chore(deps): update all non-major dependencies #67

renovate · 2025-09-29T00:37:46Z

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

This PR contains the following updates:

Package	Change	Age	Confidence
@sxzz/eslint-config	`^7.1.4` -> `^7.2.7`
@types/node (source)	`^24.5.2` -> `^24.7.0`
bumpp	`^10.2.3` -> `^10.3.1`
eslint (source)	`^9.36.0` -> `^9.37.0`
pnpm (source)	`10.17.0` -> `10.18.1`
rollup (source)	`^4.52.0` -> `^4.52.4`
tsdown	`^0.15.4` -> `^0.15.6`
tsx (source)	`^4.20.5` -> `^4.20.6`
typescript (source)	`^5.9.2` -> `^5.9.3`
vite (source)	`^7.1.6` -> `^7.1.9`
webpack	`^5.101.3` -> `^5.102.0`

Release Notes

sxzz/eslint-config (@sxzz/eslint-config)

`v7.2.7`

Compare Source

No significant changes

View changes on GitHub

`v7.2.6`

Compare Source

🐞 Bug Fixes

Allow return in computed - by @sxzz (f724b)

View changes on GitHub

`v7.2.5`

Compare Source

No significant changes

View changes on GitHub

`v7.2.4`

Compare Source

🐞 Bug Fixes

Disable unicorn/prefer-ternary - by @sxzz (b3b3d)

View changes on GitHub

`v7.2.3`

Compare Source

🐞 Bug Fixes

Allow undefined in args - by @sxzz (2830d)

View changes on GitHub

`v7.2.2`

Compare Source

🐞 Bug Fixes

Disable no-anonymous-default-export for vue/jsx files - by @sxzz (a1e6a)

View changes on GitHub

`v7.2.1`

Compare Source

🚀 Features

Upgrade globals to es2026 - by @sxzz (5ca2b)

🐞 Bug Fixes

Disable some unicorn rules - by @sxzz (39151)

🏎 Performance

Use require for pure CJS deps - by @sxzz (5a61d)

View changes on GitHub

`v7.2.0`

Compare Source

🚀 Features

Sort tsdown in package.json - by @sxzz (8c74d)
Use unicorn unopinionated config - by @sxzz (c7f59)

View changes on GitHub

antfu-collective/bumpp (bumpp)

`v10.3.1`

Compare Source

No significant changes

View changes on GitHub

`v10.3.0`

Compare Source

🚀 Features

Support --release for release type - by @luoling8192 in #97 (5af7b)

View changes on GitHub

eslint/eslint (eslint)

`v9.37.0`

Compare Source

pnpm/pnpm (pnpm)

`v10.18.1`

Compare Source

Patch Changes

Don't print a warning, when --lockfile-only is used #8320.
pnpm setup creates a command shim to the pnpm executable. This is needed to be able to run pnpm self-update on Windows #5700.
When using pnpm catalogs and running a normal pnpm install, pnpm produced false positive warnings for "skip adding to the default catalog because it already exists". This warning now only prints when using pnpm add --save-catalog as originally intended.

`v10.18.0`

Compare Source

Minor Changes

Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

Related PR: #10025.

Patch Changes

Retry filesystem operations on EAGAIN errors #9959.
Outdated command respects minimumReleaseAge configuration #10030.
Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
Don't fail with a meaningless error when scriptShell is set to false #8748.
pnpm dlx should not fail when minimumReleaseAge is set #10037.

`v10.17.1`

Compare Source

Patch Changes

When a version specifier cannot be resolved because the versions don't satisfy the minimumReleaseAge setting, print this information out in the error message #9974.
Fix state.json creation path when executing pnpm patch in a workspace project #9733.
When minimumReleaseAge is set and the latest tag is not mature enough, prefer a non-deprecated version as the new latest #9987.

rollup/rollup (rollup)

`v4.52.4`

Compare Source

2025-10-03

Bug Fixes

Fix an issue where the wrong branch of nullish coalescing was picked (#6133)

Pull Requests

#6128: Enable npm OIDC publishing (@lukastaegert)
#6133: Correct nullish coalescing branch resolution for symbol left value (@TrickyPi)
#6134: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

`v4.52.3`

Compare Source

2025-09-27

Bug Fixes

Fix check in native loader for environments that do not support reports (#6123)

Pull Requests

#6123: fix(native-loader): safely handle report.getReport() on Termux/Android (@Jobians, @lukastaegert)
#6124: chore(deps): pin msys2/setup-msys2 action to fb197b7 (@renovate[bot])
#6125: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])
#6126: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

`v4.52.2`

Compare Source

2025-09-23

Bug Fixes

Fix Android build crashing due to failed dlopen (#6109)

Pull Requests

#6109: fix(rust): use prebuilt std when it is available (@cyyynthia)

`v4.52.1`

Compare Source

2025-09-23

Bug Fixes

Opt-out of dynamic import optimization when using top-level await to effectively prevent deadlocks (#6121)

Pull Requests

#6121: Simplify top-level await deadlock prevention (@lukastaegert)

rolldown/tsdown (tsdown)

`v0.15.6`

Compare Source

🐞 Bug Fixes

watch: Watch relative files - by @sxzz (afeab)

View changes on GitHub

`v0.15.5`

Compare Source

🚀 Features

Add inlineOnly option - by @sxzz (e3bce)
report: Add gzip option to control gzip compression reporting - by @rznn7 in #507 (9724f)

🐞 Bug Fixes

Debounce watch - by @sxzz (4714e)
Legacy silent flag - by @sxzz (b6086)
Set logger level for rolldown - by @sxzz (3b059)

🏎 Performance

require pure cjs deps - by @sxzz (091b8)

View changes on GitHub

privatenumber/tsx (tsx)

`v4.20.6`

Compare Source

Bug Fixes

properly hide relaySignal from process.listeners() (#741) (710a424)

This release is also available on:

npm package (@latest dist-tag)

microsoft/TypeScript (typescript)

`v5.9.3`

Compare Source

vitejs/vite (vite)

`v7.1.9`

Compare Source

Reverts

server: drain stdin when not interactive (#20885) (12d72b0)

`v7.1.8`

Compare Source

Bug Fixes

css: improve url escape characters handling (#20847) (24a61a3)
deps: update all non-major dependencies (#20855) (788a183)
deps: update artichokie to 0.4.2 (#20864) (e670799)
dev: skip JS responses for document requests (#20866) (6bc6c4d)
glob: fix HMR for array patterns with exclusions (#20872) (63e040f)
keep ids for virtual modules as-is (#20808) (d4eca98)
server: drain stdin when not interactive (#20837) (bb950e9)
server: improve malformed URL handling in middlewares (#20830) (d65a983)

Documentation

create-vite: provide deno example (#20747) (fdb758a)

Miscellaneous Chores

deps: update rolldown-related dependencies (#20810) (ea68a88)
deps: update rolldown-related dependencies (#20854) (4dd06fd)
update url of create-react-app license (#20865) (166a178)

`v7.1.7`

Compare Source

Bug Fixes

build: fix ssr environment emitAssets: true when sharedConfigBuild: true (#20787) (4c4583c)
client: use CSP nonce when rendering error overlay (#20791) (9bc9d12)
deps: update all non-major dependencies (#20811) (9f2247c)
glob: handle glob imports from folders starting with dot (#20800) (105abe8)
hmr: trigger prune event when import is removed from non hmr module (#20768) (9f32b1d)
hmr: wait for import.meta.hot.prune callbacks to complete before running other HMRs (#20698) (98a3484)

webpack/webpack (webpack)

`v5.102.0`

Compare Source

Features

Added static analyze for dynamic imports
Added support for import file from "./file.ext" with { type: "bytes" } to get the content as Uint8Array (look at example)
Added support for import file from "./file.ext" with { type: "text" } to get the content as text (look at example)
Added the snapshot.contextModule to configure snapshots options for context modules
Added the extractSourceMap option to implement the capabilities of loading source maps by comment, you don't need source-map-loader (look at example)
The topLevelAwait experiment is now stable (you can remove experiments.topLevelAwait from your webpack.config.js)
The layers experiment is now stable (you can remove experiments.layers from your webpack.config.js)
Added function matcher support in rule options

Fixes

Fixed conflicts caused by multiple concatenate modules
Ignore import failure during HMR update with ES modules output
Keep render module order consistent
Prevent inlining modules that have this exports
Removed unused timeout attribute of script tag
Supported UMD chunk format to work in web workers
Improved CommonJs bundle to ES module library
Use es-lexer for mjs files for build dependencies
Fixed support __non_webpack_require__ for ES modules
Properly handle external modules for CSS
AssetsByChunkName included assets from chunk.auxiliaryFiles
Use createRequire only when output is ES module and target is node
Typescript types

Performance Improvements

Avoid extra calls for snapshot
A avoid extra jobs for build dependencies
Move import attributes to own dependencies

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bolt-new-by-stackblitz · 2025-09-29T00:37:49Z

Run & review this pull request in StackBlitz Codeflow.

pkg-pr-new · 2025-09-29T00:38:15Z

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-replace@67

commit: d60d883

renovate · 2025-10-06T13:13:43Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

[13:13:26.012] INFO (728): Installing tool node@22.20.0...
[13:13:26.143] ERROR (728): download failed
    run: 3
    err: {
      "type": "HTTPError",
      "message": "Response code 502 (Bad Gateway or Proxy Error)",
      "stack":
          HTTPError: Response code 502 (Bad Gateway or Proxy Error)
              at _Request._onResponseBase (/snapshot/dist/containerbase-cli.js:42570:25)
              at _Request._onResponse (/snapshot/dist/containerbase-cli.js:42626:18)
              at ClientRequest.<anonymous> (/snapshot/dist/containerbase-cli.js:42641:17)
              at Object.onceWrapper (node:events:633:26)
              at ClientRequest.emit (node:events:530:35)
              at ClientRequest.emit (node:domain:489:12)
              at HTTPParser.parserOnIncomingClient (node:_http_client:716:27)
              at HTTPParser.parserOnHeadersComplete (node:_http_common:117:17)
              at TLSSocket.socketOnData (node:_http_client:558:22)
              at TLSSocket.emit (node:events:518:28)
      "code": "ERR_NON_2XX_3XX_RESPONSE",
      "timings": {
        "start": 1759756406137,
        "socket": 1759756406137,
        "lookup": 1759756406137,
        "connect": 1759756406137,
        "secureConnect": 1759756406137,
        "upload": 1759756406137,
        "response": 1759756406139,
        "end": 1759756406141,
        "phases": {
          "wait": 0,
          "dns": 0,
          "tcp": 0,
          "tls": 0,
          "request": 0,
          "firstByte": 2,
          "download": 2,
          "total": 4
        }
      },
      "name": "HTTPError",
      "options": {
        "agent": {},
        "decompress": true,
        "timeout": {},
        "prefixUrl": "",
        "ignoreInvalidCookies": false,
        "context": {},
        "hooks": {
          "init": [],
          "beforeRequest": [],
          "beforeError": [],
          "beforeRedirect": [],
          "beforeRetry": [],
          "afterResponse": []
        },
        "followRedirect": true,
        "maxRedirects": 10,
        "throwHttpErrors": true,
        "username": "",
        "password": "",
        "http2": false,
        "allowGetBody": false,
        "headers": {
          "user-agent": "containerbase/13.14.2 node/22.17.1 (https://github.com/containerbase)",
          "accept-encoding": "gzip, deflate, br"
        },
        "methodRewriting": false,
        "retry": {
          "limit": 2,
          "methods": [
            "GET",
            "PUT",
            "HEAD",
            "DELETE",
            "OPTIONS",
            "TRACE"
          ],
          "statusCodes": [
            408,
            413,
            429,
            500,
            502,
            503,
            504,
            521,
            522,
            524
          ],
          "errorCodes": [
            "ETIMEDOUT",
            "ECONNRESET",
            "EADDRINUSE",
            "ECONNREFUSED",
            "EPIPE",
            "ENOTFOUND",
            "ENETUNREACH",
            "EAI_AGAIN"
          ],
          "backoffLimit": null,
          "noise": 100
        },
        "method": "GET",
        "cacheOptions": {},
        "https": {},
        "resolveBodyOnly": false,
        "isStream": true,
        "responseType": "text",
        "url": "https://github.com/containerbase/node-prebuild/releases/download/22.20.0/node-22.20.0-x86_64.tar.xz",
        "pagination": {
          "countLimit": null,
          "backoff": 0,
          "requestLimit": 10000,
          "stackAllItems": false
        },
        "setHost": true,
        "enableUnixSockets": false
      }
    }
[13:13:26.172] ERROR (728): download failed
[13:13:26.172] FATAL (728): Install tool node failed in 168ms.

renovate bot added the dependencies label Sep 29, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 514d323 to b04b56e Compare October 4, 2025 01:14

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 0ef5d06 to d60d883 Compare October 6, 2025 09:08

chore(deps): update all non-major dependencies

3ac7872

renovate bot force-pushed the renovate/all-minor-patch branch from d60d883 to 3ac7872 Compare October 6, 2025 13:13

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies #67

chore(deps): update all non-major dependencies #67

Uh oh!

renovate bot commented Sep 29, 2025 •

edited

Loading

Uh oh!

bolt-new-by-stackblitz bot commented Sep 29, 2025

Uh oh!

pkg-pr-new bot commented Sep 29, 2025 •

edited

Loading

Uh oh!

renovate bot commented Oct 6, 2025

Uh oh!

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies #67

Are you sure you want to change the base?

chore(deps): update all non-major dependencies #67

Uh oh!

Conversation

renovate bot commented Sep 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🐞 Bug Fixes

🐞 Bug Fixes

🐞 Bug Fixes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🏎 Performance

🚀 Features

🚀 Features

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🏎 Performance

Bug Fixes

Reverts

Bug Fixes

Documentation

Miscellaneous Chores

Bug Fixes

Features

Fixes

Performance Improvements

Configuration

Uh oh!

bolt-new-by-stackblitz bot commented Sep 29, 2025

Uh oh!

pkg-pr-new bot commented Sep 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate bot commented Oct 6, 2025

⚠️ Artifact update problem

File name: pnpm-lock.yaml

Uh oh!

Uh oh!

renovate bot commented Sep 29, 2025 •

edited

Loading

pkg-pr-new bot commented Sep 29, 2025 •

edited

Loading