Skip to content

chore(deps): update all non-major dependencies#1309

Merged
danielroe merged 1 commit into
mainfrom
renovate/all-minor-patch
May 11, 2026
Merged

chore(deps): update all non-major dependencies#1309
danielroe merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 11, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
@nuxt/nitro-server (source) ^4.4.4 → ^4.4.5 age confidence devDependencies patch
@types/node (source) ^24.12.2 → ^24.12.3 age confidence devDependencies patch
CodSpeedHQ/action v4.15.0 → v4.15.1 age confidence action patch
h3-next (source) ^2.0.1-rc.21 → ^2.0.1-rc.22 age confidence devDependencies patch
jiti ^2.6.1 → ^2.7.0 age confidence dependencies minor
jiti ^2.6.1 → ^2.7.0 age confidence devDependencies minor
knip (source) ^6.11.0 → ^6.12.2 age confidence devDependencies minor
pkg-pr-new (source) ^0.0.70 → ^0.0.71 age confidence devDependencies patch
pnpm (source) 10.33.3 → 10.33.4 age confidence packageManager patch
semver ^7.7.4 → ^7.8.0 age confidence dependencies minor
semver ^7.7.4 → ^7.8.0 age confidence devDependencies minor
tsdown (source) ^0.21.10 → ^0.22.0 age confidence devDependencies minor
vue (source) ^3.5.33 → ^3.5.34 age confidence devDependencies patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

CodSpeedHQ/action (CodSpeedHQ/action)

v4.15.1

Compare Source

Release Notes

🚀 Features
⚙️ Internals

Install codspeed-runner 4.15.1

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.15.1/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.15.1

File Platform Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.15.0...v4.15.1

h3js/h3 (h3-next)

v2.0.1-rc.22

Compare Source

compare changes

🚀 Enhancements
  • tracing: Export wrapHandlerWithTracing for manual handler wrapping (#​1369)
🩹 Fixes
  • toEventHandler: Validate h3 subapp instance to pick .handler (a94b7fb)
💅 Refactors
  • Split plugin definition (40bddff)
📦 Build
🏡 Chore
❤️ Contributors
unjs/jiti (jiti)

v2.7.0

Compare Source

compare changes

🚀 Enhancements
  • Add explicit resource management (using/await using) support (#​422)
  • Support opt-in tsconfigPaths (#​427)
  • Support virtual modules option (#​428)
  • Add jiti/static export (#​430)
🔥 Performance
  • interopDefault: Add caching to reduce proxy overhead by ~2x (#​421)
🩹 Fixes
  • require: Passthrough resolve options (#​412)
  • ci: Skip --coverage flag for node 18 (fe264b4)
  • require: Fallback to transpilation when tryNative fails (#​413)
  • Fallback for ENAMETOOLONG when evaluating esm (#​429)
📦 Build
🏡 Chore
✅ Tests
🤖 CI
  • Update node test matrix (0abda72)
❤️ Contributors
webpro-nl/knip (knip)

v6.12.2: Release 6.12.2

Compare Source

  • Fix symbol reporter file paths with --directory (#​1733) (d54074d) - thanks @​cyphercodes!
  • fix(webpack): reference TS loaders for .ts/.cts config (close #​1732) (f37c5da)
  • fix(serverless-framework): skip functions without handler (close #​1735) (616739d)
  • ci(integration): disable minimumReleaseAge for test installs (081dfc8)
  • ci(snapshots): query — add CreateQueriesOptions to unused types (5dd0b8a)

v6.12.1: Release 6.12.1

Compare Source

v6.12.0: Release 6.12.0

Compare Source

stackblitz-labs/pkg.pr.new (pkg-pr-new)

v0.0.71

Compare Source

pnpm/pnpm (pnpm)

v10.33.4: pnpm 10.33.4

Compare Source

Patch Changes

  • Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.

    A new gitHosted: true field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.

  • Fix a regression where pnpm --recursive --filter '!<pkg>' run/exec/test/add would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative --filter arguments are provided, matching the documented behavior. To include the root, pass --include-workspace-root #​11341.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx
npm/node-semver (semver)

v7.8.0

Compare Source

Features
Bug Fixes
Documentation
Chores
rolldown/tsdown (tsdown)

v0.22.0

Compare Source

   🚨 Breaking Changes
  • Drop Node.js < 22.18.0 support, make unrun optional, add tsx config loader  -  by @​sxzz (a1042)
  • dts: Auto-enable dts when tsconfig declaration is true  -  by @​sxzz in #​872 (085f0)
  • publint: Use pkg from publint results, require publint v0.3.8+  -  by @​sxzz (413bb)
   🚀 Features
   🐞 Bug Fixes

🔄 Migration Guide

Node.js version

Upgrade to Node.js 22.18.0 or later. Bun and Deno remain supported (experimental).

unrun is no longer bundled

If your environment relies on the unrun config loader (i.e. you're on a Node version without native TypeScript support and use the default auto loader), install it manually:

npm i -D unrun

# or, alternatively, the new tsx loader:
npm i -D tsx

If you use Node.js 22.18.0+ with native TypeScript support, no change is needed — the auto loader will pick native.

dts auto-enabled from tsconfig

If your tsconfig.json has compilerOptions.declaration: true but you do not want tsdown to emit .d.ts files, opt out explicitly:

// tsdown.config.ts
export default defineConfig({
  dts: false,
})
exports.bin auto-detection

Any entry chunk containing a shebang (e.g. #!/usr/bin/env node) now causes tsdown to write a bin field in package.json automatically. The semantics differ slightly from explicit bin: true:

Value Single shebang Multiple shebangs No shebangs
(unset) Auto-set bin Warn, skip Silent
true Auto-set bin Throw Warn
false No bin No bin No bin

To opt out entirely:

export default defineConfig({
  exports: { bin: false },
})
Links
vuejs/core (vue)

v3.5.34

Compare Source

Bug Fixes

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from danielroe as a code owner May 11, 2026 02:45
@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 11, 2026 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedpkg-pr-new@​0.0.711001007097100
Addedofetch@​1.5.17510010083100
Updatedh3@​2.0.1-rc.21 ⏵ 2.0.1-rc.2299 +110087 +196 +180
Updated@​types/​node@​24.12.2 ⏵ 24.12.3100 +110081 +196100
Addednitro@​3.0.1-alpha.298988290100
Addedlisthen@​1.10.09810010087100
Addednypm@​0.6.610010010087100
Addedpkg-types@​2.3.110010010088100
Addednitropack@​2.13.4951008892100
Updatedjiti@​2.6.1 ⏵ 2.7.096100100 +188100
Addedknip@​6.12.2991009596100
Addednuxt@​4.4.59810010096100

View full report

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new Bot commented May 11, 2026 •
edited
Loading

  • nuxt-cli-playground

    npm i https://pkg.pr.new/create-nuxt@1309

    npm i https://pkg.pr.new/nuxi@1309

    npm i https://pkg.pr.new/@nuxt/cli@1309

commit: bc56270

@codspeed-hq
Copy link
Copy Markdown

codspeed-hq Bot commented May 11, 2026 •
edited
Loading

Merging this PR will not alter performance

✅ 2 untouched benchmarks

Comparing renovate/all-minor-patch (bc56270) with main (55c9b63)

Open in CodSpeed

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 11239e0 to f7e0f81 Compare May 11, 2026 07:14
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from f7e0f81 to bc56270 Compare May 11, 2026 07:16
@danielroe danielroe merged commit af9a474 into main May 11, 2026
18 checks passed
@danielroe danielroe deleted the renovate/all-minor-patch branch May 11, 2026 07:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@danielroe danielroe danielroe approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@danielroe