Skip to content

fix(deps): update all non-major dependencies#1127

Merged
hi-ogawa merged 1 commit intomainfrom
renovate/all-minor-patch
Mar 2, 2026
Merged

fix(deps): update all non-major dependencies#1127
hi-ogawa merged 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 2, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
@cloudflare/vite-plugin (source) ^1.25.2 → ^1.25.6 age confidence
@rolldown/pluginutils (source) 1.0.0-rc.5 → 1.0.0-rc.6 age confidence
@types/node (source) ^24.10.13 → ^24.11.0 age confidence
globals ^17.3.0 → ^17.4.0 age confidence
lint-staged ^16.2.7 → ^16.3.1 age confidence
oxfmt (source) ^0.34.0 → ^0.36.0 age confidence
pnpm (source) 10.30.1 → 10.30.3 age confidence
react-router (source) 7.13.0 → 7.13.1 age confidence
rolldown (source) 1.0.0-rc.5 → 1.0.0-rc.6 age confidence
srvx (source) ^0.11.7 → ^0.11.8 age confidence
turbo-stream ^3.1.0 → ^3.2.0 age confidence
typescript-eslint (source) ^8.56.0 → ^8.56.1 age confidence
vitefu ^1.1.1 → ^1.1.2 age confidence
wrangler (source) ^4.67.0 → ^4.69.0 age confidence

Release Notes

cloudflare/workers-sdk (@​cloudflare/vite-plugin)

v1.25.6

Compare Source

Patch Changes

v1.25.5

Compare Source

Patch Changes

  • #​12628 494ee7b Thanks @​Master-Hash! - Append Cloudflare defaults to existing .assetsignore files during build output

    When a project includes a PUBLIC_DIR/.assetsignore, the plugin now preserves those rules and appends the required wrangler.json and .dev.vars entries instead of replacing the file content.

  • Updated dependencies [3d6e421, 294297e]:

    • wrangler@​4.68.1
    • miniflare@​4.20260302.0
rolldown/rolldown (@​rolldown/pluginutils)

v1.0.0-rc.6

Compare Source

💥 BREAKING CHANGES
  • css: remove css_entry_filenames , css_chunk_filenames and related code (#​8402) by @​hyf0
  • css: drop builtin CSS bundling to explore alternative solutions (#​8399) by @​hyf0
🚀 Features
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
⚡ Performance
🧪 Testing
⚙️ Miscellaneous Tasks
sindresorhus/globals (globals)

v17.4.0

Compare Source

lint-staged/lint-staged (lint-staged)

v16.3.1

Compare Source

Patch Changes
  • #​1729 cd5d762 Thanks @​iiroj! - Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.

v16.3.0

Compare Source

Minor Changes

  • #​1698 feda37a Thanks @​iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.

  • #​1699 1346d16 Thanks @​iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes
  • #​1726 87467aa Thanks @​iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.
oxc-project/oxc (oxfmt)

v0.36.0

Compare Source

🐛 Bug Fixes
  • 04e6223 npm: Add preferUnplugged for Yarn PnP compatibility (#​19829) (Boshen)
📚 Documentation

v0.35.0

Compare Source

🚀 Features
pnpm/pnpm (pnpm)

v10.30.3

Compare Source

v10.30.2

Compare Source

remix-run/react-router (react-router)

v7.13.1

Compare Source

Patch Changes

  • fix null reference exception in bad codepath leading to invalid route tree comparisons (#​14780)

  • fix: clear timeout when turbo-stream encoding completes (#​14810)

  • Improve error message when Origin header is invalid (#​14743)

  • Fix matchPath optional params matching without a "/" separator. (#​14689)

    • matchPath("/users/:id?", "/usersblah") now returns null.
    • matchPath("/test_route/:part?", "/test_route_more") now returns null.

  • add RSC unstable_getRequest (#​14758)

  • Fix HydrateFallback rendering during initial lazy route discovery with matching splat route (#​14740)

  • [UNSTABLE] Add support for <Link unstable_mask> in Data Mode which allows users to navigate to a URL in the router but "mask" the URL displayed in the browser. This is useful for contextual routing usages such as displaying an image in a model on top of a gallery, but displaying a browser URL directly to the image that can be shared and loaded without the contextual gallery in the background. (#​14716)

    // routes/gallery.tsx
export function clientLoader({ request }: Route.LoaderArgs) {
  let sp = new URL(request.url).searchParams;
  return {
    images: getImages(),
    // When the router location has the image param, load the modal data
    modalImage: sp.has("image") ? getImage(sp.get("image")!) : null,
  };
}

export default function Gallery({ loaderData }: Route.ComponentProps) {
  return (
    <>
      <GalleryGrid>
        {loaderData.images.map((image) => (
          <Link
            key={image.id}
            {/* Navigate the router to /galley?image=N */}}
            to={`/gallery?image=${image.id}`}
            {/* But display /images/N in the URL bar */}}
            unstable_mask={`/images/${image.id}`}
          >
            <img src={image.url} alt={image.alt} />
          </Link>
        ))}
      </GalleryGrid>

      {/* When the modal data exists, display the modal */}
      {data.modalImage ? (
        <dialog open>
          <img src={data.modalImage.url} alt={data.modalImage.alt} />
        </dialog>
      ) : null}
    </>
  );
}

    Notes:

    • The masked location, if present, will be available on useLocation().unstable_mask so you can detect whether you are currently masked or not.
    • Masked URLs only work for SPA use cases, and will be removed from history.state during SSR.
    • This provides a first-class API to mask URLs in Data Mode to achieve the same behavior you could do in Declarative Mode via manual backgroundLocation management.

  • RSC: Update failed origin checks to return a 400 status and appropriate UI instead of a generic 500 (#​14755)

  • Preserve query parameters and hash on manifest version mismatch reload (#​14813)

h3js/srvx (srvx)

v0.11.8

Compare Source

compare changes

🩹 Fixes
  • node: Validate host header (7c8c962)
🏡 Chore
❤️ Contributors
jacob-ebey/turbo-stream (turbo-stream)

v3.2.0

Compare Source

Features
Bug Fixes
svitejs/vitefu (vitefu)

v1.1.2

Compare Source

  • Allow Vite 8 peer dependency (#​28)
cloudflare/workers-sdk (wrangler)

v4.69.0

Compare Source

Minor Changes

  • #​12625 c0e9e08 Thanks @​WillTaylorDev! - Add cache configuration option for enabling worker cache (experimental)

    You can now enable cache before worker execution using the new cache configuration:

    {
	"cache": {
		"enabled": true,
	},
}

    This setting is environment-inheritable and opt-in. When enabled, cache behavior is applied before your worker runs.

    Note: This feature is experimental. The runtime API is not yet generally available.

Patch Changes

  • #​12661 99037e3 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260302.0 1.20260303.0

  • #​12680 295297a Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260303.0 1.20260305.0

  • #​12671 f765244 Thanks @​MattieTK! - fix: Only redact account names in CI environments, not all non-interactive contexts

    The multi-account selection error in getAccountId now only redacts account names
    when running in a CI environment (detected via ci-info). Non-interactive terminals
    such as coding agents and piped commands can now see account names, which they need
    to identify which account to configure. CI logs remain protected.

  • Updated dependencies [99037e3, 295297a]:

    • miniflare@​4.20260305.0

v4.68.1

Compare Source

Patch Changes

  • #​12648 3d6e421 Thanks @​petebacondarwin! - Fix Angular scaffolding to allow localhost SSR in development mode

    Recent versions of Angular's AngularAppEngine block serving SSR on localhost by default. This caused wrangler dev / wrangler pages dev to fail with URL with hostname "localhost" is not allowed.

    The fix passes allowedHosts: ["localhost"] to the AngularAppEngine constructor in server.ts, which is safe to do even in production since Cloudflare will already restrict which host is allowed.

  • #​12657 294297e Thanks @​dario-piotrowicz! - Update Waku autoconfig logic

    As of 1.0.0-alpha.4, Waku projects can be built on top of the Cloudflare Vite plugin, and the changes here allow Wrangler autoconfig to support this. Running autoconfig on older versions of Waku will result in an error.

  • Updated dependencies []:

    • miniflare@​4.20260302.0

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Mar 2, 2026
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 279863a to 6bfbb19 Compare March 2, 2026 04:01
@hi-ogawa hi-ogawa mentioned this pull request Mar 2, 2026
Merged
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 6bfbb19 to 1ca26c9 Compare March 2, 2026 06:48
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1ca26c9 to c3c89f7 Compare March 2, 2026 13:05
@hi-ogawa hi-ogawa merged commit f01b30c into main Mar 2, 2026
21 checks passed
@hi-ogawa hi-ogawa deleted the renovate/all-minor-patch branch March 2, 2026 23:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hi-ogawa