chore(deps): update all non-major dependencies #9614
+625
−551
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^0.0.12→^0.0.13^10.2.0→^10.3.0^1.58.1→^1.58.2^24.10.9→^24.10.1324.10.9→24.10.13^19.2.10→^19.2.14^5.1.3→^5.1.4^4.4.2→^4.5.0^14.2.0→^14.2.1^14.2.0→^14.2.1^9.23.3→^9.24.0v3.7.5→v3.7.6^10.4.0→^10.4.12.14.1→2.15.1^0.27.2→^0.27.3^20.4.0→^20.6.1^0.5.1→^0.5.2^0.5.1→^0.5.2v1.58.1-noble→v1.58.2-noble^2.12.7→^2.12.10^1.58.1→^1.58.2^1.58.1→^1.58.210.28.2→10.29.3v47.0.1→v47.0.2^0.33.2→^0.33.3^1.10.0→^1.11.0^1.1.2→^1.2.0^3.5.27→^3.5.28Release Notes
bombshell-dev/tab (@bomb.sh/tab)
v0.0.13Compare Source
Patch Changes
f619ad7: WidenpeerDependenciesto accept citty v0.2.faker-js/faker (@faker-js/faker)
v10.3.0Compare Source
New Locales
Features
sexTypecan return'generic'(#3259) (0e099a1)Changed Locales
Bug Fixes
microsoft/playwright (@playwright/test)
v1.58.2Compare Source
vitejs/vite-plugin-react (@vitejs/plugin-react)
v5.1.4Compare Source
Fix
canSkipBabelnot accounting forbabel.overrides(#1098)When configuring
babel.overrideswithout top-level plugins or presets, Babel was incorrectly skipped. ThecanSkipBabelfunction now checks foroverrides.lengthto ensure override configurations are processed.vueuse/vueuse (@vueuse/core)
v14.2.1Compare Source
🚀 Features
@vueuse/skills- by @serkodev in #5286 (532ac)🐞 Bug Fixes
View changes on GitHub
webdriverio/webdriverio (@wdio/types)
v9.24.0Compare Source
🚀 New Feature
wdio-appium-service💅 Polish
wdio-appium-service📝 Documentation
Committers: 3
actions-cool/issues-helper (actions-cool/issues-helper)
v3.7.6Compare Source
2026.02.10antfu-collective/bumpp (bumpp)
v10.4.1Compare Source
🚀 Features
View changes on GitHub
evanw/esbuild (esbuild)
v0.27.3Compare Source
Preserve URL fragments in data URLs (#4370)
Consider the following HTML, CSS, and SVG:
index.html:icons.css:triangle.svg:The CSS uses a URL fragment (the
#x) to reference theclipPathelement in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using thedataurlloader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:Parse and print CSS
@scoperules (#4322)This release includes dedicated support for parsing
@scoperules in CSS. These rules include optional "start" and "end" selector lists. One important consequence of this is that the local/global status of names in selector lists is now respected, which improves the correctness of esbuild's support for CSS modules. Minification of selectors inside@scoperules has also improved slightly.Here's an example:
Fix a minification bug with lowering of
for await(#4378, #4385)This release fixes a bug where the minifier would incorrectly strip the variable in the automatically-generated
catchclause of loweredfor awaitloops. The code that generated the loop previously failed to mark the internal variable references as used.Update the Go compiler from v1.25.5 to v1.25.7 (#4383, #4388)
This PR was contributed by @MikeWillCook.
capricorn86/happy-dom (happy-dom)
v20.6.1Compare Source
v20.6.0Compare Source
v20.5.5Compare Source
v20.5.4Compare Source
👷♂️ Patch fixes
v20.5.3Compare Source
v20.5.2Compare Source
v20.5.1Compare Source
v20.5.0Compare Source
unjs/magicast (magicast)
v0.5.2Compare Source
🚀 Features
magicast/coreexport - by @Isumhal in #147 (a56f4)View changes on GitHub
mswjs/msw (msw)
v2.12.10Compare Source
v2.12.10 (2026-02-10)
Bug Fixes
AnyHandlertype (#2663) (90f9be4) @kettanaitov2.12.9Compare Source
v2.12.9 (2026-02-06)
Bug Fixes
ws.link(#2661) (2f1d23c) @kettanaitov2.12.8Compare Source
v2.12.8 (2026-02-03)
Bug Fixes
@mswjs/interceptorsto fix a memory leak (#2659) (e5e905f) @kettanaitorettime(#2657) (3a7b451) @kettanaitopnpm/pnpm (pnpm)
v10.29.3Compare Source
v10.29.2Compare Source
v10.29.1: pnpm 10.29.1Compare Source
Minor Changes
pnpm dlx/pnpxcommand now supports thecatalog:protocol. Example:pnpm dlx shx@catalog:.auditLevelin thepnpm-workspace.yamlfile #10540.workspace:protocol without version specifier. It is now treated asworkspace:*and resolves to the concrete version during publish #10436.Patch Changes
Fixed
pnpm list --jsonreturning incorrect paths when using global virtual store #10187.Fix
pnpm store pathandpnpm store statususing workspace root for path resolution whenstoreDiris relative #10290.Fixed
pnpm run -rfailing with "No projects matched the filters" when an emptypnpm-workspace.yamlexists #10497.Fixed a bug where
catalogMode: strictwould write the literal string"catalog:"topnpm-workspace.yamlinstead of the resolved version specifier when re-adding an existing catalog dependency #10176.Fixed the documentation URL shown in
pnpm completion --helpto point to the correct page at https://pnpm.io/completion #10281.Skip local
file:protocol dependencies duringpnpm fetch. This fixes an issue wherepnpm fetchwould fail in Docker builds when local directory dependencies were not available #10460.Fixed
pnpm audit --jsonto respect the--audit-levelsetting for both exit code and output filtering #10540.update tar to version 7.5.7 to fix security issue
Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: CVE-2026-24842
Fix
pnpm audit --fixreplacing reference overrides (e.g.$foo) with concrete versions #10325.Fix
shamefullyHoistset viaupdateConfigin.pnpmfile.cjsnot being converted topublicHoistPattern#10271.pnpm helpshould correctly report if the currently running pnpm CLI is bundled with Node.js #10561.Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for
node_modules/.bin, causing binaries to not be found when running commands likepnpm exec#10457.Platinum Sponsors
Gold Sponsors
tj-actions/changed-files (tj-actions/changed-files)
v47.0.2Compare Source
hannoeru/vite-plugin-pages (vite-plugin-pages)
v0.33.3Compare Source
No significant changes
View changes on GitHub
okineadev/vitepress-plugin-llms (vitepress-plugin-llms)
v1.11.0Compare Source
🩹 Fixes
rewritespath resolution on Windows - by @okineadev (12791)💖 Contributors
View changes on GitHub
antfu/vitest-package-exports (vitest-package-exports)
v1.2.0Compare Source
🚀 Features
View changes on GitHub
vuejs/core (vue)
v3.5.28Compare Source
Bug Fixes
cancelledparameter in transitiondonecallback (#14391) (6798853).mts/.ctsfiles (#14402) (c09d41f), closes vuejs/router#2611__v_skipflag toEffectScopeto prevent reactive conversion (#14359) (48b7552), closes #14357Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.