Skip to content

chore(deps): update all non-major dependencies#58

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#58
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jun 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@hono/node-server ^2.0.8 → ^2.0.11 age confidence devDependencies patch
@rslib/core (source) ^0.22.1 → ^0.23.2 age confidence devDependencies minor
@rslint/core ^0.6.1 → ^0.7.0 age confidence devDependencies minor
@rspack/core (source) 2.0.8 → 2.1.5 age confidence devDependencies minor
@rstest/core (source) 0.10.4 → 0.11.3 age confidence devDependencies minor
@types/node (source) ^24.13.2 → ^24.13.3 age confidence devDependencies patch
hono (source) ^4.12.25 → ^4.12.31 age confidence devDependencies patch
memfs ^4.57.7 → ^4.64.0 age confidence devDependencies minor
node 24.16.0 → 24.18.0 age confidence uses-with minor
pnpm (source) 11.6.0 → 11.15.1 age confidence packageManager minor
pnpm/action-setup v6.0.8 → v6.0.9 age confidence action patch
prettier (source) ^3.8.4 → ^3.9.6 age confidence devDependencies minor
range-parser ^1.2.1 → ^1.3.0 age confidence devDependencies minor

Release Notes

honojs/node-server (@​hono/node-server)

v2.0.11

Compare Source

What's Changed

Full Changelog: honojs/node-server@v2.0.10...v2.0.11

v2.0.10

Compare Source

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg

Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

Compare Source

What's Changed

  • fix(websocket): polyfill missing ErrorEvent global by @​otnc in #​371
  • fix(serve-static): correct Range header parsing edge cases by @​otnc in #​372
  • fix: recover complete request bodies after client disconnect by @​usualoma in #​375

New Contributors

Full Changelog: honojs/node-server@v2.0.8...v2.0.9

web-infra-dev/rslib (@​rslib/core)

v0.23.2

Compare Source

What's Changed

New Features 🎉
Bug Fixes 🐞
Refactor 🔨
Document 📖
Other Changes

Full Changelog: web-infra-dev/rslib@v0.23.1...v0.23.2

v0.23.1

Compare Source

What's Changed

New Features 🎉
Bug Fixes 🐞
Other Changes

Full Changelog: web-infra-dev/rslib@v0.23.0...v0.23.1

v0.23.0

Compare Source

What's Changed

New Features 🎉
Performance 🚀
Other Changes

Full Changelog: web-infra-dev/rslib@v0.22.1...v0.23.0

web-infra-dev/rslint (@​rslint/core)

v0.7.0

Compare Source

Highlights

Closer ESLint compatibility

Global declarations from languageOptions.globals and /* global */ comments are now handled consistently across native rules. Target discovery, .gitignore behavior, and recommended presets for JavaScript, TypeScript, React, import, promise, and Unicorn are also aligned more closely with upstream behavior.

Faster linting and LSP feedback

Config discovery now runs in Go, source snapshots are reused across programs, ESLint-plugin pre-pass work is parallelized, single-file LSP linting targets files directly, and comment scans are shared across rules—reducing repeated work, especially in large repositories.

What's Changed

New Features 🎉
Performance 🚀
Bug Fixes 🐞
Refactor 🔨
Other Changes

New Contributors

Full Changelog: web-infra-dev/rslint@v0.6.5...v0.7.0

v0.6.5

Compare Source

What's Changed

New Features 🎉
Performance 🚀
Bug Fixes 🐞
Document 📖
Other Changes

Full Changelog: web-infra-dev/rslint@v0.6.4...v0.6.5

v0.6.4

Compare Source

Highlights

Rslint Node API for In-Memory Linting

Rslint now ships a programmatic Node.js API (@rslint/core) aligned with ESLint v10's interface. Use Rslint#lintFiles / lintText to lint from scripts, dev servers, or editor integrations — results are ESLint-shaped (LintResult[] with messages, errorCount, warningCount, output, etc.). Auto-fix is supported via fix: true plus Rslint.outputFixes. Config resolution (overrideConfig, file discovery, normalization) all stays in JS; the Go --api server receives only the final resolved config and never reads disk.

import { Rslint } from '@​rslint/core';

// Lint files by glob (auto-discovers the nearest config from cwd).
const rslint = new Rslint({ cwd: process.cwd() });
const results = await rslint.lintFiles(['src/**/*.ts']);

Fully in-memory linting is also supported through the new virtualFiles overlay — source, config, and tsconfig.json can all live in memory with zero disk access, which makes the API a natural fit for playgrounds, web workers, and editor integrations:

const rslint = new Rslint({
  cwd: '/', // virtual root: doesn't touch process.cwd() or disk
  overrideConfigFile: true, // use only overrideConfig — skip config discovery
  overrideConfig: [
    {
      files: ['**/*.ts'],
      // The tsconfig + parserOptions.project below are needed ONLY for type-aware rules (like no-for-in-array). Syntax-only rules need neither.
      languageOptions: { parserOptions: { project: ['./tsconfig.json'] } },
      plugins: ['@​typescript-eslint'],
      rules: { '@​typescript-eslint/no-for-in-array': 'error' },
    },
  ],
  virtualFiles: {
    'tsconfig.json': JSON.stringify({
      compilerOptions: { strict: true },
      files: ['./a.ts'],
    }),
  },
});
const [result] = await rslint.lintText(
  'const a = [1];\nfor (const k in a) {}\n',
  { filePath: 'a.ts' },
);

See the new Node.js API guide for details.

What's Changed

New Features 🎉
Other Changes

Full Changelog: web-infra-dev/rslint@v0.6.3...v0.6.4

v0.6.3

Compare Source

What's Changed

New Features 🎉
Bug Fixes 🐞
Other Changes

Full Changelog: web-infra-dev/rslint@v0.6.2...v0.6.3

v0.6.2

Compare Source

What's Changed

New Features 🎉
Performance 🚀
Bug Fixes 🐞
Refactor 🔨
Other Changes

Full Changelog: web-infra-dev/rslint@v0.6.1...v0.6.2

web-infra-dev/rspack (@​rspack/core)

v2.1.5

Compare Source

What's Changed

Bug Fixes 🐞
Refactor 🔨

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 and 15 of the month (* 0-3 1,15 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 564d362 to f2f3638 Compare July 7, 2026 19:46
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 14 times, most recently from 7d4538c to 35a52eb Compare July 14, 2026 21:54
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from f20fc7a to 66ebb81 Compare July 21, 2026 05:43
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from d5668ea to 3518f7d Compare July 22, 2026 05:32
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 3518f7d to a3b67a3 Compare July 22, 2026 10:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants