Skip to content

chore(deps): update all non-major dependencies#214

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#214
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented May 1, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@changesets/changelog-github (source) 0.5.10.5.2 age confidence devDependencies patch
@changesets/cli (source) 2.28.12.29.8 age confidence devDependencies minor
@tsconfig/node18 (source) 18.2.418.2.6 age confidence devDependencies patch
@types/aws-lambda (source) 8.10.1488.10.160 age confidence devDependencies patch
@types/node (source) 22.13.1422.19.8 age confidence devDependencies minor
@vitest/coverage-v8 (source) 3.1.13.2.4 age confidence devDependencies minor
dotenv 16.4.716.6.1 age confidence devDependencies minor
nanoid 5.1.55.1.6 age confidence devDependencies patch
node 22.14.022.22.0 age confidence uses-with minor
pnpm (source) 10.7.010.28.2 age confidence packageManager minor
prettier (source) 4.0.0-alpha.124.0.0-alpha.13 age confidence devDependencies patch
simple-git-hooks 2.12.12.13.1 age confidence devDependencies minor
tsup (source) 8.4.08.5.1 age confidence devDependencies minor
typescript (source) 5.8.25.9.3 age confidence devDependencies minor
vitest (source) 3.1.13.2.4 age confidence devDependencies minor

Release Notes

changesets/changesets (@​changesets/changelog-github)

v0.5.2

Compare Source

tsconfig/bases (@​tsconfig/node18)

v18.2.6

Compare Source

v18.2.5

Compare Source

vitest-dev/vitest (@​vitest/coverage-v8)

v3.2.4

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.2.3

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.2.2

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.2.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.2.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.1.4

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.1.3

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.1.2

Compare Source

   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub
motdotla/dotenv (dotenv)

v16.6.1

Compare Source

Changed
  • Default quiet to true – hiding the runtime log message (#​874)
  • NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
  • And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@​dotenvx/dotenvx').config().

v16.6.0

Compare Source

Added
  • Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#​870)
  • Use { quiet: true } to suppress
  • Aligns dotenv more closely with dotenvx.

v16.5.0

Compare Source

Added
  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP]
Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM.
Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed
  • Remove _log method. Use _debug #​862
ai/nanoid (nanoid)

v5.1.6

Compare Source

  • Fixed infinite loop on 0 size for customAlphabet.
actions/node-versions (node)

v22.22.0: 22.22.0

Compare Source

Node.js 22.22.0

v22.21.1: 22.21.1

Compare Source

Node.js 22.21.1

v22.21.0: 22.21.0

Compare Source

Node.js 22.21.0

v22.20.0: 22.20.0

Compare Source

Node.js 22.20.0

v22.19.0: 22.19.0

Compare Source

Node.js 22.19.0

v22.18.0: 22.18.0

Compare Source

Node.js 22.18.0

v22.17.1: 22.17.1

Compare Source

Node.js 22.17.1

v22.17.0: 22.17.0

Compare Source

Node.js 22.17.0

v22.16.0: 22.16.0

Compare Source

Node.js 22.16.0

v22.15.1: 22.15.1

Compare Source

Node.js 22.15.1

v22.15.0: 22.15.0

Compare Source

Node.js 22.15.0

pnpm/pnpm (pnpm)

v10.28.2: pnpm 10.28.2

Compare Source

Patch Changes

  • Security fix: prevent path traversal in directories.bin field.

  • When pnpm installs a file: or git: dependency, it now validates that symlinks point within the package directory. Symlinks to paths outside the package root are skipped to prevent local data from being leaked into node_modules.

    This fixes a security issue where a malicious package could create symlinks to sensitive files (e.g., /etc/passwd, ~/.ssh/id_rsa) and have their contents copied when the package is installed.

    Note: This only affects file: and git: dependencies. Registry packages (npm) have symlinks stripped during publish and are not affected.

  • Fixed optional dependencies to request full metadata from the registry to get the libc field, which is required for proper platform compatibility checks #​9950.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.28.1

Compare Source

v10.28.0

Compare Source

v10.27.0

Compare Source

v10.26.2: pnpm 10.26.2

Compare Source

Patch Changes

  • Improve error message when a package version exists but does not meet the minimumReleaseAge constraint. The error now clearly states that the version exists and shows a human-readable time since release (e.g., "released 6 hours ago") #​10307.

  • Fix installation of Git dependencies using annotated tags #​10335.

    Previously, pnpm would store the annotated tag object's SHA in the lockfile instead of the actual commit SHA. This caused ERR_PNPM_GIT_CHECKOUT_FAILED errors because the checked-out commit hash didn't match the stored tag object hash.

  • Binaries of runtime engines (Node.js, Deno, Bun) are written to node_modules/.bin before lifecycle scripts (install, postinstall, prepare) are executed #​10244.

  • Try to avoid making network calls with preferOffline #​10334.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.26.1: pnpm 10.26.1

Compare Source

Patch Changes

  • Don't fail on pnpm add, when blockExoticSubdeps is set to true #​10324.
  • Always resolve git references to full commits and ensure HEAD points to the commit after checkout #​10310.

Platinum Sponsors

Bit

Gold Sponsors

Discord config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label May 1, 2025
@codecov
Copy link

codecov bot commented May 1, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.69%. Comparing base (b6239a5) to head (4f0ecaa).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #214   +/-   ##
=======================================
  Coverage   71.69%   71.69%           
=======================================
  Files           1        1           
  Lines          53       53           
  Branches        6        6           
=======================================
  Hits           38       38           
  Misses         15       15           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 05100a2 to 3222c08 Compare May 8, 2025 15:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 4596cf1 to dbf686d Compare May 19, 2025 02:38
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 4b04438 to 148c673 Compare May 22, 2025 08:51
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 68c615b to 03cfbed Compare June 3, 2025 18:22
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 7504e51 to 9afa362 Compare November 19, 2025 01:28
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9afa362 to de135dd Compare November 20, 2025 17:06
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from ac8c9d5 to def5a35 Compare December 3, 2025 19:30
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 16bc762 to 058711e Compare December 15, 2025 17:33
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 0a6878c to 5acca14 Compare December 23, 2025 17:33
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from d745ca6 to 2446f02 Compare December 31, 2025 16:41
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 0e2ac67 to 2cc3e63 Compare January 15, 2026 18:44
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 9188b9b to b3ff366 Compare January 20, 2026 01:43
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from b3ff366 to c645b6e Compare January 26, 2026 16:52
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c645b6e to 4111d5a Compare February 2, 2026 21:04
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 4111d5a to 4f0ecaa Compare February 3, 2026 10:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants