chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #2258 · stacksjs/ts-inputs

renovate · 2026-03-14T12:21:51Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@microsoft/api-extractor (source)	`^7.52.15` → `^7.57.7`	devDependencies	minor
@vue/tsconfig	`^0.8.1` → `^0.9.0`	devDependencies	minor
actions/checkout	`v6.0.1` → `v6.0.2`	action	patch
actions/checkout	`v5.0.0` → `v5.0.1`	action	patch
bumpp	`^10.2.3` → `^10.4.1`	devDependencies	minor
bun-plugin-dtsx (source)	`^0.21.12` → `^0.21.17`	devDependencies	patch
bunfig	`^0.15.0` → `^0.15.6`	devDependencies	patch
lint-staged	`^16.2.3` → `^16.4.0`	devDependencies	minor
oven-sh/setup-bun	`v2.0.2` → `v2.2.0`	action	minor
shivammathur/setup-php	`2.35.5` → `2.36.0`	action	minor
vue (source)	`^3.5.22` → `^3.5.30`	peerDependencies	patch

Release Notes

microsoft/rushstack (@microsoft/api-extractor)

`v7.57.7`

Compare Source

Mon, 09 Mar 2026 15:14:07 GMT

Patches

Bump minimatch version from 10.2.1 to 10.2.3 to address CVE-2026-27903.

`v7.57.6`

Compare Source

Wed, 25 Feb 2026 21:39:42 GMT

Patches

Bump @microsoft/tsdoc-config to ~0.18.1 to mitigate CVE-2025-69873.

`v7.57.5`

Compare Source

Wed, 25 Feb 2026 00:34:29 GMT

Version update only

`v7.57.4`

Compare Source

Tue, 24 Feb 2026 01:13:27 GMT

Version update only

`v7.57.3`

Compare Source

Mon, 23 Feb 2026 00:42:21 GMT

Patches

Add missing "./extends/*.json" to the package.json "exports" field so that "@microsoft/api-extractor/extends/tsdoc-base.json" is importable.

`v7.57.2`

Compare Source

Fri, 20 Feb 2026 16:14:49 GMT

Patches

Bump minimatch from 10.1.2 to 10.2.1

`v7.57.1`

Compare Source

Fri, 20 Feb 2026 00:15:03 GMT

Patches

Add "node" condition before "import" in the "exports" map so that Node.js uses the CJS output (which handles extensionless imports), while bundlers still use ESM via "import". Fixes #5644.

`v7.57.0`

Compare Source

Thu, 19 Feb 2026 00:04:52 GMT

Minor changes

Normalize package layout. CommonJS is now under lib-commonjs, DTS is now under lib-dts, and ESM is now under lib-esm. Imports to lib still work as before, handled by the "exports" field in package.json.

`v7.56.3`

Compare Source

Sat, 07 Feb 2026 01:13:26 GMT

Patches

Upgrade lodash dependency from ~4.17.15 to ~4.17.23.

`v7.56.2`

Compare Source

Wed, 04 Feb 2026 20:42:47 GMT

Patches

Update minimatch dependency from 10.0.3 to 10.1.2

`v7.56.1`

Compare Source

Wed, 04 Feb 2026 16:13:27 GMT

Version update only

`v7.56.0`

Compare Source

Fri, 30 Jan 2026 01:16:12 GMT

Minor changes

Fix an issue where destructured parameters produced an incorrect parameter name

`v7.55.5`

Compare Source

Thu, 08 Jan 2026 01:12:30 GMT

Patches

Fix missing 'export' keyword for namespace re-exports that produced invalid TypeScript output

`v7.55.2`

Compare Source

Sat, 06 Dec 2025 01:12:28 GMT

Version update only

`v7.55.1`

Compare Source

Fri, 21 Nov 2025 16:13:56 GMT

Version update only

`v7.55.0`

Compare Source

Wed, 12 Nov 2025 01:12:56 GMT

Minor changes

Bump the @microsoft/tsdoc dependency to ~0.16.0.
Bump the @microsoft/tsdoc-config dependency to ~0.18.0.

`v7.54.0`

Compare Source

Tue, 04 Nov 2025 08:15:14 GMT

Minor changes

Add a new setting IExtractorInvokeOptions.printApiReportDiff that makes build logs easier to diagnose by printing a diff of any changes to API report files (*.api.md).
Add a --print-api-report-diff CLI flag that causes a diff of any changes to API report files (*.api.md) to be printed.

`v7.53.3`

Compare Source

Fri, 24 Oct 2025 00:13:38 GMT

Version update only

`v7.53.2`

Compare Source

Wed, 22 Oct 2025 00:57:54 GMT

Version update only

`v7.53.1`

Compare Source

Wed, 08 Oct 2025 00:13:28 GMT

Version update only

`v7.53.0`

Compare Source

Fri, 03 Oct 2025 20:09:59 GMT

Minor changes

Normalize import of builtin modules to use the node: protocol.

vuejs/tsconfig (@vue/tsconfig)

`v0.9.0`

Compare Source

Noticeable Changes

feat: update lib to ES2022 by @Slessi in #41
chore: move noUncheckedIndexedAccess from base config to the lib config [fa4423b]
- This is because noUncheckedIndexedAccess may have false positives, making it hard for existing codebases to upgrade.
- But for new codebases, it’s still recommended to enable this flag from the beginning.

New Contributors

@Slessi made their first contribution in #41

Full Changelog: vuejs/tsconfig@v0.8.1...v0.9.0

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

antfu-collective/bumpp (bumpp)

`v10.4.1`

Compare Source

🚀 Features

Add custom path to config - by @OskarLebuda in #107 (0f2e4)

View changes on GitHub

`v10.4.0`

Compare Source

No significant changes

View changes on GitHub

`v10.3.2`

Compare Source

🐞 Bug Fixes

Resolve the options in config file correctly - by @liangmiQwQ in #101 (f5887)

View changes on GitHub

`v10.3.1`

Compare Source

No significant changes

View changes on GitHub

`v10.3.0`

Compare Source

🚀 Features

Support --release for release type - by @luoling8192 in #97 (5af7b)

View changes on GitHub

stacksjs/bunfig (bunfig)

`v0.15.6`

Compare Source

No significant changes

View changes on GitHub

`v0.15.5`

Compare Source

No significant changes

View changes on GitHub

`v0.15.4`

Compare Source

No significant changes

View changes on GitHub

`v0.15.3`

Compare Source

No significant changes

View changes on GitHub

`v0.15.2`

Compare Source

No significant changes

View changes on GitHub

`v0.15.1`

Compare Source

No significant changes

View changes on GitHub

lint-staged/lint-staged (lint-staged)

`v16.4.0`

Compare Source

Minor Changes

#1739 687fc90 Thanks @hyperz111! - Replace micromatch with picomatch to reduce dependencies.

`v16.3.4`

Compare Source

Patch Changes

#1742 9d6e827 Thanks @iiroj! - Update dependencies, including tinyexec@1.0.4 to make sure local node_modules/.bin are preferred to global locations (released in tinyexec@1.0.3).

`v16.3.3`

Compare Source

Patch Changes

#1740 0109e8d Thanks @iiroj! - Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash.

`v16.3.2`

Compare Source

Patch Changes

#1735 2adaf6c Thanks @iiroj! - Hide the extra cmd window on Windows by spawning tasks without the detached option.

`v16.3.1`

Compare Source

Patch Changes

#1729 cd5d762 Thanks @iiroj! - Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.

`v16.3.0`

Compare Source

Minor Changes

#1698 feda37a Thanks @iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.
#1699 1346d16 Thanks @iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes

#1726 87467aa Thanks @iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.

`v16.2.7`

Compare Source

Patch Changes

#1711 ef74c8d Thanks @iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.

`v16.2.6`

Compare Source

Patch Changes

#1693 33d4502 Thanks @Adrian-Baran-GY! - Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

`v16.2.5`

Compare Source

Patch Changes

#1687 9e02d9d Thanks @iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

`v16.2.4`

Compare Source

Patch Changes

#1682 0176038 Thanks @iiroj! - Update dependencies, including nano-spawn@2.0.0 with bug fixes.
#1671 581a54e Thanks @iiroj! - Speed up execution by only importing the yaml depedency if using YAML configuration files.

oven-sh/setup-bun (oven-sh/setup-bun)

`v2.2.0`

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

build: update action runtime to Node.js 24 by @adam0white in #176
ci: use actions/checkout@v6.0.2 in the test workflow by @tcely in #173
ci: update actions for the autofix.ci workflow by @tcely in #174
ci: update actions for the Release new action version workflow by @tcely in #175
release: v2.2.0 by @xhyrom in #177

New Contributors

@adam0white made their first contribution in #176
@tcely made their first contribution in #173

Full Changelog: oven-sh/setup-bun@v2...v2.2.0

`v2.1.3`

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

perf: avoid unnecessary api calls by @xhyrom in #161
feat: add bun- prefix to cache keys by @maschwenk in #160
fix: use native Windows ARM64 binary for Bun >= 1.3.10 by @oddrationale in #165
feat: add AVX2 support detection for x64 Linux systems by @GoForceX in #167
fix: validate cached binary version matches requested version (#146) by @wyMinLwin in #169
release: v2.1.3 by @xhyrom in #170

New Contributors

@oddrationale made their first contribution in #165
@GoForceX made their first contribution in #167
@wyMinLwin made their first contribution in #169

Full Changelog: oven-sh/setup-bun@v2...v2.1.3

`v2.1.2`

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

fix: default token only on public github instance by @xhyrom in #157

Full Changelog: oven-sh/setup-bun@v2...v2.1.2

`v2.1.1`

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

feat: implement wildcard resolution into the action by @xhyrom in #93
feat: fallback arm64 to x64 architecture for win32 platform by @xhyrom in #131
feat: use packageManager from package.json as default bun version by @xhyrom in #152
bump the form-data dependency to version v4.0.5 due to GHSA-fjxv-7rqg-78g4 by @Jarred-Sumner

Full Changelog: oven-sh/setup-bun@v2.1.0...v2.1.1

`v2.1.0`

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

chore: add settings for vscode by @okineadev in #120
feat: support for multiple registries by @xhyrom in #109
feat: read engines from package json by @xhyrom in #132
ci: disable tests with version selectors by @xhyrom in #133
chore(ci): Pin GitHub Actions to SHA-1s by @dgilmanuni in #140
feat: Check for existing bun before downloading by @erikaxel in #138
docs: restore missing no-cache input by @bashonly in #149
release: v2.1.0 by @xhyrom in #151

New Contributors

@dgilmanuni made their first contribution in #140
@erikaxel made their first contribution in #138
@bashonly made their first contribution in #149

Full Changelog: oven-sh/setup-bun@v2...v2.1.0

shivammathur/setup-php (shivammathur/setup-php)

`v2.36.0`

Compare Source

Changelog

Added support for PHP 8.5 stable release.

- name: Setup PHP 8.5 (stable)
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'

Added support for PHP 8.6.0-dev. Specifying 8.6 in the php-version input should now set up a nightly build from the master branch of php-src. (#1002)

- name: Setup PHP 8.6.0-dev
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.6'

Added support for pdo_ibm and ibm_db2 extensions.

- name: Setup PHP with pdo_ibm and ibm_db2 extensions
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    extensions: pdo_ibm, ibm_db2

Added support to install blackfire extension on PHP 8.5.

- name: Setup PHP with blackfire extension
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    extensions: blackfire

Improved support to detect the required libraries when building from source for common extensions. For example installing gnupg from source would install the required libgpgme library automatically. (#1021)

- name: Setup PHP with amqp extension
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    extensions: gnupg-1.5.4

Improved support for symfony-cli. It should now correctly set up the requested version. (#1008)

- name: Setup PHP with symfony-cli
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: symfony-cli:5.16.0

Improved support for relay extension. Also added support to install the nightly version of the extension. (#1011, #1012)
Improved installing PHP on macOS. Also fixed installing PHP on macos-15-intel GitHub runner. (#1029)
Improved support for deb822 format sources files on Linux. It should now set up the sources files in deb822 format on Ubuntu 24.04, Debian 13, and newer. It would automatically switch the format as well for the repositories added by the action to the new format when supported. (#1027)
Improved support for installing pdo_oci. (#1028)
Fixed installing gearman extension for PHP 5.6 and 7.0 on Linux.
Fixed an edge case in tools setup to fall back to the latest version. (#1024)
Fixed support to build extensions with uppercase names from PECL. (#1017)
Fixed warning on redis setup on macOS after formula rename. (shivammathur/homebrew-extensions#5413)
Fixed fallback link for composer setup. (#1025)
Updated the link for flex documentation in README. (#1020)
Updated Node.js dependencies.

Thanks @shyim, @tillkruss, and @nicolas-grekas for the contributions 🎉

Thanks @JetBrainsOfficial and @cachewerk for the sponsorship ❤️

For the complete list of changes, please refer to the Full Changelog

Follow for updates

vuejs/core (vue)

`v3.5.30`

Compare Source

Bug Fixes

compat: add entities to @vue/compat deps to fix CJS edge cases (#12514) (e725a67), closes #10609
custom-element: ensure child component styles are injected in correct order before parent styles (#13374) (1398bf8), closes #13029
custom-element: properly locate parent when slotted in shadow dom (#12480) (f06c81a), closes #12479
custom-element: should properly patch as props for vue custom elements (#12409) (740983e), closes #12408
reactivity: avoid duplicate raw/proxy entries in Set.add (#14545) (d943612)
reactivity: fix reduce on reactive arrays to preserve reactivity (#12737) (16ef165), closes #12735
reactivity: handle Set with initial reactive values edge case (#12393) (5dc27ca), closes #8647
runtime-core: warn about negative number in v-for (#12308) (9438cc5)
ssr: prevent watch from firing after async setup await (#14547) (6cda71d), closes #14546
types: make generics with runtime props in defineComponent work (fix #11374) (#13119) (cea3cf7), closes #13763
types: narrow useAttrs class/style typing for TSX (#14492) (bbb8977), closes #14489

`v3.5.29`

Compare Source

Bug Fixes

runtime-core: prevent instance leak in withAsyncContext (#14445) (702284f), closes nuxt/nuxt#33644
server-renderer: render className as escaped string (#14469) (da6690c)
transition: prevent enter if leave is in progress (#14443) (df059f8), closes #12091 #12133

`v3.5.28`

Compare Source

Bug Fixes

transition: avoid unexpected cancelled parameter in transition done callback (#14391) (6798853)
compiler-sfc: add resolution trying for .mts/.cts files (#14402) (c09d41f), closes vuejs/router#2611
compiler-sfc: no params were generated when using withDefaults (#12823) (b0a1f05), closes #12822
reactivity: add __v_skip flag to EffectScope to prevent reactive conversion (#14359) (48b7552), closes #14357
runtime-core: avoid retaining el on cached text vnodes during static traversal (#14419) (4ace79a), closes #14134
runtime-core: prevent child component updates when style remains unchanged (#12825) (57866b5), closes #12826
runtime-core: properly handle async component update before resolve (#11619) (e71c26c), closes #11617
runtime-dom: handle null/undefined handler in withModifiers (#14362) (261de54), closes #14361
teleport: properly handling disabled teleport target anchor (#14417) (d7bcd85), closes #14412
transition-group: correct move translation under scale via element rect (#14360) (0243a79), closes #14356
useTemplateRef: don't update setup ref for useTemplateRef key (#12756) (fc40ca0), closes #12749

`v3.5.27`

Compare Source

Bug Fixes

compile-sfc: correctly handle variable shadowing in for loop for defineProps destructuring. (#14296) (6a1bb50), closes #14294
compiler-sfc: handle indexed access types in declare global blocks (#14260) (e4091fe), closes #14236
compiler-sfc: use correct scope when resolving indexed access types from external files (#14297) (f0f0a21), closes #14292
reactivity: collection iteration should inherit iterator instance methods (#12644) (3c8b2fc), closes #12615
runtime-core: skip patching reserved props for custom elements (#14275) (19cc7e2), closes #14274
server-renderer: use ssrRenderClass helper for className attribute (#14327) (a4708f3)
ssr: handle v-bind modifiers during render attrs (#14263) (c2f5964), closes #14262

`v3.5.26`

Compare Source

Bug Fixes

compat: fix compat handler of draggable (#12445) (ed85953), closes #12444
compat: handle v-model deprecation warning with missing appContext (#14203) (945a543), closes #14202
compiler-sfc: demote const reactive bindings used in v-model (#14214) (e24ff7d), closes #11265 #11275
compiler-ssr: handle ssr attr fallthrough when preserve whitespace (#12304) (4783118), closes #8072
hmr: handle cached text node update (#14134) (69ce3c7), closes #14127
keep-alive: use resolved component name for async components in cache pruning (#14212) (dfe667c), closes #14210
runtime-core: ensure correct anchor el for deeper unresolved async components (#14182) (f5b3bf2), closes #14173
runtime-core: handle patch stable fragment edge case (#12411) (94aeb64), closes #12410
runtime-core: pass component instance to flushPreFlushCbs on unmount (#14221) (e857e12), closes #14215

Performance Improvements

compiler-core: use binary-search to get line and column (#14222) (1904053)

`v3.5.25`

Compare Source

Bug Fixes

compiler: share logic for comments and whitespace (#13550) (2214f7a)
provide: warn when using provide after mounting (#13954) (247b2c2), closes #13921 #13924
reactivity: correctly wrap iterated array items to preserve their readonly status (#14120) (301020b)
reactivity: toRef edge cases for ref unwrapping (#12420) (0d2357e)
runtime-core: keep options API typing intact when expose is used (#14118) ([8f82f23](https://redirect.github.com/vuejs/core/commit/8f82

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-03-14T12:21:56Z

❌ Deploy Preview for ts-inputs failed. Why did it fail? →

Name	Link
🔨 Latest commit	`a138d72`
🔍 Latest deploy log	https://app.netlify.com/projects/ts-inputs/deploys/69b552e3f923fc0008ce7254

pkg-pr-new · 2026-03-14T12:22:27Z

Open in StackBlitz

npm i https://pkg.pr.new/ts-inputs@2258

commit: 325d667

github-actions · 2026-03-14T12:41:29Z

🤖 Auto-closing obsolete PR

This PR was automatically closed because the dependency files it references are no longer present in the project.

Removed files:

[Age](https://docs.renovatebot.com/merge-confidence/)
![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@microsoft%2fapi-extractor/7.52.15/7.57.7?slim=true)
[@vue/tsconfig](https://redirect.github.com/vuejs/tsconfig)
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@vue%2ftsconfig/0.8.1/0.9.0?slim=true)
![age](https://developer.mend.io/api/mc/badges/age/github-tags/actions%2fcheckout/v5.0.1?slim=true)
![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/bumpp/10.4.1?slim=true)
![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/bun-plugin-dtsx/0.21.12/0.21.17?slim=true)
[bunfig](https://redirect.github.com/stacksjs/bunfig)
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/bunfig/0.15.0/0.15.6?slim=true)
[^16.2.3→^16.4.0](https://renovatebot.com/diffs/npm/lint-staged/16.2.3/16.4.0)
![age](https://developer.mend.io/api/mc/badges/age/github-tags/oven-sh%2fsetup-bun/v2.2.0?slim=true)
![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/shivammathur%2fsetup-php/2.36.0?slim=true)
![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/vue/3.5.22/3.5.30?slim=true)

If this was closed in error, please reopen the PR and update the dependency files accordingly.

chore(deps): update all non-major dependencies

a138d72

renovate bot added dependencies minor labels Mar 14, 2026

github-actions bot closed this Mar 14, 2026

github-actions bot deleted the renovate/all-minor-patch branch March 14, 2026 12:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies#2258

chore(deps): update all non-major dependencies#2258
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Mar 14, 2026

Uh oh!

netlify bot commented Mar 14, 2026 •

edited

Loading

Uh oh!

pkg-pr-new bot commented Mar 14, 2026

Uh oh!

github-actions bot commented Mar 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate bot commented Mar 14, 2026

Release Notes

Patches

Patches

Patches

Patches

Patches

Minor changes

Patches

Patches

Minor changes

Patches

Minor changes

Minor changes

Minor changes

Noticeable Changes

New Contributors

🚀 Features

🐞 Bug Fixes

🚀 Features

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

Changelog

Follow for updates

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Performance Improvements

Bug Fixes

Configuration

Uh oh!

netlify bot commented Mar 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Deploy Preview for ts-inputs failed. Why did it fail? →

Uh oh!

pkg-pr-new bot commented Mar 14, 2026

Uh oh!

github-actions bot commented Mar 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

netlify bot commented Mar 14, 2026 •

edited

Loading