7.1.0` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/actions%2fgithub-script/v7.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/actions%2fgithub-script/v7.0.1/v7.1.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | action | minor | | | [codecov/codecov-action](https://redirect.github.com/codecov/codecov-action) | `v5.4.3` -> `v5.5.1` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/codecov%2fcodecov-action/v5.5.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/codecov%2fcodecov-action/v5.4.3/v5.5.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | action | minor | | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | `v3.29.1` -> `v3.30.0` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/github%2fcodeql-action/v3.30.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/github%2fcodeql-action/v3.29.1/v3.30.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | action | minor | `v3.30.2` (+1) | | [lighthouse](https://redirect.github.com/GoogleChrome/lighthouse) | [`~12.7.0` -> `~12.8.0`](https://renovatebot.com/diffs/npm/lighthouse/12.7.1/12.8.2) | [![age](https://developer.mend.io/api/mc/badges/age/npm/lighthouse/12.8.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/lighthouse/12.7.1/12.8.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | | | [sass](https://redirect.github.com/sass/dart-sass) | [`~1.89.0` -> `~1.92.0`](https://renovatebot.com/diffs/npm/sass/1.89.2/1.92.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/sass/1.92.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/sass/1.89.2/1.92.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | `1.92.1` | | [sass-embedded](https://redirect.github.com/sass/embedded-host-node) | [`~1.89.0` -> `~1.92.0`](https://renovatebot.com/diffs/npm/sass-embedded/1.89.2/1.92.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/sass-embedded/1.92.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/sass-embedded/1.89.2/1.92.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | `1.92.1` | | [webpack](https://redirect.github.com/webpack/webpack) | [`~5.99.0` -> `~5.101.0`](https://renovatebot.com/diffs/npm/webpack/5.99.9/5.101.3) | [![age](https://developer.mend.io/api/mc/badges/age/npm/webpack/5.101.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/webpack/5.99.9/5.101.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | | --- ### Release Notes <details> <summary>figma/rest-api-spec (@&#8203;figma/rest-api-spec)</summary> ### [`v0.33.0`](https://redirect.github.com/figma/rest-api-spec/compare/v0.32.0...v0.33.0) [Compare Source](https://redirect.github.com/figma/rest-api-spec/compare/v0.32.0...v0.33.0) </details> <details> <summary>OpenAPITools/openapi-generator-cli (@&#8203;openapitools/openapi-generator-cli)</summary> ### [`v2.23.1`](https://redirect.github.com/OpenAPITools/openapi-generator-cli/releases/tag/v2.23.1) [Compare Source](https://redirect.github.com/OpenAPITools/openapi-generator-cli/compare/v2.23.0...v2.23.1) ##### Bug Fixes - **deps:** update dependency concurrently to v9.2.1 ([#&#8203;978](https://redirect.github.com/OpenAPITools/openapi-generator-cli/issues/978)) ([4847fe0](https://redirect.github.com/OpenAPITools/openapi-generator-cli/commit/4847fe0117995db49017c5943e18a6771a88929a)) ### [`v2.23.0`](https://redirect.github.com/OpenAPITools/openapi-generator-cli/releases/tag/v2.23.0) [Compare Source](https://redirect.github.com/OpenAPITools/openapi-generator-cli/compare/v2.22.0...v2.23.0) ##### Features - **release:** v7.15.0 release ([#&#8203;973](https://redirect.github.com/OpenAPITools/openapi-generator-cli/issues/973)) ([24443a5](https://redirect.github.com/OpenAPITools/openapi-generator-cli/commit/24443a5ff0b1d201b1ecef2299d82b96ffefd10c)) ### [`v2.22.0`](https://redirect.github.com/OpenAPITools/openapi-generator-cli/releases/tag/v2.22.0) [Compare Source](https://redirect.github.com/OpenAPITools/openapi-generator-cli/compare/v2.21.5...v2.22.0) ##### Features - **release:** trigger a release ([#&#8203;963](https://redirect.github.com/OpenAPITools/openapi-generator-cli/issues/963)) ([7ce2ed9](https://redirect.github.com/OpenAPITools/openapi-generator-cli/commit/7ce2ed95eb0bc3fb03bbe7c6f7bdcecd0091794b)) </details> <details> <summary>microsoft/vscode-codicons (@&#8203;vscode/codicons)</summary> ### [`v0.0.39`](https://redirect.github.com/microsoft/vscode-codicons/releases/tag/v0.0.39) [Compare Source](https://redirect.github.com/microsoft/vscode-codicons/compare/v0.0.38...v0.0.39) 🚀 New icons - `send-to-remote-agent` [#&#8203;318](https://redirect.github.com/microsoft/vscode-codicons/pull/318) 🧹Clean up - Update `archive` icon [#&#8203;318](https://redirect.github.com/microsoft/vscode-codicons/pull/318) - Add link in readme to where you can easily preview and search for icons [#&#8203;295](https://redirect.github.com/microsoft/vscode-codicons/pull/295) **Full Changelog**: <microsoft/vscode-codicons@v0.0.38...v0.0.39> ### [`v0.0.38`](https://redirect.github.com/microsoft/vscode-codicons/releases/tag/v0.0.38) [Compare Source](https://redirect.github.com/microsoft/vscode-codicons/compare/0.0.36...v0.0.38) ##### Changes: - [#&#8203;316](https://redirect.github.com/microsoft/vscode-codicons/issues/316): Improve cross-platform compatibility for SVG processing - [#&#8203;315](https://redirect.github.com/microsoft/vscode-codicons/issues/315): Refactor file paths for cross-platform compatibility - [#&#8203;314](https://redirect.github.com/microsoft/vscode-codicons/issues/314): Improved package management - [#&#8203;313](https://redirect.github.com/microsoft/vscode-codicons/issues/313): Engineering - update lock file - [#&#8203;312](https://redirect.github.com/microsoft/vscode-codicons/issues/312): Engineering - add pipeline This list of changes was [auto generated](https://dev.azure.com/monacotools/Monaco/_build/results?buildId=349273\&view=logs). </details> <details> <summary>actions/cache (actions/cache)</summary> ### [`v4.2.4`](https://redirect.github.com/actions/cache/releases/tag/v4.2.4) [Compare Source](https://redirect.github.com/actions/cache/compare/v4.2.3...v4.2.4) ##### What's Changed - Update README.md by [@&#8203;nebuk89](https://redirect.github.com/nebuk89) in [#&#8203;1620](https://redirect.github.com/actions/cache/pull/1620) - Upgrade `@actions/cache` to `4.0.5` and move `@protobuf-ts/plugin` to dev depdencies by [@&#8203;Link-](https://redirect.github.com/Link-) in [#&#8203;1634](https://redirect.github.com/actions/cache/pull/1634) - Prepare release `4.2.4` by [@&#8203;Link-](https://redirect.github.com/Link-) in [#&#8203;1636](https://redirect.github.com/actions/cache/pull/1636) ##### New Contributors - [@&#8203;nebuk89](https://redirect.github.com/nebuk89) made their first contribution in [#&#8203;1620](https://redirect.github.com/actions/cache/pull/1620) **Full Changelog**: <actions/cache@v4...v4.2.4> </details> <details> <summary>actions/github-script (actions/github-script)</summary> ### [`v7.1.0`](https://redirect.github.com/actions/github-script/compare/v7.0.1...v7.1.0) [Compare Source](https://redirect.github.com/actions/github-script/compare/v7.0.1...v7.1.0) </details> <details> <summary>codecov/codecov-action (codecov/codecov-action)</summary> ### [`v5.5.1`](https://redirect.github.com/codecov/codecov-action/blob/HEAD/CHANGELOG.md#v551) [Compare Source](https://redirect.github.com/codecov/codecov-action/compare/v5.5.0...v5.5.1) ##### What's Changed - fix: overwrite pr number on fork by [@&#8203;thomasrockhu-codecov](https://redirect.github.com/thomasrockhu-codecov) in [#&#8203;1871](https://redirect.github.com/codecov/codecov-action/pull/1871) - build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by [@&#8203;app/dependabot](https://redirect.github.com/app/dependabot) in [#&#8203;1868](https://redirect.github.com/codecov/codecov-action/pull/1868) - build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by [@&#8203;app/dependabot](https://redirect.github.com/app/dependabot) in [#&#8203;1867](https://redirect.github.com/codecov/codecov-action/pull/1867) - fix: update to use local app/ dir by [@&#8203;thomasrockhu-codecov](https://redirect.github.com/thomasrockhu-codecov) in [#&#8203;1872](https://redirect.github.com/codecov/codecov-action/pull/1872) - docs: fix typo in README by [@&#8203;datalater](https://redirect.github.com/datalater) in [#&#8203;1866](https://redirect.github.com/codecov/codecov-action/pull/1866) - Document a `codecov-cli` version reference example by [@&#8203;webknjaz](https://redirect.github.com/webknjaz) in [#&#8203;1774](https://redirect.github.com/codecov/codecov-action/pull/1774) - build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by [@&#8203;app/dependabot](https://redirect.github.com/app/dependabot) in [#&#8203;1861](https://redirect.github.com/codecov/codecov-action/pull/1861) - build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by [@&#8203;app/dependabot](https://redirect.github.com/app/dependabot) in [#&#8203;1833](https://redirect.github.com/codecov/codecov-action/pull/1833) **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1> ### [`v5.5.0`](https://redirect.github.com/codecov/codecov-action/blob/HEAD/CHANGELOG.md#v550) [Compare Source](https://redirect.github.com/codecov/codecov-action/compare/v5.4.3...v5.5.0) ##### What's Changed - feat: upgrade wrapper to 0.2.4 by [@&#8203;jviall](https://redirect.github.com/jviall) in [#&#8203;1864](https://redirect.github.com/codecov/codecov-action/pull/1864) - Pin actions/github-script by Git SHA by [@&#8203;martincostello](https://redirect.github.com/martincostello) in [#&#8203;1859](https://redirect.github.com/codecov/codecov-action/pull/1859) - fix: check reqs exist by [@&#8203;joseph-sentry](https://redirect.github.com/joseph-sentry) in [#&#8203;1835](https://redirect.github.com/codecov/codecov-action/pull/1835) - fix: Typo in README by [@&#8203;spalmurray](https://redirect.github.com/spalmurray) in [#&#8203;1838](https://redirect.github.com/codecov/codecov-action/pull/1838) - docs: Refine OIDC docs by [@&#8203;spalmurray](https://redirect.github.com/spalmurray) in [#&#8203;1837](https://redirect.github.com/codecov/codecov-action/pull/1837) - build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by [@&#8203;app/dependabot](https://redirect.github.com/app/dependabot) in [#&#8203;1829](https://redirect.github.com/codecov/codecov-action/pull/1829) **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0> </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v3.30.0`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.11...v3.30.0) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.30.0 - 01 Sep 2025 - Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. [#&#8203;3054](https://redirect.github.com/github/codeql-action/pull/3054) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.0/CHANGELOG.md) for more information. ### [`v3.29.11`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.11) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.10...v3.29.11) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.29.11 - 21 Aug 2025 - Update default CodeQL bundle version to 2.22.4. [#&#8203;3044](https://redirect.github.com/github/codeql-action/pull/3044) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.11/CHANGELOG.md) for more information. ### [`v3.29.10`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.10) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.9...v3.29.10) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.29.10 - 18 Aug 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.10/CHANGELOG.md) for more information. ### [`v3.29.9`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.8...v3.29.9) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.29.9 - 12 Aug 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.9/CHANGELOG.md) for more information. ### [`v3.29.8`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.7...v3.29.8) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.29.8 - 08 Aug 2025 - Fix an issue where the Action would autodetect unsupported languages such as HTML. [#&#8203;3015](https://redirect.github.com/github/codeql-action/pull/3015) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.8/CHANGELOG.md) for more information. ### [`v3.29.7`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.6...v3.29.7) This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6. ### [`v3.29.6`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.6) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.5...v3.29.6) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.29.6 - 07 Aug 2025 - The `cleanup-level` input to the `analyze` Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. [#&#8203;2999](https://redirect.github.com/github/codeql-action/pull/2999) - Update default CodeQL bundle version to 2.22.3. [#&#8203;3000](https://redirect.github.com/github/codeql-action/pull/3000) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.6/CHANGELOG.md) for more information. ### [`v3.29.5`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.5) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.4...v3.29.5) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.29.5 - 29 Jul 2025 - Update default CodeQL bundle version to 2.22.2. [#&#8203;2986](https://redirect.github.com/github/codeql-action/pull/2986) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.5/CHANGELOG.md) for more information. ### [`v3.29.4`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.4) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.3...v3.29.4) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.29.4 - 23 Jul 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.4/CHANGELOG.md) for more information. ### [`v3.29.3`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.2...v3.29.3) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.29.3 - 21 Jul 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.3/CHANGELOG.md) for more information. ### [`v3.29.2`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.1...v3.29.2) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.29.2 - 30 Jun 2025 - Experimental: When the `quality-queries` input for the `init` action is provided with an argument, separate `.quality.sarif` files are produced and uploaded for each language with the results of the specified queries. Do not use this in production as it is part of an internal experiment and subject to change at any time. [#&#8203;2935](https://redirect.github.com/github/codeql-action/pull/2935) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.2/CHANGELOG.md) for more information. </details> <details> <summary>GoogleChrome/lighthouse (lighthouse)</summary> ### [`v12.8.2`](https://redirect.github.com/GoogleChrome/lighthouse/blob/HEAD/changelog.md#1282-2025-08-28) [Compare Source](https://redirect.github.com/GoogleChrome/lighthouse/compare/v12.8.1...v12.8.2) [Full Changelog](https://redirect.github.com/GoogleChrome/lighthouse/compare/v12.8.1...v12.8.2) We expect this release to ship in the DevTools of [Chrome 141](https://chromiumdash.appspot.com/schedule), and to PageSpeed Insights within 2 weeks. #### New contributors Thanks to our new contributors 👽🐷🐰🐯🐻! - uthem150 [@&#8203;uthem150](https://redirect.github.com/uthem150) - Nirav Gondaliya [@&#8203;niravzxv](https://redirect.github.com/niravzxv) #### Core - errors-in-console: truncate large errors ([#&#8203;16619](https://redirect.github.com/GoogleChrome/lighthouse/pull/16619)) - insights: passing score (not n/a) for empty results ([#&#8203;16639](https://redirect.github.com/GoogleChrome/lighthouse/pull/16639)) - non-composited-animations: separate custom CSS properties ([#&#8203;16627](https://redirect.github.com/GoogleChrome/lighthouse/pull/16627)) #### Report - viewer: only disable save-gist button on successful save ([#&#8203;16618](https://redirect.github.com/GoogleChrome/lighthouse/pull/16618)) #### Deps - upgrade deps ([#&#8203;16660](https://redirect.github.com/GoogleChrome/lighthouse/pull/16660)) - upgrade trace\_engine to 0.0.59 ([#&#8203;16659](https://redirect.github.com/GoogleChrome/lighthouse/pull/16659)) - remove semver ([#&#8203;16655](https://redirect.github.com/GoogleChrome/lighthouse/pull/16655)) - upgrade tldts-icann ([#&#8203;16657](https://redirect.github.com/GoogleChrome/lighthouse/pull/16657)) - upgrade esbuild to 0.25.9 ([#&#8203;16652](https://redirect.github.com/GoogleChrome/lighthouse/pull/16652)) - upgrade / drop many dev deps ([#&#8203;16651](https://redirect.github.com/GoogleChrome/lighthouse/pull/16651)) - upgrade trace\_engine to 0.0.58 ([#&#8203;16649](https://redirect.github.com/GoogleChrome/lighthouse/pull/16649)) #### I18n - import ([#&#8203;16662](https://redirect.github.com/GoogleChrome/lighthouse/pull/16662)) #### Tests - disable startTimespan api test ([#&#8203;16653](https://redirect.github.com/GoogleChrome/lighthouse/pull/16653)) - disable trusted-types-directive-present smoke test ([#&#8203;16620](https://redirect.github.com/GoogleChrome/lighthouse/pull/16620)) - smokehouse: log specific error message when missing tests path ([#&#8203;16648](https://redirect.github.com/GoogleChrome/lighthouse/pull/16648)) #### Misc - use structuredClone instead of lodash cloneDeep ([#&#8203;16656](https://redirect.github.com/GoogleChrome/lighthouse/pull/16656)) ### [`v12.8.1`](https://redirect.github.com/GoogleChrome/lighthouse/blob/HEAD/changelog.md#1282-2025-08-28) [Compare Source](https://redirect.github.com/GoogleChrome/lighthouse/compare/v12.8.0...v12.8.1) [Full Changelog](https://redirect.github.com/GoogleChrome/lighthouse/compare/v12.8.1...v12.8.2) We expect this release to ship in the DevTools of [Chrome 141](https://chromiumdash.appspot.com/schedule), and to PageSpeed Insights within 2 weeks. #### New contributors Thanks to our new contributors 👽🐷🐰🐯🐻! - uthem150 [@&#8203;uthem150](https://redirect.github.com/uthem150) - Nirav Gondaliya [@&#8203;niravzxv](https://redirect.github.com/niravzxv) #### Core - errors-in-console: truncate large errors ([#&#8203;16619](https://redirect.github.com/GoogleChrome/lighthouse/pull/16619)) - insights: passing score (not n/a) for empty results ([#&#8203;16639](https://redirect.github.com/GoogleChrome/lighthouse/pull/16639)) - non-composited-animations: separate custom CSS properties ([#&#8203;16627](https://redirect.github.com/GoogleChrome/lighthouse/pull/16627)) #### Report - viewer: only disable save-gist button on successful save ([#&#8203;16618](https://redirect.github.com/GoogleChrome/lighthouse/pull/16618)) #### Deps - upgrade deps ([#&#8203;16660](https://redirect.github.com/GoogleChrome/lighthouse/pull/16660)) - upgrade trace\_engine to 0.0.59 ([#&#8203;16659](https://redirect.github.com/GoogleChrome/lighthouse/pull/16659)) - remove semver ([#&#8203;16655](https://redirect.github.com/GoogleChrome/lighthouse/pull/16655)) - upgrade tldts-icann ([#&#8203;16657](https://redirect.github.com/GoogleChrome/lighthouse/pull/16657)) - upgrade esbuild to 0.25.9 ([#&#8203;16652](https://redirect.github.com/GoogleChrome/lighthouse/pull/16652)) - upgrade / drop many dev deps ([#&#8203;16651](https://redirect.github.com/GoogleChrome/lighthouse/pull/16651)) - upgrade trace\_engine to 0.0.58 ([#&#8203;16649](https://redirect.github.com/GoogleChrome/lighthouse/pull/16649)) #### I18n - import ([#&#8203;16662](https://redirect.github.com/GoogleChrome/lighthouse/pull/16662)) #### Tests - disable startTimespan api test ([#&#8203;16653](https://redirect.github.com/GoogleChrome/lighthouse/pull/16653)) - disable trusted-types-directive-present smoke test ([#&#8203;16620](https://redirect.github.com/GoogleChrome/lighthouse/pull/16620)) - smokehouse: log specific error message when missing tests path ([#&#8203;16648](https://redirect.github.com/GoogleChrome/lighthouse/pull/16648)) #### Misc - use structuredClone instead of lodash cloneDeep ([#&#8203;16656](https://redirect.github.com/GoogleChrome/lighthouse/pull/16656)) ### [`v12.8.0`](https://redirect.github.com/GoogleChrome/lighthouse/blob/HEAD/changelog.md#1281-2025-08-01) [Compare Source](https://redirect.github.com/GoogleChrome/lighthouse/compare/v12.7.1...v12.8.0) [Full Changelog](https://redirect.github.com/GoogleChrome/lighthouse/compare/v12.8.0...v12.8.1) We expect this release to ship in the DevTools of [Chrome 140](https://chromiumdash.appspot.com/schedule), and to PageSpeed Insights within 2 weeks. #### New contributors Thanks to our new contributors 👽🐷🐰🐯🐻! - Boluwatife Omosowon [@&#8203;bolu-tife](https://redirect.github.com/bolu-tife) - Jonas Thelemann [@&#8203;dargmuesli](https://redirect.github.com/dargmuesli) #### Core - network-requests: add initiators to debugData ([#&#8203;16605](https://redirect.github.com/GoogleChrome/lighthouse/pull/16605)) #### I18n - import ([#&#8203;16616](https://redirect.github.com/GoogleChrome/lighthouse/pull/16616)) #### Tests - disable csp-block-all smoke test ([#&#8203;16598](https://redirect.github.com/GoogleChrome/lighthouse/pull/16598)) #### Misc - revert json modules to fully support Node 20 ([#&#8203;16613](https://redirect.github.com/GoogleChrome/lighthouse/pull/16613)) - ci: clear devtools build cache ([#&#8203;16615](https://redirect.github.com/GoogleChrome/lighthouse/pull/16615)) - logger: bump to 2.0.2 ([#&#8203;16604](https://redirect.github.com/GoogleChrome/lighthouse/pull/16604)) - logger: update debug dep to v4 ([#&#8203;16601](https://redirect.github.com/GoogleChrome/lighthouse/pull/16601)) - treemap: fix sizes not showing for source map nodes ([#&#8203;16593](https://redirect.github.com/GoogleChrome/lighthouse/pull/16593)) </details> <details> <summary>sass/dart-sass (sass)</summary> ### [`v1.92.0`](https://redirect.github.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1920) [Compare Source](https://redirect.github.com/sass/dart-sass/compare/1.91.0...1.92.0) - **Breaking change:** Emit declarations, childless at-rules, and comments in the order they appear in the source even when they're interleaved with nested rules. This obsoletes the `mixed-decls` deprecation. - **Breaking change:** The function name `type()` is now fully reserved for the plain CSS function. This means that `@function` definitions with the name `type` will produce errors, while function calls will be parsed as special function strings. - Configuring private variables using `@use ... with`, `@forward ... with`, and `meta.load-css(..., $with: ...)` is now deprecated. Private variables were always intended to be fully encapsulated within the module that defines them, and this helps enforce that encapsulation. - Fix a bug where `@extend` rules loaded through a mixture of `@import` and `@use` rules could fail to apply correctly. ##### Command-Line Interface - In `--watch` mode, delete the source map when the associated source file is deleted. ### [`v1.91.0`](https://redirect.github.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1910) [Compare Source](https://redirect.github.com/sass/dart-sass/compare/1.90.0...1.91.0) - **Potentially breaking change:** `meta.inspect()` (as well as other systems that use it such as `@debug` and certain error messages) now emits numbers with as high precision as is available instead of rounding to the nearest 1e⁻¹⁰ as we do when serializing to CSS. This better fits the purpose of `meta.inspect()`, which is to provide full information about the structure of a Sass value. - Passing a rest argument (`$arg...`) before a positional or named argument when calling a function or mixin is now deprecated. This was always outside the specified syntax, but it was historically treated the same as passing the rest argument at the end of the argument list whether or not that matched the visual order of the arguments. ### [`v1.90.0`](https://redirect.github.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1900) [Compare Source](https://redirect.github.com/sass/dart-sass/compare/1.89.2...1.90.0) - Allow a `@forward`ed module to be loaded with a configuration when that module has already been loaded with a different configuration *and* the module doesn't define any variables that would have been configured anyway. </details> <details> <summary>sass/embedded-host-node (sass-embedded)</summary> ### [`v1.92.0`](https://redirect.github.com/sass/embedded-host-node/blob/HEAD/CHANGELOG.md#1920) [Compare Source](https://redirect.github.com/sass/embedded-host-node/compare/1.91.0...1.92.0) - **Breaking change:** Emit declarations, childless at-rules, and comments in the order they appear in the source even when they're interleaved with nested rules. This obsoletes the `mixed-decls` deprecation. - **Breaking change:** The function name `type()` is now fully reserved for the plain CSS function. This means that `@function` definitions with the name `type` will produce errors, while function calls will be parsed as special function strings. - Configuring private variables using `@use ... with`, `@forward ... with`, and `meta.load-css(..., $with: ...)` is now deprecated. Private variables were always intended to be fully encapsulated within the module that defines them, and this helps enforce that encapsulation. - Fix a bug where `@extend` rules loaded through a mixture of `@import` and `@use` rules could fail to apply correctly. ##### Command-Line Interface - In `--watch` mode, delete the source map when the associated source file is deleted. ### [`v1.91.0`](https://redirect.github.com/sass/embedded-host-node/blob/HEAD/CHANGELOG.md#1910) [Compare Source](https://redirect.github.com/sass/embedded-host-node/compare/1.90.0...1.91.0) - **Potentially breaking change:** `meta.inspect()` (as well as other systems that use it such as `@debug` and certain error messages) now emits numbers with as high precision as is available instead of rounding to the nearest 1e⁻¹⁰ as we do when serializing to CSS. This better fits the purpose of `meta.inspect()`, which is to provide full information about the structure of a Sass value. - Passing a rest argument (`$arg...`) before a positional or named argument when calling a function or mixin is now deprecated. This was always outside the specified syntax, but it was historically treated the same as passing the rest argument at the end of the argument list whether or not that matched the visual order of the arguments. ### [`v1.90.0`](https://redirect.github.com/sass/embedded-host-node/blob/HEAD/CHANGELOG.md#1900) [Compare Source](https://redirect.github.com/sass/embedded-host-node/compare/1.89.2...1.90.0) - Allow a `@forward`ed module to be loaded with a configuration when that module has already been loaded with a different configuration *and* the module doesn't define any variables that would have been configured anyway. </details> <details> <summary>webpack/webpack (webpack)</summary> ### [`v5.101.3`](https://redirect.github.com/webpack/webpack/compare/v5.101.2...07b1ac0213bcf9591a8dd5633535a43ecd248192) [Compare Source](https://redirect.github.com/webpack/webpack/compare/v5.101.2...v5.101.3) ### [`v5.101.2`](https://redirect.github.com/webpack/webpack/releases/tag/v5.101.2) [Compare Source](https://redirect.github.com/webpack/webpack/compare/v5.101.1...v5.101.2) ##### Fixes - Fixed syntax error when comment is on the last line - Handle var declaration for `createRequire` - Distinguish free variable and tagged variable ### [`v5.101.1`](https://redirect.github.com/webpack/webpack/releases/tag/v5.101.1) [Compare Source](https://redirect.github.com/webpack/webpack/compare/v5.101.0...v5.101.1) ##### Fixes - Filter deleted assets in `processAdditionalAssets` hook - HMR failure in defer module - Emit assets even if invalidation occurs again - Export types for serialization and deserialization in plugins and export the `ModuleFactory` class - Fixed the failure export of internal function for ES module chunk format - Fixed `GetChunkFilename` failure caused by `dependOn` entry - Fixed the import of missing dependency chunks - Fixed when entry chunk depends on the runtime chunk hash - Fixed `module.exports` bundle to ESM library - Adjusted the time of adding a group depending on the fragment of execution time - Fixed circle dependencies when require `RawModule` and condition of `isDeferred` - Tree-shakable module library should align preconditions of `allowInlineStartup` ### [`v5.101.0`](https://redirect.github.com/webpack/webpack/compare/v5.100.2...5b87bedaf418b3cfa713d520bb70191098943917) [Compare Source](https://redirect.github.com/webpack/webpack/compare/v5.100.2...v5.101.0) ### [`v5.100.2`](https://redirect.github.com/webpack/webpack/compare/v5.100.1...21fcdbb8f2bb3820d3309df8e399c6deced12b42) [Compare Source](https://redirect.github.com/webpack/webpack/compare/v5.100.1...v5.100.2) ### [`v5.100.1`](https://redirect.github.com/webpack/webpack/compare/v5.100.0...ad1e3b46f46b9acd5bb9c377afcdc101338d5c96) [Compare Source](https://redirect.github.com/webpack/webpack/compare/v5.100.0...v5.100.1) ### [`v5.100.0`](https://redirect.github.com/webpack/webpack/releases/tag/v5.100.0) [Compare Source](https://redirect.github.com/webpack/webpack/compare/v5.99.9...v5.100.0) ##### Fixes - Fixed the case where an ES modules entry chunk depends on the runtime chunk hash - Handle function exports in webpack module wrapper - Ensure dependent chunks are imported before startup & fix duplicate export of 'default' - Generate lose closing brace when exports are unprovided - CleanPlugin doesn't unlink same file twice - Fixed unexpected error codes from fs.unlink on Windows - Typescript types ##### Features - HMR support for ES modules output - ES module output mode now fully supports `splitChunks` when external variables and runtimeChunk are not set. - Added support `using` keyword - Implemented tc39 [Defer Module Evaluation](https://redirect.github.com/tc39/proposal-defer-import-eval) (experiment) - Support dynamic template literals expressions for `new URL(...)` - Enable ES modules worker chunk loading for Node.js targets - Improved support for destructing in DefinePlugin - Added VirtualUrlPlugin to support `virtual:` modules ##### Performance Improvements - Remove useless startup entrypoint runtime for ES modules output - Cache `new URL(...)` evaluate expression </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/AmadeusITGroup/otter).
diff --git a/.github/workflows/clean-cache.yml b/.github/workflows/clean-cache.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Clean Branch Cache
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
         env:
           branchName: ${{ inputs.branch || github.event.ref }}
           hash: ${{ hashFiles('package.json', 'tsconfig.base.json', 'tsconfig.build.json', 'nx.json') }}
diff --git a/.github/workflows/code-check.yml b/.github/workflows/code-check.yml
@@ -62,7 +62,7 @@ jobs:
         with:
           install-jdk: 'true'
       - name: Cache Jest
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
         env:
           hash: ${{ hashFiles('package.json', 'tsconfig.base.json', 'tsconfig.build.json', 'nx.json') }}
         with:
@@ -81,7 +81,7 @@ jobs:
           NODE_OPTIONS: ${{ runner.os == 'Windows' && '--max_old_space_size=4096' || '' }}
         run: yarn ${{ env.testCmd }} --collectCoverage --configuration=ci
       - name: Upload results to Codecov
-        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
+        uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1
         with:
           flags: unittests
           token: ${{ secrets.CODECOV_TOKEN }}
@@ -107,7 +107,7 @@ jobs:
       - name: Setup
         uses: ./tools/github-actions/setup
       - name: Cache Eslint
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
         env:
           hash: ${{ hashFiles('yarn.lock') }}
         with:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -47,15 +47,15 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+        uses: github/codeql-action/init@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0
         with:
           languages: ${{ matrix.language }}
           config-file: ./.github/codeql/codeql-config.yml
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+        uses: github/codeql-action/autobuild@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+        uses: github/codeql-action/analyze@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0
         with:
           category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/first-pr.yml b/.github/workflows/first-pr.yml
@@ -16,7 +16,7 @@ jobs:
     env:
       IMAGE_URL: https://raw.githubusercontent.com/AmadeusITGroup/otter/main/assets/logo/flavors/fireworks.png
     steps:
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
         with:
           script: |
             const [owner, repo] = '${{ github.repository }}'.split('/');
diff --git a/.github/workflows/it-tests.yml b/.github/workflows/it-tests.yml
@@ -105,7 +105,7 @@ jobs:
         shell: bash
       - name: Cache test-app yarn
         if: inputs.ref == ''
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
         with:
           lookup-only: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
           path: |
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -61,7 +61,7 @@ jobs:
         with:
           install-jdk: 'true'
       - name: Cache Node Compile
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
         with:
           path: |
             ${{env.NODE_COMPILE_CACHE}}
diff --git a/.github/workflows/pr-labels.yml b/.github/workflows/pr-labels.yml
@@ -24,7 +24,7 @@ jobs:
         run: |
           LABELS="$(yarn pr-labels --target="${{ github.base_ref || github.ref_name }}")"
           echo "LABELS=$LABELS" >> $GITHUB_ENV
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
         if: env.LABELS != '[]'
         continue-on-error: true
         with:
diff --git a/.github/workflows/publish-pr.yml b/.github/workflows/publish-pr.yml
@@ -19,7 +19,7 @@ jobs:
       nextVersionTag: ${{ steps.newVersion.outputs.nextVersionTag }}
     steps:
       - name: get logs from workflow run
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
         with:
           script: |
             let download = await github.rest.actions.downloadWorkflowRunAttemptLogs({
@@ -57,7 +57,7 @@ jobs:
       checks: write
     steps:
       - name: Update triggering workflow
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
         env:
           PUBLISH_RESULT: ${{ needs.publish-packages-pr.result }}
         with:
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -66,6 +66,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+        uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0
         with:
           sarif_file: results.sarif
diff --git a/apps/chrome-devtools/package.json b/apps/chrome-devtools/package.json
@@ -47,7 +47,7 @@
     "@playwright/test": "~1.55.0",
     "@schematics/angular": "~20.2.0",
     "@stylistic/eslint-plugin": "~5.3.0",
-    "@types/chrome": "^0.0.328",
+    "@types/chrome": "^0.1.0",
     "@types/jest": "~29.5.2",
     "@types/tinycolor2": "^1.4.6",
     "@typescript-eslint/parser": "~8.42.0",
@@ -75,7 +75,7 @@
     "jest-preset-angular": "~14.6.0",
     "jest-util": "~29.7.0",
     "jsonc-eslint-parser": "~2.4.0",
-    "lighthouse": "~12.7.0",
+    "lighthouse": "~12.8.0",
     "minimist": "^1.2.6",
     "nx": "~21.4.0",
     "playwright-lighthouse": "~4.0.0",
diff --git a/apps/palette-generator/package.json b/apps/palette-generator/package.json
@@ -60,7 +60,7 @@
     "typescript": "~5.9.2",
     "typescript-eslint": "~8.42.0",
     "url-loader": "^4.1.1",
-    "webpack": "~5.99.0",
+    "webpack": "~5.101.0",
     "webpack-cli": "~6.0.0"
   },
   "engines": {
diff --git a/apps/showcase/package.json b/apps/showcase/package.json
@@ -73,7 +73,7 @@
     "@o3r/testing": "workspace:^",
     "@o3r/workspace": "workspace:^",
     "@popperjs/core": "^2.11.5",
-    "@vscode/codicons": "^0.0.36",
+    "@vscode/codicons": "^0.0.39",
     "@webcontainer/api": "~1.6.0",
     "@xterm/addon-fit": "^0.10.0",
     "@xterm/xterm": "^5.0.0",
@@ -148,14 +148,14 @@
     "jest-preset-angular": "~14.6.0",
     "jest-util": "~29.7.0",
     "jsonc-eslint-parser": "~2.4.0",
-    "lighthouse": "~12.7.0",
+    "lighthouse": "~12.8.0",
     "minimist": "^1.2.6",
     "playwright-lighthouse": "~4.0.0",
     "rimraf": "^6.0.1",
     "style-dictionary": "~5.0.0",
     "ts-jest": "~29.4.0",
     "typescript": "~5.9.2",
     "typescript-eslint": "~8.42.0",
-    "webpack": "~5.99.0"
+    "webpack": "~5.101.0"
   }
 }
diff --git a/apps/vscode-extension/package.json b/apps/vscode-extension/package.json
@@ -398,7 +398,7 @@
     "@types/eslint": "~9.6.0",
     "@types/jest": "~29.5.2",
     "@types/node": "^22.0.0",
-    "@types/vscode": "~1.102.0",
+    "@types/vscode": "~1.103.0",
     "@typescript-eslint/parser": "~8.42.0",
     "@typescript-eslint/utils": "~8.42.0",
     "@vscode/vsce": "^3.2.1",
diff --git a/package.json b/package.json
@@ -211,7 +211,7 @@
     "@types/semver": "^7.3.13",
     "@typescript-eslint/parser": "~8.42.0",
     "@typescript-eslint/rule-tester": "~8.42.0",
-    "@vscode/codicons": "^0.0.36",
+    "@vscode/codicons": "^0.0.39",
     "@webcontainer/api": "~1.6.0",
     "@xterm/addon-fit": "^0.10.0",
     "@xterm/xterm": "^5.0.0",
@@ -251,7 +251,7 @@
     "js-yaml": "^4.1.0",
     "jsonc-eslint-parser": "~2.4.0",
     "jsonpath-plus": "~10.3.0",
-    "lighthouse": "~12.7.0",
+    "lighthouse": "~12.8.0",
     "lint-staged": "^16.0.0",
     "marked": "^15.0.0",
     "minimist": "^1.2.6",
@@ -269,7 +269,7 @@
     "prismjs": "^1.30.0",
     "replace-in-files-cli": "^3.0.0",
     "rimraf": "^6.0.1",
-    "sass": "~1.89.0",
+    "sass": "~1.92.0",
     "sass-loader": "^16.0.0",
     "semver": "^7.5.2",
     "source-map-js": "^1.2.1",
@@ -281,7 +281,7 @@
     "typescript": "~5.9.2",
     "typescript-eslint": "~8.42.0",
     "uuid": "^11.0.5",
-    "webpack": "~5.99.0",
+    "webpack": "~5.101.0",
     "winston": "^3.8.2",
     "yaml-eslint-parser": "^1.2.2"
   },
diff --git a/packages/@ama-sdk/create/package.json b/packages/@ama-sdk/create/package.json
@@ -31,7 +31,7 @@
     "@angular-devkit/schematics-cli": "~20.2.0",
     "@angular/cli": "~20.2.0",
     "@o3r/schematics": "workspace:*",
-    "@openapitools/openapi-generator-cli": "~2.21.0",
+    "@openapitools/openapi-generator-cli": "~2.23.0",
     "@schematics/angular": "~20.2.0",
     "minimist": "^1.2.6",
     "rxjs": "^7.8.1",
diff --git a/packages/@ama-sdk/schematics/package.json b/packages/@ama-sdk/schematics/package.json
@@ -98,7 +98,7 @@
     "@o3r/eslint-plugin": "workspace:^",
     "@o3r/telemetry": "workspace:^",
     "@o3r/test-helpers": "workspace:^",
-    "@openapitools/openapi-generator-cli": "~2.21.0",
+    "@openapitools/openapi-generator-cli": "~2.23.0",
     "@schematics/angular": "~20.2.0",
     "@stylistic/eslint-plugin": "~5.3.0",
     "@types/jest": "~29.5.2",
diff --git a/packages/@ama-styling/figma-sdk/package.json b/packages/@ama-styling/figma-sdk/package.json
@@ -69,14 +69,14 @@
     "@commitlint/config-conventional": "^19.0.0",
     "@compodoc/compodoc": "^1.1.19",
     "@eslint-community/eslint-plugin-eslint-comments": "^4.4.0",
-    "@figma/rest-api-spec": "~0.32.0",
+    "@figma/rest-api-spec": "~0.33.0",
     "@nx/eslint-plugin": "~21.4.0",
     "@o3r/build-helpers": "workspace:^",
     "@o3r/eslint-config": "workspace:^",
     "@o3r/eslint-plugin": "workspace:^",
     "@o3r/schematics": "workspace:^",
     "@o3r/test-helpers": "workspace:^",
-    "@openapitools/openapi-generator-cli": "~2.21.0",
+    "@openapitools/openapi-generator-cli": "~2.23.0",
     "@schematics/angular": "~20.2.0",
     "@stylistic/eslint-plugin": "~5.3.0",
     "@swc/cli": "~0.7.7",
diff --git a/packages/@ama-terasu/cli/package.json b/packages/@ama-terasu/cli/package.json
@@ -72,7 +72,7 @@
     "type-fest": "^4.30.1",
     "typescript": "~5.9.2",
     "typescript-eslint": "~8.42.0",
-    "webpack": "~5.99.0",
+    "webpack": "~5.101.0",
     "webpack-cli": "~6.0.0"
   },
   "dependencies": {
diff --git a/packages/@o3r-training/showcase-sdk/package.json b/packages/@o3r-training/showcase-sdk/package.json
@@ -88,7 +88,7 @@
     "@o3r/eslint-config": "workspace:^",
     "@o3r/eslint-plugin": "workspace:^",
     "@o3r/test-helpers": "workspace:^",
-    "@openapitools/openapi-generator-cli": "~2.21.0",
+    "@openapitools/openapi-generator-cli": "~2.23.0",
     "@schematics/angular": "~20.2.0",
     "@stylistic/eslint-plugin": "~5.3.0",
     "@swc/cli": "~0.7.7",
diff --git a/packages/@o3r-training/training-sdk/package.json b/packages/@o3r-training/training-sdk/package.json
@@ -82,7 +82,7 @@
     "@o3r/eslint-plugin": "workspace:^",
     "@o3r/schematics": "workspace:^",
     "@o3r/test-helpers": "workspace:^",
-    "@openapitools/openapi-generator-cli": "~2.21.0",
+    "@openapitools/openapi-generator-cli": "~2.23.0",
     "@schematics/angular": "~20.2.0",
     "@stylistic/eslint-plugin": "~5.3.0",
     "@swc/cli": "~0.7.7",
diff --git a/packages/@o3r/analytics/package.json b/packages/@o3r/analytics/package.json
@@ -128,7 +128,7 @@
     "type-fest": "^4.30.1",
     "typescript": "~5.9.2",
     "typescript-eslint": "~8.42.0",
-    "webpack": "~5.99.0",
+    "webpack": "~5.101.0",
     "zone.js": "~0.15.0"
   },
   "exports": {
diff --git a/packages/@o3r/design/package.json b/packages/@o3r/design/package.json
@@ -154,7 +154,7 @@
     "nx": "~21.4.0",
     "pid-from-port": "^1.1.3",
     "rxjs": "^7.8.1",
-    "sass": "~1.89.0",
+    "sass": "~1.92.0",
     "semver": "^7.5.2",
     "ts-jest": "~29.4.0",
     "ts-node": "~10.9.2",
diff --git a/packages/@o3r/pipeline/schematics/ng-add/templates/github/__dot__github/actions/setup/action.yml b/packages/@o3r/pipeline/schematics/ng-add/templates/github/__dot__github/actions/setup/action.yml
@@ -16,7 +16,7 @@ runs:
       id: yarn-cache-dir-path
       run: echo "dir=$(<% if (yarn2) { %>yarn config get cacheFolder<% } else { %>yarn cache dir<% } %>)" >> $GITHUB_OUTPUT
     - name: Cache dependencies
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
       with:
         path: |
           ${{ steps.yarn-cache-dir-path.outputs.dir }}
diff --git a/packages/@o3r/styling/package.json b/packages/@o3r/styling/package.json
@@ -204,8 +204,8 @@
     "nx": "~21.4.0",
     "pid-from-port": "^1.1.3",
     "rxjs": "^7.8.1",
-    "sass": "~1.89.0",
-    "sass-embedded": "~1.89.0",
+    "sass": "~1.92.0",
+    "sass-embedded": "~1.92.0",
     "semver": "^7.5.2",
     "source-map-js": "^1.2.1",
     "stylelint": "~16.23.0",
diff --git a/tools/github-actions/create-branch-e2e-screenshots/action.yml b/tools/github-actions/create-branch-e2e-screenshots/action.yml
@@ -33,7 +33,7 @@ runs:
         BRANCH_URL: https://github.com/${{ github.repository }}/tree/${{ inputs.branchName }}
         COMMIT_HASH: ${{ steps.auto-commit-action.outputs.commit_hash }}
         COMMIT_URL: https://github.com/${{ github.repository }}/commit/${{ steps.auto-commit-action.outputs.commit_hash }}
-      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
       with:
         script: |
           const comment = [
diff --git a/tools/github-actions/download-build-output/action.yml b/tools/github-actions/download-build-output/action.yml
@@ -16,7 +16,7 @@ runs:
         path: '.'
 
     - name: 'Download artifact'
-      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
       if: github.event_name == 'workflow_run'
       with:
         script: |
diff --git a/tools/github-actions/setup/action.yml b/tools/github-actions/setup/action.yml
@@ -11,7 +11,7 @@ runs:
       shell: bash
       run: corepack enable
     - name: Cache dependencies
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
       with:
         path: |
           ~/.cache/ms-playwright
diff --git a/tools/github-actions/update-e2e-screenshots/action.yml b/tools/github-actions/update-e2e-screenshots/action.yml
@@ -15,7 +15,7 @@ runs:
   steps:
     - name: Update e2e screenshots
       id: update-e2e-screenshots
-      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
       env:
         REPORT_PATH: ${{ inputs.visualTestingReportPath }}
       with:
diff --git a/yarn.lock b/yarn.lock
