chore(deps): update all non-major dependencies #91
+1,406
−1,502
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Note
Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot]
.This notice will be removed on 2025-10-07.
This PR contains the following updates:
^3.6.3
->^3.7.1
^3.3.3
->^3.3.6
^9.35.0
->^9.37.0
^2.5.1
->^2.6.1
10.15.1
->10.18.0
^19.0.4
->^19.0.5
^5.9.2
->^5.9.3
^3.5.21
->^3.5.22
^3.0.6
->^3.1.0
Release Notes
nuxt/content (@nuxt/content)
v3.7.1
Compare Source
Bug Fixes
zod
andzod-to-json-schema
from optional deps (#3541) (8e038f0)v3.7.0
Compare Source
Features
Bug Fixes
ProseCode
preview syntax highlighting (#3491) (4a725bd)nitro
export in favor ofserver
(ec97064)close
hook if websocket is disabled (#3474) (9edcc8f).DS_Store
(fe5d7f9)publicUrl
if available (#3500) (fb0f022)nuxt/ui-pro (@nuxt/ui-pro)
v3.3.6
Compare Source
v3.3.5
Compare Source
v3.3.4
Compare Source
eslint/eslint (eslint)
v9.37.0
Compare Source
v9.36.0
Compare Source
unjs/jiti (jiti)
v2.6.1
Compare Source
compare changes
🩹 Fixes
📦 Build
terser-webpack-plugin
(#407)🏡 Chore
❤️ Contributors
v2.6.0
Compare Source
compare changes
🔥 Performance
🩹 Fixes
node:
specifiers (#392)📦 Build
🏡 Chore
✅ Tests
❤️ Contributors
pnpm/pnpm (pnpm)
v10.18.0
Compare Source
Minor Changes
Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.
Added configuration options for warning thresholds:
fetchWarnTimeoutMs
andfetchMinSpeedKiBps
.Warning messages are displayed when requests exceed time thresholds or fall below speed minimums
Related PR: #10025.
Patch Changes
minimumReleaseAge
configuration #10030.cleanupUnusedCatalogs
configuration when removing dependent packages.scriptShell
is set tofalse
#8748.pnpm dlx
should not fail whenminimumReleaseAge
is set #10037.v10.17.1
Compare Source
Patch Changes
minimumReleaseAge
setting, print this information out in the error message #9974.state.json
creation path when executingpnpm patch
in a workspace project #9733.minimumReleaseAge
is set and thelatest
tag is not mature enough, prefer a non-deprecated version as the newlatest
#9987.v10.17.0
Compare Source
Minor Changes
The
minimumReleaseAgeExclude
setting now supports patterns. For instance:Related PR: #9984.
Patch Changes
minimumReleaseAge
check, when the package is requested by exact version and the packument is loaded from cache #9978.minimumReleaseAge
is set and the active version under a dist-tag is not mature enough, do not downgrade to a prerelease version in case the original version wasn't a prerelease one #9979.v10.16.1
Compare Source
Patch Changes
v10.16.0
Compare Source
Minor Changes
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.
The new setting is called
minimumReleaseAge
. It specifies the number of minutes that must pass after a version is published before pnpm will install it. For example, settingminimumReleaseAge: 1440
ensures that only packages released at least one day ago can be installed.If you set
minimumReleaseAge
but need to disable this restriction for certain dependencies, you can list them under theminimumReleaseAgeExclude
setting. For instance, with the following configuration pnpm will always install the latest version of webpack, regardless of its release time:Related issue: #9921.
Added support for
finders
#9946.In the past,
pnpm list
andpnpm why
could only search for dependencies by name (and optionally version). For example:prints the chain of dependencies to any installed instance of
minimist
:What if we want to search by other properties of a dependency, not just its name? For instance, find all packages that have
react@17
in their peer dependencies?This is now possible with "finder functions". Finder functions can be declared in
.pnpmfile.cjs
and invoked with the--find-by=<function name>
flag when runningpnpm list
orpnpm why
.Let's say we want to find any dependencies that have React 17 in peer dependencies. We can add this finder to our
.pnpmfile.cjs
:Now we can use this finder function by running:
pnpm will find all dependencies that have this React in peer dependencies and print their exact locations in the dependency graph.
It is also possible to print out some additional information in the output by returning a string from the finder. For example, with the following finder:
Every matched package will also print out the license from its
package.json
:Patch Changes
nodeVersion
is not set to an exact semver version #9934.pnpm publish
should be able to publish a.tar.gz
file #9927.pnpm run
return a non-zero exit code #9626.release-it/release-it (release-it)
v19.0.5
Compare Source
bf6f1fb
)e42e7dc
) - thanks @dependabot[bot]!9933c0d
) - thanks @mceachen!7d9b77f
) - thanks @dependabot[bot]!96181f3
)0b907d1
)ca2f7b5
)microsoft/TypeScript (typescript)
v5.9.3
Compare Source
vuejs/core (vue)
v3.5.22
Compare Source
Bug Fixes
@vue-ignore
in runtime type resolution (#13906) (ba7f7f9)PatchFlags.BAIL
for slot when props are present (#13907) (5358bca), closes #13904h
helper (#13841) (75220c7)forceReflow
on the correct document (fix #13849) (#13853) (1be5ddf)never
instead of{}
(#13915) (8620a61), closes #11564Features
shadowRoot
in custom elements (#12965) (47e628d), closes #12964Reverts
vuejs/language-tools (vue-component-meta)
v3.1.0
Compare Source
Performance
Other Changes
v3.0.8
Compare Source
Features
vue.server.path
setting (#5647)Bug Fixes
VueVirtualCode
in constructor (#5635) - Thanks to @KazariEX!typescriptServerPlugin
languages without FS hackfile
scheme files (#5653) - Thanks to @KazariEX!Performance
Other Changes
v3.0.7
Compare Source
Bug Fixes
Other Changes
@typescript-eslint/no-unnecessary-condition
(#5630)Configuration
📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.