chore(deps): update all non-major dependencies #52
+656
−586
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^22.17.0
->^22.18.11
^0.4.0
->^0.4.2
^3.2.0
->^3.3.1
^9.32.0
->^9.37.0
^0.30.17
->^0.30.19
^0.81.0
->^0.95.0
^0.81.0
->^0.95.0
^0.81.0
->^0.95.0
10.14.0
->10.18.3
^7.0.0
->^7.1.0
1.0.0-beta.31
->1.0.0-beta.43
^0.15.5
->^0.16.12
^0.2.14
->^0.2.15
^5.9.2
->^5.9.3
Release Notes
unjs/automd (automd)
v0.4.2
Compare Source
compare changes
v0.4.1
Compare Source
compare changes
🩹 Fixes
pnpm add
instead ofpnpm install
(#122)npm:
prefix for deno (#115)📖 Documentation
🏡 Chore
❤️ Contributors
unjs/c12 (c12)
v3.3.1
Compare Source
compare changes
🩹 Fixes
🏡 Chore
❤️ Contributors
v3.3.0
Compare Source
compare changes
🚀 Enhancements
🩹 Fixes
cwd
is optional (#273)📖 Documentation
dotenv
section with multiple files example (#270)🏡 Chore
✅ Tests
❤️ Contributors
eslint/eslint (eslint)
v9.37.0
Compare Source
v9.36.0
Compare Source
v9.35.0
Compare Source
v9.34.0
Compare Source
v9.33.0
Compare Source
rich-harris/magic-string (magic-string)
v0.30.19
Compare Source
Bug Fixes
Features
replace(All)
support replacement for functions when the first parameter is a string (#304) (fd1d887)v0.30.18
Compare Source
Bug Fixes
oxc-project/oxc (oxc-minify)
v0.95.0
🚀 Features
c19c9ec
napi/minify: Expose join_vars, sequences, and max_iterations options (#14545) (IWANABETHATGUY)🐛 Bug Fixes
32a41cf
napi/minify: S/passes/max_iterations to avoid confusion (#14608) (Boshen)14686a4
napi/minify: Handle boolean values forcompress.unused
option (#14513) (Kentaro Suzuki)v0.92.0
🐛 Bug Fixes
2f9e16d
napi/minifier, napi/transformer: Rename CommonJS file to.cjs
(#14047) (overlookmotel)🚜 Refactor
cc0019f
napi: Move scripts intoscripts
directory (#14048) (overlookmotel)v0.91.0
💥 BREAKING CHANGES
6fcb0d0
minifier: [BREAKING] Receive supported engines instead of ecmascript versions (#13933) (sapphi-red)🐛 Bug Fixes
21bbf95
napi: Rebuild bindings file for NAPI packages (#13889) (overlookmotel)💼 Other
fb347da
crates: V0.91.0 (#13961) (Boshen)v0.90.0
🚀 Features
b52389a
node: Bumpengines
field to require Node.js 20.19.0+ for ESM support (#13879) (Copilot)🐛 Bug Fixes
9796ec1
napi: Fix binding files (Boshen)v0.83.0
💥 BREAKING CHANGES
34d0a01
napi/minify,transform: [BREAKING] Change module type to ESM (#13349) (Boshen)🚀 Features
593f54c
minifier: Add--max-iterations
for debugging (#13291) (sapphi-red)a0e0a91
oxc_minify_napi: ExposeCodeGenOptions
(#13288) (sapphi-red)v0.82.3
🐛 Bug Fixes
f10ac33
codegen: Remove end sourcemaps for}
,]
,)
(#13180) (Boshen)v0.82.2
🚜 Refactor
5223562
codegen: Adjust some source mappings (#13084) (Boshen)v0.82.1
🚀 Features
993db89
minifier:.minify
and.dce
methods; run dce in loop (#13026) (Boshen)oxc-project/oxc (oxc-parser)
v0.95.0
🚀 Features
0ec0847
ci: Run napi tests on windows (#14383) (camc314)b3c5132
parser: Use typescript for raw transfer tests (#14390) (camc314)🚜 Refactor
4f301de
napi/parser, linter/plugins: Improve formatting of generated code (#14554) (overlookmotel)68c0252
napi/parser, linter/plugins: Shorten generated raw transfer deserializer code (#14553) (overlookmotel)f6d890a
napi/parser: Re-runast_tools
codegen (#14547) (overlookmotel)52f35c6
napi/parser, linter/plugins: Renametypes.js
totype_ids.js
(#14384) (overlookmotel)🧪 Testing
f293e3e
napi/parser: Disable raw transfer tests onantd.js
fixture (#14446) (overlookmotel)994c099
napi/parser: Skip slow test (#14424) (overlookmotel)0b076b4
napi/parser: Fix and clarify exclude tests logic (#14409) (overlookmotel)56274a5
napi/parser: Increase timeout on slow test (#14391) (overlookmotel)v0.94.0
🚀 Features
a2914fe
linter/plugins: Addloc
field getter to all AST nodes (#14355) (overlookmotel)c8de6fe
linter/plugins: Addparent
field to AST nodes (#14345) (overlookmotel)7e4d04f
napi/parser: Add option to addparent
prop to AST nodes with raw transfer (#14344) (overlookmotel)6374065
napi/parser: Raw transfer supportrange
field (#14319) (overlookmotel)🐛 Bug Fixes
a11bc9f
napi/parser, linter/plugins: Addrange
field toTemplateElement
(#14339) (overlookmotel)c65e782
napi/parser: Fix JSDoc comments (#14318) (overlookmotel)🚜 Refactor
1489376
napi/parser, linter/plugins: Minify walker code (#14376) (overlookmotel)c8eeeb5
linter/plugins: Remove build-time dependency onnapi/parser
(#14374) (overlookmotel)073167a
napi/parser: Simplify raw transfer deserializer codegen (#14313) (overlookmotel)34e1c0b
napi/parser: Use minifier to generate JS/TS raw transfer deserializers from single source (#14312) (overlookmotel)a98757a
napi/parser: Minify syntax in raw transfer deserializers (#14308) (overlookmotel)⚡ Performance
e75d42d
napi/parser, linter/plugins: Remove runtimepreserveParens
option from raw transfer deserializers (#14338) (overlookmotel)v0.93.0
🚜 Refactor
c0c0c17
napi/parser: Remove unnecessary#[estree(field_order)]
attr (#14144) (overlookmotel)🧪 Testing
8c09592
napi/parser: Align fixture version with other tasks (#14146) (overlookmotel)v0.92.0
💥 BREAKING CHANGES
b1da5d5
napi/parser: [BREAKING] Changeoxc-parser
to ESM (#14042) (overlookmotel)🐛 Bug Fixes
1f4be38
napi/parser: Generate.d.mts
extension for types (#14038) (Daniel Roe)🚜 Refactor
cc0019f
napi: Move scripts intoscripts
directory (#14048) (overlookmotel)bb040bc
parser, linter: Replace.mjs
files with.js
(#14045) (overlookmotel)e0be08b
napi/parser: FreezevisitorKeys
export (#14012) (overlookmotel)📚 Documentation
909a086
parser: Simplify example (#14044) (overlookmotel)🧪 Testing
55cd2f3
parser: Remove unused import (#14043) (overlookmotel)v0.91.0
🐛 Bug Fixes
0185984
napi/parser: Raw transferpreserveParens
option apply toTSParenthesizedType
(#13964) (overlookmotel)bd2fa90
napi/parser: Movebrowser.js
file (#13918) (overlookmotel)5ff91bc
napi/parser: Fix example (#13887) (overlookmotel)21bbf95
napi: Rebuild bindings file for NAPI packages (#13889) (overlookmotel)🚜 Refactor
48062d0
napi/parser: Itemize files inpackage.json
(#13978) (overlookmotel)329b7e7
napi/parser: Move scripts toscripts
directory (#13900) (overlookmotel)ac3e9e9
napi/parser: Move JS code intosrc-js
directory (#13899) (overlookmotel)2cef8ec
napi/parser: Remove outdated comment (#13886) (overlookmotel)📚 Documentation
7a50ad9
napi/parser, napi/transform: Correct README examples (#13934) (overlookmotel)💼 Other
fb347da
crates: V0.91.0 (#13961) (Boshen)v0.90.0
🚀 Features
b52389a
node: Bumpengines
field to require Node.js 20.19.0+ for ESM support (#13879) (Copilot)24a21b3
napi/parser:preserveParens
option for raw transfer (#13855) (overlookmotel)🐛 Bug Fixes
9796ec1
napi: Fix binding files (Boshen)🚜 Refactor
42b1000
napi/parser: Export functions directly (#13854) (overlookmotel)v0.89.0
🐛 Bug Fixes
341791e
parser: Invalidmain
entrypoint inpackage.json
(#13767) (Ari Perkkiö)v0.88.0
💥 BREAKING CHANGES
4577b71
napi/parser: [BREAKING] Changeoxc-parser
to ESM (#13432) (Boshen)🐛 Bug Fixes
ab51394
raw_transfer: Disable layout assertions on some 32-bit platforms (#13716) (overlookmotel)🚜 Refactor
babbaca
all: Removepub
from modules with no exports (#13618) (overlookmotel)v0.82.3
🚜 Refactor
5baa4f1
napi/parser: Fix lint errors (#13185) (overlookmotel)v0.82.2
🚜 Refactor
f6ac2e6
allocator, napi/parser: Useusize::is_multiple_of
(#13142) (overlookmotel)⚡ Performance
ecc9c60
napi/parser: Raw transfer: reduce maths complexity (#13145) (overlookmotel)v0.82.0
🚜 Refactor
bf9ae3b
ast/estree: Remove custom serializer forTSImportTypeQualifier
(#12961) (overlookmotel)oxc-project/oxc (oxc-transform)
v0.94.0
🚀 Features
588acd5
transformer: Add ES2026 target for explicit resource management (#14330) (Boshen)🐛 Bug Fixes
013e053
napi/transform: Fix define plugin not applying DCE correctly (#14264) (Boshen)v0.92.0
🐛 Bug Fixes
2f9e16d
napi/minifier, napi/transformer: Rename CommonJS file to.cjs
(#14047) (overlookmotel)🚜 Refactor
cc0019f
napi: Move scripts intoscripts
directory (#14048) (overlookmotel)v0.91.0
🐛 Bug Fixes
21bbf95
napi: Rebuild bindings file for NAPI packages (#13889) (overlookmotel)📚 Documentation
7a50ad9
napi/parser, napi/transform: Correct README examples (#13934) (overlookmotel)💼 Other
fb347da
crates: V0.91.0 (#13961) (Boshen)v0.90.0
🚀 Features
70c402b
napi/transform: Add async transform function (#13881) (Boshen)b52389a
node: Bumpengines
field to require Node.js 20.19.0+ for ESM support (#13879) (Copilot)🐛 Bug Fixes
9796ec1
napi: Fix binding files (Boshen)v0.83.0
💥 BREAKING CHANGES
34d0a01
napi/minify,transform: [BREAKING] Change module type to ESM (#13349) (Boshen)v0.82.3
🐛 Bug Fixes
76a9865
transformer/legacy-decorator: Metadata should be inserted after all params decorators (#13215) (Dunqing)f10ac33
codegen: Remove end sourcemaps for}
,]
,)
(#13180) (Boshen)pnpm/pnpm (pnpm)
v10.18.3
Compare Source
Patch Changes
verifyDepsBeforeInstall: install
and pre/post install scripts that called other pnpm scripts #10060.@scope:registry
) being parsed as property paths inpnpm config get
when--location=project
is used #9362.pnpm config set --location=project
incorrectly handling keys with slashes (auth tokens, registry settings) #9884.pnpm-workspace.yaml
and.npmrc
exist,pnpm config set --location=project
now writes topnpm-workspace.yaml
(matching read priority) #10072.pnpm outdated --long
#10040.v10.18.2
Compare Source
Patch Changes
pnpm outdated --long
should work #10040.pnpm dlx
should request the full metadata of packages, whenminimumReleaseAge
is set #9963.EPIPE
errors when piping output to other commands #10027.v10.18.1
Compare Source
Patch Changes
--lockfile-only
is used #8320.pnpm setup
creates a command shim to the pnpm executable. This is needed to be able to runpnpm self-update
on Windows #5700.pnpm install
, pnpm produced false positive warnings for "skip adding to the default catalog because it already exists". This warning now only prints when usingpnpm add --save-catalog
as originally intended.v10.18.0
Compare Source
Minor Changes
Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.
Added configuration options for warning thresholds:
fetchWarnTimeoutMs
andfetchMinSpeedKiBps
.Warning messages are displayed when requests exceed time thresholds or fall below speed minimums
Related PR: #10025.
Patch Changes
minimumReleaseAge
configuration #10030.cleanupUnusedCatalogs
configuration when removing dependent packages.scriptShell
is set tofalse
#8748.pnpm dlx
should not fail whenminimumReleaseAge
is set #10037.v10.17.1
Compare Source
Patch Changes
minimumReleaseAge
setting, print this information out in the error message #9974.state.json
creation path when executingpnpm patch
in a workspace project #9733.minimumReleaseAge
is set and thelatest
tag is not mature enough, prefer a non-deprecated version as the newlatest
#9987.v10.17.0
Compare Source
Minor Changes
The
minimumReleaseAgeExclude
setting now supports patterns. For instance:Related PR: #9984.
Patch Changes
minimumReleaseAge
check, when the package is requested by exact version and the packument is loaded from cache #9978.minimumReleaseAge
is set and the active version under a dist-tag is not mature enough, do not downgrade to a prerelease version in case the original version wasn't a prerelease one #9979.v10.16.1
Compare Source
Patch Changes
v10.16.0
Compare Source
Minor Changes
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.
The new setting is called
minimumReleaseAge
. It specifies the number of minutes that must pass after a version is published before pnpm will install it. For example, settingminimumReleaseAge: 1440
ensures that only packages released at least one day ago can be installed.If you set
minimumReleaseAge
but need to disable this restriction for certain dependencies, you can list them under theminimumReleaseAgeExclude
setting. For instance, with the following configuration pnpm will always install the latest version of webpack, regardless of its release time:Related issue: #9921.
Added support for
finders
#9946.In the past,
pnpm list
andpnpm why
could only search for dependencies by name (and optionally version). For example:prints the chain of dependencies to any installed instance of
minimist
:What if we want to search by other properties of a dependency, not just its name? For instance, find all packages that have
react@17
in their peer dependencies?This is now possible with "finder functions". Finder functions can be declared in
.pnpmfile.cjs
and invoked with the--find-by=<function name>
flag when runningpnpm list
orpnpm why
.Let's say we want to find any dependencies that have React 17 in peer dependencies. We can add this finder to our
.pnpmfile.cjs
:Now we can use this finder function by running:
pnpm will find all dependencies that have this React in peer dependencies and print their exact locations in the dependency graph.
It is also possible to print out some additional information in the output by returning a string from the finder. For example, with the following finder:
Every matched package will also print out the license from its
package.json
:Patch Changes
nodeVersion
is not set to an exact semver version #9934.pnpm publish
should be able to publish a.tar.gz
file #9927.pnpm run
return a non-zero exit code #9626.v10.15.1
Compare Source
Patch Changes
.pnp.cjs
crash when importing subpath #9904.v10.15.0
Compare Source
Minor Changes
cleanupUnusedCatalogs
configuration. When set totrue
, pnpm will remove unused catalog entries during installation #9793.@*/pnpm-plugin-*
#9780.pnpm config get
now prints an INI string for an object value #9797.pnpm config get
now accepts property paths (e.g.pnpm config get catalog.react
,pnpm config get .catalog.react
,pnpm config get 'packageExtensions["@​babel/parser"].peerDependencies["@​babel/types"]'
), andpnpm config set
now accepts dot-leading or subscripted keys (e.g.pnpm config set .ignoreScripts true
).pnpm config get --json
now prints a JSON serialization of config value, andpnpm config set --json
now parses the input value as JSON.Patch Changes
pnpm create
command, must verify whether the node version is supported even if a cache already exists #9775.*/*
to theAccept
header to avoid getting a 406 error on AWS CodeArtifact #9862.pnpm dlx pkg --help
doesn't pass--help
topkg
#9823.sindresorhus/pretty-bytes (pretty-bytes)
v7.1.0
Compare Source
fixedWidth
option for right-aligned output73df489
nonBreakingSpace
optionb637640
b64cee5
v7.0.1
Compare Source
binary
option (#88)c9fd951
rolldown/rolldown (rolldown)
v1.0.0-beta.43
Compare Source
🚀 Features
processedHtml
logic (#6494) by @shulaodanativeMagicString
options (#6469) by @IWANABETHATGUYclose
(#6483) by @hyf0output.paths
(#6470) by @IWANABETHATGUYpreserveEntrySignatures
withincludeDependenciesRecursively
option (#6468) by @hyf0on_hmr_updatrs
to node (#6454) by @hyf0on_output
to node (#6453) by @hyf0on_hmr_updatrs
callback (#6443) by @hyf0🐛 Bug Fixes
experimental.nativeMagicString: false
(#6488) by @IWANABETHATGUYresolve.modules
into account (#6484) by @PickachuadvancedChunks#includeDependenciesRecursively
to rust (#6448) by @hyf0minify: { compress: true }
(#6433) by @sapphi-red🚜 Refactor
Bundler
for public usage (#6480) by @hyf0BindingClientHmrUpdate
([#6456](https://redirect.github.com/rolldown/rolldown/issues/645Configuration
📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.