Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update all non-major dependencies #1082

Merged
merged 2 commits into from
Feb 20, 2025
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 10, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@changesets/cli (source) ^2.27.12 -> ^2.28.1 age adoption passing confidence
@eslint/js (source) ^9.19.0 -> ^9.20.0 age adoption passing confidence
@stylistic/eslint-plugin-js (source) ^3.0.1 -> ^3.1.0 age adoption passing confidence
@sveltejs/kit (source) ^2.17.1 -> ^2.17.2 age adoption passing confidence
@types/node (source) ^22.13.1 -> ^22.13.4 age adoption passing confidence
@types/node@<=20.12.0 (source) 20.17.17 -> 20.17.19 age adoption passing confidence
carbon-components-svelte ^0.87.4 -> ^0.87.5 age adoption passing confidence
carbon-icons-svelte (source) ^13.1.0 -> ^13.2.0 age adoption passing confidence
compression ^1.7.5 -> ^1.8.0 age adoption passing confidence
eslint (source) ^9.19.0 -> ^9.20.1 age adoption passing confidence
globals ^15.14.0 -> ^15.15.0 age adoption passing confidence
pnpm (source) 10.2.0 -> 10.4.1 age adoption passing confidence
postcss (source) ^8.5.1 -> ^8.5.3 age adoption passing confidence
prettier (source) ^3.4.2 -> ^3.5.1 age adoption passing confidence
publint (source) ^0.3.2 -> ^0.3.6 age adoption passing confidence
sass ^1.83.4 -> ^1.85.0 age adoption passing confidence
sirv ^3.0.0 -> ^3.0.1 age adoption passing confidence
svelte (source) ^5.19.7 -> ^5.20.2 age adoption passing confidence
typescript-eslint (source) ^8.23.0 -> ^8.24.1 age adoption passing confidence
vite (source) ^6.0.11 -> ^6.1.1 age adoption passing confidence
vitest (source) ^3.0.5 -> ^3.0.6 age adoption passing confidence

Release Notes

changesets/changesets (@​changesets/cli)

v2.28.1

Compare Source

Patch Changes

v2.28.0

Compare Source

eslint/eslint (@​eslint/js)

v9.20.0

Compare Source

eslint-stylistic/eslint-stylistic (@​stylistic/eslint-plugin-js)

v3.1.0

Compare Source

Features
  • generic-spacing: remove spaces in type param instantiation (#​677) (2a29e28)
sveltejs/kit (@​sveltejs/kit)

v2.17.2

Compare Source

Patch Changes
  • fix: add promise return type to the enhance action callback (#​13420)

  • fix: change server-side route resolution endpoint (#​13461)

carbon-design-system/carbon-components-svelte (carbon-components-svelte)

v0.87.5

Compare Source

carbon-design-system/carbon-icons-svelte (carbon-icons-svelte)

v13.2.0

Compare Source

Features

  • upgrade @carbon/icons to v11.55.0 (net +18 icons)
expressjs/compression (compression)

v1.8.0

Compare Source

==================

  • Use res.headersSent when available
  • Replace _implicitHeader with writeHead property
  • add brotli support for versions of node that support it
  • Add the enforceEncoding option for requests without Accept-Encoding header
eslint/eslint (eslint)

v9.20.1

Compare Source

v9.20.0

Compare Source

sindresorhus/globals (globals)

v15.15.0

Compare Source


pnpm/pnpm (pnpm)

v10.4.1

Compare Source

Patch Changes
  • Throws an error when the value provided by the --allow-build option overlaps with the pnpm.ignoredBuildDependencies list #​9105.
  • Print pnpm's version after the execution time at the end of the console output.
  • Print warning about ignored builds of dependencies on repeat install #​9106.
  • Setting init-package-manager should work.

v10.4.0

Compare Source

Minor Changes
  • pnpm approve-builds --global works now for allowing dependencies of globally installed packages to run postinstall scripts.

  • The pnpm add command now supports a new flag, --allow-build, which allows building the specified dependencies. For instance, if you want to install a package called bundle that has esbuild as a dependency and want to allow esbuild to run postinstall scripts, you can run:

    pnpm --allow-build=esbuild add bundle
    

    This will run esbuild's postinstall script and also add it to the pnpm.onlyBuiltDependencies field of package.json. So, esbuild will always be allowed to run its scripts in the future.

    Related PR: #​9086.

  • The pnpm init command adds a packageManager field with the current version of pnpm CLI #​9069. To disable this behaviour, set the init-package-manager setting to false.

Patch Changes
  • pnpm approve-builds should work after two consecutive pnpm install runs #​9083.
  • Fix instruction for updating pnpm with corepack #​9101.
  • The pnpm version specified by packageManager cannot start with v.

v10.3.0

Compare Source

Minor Changes
  • Added a new setting called strict-dep-builds. When enabled, the installation will exit with a non-zero exit code if any dependencies have unreviewed build scripts (aka postinstall scripts) #​9071.
Patch Changes
  • Fix a false negative of verify-deps-before-run after pnpm install --production|--no-optional #​9019.
  • Print the warning about blocked installation scripts at the end of the installation output and make it more prominent.

v10.2.1

Compare Source

Patch Changes
  • Don't read a package from side-effects cache if it isn't allowed to be built #​9042.
  • pnpm approve-builds should work, when executed from a subdirectory of a workspace #​9042.
  • pnpm deploy --legacy should work without injected dependencies.
  • Add information about how to deploy without "injected dependencies" to the "pnpm deploy" error message.
postcss/postcss (postcss)

v8.5.3

Compare Source

v8.5.2

Compare Source

prettier/prettier (prettier)

v3.5.1

Compare Source

diff

Fix CLI crash when cache for old version exists (#​17100 by @​sosukesuzuki)

Prettier 3.5 uses a different cache format than previous versions, Prettier 3.5.0 crashes when reading existing cache file, Prettier 3.5.1 fixed the problem.

Support dockercompose and github-actions-workflow in VSCode (#​17101 by @​remcohaszing)

Prettier now supports the dockercompose and github-actions-workflow languages in Visual Studio Code.

v3.5.0

Compare Source

diff

🔗 Release Notes

publint/publint (publint)

v0.3.6

Compare Source

Patch Changes
  • Fix checking bin field file path that omits .js or /index.js (04f289e)

v0.3.5

Compare Source

Patch Changes
  • Check the "bin" field if the referenced file exists, has the correct JS format, and can be executed (#​150)

  • Deprecate the deps command. The command has been tricky to maintain and incomplete (e.g. doesn't lint recursively). A separate tool can be used to run publint on dependencies instead, e.g. npx renoma --filter-rules "publint". (#​149)

v0.3.4

Compare Source

Patch Changes
  • When globbing "exports" values that contains *, also respect "exports" keys that mark paths as null. For example: (b9605ae)

    {
      "exports": {
        "./*": "./dist/*",
        "./browser/*": null
      }
    }

    The glob in "./*": "./dist/*" will no longer match and lint files in "./browser/*" as it's marked null (internal).

  • Update logs when running the publint CLI: (58d96a2)

    • The publint version is now displayed.
    • The packing command is also displayed.
    • Messages are now logged in the order of errors, warnings, and suggestions, instead of the other way round, to prioritize errors.
    • The publint deps command no longer logs passing dependencies. Only failing dependencies are logged.

    Examples:

    $ npx publint
    $ Running publint v0.X.X for my-library...
    $ Packing files with `npm pack`...
    $ All good!
    $ npx publint deps
    $ Running publint v0.X.X for my-library deps...
    $ x my-dependency
    $ Errors:
    $ 1. ...
  • Fix detecting shorthand repository URLs with the . character (09d8cbb)

  • Clarify message when "types" is not the first condition in the "exports" field (5a6ba00)

  • Correctly detect if a "types" value in "exports" is used for dual publishing (3f3d8b2)

v0.3.3

Compare Source

Patch Changes
  • Rename EXPORT_TYPES_INVALID_FORMAT message to EXPORTS_TYPES_INVALID_FORMAT (#​139)

  • Allow versioned types conditions (e.g. "types@>=5.2") in "exports" when checking for "types" condition ordering (#​138)

sass/dart-sass (sass)

v1.85.0

Compare Source

  • No longer fully trim redundant selectors generated by @extend. This caused
    unacceptable performance issues for certain heavy users of @extend. We'll
    try to find a more performant way to accomplish it in the future.

v1.84.0

Compare Source

  • Allow newlines in whitespace in the indented syntax.

  • Potentially breaking bug fix: Selectors with unmatched brackets now always
    produce a parser error. Previously, some edge cases like [foo#{"]:is(bar"}) {a: b} would compile without error, but this was an unintentional bug.

  • Fix a bug in which various Color Level 4 functions weren't allowed in plain
    CSS.

  • Fix the error message for @extend without a selector and possibly other
    parsing edge-cases in contexts that allow interpolation.

Embedded Host
  • Fixed the implementation of the SassBoolean type to adhere to the spec,
    now using a class instead of an interface.
lukeed/sirv (sirv)

v3.0.1

Compare Source

Patches


Full Changelog: lukeed/sirv@v3.0.0...v3.0.1

sveltejs/svelte (svelte)

v5.20.2

Compare Source

Patch Changes
  • chore: remove unused options.uid in render (#​15302)

  • fix: do not warn for binding_property_non_reactive if binding is a store in an each (#​15318)

  • fix: prevent writable store value from becoming a proxy when reassigning using $-prefix (#​15283)

  • fix: muted reactive without bind and select/autofocus attributes working with function calls (#​15326)

  • fix: ensure input elements and elements with dir attribute are marked as non-static (#​15259)

  • fix: fire delegated events on target even it was disabled in the meantime (#​15319)

v5.20.1

Compare Source

Patch Changes
  • fix: ensure AST analysis on svelte.js modules succeeds (#​15297)

  • fix: ignore typescript abstract methods (#​15267)

  • fix: correctly ssr component in svelte:head with $props.id() or css='injected' (#​15291)

v5.20.0

Compare Source

Minor Changes
  • feat: SSR-safe ID generation with $props.id() (#​15185)
Patch Changes
  • fix: take private and public into account for constant_assignment of derived state (#​15276)

  • fix: value/checked not correctly set using spread (#​15239)

  • chore: tweak effect self invalidation logic, run transition dispatches without reactive context (#​15275)

  • fix: use importNode to clone templates for Firefox (#​15272)

  • fix: recurse into $derived for ownership validation (#​15166)

v5.19.10

Compare Source

Patch Changes
  • fix: when re-connecting unowned deriveds, remove their unowned flag (#​15255)

  • fix: allow mutation of private derived state (#​15228)

v5.19.9

Compare Source

Patch Changes
  • fix: ensure unowned derived dependencies are not duplicated when reactions are skipped (#​15232)

  • fix: hydrate href that is part of spread attributes (#​15226)

v5.19.8

Compare Source

Patch Changes
  • fix: properly set value property of custom elements (#​15206)

  • fix: ensure custom element updates don't run in hydration mode (#​15217)

  • fix: ensure tracking returns true, even if in unowned (#​15214)

typescript-eslint/typescript-eslint (typescript-eslint)

v8.24.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.24.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v6.1.1

Compare Source

v6.1.0

Compare Source

vitest-dev/vitest (vitest)

v3.0.6

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from 00f8a14 to 2bf6ce2 Compare February 17, 2025 12:36
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 763c06b to 65041c1 Compare February 20, 2025 11:52
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 65041c1 to c315d86 Compare February 20, 2025 13:49
@dominikg dominikg merged commit e1c9821 into main Feb 20, 2025
6 checks passed
@dominikg dominikg deleted the renovate/all-minor-patch branch February 20, 2025 14:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant