fix(deps): update dependencies (patch) by renovate[bot] · Pull Request #5532 · redhat-developer/rhdh

renovate · 2026-09-28T03:04:55Z

This PR contains the following updates:

Package	Change	Age	Confidence
@yarnpkg/core (source)	`4.9.1` → `4.9.2`
pg (source)	`8.23.0` → `8.23.1`
uuid	`14.0.2` → `14.0.3`
zod (source)	`^4.0.0` → `^4.6.5`

Release Notes

yarnpkg/berry (@yarnpkg/core)

`v4.9.2`

Compare Source

brianc/node-postgres (pg)

`v8.23.1`

Compare Source

uuidjs/uuid (uuid)

`v14.0.3`

Compare Source

Bug Fixes

fix CITGM #1154 (#981) (b44f159)

colinhacks/zod (zod)

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243f, the pre-rewrite copy of 9c21983 with identical contents.

Commits:

0cd3af5 docs: load the en locale directly in Zod Mini
9d5e60f docs: import locales from zod/locales, not z.locales
34a626f docs: tighten the z.locales tree-shaking note
74304ce release: stage npm versions instead of publishing them (#6622)
b2ef983 docs: add Code for Japan to bronze sponsors
8fb2faf docs: crop the Code for Japan logo and list it first in bronze
bacad51 docs: square the Code for Japan logo to match the other bronze tiles
c42596b release: hold the run on the release-approval environment until the staged versions are approved (#6638)
a2ba4a6 fix(types): declare record output and input as members, not base type arguments (#6645)
a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#6652)
529f78d 4.6.6
9c21983 ci: stage at verbose so a failed OIDC token exchange says why

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-09-28T03:04:59Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: scripts/yarn-lockfile-surgeon/package-lock.json

npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code EUNSUPPORTEDPROTOCOL
npm error Unsupported URL Type "patch:": patch:got@npm%3A11.8.2#~/.yarn/patches/got-npm-11.8.2-c1eb105458.patch
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-10-26T13_13_39_610Z-debug-0.log

openshift-ci · 2026-09-28T03:05:07Z

Hi @renovate[bot]. Thanks for your PR.

I'm waiting for a redhat-developer member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

codecov · 2026-09-28T03:07:03Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.00%. Comparing base (36f066e) to head (7bc3225).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #5532      +/-   ##
==========================================
- Coverage   75.70%   69.00%   -6.70%     
==========================================
  Files          65       58       -7     
  Lines         708      555     -153     
  Branches      100       83      -17     
==========================================
- Hits          536      383     -153     
  Misses        171      171              
  Partials        1        1

Flag	Coverage Δ
rhdh	`69.00% <ø> (-6.70%)`	⬇️

Components	Coverage Δ
Backend plugins	`∅ <ø> (∅)`
Backend app	`78.94% <ø> (ø)`
Frontend app	`61.03% <ø> (ø)`

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 36f066e...7bc3225. Read the comment docs.

🚀 New features to boost your workflow:

📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

github-actions · 2026-09-28T03:20:45Z

Image was built and published successfully. It is available at:

github-actions · 2026-09-28T07:25:31Z

Image was built and published successfully. It is available at:

github-actions · 2026-09-28T08:26:09Z

Image was built and published successfully. It is available at:

github-actions · 2026-09-28T10:26:07Z

Image was built and published successfully. It is available at:

github-actions · 2026-09-28T11:10:22Z

Image was built and published successfully. It is available at:

github-actions · 2026-09-28T13:41:26Z

Image was built and published successfully. It is available at:

github-actions · 2026-09-29T06:44:29Z

The container image build workflow finished with status: cancelled.

github-actions · 2026-09-29T06:58:22Z

Image was built and published successfully. It is available at:

github-actions · 2026-09-29T09:55:02Z

Image was built and published successfully. It is available at:

github-actions · 2026-09-29T16:11:06Z

Image was built and published successfully. It is available at:

github-actions · 2026-09-29T16:34:13Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-13T14:33:44Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-13T15:52:32Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-14T11:13:00Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-14T13:00:03Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-14T19:03:35Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-16T14:34:55Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-19T03:31:21Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-19T11:17:02Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-19T13:25:20Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-20T10:18:07Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-22T03:32:40Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-22T14:54:59Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-22T16:15:50Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-23T14:30:23Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-26T03:31:02Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-26T11:13:06Z

Image was built and published successfully. It is available at:

github-actions · 2026-10-26T12:39:25Z

The container image build workflow finished with status: cancelled.

github-actions · 2026-10-26T12:55:49Z

Image was built and published successfully. It is available at:

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

sonarqubecloud · 2026-10-26T13:14:26Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

github-actions · 2026-10-26T13:33:40Z

Image was built and published successfully. It is available at:

renovate Bot added the kind/dependency upgrade label Sep 28, 2026

renovate Bot requested a review from a team September 28, 2026 03:04

openshift-ci Bot requested review from Zaperex and josephca September 28, 2026 03:05

openshift-ci Bot added the needs-ok-to-test label Sep 28, 2026

renovate Bot force-pushed the renovate/dependencies-(patch) branch from bde9060 to 0deff8e Compare September 28, 2026 07:08

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 0deff8e to 30c65f7 Compare September 28, 2026 08:08

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 30c65f7 to 803be58 Compare September 28, 2026 10:09

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 803be58 to 711ef89 Compare September 28, 2026 10:53

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 711ef89 to b8a3afb Compare September 28, 2026 13:27

renovate Bot force-pushed the renovate/dependencies-(patch) branch 2 times, most recently from 38d7086 to 006b4e9 Compare September 29, 2026 06:43

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 006b4e9 to d7f12bc Compare September 29, 2026 09:38

renovate Bot force-pushed the renovate/dependencies-(patch) branch from d7f12bc to 662ec8f Compare September 29, 2026 15:54

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 662ec8f to 5fc14c6 Compare September 29, 2026 16:17

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 5fc14c6 to 50f44a8 Compare September 29, 2026 18:31

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 0a9c33a to 07b1725 Compare October 13, 2026 15:35

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 07b1725 to 94451e1 Compare October 14, 2026 10:55

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 94451e1 to 0048140 Compare October 14, 2026 12:42

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 0048140 to 4482e9b Compare October 14, 2026 18:43

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 4482e9b to 5c5ec18 Compare October 16, 2026 14:17

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 5c5ec18 to 91c6406 Compare October 19, 2026 03:12

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 91c6406 to 8bfbdb0 Compare October 19, 2026 11:00

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 8bfbdb0 to 143a039 Compare October 19, 2026 13:08

renovate Bot force-pushed the renovate/dependencies-(patch) branch from 143a039 to b7bfc32 Compare October 20, 2026 10:01

fix(deps): update dependencies (patch)

7bc3225

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Conversation

renovate Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.9.2

v8.23.1

v14.0.3

Bug Fixes

v4.6.7

Commits:

v4.6.6

Commits:

Configuration

Uh oh!

renovate Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: scripts/yarn-lockfile-surgeon/package-lock.json

Uh oh!

openshift-ci Bot commented Sep 28, 2026

Uh oh!

codecov Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions Bot commented Sep 28, 2026

Uh oh!

github-actions Bot commented Sep 28, 2026

Uh oh!

github-actions Bot commented Sep 28, 2026

Uh oh!

github-actions Bot commented Sep 28, 2026

Uh oh!

github-actions Bot commented Sep 28, 2026

Uh oh!

github-actions Bot commented Sep 28, 2026

Uh oh!

github-actions Bot commented Sep 29, 2026

Uh oh!

github-actions Bot commented Sep 29, 2026

Uh oh!

github-actions Bot commented Sep 29, 2026

Uh oh!

github-actions Bot commented Sep 29, 2026

Uh oh!

github-actions Bot commented Sep 29, 2026

Uh oh!

github-actions Bot commented Oct 13, 2026

Uh oh!

github-actions Bot commented Oct 13, 2026

Uh oh!

github-actions Bot commented Oct 14, 2026

Uh oh!

github-actions Bot commented Oct 14, 2026

Uh oh!

github-actions Bot commented Oct 14, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 19, 2026

Uh oh!

github-actions Bot commented Oct 19, 2026

Uh oh!

github-actions Bot commented Oct 19, 2026

Uh oh!

github-actions Bot commented Oct 20, 2026

Uh oh!

github-actions Bot commented Oct 22, 2026

Uh oh!

github-actions Bot commented Oct 22, 2026

Uh oh!

github-actions Bot commented Oct 22, 2026

Uh oh!

github-actions Bot commented Oct 23, 2026

Uh oh!

github-actions Bot commented Oct 26, 2026

Uh oh!

github-actions Bot commented Oct 26, 2026

Uh oh!

github-actions Bot commented Oct 26, 2026

renovate Bot commented Sep 28, 2026 •

edited

Loading

`v4.9.2`

`v8.23.1`

`v14.0.3`

`v4.6.7`

`v4.6.6`

renovate Bot commented Sep 28, 2026 •

edited

Loading

codecov Bot commented Sep 28, 2026 •

edited

Loading