fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #100 · escapace/esroll

renovate · 2026-01-19T00:54:51Z

This PR contains the following updates:

Package	Change	Age	Confidence
@commitlint/cli (source)	`20.3.0` → `20.4.1`
@commitlint/config-conventional (source)	`20.3.0` → `20.4.1`
@microsoft/api-extractor (source)	`^7.55.2` → `^7.56.0`
@types/node (source)	`25.0.3` → `25.2.0`
@vitest/coverage-v8 (source)	`4.0.16` → `4.0.18`
es-toolkit (source)	`^1.43.0` → `^1.44.0`
knip (source)	`5.79.0` → `5.83.0`
lefthook	`2.0.13` → `2.1.0`
prettier (source)	`3.7.4` → `3.8.1`
rollup (source)	`^4.54.0` → `^4.57.1`
unist-util-visit	`^5.0.0` → `^5.1.0`
vitest (source)	`4.0.16` → `4.0.18`

Release Notes

conventional-changelog/commitlint (@commitlint/cli)

`v20.4.1`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.4.0`

Compare Source

Features

upgrade conventional commit packages #4082 (#4597) (3aaf0a6)

20.3.1 (2026-01-08)

Note: Version bump only for package @commitlint/cli

`v20.3.1`

Compare Source

Note: Version bump only for package @commitlint/cli

conventional-changelog/commitlint (@commitlint/config-conventional)

`v20.4.1`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

`v20.4.0`

Compare Source

Features

upgrade conventional commit packages #4082 (#4597) (3aaf0a6)

20.3.1 (2026-01-08)

Note: Version bump only for package @commitlint/config-conventional

`v20.3.1`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

microsoft/rushstack (@microsoft/api-extractor)

`v7.56.0`

Compare Source

Fri, 30 Jan 2026 01:16:12 GMT

Minor changes

Fix an issue where destructured parameters produced an incorrect parameter name

`v7.55.5`

Compare Source

Thu, 08 Jan 2026 01:12:30 GMT

Patches

Fix missing 'export' keyword for namespace re-exports that produced invalid TypeScript output

vitest-dev/vitest (@vitest/coverage-v8)

`v4.0.18`

Compare Source

🚀 Experimental Features

experimental: Add onModuleRunner hook to worker.init - by @sheremet-va in #9286 (ea837)

🐞 Bug Fixes

Use meta.url in createRequire - by @sheremet-va in #9441 (e0572)
browser: Hide injected data-testid attributes - by @sheremet-va in #9503 (f8989)
ui: Process artifact attachments when generating HTML reporter - by @macarie in #9472 (22543)

View changes on GitHub

`v4.0.17`

Compare Source

🚀 Experimental Features

Support openTelemetry for browser mode - by @hi-ogawa in #9180 (1ec3a)
Support TRACEPARENT and TRACESTATE environment variables for OpenTelemetry context propagation - by @Copilot, hi-ogawa and @hi-ogawa in #9295 (876cb)

🐞 Bug Fixes

Improve asymmetric matcher diff readability by unwrapping container matchers - by @Copilot, sheremet-va, hi-ogawa and @hi-ogawa in #9330 (b2ec7)
Improve runner error when importing outside of test context - by @sheremet-va in #9335 (2dd3d)
Replace crypto.randomUUID to allow insecure environments (fix #9… - by @plusgut in #9339 and #9 (e6a3f)
Handle null options in addEventHandler #9371 - by @ThibautMarechal in #9372 and #9371 (40841)
Typo in browser.provider error - by @deammer in #9394 (4b67f)
browser:
- Fix process.env and import.meta.env defines in inline project - by @hi-ogawa in #9239 (b70c9)
- Fix upload File instance - by @hi-ogawa in #9294 (b6778)
- Fix invalid project token for artifacts assets - by @hi-ogawa in #9321 (caa7d)
- Log ErrorEvent.message when unhandled ErrorEvent.error is null - by @hi-ogawa in #9322 (5d84e)
- Support fileParallelism on an instance - by @sheremet-va in #9328 (15006)
coverage:
- Remove unnecessary istanbul-lib-source-maps usage - by @AriPerkkio in #9344 (b0940)
- Apply patch from istanbuljs/istanbuljs#837 - by @AriPerkkio and sapphi-red in #9413 and #837 (e05ce)
fsModuleCache:
- Don't store importers in cache - by @sheremet-va in #9422 (75136)
- Add importers alongside importedModules - by @sheremet-va in #9423 (59f92)
mocker:
- Fix mock transform with class - by @hi-ogawa in #9421 (d390e)
pool:
- Validate environment options when reusing the worker - by @sheremet-va in #9349 (a8a88)
- Handle worker start failures gracefully - by @AriPerkkio in #9337 (200da)
reporter:
- Report test module if it failed to run - by @sheremet-va in #9272 (c7888)
runner:
- Respect nested test.only within describe.only - by @Ujjwaljain16 in #9021 and #9213 (55d5d)
typecheck:
- Improve error message when tsc outputs help text - by @Ujjwaljain16 in #9214 (7b10a)
ui:
- Detect gzip by magic numbers instead of Content-Type header in html reporter - by @Copilot, hi-ogawa and @hi-ogawa in #9278 (dd033)
webdriverio:
- Fall back to WebDriver Classic #9244 - by @JustasMonkev in #9373 and #9244 (c23dd)

View changes on GitHub

toss/es-toolkit (es-toolkit)

`v1.44.0`

Compare Source

Released on January 16th, 2026.

Added shouldRetry option to retry function. ([#1585])
Added isEmptyObject predicate function. ([#1584])
Added isNumber predicate function.
Enhanced error cloning to support AggregateError. ([#1563])
Implemented collection methods for Maps and Sets.
Added bundle size analysis and visualization components to docs. ([#1564])
Fixed flattenObject to retain empty objects and arrays.
Enhanced type safety for clone function.
Fixed clone error when cloning object with null prototype. ([#1570])
Fixed array function callbacks to include index and array parameters. ([#1561])
Fixed compat/cloneDeep and cloneDeepWith to clone null-prototype objects as regular objects. ([#1562])
Fixed compat/clamp to ensure consistency with lodash. ([#1555])
Simplified intersection filter callback for consistency. ([#1582])
Fixed incorrect function names and output in cloneDeep JSDoc examples. ([#1583])

We sincerely thank @raon0211, @dayongkr, @eunwoo-levi, @matt-oakes, @T3sT3ro, and @D-Sketon for their contributions. We appreciate your great efforts!

webpro-nl/knip (knip)

`v5.83.0`: Release 5.83.0

Compare Source

fix: skip empty string entries in package.json exports (#1477) (6b64ac5) - thanks @SBoudrias!
add LS version to serverInfo (#1468) (2c28cb8) - thanks @niklas-wortmann!
Avoid highlighting path-like specifiers (#1488) (c8fec09) - thanks @azat-io!
Update avatar URLs (#1489) (d612ac2) - thanks @azat-io!
Copy fix-fixtures to tmp dir (bd1519c)
Don't add excluded issue types (resolve #1486) (4eeeec6)
Minor refactor (767b2c5)
Edit docs (78111c9)
feat: add plugin for expressive-code (#1493) (fbf958a) - thanks @cylewaitforit!
Truncate file path left-side (resolves #1494) (235949c)
Revert fix-fixture format test (fails in outside cwd) (8e96125)
Skip empty manifest entries (resolve #1497) (d314ce4)
Filter out empty issue objects in compact reporter (resolve #1482) (7df0b4d)
Lint/group import statements (61e7a24)
Update AGENTS.md & docs (7537f8a)
Optimize relative path helper (ac8a454)
Move postinstall script to non-production (360110b)
Ignore simple-git-hooks in production (like husky etc) (bbab35b)
Move & add testimonials (5ab1813)
Update sponsors page (4534a55)
Edit docs, add config hints page (1a73a05)
Rename reporter to match project style (58f8c4e)
Auto-format (854124f)
Refactor fs helper to match project style (f22e7e9)

`v5.82.1`: Release 5.82.1

Compare Source

Add vsce + ovsx verify PATs (6bec128)
Improve coverage for isReferencedInExport types (570eafe)

`v5.82.0`: Release 5.82.0

Compare Source

Release @knip/create-config@1.2.0 (31eaaf5)
Update docs (0384673)
Add config load error hint + example env var fixes (close #1470) (844beb0)
Improve mdx "compiler" (resolve #1471) (cd145e2)
Add and use deputy.addIgnoredUnresolved (4f6d9e5)
Unescape regex in config hint output (b517726)
Create new sveltekit plugin (split from svelte) (714af2e)
Use bun@1.2.22 (cf5bae2)
Detect and install none installed packages (#1473) (abefd09) - thanks @AlexanderKaran!
Auto-format (4430175)

`v5.81.0`: Release 5.81.0

Compare Source

Update CLI documentation to match current implementation (#1458) (937dd83) - thanks @sebacardello!
Replace glob with fs helpers (#1454) (880f718) - thanks @gameroman!
Expand workspace filter (#1455) (b3edb80) - thanks @fightZy!
Sync up cli-arguments ↔ md docs further (47559d2)
Minor refactor for lints & consistency (c5e66db)
Fix manual enabled compilers (#1457) (57df2e1) - thanks @digitsum!
add push notification once module graph is built (#1461) (57825f4) - thanks @niklas-wortmann!
fix(prisma): Avoid crash if Prisma schema path is not specified (#1464) (1e0ffc7) - thanks @stephenwade!
Add Nitro plugin (#1415) (ecf5e34) - thanks @lynnntropy!
Add a few impl guidelines to AGENTS.md (5923a20)
Optimize workspaces storage & usage inside ConfigurationChief (602603f)
Exclude optional peer deps from the production deps check in strict mode (resolve #1145) (605fb85)
Consider all members of keyof typeof MyEnum used (7d5b9d6)
Add entry files to sveltekit (resolve #1162, resolve #1465) (c0ed40a)
Consistent config options (dc11214)
Warn for faux monorepo in init script (b94dcfa)
Document new --workspace behavior (#1455) (9cbbbc2)
Auto-format (4c3e45f)
Add npm login to release script (968d339)

`v5.80.2`: Release 5.80.2

Compare Source

Add astro-og-canvas plugin (#1445) (bb93a2b) - thanks @JoshuaKGoldberg!
Small performance optimization on bun commands (#1453) (af0d736) - thanks @ClementValot!
Accept cwdOrPath in isDirectory and isFile (2d0bb0c)
Improve hasRefsInFile (86bde97)
Rename find-internal-references.ts → has-refs-in-file.ts (307c37b)
Move pos from exported default keyword to identifier (8e74ec7)
Fix release script (71206b7)

`v5.80.1`: Release 5.80.1

Compare Source

Minor lints/formats (26a6f7b)
Resolve _partial.scss in compiler (close #1439) (ee09aa3)
Add tip re. Knip editor extension early on (88c488a)
Add more deterministic workspace mapping to remedy test flakiness (4d000e7)
Remove ignoreExportsUsedInFile from default config (f3eddf3)
Update docs (29e5f17)
Show link to docs for module load errors in CLI (31ce18a)
Bump release-it (64ad7b4)
Improved TanStack Router Configs (#1449) (3e0b847)- thanks @AlexanderKaran!
Add warning about invalid tag characters to docs (#1448) (de508e3) - thanks @solomonhawk!
Housekeep a few thingies around resolve in plugins (5b98269)
Improve react-router appDir + fix glob escaper (f993591)
Extended the NX plugins (#1443) (b9dc80e) - thanks @AlexanderKaran!
Remove mention of editor plugins from FAQ (#1444) (d8fa043) - thanks @sebacardello!
Fix remaining broken links (a8d0bfd)
Bump md/mdx presets (a4d6b1e)
Fix quoting in release script (2f663e3)

`v5.80.0`: Release 5.80.0

Compare Source

Edit docs (d6f33a5)
Only try to use tsconfig files if tsconfig.json exists (707c96d)
Also create comment for commits that close an issue (3485d67)
Plugin for Parcel (#1438) (24d8131) - thanks @AlexanderKaran!
Edit "Knip for Editors & Agents" (e031018)
Timerify hasRefsInFile (#1435) (c6fa5e4)
Fixes #1436 - Make stderr redirection platform-agnostic (#1437) (61305e7) - thanks @ClementValot!
Refactor isReferenced and hasStrictlyNsReferences to better express intent (fa23a33)
Fix up and reuse base graph objects in tests (ddc6693)
Rename file node key to importedBy, and then some.. (cabee8e)
Refactor hasStrictlyNsReferences (resolve #1427) (0768c8a)
Replace entry symbol in trace output (circle → enter) (a7bc12b)
Add comments to module graph types (9971d47)
Work + comment release script (e848615)

evilmartians/lefthook (lefthook)

`v2.1.0`

Compare Source

ci: skip Python publishing by [@mrexox][]
chore: fancy wording and indentation for hits by [@mrexox][]
feat: check core.hooksPath when lefthook install (#1292) by [@joevin-slq-docto][]
feat: allow installing non-git hooks (#1301) by [@mrexox][]

`v2.0.16`

Compare Source

chore: timeout cleanup (#1297) by @mrexox
feat: add timeout argument (#1263) by @franzramadhan
deps: January 2026 (#1285) by @mrexox
pkg: pack one binary per platform into python wheels (#1181) by @danfimov
fix: accept string in file_types (#1288) by @scop
docs: elaborate on when to refetch and failure mode (#1287) by @scop
fix: try reading direct file instead of all remotes (#1243) by @mrexox
perf: [breaking] skip ghost hook when hooks are already configured (#1255) by @WooWan
chore: upgrade to 2.8.0 (#1278) by @scop

`v2.0.15`

Compare Source

docs: clarify remote settings (#1260) by @mrexox
feat: skip scripts if args given with empty file template (#1277) by @mrexox

`v2.0.14`

Compare Source

fix: skip if any files template is empty (#1275) by @mrexox
feat: add jsonc support (#1274) by @mrexox
deps: switch from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#1261) by @scop
fix: don't install custom hooks to hooks dir (#1246) by @scop
deps: December 2025 (#1209) by @mrexox

prettier/prettier (prettier)

`v3.8.1`

Compare Source

`v3.8.0`

Compare Source

diff

🔗 Release note

rollup/rollup (rollup)

`v4.57.1`

Compare Source

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)
Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)
#6252: chore(deps): update dependency lru-cache to v11 (@renovate[bot])
#6253: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
#6254: Fully include dynamic imports in a try-catch (@lukastaegert)
#6255: chore(deps): lock file maintenance (@renovate[bot])

`v4.57.0`

Compare Source

2026-01-27

Features

Add import attributes to all plugin hooks that did not provide them yet (#5700)
Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#5700)

Pull Requests

#5700: extend more hooks to include import attributes and add warnings (@TrickyPi, @lukastaegert)
#6243: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)
#6244: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
#6245: chore(deps): lock file maintenance (@renovate[bot])
#6246: Refactor to reduce Rollup 5 upgrade diff (@lukastaegert)

`v4.56.0`

Compare Source

2026-01-22

Features

Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

#6230: Refine namespace handling (@lukastaegert)

`v4.55.3`

Compare Source

2026-01-21

Bug Fixes

Fix JSX semicolon insert position in variable declarations (#6241)

Pull Requests

#6241: Fix JSX semicolon insertion (@lukastaegert)

`v4.55.2`

Compare Source

2026-01-19

Bug Fixes

Sort manual chunks by execution order to reduce circular dependency issues (#6240)

Pull Requests

#6234: chore(deps): pin cross-platform-actions/action action to 492b0c8 (@renovate[bot])
#6235: chore(deps): update dependency globals to v17 (@renovate[bot], @lukastaegert)
#6236: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])
#6237: chore(deps): lock file maintenance (@renovate[bot])
#6239: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
#6240: Sort manual chunks by module execution order (@TrickyPi)

`v4.55.1`

Compare Source

2026-01-05

Bug Fixes

Fix artifact reference for OpenBSD (#6231)

Pull Requests

#6231: Fix OpenBSD artifacts and ensure OIDC is working (@lukastaegert)

syntax-tree/unist-util-visit (unist-util-visit)

`v5.1.0`

Compare Source

Types

8607d64 Refactor to use @imports
efbed8a Add declaration maps
639c0e5 Fix type support for readonly arrays
by @JounQin in #40

Full Changelog: syntax-tree/unist-util-visit@5.0.0...5.1.0

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

socket-security · 2026-01-19T00:55:15Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@vitest/coverage-v8@4.0.16 ⏵ 4.0.18	⁺¹		⁺²
@commitlint/cli@20.3.0 ⏵ 20.4.1			⁺³
vitest@4.0.16 ⏵ 4.0.18		⁺¹
@types/node@25.0.3 ⏵ 25.2.0	⁺¹	⁺¹	⁺¹
unist-util-visit@5.0.0 ⏵ 5.1.0	⁺¹
rollup@4.54.0 ⏵ 4.57.1
@microsoft/api-extractor@7.55.2 ⏵ 7.56.0	^-2	⁺¹	⁺⁵
es-toolkit@1.43.0 ⏵ 1.44.0	⁺¹	⁺¹
prettier@3.7.4 ⏵ 3.8.1		⁺¹
lefthook@2.0.13 ⏵ 2.1.0	⁺¹		^-1
@commitlint/config-conventional@20.3.0 ⏵ 20.4.1			⁺³
knip@5.79.0 ⏵ 5.83.0	⁺¹	⁺¹

View full report

renovate bot added the dependencies Concerns or updates related to external libraries or packages label Jan 19, 2026

renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 1c0b26a to d25acd5 Compare January 25, 2026 09:44

renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from ebd871d to 8c504b6 Compare January 30, 2026 01:47

renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from b7187f9 to 78c2526 Compare February 9, 2026 17:55

fix(deps): update all non-major dependencies

488141c

renovate bot force-pushed the renovate/all-minor-patch branch from 78c2526 to 488141c Compare February 10, 2026 13:47

yyxi merged commit ec0deed into trunk Feb 10, 2026
8 checks passed

yyxi deleted the renovate/all-minor-patch branch February 10, 2026 19:22

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies#100

fix(deps): update all non-major dependencies#100
yyxi merged 1 commit intotrunkfrom
renovate/all-minor-patch

renovate bot commented Jan 19, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Jan 19, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

20.3.1 (2026-01-08)

Features

20.3.1 (2026-01-08)

Minor changes

Patches

🚀 Experimental Features

🐞 Bug Fixes

🚀 Experimental Features

🐞 Bug Fixes

v5.83.0: Release 5.83.0

v5.82.1: Release 5.82.1

v5.82.0: Release 5.82.0

v5.81.0: Release 5.81.0

v5.80.2: Release 5.80.2

v5.80.1: Release 5.80.1

v5.80.0: Release 5.80.0

Bug Fixes

Pull Requests

Features

Pull Requests

Features

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Types

Configuration

Uh oh!

socket-security bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

renovate bot commented Jan 19, 2026 •

edited

Loading

`v5.83.0`: Release 5.83.0

`v5.82.1`: Release 5.82.1

`v5.82.0`: Release 5.82.0

`v5.81.0`: Release 5.81.0

`v5.80.2`: Release 5.80.2

`v5.80.1`: Release 5.80.1

`v5.80.0`: Release 5.80.0

socket-security bot commented Jan 19, 2026 •

edited

Loading