fix(deps): update all non-major dependencies #80

renovate · 2025-08-11T00:23:43Z

This PR contains the following updates:

Package	Change	Age	Confidence
@sxzz/eslint-config	`^7.1.0` -> `^7.1.2`
@sxzz/test-utils	`^0.5.7` -> `^0.5.9`
@types/node (source)	`^22.16.5` -> `^22.17.1`
@types/picomatch (source)	`^4.0.1` -> `^4.0.2`
ast-kit	`^2.1.1` -> `^2.1.2`
bumpp	`^10.2.0` -> `^10.2.2`
eslint (source)	`^9.32.0` -> `^9.33.0`
pnpm (source)	`10.13.1` -> `10.14.0`
rollup (source)	`^4.46.1` -> `^4.46.2`
tsdown	`^0.13.0` -> `^0.14.0`
typescript (source)	`^5.8.3` -> `^5.9.2`
unplugin-oxc	`^0.4.8` -> `^0.4.9`
vite (source)	`^7.0.6` -> `^7.1.1`

Release Notes

sxzz/eslint-config (@sxzz/eslint-config)

`v7.1.2`

Compare Source

🚀 Features

Sort erasableSyntaxOnly - by @sxzz (59bb1)

View changes on GitHub

`v7.1.1`

Compare Source

🐞 Bug Fixes

Disable unicorn/require-module-specifiers - by @sxzz (1e14f)

View changes on GitHub

sxzz/test-utils (@sxzz/test-utils)

`v0.5.9`

Compare Source

🐞 Bug Fixes

Lazy import ts-macro - by @sxzz (a8bb4)

View changes on GitHub

`v0.5.8`

Compare Source

🚀 Features

CreateTsMacroProgram - by @sxzz (9f5d6)

View changes on GitHub

sxzz/ast-kit (ast-kit)

`v2.1.2`

Compare Source

🐞 Bug Fixes

deps: Update all non-major dependencies - in https://github.com/sxzz/ast-kit/issues/115 (c3ebc)

View changes on GitHub

antfu-collective/bumpp (bumpp)

`v10.2.2`

Compare Source

🐞 Bug Fixes

Improve workspace handling in normalizeOptions #90 - by @Vanisper in https://github.com/antfu-collective/bumpp/issues/91 and https://github.com/antfu-collective/bumpp/issues/90 (5dc8c)

View changes on GitHub

`v10.2.1`

Compare Source

🐞 Bug Fixes

Respect custom cwd, close #87 - by @pot-code in https://github.com/antfu-collective/bumpp/issues/89 and https://github.com/antfu-collective/bumpp/issues/87 (08137)

View changes on GitHub

eslint/eslint (eslint)

`v9.33.0`

Compare Source

pnpm/pnpm (pnpm)

`v10.14.0`

Compare Source

Minor Changes

Added support for JavaScript runtime resolution

Declare Node.js, Deno, or Bun in devEngines.runtime (inside package.json) and let pnpm download and pin it automatically.

Usage example:
```
{
  "devEngines": {
    "runtime": {
      "name": "node",
      "version": "^24.4.0",
      "onFail": "download" (we only support the "download" value for now)
    }
  }
}
```
How it works:
1. pnpm install resolves your specified range to the latest matching runtime version.
2. The exact version (and checksum) is saved in the lockfile.
3. Scripts use the local runtime, ensuring consistency across environments.
Why this is better:
1. This new setting supports also Deno and Bun (vs. our Node-only settings useNodeVersion and executionEnv.nodeVersion)
2. Supports version ranges (not just a fixed version).
3. The resolved version is stored in the pnpm lockfile, along with an integrity checksum for future validation of the Node.js content's validity.
4. It can be used on any workspace project (like executionEnv.nodeVersion). So, different projects in a workspace can use different runtimes.
5. For now devEngines.runtime setting will install the runtime locally, which we will improve in future versions of pnpm by using a shared location on the computer.
Related PR: #9755.
Add --cpu, --libc, and --os to pnpm install, pnpm add, and pnpm dlx to customize supportedArchitectures via the CLI #7510.

Patch Changes

Fix a bug in which pnpm add downloads packages whose libc differ from pnpm.supportedArchitectures.libc.
The integrities of the downloaded Node.js artifacts are verified #9750.
Allow dlx to parse CLI flags and options between the dlx command and the command to run or between the dlx command and -- #9719.
pnpm install --prod should removing hoisted dev dependencies #9782.
Fix an edge case bug causing local tarballs to not re-link into the virtual store. This bug would happen when changing the contents of the tarball without renaming the file and running a filtered install.
Fix a bug causing pnpm install to incorrectly assume the lockfile is up to date after changing a local tarball that has peers dependencies.

rollup/rollup (rollup)

`v4.46.2`

Compare Source

2025-07-29

Bug Fixes

Fix in-operator handling for external namespace and when the left side cannot be analyzed (#6041)

Pull Requests

#6041: Correct the logic of include in BinaryExpression and don't optimize external references away (@TrickyPi, @cyyynthia, @lukastaegert)

rolldown/tsdown (tsdown)

`v0.14.0`

Compare Source

🚨 Breaking Changes

Disable expandDirectories for matching fast-glob's behavior - by @sxzz (8171b)

View changes on GitHub

`v0.13.5`

Compare Source

🐞 Bug Fixes

Use latest rolldown - by @sxzz (8ae72)

View changes on GitHub

`v0.13.4`

Compare Source

🚀 Features

Add failOnWarn option - by @Gugustinette in https://github.com/rolldown/tsdown/issues/411 (d7d49)
Add cjsDefault option - by @sxzz (f503f)

🐞 Bug Fixes

Suppress mixed export warnings if cjsDefault is enabled - by @sxzz (3ffa9)

View changes on GitHub

`v0.13.3`

Compare Source

🚨 Minor Breaking Changes

dts.build option should be enable manually for tsc -b - by @sxzz (13146)

🚀 Features

Add logLevel & customLogger option - by @sxzz (724d1)
Add warnOnce to logger - by @sxzz (eb4fb)
Allow regex for ignoreWatch - by @sxzz (91f9f)
Warn user if config includes cjs format - by @Gugustinette and @sxzz in https://github.com/rolldown/tsdown/issues/403 (bd42e)

🐞 Bug Fixes

Resolve ignoreWatch - by @sxzz (d0e31)

View changes on GitHub

`v0.13.2`

Compare Source

🚨 Upstream Breaking Changes

Rename dts.isolatedDeclarations to dts.oxc - by @sxzz (5bdb9)

🚀 Features

Support silent as programmatic usage - by @Gugustinette and @sxzz in https://github.com/rolldown/tsdown/issues/404 (6d4b4)

🐞 Bug Fixes

Invalidate tsc before rebuild - by @sxzz (0c7ab)
Silent for resolved options - by @sxzz (4566c)

View changes on GitHub

`v0.13.1`

Compare Source

🚀 Features

Exports with dir index - by @Debbl in https://github.com/rolldown/tsdown/issues/393 (dd6c7)

🐞 Bug Fixes

Clean outDir on rebuilds in watch mode - by @ekzhang in https://github.com/rolldown/tsdown/issues/398 (7308f)
Overload defineConfig - by @sxzz (7c32a)
Kill sub-process for onSuccess - by @sxzz (bd9d8)

View changes on GitHub

microsoft/TypeScript (typescript)

`v5.9.2`

Compare Source

unplugin/unplugin-oxc (unplugin-oxc)

`v0.4.9`

Compare Source

🚀 Features

Upgrade oxc toolchains - by @sxzz (1ab38)

🐞 Bug Fixes

deps:
- Update all non-major dependencies - in https://github.com/unplugin/unplugin-oxc/issues/17 (a0330)
- Update all non-major dependencies - in https://github.com/unplugin/unplugin-oxc/issues/18 (0563b)

View changes on GitHub

vitejs/vite (vite)

`v7.1.1`

Compare Source

Bug Fixes

deps: update launch-editor-middleware (#20569) (826b394)

Miscellaneous Chores

fix changelog beta links (#20561) (2e0c21a)
update 7.1 changelog (#20560) (d8869b8)

`v7.1.0`

Compare Source

Features

support files with more than 1000 lines by generateCodeFrame (#20508) (e7d0b2a)

Bug Fixes

css: avoid warnings for image-set containing __VITE_ASSET__ (#20520) (f1a2635)
css: empty CSS entry points should generate CSS files, not JS files (#20518) (bac9f3e)
dev: denied request stalled when requested concurrently (#20503) (64a52e7)
manifest: initialize entryCssAssetFileNames as an empty Set (#20542) (6a46cda)
skip prepareOutDirPlugin in workers (#20556) (97d5111)

Tests

detect ts support via process.features (#20544) (856d3f0)
fix unimportant errors in test-unit (#20545) (1f23554)

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bolt-new-by-stackblitz · 2025-08-11T00:23:46Z

Run & review this pull request in StackBlitz Codeflow.

socket-security · 2025-08-11T00:24:31Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@types/picomatch@4.0.1 ⏵ 4.0.2			⁺³
@sxzz/test-utils@0.5.7 ⏵ 0.5.9	⁺¹	⁺¹	⁺³
unplugin-oxc@0.4.8 ⏵ 0.4.9			⁺¹
@types/node@22.16.5 ⏵ 22.17.1	⁺¹	⁺¹	⁺¹
bumpp@10.2.0 ⏵ 10.2.2		⁺¹	⁺⁵
@sxzz/eslint-config@7.1.0 ⏵ 7.1.2	⁺¹		⁺¹
vite@7.0.6 ⏵ 7.1.1
ast-kit@2.1.1 ⏵ 2.1.2	^-7		⁺⁶
tsdown@0.13.0 ⏵ 0.14.0		⁺²	⁺¹
typescript@5.8.3 ⏵ 5.9.2	⁺¹	⁺¹
eslint@9.32.0 ⏵ 9.33.0	⁺¹		⁺²
rollup@4.46.1 ⏵ 4.46.2	⁺¹		^-1

View full report

renovate bot added the dependencies label Aug 11, 2025

fix(deps): update all non-major dependencies

9985c31

renovate bot force-pushed the renovate/all-minor-patch branch from 1f3adec to 9985c31 Compare August 11, 2025 06:04

renovate bot changed the title ~~chore(deps): update all non-major dependencies~~ fix(deps): update all non-major dependencies Aug 11, 2025

renovate bot merged commit a62ef28 into main Aug 11, 2025
9 checks passed

renovate bot deleted the renovate/all-minor-patch branch August 11, 2025 09:59

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

fix(deps): update all non-major dependencies #80

fix(deps): update all non-major dependencies #80

Uh oh!

renovate bot commented Aug 11, 2025 •

edited

Loading

Uh oh!

bolt-new-by-stackblitz bot commented Aug 11, 2025

Uh oh!

socket-security bot commented Aug 11, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

fix(deps): update all non-major dependencies #80

fix(deps): update all non-major dependencies #80

Uh oh!

Conversation

renovate bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🚀 Features

🐞 Bug Fixes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🐞 Bug Fixes

🐞 Bug Fixes

Minor Changes

Patch Changes

Bug Fixes

Pull Requests

🚨 Breaking Changes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🚨 Minor Breaking Changes

🚀 Features

🐞 Bug Fixes

🚨 Upstream Breaking Changes

🚀 Features

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Tests

Configuration

Uh oh!

bolt-new-by-stackblitz bot commented Aug 11, 2025

Uh oh!

socket-security bot commented Aug 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

renovate bot commented Aug 11, 2025 •

edited

Loading

socket-security bot commented Aug 11, 2025 •

edited

Loading