Update dependency upgrades - non-major

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node (source)	22.15.17 -> 22.15.18
@types/react (source)	19.1.3 -> 19.1.4
@types/react-dom (source)	19.1.3 -> 19.1.5
pnpm (source)	10.10.0 -> 10.11.0
prettier-plugin-sql (source)	0.19.0 -> 0.19.1
sass	1.87.0 -> 1.88.0

---

Release Notes

pnpm/pnpm (pnpm)

v10.11.0

Compare Source

Minor Changes

• A new setting added for pnpm init to create a package.json with type=module, when init-type is module. Works as a flag for the init command too #​9463.

• Added support for Nushell to pnpm setup #​6476.

• Added two new flags to the pnpm audit command, --ignore and --ignore-unfixable #​8474.

  Ignore all vulnerabilities that have no solution:

  > pnpm audit --ignore-unfixable

  Provide a list of CVE's to ignore those specifically, even if they have a resolution.

  > pnpm audit --ignore=CVE-2021-1234 --ignore=CVE-2021-5678

• Added support for recursively running pack in every project of a workspace #​4351.

  Now you can run pnpm -r pack to pack all packages in the workspace.

Patch Changes

• pnpm version management should work, when dangerouslyAllowAllBuilds is set to true #​9472.
• pnpm link should work from inside a workspace #​9506.
• Set the default workspaceConcurrency to Math.min(os.availableParallelism(), 4) #​9493.
• Installation should not exit with an error if strictPeerDependencies is true but all issues are ignored by peerDependencyRules #​9505.
• Read updateConfig from pnpm-workspace.yaml #​9500.
• Add support for recursive pack
• Remove url.parse usage to fix warning on Node.js 24 #​9492.
• pnpm run should be able to run commands from the workspace root, if ignoreScripts is set tot true #​4858.

un-ts/prettier (prettier-plugin-sql)

v0.19.1

Compare Source

Patch Changes

• #​453 b44651a Thanks @​JounQin! - fix: remove buggy module-sync exports field

Full Changelog: https://github.com/un-ts/prettier/compare/prettier-plugin-sh@0.17.2...prettier-plugin-sql@0.19.1

sass/dart-sass (sass)

v1.88.0

Compare Source

• Allow custom properties with empty values (such as --var:;).

• Fix a bug when calculating source spans for interpolations.

Dart and JS APIs

• Potentially breaking bug fix: Throw an error when passing a function or
  mixin object from one compilation to another.

Dart API

• Deprecate passing a relative URL to compileString() and related functions.

---

Configuration

📅 Schedule: Branch creation - "after 4pm on thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​react-dom@​19.1.3 ⏵ 19.1.5	+1		+1
	@​types/​react@​19.1.3 ⏵ 19.1.4
	@​types/​node@​22.15.17 ⏵ 22.15.18
	prettier-plugin-sql@​0.19.0 ⏵ 0.19.1			+1	+4
	sass@​1.87.0 ⏵ 1.88.0	+1

View full report