chore(deps): update dependencies (non-major) #46

renovate · 2025-08-01T03:36:07Z

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/core (source)	`~7.28.0` -> `~7.28.4`
@babel/eslint-parser (source)	`~7.28.0` -> `~7.28.4`
@changesets/cli (source)	`~2.29.5` -> `~2.29.7`
@dotenvx/dotenvx	`1.32.1` -> `1.51.0`
@malagu/cli	`2.58.0` -> `2.60.3`
@typescript-eslint/eslint-plugin (source)	`~8.38.0` -> `~8.44.1`
@typescript-eslint/parser (source)	`~8.38.0` -> `~8.44.1`
eslint-config-taro	`~3.6.37` -> `~3.6.38`
eslint-plugin-prettier	`~5.5.3` -> `~5.5.4`
eslint-plugin-react-refresh	`~0.4.20` -> `~0.4.22`
lint-staged	`~16.1.2` -> `~16.2.1`
miniprogram-ci	`~2.1.14` -> `~2.1.26`
prettier-plugin-organize-imports	`~4.2.0` -> `~4.3.0`
prettier-plugin-tailwindcss	`0.6.12` -> `0.6.14`
release-it	`~19.0.4` -> `~19.0.5`
simple-git-hooks	`~2.13.0` -> `~2.13.1`
turbo (source)	`~2.5.5` -> `~2.5.8`

Release Notes

babel/babel (@babel/core)

`v7.28.4`

Compare Source

🏠 Internal

babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
- #17493 Update Jest to v30.1.1 (@JLHwung)
babel-plugin-transform-regenerator
- #17455 chore: Clean up transform-regenerator (@liuxingbaoyu)
babel-core
- #17474 Switch to @jridgewell/remapping (@mrginglymus)

`v7.28.3`

Compare Source

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
- #17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser
- #17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)
- #17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime
- #17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
- #17444 Optimize do expression output (@JLHwung)

changesets/changesets (@changesets/cli)

Patch Changes

#1712 a3563b0 Thanks @benmccann! - Switch to maintained fork of external-editor

dotenvx/dotenvx (@dotenvx/dotenvx)

`v1.51.0`

Compare Source

Added

Add config({opsOff: true}) options and --ops-off flag for turning off Dotenvx Ops features. (#680)

`v1.50.1`

Compare Source

Removed

Remove listed command to radar (now ops) (#678)

`v1.50.0`

Compare Source

Added

Add optional dotenvx ops command (#677)
Ops is a coming rename of Radar. Radar will become a feature inside ops.
With dotenvx ops use dotenvx across your team, infrastructure, agents, and more.

 _______________________________________________________________________
|                                                                       |
|  Dotenvx Ops: Commercial Tooling for Dotenvx                          |
|                                                                       |
|  ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓███████▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░ ░▒▓██████▓▒░                               |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
|  ░▒▓██████▓▒░░▒▓█▓▒░      ░▒▓███████▓▒░                               |
|                                                                       |
|  Use dotenvx across your team, infrastructure, agents, and more.      |
|                                                                       |
|  Learn more at https://dotenvx.com/ops                                |
|_______________________________________________________________________|

`v1.49.1`

Compare Source

Changed

🐞 patch bug with variable expansion of single quoted values (#675)

`v1.49.0`

Compare Source

Added

For precommit and prebuild, ignore .env.x file like we do with .env.vault file. (#666)

`v1.48.4`

Compare Source

Removed

Remove unnecessary use of eval in proKeypair helper (#654)

`v1.48.3`

Compare Source

Changed

Include privateKeyName and privateKey on internal processedEnv object (#649)

`v1.48.2`

Compare Source

Changed

Check radar status before sending (#646)

`v1.48.1`

Compare Source

Changed

Send beforEnv and afterEnv to Radar if user has installed (#645)

`v1.48.0`

Compare Source

Added

Include beforeEnv and afterEnv for user debugging (#644)

`v1.47.7`

Compare Source

Changed

src should be in internal processEnv object (#643)

`v1.47.6`

Compare Source

Changed

Make Radar call non-blocking (#642)

`v1.47.5`

Compare Source

Changed

Add resilient handling of any Radar failures (#639)

`v1.47.4`

Compare Source

Changed

Smarter require of non-installed libs like dotenvx-radar (#638)

`v1.47.3`

Compare Source

Added

Send to radar#observe if Radar installed by user (#631)

Removed

Remove cli in package.json (#632)

`v1.47.2`

Compare Source

Added

Export cli in package.json (#629)

`v1.47.1`

Compare Source

Added

Add convenience log that radar active 📡 when dotenvx-radar is installed (#625)

`v1.47.0`

Compare Source

Added

Add optional dotenvx radar command (#624)
Radar is an early access commercial extension for dotenvx that will auto backup your .env files.

 _______________________________________________________________________
|                                                                       |
|  Dotenvx Radar: Env Observability                                     |
|                                                                       |
|  ░▒▓███████▓▒░ ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓██████▓▒░░▒▓███████▓▒░    |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓███████▓▒░░▒▓████████▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓████████▓▒░▒▓███████▓▒░    |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|                                                                       |
|  Observe, version, and back up your environment variables at runtime. |
|                                                                       |
|  Purchase lifetime access at https://dotenvx.com/radar                |
|                                                                       |
| --------------------------------------------------------------------- |
| - thank you for using dotenvx! - @&#8203;motdotla                            |
|_______________________________________________________________________|

`v1.46.0`

Compare Source

Added

Add error when hoisting issue experienced around commander.js (#623)

Removed

Remove git-dotenvx and git dotenvx shorthand (#621)

`v1.45.2`

Compare Source

Changed

Minor README updates

`v1.45.1`

Compare Source

Changed

Include setLogName and setLogVersion in config (#613)

`v1.45.0`

Compare Source

Added

Add logger.setName and logger.setVersion for customization of logger (#612)

`v1.44.2`

Compare Source

Changed

Clarify license is BSD-3.

`v1.44.1`

Compare Source

Changed

Patch SetOutput type (#597)

`v1.44.0`

Compare Source

Added

Add armv7 support (#593)

`v1.43.0`

Compare Source

Removed

Remove errorv, errornocolor, blank from logger options (#584)

Changed

Replace instances of console.error with logger.error (#584)

`v1.42.2`

Compare Source

Changed

Fix --force flag work with ?force=true (2776715)

`v1.42.1`

Compare Source

Added

Add --force flag to install.sh (0b8d21c)

`v1.42.0`

Compare Source

Added

Add ability to override the os and arch via install.sh and dotenvx.sh (3ded752)

`v1.41.0`

Compare Source

Added

Add [directory] argument to precommit and prebuild (#572)

`v1.40.1`

Compare Source

Changed

Patch ext scan command (#570)

`v1.40.0`

Compare Source

Added

Smarter ext precommit and ext prebuild – catch duplicate KEYs in the same .env file where one is mistakenly left unencrypted (#567)

`v1.39.1`

Compare Source

Added

Add version to homebrew formula (#564)

`v1.39.0`

Compare Source

Added

Add --convention flow option to dotenvx run (#551)

Changed

Fix typos (#550)

`v1.38.5`

Compare Source

Added

🐞 Add config.d.ts file to fix type error when loading dotenvx/dotenvx/config with dynamic import (#547)

`v1.38.4`

Compare Source

Changed

🐞 Fix blank line disappearing after encrypting empty value (#542)

`v1.38.3`

Compare Source

Changed

🐞 Fix self-referencing expansion when key exists already in process.env (#536)

`v1.38.2`

Compare Source

Added

Add typescript types for main.get.

`v1.38.1`

Compare Source

Changed

Support encrypt when mutliline contains windows CRLF (\r\n) (#534)

Note: dotenvx will convert these \r\n newlines to \n. Our recommendation is to stop using CRLF - its origin is from typewriter days. Instead, set your editor or gitattributes to use LF.

`v1.38.0`

Compare Source

Changed

Command substitution failures no longer halt further processing of keys in a .env file (#533)
A more helpful error is raised if a command substitution failure occurs (#533)

`v1.37.0`

Compare Source

Added

add dotenvx rotate command 🎉 (#530)

also: our whitepaper is released as a draft.

`v1.36.0`

Compare Source

Changed

--strict flag respects (doesn't throw) anything in --ignore flag (#527)

`v1.35.0`

Compare Source

Added

npx dotenvx precommit support as a convenience (#523)
main.get method (#524)

The addition of main.get facilitates what we term Decryption at Access, a concept explored in greater detail in our whitepaper.

`v1.34.0`

Compare Source

Added

main.set method now writes to files (#517)

`v1.33.0`

Compare Source

Added

support ESM import convenience import '@dotenvx/dotenvx/config' (#508)

cellbang/malagu (@malagu/cli)

`v2.60.3`

Compare Source

fix(cli-common): 修复组件判别逻辑错误

`v2.60.2`

Compare Source

fix(ui-packages): 修复目录名称拼写错误导致前端相关包没有正常发布

`v2.60.1`

Compare Source

feat(retry): 添加新组件 @celljs/retry，支持重试机制
feat(core): 优化 @celljs/core 模块对单元测试的支持

`v2.60.0`

Compare Source

typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)

`v8.44.1`

Compare Source

🩹 Fixes

eslint-plugin: [await-thenable] should not report passing values to promise aggregators which may be a promise in an array literal (#11611)
eslint-plugin: [no-unsafe-enum-comparison] support unions of literals (#11599)
eslint-plugin: [no-base-to-string] make ignoredTypeNames match type names without generics (#11597)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger
mdm317
Ronen Amiel

You can read about our versioning strategy and releases on our website.

`v8.44.0`

Compare Source

🚀 Features

eslint-plugin: [await-thenable] report invalid (non-promise) values passed to promise aggregator methods (#11267)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-conversion] ignore enum members (#11490)

❤️ Thank You

Moses Odutusin @thebolarin
Ronen Amiel

You can read about our versioning strategy and releases on our website.

`v8.43.0`

Compare Source

🚀 Features

typescript-estree: disallow empty type parameter/argument lists (#11563)

🩹 Fixes

eslint-plugin: [prefer-return-this-type] don't report an error when returning a union type that includes a classType (#11432)
eslint-plugin: [no-deprecated] should report deprecated exports and reexports (#11359)
eslint-plugin: [no-floating-promises] allowForKnownSafeCalls now supports function names (#11423, #11430)
eslint-plugin: [consistent-type-exports] fix declaration shadowing (#11457)
eslint-plugin: [no-unnecessary-type-conversion] only report ~~ on integer literal types (#11517)
scope-manager: exclude Program from DefinitionBase node types (#11469)
eslint-plugin: [no-non-null-assertion] do not suggest optional chain on LHS of assignment (#11489)
type-utils: add union type support to TypeOrValueSpecifier (#11526)

❤️ Thank You

Dima @dbarabashh
Kirk Waiblinger @kirkwaiblinger
mdm317
tao
Victor Genaev @mainframev
Yukihiro Hasegawa @y-hsgw
민감자(Minji Kim) @mouse0429
송재욱

You can read about our versioning strategy and releases on our website.

`v8.42.0`

Compare Source

🩹 Fixes

deps: update eslint monorepo to v9.33.0 (#11482)

You can read about our versioning strategy and releases on our website.

`v8.41.0`

Compare Source

🩹 Fixes

deps: update dependency prettier to v3.6.2 (#11496)

You can read about our versioning strategy and releases on our website.

`v8.40.0`

Compare Source

🚀 Features

typescript-estree: forbid invalid keys in EnumMember (#11232)

❤️ Thank You

fisker Cheung @fisker

You can read about our versioning strategy and releases on our website.

`v8.39.1`

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.39.0`

Compare Source

🚀 Features

eslint-plugin: [only-throw-error] support yield/await expressions (#11417)
eslint-plugin: add no-unnecessary-type-conversion to strict-type-checked ruleset (#11427)
update to TypeScript 5.9.2 (#11445)
eslint-plugin: [naming-convention] add enumMember PascalCase default option (#11127)

🩹 Fixes

eslint-plugin: [no-unsafe-assignment] add an unsafeObjectPattern message (#11403)
eslint-plugin: [prefer-optional-chain] ignore check option for most RHS of a chain (#11272)

❤️ Thank You

Brad Zacher @bradzacher
James Garbutt @43081j
Kim Sang Du @developer-bandi
Sasha Kondrashov
tao
Younsang Na @nayounsang

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@typescript-eslint/parser)