Pin dependencies#10
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
commit: |
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
4 times, most recently
from
April 20, 2026 04:47
496f7e7 to
390c33d
Compare
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
6 times, most recently
from
April 30, 2026 18:42
8103ed1 to
67e186a
Compare
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
3 times, most recently
from
May 10, 2026 08:25
7e6cd53 to
e06f75c
Compare
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
8 times, most recently
from
May 18, 2026 11:09
6f1bf44 to
e85cb07
Compare
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
6 times, most recently
from
May 26, 2026 04:37
6c40403 to
9701722
Compare
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
2 times, most recently
from
June 3, 2026 16:38
60c4652 to
4fe30fe
Compare
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
3 times, most recently
from
June 5, 2026 02:08
8765e92 to
44cbf46
Compare
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
7 times, most recently
from
June 18, 2026 19:01
f5441c8 to
a160109
Compare
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
10 times, most recently
from
July 2, 2026 19:48
0bc9455 to
5aeb9b6
Compare
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
3 times, most recently
from
July 5, 2026 22:37
3518860 to
1807e46
Compare
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
2 times, most recently
from
July 17, 2026 09:04
2fe816e to
8f35c26
Compare
renovate
Bot
force-pushed
the
renovate/routine-updates
branch
from
July 18, 2026 00:57
8f35c26 to
5007d17
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^2.0.0→2.0.0^5.0.0→5.0.0^3.3.1→3.3.39.39.1→9.39.5^24.10.4→24.10.8^19.2.7→19.2.8^19.2.3→19.2.3^5.1.1→5.1.2de0fac2→df4cb1c2028fbc→24997071.38.0→1.42.21.42.30.0.40→0.0.54^7.0.0→7.0.09.39.1→9.39.5^7.37.5→7.37.5^7.0.1→7.0.1^0.4.24→0.4.26^17.0.0→17.0.09.0.0→9.0.2^0.0.60→0.0.603.6.2→3.9.5v2.1.2→v2.2.0^19.2.1→19.2.3^19.2.1→19.2.38.47.0→8.64.07.2.6→7.3.64.0.17→4.1.10v0.5.6→v0.5.7v0.6.0Add the preset
:preserveSemverRangesto your config if you don't want to pin your dependencies.Release Notes
eslint/eslint (@eslint/js)
v9.39.5Compare Source
Bug Fixes
253be16fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)Documentation
74930eddocs: switch build to Node.js 24 (#20894) (Milos Djermanovic)eaec8bbdocs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)Chores
458205fchore: update@eslint/eslintrcand@eslint/jsfor v9.39.5 (#21077) (Francesco Trotta)202117bchore: package.json update for @eslint/js release (Jenkins)d9eb6edtest: disable warning forvm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER(#21074) (Francesco Trotta)7b431a7chore: overridere2dependency for@metascraper/helpers(#21068) (Milos Djermanovic)daf7791chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)daee8baci: use pnpm ineslint-flat-config-utilstype integration test (#20829) (Milos Djermanovic)116d4beci: unpin Node.js 25.x in CI (#20619) (Copilot)v9.39.4Compare Source
Bug Fixes
f18f6c8fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)a3c868ffix: update dependency @eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)234d005fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)b1b37eefix: updateajvto6.14.0to address security vulnerabilities (#20538) (루밀LuMir)Documentation
4675152docs: add deprecation notice partial (#20520) (Milos Djermanovic)Chores
b8b4eb1chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)71b2f6bchore: package.json update for @eslint/js release (Jenkins)1d16c2fci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)v9.39.3Compare Source
Bug Fixes
791bf8dfix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)Chores
8594a43chore: upgrade @eslint/js@9.39.3 (#20529) (Milos Djermanovic)9ceef92chore: package.json update for @eslint/js release (Jenkins)af498c6chore: ignore/docs/v9.xin link checker (#20453) (Milos Djermanovic)v9.39.2Compare Source
Bug Fixes
5705833fix: warn wheneslint-envconfiguration comments are found (#20381) (sethamus)Build Related
506f154build: add .scss files entry to knip (#20391) (Milos Djermanovic)Chores
7ca0af7chore: upgrade to@eslint/js@9.39.2(#20394) (Francesco Trotta)c43ce24chore: package.json update for @eslint/js release (Jenkins)4c9858eci: addv9.x-devbranch (#20382) (Milos Djermanovic)get-convex/convex-backend (convex)
v1.42.2token used in the request by accessing
authTokeninctx.meta.getRequestMetadata().convex/browserthat caused issueswhen using the
ConvexHttpClientin some JavaScriptenvironments.
ConvexProviderWithClerkthat causedthe Convex client to ignore session changes in some situations.
an order consistent with other platforms when running
on Windows.
npx convex devoutside a Convex project,the CLI now returns an error message immediately instead of
first asking the user to select a project and then failing
later.
v1.42.1tsgobinary innewer versions of
@typescript/native-preview.initialAuthTokenReuseoption toConvexReactClientthatprevents extra function calls when users re-authenticate.
v1.42.0npx convex project createcommand that can be usedto create new projects programmatically.
--names-onlyflag tonpx convex env list(and
npx convex env default list). This flag shows the names ofthe env vars that are set, without the values. It can be useful
to let AI coding agents know the variables that are set on a deployment,
without giving them the actual values.
useStaleSnapshotoption to the arguments forrunQuery.This is an advanced feature that can be used to allow mutations
to avoid optimistic concurrency control (OCC) conflicts in some cases
where they can commit even though they depend on conflicting reads.
This change allows us to improve the performance of some of the
official Convex components, including Workpool.
db.*methods to more clearly explainthe difference between the old APIs without table names
(e.g.
db.get(userId)) and the new APIs with table names(e.g.
db.get("users", userId)).correctly when the user or token doesn’t have permission to do something.
scheduledFunctionIdinctx.meta.getRequestMetadata().npx convex insightshas a new--jsonflag that makes the commandoutput easier to parse programmatically.
convex/serveras@deprecated(
FileMetadata,FileStorageId,StorageId). These types are usedonly by file storage APIs that were deprecated in
convex@1.6.0,so we also marked them as
@deprecatedfor clarity.wspeer dependency to avoid a vulnerable range.v1.41.0with the new
transactionLimitsoption inrunQuery/runMutation.npx convex ai-filesnow installs skills with separate copies ofeach skill for each coding agent instead of using symlinks.
We made this change to avoid known issues with symlinks on Windows.
npx convex devnow starts a different dashboard server for eachdeployment. This ensures the dashboard always connects to the
right deployment when multiple deployments are running at the same time.
v1.40.0npx convex deployment create team-slug:project-slug:local.using
npx convex deployment select team-slug:project-slug:local. This command warnswhen it moves the deployment to another project.
such as
npx convex devandnpx convex deploy.<AuthRefreshing />helper component, used to show indicators whenfunction calls are paused because the authentication token is refreshing.
--localand--cloudflags fromnpx convex dev. The behavior of these flagswas misleading when a deployment was already selected. Instead, use
npx convex deployment select localto use a local deployment, andnpx convex deployment select devto use your personal cloud dev deployment.npx convex logs:--tailis now accepted as an alias for the--historyflag.from the Convex cloud project if you don’t have permission to view the default environment
variables instead of crashing.
v1.39.1binentrypoint bug in 1.39.0.v1.39.0defineAppand
defineComponentnow accept anenvobject with string keys and validator values.Declared environment variables must be present and match the validators before deployment.
--local-cloud-port,--local-site-port,--local-backend-versionand--local-force-upgradeoptions tonpx convex devto be used whenever using a local deployment.AsyncLocalStorageandAsyncResourceAPIs fromnode:async_hooksare now availablein the standard Convex runtime. Note that stored values will not be threaded through calls to
ctx.runQuery/ctx.runMutation/ctx.runAction.get-convex/convex-test (convex-test)
v0.0.54Compare Source
transactionLimitsoption on nestedctx.runQuery/ctx.runMutationcalls (Convex 1.41). The nested call is enforced againstits own limits, capped at the global transaction limits so they can only be
lowered, never raised.
nested call's usage folds into its parent only when it commits, so the writes
of a rolled-back nested
ctx.runMutationno longer count against thetransaction's limits.
run one paginated query (
.paginate()). Calling it more than once nowthrows, catching a production-only failure that previously passed silently
in tests.
v0.0.53Compare Source
by always serializing scheduled mutations with the global transaction
manager.
v0.0.52Compare Source
ctx.meta.getDeploymentMetadata().v0.0.51Compare Source
v0.0.50Compare Source
and hit "Cannot read properties of null (reading 'state')".
v0.0.49Compare Source
;and be thestandard length of regular IDs for folks who have validators.
v0.0.48Compare Source
features (ctx.meta.{getFunctionMetadata,getTransactionMetrics})
v0.0.47Compare Source
to prevent corruption when calling different components in parallel.
This may have presented previously as not being able to find modules
that existed but were being resolved for the wrong component.
v0.0.46Compare Source
finishAllScheduledFunctionsto pump the macrotask queue insteadof microtask queue to enable dynamic imports to resolve, which regressed
in 0.0.45.
v0.0.45Compare Source
Now tests shouldn't fail due to dirty state left behind by other tests.
instead of overload so
TestConvex<SpecificSchema>is assignable toTestConvex<GenericSchema>.v0.0.44Compare Source
v0.0.43Compare Source
instead of the ID.
v0.0.41Compare Source
bcomnes/npm-run-all2 (npm-run-all2)
v9.0.2Compare Source
Merged
#232#233#236#234v9.0.1Compare Source
Merged
help.jsto include--node-runoption details#230prettier/prettier (prettier)
v3.9.5Compare Source
diff
Markdown: Cap ordered list mark at 999,999,999 (#19351 by @tats-u)
CommonMark parsers only support ordered list item numbers up to 999,999,999.
With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:
Markdown: Avoid corrupting empty link with title (#19487 by @andersk)
Do not remove
<>from an inline link or image with an empty URL and a title, as this removal would change its interpretation.Less: Remove extra spaces after
[in map lookups (#19503 by @kovsu)CSS: Prevent addition space in
type()with+(#19516 by @bigandy)This fixes the addition space before
+in CSStype()declaration. For exampletype(<number>+)was being converted intotype(<number> +)which is invalid CSS and does not work.Less: Remove spaces between merge markers and colons (#19517 by @kovsu)
Markdown: Preserve wiki links with aliases (#19527 by @kovsu)
TypeScript: Fix comments being dropped on shorthand
typeimport/export specifiers (#19565 by @kirkwaiblinger)Miscellaneous: Preserving comments'
placementproperty (#19567 by @Janther)Prettier@3.9.0 deleted an undocumented property on comments, which was already used by plugins,
comment.placementis now available again after comment attach.Flow: Stop enforcing empty module declaration to break (#19568 by @fisker)
Angular: Support expression for exhaustive typechecking (#19571 by @fisker)
TypeScript: Ignore comments inside mapped type when checking type parameter comments (#19572 by @fisker)
Less: Fix adjacent block comments being corrupted (#19574 by @kovsu)
JavaScript: Handle dangling comments in
SwitchStatement(#19581 by @fisker)TypeScript: Remove space in comment-only object type (#19583 by @fisker)
v3.9.4Compare Source
v3.9.3Compare Source
v3.9.2Compare Source
v3.9.1Compare Source
v3.9.0Compare Source
diff
🔗 Release Notes
v3.8.5Compare Source
v3.8.4Compare Source
diff
Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (#17746 by @byplayer)
Prettier was removing blank lines between list items and their nested sub-lists, converting loose lists into tight lists and changing their semantic meaning.
v3.8.3Compare Source
diff
SCSS: Prevent trailing comma in
if()function (#18471 by @kovsu)v3.8.2Compare Source
diff
Angular: Support Angular v21.2 (#18722, #19034 by @fisker)
Exhaustive typechecking with
@default never;arrow functionandinstanceofexpressions.v3.8.1Compare Source
diff
Include available
printersin plugin type declarations (#18706 by @porada)v3.8.0Compare Source
diff
🔗 Release Notes
v3.7.4Compare Source
diff
LWC: Avoid quote around interpolations (#18383 by @kovsu)
TypeScript: Fix comment inside union type gets duplicated (#18393 by @fisker)
TypeScript: Fix unstable comment print in union type comments (#18395 by @fisker)
v3.7.3Compare Source
diff
API: Fix
prettier.getFileInfo()change that breaks VSCode extension (#18375 by @fisker)An internal refactor accidentally broke the VSCode extension plugin loading.
v3.7.2Compare Source
diff
JavaScript: Fix string print when switching quotes (#18351 by @fisker)
JavaScript: Preserve quote for embedded HTML attribute values (#18352 by @kovsu)
TypeScript: Fix comment in empty type literal (#18364 by @fisker)
v3.7.1Compare Source
diff
API: Fix performance regression in doc printer (#18342 by @fisker)
Prettier 3.7.0 can be very slow when formatting big files, the regression has been fixed.
v3.7.0Compare Source
diff
🔗 Release Notes
raven-actions/actionlint (raven-actions/actionlint)
v2.2.0Compare Source
🔄️ What's Changed
🚀 Features
👥 Contributors
@DariuszPorowski, @dependabot[bot] and dependabot[bot]
See details of all code changes: raven-actions/actionlint@v2.1.2...v2.2.0 since previous release.
typescript-eslint/typescript-eslint (typescript-eslint)
v8.64.0Compare Source
8.64.0 (2026-07-13)
🚀 Features
import defer(#12513)using/await usingdeclarations and deprecate the rule (#12500)🩹 Fixes
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.63.0Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.62.1Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.62.0Compare Source
🚀 Features
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.61.1Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.61.0Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.60.1Compare Source
This was a version bump only for typescript-eslint to align it with other projects, th
Configuration
📅 Schedule: (in timezone America/Los_Angeles)
* * * * 1-5)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.