Skip to content

chore(deps): update all non-major dependencies #71

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
renovate merged 1 commit into from
Dec 22, 2025
Merged

chore(deps): update all non-major dependencies #71

renovate merged 1 commit into from
Dec 22, 2025

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 17, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
@sxzz/eslint-config ^7.4.3 -> ^7.4.4 age confidence
@sxzz/test-utils ^0.5.14 -> ^0.5.15 age confidence
@types/node (source) ^25.0.2 -> ^25.0.3 age confidence
esbuild ^0.27.1 -> ^0.27.2 age confidence
pnpm (source) 10.26.0 -> 10.26.1 age confidence
rolldown (source) 1.0.0-beta.54 -> 1.0.0-beta.56 age confidence
rollup (source) ^4.53.4 -> ^4.54.0 age confidence
tsdown (source) ^0.18.0 -> ^0.18.2 age confidence
vitest (source) ^4.0.15 -> ^4.0.16 age confidence
webpack ^5.103.0 -> ^5.104.1 age confidence

Release Notes

sxzz/eslint-config (@​sxzz/eslint-config)

v7.4.4

Compare Source

No significant changes

    View changes on GitHub
sxzz/test-utils (@​sxzz/test-utils)

v0.5.15

Compare Source

   🐞 Bug Fixes
  • rolldown: Default checks.pluginTimings to false  -  by @​sxzz (77a49)
    View changes on GitHub
evanw/esbuild (esbuild)

v0.27.2

Compare Source

  • Allow import path specifiers starting with #/ (#​4361)

    Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

    This change was contributed by @​hybrist.

  • Automatically add the -webkit-mask prefix (#​4357, #​4358)

    This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

    /* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}

/* Old output (with --target=chrome110) */
main {
  mask: url(x.png) center/5rem no-repeat;
}

/* New output (with --target=chrome110) */
main {
  -webkit-mask: url(x.png) center/5rem no-repeat;
  mask: url(x.png) center/5rem no-repeat;
}

    This change was contributed by @​BPJEnnova.

  • Additional minification of switch statements (#​4176, #​4359)

    This release contains additional minification patterns for reducing switch statements. Here is an example:

    // Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}

// Old output (with --minify)
switch(x){case 0:foo();break;case 1:default:bar()}

// New output (with --minify)
x===0?foo():bar();

  • Forbid using declarations inside switch clauses (#​4323)

    This is a rare change to remove something that was previously possible. The Explicit Resource Management proposal introduced using declarations. These were previously allowed inside case and default clauses in switch statements. This had well-defined semantics and was already widely implemented (by V8, SpiderMonkey, TypeScript, esbuild, and others). However, it was considered to be too confusing because of how scope works in switch statements, so it has been removed from the specification. This edge case will now be a syntax error. See tc39/proposal-explicit-resource-management#215 and rbuckton/ecma262#14 for details.

    Here is an example of code that is no longer allowed:

    switch (mode) {
  case 'read':
    using readLock = db.read()
    return readAll(readLock)

  case 'write':
    using writeLock = db.write()
    return writeAll(writeLock)
}

    That code will now have to be modified to look like this instead (note the additional { and } block statements around each case body):

    switch (mode) {
  case 'read': {
    using readLock = db.read()
    return readAll(readLock)
  }
  case 'write': {
    using writeLock = db.write()
    return writeAll(writeLock)
  }
}

    This is not being released in one of esbuild's breaking change releases since this feature hasn't been finalized yet, and esbuild always tracks the current state of the specification (so esbuild's previous behavior was arguably incorrect).

pnpm/pnpm (pnpm)

v10.26.1

Compare Source

rolldown/rolldown (rolldown)

v1.0.0-beta.56

Compare Source

💥 BREAKING CHANGES
🚀 Features
🐛 Bug Fixes
🚜 Refactor
⚙️ Miscellaneous Tasks
❤️ New Contributors

v1.0.0-beta.55

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
🧪 Testing
⚙️ Miscellaneous Tasks
❤️ New Contributors
rollup/rollup (rollup)

v4.54.0

Compare Source

2025-12-20

Features
  • Enable tree-shaking for Symbol.hasInstance, Symbol.dispose and Symbol.asyncDispose properties if unused (#​6046)
Bug Fixes
  • Ensure that well-known-Symbol-valued properties are not tree-shaken except in select cases (#​6046)
  • Ensure namespace properties are included when referenced only from a try-catch (#​6216)
Pull Requests

v4.53.5

Compare Source

2025-12-16

Bug Fixes
  • Fix wrong semicolon insertion position when using JSX (#​6206)
  • Generate spec-compliant sourcemaps when sources content is excluded (#​6196)
Pull Requests
rolldown/tsdown (tsdown)

v0.18.2

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.18.1

Compare Source

   🚀 Features
export default defineConfig({
  entry: {
    '*': './src/*.ts',
    'data-loaders': './src/data-loaders/entries/index.ts',
    'data-loaders/*': './src/data-loaders/entries/!(index).ts',
    'volar/*': './src/volar/entries/*.ts',
  },
}
   🐞 Bug Fixes
    View changes on GitHub
vitest-dev/vitest (vitest)

v4.0.16

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
webpack/webpack (webpack)

v5.104.1

Compare Source

Patch Changes
  • 2efd21b: Reexports runtime calculation should not accessing WEBPACK_IMPORT_KEY decl with var.
  • c510070: Fixed a user information bypass vulnerability in the HttpUriPlugin plugin.

v5.104.0

Compare Source

Minor Changes
  • d3dd841: Use method shorthand to render module content in __webpack_modules__ object.
  • d3dd841: Enhance import.meta.env to support object access.
  • 4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.
  • 04cd530: Handle more at-rules for CSS modules.
  • cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.
  • d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.
  • 5983843: Provide a stable runtime function variable __webpack_global__.
  • d3dd841: Improved localIdentName hashing for CSS.
Patch Changes
  • 22c48fb: Added module existence check for informative error message in development mode.
  • 50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.
  • d3dd841: Support universal lazy compilation.
  • d3dd841: Fixed module library export definitions when multiple runtimes.
  • d3dd841: Fixed CSS nesting and CSS custom properties parsing.
  • d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.
  • aab1da9: Fixed bugs for css/global type.
  • d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.
  • d3dd841: Handle nested __webpack_require__.
  • 728ddb7: The speed of identifier parsing has been improved.
  • 0f8b31b: Improve types.
  • d3dd841: Don't corrupt debugId injection when hidden-source-map is used.
  • 2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.
  • d3dd841: Serialize HookWebpackError.
  • d3dd841: Added ability to use built-in properties in dotenv and define plugin.
  • 3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.
  • d3dd841: Reduce collision for local indent name in CSS.
  • d3dd841: Remove CSS link tags when CSS imports are removed.

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@bolt-new-by-stackblitz
Copy link

bolt-new-by-stackblitz bot commented Nov 17, 2025

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@socket-security
Copy link

socket-security bot commented Nov 17, 2025 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedesbuild@​0.27.1 ⏵ 0.27.2911007394100
Updatedrolldown@​1.0.0-beta.54 ⏵ 1.0.0-beta.5699 +410074 +198 +1100
Updated@​sxzz/​test-utils@​0.5.14 ⏵ 0.5.1576 +110079 +194 +1100
Updatedvitest@​4.0.15 ⏵ 4.0.1697 +110079 +199 +2100
Updated@​types/​node@​25.0.2 ⏵ 25.0.3100 +110081 +196100
Updated@​sxzz/​eslint-config@​7.4.3 ⏵ 7.4.48210010096 +1100
Updatedrollup@​4.53.4 ⏵ 4.54.088 +110010099100
Updatedwebpack@​5.103.0 ⏵ 5.104.190 -610093 -797 +4100
Updatedtsdown@​0.18.0 ⏵ 0.18.29810092 +196 +1100

View full report

@pkg-pr-new
Copy link

pkg-pr-new bot commented Nov 17, 2025 •
edited
Loading

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-replace@71

commit: eb894fb

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 9ec79cf to 8b755b2 Compare November 22, 2025 06:14
@renovate renovate bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Nov 22, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from d0af897 to 05204e8 Compare November 28, 2025 22:07
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from dc441b3 to 99854fd Compare December 3, 2025 20:41
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from bc1ca03 to 20a0419 Compare December 11, 2025 02:44
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 5033e2a to 7e44a29 Compare December 15, 2025 18:10
@renovate renovate bot changed the title fix(deps): update all non-major dependencies fix(deps): update all non-major dependencies - autoclosed Dec 15, 2025
@renovate renovate bot closed this Dec 15, 2025
@renovate renovate bot deleted the renovate/all-minor-patch branch December 15, 2025 18:15
@renovate renovate bot changed the title fix(deps): update all non-major dependencies - autoclosed chore(deps): update all non-major dependencies Dec 22, 2025
@renovate renovate bot reopened this Dec 22, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 7e44a29 to f9209ed Compare December 22, 2025 02:48
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from f9209ed to eb894fb Compare December 22, 2025 06:57
@renovate renovate bot merged commit 822e75a into main Dec 22, 2025
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant