Skip to content

chore(deps): bump the pnpm-dependencies group with 4 updates - #134

Merged
Typogalaxy merged 1 commit into
devfrom
dependabot/npm_and_yarn/dev/pnpm-dependencies-45effd03b6
Aug 4, 2026
Merged

chore(deps): bump the pnpm-dependencies group with 4 updates#134
Typogalaxy merged 1 commit into
devfrom
dependabot/npm_and_yarn/dev/pnpm-dependencies-45effd03b6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the pnpm-dependencies group with 4 updates: knip, vite-plus, vue-tsc and fastify.

Updates knip from 6.29.0 to 6.30.0

Release notes

Sourced from knip's releases.

Release 6.30.0

  • docs: migrate to Starlight Blog plugin (#1854) (c89e3e3c9) - thanks @​trueberryless!
  • Include workspace dependencies in scoped runs (resolve #1901) (a75309eda)
  • Simplify workspace assembly (b3ac16411)
  • Document export declaration safety (ef98a7682)
  • Read object jsPlugin specifiers from Vite+ config (#1879) (3ea6a92d4) - thanks @​matchai!
  • Compile gitignore negations once (6884cdb20)
  • Cache Node test script detection (d970f67d8)
  • Track only enabled workspace plugins (67d48268a)
  • Skip unsupported Vite config command (545bb2d36)
  • Add SARIF reporter (ce11cf5d4)
  • Track catalog refs in pnpm dlx scripts (resolve #1885, close #1886) (102189a1a)
  • Report unresolved catalog references (b2b86c3e5)
  • Track catalog references across scoped runs (resolve #1905) (f0365bae0)
  • Track script catalog references across scoped runs (9b3ab3778)
  • Remove tsc from ignoreBinaries (a0a283040)
  • fix: detect dynamic imports in Svelte component templates (#1908) (aa303fb04) - thanks @​firatciftci!
  • fix(remark): support all types of dependency names (#1911) (3441bea3a) - thanks @​voxpelli!
  • Update sanity snapshot (d04aa04e5)
  • feat(stryker): add ts extensions (#1910) (cfc50886e) - thanks @​christopher-buss!
  • Adopt @​e18e/eslint-plugin (adf2511ab)
  • Remove Workleap from sponsors (d4f6af9ff)
  • Update dependencies (3f61542f6)
  • Add ES2023 array types to TypeScript 5 CI (360a47157)
  • Update sentry snapshot (7defc1853)
  • Analyze published type dependencies (resolve #1909) (#1912) (87d713e52)
  • Update TanStack and Code Forge logos (39ed8c82b)
  • Track assets referenced from SCSS URLs (resolve #1916) (cbe13bf87)
  • Consume only the default export of inline dynamic import loaders (resolve #1915) (b90a299e2)
  • Update ecosystem snapshots (3f6cdee15)
  • Update dependencies (6cdb3a6ac)
Commits

Updates vite-plus from 0.2.6 to 0.2.7

Release notes

Sourced from vite-plus's releases.

vite-plus v0.2.7: Clearer guidance for built-in commands and scripts

This release points users to vpr <name> when a Vite+ built-in command and package script share a name, adds concurrency control to vp pack, and smooths migrations and package-manager setup.

Highlights

  • Point users to vpr <name> when a Vite+ built-in command and package.json script share a name (#2259, #2262, #2265, vite-task#570), by @​wan9chi
  • Add --concurrency to vp pack to limit parallel Rolldown builds, and update tsdown 0.22.13 -> 0.22.14 and Vite DevTools 0.4.2 -> 0.4.5 (#2233), by @​voidzero-guard[bot]
  • Add read-only Svelte rune globals to migrated Oxlint overrides, preventing false no-undef errors (#2192), by @​naokihaba
  • Install package managers from npm tarballs with nonstandard top-level directories, fixing Yarn 1.22.19 installation (#2264), by @​TheAlexLichter

Fixes & Enhancements

  • Prevent the Oxc language server from crashing when contributors open the Vite+ workspace in VS Code (#2245), by @​jong-kyung

Docs

  • Document the full procedure for removing Vite+ commit hooks (#2218), by @​TheAlexLichter
  • Document per-process and per-machine ways to disable Vite+ commit hooks without uninstalling them (#2230), by @​TheAlexLichter
  • Clarify when to use built-in vp commands versus package scripts through vp run or vpr, including migration and agent guidance (#2255), by @​wan9chi
  • Document GitLab CI/CD setup with the reusable setup-vp template (#2258), by @​naokihaba

Chore

  • Run Semgrep security scans on pull requests and pushes to main (#2223), by @​Boshen
  • Re-enable Vitest browser-mode CLI snapshot coverage on every supported platform (#2275), by @​wan9chi
  • Stabilize Windows CLI snapshot tests for interrupted installs and browser port fallback (#2282), by @​wan9chi
  • Replace deprecated shared JavaScript and TypeScript VS Code settings with their current js/ts.* names (#2246), by @​jong-kyung

Bundled Versions

Tool Version Source
vite 8.1.5 5e7fe12
rolldown 1.2.0 03e1e34
tsdown 0.22.14 npm
vitest 4.1.10 npm
oxlint 1.75.0 npm
oxlint-tsgolint 7.0.2001 npm
oxfmt 0.60.0 npm

Upgrade

vp upgrade

Full Changelog: voidzero-dev/vite-plus@v0.2.6...v0.2.7

Published Packages

... (truncated)

Commits
  • c17e1c3 release: v0.2.7: Clearer commands and smoother setup (#2279)
  • fb1c82b feat(cli): note when a built-in shares a name with a package.json script (#2259)
  • ce88216 fix(migration): add Svelte rune globals to Oxlint config (#2192)
  • 95f1401 docs: clarify vp dev vs vp run dev / vpr dev (#2255)
  • a24eede feat(deps): upgrade upstream dependencies (#2233)
  • See full diff in compare view

Updates vue-tsc from 3.3.8 to 3.3.9

Release notes

Sourced from vue-tsc's releases.

v3.3.9

language-core

language-service

  • fix: preserve trailing modifiers when completing in the middle of a directive (#6133) - Thanks to @​lazerg!
  • fix: only replace current directive modifier on completion - Thanks to @​KazariEX!
  • fix: preserve current modifier when filtering completion duplicates - Thanks to @​KazariEX!

component-meta

workspace

  • feat: migrate build and tests to typescript-native-bridge (#6129)

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.9 (2026-07-31)

component-meta

language-core

language-service

  • fix: preserve trailing modifiers when completing in the middle of a directive (#6133) - Thanks to @​lazerg!
  • fix: only replace current directive modifier on completion - Thanks to @​KazariEX!
  • fix: preserve current modifier when filtering completion duplicates - Thanks to @​KazariEX!

workspace

  • feat: migrate build and tests to typescript-native-bridge (#6129)
Commits
  • 51617b9 v3.3.9 (#6138)
  • 9d08c43 feat(language-core): check unused generic type parameters (#6137)
  • c99eb00 fix(component-meta): keep getProgramAndFile free of side effects (#6136)
  • 00ce7ec feat(component-meta): expose runtime values of enum members in schema (#6131)
  • c4e58ea feat: migrate build and tests to typescript-native-bridge (#6129)
  • See full diff in compare view

Updates fastify from 5.10.0 to 5.11.0

Release notes

Sourced from fastify's releases.

v5.11.0

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.10.0...v5.11.0

Commits
  • b93d611 Bumped v5.11.0
  • 625d2b8 chore: Bump actions/labeler from 6.2.0 to 7.0.0 (#6867)
  • 720355b chore: Bump actions/setup-node from 6.4.0 to 7.0.0 (#6866)
  • 84b1158 chore(.npmrc): add min-release-age (#6873)
  • 29bdcbb fix: honor quoted-string in Content-Type parameter values (#6865)
  • 01ca839 fix: uncatchable throws in writeHead when using async hook (#6881)
  • b6cdc6a docs: fix logController migration example and links (#6876)
  • f3fd0f3 docs: use async trailer handlers in Reply examples (#6856)
  • ea664e6 docs: update TypeScript docs to reference Fastify 5.x (#6880)
  • e6db573 ci(links-check): pin linkinator server root to the workspace (#6877)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pnpm-dependencies group with 4 updates: [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip), [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli), [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) and [fastify](https://github.com/fastify/fastify).


Updates `knip` from 6.29.0 to 6.30.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.30.0/packages/knip)

Updates `vite-plus` from 0.2.6 to 0.2.7
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v0.2.7/packages/cli)

Updates `vue-tsc` from 3.3.8 to 3.3.9
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.9/packages/tsc)

Updates `fastify` from 5.10.0 to 5.11.0
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.10.0...v5.11.0)

---
updated-dependencies:
- dependency-name: knip
  dependency-version: 6.30.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pnpm-dependencies
- dependency-name: vite-plus
  dependency-version: 0.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pnpm-dependencies
- dependency-name: vue-tsc
  dependency-version: 3.3.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pnpm-dependencies
- dependency-name: fastify
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pnpm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
@dependabot
dependabot Bot requested a review from Typogalaxy as a code owner August 3, 2026 09:18
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026

@Typogalaxy Typogalaxy left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok

@Typogalaxy
Typogalaxy merged commit d26e368 into dev Aug 4, 2026
10 checks passed
@Typogalaxy
Typogalaxy deleted the dependabot/npm_and_yarn/dev/pnpm-dependencies-45effd03b6 branch August 4, 2026 03:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant