Skip to content

fix(deps): update all dependencies #427

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all dependencies #427

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 15, 2025 •
edited
Loading

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

This PR contains the following updates:

Package Change Age Confidence
@commitlint/cli (source) ^19.8.1 -> ^20.1.0 age confidence
@commitlint/config-conventional (source) ^19.8.1 -> ^20.0.0 age confidence
@commitlint/types (source) ^19.8.1 -> ^20.0.0 age confidence
iconify-icon (source) ^3.0.0 -> ^3.0.1 age confidence
lint-staged ^16.1.6 -> ^16.2.3 age confidence
oxc-minify (source) ^0.87.0 -> ^0.93.0 age confidence
pnpm (source) 10.16.1 -> 10.18.0 age confidence
typescript (source) ^5.9.2 -> ^5.9.3 age confidence
vite (source) ^7.1.9 -> ^7.1.15 age confidence
vitepress-plugin-llms ^1.7.5 -> ^1.8.0 age confidence
vue (source) ^3.5.21 -> ^3.5.22 age confidence

Release Notes

conventional-changelog/commitlint (@​commitlint/cli)

v20.1.0

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.0.0

Compare Source

Note: Version bump only for package @​commitlint/cli

19.8.1 (2025-05-08)

Bug Fixes
conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.0.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

19.8.1 (2025-05-08)

Note: Version bump only for package @​commitlint/config-conventional

conventional-changelog/commitlint (@​commitlint/types)

v20.0.0

Compare Source

Note: Version bump only for package @​commitlint/types

19.8.1 (2025-05-08)

Note: Version bump only for package @​commitlint/types

lint-staged/lint-staged (lint-staged)

v16.2.3

Compare Source

Patch Changes
  • #​1669 27cd541 Thanks @​iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

v16.2.2

Compare Source

Patch Changes

  • #​1667 699f95d Thanks @​iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

    Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

    % npx lint-staged --fail-on-changes
✔ Backed up original state in git stash (c18d55a3)
✔ Running tasks for staged files...
✖ Tasks modified files and --fail-on-changes was used!
↓ Cleaning up temporary files...

✖ lint-staged failed because `--fail-on-changes` was used.

Any lost modifications can be restored from a git stash:

  > git stash list --format="%h %s"
  c18d55a3 On main: lint-staged automatic backup
  > git apply --index c18d55a3

v16.2.1

Compare Source

Patch Changes

  • #​1664 8277b3b Thanks @​iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions is readonly string[] and can't be mutated. Thanks @​outslept!

    export default {
---  "*": (files: string[]) => void console.log('staged files', files)
+++  "*": (files: readonly string[]) => void console.log('staged files', files)
}

  • #​1654 70b9af3 Thanks @​iiroj! - This version has been published from GitHub Actions using Trusted Publishing for npm packages.

  • #​1659 4996817 Thanks @​iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there are package.json files in the working directory. This situation might happen when running lint-staged for a single package in a monorepo.

  • #​1654 7021f0a Thanks @​iiroj! - Return the caret semver range (^) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates to lint-staged. This was changed in 16.2.0 after the vulnerability issues with chalk and debug, which were also removed in the same version.

    Given the recent vulnerabilities in the npm ecosystem, it's best to be very careful when updating dependencies.

v16.2.0

Compare Source

Minor Changes

  • #​1615 99eb742 Thanks @​iiroj! - Added a new option --fail-on-changes to make lint-staged exit with code 1 when tasks modify any files, making the precommit hook fail. This is similar to the git diff --exit-code option. Using this flag also implies the --no-revert flag which means any changes made my tasks will be left in the working tree after failing, so that they can be manually staged and the commit tried again.

  • #​1611 cd05fd3 Thanks @​rlorenzo! - Added a new option --continue-on-error so that lint-staged will run all tasks to completion even if some of them fail. By default, lint-staded will exit early on the first failure.

  • #​1637 82fcc07 Thanks @​iiroj! - Internal lint-staged errors are now thrown and visible in the console output. Previously they were caught with the process exit code set to 1, but not logged. This happens when, for example, there's a syntax error in the lint-staged configuration file.

  • #​1647 a5ecc06 Thanks @​iiroj! - Remove debug as a dependency due to recent malware issue; read more at debug-js/debug#1005. Because of this, the DEBUG environment variable is no longer supported — use the --debug to enable debugging

  • #​1636 8db2717 Thanks @​iiroj! - Added a new option --hide-unstaged so that lint-staged will hide all unstaged changes to tracked files before running tasks. The changes will be applied back after running the tasks. Note that the combination of flags --hide-unstaged --no-hide-partially-staged isn't meaningful and behaves the same as just --hide-unstaged.

    Thanks to @​ItsNickBarry for the idea and initial implementation in #​1552.

  • #​1648 7900b3b Thanks @​iiroj! - Remove lilconfig to reduce reliance on third-party dependencies. It was used to find possible config files outside of those tracked in Git, including from the parent directories. This behavior has been moved directly into lint-staged and should work about the same.

Patch Changes
oxc-project/oxc (oxc-minify)

v0.92.0

🐛 Bug Fixes
  • 2f9e16d napi/minifier, napi/transformer: Rename CommonJS file to .cjs (#​14047) (overlookmotel)
🚜 Refactor

v0.91.0

💥 BREAKING CHANGES
  • 6fcb0d0 minifier: [BREAKING] Receive supported engines instead of ecmascript versions (#​13933) (sapphi-red)
🐛 Bug Fixes
  • 21bbf95 napi: Rebuild bindings file for NAPI packages (#​13889) (overlookmotel)
💼 Other

v0.90.0

🚀 Features
  • b52389a node: Bump engines field to require Node.js 20.19.0+ for ESM support (#​13879) (Copilot)
🐛 Bug Fixes
  • 9796ec1 napi: Fix binding files (Boshen)
pnpm/pnpm (pnpm)

v10.18.0

Compare Source

Minor Changes

  • Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

    Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
    Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

    Related PR: #​10025.

Patch Changes
  • Retry filesystem operations on EAGAIN errors #​9959.
  • Outdated command respects minimumReleaseAge configuration #​10030.
  • Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
  • Don't fail with a meaningless error when scriptShell is set to false #​8748.
  • pnpm dlx should not fail when minimumReleaseAge is set #​10037.

v10.17.1

Compare Source

Patch Changes
  • When a version specifier cannot be resolved because the versions don't satisfy the minimumReleaseAge setting, print this information out in the error message #​9974.
  • Fix state.json creation path when executing pnpm patch in a workspace project #​9733.
  • When minimumReleaseAge is set and the latest tag is not mature enough, prefer a non-deprecated version as the new latest #​9987.

v10.17.0

Compare Source

Minor Changes

  • The minimumReleaseAgeExclude setting now supports patterns. For instance:

    minimumReleaseAge: 1440
minimumReleaseAgeExclude:
  - "@​eslint/*"

    Related PR: #​9984.

Patch Changes
  • Don't ignore the minimumReleaseAge check, when the package is requested by exact version and the packument is loaded from cache #​9978.
  • When minimumReleaseAge is set and the active version under a dist-tag is not mature enough, do not downgrade to a prerelease version in case the original version wasn't a prerelease one #​9979.
microsoft/TypeScript (typescript)

v5.9.3

Compare Source

vitejs/rolldown-vite (vite)

v7.1.15

Compare Source

Bug Fixes
Miscellaneous Chores

v7.1.14

Compare Source

Features
Bug Fixes
  • use readFileSync to avoid "too many open files" (7c7ffdc)
Performance Improvements
  • use single regex for isEntirelyImport (ac1ceaf)
Documentation
Miscellaneous Chores

v7.1.13

Compare Source

Features
  • hmr: skip self-imports for import.meta.hot.invalidate (ebd134f)
  • update rolldown (007e115)

v7.1.12

Compare Source

Features
Bug Fixes
  • build: fix ssr environment emitAssets: true when sharedConfigBuild: true (#​20787) (4c4583c)
  • client: use CSP nonce when rendering error overlay (#​20791) (9bc9d12)
  • deps: update all non-major dependencies (#​20811) (9f2247c)
  • glob: handle glob imports from folders starting with dot (#​20800) (105abe8)
  • hmr: trigger prune event when import is removed from non hmr module (#​20768) (9f32b1d)
  • hmr: wait for import.meta.hot.prune callbacks to complete before running other HMRs (#​20698) (98a3484)

v7.1.11

Compare Source

Bug Fixes
  • deps: update all non-major dependencies (#​20773) (88af2ae)
  • esbuild: inject esbuild helper functions with minified $ variables correctly (#​20761) (7e8e004)
  • fallback terser to main thread when nameCache is provided (#​20750) (a679a64)
  • optimizer: avoid mutating optimizeDeps.rollupOptions.transforms for stable optimizer hash (#​417) (efed40f)
  • types: strict env typings fail when skipLibCheck is false (#​20755) (cc54e29)
Miscellaneous Chores

v7.1.10

Compare Source

Features
okineadev/vitepress-plugin-llms (vitepress-plugin-llms)

v1.8.0

Compare Source

   🚀 Features
  • Add support for markdown file inclusion and code snippets  -  by @​okineadev and Claude (2da71)

Now the plugin will understand and process file Inclusions like <!--@&#8203;include: ./parts/basics.md--> and code snippets like <<< @&#8203;/snippets/snippet.js as proposed in #​69

    View changes on GitHub
vuejs/core (vue)

v3.5.22

Compare Source

Bug Fixes
Features
  • custom-element: allow specifying additional options for shadowRoot in custom elements (#​12965) (47e628d), closes #​12964
Reverts
  • Revert "fix(hmr): prevent VUE_HMR_RUNTIME from being overwritten by vue runtime in 3rd-party libraries" (#​13925) (6b68f72), closes #​13925

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Sep 15, 2025
@netlify Netlify
Copy link

netlify bot commented Sep 15, 2025 •
edited
Loading

✅ Deploy Preview for theojs-lumen ready!

Name Link
🔨 Latest commit f64730b
🔍 Latest deploy log https://app.netlify.com/projects/theojs-lumen/deploys/68deb13c54012a0008449544
😎 Deploy Preview https://deploy-preview-427--theojs-lumen.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@renovate renovate bot changed the title chore(deps): update dependency oxc-minify to ^0.88.0 fix(deps): update all dependencies Sep 15, 2025
@pkg-pr-new pkg.pr.new
Copy link

pkg-pr-new bot commented Sep 15, 2025 •
edited
Loading

Open in StackBlitz

pnpm add https://pkg.pr.new/@theojs/lumen@427

commit: f64730b

@renovate renovate bot force-pushed the renovate/all branch 8 times, most recently from 47b2716 to 45ac906 Compare September 22, 2025 12:25
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 343b998 to f11b50c Compare September 24, 2025 05:25
@renovate renovate bot force-pushed the renovate/all branch 7 times, most recently from fd18117 to f61f0d3 Compare September 28, 2025 13:00
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 790d97a to 99f402c Compare September 30, 2025 12:52
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 87d2e76 to eff713b Compare October 2, 2025 10:32
@sonarqubecloud SonarQubeCloud
Copy link

sonarqubecloud bot commented Oct 2, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@s-theo s-theo

Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@s-theo