chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
edge-runtime (source)	1.1.0-beta.16 -> 1.1.0-beta.20
esbuild	^0.14.49 -> ^0.14.50
h3	^0.7.10 -> ^0.7.12
pnpm (source)	7.5.2 -> 7.6.0
rollup (source)	^2.77.0 -> ^2.77.1
unimport	^0.6.0 -> ^0.6.3
vitest	^0.18.1 -> ^0.19.1

---

Release Notes

vercel/edge-runtime

v1.1.0-beta.20

Compare Source

v1.1.0-beta.19

Compare Source

v1.1.0-beta.18

Compare Source

v1.1.0-beta.17

Compare Source

evanw/esbuild

v0.14.50

Compare Source

• Emit names in source maps (#​1296)

  The source map specification includes an optional names field that can associate an identifier with a mapping entry. This can be used to record the original name for an identifier, which is useful if the identifier was renamed to something else in the generated code. When esbuild was originally written, this field wasn't widely used, but now there are some debuggers that make use of it to provide better debugging of minified code. With this release, esbuild now includes a names field in the source maps that it generates. To save space, the original name is only recorded when it's different from the final name.

• Update parser for arrow functions with initial default type parameters in .tsx files (#​2410)

  TypeScript 4.6 introduced a change to the parsing of JSX syntax in .tsx files. Now a < token followed by an identifier and then a = token is parsed as an arrow function with a default type parameter instead of as a JSX element. This release updates esbuild's parser to match TypeScript's parser.

• Fix an accidental infinite loop with --define substitution (#​2407)

  This is a fix for a regression that was introduced in esbuild version 0.14.44 where certain --define substitutions could result in esbuild crashing with a stack overflow. The problem was an incorrect fix for #​2292. The fix merged the code paths for --define and --jsx-factory rewriting since the value substitution is now the same for both. However, doing this accidentally made --define substitution recursive since the JSX factory needs to be able to match against --define substitutions to integrate with the --inject feature. The fix is to only do one additional level of matching against define substitutions, and to only do this for JSX factories. Now these cases are able to build successfully without a stack overflow.

• Include the "public path" value in hashes (#​2403)

  The --public-path= configuration value affects the paths that esbuild uses to reference files from other files and is used in various situations such as cross-chunk imports in JS and references to asset files from CSS files. However, it wasn't included in the hash calculations used for file names due to an oversight. This meant that changing the public path setting incorrectly didn't result in the hashes in file names changing even though the contents of the files changed. This release fixes the issue by including a hash of the public path in all non-asset output files.

• Fix a cross-platform consistency bug (#​2383)

  Previously esbuild would minify 0xFFFF_FFFF_FFFF_FFFF as 0xffffffffffffffff (18 bytes) on arm64 chips and as 18446744073709552e3 (19 bytes) on x86_64 chips. The reason was that the number was converted to a 64-bit unsigned integer internally for printing as hexadecimal, the 64-bit floating-point number 0xFFFF_FFFF_FFFF_FFFF is actually 0x1_0000_0000_0000_0180 (i.e. it's rounded up, not down), and converting float64 to uint64 is implementation-dependent in Go when the input is out of bounds. This was fixed by changing the upper limit for which esbuild uses hexadecimal numbers during minification to 0xFFFF_FFFF_FFFF_F800, which is the next representable 64-bit floating-point number below 0x1_0000_0000_0000_0180, and which fits in a uint64. As a result, esbuild will now consistently never minify 0xFFFF_FFFF_FFFF_FFFF as 0xffffffffffffffff anymore, which means the output should now be consistent across platforms.

• Fix a hang with the synchronous API when the package is corrupted (#​2396)

  An error message is already thrown when the esbuild package is corrupted and esbuild can't be run. However, if you are using a synchronous call in the JavaScript API in worker mode, esbuild will use a child worker to initialize esbuild once so that the overhead of initializing esbuild can be amortized across multiple synchronous API calls. However, errors thrown during initialization weren't being propagated correctly which resulted in a hang while the main thread waited forever for the child worker to finish initializing. With this release, initialization errors are now propagated correctly so calling a synchronous API call when the package is corrupted should now result in an error instead of a hang.

• Fix tsconfig.json files that collide with directory names (#​2411)

  TypeScript lets you write tsconfig.json files with extends clauses that refer to another config file using an implicit .json file extension. However, if the config file without the .json extension existed as a directory name, esbuild and TypeScript had different behavior. TypeScript ignores the directory and continues looking for the config file by adding the .json extension while esbuild previously terminated the search and then failed to load the config file (because it's a directory). With this release, esbuild will now ignore exact matches when resolving extends fields in tsconfig.json files if the exact match results in a directory.

• Add platform to the transform API (#​2362)

  The platform option is mainly relevant for bundling because it mostly affects path resolution (e.g. activating the "browser" field in package.json files), so it was previously only available for the build API. With this release, it has additionally be made available for the transform API for a single reason: you can now set --platform=node when transforming a string so that esbuild will add export annotations for node, which is only relevant when --format=cjs is also present.

  This has to do with an implementation detail of node that parses the AST of CommonJS files to discover named exports when importing CommonJS from ESM. However, this new addition to esbuild's API is of questionable usefulness. Node's loader API (the main use case for using esbuild's transform API like this) actually bypasses the content returned from the loader and parses the AST that's present on the file system, so you won't actually be able to use esbuild's API for this. See the linked issue for more information.

unjs/h3

v0.7.12

Compare Source

v0.7.11

Compare Source

pnpm/pnpm

v7.6.0

Compare Source

Minor Changes

• A new setting supported: prefer-symlinked-executables. When true, pnpm will create symlinks to executables in
  node_modules/.bin instead of command shims (but on POSIX systems only).

  This setting is true by default when node-linker is set to hoisted.

  Related issue: #​4782.

• When lockfile-include-tarball-url is set to true, every entry in pnpm-lock.yaml will contain the full URL to the package's tarball #​5054.

Patch Changes

• pnpm deploy should include all dependencies by default #​5035.

• Don't print warnings about file verifications. Just print info messages instead.

• pnpm publish --help should print the --recursive and --filter options #​5019.

• It should be possible to run exec/run/dlx with the --use-node-version option.

• pnpm deploy should not modify the lockfile #​5071

• pnpm deploy should not fail in CI #​5071

• When auto-install-peers is set to true, automatically install direct peer dependencies #​5028.

  So if your project the next manifest:

  {
    "dependencies": {
      "lodash": "^4.17.21"
    },
    "peerDependencies": {
      "react": "^18.2.0"
    }
  }

  pnpm will install both lodash and react as a regular dependencies.

Our Gold Sponsors

##### Our Silver Sponsors ##### What's Changed * pnpm rebuild accepts --store-dir by @​chengcyber in https://github.com/pnpm/pnpm/pull/5036 * fix(deploy): include all deps by default by @​zkochan in https://github.com/pnpm/pnpm/pull/5040 * chore(deps): upgrade nock to v13 by @​mcmxcdev in https://github.com/pnpm/pnpm/pull/5043 * fix: log more info on HTTP error by @​zkochan in https://github.com/pnpm/pnpm/pull/4917 * fix: document the -r option by @​zkochan in https://github.com/pnpm/pnpm/pull/5044 * chore(deps): upgrade sinon to v14 by @​mcmxcdev in https://github.com/pnpm/pnpm/pull/5045 * fix(audit): add authentication to pnpm-audit by @​sled in https://github.com/pnpm/pnpm/pull/5053 * feat: prefer-symlinked-executables by @​zkochan in https://github.com/pnpm/pnpm/pull/5048 * chore: update pnpm-workspace.yaml by @​ayu14214 in https://github.com/pnpm/pnpm/pull/5060 * feat: add `lockfile-include-tarball-url` option by @​MBelniak in https://github.com/pnpm/pnpm/pull/5054 * fix: auto install root peer deps when auto-install-peers=true by @​zkochan in https://github.com/pnpm/pnpm/pull/5067 * fix(deploy): don't modify the lockfile and fail in CI by @​zkochan in https://github.com/pnpm/pnpm/pull/5074 ##### New Contributors * @​mcmxcdev made their first contribution in https://github.com/pnpm/pnpm/pull/5043 * @​sled made their first contribution in https://github.com/pnpm/pnpm/pull/5053 * @​ayu14214 made their first contribution in https://github.com/pnpm/pnpm/pull/5060 * @​MBelniak made their first contribution in https://github.com/pnpm/pnpm/pull/5054

Full Changelog: pnpm/pnpm@v7.5.2...v7.6.0

rollup/rollup

v2.77.1

Compare Source

2022-07-26

Bug Fixes

• Ensure IIFE output generates a global variable when generating ES5 (#​4588)

Pull Requests

• #​4577: broken link removed (@​Jawad-H)
• #​4580: Update dependencies (@​lukastaegert)
• #​4584: Documentation clarity and syntax improvements (@​berniegp)
• #​4588: Use var for IIFE (@​lukastaegert)

unjs/unimport

v0.6.3

Compare Source

v0.6.2

Compare Source

v0.6.1

Compare Source

vitest-dev/vitest

v0.19.1

Compare Source

   🚀 Features

• Add mock snapshot serializer  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/1717

    View changes on GitHub

v0.19.0

Compare Source

   🚨 Breaking Changes

• Add CSS styles to DOM  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/1690

   🚀 Features

• Add Playwright example  -  by @​jfgreffier in https://github.com/vitest-dev/vitest/issues/1670
• Add location to json reporter  -  by @​shiradofu in https://github.com/vitest-dev/vitest/issues/1656
• Add alias option  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/1634
• Init @​vitest/browser package  -  by @​antfu, @​userquin and @​Aslemammad in https://github.com/vitest-dev/vitest/issues/1302
• Make close timeout configurable  -  by @​krishnan-chandra in https://github.com/vitest-dev/vitest/issues/1697

   🐞 Bug Fixes

• Exclude dist directory from default coverage  -  by @​cexbrayat in https://github.com/vitest-dev/vitest/issues/1664
• Exclude cypress config from default coverage  -  by @​cexbrayat in https://github.com/vitest-dev/vitest/issues/1663
• Works with yarn pnp  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/1667
• Code frame tabs indent (fix: #​1679)  -  by @​skarab42 in https://github.com/vitest-dev/vitest/issues/1680
• ToHaveProperty with expect.any (fix: #​1675)  -  by @​skarab42 in https://github.com/vitest-dev/vitest/issues/1682

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.