[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
deepl-node (source)	1.22.0 → 1.28.1

---

Release Notes

DeepLcom/deepl-node (deepl-node)

v1.28.1

Compare Source

Security

• Bumped axios to ^1.20.0 and adm-zip to ^0.6.1 to resolve
  high-severity npm audit advisories in production dependencies.

v1.28.0

Compare Source

Added

• Added support for using multiple glossaries in text and document translation
  via the glossaryIds option (up to 5 glossary IDs) in TranslateTextOptions
  and DocumentTranslateOptions.
• Added support for style rules in document translation via the styleRule
  option in DocumentTranslateOptions.
• Added support for translation memories in document translation via the
  translationMemory and translationMemoryThreshold options in
  DocumentTranslateOptions.
• Added support for the translation memory management APIs:
  getTranslationMemory(), listTranslationMemorySegments(),
  deleteTranslationMemory(), createTranslationMemoryImport(),
  uploadTranslationMemoryFile(), createTranslationMemoryExport(),
  getTranslationMemoryJob(), isTranslationMemoryJobComplete(), and
  downloadTranslationMemoryExport(), along with the
  importTranslationMemoryFromFilepath() and
  exportTranslationMemoryToFilepath() convenience functions that create the
  job, transfer the TMX file, and wait for the job to finish. Because the API
  detects the file upload asynchronously, an import job keeps reporting
  awaiting_input for a while after the upload; the wait loop polls through
  that status and accepts an optional timeoutMs to bound the wait.
• Added the TranslationMemorySegments, TranslationMemorySegment,
  TranslationMemoryTargetSegment, TranslationMemorySegmentsOptions,
  TranslationMemoryImport, TranslationMemoryExport, TranslationMemoryJob,
  TranslationMemoryJobResult, and TranslationMemoryJobStatus types.
• Added optional creationTime and updatedTime fields to
  TranslationMemoryInfo.

Changed

• Requests to the pre-signed storage URLs used for translation memory import and export now
  go through a separate HTTP client that is constructed without the DeepL Authorization
  header, instead of stripping it per request. Headers supplied via TranslatorOptions.headers
  are no longer sent to those URLs either — only the User-Agent and the per-request
  Content-Type. Proxy settings are unaffected.

Fixed

• The debug log helper no longer crashes when axios error fields return a non-primitive from toString or Symbol.toPrimitive.

Security

• Bumped axios to ^1.19.0, form-data to ^3.0.5, and adm-zip to
  ^0.6.0 to resolve high-severity npm audit advisories in production
  dependencies.

v1.27.0

Compare Source

Changed

• Replaced the uuid dependency with Node's built-in crypto.randomUUID().
  Resolves GHSA-w5hq-g745-h8pq (uuid <14.0.0) and removes a runtime
  dependency.
• Bumped minimum Node version from >=12.0 to >=14.17. Node 12 reached
  end of life in April 2022, and crypto.randomUUID() is available from
  Node 14.17 onward.

Fixed

• HTTP requests that fail with ECONNRESET, EPIPE, or EAI_AGAIN are now
  retried. Previously these were classified as non-retryable, surfacing
  transient transport failures (e.g. stale keep-alive sockets) as hard errors
  on the first attempt. Behavior now aligns with deepl-python.

Security

• Bump follow-redirects to 1.16.0 due to GHSA-r4q5-vmmm-2653.

v1.26.0

Compare Source

Added

• Added support for translation memories in text translation via
  translationMemory and translationMemoryThreshold options in
  translateText().
• Added listTranslationMemories() method to the DeepLClient class for
  listing available translation memories.

Changed

• Bumped axios dependency due to CVE-2025-62718

Fixed

• Fix write tests that broke from language expansion

v1.25.0

Compare Source

Added

• Added new language constants from January 2026 API release of 81 new languages.
• Added jsonBody option to SendRequestOptions, enabling JSON-encoded API calls.
• Added support for style rules CRUD endpoints in the DeepLClient class:
  createStyleRule(), getStyleRule(), updateStyleRuleName(),
  updateStyleRuleConfiguredRules(), and deleteStyleRule().
• Added support for style rule custom instruction CRUD endpoints in the
  DeepLClient class: createStyleRuleCustomInstruction(),
  getStyleRuleCustomInstruction(), updateStyleRuleCustomInstruction(),
  and deleteStyleRuleCustomInstruction().
  Please refer to the README for usage instructions.

Changed

• Updated formality tests to accept either formal or informal output when using default formality,
  since default formality is now automatic.
• Removed Node 12 from the CI as it broke and is end-of-life.
• Updated our model type tests to expect the model_type_used to be populated when the model_type is specified in the request
• Updated a tag handling test to add a missing </p> tag
• Improved NotFoundException error message by removing the misleading "check server_url" suggestion.
• Bumped axios dependency due to CVE-2026-25639

v1.24.0

Compare Source

Added

• Added tagHandlingVersion parameter to translateText() to specify which version of the tag handling algorithm to use. Options are v1 and v2.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	deepl-node@​1.22.0 ⏵ 1.28.1	+1

View full report