chore(deps): update all#11
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
78adf2b to
b3c5105
Compare
a8dd0f0 to
8477199
Compare
36f842f to
b307c97
Compare
934c82b to
12c69c6
Compare
3fd6417 to
1772174
Compare
99d58f0 to
6eb947a
Compare
8353ffd to
6c49ee5
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.18.0→1.19.21.19.1→1.19.21.18.0→1.19.21.19.1→1.19.24.20260310.1→4.20260502.125.0.3→25.6.025.4.0→25.6.05.1.2→5.2.017.2.3→17.4.21.18.0→1.19.21.19.1→1.19.2^0.4.26→^0.5.017.4.0→17.6.023.11.0→23.11.110.26.1→10.33.210.32.0→10.33.23.7.4→3.8.33.8.1→3.8.3^0.7.2→^0.8.07.22.0→7.25.07.3.0→7.3.25.4.14→5.4.216.0.3→6.1.14.71.0→4.87.0Release Notes
QwikDev/qwik (@builder.io/qwik)
v1.19.2Compare Source
Patch Changes
v1.19.1Compare Source
Patch Changes
🐞🩹 support Deno as package manager for production builds. The Vite plugin now recognizes Deno as a Node-compatible runtime for manifest passing, and SSG delegates to the Node implementation instead of stubbing out. (by @ianlet in #8385)
🐞🩹 the optimizer was not using the binary builds (by @wmertens in #8360)
🐞🩹 resolve 404 error for virtual CSS modules during dev SSR (by @jantimon in #8351)
v1.19.0Compare Source
Minor Changes
untrack()now accepts signals and stores directly, as well as accepting arguments when you pass a function. This makes retrieving values without subscribing to them more efficient. (by @wmertens in #8247)Patch Changes
🐞🩹 we now prevent merging useVisibleTask$ code together with other segments to prevent overpreloading when their entry contains a lot of transitive imports. (by @maiieul in #8275)
🐞🩹 duplicated preload bundles in SSR preload (by @chebanenko in #8248)
⚡️: the core.js and preloader.js references in q-manifest and bundle-graph are now filtered out for smaller outputs. (by @maiieul in #8278)
cloudflare/workerd (@cloudflare/workers-types)
v4.20260502.1Compare Source
v4.20260501.1Compare Source
v4.20260430.1Compare Source
v4.20260429.1Compare Source
v4.20260426.1Compare Source
v4.20260425.1Compare Source
v4.20260424.1Compare Source
v4.20260423.1Compare Source
v4.20260422.2Compare Source
v4.20260422.1Compare Source
v4.20260421.1Compare Source
v4.20260420.1Compare Source
v4.20260418.1Compare Source
v4.20260417.1Compare Source
v4.20260416.2Compare Source
v4.20260416.1Compare Source
v4.20260415.1Compare Source
v4.20260414.1Compare Source
v4.20260413.1Compare Source
v4.20260412.2Compare Source
v4.20260412.1Compare Source
v4.20260411.1Compare Source
v4.20260410.1Compare Source
v4.20260409.1Compare Source
v4.20260408.1Compare Source
v4.20260405.1Compare Source
v4.20260404.1Compare Source
v4.20260403.1Compare Source
v4.20260402.1Compare Source
v4.20260401.1Compare Source
v4.20260331.1Compare Source
v4.20260329.1Compare Source
v4.20260317.1Compare Source
v4.20260316.1Compare Source
v4.20260313.1Compare Source
v4.20260312.1Compare Source
vitejs/vite-plugin-react (@vitejs/plugin-react)
v5.2.0Compare Source
v5.1.4Compare Source
Fix
canSkipBabelnot accounting forbabel.overrides(#1098)When configuring
babel.overrideswithout top-level plugins or presets, Babel was incorrectly skipped. ThecanSkipBabelfunction now checks foroverrides.lengthto ensure override configurations are processed.v5.1.3Compare Source
motdotla/dotenv (dotenv)
v17.4.2Compare Source
v17.4.1Compare Source
v17.4.0Compare Source
v17.3.1Compare Source
Changed
v17.3.0Compare Source
Added
Changed
v17.2.4Compare Source
Changed
DotenvPopulateInputacceptNodeJS.ProcessEnvtype (#915)QwikDev/qwik (eslint-plugin-qwik)
v1.19.2Compare Source
v1.19.1Compare Source
Patch Changes
v1.19.0Compare Source
ArnaudBarre/eslint-plugin-react-refresh (eslint-plugin-react-refresh)
v0.5.2Compare Source
v0.5.1Compare Source
v0.5.0Compare Source
Breaking changes
reactRefreshexport is available and prefered over the default export. It's an object with two properties:plugin: The plugin object with the rulesconfigs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.customHOCsoption was renamed toextraHOCsextraHOCsoptionConfig example:
Config example without config:
Why
This version follows a revamp of the internal logic to better make the difference between random call expressions like
export const Enum = Object.keys(Record)and actual React HOC calls likeexport const MemoComponent = memo(Component). (fixes #93)The rule now handles ternaries and patterns like
export default customHOC(props)(Component)which makes it able to correctly support files like this one given this config:{ "react-refresh/only-export-components": [ "warn", { "extraHOCs": ["createRootRouteWithContext"] } ] }Because I'm not 100% sure this new logic doesn't introduce any false positive, this is done in a major-like version. This also give me the occasion to remove the hardcoded
connectfrom the rule. If you are usingconnectfromreact-redux, you should now add it toextraHOCslike this:{ "react-refresh/only-export-components": ["warn", { "extraHOCs": ["connect"] }] }sindresorhus/globals (globals)
v17.6.0Compare Source
v17.5.0Compare Source
nodejs/node (node)
v23.11.1: 2025-05-14, Version 23.11.1 (Current), @RafaelGSSCompare Source
This is a security release.
Notable Changes
src:
Commits
a271810ce2] - deps: update c-ares to v1.34.5 (Node.js GitHub Bot) #57792a12107f0dd] - (CVE-2025-23166) src: fix error handling on async crypto operations (RafaelGSS) nodejs-private/node-private#688pnpm/pnpm (pnpm)
v10.33.2Compare Source
v10.33.1: pnpm 10.33.1Compare Source
Patch Changes
packageManagerfield selects pnpm v11 or newer, commands that v10 would have passed through to npm (version,login,logout,publish,unpublish,deprecate,dist-tag,docs,ping,search,star,stars,unstar,whoami, etc.) are now handed over to the wanted pnpm, which implements them natively. Previously they silently shelled out to npm — making, for example,pnpm version --helpprint npm's help on a project withpackageManager: pnpm@11.0.0-rc.3#11328.Platinum Sponsors
Gold Sponsors
v10.33.0Compare Source
v10.32.1: pnpm 10.32.1Compare Source
Patch Changes
pnpm-workspace.yamlwithout apackagesfield caused all directories to be treated as workspace projects. This broke projects that usepnpm-workspace.yamlonly for settings (e.g.minimumReleaseAge) without defining workspace packages #10909.Platinum Sponsors
Gold Sponsors
v10.32.0: pnpm 10.32Compare Source
Minor Changes
--allflag topnpm approve-buildsthat approves all pending builds without interactive prompts #10136.Patch Changes
lockfile-include-tarball-url. Fixes #10915.Platinum Sponsors
Gold Sponsors
v10.31.0Compare Source
v10.30.3Compare Source
v10.30.2Compare Source
v10.30.1: pnpm 10.30.1Compare Source
Patch Changes
/-/npm/v1/security/audits/quickendpoint as the primary audit endpoint, falling back to/-/npm/v1/security/auditswhen it fails #10649.Platinum Sponsors
Gold Sponsors
v10.30.0: pnpm 10.30Compare Source
Minor Changes
pnpm whynow shows a reverse dependency tree. The searched package appears at the root with its dependents as branches, walking back to workspace roots. This replaces the previous forward-tree output which was noisy and hard to read for deeply nested dependencies.Patch Changes
pnpm whydependency pruning to prefer correctness over memory consumption. Reverted PR: #7122.pnpm whyandpnpm listperformance in workspaces with many importers by sharing the dependency graph and materialization cache across all importers instead of rebuilding them independently for each one #10596.Platinum Sponsors
Gold Sponsors
This PR was generated by Mend Renovate. View the repository job log.