Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 8, 2025

This PR contains the following updates:

Package Change Age Confidence
@sxzz/eslint-config ^7.2.8 -> ^7.4.0 age confidence
@sxzz/prettier-config ^2.2.4 -> ^2.2.6 age confidence
@types/node (source) ^24.10.0 -> ^24.10.1 age confidence
bumpp ^10.3.1 -> ^10.3.2 age confidence
pnpm (source) 10.20.0 -> 10.24.0 age confidence
prettier (source) ^3.6.2 -> ^3.7.3 age confidence
rollup (source) ^4.53.0 -> ^4.53.3 age confidence
tsdown (source) ^0.16.1 -> ^0.16.8 age confidence
unplugin (source) ^2.3.10 -> ^2.3.11 age confidence
vite (source) ^7.2.2 -> ^7.2.6 age confidence
vitest (source) ^4.0.8 -> ^4.0.14 age confidence

Release Notes

sxzz/eslint-config (@​sxzz/eslint-config)

v7.4.0

Compare Source

   🚀 Features
    View changes on GitHub

v7.3.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v7.3.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v7.3.0

Compare Source

   🚀 Features
    View changes on GitHub

v7.2.10

Compare Source

   🚀 Features
    View changes on GitHub

v7.2.9

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
sxzz/prettier-config (@​sxzz/prettier-config)

v2.2.6

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v2.2.5

Compare Source

No significant changes

    View changes on GitHub
antfu-collective/bumpp (bumpp)

v10.3.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
pnpm/pnpm (pnpm)

v10.24.0

Compare Source

v10.23.0: pnpm 10.23

Compare Source

Minor Changes

  • Added --lockfile-only option to pnpm list #​10020.

Patch Changes

  • pnpm self-update should download pnpm from the configured npm registry #​10205.
  • pnpm self-update should always install the non-executable pnpm package (pnpm in the registry) and never the @pnpm/exe package, when installing v11 or newer. We currently cannot ship @pnpm/exe as pkg doesn't work with ESM #​10190.
  • Node.js runtime is not added to "dependencies" on pnpm add, if there's a engines.runtime setting declared in package.json #​10209.
  • The installation should fail if an optional dependency cannot be installed due to a trust policy check failure #​10208.
  • pnpm list and pnpm why now display npm: protocol for aliased packages (e.g., foo npm:[email protected]) #​8660.
  • Don't add an extra slash to the Node.js mirror URL #​10204.
  • pnpm store prune should not fail if the store contains Node.js packages #​10131.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.22.0: pnpm 10.22

Compare Source

Minor Changes

  • Added support for trustPolicyExclude #​10164.

    You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:

    trustPolicy: no-downgrade
    trustPolicyExclude:
      - [email protected]
      - [email protected] || 5.102.1
  • Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

  • Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #​10179.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.21.0

Compare Source

prettier/prettier (prettier)

v3.7.3

Compare Source

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#​18375 by @​fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

v3.7.2

Compare Source

diff

JavaScript: Fix string print when switching quotes (#​18351 by @​fisker)
// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")

// Prettier 3.7.1
console.log('A descriptor\\'s .kind must be "method" or "field".');

// Prettier 3.7.2
console.log('A descriptor\\\'s .kind must be "method" or "field".');
JavaScript: Preserve quote for embedded HTML attribute values (#​18352 by @​kovsu)
// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

// Prettier 3.7.1
const html = /* HTML */ ` <div class=${styles.banner}></div> `;

// Prettier 3.7.2
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;
TypeScript: Fix comment in empty type literal (#​18364 by @​fisker)
// Input
export type XXX = {
  // tbd
};

// Prettier 3.7.1
export type XXX = { // tbd };

// Prettier 3.7.2
export type XXX = {
  // tbd
};

v3.7.1

Compare Source

diff

API: Fix performance regression in doc printer (#​18342 by @​fisker)

Prettier 3.7.1 can be very slow when formatting big files, the regression has been fixed.

v3.7.0

Compare Source

diff

🔗 Release Notes

rollup/rollup (rollup)

v4.53.3

Compare Source

2025-11-19

Bug Fixes
  • Fix an error where too many modules where flagged for having an unused external import (#​6182)
  • Fix an error where an assignment was wrongly tree-shaken when mutating it (#​6183)
Pull Requests

v4.53.2

Compare Source

2025-11-10

Bug Fixes
  • Do not throw when using invalid escape sequences in template literals (#​6177)
Pull Requests

v4.53.1

Compare Source

2025-11-07

Bug Fixes
Pull Requests
rolldown/tsdown (tsdown)

v0.16.8

Compare Source

   🚀 Features
Deprecation
  • Deprecate attw.profile = 'esmOnly', use esm-only instead.
    View changes on GitHub

v0.16.7

Compare Source

   🚀 Features
    View changes on GitHub

v0.16.6

Compare Source

   🚀 Features
    View changes on GitHub

v0.16.5

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.16.4

Compare Source

   🚀 Features
    View changes on GitHub

v0.16.3

Compare Source

   🏎 Performance
    View changes on GitHub

v0.16.2

Compare Source

   🚀 Features
  • Upgrade rolldown to v1.0.0-beta.49  -  by @​sxzz (48181)
  • entry: Auto enable glob, support infer entry extension  -  by @​sxzz and jinghaihan (2c525)
    View changes on GitHub
unjs/unplugin (unplugin)

v2.3.11

Compare Source

   🚀 Features
    View changes on GitHub
vitejs/vite (vite)

v7.2.6

Compare Source

7.2.6 (2025-12-01)

v7.2.4

Compare Source

Bug Fixes

v7.2.3

Compare Source

Bug Fixes
Performance Improvements
Miscellaneous Chores
vitest-dev/vitest (vitest)

v4.0.14

Compare Source

   🚀 Experimental Features
   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub

v4.0.13

Compare Source

   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub

v4.0.12

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v4.0.11

Compare Source

   🚀 Experimental Features
   🏎 Performance
    View changes on GitHub

v4.0.10

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v4.0.9

Compare Source

   🚀 Experimental Features
   🐞 Bug Fixes
    View changes on GitHub

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Sep 8, 2025
@bolt-new-by-stackblitz
Copy link

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@socket-security
Copy link

socket-security bot commented Sep 8, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​sxzz/​prettier-config@​2.2.4 ⏵ 2.2.677 +1310077 +292 +2100
Updatedvitest@​4.0.8 ⏵ 4.0.1498 +110079 +199100
Updated@​types/​node@​24.10.0 ⏵ 24.10.110010081 +195100
Updatedbumpp@​10.3.1 ⏵ 10.3.29910082 +190 +1100
Updated@​sxzz/​eslint-config@​7.2.8 ⏵ 7.4.082 -110010096 +1100
Updatedvite@​7.2.2 ⏵ 7.2.697 -110082 +199 +2100
Updatedunplugin@​2.3.10 ⏵ 2.3.111001008395 -1100
Updatedprettier@​3.6.2 ⏵ 3.7.390 -810097 -398100
Updatedtsdown@​0.16.1 ⏵ 0.16.898 -210092 -896 -4100
Updatedrollup@​4.53.0 ⏵ 4.53.397 -310010098 -2100

View full report

@pkg-pr-new
Copy link

pkg-pr-new bot commented Sep 8, 2025

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-ast@107

commit: 7311c1b

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from fc82c8d to 7e7a5a9 Compare September 15, 2025 08:31
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from 0ab0d70 to 3449ad9 Compare September 22, 2025 16:30
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from c75bca6 to f0791dc Compare September 29, 2025 20:42
@renovate renovate bot changed the title fix(deps): update all non-major dependencies - autoclosed chore(deps): update all non-major dependencies Nov 10, 2025
@renovate renovate bot reopened this Nov 10, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 54450b3 to c5967a2 Compare November 14, 2025 11:32
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from d2643e3 to 6b946a0 Compare November 22, 2025 09:50
@renovate renovate bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Nov 22, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 11d8771 to 64d9ae8 Compare November 29, 2025 02:28
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 64d9ae8 to 9c92baa Compare November 29, 2025 21:35
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9c92baa to 7311c1b Compare December 1, 2025 09:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant