unplugin-vue icon indicating copy to clipboard operation
unplugin-vue copied to clipboard

Published 20 hours ago • verified publisher icon unplugin

fix(deps): update all non-major dependencies

Open renovate[bot] opened this issue 9 months ago • 3 comments

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@swc/core (source) ^1.11.7 -> ^1.11.8 age adoption passing confidence
@sxzz/eslint-config ^5.2.0 -> ^5.3.0 age adoption passing confidence
@sxzz/prettier-config ^2.2.0 -> ^2.2.1 age adoption passing confidence
@types/node (source) ^22.13.9 -> ^22.13.10 age adoption passing confidence
@vitest/ui (source) ^3.0.7 -> ^3.0.8 age adoption passing confidence
esbuild ^0.25.0 -> ^0.25.1 age adoption passing confidence
eslint (source) ^9.21.0 -> ^9.22.0 age adoption passing confidence
pnpm (source) 10.5.2 -> 10.6.2 age adoption passing confidence
rollup (source) ^4.34.9 -> ^4.35.0 age adoption passing confidence
tsdown ^0.6.3 -> ^0.6.4 age adoption passing confidence
unplugin-oxc ^0.2.6 -> ^0.2.7 age adoption passing confidence
vite (source) ^6.2.0 -> ^6.2.1 age adoption passing confidence
vitest (source) ^3.0.7 -> ^3.0.8 age adoption passing confidence

Release Notes

swc-project/swc (@​swc/core)

v1.11.8

Compare Source

Bug Fixes
Features
Performance
Refactor
Ci
sxzz/eslint-config (@​sxzz/eslint-config)

v5.3.0

Compare Source

   🚀 Features
    View changes on GitHub
vitest-dev/vitest (@​vitest/ui)

v3.0.8

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
evanw/esbuild (esbuild)

v0.25.1

Compare Source

  • Fix incorrect paths in inline source maps (#​4070, #​4075, #​4105)

    This fixes a regression from version 0.25.0 where esbuild didn't correctly resolve relative paths contained within source maps in inline sourceMappingURL data URLs. The paths were incorrectly being passed through as-is instead of being resolved relative to the source file containing the sourceMappingURL comment, which was due to the data URL not being a file URL. This regression has been fixed, and this case now has test coverage.

  • Fix invalid generated source maps (#​4080, #​4082, #​4104, #​4107)

    This release fixes a regression from version 0.24.1 that could cause esbuild to generate invalid source maps. Specifically under certain conditions, esbuild could generate a mapping with an out-of-bounds source index. It was introduced by code that attempted to improve esbuild's handling of "null" entries in source maps (i.e. mappings with a generated position but no original position). This regression has been fixed.

    This fix was contributed by @​jridgewell.

  • Fix a regression with non-file source map paths (#​4078)

    The format of paths in source maps that aren't in the file namespace was unintentionally changed in version 0.25.0. Path namespaces is an esbuild-specific concept that is optionally available for plugins to use to distinguish paths from file paths and from paths meant for other plugins. Previously the namespace was prepended to the path joined with a : character, but version 0.25.0 unintentionally failed to prepend the namespace. The previous behavior has been restored.

  • Fix a crash with switch optimization (#​4088)

    The new code in the previous release to optimize dead code in switch statements accidentally introduced a crash in the edge case where one or more switch case values include a function expression. This is because esbuild now visits the case values first to determine whether any cases are dead code, and then visits the case bodies once the dead code status is known. That triggered some internal asserts that guard against traversing the AST in an unexpected order. This crash has been fixed by changing esbuild to expect the new traversal ordering. Here's an example of affected code:

    switch (x) {
  case '':
    return y.map(z => z.value)
  case y.map(z => z.key).join(','):
    return []
}

  • Update Go from 1.23.5 to 1.23.7 (#​4076, #​4077)

    This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain reports from vulnerability scanners that detect which version of the Go compiler esbuild uses.

    This PR was contributed by @​MikeWillCook.

eslint/eslint (eslint)

v9.22.0

Compare Source

pnpm/pnpm (pnpm)

v10.6.2

Compare Source

Patch Changes
  • pnpm self-update should always update the version in the packageManager field of package.json.
  • Fix running pnpm CLI from pnpm CLI on Windows when the CLI is bundled to an executable #​8971.
  • pnpm patch-commit will now use the same filesystem as the store directory to compare and create patch files.
  • Don't show info output when --loglevel=error is used.
  • peerDependencyRules should be set in pnpm-workspace.yaml to take effect.

v10.6.1

Compare Source

Patch Changes
  • The pnpm CLI process should not stay hanging, when --silent reporting is used.
  • When --loglevel is set to error, don't show installation summary, execution time, and big tarball download progress.
  • Don't ignore pnpm.patchedDependencies from package.json #​9226.
  • When executing the approve-builds command, if package.json contains onlyBuiltDependencies or ignoredBuiltDependencies, the selected dependency package will continue to be written into package.json.
  • When a package version cannot be found in the package metadata, print the registry from which the package was fetched.

v10.6.0

Compare Source

Minor Changes

  • pnpm-workspace.yaml can now hold all the settings that .npmrc accepts. The settings should use camelCase #​9211.

    pnpm-workspace.yaml example:

    verifyDepsBeforeRun: install
optimisticRepeatInstall: true
publicHoistPattern:
  - "*types*"
  - "!@​types/react"

  • Projects using a file: dependency on a local tarball file (i.e. .tgz, .tar.gz, .tar) will see a performance improvement during installation. Previously, using a file: dependency on a tarball caused the lockfile resolution step to always run. The lockfile will now be considered up-to-date if the tarball is unchanged.

Patch Changes
  • pnpm self-update should not leave a directory with a broken pnpm installation if the installation fails.
  • fast-glob replace with tinyglobby to reduce the size of the pnpm CLI dependencies #​9169.
  • pnpm deploy should not remove fields from the deployed package's package.json file #​9215.
  • pnpm self-update should not read the pnpm settings from the package.json file in the current working directory.
  • Fix pnpm deploy creating a package.json without the imports and license field #​9193.
  • pnpm update -i should list only packages that have newer versions #​9206.
  • Fix a bug causing entries in the catalogs section of the pnpm-lock.yaml file to be removed when dedupe-peer-dependents=false on a filtered install. #​9112
rollup/rollup (rollup)

v4.35.0

Compare Source

2025-03-08

Features
  • Pass build errors to the closeBundle hook (#​5867)
Pull Requests
unplugin/unplugin-oxc (unplugin-oxc)

v0.2.7

Compare Source

   🚀 Features
    View changes on GitHub
vitejs/vite (vite)

v6.2.1

Compare Source

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • [ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] avatar Feb 17 '25 03:02 renovate[bot]

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

bolt-new-by-stackblitz[bot] avatar Feb 17 '25 03:02 bolt-new-by-stackblitz[bot]

Open in StackBlitz

npm i https://pkg.pr.new/unplugin/unplugin-vue@179

commit: 81fd8be

pkg-pr-new[bot] avatar Feb 17 '25 03:02 pkg-pr-new[bot]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

socket-security[bot] avatar Apr 03 '25 18:04 socket-security[bot]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedesbuild@​0.25.3 ⏵ 0.25.5911007194 +3100
Updatedrolldown@​1.0.0-beta.7-commit.a7cf9ac ⏵ 1.0.0-beta.9-commit.d91dfb598 +610073 +198100
Updated@​sxzz/​test-utils@​0.5.5 ⏵ 0.5.674 -210074 +192100
Updated@​rspack/​cli@​1.3.7 ⏵ 1.3.1299 +11007597 +1100
Updated@​vitest/​ui@​3.1.2 ⏵ 3.1.499 +11007697 +1100
Updated@​vue/​reactivity@​3.5.13 ⏵ 3.5.1598 +110079 +193100
Updated@​rspack/​core@​1.3.7 ⏵ 1.3.1296 +110079 +197100
Updated@​babel/​types@​7.27.0 ⏵ 7.27.3981008096100
Updated@​types/​node@​22.15.2 ⏵ 22.15.23100 +110080 +196100
Updatedbumpp@​10.1.0 ⏵ 10.1.1991008089100
Updated@​sxzz/​eslint-config@​6.1.2 ⏵ 6.2.08210097 +194100
Updatedcore-js@​3.41.0 ⏵ 3.42.094 +110099 +186100
Updatedtsdown@​0.9.6 ⏵ 0.12.497 +110087 +196 +1100
Updateddebug@​4.4.0 ⏵ 4.4.1100 +110010087100
Updated@​swc/​core@​1.11.22 ⏵ 1.11.299210010097 +2100
Updated@​vitejs/​plugin-vue@​5.2.3 ⏵ 5.2.499 +110010094 -1100
Updatedeslint@​9.25.1 ⏵ 9.27.09710010094100
Updatedsass@​1.87.0 ⏵ 1.89.0100 +110010096100
Updatedrollup@​4.40.0 ⏵ 4.41.197 +110010099 +1100

View full report

socket-security[bot] avatar May 09 '25 18:05 socket-security[bot]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

renovate[bot] avatar May 28 '25 16:05 renovate[bot]