Bump the npm group with 4 updates

[dependabot]

Bumps the npm group with 4 updates: pnpm, decode-named-character-reference, electron-to-chromium and nanoid.

Updates pnpm from 10.5.2 to 10.6.1

Release notes

Sourced from pnpm's releases.

pnpm 10.6.1

Patch Changes

• The pnpm CLI process should not stay hanging, when --silent reporting is used.
• When --loglevel is set to error, don't show installation summary, execution time, and big tarball download progress.
• Don't ignore pnpm.patchedDependencies from package.json #9226.
• When executing the approve-builds command, if package.json contains onlyBuiltDependencies or ignoredBuiltDependencies, the selected dependency package will continue to be written into package.json.
• When a package version cannot be found in the package metadata, print the registry from which the package was fetched.

Platinum Sponsors

Gold Sponsors

... (truncated)

Changelog

Sourced from pnpm's changelog.

10.6.1

Patch Changes

• The pnpm CLI process should not stay hanging, when --silent reporting is used.
• When --loglevel is set to error, don't show installation summary, execution time, and big tarball download progress.
• Don't ignore pnpm.patchedDependencies from package.json #9226.
• When executing the approve-builds command, if package.json contains onlyBuiltDependencies or ignoredBuiltDependencies, the selected dependency package will continue to be written into package.json.
• When a package version cannot be found in the package metadata, print the registry from which the package was fetched.

10.6.0

Minor Changes

• pnpm-workspace.yaml can now hold all the settings that .npmrc accepts. The settings should use camelCase #9211.

  pnpm-workspace.yaml example:

  verifyDepsBeforeRun: install
  optimisticRepeatInstall: true
  publicHoistPattern:
    - "*types*"
    - "!@types/react"

• Projects using a file: dependency on a local tarball file (i.e. .tgz, .tar.gz, .tar) will see a performance improvement during installation. Previously, using a file: dependency on a tarball caused the lockfile resolution step to always run. The lockfile will now be considered up-to-date if the tarball is unchanged.

Patch Changes

• pnpm self-update should not leave a directory with a broken pnpm installation if the installation fails.
• fast-glob replace with tinyglobby to reduce the size of the pnpm CLI dependencies #9169.
• pnpm deploy should not remove fields from the deployed package's package.json file #9215.
• pnpm self-update should not read the pnpm settings from the package.json file in the current working directory.
• Fix pnpm deploy creating a package.json without the imports and license field #9193.
• pnpm update -i should list only packages that have newer versions #9206.
• Fix a bug causing entries in the catalogs section of the pnpm-lock.yaml file to be removed when dedupe-peer-dependents=false on a filtered install. #9112

Commits

• a2d46b4 chore(release): 10.6.1
• f62db6c fix: process exit when --silent is used (#9229)
• 86ff415 chore(release): 10.6.0
• d965748 feat: setting config settings via pnpm-workspace.yaml (#9211)
• cd8caec docs: update sponsors
• adb236f refactor: improve regexp (#9203)
• 5e78da2 style: order the keys in package.json files
• f394713 chore: use resolution-mode=lowest-direct
• 6a59366 fix: self-update should not read pnpm settings from current package.json (#9196)
• See full diff in compare view

Updates decode-named-character-reference from 1.0.2 to 1.1.0

Release notes

Sourced from decode-named-character-reference's releases.

1.1.0

• faa57d6 Add support for edge-light by @​ioslh in wooorm/decode-named-character-reference#6

Full Changelog: wooorm/decode-named-character-reference@1.0.2...1.1.0

Commits

• a143c1c 1.1.0
• 52c6123 Refactor package.json
• 46352fb Refactor code-style
• faa57d6 Add support for edge-light
• e4698e9 Add declaration maps
• d5efe5d Remove license year
• 76f90fc Refactor code-style
• 47cfd61 Refactor .editorconfig
• 7e7ade6 Add .tsbuildinfo to .gitignore
• f4ae6e4 Update actions
• Additional commits viewable in compare view

Updates electron-to-chromium from 1.5.112 to 1.5.113

Commits

• ba4cbaa 1.5.113
• 37c7a22 generate new version
• See full diff in compare view

Updates nanoid from 3.3.8 to 3.3.9

Release notes

Sourced from nanoid's releases.

3.3.9

• Reduced npm package size.

Changelog

Sourced from nanoid's changelog.

3.3.9

• Reduced npm package size.

Commits

• adf9b0c Release 3.3.9 version
• 1c6f088 Remove dev file from npm package
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
github-oauth-example	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Mar 7, 2025 3:16pm