fix(deps): update all non-major dependencies #88

renovate · 2025-08-25T00:58:43Z

This PR contains the following updates:

Package	Change	Age	Confidence
@sxzz/eslint-config	`^7.1.2` -> `^7.1.4`
@sxzz/prettier-config	`^2.2.3` -> `^2.2.4`
eslint (source)	`^9.33.0` -> `^9.34.0`
local-pkg	`^1.1.1` -> `^1.1.2`
magic-string	`^0.30.17` -> `^0.30.18`
pnpm (source)	`10.14.0` -> `10.15.0`
tsx (source)	`^4.20.4` -> `^4.20.5`
unplugin (source)	`^2.3.6` -> `^2.3.8`
unplugin-utils	`^0.2.5` -> `^0.3.0`
vite (source)	`^7.1.2` -> `^7.1.3`
vue (source)	`^3.5.18` -> `^3.5.19`

Release Notes

sxzz/eslint-config (@sxzz/eslint-config)

`v7.1.4`

Compare Source

🚀 Features

Enable more rules - by @sxzz (4d1a8)

View changes on GitHub

`v7.1.3`

Compare Source

No significant changes

View changes on GitHub

sxzz/prettier-config (@sxzz/prettier-config)

`v2.2.4`

Compare Source

No significant changes

View changes on GitHub

eslint/eslint (eslint)

`v9.34.0`

Compare Source

antfu-collective/local-pkg (local-pkg)

`v1.1.2`

Compare Source

No significant changes

View changes on GitHub

rich-harris/magic-string (magic-string)

`v0.30.18`

Compare Source

Bug Fixes

prevent infinite loop on empty input (#302) (0fd6253)

pnpm/pnpm (pnpm)

`v10.15.0`

Compare Source

Minor Changes

Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #9793.
Automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #9780.
pnpm config get now prints an INI string for an object value #9797.
pnpm config get now accepts property paths (e.g. pnpm config get catalog.react, pnpm config get .catalog.react, pnpm config get 'packageExtensions["@babel/parser"].peerDependencies["@babel/types"]'), and pnpm config set now accepts dot-leading or subscripted keys (e.g. pnpm config set .ignoreScripts true).
pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON.

Patch Changes

Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #9835.
When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists #9775.
When making requests for the non-abbreviated packument, add */* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #9862.
The standalone exe version of pnpm works with glibc 2.26 again #9734.
Fix a regression in which pnpm dlx pkg --help doesn't pass --help to pkg #9823.

privatenumber/tsx (tsx)

`v4.20.5`

Compare Source

Bug Fixes

handle ambiguous packages (796053a)

This release is also available on:

npm package (@latest dist-tag)

unjs/unplugin (unplugin)

`v2.3.8`

Compare Source

🐞 Bug Fixes

rspack: Gate virtual folder behind process pid - by @elbywan in #538 (417a6)

View changes on GitHub

`v2.3.7`

Compare Source

🐞 Bug Fixes

rspack: Prevents an unhandled promise rejection when throwing in the async loader - by @elbywan in #536 (cfbc2)

View changes on GitHub

sxzz/unplugin-utils (unplugin-utils)

`v0.3.0`

Compare Source

🚨 Breaking Changes

Drop cjs build - by @sxzz (f0285)
Drop node18 support - by @sxzz (760f7)

View changes on GitHub

vitejs/vite (vite)

`v7.1.3`

Compare Source

Features

cli: add Node.js version warning for unsupported versions (#20638) (a1be1bf)
generate code frame for parse errors thrown by terser (#20642) (a9ba017)
support long lines in generateCodeFrame (#20640) (1559577)

Bug Fixes

deps: update all non-major dependencies (#20634) (4851cab)
optimizer: incorrect incompatible error (#20439) (446fe83)
support multiline new URL(..., import.meta.url) expressions (#20644) (9ccf142)

Performance Improvements

cli: dynamically import resolveConfig (#20646) (f691f57)

Miscellaneous Chores

deps: update rolldown-related dependencies (#20633) (98b92e8)

Code Refactoring

replace startsWith with strict equality (#20603) (42816de)
use import in worker threads (#20641) (530687a)

Tests

remove checkNodeVersion test (#20647) (731d3e6)

vuejs/core (vue)

`v3.5.19`

Compare Source

Bug Fixes

compiler-core: adjacent v-else should cause a compiler error (#13699) (911e670), closes #13698
compiler-core: prevent cached array children from retaining detached dom nodes (#13691) (7f60ef8), closes element-plus/element-plus#21408 #13211
compiler-sfc: improve type inference for generic type aliases types (#12876) (d9dd628), closes #12872
compiler-sfc: throw mismatched script langs error before invoking babel (#13194) (0562548), closes #13193
compiler-ssr: disable v-memo transform in ssr vdom fallback branch (#13725) (0a202d8), closes #13724
devtools: clear performance measures (#13701) (c875019), closes #13700
hmr: prevent updating unmounting component during HMR rerender (#13775) (6e5143d), closes #13771 #13772
hydration: also set vShow name if __FEATURE_PROD_HYDRATION_MISMATCH_DETAILS__ flag is enabled (#13777) (439e1a5), closes #13744
reactivity: warn on nested readonly ref update during unwrapping (#12141) (1498821)
runtime-core: avoid setting direct ref of useTemplateRef in dev (#13449) (4a2953f)
runtime-core: improve consistency of PublicInstanceProxyHandlers.has (#13507) (d7283f3)
suspense: don't immediately resolve suspense on last dep unmount (#13456) (a871315), closes #13453
transition: handle KeepAlive + transition leaving edge case (#13152) (3190b17), closes #13153

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bolt-new-by-stackblitz · 2025-08-25T00:58:46Z

Run & review this pull request in StackBlitz Codeflow.

socket-security · 2025-08-25T00:59:03Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@sxzz/prettier-config@2.2.3 ⏵ 2.2.4	^-10	⁺⁵	⁺¹
@sxzz/eslint-config@7.1.2 ⏵ 7.1.4	^-5	⁺⁴
tsx@4.20.4 ⏵ 4.20.5			⁺⁴
vite@7.1.2 ⏵ 7.1.3	^-4	⁺¹
unplugin@2.3.6 ⏵ 2.3.8	⁺¹	⁺¹	⁺³
unplugin-utils@0.2.5 ⏵ 0.3.0			^-4
local-pkg@1.1.1 ⏵ 1.1.2	^-8	⁺¹
magic-string@0.30.17 ⏵ 0.30.18	⁺¹	⁺¹
vue@3.5.18 ⏵ 3.5.19	^-5		⁺²
eslint@9.33.0 ⏵ 9.34.0	⁺¹		⁺²

View full report

fix(deps): update all non-major dependencies

7026c5c

renovate bot added the dependencies label Aug 25, 2025

renovate bot merged commit 3a6ebb2 into main Aug 25, 2025
9 checks passed

renovate bot deleted the renovate/all-minor-patch branch August 25, 2025 05:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

fix(deps): update all non-major dependencies #88

fix(deps): update all non-major dependencies #88

Uh oh!

renovate bot commented Aug 25, 2025

Uh oh!

bolt-new-by-stackblitz bot commented Aug 25, 2025

Uh oh!

socket-security bot commented Aug 25, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

fix(deps): update all non-major dependencies #88

fix(deps): update all non-major dependencies #88

Uh oh!

Conversation

renovate bot commented Aug 25, 2025

Release Notes

🚀 Features

Bug Fixes

Minor Changes

Patch Changes

Bug Fixes

🐞 Bug Fixes

🐞 Bug Fixes

🚨 Breaking Changes

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

Bug Fixes

Configuration

Uh oh!

bolt-new-by-stackblitz bot commented Aug 25, 2025

Uh oh!

socket-security bot commented Aug 25, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant