pkg-pr-new[bot]
commented
1 month ago Closed renovate[bot] closed 3 weeks ago
pkg-pr-new[bot]
commented
1 month ago 
socket-security[bot]
commented
1 month ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@types/node@22.7.8 | None | +1 |
2.34 MB | types |
| npm/bumpp@9.7.1 | environment, filesystem, unsafe Transitive: network, shell | +78 |
6.95 MB | antfu |
| npm/eslint@9.13.0 | environment Transitive: eval, filesystem, shell, unsafe | +84 |
10.3 MB | eslintbot |
| npm/execa@9.4.1 | environment Transitive: filesystem, shell | +22 |
640 kB | ehmicky |
| npm/fdir@6.4.2 | filesystem | 0 |
45.2 kB | thecodrr |
| npm/picocolors@1.1.1 | None | 0 |
6.37 kB | alexeyraspopov |
| npm/pkg-types@1.2.1 | None | +5 |
1.25 MB | danielroe, pi0 |
| npm/rolldown@0.13.2 | environment | +1 |
1.3 MB | rolldownbot |
| npm/typescript@5.6.3 | None | 0 |
22.4 MB | typescript-bot |
| npm/unplugin-isolated-decl@0.6.7 | Transitive: environment, filesystem, shell | +10 |
1.63 MB | sxzz |
| npm/vitest@2.1.3 | environment, eval Transitive: filesystem, network, shell, unsafe | +36 |
10.5 MB | vitestbot |
🚮 Removed packages: npm/@types/node@22.7.4, npm/bumpp@9.6.1, npm/eslint@9.12.0, npm/execa@9.4.0, npm/fdir@6.4.0, npm/picocolors@1.1.0, npm/pkg-types@1.2.0, npm/rolldown@0.13.2-snapshot-d822812-20241022003358, npm/typescript@5.6.2, npm/unplugin-isolated-decl@0.6.6, npm/vitest@2.1.2
This PR contains the following updates:
^22.7.4->^22.7.8^9.6.1->^9.7.1^9.12.0->^9.13.0^9.4.0->^9.4.1^6.4.0->^6.4.2^1.1.0->^1.1.1^1.2.0->^1.2.19.12.0->9.12.20.13.2-snapshot-d822812-20241022003358->0.13.2~5.6.2->~5.6.3^0.6.6->^0.6.7^2.1.2->^2.1.3Release Notes
antfu/bumpp (bumpp)
### [`v9.7.1`](https://redirect.github.com/antfu-collective/bumpp/releases/tag/v9.7.1) [Compare Source](https://redirect.github.com/antfu/bumpp/compare/v9.7.0...v9.7.1) ##### 🐞 Bug Fixes - Remove debug console log - by [@antfu](https://redirect.github.com/antfu) [(b207d)](https://redirect.github.com/antfu-collective/bumpp/commit/b207d62) ##### [View changes on GitHub](https://redirect.github.com/antfu-collective/bumpp/compare/v9.7.0...v9.7.1) ### [`v9.7.0`](https://redirect.github.com/antfu-collective/bumpp/releases/tag/v9.7.0) [Compare Source](https://redirect.github.com/antfu/bumpp/compare/v9.6.1...v9.7.0) ##### 🚀 Features - Ignore manifest files without version property - by [@nekomeowww](https://redirect.github.com/nekomeowww) in [https://github.com/antfu-collective/bumpp/issues/49](https://redirect.github.com/antfu-collective/bumpp/issues/49) [(24c49)](https://redirect.github.com/antfu-collective/bumpp/commit/24c49a5) - Check git status before bump if option.all is falsy - by [@litingyes](https://redirect.github.com/litingyes) in [https://github.com/antfu-collective/bumpp/issues/44](https://redirect.github.com/antfu-collective/bumpp/issues/44) [(5f781)](https://redirect.github.com/antfu-collective/bumpp/commit/5f78126) - **cli**: Support signing git commits and tags - by [@nekomeowww](https://redirect.github.com/nekomeowww) in [https://github.com/antfu-collective/bumpp/issues/47](https://redirect.github.com/antfu-collective/bumpp/issues/47) [(312cf)](https://redirect.github.com/antfu-collective/bumpp/commit/312cf50) ##### [View changes on GitHub](https://redirect.github.com/antfu-collective/bumpp/compare/v9.6.1...v9.7.0)eslint/eslint (eslint)
### [`v9.13.0`](https://redirect.github.com/eslint/eslint/compare/v9.12.0...1a7cdbfad8d3355132aab3201c7dd3f2e879b19d) [Compare Source](https://redirect.github.com/eslint/eslint/compare/v9.12.0...v9.13.0)sindresorhus/execa (execa)
### [`v9.4.1`](https://redirect.github.com/sindresorhus/execa/releases/tag/v9.4.1) [Compare Source](https://redirect.github.com/sindresorhus/execa/compare/v9.4.0...v9.4.1) ##### Bug fixes - Fix using `process.execPath` with Deno. Thanks [@w3cj](https://redirect.github.com/w3cj)! ([#1160](https://redirect.github.com/sindresorhus/execa/issues/1160))thecodrr/fdir (fdir)
### [`v6.4.2`](https://redirect.github.com/thecodrr/fdir/releases/tag/v6.4.2) [Compare Source](https://redirect.github.com/thecodrr/fdir/compare/v6.4.1...v6.4.2) #### Fixes 1. Fix regression where fdir would never resolve when `maxDepth` was set to `< 0` ([#127](https://redirect.github.com/thecodrr/fdir/issues/127)) ### [`v6.4.1`](https://redirect.github.com/thecodrr/fdir/releases/tag/v6.4.1) [Compare Source](https://redirect.github.com/thecodrr/fdir/compare/v6.4.0...v6.4.1) #### Fixes ##### Recursive symlinks handling ([#125](https://redirect.github.com/thecodrr/fdir/issues/125)) Previously, fdir left it up to the OS to handle recursive symlinks. Unfortunately, this resulted in an infinite loop that'd either cause a crash or take too long to resolve (each OS has a different limit on resolving recursive symlinks). This has been fixed now in [#126](https://redirect.github.com/thecodrr/fdir/issues/126). ##### Recursive symlinks with `resolvePaths: true` When `resolvePaths` is set to `true`, `fdir` does not crawl a directory it has already visited. To figure out whether we have visited a directory or not, `fdir` maintains a list of all the directories it has visited. This might result in slightly higher memory usage than before. For a directory that looks like this: /dir/ file symlink -> /dir/ fdir will return: ```js [ "/dir/file" ] ``` In short, you won't see duplicated paths in the output which is the expected behavior when working with file systems since paths are unique. ##### Recursive symlinks with `resolvePaths: false` When you set `resolvePaths` to `false`, the behavior differs because now all symlinks become part of the path. For a directory that looks like this: /dir/ file symlink -> /dir/ fdir will return: ```js [ "/dir/file", "/dir/symlink/file" ] ``` To prevent recursion, all recursive symlinks are only resolved a single level deep making sure you never see something like `/dir/symlink/symlink/symlink/file`. This allows for glob patterns to work with recursive symlinks without creating a performance issue. ##### Relative recursive symlinks Relative recursive symlinks work exactly as above except the returned paths are relative to the root. Everything else is exactly the same. *Thanks to [@SuperchupuDev](https://redirect.github.com/SuperchupuDev) for bringing this to my attention.*alexeyraspopov/picocolors (picocolors)
### [`v1.1.1`](https://redirect.github.com/alexeyraspopov/picocolors/blob/HEAD/CHANGELOG.md#v111) [Compare Source](https://redirect.github.com/alexeyraspopov/picocolors/compare/v1.1.0...v1.1.1) - Moved TypeScript declarations to a `d.ts` file ([#82](https://redirect.github.com/alexeyraspopov/picocolors/pull/82)) - Reworked color detection algorithm to properly work with empty strings in `NO_COLOR` and `FORCE_COLOR` env variables ([#87](https://redirect.github.com/alexeyraspopov/picocolors/pull/87)) - Eliminated `require()` call to make the package compatible with some tools ([#87](https://redirect.github.com/alexeyraspopov/picocolors/pull/87))unjs/pkg-types (pkg-types)
### [`v1.2.1`](https://redirect.github.com/unjs/pkg-types/blob/HEAD/CHANGELOG.md#v121) [Compare Source](https://redirect.github.com/unjs/pkg-types/compare/v1.2.0...v1.2.1) [compare changes](https://redirect.github.com/unjs/pkg-types/compare/v1.2.0...v1.2.1) ##### 🩹 Fixes - Optional fields from `publishConfig` ([#194](https://redirect.github.com/unjs/pkg-types/pull/194)) - **tsconfig:** Add missing `references` key ([#198](https://redirect.github.com/unjs/pkg-types/pull/198)) ##### 🏡 Chore - Update dependencies ([c173fc7](https://redirect.github.com/unjs/pkg-types/commit/c173fc7)) - Lint ([ce3d808](https://redirect.github.com/unjs/pkg-types/commit/ce3d808)) - Format packagejson.ts ([5cbff11](https://redirect.github.com/unjs/pkg-types/commit/5cbff11)) - Apply automated updates ([e1234ea](https://redirect.github.com/unjs/pkg-types/commit/e1234ea)) ##### ✅ Tests - **packagejson:** Add tests for partial objects ([e2dc735](https://redirect.github.com/unjs/pkg-types/commit/e2dc735)) ##### ❤️ Contributors - Pooya Parsa ([@pi0](http://github.com/pi0)) - Johan Meesterpnpm/pnpm (pnpm)
### [`v9.12.2`](https://redirect.github.com/pnpm/pnpm/releases/tag/v9.12.2): pnpm 9.12.2 [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v9.12.1...v9.12.2) #### Patch Changes - When checking whether a file in the store has executable permissions, the new approach checks if at least one of the executable bits (owner, group, and others) is set to 1. Previously, a file was incorrectly considered executable only when all the executable bits were set to 1. This fix ensures that files with any executable permission, regardless of the user class, are now correctly identified as executable [#8546](https://redirect.github.com/pnpm/pnpm/issues/8546). #### Platinum Sponsorsrolldown/rolldown (rolldown)
### [`v0.13.2`](https://redirect.github.com/rolldown/rolldown/blob/HEAD/CHANGELOG.md#0132-2024-09-06) ##### Features - **node/advance-chunks:** support global fallback for `minSize`, `minShareCount` ([#2178](https://redirect.github.com/rolldown/rolldown/issues/2178)) ([78c7750](https://redirect.github.com/rolldown/rolldown/commit/78c7750f186391d145f5b317a9ff6e5fbb2ba508)) - **node/advance-chunks:** support passing `minSize`, `minShareCount` ([#2177](https://redirect.github.com/rolldown/rolldown/issues/2177)) ([3c95d30](https://redirect.github.com/rolldown/rolldown/commit/3c95d308a849ef6485410ef3248935198f3fcec0)) - **rust/advance-chunks:** support `min_share_count` option ([#2176](https://redirect.github.com/rolldown/rolldown/issues/2176)) ([689cbc2](https://redirect.github.com/rolldown/rolldown/commit/689cbc23b43b3df99c9819d2a89911dcc80fac1b)) - **rust/advance-chunks:** support `min_size` option ([#2175](https://redirect.github.com/rolldown/rolldown/issues/2175)) ([1e9c2d9](https://redirect.github.com/rolldown/rolldown/commit/1e9c2d9bf8195df869186f11a9c73539408ca067))microsoft/TypeScript (typescript)
### [`v5.6.3`](https://redirect.github.com/microsoft/TypeScript/compare/v5.6.2...d48a5cf89a62a62d6c6ed53ffa18f070d9458b85) [Compare Source](https://redirect.github.com/microsoft/TypeScript/compare/v5.6.2...v5.6.3)unplugin/unplugin-isolated-decl (unplugin-isolated-decl)
### [`v0.6.7`](https://redirect.github.com/unplugin/unplugin-isolated-decl/releases/tag/v0.6.7) [Compare Source](https://redirect.github.com/unplugin/unplugin-isolated-decl/compare/v0.6.6...v0.6.7) ##### 🐞 Bug Fixes - Enlarge `oxc-transform` version range - by [@sxzz](https://redirect.github.com/sxzz) [(7dd46)](https://redirect.github.com/unplugin/unplugin-isolated-decl/commit/7dd46cf) ##### [View changes on GitHub](https://redirect.github.com/unplugin/unplugin-isolated-decl/compare/v0.6.6...v0.6.7)vitest-dev/vitest (vitest)
### [`v2.1.3`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v2.1.3) [Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v2.1.2...v2.1.3) ##### 🐞 Bug Fixes - Fix error diff of `toBeNaN, toBeUndefined, toBeNull, toBeTruthy, toBeFalsy` - by [@hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/6697](https://redirect.github.com/vitest-dev/vitest/issues/6697) [(e0027)](https://redirect.github.com/vitest-dev/vitest/commit/e002758c) - **browser**: - Provide aria role intellisense - by [@sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/6629](https://redirect.github.com/vitest-dev/vitest/issues/6629) [(f36ea)](https://redirect.github.com/vitest-dev/vitest/commit/f36eac77) - Not.toBeInTheDocument works with locators API - by [@sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/6634](https://redirect.github.com/vitest-dev/vitest/issues/6634) [(8bef5)](https://redirect.github.com/vitest-dev/vitest/commit/8bef5d2b) - Use `/mockServiceWorker.js` instead of `/__vitest_msw__` - by [@sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/6687](https://redirect.github.com/vitest-dev/vitest/issues/6687) [(4b2ce)](https://redirect.github.com/vitest-dev/vitest/commit/4b2ce07f) - Don't override the esbuild option in the browser mode - by [@sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/6692](https://redirect.github.com/vitest-dev/vitest/issues/6692) [(d131f)](https://redirect.github.com/vitest-dev/vitest/commit/d131fd64) - **expect**: - Preserve prototype in `toMatchObject` diff - by [@hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/6620](https://redirect.github.com/vitest-dev/vitest/issues/6620) [(d289e)](https://redirect.github.com/vitest-dev/vitest/commit/d289e7eb) - **mocker**: - Specify correct spy dependency - by [@sheremet-va](https://redirect.github.com/sheremet-va) [(7e958)](https://redirect.github.com/vitest-dev/vitest/commit/7e9584aa) - **runner**: - Ensure sequential suite overrides sequence.concurrent - by [@dsyddall](https://redirect.github.com/dsyddall) and [@hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/6653](https://redirect.github.com/vitest-dev/vitest/issues/6653) [(5e6de)](https://redirect.github.com/vitest-dev/vitest/commit/5e6de274) - **vitest**: - Deprecate UserConfig in favor of ViteUserConfig - by [@sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/6626](https://redirect.github.com/vitest-dev/vitest/issues/6626) [(496bd)](https://redirect.github.com/vitest-dev/vitest/commit/496bd251) - Don't hang with maxConcurrency 0 - by [@sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/6627](https://redirect.github.com/vitest-dev/vitest/issues/6627) [(946d8)](https://redirect.github.com/vitest-dev/vitest/commit/946d8bb1) - Deprecate old task types and node-reliant types - by [@sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/6632](https://redirect.github.com/vitest-dev/vitest/issues/6632) [(00045)](https://redirect.github.com/vitest-dev/vitest/commit/000459a9) - Fix `Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.