Skip to content

chore(deps): update all non-major dependencies#25

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#25
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 24, 2026

This PR contains the following updates:

Package Change Age Confidence Type Update
@antfu/eslint-config ^7.4.3^7.7.0 age confidence pnpm.catalog.dev minor
@commitlint/cli (source) ^20.4.1^20.4.3 age confidence pnpm.catalog.dev patch
@commitlint/config-conventional (source) ^20.4.1^20.4.3 age confidence pnpm.catalog.dev patch
eslint (source) ^9.39.2^9.39.4 age confidence pnpm.catalog.dev patch
lint-staged ^16.2.7^16.3.3 age confidence pnpm.catalog.dev minor
node (source) >=24.13.1>=24.14.0 age confidence engines minor
pnpm (source) 10.29.310.32.1 age confidence packageManager minor
pnpm (source) >=10.29.3>=10.32.1 age confidence engines minor

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v7.7.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v7.6.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v7.6.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v7.5.0

Compare Source

   🚀 Features
    View changes on GitHub
conventional-changelog/commitlint (@​commitlint/cli)

v20.4.3

Compare Source

Bug Fixes

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.4.3

Compare Source

Bug Fixes

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

eslint/eslint (eslint)

v9.39.4

Compare Source

Bug Fixes

Documentation

Chores

v9.39.3

Compare Source

Bug Fixes

  • 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

lint-staged/lint-staged (lint-staged)

v16.3.3

Compare Source

Patch Changes
  • #​1740 0109e8d Thanks @​iiroj! - Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash.

v16.3.2

Compare Source

Patch Changes
  • #​1735 2adaf6c Thanks @​iiroj! - Hide the extra cmd window on Windows by spawning tasks without the detached option.

v16.3.1

Compare Source

Patch Changes
  • #​1729 cd5d762 Thanks @​iiroj! - Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.

v16.3.0

Compare Source

Minor Changes
  • #​1698 feda37a Thanks @​iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.

  • #​1699 1346d16 Thanks @​iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes
  • #​1726 87467aa Thanks @​iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.
nodejs/node (node)

v24.14.0

Compare Source

pnpm/pnpm (pnpm)

v10.32.1: pnpm 10.32.1

Compare Source

Patch Changes

  • Fix a regression where pnpm-workspace.yaml without a packages field caused all directories to be treated as workspace projects. This broke projects that use pnpm-workspace.yaml only for settings (e.g. minimumReleaseAge) without defining workspace packages #​10909.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx

v10.32.0: pnpm 10.32

Compare Source

Minor Changes

  • Added --all flag to pnpm approve-builds that approves all pending builds without interactive prompts #​10136.

Patch Changes

  • Reverted change related to setting explicitly the npm config file path, which caused regressions.
  • Reverted fix related to lockfile-include-tarball-url. Fixes #​10915.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx

v10.31.0

Compare Source

v10.30.3

Compare Source

v10.30.2

Compare Source

v10.30.1: pnpm 10.30.1

Compare Source

Patch Changes

  • Use the /-/npm/v1/security/audits/quick endpoint as the primary audit endpoint, falling back to /-/npm/v1/security/audits when it fails #​10649.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Workleap
Stackblitz Nx

v10.30.0: pnpm 10.30

Compare Source

Minor Changes

  • pnpm why now shows a reverse dependency tree. The searched package appears at the root with its dependents as branches, walking back to workspace roots. This replaces the previous forward-tree output which was noisy and hard to read for deeply nested dependencies.

Patch Changes

  • Revert pnpm why dependency pruning to prefer correctness over memory consumption. Reverted PR: #​7122.
  • Optimize pnpm why and pnpm list performance in workspaces with many importers by sharing the dependency graph and materialization cache across all importers instead of rebuilding them independently for each one #​10596.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Workleap
Stackblitz Nx

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from hmbanan666 as a code owner February 24, 2026 02:55
@socket-security
Copy link

socket-security bot commented Feb 24, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​commitlint/​cli@​20.4.1 ⏵ 20.4.31001007396100
Updatedeslint@​9.39.2 ⏵ 9.39.489 +110010097100
Updated@​antfu/​eslint-config@​7.4.3 ⏵ 7.7.094 +110010096100
Updated@​commitlint/​config-conventional@​20.4.1 ⏵ 20.4.310010010095100
Updatedlint-staged@​16.2.7 ⏵ 16.3.3100 +110010096 +8100

View full report

Copy link

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 3 files

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 16821b7 to 9f4483e Compare February 24, 2026 12:39
@socket-security
Copy link

socket-security bot commented Feb 24, 2026

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 068a6ba to 01263a1 Compare March 3, 2026 18:14
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 0cf9bba to f118514 Compare March 10, 2026 05:31
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from f118514 to 0a7cf0c Compare March 11, 2026 06:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants