Skip to content

chore(deps): update all non-major dependencies#1357

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#1357
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update
@antfu/eslint-config ^9.0.0 → ^9.1.0 age confidence devDependencies minor
@codspeed/vitest-plugin (source) ^5.6.0 → ^5.7.1 age confidence devDependencies minor
CodSpeedHQ/action v4.17.6 → v4.18.1 age confidence action minor
eslint (source) ^10.5.0 → ^10.6.0 age confidence devDependencies minor
eslint-plugin-jsdoc 63.0.7 → 63.0.10 age confidence pnpm-workspace.overrides patch
exsolve ^1.0.8 → ^1.1.0 age confidence dependencies minor
exsolve ^1.0.8 → ^1.1.0 age confidence devDependencies minor
httpxy 0.5.3 → 0.5.4 age confidence pnpm-workspace.overrides patch
knip (source) ^6.17.1 → ^6.24.0 age confidence devDependencies minor
nypm ^0.6.7 → ^0.6.8 age confidence dependencies patch
nypm ^0.6.7 → ^0.6.8 age confidence devDependencies patch
pnpm (source) 11.8.0 → 11.9.0 age confidence packageManager minor
srvx (source) ^0.11.17 → ^0.11.20 age confidence dependencies patch
srvx (source) ^0.11.17 → ^0.11.20 age confidence devDependencies patch
tinyclip ^0.1.14 → ^0.1.15 age confidence dependencies patch
tinyclip ^0.1.14 → ^0.1.15 age confidence devDependencies patch
undici (source) ^8.5.0 → ^8.6.0 age confidence devDependencies minor
vue (source) ^3.5.38 → ^3.5.39 age confidence devDependencies patch
vue-tsc (source) ^3.3.5 → ^3.3.6 age confidence devDependencies patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v9.1.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
CodSpeedHQ/codspeed-node (@​codspeed/vitest-plugin)

v5.7.1

Compare Source

What's Changed

Full Changelog: CodSpeedHQ/codspeed-node@v5.7.0...v5.7.1

v5.7.0

Compare Source

Highlights

  • Dump full inlining information for higher optimization tiers in walltime so we can show more functions on the profiler. To test it out, set CODSPEED_WALLTIME_PROFILER=samply env variable in the codspeed action.
  • Added support for tinybench v5 and v6 in @​codspeed/tinybench-plugin

What's Changed

Full Changelog: CodSpeedHQ/codspeed-node@v5.6.0...v5.7.0

CodSpeedHQ/action (CodSpeedHQ/action)

v4.18.1

Compare Source

Release Notes

🚀 Features

Install codspeed-runner 4.18.1

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.1/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.18.1

File Platform Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

v4.18.0

Compare Source

Release Notes

🚀 Features
🐛 Bug Fixes

Install codspeed-runner 4.18.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.0/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.18.0

File Platform Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

eslint/eslint (eslint)

v10.6.0

Compare Source

Features

  • b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#​20981) (Taejin Kim)
  • f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#​20948) (sethamus)

Bug Fixes

  • 6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#​20997) (Milos Djermanovic)
  • bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#​21013) (den$)
  • 8fd8741 fix: don't report shadowed undefined in radix rule (#​21011) (Pixel)
  • 5784980 fix: don't report shadowed undefined in no-throw-literal (#​21010) (Pixel)
  • 9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#​21008) (Pixel)
  • d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#​21006) (Pixel)
  • 2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#​21003) (den$)
  • 63d52d2 fix: restore max-classes-per-file report range (#​21002) (Pixel)
  • 7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#​20979) (fnx)
  • 399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#​20995) (Milos Djermanovic)

Documentation

  • a83683d docs: Update README (GitHub Actions Bot)
  • f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#​20986) (playgirl)
  • bea49f7 docs: Update README (GitHub Actions Bot)
  • e5f70f9 docs: update code-path diagrams (#​20984) (Tanuj Kanti)
  • 8890c2d docs: add TypeScript config guidance for MCP server (#​20796) (Pierluigi Lenoci)
  • 3eb3d9b docs: Update README (GitHub Actions Bot)
  • c5bb59c docs: Update README (GitHub Actions Bot)
  • eb3c97c docs: fix grammar in prefer-const rule description (#​20983) (lumir)

Chores

gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)

v63.0.10

Compare Source

Bug Fixes
  • escape-inline-tags: allow scoped packages in declaration references (#​1705) (70e0a11)

v63.0.9

Compare Source

Bug Fixes
  • check-template-names, require-template, valid-types: keep commas inside @template default values (0980b71)

v63.0.8

Compare Source

Bug Fixes
  • check-template-names: detect template usage in @augments/@extends/@implements types (208079f)
unjs/exsolve (exsolve)

v1.1.0

Compare Source

compare changes

🚀 Enhancements
  • Sync internal with latest Node.js upstream (#​49)
🔥 Performance
  • Optimize resolver cache lookups (#​48)
🏡 Chore
❤️ Contributors
unjs/httpxy (httpxy)

v0.5.4

Compare Source

compare changes

🩹 Fixes
  • types: Declare pathname on ProxyTargetDetailed (#​152)
  • Preserve transfer-encoding on chunked DELETE/OPTIONS (#​153)
🏡 Chore
🤖 CI
  • Add ecosystem test for http-proxy-middleware (#​142)
❤️ Contributors
webpro-nl/knip (knip)

v6.24.0: Release 6.24.0

Compare Source

v6.23.0: Release 6.23.0

Compare Source

v6.22.0: Release 6.22.0

Compare Source

v6.21.0: Release 6.21.0

Compare Source

v6.20.0: Release 6.20.0

Compare Source

v6.19.0: Release 6.19.0

Compare Source

v6.18.0: Release 6.18.0

Compare Source

v6.17.2: Release 6.17.2

Compare Source

pnpm/pnpm (pnpm)

v11.9.0

Compare Source

h3js/srvx (srvx)

v0.11.20

Compare Source

compare changes

🔥 Performance
  • node: Fast header lookups and fewer per-request allocations (#​218)
  • node: Fire-and-forget response send on the serve() path (#​219)
❤️ Contributors

v0.11.19

Compare Source

compare changes

🚀 Enhancements
  • maxRequestBodySize server option (#​216)
🩹 Fixes
  • node: Case-insensitive content-length/content-type dedup in FastResponse (#​214)
  • url: Deopt FastURL for query percent-encode-set chars (" ' < >) (#​215)
  • tracing: Satisfy tracingChannel StoreType object constraint (57001b6)
  • node: Read duplicate single-value headers from rawHeaders in get/has (#​217)
🏡 Chore
✅ Tests
❤️ Contributors

v0.11.18

Compare Source

compare changes

🩹 Fixes
  • bun, deno: Unwrap NodeResponse (b0dadda)
🏡 Chore
✅ Tests
  • node: Connect http2 tests via localhost for TLS cert match (#​211)
  • Fix deno incompatibility (4fd915f)
❤️ Contributors
tinylibs/tinyclip (tinyclip)

v0.1.15

Compare Source

What's Changed

Full Changelog: tinylibs/tinyclip@0.1.14...0.1.15

nodejs/undici (undici)

v8.6.0

Compare Source

vuejs/core (vue)

v3.5.39

Compare Source

Bug Fixes
vuejs/language-tools (vue-tsc)

v3.3.6

Compare Source

language-core
  • fix: make generic component internal context inference type-safe across .d.ts boundary (#​6104) - Thanks to @​Holiden!
  • fix: do not treat non-trivial property accesses as compound - Thanks to @​KazariEX!
  • fix: treat semicolon-terminated expressions as compound - Thanks to @​KazariEX!
  • fix: preserve return types for compound event handlers - Thanks to @​KazariEX!
  • fix: use WeakMap to cache inline TS ASTs - Thanks to @​KazariEX!
  • fix: match upstream CSS v-bind parsing behavior - Thanks to @​KazariEX!
  • fix: include setup bindings as potential component names (#​6111) - Thanks to @​KazariEX!
  • perf: reduce boundary code feature allocations - Thanks to @​KazariEX!
  • refactor: centralize code features and deprecate allCodeFeatures - Thanks to @​KazariEX!

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from danielroe as a code owner June 29, 2026 05:39
@socket-security

socket-security Bot commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedtinyclip@​0.1.15711007892100
Addedsrvx@​0.11.20731009696100
Addedexsolve@​1.1.010010010085100
Added@​antfu/​eslint-config@​9.1.09610010091100
Addednypm@​0.6.810010010091100
Addedvue@​3.5.391001009196100
Addedvue-tsc@​3.3.61001009296100
Addedknip@​6.24.0991009596100
Addedundici@​8.6.09510010097100
Added@​codspeed/​vitest-plugin@​5.7.1971009896100
Addedeslint@​10.6.09810010096100

View full report

@pkg-pr-new

pkg-pr-new Bot commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown

  • nuxt-cli-playground

    npm i https://pkg.pr.new/create-nuxt@1357

    npm i https://pkg.pr.new/nuxi@1357

    npm i https://pkg.pr.new/@nuxt/cli@1357

commit: 792706c

@socket-security

socket-security Bot commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @emnapi/runtime is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/nitro@3.0.1-alpha.2 → npm/nitropack@2.13.4 → npm/@nuxt/eslint-config@1.16.0 → npm/knip@6.24.0 → npm/@emnapi/runtime@1.11.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@emnapi/runtime@1.11.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm eslint-plugin-jsdoc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/@nuxt/eslint-config@1.16.0 → npm/@antfu/eslint-config@9.1.0 → npm/eslint-plugin-jsdoc@63.0.10

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/eslint-plugin-jsdoc@63.0.10. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@codspeed-hq

codspeed-hq Bot commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Merging this PR will degrade performance by 46.34%

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

❌ 1 regressed benchmark
✅ 1 untouched benchmark

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

Benchmark BASE HEAD Efficiency
❌ makes requests to dev server 56 ms 104.3 ms -46.34%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

Comparing renovate/all-minor-patch (792706c) with main (49dd7f7)

Open in CodSpeed

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 8a92b0c to e3392f7 Compare July 3, 2026 07:47
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from e3392f7 to 792706c Compare July 3, 2026 18:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@danielroe danielroe Awaiting requested review from danielroe danielroe is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants