chore(deps): update dependencies (non-major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@changesets/changelog-github (source)	^0.5.2 → ^0.6.0
@changesets/cli (source)	~2.29.8 → ~2.30.0
@commitlint/cli (source)	~20.4.1 → ~20.4.3
@commitlint/config-conventional (source)	~20.4.1 → ~20.4.3
@dotenvx/dotenvx	1.32.1 → 1.52.0
@malagu/cli	2.58.0 → 2.60.3
@release-it/conventional-changelog	~10.0.4 → ~10.0.5
@typescript-eslint/eslint-plugin (source)	~8.54.0 → ~8.56.1
@typescript-eslint/parser (source)	~8.54.0 → ~8.56.1
eslint-plugin-react-refresh	0.4.26 → 0.5.2
lint-staged	~16.2.7 → ~16.3.2
prettier-plugin-multiline-arrays	4.1.3 → 4.1.4
prettier-plugin-packagejson	3.0.0 → 3.0.1
prettier-plugin-tailwindcss	0.6.12 → 0.7.2
turbo (source)	~2.8.3 → ~2.8.13

---

Release Notes

changesets/changesets (@​changesets/changelog-github)

v0.6.0

Compare Source

Minor Changes

• #​1850 fd0bc2e Thanks @​mixelburg! - Linkify issue references in changelog entries.

Patch Changes

• #​1810 27fd8f4 Thanks @​hirasso! - Replace deprecated String.prototype.trimRight with String.prototype.trimEnd

• Updated dependencies [d4b8ad8, e462d89]:

  • @​changesets/get-github-info@​0.8.0

conventional-changelog/commitlint (@​commitlint/cli)

v20.4.3

Compare Source

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.4.3

Compare Source

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

dotenvx/dotenvx (@​dotenvx/dotenvx)

v1.52.0

Compare Source

Added

• Pass log level options to main.set (#​731)

v1.51.4

Compare Source

Changed

• Change description of dotenvx-ops to better reflect its tooling as operational primitives on top of dotenvx for production use cases. (#​721)

v1.51.3

Compare Source

Added

• Add hint on .env.keys for dotenvx ops backup. Dotenvx Ops Backup lets you back up your private keys securely with just a single command. It's a convenient alterantive to manually copy/pasting them in and out of 1Password. (#​718)

v1.51.2

Compare Source

Changed

• Switch npm publish to use Dotenvx Ops' new Rotation Tokens (ROTs) (#​715)

This will allow us to start dogfooding our own solution for third-party API key rotation. Third-party API key rotation would drastically improve security industry wide. Please get in touch if this is interesting to you.

v1.51.1

Compare Source

Added

• Add opsOff type information

v1.51.0

Compare Source

Added

• Add config({opsOff: true}) options and --ops-off flag for turning off Dotenvx Ops features. (#​680)

v1.50.1

Compare Source

Removed

• Remove listed command to radar (now ops) (#​678)

v1.50.0

Compare Source

Added

• Add optional dotenvx ops command (#​677)
• Ops is a coming rename of Radar. Radar will become a feature inside ops.
• With dotenvx ops use dotenvx across your team, infrastructure, agents, and more.

 _______________________________________________________________________
|                                                                       |
|  Dotenvx Ops: Commercial Tooling for Dotenvx                          |
|                                                                       |
|  ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓███████▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░ ░▒▓██████▓▒░                               |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
|  ░▒▓██████▓▒░░▒▓█▓▒░      ░▒▓███████▓▒░                               |
|                                                                       |
|  Use dotenvx across your team, infrastructure, agents, and more.      |
|                                                                       |
|  Learn more at https://dotenvx.com/ops                                |
|_______________________________________________________________________|

v1.49.1

Compare Source

Changed

• 🐞 patch bug with variable expansion of single quoted values (#​675)

v1.49.0

Compare Source

Added

• For precommit and prebuild, ignore .env.x file like we do with .env.vault file. (#​666)

v1.48.4

Compare Source

Removed

• Remove unnecessary use of eval in proKeypair helper (#​654)

v1.48.3

Compare Source

Changed

• Include privateKeyName and privateKey on internal processedEnv object (#​649)

v1.48.2

Compare Source

Changed

• Check radar status before sending (#​646)

v1.48.1

Compare Source

Changed

• Send beforEnv and afterEnv to Radar if user has installed (#​645)

v1.48.0

Compare Source

Added

• Include beforeEnv and afterEnv for user debugging (#​644)

v1.47.7

Compare Source

Changed

• src should be in internal processEnv object (#​643)

v1.47.6

Compare Source

Changed

• Make Radar call non-blocking (#​642)

v1.47.5

Compare Source

Changed

• Add resilient handling of any Radar failures (#​639)

v1.47.4

Compare Source

Changed

• Smarter require of non-installed libs like dotenvx-radar (#​638)

v1.47.3

Compare Source

Added

• Send to radar#observe if Radar installed by user (#​631)

Removed

• Remove cli in package.json (#​632)

v1.47.2

Compare Source

Added

• Export cli in package.json (#​629)

v1.47.1

Compare Source

Added

• Add convenience log that radar active 📡 when dotenvx-radar is installed (#​625)

v1.47.0

Compare Source

Added

• Add optional dotenvx radar command (#​624)
• Radar is an early access commercial extension for dotenvx that will auto backup your .env files.

 _______________________________________________________________________
|                                                                       |
|  Dotenvx Radar: Env Observability                                     |
|                                                                       |
|  ░▒▓███████▓▒░ ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓██████▓▒░░▒▓███████▓▒░    |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓███████▓▒░░▒▓████████▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓████████▓▒░▒▓███████▓▒░    |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|                                                                       |
|  Observe, version, and back up your environment variables at runtime. |
|                                                                       |
|  Purchase lifetime access at https://dotenvx.com/radar                |
|                                                                       |
| --------------------------------------------------------------------- |
| - thank you for using dotenvx! - @​motdotla                            |
|_______________________________________________________________________|

v1.46.0

Compare Source

Added

• Add error when hoisting issue experienced around commander.js (#​623)

Removed

• Remove git-dotenvx and git dotenvx shorthand (#​621)

v1.45.2

Compare Source

Changed

• Minor README updates

v1.45.1

Compare Source

Changed

• Include setLogName and setLogVersion in config (#​613)

v1.45.0

Compare Source

Added

• Add logger.setName and logger.setVersion for customization of logger (#​612)

v1.44.2

Compare Source

Changed

• Clarify license is BSD-3.

v1.44.1

Compare Source

Changed

• Patch SetOutput type (#​597)

v1.44.0

Compare Source

Added

• Add armv7 support (#​593)

v1.43.0

Compare Source

Removed

• Remove errorv, errornocolor, blank from logger options (#​584)

Changed

• Replace instances of console.error with logger.error (#​584)

v1.42.2

Compare Source

Changed

• Fix --force flag work with ?force=true (2776715)

v1.42.1

Compare Source

Added

• Add --force flag to install.sh (0b8d21c)

v1.42.0

Compare Source

Added

• Add ability to override the os and arch via install.sh and dotenvx.sh (3ded752)

v1.41.0

Compare Source

Added

• Add [directory] argument to precommit and prebuild (#​572)

v1.40.1

Compare Source

Changed

• Patch ext scan command (#​570)

v1.40.0

Compare Source

Added

• Smarter ext precommit and ext prebuild – catch duplicate KEYs in the same .env file where one is mistakenly left unencrypted (#​567)

v1.39.1

Compare Source

Added

• Add version to homebrew formula (#​564)

v1.39.0

Compare Source

Added

• Add --convention flow option to dotenvx run (#​551)

Changed

• Fix typos (#​550)

v1.38.5

Compare Source

Added

• 🐞 Add config.d.ts file to fix type error when loading dotenvx/dotenvx/config with dynamic import (#​547)

v1.38.4

Compare Source

Changed

• 🐞 Fix blank line disappearing after encrypting empty value (#​542)

v1.38.3

Compare Source

Changed

• 🐞 Fix self-referencing expansion when key exists already in process.env (#​536)

v1.38.2

Compare Source

Added

• Add typescript types for main.get.

v1.38.1

Compare Source

Changed

• Support encrypt when mutliline contains windows CRLF (\r\n) (#​534)

Note: dotenvx will convert these \r\n newlines to \n. Our recommendation is to stop using CRLF - its origin is from typewriter days. Instead, set your editor or gitattributes to use LF.

v1.38.0

Compare Source

Changed

• Command substitution failures no longer halt further processing of keys in a .env file (#​533)
• A more helpful error is raised if a command substitution failure occurs (#​533)

v1.37.0

Compare Source

Added

• add dotenvx rotate command 🎉 (#​530)

also: our whitepaper is released as a draft.

v1.36.0

Compare Source

Changed

• --strict flag respects (doesn't throw) anything in --ignore flag (#​527)

v1.35.0

Compare Source

Added

• npx dotenvx precommit support as a convenience (#​523)
• main.get method (#​524)

The addition of main.get facilitates what we term Decryption at Access, a concept explored in greater detail in our whitepaper.

v1.34.0

Compare Source

Added

• main.set method now writes to files (#​517)

v1.33.0

Compare Source

Added

• support ESM import convenience import '@​dotenvx/dotenvx/config' (#​508)

cellbang/malagu (@​malagu/cli)

v2.60.3

Compare Source

• fix(cli-common): 修复组件判别逻辑错误

v2.60.2

Compare Source

• fix(ui-packages): 修复目录名称拼写错误导致前端相关包没有正常发布

v2.60.1

Compare Source

• feat(retry): 添加新组件 @celljs/retry，支持重试机制
• feat(core): 优化 @celljs/core 模块对单元测试的支持

v2.60.0

Compare Source

release-it/conventional-changelog (@​release-it/conventional-changelog)

v10.0.5

Compare Source

• test: add should generate changelog with remote origin urls (#​132) (7e53f8c) - thanks @​Maxel01!
• fix: pass parserOpts to both Bumper and ConventionalChangelog (#​135) (4dce48a) - thanks @​aarond-sp!

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.56.1

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.0

Compare Source

🚀 Features

• support ESLint v10 (#​12057)

🩹 Fixes

• use parser options from context.languageOptions (#​12043)

❤️ Thank You

• Brad Zacher @​bradzacher
• fnx @​DMartens
• Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

Compare Source

🚀 Features

• utils: deprecate defaultOptions in favor of meta.defaultOptions (#​11992)

🩹 Fixes

• eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#​11949)
• eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#​11984)
• eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#​11966, #​12000)
• eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#​11990)

❤️ Thank You

• Christian Rose @​chrros95
• Josh Goldberg
• Maria Solano @​MariaSolOs
• Minyeong Kim @​minyeong981
• SungHyun627 @​SungHyun627
• Yukihiro Hasegawa @​y-hsgw

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.56.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.0

Compare Source

🚀 Features

• support ESLint v10 (#​12057)

❤️ Thank You

• Brad Zacher @​bradzacher
• Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

ArnaudBarre/eslint-plugin-react-refresh (eslint-plugin-react-refresh)

v0.5.2

Compare Source

• Support nested function calls for extraHOCs (actually fixes #​104)

v0.5.1

Compare Source

• Mark ESLint v10 as supported
• Support false positives with TypeScript function overloading (fixes #​105)
• Support nested function calls for extraHOCs (fixes #​104)

v0.5.0

Compare Source

Breaking changes

• The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config
• A new reactRefresh export is available and prefered over the default export. It's an object with two properties:
  • plugin: The plugin object with the rules
  • configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.
• customHOCs option was renamed to extraHOCs
• Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option

Config example:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";

export default defineConfig(
  /* Main config */
  reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);

Config example without config:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";

export default defineConfig({
  files: ["**/*.ts", "**/*.tsx"],
  plugins: {
    // other plugins
    "react-refresh": reactRefresh.plugin,
  },
  rules: {
    // other rules
    "react-refresh/only-export-components": [
      "warn",
      { extraHOCs: ["someLibHOC"] },
    ],
  },
});

Why

This version follows a revamp of the internal logic to better make the difference between random call expressions like export const Enum = Object.keys(Record) and actual React HOC calls like export const MemoComponent = memo(Component). (fixes #​93)

The rule now handles ternaries and patterns like export default customHOC(props)(Component) which makes it able to correctly support files like this one given this config:

{
  "react-refresh/only-export-components": [
    "warn",
    { "extraHOCs": ["createRootRouteWithContext"] }
  ]
}

[!NOTE]
Actually createRoute functions from TanStack Router are not React HOCs, they return route objects that fake to be a memoized component but are not. When only doing createRootRoute({ component: Foo }), HMR will work fine, but as soon as you add a prop to the options that is not a React component, HMR will not work. I would recommend to avoid adding any TanStack function to extraHOCs it you want to preserve good HMR in the long term. Bluesky thread.

Because I'm not 100% sure this new logic doesn't introduce any false positive, this is done in a major-like version. This also give me the occasion to remove the hardcoded connect from the rule. If you are using connect from react-redux, you should now add it to extraHOCs like this:

{
  "react-refresh/only-export-components": ["warn", { "extraHOCs": ["connect"] }]
}

lint-staged/lint-staged (lint-staged)

v16.3.2

Compare Source

Patch Changes

• #​1735 2adaf6c Thanks @​iiroj! - Hide the extra cmd window on Windows by spawning tasks without the detached option.

v16.3.1

Compare Source

Patch Changes

• #​1729 cd5d762 Thanks @​iiroj! - Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.

v16.3.0

Compare Source

Minor Changes

• #​1698 feda37a Thanks @​iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.

• #​1699 1346d16 Thanks @​iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes

• #​1726 87467aa Thanks @​iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.

electrovir/prettier-plugin-multiline-arrays (prettier-plugin-multiline-arrays)

v4.1.4

Compare Source

Previous: v4.1.3
Compare: v4.1.3...v4.1.4

Commits

• 0072232 (electrovir): [patch] move @​augment-vir/assert to from dev deps to normal deps
• ae1585a (electrovir): [patch] update deps

matzkoh/prettier-plugin-packagejson (prettier-plugin-packagejson)

v3.0.1

Compare Source

Bug Fixes

• deps: pin dependencies (9508641)

tailwindlabs/prettier-plugin-tailwindcss (prettier-plugin-tailwindcss)

v0.7.2

Compare Source

Fixed

• Load compatible plugins sequentially to work around race conditions in Node.js (#​412)
• Fix compatibility with prettier-plugin-svelte when using Prettier v3.7+ (#​418)

v0.7.1

Compare Source

Fixed

• Match against correct name of dynamic attributes when using regexes (#​410)

v0.7.0

Compare Source

Added

• Format quotes in @source, @plugin, and @config (#​387)
• Sort in function calls in Twig (#​358)
• Sort in callable template literals (#​367)
• Sort in function calls mixed with property accesses (#​367)
• Support regular expression patterns for attributes (#​405)
• Support regular expression patterns for function names (#​405)

Changed

• Improved monorepo support by loading Tailwind CSS relative to the input file instead of prettier config file (#​386)
• Improved monorepo support by loading v3 configs relative to the input file instead of prettier config file (#​386)
• Fallback to Tailwind CSS v4 instead of v3 by default (#​390)
• Don't augment global Prettier ParserOptions and RequiredOptions types (#​354)
• Drop support for prettier-plugin-import-sort (#​385)

Fixed

• Handle quote escapes in LESS when sorting @apply (#​392)
• Fix whitespace removal inside nested concat and template expressions (#​396)

v0.6.14

Compare Source

• Add support for OXC + Hermes Prettier plugins (#​376, #​380)
• Sort template literals in Angular expressions (#​377)
• Don't repeatedly add backslashes to escape sequences when formatting (#​381)

v0.6.13

Compare Source

• Prevent Svelte files from breaking when there are duplicate classes (#​359)
• Ensure prettier-plugin-multiline-arrays and prettier-plugin-jsdoc work when used together with this plugin (#​372)

vercel/turborepo (turbo)

v2.8.13: Turborepo v2.8.13

[Compare Source](https://redirect.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 6c8ecf6

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR