Skip to content

fix(deps): update all non-major dependencies #57

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Mar 10, 2025
Merged

fix(deps): update all non-major dependencies #57

merged 1 commit into from
Mar 10, 2025

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 10, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@sxzz/eslint-config ^5.2.0 -> ^5.3.0 age adoption passing confidence
@sxzz/prettier-config ^2.2.0 -> ^2.2.1 age adoption passing confidence
@types/node (source) ^22.13.9 -> ^22.13.10 age adoption passing confidence
ast-kit ^1.4.0 -> ^1.4.2 age adoption passing confidence
esbuild ^0.25.0 -> ^0.25.1 age adoption passing confidence
eslint (source) ^9.21.0 -> ^9.22.0 age adoption passing confidence
pnpm (source) 10.5.2 -> 10.6.2 age adoption passing confidence
rollup (source) ^4.34.9 -> ^4.35.0 age adoption passing confidence
tsdown ^0.6.3 -> ^0.6.4 age adoption passing confidence
unplugin-oxc ^0.2.6 -> ^0.2.7 age adoption passing confidence
unplugin-replace ^0.5.0 -> ^0.5.1 age adoption passing confidence
vite (source) ^6.2.0 -> ^6.2.1 age adoption passing confidence
vitest (source) ^3.0.7 -> ^3.0.8 age adoption passing confidence

Release Notes

sxzz/eslint-config (@​sxzz/eslint-config)

v5.3.0

Compare Source

   🚀 Features
    View changes on GitHub
evanw/esbuild (esbuild)

v0.25.1

Compare Source

  • Fix incorrect paths in inline source maps (#​4070, #​4075, #​4105)

    This fixes a regression from version 0.25.0 where esbuild didn't correctly resolve relative paths contained within source maps in inline sourceMappingURL data URLs. The paths were incorrectly being passed through as-is instead of being resolved relative to the source file containing the sourceMappingURL comment, which was due to the data URL not being a file URL. This regression has been fixed, and this case now has test coverage.

  • Fix invalid generated source maps (#​4080, #​4082, #​4104, #​4107)

    This release fixes a regression from version 0.24.1 that could cause esbuild to generate invalid source maps. Specifically under certain conditions, esbuild could generate a mapping with an out-of-bounds source index. It was introduced by code that attempted to improve esbuild's handling of "null" entries in source maps (i.e. mappings with a generated position but no original position). This regression has been fixed.

    This fix was contributed by @​jridgewell.

  • Fix a regression with non-file source map paths (#​4078)

    The format of paths in source maps that aren't in the file namespace was unintentionally changed in version 0.25.0. Path namespaces is an esbuild-specific concept that is optionally available for plugins to use to distinguish paths from file paths and from paths meant for other plugins. Previously the namespace was prepended to the path joined with a : character, but version 0.25.0 unintentionally failed to prepend the namespace. The previous behavior has been restored.

  • Fix a crash with switch optimization (#​4088)

    The new code in the previous release to optimize dead code in switch statements accidentally introduced a crash in the edge case where one or more switch case values include a function expression. This is because esbuild now visits the case values first to determine whether any cases are dead code, and then visits the case bodies once the dead code status is known. That triggered some internal asserts that guard against traversing the AST in an unexpected order. This crash has been fixed by changing esbuild to expect the new traversal ordering. Here's an example of affected code:

    switch (x) {
  case '':
    return y.map(z => z.value)
  case y.map(z => z.key).join(','):
    return []
}

  • Update Go from 1.23.5 to 1.23.7 (#​4076, #​4077)

    This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain reports from vulnerability scanners that detect which version of the Go compiler esbuild uses.

    This PR was contributed by @​MikeWillCook.

eslint/eslint (eslint)

v9.22.0

Compare Source

pnpm/pnpm (pnpm)

v10.6.2

Compare Source

Patch Changes
  • pnpm self-update should always update the version in the packageManager field of package.json.
  • Fix running pnpm CLI from pnpm CLI on Windows when the CLI is bundled to an executable #​8971.
  • pnpm patch-commit will now use the same filesystem as the store directory to compare and create patch files.
  • Don't show info output when --loglevel=error is used.
  • peerDependencyRules should be set in pnpm-workspace.yaml to take effect.

v10.6.1

Compare Source

Patch Changes
  • The pnpm CLI process should not stay hanging, when --silent reporting is used.
  • When --loglevel is set to error, don't show installation summary, execution time, and big tarball download progress.
  • Don't ignore pnpm.patchedDependencies from package.json #​9226.
  • When executing the approve-builds command, if package.json contains onlyBuiltDependencies or ignoredBuiltDependencies, the selected dependency package will continue to be written into package.json.
  • When a package version cannot be found in the package metadata, print the registry from which the package was fetched.

v10.6.0

Compare Source

Minor Changes

  • pnpm-workspace.yaml can now hold all the settings that .npmrc accepts. The settings should use camelCase #​9211.

    pnpm-workspace.yaml example:

    verifyDepsBeforeRun: install
optimisticRepeatInstall: true
publicHoistPattern:
  - "*types*"
  - "!@​types/react"

  • Projects using a file: dependency on a local tarball file (i.e. .tgz, .tar.gz, .tar) will see a performance improvement during installation. Previously, using a file: dependency on a tarball caused the lockfile resolution step to always run. The lockfile will now be considered up-to-date if the tarball is unchanged.

Patch Changes
  • pnpm self-update should not leave a directory with a broken pnpm installation if the installation fails.
  • fast-glob replace with tinyglobby to reduce the size of the pnpm CLI dependencies #​9169.
  • pnpm deploy should not remove fields from the deployed package's package.json file #​9215.
  • pnpm self-update should not read the pnpm settings from the package.json file in the current working directory.
  • Fix pnpm deploy creating a package.json without the imports and license field #​9193.
  • pnpm update -i should list only packages that have newer versions #​9206.
  • Fix a bug causing entries in the catalogs section of the pnpm-lock.yaml file to be removed when dedupe-peer-dependents=false on a filtered install. #​9112
rollup/rollup (rollup)

v4.35.0

Compare Source

2025-03-08

Features
  • Pass build errors to the closeBundle hook (#​5867)
Pull Requests
unplugin/unplugin-oxc (unplugin-oxc)

v0.2.7

Compare Source

   🚀 Features
    View changes on GitHub
unplugin/unplugin-replace (unplugin-replace)

v0.5.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
vitejs/vite (vite)

v6.2.1

Compare Source

vitest-dev/vitest (vitest)

v3.0.8

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@bolt-new-by-stackblitz Bolt.new (by StackBlitz)
Copy link

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@socket-security Socket Security
Copy link

socket-security bot commented Mar 10, 2025 •
edited
Loading

New and updated dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@sxzz/eslint-config@5.2.0 ➜ 5.3.0 environment Transitive: eval, filesystem, unsafe +227 32 MB sxzz
npm/@types/node@22.13.9 ➜ 22.13.10 None +1 2.4 MB types
npm/esbuild@0.25.0 ➜ 0.25.1 None 0 134 kB esbuild, evanw
npm/eslint@9.21.0 ➜ 9.22.0 Transitive: eval, filesystem, shell, unsafe +85 6.69 MB
npm/rollup@4.34.9 ➜ 4.35.0 None +1 2.72 MB eventualbuddha, lukastaegert, rich_harris, ...2 more
npm/unplugin-oxc@0.2.6 ➜ 0.2.7 Transitive: environment, shell +3 78.2 kB sxzz
npm/unplugin-replace@0.5.0 ➜ 0.5.1 None 0 18.5 kB sxzz
npm/vite@6.2.0 ➜ 6.2.1 Transitive: environment, filesystem +4 405 kB
npm/vitest@3.0.7 ➜ 3.0.8 Transitive: environment, filesystem, shell, unsafe +31 2.95 MB antfu, oreanno, patak, ...1 more

View full report↗︎

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 13c1b5d to d581636 Compare March 10, 2025 07:14
@renovate renovate bot merged commit 08e71ac into main Mar 10, 2025
9 checks passed
@renovate renovate bot deleted the renovate/all-minor-patch branch March 10, 2025 11:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants