[zowe-robot]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@typescript-eslint/eslint-plugin (source)	8.72.0 → 8.72.1			devDependencies	patch
@typescript-eslint/parser (source)	8.72.0 → 8.72.1			devDependencies	patch
@zowe/cli (source)	8.40.0 → 8.41.0			devDependencies	minor
@zowe/cli-test-utils (source)	8.40.0 → 8.41.0			devDependencies	minor
@zowe/imperative (source)	8.40.0 → 8.41.0			peerDependencies	minor
@zowe/imperative (source)	8.40.0 → 8.41.0			devDependencies	minor
axios (source)	1.20.0 → 1.21.0			overrides	minor
body-parser	2.3.0 → 2.4.0			overrides	minor
body-parser	2.3.0 → 2.4.0			devDependencies	minor
browserslist	4.29.4 → 4.29.5			overrides	patch
follow-redirects	1.16.1 → 1.16.2			overrides	patch
ghcr.io/open-telemetry/opentelemetry-collector-contrib/golden	v0.163.0 → v0.164.1				minor
qs	6.16.1 → 6.17.0			overrides	minor
react-hook-form (source)	7.90.0 → 7.91.0			dependencies	minor
react-redux	9.3.0 → 9.3.1			dependencies	patch
react-router (source)	7.18.4 → 7.18.5			dependencies	patch
renovatebot/github-action	v46.3.9 → v46.3.10			action	patch
ch.qos.logback:logback-classic (source, changelog)	1.6.5 → 1.6.6			dependencies	patch
io.micronaut:micronaut-core-bom (source)	4.10.33 → 4.10.34			dependencies	patch
io.micronaut:micronaut-http-client (source)	4.10.33 → 4.10.34			dependencies	patch
org.springdoc:springdoc-openapi-starter-webflux-ui (source)	3.1.1 → 3.2.0			dependencies	minor
org.springdoc:springdoc-openapi-starter-webflux-api (source)	3.1.1 → 3.2.0			dependencies	minor
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	3.1.1 → 3.2.0			dependencies	minor
org.mozilla:rhino (source)	1.9.1 → 1.9.2			dependencies	patch
io.rest-assured:spring-mock-mvc (source)	6.2.0 → 6.3.0			dependencies	minor
io.rest-assured:spring-web-test-client (source)	6.2.0 → 6.3.0			dependencies	minor
io.rest-assured:xml-path (source)	6.2.0 → 6.3.0			dependencies	minor
io.rest-assured:json-path (source)	6.2.0 → 6.3.0			dependencies	minor
io.rest-assured:rest-assured (source)	6.2.0 → 6.3.0			dependencies	minor
io.opentelemetry:opentelemetry-exporter-sender-okhttp	1.66.0 → 1.67.0			dependencies	minor
io.opentelemetry:opentelemetry-exporter-common	1.66.0 → 1.67.0			dependencies	minor
io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi	1.66.0 → 1.67.0			dependencies	minor
io.opentelemetry:opentelemetry-sdk-testing	1.66.0 → 1.67.0			dependencies	minor
io.opentelemetry:opentelemetry-bom	1.66.0 → 1.67.0			dependencies	minor
io.opentelemetry.instrumentation:opentelemetry-spring-boot-autoconfigure	2.32.0 → 2.33.1			dependencies	minor
io.opentelemetry.instrumentation:opentelemetry-spring-boot-starter	2.32.0 → 2.33.1			dependencies	minor
com.google.code.gson:gson	2.14.0 → 2.15.0			dependencies	minor
org.springframework.modulith:spring-modulith-starter-test (source)	2.1.1 → 2.1.2			dependencies	patch
org.springframework.modulith:spring-modulith-starter-core (source)	2.1.1 → 2.1.2			dependencies	patch
org.springframework.modulith:spring-modulith-bom (source)	2.1.1 → 2.1.2			dependencies	patch
org.springframework.cloud:spring-cloud-dependencies (source)	2025.1.3 → 2025.1.4			dependencies	patch
org.springframework.cloud:spring-cloud-gateway-server-webflux (source)	5.0.3 → 5.0.4			dependencies	patch
org.springframework.cloud:spring-cloud-starter-gateway-server-webflux (source)	5.0.3 → 5.0.4			dependencies	patch
org.springframework.cloud:spring-cloud-commons (source)	5.0.3 → 5.0.4			dependencies	patch
org.springframework.cloud:spring-cloud-starter-netflix-eureka-server (source)	5.0.2 → 5.0.3			dependencies	patch
org.springframework.cloud:spring-cloud-starter-netflix-eureka-client (source)	5.0.2 → 5.0.3			dependencies	patch
org.springframework.boot:spring-boot-gradle-plugin (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-reactor-netty (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-jackson2 (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-security-test (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-webflux-test (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-webmvc-test (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-security-oauth2-client (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-webflux (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-cache (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-thymeleaf (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-aspectj (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-test (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-websocket (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-webmvc (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-validation (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-security (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter-actuator (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-starter (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-dependencies (source)	4.1.1 → 4.1.2			dependencies	patch
org.springframework.boot:spring-boot-configuration-processor (source)	4.1.1 → 4.1.2			dependencies	patch

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.72.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#​13039)
• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#​13062)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.72.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

zowe/zowe-cli (@​zowe/cli)

v8.41.0

Compare Source

Zowe CLI

• Breaking: Removed support for loading plug-ins from team configuration properties. The pre-existing zowe plugins install command is the only supported method for installing Zowe CLI plug-ins. #​2940
• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951

Core SDK

• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951

Imperative

• BugFix: Improved how zowe config import determines whether a location is a web address or a local file. #​2969
• BugFix: Improved local path handling for schema updates and downloads, and refined schema update reporting. #​2965
• Breaking: Removed support for loading plug-ins from team configuration properties. The pre-existing zowe plugins install command is the only supported method for installing Zowe CLI plug-ins. #​2940
• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951
• Enhancement: Replaced the fast-glob dependency with the more lightweight alternative tinyglobby. #​2951
• BugFix: Fixed handling of default applications when opening files with the zowe config edit command, and required trust confirmation before using a custom editor. #​2960

Provisioning SDK

• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951

Workflows SDK

• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951

z/OS Console SDK

• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951

z/OS Files SDK

• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951

z/OS Jobs SDK

• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951

z/OS Logs SDK

• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951

z/OSMF SDK

• BugFix: Improved password redaction in z/OSMF error messages. #​2973
• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951

z/OS TSO SDK

• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951

z/OS USS SDK

• BugFix: Updated minimum supported version of Node from 20 to 22.11.0. #​2951

axios/axios (axios)

v1.21.0

Compare Source

This release adds response timing and opt-in UTF-8 Basic authentication, improves request handling across runtimes, and changes how header defaults are recognized.

expressjs/body-parser (body-parser)

v2.4.0

Compare Source

=====

• Security fix for GHSA-27r3-jxmh-p828 (CVE-2026-111181)
• feat: add zstd content-encoding support (#​586)
  • Requires Node.js ^22.15.0 or >=23.8.0; older versions keep returning 415 for zstd encoded bodies
• fix: avoid mutating the parser options and the request object while reading the body (#​742, #​750)
• perf(json): avoid first-char regex for direct JSON bodies (#​744)
• deps:
  • content-type@^2.1.0
  • iconv-lite^0.7.3
  • qs@^6.16.1

browserslist/browserslist (browserslist)

v4.29.5

Compare Source

• Fixed browserslist.coverage for my stats (by @​nk-batman21).

follow-redirects/follow-redirects (follow-redirects)

v1.16.2

Compare Source

ljharb/qs (qs)

v6.17.0

Compare Source

• [New] stringify: add WHATWG format (#​623)
• [Fix] stringify: do not sort the caller's filter array in place (#​637)
• [Fix] parse: copy an own __proto__ key as data (#​636)
• [Fix] parse: decode percent-encoded dots case-insensitively (#​635)
• [Fix] stringify: encode keys when allowEmptyArrays is set (#​561)
• [Fix] parse: preserve comma arrays when interpreting numeric entities (#​630)
• [Fix] parse: allow scalar fields with a zero array limit (#​627)
• [Fix] parse: do not count an existing comma array toward arrayLimit when duplicates discards or replaces it
• [Fix] utils: encode: encode lone surrogates as U+FFFD instead of consuming the next code unit (#​624)
• [eslint] fix indentation
• [readme] document the encoder's format argument
• [meta] add changelog acknowledgement
• [meta] fix changelog indents
• [Dev Deps] update eslint, evalmd, npmignore
• [Tests] stringify: pin allowEmptyArrays output for keys that need no encoding
• [Tests] stringify: pin sort order for nested keys selected by an array filter
• [Tests] parse: cover interpretNumericEntities across value shapes, keys, and the charset sentinel
• [Tests] parse: cover more input that builds no array at a zero or negative arrayLimit
• [Tests] parse: cover comma with a zero or negative arrayLimit, and combining a full comma array
• [Tests] parse: pin the behavior of a zero or negative arrayLimit
• [Tests] utils/stringify: pin ~, *, and parens encoding in RFC3986 and RFC1738

v6.16.2

Compare Source

• [Fix] stringify: encode keys when allowEmptyArrays is set (#​561)
• [meta] use double quotes for better OS support
• [Dev Deps] update evalmd, npmignore
• [Tests] stringify: pin allowEmptyArrays output for keys that need no encoding

react-hook-form/react-hook-form (react-hook-form)

v7.91.0

Compare Source

Changed

• Improve performance of Form by reading control from context to avoid unnecessary re-renders
• Improve performance of getValues by avoiding unnecessary shallow copies
• Simplify multipart content-type header filtering
• Align form-level validation error types

Fixed

• useFieldArray not registering array rules again after reset
• setValue not updating field array rows when a parent object is set
• createFormControl keeping a newer change's error when an older isValid pass settles
• validate treating an empty message array as valid
• reset releasing keepIsValid on the next field change or field array operation
• register only emitting the progressive required attribute when the rule is on
• createFormControl dropping the async result of a field unregistered while it validates
• createFormControl supporting null-prototype objects in setValue
• Form handling case-insensitive and parameterized multipart encType
• createFormControl ignoring a stale NaN or Invalid Date validation result
• Settle submit state when validation throws
• Form letting fetch set the multipart boundary for a multipart content-type header
• createFormControl ignoring a stale built-in validity result after reset
• useForm running the initial validity check when a child subscribed first
• Form sending a text/plain body for a text/plain content type
• createFormControl copying the errors prop instead of writing into it
• useForm resetting resetOptions when removed from props
• createFormControl handling falsy values correctly in _getDirty and resetField
• unregister dropping the field's rules when keepValue keeps only its value
• useForm clearing errors when the errors option is removed or set to undefined
• useFieldArray dropping a validation result once the array has changed
• reset keeping retained fields disabled
• useForm re-enabling the form when the disabled option is removed
• formState producing a new validatingFields reference when it changes
• validateField validating the stored value of Controller fields with a DOM ref
• useForm resetting progressive option when removed from props
• cloneObject copying plain objects that have a constructor key
• useFieldArray reindexing row fields when the array has rules
• Form matching JSON content types case-insensitively
• deepEqual comparing keys as own properties instead of via in
• register keeping select options picked before the form is ready
• Report isReady to useFormState mounted with the form
• useFieldArray revalidating array operations after submit in onBlur mode
• getDirtyFields handling null or undefined form values when clearing a field
• setValue updating isDirty when shouldDirty fills a field array
• delayError flushing the delayed error on blur when blur also validates
• useWatch using the new defaultValue when the watched name changes
• deepEqual comparing sparse array lengths
• Form sending a url-encoded body for a url-encoded content type
• deepEqual comparing empty null-prototype objects by content
• Enforce numeric zero maxLength
• register not adding an array row when registered without a value
• Form matching Content-Type header names case-insensitively
• trigger recomputing preserved isValid after reset
• useFieldArray unregistering on unmount unless a parent array is reindexing
• setValue notifying field arrays so their rows follow the new values

reduxjs/react-redux (react-redux)

v9.3.1

Compare Source

This bugfix release fixes connect type inference under TS 7, fixes several connect and Provider runtime bugs, adds dev-mode logging for errors thrown in mapStateToProps, and updates our build tooling and TypeScript support matrix.

[!WARNING]
While connect is still published and technically supported, we officially deprecated connect in 9.3.0 and strongly recommend migrating to use the hooks APIs instead.

Changelog

connect Types and TS 7

We had reports that connect sometimes inferred the wrong props when mapStateToProps or mapDispatchToProps was a factory function. The connected component's props would collapse to {}, and a required prop would show up as "missing" at the call site.

Turns out the connect overloads typed those arguments as unions of the factory form (() => (state) => props) and the plain form. TS7 changed the ordering of which union member got selected, so this broke.

As Anders suggested in microsoft/typescript-go#977, we've split those unions into separate overloads listed in order of preference, factory form first. Overload matching no longer depends on how the compiler orders a union. We then applied the same fix to the mergeProps overloads, which still failed under TS 7.

Bug Fixes

Provider now uses serverState when it's a falsy value like 0, false, or ''. Previously it checked for truthiness, so a falsy root state fell back to the client store's state during SSR and hydration. null and undefined are still treated as "no server state".

A connected component's context prop is now honored in production. The assignment that picked up the custom context sat inside the development-only validation block. In production, a component with only a custom provider would throw, and one rendered under both providers would read the default provider's store.

connect no longer overrides a ref passed as a regular prop when forwardRef isn't enabled (#​2251). With React 19's ref-as-prop, the wrapper was always passing its own ref (undefined without forwardRef), which replaced the one you passed in.

An explicit dependsOnOwnProps = false on a mapStateToProps or mapDispatchToProps function is now respected. We had been ignoring it for functions declared with two parameters, even though the option exists specifically for functions whose length isn't reliable.

Rendering <Provider> in a React Server Component without "use client" now throws a clear dev-mode error that tells you what's wrong, instead of failing with "useIsomorphicLayoutEffect is not a function" (#​2082). Setups that resolve the react-server export condition already got a clear error. This covers the setups that don't.

mapStateToProps Error Logging

Since v8, an error thrown in mapStateToProps during a store update has been caught in the subscription callback and then effectively swallowed. The component just kept rendering its previous props (#​1942). connect now logs those errors to console.error in development, so they show up in DevTools. Production behavior is unchanged.

TypeScript Support

The internal NoInfer helper type has been replaced with TypeScript's built-in NoInfer, which was added in TS 5.4. That makes TS 5.4 the minimum version for React-Redux's types. Our CI matrix now covers TS 5.6 through 5.9, 6.0, 7.0, and next.

Build Tooling

We've moved the repo to pnpm, Oxlint, and Oxfmt, and switched the library build from tsup to tsdown. The package exports layout is unchanged, but the build output comes from a different bundler. If you see any packaging or import problems with this release, please file an issue.

What's Changed

• ci: publish preview packages via pkg.pr.new by @​aryaemami59 in #​2323
• chore(deps): update vitest to latest version by @​aryaemami59 in #​2317
• fix(connect): log mapStateToProps errors to console.error in dev (#​1942) by @​webdevelopersrinu in #​2306
• feat!: switch to native NoInfer utility type by @​aryaemami59 in #​2316
• fix(connect): split mapStateToProps/mapDispatchToProps unions into ordered overloads (#​2244) by @​veksa in #​2340
• Modern Tooling, Part 1: PNPM by @​markerikson in #​2379
• Fix TS7 errors and update TS matrix by @​markerikson in #​2407
• fix(Provider): throw a clearer error when rendered in a React Server Component (#​2082) by @​veksa in #​2342
• fix: respect falsy server snapshots and production context overrides by @​OskarEichler in #​2389
• Don't override ref property when not configured to. by @​PSpSynedra in #​2252
• fix: honour explicit dependsOnOwnProps=false in getDependsOnOwnProps by @​JSap0914 in #​2331

Full Changelog: reduxjs/react-redux@v9.3.0...v9.3.1

remix-run/react-router (react-router)

v7.18.5: v7.18.5

Compare Source

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7185

renovatebot/github-action

v46.3.10

Compare Source

Documentation

• update references to renovatebot/github-action to v46.3.9 (bb7467f)

Miscellaneous Chores

• deps: update commitlint monorepo to v21.2.4 (56eff23)
• deps: update dependency typescript-eslint to v8.71.2 (a718222)
• deps: update node.js to v24.22.1 (24a3c44)
• deps: update pnpm to v10.34.7 (01b667a)

Build System

• deps: lock file maintenance (f9a56be)

Continuous Integration

• deps: update ghcr.io/renovatebot/renovate docker tag to v44.167.7 (0749dd4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.171.3 (e8b915e)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.171.8 (a7eb336)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.172.0 (94952b4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.172.1 (001658b)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.172.2 (c00f9cc)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.173.0 (820c80a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.173.1 (a3099f0)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.174.0 (8d66e39)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.175.0 (a184b63)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.175.1 (3519052)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.175.2 (e3e8d6c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.176.1 (a59973b)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.176.2 (8a21544)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.176.3 (a78a5b5)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.178.0 (234e676)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.178.1 ([a16c651](https://redire

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud