Update dependency mqtt to v5.16.0 #74

Open
teckids_renovate_bot wants to merge 1 commit from renovate/mqtt-5.x-lockfile into main

This PR contains the following updates:

Package Change Age Confidence
mqtt 5.15.2 → 5.16.0 age confidence

Release Notes

mqttjs/MQTT.js (mqtt)

v5.16.0

Compare Source

Bug Fixes

5.15.2 (2026-07-06)

Bug Fixes

5.15.1 (2026-03-24)


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [mqtt](https://github.com/mqttjs/MQTT.js) | [`5.15.2` → `5.16.0`](https://renovatebot.com/diffs/npm/mqtt/5.15.2/5.16.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/mqtt/5.16.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mqtt/5.15.2/5.16.0?slim=true) | --- ### Release Notes <details> <summary>mqttjs/MQTT.js (mqtt)</summary> ### [`v5.16.0`](https://github.com/mqttjs/MQTT.js/blob/HEAD/CHANGELOG.md#5160-2026-09-16) [Compare Source](https://github.com/mqttjs/MQTT.js/compare/v5.15.2...v5.16.0) ##### Bug Fixes - bounds-check the suback granted array against subscriptions sent (GHSA-rj8f-4655-cgg2) ([#&#8203;2061](https://github.com/mqttjs/MQTT.js/issues/2061)) ([46ee23f](https://github.com/mqttjs/MQTT.js/commit/46ee23f3f1d4a8ef21e5c2b26ea24818f1b2dce3)), closes [#&#8203;2060](https://github.com/mqttjs/MQTT.js/issues/2060) - enforce MQTT 5 Receive Maximum for inbound QoS 2 messages (GHSA-h8jm-hm87-fqw3) ([#&#8203;2065](https://github.com/mqttjs/MQTT.js/issues/2065)) ([ec5bf3e](https://github.com/mqttjs/MQTT.js/commit/ec5bf3ea16e960313d670f280b0eac91dac35fe2)), closes [#&#8203;2064](https://github.com/mqttjs/MQTT.js/issues/2064) [#&#8203;2063](https://github.com/mqttjs/MQTT.js/issues/2063) [#&#8203;2062](https://github.com/mqttjs/MQTT.js/issues/2062) [#&#8203;2061](https://github.com/mqttjs/MQTT.js/issues/2061) [#&#8203;2060](https://github.com/mqttjs/MQTT.js/issues/2060) - keep broker CONNACK properties out of the user options object (GHSA-gfxc-3w7m-8ch4) ([#&#8203;2062](https://github.com/mqttjs/MQTT.js/issues/2062)) ([3db16f5](https://github.com/mqttjs/MQTT.js/commit/3db16f54a12e46e496c6fca352d6bb8324f8634e)), closes [#&#8203;2061](https://github.com/mqttjs/MQTT.js/issues/2061) [#&#8203;2060](https://github.com/mqttjs/MQTT.js/issues/2060) [#&#8203;2060](https://github.com/mqttjs/MQTT.js/issues/2060) [#&#8203;2060](https://github.com/mqttjs/MQTT.js/issues/2060) - reject a duplicate CONNACK instead of re-running connection setup (GHSA-8phv-jwjm-93rr) ([#&#8203;2064](https://github.com/mqttjs/MQTT.js/issues/2064)) ([7108ea5](https://github.com/mqttjs/MQTT.js/commit/7108ea597458e6c538e88f3ac1cf9f7c2001dcc2)), closes [#&#8203;2063](https://github.com/mqttjs/MQTT.js/issues/2063) [#&#8203;2062](https://github.com/mqttjs/MQTT.js/issues/2062) [#&#8203;2061](https://github.com/mqttjs/MQTT.js/issues/2061) [#&#8203;2060](https://github.com/mqttjs/MQTT.js/issues/2060) - reject an unsolicited AUTH instead of crashing the process (GHSA-fwrw-4mhv-wxvm) ([#&#8203;2063](https://github.com/mqttjs/MQTT.js/issues/2063)) ([b511e7b](https://github.com/mqttjs/MQTT.js/commit/b511e7b7d9a927bc3af4c146b65e493c652a11ec)), closes [#&#8203;2062](https://github.com/mqttjs/MQTT.js/issues/2062) [#&#8203;2061](https://github.com/mqttjs/MQTT.js/issues/2061) [#&#8203;2060](https://github.com/mqttjs/MQTT.js/issues/2060) [#&#8203;2060](https://github.com/mqttjs/MQTT.js/issues/2060) - reject unsolicited MQTT 5 topic alias instead of crashing (GHSA-c8jq-r765-cq7g) ([#&#8203;2060](https://github.com/mqttjs/MQTT.js/issues/2060)) ([7d07757](https://github.com/mqttjs/MQTT.js/commit/7d07757a1498f52243c64cb8c2dad416cf15449d)) #### [5.15.2](https://github.com/mqttjs/MQTT.js/compare/v5.15.1...v5.15.2) (2026-07-06) ##### Bug Fixes - **connect/tls:** don't overwrite an explicit servername (SNI) ([#&#8203;2051](https://github.com/mqttjs/MQTT.js/issues/2051)) ([cd1d780](https://github.com/mqttjs/MQTT.js/commit/cd1d780f5742852e9bcf46dbd9732e0c5e20823a)) - support relative WebSocket URLs ([#&#8203;2049](https://github.com/mqttjs/MQTT.js/issues/2049)) ([c4be563](https://github.com/mqttjs/MQTT.js/commit/c4be5633594b5b839862440aa78125f22021f8e6)), closes [#&#8203;2035](https://github.com/mqttjs/MQTT.js/issues/2035) #### [5.15.1](https://github.com/mqttjs/MQTT.js/compare/v5.15.0...v5.15.1) (2026-03-24) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzIuNiIsInVwZGF0ZWRJblZlciI6IjQ0LjEzMi42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Update dependency mqtt to v5.16.0
Some checks failed
renovate/stability-days Updates have met minimum release age requirement
renovate/artifacts Artifact file update failure
3a65474499
Author
Member

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: @sveltejs/kit@2.22.2
npm error Found: vite@8.3.3
npm error node_modules/vite
npm error   peerOptional vite@"^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" from vitefu@1.1.3
npm error   node_modules/vitefu
npm error     vitefu@"^1.0.6" from @sveltejs/kit@2.22.2
npm error     node_modules/@sveltejs/kit
npm error       peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-auto@3.3.1
npm error       node_modules/@sveltejs/adapter-auto
npm error         dev @sveltejs/adapter-auto@"3.3.1" from the root project
npm error       2 more (@sveltejs/adapter-static, the root project)
npm error     vitefu@"^1.0.3" from @sveltejs/vite-plugin-svelte@4.0.4
npm error     node_modules/@sveltejs/vite-plugin-svelte
npm error       peer @sveltejs/vite-plugin-svelte@"^3.0.0 || ^4.0.0-next.1 || ^5.0.0 || ^6.0.0-next.0" from @sveltejs/kit@2.22.2
npm error       node_modules/@sveltejs/kit
npm error         peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-auto@3.3.1
npm error         node_modules/@sveltejs/adapter-auto
npm error         2 more (@sveltejs/adapter-static, the root project)
npm error       2 more (@sveltejs/vite-plugin-svelte-inspector, the root project)
npm error   dev vite@"8.3.3" from the root project
npm error
npm error Could not resolve dependency:
npm error peer vite@"^5.0.3 || ^6.0.0 || ^7.0.0-beta.0" from @sveltejs/kit@2.22.2
npm error node_modules/@sveltejs/kit
npm error   peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-auto@3.3.1
npm error   node_modules/@sveltejs/adapter-auto
npm error     dev @sveltejs/adapter-auto@"3.3.1" from the root project
npm error   peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-static@3.0.10
npm error   node_modules/@sveltejs/adapter-static
npm error     dev @sveltejs/adapter-static@"3.0.10" from the root project
npm error   1 more (the root project)
npm error
npm error Conflicting peer dependency: vite@7.3.7
npm error node_modules/vite
npm error   peer vite@"^5.0.3 || ^6.0.0 || ^7.0.0-beta.0" from @sveltejs/kit@2.22.2
npm error   node_modules/@sveltejs/kit
npm error     peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-auto@3.3.1
npm error     node_modules/@sveltejs/adapter-auto
npm error       dev @sveltejs/adapter-auto@"3.3.1" from the root project
npm error     peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-static@3.0.10
npm error     node_modules/@sveltejs/adapter-static
npm error       dev @sveltejs/adapter-static@"3.0.10" from the root project
npm error     1 more (the root project)
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2026-10-10T08_16_23_918Z-eresolve-report.txt
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2026-10-10T08_16_23_918Z-debug-0.log

### ⚠️ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: package-lock.json ``` npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options. npm error code ERESOLVE npm error ERESOLVE could not resolve npm error npm error While resolving: @sveltejs/kit@2.22.2 npm error Found: vite@8.3.3 npm error node_modules/vite npm error peerOptional vite@"^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" from vitefu@1.1.3 npm error node_modules/vitefu npm error vitefu@"^1.0.6" from @sveltejs/kit@2.22.2 npm error node_modules/@sveltejs/kit npm error peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-auto@3.3.1 npm error node_modules/@sveltejs/adapter-auto npm error dev @sveltejs/adapter-auto@"3.3.1" from the root project npm error 2 more (@sveltejs/adapter-static, the root project) npm error vitefu@"^1.0.3" from @sveltejs/vite-plugin-svelte@4.0.4 npm error node_modules/@sveltejs/vite-plugin-svelte npm error peer @sveltejs/vite-plugin-svelte@"^3.0.0 || ^4.0.0-next.1 || ^5.0.0 || ^6.0.0-next.0" from @sveltejs/kit@2.22.2 npm error node_modules/@sveltejs/kit npm error peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-auto@3.3.1 npm error node_modules/@sveltejs/adapter-auto npm error 2 more (@sveltejs/adapter-static, the root project) npm error 2 more (@sveltejs/vite-plugin-svelte-inspector, the root project) npm error dev vite@"8.3.3" from the root project npm error npm error Could not resolve dependency: npm error peer vite@"^5.0.3 || ^6.0.0 || ^7.0.0-beta.0" from @sveltejs/kit@2.22.2 npm error node_modules/@sveltejs/kit npm error peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-auto@3.3.1 npm error node_modules/@sveltejs/adapter-auto npm error dev @sveltejs/adapter-auto@"3.3.1" from the root project npm error peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-static@3.0.10 npm error node_modules/@sveltejs/adapter-static npm error dev @sveltejs/adapter-static@"3.0.10" from the root project npm error 1 more (the root project) npm error npm error Conflicting peer dependency: vite@7.3.7 npm error node_modules/vite npm error peer vite@"^5.0.3 || ^6.0.0 || ^7.0.0-beta.0" from @sveltejs/kit@2.22.2 npm error node_modules/@sveltejs/kit npm error peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-auto@3.3.1 npm error node_modules/@sveltejs/adapter-auto npm error dev @sveltejs/adapter-auto@"3.3.1" from the root project npm error peer @sveltejs/kit@"^2.0.0" from @sveltejs/adapter-static@3.0.10 npm error node_modules/@sveltejs/adapter-static npm error dev @sveltejs/adapter-static@"3.0.10" from the root project npm error 1 more (the root project) npm error npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution. npm error npm error npm error For a full report see: npm error /tmp/renovate/cache/others/npm/_logs/2026-10-10T08_16_23_918Z-eresolve-report.txt npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2026-10-10T08_16_23_918Z-debug-0.log ```
teckids_renovate_bot force-pushed renovate/mqtt-5.x-lockfile from 3a65474499
Some checks failed
renovate/stability-days Updates have met minimum release age requirement
renovate/artifacts Artifact file update failure
to f28a9b48e7
Some checks failed
renovate/stability-days Updates have met minimum release age requirement
renovate/artifacts Artifact file update failure
2026-10-09 18:10:35 +02:00
Compare
teckids_renovate_bot force-pushed renovate/mqtt-5.x-lockfile from f28a9b48e7
Some checks failed
renovate/stability-days Updates have met minimum release age requirement
renovate/artifacts Artifact file update failure
to eb8d840d60
Some checks failed
renovate/stability-days Updates have met minimum release age requirement
renovate/artifacts Artifact file update failure
2026-10-09 21:06:26 +02:00
Compare
Some checks failed
renovate/stability-days Updates have met minimum release age requirement
renovate/artifacts Artifact file update failure
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/mqtt-5.x-lockfile:renovate/mqtt-5.x-lockfile
git switch renovate/mqtt-5.x-lockfile

Merge

Merge the changes and update on Forgejo.
git switch main
git merge --no-ff renovate/mqtt-5.x-lockfile
git switch renovate/mqtt-5.x-lockfile
git rebase main
git switch main
git merge --ff-only renovate/mqtt-5.x-lockfile
git switch renovate/mqtt-5.x-lockfile
git rebase main
git switch main
git merge --no-ff renovate/mqtt-5.x-lockfile
git switch main
git merge --squash renovate/mqtt-5.x-lockfile
git switch main
git merge --ff-only renovate/mqtt-5.x-lockfile
git switch main
git merge renovate/mqtt-5.x-lockfile
git push origin main
Sign in to join this conversation.
No reviewers
No labels
Doing
To Do
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
teckids/kalle-ui!74
No description provided.