Repository navigation

chore(deps): update dependency node to v26 - #287

Merged

chgl merged 1 commit into

renovate/node-26.x

Nov 3, 2026

Merged

chore(deps): update dependency node to v26#287
chgl merged 1 commit into
masterfrom
renovate/node-26.x

renovate Bot commented Nov 2, 2026 •

edited

Loading

Contributor

This PR contains the following updates:

Package	Type	Update	Change
node	uses-with	major	`24` → `26`

Release Notes

actions/node-versions (node)

`v26.13.0`: 26.13.0

Node.js 26.13.0

`v26.12.1`: 26.12.1

Node.js 26.12.1

`v26.12.0`: 26.12.0

Node.js 26.12.0

`v26.11.1`: 26.11.1

Node.js 26.11.1

`v26.11.0`: 26.11.0

Node.js 26.11.0

`v26.10.0`: 26.10.0

Node.js 26.10.0

`v26.9.0`: 26.9.0

Node.js 26.9.0

`v26.8.2`: 26.8.2

Node.js 26.8.2

`v26.8.1`: 26.8.1

Node.js 26.8.1

`v26.8.0`: 26.8.0

Node.js 26.8.0

`v26.7.0`: 26.7.0

Node.js 26.7.0

`v26.6.0`: 26.6.0

Node.js 26.6.0

`v26.5.1`: 26.5.1

Node.js 26.5.1

`v26.5.0`: 26.5.0

Node.js 26.5.0

`v26.4.0`: 26.4.0

Node.js 26.4.0

`v26.3.1`: 26.3.1

Node.js 26.3.1

`v26.3.0`: 26.3.0

Node.js 26.3.0

`v26.2.0`: 26.2.0

Node.js 26.2.0

`v26.1.0`: 26.1.0

Node.js 26.1.0

`v26.0.0`: 26.0.0

Node.js 26.0.0

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


          chore(deps): update dependency node to v26

e2f46cd

github-actions Bot commented Nov 2, 2026

Contributor

Trivy image scan report

`ghcr.io/chgl/github-reusable-workflow-without-test-image:pr-287 (debian 13.7)`

1 known vulnerabilities found (CRITICAL: 0, HIGH: 0, MEDIUM: 0, LOW: 0, UNKNOWN: 1)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`ca-certificates`	DSA-6572-1	UNKNOWN	20250419	20250419+deb13u1

`Python`

9 known vulnerabilities found (CRITICAL: 1, HIGH: 5, MEDIUM: 2, LOW: 1, UNKNOWN: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`certifi`	GHSA-6q48-6c7w-9gw2	CRITICAL	2026.6.17	2026.10.18
`msgpack`	CVE-2026-114613	HIGH	1.1.2	1.2.3
`msgpack`	GHSA-6v7p-g79w-8964	HIGH	1.1.2	1.2.1
`setuptools`	CVE-2025-47273	HIGH	70.3.0	78.1.1
`setuptools`	CVE-2026-59890	MEDIUM	70.3.0	83.0.0
`setuptools`	GHSA-xmj3-9gf7-h52w	LOW	70.3.0	84.1.0
`urllib3`	CVE-2026-97687	HIGH	2.7.0	2.8.0
`urllib3`	CVE-2026-97689	HIGH	2.7.0	2.8.0
`urllib3`	CVE-2026-97688	MEDIUM	2.7.0	2.8.0

github-actions Bot commented Nov 2, 2026

Contributor

Trivy image scan report

`ghcr.io/chgl/github-reusable-workflow-with-fixed-image-tags:v1.2.3-beta.123 (debian 13.7)`

1 known vulnerabilities found (CRITICAL: 0, HIGH: 0, MEDIUM: 0, LOW: 0, UNKNOWN: 1)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`ca-certificates`	DSA-6572-1	UNKNOWN	20250419	20250419+deb13u1

`Python`

9 known vulnerabilities found (CRITICAL: 1, HIGH: 5, MEDIUM: 2, LOW: 1, UNKNOWN: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`certifi`	GHSA-6q48-6c7w-9gw2	CRITICAL	2026.6.17	2026.10.18
`msgpack`	CVE-2026-114613	HIGH	1.1.2	1.2.3
`msgpack`	GHSA-6v7p-g79w-8964	HIGH	1.1.2	1.2.1
`setuptools`	CVE-2025-47273	HIGH	70.3.0	78.1.1
`setuptools`	CVE-2026-59890	MEDIUM	70.3.0	83.0.0
`setuptools`	GHSA-xmj3-9gf7-h52w	LOW	70.3.0	84.1.0
`urllib3`	CVE-2026-97687	HIGH	2.7.0	2.8.0
`urllib3`	CVE-2026-97689	HIGH	2.7.0	2.8.0
`urllib3`	CVE-2026-97688	MEDIUM	2.7.0	2.8.0

github-actions Bot commented Nov 2, 2026

Contributor

Trivy image scan report

`ghcr.io/chgl/github-reusable-workflow:pr-287 (debian 13.7)`

1 known vulnerabilities found (CRITICAL: 0, HIGH: 0, MEDIUM: 0, LOW: 0, UNKNOWN: 1)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`ca-certificates`	DSA-6572-1	UNKNOWN	20250419	20250419+deb13u1

`Python`

9 known vulnerabilities found (CRITICAL: 1, HIGH: 5, MEDIUM: 2, LOW: 1, UNKNOWN: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
`certifi`	GHSA-6q48-6c7w-9gw2	CRITICAL	2026.6.17	2026.10.18
`msgpack`	CVE-2026-114613	HIGH	1.1.2	1.2.3
`msgpack`	GHSA-6v7p-g79w-8964	HIGH	1.1.2	1.2.1
`setuptools`	CVE-2025-47273	HIGH	70.3.0	78.1.1
`setuptools`	CVE-2026-59890	MEDIUM	70.3.0	83.0.0
`setuptools`	GHSA-xmj3-9gf7-h52w	LOW	70.3.0	84.1.0
`urllib3`	CVE-2026-97687	HIGH	2.7.0	2.8.0
`urllib3`	CVE-2026-97689	HIGH	2.7.0	2.8.0
`urllib3`	CVE-2026-97688	MEDIUM	2.7.0	2.8.0

github-actions Bot commented Nov 2, 2026

Contributor

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ ACTION	actionlint	4		0		0	0.12s
✅ ACTION	zizmor	4		0		0	3.38s
✅ COPYPASTE	jscpd	yes		no		no	0.47s
✅ DOCKERFILE	hadolint	1		0		0	0.14s
✅ JSON	jsonlint	3		0		0	0.09s
✅ JSON	prettier	3		0		0	0.31s
✅ JSON	v8r	3		0		0	2.02s
✅ MARKDOWN	markdownlint	1		0		0	0.33s
✅ MARKDOWN	markdown-table-formatter	1		0		0	0.22s
✅ PYTHON	bandit	1		0		0	1.07s
✅ PYTHON	black	1		0		0	1.67s
✅ PYTHON	flake8	1		0		0	0.78s
✅ PYTHON	isort	1		0		0	0.35s
✅ PYTHON	mypy	1		0		0	2.44s
✅ PYTHON	pylint	1		0		0	1.86s
✅ PYTHON	pyright	1		0		0	1.19s
✅ PYTHON	ruff	1		0		0	0.03s
✅ REPOSITORY	betterleaks	yes		no		no	0.74s
✅ REPOSITORY	checkov	yes		no		no	17.45s
✅ REPOSITORY	dustilock	yes		no		no	0.01s
✅ REPOSITORY	git_diff	yes		no		no	0.01s
✅ REPOSITORY	grype	yes		no		no	85.88s
✅ REPOSITORY	kingfisher	yes		no		no	5.08s
✅ REPOSITORY	osv-scanner	yes		no		no	0.21s
✅ REPOSITORY	secretlint	yes		no		no	0.52s
✅ REPOSITORY	syft	yes		no		no	2.29s
✅ REPOSITORY	trivy	yes		no		no	10.53s
✅ REPOSITORY	trivy-sbom	yes		no		no	0.19s
✅ REPOSITORY	trufflehog	yes		no		no	4.79s
✅ YAML	prettier	7		0		0	0.61s
✅ YAML	v8r	7		0		0	6.03s
✅ YAML	yamllint	7		0		0	0.41s

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_KICS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@10.1.0 --custom-flavor-setup --custom-flavor-linters PYTHON_PYLINT,PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_PYRIGHT,PYTHON_RUFF,ACTION_ACTIONLINT,ACTION_ZIZMOR,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,REPOSITORY_KINGFISHER,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

chgl approved these changes

View reviewed changes

chgl merged commit b8664a0 into master

41 checks passed

chgl deleted the renovate/node-26.x branch

November 3, 2026 11:06

github-actions Bot commented Nov 3, 2026

Contributor

🎉 This PR is included in version 1.11.68 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

github-actions Bot added the released label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels