Skip to content

chore(deps): update dependency toml to v5 - #3892

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/toml-5.x
Open

chore(deps): update dependency toml to v5#3892
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/toml-5.x

Conversation

@renovate

@renovate renovate Bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
toml 4.1.25.0.0 age adoption passing confidence

Release Notes

BinaryMuse/toml-node (toml)

v5.0.0

Compare Source

=====================

  • Breaking: Integers outside JavaScript's safe range (beyond ±Number.MAX_SAFE_INTEGER) now throw a parse error instead of silently returning a rounded value (#​28). Opt in to lossless handling of the full 64-bit range with toml.parse(input, { bigint: true }), which returns all integer values as BigInt.
  • Breaking: Integers outside TOML's 64-bit signed integer range now throw a parse error in either mode, as required by the spec. Previously they were silently rounded.

v4.3.0

Compare Source

=====================

  • Add opt-in Temporal support via toml.parse(input, { useTemporal: true }), mapping offset date-times to Temporal.ZonedDateTime and local date-times/dates/times to Temporal.PlainDateTime/PlainDate/PlainTime. An implementation can be supplied via the temporal option on runtimes without a Temporal global. (#​69)

v4.2.0

Compare Source

=====================

  • Address security advisory GHSA-82x6-q7mm-w9cf (CVE pending), in which deeply nested arrays or inline tables could overflow the call stack and crash the process with an uncatchable RangeError. Nesting is now bounded (default 500 levels), and input past the limit throws a normal parse error. The limit is configurable via toml.parse(input, { maxDepth }).

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • "after 9pm,before 9am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the renovate label Jul 17, 2026
@renovate
renovate Bot requested a review from a team as a code owner July 17, 2026 20:39
@renovate
renovate Bot requested review from chihiro-adachi and nameless-mc and removed request for a team July 17, 2026 20:39
@renovate renovate Bot added the renovate label Jul 17, 2026
@github-actions github-actions Bot added the pkg: profile-loader @kintone/profile-loader label Jul 17, 2026
@renovate
renovate Bot force-pushed the renovate/toml-5.x branch 2 times, most recently from 4367b77 to 454f30b Compare July 30, 2026 18:46
@renovate
renovate Bot force-pushed the renovate/toml-5.x branch from 454f30b to 603e80e Compare August 1, 2026 21:41
@renovate
renovate Bot force-pushed the renovate/toml-5.x branch from 603e80e to 9557502 Compare August 12, 2026 17:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pkg: profile-loader @kintone/profile-loader renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants