Skip to content

chore(deps): update dependency toml to v4.3.0 - #3890

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/toml-4.x
Open

chore(deps): update dependency toml to v4.3.0#3890
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/toml-4.x

Conversation

@renovate

@renovate renovate Bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
toml 4.1.24.3.0 age adoption passing confidence

Release Notes

BinaryMuse/toml-node (toml)

v4.3.0

Compare Source

=====================

  • Add opt-in Temporal support via toml.parse(input, { useTemporal: true }), mapping offset date-times to Temporal.ZonedDateTime and local date-times/dates/times to Temporal.PlainDateTime/PlainDate/PlainTime. An implementation can be supplied via the temporal option on runtimes without a Temporal global. (#​69)

v4.2.0

Compare Source

=====================

  • Address security advisory GHSA-82x6-q7mm-w9cf (CVE pending), in which deeply nested arrays or inline tables could overflow the call stack and crash the process with an uncatchable RangeError. Nesting is now bounded (default 500 levels), and input past the limit throws a normal parse error. The limit is configurable via toml.parse(input, { maxDepth }).

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • "after 9pm,before 9am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner July 17, 2026 15:03
@renovate renovate Bot added the renovate label Jul 17, 2026
@renovate
renovate Bot requested review from chihiro-adachi and shabaraba and removed request for a team July 17, 2026 15:03
@github-actions github-actions Bot added the pkg: profile-loader @kintone/profile-loader label Jul 17, 2026
@renovate
renovate Bot force-pushed the renovate/toml-4.x branch 2 times, most recently from 8436450 to e6e8945 Compare July 24, 2026 19:35
@renovate
renovate Bot force-pushed the renovate/toml-4.x branch 3 times, most recently from 3b4fce4 to 1f02a1c Compare August 3, 2026 21:14
@renovate
renovate Bot force-pushed the renovate/toml-4.x branch from 1f02a1c to 50b19ab Compare August 12, 2026 17:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pkg: profile-loader @kintone/profile-loader renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants