Skip to content

chore(deps): update all non-major dependencies#1865

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#1865
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@vitejs/plugin-legacy (source) ^8.0.2 → ^8.2.1 age confidence dependencies minor
@vue/reactivity (source) ^3.5.38 → ^3.5.40 age confidence devDependencies patch
MatteoGabriele/agentscan-action v2.0.1 → v2.2.0 age confidence action minor
actions/setup-node v6.4.0 → v6.5.0 age confidence action minor
actions/stale v10.3.0 → v10.4.0 age confidence action minor
enhanced-resolve ^5.24.0 → ^5.24.2 age confidence dependencies patch
eslint (source) 9.39.4 → 9.39.5 age confidence devDependencies patch
eslint-plugin-import-x ^4.16.2 → ^4.17.1 age confidence devDependencies minor
eslint-plugin-jsdoc 63.0.7 → 63.1.0 age confidence devDependencies minor 63.2.0
exsolve ^1.0.8 → ^1.1.0 age confidence dependencies minor
globals ^17.6.0 → ^17.7.0 age confidence devDependencies minor
globby 16.2.0 → 16.2.2 age confidence devDependencies patch
happy-dom ^20.10.6 → ^20.11.0 age confidence devDependencies minor
knip (source) 6.17.1 → 6.27.0 age confidence devDependencies minor
nypm ^0.6.7 → ^0.6.8 age confidence dependencies patch
playwright-core (source) 1.61.0 → 1.61.1 age confidence devDependencies patch
pnpm (source) 10.34.4 → 10.34.5 age confidence packageManager patch
std-env ^4.1.0 → ^4.2.0 age confidence dependencies minor
std-env 4.1.0 → 4.2.0 age confidence devDependencies minor
terser (source) ^5.48.0 → ^5.49.0 age confidence dependencies minor
typescript-eslint (source) ^8.61.1 → ^8.64.0 age confidence devDependencies minor
vite (source) ~7.3.5 → ~7.3.6 age confidence dependencies patch
vite (source) ~7.3.5 → ~7.3.6 age confidence devDependencies patch
vitest (source) 4.1.9 → 4.1.10 age confidence devDependencies patch
vue-bundle-renderer ^2.2.0 → ^2.3.1 age confidence dependencies minor

Release Notes

vitejs/vite (@​vitejs/plugin-legacy)

v8.2.1

Bug Fixes

v8.2.0

Features
Bug Fixes
Code Refactoring

v8.1.0

Compare Source

vuejs/core (@​vue/reactivity)

v3.5.40

Compare Source

Bug Fixes

v3.5.39

Compare Source

Bug Fixes
MatteoGabriele/agentscan-action (MatteoGabriele/agentscan-action)

v2.2.0

Compare Source

What's Changed

Full Changelog: MatteoGabriele/agentscan-action@v2.1.0...v2.2.0

v2.1.0

Compare Source

What's Changed

Full Changelog: MatteoGabriele/agentscan-action@v2.0.1...v2.1.0

actions/setup-node (actions/setup-node)

v6.5.0

Compare Source

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

actions/stale (actions/stale)

v10.4.0

Compare Source

What's Changed

Bug Fix
Dependency Updates
  • Bump undici to 6.27.0 via override, clean up stale license files, and version to 10.4.0. by @​dependabot in #​1342

New Contributors

Full Changelog: actions/stale@v10.3.0...v10.4.0

webpack/enhanced-resolve (enhanced-resolve)

v5.24.2

Compare Source

Patch Changes

v5.24.1

Compare Source

Patch Changes
eslint/eslint (eslint)

v9.39.5

Compare Source

Bug Fixes

Documentation

Chores

  • 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
  • 202117b chore: package.json update for @​eslint/js release (Jenkins)
  • d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
  • 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
  • daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
  • daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
  • 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)
un-ts/eslint-plugin-import-x (eslint-plugin-import-x)

v4.17.1

Compare Source

Patch Changes
  • #​498 cf25a01 Thanks @​marcalexiei! - fix(extensions): don't require an extension for package subpaths that resolve to a .d.ts (e.g. vitest/config)

v4.17.0

Compare Source

Minor Changes
  • #​474 4b2c0c5 Thanks @​regseb! - Support RegExp in the import-x/ignore setting and the ignore option of the no-unresolved rule.
Patch Changes

  • #​494 1c84235 Thanks @​morgan-coded! - Fixed no-unresolved crashing when case-sensitive path checks encounter EACCES or EPERM on an ancestor directory.

  • #​481 3e13121 Thanks @​B4nan! - fix: memoize legacyNodeResolve resolver to avoid native memory leak

  • #​484 9a07009 Thanks @​sairus2k! - Make the extensions rule check Node.js subpath imports (specifiers starting with #, e.g. #utils/helper). Previously parsePath treated a leading # as a URL hash fragment, so the rule skipped extension validation for these imports.

    Note: single-segment subpath imports without a slash (e.g. #dep) are still skipped by the existing external-root-module classification; fixing that is deferred to avoid expanding scope.

  • #​468 240ed58 Thanks @​silverwind! - Make extensions handle .d.ts correctly

  • #​479 e3cc7e4 Thanks @​mrginglymus! - fix: strip querystrings and hash fragments when checking for file existence

  • #​476 fce29b1 Thanks @​nbouvrette! - fix(deps): replace @​package-json/types with an inline minimal type

gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)

v63.1.0

Compare Source

Features

v63.0.14

Compare Source

Bug Fixes
  • escape-inline-tags: ignore Markdown code spans (786d12d)

v63.0.13

Compare Source

Bug Fixes
  • failing pages build and deployment (3728347)

v63.0.12

Compare Source

v63.0.11

Compare Source

Bug Fixes
  • require-jsdoc: skip overloads to find method comment blocks; fixes #​1688 (7676b50)

v63.0.10

Compare Source

Bug Fixes
  • escape-inline-tags: allow scoped packages in declaration references (#​1705) (70e0a11)

v63.0.9

Compare Source

Bug Fixes
  • check-template-names, require-template, valid-types: keep commas inside @template default values (0980b71)

v63.0.8

Compare Source

Bug Fixes
  • check-template-names: detect template usage in @augments/@extends/@implements types (208079f)
unjs/exsolve (exsolve)

v1.1.0

Compare Source

compare changes

🚀 Enhancements
  • Sync internal with latest Node.js upstream (#​49)
🔥 Performance
  • Optimize resolver cache lookups (#​48)
🏡 Chore
❤️ Contributors
sindresorhus/globals (globals)

v17.7.0

Compare Source

sindresorhus/globby (globby)

v16.2.2

Compare Source

  • Fix: Do not enumerate ignored directories with gitignore option 8bf8f54

v16.2.1

Compare Source

  • Fix gitignore ignoring an entire checkout under an anchored ancestor path (#​277) e7bd988
capricorn86/happy-dom (happy-dom)

v20.11.0

Compare Source

🎨 Features
webpro-nl/knip (knip)

v6.27.0: Release 6.27.0

Compare Source

  • Add Temporal plugin (98191a0)
  • Handle -d alias for react-email dir argument (53d1fec)
  • Expand pnpm script references with forwarded arguments (33e9799)
  • Treat path-shaped script tokens as file references, extend known global binaries (d9508c2)
  • Mark tsdown neverBundle dependencies as referenced (5fd863b)
  • Support TanStack Start in tanstack-router plugin (bd63cd8)
  • Mark vite ssr.external dependencies as referenced (91de938)
  • Expand bun, npm, and yarn script references with forwarded arguments (b5a3176)
  • Add Latitude as sponsor (4267675)
  • Regenerate plugin list in docs (1d2cdff)
  • Support Vue 2 template auto-imports (close #​1881) (2157f39)
  • Ignore block-commented stylesheet imports (resolve #​1880, close #​1882) (a627f53)
  • Support TypeScript 5.0 narrowing for ssr.external (989292f)
  • Resolve local binaries from bun run (5e9a7f0)
  • Support Vitest inline project config extensions (f682327)
  • Resolve package names from aliased node_modules paths (c273d5f)
  • Support Tailwind CSS URL imports (57a4770)
  • Resolve unbuilt workspace package exports (close #​1877) (1b0a2c0)
  • Skip unresolved imports of gitignored generated files (605c904)
  • Attribute imports of aliased packages to the declared dependency (d05e775)
  • Flag unresolvable imports of transitive peer deps as unlisted (resolve #​1883) (18f0bff)
  • Don't count ambient module declarations in script files as imports (e52aecf)
  • Update rolldown snapshot (a63e927)
  • Remove obsolete workarounds from ecosystem tests (a521cf7)
  • Handle snapshotSerializers in Vitest plugin (resolve #​1884) (b597de9)
  • Set the stage (c059c2b)

v6.26.0: Release 6.26.0

Compare Source

  • ci: add path filters (#​1871) (4249935) - thanks @​trueberryless!
  • Add CodeRabbit as gold sponsor (1da09fd)
  • Fix up docs a bit more (39125a7)
  • Don't report ambient declaration files as unused (aed361c)
  • Register oclif command files as entries (3b4d58c)
  • Add electron-vite plugin (d92107e)
  • Add esbuild plugin (ef3b601)
  • Ignore more globally available binaries (8292981)
  • Resolve #-imports to source when node condition is unbuilt (resolve #​1873) (f2713ed)
  • Ignore gh as a globally available binary (a6f0772)
  • Resolve Vitest benchmark files as entries (5742913)
  • Extract shared Vue auto-import machinery into plugins/_vue (7301075)
  • Scope compiler extensions per workspace (5e6f82b)
  • Resolve auto-imported components in the Vue SFC compiler (009aad8)
  • Add plugins for the Vue auto-import ecosystem (f638c83)
  • Enable Vue SFC compiler on unplugin-vue and @​vitejs/plugin-vue (9396ab1)
  • Recognize vite-plugin-vue-meta-layouts (same layouts convention) (3ceee89)
  • Add vite-plugin-pages and unplugin-icons plugins (9bc1754)
  • Add vite-plugin-pwa and @​intlify/unplugin-vue-i18n plugins (45dea0a)
  • Dog, food. (e1249ad)
  • Update query snapshot (a45941d)
  • Don't misread Nitro route types as Vue component auto-imports (43aecd5)
  • Read oxlint jsPlugins from vite-plus vite.config and .oxlintrc.json (589ffda)
  • Add vite-plus plugin for run.tasks and staged scripts (f041c19)
  • Support @​vite-pwa/nuxt PWA config in nuxt.config (8fa7b11)
  • Add @​vite-pwa/assets-generator plugin (4254f7d)
  • Add @​nuxtjs/i18n plugin (dfb9acb)
  • Read plugin entries from vite.config options and index.html (d533da8)
  • Fix false positives in VitePress, next-mdx and unplugin-vue-i18n plugins (b99702a)
  • Respect optional peers in pnpm and Yarn packageExtensions (aab080b)
  • Detect babel plugins in the Storybook config (5dea975)
  • Add shared AST helpers for imported calls and first property values (c84bb7a)
  • Inline trivial resolveFromAST wrappers and normalize orval and sst (620079d)
  • Extract inline resolveFromAST implementations to dedicated files (b5231c1)
  • Normalize resolveFromAST files to a uniform contract (fc1ba0f)
  • chore: migrate to Astro 7 and Sätteri (#​1875) (f256a5b) - thanks @​trueberryless!
  • Show contributor count on docs homepage (6b8454a)
  • Exclude gitignored package entry points (606e5d0)
  • Add Tauri plugin (199180d)
  • Add Laravel plugin (1974533)
  • Add Quasar plugin (a220729)

v6.25.0: Release 6.25.0

Compare Source

v6.24.0: Release 6.24.0

Compare Source

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from wattanx as a code owner July 13, 2026 13:34
@socket-security

socket-security Bot commented Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedhappy-dom@​20.11.0661008892100
Addedtypescript-eslint@​8.64.01001007498100
Addedvitest@​4.1.10981007998100
Addedplaywright-core@​1.61.199100799980
Added@​vue/​reactivity@​3.5.40981008096100
Addedvite@​7.3.6981008298100
Addedexsolve@​1.1.010010010085100
Addedglobals@​17.7.01001008692100
Addedstd-env@​4.2.0991008788100
Addedeslint-plugin-import-x@​4.17.19910010087100
Addedvue-bundle-renderer@​2.3.11001009088100
Addedeslint-plugin-jsdoc@​63.1.08810010096100
Addednypm@​0.6.89910010089100
Addedterser@​5.49.010010010090100
Addedglobby@​16.2.29910010091100
Addedknip@​6.27.0991009596100
Added@​vitejs/​plugin-legacy@​8.2.19910010095100
Addedeslint@​9.39.59710010097100
Addedenhanced-resolve@​5.24.210010010097100

View full report

@socket-security

socket-security Bot commented Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm eslint-plugin-jsdoc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package.json → npm/eslint-plugin-jsdoc@63.1.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/eslint-plugin-jsdoc@63.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm happy-dom is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package.json → npm/happy-dom@20.11.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/happy-dom@20.11.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@pkg-pr-new

pkg-pr-new Bot commented Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@nuxt/bridge@1865

npm i https://pkg.pr.new/@nuxt/bridge-schema@1865

commit: 49015bf

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from e7bb0e9 to 232aecb Compare July 19, 2026 07:50
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 232aecb to 49015bf Compare July 19, 2026 20:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wattanx wattanx Awaiting requested review from wattanx wattanx is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants