fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #897 · kane50613/takumi

renovate · 2026-07-03T17:00:27Z

This PR contains the following updates:

Package	Change	Type	Update
@napi-rs/cli (source)	`3.7.4` → `3.8.1`	devDependencies	minor
actions/checkout	`v7.0.0` → `v7.0.1`	action	patch
base64	`0.22` → `0.23`	workspace.dependencies	minor
napi	`3.11.0` → `3.12.0`	workspace.dependencies	minor
napi-build	`2.3.2` → `2.4.0`	workspace.dependencies	minor
napi-derive	`3.6.0` → `3.6.1`	workspace.dependencies	patch
next (source)	`16.2.11` → `16.2.12`	dependencies	patch
oxfmt (source)	`^0.60.0` → `^0.61.0`	devDependencies	minor
phf	`0.13` → `0.14`	workspace.dependencies	minor
rolldown-plugin-dts	`0.27.6` → `0.28.0`	overrides	minor
skrifa	`0.43` → `0.45`	workspace.dependencies	minor
strict-num	`0.1` → `0.2`	workspace.dependencies	minor
taffy	`0.11` → `0.12`	workspace.dependencies	minor
taiki-e/install-action	`v2.84.0` → `v2.85.5`	action	minor
vite (source)	`8.1.5` → `8.2.0`	overrides	minor

Release Notes

napi-rs/napi-rs (@napi-rs/cli)

`v3.8.1`

Compare Source

`v3.8.0`

Compare Source

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

marshallpierce/rust-base64 (base64)

`v0.23.0`

Compare Source

Added more consts for preconfigured configs and engines
Make DecodeError::InvalidLastSymbol more clear by including the decoded value
Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
detection and work in no_std. The engines support the standard and URL-safe alphabets.
Update MSRV to 1.71.0
Add support for custom padding symbols

vercel/next.js (next)

`v16.2.12`

Compare Source

oxc-project/oxc (oxfmt)

`v0.61.0`

Compare Source

rust-phf/rust-phf (phf)

`v0.14.0`

Compare Source

What's Changed

chore: setup cargo-deny by @JohnTitor in #355
chore(deps): update embarkstudios/cargo-deny-action action to v2.0.15 by @renovate[bot] in #363
chore(deps): update actions/checkout action to v5.0.1 by @renovate[bot] in #360
chore(deps): update benchmark-action/github-action-benchmark action to v1.20.7 by @renovate[bot] in #361
chore(deps): update rust crate siphasher to v1.0.2 by @renovate[bot] in #366
chore(*): bump MSRV to 1.68 by @JohnTitor in #367
chore(deps): update rust crate quote to v1.0.44 by @renovate[bot] in #365
chore(deps): update rust crate proc-macro2 to v1.0.106 by @renovate[bot] in #364
chore(deps): update rust crate trybuild to v1.0.114 by @renovate[bot] in #369
chore(deps): update rust crate syn to v2.0.114 by @renovate[bot] in #368
chore(deps): update rust crate criterion to 0.8.0 by @renovate[bot] in #370
chore(deps): update rust crate unicase to v2.9.0 by @renovate[bot] in #371
chore(deps): update swatinem/rust-cache action to v2.8.2 by @renovate[bot] in #373
chore(deps): update actions/checkout action to v6 by @renovate[bot] in #374
chore(deps): update rust crate trybuild to v1.0.115 by @renovate[bot] in #375
chore(deps): update rust crate criterion to v0.8.2 by @renovate[bot] in #376
chore(deps): update rust crate trybuild to v1.0.116 by @renovate[bot] in #378
chore(deps): update rust crate syn to v2.0.115 by @renovate[bot] in #377
chore(deps): update rust crate syn to v2.0.116 by @renovate[bot] in #379
chore(deps): update rust crate syn to v2.0.117 by @renovate[bot] in #380
chore(deps): update rust crate quote to v1.0.45 by @renovate[bot] in #382
chore(deps): update benchmark-action/github-action-benchmark action to v1.21.0 by @renovate[bot] in #381
chore(deps): update swatinem/rust-cache action to v2.9.0 by @renovate[bot] in #383
chore(deps): update swatinem/rust-cache action to v2.9.1 by @renovate[bot] in #384
chore(deps): update benchmark-action/github-action-benchmark action to v1.22.0 by @renovate[bot] in #386
chore(deps): update rust crate fastrand to v2.4.0 by @renovate[bot] in #387
chore(deps): update rust crate fastrand to v2.4.1 by @renovate[bot] in #388
Remove outdated link from docs by @purplesyringa in #389
feat: add experimental ptrhash feature by @JohnTitor in #392
Fix map contents when all #[cfg]s are disabled by @purplesyringa in #393
Update minimal required unicase version to 2.8.1 by @purplesyringa in #397
chore(deps): update embarkstudios/cargo-deny-action action to v2.0.16 by @renovate[bot] in #399
chore(deps): update embarkstudios/cargo-deny-action action to v2.0.17 by @renovate[bot] in #400
docs: add security policy by @JohnTitor in #401
Treat #[cfg] on entry as applying to the entire OR pattern by @purplesyringa in #391
Fix portable PHF hashing for slices and pointer-sized integers by @purplesyringa in #396
chore(generator): use fill when resetting generator buffers by @JohnTitor in #402
chore: use zizmor to harden GHA usage by @JohnTitor in #404
chore(deps): update rust crate siphasher to v1.0.3 by @renovate[bot] in #405
chore(deps): update benchmark-action/github-action-benchmark action to v1.22.1 by @renovate[bot] in #406
Resolve #[cfg] via decl macros instead of generating combinations by @purplesyringa in #403
perf(generator): reduce generation time by @JohnTitor in #407
chore(deps): update embarkstudios/cargo-deny-action action to v2.0.18 by @renovate[bot] in #408
chore(deps): update zizmorcore/zizmor-action action to v0.5.4 by @renovate[bot] in #409
chore(renovate): group zizmor updates by @JohnTitor in #411
chore(deps): update ghcr.io/zizmorcore/zizmor docker tag to v1.25.0 by @renovate[bot] in #412
chore(deps): update zizmor by @renovate[bot] in #413
feat: add support for ToTokens by @JohnTitor in #414
feat: migrate to 2024 edition by @JohnTitor in #415
feat: add FmtConst support for Vec/slice keys by @JohnTitor in #416
chore(deps): update embarkstudios/cargo-deny-action action to v2.0.19 by @renovate[bot] in #417
chore(deps): update embarkstudios/cargo-deny-action action to v2.0.20 by @renovate[bot] in #418
fix: require suffixed int on parsing by @JohnTitor in #419
fix: implement PhfEq to address tuple lifetime issue by @JohnTitor in #420
chore(deps): update actions/checkout action to v6.0.3 by @renovate[bot] in #421
chore(deps): update rust crate syn to v2.0.118 by @renovate[bot] in #422
chore(deps): update actions/checkout action to v7 by @renovate[bot] in #423
Prepare 0.14.0 release by @JohnTitor in #424

New Contributors

@purplesyringa made their first contribution in #389

Full Changelog: rust-phf/rust-phf@v0.13.1...v0.14.0

sxzz/rolldown-plugin-dts (rolldown-plugin-dts)

`v0.28.0`

Compare Source

🚨 Breaking Changes

Make generator the only way to select the generator - by @sxzz (6323a)
Require rolldown 1.2.x - by @sxzz (6af01)
Require Node.js `^22.18.0 - ()
Drop types field - by @sxzz (a3ed2)

View changes on GitHub

`v0.27.14`

Compare Source

🚨 Breaking Changes

Rework volarPlugins into customLanguages - by @sxzz (e9ffc)

View changes on GitHub

`v0.27.13`

Compare Source

🚀 Features

Optional volar proxyCreateProgram - by @sxzz (08da9)

View changes on GitHub

`v0.27.12`

Compare Source

No significant changes

View changes on GitHub

`v0.27.11`

Compare Source

🐞 Bug Fixes

Move @astrojs/ts-plugin to devDependencies - by @sxzz (0a4f7)

View changes on GitHub

`v0.27.10`

Compare Source

🚀 Features

Support volar plugin - by @sxzz (15795)
Support multiple volar plugins - by @sxzz (7cb4e)

View changes on GitHub

`v0.27.9`

Compare Source

🐞 Bug Fixes

Validate options closes #276 - by @sxzz in #276 (18ef4)
Allow TypeScript ~7.0 only - by @sxzz (71e6c)

View changes on GitHub

`v0.27.8`

Compare Source

🚀 Features

Add logger option, outout tsgo version - by @sxzz (7936f)

View changes on GitHub

`v0.27.7`

Compare Source

No significant changes

View changes on GitHub

googlefonts/fontations (skrifa)

RazrFalcon/strict-num (strict-num)

`v0.2.0`

Added

serde support.
Thanks to @Banyc.

Changed

MSRV bumped from 1.35 to 1.56
Rust edition is bumped from 2018 to 2021.

DioxusLabs/taffy (taffy)

`v0.12.2`

Compare Source

Fixed

Block: return margin-collapsing outputs from vertical axis ComputeSize calls (#976)

`v0.12.1`

Compare Source

This release container a couple of critical fixes for layout/caching bugs in the 0.12.0 release.

Fixed

Block: don't commit deferred in-flow layouts to the tree when only computing size (#971)
Block: pass through the requested run_mode when performing final layout on in-flow children, instead of always using MeasureSize (#972)

`v0.12.0`

Compare Source

The MSRV for this release is 1.71.

Block: support for `align-content` (#959)

Block containers now implement align_content along the block axis for their in-flow children.

More correct caching logic

The cache key now includes the axis, parent size, and available space, and ignores available space in an axis when a known dimension is set there. This is a performance hit (~10% in common cases, ~60% in pathalogically ones) but is necessary for correctness. It does also enable early-return optimizations (in cases where only the horizontal size is needed, which can allow that performance to be recouped in some cases (#911)

Fixed

Flexbox: fall back to safe align-self of start on absolute-position overflow (#958)
Block: derive definite height from aspect-ratio at final layout. A block container with aspect-ratio and an automatic height now becomes definite when its width is filled/stretched, so children's percentage heights resolve correctly and the ratio is preserved (#965)

taiki-e/install-action (taiki-e/install-action)

`v2.85.5`

Compare Source

`v2.85.4`: 2.85.4

Compare Source

Update uv@latest to 0.11.33.
Update mise@latest to 2026.7.15.
Update biome@latest to 2.5.6.

`v2.85.3`: 2.85.3

Compare Source

Update xh@latest to 0.26.2.
Update ubi@latest to 0.10.0.
Update mise@latest to 2026.7.14.
Update martin@latest to 1.13.0.
Update cargo-shear@latest to 1.13.3.
Update cargo-binstall@latest to 1.21.1.

`v2.85.2`: 2.85.2

Compare Source

Update prek@latest to 0.4.11.
Update mise@latest to 2026.7.13.
Update kingfisher@latest to 1.109.0.

`v2.85.1`: 2.85.1

Compare Source

Update vacuum@latest to 0.30.0.
Update uv@latest to 0.11.32.
Update mise@latest to 2026.7.12.
Update cyclonedx@latest to 0.33.1.
Update cargo-neat@latest to 0.5.2.

`v2.85.0`: 2.85.0

Compare Source

Support wild (alias: wild-linker). (#1949)
Support bpf-linker. (#1950)
Support rafn. (#1935, thanks @DarkWanderer)
Update cargo-neat@latest to 0.5.1.
Update zizmor@latest to 1.28.0.
Update wasmtime@latest to 47.0.2.
Update uv@latest to 0.11.31.
Update syft@latest to 1.49.0.

`v2.84.1`: 2.84.1

Compare Source

Update wasmtime@latest to 47.0.1.
Update wasm-tools@latest to 1.254.0.
Update uv@latest to 0.11.30.
Update mise@latest to 2026.7.11.
Update cargo-neat@latest to 0.5.0.
Update cargo-crap@latest to 0.3.1.
Update biome@latest to 2.5.5.

vitejs/vite (vite)

`v8.2.0`

Compare Source

Features

add input to server.fs.allow (#23035) (95a3cda)
bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
config: include column in config incompatibility location (#23064) (8a24572)
dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
deps: update all non-major dependencies (#23069) (4c07b74)
hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)
module-runner: keep stack trace interception working when Object.prototype is frozen (#23073) (599c5b0)
server: strip base in indexHtml module graph lookup (#22932) (fa005d1)
support resolving top-level input option with plugins (#23101) (41df81a)

Documentation

config: correct cacheDir default fallback description (#23060) (aafa103)

Tests

config CJS module vars in ESM case (#23010) (d8cd388)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-07-29T18:48:22Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
npm/next@16.2.11 ⏵ 16.2.12		⁺¹
cargo/napi@3.11.0 ⏵ 3.12.0
npm/vite@8.1.5 ⏵ 8.2.0	⁺¹	⁺¹
cargo/taffy@0.11.0 ⏵ 0.12.2
npm/oxfmt@0.60.0 ⏵ 0.61.0		⁺¹
cargo/base64@0.23.0
cargo/phf@0.14.0
cargo/strict-num@0.2.0
cargo/napi-build@2.3.2 ⏵ 2.4.0
cargo/napi-derive@3.6.0 ⏵ 3.6.1
npm/@napi-rs/cli@3.7.4 ⏵ 3.8.1	⁺⁹	⁺⁹	⁺¹
cargo/skrifa@0.45.1

View full report

renovate Bot added the dependencies label Jul 3, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 4bdc5a0 to 96bdab6 Compare July 4, 2026 13:40

renovate Bot changed the title ~~Update all non-major dependencies~~ Update Rust crate skrifa to 0.44 Jul 4, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch from 96bdab6 to cd34efa Compare July 4, 2026 17:16

renovate Bot changed the title ~~Update Rust crate skrifa to 0.44~~ Update all non-major dependencies Jul 4, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch from cd34efa to 7efb4b9 Compare July 4, 2026 22:41

renovate Bot changed the title ~~Update all non-major dependencies~~ chore(deps): update all non-major dependencies Jul 6, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch from 7efb4b9 to 84d7702 Compare July 7, 2026 03:32

renovate Bot changed the title ~~chore(deps): update all non-major dependencies~~ Update all non-major dependencies Jul 7, 2026

renovate Bot changed the title ~~Update all non-major dependencies~~ chore(deps): update all non-major dependencies Jul 7, 2026

renovate Bot changed the title ~~chore(deps): update all non-major dependencies~~ Update all non-major dependencies Jul 8, 2026

renovate Bot changed the title ~~Update all non-major dependencies~~ chore(deps): update all non-major dependencies Jul 8, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch from 84d7702 to 515a4ab Compare July 8, 2026 16:26

renovate Bot changed the title ~~chore(deps): update all non-major dependencies~~ Update all non-major dependencies Jul 9, 2026

renovate Bot changed the title ~~Update all non-major dependencies~~ chore(deps): update all non-major dependencies Jul 9, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from 8ae6082 to 6c4ee78 Compare July 16, 2026 07:31

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 9882ba5 to d67807c Compare July 20, 2026 16:07

renovate Bot requested a review from kane50613 as a code owner July 20, 2026 16:07

renovate Bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 8d50eaf to 5117762 Compare July 24, 2026 19:51

renovate Bot changed the title ~~fix(deps): update all non-major dependencies~~ chore(deps): update all non-major dependencies Jul 24, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from c01b1da to 72a5905 Compare July 25, 2026 22:17

renovate Bot changed the title ~~chore(deps): update all non-major dependencies~~ fix(deps): update all non-major dependencies Jul 25, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 42ed028 to 160ab03 Compare July 29, 2026 18:47

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from c960cfa to 7252968 Compare July 30, 2026 07:59

fix(deps): update all non-major dependencies

8ec317f

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all non-major dependencies - #897

fix(deps): update all non-major dependencies#897
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-minor-patch

renovate Bot commented Jul 3, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 29, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jul 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

🚨 Breaking Changes

🚨 Breaking Changes

🚀 Features

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🚀 Features

Added

Changed

Fixed

Fixed

Block: support for align-content (#​959)

More correct caching logic

Fixed

v2.85.4: 2.85.4

v2.85.3: 2.85.3

v2.85.2: 2.85.2

v2.85.1: 2.85.1

v2.85.0: 2.85.0

v2.84.1: 2.84.1

Features

Bug Fixes

Documentation

Tests

Configuration

Uh oh!

socket-security Bot commented Jul 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 3, 2026 •

edited

Loading

Block: support for `align-content` (#959)

`v2.85.4`: 2.85.4

`v2.85.3`: 2.85.3

`v2.85.2`: 2.85.2

`v2.85.1`: 2.85.1

`v2.85.0`: 2.85.0

`v2.84.1`: 2.84.1

socket-security Bot commented Jul 29, 2026 •

edited

Loading