Skip to content

chore(deps): update all non-major dependencies - #214

Merged
beeequeue merged 1 commit into
mainfrom
renovate/all-minor-patch
Feb 6, 2026
Merged

chore(deps): update all non-major dependencies#214
beeequeue merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented May 1, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@changesets/changelog-github (source) 0.5.1 → 0.5.2 age confidence devDependencies patch
@changesets/cli (source) 2.28.1 → 2.29.8 age confidence devDependencies minor
@tsconfig/node18 (source) 18.2.4 → 18.2.6 age confidence devDependencies patch
@types/aws-lambda (source) 8.10.148 → 8.10.160 age confidence devDependencies patch
@types/node (source) 22.13.14 → 22.19.9 age confidence devDependencies minor
@vitest/coverage-v8 (source) 3.1.1 → 3.2.4 age confidence devDependencies minor
dotenv 16.4.7 → 16.6.1 age confidence devDependencies minor
nanoid 5.1.5 → 5.1.6 age confidence devDependencies patch
node 22.14.0 → 22.22.0 age confidence uses-with minor
pnpm (source) 10.7.0 → 10.28.2 age confidence packageManager minor
prettier (source) 4.0.0-alpha.12 → 4.0.0-alpha.13 age confidence devDependencies patch
simple-git-hooks 2.12.1 → 2.13.1 age confidence devDependencies minor
tsup (source) 8.4.0 → 8.5.1 age confidence devDependencies minor
typescript (source) 5.8.2 → 5.9.3 age confidence devDependencies minor
vitest (source) 3.1.1 → 3.2.4 age confidence devDependencies minor

Release Notes

changesets/changesets (@​changesets/changelog-github)

v0.5.2

Compare Source

tsconfig/bases (@​tsconfig/node18)

v18.2.6

Compare Source

v18.2.5

Compare Source

vitest-dev/vitest (@​vitest/coverage-v8)

v3.2.4

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.2.3

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.2.2

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.2.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.2.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.1.4

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.1.3

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.1.2

Compare Source

   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub
motdotla/dotenv (dotenv)

v16.6.1

Compare Source

Changed
  • Default quiet to true – hiding the runtime log message (#​874)
  • NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
  • And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@​dotenvx/dotenvx').config().

v16.6.0

Compare Source

Added
  • Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#​870)
  • Use { quiet: true } to suppress
  • Aligns dotenv more closely with dotenvx.

v16.5.0

Compare Source

Added
  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP]
Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM.
Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed
  • Remove _log method. Use _debug #​862
ai/nanoid (nanoid)

v5.1.6

Compare Source

  • Fixed infinite loop on 0 size for customAlphabet.
actions/node-versions (node)

v22.22.0: 22.22.0

Compare Source

Node.js 22.22.0

v22.21.1: 22.21.1

Compare Source

Node.js 22.21.1

v22.21.0: 22.21.0

Compare Source

Node.js 22.21.0

v22.20.0: 22.20.0

Compare Source

Node.js 22.20.0

v22.19.0: 22.19.0

Compare Source

Node.js 22.19.0

v22.18.0: 22.18.0

Compare Source

Node.js 22.18.0

v22.17.1: 22.17.1

Compare Source

Node.js 22.17.1

v22.17.0: 22.17.0

Compare Source

Node.js 22.17.0

v22.16.0: 22.16.0

Compare Source

Node.js 22.16.0

v22.15.1: 22.15.1

Compare Source

Node.js 22.15.1

v22.15.0: 22.15.0

Compare Source

Node.js 22.15.0

pnpm/pnpm (pnpm)

v10.28.2: pnpm 10.28.2

Compare Source

Patch Changes

  • Security fix: prevent path traversal in directories.bin field.

  • When pnpm installs a file: or git: dependency, it now validates that symlinks point within the package directory. Symlinks to paths outside the package root are skipped to prevent local data from being leaked into node_modules.

    This fixes a security issue where a malicious package could create symlinks to sensitive files (e.g., /etc/passwd, ~/.ssh/id_rsa) and have their contents copied when the package is installed.

    Note: This only affects file: and git: dependencies. Registry packages (npm) have symlinks stripped during publish and are not affected.

  • Fixed optional dependencies to request full metadata from the registry to get the libc field, which is required for proper platform compatibility checks #​9950.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.28.1

Compare Source

v10.28.0

Compare Source

v10.27.0

Compare Source

v10.26.2: pnpm 10.26.2

Compare Source

Patch Changes

  • Improve error message when a package version exists but does not meet the minimumReleaseAge constraint. The error now clearly states that the version exists and shows a human-readable time since release (e.g., "released 6 hours ago") #​10307.

  • Fix installation of Git dependencies using annotated tags #​10335.

    Previously, pnpm would store the annotated tag object's SHA in the lockfile instead of the actual commit SHA. This caused ERR_PNPM_GIT_CHECKOUT_FAILED errors because the checked-out commit hash didn't match the stored tag object hash.

  • Binaries of runtime engines (Node.js, Deno, Bun) are written to node_modules/.bin before lifecycle scripts (install, postinstall, prepare) are executed #​10244.

  • Try to avoid making network calls with preferOffline #​10334.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.26.1: pnpm 10.26.1

Compare Source

Patch Changes

  • Don't fail on pnpm add, when blockExoticSubdeps is set to true #​10324.
  • Always resolve git references to full commits and ensure HEAD points to the commit after checkout #​10310.

Platinum Sponsors

Bit

Gold Sponsors

Discord config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label May 1, 2025
@codecov

codecov Bot commented May 1, 2025 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.69%. Comparing base (b6239a5) to head (96de91d).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #214   +/-   ##
=======================================
  Coverage   71.69%   71.69%           
=======================================
  Files           1        1           
  Lines          53       53           
  Branches        6        6           
=======================================
  Hits           38       38           
  Misses         15       15

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 05100a2 to 3222c08 Compare May 8, 2025 15:53
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 4596cf1 to dbf686d Compare May 19, 2025 02:38
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 4b04438 to 148c673 Compare May 22, 2025 08:51
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 68c615b to 03cfbed Compare June 3, 2025 18:22
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from c821b37 to 9eb0467 Compare July 1, 2025 22:02
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from a96dd9d to f37fda2 Compare July 15, 2025 07:28
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 500ba45 to 8174cf0 Compare July 19, 2025 10:41
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from d3d7e39 to 9885e37 Compare August 1, 2025 05:57
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from d899164 to ad42f14 Compare August 15, 2025 09:50
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from f9e2389 to 19cd1a9 Compare August 19, 2025 18:04
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from e9391c7 to 4fc4f2d Compare August 31, 2025 10:42
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 13264c7 to 098e008 Compare September 9, 2025 13:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@beeequeue