Skip to content

fix(deps): update all non-major dependencies #30

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 5, 2025

This PR contains the following updates:

Package Change Age Confidence
@sxzz/eslint-config ^7.0.1 -> ^7.1.2 age confidence
@sxzz/prettier-config ^2.2.1 -> ^2.2.3 age confidence
@sxzz/test-utils ^0.5.6 -> ^0.5.9 age confidence
@types/node (source) ^22.15.21 -> ^22.17.1 age confidence
bumpp ^10.1.1 -> ^10.2.2 age confidence
eslint (source) ^9.27.0 -> ^9.33.0 age confidence
pnpm (source) 10.11.0 -> 10.14.0 age confidence
prettier (source) ^3.5.3 -> ^3.6.2 age confidence
rollup (source) ^4.41.0 -> ^4.46.2 age confidence
tsdown ^0.12.1 -> ^0.14.0 age confidence
tsx (source) ^4.19.4 -> ^4.20.3 age confidence
typescript (source) ^5.8.3 -> ^5.9.2 age confidence
unplugin (source) ^2.3.4 -> ^2.3.5 age confidence
vite (source) ^7.0.0 -> ^7.1.1 age confidence
vitest (source) ^3.1.4 -> ^3.2.4 age confidence
vue (source) ^3.5.14 -> ^3.5.18 age confidence

Release Notes

sxzz/eslint-config (@​sxzz/eslint-config)

v7.1.2

Compare Source

   🚀 Features
    View changes on GitHub

v7.1.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v7.1.0

Compare Source

   🚀 Features
    View changes on GitHub

v7.0.6

Compare Source

No significant changes

    View changes on GitHub

v7.0.5

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v7.0.4

Compare Source

No significant changes

    View changes on GitHub

v7.0.3

Compare Source

No significant changes

    View changes on GitHub

v7.0.2

Compare Source

No significant changes

    View changes on GitHub
sxzz/prettier-config (@​sxzz/prettier-config)

v2.2.3

Compare Source

v2.2.2

Compare Source

sxzz/test-utils (@​sxzz/test-utils)

v0.5.9

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v0.5.8

Compare Source

   🚀 Features
    View changes on GitHub

v0.5.7

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
antfu-collective/bumpp (bumpp)

v10.2.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v10.2.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v10.2.0

Compare Source

   🚀 Features
    View changes on GitHub
eslint/eslint (eslint)

v9.33.0

Compare Source

v9.32.0

Compare Source

v9.31.0

Compare Source

v9.30.1

Compare Source

v9.30.0

Compare Source

v9.29.0

Compare Source

v9.28.0

Compare Source

pnpm/pnpm (pnpm)

v10.14.0

Compare Source

Minor Changes
  • Added support for JavaScript runtime resolution

    Declare Node.js, Deno, or Bun in devEngines.runtime (inside package.json) and let pnpm download and pin it automatically.

    Usage example:

    {
      "devEngines": {
        "runtime": {
          "name": "node",
          "version": "^24.4.0",
          "onFail": "download" (we only support the "download" value for now)
        }
      }
    }

    How it works:

    1. pnpm install resolves your specified range to the latest matching runtime version.
    2. The exact version (and checksum) is saved in the lockfile.
    3. Scripts use the local runtime, ensuring consistency across environments.

    Why this is better:

    1. This new setting supports also Deno and Bun (vs. our Node-only settings useNodeVersion and executionEnv.nodeVersion)
    2. Supports version ranges (not just a fixed version).
    3. The resolved version is stored in the pnpm lockfile, along with an integrity checksum for future validation of the Node.js content's validity.
    4. It can be used on any workspace project (like executionEnv.nodeVersion). So, different projects in a workspace can use different runtimes.
    5. For now devEngines.runtime setting will install the runtime locally, which we will improve in future versions of pnpm by using a shared location on the computer.

    Related PR: #​9755.

  • Add --cpu, --libc, and --os to pnpm install, pnpm add, and pnpm dlx to customize supportedArchitectures via the CLI #​7510.

Patch Changes
  • Fix a bug in which pnpm add downloads packages whose libc differ from pnpm.supportedArchitectures.libc.
  • The integrities of the downloaded Node.js artifacts are verified #​9750.
  • Allow dlx to parse CLI flags and options between the dlx command and the command to run or between the dlx command and -- #​9719.
  • pnpm install --prod should removing hoisted dev dependencies #​9782.
  • Fix an edge case bug causing local tarballs to not re-link into the virtual store. This bug would happen when changing the contents of the tarball without renaming the file and running a filtered install.
  • Fix a bug causing pnpm install to incorrectly assume the lockfile is up to date after changing a local tarball that has peers dependencies.

v10.13.1

Compare Source

Patch Changes
  • Run user defined pnpmfiles after pnpmfiles of plugins.

v10.13.0

Compare Source

Minor Changes
  • Added the possibility to load multiple pnpmfiles. The pnpmfile setting can now accept a list of pnpmfile locations #​9702.

  • pnpm will now automatically load the pnpmfile.cjs file from any config dependency named @pnpm/plugin-* or pnpm-plugin-* #​9729.

    The order in which config dependencies are initialized should not matter — they are initialized in alphabetical order. If a specific order is needed, the paths to the pnpmfile.cjs files in the config dependencies can be explicitly listed using the pnpmfile setting in pnpm-workspace.yaml.

Patch Changes
  • When patching dependencies installed via pkg.pr.new, treat them as Git tarball URLs #​9694.
  • Prevent conflicts between local projects' config and the global config in dangerouslyAllowAllBuilds, onlyBuiltDependencies, onlyBuiltDependenciesFile, and neverBuiltDependencies #​9628.
  • Sort keys in pnpm-workspace.yaml with deep #​9701.
  • The pnpm rebuild command should not add pkgs included in ignoredBuiltDependencies to ignoredBuilds in node_modules/.modules.yaml #​9338.
  • Replaced shell-quote with shlex for quoting command arguments #​9381.

v10.12.4

Compare Source

Patch Changes

v10.12.3

Compare Source

Patch Changes
  • Restore hoisting of optional peer dependencies when installing with an outdated lockfile.
    Regression introduced in v10.12.2 by #​9648; resolves #​9685.

v10.12.2

Compare Source

Patch Changes
  • Fixed hoisting with enableGlobalVirtualStore set to true #​9648.
  • Fix the --help and -h flags not working as expected for the pnpm create command.
  • The dependency package path output by the pnpm licenses list --json command is incorrect.
  • Fix a bug in which pnpm deploy fails due to overridden dependencies having peer dependencies causing ERR_PNPM_OUTDATED_LOCKFILE #​9595.

v10.12.1

Minor Changes
  • Experimental. Added support for global virtual stores. When enabled, node_modules contains only symlinks to a central virtual store, rather to node_modules/.pnpm. By default, this central store is located at <store-path>/links (you can find the store path by running pnpm store path).

    In the central virtual store, each package is hard linked into a directory whose name is the hash of its dependency graph. This allows multiple projects on the system to symlink shared dependencies from this central location, significantly improving installation speed when a warm cache is available.

    This is conceptually similar to how NixOS manages packages, using dependency graph hashes to create isolated and reusable package directories.

    To enable the global virtual store, set enableGlobalVirtualStore: true in your root pnpm-workspace.yaml, or globally via:

    pnpm config -g set enable-global-virtual-store true

    NOTE: In CI environments, where caches are typically cold, this setting may slow down installation. pnpm automatically disables the global virtual store when running in CI.

    Related PR: #​8190

  • The pnpm update command now supports updating catalog: protocol dependencies and writes new specifiers to pnpm-workspace.yaml.
  • Added two new CLI options (--save-catalog and --save-catalog-name=<name>) to pnpm add to save new dependencies as catalog entries. catalog: or catalog:<name> will be added to package.json and the package specifier will be added to the catalogs or catalog[<name>] object in pnpm-workspace.yaml #​9425.
  • Semi-breaking. The keys used for side-effects caches have changed. If you have a side-effects cache generated by a previous version of pnpm, the new version will not use it and will create a new cache instead #​9605.
  • Added a new setting called ci for explicitly telling pnpm if the current environment is a CI or not.
Patch Changes
  • Sort versions printed by pnpm patch using semantic versioning rules.
  • Improve the way the error message displays mismatched specifiers. Show differences instead of 2 whole objects #​9598.
  • Revert #​9574 to fix a regression #​9596.

v10.11.1

Compare Source

Patch Changes
  • Fix an issue in which pnpm deploy --legacy creates unexpected directories when the root package.json has a workspace package as a peer dependency #​9550.
  • Dependencies specified via a URL that redirects will only be locked to the target if it is immutable, fixing a regression when installing from GitHub releases. (#​9531)
  • Installation should not exit with an error if strictPeerDependencies is true but all issues are ignored by peerDependencyRules #​9505.
  • Use pnpm_config_ env variables instead of npm_config_ #​9571.
  • Fix a regression (in v10.9.0) causing the --lockfile-only flag on pnpm update to produce a different pnpm-lock.yaml than an update without the flag.
  • Let pnpm deploy work in repos with overrides when inject-workspace-packages=true #​9283.
  • Fixed the problem of path loss caused by parsing URL address. Fixes a regression shipped in pnpm v10.11 via #​9502.
  • pnpm -r --silent run should not print out section #​9563.
prettier/prettier (prettier)

v3.6.2

Compare Source

diff

Markdown: Add missing blank line around code block (#​17675 by @​fisker)
<!-- Input -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

<!-- Prettier 3.6.1 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```
   1. Another
   2. List

<!-- Prettier 3.6.2 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

v3.6.1

Compare Source

diff

TypeScript: Allow const without initializer (#​17650, #​17654 by @​fisker)
// Input
export const version: string;

// Prettier 3.6.0 (--parser=babel-ts)
SyntaxError: Unexpected token (1:21)
> 1 | export const version: string;
    |                     ^

// Prettier 3.6.0 (--parser=oxc-ts)
SyntaxError: Missing initializer in const declaration (1:14)
> 1 | export const version: string;
    |              ^^^^^^^^^^^^^^^

// Prettier 3.6.1
export const version: string;
Miscellaneous: Avoid closing files multiple times (#​17665 by @​43081j)

When reading a file to infer the interpreter from a shebang, we use the
n-readlines library to read the first line in order to get the shebang.

This library closes files when it reaches EOF, and we later try close the same
files again. We now close files only if n-readlines did not already close
them.

v3.6.0

Compare Source

diff

🔗 Release Notes

rollup/rollup (rollup)

v4.46.2

Compare Source

2025-07-29

Bug Fixes
  • Fix in-operator handling for external namespace and when the left side cannot be analyzed (#​6041)
Pull Requests

v4.46.1

Compare Source

2025-07-28

Bug Fixes
  • Do not fail when using the in operator on external namespaces (#​6036)
Pull Requests

v4.46.0

Compare Source

2025-07-27

Features
  • Optimize in checks on namespaces to keep them treeshake-able (#​6029)
Pull Requests

v4.45.3

Compare Source

2025-07-26

Bug Fixes
  • Do not fail build if a const is reassigned but warn instead (#​6020)
  • Fail with a helpful error message if an exported binding is not defined (#​6023)
Pull Requests

v4.45.1

Compare Source

2025-07-15

Bug Fixes
  • Resolve crash when using certain conditional expressions (#​6009)
Pull Requests

v4.45.0

Compare Source

2025-07-12

Features
  • Improve tree-shaking when both branches of a conditional expression return the same boolean value (#​6000)
  • In environments that support both CJS and ESM, prefer the ESM build of Rollup (#​6005)
Bug Fixes
  • Ensure static blocks do not prevent tree-shaking if they access this (#​6001)
Pull Requests

v4.44.2

Compare Source

2025-07-04

Bug Fixes
  • Correctly handle @__PURE__ annotations after new keyword (#​5998)
  • Generate correct source mapping for closing braces of block statements (#​5999)
Pull Requests

v4.44.1

Compare Source

2025-06-26

Bug Fixes
  • Reinstate maxParallelFileOps limit of 1000 to resolve the issue for some (#​5992)
Pull Requests

v4.44.0

Compare Source

2025-06-19

Features
  • Remove limit on maxParallelFileOps as this could break watch mode with the commonjs plugin (#​5986)
Bug Fixes
  • Provide better source mappings when coarse intermediate maps are used (#​5985)
Pull Requests

v4.43.0

Compare Source

2025-06-11

Features
  • Provide new fs option and this.fs API to replace file system (#​5944)
Pull Requests

v4.42.0

Compare Source

2025-06-06

Features
  • Add option to allow the input to be located in the output in watch mode (#​5966)
Pull Requests

v4.41.2

Compare Source

2025-06-06

Bug Fixes
  • Detect named export usages in dynamic imports with then and non-arrow function expressions (#​5977)
  • Do not replace usages of constant variables with their values for readability (#​5968)
Pull Requests

v4.41.1

Compare Source

2025-05-24

Bug Fixes
  • If a plugin calls this.resolve with skipSelf: true, subsequent calls when handling this by the same plugin with same parameters will return null to avoid infinite recursions (#​5945)
Pull Requests
rolldown/tsdown (tsdown)

v0.14.0

Compare Source

   🚨 Breaking Changes
  • Disable expandDirectories for matching fast-glob's behavior  -  by @​sxzz (8171b)
    View changes on GitHub

v0.13.5

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v0.13.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
  • Suppress mixed export warnings if cjsDefault is enabled  -  by @​sxzz (3ffa9)
    View changes on GitHub

v0.13.3

Compare Source

   🚨 Minor Breaking Changes
  • dts.build option should be enable manually for tsc -b  -  by @​sxzz (13146)
   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.13.2

Compare Source

   🚨 Upstream Breaking Changes
   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.13.1

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.13.0

Compare Source

   🚨 Breaking Changes
   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.12.9

Compare Source

   🚀 Features
    View changes on GitHub

v0.12.8

Compare Source

   🚀 Features
   🐞 Bug Fixes
  • Reset lastIndex for regex  -  by [@​b

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label May 5, 2025
Copy link

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from c3e02a4 to 0b0cdc9 Compare May 8, 2025 15:04
@renovate renovate bot changed the title chore(deps): update all non-major dependencies chore(deps): update all non-major dependencies - autoclosed May 9, 2025
@renovate renovate bot closed this May 9, 2025
@renovate renovate bot deleted the renovate/all-minor-patch branch May 9, 2025 01:09
@renovate renovate bot changed the title chore(deps): update all non-major dependencies - autoclosed chore(deps): update all non-major dependencies May 12, 2025
@renovate renovate bot reopened this May 12, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c05dac2 to 0b0cdc9 Compare May 12, 2025 02:34
@renovate renovate bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies May 12, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from b7634bc to 352e6d9 Compare May 16, 2025 02:29
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 19d02a8 to 0186760 Compare July 22, 2025 08:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from d48de67 to 955e701 Compare July 29, 2025 23:50
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from cd0a1e7 to e159fcc Compare August 4, 2025 16:31
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 369814d to 912b79e Compare August 8, 2025 01:36
Copy link

socket-security bot commented Aug 8, 2025

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 48a90b9 to 9b6cb1f Compare August 10, 2025 00:36
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9b6cb1f to 1e6a0e6 Compare August 10, 2025 04:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants