fix(deps): update all non-major dependencies #45

renovate · 2024-03-25T01:52:55Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/core (source)	`^7.24.3` -> `^7.24.4`
@sxzz/eslint-config	`^3.8.7` -> `^3.9.0`
@types/node (source)	`^20.11.30` -> `^20.12.5`
magic-string	`^0.30.8` -> `^0.30.9`
pnpm (source)	`8.15.5` -> `8.15.6`
tsx	`^4.7.1` -> `^4.7.2`
typescript (source)	`^5.4.2` -> `^5.4.4`
unplugin	`^1.10.0` -> `^1.10.1`
vite (source)	`^5.2.2` -> `^5.2.8`

Release Notes

babel/babel (@babel/core)

`v7.24.4`

Compare Source

👓 Spec Compliance

babel-parser
- #16403 Forbid initializerless using (@JLHwung)
babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
- #16388 Ensure decorators are callable (@JLHwung)

🐛 Bug Fix

babel-generator
- #16402 fix: Correctly prints { [key in Bar]? } (@liuxingbaoyu)
- #16394 fix: Correctly generate TSMappedType (@liuxingbaoyu)
babel-compat-data, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-preset-env
- #16390 Create bugfix plugin for classes in computed keys in Firefox (@nicolo-ribaudo)
babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
- #16387 fix: support mutated outer decorated class binding (@JLHwung)
- #16385 fix: Decorators when super() exists and protoInit is not needed (@liuxingbaoyu)
babel-plugin-transform-block-scoping
- #16384 fix: Transform scoping for for X in loop (@liuxingbaoyu)
- #16368 fix: Capture let when the for body is not a block (@liuxingbaoyu)
babel-core, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping
- #16363 Fix incorrect function hoisting in some case statements (@luiscubal)

sxzz/eslint-config (@sxzz/eslint-config)

`v3.9.0`

Compare Source

Minor Changes

Replace eslint-plugin-i with eslint-plugin-import-x for supporting ESLint v9.

🚀 Features

unicorn: Enable promise lint - by @sxzz (46458)

🐞 Bug Fixes

deps:
- Update dependency globals to v15 - by @renovate[bot] inhttps://github.com/sxzz/eslint-config/issues/700 (6f282)
- Update dependency eslint-plugin-unicorn to v52 - by @renovate[bot] inhttps://github.com/sxzz/eslint-config/issues/722 (66574)

View changes on GitHub

rich-harris/magic-string (magic-string)

`v0.30.9`

Compare Source

Performance Improvements

avoid create uncessary overrides for replace (a1b857c)

pnpm/pnpm (pnpm)

`v8.15.6`

Compare Source

Patch Changes

The exit code of the child process should be preserved on pnpm run #7817.
When sorting packages in a workspace, take into account workspace dependencies specified as peerDependencies #7813.
Add --ignore-scripts argument to prune command #7836.

Platinum Sponsors

Gold Sponsors

Silver Sponsors

privatenumber/tsx (tsx)

`v4.7.2`

Compare Source

Microsoft/TypeScript (typescript)

`v5.4.4`: TypeScript 5.4.4

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

NuGet package

`v5.4.3`: TypeScript 5.4.3

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

NuGet package

unjs/unplugin (unplugin)

`v1.10.1`

Compare Source

Bug Fixes

esbuild: sourcemaps in transform result can be a string (#377) (4382fa2)
webpack,rspack: incorrect assumption about the current working directory in webpack and rspack (#374) (b0ec0e0)

vitejs/vite (vite)

`v5.2.8`

Compare Source

fix: csp nonce injection when no closing tag (#16281) (#16282) (3c85c6b), closes #16281 #16282
fix: do not access document in /@vite/client when not defined (#16318) (646319c), closes #16318
fix: fix sourcemap when using object as define value (#15805) (445c4f2), closes #15805
fix(css): unknown file error happened with lightningcss (#16306) (01af308), closes #16306
fix(hmr): multiple updates happened when invalidate is called while multiple tabs open (#16307) (21cc10b), closes #16307
fix(scanner): duplicate modules for same id if glob is used in html-like types (#16305) (eca68fa), closes #16305
chore(deps): update all non-major dependencies (#16325) (a78e265), closes #16325
refactor: use types from sass instead of @types/sass (#16340) (4581e83), closes #16340

`v5.2.7`

Compare Source

chore: deprecate splitVendorChunkPlugin (#16274) (45a06da), closes #16274
fix: skip injecting __vite__mapDeps when it's not used (#16271) (890538a), closes #16271
fix(deps): update all non-major dependencies (#16258) (7caef42), closes #16258
fix(hmr): don't mutate module graph when collecting modules (#16302) (dfffea1), closes #16302
fix(hmr): trigger hmr for missing file import errored module after file creation (#16303) (ffedc06), closes #16303
fix(sourcemap): don't warn even if the sourcesContent is an empty string (#16273) (24e376a), closes #16273
feat(hmr): reload when HTML file is created/deleted (#16288) (1f53796), closes #16288

`v5.2.6`

Compare Source

fix: fs.deny with globs with directories (#16250) (ba5269c), closes #16250

`v5.2.5`

Compare Source

fix: avoid SSR requests in waitForRequestIdle (#16246) (7093f77), closes #16246
docs: clarify enforce vs hook.order (#16226) (3a73e48), closes #16226

`v5.2.4`

fix: dont resolve imports with malformed URI (#16244) (fbf69d5), closes #16244

`v5.2.3`

fix: handle warmup request error correctly (#16223) (d7c5256), closes #16223
fix: skip encode if is data uri (#16233) (8617e76), closes #16233
fix(optimizer): fix optimizeDeps.include glob syntax for ./* exports (#16230) (f184c80), closes #16230
fix(runtime): fix sourcemap with prepareStackTrace (#16220) (dad7f4f), closes #16220
chore: utf8 replaced with utf-8 (#16232) (9800c73), closes #16232

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

bolt-new-by-stackblitz · 2024-03-25T01:52:58Z

Run & review this pull request in StackBlitz Codeflow.

socket-security · 2024-03-25T01:53:18Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@babel/core@7.24.4	environment, filesystem, unsafe Transitive: shell	`+54`	13.3 MB	nicolo-ribaudo
npm/@sxzz/eslint-config@3.9.0	environment Transitive: eval, filesystem, shell, unsafe	`+197`	31.2 MB	sxzz
npm/@types/node@20.12.5	None	`+1`	2.1 MB	types
npm/magic-string@0.30.9	None	`+1`	498 kB	antfu
npm/tsx@4.7.2	Transitive: environment, filesystem, network, shell, unsafe	`+3`	641 kB	hirokiosame
npm/typescript@5.4.4	None	`0`	32.4 MB	typescript-bot
npm/unplugin@1.10.1	filesystem Transitive: environment	`+17`	1.2 MB	antfu
npm/vite@5.2.8	environment, eval, filesystem, network, shell, unsafe	`+7`	6.35 MB	vitebot

🚮 Removed packages: npm/@babel/core@7.24.3, npm/@sxzz/eslint-config@3.8.7, npm/@types/node@20.11.30, npm/magic-string@0.30.8, npm/tsx@4.7.1, npm/typescript@5.4.2, npm/unplugin@1.10.0, npm/vite@5.2.2

View full report↗︎

socket-security · 2024-04-08T07:39:25Z

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source
Potential typo squat	npm/eslint-plugin-import-x@0.5.0	Did you mean: eslint-plugin-import~~-x~~ (900 times more downloads)	`package.json` `pnpm-lock.yaml`

View full report↗︎

Next steps

What is a typosquat?

Package name is similar to other popular packages and may not be the package you want.

Use care when consuming similarly named packages and ensure that you did not intend to consume a different package. Malicious packages often publish using similar names as existing popular packages.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

@SocketSecurity ignore npm/eslint-plugin-import-x@0.5.0

renovate bot added the dependencies label Mar 25, 2024

renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from fb70bd2 to b9a5dc7 Compare April 3, 2024 20:18

renovate bot changed the title ~~chore(deps): update all non-major dependencies~~ fix(deps): update all non-major dependencies Apr 3, 2024

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 8f912dd to 935f5fa Compare April 6, 2024 02:47

fix(deps): update all non-major dependencies

882b628

renovate bot force-pushed the renovate/all-minor-patch branch from 935f5fa to 882b628 Compare April 8, 2024 07:38

fix eslint

cb8d2dd

sxzz merged commit 9e4c390 into main Apr 9, 2024

sxzz deleted the renovate/all-minor-patch branch April 9, 2024 08:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

fix(deps): update all non-major dependencies #45

fix(deps): update all non-major dependencies #45

Uh oh!

renovate bot commented Mar 25, 2024 •

edited

Loading

Uh oh!

bolt-new-by-stackblitz bot commented Mar 25, 2024

Uh oh!

socket-security bot commented Mar 25, 2024 •

edited

Loading

Uh oh!

socket-security bot commented Apr 8, 2024 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

fix(deps): update all non-major dependencies #45

fix(deps): update all non-major dependencies #45

Uh oh!

Conversation

renovate bot commented Mar 25, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

👓 Spec Compliance

🐛 Bug Fix

Minor Changes

🚀 Features

🐞 Bug Fixes

Performance Improvements

Patch Changes

Platinum Sponsors

Gold Sponsors

Silver Sponsors

v5.4.4: TypeScript 5.4.4

v5.4.3: TypeScript 5.4.3

Bug Fixes

Configuration

Uh oh!

bolt-new-by-stackblitz bot commented Mar 25, 2024

Uh oh!

socket-security bot commented Mar 25, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Apr 8, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Next steps

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate bot commented Mar 25, 2024 •

edited

Loading

`v5.4.4`: TypeScript 5.4.4

`v5.4.3`: TypeScript 5.4.3

socket-security bot commented Mar 25, 2024 •

edited

Loading

socket-security bot commented Apr 8, 2024 •

edited

Loading