Skip to content

chore(deps): update all non-major dependencies #217

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update all non-major dependencies #217

wants to merge 1 commit into from
+647 −1,031

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 15, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
@antfu/eslint-config 6.0.0 -> 6.2.0 age confidence devDependencies minor
@iconify-json/ri 1.2.5 -> 1.2.6 age confidence dependencies patch
@iconify-json/tabler 1.2.22 -> 1.2.23 age confidence dependencies patch
@nuxt/eslint (source) 1.4.1 -> 1.10.0 age confidence devDependencies minor
@types/chrome (source) 0.1.11 -> 0.1.28 age confidence devDependencies patch
@unocss/nuxt (source) 66.5.5 -> 66.5.6 age confidence dependencies patch
@unocss/reset (source) 66.5.5 -> 66.5.6 age confidence dependencies patch
danielroe/provenance-action v0.1.0 -> v0.1.1 age confidence action patch
drizzle-kit (source) 0.31.4 -> 0.31.7 age confidence devDependencies patch
lint-staged 16.1.6 -> 16.2.6 age confidence devDependencies minor
nuxt-webhook-validators 0.2.3 -> 0.2.5 age confidence dependencies patch
pnpm (source) 10.21.0 -> 10.22.0 age confidence packageManager minor
typescript (source) 5.9.2 -> 5.9.3 age confidence devDependencies patch
unocss (source) 66.5.1 -> 66.5.6 age confidence dependencies patch
unocss (source) 66.5.1 -> 66.5.6 age confidence devDependencies patch
unplugin-vue-router (source) ^0.15.0 -> ^0.16.0 age confidence dependencies minor
vue-tsc (source) 3.0.7 -> 3.1.3 age confidence devDependencies minor
wrangler (source) 4.37.0 -> 4.48.0 age confidence devDependencies minor

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v6.2.0

Compare Source

   🚀 Features
    View changes on GitHub

v6.1.0

Compare Source

   🚀 Features
    View changes on GitHub
nuxt/eslint (@​nuxt/eslint)

v1.10.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v1.9.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v1.8.0

Compare Source

   🚀 Features
    View changes on GitHub

v1.7.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v1.7.0

Compare Source

   🚀 Features
    View changes on GitHub

v1.6.0

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v1.5.2

Compare Source

   🚀 Features
    View changes on GitHub

v1.5.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v1.5.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
unocss/unocss (@​unocss/nuxt)

v66.5.6

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
danielroe/provenance-action (danielroe/provenance-action)

v0.1.1

Compare Source

compare changes

🚀 Enhancements
  • Add support for bun.lock (#​12)
📖 Documentation
  • Use @main constraint for example (237ceea)
❤️ Contributors
drizzle-team/drizzle-orm (drizzle-kit)

v0.31.6

Compare Source

Bug fixes

v0.31.5

Compare Source

  • Add casing support to studio configuration and related functions
lint-staged/lint-staged (lint-staged)

v16.2.6

Compare Source

Patch Changes

v16.2.5

Compare Source

Patch Changes
  • #​1687 9e02d9d Thanks @​iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

v16.2.4

Compare Source

Patch Changes

v16.2.3

Compare Source

Patch Changes
  • #​1669 27cd541 Thanks @​iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

v16.2.2

Compare Source

Patch Changes

  • #​1667 699f95d Thanks @​iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

    Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

    % npx lint-staged --fail-on-changes
✔ Backed up original state in git stash (c18d55a3)
✔ Running tasks for staged files...
✖ Tasks modified files and --fail-on-changes was used!
↓ Cleaning up temporary files...

✖ lint-staged failed because `--fail-on-changes` was used.

Any lost modifications can be restored from a git stash:

  > git stash list --format="%h %s"
  c18d55a3 On main: lint-staged automatic backup
  > git apply --index c18d55a3

v16.2.1

Compare Source

Patch Changes

  • #​1664 8277b3b Thanks @​iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions is readonly string[] and can't be mutated. Thanks @​outslept!

    export default {
---  "*": (files: string[]) => void console.log('staged files', files)
+++  "*": (files: readonly string[]) => void console.log('staged files', files)
}

  • #​1654 70b9af3 Thanks @​iiroj! - This version has been published from GitHub Actions using Trusted Publishing for npm packages.

  • #​1659 4996817 Thanks @​iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there are package.json files in the working directory. This situation might happen when running lint-staged for a single package in a monorepo.

  • #​1654 7021f0a Thanks @​iiroj! - Return the caret semver range (^) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates to lint-staged. This was changed in 16.2.0 after the vulnerability issues with chalk and debug, which were also removed in the same version.

    Given the recent vulnerabilities in the npm ecosystem, it's best to be very careful when updating dependencies.

v16.2.0

Compare Source

Minor Changes

  • #​1615 99eb742 Thanks @​iiroj! - Added a new option --fail-on-changes to make lint-staged exit with code 1 when tasks modify any files, making the precommit hook fail. This is similar to the git diff --exit-code option. Using this flag also implies the --no-revert flag which means any changes made by tasks will be left in the working tree after failing, so that they can be manually staged and the commit tried again.

  • #​1611 cd05fd3 Thanks @​rlorenzo! - Added a new option --continue-on-error so that lint-staged will run all tasks to completion even if some of them fail. By default, lint-staded will exit early on the first failure.

  • #​1637 82fcc07 Thanks @​iiroj! - Internal lint-staged errors are now thrown and visible in the console output. Previously they were caught with the process exit code set to 1, but not logged. This happens when, for example, there's a syntax error in the lint-staged configuration file.

  • #​1647 a5ecc06 Thanks @​iiroj! - Remove debug as a dependency due to recent malware issue; read more at debug-js/debug#1005. Because of this, the DEBUG environment variable is no longer supported — use the --debug to enable debugging

  • #​1636 8db2717 Thanks @​iiroj! - Added a new option --hide-unstaged so that lint-staged will hide all unstaged changes to tracked files before running tasks. The changes will be applied back after running the tasks. Note that the combination of flags --hide-unstaged --no-hide-partially-staged isn't meaningful and behaves the same as just --hide-unstaged.

    Thanks to @​ItsNickBarry for the idea and initial implementation in #​1552.

  • #​1648 7900b3b Thanks @​iiroj! - Remove lilconfig to reduce reliance on third-party dependencies. It was used to find possible config files outside of those tracked in Git, including from the parent directories. This behavior has been moved directly into lint-staged and should work about the same.

Patch Changes
Yizack/nuxt-webhook-validators (nuxt-webhook-validators)

v0.2.5

Compare Source

compare changes

🚀 Enhancements
  • Add brevo webhook validator (6fca667)
✅ Tests
  • paypal: Add fake credentials (ac4e624)
❤️ Contributors

v0.2.4

Compare Source

compare changes

🏡 Chore
  • playground: Add twitch webhook callback verification (#​13)
  • Adjust package scripts (698200f)
🤖 CI
  • Update to latest checkout and node actions (bab0dde)
  • Use npm trusted publishing (eaf6f0b)
❤️ Contributors
pnpm/pnpm (pnpm)

v10.22.0

Compare Source

microsoft/TypeScript (typescript)

v5.9.3: TypeScript 5.9.3

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

posva/unplugin-vue-router (unplugin-vue-router)

v0.16.2

Compare Source

Code Refactoring
  • remove deprecated export vue-router/auto (9c3e4f2)
BREAKING CHANGES

  • This export was creating multiple issues and was not
    needed. It was deprecated long time ago and has now been removed. In
    most cases you should be able to just import from vue-router instead,
    but other exports must be adapted:

    • definePage shouldn't be imported, it's a macro with no runtime

    • DataLoaderPlugin and NavigationResult must be imported from
      unplugin-vue-router/data-loaders

    • defineBasicLoader must be imported from unplugin-vue-router/data-loaders/basic

    • defineColadaLoader must be imported from unplugin-vue-router/data-loaders/pinia-colada

      Here is the old declaration of vue-router/auto for reference:

    declare module 'vue-router/auto' {
  // reexport all types that are not augmented by unplugin-vue-router
  export * from 'vue-router'

  export { definePage } from 'unplugin-vue-router/runtime'
  // Experimental Data Fetching
  export {
    DataLoaderPlugin,
    NavigationResult,
  } from 'unplugin-vue-router/data-loaders'
}

0.16.2 (2025-11-14)

Bug Fixes
  • experimental: connecting slash with optional params (e7d78cb)
  • experimental: keep non matchable records with name: false (980143d)
  • hmr: invalidate all modules related to pages on update (2fdcbde), closes #​748
Features

0.16.1 (2025-10-30)

Bug Fixes
  • experimental: reuse parent path for index routes (332a89c)

v0.16.1

Compare Source

Bug Fixes
  • experimental: reuse parent path for index routes (332a89c)

v0.16.0

Compare Source

This new version requires Vue router 4.6.0 or higher. It includes support for the new experimental custom resolvers by setting experimental.paramParsers: true.

Bug Fixes
Features
  • add unplugin-vue-router/rolldown export (#​725) (1686681)
  • add new experimental option (cbd902a)
  • allow function in default (7d8ecd0)
  • avoid invalid dts with invalid param (8f7d4d2), closes #​706
  • cleaner git diffs (#​698) (028c037)
  • ensure consistent non trailing slash (aed8bfc)
  • extract param parsers from definePage (04a5075)
  • fix "Unused import specifier" warning in WebStorm (969ae2c)
  • handle negative default query params (73b1d3d)
  • handle query types (4b750fb)
  • handle splats (577410b)
  • parse custom param (c37b79f)
  • remove empty parents from routes (9d91f3f)
  • sorting of experimental resolver (caecce5)
  • support custom params folder (48c75fd)
  • support meta properties (702a122)
  • support static paths for resolver (b506d6f)
  • type custom params (ec00188)
  • types + runtime of param parsers on path (00fa3b2)
  • warn possible bug (b4b4332)
vuejs/language-tools (vue-tsc)

v3.1.3

Compare Source

Features
  • feat(typescript-plugin): allow triggering file references on <template> (#​5734) - Thanks to @​KazariEX!
Bug Fixes
  • fix(vscode): correct syntax highlight in template with lang="html" (#​5728) - Thanks to @​serkodev!
Other Changes
  • refactor(language-core): generate intrinsic elements variable into global types (#​5730) - Thanks to @​KazariEX!
  • refactor(typescript-plugin): remove go to definition trick for auto imported components (#​5733) - Thanks to @​KazariEX!

v3.1.2

Compare Source

Bug Fixes
  • fix(component-meta): import type helpers by relative path
  • fix(language-core): fix syntax error when propTypes has no elements (#​5704) - Thanks to @​so1ve!
  • fix(language-core): omit defined emit props only (#​5705) - Thanks to @​so1ve!
Other Changes
  • docs: fix vue-tsc broken link to example boilerplate in README.md (#​5721) - Thanks to @​heyakyra!

v3.1.1

Compare Source

Features
  • feat(language-server): support --tsdk command line arg (#​5691)
Bug Fixes
  • fix(language-core): tolerate non-literal export default (#​5675) - Thanks to @​KazariEX!
  • fix(language-core): use component instance props as fallthrough attributes (#​5686) - Thanks to @​KazariEX!
  • fix(typescript-plugin): determine if variable is Ref by RefSymbol property (#​5687) - Thanks to @​KazariEX!
  • fix(language-core): exclude effect of comments on root node (#​5689) - Thanks to @​KazariEX!
  • fix(typescript-plugin): place __vue__ in project instead of program (#​5690)
  • fix(component-type-helpers): remove deprecated $scopedSlots support for Vue 2
  • fix(language-core): replace markdown links after sfc blocks processing (#​5695) - Thanks to @​KazariEX!
  • fix(language-core): do not report unused error on __VLS_export (#​5696) - Thanks to @​KazariEX!
Other Changes
  • refactor(language-core): reimplement writeGlobalTypes without side effects

v3.1.0

Compare Source

Performance
Other Changes

v3.0.10

Compare Source

Bug Fixes
  • fix(typescript-plugin): place __vue__ in project instead of program (#​5690)

v3.0.9

Compare Source

Features
  • feat(language-server): support --tsdk command line arg (#​5691)

v3.0.8

Compare Source

Features
  • feat(vscode): introduce vue.server.path setting (#​5647)
Bug Fixes
  • fix(language-core): initialize properties of VueVirtualCode in constructor (#​5635) - Thanks to @​KazariEX!
  • fix(vscode): flatten reactivity visualization decorators (#​5642) - Thanks to @​KazariEX!
  • fix(vscode): normalize reactivity visualization ranges
  • fix(vscode): patch typescriptServerPlugin languages without FS hack
  • fix(language-service): do not provide semantic tokens and document highlights for non-file scheme files (#​5653) - Thanks to @​KazariEX!
Performance
  • perf(typescript-plugin): redo single-file language service for reactivity visualization (#​5652)
Other Changes
  • refactor(typescript-plugin): externalize reactivity analysis logic (#​5645) - Thanks to @​KazariEX!
cloudflare/workers-sdk (wrangler)

v4.48.0

Compare Source

Minor Changes

  • #​11212 3908162 Thanks @​dario-piotrowicz! - Add autoconfig changes summary for wrangler deploy --x-autoconfig with the option for users to cancel the operation

  • #​11229 14d79f2 Thanks @​dario-piotrowicz! - Enables experimental-deploy-remote-diff-check flag by default (the flag is still present for now so that users can turn it off if needed) and improves the remote config diffing logic (to include less noise in the diff presented to the user)

  • #​11245 dfc6513 Thanks @​vicb! - Change how Wrangler selects default ports for dev sessions.

    If no port is specified, Wrangler now probes the default port and the 10 consecutive ports after it before falling back to a random port.
    This will help getting a stable port number across dev sessions.
    Both the http server and inspector ports are affected.

Patch Changes

v4.47.0

Compare Source

Minor Changes

  • #​11201 5286309 Thanks @​avenceslau! - Add wrangler workflows instances restart command

  • #​11214 5cf8a39 Thanks @​penalosa! - Add the experimental wrangler setup command to run autoconfig outside of the deploy flow.

  • #​11187 8abc789 Thanks @​dario-piotrowicz! - Add possibility for users to edit their project settings during autoconfig

    When running wrangler deploy --experimental-autoconfig, after the automatic project settings detection Wrangler will now present users the opportunity to customize the auto-detected project's settings

Patch Changes

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Sep 15, 2025 •
edited
Loading

Deploying unsight with  Cloudflare Pages  Cloudflare Pages

Latest commit: 016133a
Status: ✅  Deploy successful!
Preview URL: https://4afb5b4d.unsight.pages.dev
Branch Preview URL: https://renovate-all-minor-patch.unsight.pages.dev

View logs

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from cd154f8 to ce2f01e Compare September 16, 2025 14:47
@renovate renovate bot changed the title chore(deps): update devdependency @nuxt/eslint to v1.9.0 chore(deps): update all non-major dependencies Sep 16, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 14 times, most recently from 3235a89 to 5ab823a Compare September 23, 2025 21:32
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 99826bf to 8ded71c Compare September 27, 2025 09:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from bea4dbc to 778a0b3 Compare November 7, 2025 16:51
@socket-security
Copy link

socket-security bot commented Nov 7, 2025 •
edited
Loading

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 73b466b to a1ea70e Compare November 11, 2025 16:47
@socket-security
Copy link

socket-security bot commented Nov 11, 2025 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​unocss/​nuxt@​66.5.5 ⏵ 66.5.6991007297 +1100
Updated@​unocss/​reset@​66.5.5 ⏵ 66.5.610010075 -2597 -3100
Updated@​nuxt/​eslint@​1.4.1 ⏵ 1.10.099 +110077 +195 +3100
Updated@​types/​chrome@​0.1.11 ⏵ 0.1.2810010079 +195 -1100
Updated@​iconify-json/​ri@​1.2.5 ⏵ 1.2.6100 +110080 +185 +4100
Updated@​iconify-json/​tabler@​1.2.22 ⏵ 1.2.23100 +110081 +287 -4100
Updatedlint-staged@​16.1.6 ⏵ 16.2.6100 +110010095100
Updated@​antfu/​eslint-config@​6.0.0 ⏵ 6.2.097 +110010095 +2100
Updateddrizzle-kit@​0.31.4 ⏵ 0.31.7991009699 +1100

View full report

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from a87c3b7 to 0c81361 Compare November 12, 2025 17:33
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 0c81361 to 016133a Compare November 13, 2025 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

chore dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant