chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@antfu/eslint-config	~3.2.2 -> ~3.7.3
@iconify-json/fluent	^1.2.2 -> ^1.2.4
@pixelverse/strichjs-sdk	^1.5.2 -> ^1.5.4
@types/lodash (source)	^4.17.9 -> ^4.17.10
@types/node (source)	^22.7.4 -> ^22.7.5
awesome-phonenumber	^7.1.0 -> ^7.2.0
awilix	^11.0.0 -> ^11.0.4
bullmq (source)	^5.19.0 -> ^5.20.0
cookie-parser	^1.4.6 -> ^1.4.7
eslint (source)	^9.11.1 -> ^9.12.0
eslint-plugin-vue (source)	^9.28.0 -> ^9.29.0
express (source)	^4.21.0 -> ^4.21.1
express-rate-limit	^7.4.0 -> ^7.4.1
express-session	^1.18.0 -> ^1.18.1
json-editor-vue	^0.17.0 -> ^0.17.2
picocolors	^1.1.0 -> ^1.1.1
pinia-plugin-persistedstate (source)	^4.0.2 -> ^4.1.1
pnpm (source)	9.9.0 -> 9.12.2
puppeteer (source)	^23.4.1 -> ^23.6.0
sass	^1.79.4 -> ^1.79.5
sequelize (source)	^6.37.3 -> ^6.37.4
terser (source)	^5.34.1 -> ^5.36.0
tinymce (source)	^7.3.0 -> ^7.4.1
typescript (source)	^5.6.2 -> ^5.6.3
vite (source)	^5.4.8 -> ^5.4.9
vitepress (source)	^1.3.4 -> ^1.4.1
vitest (source)	^2.1.1 -> ^2.1.3
winston	^3.14.2 -> ^3.15.0

---

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v3.7.3

Compare Source

   🐞 Bug Fixes

• Properly disable top-level-await rule for tests  -  by @​antfu (e914a)

    View changes on GitHub

v3.7.2

Compare Source

   🚀 Features

• Merge prettier plugins with options  -  by @​suppayami in https://github.com/antfu/eslint-config/issues/614 (04e57)

   🐞 Bug Fixes

• Disable antfu/no-top-level-await for markdown snippets  -  by @​antfu (a984c)

    View changes on GitHub

v3.7.1

Compare Source

   🚀 Features

• Disable rules for config files  -  by @​antfu (a434e)

    View changes on GitHub

v3.7.0

Compare Source

   🚀 Features

• Enable antfu/no-top-level-await  -  by @​antfu (a08aa)

   🐞 Bug Fixes

• Disable explicit-function-return-type in markdown code  -  by @​antfu (60ffd)
• Disable ts/explicit-function-return-type in vue files  -  by @​antfu (1788d)

    View changes on GitHub

v3.6.2

Compare Source

   🐞 Bug Fixes

• Glob for disables  -  by @​antfu (8ba8e)

    View changes on GitHub

v3.6.1

Compare Source

   🐞 Bug Fixes

• Add Next.js router segment config  -  by @​zhangyu1818 in https://github.com/antfu/eslint-config/issues/608 (f025c)
• Sync js rule options to ts, close #​609  -  by @​lvjiaxuan in https://github.com/antfu/eslint-config/issues/610 and https://github.com/antfu/eslint-config/issues/609 (20763)

    View changes on GitHub

v3.6.0

Compare Source

   🐞 Bug Fixes

• perfectionist/sort-imports sort types always on top  -  by @​antfu (e2839)

    View changes on GitHub

v3.5.1

Compare Source

No significant changes

    View changes on GitHub

v3.5.0

Compare Source

   🚀 Features

• Update @​eslint/markdown to v6  -  by @​ocavue in https://github.com/antfu/eslint-config/issues/606 (b9052)

   🐞 Bug Fixes

• Disable unicorn/consistent-function-scoping  -  by @​antfu (5363d)

    View changes on GitHub

v3.4.1

Compare Source

No significant changes

    View changes on GitHub

v3.4.0

Compare Source

   🚀 Features

• Upgrade eslint, remove @types/eslint  -  by @​antfu (21e9c)

    View changes on GitHub

v3.3.2

Compare Source

   🐞 Bug Fixes

• Add side-effect in perfectionist/sort-imports  -  by @​antfu (298f3)

    View changes on GitHub

v3.3.1

Compare Source

   🐞 Bug Fixes

• Do not force newline in perfectionist/sort-imports  -  by @​antfu (09697)

    View changes on GitHub

v3.3.0

Compare Source

   🚀 Features

• Enable perfectionist/sort-imports et al, close #​456  -  by @​antfu in https://github.com/antfu/eslint-config/issues/456 (a6efa)

    View changes on GitHub

grantila/awesome-phonenumber (awesome-phonenumber)

v7.2.0

Compare Source

Features

• upstream: bumped libphonenumber to 8.13.47 (155e56d)

jeffijoe/awilix (awilix)

v11.0.4

Compare Source

• Undo all exports changes as it broke downstream consumers

v11.0.3

Compare Source

• Add lib to exports lists

v11.0.2

Compare Source

• Add default entry in every export

v11.0.1

Compare Source

• Add "exports" field to package.json

taskforcesh/bullmq (bullmq)

v5.20.0

Compare Source

Features

• queue: add queue version support (#​2822) (3a4781b)

v5.19.1

Compare Source

Bug Fixes

• sandbox: fix serialization of error with circular references are present (#​2815) fix #​2813 (a384d92)

expressjs/cookie-parser (cookie-parser)

v1.4.7

Compare Source

==========

• deps: [email protected]
  • Fix object assignment of hasOwnProperty
• deps: [email protected]
  • Allow leading dot for domain
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing
• deps: [email protected]
  • perf: parse cookies ~10% faster
  • fix: narrow the validation of cookies to match RFC6265
  • fix: add main to package.json for rspack
• deps: [email protected]
  • Add partitioned option
• deps: [email protected]
  • Add priority option
  • Fix expires option to reject invalid dates
  • pref: improve default decode speed
  • pref: remove slow string split in parse
• deps: [email protected]
  • pref: read value only when assigning in parse
  • pref: remove unnecessary regexp in parse

eslint/eslint (eslint)

v9.12.0

Compare Source

Features

• 5a6a053 feat: update to jiti v2 (#​18954) (Arya Emami)
• 17a07fb feat: Hooks for test cases (RuleTester) (#​18771) (Anna Bocharova)
• 2ff0e51 feat: Implement alternate config lookup (#​18742) (Nicholas C. Zakas)
• 2d17453 feat: Implement modified cyclomatic complexity (#​18896) (Dmitry Pashkevich)

Bug Fixes

• ea380ca fix: Upgrade retry to avoid EMFILE errors (#​18986) (Nicholas C. Zakas)
• fdd6319 fix: Issues with type definitions (#​18940) (Arya Emami)

Documentation

• ecbd522 docs: Mention code explorer (#​18978) (Nicholas C. Zakas)
• 7ea4ecc docs: Clarifying the Use of Meta Objects (#​18697) (Amaresh S M)
• d3e4b2e docs: Clarify how to exclude .js files (#​18976) (Milos Djermanovic)
• 57232ff docs: Mention plugin-kit in language docs (#​18973) (Nicholas C. Zakas)
• b80ed00 docs: Update README (GitHub Actions Bot)
• cb69ab3 docs: Update README (GitHub Actions Bot)
• 7fb0d95 docs: Update README (GitHub Actions Bot)
• 493348a docs: Update README (GitHub Actions Bot)
• 87a582c docs: fix typo in id-match rule (#​18944) (Jay)

Chores

• 555aafd chore: upgrade to @eslint/[email protected] (#​18987) (Francesco Trotta)
• 873ae60 chore: package.json update for @​eslint/js release (Jenkins)
• d0a5414 refactor: replace strip-ansi with native module (#​18982) (Cristopher)
• b827029 chore: Enable JSON5 linting (#​18979) (Milos Djermanovic)
• 8f55ca2 chore: Upgrade espree, eslint-visitor-keys, eslint-scope (#​18962) (Nicholas C. Zakas)
• c1a2725 chore: update dependency mocha to ^10.7.3 (#​18945) (Milos Djermanovic)

vuejs/eslint-plugin-vue (eslint-plugin-vue)

v9.29.0

Compare Source

✨ Enhancements

New Rules

• #​2540 Added vue/no-deprecated-delete-set rule that disallows using deprecated $delete and $set.

Others

• #​2513 Added support for Vuex and Pinia to vue/no-undef-properties rule.
• #​2541 Added support for Vue 3.5's useTemplateRef() to vue/no-unused-refs rule.
• Added support for Vue 3.5's props destructure to various rules:
  • #​2551 to vue/require-valid-default-prop rule.
  • #​2552 to vue/require-default-prop rule.
  • #​2553 to vue/no-boolean-default rule.
  • #​2560 to vue/no-required-prop-with-default rule.
  • #​2562 to vue/no-restricted-props rule.
  • #​2550 to vue/no-setup-props-reactivity-loss rule.

⚙️ Updates

• #​2528, #​2566 Added TypeScript declarations for configs.
• #​2565 Added support for recognizing Vue components in .tsx files.

expressjs/express (express)

v4.21.1

Compare Source

What's Changed

• Backport a fix for CVE-2024-47764 to the 4.x branch by @​joshbuker in https://github.com/expressjs/express/pull/6029
• Release: 4.21.1 by @​UlisesGascon in https://github.com/expressjs/express/pull/6031

Full Changelog: expressjs/express@4.21.0...4.21.1

express-rate-limit/express-rate-limit (express-rate-limit)

v7.4.1

Compare Source

You can view the changelog here.

expressjs/session (express-session)

v1.18.1

Compare Source

==========

• deps: [email protected]
  • Fix object assignment of hasOwnProperty
• deps: [email protected]
  • Allow leading dot for domain
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing
• deps: [email protected]
  • perf: parse cookies ~10% faster
  • fix: narrow the validation of cookies to match RFC6265
  • fix: add main to package.json for rspack

cloydlau/json-editor-vue (json-editor-vue)

v0.17.2

Compare Source

No significant changes

View changes on GitHub

v0.17.1

Compare Source

   🐞 Bug Fixes

• #​98  -  by @​mathieunicolas and @​cloydlau in https://github.com/cloydlau/json-editor-vue/issues/98 (69bbc)

    View changes on GitHub

alexeyraspopov/picocolors (picocolors)

v1.1.1

Compare Source

• Moved TypeScript declarations to a d.ts file (#​82)
• Reworked color detection algorithm to properly work with empty strings in NO_COLOR and FORCE_COLOR env variables (#​87)
• Eliminated require() call to make the package compatible with some tools (#​87)

prazdevs/pinia-plugin-persistedstate (pinia-plugin-persistedstate)

v4.1.1

Compare Source

compare changes

🩹 Fixes

• Bump deep-pick-omit to 1.2.1 (fixes falsy value persistence) (7be6b42)

❤️ Contributors

• Prazdevs [email protected]

v4.1.0

Compare Source

compare changes

🚀 Enhancements

• Auto mode (#​327)

📖 Documentation

• Update Nuxt links in README.md (#​340)

🏡 Chore

• Upgrade dependencies (e1c0036)

❤️ Contributors

• Prazdevs [email protected]
• PraZ [email protected]
• Charlie ✨ (@​MIGU-EDU)

pnpm/pnpm (pnpm)

v9.12.2

Compare Source

v9.12.1: pnpm 9.12.1

Compare Source

Patch Changes

• pnpm update --latest should not update the automatically installed peer dependencies #​6657.
• pnpm publish should be able to publish from a local tarball #​7950.
• The pnpx command should work correctly on Windows, when pnpm is installed via the standalone installation script #​8608.
• Prevent EBUSY errors caused by creating symlinks in parallel dlx processes #​8604.
• Fix maximum call stack size exceeded error related to circular workspace dependencies #​8599.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v9.12.0: pnpm 9.12

Compare Source

Minor Changes

• Fix peer dependency resolution dead lock #​8570. This change might change some of the keys in the snapshots field inside pnpm-lock.yaml but it should happen very rarely.

• pnpm outdated command supports now a --sort-by=name option for sorting outdated dependencies by package name #​8523.

• Added the ability for overrides to remove dependencies by specifying "-" as the field value #​8572. For example, to remove lodash from the dependencies, use this configuration in package.json:

  {
    "pnpm": {
      "overrides": {
        "lodash": "-"
      }
    }
  }

Patch Changes

• Fixed an issue where pnpm list --json pkg showed "private": false for a private package #​8519.
• Packages with libc that differ from pnpm.supportedArchitectures.libc are not downloaded #​7362.
• Prevent ENOENT errors caused by running store prune in parallel #​8586.
• Add issues alias to pnpm bugs #​8596.

Platinum Sponsors

Gold Sponsors

Configuration 📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired. If you want to rebase/retry this PR, check this box This PR was generated by Mend Renovate. View the repository job log.