chore(deps): update all non-major dependencies - #921
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
commit: |
📦 Package Size✅ No notable size changes 📚 22 runtime dependencies (no change) All tracked output (25)
Runtime dependencies (22)
Baseline: main_@_4bb52cc4___2026-09-22 · gzip is the comparison metric · changes below 16 B gzip are ignored |
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 22, 2026 13:16
4f73642 to
1930b54
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 23, 2026 02:25
1930b54 to
ffd8eb9
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 23, 2026 11:01
ffd8eb9 to
aa988d6
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 24, 2026 03:46
aa988d6 to
37f92bd
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 25, 2026 00:19
37f92bd to
89e47a6
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 25, 2026 13:03
89e47a6 to
1c6a9ea
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 25, 2026 22:31
1c6a9ea to
6d5aeac
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 26, 2026 00:23
6d5aeac to
947f84b
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 26, 2026 12:43
947f84b to
d582ae5
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 26, 2026 16:27
d582ae5 to
0e284c9
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 27, 2026 00:22
0e284c9 to
6b1750c
Compare
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.11.1→^4.11.2^0.150.0→^0.151.0^11.0.1→^11.1.1^9.16.0→^9.17.0^3.66.2→^3.66.4^26.5.1→^26.6.33.4.0→3.4.1^3.4.0→^3.4.13.4.0→3.4.1^2.5.0→^2.5.1^10.10.0→^10.11.0^0.21.1→^0.23.0^1.4.1→^1.4.2^6.9.1→^6.11.212.4.1→12.6.0^1.433.3→^1.434.14^4.63.3→^4.63.5^3.4.0→^3.4.13.4.0→3.4.1^3.3.0→^3.4.0^8.3.0→^8.3.1^5.0.0→^5.0.2^3.5.42→^3.5.43Release Notes
nuxt/ui (@nuxt/ui)
v4.11.2Compare Source
Bug Fixes
uioverrides on items (#6979) (c617565)mdfor custom sizes in virtualizer (#6917) (9076ca2)defaultVariantsin theme (#6938) (0317d50)0withnullableandoptionalmodifiers (#6871) (6d6737a)multiplein autocomplete mode (#6971) (27a3ef7)aria-sorton sortable th elements (#6879) (74ad017)onClickfrom being called twice (#6980) (796f79d)paypal/paypal-js (@paypal/paypal-js)
v11.1.1Compare Source
Patch Changes
934c705: Consolidate protype pollution proerty guard with a helper function.v11.1.0Compare Source
Minor Changes
d4bc19a: Add new fundingSource attribute to OnApproveData types for V6Patch Changes
cb9899e: Expand the v6 eligibilityFundingSourcetype to include supported local payment methods.a6997f0: Added name as a valid field to existing Card Fields typesstripe/stripe-js (@stripe/stripe-js)
v9.17.0Compare Source
New features
Fixes
Changed
unjs/unhead (@unhead/bundler@>=3)
v3.4.1Compare Source
🐞 Bug Fixes
transformIndexHtml()- by @harlan-zw in #970 (237d7)View changes on GitHub
vuejs/test-utils (@vue/test-utils)
v2.5.1Compare Source
What's Changed
New Contributors
Full Changelog: vuejs/test-utils@v2.5.0...v2.5.1
eslint/eslint (eslint)
v10.11.0Compare Source
harlan-zw/eslint-plugin-harlanzw (eslint-plugin-harlanzw)
v0.23.0Compare Source
🚀 Features
View changes on GitHub
v0.22.0Compare Source
🚀 Features
View changes on GitHub
Rich-Harris/magic-string (magic-string)
v1.4.2Compare Source
Bug Fixes
Performance Improvements
maplibre/maplibre-gl-js (maplibre-gl)
v6.11.2Compare Source
✨ Features and improvements
🐞 Bug fixes
Map#once(type, layerId, listener)unsubscribing on the first event that misses the layer instead of the first event that hits it (#8499) (by @cherenkov)transformCameraUpdate(#8550) (by @birkskyum)easeToandflyToinstead of holding it and jumping when the animation ends (#8543) (by @johncarmack1984)fitBoundsandcameraForBoundsthrowing on the globe projection when the padding exceeds the viewport, instead of warning and returningundefinedas on mercator (#8538) (by @drakeo338)devicePixelRatio, where the canvas covered a different number of device pixels than its backing store held and the compositor rescaled it (#1590) (by @zdila)v6.11.1Compare Source
🐞 Bug fixes
easeTo/flyTo(#8471) (by @johncarmack1984)v6.11.0Compare Source
✨ Features and improvements
contextmenumap event on long press for touch devices (#373) (by @kirthi-b)global-statefrom the value they had when the state changes, where they snapped to the new value while holdingidlefor the transition duration (#8395) (by @avosa)promoteIdby keying symbols on their feature id as well as their label (#8470, continues #7665) (by @bradymadden97 and @johncarmack1984)Map#calculateAnchoredCameraOptionsto calculate camera options that place a geographic anchor at a screen position without moving the map (#8288) (by @xavierjs)symbol-height-offsetlayers when computing tile coverage (#8424) (by @clement-igonet)addProtocolhandler may return anImageBitmaporHTMLImageElementfor an image resource, so decoded pixels are not encoded and decoded again (#8515) (by @MannXo)🐞 Bug fixes
errorevent (#8018) (by @xavierjs)map.setSky()silently keeping the old sky and firing noerrorevent when the value included a-transitionkey (#8375) (by @Yasser-Ameur)v6.10.0Compare Source
✨ Features and improvements
Markeris behind terrain with a CPU ray walk over the DEM instead of a depth-buffer readback, removing a GPU stall per marker while a map with terrain moves (#8387) (by @johncarmack1984)🐞 Bug fixes
setStylecallingMap.setTerrainwith the wrongthis, which made a terrain change in a style diff throw (#8451) (by @HarelM)pnpm/pnpm (pnpm)
v12.6.0: pnpm 12.6Compare Source
pnpm 12.6.0 ships with automatic dependency deduplication, relocatable node_modules, package.yaml manifest editing, and --save-types support.
Minor Changes
autoDedupededuplicates compatible dependency versions during installation #7258. Enable it inpnpm-workspace.yamlor usepnpm install --auto-dedupeorpnpm add --auto-dedupe. Frozen installs leave the lockfile unchanged.pnpm install,pnpm run, andpnpm execon macOS and Linux now reuse anode_modulesdirectory and bin shims that moved or were copied together with their project #6937. The first command after the move checks the tree and records its new location, so project commands innode_modules/.binkeep working.pnpm add --save-typessaves available@types/*packages indevDependenciesalongside registry dependencies #3868. Packages that declare bundled TypeScript types are skipped. SetsaveTypes: trueinpnpm-workspace.yamlto enable this by default.package.yamlmanifests can now be updated bypnpm add,pnpm update,pnpm remove,pnpm pkg,pnpm link,pnpm set-script, andpnpm version#2008. Existing comments and key order are preserved.Catalog entries can now use the
file:andlink:protocols #8642. A relative path or bare path in an entry, such as./tarballs/foo.tgz, is measured from the directory holdingpnpm-workspace.yaml.pnpm tasks statuslists running and waiting tasks in each concurrency group, and waiting tasks now take available slots in arrival order with higherprioritytasks going first #15208. If workspaces use different limits for the same group, a later task can take a free slot that earlier tasks cannot use. A package script namedtaskstakes precedence; usepnpm pm tasks statuswhen that script exists.pnpm cache prunedeletes registry metadata cache directories that this version of pnpm can no longer read #15046.pnpm cache prune --dry-runlists what it would delete without removing anything.macosBackup.excludeModulesDirandmacosBackup.excludeStoreDiron macOS can now exclude newly created modules, virtual-store, and package-store directories from Time Machine #6440. Set either totruein global configuration or using thePNPM_CONFIG_MACOS_BACKUP_EXCLUDE_MODULES_DIRandPNPM_CONFIG_MACOS_BACKUP_EXCLUDE_STORE_DIRenvironment variables.pnpm add --tildeis now an alias for--save-prefix=~#12863. The Yarn-Tshorthand is not supported.progresssetting and--no-progressoption now turn off dependency and download progress lines #14065. Warnings, lifecycle output, and the dependency summary are still printed.Patch Changes
Security
POSIX bin shims now take
cygpathandwslpathfrom the system default path on Cygwin, MSYS2, and WSL2 so a dependency cannot redirect another package's shim #14866.pnpm installwarnings no longer carry the text of a package's deprecation notice, naming only the deprecated package and version #15099. A deprecation warning names the newest non-deprecated version when one exists, and control characters and line separators are stripped from package identifiers and warnings.pnpm installand other commands that report configuration warnings now warn when environment variables in project.npmrccredentials are ignored #15051.Installing packages
pnpm install --frozen-lockfilenow succeeds when an optional dependency was unresolvable and skipped by the install that wrote the lockfile #3960.pnpm install --frozen-lockfileno longer installs dependencies of projects removed frompnpm-workspace.yaml#15248. Missing local tarballs used only by those projects no longer fail the install.pnpm cinow emptiesnode_modulesbefore installing in a project that declares acleanscript #15276.pnpm install --forcenow re-imports every package into the virtual store #15030 and removes obsolete dependency links inside virtual-store packages when their dependencies change #15039.preinstallscript for the root project now runs before dependencies are resolved and linked #3760.pnpm installnow runspnpm:devPreinstallwhen the root project usespackage.yaml#15168.pnpm installnow enforces the root project'sengines.noderange whenengineStrictis enabled #3016.pnpm installnow uses the running Node.js whendevEngines.runtimedeclares a range withoutonFail: download#15230.pnpm installno longer hangs when a git dependency is fetched over SSH and ssh prompts for a passphrase or host key confirmation, running ssh in batch mode instead #2227.pnpm installnow installs git-hosted dependencies without preparing them when their builds are explicitly denied byallowBuilds#10522.pnpm installnow reuses an in-flight tarball download when another resolution of the same archive still needs itspackage.json#15037.pnpm install --prodno longer downloads registry packages that only a devDependency reaches #881.pnpm install --no-runtime --frozen-lockfilewithnodeLinker: hoistedno longer fails on repeated runs with a broken lockfile #15212.Resolving and linking dependencies
pnpm installandpnpm updatenow resolve a dependency range to the newest matching version that is not deprecated #15128.pnpm add <pkg>without a version now uses the catalog entry when the workspace already catalogs that package #14865.pnpm installnow links workspace dependencies declared with plain version ranges whenexcludeLinksFromLockfileandlinkWorkspacePackagesare enabled #15133.pnpm installnow resolves local tarball dependencies whose absolutefile:paths contain..consistently and skips reinstallation on repeat installs #15190.pnpm installnow installs dependencies when a custom resolver returns a local or git-hosted tarball without a manifest #15016.pnpm.overridesentries written as a bare path, such as./local-dep, are now measured from the directory holdingpnpm-workspace.yaml#11131.pnpm update --no-saveno longer bypasses version-scoped overrides when a dependency selector specifies a version #14923.pnpm peers checkand strict peer dependency checks no longer reject compatible versions from named registries #15225.pnpm outdatedandpnpm update --interactive --latestnow include named-registry dependencies such aswork:2.1.0and preserve their registry prefix #15226.Workspace projects selected by
hoistPatternorpublicHoistPatternare now hoisted on every install #3642.Workspace packages with SemVer build metadata are no longer skipped when they match the requested range and have the same version precedence as the registry package #2812.
Sped up
pnpm dedupeandpnpm installin projects with many convergence overrides by checking overrides concurrently #15175.minimumReleaseAgeis no longer skipped for packages served by registries returning matching ETags for abbreviated and full package metadata #14925.Running scripts and tasks
pnpm runsignal handling no longer delivers a redundant secondSIGINTto child scripts onCtrl+Cin a terminal, and properly forwards termination signals when running non-interactively without a terminal #7374.pnpm runandpnpm execin workspaces withsharedWorkspaceLockfile: falsenow verify dependencies in the selected projects rather than expecting a root workspace state #15272.pnpm testnow forwards--filterarguments to the test script when the option follows the shortcut #15217.Recursive runs now start scripts matched by a
/pattern/selector in parallel withinworkspaceConcurrency#14933.pnpm deploy,pnpm rebuild,pnpm rb, andpnpm setupnow prefer apackage.jsonscript of the same name #14976.modulesDircustom directory names now support executable lookup and CommonJS plugin resolution acrosspnpm run,pnpm exec,pnpm versionhooks, and lifecycle scripts #3604.pnpm install-testnow accepts--no-baildirectly and in recursive runs #3777.Workspace and project configuration
pnpmcommands run in a project not included in the workspace now act on that project alone #3561.pnpm-workspace.yamledits now preserve scalar YAML anchors and aliases #8245.pnpm-workspace.yamlnow expands environment variable placeholders with fallback syntax in enum-valued settings such asnodeLinker#14914.pnpmfileconfiguration now loads a.jsfile as CommonJS or an ES module, following the nearestpackage.json#15141.updateConfighook settings are now honored bypnpm peers check,why,list,ll,licenses,audit,sbom,fetch,patch,patch-commit,patch-remove,approve-builds, andruntime#15047, #15049.readPackagehook changes or removal now take added dependencies out ofpnpm-lock.yamland update dependencies when an existing lockfile is present #3735, #15136.package.yamlprojects now record their pinned pnpm underpackageManagerDependenciesinpnpm-lock.yaml#15167.packageManagerDependenciespinning@pnpm/exebesidepnpmis no longer rewritten inpnpm-lock.yaml#14926.pnpmnow preserves CRLF line endings when modifying project manifests #3529.loglevelsetting is now honored when configured inpnpm-workspace.yaml, global configuration, orPNPM_CONFIG_LOGLEVEL#3122.storeDirvalues loaded from global configuration orPNPM_CONFIG_STORE_DIRnow expand a leading~/to the user's home directory #6560.--shared-workspace-lockfilenow produces a warning when passed on the command line outside a workspace #1617.Windows
pnpm installon Windows now runs dependency build scripts from long global virtual store paths and normalizes scoped package paths in lifecycle scriptPATHentries #15111.pnpm installacross projects sharing a global virtual store on Windows no longer fails withAccess is denied, file-exists errors, or transient sharing violations #15114, #15176, #15171.pn,pnpx,pnx, andpnpmnow run when Git Bash, MSYS2, or Cygwin launches them through a Windows path #14884.pnpm dlxnow reuses cached packages when Windows creates directory junctions for its cache links #15171.pnpm pipeline --watchnow resolves Windows short paths so multiple path representations share the build cache #15105.CLI commands and output
pnpm removenow runs the project's ownpreuninstall,uninstall, andpostuninstallscripts #3276.pnpm remove -rnow fails before modifying manifests if any requested dependency is absent from all selected projects #2319.pnpm update --peernow updates ranges inpeerDependencies#8081.pnpm updatenow movesdevEngines.runtimeandengines.runtimeversion ranges to the resolved Node.js version #14988.pnpm update -gno longer reinstalls unchanged packages #12002.pnpm add -g,pnpm update -g, andpnpm remove -gnow recover a global package group whosenode_modulesdirectory was deleted #15093.pnpm add -gnow installs local tarballs whenPNPM_HOMEcontains..path segments #15118.pnpm versionnow readstagVersionPrefixfrompnpm-workspace.yaml, global config, orPNPM_CONFIG_TAG_VERSION_PREFIXwhen creating and reading Git tags #15044.pnpm publishnow allows a detached Git HEAD in CI environments #5894.pnpm store prunenow removes unreferenced files and packages from the content-addressable store #3635, as well as expired or supersededpnpm dlxcache data #15171.pnpm cache list-registriesnow prints decoded registry URLs #15046.pnpm deployno longer triggers an install when running scripts in a read-only deployed filesystem #11617.pnpm -r list --jsonnow outputs a single JSON array whensharedWorkspaceLockfileisfalse, and--longand--parseableread each project's own modules directory #15011.pnpm sbomnow validates SPDX identifiers and expressions before emitting them as CycloneDX license IDs or expressions, falling back to a license name for non-SPDX values such asUNLICENSED#14786.pnpm change checknow validates pending change intents in.changeset/#15183.pnpm --filterandpnpm -Fshell completion now suggests workspace package names #15216. Completion candidates containing control or invisible formatting characters are omitted so package and script names cannot inject terminal escape sequences.pnpm runandpnpm run-scriptshell completion now suggests package scripts #15034.pnpm --versionno longer creates a temporary file in the project directory during store detection #15264.pnpm setupnow describes displayed configuration changes as "The following configuration changes were made" #15100.minimumReleaseAgeapproval prompts inpnpm installandpnpm update -gnow count and display each package version once #15083, #15091..npmrcauthentication warnings now report when an empty environment variable removes an auth token and name the affected key #4806.The install summary now names the version each dependency resolved to when
node-linkerishoisted#15161.pnpm installnow re-links a package's global virtual store slot afterallowBuildschanges #15117.Platinum Sponsors
Gold Sponsors
v12.5.1: pnpm 12.5.1Compare Source
Patch Chang
Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.