Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(deps): update all non-major dependencies #1306

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all non-major dependencies #1306

wants to merge 1 commit into from
+479 −835

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 24, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@microsoft/api-extractor (source) ^7.50.0 -> ^7.52.1 age adoption passing confidence
@swc/core (source) 1.10.18 -> 1.11.9 age adoption passing confidence
@types/node (source) 22.13.4 -> 22.13.10 age adoption passing confidence
bumpp ^10.0.3 -> ^10.1.0 age adoption passing confidence
esbuild ^0.25.0 -> ^0.25.1 age adoption passing confidence
pnpm (source) 10.4.1 -> 10.6.3 age adoption passing confidence
postcss (source) 8.5.2 -> 8.5.3 age adoption passing confidence
prettier (source) 3.5.1 -> 3.5.3 age adoption passing confidence
rollup (source) ^4.34.8 -> ^4.35.0 age adoption passing confidence
sass 1.85.0 -> 1.85.1 age adoption passing confidence
svelte (source) 5.19.9 -> 5.23.0 age adoption passing confidence
tinyglobby ^0.2.11 -> ^0.2.12 age adoption passing confidence
tsup (source) 8.3.6 -> 8.4.0 age adoption passing confidence
typescript (source) 5.7.3 -> 5.8.2 age adoption passing confidence
vitest (source) 3.0.6 -> 3.0.8 age adoption passing confidence

Release Notes

microsoft/rushstack (@​microsoft/api-extractor)

v7.52.1

Compare Source

Tue, 11 Mar 2025 02:12:34 GMT

Version update only

v7.52.0

Compare Source

Tue, 11 Mar 2025 00:11:25 GMT

Minor changes
  • Upgrade the bundled compiler engine to TypeScript 5.8.2

v7.51.1

Compare Source

Sat, 01 Mar 2025 05:00:09 GMT

Patches
  • Include triple-slash references marked with preserve="true" from files that only contain re-exports. There was a behavior change in TypeScript 5.5, where only triple-slash references that are explicitly marked with preserve="true" are emitted into declaration files. This change adds support for placing these references in files that only contain re-exports, like the API entrypoint file.

v7.51.0

Compare Source

Thu, 27 Feb 2025 01:10:39 GMT

Minor changes
  • Add a docModel.releaseTagsToTrim property to api-extractor.json to specify which release tags should be trimmed when the doc model is produced.

v7.50.1

Compare Source

Sat, 22 Feb 2025 01:11:11 GMT

Patches
  • Upgrade the bundled compiler engine to TypeScript 5.7.3
swc-project/swc (@​swc/core)

v1.11.9

Compare Source

Bug Fixes

  • (es/compat) Hoist arguments in object method while lowering async functions (#​10167) (e764df2)

  • (es/minifier) Check array inline for indexed with dynamic key (#​10184) (c2fe4bf)

Features
Performance

v1.11.8

Compare Source

Bug Fixes
Features
Performance
Refactor
Ci

v1.11.7

Compare Source

Features

v1.11.6

Compare Source

Bug Fixes

v1.11.5

Compare Source

Bug Fixes

  • (es/lints) Capture errors and emit from the original thread (#​10119) (2304cd8)

  • (es/minifier) Skip inlining if the referential identity of a function matters (#​10123) (c08fe8d)

  • (ts/fast-strip) Throw object consistently (#​10122) (010ff2a)

Miscellaneous Tasks
Performance

v1.11.4

Compare Source

Bug Fixes
Miscellaneous Tasks
Performance
Refactor

v1.11.1

Compare Source

Bug Fixes
Documentation
Features
Miscellaneous Tasks
Performance
Refactor
antfu-collective/bumpp (bumpp)

v10.1.0

Compare Source

   🚀 Features
    View changes on GitHub
evanw/esbuild (esbuild)

v0.25.1

Compare Source

  • Fix incorrect paths in inline source maps (#​4070, #​4075, #​4105)

    This fixes a regression from version 0.25.0 where esbuild didn't correctly resolve relative paths contained within source maps in inline sourceMappingURL data URLs. The paths were incorrectly being passed through as-is instead of being resolved relative to the source file containing the sourceMappingURL comment, which was due to the data URL not being a file URL. This regression has been fixed, and this case now has test coverage.

  • Fix invalid generated source maps (#​4080, #​4082, #​4104, #​4107)

    This release fixes a regression from version 0.24.1 that could cause esbuild to generate invalid source maps. Specifically under certain conditions, esbuild could generate a mapping with an out-of-bounds source index. It was introduced by code that attempted to improve esbuild's handling of "null" entries in source maps (i.e. mappings with a generated position but no original position). This regression has been fixed.

    This fix was contributed by @​jridgewell.

  • Fix a regression with non-file source map paths (#​4078)

    The format of paths in source maps that aren't in the file namespace was unintentionally changed in version 0.25.0. Path namespaces is an esbuild-specific concept that is optionally available for plugins to use to distinguish paths from file paths and from paths meant for other plugins. Previously the namespace was prepended to the path joined with a : character, but version 0.25.0 unintentionally failed to prepend the namespace. The previous behavior has been restored.

  • Fix a crash with switch optimization (#​4088)

    The new code in the previous release to optimize dead code in switch statements accidentally introduced a crash in the edge case where one or more switch case values include a function expression. This is because esbuild now visits the case values first to determine whether any cases are dead code, and then visits the case bodies once the dead code status is known. That triggered some internal asserts that guard against traversing the AST in an unexpected order. This crash has been fixed by changing esbuild to expect the new traversal ordering. Here's an example of affected code:

    switch (x) {
  case '':
    return y.map(z => z.value)
  case y.map(z => z.key).join(','):
    return []
}

  • Update Go from 1.23.5 to 1.23.7 (#​4076, #​4077)

    This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain reports from vulnerability scanners that detect which version of the Go compiler esbuild uses.

    This PR was contributed by @​MikeWillCook.

pnpm/pnpm (pnpm)

v10.6.3

Compare Source

v10.6.2

Compare Source

Patch Changes
  • pnpm self-update should always update the version in the packageManager field of package.json.
  • Fix running pnpm CLI from pnpm CLI on Windows when the CLI is bundled to an executable #​8971.
  • pnpm patch-commit will now use the same filesystem as the store directory to compare and create patch files.
  • Don't show info output when --loglevel=error is used.
  • peerDependencyRules should be set in pnpm-workspace.yaml to take effect.

v10.6.1

Compare Source

Patch Changes
  • The pnpm CLI process should not stay hanging, when --silent reporting is used.
  • When --loglevel is set to error, don't show installation summary, execution time, and big tarball download progress.
  • Don't ignore pnpm.patchedDependencies from package.json #​9226.
  • When executing the approve-builds command, if package.json contains onlyBuiltDependencies or ignoredBuiltDependencies, the selected dependency package will continue to be written into package.json.
  • When a package version cannot be found in the package metadata, print the registry from which the package was fetched.

v10.6.0

Compare Source

Minor Changes

  • pnpm-workspace.yaml can now hold all the settings that .npmrc accepts. The settings should use camelCase #​9211.

    pnpm-workspace.yaml example:

    verifyDepsBeforeRun: install
optimisticRepeatInstall: true
publicHoistPattern:
  - "*types*"
  - "!@​types/react"

  • Projects using a file: dependency on a local tarball file (i.e. .tgz, .tar.gz, .tar) will see a performance improvement during installation. Previously, using a file: dependency on a tarball caused the lockfile resolution step to always run. The lockfile will now be considered up-to-date if the tarball is unchanged.

Patch Changes
  • pnpm self-update should not leave a directory with a broken pnpm installation if the installation fails.
  • fast-glob replace with tinyglobby to reduce the size of the pnpm CLI dependencies #​9169.
  • pnpm deploy should not remove fields from the deployed package's package.json file #​9215.
  • pnpm self-update should not read the pnpm settings from the package.json file in the current working directory.
  • Fix pnpm deploy creating a package.json without the imports and license field #​9193.
  • pnpm update -i should list only packages that have newer versions #​9206.
  • Fix a bug causing entries in the catalogs section of the pnpm-lock.yaml file to be removed when dedupe-peer-dependents=false on a filtered install. #​9112

v10.5.2

Compare Source

Patch Changes
  • The pnpm config set command should change the global .npmrc file by default.
    This was a regression introduced by #​9151 and shipped in pnpm v10.5.0.

v10.5.1

Compare Source

Patch Changes
  • Throw an error message if a pnpm-workspaces.yaml or pnpm-workspaces.yml file is found instead of a pnpm-workspace.yaml #​9170.
  • Fix the update of pnpm-workspace.yaml by the pnpm approve-builds command #​9168.
  • Normalize generated link paths in package.json #​9163
  • Specifying overrides in pnpm-workspace.yaml should work.
  • pnpm dlx should ignore settings from the package.json file in the current working directory #​9178.

v10.5.0

Compare Source

Minor Changes

  • Allow to set the "pnpm" settings from package.json via the pnpm-workspace.yaml file #​9121.

  • Added support for automatically syncing files of injected workspace packages after pnpm run #​9081. Use the sync-injected-deps-after-scripts setting to specify which scripts build the workspace package. This tells pnpm when syncing is needed. The setting should be defined in a .npmrc file at the root of the workspace. Example:

    sync-injected-deps-after-scripts[]=compile

  • The packages field in pnpm-workspace.yaml became optional.

Patch Changes
  • pnpm link with no parameters should work as if --global is specified #​9151.
  • Allow scope registry CLI option without --config. prefix such as --@​scope:registry=https://scope.example.com/npm #​9089.
  • pnpm link <path> should calculate relative path from the root of the workspace directory #​9132.
  • Fix a bug causing catalog snapshots to be removed from the pnpm-lock.yaml file when using --fix-lockfile and --filter. #​8639
  • Fix a bug causing catalog protocol dependencies to not re-resolve on a filtered install #​8638.
postcss/postcss (postcss)

v8.5.3

Compare Source

prettier/prettier (prettier)

v3.5.3

Compare Source

v3.5.2

Compare Source

diff

Remove module-sync condition (#​17156 by @​fisker)

In Prettier 3.5.0, we added module-sync condition to package.json, so that require("prettier") can use ESM version, but turns out it doesn't work if CommonJS and ESM plugins both imports builtin plugins. To solve this problem, we decide simply remove the module-sync condition, so require("prettier") will still use the CommonJS version, we'll revisit until require(ESM) feature is more stable.

rollup/rollup (rollup)

v4.35.0

Compare Source

2025-03-08

Features
  • Pass build errors to the closeBundle hook (#​5867)
Pull Requests

v4.34.9

Compare Source

2025-03-01

Bug Fixes
  • Support JSX modes in WASM (#​5866)
  • Allow the CustomPluginOptions to be extended (#​5850)
Pull Requests
sass/dart-sass (sass)

v1.85.1

Compare Source

  • Fix a bug where global Sass functions whose names overlap with CSS math
    functions could incorrectly be treated as CSS math functions even though they
    used Sass-only features, causing compilation failures. For example,
    round(-$var / 2) previously threw an error but now works as intended.
sveltejs/svelte (svelte)

v5.23.0

Compare Source

Minor Changes
  • fix: make values consistent between effects and their cleanup functions (#​15469)

v5.22.6

Compare Source

Patch Changes

  • fix: skip log_if_contains_state if only logging literals (#​15468)

  • fix: Add closedby property to HTMLDialogAttributes type (#​15458)

  • fix: null and warnings for local handlers (#​15460)

v5.22.5

Compare Source

Patch Changes

  • fix: memoize clsx calls (#​15456)

  • fix: respect svelte-ignore hydration_attribute_changed on elements with spread attributes (#​15443)

  • fix: always use setAttribute when setting style (#​15323)

  • fix: make style: directive and CSS handling more robust (#​15418)

v5.22.4

Compare Source

Patch Changes
  • fix: never deduplicate expressions in templates (#​15451)

v5.22.3

Compare Source

Patch Changes
  • fix: run effect roots in tree order (#​15446)

v5.22.2

Compare Source

Patch Changes
  • fix: correctly set is_updating before flushing root effects (#​15442)

v5.22.1

Compare Source

Patch Changes
  • chore: switch acorn-typescript plugin (#​15393)

v5.22.0

Compare Source

Minor Changes
  • feat: Add idPrefix option to render (#​15428)
Patch Changes
  • fix: make dialog element and role interactive (#​15429)

v5.21.0

Compare Source

Minor Changes
  • chore: Reduce hydration comment for {:else if} (#​15250)
Patch Changes
  • fix: disallow bind:group to snippet parameters (#​15401)

v5.20.5

Compare Source

Patch Changes

  • fix: allow double hyphen css selector names (#​15384)

  • fix: class:directive not working with $restProps #​15386 (#​15389)
    fix: spread add an useless cssHash on non-scoped element

  • fix: catch error on @​const tag in svelte:boundary in DEV mode (#​15369)

  • fix: allow for duplicate var declarations (#​15382)

  • fix : bug "$0 is not defined" on svelte:element with a function call on class (#​15396)

v5.20.4

Compare Source

Patch Changes
  • fix: update types and inline docs for flushSync (#​15348)

v5.20.3

Compare Source

Patch Changes

  • fix: allow @const inside #key (#​15377)

  • fix: remove unnecessary ?? '' on some expressions (#​15287)

  • fix: correctly override class attributes with class directives (#​15352)

v5.20.2

Compare Source

Patch Changes

  • chore: remove unused options.uid in render (#​15302)

  • fix: do not warn for binding_property_non_reactive if binding is a store in an each (#​15318)

  • fix: prevent writable store value from becoming a proxy when reassigning using $-prefix (#​15283)

  • fix: muted reactive without bind and select/autofocus attributes working with function calls (#​15326)

  • fix: ensure input elements and elements with dir attribute are marked as non-static (#​15259)

  • fix: fire delegated events on target even it was disabled in the meantime (#​15319)

v5.20.1

Compare Source

Patch Changes

  • fix: ensure AST analysis on svelte.js modules succeeds (#​15297)

  • fix: ignore typescript abstract methods (#​15267)

  • fix: correctly ssr component in svelte:head with $props.id() or css='injected' (#​15291)

v5.20.0

Compare Source

Minor Changes
  • feat: SSR-safe ID generation with $props.id() (#​15185)
Patch Changes

  • fix: take private and public into account for constant_assignment of derived state (#​15276)

  • fix: value/checked not correctly set using spread (#​15239)

  • chore: tweak effect self invalidation logic, run transition dispatches without reactive context (#​15275)

  • fix: use importNode to clone templates for Firefox (#​15272)

  • fix: recurse into $derived for ownership validation (#​15166)

v5.19.10

Compare Source

Patch Changes
  • fix: when re-connecting unowned deriveds, re

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@vercel Vercel
Copy link

vercel bot commented Feb 24, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
tsup ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 13, 2025 7:47pm

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Feb 24, 2025
@codesandbox CodeSandbox
Copy link

codesandbox bot commented Feb 24, 2025

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

@pkg-pr-new pkg.pr.new
Copy link

pkg-pr-new bot commented Feb 24, 2025 •
edited
Loading

Open in Stackblitz

npm i https://pkg.pr.new/egoist/tsup@1306

commit: b2d012f

@socket-security Socket Security
Copy link

socket-security bot commented Feb 24, 2025 •
edited
Loading

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@microsoft/[email protected] ➜ 7.52.1 Transitive: environment, eval, filesystem, shell, unsafe +38 13.6 MB microsoft1es, odspnpm
npm/@swc/[email protected] ➜ 1.11.9 None +2 78 kB
npm/@types/[email protected] ➜ 22.13.10 None +1 2.4 MB types
npm/[email protected] ➜ 10.1.0 environment Transitive: filesystem +24 2.93 MB antfu
npm/[email protected], 0.25.0 ➜ 0.25.1 None 0 134 kB evanw
npm/[email protected] ➜ 3.5.3 None 0 0 B
npm/[email protected] ➜ 4.35.0 None +1 2.72 MB eventualbuddha, lukastaegert, rich_harris, ...2 more
npm/[email protected] ➜ 1.85.1 None +2 6.51 MB hcatlin, nex3, sassbot
npm/[email protected] ➜ 5.23.0 None +18 4.61 MB conduitry, rich_harris, svelte-admin
npm/[email protected] ➜ 0.2.12 Transitive: filesystem +2 130 kB
npm/[email protected] ➜ 8.4.0 None 0 390 kB egoist
npm/[email protected], 5.7.3 ➜ 5.8.2 None 0 22.9 MB typescript-bot
npm/[email protected] ➜ 3.0.8 Transitive: filesystem, shell, unsafe +30 3.49 MB vitestbot

🚮 Removed packages: npm/[email protected]

View full report↗︎

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1500ec5 to e91155f Compare February 24, 2025 19:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from e91155f to 51d3cf2 Compare February 25, 2025 01:59
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 51d3cf2 to 9f1b93e Compare February 25, 2025 06:59
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9f1b93e to 1a61873 Compare February 25, 2025 17:59
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1a61873 to 4d6c794 Compare February 25, 2025 18:01
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 4d6c794 to de9b46f Compare February 25, 2025 22:50
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from de9b46f to 1a7fe68 Compare February 26, 2025 16:12
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1a7fe68 to 7271749 Compare February 27, 2025 03:27
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 7271749 to 35e622c Compare February 27, 2025 11:51
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 35e622c to f198a04 Compare February 28, 2025 14:02
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from f198a04 to a2ed5f4 Compare February 28, 2025 19:00
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from a2ed5f4 to 15c38cc Compare February 28, 2025 23:09
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from a552992 to 001b4c7 Compare March 5, 2025 12:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 001b4c7 to 4ca0a4e Compare March 5, 2025 19:07
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 4ca0a4e to 27e6d4c Compare March 6, 2025 02:28
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 27e6d4c to 647ad02 Compare March 6, 2025 18:48
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 647ad02 to 12e0ec6 Compare March 7, 2025 02:28
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 12e0ec6 to 1e9c4d6 Compare March 7, 2025 17:49
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1e9c4d6 to 9b9661f Compare March 7, 2025 23:22
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9b9661f to 7b47f10 Compare March 8, 2025 09:29
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 7b47f10 to 6ebc9ea Compare March 10, 2025 05:40
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 6ebc9ea to 8dc83fd Compare March 11, 2025 02:42
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 8dc83fd to 6623a48 Compare March 11, 2025 19:32
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 6623a48 to 4b18b7d Compare March 12, 2025 06:18
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 4b18b7d to 8dbb837 Compare March 12, 2025 18:27
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 8dbb837 to b2d012f Compare March 13, 2025 19:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants