chore(deps): update dependency loro-codemirror to ^0.3.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
loro-codemirror	^0.1.6 -> ^0.3.3

---

Release Notes

loro-dev/loro-codemirror (loro-codemirror)

v0.3.3

Compare Source

Patch Changes

• #​17 f1a8c1d Thanks @​Leeeon233! - feat: export ephemeral key

v0.3.2

Compare Source

Patch Changes

• e9d09be Thanks @​Leeeon233! - fix: build in ci

v0.3.1

Patch Changes

• 2b4a387 Thanks @​Leeeon233! - fix: ephemeral store event

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 6 workspace projects
.                                        |  WARN  `node_modules` is present. Lockfile only installation will make it out-of-date
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 196, reused 1, downloaded 0, added 0
Progress: resolved 533, reused 1, downloaded 0, added 0
Progress: resolved 898, reused 1, downloaded 0, added 0
Progress: resolved 1162, reused 1, downloaded 0, added 0
Progress: resolved 1179, reused 1, downloaded 0, added 0
Progress: resolved 1313, reused 1, downloaded 0, added 0
 WARN  Skip adding @commitlint/cli to the default catalog because it already exists as ^19.8.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @commitlint/config-conventional to the default catalog because it already exists as ^19.8.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @manypkg/cli to the default catalog because it already exists as ^0.25.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding husky to the default catalog because it already exists as ^9.1.7. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding knip to the default catalog because it already exists as ^5.46.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding prettier-plugin-svelte to the default catalog because it already exists as ^3.3.3. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding prettier-plugin-tailwindcss to the default catalog because it already exists as ^0.6.14. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding turbo to the default catalog because it already exists as ^2.6.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding typesync to the default catalog because it already exists as ^0.14.3. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding svelte to the default catalog because it already exists as ^5.34.8. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding typescript to the default catalog because it already exists as ~5.8.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @tailwindcss/vite to the default catalog because it already exists as ^4.0.14. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @total-typescript/ts-reset to the default catalog because it already exists as ^0.6.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @vite-pwa/assets-generator to the default catalog because it already exists as ^0.2.6. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding eslint to the default catalog because it already exists as ^9.22.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding fontaine to the default catalog because it already exists as ^0.6.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding jiti to the default catalog because it already exists as ^2.6.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding lightningcss to the default catalog because it already exists as ^1.29.3. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding tailwindcss to the default catalog because it already exists as ^4.0.14. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding typescript to the default catalog because it already exists as ~5.8.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vite to the default catalog because it already exists as ^6.4.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vite-plugin-html-minifier to the default catalog because it already exists as ^1.0.5. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vite-plugin-pwa to the default catalog because it already exists as ^0.21.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding workbox-build to the default catalog because it already exists as ^7.3.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding workbox-core to the default catalog because it already exists as ^7.3.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding workbox-precaching to the default catalog because it already exists as ^7.3.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding workbox-window to the default catalog because it already exists as ^7.3.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding html-template-tag to the default catalog because it already exists as ^4.1.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding idb-keyval to the default catalog because it already exists as ^6.2.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding typed-query-selector to the default catalog because it already exists as ^2.12.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding unstorage to the default catalog because it already exists as ^1.15.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding zod to the default catalog because it already exists as ^3.24.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @chromatic-com/storybook to the default catalog because it already exists as ^4.1.3. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @storybook/addon-a11y to the default catalog because it already exists as ^9.1.8. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @storybook/addon-designs to the default catalog because it already exists as ^10.0.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @storybook/addon-docs to the default catalog because it already exists as ^9.1.8. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @storybook/addon-svelte-csf to the default catalog because it already exists as ^5.0.8. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @storybook/addon-vitest to the default catalog because it already exists as ^9.1.8. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @storybook/sveltekit to the default catalog because it already exists as ^9.1.8. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @sveltejs/adapter-static to the default catalog because it already exists as ^3.0.9. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @sveltejs/kit to the default catalog because it already exists as ^2.44.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @sveltejs/vite-plugin-svelte to the default catalog because it already exists as ^5.1.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @tailwindcss/forms to the default catalog because it already exists as ^0.5.10. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @tailwindcss/typography to the default catalog because it already exists as ^0.5.16. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @tailwindcss/vite to the default catalog because it already exists as ^4.0.14. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @total-typescript/ts-reset to the default catalog because it already exists as ^0.6.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @types/react to the default catalog because it already exists as ~19.1.10. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @vitest/browser to the default catalog because it already exists as ^3.2.4. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @vitest/coverage-v8 to the default catalog because it already exists as ^3.2.4. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @vitest/ui to the default catalog because it already exists as ^3.2.4. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding chromatic to the default catalog because it already exists as ^13.2.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding eslint to the default catalog because it already exists as ^9.22.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding jiti to the default catalog because it already exists as ^2.6.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding lightningcss to the default catalog because it already exists as ^1.29.3. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding playwright to the default catalog because it already exists as ^1.55.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding storybook to the default catalog because it already exists as ^9.1.8. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding svelte to the default catalog because it already exists as ^5.34.8. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding svelte-check to the default catalog because it already exists as ^4.2.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding tailwindcss to the default catalog because it already exists as ^4.0.14. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding typescript to the default catalog because it already exists as ~5.8.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vite to the default catalog because it already exists as ^6.4.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vitest to the default catalog because it already exists as ^3.2.4. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vitest-browser-svelte to the default catalog because it already exists as ^1.0.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @codemirror/autocomplete to the default catalog because it already exists as ^6.18.7. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @codemirror/commands to the default catalog because it already exists as ^6.8.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @codemirror/lang-markdown to the default catalog because it already exists as ^6.3.4. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @codemirror/language to the default catalog because it already exists as ^6.11.3. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @codemirror/language-data to the default catalog because it already exists as ^6.5.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @codemirror/search to the default catalog because it already exists as ^6.5.11. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @codemirror/state to the default catalog because it already exists as ^6.5.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @codemirror/view to the default catalog because it already exists as ^6.38.3. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @lezer-unofficial/printer to the default catalog because it already exists as ^1.0.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @lezer/highlight to the default catalog because it already exists as ^1.2.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @lezer/markdown to the default catalog because it already exists as ^1.4.3. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding codemirror to the default catalog because it already exists as ^6.0.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding loro-crdt to the default catalog because it already exists as ^1.4.6. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding svelte-codemirror-editor to the default catalog because it already exists as ^1.4.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding uint8array-extras to the default catalog because it already exists as ^1.5.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vite-plugin-top-level-await to the default catalog because it already exists as ^1.5.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vite-plugin-wasm to the default catalog because it already exists as ^3.4.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @total-typescript/ts-reset to the default catalog because it already exists as ^0.6.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @types/pathfinding to the default catalog because it already exists as ~0.1.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @vite-pwa/assets-generator to the default catalog because it already exists as ^0.2.6. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding eslint to the default catalog because it already exists as ^9.22.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding fontaine to the default catalog because it already exists as ^0.6.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding jiti to the default catalog because it already exists as ^2.6.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding lightningcss to the default catalog because it already exists as ^1.29.3. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding typescript to the default catalog because it already exists as ~5.8.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vite to the default catalog because it already exists as ^6.4.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vite-plugin-html-minifier to the default catalog because it already exists as ^1.0.5. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vite-plugin-pwa to the default catalog because it already exists as ^0.21.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vite-plugin-webfont-dl to the default catalog because it already exists as ^3.10.4. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding workbox-build to the default catalog because it already exists as ^7.3.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding workbox-core to the default catalog because it already exists as ^7.3.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding workbox-precaching to the default catalog because it already exists as ^7.3.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding workbox-window to the default catalog because it already exists as ^7.3.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @fortawesome/fontawesome-svg-core to the default catalog because it already exists as ^6.7.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @fortawesome/free-solid-svg-icons to the default catalog because it already exists as ^6.7.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding html-template-tag to the default catalog because it already exists as ^4.1.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding idb-keyval to the default catalog because it already exists as ^6.2.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding pathfinding to the default catalog because it already exists as ^0.4.18. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding typed-query-selector to the default catalog because it already exists as ^2.12.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding unstorage to the default catalog because it already exists as ^1.15.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding zod to the default catalog because it already exists as ^3.24.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding zod-validation-error to the default catalog because it already exists as ^3.4.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @sveltejs/kit to the default catalog because it already exists as ^2.44.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding eslint to the default catalog because it already exists as ^9.22.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding jiti to the default catalog because it already exists as ^2.6.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding svelte to the default catalog because it already exists as ^5.34.8. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding typescript to the default catalog because it already exists as ~5.8.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @cspell/eslint-plugin to the default catalog because it already exists as ^8.17.5. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding eslint-config-sheriff to the default catalog because it already exists as ^27.0.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding eslint-plugin-perfectionist to the default catalog because it already exists as ^4.15.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding eslint-plugin-svelte to the default catalog because it already exists as ^3.3.2. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding globals to the default catalog because it already exists as ^16.0.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding svelte2tsx to the default catalog because it already exists as ^0.7.45. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding typescript-eslint-parser-for-extra-files to the default catalog because it already exists as ^0.7.0. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @sveltejs/vite-plugin-svelte to the default catalog because it already exists as ^5.1.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vite to the default catalog because it already exists as ^6.4.1. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding lightningcss to the default catalog because it already exists as ^1.29.3. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding vitest to the default catalog because it already exists as ^3.2.4. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @vitest/browser to the default catalog because it already exists as ^3.2.4. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding lightningcss to the default catalog because it already exists as ^1.29.3. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding @vitest/ui to the default catalog because it already exists as ^3.2.4. Please use `pnpm update` to update the catalogs.
 WARN  Skip adding playwright to the default catalog because it already exists as ^1.55.1. Please use `pnpm update` to update the catalogs.
 WARN  5 deprecated subdependencies found: glob@7.2.3, inflight@1.0.6, rspack-resolver@1.1.2, source-map@0.8.0-beta.0, sourcemap-codec@1.4.8
Progress: resolved 1396, reused 1, downloaded 0, added 0
Progress: resolved 1396, reused 1, downloaded 0, added 0, done
 ERR_PNPM_PEER_DEP_ISSUES  Unmet peer dependencies

apps/petal-notes
└─┬ loro-codemirror 0.3.3
  └── ✕ unmet peer loro-crdt@^1.8.2: found 1.4.6
hint: To disable failing on peer dependency issues, add the following to pnpm-workspace.yaml in your project root:

  strictPeerDependencies: false

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	husky@​9.1.7
	html-template-tag@​4.1.1
	loro-codemirror@​0.1.6
	fontaine@​0.6.0
	idb-keyval@​6.2.2
	lightningcss@​1.29.3
	globals@​16.0.0
	knip@​5.46.0
	loro-crdt@​1.4.6
	eslint-plugin-svelte@​3.3.2
	eslint@​9.22.0

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Critical CVE: npm form-data uses unsafe random function in form-data for choosing boundary CVE: GHSA-fjxv-7rqg-78g4 form-data uses unsafe random function in form-data for choosing boundary (CRITICAL) Affected versions: < 2.5.4; >= 3.0.0 < 3.0.4; >= 4.0.0 < 4.0.4 Patched version: 4.0.4 From: pnpm-lock.yaml → npm/form-data@4.0.2 ℹ Read more on: This package | This alert | What is a critical CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/form-data@4.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report