chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@tsconfig/node22 (source)	22.0.2 -> 22.0.5			devDependencies	patch
@types/node (source)	22.18.10 -> 22.19.1			devDependencies	minor
actions/checkout	v5.0.0 -> v5.0.1			action	patch
changelogithub	13.16.0 -> 13.16.1			devDependencies	patch
danielroe/provenance-action	v0.1.0 -> v0.1.1			action	patch
jose	6.1.0 -> 6.1.2			dependencies	patch
pnpm (source)	10.21.0 -> 10.24.0			packageManager	minor
postgres	18.0-alpine -> 18.1-alpine				minor
vue-tsc (source)	3.1.1 -> 3.1.5			devDependencies	patch

---

Release Notes

tsconfig/bases (@​tsconfig/node22)

v22.0.5

Compare Source

v22.0.4

Compare Source

v22.0.3

Compare Source

actions/checkout (actions/checkout)

v5.0.1

Compare Source

What's Changed

• Port v6 cleanup to v5 by @​ericsciple in #​2301

Full Changelog: actions/checkout@v5...v5.0.1

antfu/changelogithub (changelogithub)

v13.16.1

Compare Source

   🐞 Bug Fixes

• Fix asset upload for untagged releases  -  by @​josh-hemphill in #​74 (86d29)

    View changes on GitHub

danielroe/provenance-action (danielroe/provenance-action)

v0.1.1

Compare Source

compare changes

🚀 Enhancements

• Add support for bun.lock (#​12)

📖 Documentation

• Use @main constraint for example (237ceea)

❤️ Contributors

• Daniel Roe (@​danielroe)

panva/jose (jose)

v6.1.2

Compare Source

Refactor

• fallback to checking instanceof for CryptoKey (901cd90), closes #​765 #​803 #​821 #​827 #​828

v6.1.1

Compare Source

Documentation

• add link to RFC9864 (767edde)
• link to ML-DSA for JOSE (ed4252c)
• remove mention of Edge Runtime from the readme (94fdde7)
• update README.md (25098ef)

Refactor

• eliminate named exports in the source code (f6ae30d)
• expose setKeyManagementParameters also on a GeneralEncrypt Recipient (16e6b23)
• faster path for symmetric key checks (a44c2ec)
• improve en/decoding overheads (daee426)

pnpm/pnpm (pnpm)

v10.24.0

Compare Source

v10.23.0: pnpm 10.23

Compare Source

Minor Changes

• Added --lockfile-only option to pnpm list #​10020.

Patch Changes

• pnpm self-update should download pnpm from the configured npm registry #​10205.
• pnpm self-update should always install the non-executable pnpm package (pnpm in the registry) and never the @pnpm/exe package, when installing v11 or newer. We currently cannot ship @pnpm/exe as pkg doesn't work with ESM #​10190.
• Node.js runtime is not added to "dependencies" on pnpm add, if there's a engines.runtime setting declared in package.json #​10209.
• The installation should fail if an optional dependency cannot be installed due to a trust policy check failure #​10208.
• pnpm list and pnpm why now display npm: protocol for aliased packages (e.g., foo npm:is-odd@3.0.1) #​8660.
• Don't add an extra slash to the Node.js mirror URL #​10204.
• pnpm store prune should not fail if the store contains Node.js packages #​10131.

Platinum Sponsors

Gold Sponsors

v10.22.0: pnpm 10.22

Compare Source

Minor Changes

• Added support for trustPolicyExclude #​10164.

  You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:

  trustPolicy: no-downgrade
  trustPolicyExclude:
    - chokidar@4.0.3
    - webpack@4.47.0 || 5.102.1

• Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

• Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #​10179.

Platinum Sponsors

Gold Sponsors

vuejs/language-tools (vue-tsc)

v3.1.5

Compare Source

v3.1.4

Compare Source

Bug Fixes

• fix(language-service): prevent auto-insertion of html snippets in template interpolation (#​5744) - Thanks to @​serkodev!
• fix(language-service): strip interpolations from document passed to html service - Thanks to @​KazariEX!
• fix(language-core): report unused @ts-expect-error directive on components with loose props checks (#​5750) - Thanks to @​serkodev and @​KazariEX!
• fix(language-core): respect directive comments before v-else (#​5753) - Thanks to @​serkodev and @​KazariEX!

Other Changes

• refactor(language-core): re-implement component references by codegen (#​5736) - Thanks to @​KazariEX!
• refactor(language-core): simplify calculation of full interpolation content - Thanks to @​KazariEX!

v3.1.3

Compare Source

Features

• feat(typescript-plugin): allow triggering file references on <template> (#​5734) - Thanks to @​KazariEX!

Bug Fixes

• fix(vscode): correct syntax highlight in template with lang="html" (#​5728) - Thanks to @​serkodev!

Other Changes

• refactor(language-core): generate intrinsic elements variable into global types (#​5730) - Thanks to @​KazariEX!
• refactor(typescript-plugin): remove go to definition trick for auto imported components (#​5733) - Thanks to @​KazariEX!

v3.1.2

Compare Source

Bug Fixes

• fix(component-meta): import type helpers by relative path
• fix(language-core): fix syntax error when propTypes has no elements (#​5704) - Thanks to @​so1ve!
• fix(language-core): omit defined emit props only (#​5705) - Thanks to @​so1ve!

Other Changes

• docs: fix vue-tsc broken link to example boilerplate in README.md (#​5721) - Thanks to @​heyakyra!

---

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​tsconfig/​node22@​22.0.2 ⏵ 22.0.5				-1
	@​types/​node@​22.18.10 ⏵ 22.19.1	+1		+1
	universal-cookie@​7.2.2
	changelogithub@​13.16.0 ⏵ 13.16.1			+1	+5
	jose@​6.1.0 ⏵ 6.1.2	+1			+7

View full report