chore(deps): update all non-major dependencies #286
+1,221
−926
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #286 +/- ##
=======================================
Coverage 72.27% 72.27%
=======================================
Files 8 8
Lines 404 404
Branches 104 104
=======================================
Hits 292 292
Misses 92 92
Partials 20 20 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
5 times, most recently
from
7955748 to
858cd20
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
73964ab to
63efd9b
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
9 times, most recently
from
0ce439e to
0df34a1
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
8 times, most recently
from
d9949d5 to
7b976e7
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
2 times, most recently
from
ca2cc58 to
2a56c39
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
6 times, most recently
from
50feb48 to
9244b90
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
9244b90 to
ba7f581
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.0.15→^4.0.18^0.4.2→^0.4.3^9.39.1→^9.39.2^0.5.0→^0.6.2^2.0.1-rc.5→^2.0.1-rc.11^0.4.7→^0.4.22^0.101.0→^0.112.010.24.0→10.28.2^3.7.4→^3.8.1^0.9.7→^0.11.0^1.6.1→^1.6.3^1.17.3→^1.17.4^4.0.15→^4.0.18Release Notes
vitest-dev/vitest (@vitest/coverage-v8)
v4.0.18Compare Source
🚀 Experimental Features
onModuleRunnerhook toworker.init- by @sheremet-va in #9286 (ea837)🐞 Bug Fixes
meta.urlincreateRequire- by @sheremet-va in #9441 (e0572)View changes on GitHub
v4.0.17Compare Source
🚀 Experimental Features
🐞 Bug Fixes
addEventHandler#9371 - by @ThibautMarechal in #9372 and #9371 (40841)process.envandimport.meta.envdefines in inline project - by @hi-ogawa in #9239 (b70c9)ErrorEvent.messagewhen unhandledErrorEvent.erroris null - by @hi-ogawa in #9322 (5d84e)fileParallelismon an instance - by @sheremet-va in #9328 (15006)istanbul-lib-source-mapsusage - by @AriPerkkio in #9344 (b0940)View changes on GitHub
v4.0.16Compare Source
🐞 Bug Fixes
process.versionsstub - by @AriPerkkio in #9174 (78cfb)test.poolOptionsif it's set - by @sheremet-va in #9226 (f7f6a)recordArtifactfrom the vitest package - by @macarie in #9186 (01c56)import.meta.envdefine - by @hi-ogawa in #9205 (01a9a)setupEnvironmentfor custom pools - by @AriPerkkio in #9187 (5d26b)View changes on GitHub
unjs/automd (automd)
v0.4.3Compare Source
compare changes
🚀 Enhancements
dir-treegenerator (#132)📦 Build
🏡 Chore
❤️ Contributors
eslint/eslint (eslint)
v9.39.2Compare Source
unjs/eslint-config (eslint-config-unjs)
v0.6.2Compare Source
compare changes
🩹 Fixes
❤️ Contributors
v0.6.1Compare Source
compare changes
💅 Refactors
@eslint/markdown(2f92a53)📦 Build
🏡 Chore
❤️ Contributors
v0.6.0Compare Source
compare changes
💅 Refactors
@eslint/markdown(2f92a53)📦 Build
🏡 Chore
❤️ Contributors
h3js/h3 (h3)
v2.0.1-rc.11Compare Source
compare changes
📦 Build
❤️ Contributors
v2.0.1-rc.10Compare Source
compare changes
📦 Build
❤️ Contributors
v2.0.1-rc.9Compare Source
compare changes
🩹 Fixes
🌊 Types
🏡 Chore
❤️ Contributors
v2.0.1-rc.8Compare Source
compare changes
🩹 Fixes
💅 Refactors
Error.captureStackTrace(652e883)🏡 Chore
❤️ Contributors
v2.0.1-rc.7Compare Source
compare changes
🚀 Enhancements
🩹 Fixes
duplexoption is properly set (eb83aad)modifiedTimeto seconds (#1262)🏡 Chore
❤️ Contributors
v2.0.1-rc.6Compare Source
compare changes
🚀 Enhancements
event(#1242)🩹 Fixes
transfer-encodingheader from proxied response (#1248)event.resafter prepare (#1259)📖 Documentation
H3ravelto the community section (#1239)🏡 Chore
❤️ Contributors
unjs/obuild (obuild)
v0.4.22Compare Source
compare changes
💅 Refactors
EVALwarns (73668e4)🏡 Chore
❤️ Contributors
v0.4.21Compare Source
compare changes
🔥 Performance
dce-only(823f72f)🏡 Chore
❤️ Contributors
v0.4.20Compare Source
compare changes
🩹 Fixes
💅 Refactors
inlineDynamicImportstocodeSplitting(334eab9)🏡 Chore
❤️ Contributors
v0.4.19Compare Source
compare changes
🏡 Chore
❤️ Contributors
v0.4.18Compare Source
compare changes
🩹 Fixes
.dsuffix to type chunk groups (e55c9f4)💅 Refactors
📦 Build
obuildbin (d92d40b)🤖 CI
❤️ Contributors
v0.4.17Compare Source
compare changes
🩹 Fixes
❤️ Contributors
v0.4.16Compare Source
compare changes
💅 Refactors
codeSplittingoption (1c68bd9)❤️ Contributors
v0.4.15Compare Source
compare changes
📦 Build
rolldown/experimental(cf5f16e)🏡 Chore
❤️ Contributors
v0.4.14Compare Source
compare changes
🏡 Chore
1.0.0-beta.59(51bd7d2)❤️ Contributors
v0.4.13Compare Source
compare changes
🩹 Fixes
includeDependenciesRecursively(7325ddd)❤️ Contributors
v0.4.12Compare Source
compare changes
🩹 Fixes
includeDependenciesRecursively(6974fb5)resolveDeps(2bba5b9)❤️ Contributors
v0.4.11Compare Source
compare changes
🏡 Chore
❤️ Contributors
v0.4.10Compare Source
compare changes
🏡 Chore
v0.4.9Compare Source
compare changes
🏡 Chore
❤️ Contributors
v0.4.8Compare Source
compare changes
📖 Documentation
c12to "currently used" section (#66)🏡 Chore
🤖 CI
❤️ Contributors
oxc-project/oxc (oxc-minify)
v0.111.0💥 BREAKING CHANGES
af0ca46span: [BREAKING] UseModuleKind::CommonJSforSourceType::cjs()(#18276) (sapphi-red)📚 Documentation
8ccd853npm: Update package homepage URLs and add keywords (#18509) (Boshen)v0.106.0🚀 Features
e031056codegen: Addsourcemapfeature flag (#17305) (Boshen)8e4409aminifier: Addinvalid_import_side_effectsoption (#17300) (sapphi-red)v0.102.0💥 BREAKING CHANGES
083fea9napi/parser: [BREAKING] Represent empty optional fields on JS side asnull(#16411) (overlookmotel)pnpm/pnpm (pnpm)
v10.28.2: pnpm 10.28.2Compare Source
Patch Changes
Security fix: prevent path traversal in
directories.binfield.When pnpm installs a
file:orgit:dependency, it now validates that symlinks point within the package directory. Symlinks to paths outside the package root are skipped to prevent local data from being leaked intonode_modules.This fixes a security issue where a malicious package could create symlinks to sensitive files (e.g.,
/etc/passwd,~/.ssh/id_rsa) and have their contents copied when the package is installed.Note: This only affects
file:andgit:dependencies. Registry packages (npm) have symlinks stripped during publish and are not affected.Fixed optional dependencies to request full metadata from the registry to get the
libcfield, which is required for proper platform compatibility checks #9950.Platinum Sponsors
Gold Sponsors
v10.28.1Compare Source
v10.28.0Compare Source
v10.27.0Compare Source
v10.26.2: pnpm 10.26.2Compare Source
Patch Changes
Improve error message when a package version exists but does not meet the
minimumReleaseAgeconstraint. The error now clearly states that the version exists and shows a human-readable time since release (e.g., "released 6 hours ago") #10307.Fix installation of Git dependencies using annotated tags #10335.
Previously, pnpm would store the annotated tag object's SHA in the lockfile instead of the actual commit SHA. This caused
ERR_PNPM_GIT_CHECKOUT_FAILEDerrors because the checked-out commit hash didn't match the stored tag object hash.Binaries of runtime engines (Node.js, Deno, Bun) are written to
node_modules/.binbefore lifecycle scripts (install, postinstall, prepare) are executed #10244.Try to avoid making network calls with preferOffline #10334.
Platinum Sponsors
Gold Sponsors
v10.26.1: pnpm 10.26.1Compare Source
Patch Changes
pnpm add, whenblockExoticSubdepsis set totrue#10324.HEADpoints to the commit after checkout #10310.Platinum Sponsors
Gold Sponsors
v10.26.0Compare Source
v10.25.0Compare Source
prettier/prettier (prettier)
v3.8.1Compare Source
v3.8.0Compare Source
diff
🔗 Release note
h3js/srvx (srvx)
v0.11.0Compare Source
compare changes
🚀 Enhancements
req.rawBody: Bufferin google cloud functions (#166)loadServerEntry(#168)srvx fetch(#169)cliFetchutil (#174)cliFetch(98b35cc)srvx curlalias (169e26f)aws-lambdaadapter and utils (#104)🩹 Fixes
gracefulShutdownonly in production mode (85cce89)mod(a2a65fa)server.address()in programmatic mode (c9bb7c6)localhostas default hostname (716408f)Halias (7dce970)💅 Refactors
📖 Documentation
📦 Build
🏡 Chore
❤️ Contributors
v0.10.1Compare Source
compare changes
🚀 Enhancements
🩹 Fixes
🏡 Chore
✅ Tests
❤️ Contributors
Configuration
📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.