Skip to content

chore(deps): update all non-major dependencies #2716

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Oct 17, 2025
Merged

chore(deps): update all non-major dependencies #2716

merged 1 commit into from
Oct 17, 2025

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 1, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
@eslint/js (source) 9.36.0 -> 9.37.0 age confidence
@rollup/plugin-commonjs (source) 28.0.6 -> 28.0.8 age confidence
@rollup/plugin-node-resolve (source) 16.0.1 -> 16.0.3 age confidence
@types/node (source) 22.18.6 -> 22.18.11 age confidence
@vue/compat (source) 3.5.21 -> 3.5.22 age confidence
@vue/compiler-dom (source) 3.5.21 -> 3.5.22 age confidence
@vue/compiler-sfc (source) 3.5.21 -> 3.5.22 age confidence
@vue/server-renderer (source) 3.5.21 -> 3.5.22 age confidence
eslint (source) 9.36.0 -> 9.37.0 age confidence
lint-staged 16.2.0 -> 16.2.4 age confidence
pnpm (source) 10.17.1 -> 10.18.3 age confidence
rollup (source) 4.52.2 -> 4.52.4 age confidence
typescript (source) 5.9.2 -> 5.9.3 age confidence
typescript-eslint (source) 8.44.1 -> 8.46.1 age confidence
vite (source) 7.1.7 -> 7.1.10 age confidence
vue (source) 3.5.21 -> 3.5.22 age confidence
vue-router (source) 4.5.1 -> 4.6.3 age confidence

Release Notes

eslint/eslint (@​eslint/js)

v9.37.0

Compare Source

rollup/plugins (@​rollup/plugin-commonjs)

v28.0.8

2025-10-16

Bugfixes
  • fix: guard moduleSideEffects for wrapped externals (#​1914)

v28.0.7

2025-10-14

Bugfixes
  • fix: avoid hoisting dynamically required node: builtins under strictRequires (#​1909)
rollup/plugins (@​rollup/plugin-node-resolve)

v16.0.3

2025-10-13

Bugfixes
  • fix: resolve bare targets of package "imports" using export maps; avoid fileURLToPath(null) (#​1908)

v16.0.2

2025-10-04

Bugfixes
  • fix: error thrown with empty entry (#​1893)
vuejs/core (@​vue/compat)

v3.5.22

Compare Source

Bug Fixes
Features
  • custom-element: allow specifying additional options for shadowRoot in custom elements (#​12965) (47e628d), closes #​12964
Reverts
  • Revert "fix(hmr): prevent VUE_HMR_RUNTIME from being overwritten by vue runtime in 3rd-party libraries" (#​13925) (6b68f72), closes #​13925
eslint/eslint (eslint)

v9.37.0

Compare Source

lint-staged/lint-staged (lint-staged)

v16.2.4

Compare Source

Patch Changes

v16.2.3

Compare Source

Patch Changes
  • #​1669 27cd541 Thanks @​iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

v16.2.2

Compare Source

Patch Changes

  • #​1667 699f95d Thanks @​iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

    Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

    % npx lint-staged --fail-on-changes
✔ Backed up original state in git stash (c18d55a3)
✔ Running tasks for staged files...
✖ Tasks modified files and --fail-on-changes was used!
↓ Cleaning up temporary files...

✖ lint-staged failed because `--fail-on-changes` was used.

Any lost modifications can be restored from a git stash:

  > git stash list --format="%h %s"
  c18d55a3 On main: lint-staged automatic backup
  > git apply --index c18d55a3

v16.2.1

Compare Source

Patch Changes

  • #​1664 8277b3b Thanks @​iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions is readonly string[] and can't be mutated. Thanks @​outslept!

    export default {
---  "*": (files: string[]) => void console.log('staged files', files)
+++  "*": (files: readonly string[]) => void console.log('staged files', files)
}

  • #​1654 70b9af3 Thanks @​iiroj! - This version has been published from GitHub Actions using Trusted Publishing for npm packages.

  • #​1659 4996817 Thanks @​iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there are package.json files in the working directory. This situation might happen when running lint-staged for a single package in a monorepo.

  • #​1654 7021f0a Thanks @​iiroj! - Return the caret semver range (^) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates to lint-staged. This was changed in 16.2.0 after the vulnerability issues with chalk and debug, which were also removed in the same version.

    Given the recent vulnerabilities in the npm ecosystem, it's best to be very careful when updating dependencies.

pnpm/pnpm (pnpm)

v10.18.3

Compare Source

Patch Changes
  • Fix a bug where pnpm would infinitely recurse when using verifyDepsBeforeInstall: install and pre/post install scripts that called other pnpm scripts #​10060.
  • Fixed scoped registry keys (e.g., @scope:registry) being parsed as property paths in pnpm config get when --location=project is used #​9362.
  • Remove pnpm-specific CLI options before passing to npm publish to prevent "Unknown cli config" warnings #​9646.
  • Fixed EISDIR error when bin field points to a directory #​9441.
  • Preserve version and hasBin for variations packages #​10022.
  • Fixed pnpm config set --location=project incorrectly handling keys with slashes (auth tokens, registry settings) #​9884.
  • When both pnpm-workspace.yaml and .npmrc exist, pnpm config set --location=project now writes to pnpm-workspace.yaml (matching read priority) #​10072.
  • Prevent a table width error in pnpm outdated --long #​10040.
  • Sync bin links after injected dependencies are updated by build scripts. This ensures that binaries created during build processes are properly linked and accessible to consuming projects #​10057.

v10.18.2

Compare Source

Patch Changes
  • pnpm outdated --long should work #​10040.
  • Replace ndjson with split2. Reduce the bundle size of pnpm CLI #​10054.
  • pnpm dlx should request the full metadata of packages, when minimumReleaseAge is set #​9963.
  • pnpm version switching should work when the pnpm home directory is in a symlinked directory #​9715.
  • Fix EPIPE errors when piping output to other commands #​10027.

v10.18.1

Compare Source

Patch Changes
  • Don't print a warning, when --lockfile-only is used #​8320.
  • pnpm setup creates a command shim to the pnpm executable. This is needed to be able to run pnpm self-update on Windows #​5700.
  • When using pnpm catalogs and running a normal pnpm install, pnpm produced false positive warnings for "skip adding to the default catalog because it already exists". This warning now only prints when using pnpm add --save-catalog as originally intended.

v10.18.0

Compare Source

Minor Changes

  • Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

    Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
    Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

    Related PR: #​10025.

Patch Changes
  • Retry filesystem operations on EAGAIN errors #​9959.
  • Outdated command respects minimumReleaseAge configuration #​10030.
  • Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
  • Don't fail with a meaningless error when scriptShell is set to false #​8748.
  • pnpm dlx should not fail when minimumReleaseAge is set #​10037.
rollup/rollup (rollup)

v4.52.4

Compare Source

2025-10-03

Bug Fixes
  • Fix an issue where the wrong branch of nullish coalescing was picked (#​6133)
Pull Requests

v4.52.3

Compare Source

2025-09-27

Bug Fixes
  • Fix check in native loader for environments that do not support reports (#​6123)
Pull Requests
microsoft/TypeScript (typescript)

v5.9.3

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.46.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.46.0

Compare Source

🚀 Features
❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.45.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v7.1.10

Compare Source

Bug Fixes
Documentation
Miscellaneous Chores

v7.1.9

Compare Source

Reverts

v7.1.8

Compare Source

Bug Fixes
Documentation
Miscellaneous Chores
vuejs/router (vue-router)

v4.6.3

Compare Source

Please refer to CHANGELOG.md for details.

v4.6.2

Compare Source

Please refer to CHANGELOG.md for details.

v4.6.1

Compare Source

Please refer to CHANGELOG.md for details.

v4.6.0

Compare Source

Please refer to CHANGELOG.md for details.

Configuration

📅 Schedule: Branch creation - "after 1am on Wednesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@netlify
Copy link

netlify bot commented Oct 1, 2025 •
edited
Loading

✅ Deploy Preview for vue-test-utils-docs ready!

Name Link
🔨 Latest commit 9e2418b
🔍 Latest deploy log https://app.netlify.com/projects/vue-test-utils-docs/deploys/68f1f2d9aab68200086c8e0a
😎 Deploy Preview https://deploy-preview-2716--vue-test-utils-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from baf2886 to 9e11346 Compare October 6, 2025 18:35
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from d6f0d0f to af53209 Compare October 16, 2025 05:55
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 0b8fdc8 to 268c945 Compare October 17, 2025 07:14
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 268c945 to 9e2418b Compare October 17, 2025 07:40
@cexbrayat cexbrayat merged commit 4d9f001 into main Oct 17, 2025
7 checks passed
@cexbrayat cexbrayat deleted the renovate/all-minor-patch branch October 17, 2025 08:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cexbrayat