socket-security[bot]
commented
2 weeks ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@types/node@22.8.1 | None | +1 |
2.35 MB | types |
| npm/execa@9.5.0 | environment Transitive: filesystem, shell | +22 |
640 kB | ehmicky |
| npm/rolldown@0.13.2 | environment | +1 |
1.3 MB | rolldownbot |
| npm/tinyglobby@0.2.10 | None | +1 |
110 kB | superchupu |
| npm/tsup@8.3.5 | eval, filesystem Transitive: environment, network, shell, unsafe | +67 |
9.3 MB | egoist |
| npm/tsx@4.19.2 | Transitive: filesystem | +3 |
680 kB | hirokiosame |
🚮 Removed packages: npm/@types/node@22.7.8, npm/execa@9.4.1, npm/rolldown@0.13.2-snapshot-d822812-20241022003358, npm/tinyglobby@0.2.9, npm/tsup@8.3.0, npm/tsx@4.19.1
renovate[bot]
pkg-pr-new[bot]
This PR contains the following updates:
^22.7.8->^22.8.1^9.4.1->^9.5.09.12.2->9.12.30.13.2-snapshot-d822812-20241022003358->0.13.2^0.2.9->^0.2.10^8.3.0->^8.3.5^4.19.1->^4.19.2Release Notes
sindresorhus/execa (execa)
### [`v9.5.0`](https://redirect.github.com/sindresorhus/execa/compare/v9.4.1...4d1e55a68d79f4ffc2b3393277ea366598807413) [Compare Source](https://redirect.github.com/sindresorhus/execa/compare/v9.4.1...v9.5.0)pnpm/pnpm (pnpm)
### [`v9.12.3`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#9123) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v9.12.2...v9.12.3) ##### Patch Changes - Don't purge `node_modules`, when typing "n" in the prompt that asks whether to remove `node_modules` before installation [#8655](https://redirect.github.com/pnpm/pnpm/pull/8655). - Fix a bug causing pnpm to infinitely spawn itself when `manage-package-manager-versions=true` is set and the `.tools` directory is corrupt. - Use `crypto.hash`, when available, for improved performance [#8629](https://redirect.github.com/pnpm/pnpm/pull/8629). - Fixed a race condition in temporary file creation in the store by including worker thread ID in filename. Previously, multiple worker threads could attempt to use the same temporary file. Temporary files now include both process ID and thread ID for uniqueness [#8703](https://redirect.github.com/pnpm/pnpm/pull/8703). - All commands should read settings from the `package.json` at the root of the workspace [#8667](https://redirect.github.com/pnpm/pnpm/issues/8667). - When `manage-package-manager-versions` is set to `true`, errors spawning a self-managed version of `pnpm` will now be shown (instead of being silent). - Pass the find command to npm, it is an alias for npm searchrolldown/rolldown (rolldown)
### [`v0.13.2`](https://redirect.github.com/rolldown/rolldown/blob/HEAD/CHANGELOG.md#0132-2024-09-06) ##### Features - **node/advance-chunks:** support global fallback for `minSize`, `minShareCount` ([#2178](https://redirect.github.com/rolldown/rolldown/issues/2178)) ([78c7750](https://redirect.github.com/rolldown/rolldown/commit/78c7750f186391d145f5b317a9ff6e5fbb2ba508)) - **node/advance-chunks:** support passing `minSize`, `minShareCount` ([#2177](https://redirect.github.com/rolldown/rolldown/issues/2177)) ([3c95d30](https://redirect.github.com/rolldown/rolldown/commit/3c95d308a849ef6485410ef3248935198f3fcec0)) - **rust/advance-chunks:** support `min_share_count` option ([#2176](https://redirect.github.com/rolldown/rolldown/issues/2176)) ([689cbc2](https://redirect.github.com/rolldown/rolldown/commit/689cbc23b43b3df99c9819d2a89911dcc80fac1b)) - **rust/advance-chunks:** support `min_size` option ([#2175](https://redirect.github.com/rolldown/rolldown/issues/2175)) ([1e9c2d9](https://redirect.github.com/rolldown/rolldown/commit/1e9c2d9bf8195df869186f11a9c73539408ca067))SuperchupuDev/tinyglobby (tinyglobby)
### [`v0.2.10`](https://redirect.github.com/SuperchupuDev/tinyglobby/blob/HEAD/CHANGELOG.md#0210) [Compare Source](https://redirect.github.com/SuperchupuDev/tinyglobby/compare/0.2.9...0.2.10) ##### Added - Re-enabled symlinks resolution. Big thanks to [thecodrr](https://redirect.github.com/thecodrr) for fixing the critical bug upstream ##### Fixed - Processing of absolute negative patterns - Negative `ignore` patterns are now not processed for consistency with `fast-glob`egoist/tsup (tsup)
### [`v8.3.5`](https://redirect.github.com/egoist/tsup/releases/tag/v8.3.5) [Compare Source](https://redirect.github.com/egoist/tsup/compare/v8.3.4...v8.3.5) ##### 🐞 Bug Fixes - Run `experimentalDts` only once - by [@aryaemami59](https://redirect.github.com/aryaemami59) in [https://github.com/egoist/tsup/issues/1236](https://redirect.github.com/egoist/tsup/issues/1236) [(fddd4)](https://redirect.github.com/egoist/tsup/commit/fddd451) ##### [View changes on GitHub](https://redirect.github.com/egoist/tsup/compare/v8.3.4...v8.3.5) ### [`v8.3.4`](https://redirect.github.com/egoist/tsup/releases/tag/v8.3.4) [Compare Source](https://redirect.github.com/egoist/tsup/compare/v8.3.0...v8.3.4) *No significant changes* ##### [View changes on GitHub](https://redirect.github.com/egoist/tsup/compare/v8.3.3...v8.3.4)privatenumber/tsx (tsx)
### [`v4.19.2`](https://redirect.github.com/privatenumber/tsx/releases/tag/v4.19.2) [Compare Source](https://redirect.github.com/privatenumber/tsx/compare/v4.19.1...v4.19.2) ##### Bug Fixes - generate sourcesContent when Node.js debugger is enabled ([#670](https://redirect.github.com/privatenumber/tsx/issues/670)) ([7c47074](https://redirect.github.com/privatenumber/tsx/commit/7c47074652790e8225bb9c0d3123fc92e75d3695)) *** This release is also available on: - [npm package (@latest dist-tag)](https://www.npmjs.com/package/tsx/v/4.19.2)Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.