Repository navigation
chore(deps): update all non-major dependencies - #397
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
commit: |
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
11 times, most recently
from
October 26, 2026 02:58
5f970dd to
722cfcb
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
12 times, most recently
from
October 31, 2026 22:52
60fbd92 to
b2f0aaf
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
November 1, 2026 02:34
b2f0aaf to
6d3529b
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
^3.4.3→^3.4.4^3.4.3→^3.4.4^3.4.3→^3.4.4^2.5.1→^2.6.2^4.3.3→^4.3.4^10.12.0→^10.14.0^11.16.2→^11.17.011.18.0^1.4.3→^1.4.5^2.13.4→^2.13.524.22.0→24.22.2^0.154.0→^0.156.00.0.91→0.0.9310.34.7+sha512.ba98abc585539933375b5971f4bc6d6c73a1b4b7edc4a879e7d102fe5423d1e02309d67c60a11f04955093a96e521ad9c3b138cdd654ca5be563f378b3ae48bd→10.34.9^1.105.2→^1.107.1^3.4.0→^3.7.0Release Notes
nuxt/devtools (@nuxt/devtools)
v3.4.4Compare Source
🐞 Bug Fixes
vite:serverCreatedhook - by @danielroe in #1123 (36d10)View changes on GitHub
nuxt/icon (@nuxt/icon)
v2.6.2Compare Source
👉 Changelog
compare changes
🔥 Performance
🩹 Fixes
📖 Documentation
❤️ Contributors
v2.6.1Compare Source
👉 Changelog
compare changes
🔥 Performance
🩹 Fixes
🤖 CI
🎉 New Contributors
❤️ Contributors
v2.6.0Compare Source
🚀 Features
providercan now be set separately for SSR and the browser:provider: { server: 'server', client: 'iconify' }. A string works as before. (#541)dirincustomCollections/serverBundle.collectionsdeclared in a Nuxt layer now resolves against that layer's directory instead of the app'srootDir. If a base layer declared a collection and expected each app to supply the SVGs, declare it in the app or use an absolute path. (#530)🐞 Bug Fixes
iconsquery in cached handler for Nitro 3 - by @KazariAI and Sebastien Chopin in #542 (01bfc)dirfrom the layer that declared it - by @giaBaoJS and @atinux in #530 (8f146)View changes on GitHub
nuxt/test-utils (@nuxt/test-utils)
v4.3.4Compare Source
👉 Changelog
compare changes
🩹 Fixes
setuphooks (#1855)nuxtConfigoverrides to dev server (#1851)h3version from nitro path (#1844)💅 Refactors
package-manager-detectorworkspace + deno handling (1d59009c7)🏡 Chore
❤️ Contributors
eslint/eslint (eslint)
v10.14.0Compare Source
Features
d23a7f9feat: fix property descriptor handling infunc-name-matching(#21400) (xbinaryx)Bug Fixes
4a12580fix: require minimatch10.2.6to avoid vulnerable brace-expansion (#21460) (lumir)827a8f3fix:no-restricted-globalscrash on global objects as property values (#21449) (xbinaryx)161558afix: handle LS, PS and empty hashbang comments (#21419) (lumir)6194939fix:no-invalid-thiscrash onaccessorfields without initializer (#21442) (xbinaryx)9155e14fix: Update @humanfs/node dependency version (#21434) (Nicholas C. Zakas)cb2b9d4fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)5ee3915fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)Documentation
0f94f47docs: removezh-hansfrom docs language switcher (#21437) (lumir)dab466edocs: Update README (GitHub Actions Bot)97431f8docs: replace--rulesdirwith a virtual plugin in custom rules docs (#21452) (Pixel)7697550docs: Update README (GitHub Actions Bot)0c699d5docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)0880666docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)e06fe87docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)Chores
0e2ab70ci: disableeslint-plugin-unicornecosystem test (#21462) (Francesco Trotta)6e3f988chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])a031c40chore: update ecosystem plugins (#21445) (ESLint Bot)67d2ca2chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)276021dchore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])449724echore: update ecosystem plugins (#21420) (ESLint Bot)8ffeb8cchore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])v10.13.0Compare Source
Features
48d5cc4feat: report references inside IIFEs inno-use-before-define(#21238) (Irfan fandi)a39d9fbfeat: addglobalThistono-obj-calls(#21382) (synthex-byte)66ac583feat: checkyield*expressions inno-unsafe-optional-chaining(#21399) (xbinaryx)Bug Fixes
87bd2cefix: avoid redeclaredletwhenno-varandone-varfix together (#21389) (Daniel Pinto)Documentation
4783a68docs: Update README (GitHub Actions Bot)43f0ac9docs: clarify parameter description ingetText(#21287) (lumir)Chores
b59d889chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])95e51a0ci: re-enable@typescript-eslint/typescript-eslintin ecosystem tests (#21410) (Francesco Trotta)317fcb3chore: update ecosystem plugins (#21409) (ESLint Bot)b92decfperf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)47b7063chore: update dependency @eslint/json to ^2.1.1 (#21398) (renovate[bot])e5aea41chore: update ecosystem plugins (#21390) (ESLint Bot)html-validate/html-validate (html-validate)
v11.17.0Compare Source
Features
ErrorFixer.renameTag()(68a3454)relatedtoMessagefor secondary elements (9d76007)HtmlElement.startTagLocationandendTagLocation(1fae6dc)Bug Fixes
</script>end tag case-insensitively (6b93d63), closes #375</style>end tag case-insensitively (c6e5ee7), closes #375</textarea>end tag case-insensitively (6c75f7a), closes #375</title>end tag case-insensitively (49ef906), closes #375script,style,textareaandtitlestart tags case-insensitively (f4fffd1), closes #375descandtitleend tags case-insensitively (337d006), closes #375prefer-native-element(c7d51af), closes #373v11.16.4Compare Source
Bug Fixes
unrecognized-char-refflags legacy references without semicolon (b467b84), closes #312<label>when empty or hidden instead of on<input>(8e70f82), closes #290v11.16.3Compare Source
Bug Fixes
@__NO_SIDE_EFFECTS__annotation todefine*helpers for better treeshaking (f44b9b3)colorattribute on<link>(b0ab7f9)fetchpriorityattribute on<link>(d04875f)hreflangattribute on<link>(13f73c0)mediaattribute on<link>(3b22eb0)sizesattribute on<link>(3a99da7)typeattribute on<link>(0b298e7), closes #371Rich-Harris/magic-string (magic-string)
v1.4.5Compare Source
Bug Fixes
Performance Improvements
v1.4.4Compare Source
Bug Fixes
replace(#367) (aed5675)nitrojs/nitro (nitropack)
v2.13.5Compare Source
compare changes
Preset Changes
✅ Tests
🩹 Fixes
📖 Documentation
📦 Build
🌊 Types
🔥 Performance
❤️ Contributors
actions/node-versions (node)
v24.22.2: 24.22.2Compare Source
Node.js 24.22.2
v24.22.1: 24.22.1Compare Source
Node.js 24.22.1
stackblitz-labs/pkg.pr.new (pkg-pr-new)
v0.0.93Compare Source
v0.0.92Compare Source
pnpm/pnpm (pnpm)
v10.34.9: pnpm 10.34.9Compare Source
Patch Changes
0bff20d: The pnpm version thatpackageManagerpins now records that pin in a freshpnpm-lock.yamlwhen pnpm 10 switched to it. A laterpnpm install --frozen-lockfilethen succeeds #17303.Platinum Sponsors
Gold Sponsors
v10.34.8: pnpm 10.34.8Compare Source
Patch Changes
7ced81e: Recompute hoisted dependencies when a frozen install removes packages, so public hoist links are handed over to retained versions #16861.debbb4c: When pnpm removes or replaces a direct dependency, it now finishes removing the dependency's bins before it deletes the dependency's directory. Packages that declare bins throughdirectories.binno longer leave broken shims innode_modules/.bin#16876.07becba: The standalone pnpm executables now embed Node.js 24.22.1. They embedded Node.js 20, which has reached end of life and still trusts the certificate authority intermediates that Node.js distrusted in October 2026.Platinum Sponsors
Gold Sponsors
sass/embedded-host-node (sass-embedded)
v1.107.1Compare Source
v1.107.0Compare Source
Command-Line Interface
The
--fatal-deprecationflag can now exclude deprecations that wouldotherwise be included by passing a version number. To exclude a deprecation,
add
-before its name. For example,--fatal-deprecation=1.107.0,-importincludes all deprecations that were present in Dart Sass 1.107.0 except for
the
@importdeprecation.The
--fatal-deprecationflag now takes the special valuedart-sass-2,which treats as fatal all deprecations that will become fatal in Dart Sass
2.0.0.
JavaScript API
Options.fatalDeprecationscan now take aDeprecationSelectorDifferenceobject of the form
{include: ..., except: ...}, where theincludefieldlists deprecations to mark fatal (which can be version numbers) and the
exceptfield lists deprecations not to mark fatal. Theexceptfieldtakes precedence over
include.Add a (non-enumerable)
sass.deprecations.dartSass2property which can bepassed to
Options.fatalDeprecationsto mark as fatal exactly thedeprecations that will become fatal in Dart Sass 2.0.0. This can be combined
with other deprecations or used in a
DeprecationSelectorDifferenceto modifyexactly which deprecations it covers.
Passing a version number beyond the current Dart Sass version to
Options.fatalDeprecationsis now deprecated. See the Sasswebsite for details.
Dart API
Add a
Deprecation.dartSass2property which returns exactly the set ofdeprecations that will become fatal in Dart Sass 2.0.0.
Passing a version number beyond the current Dart Sass version to
Deprecation.forVersionis now deprecated.Embedded Protocol
CompileRequest.fatal_deprecation_exceptfield which excludesdeprecations from being considered fatal if they would have been enabled by
CompileRequest.fatal_deprecation.v1.106.1Compare Source
Fix a bug where an attribute selector with an empty value (such as
[class=""]) would crash when serializing.Don't crash when serializing a number with an empty unit. This is only
possible through the JavaScript and Dart APIs or the embedded protocol.
Embedded Dart Sass
PARAMSerrors.v1.106.0Compare Source
Don't normalize CSS escapes in statement contexts that can contain
interpolation. For example,
@f\6Fois now emitted as written rather thannormalized to
@foo.Fix a bug where quotes would be removed from attribute selector values that
contained backslashes.
Fix invalid source spans that could cause crashes when encountering a syntax
error in selectors or media queries that also contain escape sequences.
Fix a bug where the indented syntax parser would crash when parsing a file
where the first statement was indented and appeared after the first line.
Fix a bug that could cause crashes when encountering errors or warnings in
interpolations that contain patterns like
// */.Potentially breaking compatibility fix: CSS escape codes whose values are
0, for Unicode surrogates, or greater than the maximum allowed code point are
now consistently normalized to U+FFFD REPLACEMENT CHARACTER in expression
contexts. Previously, in some cases these were instead normalized to the
normalized form of the original escape sequence, which violates the principle
that all escape sequences for identical values should be normalized the same
way. In other cases, these would simply throw errors.
As a special case,
\0on its own will continue to be normalized to\0tosupport historical CSS hacks.
Potentially breaking bug fix: Throw an error for mixins and functions that
have rest parameters which are the same as normal parameters. Previously, the
positional parameters wouldn't be accessible and calling such a mixin or
function with a named argument would crash the compiler.
Potentially breaking bug fix: Fix various cases where using a CSS escape
code at the beginning of an identifier would change parsing behavior versus
using the character directly.
Potentially breaking bug fix: When a number's unit is ambiguous with a
numeric exponent, the unit is now serialized as an escape code rather than a
literal
eto avoid being interpreted as an exponent by CSS.Potentially breaking bug fix: Don't parse a CSS escape code for U+45 LATIN
CAPITAL LETTER E or U+65 LATIN LOWERCASE LETTER E as an exponent in
@keyframespercentage selectors.Potentially breaking bug fix: Properly normalize underscores written as
CSS escape codes in variable, mixin, and function names.
unjs/unplugin (unplugin)
v3.7.0Compare Source
🚀 Features
@rolldown/pluginutils- by @antfubot in #636 (e78e7)Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.