chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #4191 · nitrojs/nitro

renovate · 2026-04-08T02:32:27Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	minor	`v6.2.0` → `v6.3.0`
deno (source)	uses-with	patch	`2.7.4` → `2.7.12`
motion-v	devDependencies	minor	`^2.0.0` → `^2.2.0`
pnpm (source)	packageManager	minor	`10.32.0` → `10.33.0`
shaders	devDependencies	minor	`^2.3.75` → `^2.5.92`
undocs	devDependencies	patch	`0.4.17-20260310-213525-c3c295a` → `0.4.17-20260310-213704-c3c295a`
vite7 (source)	devDependencies	patch	`^7.3.1` → `^7.3.2`
zephyr-agent (source)	peerDependencies	minor	`^0.1.15` → `^0.2.0`

Release Notes

actions/setup-node (actions/setup-node)

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

denoland/deno (deno)

`v2.7.12`

Compare Source

feat(ext/node): add fs.SyncWriteStream (#33226)
feat(ext/node): add llhttp-based HTTPParser with native cppgc binding (#33202)
feat(ext/node): add native TLSWrap cppgc object (Rust core) (#33183)
feat: native uv_pipe_t implementation with NativePipe and FdTable (#33165)
fix(core): fix uv_pipe_open handle lifecycle to match libuv (#33225)
fix(core): free UvLoopInner on uv_loop_t drop to prevent worker memory leak
(#33200)
fix(core): handle WouldBlock in op_print for non-blocking stdio (#33221)
fix(core): use c_char instead of i8 in uv_buf_t base cast (#33179)
fix(ext/napi): use per-isolate Private key for napi_wrap/napi_unwrap (#33204)
fix(ext/node): add dns.getDefaultResultOrder() API (#33197)
fix(ext/node): create net.Socket from file descriptors (#33150)
fix(ext/node): implement TCP.open(fd) (#33155)
fix(ext/node): implement timeout, killSignal, and pid for child_process
spawnSync (#32810)
fix(ext/node): implement uv_ref for native TCP handles (#33174)
fix(ext/node): remove dead legacy TCP server accept path (#33172)
fix(ext/node): return real OS file descriptors from node:fs APIs (#33039)
fix(ext/node): rewrite Pipe.open(fd) to use raw fd ops (#33136)
fix(ext/node): support numeric FDs in child_process stdio array (#33140)
fix(ext/node): throw on cipher update with input >= 2^31-1 bytes (#33201)
fix(ext/webgpu): accept ArrayBuffer in GPUQueue.writeBuffer() as data
source (#33152)
fix(io): remove global stdio statics, handle non-blocking stdin (#33219)
fix(node): validate resolved main path stays within package directory (#33170)
fix(otel): add timeout to OTEL HTTP exporter to prevent hangs (#33159)
fix(permissions): check deny rules against resolved IPs to prevent numeric
hostname bypass (#33203)
fix(permissions): normalize IPv4-mapped IPv6 addresses in net permission
checks (#33223)
fix(repl): surface CDP protocol errors and fix race in wait_for_response
(#33190)
fix(runtime): cache canonicalized watch paths, fix spurious events (#33123)
fix(schema): fix the publish: false of deno.json schema (#33196)
fix: linked packages with peer deps failing to cache from lockfile (#33143)
fix: update release template workflow URLs to .generated.yml (#33116)
perf(ext/node): use aws-lc-sys EVP API for chacha20-poly1305 (#33110)

`v2.7.11`

Compare Source

feat: add alpha and beta release channel support (#33098)
fix(ext/node): fire fs.watch events for immediate writes (#32935) (#32989)
fix(watch): reduce graceful shutdown timeout from 5s to 500ms (#33099)

`v2.7.10`

Compare Source

feat: add include and exclude fields to compile config (#33024)
fix(ext/http): gracefully handle consumed external in OTel ops (#33027)
fix(ext/node): process.argv[0] is equivalent to execPath (#28915)
fix(ext/node): add chacha20-poly1305 cipher support (#33084)
fix(ext/node): drain pending messages before emitting worker exit event
(#32623)
fix(ext/node): escape shell metacharacters in child_process args on Windows
(#33071)
fix(ext/node): fix BadResource error in FileHandle.readLines() (#32685)
fix(ext/node): improve GCM cipher compat with Node.js (#33079)
fix(ext/node): improve sign/verify crypto compat with Node.js (#33083)
fix(ext/node): return pid from spawnSync (#33081)
fix(ext/web): fix infinite loop in WebTransport datagram overflow handling
(#33075)
fix(install): all package.json aliases should be added to node_modules
(#33068)
fix(lsp): don't double-encode query/fragment in notebook cell URIs (#33070)
fix(lsp): suggest import map aliases in auto-imports for local directories
(#33048)
fix(npm): resolve linked packages not published to npm registry (#33021)
fix(outdated): use dist-tags.latest for Latest column, matching npm/pnpm/bun
(#32939)
fix(resolver): resolve npm packages that shadow Node built-in names in BYONM
mode (#32865)
fix(serde_v8): use actual bytes written in to_utf8_slow (#33074)
fix: use case-insensitive path matching for permissions on Windows (#33073)

`v2.7.9`

Compare Source

fix(cli): show clean error instead of panic for invalid
--unsafely-ignore-certificate-errors value (#32868)
fix(compile): strip duplicate exe path from argv when standalone binary
relaunches (#33016)
fix(compile): use execPath for process.argv[1] in standalone binaries (#32990)
fix(ext/http): use clone_external in op_http_metric_handle_otel_error (#33005)
fix(ext/node): util.stripVTControlCharacters compatibility (#32942)
fix(ext/node): add Symbol.dispose and Symbol.asyncDispose to fs.Dir (#33000)
fix(ext/node): rewrite Windows TTY reading to match libuv (console mode,
encoding, raw + line mode) (#32999)
fix(ext/node): use constant-time comparison for secret key equality (#32994)
fix(publish): vite import.meta.hot not type checking (#32127)
perf(ops): replace per-op generated slow metrics wrappers with shared dispatch
(#32889)

`v2.7.8`

Compare Source

feat(core): implement NodeRuntime CDP domain and fix --inspect-brk blocking
(#32714)
feat(ext/crypto): implement P-521 sign, verify, and ECDH derive (#32602)
feat(ext/napi): add node_api_create_object_with_named_properties (#32906)
feat(ext/telemetry): add console exporter for OpenTelemetry (#32717)
feat(ext/telemetry): copy relevant span attributes to HTTP metrics (#32720)
feat: use lockfile from jsr package for global install (#32490)
fix(audit): respect package.json overrides in vulnerability checks (#32878)
fix(cli): fix arrow keys in interactive picker on Windows (#32978)
fix(cli): parse --frozen flag for deno update and deno outdated (#32975)
fix(compile): skip Node-to-Deno arg translation in standalone binaries
(#32980)
fix(ext/console): handle throwing Symbol.toStringTag getter gracefully
(#32917)
fix(ext/napi): pass valid env to tsfn call_js_cb after close race (#32957)
fix(ext/node): fs.cp across allowed dirs with ignored read permissions
(#32927)
fix(ext/node): child_process improvements (internalMessage, argv0, DEP0190)
(#32885)
fix(ext/node): close libuv handle on HandleWrap.close() for new-style handles
(#32958)
fix(ext/node): defer uv_write callbacks to prevent re-entrancy panic (#32919)
fix(ext/node): do not throw error for readline.createInterface outside TTY
(#32874)
fix(ext/node): don't fire upgrade event for h2c requests (#32866)
fix(ext/node): drain all ready connections in poll_tcp_handle to prevent
accept starvation (#32943)
fix(ext/node): emit request "close" before socket "free" in keep-alive path
(#32811)
fix(ext/node): enable node compat test for v8.getHeapStatistics (#32833)
fix(ext/node): enable node:fs compat tests + lchmod fix (#32892)
fix(ext/node): fix Buffer.concat truncating buffers larger than 4GB (#32913)
fix(ext/node): fix IPC stdio handling in child_process (#32920)
fix(ext/node): fix node:domain across async boundaries (#32897)
fix(ext/node): freeze os.constants.signals to match Node.js (#32836)
fix(ext/node): implement process.threadCpuUsage() (#32829)
fix(ext/node): improve process.hrtime argument validation (#32837)
fix(ext/node): improve readline and EventEmitter compat (#32826)
fix(ext/node): pass uid/gid to spawn and implement process.getgroups (#32772)
fix(ext/node): preserve TLS upgrade state on reconnect (#32838)
fix(ext/node): return all own properties from VM context property enumerator
(#32911)
fix(ext/node): set fd property on TTY ReadStream and WriteStream (#32880)
fix(ext/node): sqlite prepare() options, defensive default, iterator
invalidation (#32756)
fix(ext/node): support http2 createConnection sockets (#32733)
fix(ext/node): support numeric FDs in child_process stdio array (#32959)
fix(ext/node): update process.versions.napi to 9 (#32870)
fix(ext/web): AbortSignal.any() memory leak with long-lived signals (#32916)
fix(ext/web): handle null options in removeEventListener (#32605)
fix(fmt): delegate component expression formatting to markup_fmt (#29763)
fix(fmt): update markup_fmt to 0.27.0 and malva to 0.15.2 (#32949)
fix(inspector): send executionContextDestroyed on process.exit() (#32934)
fix(lockfile): truncate frozen lockfile error diff to 50 lines (#32976)
fix(napi): add test coverage and fix escape_handle/throw bugs (#32960)
fix(node/http): stop leaking TCP wrappers on HTTPS upgrade with
createConnection TLSSocket (#32961)
fix(npm): approve-scripts detects packages when lockfile is disabled
(#32842)
fix(npm): create shims for all bin entries during global npm install (#32607)
fix(npm): skip file: and link: dependencies in npm packages (#32876)
fix(npm): use box-drawing style for deprecated package warnings (#32979)
fix(resolver): fall through to .deno/ when BYONM node_modules version
mismatches (#32981)
fix(resolver): prefer exact version match in BYONM npm resolution (#32977)
fix: handle inner quotes in double-quoted env values in .env file (#32930)
fix: include Temporal types in deno types output (#32952)
fix: make flamegraph SVG fill full browser viewport (#32727)
fix: rewrite approve_scripts_no_lock as PTY tests, skip lockfile test on
Windows (#32853)
fix: skip flaky test-process-threadCpuUsage-worker-threads on Windows (#32886)
perf(ext/web): use simdutf for base64 encode/decode (#32743)
perf: upgrade to jsonc-parser 0.32 (#32864)

`v2.7.7`

Compare Source

fix(core): implement select fallback on macOS (#32812)
fix(ext/node): add disabled process function stubs in worker threads (#32809)
fix(ext/node): add key/IV length validation for aes-128-cbc and ecb cipher
modes (#32824)
fix(ext/node): improve node:dns module compatibility (#32704)
fix(ext/node): improve process.title and support --title flag (#32201)
fix(ext/node): set kLastWriteWasAsync in JS write path to prevent double
callback (#32814)
fix(ext/node): skip normalization in path.win32.join for reserved device names
(#32808)
fix(ext/node): support interface option for IPv6 multicast membership (#32754)
fix(ext/node): use constant-time comparison for GCM auth tag verification
(#32817)
fix(ext/node): validate process.exitCode and fix process constructor name
(#32806)
fix(watch): support graceful shutdown via SIGTERM dispatch (#32564)
perf(ext/webidl): optimize dictionary converters (#32729)

`v2.7.6`

Compare Source

feat(core): add cloneable resource registry for structured clone (#32672)
feat(core): update v8 to 146.8.0 with foreground task ownership (#32771)
feat(eval): auto-detect CJS vs ESM in deno eval (#32472)
feat(ext/node): add MIMEType, convertProcessSignalToExitCode, Symbol.dispose
for ChildProcess (#32793)
feat(ext/signals): support additional signals on Windows (#32689)
feat(ext/telemetry): support array values in OTEL attributes (#32748)
feat: add --cpu-prof-flamegraph to generate interactive SVG flamegraphs
(#32572)
fix(cli): update typescript-go to 2026-03-09 (#32656)
fix(core): don't panic in to_v8_error when JS error builder callback fails
(#32749)
fix(core): prevent panic when multiple lazy-loaded ESM modules are loaded
during TLA (#32769)
fix(coverage): don't mark lines uncovered when zero-count range only partially
overlaps (#32601)
fix(ext/console): make timer and counter state per-instance to fix OTEL
console wrapping (#32719)
fix(ext/crypto): support structuredClone for CryptoKey (#32674)
fix(ext/fetch): retry on stale pooled HTTP/1.1 connections (#32566)
fix(ext/ffi): retain backing store references in nonblocking calls (#32775)
fix(ext/napi): call wrap/ref finalizers at shutdown (#32592)
fix(ext/napi): keep event loop alive while uv_async_t handle is active
(#32702)
fix(ext/napi): prevent spurious TypeError from napi_coerce_to_object on
null/undefined (#32695)
fix(ext/node): accept all TypedArrays in spawnSync input option (#32712)
fix(ext/node): allow IPv6 multicast addresses in UDP
addMembership/dropMembership (#32739)
fix(ext/node): allow passing FileHandle as fd argument for WriteStream
and ReadStream (#32770)
fix(ext/node): emit "connect" event on http.Server for CONNECT requests
(#32599)
fix(ext/node): enable 8 already-passing child_process compat tests (#32710)
fix(ext/node): fix 8 Node.js compat test failures (#32755)
fix(ext/node): fix AbortController signal handling in child_process s…
(#32713)
fix(ext/node): fix Buffer.concat, expose internal/buffer, implement
markAsUntransferable (#32760)
fix(ext/node): fix IPC message prototype for child_process JSON (#32731)
fix(ext/node): fix TLA stall with native TTY handles and make stdio
indestructible (#32792)
fix(ext/node): fix TLS JSStreamSocket resource leak causing process hang
(#32325)
fix(ext/node): fix multiple deepEqual comparison issues (#32763)
fix(ext/node): fix perm checks in TCPWrap (#32721)
fix(ext/node): fix send() validation in child_process IPC (#32779)
fix(ext/node): handle cargo features during publish (#32636)
fix(ext/node): handle signal 0 in child_process.kill() (#32294)
fix(ext/node): implement safe, add, rem options for crypto.generatePrime
(#32618)
fix(ext/node): improve Node.js crypto compatibility (#32690)
fix(ext/node): improve X509Certificate Node.js compatibility (#32671)
fix(ext/node): improve crypto.generateKeyPair validation (#32620)
fix(ext/node): improve worker_threads path validation and error handling
(#32791)
fix(ext/node): include prototype env vars in child_process spawn (#32699)
fix(ext/node): remove extra properties from node:fs exports (#32670)
fix(ext/node): require --allow-net for udp.send (#32774)
fix(ext/node): rewrite node:tty on top of uv compat (#32777)
fix(ext/node): set up stdio streams on failed child_process spawn (#32698)
fix(ext/node): signal listeners added via process.once can now be removed
(#32606)
fix(ext/node): support encrypted PEM export and deprecated hash option in
crypto keygen (#32703)
fix(ext/node): use non-blocking write in fs.writev (#32673)
fix(ext/node): validate handle type in child_process send() (#32711)
fix(ext/node): wrap non-Error unhandled rejections in ERR_UNHANDLED_REJECTION
(#32535)
fix(ext/otel): don't mark server spans as error for 4xx responses (#32722)
fix(ext/signals): prevent panic on FreeBSD (#32518)
fix(ext/telemetry): add log.iostream attribute to console logs (#32723)
fix(ext/telemetry): add exception.* attributes to OTEL log records (#32726)
fix(ext/web): support %j JSON format specifier in console.log (#32684)
fix(ext/web): upgrade QuotaExceededError to DOMException derived interface
(#32244)
fix(lsp): align organize imports output with tsgo (#32677)
fix(npm): handle read-only bin files when setting up node_modules/.bin
(#32632)
fix(npm): resolve bundled npm deps in packages properly when not using a
node_modules directory (#32679)
fix(npm): retain authorization header on http->https redirect (#29878)
fix(npm): support npmrc certfile + keyfile (#32655)
fix(process): allow unref'd child processes to outlive parent (#32563)
fix(repl): fix panic when pressing Tab at beginning of line (#32750)
fix(runtime): apply source maps to CPU profiler output (#32634)
fix(runtime): display proper error when throwing in event handlers (#32663)
fix(runtime): reduce memory retention after web worker termination (#32617)
fix(runtime): use XML-valid entity in flamegraph SVG (#32716)
fix(test): allow test functions to override reported location (#32732)
fix(tsc): move more node resolution errors to typescript diagnostics (#32697)
fix(watch): dispatch unload and process exit events on restart (#32664)
fix(web): support structuredClone for DOMException (#32675)
fix: restore --env-file parent directory traversal and do not error in
deno compile for not found env file (#32686)
fix: wake event loop when V8 posts foreground tasks from background threads
(#32450)
perf(core): optimize V8-to-Rust string conversion with ValueView (#32688)
perf(ext/napi): use threadpool for async work instead of spawning threads
(#32776)
perf(ext/node): move fs.cpSync implementation to rust (#32687)
perf(ext/web): add write buffering for FsFile.writable streams (#32676)
perf(ext/web): optimize TextEncoder/TextDecoder hot paths (#32735)
perf(ext/web): optimize URLPattern ops to reduce serde overhead and GC
pressure (#32766)
perf(ext/web): optimize node:buffer base64 encode/decode (#32647)
perf(ext/web): reduce promise allocations in streams (#32652)
perf(fmt): speed up file diffing (#30644)
perf(install): avoid unnecessary package info fetches when running lifecycle
scripts (#32653)
perf(linux): trim glibc malloc arena after module loading (#32662)
perf(lsp): replace dissimilar with imara-diff (#32700)
perf(npm): run lifecycle scripts in parallel (#32666)

`v2.7.5`

Compare Source

feat(coverage): add function coverage to summary and HTML reports (#32507)
feat(doc): support npm packages in deno doc (#32435)
feat(ext/node): add node_api_create_object_with_properties API (#31443)
feat(ext/node): implement KeyObject.toCryptoKey() and
KeyObject.from(CryptoKey) (#32523)
feat(otel): allow feeding permission audit data into OTEL (#32501)
feat: --cpu-prof flags for CPU profiles (#31909)
fix(console): prevent multi-line object values in console.table (#32604)
fix(core): switch to V8 Explicit microtask policy for correct nextTick
ordering (#32466)
fix(ext/http): allow rejecting HTTP upgrades with non-101 status codes
(#32615)
fix(ext/napi): run async work execute callback on a worker thread (#32560)
fix(ext/node): add node_api_create_property_key_(latin1/utf8) (#32559)
fix(ext/node): add missing http2 header constants (#32611)
fix(ext/node): emit DEP0198 warning for SHAKE digests without outputLength
(#32521)
fix(ext/node): emit correct error codes for unsupported PQC key types (#32533)
fix(ext/node): fix multiple DiffieHellman crypto bugs (#32531)
fix(ext/node): fix multiple node:dgram compatibility issues (#32520)
fix(ext/node): handle generateKeyPair 2-arg call and enable PQC tests (#32619)
fix(ext/node): implement ECDH.convertKey and fix related ECDH bugs (#32532)
fix(ext/node): implement node:v8 heap APIs (#32483)
fix(ext/node): implement proper resourceLimits for node:worker_threads
(#32430)
fix(ext/node): improve getCipherInfo and allow repeated Hmac digest() (#32522)
fix(ext/node): improve node:dns compat (#32536)
fix(ext/node): initialize debuglog testEnabled with safe default (#32598)
fix(ext/node): make TTY stdout/stderr indestructible (#32530)
fix(ext/node): make tty ReadStream/WriteStream callable without new (#32537)
fix(ext/node): multiple readline improvements (#32538)
fix(ext/node): napi_set_instance_data on exit (#32509)
fix(ext/node): rewrite http2 implementation (#32418)
fix(ext/node): run worker_threads eval code in sloppy mode (#32428)
fix(ext/node): support des-ede3-cbc cipher and allow Cipheriv/Decipheriv
without new (#32519)
fix(ext/node): use max salt length as default for RSA-PSS signing (#32534)
fix(ext/otel): remove panicking unwraps in telemetry code (#32557)
fix(ext/websocket): handle non-ASCII bytes in WebSocket response headers
(#32594)
fix(lsp): properly sync root files with tsgo (#32455)
fix(lsp): tsgo scope attribution for asset files (#32608)
fix(napi): remove unimplemented Node-API symbols from napi_sys (#32593)
fix(npm): memoize peer cache hit checks to prevent combinatorial explosion
(#32609)
fix(npm): support npmrc email authorization (#32616)
fix: ensure binaries distributed in @deno/... npm packages are exectuable
(#32581)
fix: flush CPU profile and coverage data on Deno.exit() (#32591)
fix: normalize capture to boolean in removeEventListener options (#32508)
fix: prevent panic on dynamic import with non-string error name (#32498)
fix: set process.features.openssl_is_boringssl to true (#32512)
fix: support value substitution when loading environment variable files
(#32495)
perf(ext/node): move most fs.cp logic to rust (#32580)
perf(lsp): drop jsx import source cache (#32506)
perf(npm): improve decompression speed more (#32547)
perf(npm): less syscalls in tarball extraction (#32541)
perf(npm): remove folder canonicalization in tarball extract (#32540)
perf(npm): use libdeflater and preallocate buffer (#32511)

motiondivision/motion-vue (motion-v)

`v2.2.0`

Compare Source

Added

useTransform: accelerate propagation on value changes

`v2.1.0`

Compare Source

Added

useScroll: ScrollOffset presets, scroll timeline acceleration, rest pass-through, MaybeRefOrGetter options typing.

Changed

useSpring: rewrite with motion-dom attachFollow.

`v2.0.1`

Compare Source

What's Changed

Bug Fixes

Pass presenceContext to visualElement so exit variants receive custom value (#246)

Full Changelog: motiondivision/motion-vue@v2.0.0...v2.0.1

pnpm/pnpm (pnpm)

`v10.33.0`

Compare Source

`v10.32.1`: pnpm 10.32.1

Compare Source

Patch Changes

Fix a regression where pnpm-workspace.yaml without a packages field caused all directories to be treated as workspace projects. This broke projects that use pnpm-workspace.yaml only for settings (e.g. minimumReleaseAge) without defining workspace packages #10909.

Platinum Sponsors

Gold Sponsors

unjs/undocs (undocs)

`v0.4.17-20260310-213704-c3c295a`

Compare Source

vitejs/vite (vite7)

`v7.3.2`

Compare Source

Please refer to CHANGELOG.md for details.

ZephyrCloudIO/zephyr-packages (zephyr-agent)

`v0.2.0`

Compare Source

What's Changed

feat(zephyr-agent): conditionally wait for stage 1 deployments by @arthurfiorette in #402
fix(http): surface actual errors and improve network error handling by @arthurfiorette in #407
fix: support symlinked recursive reads and unify walkers by @arthurfiorette in #406
chore(deps): remediate security vulnerabilities by @arthurfiorette in #408
chore(deps): remediate security vulnerabilities by @Nsttt in #410
feat(vite): add registry metadata by @Nsttt in #411
feat(vite-plugin-zephyr): decouple module federation integration by @Nsttt in #409
chore: bump patch version to 0.1.17 by @Nsttt in #413
chore: bump minor version to 0.2.0 by @Nsttt in #414
fix: patch pnpm audit advisories by @Nsttt in #417

🔴 Breaking Changes

vite-plugin-zephyr: Module Federation is now decoupled from withZephyr().
If you use Module Federation with Vite, install @module-federation/vite explicitly.
Optionally: If you previously used plugins: [withZephyr({ mfConfig })], migrate to plugins: [federation(mfConfig), withZephyr()].

Full Changelog: ZephyrCloudIO/zephyr-packages@v0.1.16...v0.2.0

`v0.1.16`

Compare Source

What's Changed

fix(with-zephyr): handle trailing commas in plugin arrays by @Nsttt in #400
feat: add Nuxt module + SSR example by @Nsttt in #348
feat(with-zephyr): scaffold Slidev support by @Nsttt in #403
fix(ci): pin audited transitive dependencies by @Nsttt in #404
chore: bump patch version to 0.1.16 by @Nsttt in #405

Full Changelog: ZephyrCloudIO/zephyr-packages@v0.1.15...v0.1.16

Configuration

📅 Schedule: (UTC)

Branch creation
- "after 2am and before 3am"
Automerge
- "after 1am and before 2am"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2026-04-08T02:32:33Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
nitro.build	Ready	Preview, Comment	Apr 10, 2026 9:46am

pkg-pr-new · 2026-04-08T13:56:18Z

Open in StackBlitz

npm i https://pkg.pr.new/nitro@4191

commit: e5e7be2

renovate bot requested a review from pi0 as a code owner April 8, 2026 02:32

vercel bot deployed to Preview April 8, 2026 02:34 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from fa28369 to bdc785a Compare April 8, 2026 13:51

vercel bot deployed to Preview April 8, 2026 13:53 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from bdc785a to 015236c Compare April 8, 2026 18:42

vercel bot deployed to Preview April 8, 2026 18:44 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from 015236c to 354feb1 Compare April 8, 2026 18:58

vercel bot deployed to Preview April 8, 2026 19:00 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from 354feb1 to 398904b Compare April 9, 2026 02:11

vercel bot deployed to Preview April 9, 2026 02:12 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from 398904b to 4349ffe Compare April 9, 2026 05:58

vercel bot deployed to Preview April 9, 2026 06:00 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from 4349ffe to e731aca Compare April 9, 2026 09:34

vercel bot deployed to Preview April 9, 2026 09:35 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from e731aca to 376ab1f Compare April 9, 2026 14:54

vercel bot deployed to Preview April 9, 2026 14:59 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from 376ab1f to 5dc16e9 Compare April 9, 2026 18:00

vercel bot deployed to Preview April 9, 2026 18:01 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from 5dc16e9 to 12d1694 Compare April 9, 2026 22:17

vercel bot deployed to Preview April 9, 2026 22:18 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from 12d1694 to cf27a65 Compare April 10, 2026 01:28

vercel bot deployed to Preview April 10, 2026 01:30 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from cf27a65 to e5e7be2 Compare April 10, 2026 04:40

vercel bot deployed to Preview April 10, 2026 04:41 View deployment

chore(deps): update all non-major dependencies

1d43549

renovate bot force-pushed the renovate/all-minor-patch branch from e5e7be2 to 1d43549 Compare April 10, 2026 09:45

vercel bot deployed to Preview April 10, 2026 09:46 View deployment

pi0 merged commit 896186a into main Apr 10, 2026
10 checks passed

pi0 deleted the renovate/all-minor-patch branch April 10, 2026 09:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies#4191

chore(deps): update all non-major dependencies#4191
pi0 merged 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Apr 8, 2026 •

edited

Loading

Uh oh!

vercel bot commented Apr 8, 2026 •

edited

Loading

Uh oh!

pkg-pr-new bot commented Apr 8, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate bot commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

Added

Added

Changed

What's Changed

Bug Fixes

v10.32.1: pnpm 10.32.1

Patch Changes

Platinum Sponsors

Gold Sponsors

What's Changed

🔴 Breaking Changes

What's Changed

Configuration

Uh oh!

vercel bot commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new bot commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Apr 8, 2026 •

edited

Loading

`v10.32.1`: pnpm 10.32.1

vercel bot commented Apr 8, 2026 •

edited

Loading

pkg-pr-new bot commented Apr 8, 2026 •

edited

Loading