Skip to content

Update balena-io/balena-cli to v23#1396

Closed
balena-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/balena-io-balena-cli-23.x
Closed

Update balena-io/balena-cli to v23#1396
balena-renovate[bot] wants to merge 1 commit into
masterfrom
renovate/balena-io-balena-cli-23.x

Conversation

@balena-renovate

@balena-renovate balena-renovate Bot commented Nov 17, 2025

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
balena-io/balena-cli major v22.5.5v23.2.32

Release Notes

balena-io/balena-cli (balena-io/balena-cli)

v23.2.32

Compare Source

cc32211 (tests: Replace the deprecated url.parse with new URL(), 2026-02-11)
f8702f5 (Remove unnecessary 'url' imports, 2026-02-11)
84edd27 (tests/build: Increase the test timeout to 1.5 minute, 2026-02-11)

v23.2.31

Compare Source

55b77d8 (Deduplicate dependencies, 2026-02-11)
7a541ac (tests: Add ignore rule for DEP0169 url.parse deprecation, 2026-02-11)

v23.2.30

Compare Source

Update dependency balena-settings-client to v6

Notable changes
  • Move internal typing dependencies to devDependencies [Thodoris Greasidis]
  • Fix node engine version requirements [Matthew Yarmolinsky]
  • Drop support for property paths in the get method [Matthew Yarmolinsky]
  • Drop support for node <20.12.0 and require es2019 [Matthew Yarmolinsky]
  • Update author to balena [Matthew Yarmolinsky]
  • Drop Bluebird [Matthew Yarmolinsky]
  • Drop mergeObjects in favor of es-toolkit merge [Matthew Yarmolinsky]
  • Replace lodash with es-toolkit [Matthew Yarmolinsky]
  • Update jsdoc-to-markdown [Matthew Yarmolinsky]
  • Update TypeScript to 5.1.3 [Thodoris Greasidis]
balena-io-modules/balena-settings-client (balena-settings-client)
v6.0.2

Compare Source

(2025-12-23)
  • Move internal typing dependencies to devDependencies [Thodoris Greasidis]
v6.0.1

Compare Source

(2025-12-23)
  • Fix node engine version requirements [Matthew Yarmolinsky]
v6.0.0

Compare Source

(2025-12-23)
  • Drop support for property paths in the get method [Matthew Yarmolinsky]
  • Drop support for node <20.12.0 and require es2019 [Matthew Yarmolinsky]
  • Update author to balena [Matthew Yarmolinsky]
  • Drop Bluebird [Matthew Yarmolinsky]
  • Drop mergeObjects in favor of es-toolkit merge [Matthew Yarmolinsky]
  • Replace lodash with es-toolkit [Matthew Yarmolinsky]
  • Update jsdoc-to-markdown [Matthew Yarmolinsky]
v5.0.3

Compare Source

(2023-06-02)
  • Update TypeScript to 5.1.3 [Thodoris Greasidis]
List of commits

22c6989 (Update dependency balena-settings-client to v6, 2026-01-16)

v23.2.29

Compare Source

Update dependency body-parser to v2

Notable changes
  • deps: qs@^6.14.1
  • refactor(json): simplify strict mode error string construction
  • Security fix for GHSA-wqch-xfxh-vrr4
  • deps:
  • refactor: normalize common options for all parsers
  • refactor: prefix built-in node module imports
  • use the node require cache instead of custom caching
  • remove unpipe package and use native unpipe() method
  • Restore expected behavior extended to false
  • Node.js 18 is the minimum supported version
  • req.body is no longer always initialized to {}
  • Remove deprecated bodyParser() combination middleware
  • urlencoded parser now defaults extended to false as released, this is not the case, fixed in 2.0.1
  • urlencoded simple parser now uses qs module instead of querystring module
  • Add brotli support #​406
  • urlencoded: Add option to customize the depth with a default value of 32
  • urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
  • Use on-finished to determine when body read
  • deps: raw-body@^3.0.0
  • deps: qs@​6.12.3
  • deps: debug@​3.1.0
  • deps: iconv-lite@​0.5.2
expressjs/body-parser (body-parser)
v2.2.2

Compare Source

=========================

  • deps: qs@^6.14.1
  • refactor(json): simplify strict mode error string construction
v2.2.1

Compare Source

=========================

  • Security fix for GHSA-wqch-xfxh-vrr4
  • deps:
    • type-is@^2.0.1
    • iconv-lite@^0.7.0
      • Handle split surrogate pairs when encoding UTF-8
      • Avoid false positives in encodingExists by using prototype-less objects
    • raw-body@^3.0.1
    • debug@^4.4.3
v2.2.0

Compare Source

=========================

  • refactor: normalize common options for all parsers
  • deps:
    • iconv-lite@^0.6.3
v2.1.0

Compare Source

=========================

  • deps:
    • type-is@^2.0.0
    • debug@^4.4.0
    • Removed destroy
  • refactor: prefix built-in node module imports
  • use the node require cache instead of custom caching
v2.0.2

Compare Source

=========================

  • remove unpipe package and use native unpipe() method
v2.0.1

Compare Source

=========================

  • Restore expected behavior extended to false
v2.0.0

Compare Source

=========================

Breaking Changes
  • Node.js 18 is the minimum supported version
  • req.body is no longer always initialized to {}
    • it is left undefined unless a body is parsed
  • Remove deprecated bodyParser() combination middleware
  • urlencoded parser now defaults extended to false as released, this is not the case, fixed in 2.0.1
  • urlencoded simple parser now uses qs module instead of querystring module
Features
  • Add brotli support #​406
  • urlencoded: Add option to customize the depth with a default value of 32
  • urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
  • Use on-finished to determine when body read
Dependencies
  • deps: raw-body@^3.0.0
  • deps: qs@​6.12.3
  • deps: debug@​3.1.0
  • deps: iconv-lite@​0.5.2
List of commits

a4bb84b (Update dependency body-parser to v2, 2026-01-16)
b12ba3e (Drop unneeded dependency @types/body-parser, 2026-01-16)
aec9484 (server: Add optional chain after request.body, 2026-01-16)
cebc4c9 (server.spec: Test for undefined bodies, 2026-01-16)
cd265ac (Deduplicate dependencies, 2026-01-16)

v23.2.28

Compare Source

Update dependency balena-semver to v4

Notable changes
balena-io-modules/balena-semver (balena-semver)
[v4.0.1](https://redirect.github.com/balena-io-modules/balena-semver/blob/HEAD/CHANGELOG.md#401
List of commits

99b1d42 (Update dependency balena-semver to v4, 2026-01-15)

v23.2.27

Compare Source

43c24a5 (Update actions/setup-node digest to 6044e13, 2026-01-15)

v23.2.26

Compare Source

Update apple-actions/import-codesign-certs action to v6

Notable changes
apple-actions/import-codesign-certs (apple-actions/import-codesign-certs)
v6

Compare Source

List of commits

31ad365 (Update apple-actions/import-codesign-certs action to v6, 2026-01-15)

v23.2.25

Compare Source

Update actions/download-artifact action to v7

Notable changes
actions/download-artifact (actions/download-artifact)
v7.0.0

Compare Source

v7 - What's new

[!IMPORTANT]
actions/download-artifact@​v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed
New Contributors

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

List of commits

8bde334 (Update actions/download-artifact action to v7, 2026-01-15)

v23.2.24

Compare Source

Update actions/upload-artifact action to v6

Notable changes
actions/upload-artifact (actions/upload-artifact)
v6

Compare Source

List of commits

c5e6f3a (Update actions/upload-artifact action to v6, 2026-01-15)

v23.2.23

Compare Source

836ce0c (Change common-flags modules to factories instead of static object, 2026-01-14)

v23.2.22

Compare Source

2697746 (Remove unused setMaxListeners function, 2026-01-13)
9f72030 (Reduce overall usage of require, 2026-01-13)

v23.2.21

Compare Source

0a43fa0 (Update balena-image-fs to 7.6.0, 2026-01-13)
2216598 (Remove no longer needed code in favor of balena-image-fs, 2026-01-13)
7c978a0 (Remove no longer needed direct dependencies file-disk and partitioninfo, 2026-01-13)

v23.2.20

Compare Source

eb140db (Add getPackageJson lazy getter to centralize package.json access, 2026-01-13)

v23.2.19

Compare Source

d3392a9 (README: remove david-dm link, 2026-01-12)
156af67 (Remove unused dev dependencies, 2026-01-12)
6c90666 (Add missing dependency indent-string, 2026-01-12)
7eb41c3 (Add missing dev dependency pinejs-client-core, 2026-01-12)
a54c4d1 (Add missing dependency file-disk, 2026-01-12)
2e4cf49 (Add missing dependency partitioninfo, 2026-01-12)
e10fdcb (Run npm audit fix, 2026-01-13)
8c1cb04 (Deduplicate dependencies, 2026-01-13)

v23.2.18

Compare Source

09cea86 (Deduplicate dependencies, 2026-01-13)
2eaa5c1 (Add tests for balena config generate, 2026-01-13)

v23.2.17

Compare Source

23c645a (os download: Correct img names to match devices type in examples, 2026-01-01)
59b639d (Update reconfix to 1.0.2, 2026-01-12)
15bf2d6 (Update balena-device-init to 8.2.1, 2026-01-12)
d8f50d0 (Drop exit-hook patch, 2026-01-02)
bd3acf1 (Deduplicate dependencies, 2026-01-12)

v23.2.16

Compare Source

ff73fed (tests: Replace nock, mock-require and rewire with mockttp and sinon, 2025-10-17)
81e6537 (Unpin balena-request from v14.0.6, 2026-01-09)

v23.2.15

Compare Source

d0b98ad (Fix intermitent test on image-manager, 2026-01-09)

v23.2.14

Compare Source

9ebf244 (Update balena-sdk to 22.4.5, 2025-12-30)
df95136 (Use the device.is_connected_to_vpn field for device actions, ssh & tunnel checks, 2025-11-13)

v23.2.13

Compare Source

11745cd (Update docker-progress to 5.4.0, 2025-12-04)

v23.2.12

Compare Source

aaaebf4 (Update oclif from 4.22.0 to 4.22.61, 2025-12-29)

v23.2.11

Compare Source

Update aws-actions/configure-aws-credentials action to v5

Notable changes
aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)
v5.1.1

Compare Source

Miscellaneous Chores
  • release 5.1.1 (56d6a58)
  • various dependency updates
v5.1.0

Compare Source

Features
Bug Fixes
v5.0.0

Compare Source

⚠ BREAKING CHANGES
  • Cleanup input handling. Changes invalid boolean input behavior (see #​1445)
Features
List of commits

6ff189c (Update aws-actions/configure-aws-credentials action to v5, 2025-12-15)

v23.2.10

Compare Source

Update apple-actions/import-codesign-certs action to v5

Notable changes
apple-actions/import-codesign-certs (apple-actions/import-codesign-certs)
v5

Compare Source

v4

Compare Source

List of commits

68c8deb (Update apple-actions/import-codesign-certs action to v5, 2025-12-12)

v23.2.9

Compare Source

b2b7c99 (renovate: Only run npm dedupe for github-actions updates, 2025-12-11)
6423901 (Fix Node.js 22+ JSON import error by using require(), 2025-12-11)
1bd2b62 (npm dedupe, 2025-12-12)

v23.2.8

Compare Source

55f230c (os configure, device init: Validate that the config.json's installer.secureboot is a boolean when set, 2025-12-05)
b138ce3 (Add test for os configure --config using secureboot, 2025-12-05)

v23.2.7

Compare Source

0bc9b48 (os configure: Fix asking interactive questions when --config is used, 2025-12-05)
b85ccb7 (Add tests for os configure --config, 2025-12-06)
adde762 (Update @​balena/lint to 9.3.7 to support async disposables, 2025-12-06)

v23.2.6

Compare Source

Update apple-actions/import-codesign-certs action to v3

Notable changes
apple-actions/import-codesign-certs (apple-actions/import-codesign-certs)
v3

Compare Source

Upgrade to node 20 plus some other changes

List of commits

e840195 (Update apple-actions/import-codesign-certs action to v3, 2025-12-05)

v23.2.5

Compare Source

65daaaa (os configure: Fix detecting the OS version of flasher images, 2025-12-02)
b7a7baa (Deduplicate dependencies, 2025-12-04)

v23.2.4

Compare Source

Update GitHub Actions

Notable changes
aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)
v4.3.1

Compare Source

Bug Fixes
v4.3.0

Compare Source

NOTE: This release tag originally pointed to 59b4418, but a critical bug was discovered shortly after publishing. We updated this tag to d0834ad to prevent anyone using the 4.3.0 tag from encountering the bug, and we published 4.3.1 to allow workflows to auto update correctly.

Features
Bug Fixes
  • docs: readme samples versioning (5b3c895)
  • the wrong example region for China partition in README (37fe9a7)
  • properly set proxy environment variable (cbea708)
Miscellaneous Chores
actions/python-versions (python)
v3.14.1: 3.14.1

Compare Source

Python 3.14.1

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

v3.13.10: 3.13.10

Compare Source

Python 3.13.10

v3.13.9: 3.13.9

Compare Source

Python 3.13.9

v3.13.8: 3.13.8

Compare Source

Python 3.13.8

v3.13.7: 3.13.7

Compare Source

Python 3.13.7

v3.13.6: 3.13.6

Compare Source

Python 3.13.6

v3.13.5: 3.13.5

Compare Source

Python 3.13.5

v3.13.4: 3.13.4

Compare Source

Python 3.13.4

v3.13.3: 3.13.3

Compare Source

Python 3.13.3

v3.13.2: 3.13.2

Compare Source

Python 3.13.2

v3.13.1: 3.13.1

Compare Source

Python 3.13.1

v3.13.0: 3.13.0

Compare Source

Python 3.13.0

v3.12.12: 3.12.12

Compare Source

Python 3.12.12

v3.12.11: 3.12.11

Compare Source

Python 3.12.11

v3.12.10: 3.12.10

Compare Source

Python 3.12.10

v3.12.9: 3.12.9

Compare Source

Python 3.12.9

v3.12.8: 3.12.8

Compare Source

Python 3.12.8

v3.12.7: 3.12.7

Compare Source

Python 3.12.7

v3.12.6: 3.12.6

Compare Source

Python 3.12.6

v3.12.5: 3.12.5

Compare Source

Python 3.12.5

v3.12.4: 3.12.4

Compare Source

Python 3.12.4

v3.12.3: 3.12.3

Compare Source

Python 3.12.3

v3.12.2: 3.12.2

Compare Source

Python 3.12.2

v3.12.1: 3.12.1

Compare Source

Python 3.12.1

v3.12.0: 3.12.0

Compare Source

Python 3.12.0

List of commits

373c660 (Update GitHub Actions, 2025-12-03)

v23.2.3

Compare Source

81d29d6 (Lock file maintenance, 2025-12-03)

v23.2.2

Compare Source

Update actions/download-artifact action to v6

Notable changes
actions/download-artifact (actions/download-artifact)
v6.0.0

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/download-artifact@v5...v6.0.0

List of commits

92eee38 (Update actions/download-artifact action to v6, 2025-12-02)

v23.2.1

Compare Source

e463dea (Deduplicate dependencies, 2025-12-02)
b4668b0 (tests/os/configure.spec: Abstract the temp image creation and cleanup, 2025-12-02)

v23.2.0

Compare Source

a8f87d1 (Include sub-commands in --help, 2025-11-19)

v23.1.4

Compare Source

91cf9f3 (Remove the oclif/core patches in favor oclif overrides & customization, 2025-11-18)

v23.1.3

Compare Source

8a6630c (Fix version and autocomplete commands not working in offline mode, 2025-11-18)
bfc0ba7 (Deduplicate dependencies, 2025-11-19)

v23.1.2

Compare Source

ab7ecec (push,build: Use streaming while packing the build context files, 2024-02-26)

v23.1.1

Compare Source

a97c8db (Drop some usage of lodash in favor of native equivalents, 2025-11-12)

v23.1.0

Compare Source

757061c (device os-update: Add support for HUPing ESR devices, 2025-11-17)
bfc464b (Deduplicate dependencies, 2025-11-18)

v23.0.1

Compare Source

00363df (Use nullish coalescing, 2025-11-11)
731e19a (Fix getExpandedProp return type, 2025-11-11)
772f597 (Re-enable JS linting and add JSDoc annotations for JS files, 2025-11-11)
ccc82d7 (Add missing type annotations, 2025-11-11)

v23.0.0

Compare Source

Breaking changes
  • Move to node 24.11.0 & drop support for older versions
  • Drop all deprecated aliases
    • What are aliases?: Aliases are just alternate names for commands. In major v20, we renamed several commands but kept the old names as aliases and deprecated them, the purpose being so users can keep using them in a transitional period until we drop them. Now we are officially dropping those deprecated old names
    • Full list of dropped commands and their alternative:
      • api-keysapi-key list
      • devices supporteddevice-type list
      • scandevice detect
      • devicesdevice list
      • logsdevice logs
      • notesdevice note
      • sshdevice ssh
      • tunneldevice tunnel
      • envsenv list
      • env addenv set
      • fleetsfleet list
      • orgsorganization list
      • releasesrelease list
      • key addssh-key add
      • keyssh-key
      • keysssh-key list
      • key listssh-key list
      • key rmssh-key rm
      • tagstag list
  • device note: Drop the --dev flag in favor of the standardized --device
  • Use oclif's native json support instead of manually adding it
    • Improve developer experience
    • Drop support for the shorthand -j
  • Replace manual completion generation with @​oclif/plugin-autocomplete
    • Change how to set up auto completion. Simply run balena autocomplete now for easy instructions!
  • Replace custom version command with @​oclif/plugin-version
    • Improve developer experience
    • Make the verbose output include a lot more useful information
    • Replace the -a flag with --verbose
    • Drop the -j shorthand of --json
  • Drop the balena os build-config command in favor of balena config generate
    • This means that we now have a single command for generating a config.json: balena config generate. This should remove any confusion as to why we had two commands (which we were also not sure, but it looks like it has to do with us releasing unmanaged ResinOS images as well 7 years back).
  • config generate: Drop the deprecated no-op --generate-device-api-key flag
    • The command was already able to figure out when it had to generate one based on the rest of the params anyway.
  • os configure
    • Make --config incompatible with all other flags other than --system-connection
    • Enforce --device-type dependency on --fleet
    • Drop the --version flag & fail when the image version can't be detected
    • (also applies to os initialize): Fail when a device-type.json can't be detected in the provided image
  • device init: Make --config incompatible with all other flags other than --drive, --version, & --yes
  • Replace the semver field with raw_version in balena release and balena release list
    • The raw_version is the correct field to use since it can uniquely identify a release per fleet, includes any revN or draft timestamp suffix, and is also what the UI uses.
Other changes
  • release: Include the build_log in the --json results
  • Fix lzma-native build on node24 on Linux ARM runners
  • device init:
    • Fix node DEP0190 deprecation warning
    • Validate that the provided config file paths exist

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@balena-renovate balena-renovate Bot enabled auto-merge November 17, 2025 20:17
@balena-renovate balena-renovate Bot force-pushed the renovate/balena-io-balena-cli-23.x branch from e226646 to 4a2b999 Compare November 18, 2025 04:20
@balena-renovate balena-renovate Bot force-pushed the renovate/balena-io-balena-cli-23.x branch from 4a2b999 to 8de766f Compare November 18, 2025 12:23
@balena-renovate balena-renovate Bot force-pushed the renovate/balena-io-balena-cli-23.x branch from 8de766f to 6680911 Compare November 18, 2025 16:24
@balena-renovate balena-renovate Bot force-pushed the renovate/balena-io-balena-cli-23.x branch from 6680911 to 02382b1 Compare November 19, 2025 16:23
@balena-renovate balena-renovate Bot force-pushed the renovate/balena-io-balena-cli-23.x branch 3 times, most recently from 97a76a4 to 9eeff65 Compare November 21, 2025 16:17
@balena-renovate balena-renovate Bot force-pushed the renovate/balena-io-balena-cli-23.x branch from e2a29c7 to 4707a19 Compare December 1, 2025 06:29
@balena-renovate balena-renovate Bot temporarily deployed to bm.balena-dev.com December 1, 2025 06:34 Inactive
@balena-renovate balena-renovate Bot force-pushed the renovate/balena-io-balena-cli-23.x branch from 4707a19 to eea0527 Compare December 1, 2025 08:24
@balena-renovate balena-renovate Bot temporarily deployed to bm.balena-dev.com December 1, 2025 08:29 Inactive
@balena-renovate balena-renovate Bot force-pushed the renovate/balena-io-balena-cli-23.x branch from eea0527 to 06ede9f Compare December 2, 2025 12:32
@balena-renovate balena-renovate Bot temporarily deployed to bm.balena-dev.com December 2, 2025 12:40 Inactive
@balena-renovate balena-renovate Bot force-pushed the renovate/balena-io-balena-cli-23.x branch from 06ede9f to 1d54378 Compare December 2, 2025 14:41
@balena-renovate balena-renovate Bot temporarily deployed to bm.balena-dev.com December 2, 2025 14:48 Inactive
@balena-renovate balena-renovate Bot force-pushed the renovate/balena-io-balena-cli-23.x branch from 1d54378 to 73d3057 Compare December 3, 2025 22:22
@balena-renovate balena-renovate Bot temporarily deployed to bm.balena-dev.com December 3, 2025 22:29 Inactive
@balena-renovate balena-renovate Bot force-pushed the renovate/balena-io-balena-cli-23.x branch from 73d3057 to 5af1828 Compare December 4, 2025 00:52
Update balena-io/balena-cli from 22.5.5 to 23.2.32

Change-type: patch
@balena-renovate

Copy link
Copy Markdown
Contributor Author

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 23.x releases. But if you manually upgrade to 23.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant