chore(deps): lock file maintenance npm packages#6366
Merged
renovate[bot] merged 1 commit intomainfrom Sep 28, 2025
Merged
Conversation
Contributor
How to use the Graphite Merge QueueAdd the label graphite: merge to this PR to add it to the merge queue. You must have a Graphite account in order to use the merge queue. Sign up using this link. An organization admin has enabled the Graphite Merge Queue in this repository. Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
✅ Deploy Preview for rolldown-rs canceled.
|
3a21b51 to
eb819af
Compare
eb819af to
940db10
Compare
shulaoda
added a commit
that referenced
this pull request
Sep 30, 2025
## [1.0.0-beta.41] - 2025-09-29 ### 🚀 Features - support `output.generatedCode.symbols` (#6335) by @IWANABETHATGUY - rolldown: oxc v0.93.0 (#6364) by @Boshen - rolldown_plugin_vite_html: finish script tag logic (#6355) by @shulaoda - rolldown_plugin_vite_html: support inline html proxy (#6353) by @shulaoda - rolldown_plugin_vite_html: transform script tag into js import (#6351) by @shulaoda - rolldown_plugin_vite_html: overwrite script src url (#6349) by @shulaoda - rolldown_plugin_vite_html: remove `vite-ignore` attribute (#6348) by @shulaoda - rolldown_plugin_vite_html: use `html5ever` and `markup5ever_rcdom` (#6327) by @shulaoda - rust/dev: support `on_output` callback (#6330) by @hyf0 - rust/dev: support `disable_watcher` (#6329) by @hyf0 - dev: introduce client/session concept into dev engine (#6297) by @hyf0 ### 🐛 Bug Fixes - 'asset' module type and CJS format produces warnings and wrong output (#6369) by @IWANABETHATGUY - inlining constants in CJS by optimization.inlineConst incorrectly inlines non-constant values if the value is assigned more than once (#6328) by @IWANABETHATGUY - dev: add `hasLatestBuildOutput` instead of `scheduleBuildIfStale` and add edit-reload test (#6321) by @sapphi-red ### 🚜 Refactor - rust/dev: rename `HmrManager` to `HmrState` and tweak namings (#6358) by @hyf0 - rust/dev: use `Bundler` to expose hmr related methods (#6356) by @hyf0 - rolldown_plugin_vite_html: use `html5gum` instead (#6343) by @shulaoda - dev: remove deprecated `new` field from HMR options and related configurations (#6337) by @hyf0 - dev: remove unused hmr API (#6336) by @hyf0 - make `cjs_ast_analyzer` immutable for better reuse (#6326) by @IWANABETHATGUY - simplify logic for determining entry is_lived (#6325) by @IWANABETHATGUY ### ⚡ Performance - dev: compute depended data incrementally (#6357) by @hyf0 ### 🧪 Testing - rust/hmr: use dev engine to test hmr (#6334) by @hyf0 ### ⚙️ Miscellaneous Tasks - deps: update notify (#6368) by @sapphi-red - deps: lock file maintenance npm packages (#6366) by @renovate[bot] - deps: update github-actions (#6365) by @renovate[bot] - deps: update dependency rolldown-plugin-dts to v0.16.9 (#6354) by @renovate[bot] - deps: update dependency tsdown to v0.15.5 (#6350) by @renovate[bot] - node: use `catalog:` to unify version of all dependencies (#6339) by @hyf0 - ci: unify node installation via oxc-project/setup-node (#6338) by @Boshen - deps: update crate-ci/typos action to v1.36.3 (#6341) by @renovate[bot] - remove unused snapshots (#6331) by @IWANABETHATGUY Co-authored-by: shulaoda <165626830+shulaoda@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.
This PR contains the following updates:
19.1.13->19.1.15=4.1.0->=4.2.04.52.2->4.52.34.20.5->4.20.63.5.21->3.5.228.8.3->8.8.45.64.0->5.64.116.2.0->16.2.31.17.0->1.18.0Warning
Some dependencies could not be looked up. Check the warning logs for more information.
🔧 This Pull Request updates lock files to use the latest dependency versions.
Release Notes
webdiscus/ansis (ansis)
v4.2.0Compare Source
ansis.extend().Foreground methods are created from the provided color names, and matching background methods
bg*are generated automatically.Example:
chalk.keyword('orange')('text'). Ansis now provides this feature with a simpler, more intuitive API.rollup/rollup (rollup)
v4.52.3Compare Source
2025-09-27
Bug Fixes
Pull Requests
fb197b7(@renovate[bot])privatenumber/tsx (tsx)
v4.20.6Compare Source
Bug Fixes
This release is also available on:
vuejs/core (vue)
v3.5.22Compare Source
Bug Fixes
@vue-ignorein runtime type resolution (#13906) (ba7f7f9)PatchFlags.BAILfor slot when props are present (#13907) (5358bca), closes #13904hhelper (#13841) (75220c7)forceReflowon the correct document (fix #13849) (#13853) (1be5ddf)neverinstead of{}(#13915) (8620a61), closes #11564Features
shadowRootin custom elements (#12965) (47e628d), closes #12964Reverts
google/zx (zx)
v8.8.4: — Flange CouplingCompare Source
It's time. This release updates zx internals to make the
psAPI and related methodsProcessPromise.kill(),kill()work on Windows systems withoutwmic.#1344 webpod/ps#15
https://github.blog/changelog/2025-07-31-github-actions-new-apis-and-windows-latest-migration-notice/#windows-latest-image-label-migration
webpro-nl/knip (knip)
v5.64.1Compare Source
lint-staged/lint-staged (lint-staged)
v16.2.3Compare Source
Patch Changes
27cd541Thanks @iiroj! - When using--fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.v16.2.2Compare Source
Patch Changes
#1667
699f95dThanks @iiroj! - The backup stash will not be dropped when using--fail-on-changesand there are errors. When reverting to original state is disabled (via--no-revertor--fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:
v16.2.1Compare Source
Patch Changes
#1664
8277b3bThanks @iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions isreadonly string[]and can't be mutated. Thanks @outslept!export default { --- "*": (files: string[]) => void console.log('staged files', files) +++ "*": (files: readonly string[]) => void console.log('staged files', files) }#1654
70b9af3Thanks @iiroj! - This version has been published from GitHub Actions using Trusted Publishing for npm packages.#1659
4996817Thanks @iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there arepackage.jsonfiles in the working directory. This situation might happen when running lint-staged for a single package in a monorepo.#1654
7021f0aThanks @iiroj! - Return the caret semver range (^) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates to lint-staged. This was changed in 16.2.0 after the vulnerability issues withchalkanddebug, which were also removed in the same version.Given the recent vulnerabilities in the npm ecosystem, it's best to be very careful when updating dependencies.
oxc-project/oxc (oxlint)
v1.18.0: oxlint v1.18.0Compare Source
[1.18.0] - 2025-09-24
This release should fix a critical memory leak when import plugin is enabled in IDEs.
🚀 Features
2481964linter/exhaustive-deps: Add support foruseEffectEvent(#14041) (Cody Olsen)🐛 Bug Fixes
444fcf0linter: Fix false positive invue/no-required-prop-with-default(#14066) (yefan)2186b28linter: Fix Arc memory leak and lifecycle issues (#14049) (Boshen)314c27dlinter/plugins:definePluginapplydefineRuleto rules (#14065) (overlookmotel)7bd01edlinter/plugins:defineRulecallcreateOncelazily (#14062) (overlookmotel)fb3e7e3linter/plugins:defineRuleaccept visitor with nobefore/afterhooks (#14060) (overlookmotel)🚜 Refactor
56db8falinter: Move imports (#14085) (overlookmotel)a7dd0c7linter: Reduce scope of clippy attr (#14081) (overlookmotel)3a706a7linter: RenameLintRunnertoCliRunner(#14050) (camc314)⚡ Performance
ce538c7linter/plugins: Load methods of globals into local vars (#14073) (overlookmotel)c2f7459language_server: Avoid cloning on message conversion (#14058) (Sysix)🧪 Testing
2fd4b1elinter/plugins: Rename test (#14064) (overlookmotel)f2b3934linter/plugins: Test returningfalsefrombeforehook skips visitation in ESLint (#14061) (overlookmotel)b109419linter/plugins: Align ESLint plugin with Oxlint (#14059) (overlookmotel)Configuration
📅 Schedule: Branch creation - "before 9am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.