Update utilities

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
cron	2.1.0 -> 2.4.4
dayjs (source)	1.11.7 -> 1.11.18
dotenv	16.0.3 -> 16.6.1
http-status-codes	2.2.0 -> 2.3.0
js-base64	3.7.3 -> 3.7.8
module-alias	2.2.2 -> 2.2.3

---

Release Notes

kelektiv/node-cron (cron)

v2.4.4

Compare Source

🐛 Bug Fixes

• added fractional offset support (#​685) (ce78478)

v2.4.3

Compare Source

🐛 Bug Fixes

• fix range parsing when upper limit = 0 (#​687) (d96746f)

🚨 Tests

• add TS types check (#​690) (f046016)

v2.4.2

Compare Source

🛠 Builds

• deps: update dependency luxon to ~3.7.0 (db69c74)

♻️ Chores

• action: update github/codeql-action action to v3.29.0 (#​990) (a3fbb3c)
• action: update github/codeql-action action to v3.29.2 (0403c53)
• action: update marocchino/sticky-pull-request-comment action to v2.9.3 (eda0c4d)
• action: update ossf/scorecard-action action to v2.4.2 (#​991) (29a3a60)
• action: update step-security/harden-runner action to v2.12.1 (ba49a56)
• action: update step-security/harden-runner action to v2.12.2 (845202e)
• deps: lock file maintenance (#​989) (bc1bf72)
• deps: lock file maintenance (#​999) (e78d986)
• deps: update dependency @​swc/core to v1.12.1 (#​992) (b5d3bd3)
• deps: update dependency @​swc/core to v1.12.5 (d374494)
• deps: update dependency @​swc/core to v1.12.9 (8060c41)
• deps: update dependency @​types/node to v22.15.32 (#​993) (ce9743b)
• deps: update dependency @​types/node to v22.16.0 (7bae5b1)
• deps: update linters (24eb53f)
• deps: update linters (#​995) (9395484)
• deps: update node.js to v23.11.1 (#​985) (674a344)
• deps: update semantic-release related packages (cc2676a)
• deps: update semantic-release related packages (#​994) (4d738df)

v2.4.1

Compare Source

🐛 Bug Fixes

• cron should still execute after changing the time back during daylight savings (#​966) (8cf0712), closes #​881 #​881

♻️ Chores

• action: update actions/setup-node action to v4.3.0 (e70709f)
• action: update actions/upload-artifact action to v4.6.1 (06ed76c)
• action: update actions/upload-artifact action to v4.6.2 (69ea222)
• action: update github/codeql-action action to v3.28.10 (1d14a08)
• action: update github/codeql-action action to v3.28.11 (cd28d4f)
• action: update github/codeql-action action to v3.28.13 (154f885)
• action: update ossf/scorecard-action action to v2.4.1 (6a4ec39)
• deps: lock file maintenance (6742c01)
• deps: lock file maintenance (a97cdb1)
• deps: lock file maintenance (c585973)
• deps: lock file maintenance (e156aa7)
• deps: update dependency @​commitlint/cli to v19.8.0 (3984884)
• deps: update dependency @​eslint/js to v9.22.0 (7415480)
• deps: update dependency @​eslint/js to v9.23.0 (00fc7ed)
• deps: update dependency @​fast-check/jest to v2.1.0 (a9a8608)
• deps: update dependency @​types/node to v22.13.11 (38cf6a6)
• deps: update dependency @​types/node to v22.13.5 (a746320)
• deps: update dependency @​types/node to v22.13.9 (4ac339f)
• deps: update dependency lint-staged to v15.5.0 (5efb27f)
• deps: update dependency prettier to v3.5.3 (d8f2456)
• deps: update dependency sinon to v19.0.4 (5144f4d)
• deps: update dependency ts-jest to v29.2.6 (3625528)
• deps: update dependency typescript to v5.8.2 (4ef66e8)
• deps: update linters (ecbe916)
• deps: update node.js to v23.10.0 (#​970) (6775fff)
• deps: update tests (5d5e555)

v2.4.0

Compare Source

🛠 Builds

• typescript: add missing "types" property to package.json (#​908) (1953c97)

📚 Documentation

• Add .nvmrc with recommended Node version for development (#​904) (91848e9)

⚙️ Continuous Integrations

• action: update github/codeql-action action to v3.27.0 (#​866) (a6dd871)
• action: update ossf/scorecard-action action to v2.4.0 (#​883) (e0880a1)

♻️ Chores

• config: migrate renovate config (#​903) (5ce34f4)
• deps: lock file maintenance (be77f4a)
• deps: update dependency @​fast-check/jest to v2 (#​891) (20c448b)
• deps: update dependency @​types/node to v20.17.2 (24fa266)
• deps: update dependency @​types/node to v20.17.3 (5bd340e)
• deps: update dependency @​types/node to v20.17.4 (1ce42a4)
• deps: update dependency @​types/node to v20.17.5 (767c430)
• deps: update semantic-release related packages (major) (#​835) (73a8d37)

v2.3.1

Compare Source

🐛 Bug Fixes

• revert runOnce breaking changes (#​760) (7cb53ec)

⚙️ Continuous Integrations

• action: update actions/checkout action to v4 (#​755) (d0d70c6)
• action: update github/codeql-action action to v2.22.4 (#​752) (04454c3)
• action: update github/codeql-action action to v2.22.5 (#​758) (2dff183)
• action: update ossf/scorecard-action action to v2.3.1 (#​754) (41d21f1)

♻️ Chores

• deps: update dependency @​commitlint/cli to v18.2.0 (#​759) (4cb466e)
• deps: update dependency @​types/node to v20.8.8 (#​756) (361728e)
• deps: update dependency @​types/node to v20.8.9 (#​757) (e2b1bac)
• deps: update dependency @​typescript-eslint/eslint-plugin to v6.9.0 (#​753) (9cec04f)

v2.3.0

Compare Source

Fixed

• Some small bugs

Changed

• Refactored get next date function

v2.2.0

Compare Source

Changed

• Updated Luxon dependency
• Updated unit tests to be compatible with new Luxon version

iamkun/dayjs (dayjs)

v1.11.18

Compare Source

v1.11.17

Compare Source

Bug Fixes

• [en-AU] locale use the same ordinal as moment (#​2878) (1b95ecd)

v1.11.16

Compare Source

v1.11.15

Compare Source

v1.11.14

Compare Source

Bug Fixes

• .utcOffset(0, true) result and its clone are different bug (#​2505) (fefdcd4)

v1.11.13

Compare Source

Bug Fixes

• customParseFormat supports Q quter / w ww weekOfYear (#​2705) (8ca74f1)

v1.11.12

Compare Source

Bug Fixes

• Add NegativeYear Plugin support (#​2640) (6a42e0d)
• add UTC support to negativeYear plugin (#​2692) (f3ef705)
• Fix zero offset issue when use tz with locale (#​2532) (d0e6738)
• Improve typing for min/max plugin (#​2573) (4fbe94a)
• timezone plugin correct parse UTC tz (#​2693) (b575c81)

v1.11.11

Compare Source

Bug Fixes

• day of week type literal (#​2630) (f68d73e)
• improve locale "zh-hk" format and meridiem (#​2419) (a947a51)
• Update 'da' locale to match correct first week of year (#​2592) (44b0936)
• update locale Bulgarian monthsShort Jan (#​2538) (f0c9a41)

v1.11.10

Compare Source

Bug Fixes

• Add Korean Day of Month with ordinal (#​2395) (dd55ee2)
• change back fa locale to the Gregorian calendar equivalent (#​2411) (95e9458)
• duration plugin - MILLISECONDS_A_MONTH const calculation (#​2362) (f0a0b54)
• duration plugin getter get result 0 instead of undefined (#​2369) (061aa7e)
• fix isDayjs check logic (#​2383) (5f3f878)
• fix timezone plugin to get correct locale setting (#​2420) (4f45012)
• locale: add meridiem in ar locale (#​2418) (361be5c)
• round durations to millisecond precision for ISO string (#​2367) (890a17a)
• sub-second precisions need to be rounded at the seconds field to avoid adding floats (#​2377) (a9d7d03)
• update $x logic to avoid plugin error (#​2429) (2254635)
• Update Slovenian locale for relative time (#​2396) (5470a15)
• update uzbek language translation (#​2327) (0a91056)

v1.11.9

Compare Source

Bug Fixes

• Add null to min and max plugin return type (#​2355) (62d9042)
• check if null passed to objectSupport parser (#​2175) (013968f)
• dayjs.diff improve performance (#​2244) (33c80e1)
• dayjs(null) throws error, not return dayjs object as invalid date (#​2334) (c79e2f5)
• objectSupport plugin causes an error when null is passed to dayjs function (closes #​2277) (#​2342) (89bf31c)
• Optimize format method (#​2313) (1fe1b1d)
• update Duration plugin add/subtract take into account days in month (#​2337) (3b1060f)
• update MinMax plugin 1. ignore the 'null' in args 2. return the only one arg (#​2330) (3c2c6ee)

v1.11.8

Compare Source

Bug Fixes

• .format add padding to 'YYYY' (#​2231) (00c223b)
• Added .valueOf method to Duration class (#​2226) (9b4fcfd)
• timezone type mark date parameter as optional (#​2222) (b87aa0e)
• type file first parameter date is optional in isSame(), isBefore(), isAfter() (#​2272) (4d56f3e)

motdotla/dotenv (dotenv)

v16.6.1

Compare Source

Changed

• Default quiet to true – hiding the runtime log message (#​874)
• NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
• And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@​dotenvx/dotenvx').config().

v16.6.0

Compare Source

Added

• Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#​870)
• Use { quiet: true } to suppress
• Aligns dotenv more closely with dotenvx.

v16.5.0

Compare Source

Added

• 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP]
Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM.
Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

• Remove _log method. Use _debug #​862

v16.4.7

Compare Source

Changed

• Ignore .tap folder when publishing. (oops, sorry about that everyone. - @​motdotla) #​848

v16.4.6

Compare Source

Changed

• Clean up stale dev dependencies #​847
• Various README updates clarifying usage and alternative solutions using dotenvx

v16.4.5

Compare Source

Changed

• 🐞 Fix recent regression when using path option. return to historical behavior: do not attempt to auto find .env if path set. (regression was introduced in 16.4.3) #​814

v16.4.4

Compare Source

Changed

• 🐞 Replaced chaining operator ?. with old school && (fixing node 12 failures) #​812

v16.4.3

Compare Source

Changed

• 🐞 Fix recent regression when using path option. return to historical behavior: do not attempt to auto find .env if path set. (regression was introduced in 16.4.3) #​814

v16.4.2

Compare Source

Changed

• Changed funding link in package.json to dotenvx.com

v16.4.1

Compare Source

• Patch support for array as path option #​797

v16.4.0

Compare Source

• Add error.code to error messages around .env.vault decryption handling #​795
• Add ability to find .env.vault file when filename(s) passed as an array #​784

v16.3.2

Compare Source

Added

• Add debug message when no encoding set #​735

Changed

• Fix output typing for populate #​792
• Use subarray instead of slice #​793

v16.3.1

Compare Source

Added

• Add missing type definitions for processEnv and DOTENV_KEY options. #​756

v16.3.0

Compare Source

Added

• Optionally pass DOTENV_KEY to options rather than relying on process.env.DOTENV_KEY. Defaults to process.env.DOTENV_KEY #​754

v16.2.0

Compare Source

Added

• Optionally write to your own target object rather than process.env. Defaults to process.env. #​753
• Add import type URL to types file #​751

v16.1.4

Compare Source

Added

• Added .github/ to .npmignore #​747

v16.1.3

Compare Source

Removed

• Removed browser keys for path, os, and crypto in package.json. These were set to false incorrectly as of 16.1. Instead, if using dotenv on the front-end make sure to include polyfills for path, os, and crypto. node-polyfill-webpack-plugin provides these.

v16.1.2

Compare Source

Changed

• Exposed private function _configDotenv as configDotenv. #​744

v16.1.1

Compare Source

Added

• Added type definition for decrypt function

Changed

• Fixed {crypto: false} in packageJson.browser

v16.1.0

Compare Source

Added

• Add populate convenience method #​733
• Accept URL as path option #​720
• Add dotenv to npm fund command
• Spanish language README #​698
• Add .env.vault support. 🎉 (#​730)

ℹ️ .env.vault extends the .env file format standard with a localized encrypted vault file. Package it securely with your production code deploys. It's cloud agnostic so that you can deploy your secrets anywhere – without risky third-party integrations. read more

Changed

• Fixed "cannot resolve 'fs'" error on tools like Replit #​693

prettymuchbryce/http-status-codes (http-status-codes)

v2.3.0: http-status-codes 2.3.0

Compare Source

• Adds 103 EARLY_HINTS per RFC 8297
• Adds 426 UPGRADE_REQUIRED per RFC 7231

dankogai/js-base64 (js-base64)

v3.7.8

Compare Source

v3.7.7

Compare Source

v3.7.6

Compare Source

v3.7.5

Compare Source

v3.7.4

Compare Source

ilearnio/module-alias (module-alias)

v2.2.3

Compare Source

---

Configuration

📅 Schedule: Branch creation - "on Sunday" in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.