This repository was archived by the owner on Sep 24, 2025. It is now read-only.
chore(deps): update all non-major dependencies #27
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.
This PR contains the following updates:
^1.2.57->^1.2.68^1.2.43->^1.2.52^1.5.2->^1.9.0^3.2.0->^3.3.4^9.31.0->^9.35.010.13.1->10.17.0^5.8.3->^5.9.2Release Notes
nuxt/eslint (@nuxt/eslint)
v1.9.0Compare Source
🚀 Features
🐞 Bug Fixes
defineNuxtConfigas ESLint's globals, close #603 - by @antfu in #603 (2e67f)View changes on GitHub
v1.8.0Compare Source
🚀 Features
View changes on GitHub
v1.7.1Compare Source
🐞 Bug Fixes
eslint-typegen.d.tsinnuxt.node.d.ts, close #596 - by @antfu in #596 (ab74e)View changes on GitHub
v1.7.0Compare Source
🚀 Features
View changes on GitHub
v1.6.0Compare Source
🐞 Bug Fixes
eslint-plugin-import-xas default, close #590 - by @antfu in #590 (e43d6)View changes on GitHub
nuxt/ui (@nuxt/ui)
v3.3.4Compare Source
🐛 Bug Fixes
buttontype (91f86d9), closes #4935clearfunction (#4843) (0a8ead7)idname (#4890) (e5cb55b)Full Changelog: nuxt/ui@v3.3.3...v3.3.4
v3.3.3Compare Source
Features
Bug Fixes
update:model-valueevent (#4853) (7133f50)Forminterface to accept RegExp (#4821) (0c2d390)focus-outsideevent on content (77b6b9a)_blankis flagged as external for Inertia (#4746) (520b277)colspancalc forloadingandemptystates (#4826) (bdcc8c4)v3.3.2Compare Source
v3.3.1Compare Source
Features
item-wrapperslot (#4521) (411d937)openmethod (#4592) (58aac86)Bug Fixes
insetprop (#4676) (9da1527)dataTypes(#4671) (729bed4)date/timeon iOS (#4715) (93cc83c)uiprop (#4677) (a8af85c)textorkbdsare present (#4568) (5e39cbb)v3.3.0Compare Source
Features
footerslot (#4457) (63730d6)nestedprop (e2695ee), closes #4320default-valueprop (#4404) (fb9e7bb)remove-tagevent (#4511) (6ca7c8b)max-lengthprop (b96a1cc), closes #4405colorprop &softvariant (#4549) (f336600)theme.defaultVariantsoption (#4400) (35f90b9)referenceprop (b00e07f)footersupport to display column summary (#4194) (c355cac)styleto table and columnmeta(#4513) (1db21d1)hoverevent (f903ec3), closes #2435colspanandrowspan(#4460) (7ef1933)referenceprop (69a7b95), closes #4430Bug Fixes
active-class/inactive-classwith app config (#4446) (9debce7)activestyles to behave likehoveron mobile (df8f202), closes #991aria-currentattribute to active dot (#4447) (1ba8a55)rtl:space-x-reversefrom label (#4576) (4682ded)shift(#4456) (772631c)errortype with boolean (a4d0ca7), closes #4496valueKey(4d4234d), closes #4528scopeattribute to headers (#4417) (347694b)textandkbds(#4570) (63476e5)en(df1abf1), closes #4579patchwhen passing props toopen(#4497) (5ad7dab)@nuxt/ui(57a5037)clearError(d8160ba)eslint/eslint (eslint)
v9.35.0Compare Source
v9.34.0Compare Source
v9.33.0Compare Source
v9.32.0Compare Source
pnpm/pnpm (pnpm)
v10.17.0Compare Source
Minor Changes
The
minimumReleaseAgeExcludesetting now supports patterns. For instance:Related PR: #9984.
Patch Changes
minimumReleaseAgecheck, when the package is requested by exact version and the packument is loaded from cache #9978.minimumReleaseAgeis set and the active version under a dist-tag is not mature enough, do not downgrade to a prerelease version in case the original version wasn't a prerelease one #9979.v10.16.1Compare Source
Patch Changes
v10.16.0Compare Source
Minor Changes
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.
The new setting is called
minimumReleaseAge. It specifies the number of minutes that must pass after a version is published before pnpm will install it. For example, settingminimumReleaseAge: 1440ensures that only packages released at least one day ago can be installed.If you set
minimumReleaseAgebut need to disable this restriction for certain dependencies, you can list them under theminimumReleaseAgeExcludesetting. For instance, with the following configuration pnpm will always install the latest version of webpack, regardless of its release time:Related issue: #9921.
Added support for
finders#9946.In the past,
pnpm listandpnpm whycould only search for dependencies by name (and optionally version). For example:prints the chain of dependencies to any installed instance of
minimist:What if we want to search by other properties of a dependency, not just its name? For instance, find all packages that have
react@17in their peer dependencies?This is now possible with "finder functions". Finder functions can be declared in
.pnpmfile.cjsand invoked with the--find-by=<function name>flag when runningpnpm listorpnpm why.Let's say we want to find any dependencies that have React 17 in peer dependencies. We can add this finder to our
.pnpmfile.cjs:Now we can use this finder function by running:
pnpm will find all dependencies that have this React in peer dependencies and print their exact locations in the dependency graph.
It is also possible to print out some additional information in the output by returning a string from the finder. For example, with the following finder:
Every matched package will also print out the license from its
package.json:Patch Changes
nodeVersionis not set to an exact semver version #9934.pnpm publishshould be able to publish a.tar.gzfile #9927.pnpm runreturn a non-zero exit code #9626.v10.15.1Compare Source
Patch Changes
.pnp.cjscrash when importing subpath #9904.v10.15.0Compare Source
Minor Changes
cleanupUnusedCatalogsconfiguration. When set totrue, pnpm will remove unused catalog entries during installation #9793.@*/pnpm-plugin-*#9780.pnpm config getnow prints an INI string for an object value #9797.pnpm config getnow accepts property paths (e.g.pnpm config get catalog.react,pnpm config get .catalog.react,pnpm config get 'packageExtensions["@​babel/parser"].peerDependencies["@​babel/types"]'), andpnpm config setnow accepts dot-leading or subscripted keys (e.g.pnpm config set .ignoreScripts true).pnpm config get --jsonnow prints a JSON serialization of config value, andpnpm config set --jsonnow parses the input value as JSON.Patch Changes
pnpm createcommand, must verify whether the node version is supported even if a cache already exists #9775.*/*to theAcceptheader to avoid getting a 406 error on AWS CodeArtifact #9862.pnpm dlx pkg --helpdoesn't pass--helptopkg#9823.v10.14.0Compare Source
Minor Changes
Added support for JavaScript runtime resolution
Declare Node.js, Deno, or Bun in
devEngines.runtime(insidepackage.json) and let pnpm download and pin it automatically.Usage example:
{ "devEngines": { "runtime": { "name": "node", "version": "^24.4.0", "onFail": "download" (we only support the "download" value for now) } } }How it works:
pnpm installresolves your specified range to the latest matching runtime version.Why this is better:
useNodeVersionandexecutionEnv.nodeVersion)executionEnv.nodeVersion). So, different projects in a workspace can use different runtimes.devEngines.runtimesetting will install the runtime locally, which we will improve in future versions of pnpm by using a shared location on the computer.Related PR: #9755.
Add
--cpu,--libc, and--ostopnpm install,pnpm add, andpnpm dlxto customizesupportedArchitecturesvia the CLI #7510.Patch Changes
pnpm adddownloads packages whoselibcdiffer frompnpm.supportedArchitectures.libc.dlxto parse CLI flags and options between thedlxcommand and the command to run or between thedlxcommand and--#9719.pnpm install --prodshould removing hoisted dev dependencies #9782.pnpm installto incorrectly assume the lockfile is up to date after changing a local tarball that has peers dependencies.microsoft/TypeScript (typescript)
v5.9.2Compare Source
Configuration
📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.