chore(deps): update all dependencies by renovate[bot] · Pull Request #9 · un-ts/mini-shiki

renovate · 2025-06-06T08:38:49Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@changesets/changelog-github (source)	`^0.5.1` → `^0.7.0`	devDependencies	minor
@commitlint/cli (source)	`^19.8.1` → `^21.0.0`	devDependencies	major
@types/node (source)	`^22.15.21` → `^24.0.0`	devDependencies	major
actions/checkout	`v4.2.2` → `v6.0.2`	action	major
actions/setup-node	`v4.4.0` → `v6.4.0`	action	major
autofix-ci/action	`v1.3.2` → `v1.3.4`	action	patch
c8	`^10.1.3` → `^11.0.0`	devDependencies	major
codecov/codecov-action	`v5.4.3` → `v6.0.1`	action	major
eslint (source)	`^9.27.0` → `^10.0.0`	devDependencies	major
nano-staged	`^0.8.0` → `^1.0.0`	devDependencies	major
npm-run-all2	`^8.0.3` → `^9.0.0`	devDependencies	major
semver	`7.7.2` → `7.8.0`	devDependencies	minor
tsdown (source)	`^0.12.2` → `^0.22.0`	devDependencies	minor
typescript (source)	`^5.8.3` → `^6.0.0`	devDependencies	major
yarn (source)	`4.9.1` → `4.15.0`	packageManager	minor

Release Notes

changesets/changesets (@changesets/changelog-github)

`v0.7.0`

Compare Source

Minor Changes

#1255 94578cf Thanks @Kauhsa! - Added disableThanks option

`v0.6.0`

Compare Source

Minor Changes

#1850 fd0bc2e Thanks @mixelburg! - Linkify issue references in changelog entries.

Patch Changes

#1810 27fd8f4 Thanks @hirasso! - Replace deprecated String.prototype.trimRight with String.prototype.trimEnd
Updated dependencies [d4b8ad8, e462d89]:
- @changesets/get-github-info@0.8.0

`v0.5.2`

Compare Source

conventional-changelog/commitlint (@commitlint/cli)

`v21.0.1`

Compare Source

Note: Version bump only for package @commitlint/cli

`v21.0.0`

Compare Source

chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

drop node v18 and v20 support

Bump engines to >=v22 in all 39 package.json files
Update @types/node to ^22.0.0
Update CI matrix to [22, 24]
Update Ubuntu baseline job to ubuntu:26.04
Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
Update pre-commit hook to use --ignore-engines
Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @commitlint/cli

20.5.2 (2026-04-25)

Note: Version bump only for package @commitlint/cli

`v20.5.3`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.5.2`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.5.0`

Compare Source

Bug Fixes

cli: validate that --cwd directory exists before execution (#4658) (cf80f75), closes #4595

20.4.4 (2026-03-12)

Note: Version bump only for package @commitlint/cli

20.4.3 (2026-03-03)

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @commitlint/cli

20.4.1 (2026-02-02)

Note: Version bump only for package @commitlint/cli

`v20.4.4`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.4.3`

Compare Source

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

`v20.4.2`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.4.1`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.4.0`

Compare Source

Features

upgrade conventional commit packages #4082 (#4597) (3aaf0a6)

20.3.1 (2026-01-08)

Note: Version bump only for package @commitlint/cli

`v20.3.1`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.3.0`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.2.0`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.1.0`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.0.0`

Compare Source

Note: Version bump only for package @commitlint/cli

19.8.1 (2025-05-08)

Bug Fixes

update dependency tinyexec to v1 (#4332) (e49449f)

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

`v5.0.0`

Compare Source

What's Changed

Update actions checkout to use node 24 by @salmanmkc in #2226
Prepare v5.0.0 release by @salmanmkc in #2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

`v5`

Compare Source

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236
Prepare release v4.3.0 by @salmanmkc in #2237

New Contributors

@motss made their first contribution in #1971
@mouismail made their first contribution in #1977
@benwells made their first contribution in #2043
@nebuk89 made their first contribution in #2194
@salmanmkc made their first contribution in #2236

Full Changelog: actions/checkout@v4...v4.3.0

actions/setup-node (actions/setup-node)

`v6.4.0`

Compare Source

`v6.3.0`

Compare Source

What's Changed

Enhancements:

Support parsing devEngines field by @susnux in #1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

Fix npm audit issues by @gowridurgad in #1491
Replace uuid with crypto.randomUUID() by @trivikr in #1378
Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1498

Bug fixes:

Remove hardcoded bearer for mirror-url @marco-ippolito in #1467
Scope test lockfiles by package manager and update cache tests by @gowridurgad in #1495

New Contributors

@susnux made their first contribution in #1283

Full Changelog: actions/setup-node@v6...v6.3.0

`v6.2.0`

Compare Source

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Limit automatic caching to npm, update workflows and documentation by @priyagupta108 in #1374

Dependency Upgrades

Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @dependabot[bot] in #1336
Upgrade prettier from 2.8.8 to 3.6.2 by @dependabot[bot] in #1334
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

`v6`

Compare Source

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in #1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless.
To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Upgrade action to use node24 by @salmanmkc in #1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in #1227
Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in #1273
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1295
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1332
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1345

New Contributors

@priya-kinthali made their first contribution in #1348
@salmanmkc made their first contribution in #1325

Full Changelog: actions/setup-node@v4...v5.0.0

`v5`

Compare Source

autofix-ci/action (autofix-ci/action)

`v1.3.4`: autofix-ci/action 1.3.4

Compare Source

What's Changed

Update action to use Node 24

Full Changelog: autofix-ci/action@v1...v1.3.4

`v1.3.3`: autofix-ci/action 1.3.3

Compare Source

What's Changed

Move Autofix API from .ci to .com TLD.
This aims to improve overall reliability (#32). api.autofix.ci will remain available as an alias for the time being.

Full Changelog: autofix-ci/action@v1.3.2...v1.3.3

bcoe/c8 (c8)

`v11.0.0`

Compare Source

⚠ BREAKING CHANGES

deps: transitive deps require 20 || >=22

Bug Fixes

deps: pull newer minimatch addressing CVE-2026-26996 (#576) (678eeca)

codecov/codecov-action (codecov/codecov-action)

`v6.0.1`

Compare Source

`v6.0.0`

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by @thomasrockhu-codecov in #1929
Th/6.0.0 by @thomasrockhu-codecov in #1928

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

`v6`

Compare Source

`v5.5.4`

Compare Source

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by @thomasrockhu-codecov in #1926
chore(release): 5.5.4 by @thomasrockhu-codecov in #1927

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

`v5.5.3`

Compare Source

What's Changed

build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in #1874
chore(release): bump to 5.5.3 by @thomasrockhu-codecov in #1922

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

`v5.5.2`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

`v5.5.1`

Compare Source

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in #1871
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in #1868
build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in #1867
fix: update to use local app/ dir by @thomasrockhu-codecov in #1872
docs: fix typo in README by @datalater in #1866
Document a codecov-cli version reference example by @webknjaz in #1774
build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in #1861
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in #1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

`v5.5.0`

Compare Source

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in #1864
Pin actions/github-script by Git SHA by @martincostello in #1859
fix: check reqs exist by @joseph-sentry in #1835
fix: Typo in README by @spalmurray in #1838
docs: Refine OIDC docs by @spalmurray in #1837
build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in #1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

eslint/eslint (eslint)

`v10.4.0`

Compare Source

`v10.3.0`

Compare Source

`v10.2.1`

Compare Source

`v10.2.0`

Compare Source

Features

586ec2f feat: Add meta.languages support to rules (#20571) (Copilot)
14207de feat: add Temporal to no-obj-calls (#20675) (Pixel998)
bbb2c93 feat: add Temporal to ES2026 globals (#20672) (Pixel998)

Bug Fixes

542cb3e fix: update first-party dependencies (#20714) (Francesco Trotta)

Documentation

a2af743 docs: add language to configuration objects (#20712) (Francesco Trotta)
845f23f docs: Update README (GitHub Actions Bot)
5fbcf59 docs: remove sourceType from ts playground link (#20477) (Tanuj Kanti)
8702a47 docs: Update README (GitHub Actions Bot)
ddeaded docs: Update README (GitHub Actions Bot)
2b44966 docs: add Major Releases section to Manage Releases (#20269) (Milos Djermanovic)
eab65c7 docs: update eslint versions in examples (#20664) (루밀LuMir)
3e4a299 docs: update ESM Dependencies policies with note for own-usage packages (#20660) (Milos Djermanovic)

Chores

8120e30 refactor: extract no unmodified loop condition (#20679) (kuldeep kumar)
46e8469 chore: update dependency markdownlint-cli2 to ^0.22.0 (#20697) (renovate[bot])
01ed3aa test: add unit tests for unicode utilities (#20622) (Manish chaudhary)
811f493 ci: remove --legacy-peer-deps from types integration tests (#20667) (Milos Djermanovic)
6b86fcf chore: update dependency npm-run-all2 to v8 (#20663) (renovate[bot])
632c4f8 chore: add prettier update commit to .git-blame-ignore-revs (#20662) (루밀LuMir)
b0b0f21 chore: update dependency eslint-plugin-regexp to ^3.1.0 (#20659) (Milos Djermanovic)
228a2dd chore: update dependency eslint-plugin-eslint-plugin to ^7.3.2 (#20661) (Milos Djermanovic)
3ab4d7e test: Add tests for eslintrc-style keys (#20645) (kuldeep kumar)

`v10.1.0`

Compare Source

Features

ff4382b feat: apply fix for no-var in TSModuleBlock (#20638) (Tanuj Kanti)
0916995 feat: Implement api support for bulk-suppressions (#20565) (Blake Sager)

Bug Fixes

2b8824e fix: Prevent no-var autofix when a variable is used before declaration (#20464) (Amaresh S M)
e58b4bf fix: update eslint (#20597) (renovate[bot])

Documentation

b7b57fe docs: use correct JSDoc link in require-jsdoc.md (#20641) (mkemna-clb)
58e4cfc docs: add deprecation notice partial (#20639) (Milos Djermanovic)
7143dbf docs: update v9 migration guide for @eslint/js usage (#20540) (fnx)
035fc4f docs: note that globalReturn applies only with sourceType: "script" (#20630) (Milos Djermanovic)
e972c88 docs: merge ESLint option descriptions into type definitions (#20608) (Francesco Trotta)
7f10d84 docs: Update README (GitHub Actions Bot)
aeed007 docs: open playground link in new tab (#20602) (Tanuj Kanti)
a0d1a37 docs: Add AI Usage Policy (#20510) (Nicholas C. Zakas)

Chores

a9f9cce chore: update dependency eslint-plugin-unicorn to ^63.0.0 (#20584) (Milos Djermanovic)
1f42bd7 chore: update prettier to 3.8.1 (#20651) (루밀LuMir)
c0a6f4a chore: update dependency @eslint/json to ^1.2.0 (#20652) (renovate[bot])
cc43f79 chore: update dependency c8 to v11 (#20650) (renovate[bot])
2ce4635 chore: update dependency @eslint/json to v1 (#20649) (renovate[bot])
f0406ee chore: update dependency markdownlint-cli2 to ^0.21.0 (#20646) (renovate[bot])
dbb4c95 chore: remove trunk (#20478) (sethamus)
c672a2a test: fix CLI test for empty output file (#20640) (kuldeep kumar)
c7ada24 ci: bump pnpm/action-setup from 4.3.0 to 4.4.0 (#20636) (dependabot[bot])
07c4b8b test: fix RuleTester test without test runners (#20631) (Francesco Trotta)
079bba7 test: Add tests for isValidWithUnicodeFlag (#20601) (Manish chaudhary)
5885ae6 ci: unpin Node.js 25.x in CI (#20615) (Copilot)
f65e5d3 chore: update pnpm/action-setup digest to b906aff (#20610) (renovate[bot])

`v10.0.3`

Compare Source

`v10.0.2`

Compare Source

`v10.0.1`

Compare Source

Bug Fixes

c87d5bd fix: update eslint (#20531) (renovate[bot])
d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
04c2147 fix: update error message for unused suppressions (#20496) (fnx)
38b089c fix: update dependency @eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

e5c281f chore: updates for v9.39.3 release (Jenkins)
8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
84fb885 chore: package.json update for @eslint/js release (Jenkins)
1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

`v10.0.0`

Compare Source

`v9.39.4`

Compare Source

Bug Fixes

f18f6c8 fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)
a3c868f fix: update dependency @eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)
234d005 fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)
b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#20538) (루밀LuMir)

Documentation

4675152 docs: add deprecation notice partial (#20520) (Milos Djermanovic)

Chores

b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)
71b2f6b chore: package.json update for @eslint/js release (Jenkins)
1d16c2f ci: pin Node.js 25.6.1 (#20563) (Milos Djermano

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2025-06-06T08:38:54Z

⚠️ No Changeset found

Latest commit: 8c6bdc7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

coderabbitai · 2025-06-06T08:38:56Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Explain this complex logic.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai explain this code block.
- @coderabbitai modularize this function.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read src/utils.ts and explain its main purpose.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
- @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Join our Discord community for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

codesandbox-ci · 2025-06-06T08:39:13Z

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

codecov · 2025-06-06T08:39:33Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (5b95228) to head (64eb4ae).

Additional details and impacted files

@@            Coverage Diff            @@
##              main        #9   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines           33        33           
=========================================
  Hits            33        33

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

pkg-pr-new · 2025-06-06T08:39:37Z

Open in StackBlitz

npm i https://pkg.pr.new/mini-shiki@9

commit: 8c6bdc7

socket-security · 2026-03-03T22:36:02Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@changesets/changelog-github@0.5.1 ⏵ 0.7.0		⁺¹
@commitlint/cli@19.8.1 ⏵ 21.0.1	⁺¹	⁺¹
@types/node@24.12.4
c8@10.1.3 ⏵ 11.0.0
nano-staged@0.8.0 ⏵ 1.0.2		⁺²⁷
tsdown@0.12.2 ⏵ 0.22.0		⁺²	⁺¹
eslint@9.27.0 ⏵ 10.4.0	⁺¹
semver@7.8.0
typescript@6.0.3
npm-run-all2@8.0.3 ⏵ 9.0.0		⁺²	⁺³

View full report

socket-security · 2026-03-03T22:36:04Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `entities` is 91.0% likely obfuscated Confidence: 0.91 Location: Package overview From: `?` → `npm/entities@4.5.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/entities@4.5.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

codacy-production · 2026-04-03T13:44:57Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

renovate Bot enabled auto-merge (squash) June 6, 2025 08:38

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 3f0fd69 to bf054c2 Compare June 8, 2025 14:38

renovate Bot changed the title ~~chore(deps): update yarn to v4.9.2~~ chore(deps): update all dependencies Jun 8, 2025

renovate Bot force-pushed the renovate/all branch from bf054c2 to c4887ac Compare June 21, 2025 01:45

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 1cf775f to 009ed33 Compare July 3, 2025 05:08

renovate Bot changed the title ~~chore(deps): update all dependencies~~ chore(deps): update yarn to v4.9.2 Jul 3, 2025

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 331ebb4 to 64eb4ae Compare July 18, 2025 01:56

renovate Bot force-pushed the renovate/all branch from 64eb4ae to fbb071a Compare July 22, 2025 12:04

renovate Bot changed the title ~~chore(deps): update yarn to v4.9.2~~ chore(deps): update all dependencies Jul 22, 2025

renovate Bot force-pushed the renovate/all branch 7 times, most recently from 404b333 to 43ca370 Compare March 3, 2026 02:26

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 5a13772 to afc689e Compare March 3, 2026 22:35

renovate Bot force-pushed the renovate/all branch 2 times, most recently from d83ee91 to 4d3765f Compare March 5, 2026 09:21

renovate Bot force-pushed the renovate/all branch from 81ce954 to a6719be Compare April 4, 2026 02:04

renovate Bot force-pushed the renovate/all branch 9 times, most recently from 38a4cb7 to 30f3b6c Compare April 22, 2026 16:46

renovate Bot force-pushed the renovate/all branch 4 times, most recently from 3bcc40e to 03a10cf Compare April 30, 2026 09:56

renovate Bot force-pushed the renovate/all branch 5 times, most recently from 0e93a6f to 167b9c7 Compare May 8, 2026 13:08

renovate Bot force-pushed the renovate/all branch 5 times, most recently from f16638e to af52dde Compare May 15, 2026 17:58

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 2ef9cc2 to 90854e6 Compare May 20, 2026 00:36

chore(deps): update all dependencies

8c6bdc7

renovate Bot force-pushed the renovate/all branch from 90854e6 to 8c6bdc7 Compare May 20, 2026 03:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all dependencies#9

chore(deps): update all dependencies#9
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

renovate Bot commented Jun 6, 2025 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jun 6, 2025 •

edited

Loading

Uh oh!

coderabbitai Bot commented Jun 6, 2025

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (`.coderabbit.yaml`)

Documentation and Community

Uh oh!

codesandbox-ci Bot commented Jun 6, 2025 •

edited

Loading

Uh oh!

codecov Bot commented Jun 6, 2025 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Jun 6, 2025 •

edited

Loading

Uh oh!

socket-security Bot commented Mar 3, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Mar 3, 2026 •

edited

Loading

Uh oh!

codacy-production Bot commented Apr 3, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jun 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Minor Changes

Minor Changes

Patch Changes

BREAKING CHANGES

20.5.3 (2026-04-30)

20.5.2 (2026-04-25)

Bug Fixes

20.4.4 (2026-03-12)

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

20.4.1 (2026-02-02)

Bug Fixes

Features

20.3.1 (2026-01-08)

19.8.1 (2025-05-08)

Bug Fixes

What's Changed

What's Changed

⚠️ Minimum Compatible Runner Version

What's Changed

What's Changed

New Contributors

What's Changed

Enhancements:

Dependency updates:

Bug fixes:

New Contributors

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

v1.3.4: autofix-ci/action 1.3.4

What's Changed

v1.3.3: autofix-ci/action 1.3.3

What's Changed

⚠ BREAKING CHANGES

Bug Fixes

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

Features

Bug Fixes

Documentation

Chores

Features

Bug Fixes

Documentation

Chores

Bug Fixes

Documentation

Chores

Bug Fixes

Documentation

Chores

Configuration

Uh oh!

changeset-bot Bot commented Jun 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

coderabbitai Bot commented Jun 6, 2025

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR comments)

renovate Bot commented Jun 6, 2025 •

edited

Loading

`v1.3.4`: autofix-ci/action 1.3.4

`v1.3.3`: autofix-ci/action 1.3.3

changeset-bot Bot commented Jun 6, 2025 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)

codesandbox-ci Bot commented Jun 6, 2025 •

edited

Loading

codecov Bot commented Jun 6, 2025 •

edited

Loading