Skip to content

chore(deps): update all non-major dependencies #503

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 2, 2024

This PR contains the following updates:

Package Change Age Confidence
@antfu/eslint-config 3.0.0 -> 3.16.0 age confidence
@sanity/client (source) 7.1.0 -> 7.6.0 age confidence
@sanity/image-url (source) 1.0.2 -> 1.1.0 age confidence
bumpp 10.0.1 -> 10.2.0 age confidence
conventional-changelog-conventionalcommits (source) 9.0.0 -> 9.1.0 age confidence
expect-type 1.0.0 -> 1.2.2 age confidence
husky 9.1.5 -> 9.1.7 age confidence
lint-staged 16.0.0 -> 16.1.2 age confidence
pnpm (source) 10.2.1 -> 10.13.1 age confidence
semver 7.6.3 -> 7.7.2 age confidence
typescript (source) 5.7.2 -> 5.8.3 age confidence
unbuild 3.0.0 -> 3.5.0 age confidence

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v3.16.0

Compare Source

   🚀 Features
    View changes on GitHub

v3.15.0

Compare Source

   🚀 Features
    View changes on GitHub

v3.14.0

Compare Source

   🚀 Features
    View changes on GitHub

v3.13.0

Compare Source

   🚀 Features
    View changes on GitHub

v3.12.2

Compare Source

   🚀 Features
    View changes on GitHub

v3.12.1

Compare Source

No significant changes

    View changes on GitHub

v3.12.0

Compare Source

   🚀 Features
    View changes on GitHub

v3.11.2

Compare Source

   🐞 Bug Fixes
  • perfectionist: Revert bahaviour change on import sorting since v3.10  -  by @​antfu (00c41)
    View changes on GitHub

v3.11.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.11.0

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.10.0

Compare Source

   🚀 Features
    View changes on GitHub

v3.9.2

Compare Source

   🚀 Features
    View changes on GitHub

v3.9.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.8.0

Compare Source

   🚀 Features
    View changes on GitHub

v3.7.3

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.7.2

Compare Source

   🚀 Features
   🐞 Bug Fixes
  • Disable antfu/no-top-level-await for markdown snippets  -  by @​antfu (a984c)
    View changes on GitHub

v3.7.1

Compare Source

   🚀 Features
    View changes on GitHub

v3.7.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
  • Disable explicit-function-return-type in markdown code  -  by @​antfu (60ffd)
  • Disable ts/explicit-function-return-type in vue files  -  by @​antfu (1788d)
    View changes on GitHub

v3.6.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.6.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.6.0

Compare Source

   🐞 Bug Fixes
  • perfectionist/sort-imports sort types always on top  -  by @​antfu (e2839)
    View changes on GitHub

v3.5.1

Compare Source

No significant changes

    View changes on GitHub

v3.5.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.4.1

Compare Source

No significant changes

    View changes on GitHub

v3.4.0

Compare Source

   🚀 Features
    View changes on GitHub

v3.3.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.3.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.3.0

Compare Source

   🚀 Features
    View changes on GitHub

v3.2.2

Compare Source

   🐞 Bug Fixes
  • Disable unicorn/consistent-function-scoping for arrow functions  -  by @​antfu (362ab)
    View changes on GitHub

v3.2.1

Compare Source

No significant changes

    View changes on GitHub

v3.2.0

Compare Source

   🚀 Features
  • Move disable rules to the end, remove deprecated rules  -  by @​antfu (c3e2d)
    View changes on GitHub

v3.1.0

Compare Source

   🚀 Features
    View changes on GitHub
sanity-io/client (@​sanity/client)

v7.6.0

Compare Source

Features
  • transform: adds support for optional imageUrl param in for target.operation image-description (#​1105) (c47214f)

v7.5.0

Compare Source

Features
  • agent.action.transform can now transform images to text descriptions (#​1096) (609e572)

v7.4.1

Compare Source

Bug Fixes

v7.4.0

Compare Source

Features
  • agent.action.patch - a schema aware patch api (#​1091) (0bf6de3)
  • agent.action.prompt (d6b08b7)
  • agent.action.prompt – for when you dont want to bring an LLM key and just use Sanity (#​1078) (d6b08b7)
  • new agent action parameter forcePublishedWrite – agent actions never write to published doc by default (#​1092) (7587e2c)
Bug Fixes

v7.3.0

Compare Source

Features
  • pass default headers to createClient for all requests (#​1079) (e99c852)

v7.2.2

Compare Source

Bug Fixes

v7.2.1

Compare Source

Bug Fixes
  • downgrade nanoid to ensure compatibility with node < 22 (#​1076) (368a12d)

v7.2.0

Compare Source

Features
sanity-io/image-url (@​sanity/image-url)

v1.1.0

Compare Source

Changes
  • Add new frame() method
  • Add new vanityName() method (thanks @​Isissss!)
  • Allow specifying baseUrl in builder typings (thanks @​ryami333!)
  • Allow resetting format through .format(undefined) (thanks @​selbekk!)
antfu-collective/bumpp (bumpp)

v10.2.0

Compare Source

   🚀 Features
    View changes on GitHub

v10.1.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v10.1.0

Compare Source

   🚀 Features
    View changes on GitHub

v10.0.3

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v10.0.2

Compare Source

No significant changes

    View changes on GitHub
conventional-changelog/conventional-changelog (conventional-changelog-conventionalcommits)

v9.1.0

Compare Source

Features
mmkal/expect-type (expect-type)

v1.2.2

Compare Source


v1.2.1

Compare Source

  • docs: update deprecated usage examples 0c5a05d

v1.2.0

Compare Source

What's Changed

toMatchTypeOf is now deprecated. There are no plans to remove it any time soon, so it's not critical to immediately remove usages, but if you want to avoid squigglies in IDEs complaining about deprecations, here's what you should do:

If you have an assertion like this:

expectTypeOf(foo).toMatchTypeOf<Abc>()

There are a few options for upgrading it. The easiest is toExtend which is identical to the behaviour of toMatchTypeOf:

expectTypeOf(foo).toExtend<Abc>()

This will work in all cases. But, there is now a stricter option that will work in many cases and be slightly more likely to catch things like readonly properties matching:

expectTypeOf(foo).toMatchObjectType<Abc>()

But, as the name suggests, this will only work on plain object types, it will fail for union types, and some other complex types.


If you have code like this:

expectTypeOf(foo).toMatchTypeOf(bar)

You'll need to use typeof because toExtend and toMatchObjectType do not accept arguments

expectTypeOf(foo).toExtend<typeof bar>()
expectTypeOf(foo).toMatchObjectType<typeof bar>()

Full Changelog: mmkal/expect-type@v1.1.0...v1.2.0

v1.1.0

Compare Source

What's Changed

Full Changelog: mmkal/expect-type@v1.0.0...v1.1.0

typicode/husky (husky)

v9.1.7

Compare Source

What's Changed

New Contributors

Full Changelog: typicode/husky@v9.1.6...v9.1.7

v9.1.6

Compare Source

What's Changed

New Contributors

Full Changelog: typicode/husky@v9.1.5...v9.1.6

lint-staged/lint-staged (lint-staged)

v16.1.2

Compare Source

Patch Changes
  • #​1570 a7c0c88 Thanks @​ItsNickBarry! - When using --diff-filter with the D option to include deleted staged files, lint-staged no longer tries to stage the deleted files, unless they're no longer deleted. Previously this caused an error from git add like fatal: pathspec 'deleted-file' did not match any files.

  • 38f942e Thanks @​iiroj! - Removed an extraneous log entry that printed shouldHidePArtiallyStagedFiles to console output.

v16.1.1

Compare Source

Patch Changes
  • #​1565 3686977 Thanks @​iiroj! - Lint-staged now explicitly warns about potential data loss when using --no-stash.

  • #​1571 02299a9 Thanks @​iiroj! - Function tasks (introduced in v16.0.0) only received the staged files matching the conpmnfigured glob, instead of all staged files.

  • #​1563 bc61c74 Thanks @​iiroj! - This version fixes incorrect behavior where unstaged changes were committed when using the --no-stash option. This happened because --no-stash implied --no-hide-partially-staged, meaning unstaged changes to files which also had other staged changes were added to the commit by lint-staged; this is no longer the case.

    The previous (incorrect) behavior can still be achieved by using both options --no-stash --no-hide-partially-staged at the same time.

v16.1.0

Compare Source

Minor Changes
  • #​1536 e729daa Thanks @​iiroj! - A new flag --no-revert has been introduced for when task modifications should be applied to the index before aborting the commit in case of errors. By default, lint-staged will clear all task modifications and revert to the original state.

  • #​1550 b27fa3f Thanks @​iiroj! - Lint-staged now ignores symlinks and leaves them out from the list of staged files.

Patch Changes
pnpm/pnpm (pnpm)

v10.13.1

Compare Source

Patch Changes
  • Run user defined pnpmfiles after pnpmfiles of plugins.

v10.13.0

Compare Source

Minor Changes
  • Added the possibility to load multiple pnpmfiles. The pnpmfile setting can now accept a list of pnpmfile locations #​9702.

  • pnpm will now automatically load the pnpmfile.cjs file from any config dependency named @pnpm/plugin-* or pnpm-plugin-* #​9729.

    The order in which config dependencies are initialized should not matter — they are initialized in alphabetical order. If a specific order is needed, the paths to the pnpmfile.cjs files in the config dependencies can be explicitly listed using the pnpmfile setting in pnpm-workspace.yaml.

Patch Changes
  • When patching dependencies installed via pkg.pr.new, treat them as Git tarball URLs #​9694.
  • Prevent conflicts between local projects' config and the global config in dangerouslyAllowAllBuilds, onlyBuiltDependencies, onlyBuiltDependenciesFile, and neverBuiltDependencies #​9628.
  • Sort keys in pnpm-workspace.yaml with deep #​9701.
  • The pnpm rebuild command should not add pkgs included in ignoredBuiltDependencies to ignoredBuilds in node_modules/.modules.yaml #​9338.
  • Replaced shell-quote with shlex for quoting command arguments #​9381.

v10.12.4

Compare Source

Patch Changes

v10.12.3

Compare Source

Patch Changes
  • Restore hoisting of optional peer dependencies when installing with an outdated lockfile.
    Regression introduced in v10.12.2 by #​9648; resolves #​9685.

v10.12.2

Compare Source

Patch Changes
  • Fixed hoisting with enableGlobalVirtualStore set to true #​9648.
  • Fix the --help and -h flags not working as expected for the pnpm create command.
  • The dependency package path output by the pnpm licenses list --json command is incorrect.
  • Fix a bug in which pnpm deploy fails due to overridden dependencies having peer dependencies causing ERR_PNPM_OUTDATED_LOCKFILE #​9595.

v10.12.1

Minor Changes
  • Experimental. Added support for global virtual stores. When enabled, node_modules contains only symlinks to a central virtual store, rather to node_modules/.pnpm. By default, this central store is located at <store-path>/links (you can find the store path by running pnpm store path).

    In the central virtual store, each package is hard linked into a directory whose name is the hash of its dependency graph. This allows multiple projects on the system to symlink shared dependencies from this central location, significantly improving installation speed when a warm cache is available.

    This is conceptually similar to how NixOS manages packages, using dependency graph hashes to create isolated and reusable package directories.

    To enable the global virtual store, set enableGlobalVirtualStore: true in your root pnpm-workspace.yaml, or globally via:

    pnpm config -g set enable-global-virtual-store true

    NOTE: In CI environments, where caches are typically cold, this setting may slow down installation. pnpm automatically disables the global virtual store when running in CI.

    Related PR: #​8190

  • The pnpm update command now supports updating catalog: protocol dependencies and writes new specifiers to pnpm-workspace.yaml.
  • Added two new CLI options (--save-catalog and --save-catalog-name=<name>) to pnpm add to save new dependencies as catalog entries. catalog: or catalog:<name> will be added to package.json and the package specifier will be added to the catalogs or catalog[<name>] object in pnpm-workspace.yaml #​9425.
  • Semi-breaking. The keys used for side-effects caches have changed. If you have a side-effects cache generated by a previous version of pnpm, the new version will not use it and will create a new cache instead #​9605.
  • Added a new setting called ci for explicitly telling pnpm if the current environment is a CI or not.
Patch Changes
  • Sort versions printed by pnpm patch using semantic versioning rules.
  • Improve the way the error message displays mismatched specifiers. Show differences instead of 2 whole objects #​9598.
  • Revert #​9574 to fix a regression #​9596.

v10.11.1

Compare Source

Patch Changes
  • Fix an issue in which pnpm deploy --legacy creates unexpected directories when the root package.json has a workspace package as a peer dependency #​9550.
  • Dependencies specified via a URL that redirects will only be locked to the target if it is immutable, fixing a regression when installing from GitHub releases. (#​9531)
  • Installation should not exit with an error if strictPeerDependencies is true but all issues are ignored by peerDependencyRules #​9505.
  • Use pnpm_config_ env variables instead of npm_config_ #​9571.
  • Fix a regression (in v10.9.0) causing the --lockfile-only flag on pnpm update to produce a different pnpm-lock.yaml than an update without the flag.
  • Let pnpm deploy work in repos with overrides when inject-workspace-packages=true #​9283.
  • Fixed the problem of path loss caused by parsing URL address. Fixes a regression shipped in pnpm v10.11 via #​9502.
  • pnpm -r --silent run should not print out section #​9563.

v10.11.0

Compare Source

Minor Changes
  • A new setting added for pnpm init to create a package.json with type=module, when init-type is module. Works as a flag for the init command too #​9463.

  • Added support for Nushell to pnpm setup #​6476.

  • Added two new flags to the pnpm audit command, --ignore and --ignore-unfixable #​8474.

    Ignore all vulnerabilities that have no solution:

    > pnpm audit --ignore-unfixable

    Provide a list of CVE's to ignore those specifically, even if they have a resolution.

    > pnpm audit --ignore=CVE-2021-1234 --ignore=CVE-2021-5678
  • Added support for recursively running pack in every project of a workspace #​4351.

    Now you can run pnpm -r pack to pack all packages in the workspace.

Patch Changes
  • pnpm version management should work, when dangerouslyAllowAllBuilds is set to true #​9472.
  • pnpm link should work from inside a workspace #​9506.
  • Set the default workspaceConcurrency to Math.min(os.availableParallelism(), 4) #​9493.
  • Installation should not exit with an error if strictPeerDependencies is true but all issues are ignored by peerDependencyRules #​9505.
  • Read updateConfig from pnpm-workspace.yaml #​9500.
  • Add support for recursive pack
  • Remove url.parse usage to fix warning on Node.js 24 #​9492.
  • pnpm run should be able to run commands from the workspace root, if ignoreScripts is set tot true #​4858.

v10.10.0

Compare Source

Minor Changes
  • Allow loading the preResolution, importPackage, and fetchers hooks from local pnpmfile.
Patch Changes
  • Fix cd command, when shellEmulator is true #​7838.
  • Sort keys in pnpm-workspace.yaml #​9453.
  • Pass the npm_package_json environment variable to the executed scripts #​9452.
  • Fixed a mistake in the description of the --reporter=silent option.

v10.9.0

Compare Source

Minor Changes
  • Added support for installing JSR packages. You can now install JSR packages using the following syntax:

    pnpm add jsr:<pkg_name>
    

    or with a version range:

    pnpm add jsr:<pkg_name>@&#8203;<range>
    

    For example, running:

    pnpm add jsr:@&#8203;foo/bar
    

    will add the following entry to your package.json:

    {
      "dependencies": {
        "@&#8203;foo/bar": "jsr:^0.1.2"
      }
    }

    When publishing, this entry will be transformed into a format compatible with npm, older versions of Yarn, and previous pnpm versions:

    {
      "dependencies": {
        "@&#8203;foo/bar": "npm:@&#8203;jsr/foo__bar@^0.1.2"
      }
    }

    Related issue: #​8941.

    Note: The @jsr scope defaults to https://npm.jsr.io/ if the @jsr:registry setting is not defined.

  • Added a new setting, dangerouslyAllowAllBuilds, for automatically running any scripts of dependencies without the need to approve any builds. It was already possible to allow all builds by adding this to pnpm-workspace.yaml:

    neverBuiltDependencies: []

    dangerouslyAllowAllBuilds has the same effect but also allows to be set globally via:

    pnpm config set dangerouslyAllowAllBuilds true
    

    It can also be set when running a command:

    pnpm install --dangerously-allow-all-builds
    
Patch Changes
  • Fix a false negative in verifyDepsBeforeRun when nodeLinker is hoisted and there is a workspace package without dependencies and node_modules directory #​9424.
  • Explicitly drop verifyDepsBeforeRun support for nodeLinker: pnp. Combining verifyDepsBeforeRun and nodeLinker: pnp will now print a warning.

v10.8.1

Compare Source

Patch Changes
  • Removed bright white highlighting, which didn't look good on some light themes #​9389.
  • If there is no pnpm related configuration in package.json, onlyBuiltDependencies will be written to pnpm-workspace.yaml file #​9404.

v10.8.0

[Compar


Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link
Contributor Author

renovate bot commented Nov 2, 2024

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.


  • Branch has one or more failed status checks

Copy link

coderabbitai bot commented Nov 2, 2024

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (1)
  • chore(deps)

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Note

Free review on us!

CodeRabbit is offering free reviews until Wed Jan 15 2025 to showcase some of the refinements we've made.

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate docstrings to generate docstrings for this PR. (Beta)
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link

socket-security bot commented Nov 2, 2024

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 25 times, most recently from f0a5a4b to b164110 Compare November 7, 2024 09:44
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 17 times, most recently from d97bf42 to 0342a69 Compare July 7, 2025 09:24
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from ef31233 to b35e8bd Compare July 11, 2025 08:54
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from b35e8bd to 172c847 Compare July 12, 2025 00:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants