fix(deps): update all non-major dependencies - autoclosed#113
Closed
renovate[bot] wants to merge 1 commit intomainfrom
Closed
fix(deps): update all non-major dependencies - autoclosed#113renovate[bot] wants to merge 1 commit intomainfrom
renovate[bot] wants to merge 1 commit intomainfrom
Conversation
|
|
commit: |
6fcedfd to
03d7a6e
Compare
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
9e44aee to
c7cab1a
Compare
0d3a0dd to
3d1b2da
Compare
3d1b2da to
2cdb623
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^7.8.2→^7.8.3^25.3.3→^25.5.07.0.0-dev.20260302.1→7.0.0-dev.20260313.1^0.27.3→^0.27.4^10.0.2→^10.0.310.30.3→10.32.1^0.2.1→^0.3.0^0.21.0-beta.2→^0.21.2^0.4.0→^0.4.2^0.5.7→^0.6.0^4.0.18→^4.1.0^5.105.3→^5.105.4Release Notes
sxzz/eslint-config (@sxzz/eslint-config)
v7.8.3Compare Source
🚀 Features
inlinedDependenciesto sort order in package.json - by @sxzz (3caa8)View changes on GitHub
microsoft/typescript-go (@typescript/native-preview)
v7.0.0-dev.20260313.1Compare Source
v7.0.0-dev.20260312.1Compare Source
v7.0.0-dev.20260311.1Compare Source
v7.0.0-dev.20260310.1Compare Source
v7.0.0-dev.20260309.1Compare Source
v7.0.0-dev.20260308.1Compare Source
v7.0.0-dev.20260307.1Compare Source
v7.0.0-dev.20260306.1Compare Source
v7.0.0-dev.20260305.1Compare Source
v7.0.0-dev.20260304.1Compare Source
v7.0.0-dev.20260303.1Compare Source
evanw/esbuild (esbuild)
v0.27.4Compare Source
Fix a regression with CSS media queries (#4395, #4405, #4406)
Version 0.25.11 of esbuild introduced support for parsing media queries. This unintentionally introduced a regression with printing media queries that use the
<media-type> and <media-condition-without-or>grammar. Specifically, esbuild was failing to wrap anorclause with parentheses when inside<media-condition-without-or>. This release fixes the regression.Here is an example:
Fix an edge case with the
injectfeature (#4407)This release fixes an edge case where esbuild's
injectfeature could not be used with arbitrary module namespace names exported using anexport {} fromstatement with bundling disabled and a target environment where arbitrary module namespace names is unsupported.With the fix, the following
injectfile:Can now always be rewritten as this without esbuild sometimes incorrectly generating an error:
Attempt to improve API handling of huge metafiles (#4329, #4415)
This release contains a few changes that attempt to improve the behavior of esbuild's JavaScript API with huge metafiles (esbuild's name for the build metadata, formatted as a JSON object). The JavaScript API is designed to return the metafile JSON as a JavaScript object in memory, which makes it easy to access from within a JavaScript-based plugin. Multiple people have encountered issues where this API breaks down with a pathologically-large metafile.
The primary issue is that V8 has an implementation-specific maximum string length, so using the
JSON.parseAPI with large enough strings is impossible. This release will now attempt to use a fallback JavaScript-based JSON parser that operates directly on the UTF8-encoded JSON bytes instead of usingJSON.parsewhen the JSON metafile is too big to fit in a JavaScript string. The new fallback path has not yet been heavily-tested. The metafile will also now be generated with whitespace removed if the bundle is significantly large, which will reduce the size of the metafile JSON slightly.However, hitting this case is potentially a sign that something else is wrong. Ideally you wouldn't be building something so enormous that the build metadata can't even fit inside a JavaScript string. You may want to consider optimizing your project, or breaking up your project into multiple parts that are built independently. Another option could potentially be to use esbuild's command-line API instead of its JavaScript API, which is more efficient (although of course then you can't use JavaScript plugins, so it may not be an option).
eslint/eslint (eslint)
v10.0.3Compare Source
pnpm/pnpm (pnpm)
v10.32.1: pnpm 10.32.1Compare Source
Patch Changes
pnpm-workspace.yamlwithout apackagesfield caused all directories to be treated as workspace projects. This broke projects that usepnpm-workspace.yamlonly for settings (e.g.minimumReleaseAge) without defining workspace packages #10909.Platinum Sponsors
Gold Sponsors
v10.32.0: pnpm 10.32Compare Source
Minor Changes
--allflag topnpm approve-buildsthat approves all pending builds without interactive prompts #10136.Patch Changes
lockfile-include-tarball-url. Fixes #10915.Platinum Sponsors
Gold Sponsors
v10.31.0Compare Source
sxzz/rolldown-string (rolldown-string)
v0.3.0Compare Source
🚀 Features
View changes on GitHub
rolldown/tsdown (tsdown)
v0.21.2Compare Source
🚨 Breaking Changes
exe.outDirfor separate executable output dir, defaults tobuild- by @sxzz (d49ef)🚀 Features
rootoption for controlling output directory structure - by @sxzz (bad2d)onlyAllowBundletoonlyBundle- by @peaklabs-dev and @sxzz in #819 (cbd7b)🐞 Bug Fixes
View changes on GitHub
v0.21.1Compare Source
🚨 Breaking Changes
@tsdown/csspackage - by @sxzz in #809 (1b1a1)🚀 Features
css.injectoption to preserve CSS imports in JS output - by @sxzz and Claude Haiku 4.5 in #808 (ad745)?inlinequery for CSS imports - by @sxzz in #810 (b7379)node_modulespackage resolution - by @sxzz and Claude Haiku 4.5 in #812 (b06b4)🐞 Bug Fixes
View changes on GitHub
v0.21.0Compare Source
v0.21.0 - Notable Changes
Breaking Changes
Dependency options renamed to
depsnamespaceThe dependency-related options have been moved under a new
depsnamespace with clearer names:external->deps.neverBundlenoExternal->deps.alwaysBundleinlineOnly->deps.onlyAllowBundleskipNodeModulesBundle->deps.skipNodeModulesBundleBefore:
After:
The old options still work but are deprecated and will emit warnings.
failOnWarndefault changed from'ci-only'tofalseIf you relied on the previous behavior where warnings would fail the build in CI environments, you now need to explicitly set
failOnWarn: trueorfailOnWarn: 'ci-only'in your config.Node.js < 22.18.0 deprecated
tsdown now emits a deprecation warning when running on Node.js versions below 22.18.0. Plan to upgrade your Node.js version accordingly.
New Features
Experimental Node.js SEA executable bundling (
exe)tsdown can now bundle your TypeScript project into a standalone executable using Node.js Single Executable Applications (SEA). A new
@tsdown/exepackage provides cross-platform executable building support. See the exe documentation for details.Full CSS pipeline with
@tsdown/cssCSS handling has been reimplemented as a native Rolldown plugin and extracted into the
@tsdown/csspackage, providing a complete CSS pipeline with Lightning CSS and PostCSS support via thecss.transformeroption. See the CSS documentation for details.inlinedDependenciesfield in package.jsonWhen using the
exportsfeature, tsdown now auto-generates aninlinedDependenciesfield in your package.json, listing dependencies that are bundled into the output.Object option for
customExportscustomExportsnow supports an object format for more fine-grained control over the generated exports field.Migration Guide
external->deps.neverBundle,noExternal->deps.alwaysBundle, etc.failOnWarn: If you need warnings to fail the build in CI, explicitly setfailOnWarn: 'ci-only'orfailOnWarn: true.Links
🚨 Breaking Changes
failOnWarndefault from 'ci-only' to false - by @sxzz (ad8db)🚀 Features
depsnamespace - by @sxzz (7f509).nodefiles by default - by @sxzz (944e9)@tsdown/csspackage - by @sxzz in #790 (e4cbe)css.transformeroption - by @sxzz in #791 (35bef)css.transformertolightningcss- by @sxzz in #797 (288a5)@tsdown/exe- by @sxzz in #786 (b6833)latestandlatest-ltsfor nodeVersion - by @sxzz (ce7ab)customExports- by @Joery-M and @sxzz in #769 (7fb72)inlinedDependenciesfield to package.json - by @sxzz in #785 (5c71f)🐞 Bug Fixes
failOnWarnto rolldown logs - by @sxzz (149dc)onSuccessin watch mode to prevent duplicate execution - by @sxzz (af748)allis true - by @sxzz (79492)View changes on GitHub
v0.21.0-beta.5Compare Source
v0.21.0-beta.5 - Notable Changes
Breaking Changes
Dependency options renamed to
depsnamespaceThe dependency-related options have been moved under a new
depsnamespace with clearer names:external->deps.neverBundlenoExternal->deps.alwaysBundleinlineOnly->deps.onlyAllowBundleskipNodeModulesBundle->deps.skipNodeModulesBundleBefore:
After:
The old options still work but are deprecated and will emit warnings.
failOnWarndefault changed from'ci-only'tofalseIf you relied on the previous behavior where warnings would fail the build in CI environments, you now need to explicitly set
failOnWarn: trueorfailOnWarn: 'ci-only'in your config.Node.js < 22.18.0 deprecated
tsdown now emits a deprecation warning when running on Node.js versions below 22.18.0. Plan to upgrade your Node.js version accordingly.
New Features
Experimental Node.js SEA executable bundling (
exe)tsdown can now bundle your TypeScript project into a standalone executable using Node.js Single Executable Applications (SEA). A new
@tsdown/exepackage provides cross-platform executable building support. See the exe documentation for details.Full CSS pipeline with
@tsdown/cssCSS handling has been reimplemented as a native Rolldown plugin and extracted into the
@tsdown/csspackage, providing a complete CSS pipeline with Lightning CSS and PostCSS support via thecss.transformeroption. See the CSS documentation for details.inlinedDependenciesfield in package.jsonWhen using the
exportsfeature, tsdown now auto-generates aninlinedDependenciesfield in your package.json, listing dependencies that are bundled into the output.Object option for
customExportscustomExportsnow supports an object format for more fine-grained control over the generated exports field.Migration Guide
external->deps.neverBundle,noExternal->deps.alwaysBundle, etc.failOnWarn: If you need warnings to fail the build in CI, explicitly setfailOnWarn: 'ci-only'orfailOnWarn: true.Links
🚨 Breaking Changes
🚀 Features
css.transformertolightningcss- by @sxzz in #797 (288a5)🐞 Bug Fixes
View changes on GitHub
v0.21.0-beta.4Compare Source
🚀 Features
@tsdown/csspackage - by @sxzz in #790 (e4cbe)css.transformeroption - by @sxzz in #791 (35bef)View changes on GitHub
v0.21.0-beta.3Compare Source
v0.21.0-beta.3 - Notable Changes
Breaking Changes
Dependency options renamed to
depsnamespaceThe dependency-related options have been moved under a new
depsnamespace with clearer names:external->deps.neverBundlenoExternal->deps.alwaysBundleinlineOnly->deps.onlyAllowBundleskipNodeModulesBundle->deps.skipNodeModulesBundleBefore:
After:
The old options still work but are deprecated and will emit warnings.
failOnWarndefault changed from'ci-only'tofalseIf you relied on the previous behavior where warnings would fail the build in CI environments, you now need to explicitly set
failOnWarn: trueorfailOnWarn: 'ci-only'in your config.Node.js < 22.18.0 deprecated
tsdown now emits a deprecation warning when running on Node.js versions below 22.18.0. Plan to upgrade your Node.js version accordingly.
New Features
Experimental Node.js SEA executable bundling (
exe)tsdown can now bundle your TypeScript project into a standalone executable using Node.js Single Executable Applications (SEA). A new
@tsdown/exepackage provides cross-platform executable building support. See the exe documentation for details.Full CSS pipeline as Rolldown plugin
CSS handling has been reimplemented as a native Rolldown plugin, providing a complete CSS pipeline with Lightning CSS integration for transforms, minification, and bundling. See the CSS documentation for details.
inlinedDependenciesfield in package.jsonWhen using the
exportsfeature, tsdown now auto-generates aninlinedDependenciesfield in your package.json, listing dependencies that are bundled into the output.Object option for
customExportscustomExportsnow supports an object format for more fine-grained control over the generated exports field.Migration Guide
external->deps.neverBundle,noExternal->deps.alwaysBundle, etc.failOnWarn: If you need warnings to fail the build in CI, explicitly setfailOnWarn: 'ci-only'orfailOnWarn: true.Links
🚀 Features
@tsdown/exe- by @sxzz in #786 (b6833)inlinedDependenciesfield to package.json - by @sxzz in #785 (5c71f)🐞 Bug Fixes
View changes on GitHub
sxzz/tsdown-preset-sxzz (tsdown-preset-sxzz)
v0.4.2Compare Source
🚀 Features
View changes on GitHub
v0.4.1Compare Source
No significant changes
View changes on GitHub
unplugin/unplugin-oxc (unplugin-oxc)
v0.6.0Compare Source
🐞 Bug Fixes
View changes on GitHub
vitest-dev/vitest (vitest)
v4.1.0Compare Source
Vitest 4.1 is out!
This release page lists all changes made to the project during the 4.1 beta. To get a review of all the new features, read our blog post.
🚀 Features
setTickModeto timer controls - by @atscott and @sheremet-va in #8726 (4b480)toTestSpecificationto reported tasks - by @sheremet-va in #9464 (1a470)vi.mockorvi.hoistedare declared outside of top level of the module - by @sheremet-va in #9387 (5db54)aroundEachandaroundAllhooks - by @sheremet-va in #9450 (2a8cb)neworallin--updateflag - by @sheremet-va in #9543 (a5acf)metain test options - by @sheremet-va in #9535 (7d622)test.extendsyntax - by @sheremet-va in #9550 (e5385)vitest listto statically collect tests instead of running files to collect them - by @sheremet-va in [#9630](https://redirect.gitConfiguration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.