chore(deps): update all non-major dependencies

[renovate[bot]]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
defu	^6.1.0 -> ^6.1.1
node-fetch-native	^0.1.7 -> ^0.1.8
pnpm (source)	7.13.4 -> 7.16.0

---

Release Notes

unjs/defu

### [`v6.1.1`](https://togithub.com/unjs/defu/blob/HEAD/CHANGELOG.md#​611-httpsgithubcomunjsdefucomparev610v611-2022-11-14) [Compare Source](https://togithub.com/unjs/defu/compare/v6.1.0...v6.1.1)

unjs/node-fetch-native

### [`v0.1.8`](https://togithub.com/unjs/node-fetch-native/blob/HEAD/CHANGELOG.md#​018-httpsgithubcomunjsnode-fetch-nativecomparev017v018-2022-10-15) [Compare Source](https://togithub.com/unjs/node-fetch-native/compare/v0.1.7...v0.1.8)

pnpm/pnpm

### [`v7.16.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.16.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.15.0...v7.16.0) #### Minor Changes - Support `pnpm env list` to list global or remote Node.js versions [#​5546](https://togithub.com/pnpm/pnpm/issues/5546). #### Patch Changes - Replace environment variable placeholders with their values, when reading `.npmrc` files in subdirectories inside a workspace [#​2570](https://togithub.com/pnpm/pnpm/issues/2570). - Fix an error that sometimes happen on projects with linked local dependencies [#​5327](https://togithub.com/pnpm/pnpm/issues/5327). #### Our Gold Sponsors #### Our Silver Sponsors ### [`v7.15.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.15.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.14.2...v7.15.0) #### Minor Changes - Support `--format=json` option to output outdated packages in JSON format with `outdated` command [#​2705](https://togithub.com/pnpm/pnpm/issues/2705). ```bash pnpm outdated --format=json #or pnpm outdated --json ``` - A new setting supported for ignoring vulnerabilities by their CVEs. The ignored CVEs may be listed in the `pnpm.auditConfig.ignoreCves` field of `package.json`. For instance: ```json { "pnpm": { "auditConfig": { "ignoreCves": [ "CVE-2019-10742", "CVE-2020-28168", "CVE-2021-3749", "CVE-2020-7598" ] } } } ``` #### Patch Changes - The reporter should not crash when the CLI process is kill during lifecycle scripts execution [#​5588](https://togithub.com/pnpm/pnpm/pull/5588). - Installation shouldn't fail when the injected dependency has broken symlinks. The broken symlinks should be just skipped [#​5598](https://togithub.com/pnpm/pnpm/issues/5598). #### Our Gold Sponsors #### Our Silver Sponsors ### [`v7.14.2`](https://togithub.com/pnpm/pnpm/releases/tag/v7.14.2) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.14.1...v7.14.2) #### Patch Changes - Don't fail if cannot override the name field of the error object [#​5572](https://togithub.com/pnpm/pnpm/issues/5572). - Don't fail on rename across devices. #### Our Gold Sponsors #### Our Silver Sponsors ### [`v7.14.1`](https://togithub.com/pnpm/pnpm/releases/tag/v7.14.1) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.14.0...v7.14.1) #### Patch Changes - `pnpm list --long --json` should print licenses and authors of packages [#​5533](https://togithub.com/pnpm/pnpm/pull/5533). - Don't crash on lockfile with no packages field [#​5553](https://togithub.com/pnpm/pnpm/issues/5553). - Version overrider should have higher priority then custom read package hook from `.pnpmfile.cjs`. - Don't print context information when running install for the `pnpm dlx` command. - Print a warning if a `package.json` has a workspaces field but there is no `pnpm-workspace.yaml` file [#​5363](https://togithub.com/pnpm/pnpm/issues/5363). - It should be possible to set a custom home directory for pnpm by changing the PNPM_HOME environment variable. #### Our Gold Sponsors #### Our Silver Sponsors ### [`v7.14.0`](https://togithub.com/pnpm/pnpm/releases/tag/v7.14.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.6...v7.14.0) ##### Minor Changes - Add `pnpm doctor` command to do checks for known common issues ##### Patch Changes - Ignore the `always-auth` setting. pnpm will never reuse the registry auth token for requesting the package tarball, if the package tarball is hosted on a different domain. So, for example, if your registry is at `https://company.registry.com/` but the tarballs are hosted at `https://tarballs.com/`, then you will have to configure the auth token for both domains in your `.npmrc`: @​my-company:registry=https://company.registry.com/ //company.registry.com/=SOME_AUTH_TOKEN //tarballs.com/=SOME_AUTH_TOKEN ##### Our Gold Sponsors ##### Our Silver Sponsors ### [`v7.13.6`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.6) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.5...v7.13.6) #### Patch Changes - Downgrade `@pnpm/npm-conf` to remove annoying builtin warning [#​5518](https://togithub.com/pnpm/pnpm/issues/5518). - `pnpm link --global ` should not change the type of the dependency [#​5478](https://togithub.com/pnpm/pnpm/issues/5478). - When the `pnpm outdated` command fails, print in which directory it failed. #### Our Gold Sponsors #### Our Silver Sponsors ### [`v7.13.5`](https://togithub.com/pnpm/pnpm/releases/tag/v7.13.5) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v7.13.4...v7.13.5) #### Patch Changes - Print a warning when cannot read the built-in npm configuration. - Also include missing deeply linked workspace packages at headless installation [#​5034](https://togithub.com/pnpm/pnpm/issues/5034). - `pnpm outdated` should work when the package tarballs are hosted on a domain that differs from the registry's domain [#​5492](https://togithub.com/pnpm/pnpm/issues/5492). - `strict-peer-dependencies` is set to `false` by default. #### Our Gold Sponsors #### Our Silver Sponsors

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.