-
Notifications
You must be signed in to change notification settings - Fork 215
chore(deps): update all non-major dependencies #324
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
renovate
wants to merge
1
commit into
main
Choose a base branch
from
renovate/all-minor-patch
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The latest updates on your projects. Learn more about Vercel for GitHub.
|
commit: |
5820eab
to
4ca8cb4
Compare
4ca8cb4
to
a8ed000
Compare
a8ed000
to
e698609
Compare
e698609
to
73978be
Compare
73978be
to
3f44d9b
Compare
3f44d9b
to
ba96921
Compare
ba96921
to
b34da5a
Compare
b34da5a
to
05681c8
Compare
05681c8
to
960c61c
Compare
960c61c
to
1b55cc3
Compare
1b55cc3
to
e4bd4b9
Compare
e4bd4b9
to
a2c81a5
Compare
a2c81a5
to
6565193
Compare
72b5486
to
6b0d907
Compare
6b0d907
to
3c80153
Compare
3c80153
to
00ee2cc
Compare
00ee2cc
to
70a6fbb
Compare
70a6fbb
to
9989cea
Compare
9989cea
to
a49fd51
Compare
a49fd51
to
fc1c500
Compare
fc1c500
to
8a194ac
Compare
8a194ac
to
7dce402
Compare
7dce402
to
d1714b8
Compare
d1714b8
to
4ad139f
Compare
4ad139f
to
54983d5
Compare
54983d5
to
7215765
Compare
7215765
to
e332009
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Note
Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot]
.This notice will be removed on 2025-10-07.
This PR contains the following updates:
^7.28.2
->^7.28.4
^7.28.2
->^7.28.4
^9.32.0
->^9.37.0
^0.3.12
->^0.3.13
^0.3.29
->^0.3.31
^3.9.2
->^3.13.0
^24.2.0
->^24.6.2
^1.4.0
->^1.5.0
3.0.8
->3.1.0
3.0.8
->3.1.0
3.0.8
->3.1.0
^10.2.2
->^10.2.3
^5.65.18
->^5.65.20
^9.32.0
->^9.37.0
^10.4.0
->^10.5.0
^16.1.4
->^16.2.3
^0.52.2
->^0.53.0
10.14.0
->10.18.0
^3.9.2
->^3.13.0
^5.9.2
->^5.9.3
^8.39.0
->^8.45.0
^7.0.6
->^7.1.9
^3.5.18
->^3.5.22
3.0.8
->3.1.0
Release Notes
babel/babel (@babel/standalone)
v7.28.4
Compare Source
🏠 Internal
babel-core
,babel-helper-check-duplicate-nodes
,babel-traverse
,babel-types
babel-plugin-transform-regenerator
transform-regenerator
(@liuxingbaoyu)babel-core
v7.28.3
Compare Source
👓 Spec Compliance
babel-helper-create-class-features-plugin
,babel-plugin-proposal-decorators
,babel-plugin-transform-class-static-block
,babel-preset-env
🐛 Bug Fix
babel-parser
import("./a", {with:{},})
(@easrng)💅 Polish
babel-plugin-transform-regenerator
,babel-plugin-transform-runtime
📝 Documentation
🏠 Internal
scripts
andbabel-worker.cjs
(@JLHwung)🔬 Output optimization
babel-plugin-proposal-destructuring-private
,babel-plugin-proposal-do-expressions
eslint/eslint (@eslint/js)
v9.37.0
Compare Source
v9.36.0
Compare Source
Features
47afcf6
feat: correctpreserve-caught-error
edge cases (#20109) (Francesco Trotta)Bug Fixes
75b74d8
fix: add missing rule option types (#20127) (ntnyq)1c0d850
fix: updateeslint-all.js
to useObject.freeze
forrules
object (#20116) (루밀LuMir)7d61b7f
fix: add missing scope types toScope.type
(#20110) (Pixel998)7a670c3
fix: correct rule option typings inrules.d.ts
(#20084) (Pixel998)Documentation
b73ab12
docs: update examples to usedefineConfig
(#20131) (sethamus)31d9392
docs: fix typos (#20118) (Pixel998)c7f861b
docs: Update README (GitHub Actions Bot)6b0c08b
docs: Update README (GitHub Actions Bot)91f97c5
docs: Update README (GitHub Actions Bot)Chores
12411e8
chore: upgrade @eslint/js@9.36.0 (#20139) (Milos Djermanovic)488cba6
chore: package.json update for @eslint/js release (Jenkins)bac82a2
ci: simplify renovate configuration (#19907) (唯然)c00bb37
ci: bump actions/labeler from 5 to 6 (#20090) (dependabot[bot])fee751d
refactor: usedefaultOptions
in rules (#20121) (Pixel998)1ace67d
chore: update example to usedefineConfig
(#20111) (루밀LuMir)4821963
test: add missing loc information to error objects in rule tests (#20112) (루밀LuMir)b42c42e
chore: disallow use of deprecatedtype
property in core rule tests (#20094) (Milos Djermanovic)7bb498d
test: remove deprecatedtype
property from core rule tests (#20093) (Pixel998)e10cf2a
ci: bump actions/setup-node from 4 to 5 (#20089) (dependabot[bot])5cb0ce4
refactor: usemeta.defaultOptions
inpreserve-caught-error
(#20080) (Pixel998)f9f7cb5
chore: package.json update for eslint-config-eslint release (Jenkins)81764b2
chore: updateeslint
peer dependency ineslint-config-eslint
(#20079) (Milos Djermanovic)v9.35.0
Compare Source
v9.34.0
Compare Source
v9.33.0
Compare Source
jridgewell/sourcemaps (@jridgewell/gen-mapping)
v0.3.13
Compare Source
default
subpath export:aab8d72
export default
intomodule.exports =
in UMD plugin:cf85c75
Full Changelog: jridgewell/sourcemaps@gen-mapping/0.3.12...gen-mapping/0.3.13
jridgewell/sourcemaps (@jridgewell/trace-mapping)
v0.3.31
Compare Source
generatedPositionFor
: #42Full Changelog: jridgewell/sourcemaps@trace-mapping/0.3.30...trace-mapping/0.3.31
v0.3.30
Compare Source
default
subpath export:aab8d72
export default
intomodule.exports =
in UMD plugin:cf85c75
Full Changelog: jridgewell/sourcemaps@trace-mapping/0.3.29...trace-mapping/0.3.30
shikijs/shiki (@shikijs/monaco)
v3.13.0
Compare Source
🚀 Features
View changes on GitHub
v3.12.3
Compare Source
🐞 Bug Fixes
@shikijs/twoslash
version specifier - by @9romise in #1078 (a1cde)View changes on GitHub
v3.12.2
Compare Source
🐞 Bug Fixes
onTwoslashError
return value handling - by @Karibash in #1070 (e86b0)View changes on GitHub
v3.12.1
Compare Source
No significant changes
View changes on GitHub
v3.12.0
Compare Source
🚀 Features
🐞 Bug Fixes
View changes on GitHub
v3.11.0
Compare Source
🚀 Features
enforce
options toShikiTransformer
- by @serkodev and @antfu in #1062 (8ad05)View changes on GitHub
v3.10.0
Compare Source
🚀 Features
View changes on GitHub
vuejs/babel-plugin-jsx (@vue/babel-plugin-jsx)
v1.5.0
Compare Source
🚀 Features
View changes on GitHub
vuejs/language-tools (@vue/language-core)
v3.1.0
Compare Source
Performance
Other Changes
antfu-collective/bumpp (bumpp)
v10.2.3
Compare Source
🐞 Bug Fixes
-a
alias support for--all
- by @kingyue737 in #93 (7c0bb)View changes on GitHub
codemirror/basic-setup (codemirror)
v5.65.20
Compare Source
v5.65.19
Compare Source
eslint/eslint (eslint)
v9.37.0
Compare Source
v9.36.0
Compare Source
v9.35.0
Compare Source
v9.34.0
Compare Source
v9.33.0
Compare Source
vuejs/eslint-plugin-vue (eslint-plugin-vue)
v10.5.0
Compare Source
Minor Changes
ignoredObjectNames
option tovue/no-async-in-computed-properties
(#2927)ignorePattern
option tovue/no-v-html
(#2857)sortLineLength
option tovue/attributes-order
(#2759)vue/component-name-in-template-casing
globals
option to support regex patterns (#2928)vue/valid-define-options
to allow local literal constant references (#2920)vue/no-mutating-props
andvue/no-side-effects-in-computed-properties
rules to detectObject.assign
mutations (#2929)@stylistic/eslint-plugin
as optional peer dependency (#2884)Patch Changes
vue/define-macros-order
to ignore enum declarations anddeclare
statements (#2918)lint-staged/lint-staged (lint-staged)
v16.2.3
Compare Source
Patch Changes
27cd541
Thanks @iiroj! - When using--fail-on-changes
, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.v16.2.2
Compare Source
Patch Changes
#1667
699f95d
Thanks @iiroj! - The backup stash will not be dropped when using--fail-on-changes
and there are errors. When reverting to original state is disabled (via--no-revert
or--fail-on-changes
), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:
v16.2.1
Compare Source
Patch Changes
#1664
8277b3b
Thanks @iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions isreadonly string[]
and can't be mutated. Thanks @outslept!#1654
70b9af3
Thanks @iiroj! - This version has been published from GitHub Actions using Trusted Publishing for npm packages.#1659
4996817
Thanks @iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there arepackage.json
files in the working directory. This situation might happen when running lint-staged for a single package in a monorepo.#1654
7021f0a
Thanks @iiroj! - Return the caret semver range (^
) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates to lint-staged. This was changed in 16.2.0 after the vulnerability issues withchalk
anddebug
, which were also removed in the same version.Given the recent vulnerabilities in the npm ecosystem, it's best to be very careful when updating dependencies.
v16.2.0
Compare Source
Minor Changes
#1615
99eb742
Thanks @iiroj! - Added a new option--fail-on-changes
to make lint-staged exit with code 1 when tasks modify any files, making theprecommit
hook fail. This is similar to thegit diff --exit-code
option. Using this flag also implies the--no-revert
flag which means any changes made my tasks will be left in the working tree after failing, so that they can be manually staged and the commit tried again.#1611
cd05fd3
Thanks @rlorenzo! - Added a new option--continue-on-error
so that lint-staged will run all tasks to completion even if some of them fail. By default, lint-staded will exit early on the first failure.#1637
82fcc07
Thanks @iiroj! - Internal lint-staged errors are now thrown and visible in the console output. Previously they were caught with the process exit code set to 1, but not logged. This happens when, for example, there's a syntax error in the lint-staged configuration file.#1647
a5ecc06
Thanks @iiroj! - Remove debug as a dependency due to recent malware issue; read more at debug-js/debug#1005. Because of this, theDEBUG
environment variable is no longer supported — use the--debug
to enable debugging#1636
8db2717
Thanks @iiroj! - Added a new option--hide-unstaged
so that lint-staged will hide all unstaged changes to tracked files before running tasks. The changes will be applied back after running the tasks. Note that the combination of flags--hide-unstaged --no-hide-partially-staged
isn't meaningful and behaves the same as just--hide-unstaged
.Thanks to @ItsNickBarry for the idea and initial implementation in #1552.
#1648
7900b3b
Thanks @iiroj! - Remove lilconfig to reduce reliance on third-party dependencies. It was used to find possible config files outside of those tracked in Git, including from the parent directories. This behavior has been moved directly into lint-staged and should work about the same.Patch Changes
#1633
7f9e485
Thanks @dependabot! - Bumps listr2 from 9.0.3 to 9.0.4.#1626
99d5a9b
Thanks @iiroj! - Due to recent phishing attacks, for example [email protected] was released with malware. To avoid lint-staged's users being at risk the direct dependencies are pinned to exact versions, instead of allowing future patch versions with the caret (^
) range.#1588
035bbf2
Thanks @outslept! - Increase performance by listing staged files and searching for configuration concurrently.#1645
deba3ad
Thanks @iiroj! - Remove chalk as a dependency due to recent malware issue; read more at chalk/chalk#656.If you are having trouble with ANSI color codes when using lint-staged, you can try setting either
FORCE_COLOR=true
orNO_COLOR=true
env variables.v16.1.6
Compare Source
Patch Changes
e93578e
Thanks @iiroj! - Try to improve terminating of subprocess of tasks by usingSIGKILL
, and only callingpidtree
when the the main task process has a known pid.v16.1.5
Compare Source
Patch Changes
4e3ce22
Thanks @srsatt! - Detect the git repo's top-level directory correctly when in a worktree.pnpm/pnpm (pnpm)
v10.18.0
Compare Source
Minor Changes
Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.
Added configuration options for warning thresholds:
fetchWarnTimeoutMs
andfetchMinSpeedKiBps
.Warning messages are displayed when requests exceed time thresholds or fall below speed minimums
Related PR: #10025.
Patch Changes
minimumReleaseAge
configuration #10030.cleanupUnusedCatalogs
configuration when removing dependent packages.scriptShell
is set tofalse
#8748.pnpm dlx
should not fail whenminimumReleaseAge
is set #10037.v10.17.1
Compare Source
Patch Changes
minimumReleaseAge
setting, print this information out in the error message #9974.state.json
creation path when executingpnpm patch
in a workspace project #9733.minimumReleaseAge
is set and thelatest
tag is not mature enough, prefer a non-deprecated version as the newlatest
#9987.v10.17.0
Compare Source
Minor Changes
The
minimumReleaseAgeExclude
setting now supports patterns. For instance:Related PR: #9984.
Patch Changes
minimumReleaseAge
check, when the package is requested by exact version and the packument is loaded from cache #9978.minimumReleaseAge
is set and the active version under a dist-tag is not mature enough, do not downgrade to a prerelease version in case the original version wasn't a prerelease one #9979.v10.16.1
Compare Source
Patch Changes
v10.16.0
Compare Source
Minor Changes
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.
The new setting is called
minimumReleaseAge
. It specifies the number of minutes that must pass after a version is published before pnpm will install it. For example, settingminimumReleaseAge: 1440
ensures that only packages released at least one day ago can be installed.If you set
minimumReleaseAge
but need to disable this restriction for certain dependencies, you can list them under theminimumReleaseAgeExclude
setting. For instance, with the following configuration pnpm will always install the latest version of webpack, regardless of its release time:Related issue: #9921.
Added support for
finders
#9946.In the past,
pnpm list
andpnpm why
could only search for dependencies by name (and optionally version). For example:prints the chain of dependencies to any installed instance of
minimist
:What if we want to search by other properties of a dependency, not just its name? For instance, find all packages that have
react@17
in their peer dependencies?This is now possible with "finder functions". Finder functions can be declared in
.pnpmfile.cjs
and invoked with the--find-by=<function name>
flag when runningpnpm list
orpnpm why
.Let's say we want to find any dependencies that have React 17 in peer dependencies. We can add this finder to our
.pnpmfile.cjs
:Now we can use this finder function by running:
pnpm will find all dependencies that have this React in peer dependencies and print their exact locations in the dependency graph.
It is also possible to print out some additional information in the output by returning a string from the finder. For example, with the following finder:
Every matched package will also print out the license from its
package.json
:Patch Changes
nodeVersion
is not set to an exact semver version #9934.pnpm publish
should be able to publish a.tar.gz
file #9927.pnpm run
return a non-zero exit code #9626.v10.15.1
Compare Source
Patch Changes
.pnp.cjs
crash when importing subpath #9904.v10.15.0
Compare Source
Minor Changes
cleanupUnusedCatalogs
configuration. When set totrue
, pnpm will remove unused catalog entries during installation #9793.@*/pnpm-plugin-*
#9780.pnpm config get
now prints an INI string for an object value #9797.pnpm config get
now accepts property paths (e.g.pnpm config get catalog.react
,pnpm config get .catalog.react
,pnpm config get 'packageExtensions["@​babel/parser"].peerDependencies["@​babel/types"]'
), andpnpm config set
now accepts dot-leading or subscripted keys (e.g.pnpm config set .ignoreScripts true
).pnpm config get --json
now prints a JSON serialization of config value, andpnpm config set --json
now parses the input value as JSON.Patch Changes
pnpm create
command, must verify whether the node version is supported even if a cache already exists #9775.Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.