fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #781 · vitejs/vite-plugin-vue

renovate · 2026-05-18T01:25:26Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@babel/core (source)	`^7.29.0` → `^7.29.7`	dependencies	patch
@babel/plugin-syntax-decorators (source)	`^7.28.6` → `^7.29.7`	devDependencies	minor
@babel/plugin-syntax-typescript (source)	`^7.28.6` → `^7.29.7`	dependencies	minor
@babel/plugin-transform-typescript (source)	`^7.28.6` → `^7.29.7`	dependencies	minor
@babel/types (source)	`^7.29.0` → `^7.29.7`	devDependencies	patch
@rollup/plugin-swc (source)	`^0.4.0` → `^0.4.1`	devDependencies	patch
@swc/core (source)	`^1.15.33` → `^1.15.41`	devDependencies	patch
@types/node (source)	`^24.12.4` → `^24.13.2`	devDependencies	minor
@typescript/native-preview (source)	`7.0.0-dev.20260514.1` → `7.0.0-dev.20260610.1`	devDependencies	patch
eslint (source)	`^10.3.0` → `^10.4.1`	devDependencies	minor
eslint-import-resolver-typescript	`^4.4.4` → `^4.4.5`	devDependencies	patch
eslint-plugin-n	`^18.0.1` → `^18.1.0`	devDependencies	minor
js-yaml	`^4.1.1` → `^4.2.0`	devDependencies	minor
lint-staged	`^17.0.5` → `^17.0.7`	devDependencies	patch
obug	`^2.1.1` → `^2.1.2`	devDependencies	patch
oxfmt (source)	`^0.49.0` → `^0.54.0`	devDependencies	minor
pnpm (source)	`10.33.4` → `10.34.2`	packageManager	minor
rollup (source)	`^4.60.4` → `^4.61.1`	devDependencies	minor
sass	`^1.99.0` → `^1.100.0`	devDependencies	minor
tsdown (source)	`^0.22.0` → `^0.22.2`	devDependencies	patch
tsx (source)	`^4.22.0` → `^4.22.4`	devDependencies	patch
typescript-eslint (source)	`^8.59.3` → `^8.61.0`	devDependencies	minor
unrun (source)	`^0.3.0` → `^0.3.1`	devDependencies	patch
vitest (source)	`^4.1.6` → `^4.1.8`	devDependencies	patch
vue (source)	`^3.5.34` → `^3.5.35`	pnpm.catalog.default	patch
vue-router (source)	`^5.0.7` → `^5.1.0`	pnpm.catalog.default	minor
zizmorcore/zizmor-action	`v0.5.3` → `v0.5.6`	action	patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

babel/babel (@babel/core)

`v7.29.7`

Compare Source

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

`v7.29.6`

Compare Source

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator
- #18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)
babel-core
- #18001 [7.x packport]Improve input source map handling (@JLHwung)
babel-core, babel-generator
- #17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)
Mateusz Burzyński (@Andarist)
Nicolò Ribaudo (@nicolo-ribaudo)

rollup/plugins (@rollup/plugin-swc)

`v0.4.1`

2026-05-29

Bugfixes

fix: fix typings to match actual exports (#1985)

swc-project/swc (@swc/core)

`v1.15.41`

Compare Source

Bug Fixes

(bindings/node) Preserve source context for AST transforms (#11920) (b6dfa74)
(es/codegen) Emit export as namespace correctly (#11923) (4e1f832)
(es/codegen) Emit export as namespace minified correctly (#11924) (7157499)
(es/compat) Rewrite this in destructuring defaults (#11909) (68af779)
(es/decorators) Delay 2022 decorator initializers after private fields (#11847) (3f1a4f5)
(es/decorators) Handle import types in decorator metadata (#11916) (f411429)
(es/fixer) Preserve new tagged template callee parens (#11922) (242a03a)
(es/minifier) Handle unknown member props (#11927) (e59ba68)
(es/parser) Handle Flow async generic arrows (#11926) (b9b8993)
(es/renamer) Avoid duplicate mangled names across eval scope boundaries (#11913) (4a1af84)
(plugin) Avoid importing __free from env (#11908) (4584296)
(swc) Preserve plugin error context (#11904) (4e2e9fc)
(swc_common) Fix sourcemap panic for multibyte mapping positions (#11918) (40c1601)

Documentation

Fix architecture fixer link (#11911) (51cbc8c)

Performance

Lazily compute source file hashes (#11879) (a3cfbd7)
Optimize Atom equality (#11902) (c6f8cb0)

Revert

(es/decorators) Revert decorator initializer ordering (#11901) (a3f23b1)
(swc_common) Revert sourcemap multibyte mapping clamp (#11919) (08b4200)

`v1.15.40`

Compare Source

Bug Fixes

(es/minifier) Preserve args for destructured callbacks (#11830) (21873b0)
(es/minifier) Avoid generating mangled property names that collide with existing properties (#11839) (9b4fab5)
(es/minifier) Respect ecma for iife temp vars (#11873) (e481934)
(es/minifier) Preserve default parameter object props (#11884) (71ff84f)
(es/parser) Reject object-rest assignment to array/object literal (#11875) (7b57d1f)
(es/parser) Reject object rest assignment to literals (#11881) (4ec2eaf)
(es/react) Exclude self-recursive hooks from refresh dependency array (#11838) (9101c71)
(ts/fast-dts) Strip definite assertions in dts (#11858) (2ab1b8a)
(ts/fast-strip) Reject unsafe assertion erasure in binary expressions (#11828) (aa5b539)
(typescript) Strip parameter binding defaults in dts (#11857) (800bc17)

Documentation

Update agent guidance (#11842) (bf2d015)
Add security policy (#11876) (6c43c2d)
Clarify security scope for npm packages (#11877) (4662db8)
Clarify untrusted input security model (#11882) (5463777)

Features

(es/minifier) Fine grained effect analysis of class (#11814) (c9058ad)
(swc_cli) Implement all features for swc_cli (#11797) (9300ede)

Miscellaneous Tasks

(es/minifier) Fix typo in debug log (#11866) (3de0254)
(html) Add webcontainer fallback for @swc/html (#11860) (7692eed)

Performance

(ecma) Reduce transformer compat overhead (#11856) (d03cb71)
(es/codegen) Speed up JsWriter position and srcmap tracking (#11867) (dbceade)
(es/codegen) Remove JsWriter last_srcmap cache (#11869) (3bc1c2b)
(es/minifier) Reduce minifier profiling hotspots (#11853) (28c1091)
Optimize es parser comment finalization (#11852) (2959ddf)

Testing

(es/minifier) Move issue_11835 fixture out of terser folder (#11840) (3dd3431)

Ci

Update corepack in publish docker jobs (#11885) (9a7d954)
Pass publish docker env explicitly (#11888) (c5f7547)
Lock issues closed by merged prs (#11887) (6bd74e5)
Provide aarch64 musl linker in publish job (#11889) (20234fd)
Fix publish musl linker and windows tests (#11890) (a798a23)
Make minifier test path explicit (#11891) (e7cba97)

Security

Save CI caches only on main (#11848) (7582529)
Update rkyv and Rust dependencies (#11851) (20d92eb)
Harden PR workflow permissions (#11849) (e199564)

microsoft/typescript-go (@typescript/native-preview)

eslint/eslint (eslint)

`v10.4.1`

Compare Source

Bug Fixes

e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930) (Francesco Trotta)
d4ce898 fix: propagate failures from delegated commands (#20917) (Minh Vu)
f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916) (kuldeep kumar)
c5bc78b fix: false positive for reference in finally block (#20655) (Tanuj Kanti)
27538c0 fix: add missing CodePath and CodePathSegment types (#20853) (Pixel998)

Documentation

61b0add docs: remove deprecated rule from related rules of max-params (#20921) (Tanuj Kanti)
305d5b9 docs: remove deprecated rules from related rules section (#20911) (Tanuj Kanti)
49b0202 docs: fix display: none of ad (#20901) (Tanuj Kanti)
9067f94 docs: switch build to Node.js 24 (#20893) (Milos Djermanovic)
c91b041 docs: Update README (GitHub Actions Bot)
e349265 docs: clarify semver strings in rule deprecation objects (#20885) (Milos Djermanovic)

Chores

b0e466b test: add data property to invalid tests cases for rules (#20924) (Tanuj Kanti)
f78838b test: add CodePath type coverage (#20904) (Pixel998)
1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20922) (Francesco Trotta)
002942c ci: declare contents:read on update-readme workflow (#20919) (Arpit Jain)
64bca24 chore: update ecosystem plugins (#20912) (ESLint Bot)
6d7c832 chore: ignore fflate updates in renovate (#20908) (Pixel998)
b2c8638 ci: bump pnpm/action-setup from 6.0.7 to 6.0.8 (#20889) (dependabot[bot])
a9b8d7f chore: increase maxBuffer for ecosystem tests (#20881) (sethamus)
b702ead chore: update ecosystem update PR settings (#20884) (Pixel998)
507f60e chore: update ecosystem plugins (#20882) (ESLint Bot)
92f5c5b test: add unit test for message-count (#20878) (kuldeep kumar)
df32108 chore: add @eslint/markdown and typescript-eslint ecosystem tests (#20837) (sethamus)
327f91d chore: use includeIgnoreFile internally (#20876) (Kirk Waiblinger)
f0dc4bd chore: pin fflate@0.8.2 (#20877) (Milos Djermanovic)
0f4bd25 ci: run Discord alert for ecosystem test failures (#20873) (Copilot)

`v10.4.0`

Compare Source

import-js/eslint-import-resolver-typescript (eslint-import-resolver-typescript)

`v4.4.5`

Compare Source

Patch Changes

#473 32c61ab Thanks @leey0818! - fix: check tsconfig matching before using resolver

eslint-community/eslint-plugin-n (eslint-plugin-n)

`v18.1.0`

Compare Source

🌟 Features

Allow workspace root dependencies for no-extraneous-import (#536) (fd4f84e)
support devEngines.runtime from package.json (#530) (9ef3c32)

🩹 Fixes

Allow leading forwardslash in package.json "files" field (#534) (#535) (5fde036)
no-extraneous-import for type-only @types dependencies (#533) (63a90ef)
prefer-promises/fs: add missing fs.promises APIs (cp, glob, lutimes, opendir, rm, statfs) (#532) (75fbe34)

📚 Documentation

fix usage in README.md (c1b1b84)
Update online playground link in README (058916a)

nodeca/js-yaml (js-yaml)

`v4.2.0`

Compare Source

Added

Added docs/safety.md with notes about processing untrusted YAML.
Added maxDepth (100) loader option. Not a problem, but gives a better
exception instead of RangeError on stack overflow.
Added maxMergeSeqLength (20) loader option. Not a problem after merge fix,
but an additional restriction for safety.
Added sourcemaps to dist/ builds.

Changed

Stop resolving numbers with underscores as numeric scalars, #627.
Switched dev toolchains to Vite / neostandard.
Updated demo.
Reorganized tests.
dist/ files are no longer kept in the repository.

Fixed

Fix parsing of properties on the first implicit block mapping key, #62.
Fix trailing whitespace handling when folding flow scalar lines, #307.
Reject top-level block scalars without content indentation, #280.
Ensure numbers survive round-trip, #737.
Fix test coverage for issue #221.
Fix flow scalar trailing whitespace folding, #307.
Fix digits in YAML named tag handles.

Security

Fix potential DoS via quadratic complexity in merge - deduplicate repeated
elements (makes sense for malformed files > 10K).

lint-staged/lint-staged (lint-staged)

`v17.0.7`

Compare Source

Patch Changes

#1806 e692e58 - Update dependency tinyexec@^1.2.4.

`v17.0.6`

Compare Source

Patch Changes

#1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.
#1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.
#1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.
#1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

sxzz/obug (obug)

`v2.1.2`

Compare Source

No significant changes

View changes on GitHub

oxc-project/oxc (oxfmt)

`v0.54.0`

Compare Source

📚 Documentation

dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (#22965) (Boshen)
f88961a oxfmt: Annotate each config option with supported languages (#22953) (leaysgur)

`v0.53.0`

Compare Source

`v0.52.0`

Compare Source

🚀 Features

16b8058 oxfmt: Support vite-plus/resolveConfig for vite.config.ts (#22454) (leaysgur)

`v0.51.0`

Compare Source

`v0.50.0`

Compare Source

🐛 Bug Fixes

43b9978 formatter/sort_imports: Treat subpath imports as internal (#22440) (leaysgur)

pnpm/pnpm (pnpm)

`v10.34.2`

Compare Source

`v10.34.1`: pnpm 10.34.1

Compare Source

Patch Changes

Reject pnpm-lock.yaml entries whose remote tarball resolution: block is missing the integrity field. Previously the worker that extracts a downloaded tarball skipped hash verification when no integrity was supplied and minted a fresh one from the unverified bytes, so an attacker who could both alter the lockfile (e.g. via a pull request that strips integrity:) and serve modified content at the referenced tarball URL could install a tampered package without any error — including under --frozen-lockfile. pnpm now fails closed at lockfile-read time with ERR_PNPM_MISSING_TARBALL_INTEGRITY. Git-hosted tarballs (gitHosted: true or a URL on codeload.github.com / bitbucket.org / gitlab.com) and file: tarballs are exempt — the commit SHA in a git-host URL and the user-controlled local path already anchor the bytes.

Platinum Sponsors

Gold Sponsors

`v10.34.0`: pnpm 10.34

Compare Source

Minor Changes

Treat tarball-integrity mismatches against the lockfile as a hard failure by default. Previously, pnpm install (non-frozen) would log ERR_PNPM_TARBALL_INTEGRITY, silently re-resolve from the registry, and overwrite the locked integrity — which meant a compromised registry, proxy, or republished version could substitute attacker-controlled content on a clean machine even though the project shipped a committed lockfile.

pnpm install now exits with `ERR_PNPM_TARBALL_INTEGRI

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

pkg-pr-new · 2026-05-18T01:25:54Z

Open in StackBlitz

npm i https://pkg.pr.new/@vitejs/plugin-vue@781

npm i https://pkg.pr.new/@vitejs/plugin-vue-jsx@781

commit: aa6b2bf

renovate Bot added the dependencies label May 18, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 14 times, most recently from d96837b to 020e0b1 Compare May 25, 2026 09:58

renovate Bot force-pushed the renovate/all-minor-patch branch from 020e0b1 to 8480c13 Compare May 25, 2026 13:38

renovate Bot changed the title ~~chore(deps): update all non-major dependencies~~ fix(deps): update all non-major dependencies May 25, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 101e8d3 to 2b25429 Compare June 1, 2026 17:54

renovate Bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from 2acc773 to 54a8fa2 Compare June 8, 2026 18:47

renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 3404a72 to 71b20c6 Compare June 10, 2026 14:37

fix(deps): update all non-major dependencies

aa6b2bf

renovate Bot force-pushed the renovate/all-minor-patch branch from 71b20c6 to aa6b2bf Compare June 11, 2026 00:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all non-major dependencies#781

fix(deps): update all non-major dependencies#781
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented May 18, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented May 18, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented May 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v7.29.7 (2026-05-25)

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

Bugfixes

Bug Fixes

Documentation

Performance

Revert

Bug Fixes

Documentation

Features

Miscellaneous Tasks

Performance

Testing

Ci

Security

Bug Fixes

Documentation

Chores

Patch Changes

🌟 Features

🩹 Fixes

📚 Documentation

Added

Changed

Fixed

Security

Patch Changes

Patch Changes

📚 Documentation

🚀 Features

🐛 Bug Fixes

v10.34.1: pnpm 10.34.1

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.34.0: pnpm 10.34

Minor Changes

Configuration

Uh oh!

pkg-pr-new Bot commented May 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented May 18, 2026 •

edited

Loading

`v10.34.1`: pnpm 10.34.1

`v10.34.0`: pnpm 10.34

pkg-pr-new Bot commented May 18, 2026 •

edited

Loading