chore(deps): update all non-major dependencies with stable version (minor)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
@kong/kongponents (source)	^8.84.8 -> ^8.122.7					peerDependencies	minor	8.123.2 (+4)
node	>=v16.19.1 -> >=v16.20.2					engines	minor

---

Release Notes

Kong/kongponents (@​kong/kongponents)

v8.122.7

Compare Source

Bug Fixes

• kcodeblock: missing KButton import (#​1654) (6083da9)

v8.122.6

Compare Source

Bug Fixes

• ktable: allow users to select table cell text (#​1644) (9aa685b)

v8.122.5

Compare Source

Bug Fixes

• tsconfig: extend vue/tsconfig (#​1641) (677c4f4)

v8.122.4

Compare Source

Bug Fixes

• remove utility classes from docs [KHCP-8146] (#​1620) (9839038)

v8.122.3

Compare Source

Bug Fixes

• labels: font size (#​1627) (c4b3f5e)

v8.122.2

Compare Source

Reverts

• Revert "chore(deps-dev): bump vitepress from 1.0.0-beta.7 to 1.0.0-rc.4 (#​1619)" (#​1622) (06bb90e), closes #​1619 #​1622

v8.122.1

Compare Source

Bug Fixes

• k-dropdown-item: line height (3e95d0c)

v8.122.0

Compare Source

Features

• kcatalog: emit on card click (#​1608) (8cbe88c)

8.121.1 (2023-08-01)

Bug Fixes

• slideout: Header updates [khcp-7919] (#​1539) (9f23472)

v8.121.1

Compare Source

Bug Fixes

• slideout: Header updates [khcp-7919] (#​1539) (9f23472)

v8.121.0

Compare Source

Features

• token cleanup [KHCP-8461] (#​1604) (94aa2d2)

v8.120.0

Compare Source

Features

• KTable: add types [KHCP-6973] (#​1457) (461aec6)

v8.119.0

Compare Source

Features

• kcodeblock: introduce kui tokens [KHCP-7700] (#​1590) (5813d72)
• kskeleton: introduce kui tokens [KHCP-7723] (#​1572) (7d59176)

8.118.1 (2023-07-31)

Bug Fixes

• update fcont family scss vars (#​1603) (9537340)

v8.118.1

Compare Source

Bug Fixes

• update fcont family scss vars (#​1603) (9537340)

v8.118.0

Compare Source

Features

• kviewswitcher: introduce kui tokens [KHCP-7733] (#​1593) (6080e41)

v8.117.0

Compare Source

Features

• kpagination: introduce kui tokens [KHCP-7717] (#​1581) (e35a6ab)

8.116.2 (2023-07-28)

Bug Fixes

• style: line height for truncate (#​1600) (6fc886d)

8.116.1 (2023-07-28)

Bug Fixes

• kcard: body line-height in table cells (#​1596) (5eef39b)

v8.116.2

Compare Source

Bug Fixes

• style: line height for truncate (#​1600) (6fc886d)

v8.116.1

Compare Source

Bug Fixes

• kcard: body line-height in table cells (#​1596) (5eef39b)

v8.116.0

Compare Source

Features

• kslideout: introduce kui tokens (#​1586) (4c5bca4)
• ktabs: introduce kui tokens [khcp-7727] (#​1585) (eec9283)

v8.115.0

Compare Source

Features

• ktoaster: introduce kui tokens [KHCP-7729] (#​1595) (6c3cca4)

v8.114.0

Compare Source

Features

• ktooltip: introduce kui tokens [KHCP-7730] (#​1591) (ed0df6b)

v8.113.0

Compare Source

Features

• kbreadcrumb: add icon slot (#​1589) (597b887)

v8.112.0

Compare Source

Features

• ksegmentedcontrol: introduce kui tokens [KHCP-7721] (#​1588) (ee661c1)

v8.111.0

Compare Source

Features

• kmenu: introduce kui tokens [KHCP-7712] (#​1584) (e8dffc2)

v8.109.0

Compare Source

Features

• ktruncate: introduce kui tokens [KHCP-7732] (#​1582) (c7539c8)

v8.108.0

Compare Source

Features

• kmodalfullscreen: introduce kui tokens [KHCP-7715] (#​1574) (02c48f7)

v8.107.0

Compare Source

Features

• kmultiselect: introduce kui tokens [KHCP-7716] (#​1579) (6dd8b60)

8.106.1 (2023-07-25)

Bug Fixes

• kbreadcrumbs: default divider color (#​1580) (1546cfc)

v8.106.1

Compare Source

Bug Fixes

• kbreadcrumbs: default divider color (#​1580) (1546cfc)

v8.106.0

Compare Source

Features

• kicon: introduce kui tokens [KHCP-7707] (#​1562) (c69c411)

v8.105.0

Compare Source

Features

• kmethodbadge: introduce kui tokens [KHCP-7713] (#​1560) (ce562c1)

v8.104.0

Compare Source

Features

• kbreadcrumb: style updates [khcp-8029] (#​1535) (6d5975e)

v8.103.0

Compare Source

Features

• kcollapse: replace utility classes (#​1543) (3ee1916)
• kmodal: introduce kui tokens [KHCP-7714] (#​1568) (d436507)

8.102.1 (2023-07-24)

Bug Fixes

• kbreadcrumbs: divider line height (#​1571) (7bf3f9a)

v8.102.1

Compare Source

Bug Fixes

• kbreadcrumbs: divider line height (#​1571) (7bf3f9a)

v8.102.0

Compare Source

Features

• klabel: introduce kui tokens [KHCP-7711] (#​1570) (727e9af)

v8.101.0

Compare Source

Features

• kradio: introduce kui tokens [KHCP-7720] (#​1569) (3da92d4)

v8.100.0

Compare Source

Features

• kinputswitch: introduce kui tokens [KHCP-7710] (#​1561) (3c27cee)

v8.99.0

Compare Source

Features

• kexternallink: introduce kui tokens [KHCP-7705] (#​1559) (e349d59)
• kfileupload: introduce kui tokens [KHCP-7706] (#​1558) (59416b7)

v8.98.0

Compare Source

Features

• kdropdownmenu: introduce kui tokens [KHCP-7703] (#​1557) (8b050d4)

v8.97.0

Compare Source

Features

• kcheckbox: introduce kui tokens [KHCP-7699] (#​1550) (78665d6)
• kprompt: introduce kui tokens [KHCP-7719] (#​1548) (c7b9a44)
• ktextarea: introduce kui tokens [KHCP-7728] (#​1549) (72312b1)

v8.96.0

Compare Source

Bug Fixes

• fix icon size in components with design tokens (#​1551) (eb7ef39)

Features

• upgrade to vue 3.3.x [KHCP-7567] (#​1547) (de29381)

v8.95.0

Compare Source

Features

• kinput: introduce kui tokens [KHCP-7709] (#​1544) (83ca0c4)
• kselect: introduce kui tokens [KHCP-7722] (#​1540) (0e199cd)

v8.94.0

Compare Source

Features

• kpop: introduce kui tokens [KHCP-7718] (#​1542) (dc12d32)

8.93.2 (2023-07-19)

Bug Fixes

• deps: bump focus-trap from 7.5.1 to 7.5.2 (#​1532) (9e3da93)

8.93.1 (2023-07-18)

Bug Fixes

• deps: bump swrv from 1.0.3 to 1.0.4 (#​1541) (e4e8585)

v8.93.2

Compare Source

Bug Fixes

• deps: bump focus-trap from 7.5.1 to 7.5.2 (#​1532) (9e3da93)

v8.93.1

Compare Source

Bug Fixes

• deps: bump swrv from 1.0.3 to 1.0.4 (#​1541) (e4e8585)

v8.93.0

Compare Source

Features

• kcard: introduce kui tokens [KHCP-7692] (#​1538) (def576f)

v8.92.0

Compare Source

Features

• kemptystate: adds props.iconSecondaryColor (#​1475) (10efe4b)

8.91.1 (2023-07-14)

Bug Fixes

• KSelect: add pre-check presence for selectItems.value [KHCP-7756] (#​1523) (e9e713b)

v8.91.1

Compare Source

Bug Fixes

• KSelect: add pre-check presence for selectItems.value [KHCP-7756] (#​1523) (e9e713b)

v8.91.0

Compare Source

Features

• icon: add mesh icon (#​1534) (c37b866)

v8.90.0

Compare Source

Features

• kdatetimepicker: introduce kui tokens [KHCP-7702] (#​1531) (7f4ed4e)

8.89.1 (2023-07-13)

Bug Fixes

• kbadge: fix import (#​1529) (7b1ecee)
• KModal: fix focusTrap error [KHCP-7758] (#​1519) (041eaac)

v8.89.1

Compare Source

Bug Fixes

• kbadge: fix import (#​1529) (7b1ecee)
• KModal: fix focusTrap error [KHCP-7758] (#​1519) (041eaac)

v8.89.0

Compare Source

Features

• kcatalog: introduce kui tokens [KHCP-7698] (#​1526) (2a64616)

v8.88.0

Compare Source

Features

• ktable: introduce kui tokens [KHCP-7726] (#​1520) (ab80596)

v8.87.0

Compare Source

Features

• kbreadcrumb: custom divider [khcp-8029] (#​1517) (ba3bcd4)

8.86.1 (2023-07-12)

Bug Fixes

• kcodeblock: not showing correct number of matching lines (#​1481) (2a8b014)

v8.86.1

Compare Source

Bug Fixes

• kcodeblock: not showing correct number of matching lines (#​1481) (2a8b014)

v8.86.0

Compare Source

Features

• kbadge: introduce kui tokens [KHCP-7694] (#​1511) (86b7023)
• sourcemaps: dont generate sourcemap as part of npm package [KHCP-7565] (#​1516) (2eb5819)

v8.85.0

Compare Source

Features

• kalert: introduce design tokens [KHCP-7693] (#​1506) (33e8b8c)

8.84.8 (2023-07-07)

Bug Fixes

• KTruncate, KMultiselect: add fix for ResizeObserver [KHCP-7734] (#​1508) (ea47855)

8.84.7 (2023-07-06)

Bug Fixes

• kcatalog: flakey test [khcp-7022] (#​1495) (8c0babd)

8.84.6 (2023-07-06)

Bug Fixes

• scss: autocompletion (#​1505) (47f58ff)

8.84.5 (2023-07-06)

Bug Fixes

• kpagination: cache issue [khcp-7908] (#​1504) (4b3a49e)

8.84.4 (2023-07-06)

Bug Fixes

• kmultiselect: always show lock [khcp-7963] (#​1503) (13c4aac)

8.84.3 (2023-07-05)

Bug Fixes

• kpagination: cache issue [khcp-7908] (#​1502) (d9b579f)

8.84.2 (2023-07-05)

Bug Fixes

• design token imports (#​1501) (c812e85)

8.84.1 (2023-07-04)

Bug Fixes

• deps: bump focus-trap from 7.4.3 to 7.5.1 (#​1497) (3ef855f)

nodejs/node (node)

v16.20.2: 2023-08-09, Version 16.20.2 'Gallium' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

• CVE-2023-32002: Policies can be bypassed via Module._load (High)
• CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
• CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
• OpenSSL Security Releases
  • OpenSSL security advisory 14th July.
  • OpenSSL security advisory 19th July.
  • OpenSSL security advisory 31st July

More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.

Commits

• [40c3958a5a] - deps: update archs files for OpenSSL-1.1.1v (RafaelGSS) #​49043
• [a9ac9da89a] - deps: fix openssl crypto clean (RafaelGSS) #​49043
• [362d4c7494] - deps: upgrade openssl sources to OpenSSL_1_1_1v (RafaelGSS) #​49043
• [d8ccfe9ad4] - policy: handle Module.constructor and main.extensions bypass (RafaelGSS) nodejs-private/node-private#445
• [242aaa0caa] - policy: disable process.binding() when enabled (Tobias Nießen) nodejs-private/node-private#459

v16.20.1: 2023-06-20, Version 16.20.1 'Gallium' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

• CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
• CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
• CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
• CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
• CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)
• OpenSSL Security Releases
  • OpenSSL security advisory 28th March.
  • OpenSSL security advisory 20th April.
  • OpenSSL security advisory 30th May
• c-ares vulnerabilities:
  • GHSA-9g78-jv2r-p7vc
  • GHSA-8r8p-23f3-64c2
  • GHSA-54xr-f67r-4pc4
  • GHSA-x6mf-cxr9-8q6v

More detailed information on each of the vulnerabilities can be found in June 2023 Security Releases blog post.

Commits

• [5a92ea7a3b] - crypto: handle cert with invalid SPKI gracefully (Tobias Nießen)
• [5df04e893a] - deps: set CARES_RANDOM_FILE for c-ares (Richard Lau) #​48156
• [c171cbd124] - deps: update c-ares to 1.19.1 (RafaelGSS) #​48115
• [155d3aac02] - deps: update archs files for OpenSSL-1.1.1u+quic (RafaelGSS) #​48369
• [8d4c8f8ebe] - deps: upgrade openssl sources to OpenSSL_1_1_1u (RafaelGSS) #​48369
• [1a5c9284eb] - doc,test: clarify behavior of DH generateKeys (Tobias Nießen) nodejs-private/node-private#426
• [e42ff4b018] - http: disable request smuggling via empty headers (Paolo Insogna) nodejs-private/node-private#429
• [10042683c8] - msi: do not create AppData\Roaming\npm (Tobias Nießen) nodejs-private/node-private#408
• [a6f4e87bc9] - policy: handle mainModule.__proto__ bypass (RafaelGSS) nodejs-private/node-private#416
• [b77000f4d7] - test: allow SIGBUS in signal-handler abort test (Michaël Zasso) #​47851

v16.20.0: 2023-03-29, Version 16.20.0 'Gallium' (LTS), @​BethGriggs

Compare Source

Notable Changes

• deps:
  • update undici to 5.20.0 (Node.js GitHub Bot) #​46711
  • update c-ares to 1.19.0 (Michaël Zasso) #​46415
  • upgrade npm to 8.19.4 (npm team) #​46677
  • update corepack to 0.17.0 (Node.js GitHub Bot) #​46842
• (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) #​44376

Commits

• [de6dd67790] - crypto: avoid hang when no algorithm available (Richard Lau) #​46237
• [4617512788] - crypto: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) #​46185
• [24972164fc] - deps: update undici to 5.20.0 (Node.js GitHub Bot) #​46711
• [85f88c6a8d] - deps: V8: cherry-pick 90be99f (Michaël Zasso) #​46646
• [b4ebe6d47b] - deps: update c-ares to 1.19.0 (Michaël Zasso) #​46415
• [56cbc7fdda] - deps: V8: cherry-pick c2792e5 (Jiawen Geng) #​44961
• [7af9bdb31e] - deps: upgrade npm to 8.19.4 (npm team) #​46677
• [962a7471b5] - deps: update corepack to 0.17.0 (Node.js GitHub Bot) #​46842
• [748bc96e35] - deps: update corepack to 0.16.0 (Node.js GitHub Bot) #​46710
• [a467782499] - deps: update corepack to 0.15.3 (Node.js GitHub Bot) #​46037
• [1913b6763d] - deps: update corepack to 0.15.2 (Node.js GitHub Bot) #​45635
• [809371a15f] - module: require.resolve.paths returns null with node schema (MURAKAMI Masahiko) #​45147
• [086bb2f8d4] - Revert "src: let http2 streams end after session close" (Rich Trott) #​46721
• [6a01d39120] - (SEMVER-MINOR) src: add support for externally shared js builtins (Michael Dawson) #​44376
• [d081032a60] - test: fix test-net-connect-reset-until-connected (Vita Batrla) #​46781
• [efe1be47ec] - test: skip test depending on overlapped-checker when not available (Antoine du Hamel) #​45015
• [fc47d58abe] - test: remove cjs loader from stack traces (Geoffrey Booth) #​44197
• [cf76d0790d] - test: fix WPT title when no META title is present (Filip Skokan) #​46804
• [0d1485b924] - test: fix default WPT titles (Filip Skokan) #​46778
• [088e9cde3d] - test: add WPTRunner support for variants and generating WPT reports (Filip Skokan) #​46498
• [908c4dff44] - test: mark test-crypto-key-objects flaky on Linux (Richard Lau) #​46684
• [768e56227e] - tools: make utils.SearchFiles deterministic (Bruno Pitrus) #​44496

---

Configuration

📅 Schedule: Branch creation - "every weekday" in timezone America/New_York, Automerge - "every weekday" in timezone America/New_York.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[kongponents-bot]

🎉 This PR is included in version 2.8.8 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀