Skip to content

chore(deps): update all non-major dependencies#10

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#10
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jul 19, 2026 •
edited by blacksmith-sh Bot
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@changesets/cli (source) ^2.31.0 → ^2.31.1 age confidence devDependencies patch
@swc/core (source) ^1.15.43 → ^1.15.46 age confidence devDependencies patch
actions/checkout v7.0.0 → v7.0.1 age confidence action patch
actions/setup-node v6.4.0 → v6.5.0 age confidence action minor
knip (source) 6.26.0 → 6.29.0 age confidence devDependencies minor
mscharley/dependency-changesets-action v1.2.4 → v1.2.5 age confidence action patch
oxfmt (source) 0.58.0 → 0.60.0 age confidence devDependencies minor
oxlint (source) 1.73.0 → 1.75.0 age confidence devDependencies minor
pnpm (source) 11.13.1+sha512.b2fc7683b8a6525414e7d13e1ba28caaddde96bf66ec540bfaeb7e702b81f3e0be4d1f295edf7f9fe0396740a8dce4509c582ddf79891f4543fea32d37645f25 → 11.17.0 age confidence packageManager minor
publint (source) ^0.3.21 → ^0.3.22 age confidence devDependencies patch
tsdown (source) ^0.22.4 → ^0.22.14 age confidence devDependencies patch
turbo (source) ^2.10.4 → ^2.10.6 age confidence devDependencies patch
zizmorcore/zizmor-action v0.5.7 → v0.6.0 age confidence action minor

Release Notes

changesets/changesets (@​changesets/cli)

v2.31.1

Compare Source

Patch Changes
  • #​2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
swc-project/swc (@​swc/core)

v1.15.46

Compare Source

Bug Fixes
Documentation
Features
Refactor
Testing
  • (react-compiler) Add build-pass fixtures for wrapped assignment targets (#​11967) (58d9b53)
Build
Ci
actions/checkout (actions/checkout)

v7.0.1

Compare Source

actions/setup-node (actions/setup-node)

v6.5.0

Compare Source

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

webpro-nl/knip (knip)

v6.29.0: Release 6.29.0

Compare Source

v6.28.0: Release 6.28.0

Compare Source

  • Update oxc-resolver (resolve #​1889) (1444f6a)
  • Keep entry-exported members public (resolve #​1890) (94967c1)
  • Don't un-ignore sibling paths on unrelated gitignore negations (resolve #​1891) (5c026ba)
  • Memoize the gitignore shadowed-pattern check (a5fa3b0)
  • Ignore nested files under a gitignore dir/* pattern (404a53e)
  • Track types referenced by JSDoc imports (resolve #​1888) (6ae48aa)
  • Update oxc-parser (02ca17a)
  • feat: markdownlint-cli2 (#​1887) (323b96f) - thanks @​Zamiell!
  • Update rolldown snapshot (009e509)
  • Resolve $GITHUB_ACTION_PATH in GHA composite actions (ead489f)
  • Don't report node: specifiers as unlisted dependencies (1a7114f)
  • Discover tsdown CLI entries (0d47a45)
  • Discover Convex function modules (e01f21c)
  • Ignore common system binaries (cd00306)
  • Add OpenClaw plugin (73a2d7d)
  • Discover Tailwind CLI input stylesheet (resolve #​1551) (9ae5fee)
  • Discover Angular global stylesheets from angular.json (fb9e048)
  • Hint when project patterns exclude a compiled extension (74de516)
  • Ignore common global binaries (a99a206)
  • Run multiple preprocessors in sequence (8443583)
  • fix(nuxt): resolve nuxt module paths (#​1896) (3c8594f) - thanks @​danielroe!
  • Report unused re-exports when ignoreExportsUsedInFile is set (#​1895) (a113a5f) - thanks @​mlm20!
  • Pass -w to pnpm add in sentry ecosystem test (ea8c8ac)
  • Update sentry snapshot (b75768d)
  • Record all traversed dirs in glob cache (resolve #​1897) (81be1d4)
  • Invalidate glob cache when .gitignore changes (baff301)
  • Improve Nuxt and Nitro plugin resolution (86ffab7)
  • fix: don't treat [-]-c[heck] as config flag for prettier (#​1902) (b7266ee) - thanks @​davidkna-sap!
  • Use Entra ID to publish VS Code extension (4236253)
  • Remove obsolete trust policy exclusions (630d5f9)
  • Update dependencies (810147b)
  • Migrate from typescript/native-preview to typescript (140a25a)

v6.27.0: Release 6.27.0

Compare Source

  • Add Temporal plugin (98191a0)
  • Handle -d alias for react-email dir argument (53d1fec)
  • Expand pnpm script references with forwarded arguments (33e9799)
  • Treat path-shaped script tokens as file references, extend known global binaries (d9508c2)
  • Mark tsdown neverBundle dependencies as referenced (5fd863b)
  • Support TanStack Start in tanstack-router plugin (bd63cd8)
  • Mark vite ssr.external dependencies as referenced (91de938)
  • Expand bun, npm, and yarn script references with forwarded arguments (b5a3176)
  • Add Latitude as sponsor (4267675)
  • Regenerate plugin list in docs (1d2cdff)
  • Support Vue 2 template auto-imports (close #​1881) (2157f39)
  • Ignore block-commented stylesheet imports (resolve #​1880, close #​1882) (a627f53)
  • Support TypeScript 5.0 narrowing for ssr.external (989292f)
  • Resolve local binaries from bun run (5e9a7f0)
  • Support Vitest inline project config extensions (f682327)
  • Resolve package names from aliased node_modules paths (c273d5f)
  • Support Tailwind CSS URL imports (57a4770)
  • Resolve unbuilt workspace package exports (close #​1877) (1b0a2c0)
  • Skip unresolved imports of gitignored generated files (605c904)
  • Attribute imports of aliased packages to the declared dependency (d05e775)
  • Flag unresolvable imports of transitive peer deps as unlisted (resolve #​1883) (18f0bff)
  • Don't count ambient module declarations in script files as imports (e52aecf)
  • Update rolldown snapshot (a63e927)
  • Remove obsolete workarounds from ecosystem tests (a521cf7)
  • Handle snapshotSerializers in Vitest plugin (resolve #​1884) (b597de9)
  • Set the stage (c059c2b)
mscharley/dependency-changesets-action (mscharley/dependency-changesets-action)

v1.2.5

Compare Source

What's Changed

New Contributors

Full Changelog: mscharley/dependency-changesets-action@v1.2.4...v1.2.5

oxc-project/oxc (oxfmt)

v0.60.0

Compare Source

v0.59.0

Compare Source

🐛 Bug Fixes
  • 415fe1e oxfmt: Error on ignorePatterns that cannot match files outside the config directory (#​24286) (leaysgur)
oxc-project/oxc (oxlint)

v1.75.0

Compare Source

🚀 Features
  • dd18383 linter/node: Implement no-top-level-await rule (#​24634) (Connor Shea)
  • 16a65f2 linter/react: Implement function-component-definition rule (#​24471) (Cole Ellison)
  • 7f1f585 linter: Reuse jest/padding-around-test-blocks for vitest/padding-around-test-blocks (#​24519) (Mikhail Baev)
  • 99978a8 linter/import/consistent-type-specifier-style: Support prefer-top-level-if-only-type-imports option (#​24502) (camc314)
🐛 Bug Fixes
  • 8694167 linter/eslint/prefer-destructuring: Handle typed declarations (#​24616) (camc314)

v1.74.0

Compare Source

🚀 Features
  • 0433a83 linter/eslint/no-inner-declarations: Add namespaces option (#​24044) (Boshen)
🐛 Bug Fixes
  • 8337835 linter: Error on ignorePatterns that cannot match files aoutside the config directory (#​24341) (leaysgur)
  • 2ce5a33 linter: Resolve ignorePatterns relative to the config dir (#​24339) (leaysgur)
⚡ Performance
  • 7f80cac linter/vue/prop-name-casing: Precompile ignoreProps regex pattern (#​24413) (connorshea)
  • 6272051 linter/typescript/no-require-imports: Compile allow patterns once (#​24417) (connorshea)
  • 33805b9 linter/jsdoc/require-param: Compile checkTypesPattern regex once (#​24420) (connorshea)
pnpm/pnpm (pnpm)

v11.17.0: pnpm 11.17

Compare Source

Minor Changes

  • Added a new setting, update.githubActionsServer, for specifying the base URL of the GitHub server that hosts the repositories of the GitHub Actions referenced by the workflow files (for example, a GitHub Enterprise Server). When the setting is not defined, the URL is read from the GITHUB_SERVER_URL environment variable, falling back to https://github.com. The URL must use the https:// or http:// protocol #​13220.

    pnpm outdated and pnpm update no longer fail when the refs of a GitHub Action's repository cannot be read (for example, when the action's repository is private or hosted on a different GitHub server). Such actions are now skipped with a warning.

    Setting update.githubActions to false now makes pnpm outdated and the interactive pnpm update skip GitHub Actions dependencies.

Patch Changes

  • The token poll for web-based authentication no longer reads the body of non-OK or still-pending (HTTP 202) responses, and caps the token response body it does read at 64 KiB, so a malicious or compromised registry cannot exhaust memory through the poll pnpm/pnpm#12721.

  • Fixed catalog: references in dependencies and overrides failing to resolve when installing through a pnpr server, which errored with "No catalog entry '' was found for catalog 'default'." even though the catalog entry existed. Also fixed a crash on Windows when installing a nested workspace member (e.g. packages/foo) through a pnpr server #​13232.

  • Republished every package: the tarballs published by the v11.13.1 through v11.16.0 releases were missing most of their compiled files due to a packing bug #​13164.

  • Revert script ordering change for pnpm run --sequential /regex/

  • Support the from-git argument in the pnpm version command.

  • When the authentication URL cannot be rendered as a QR code (for example when it exceeds the maximum QR data capacity), web-based login now displays the URL alone with a warning instead of aborting authentication pnpm/pnpm#12721.

Platinum Sponsors
Bit
OpenAI
Gold Sponsors
Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx

v11.16.0: pnpm 11.16

Compare Source

Minor Changes

  • The first release of a package now publishes the version written in its manifest verbatim, instead of bumping off it. pnpm version -r and pnpm change status check the registry for each release's current version; when that version is not yet published, the package debuts at it and its pending changesets apply only from the next release. A newly added package seeded at 1100.0.0 with a minor changeset is therefore published as 1100.0.0 rather than skipping straight to 1100.1.0.

  • Added a --changeset flag to pnpm update. Set update.changeset to true in pnpm-workspace.yaml to enable this behavior by default, and use --no-changeset to override the setting for one update. After the update completes, pnpm writes a .changeset/pnpm-update-<suffix>.md file declaring a patch bump for every workspace package whose dependencies or optionalDependencies were changed by the update and a major bump when peerDependencies changed, including packages that consume an updated catalog entry via the catalog: protocol. Private packages, packages without a name, and packages listed in the ignore array of .changeset/config.json are skipped. If .changeset/config.json does not exist, a warning is printed and no changeset is generated.

  • Added GitHub Actions dependencies to pnpm outdated and interactive pnpm update. Non-interactive updates can include them with --include-github-actions or by setting update.githubActions to true in pnpm-workspace.yaml. Updated actions are pinned to exact commit hashes with their release tags preserved in comments.

  • Added update and audit settings sections to pnpm-workspace.yaml, superseding the awkwardly named updateConfig, auditConfig, and top-level auditLevel settings:

    update:
  ignoreDeps: # was updateConfig.ignoreDependencies
    - webpack
    - "@&#8203;babel/*"

audit:
  level: high # was auditLevel
  ignore: # was auditConfig.ignoreGhsas
    - GHSA-xxxx-yyyy-zzzz

    update.ignoreDeps lists dependency name patterns that pnpm update and pnpm outdated should skip. audit.level and audit.ignore tune pnpm audit.

    The deprecated updateConfig, auditConfig, and auditLevel settings keep working until the next major version. When both a new section value and its deprecated counterpart are set, the new section takes precedence and a warning is printed. Both the TypeScript CLI and the Rust config surface (pacquet) recognize the new sections.

Patch Changes

  • Fixed pnpm add --save-exact/--save-prefix and pnpm update writing a package's version with the peerDependencies range's prefix (e.g. ^19.2.7 instead of the requested 19.2.7) whenever the same package also appeared in peerDependencies. A real dependencies/devDependencies/optionalDependencies entry now takes precedence over a same-named peerDependencies entry when computing the current specifiers #​13108.

Platinum Sponsors

Bit
OpenAI

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx

v11.15.1

Compare Source

v11.15.0: pnpm 11.15

Compare Source

Minor Changes
  • Optional peer dependencies declared only via peerDependenciesMeta (for example debug's supports-color peer) are now resolved from a satisfying version already present in the dependency graph, the same way explicitly declared optional peer dependencies are. Previously such peers were only resolved this way when the package's metadata was read back from the lockfile, so an unrelated dependency change could rewrite peer resolutions across the whole lockfile.
Patch Changes

  • Updated adm-zip to prevent crafted ZIP archives from causing excessive memory allocation.

  • pnpm version -r no longer writes a versioning-ledger entry with no consumed intents as a bare intents: key, which the next run failed to read with ERR_PNPM_INVALID_VERSIONING_LEDGER. Empty intent lists are now written as intents: [], and the ledger reader accepts the bare form left by earlier releases.

  • Fixed pnpr workspace resolution to preserve project names and versions for workspace: dependencies.

Platinum Sponsors

Bit
OpenAI

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 12pm on Sunday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

@renovate
renovate Bot requested a review from RedStar071 as a code owner July 19, 2026 02:30
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 3f3f8d0 to 2e3afc2 Compare July 19, 2026 10:39
@codecov

codecov Bot commented Jul 19, 2026

Copy link
Copy Markdown

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 3f279f7 to 48ddf0a Compare July 23, 2026 03:09
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 48ddf0a to 392776c Compare July 23, 2026 19:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@RedStar071 RedStar071 Awaiting requested review from RedStar071 RedStar071 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants