fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node (source)	^22.15.17 -> ^22.15.19
bumpp	^10.1.0 -> ^10.1.1
eslint (source)	^9.26.0 -> ^9.27.0
pnpm (source)	10.10.0 -> 10.11.0
tsdown	^0.11.4 -> ^0.11.11
unplugin (source)	^2.3.2 -> ^2.3.4
vue (source)	^3.5.13 -> ^3.5.14

---

Release Notes

antfu-collective/bumpp (bumpp)

v10.1.1

Compare Source

   🐞 Bug Fixes

• Consider packages key existence in pnpm-workspace.yaml  -  by @​sushichan044 in https://github.com/antfu-collective/bumpp/issues/78 (213aa)

    View changes on GitHub

eslint/eslint (eslint)

v9.27.0

Compare Source

pnpm/pnpm (pnpm)

v10.11.0

Compare Source

Minor Changes

• A new setting added for pnpm init to create a package.json with type=module, when init-type is module. Works as a flag for the init command too #​9463.

• Added support for Nushell to pnpm setup #​6476.

• Added two new flags to the pnpm audit command, --ignore and --ignore-unfixable #​8474.

  Ignore all vulnerabilities that have no solution:

  > pnpm audit --ignore-unfixable

  Provide a list of CVE's to ignore those specifically, even if they have a resolution.

  > pnpm audit --ignore=CVE-2021-1234 --ignore=CVE-2021-5678

• Added support for recursively running pack in every project of a workspace #​4351.

  Now you can run pnpm -r pack to pack all packages in the workspace.

Patch Changes

• pnpm version management should work, when dangerouslyAllowAllBuilds is set to true #​9472.
• pnpm link should work from inside a workspace #​9506.
• Set the default workspaceConcurrency to Math.min(os.availableParallelism(), 4) #​9493.
• Installation should not exit with an error if strictPeerDependencies is true but all issues are ignored by peerDependencyRules #​9505.
• Read updateConfig from pnpm-workspace.yaml #​9500.
• Add support for recursive pack
• Remove url.parse usage to fix warning on Node.js 24 #​9492.
• pnpm run should be able to run commands from the workspace root, if ignoreScripts is set tot true #​4858.

rolldown/tsdown (tsdown)

v0.11.11

Compare Source

   🚀 Features

• Add ignore-watch option  -  by @​btea and @​sxzz in https://github.com/rolldown/tsdown/issues/236 (1e8d0)

   🐞 Bug Fixes

• workspace: Skip if no entry  -  by @​sxzz (e0e67)

    View changes on GitHub

v0.11.10

Compare Source

   🚨 Breaking Changes

• Upgrade dts plugin for eager & parallel option support, drop vfs for dts tsc  -  by @​sxzz (50fbe)

   🚀 Features

• Warn if @oxc-project/runtime is missing  -  by @​wChenonly and @​sxzz in https://github.com/rolldown/tsdown/issues/233 (86ad5)

   🐞 Bug Fixes

• Skip when workspace config has no entry files  -  by @​KazariEX in https://github.com/rolldown/tsdown/issues/230 (dfc80)

    View changes on GitHub

v0.11.9

Compare Source

   🚀 Features

• Output publint time cost  -  by @​sxzz (48f6e)
• Add filter option for workspace  -  by @​sxzz (91ed5)

   🐞 Bug Fixes

• Missing name label on glob fail  -  by @​sxzz (751f0)
• Reload when workspace config changed  -  by @​sxzz (68b30)

    View changes on GitHub

v0.11.8

Compare Source

   🌟 Workspace Support (Experimental Feature)

• Add Workspace support  -  by @​sxzz and @​fu050409 (6f962)
• Add workspace cli  -  by @​sxzz (5b775)

   🚀 Features

• Add name option  -  by @​sxzz (0bd0b)
• Allow unknown cli options  -  by @​sxzz (2fd25)

    View changes on GitHub

v0.11.7

Compare Source

   🐞 Bug Fixes

• Resolve typescript peer dependency with Yarn PnP  -  by @​gronxb and @​sxzz in https://github.com/rolldown/tsdown/issues/227 (629a2)

    View changes on GitHub

v0.11.6

Compare Source

   🚀 Features

• Upgrade rolldown & dts plugin  -  by @​sxzz (482f6)

   🐞 Bug Fixes

• Resolve outDir based on cwd  -  by @​sxzz (e405f)

    View changes on GitHub

v0.11.5

Compare Source

   🐞 Bug Fixes

• Co-usage of removeNodeProtocol and skipNodeModulesBundle  -  by @​sxzz (54780)

   🏎 Performance

• Upgrade dts plugin  -  by @​sxzz (a05ee)

    View changes on GitHub

unjs/unplugin (unplugin)

v2.3.4

Compare Source

   🐞 Bug Fixes

• Rollback webpack __vfsModules to use a Set  -  by @​elbywan in https://github.com/unjs/unplugin/issues/507 (25b52)

    View changes on GitHub

v2.3.3

Compare Source

   🐞 Bug Fixes

• rspack: Prevent vfs concurrency issues  -  by @​elbywan in https://github.com/unjs/unplugin/issues/504 (9f680)

    View changes on GitHub

vuejs/core (vue)

v3.5.14

Compare Source

Bug Fixes

• compat: correct deprecation message for v-bind.sync usage (#​13137) (466b30f), closes #​13133
• compiler-core: remove slot cache from parent renderCache during unmounting (#​13215) (5d166f3)
• compiler-sfc: fix scope handling for props destructure in function parameters and catch clauses (8e34357), closes #​12790
• compiler-sfc: treat the return value of useTemplateRef as a definite ref (#​13197) (8ae1122)
• compiler: fix spelling error in domTagConfig (#​13043) (388295b)
• customFormatter: properly accessing ref value during debugger (#​12948) (fdbd026)
• hmr/teleport: adjust static children traversal for HMR in dev mode (#​12819) (5e37dd0), closes #​12816
• hmr: avoid hydration for hmr root reload (#​12450) (1f98a9c), closes vitejs/vite-plugin-vue#146 vitejs/vite-plugin-vue#477
• hmr: avoid hydration for hmr updating (#​12262) (9c4dbbc), closes #​7706 #​8170
• reactivity: ensure markRaw objects are not reactive (#​12824) (295b5ec), closes #​12807
• reactivity: ensure multiple effectScope on() and off() calls maintains correct active scope (22dcbf3), closes #​12631 #​12632 #​12641
• reactivity: should not recompute if computed does not track reactive data (#​12341) (0b23fd2), closes #​12337
• runtime-core: stop tracking deps in setRef during unmount (#​13210) (016c472)
• runtime-core: update __vnode of static nodes when patching along the optimized path (#​13223) (b3ecee3)
• runtime-core: inherit comment nodes during block patch in production build (#​10748) (6264505), closes #​10747 #​12650
• runtime-core: prevent unmounted vnode from being inserted during transition leave (#​12862) (d6a6ec1), closes #​12860
• runtime-core: respect immutability for readonly reactive arrays in v-for (#​13091) (3f27c58), closes #​13087
• runtime-dom: always treat autocorrect as attribute (#​13001) (1499135), closes #​5705
• slots: properly warn if slot invoked in setup (#​12195) (9196222), closes #​12194
• ssr: properly init slots during ssr rendering (#​12441) (2206cd2), closes #​12438
• transition: fix KeepAlive with transition out-in mode behavior in production (#​12468) (343c891), closes #​12465
• TransitionGroup: reset prevChildren to prevent memory leak (#​13183) (8b848cb), closes #​13181
• types: allow return any for Options API lifecycle hooks (#​5914) (06310e8)
• types: the directive's modifiers should be optional (#​12605) (10e54dc)
• typos: fix comments referencing transformElement.ts (#​12551)[ci-skip] (11c053a)

Features

• types: add type TemplateRef (#​12645) (636a861)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	bumpp@​10.1.0 ⏵ 10.1.1	+1			+4
	unplugin@​2.3.2 ⏵ 2.3.4			+1	+3
	tsdown@​0.11.4 ⏵ 0.11.11	+2		+1	+1
	vue@​3.5.13 ⏵ 3.5.14	+1		+1
	eslint@​9.26.0 ⏵ 9.27.0
	@​types/​node@​22.15.17 ⏵ 22.15.19	+1		+21	+5

View full report