Skip to content

fix(deps): update all non-major dependencies - autoclosed #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

fix(deps): update all non-major dependencies - autoclosed #20

wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Mar 3, 2025 •
edited
Loading

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package Change Age Confidence
@sxzz/eslint-config ^7.1.2 -> ^7.1.4 age confidence
@sxzz/prettier-config ^2.2.3 -> ^2.2.4 age confidence
@types/node (source) ^24.2.1 -> ^24.5.0 age confidence
eslint (source) ^9.33.0 -> ^9.35.0 age confidence
pnpm (source) 10.14.0 -> 10.16.1 age confidence
rolldown (source) 1.0.0-beta.37 -> 1.0.0-beta.38 age confidence
rollup (source) ^4.46.2 -> ^4.50.2 age confidence
tsdown ^0.14.1 -> ^0.15.1 age confidence
unplugin (source) ^2.3.5 -> ^2.3.10 age confidence
unplugin-utils ^0.2.5 -> ^0.3.0 age confidence
vite (source) ^7.1.2 -> ^7.1.5 age confidence

Release Notes

sxzz/eslint-config (@​sxzz/eslint-config)

v7.1.4

Compare Source

   🚀 Features
    View changes on GitHub

v7.1.3

Compare Source

No significant changes

    View changes on GitHub
sxzz/prettier-config (@​sxzz/prettier-config)

v2.2.4

Compare Source

No significant changes

    View changes on GitHub
eslint/eslint (eslint)

v9.35.0

Compare Source

v9.34.0

Compare Source

pnpm/pnpm (pnpm)

v10.16.1

Compare Source

Patch Changes
  • The full metadata cache should be stored not at the same location as the abbreviated metadata. This fixes a bug where pnpm was loading the abbreviated metadata from cache and couldn't find the "time" field as a result #​9963.
  • Forcibly disable ANSI color codes when generating patch diff #​9914.

v10.16.0

Compare Source

Minor Changes

  • There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.

    The new setting is called minimumReleaseAge. It specifies the number of minutes that must pass after a version is published before pnpm will install it. For example, setting minimumReleaseAge: 1440 ensures that only packages released at least one day ago can be installed.

    If you set minimumReleaseAge but need to disable this restriction for certain dependencies, you can list them under the minimumReleaseAgeExclude setting. For instance, with the following configuration pnpm will always install the latest version of webpack, regardless of its release time:

    minimumReleaseAgeExclude:
  - webpack

    Related issue: #​9921.

  • Added support for finders #​9946.

    In the past, pnpm list and pnpm why could only search for dependencies by name (and optionally version). For example:

    pnpm why minimist

    prints the chain of dependencies to any installed instance of minimist:

    verdaccio 5.20.1
├─┬ handlebars 4.7.7
│ └── minimist 1.2.8
└─┬ mv 2.1.1
  └─┬ mkdirp 0.5.6
    └── minimist 1.2.8

    What if we want to search by other properties of a dependency, not just its name? For instance, find all packages that have react@17 in their peer dependencies?

    This is now possible with "finder functions". Finder functions can be declared in .pnpmfile.cjs and invoked with the --find-by=<function name> flag when running pnpm list or pnpm why.

    Let's say we want to find any dependencies that have React 17 in peer dependencies. We can add this finder to our .pnpmfile.cjs:

    module.exports = {
  finders: {
    react17: (ctx) => {
      return ctx.readManifest().peerDependencies?.react === "^17.0.0";
    },
  },
};

    Now we can use this finder function by running:

    pnpm why --find-by=react17

    pnpm will find all dependencies that have this React in peer dependencies and print their exact locations in the dependency graph.

    @&#8203;apollo/client 4.0.4
├── @&#8203;graphql-typed-document-node/core 3.2.0
└── graphql-tag 2.12.6

    It is also possible to print out some additional information in the output by returning a string from the finder. For example, with the following finder:

    module.exports = {
  finders: {
    react17: (ctx) => {
      const manifest = ctx.readManifest();
      if (manifest.peerDependencies?.react === "^17.0.0") {
        return `license: ${manifest.license}`;
      }
      return false;
    },
  },
};

    Every matched package will also print out the license from its package.json:

    @&#8203;apollo/client 4.0.4
├── @&#8203;graphql-typed-document-node/core 3.2.0
│   license: MIT
└── graphql-tag 2.12.6
    license: MIT
Patch Changes
  • Fix deprecation warning printed when executing pnpm with Node.js 24 #​9529.
  • Throw an error if nodeVersion is not set to an exact semver version #​9934.
  • pnpm publish should be able to publish a .tar.gz file #​9927.
  • Canceling a running process with Ctrl-C should make pnpm run return a non-zero exit code #​9626.

v10.15.1

Compare Source

Patch Changes
  • Fix .pnp.cjs crash when importing subpath #​9904.
  • When resolving peer dependencies, pnpm looks whether the peer dependency is present in the root workspace project's dependencies. This change makes it so that the peer dependency is correctly resolved even from aliased npm-hosted dependencies or other types of dependencies #​9913.

v10.15.0

Compare Source

Minor Changes
  • Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #​9793.
  • Automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #​9780.
  • pnpm config get now prints an INI string for an object value #​9797.
  • pnpm config get now accepts property paths (e.g. pnpm config get catalog.react, pnpm config get .catalog.react, pnpm config get 'packageExtensions["@&#8203;babel/parser"].peerDependencies["@&#8203;babel/types"]'), and pnpm config set now accepts dot-leading or subscripted keys (e.g. pnpm config set .ignoreScripts true).
  • pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON.
Patch Changes
  • Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #​9835.
  • When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists #​9775.
  • When making requests for the non-abbreviated packument, add */* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #​9862.
  • The standalone exe version of pnpm works with glibc 2.26 again #​9734.
  • Fix a regression in which pnpm dlx pkg --help doesn't pass --help to pkg #​9823.
rolldown/rolldown (rolldown)

v1.0.0-beta.38

Compare Source

💥 BREAKING CHANGES
  • rolldown_plugin_oxc_runtime: embed helpers to support browser environment (#​6177) by @​shulaoda
🚀 Features
🐛 Bug Fixes
💼 Other
  • rolldown: support to build rolldown with .wasm binding (#​6153) by @​hyf0
  • rolldown: refactor build.ts to prepare to support build rolldown package with wasi binding (#​6152) by @​hyf0
🚜 Refactor
📚 Documentation
⚡ Performance
🧪 Testing
  • hmr: ensure each test isolated to be able to be retryed (#​6142) by @​hyf0
⚙️ Miscellaneous Tasks
rollup/rollup (rollup)

v4.50.2

Compare Source

2025-09-15

Bug Fixes
  • Resolve an issue where unused destructured array pattern declarations would conflict with included variables (#​6100)
Pull Requests

v4.50.1

Compare Source

2025-09-07

Bug Fixes
  • Resolve a situation where a destructuring default value was removed (#​6090)
Pull Requests

v4.50.0

Compare Source

2025-08-31

Features
  • Support openharmony-arm64 platform (#​6081)
Bug Fixes
  • Fix loading of extensionless imports in config files (#​6084)
Pull Requests

v4.49.0

Compare Source

2025-08-27

Features
  • Allow config plugins to resolve imports first before deciding whether to treat them as external (#​6038)
Pull Requests

v4.48.1

Compare Source

2025-08-25

Bug Fixes
  • Correctly ignore white-space in JSX strings around line-breaks (#​6051)
Pull Requests

v4.48.0

Compare Source

2025-08-23

Features
  • If configured, also keep unparseable import attributes of external dynamic imports in the output(#​6071)
Bug Fixes
  • Ensure variables referenced in non-removed import attributes are included (#​6071)
Pull Requests

v4.47.1

Compare Source

2025-08-21

Bug Fixes
  • Revert build process changes to investigate issues (#​6077)
Pull Requests

v4.47.0

Compare Source

2025-08-21

Features
  • Aggressively reduce WASM build size (#​6053)
Bug Fixes
  • Fix illegal instruction error on Android ARM platforms (#​6072)
  • Allow to pass explicit undefined for optional fields in Rollup types (#​6061)
Pull Requests

v4.46.4

Compare Source

2025-08-20

Bug Fixes
  • Do not omit synthetic namespaces when only accessed via in operator (#​6052)
Pull Requests

v4.46.3

Compare Source

2025-08-18

Bug Fixes
  • Resolve illegal instruction error on arm64 architectures (#​6055)
  • Resolve sourcemap generation performance regression (#​6057)
Pull Requests
rolldown/tsdown (tsdown)

v0.15.1

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.15.0

Compare Source

   🚨 Breaking Changes
   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.14.2

Compare Source

   🚀 Features
    View changes on GitHub
unjs/unplugin (unplugin)

v2.3.10

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v2.3.9

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v2.3.8

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v2.3.7

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v2.3.6

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
sxzz/unplugin-utils (unplugin-utils)

v0.3.0

Compare Source

   🚨 Breaking Changes
    View changes on GitHub
vitejs/vite (vite)

v7.1.5

Compare Source

Bug Fixes

v7.1.4

Compare Source

Bug Fixes
Miscellaneous Chores
Code Refactoring

v7.1.3

Compare Source

Features
Bug Fixes
Performance Improvements
Miscellaneous Chores
Code Refactoring
Tests

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Mar 3, 2025
@bolt-new-by-stackblitz
Copy link

bolt-new-by-stackblitz bot commented Mar 3, 2025

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 9081af6 to b5bc21e Compare March 5, 2025 11:57
@renovate renovate bot changed the title chore(deps): update all non-major dependencies chore(deps): update all non-major dependencies - autoclosed Mar 5, 2025
@renovate renovate bot closed this Mar 5, 2025
@renovate renovate bot deleted the renovate/all-minor-patch branch March 5, 2025 18:08
@renovate renovate bot changed the title chore(deps): update all non-major dependencies - autoclosed chore(deps): update all non-major dependencies Mar 10, 2025
@renovate renovate bot reopened this Mar 10, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from b5bc21e to 4933bb8 Compare March 10, 2025 05:19
@renovate renovate bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Mar 10, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from a236060 to 95d7a25 Compare March 17, 2025 13:43
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from fcb13f9 to 97d0236 Compare March 24, 2025 12:57
@pkg-pr-new
Copy link

pkg-pr-new bot commented Aug 18, 2025 •
edited
Loading

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-raw@20

commit: a4bd96b

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from fb86efb to 82ad43f Compare August 24, 2025 10:42
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from ad91539 to b753076 Compare August 31, 2025 12:34
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 1f35495 to 4c5be0b Compare September 13, 2025 14:22
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 0cfd9c8 to c6d0353 Compare September 15, 2025 09:51
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c6d0353 to a4bd96b Compare September 16, 2025 04:05
@renovate renovate bot changed the title fix(deps): update all non-major dependencies fix(deps): update all non-major dependencies - autoclosed Sep 16, 2025
@renovate renovate bot closed this Sep 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant