chore(deps): update all non-major dependencies

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
defu	`^6.0.0` -> `^6.1.0`
listhen	`^0.2.13` -> `^0.2.15`
pathe	`^0.3.2` -> `^0.3.5`
pnpm (source)	`7.5.0` -> `7.9.5`
xss	`^1.0.13` -> `^1.0.14`

Release Notes

unjs/defu

### [`v6.1.0`](https://togithub.com/unjs/defu/blob/HEAD/CHANGELOG.md#610-httpsgithubcomunjsdefucomparev601v610-2022-08-16) [Compare Source](https://togithub.com/unjs/defu/compare/v6.0.1...v6.1.0) ##### Features - export `Defu` type helper ([#45](https://togithub.com/unjs/defu/issues/45)) ([551ae4c](https://togithub.com/unjs/defu/commit/551ae4c87c13f2188b97930eaffd72e5575e9048)) ##### Bug Fixes - **types:** constrain inferred types of `Defu` ([3d3ea3e](https://togithub.com/unjs/defu/commit/3d3ea3e4e982591632f070bbf64e28f9d98d6bf9)) ##### [6.0.1](https://togithub.com/unjs/defu/compare/v6.0.0...v6.0.1) (2022-08-16) ##### Bug Fixes - add typing to allow for non-objects input args ([#42](https://togithub.com/unjs/defu/issues/42)) ([1f3a701](https://togithub.com/unjs/defu/commit/1f3a701bc3fd839344359ad5c2b358fbefd978cc)) - merge object strings of many types ([#44](https://togithub.com/unjs/defu/issues/44)) ([c7226f9](https://togithub.com/unjs/defu/commit/c7226f971740966282530745030123aa07ff7b17)) ### [`v6.0.1`](https://togithub.com/unjs/defu/blob/HEAD/CHANGELOG.md#601-httpsgithubcomunjsdefucomparev600v601-2022-08-16) [Compare Source](https://togithub.com/unjs/defu/compare/v6.0.0...v6.0.1)

unjs/listhen

### [`v0.2.15`](https://togithub.com/unjs/listhen/blob/HEAD/CHANGELOG.md#0215-httpsgithubcomunjslisthencomparev0214v0215-2022-08-08) [Compare Source](https://togithub.com/unjs/listhen/compare/v0.2.14...v0.2.15) ### [`v0.2.14`](https://togithub.com/unjs/listhen/blob/HEAD/CHANGELOG.md#0214-httpsgithubcomunjslisthencomparev0213v0214-2022-08-08) [Compare Source](https://togithub.com/unjs/listhen/compare/v0.2.13...v0.2.14)

unjs/pathe

### [`v0.3.5`](https://togithub.com/unjs/pathe/blob/HEAD/CHANGELOG.md#035-httpsgithubcomunjspathecomparev034v035-2022-08-18) [Compare Source](https://togithub.com/unjs/pathe/compare/v0.3.4...v0.3.5) ### [`v0.3.4`](https://togithub.com/unjs/pathe/blob/HEAD/CHANGELOG.md#034-httpsgithubcomunjspathecomparev033v034-2022-08-10) [Compare Source](https://togithub.com/unjs/pathe/compare/v0.3.3...v0.3.4) ### [`v0.3.3`](https://togithub.com/unjs/pathe/blob/HEAD/CHANGELOG.md#033-httpsgithubcomunjspathecomparev032v033-2022-08-01) [Compare Source](https://togithub.com/unjs/pathe/compare/v0.3.2...v0.3.3)

pnpm/pnpm

### [`v7.9.5`](https://togithub.com/pnpm/pnpm/releases/tag/v7.9.5) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.9.4...v7.9.5) #### Patch Changes - Set `NODE_PATH` when `prefer-symlinked-executables` is enabled [#5251](https://togithub.com/pnpm/pnpm/pull/5251). - Fail with a meaningful error when the audit endpoint doesn't exist [#5200](https://togithub.com/pnpm/pnpm/issues/5200). - Symlink a local dependency to `node_modules`, even if the target directory doesn't exist [#5219](https://togithub.com/pnpm/pnpm/issues/5219). #### Our Gold Sponsors

#### Our Silver Sponsors

#### What's Changed * Fix pnpm audit bad API response on private registry by @timtong19[https://github.com/pnpm/pnpm/pull/5246](https://togithub.com/pnpm/pnpm/pull/5246)l/5246 * fix: set NODE_PATH when is turned on by @d3[https://github.com/pnpm/pnpm/pull/5251](https://togithub.com/pnpm/pnpm/pull/5251)l/5251 * fix: symlink local dep even when target dir does not exist by @zkoch[https://github.com/pnpm/pnpm/pull/5253](https://togithub.com/pnpm/pnpm/pull/5253)l/5253 * fix: only set extraEnv for preferSymlinkedExecutables if it's not windows by @d3[https://github.com/pnpm/pnpm/pull/5256](https://togithub.com/pnpm/pnpm/pull/5256)l/5256 #### New Contributors * @timtong1982 made their first contributi[https://github.com/pnpm/pnpm/pull/5246](https://togithub.com/pnpm/pnpm/pull/5246)l/5246 **Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.9.4...v7.9.5 ### [`v7.9.4`](https://togithub.com/pnpm/pnpm/releases/tag/v7.9.4) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.9.3...v7.9.4) #### Patch Changes - Auto install peer dependencies when auto-install-peers is set to true and the lockfile is up to date [#5213](https://togithub.com/pnpm/pnpm/issues/5213). - `pnpm env`: for Node.js<16 install the x64 build on Darwin ARM as ARM build is not available [#5239](https://togithub.com/pnpm/pnpm/pull/5239). - `pnpm env`: log a message when the node.js tarball starts the download [#5241](https://togithub.com/pnpm/pnpm/pull/5241). - Fix `pnpm install --merge-git-branch-lockfile` when the lockfile is up to date [#5212](https://togithub.com/pnpm/pnpm/issues/5212). #### Our Gold Sponsors

#### Our Silver Sponsors

#### What's Changed * feat(cafs): extend cafs with getFilePathByModeInCafs by @d3[https://github.com/pnpm/pnpm/pull/5232](https://togithub.com/pnpm/pnpm/pull/5232)l/5232 * fix: mergeGitBranchLockfiles when merged lockfile is up-to-date by @chengcyb[https://github.com/pnpm/pnpm/pull/5233](https://togithub.com/pnpm/pnpm/pull/5233)l/5233 * test: all test packages should be from the @pnpm.e2e scope by @[https://github.com/pnpm/pnpm/pull/5211](https://togithub.com/pnpm/pnpm/pull/5211)pm/pull/5211 * fix: node<16 download fail on arm chips on macos by @ambar-ark[https://github.com/pnpm/pnpm/pull/5239](https://togithub.com/pnpm/pnpm/pull/5239)l/5239 * feat(env): show state on fetching node by @JacobLinCo[https://github.com/pnpm/pnpm/pull/5241](https://togithub.com/pnpm/pnpm/pull/5241)l/5241 * Fix: install peerDeps which is not optional on headless install by @Shinyaige[https://github.com/pnpm/pnpm/pull/5243](https://togithub.com/pnpm/pnpm/pull/5243)l/5243 #### New Contributors * @ambar-arkin made their first contributi[https://github.com/pnpm/pnpm/pull/5239](https://togithub.com/pnpm/pnpm/pull/5239)l/5239 * @JacobLinCool made their first contributi[https://github.com/pnpm/pnpm/pull/5241](https://togithub.com/pnpm/pnpm/pull/5241)l/5241 * @Shinyaigeek made their first contributi[https://github.com/pnpm/pnpm/pull/5243](https://togithub.com/pnpm/pnpm/pull/5243)l/5243 **Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.9.3...v7.9.4 ### [`v7.9.3`](https://togithub.com/pnpm/pnpm/releases/tag/v7.9.3) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.9.2...v7.9.3) #### Patch Changes - Remove legacy signal handlers [#5224](https://togithub.com/pnpm/pnpm/pull/5224) #### Our Gold Sponsors

#### Our Silver Sponsors

#### What's Changed * fix: remove legacy signal handlers by @d3[https://github.com/pnpm/pnpm/pull/5224](https://togithub.com/pnpm/pnpm/pull/5224)l/5224 **Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.9.2...v7.9.3 ### [`v7.9.2`](https://togithub.com/pnpm/pnpm/releases/tag/v7.9.2) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.9.1...v7.9.2) #### Patch Changes - When the same package is both in "peerDependencies" and in "dependencies", treat this dependency as a peer dependency if it may be resolved from the dependencies of parent packages [#5210](https://togithub.com/pnpm/pnpm/pull/5210). - Update node-gyp to v9. - Update the [compatibility database](https://www.npmjs.com/package/@yarnpkg/extensions). #### Our Gold Sponsors

#### Our Silver Sponsors

### [`v7.9.1`](https://togithub.com/pnpm/pnpm/releases/tag/v7.9.1) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.9.0...v7.9.1) #### Patch Changes - `pnpm setup`: don't use `setx` to set env variables on Windows. #### Our Gold Sponsors

#### Our Silver Sponsors

### [`v7.9.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.9.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.8.0...v7.9.0) #### Minor Changes - When `ignore-dep-scripts` is `true`, ignore scripts of dependencies but run the scripts of the project. - When `ignore-compatibility-db` is set to `true`, the [compatibility database](https://togithub.com/yarnpkg/berry/blob/master/packages/yarnpkg-extensions/sources/index.ts) will not be used to patch dependencies [#5132](https://togithub.com/pnpm/pnpm/issues/5132). - Print the versions of packages in peer dependency warnings and errors. - Support a new hook for passing a custom package importer to the store controller. #### Patch Changes - Don't print the same deprecation warning multiple times. - On POSIX `pnpm setup` should suggest users to source the config instead of restarting the terminal. - Installing a package with `bin` that points to an `.exe` file on Windows [#5159](https://togithub.com/pnpm/pnpm/issues/5159). - Fix bug where the package manifest was not resolved if `verify-store-integrity` is set to `false`. - Fix sorting of keys in lockfile to make it more deterministic and prevent unnecessary churn in the lockfile [#5151](https://togithub.com/pnpm/pnpm/pull/5151). - Don't create a separate bundle for pnpx. #### Our Gold Sponsors

#### Our Silver Sponsors

### [`v7.8.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.8.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.7.1...v7.8.0) #### Minor Changes - When `publishConfig.directory` is set, only symlink it to other workspace projects if `publishConfig.linkDirectory` is set to `true`. Otherwise, only use it for publishing [#5115](https://togithub.com/pnpm/pnpm/issues/5115). #### Patch Changes - Don't incorrectly identify a lockfile out-of-date when the package has a publishConfig.directory field [#5124](https://togithub.com/pnpm/pnpm/issues/5124). - Don't crash when a config file contains a setting with an env variable that doesn't exist [#5093](https://togithub.com/pnpm/pnpm/issues/5093). #### Our Gold Sponsors

#### Our Silver Sponsors

#### What's Changed * fix: don't incorrectly identify a lockfile out-of-date by @zkoch[https://github.com/pnpm/pnpm/pull/5126](https://togithub.com/pnpm/pnpm/pull/5126)l/5126 * feat: publishConfig.linkDirectory by @zkoch[https://github.com/pnpm/pnpm/pull/5125](https://togithub.com/pnpm/pnpm/pull/5125)l/5125 * fix: don't crash on a .npmrc with missing env var by @zkoch[https://github.com/pnpm/pnpm/pull/5127](https://togithub.com/pnpm/pnpm/pull/5127)l/5127 * chore: fix typo by @LuciNy[https://github.com/pnpm/pnpm/pull/5128](https://togithub.com/pnpm/pnpm/pull/5128)l/5128 #### New Contributors * @LuciNyan made their first contributi[https://github.com/pnpm/pnpm/pull/5128](https://togithub.com/pnpm/pnpm/pull/5128)l/5128 **Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.7.1...v7.8.0 ### [`v7.7.1`](https://togithub.com/pnpm/pnpm/releases/tag/v7.7.1) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.7.0...v7.7.1) #### Patch Changes - pnpm should not consider a lockfile out-of-date if `auto-install-peers` is set to `true` and the peer dependency is in `devDependencies` or `optionalDependencies` [#5080](https://togithub.com/pnpm/pnpm/issues/5080). - Don't incorrectly consider a lockfile out-of-date when `workspace:^` or `workspace:~` version specs are used in a workspace. #### Our Gold Sponsors

#### Our Silver Sponsors

#### What's Changed * fix: frozen install in a project with peer deps and `auto-install-peers=true` by @zkoch[https://github.com/pnpm/pnpm/pull/5120](https://togithub.com/pnpm/pnpm/pull/5120)l/5120 * fix: don't incorrectly consider a lockfile to be out-of-date by @zkoch[https://github.com/pnpm/pnpm/pull/5121](https://togithub.com/pnpm/pnpm/pull/5121)l/5121 **Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.7.0...v7.7.1 ### [`v7.7.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.7.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.6.0...v7.7.0) #### Minor Changes - Add experimental lockfile format that should merge conflict less in the `importers` section. Enabled by setting the `use-inline-specifiers-lockfile-format = true` feature flag in `.npmrc`. If this feature flag is committed to a repo, we recommend setting the minimum allowed version of pnpm to this release in the `package.json` `engines` field. Once this is set, older pnpm versions will throw on invalid lockfile versions. - Add `publishDirectory` field to the lockfile and relink the project when it changes. - `verify-store-integrity=false` makes pnpm skip checking the integrities of files in the global content-addressable store. - Allow to set `only-built-dependencies[]` through `.npmrc`. #### Patch Changes - It should be possible to publish a package with local dependencies from a custom publish directory (set via `publishConfig.directory`) [#3901](https://togithub.com/pnpm/pnpm/issues/3901#issuecomment-1194156886). - `pnpm deploy` should inject local dependencies of all types (dependencies, optionalDependencies, devDependencies) [#5078](https://togithub.com/pnpm/pnpm/issues/5078). - When a project in a workspace has a `publishConfig.directory` set, dependent projects should install the project from that directory [#3901](https://togithub.com/pnpm/pnpm/issues/3901) - **pnpm deploy**: accept absolute paths and use cwd instead of workspaceDir for deploy target directory [#4980](https://togithub.com/pnpm/pnpm/issues/4980). - **pnpm setup** should update `.zshrc` in the right directory when a `$ZDOTDIR` is set. #### Our Gold Sponsors

#### Our Silver Sponsors

#### What's Changed * fix(deploy): inject all types of deps by @zkoch[https://github.com/pnpm/pnpm/pull/5084](https://togithub.com/pnpm/pnpm/pull/5084)l/5084 * fix(make-dedicated-lockfile): prepublishOnly script is automatically … by @zkoch[https://github.com/pnpm/pnpm/pull/5083](https://togithub.com/pnpm/pnpm/pull/5083)l/5083 * fix: symlink a workspace pkg correctly, when it has a custom publish dir by @zkoch[https://github.com/pnpm/pnpm/pull/5089](https://togithub.com/pnpm/pnpm/pull/5089)l/5089 * feat: add experimental use-inline-specifiers-lockfile-format by @glux[https://github.com/pnpm/pnpm/pull/5091](https://togithub.com/pnpm/pnpm/pull/5091)l/5091 * fix: plugin-commands-deploy use path resolve on deploy target dir by @AWa[https://github.com/pnpm/pnpm/pull/5026](https://togithub.com/pnpm/pnpm/pull/5026)l/5026 * fix: relink the project when its publish directory changes by @zkoch[https://github.com/pnpm/pnpm/pull/5109](https://togithub.com/pnpm/pnpm/pull/5109)l/5109 * fix: don't include specifiers field in new experimental lockfile format by @zkoch[https://github.com/pnpm/pnpm/pull/5110](https://togithub.com/pnpm/pnpm/pull/5110)l/5110 * feat: verify-store-integrity by @zkoch[https://github.com/pnpm/pnpm/pull/5112](https://togithub.com/pnpm/pnpm/pull/5112)l/5112 #### New Contributors * @AWare made their first contributi[https://github.com/pnpm/pnpm/pull/5026](https://togithub.com/pnpm/pnpm/pull/5026)l/5026 **Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.6.0...v7.7.0 ### [`v7.6.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.6.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.5.2...v7.6.0) #### Minor Changes - A new setting supported: `prefer-symlinked-executables`. When `true`, pnpm will create symlinks to executables in `node_modules/.bin` instead of command shims (but on POSIX systems only). This setting is `true` by default when `node-linker` is set to `hoisted`. Related issue: [#4782](https://togithub.com/pnpm/pnpm/issues/4782). - When `lockfile-include-tarball-url` is set to `true`, every entry in `pnpm-lock.yaml` will contain the full URL to the package's tarball [#5054](https://togithub.com/pnpm/pnpm/pull/5054). #### Patch Changes - `pnpm deploy` should include all dependencies by default [#5035](https://togithub.com/pnpm/pnpm/issues/5035). - Don't print warnings about file verifications. Just print info messages instead. - `pnpm publish --help` should print the `--recursive` and `--filter` options [#5019](https://togithub.com/pnpm/pnpm/issues/5019). - It should be possible to run exec/run/dlx with the `--use-node-version` option. - `pnpm deploy` should not modify the lockfile [#5071](https://togithub.com/pnpm/pnpm/issues/5071) - `pnpm deploy` should not fail in CI [#5071](https://togithub.com/pnpm/pnpm/issues/5071) - When `auto-install-peers` is set to `true`, automatically install direct peer dependencies [#5028](https://togithub.com/pnpm/pnpm/pull/5067). So if your project the next manifest: ```json { "dependencies": { "lodash": "^4.17.21" }, "peerDependencies": { "react": "^18.2.0" } } ``` pnpm will install both lodash and react as a regular dependencies. #### Our Gold Sponsors

#### Our Silver Sponsors

#### What's Changed * pnpm rebuild accepts --store-dir by @chengcyb[https://github.com/pnpm/pnpm/pull/5036](https://togithub.com/pnpm/pnpm/pull/5036)l/5036 * fix(deploy): include all deps by default by @zkoch[https://github.com/pnpm/pnpm/pull/5040](https://togithub.com/pnpm/pnpm/pull/5040)l/5040 * chore(deps): upgrade nock to v13 by @mcmxcd[https://github.com/pnpm/pnpm/pull/5043](https://togithub.com/pnpm/pnpm/pull/5043)l/5043 * fix: log more info on HTTP error by @zkoch[https://github.com/pnpm/pnpm/pull/4917](https://togithub.com/pnpm/pnpm/pull/4917)l/4917 * fix: document the -r option by @zkoch[https://github.com/pnpm/pnpm/pull/5044](https://togithub.com/pnpm/pnpm/pull/5044)l/5044 * chore(deps): upgrade sinon to v14 by @mcmxcd[https://github.com/pnpm/pnpm/pull/5045](https://togithub.com/pnpm/pnpm/pull/5045)l/5045 * fix(audit): add authentication to pnpm-audit by @sl[https://github.com/pnpm/pnpm/pull/5053](https://togithub.com/pnpm/pnpm/pull/5053)l/5053 * feat: prefer-symlinked-executables by @zkoch[https://github.com/pnpm/pnpm/pull/5048](https://togithub.com/pnpm/pnpm/pull/5048)l/5048 * chore: update pnpm-workspace.yaml by @ayu142[https://github.com/pnpm/pnpm/pull/5060](https://togithub.com/pnpm/pnpm/pull/5060)l/5060 * feat: add `lockfile-include-tarball-url` option by @MBelni[https://github.com/pnpm/pnpm/pull/5054](https://togithub.com/pnpm/pnpm/pull/5054)l/5054 * fix: auto install root peer deps when auto-install-peers=true by @zkoch[https://github.com/pnpm/pnpm/pull/5067](https://togithub.com/pnpm/pnpm/pull/5067)l/5067 * fix(deploy): don't modify the lockfile and fail in CI by @zkoch[https://github.com/pnpm/pnpm/pull/5074](https://togithub.com/pnpm/pnpm/pull/5074)l/5074 #### New Contributors * @mcmxcdev made their first contributi[https://github.com/pnpm/pnpm/pull/5043](https://togithub.com/pnpm/pnpm/pull/5043)l/5043 * @sled made their first contributi[https://github.com/pnpm/pnpm/pull/5053](https://togithub.com/pnpm/pnpm/pull/5053)l/5053 * @ayu14214 made their first contributi[https://github.com/pnpm/pnpm/pull/5060](https://togithub.com/pnpm/pnpm/pull/5060)l/5060 * @MBelniak made their first contributi[https://github.com/pnpm/pnpm/pull/5054](https://togithub.com/pnpm/pnpm/pull/5054)l/5054 **Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.5.2...v7.6.0 ### [`v7.5.2`](https://togithub.com/pnpm/pnpm/releases/tag/v7.5.2) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.5.1...v7.5.2) #### Patch Changes - Don't print any info messages about .pnpmfile.cjs [#5027](https://togithub.com/pnpm/pnpm/issues/5027). - Do not print a package with unchanged version in the installation summary [#5031](https://togithub.com/pnpm/pnpm/pull/5031). #### Our Gold Sponsors

#### Our Silver Sponsors

#### What's Changed * fix: summary reporting by @zkoch[https://github.com/pnpm/pnpm/pull/5031](https://togithub.com/pnpm/pnpm/pull/5031)l/5031 * fix: don't print info messages about .pnpmfile.cjs by @zkoch[https://github.com/pnpm/pnpm/pull/5032](https://togithub.com/pnpm/pnpm/pull/5032)l/5032 **Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.5.1...v7.5.2 ### [`v7.5.1`](https://togithub.com/pnpm/pnpm/releases/tag/v7.5.1) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.5.0...v7.5.1) #### Patch Changes - Don't symlink the autoinstalled peer dependencies to the root of `node_modules` [#4988](https://togithub.com/pnpm/pnpm/issues/4988). - Avoid retaining a copy of the contents of files deleted during patching [#5003](https://togithub.com/pnpm/pnpm/issues/5003). - Remove file reporter logging. Logged file is not useful [#4949](https://togithub.com/pnpm/pnpm/issues/4949). #### Our Gold Sponsors

#### Our Silver Sponsors

#### What's Changed * fix: don't symlink the autoinstalled peers to the root of node_modules by @zkoch[https://github.com/pnpm/pnpm/pull/4998](https://togithub.com/pnpm/pnpm/pull/4998)l/4998 * feat: use irreversible-delete in pnpm patch-commit by @webstra[https://github.com/pnpm/pnpm/pull/5008](https://togithub.com/pnpm/pnpm/pull/5008)l/5008 * feat(file-reporter): remove file reporter by @william29[https://github.com/pnpm/pnpm/pull/5012](https://togithub.com/pnpm/pnpm/pull/5012)l/5012 #### New Contributors * @webstrand made their first contributi[https://github.com/pnpm/pnpm/pull/5008](https://togithub.com/pnpm/pnpm/pull/5008)l/5008 * @william2958 made their first contributi[https://github.com/pnpm/pnpm/pull/5012](https://togithub.com/pnpm/pnpm/pull/5012)l/5012 **Full Changelog**: https://github.com/pnpm/pnpm/compare/v7.5.0...v7.5.1

leizongmin/js-xss

### [`v1.0.14`](https://togithub.com/leizongmin/js-xss/blob/HEAD/CHANGELOG.md#v1014-2022-08-16) [Compare Source](https://togithub.com/leizongmin/js-xss/compare/v1.0.13...v1.0.14) - [fix: problem with not closed tag](https://togithub.com/leizongmin/js-xss/pull/262) by [@slawiko](https://togithub.com/slawiko) - [fix: add allowList to types](https://togithub.com/leizongmin/js-xss/pull/261) by [@metonym](https://togithub.com/metonym)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Mend Renovate. View repository job log here.

Impacted Files	Coverage Δ
src/handlers/index.ts	`100.00% <0.00%> (ø)`
src/ipx.ts	`76.47% <0.00%> (ø)`
src/middleware.ts	`24.65% <0.00%> (ø)`
src/sources/index.ts	`0.00% <0.00%> (ø)`
src/index.ts	`100.00% <0.00%> (ø)`
src/handlers/utils.ts	`35.13% <0.00%> (ø)`
src/utils.ts	`50.00% <0.00%> (ø)`
src/sources/http.ts	`60.29% <0.00%> (ø)`
src/handlers/handlers.ts	`55.72% <0.00%> (ø)`
src/sources/filesystem.ts	`52.72% <0.00%> (ø)`

unjs / ipx

chore(deps): update all non-major dependencies #78

Release Notes

Configuration

Codecov Report