fix(deps): pin dependencies, bump synckit (#558)

renovate[bot] · JounQin · web-flow · commit cb2a660fc1a7 · 2025-04-04T16:18:25.000+08:00
Co-authored-by: renovate[bot] &lt;29139614+renovate[bot]@users.noreply.github.com&gt;
Co-authored-by: JounQin &lt;admin@1stg.me&gt;
diff --git a/.changeset/breezy-wolves-develop.md b/.changeset/breezy-wolves-develop.md
@@ -0,0 +1,6 @@
+---
+"eslint-mdx": patch
+"eslint-plugin-mdx": patch
+---
+
+fix(deps): pin dependencies, bump `synckit`
diff --git a/.env.yarn b/.env.yarn
@@ -0,0 +1,2 @@
+SYNCKIT_TIMEOUT: 10000
+SYNCKIT_TS_RUNNER=oxc
diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml
@@ -0,0 +1,36 @@
+name: autofix.ci # For security reasons, the workflow in which the autofix.ci action is used must be named "autofix.ci".
+
+on:
+  pull_request:
+    types:
+      - opened
+      - reopened
+      - synchronize
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  autofix:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repo
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+
+      - name: Setup Node.js LTS
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
+        with:
+          node-version: lts/*
+          cache: yarn
+
+      - name: Install dependencies
+        run: yarn --immutable
+
+      - name: Format Codes
+        run: yarn format
+
+      - name: Apply autofix.ci
+        uses: autofix-ci/action@2891949f3779a1cafafae1523058501de3d4e944 # v1
+        with:
+          fail-fast: false
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -18,32 +18,33 @@ jobs:
           - ubuntu-latest
           - windows-latest
         node:
+          - 18
           - 20
           - 22
-          - 22
+          - 23
         eslint:
           - 8
           - 9
       fail-fast: false
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Setup Node.js ${{ matrix.node }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           node-version: ${{ matrix.node }}
           cache: yarn
 
       - name: Install Dependencies
         run: yarn --immutable
 
-      - name: Install ESLint 8
-        if: ${{ matrix.eslint == 8 }}
+      - name: Install ESLint ${{ matrix.eslint }}
+        if: ${{ matrix.eslint < 9 }}
         run: |
           yarn add -D eslint@${{ matrix.eslint }} @types/eslint@9
-          yarn set resolution eslint-plugin-unicorn@npm:^57.0.0 npm:^56
+          yarn set resolution eslint-plugin-unicorn@npm:^58.0.0 npm:^56
 
       - name: Build, Lint and Test
         run: |
@@ -54,6 +55,6 @@ jobs:
           PARSER_NO_WATCH: true
 
       - name: Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -27,18 +27,18 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3
         with:
           languages: ${{ matrix.language }}
           queries: +security-and-quality
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3
         with:
           category: '/language:${{ matrix.language }}'
diff --git a/.github/workflows/pkg-size.yml b/.github/workflows/pkg-size.yml
@@ -16,10 +16,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Setup Node.js LTS
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           node-version: lts/*
           cache: yarn
@@ -28,6 +28,6 @@ jobs:
           SKIP_YARN_COREPACK_CHECK: 1
 
       - name: Package Size Report
-        uses: pkg-size/action@v1
+        uses: pkg-size/action@a637fb0897b6f14f18e776d8c3dbccb34a1ad27b # v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -9,19 +9,24 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: write
+  id-token: write
+  pull-requests: write
+
 jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
           fetch-depth: 0
 
       - name: Setup Node.js LTS
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           node-version: lts/*
           cache: yarn
@@ -43,4 +48,5 @@ jobs:
           publish: yarn release:only
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/.yarn/releases/yarn-4.8.1.cjs b/.yarn/releases/yarn-4.8.1.cjs
diff --git a/.yarnrc.yml b/.yarnrc.yml
@@ -7,4 +7,4 @@ plugins:
     path: .yarn/plugins/plugin-prepare-lifecycle.cjs
     spec: 'https://github.com/un-es/yarn-plugin-prepare-lifecycle/releases/download/v0.0.1/index.js'
 
-yarnPath: .yarn/releases/yarn-4.7.0.cjs
+yarnPath: .yarn/releases/yarn-4.8.1.cjs
diff --git a/README.md b/README.md
@@ -235,21 +235,21 @@ If you're using [remark-lint][] feature with [Prettier][] both together, you can
 }
 ```
 
+[![Sponsors](https://raw.githubusercontent.com/1stG/static/master/sponsors.svg)](https://github.com/sponsors/JounQin)
+
 ## Sponsors
 
-| 1stG                                                                                                                               | RxTS                                                                                                                               | UnTS                                                                                                                               |
-| ---------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------- |
-| [![1stG Open Collective backers and sponsors](https://opencollective.com/1stG/organizations.svg)](https://opencollective.com/1stG) | [![RxTS Open Collective backers and sponsors](https://opencollective.com/rxts/organizations.svg)](https://opencollective.com/rxts) | [![UnTS Open Collective backers and sponsors](https://opencollective.com/unts/organizations.svg)](https://opencollective.com/unts) |
+| 1stG                                                                                                                   | RxTS                                                                                                                   | UnTS                                                                                                                   |
+| ---------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- |
+| [![1stG Open Collective sponsors](https://opencollective.com/1stG/organizations.svg)](https://opencollective.com/1stG) | [![RxTS Open Collective sponsors](https://opencollective.com/rxts/organizations.svg)](https://opencollective.com/rxts) | [![UnTS Open Collective sponsors](https://opencollective.com/unts/organizations.svg)](https://opencollective.com/unts) |
 
 [![unified Open Collective backers and sponsors](https://opencollective.com/unified/organizations.svg)](https://opencollective.com/unified)
 
 ## Backers
 
-[![Backers](https://raw.githubusercontent.com/1stG/static/master/sponsors.svg)](https://github.com/sponsors/JounQin)
-
-| 1stG                                                                                                                             | RxTS                                                                                                                             | UnTS                                                                                                                             |
-| -------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------- |
-| [![1stG Open Collective backers and sponsors](https://opencollective.com/1stG/individuals.svg)](https://opencollective.com/1stG) | [![RxTS Open Collective backers and sponsors](https://opencollective.com/rxts/individuals.svg)](https://opencollective.com/rxts) | [![UnTS Open Collective backers and sponsors](https://opencollective.com/unts/individuals.svg)](https://opencollective.com/unts) |
+| 1stG                                                                                                                | RxTS                                                                                                                | UnTS                                                                                                                |
+| ------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------- |
+| [![1stG Open Collective backers](https://opencollective.com/1stG/individuals.svg)](https://opencollective.com/1stG) | [![RxTS Open Collective backers](https://opencollective.com/rxts/individuals.svg)](https://opencollective.com/rxts) | [![UnTS Open Collective backers](https://opencollective.com/unts/individuals.svg)](https://opencollective.com/unts) |
 
 [![unified Open Collective backers and sponsors](https://opencollective.com/unified/individuals.svg)](https://opencollective.com/unified)
 
diff --git a/package.json b/package.json
@@ -10,62 +10,60 @@
   "workspaces": [
     "packages/*"
   ],
-  "packageManager": "yarn@4.7.0",
+  "packageManager": "yarn@4.8.1",
   "scripts": {
     "build": "concurrently -r 'yarn:build:*'",
     "build:r": "r -f cjs",
     "build:ts": "tsc -b",
     "clean": "rimraf --glob 'packages/*/{lib,*.tsbuildinfo}'",
+    "format": "prettier --write .",
     "lint": "concurrently -r 'yarn:lint:*'",
     "lint:es": "eslint . --cache",
     "lint:tsc": "tsc --noEmit",
     "prepare": "patch-package && simple-git-hooks && yarn-berry-deduplicate || exit 0",
-    "prettier": "prettier --log-level silent",
     "release": "run-s build release:only",
     "release:only": "changeset publish",
     "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
     "typecov": "type-coverage",
     "version": "changeset version && yarn --no-immutable"
   },
   "devDependencies": {
-    "@1stg/common-config": "^11.0.5",
+    "@1stg/common-config": "^11.1.2",
     "@changesets/changelog-github": "^0.5.1",
     "@changesets/cli": "^2.28.1",
     "@commitlint/cli": "^19.8.0",
+    "@oxc-node/core": "^0.0.22",
     "@pkgr/rollup": "^6.0.1",
-    "@swc/core": "^1.11.13",
+    "@swc/core": "^1.11.16",
     "@swc/jest": "^0.2.37",
-    "@types/acorn": "^6.0.4",
     "@types/jest": "^29.5.14",
-    "@types/node": "^22.13.13",
-    "@types/react": "^19.0.12",
+    "@types/node": "^22.14.0",
+    "@types/react": "^19.1.0",
     "@types/unist": "^3.0.3",
     "@unts/patch-package": "^8.1.1",
-    "@vitest/coverage-istanbul": "^3.0.9",
+    "@vitest/coverage-istanbul": "^3.1.1",
     "concurrently": "^9.1.2",
     "eslint": "^9.23.0",
-    "eslint-plugin-react": "^7.37.4",
+    "eslint-plugin-react": "^7.37.5",
     "globals": "^16.0.0",
     "jest": "^30.0.0-alpha.7",
     "lint-staged": "^15.5.0",
     "path-serializer": "^0.3.4",
     "prettier": "^3.5.3",
-    "react": "^19.0.0",
+    "react": "^19.1.0",
     "rimraf": "^6.0.1",
     "simple-git-hooks": "^2.12.1",
     "ts-node": "^10.9.2",
     "type-coverage": "^2.29.7",
     "typescript": "^5.8.2",
-    "unplugin-auto-import": "^19.1.1",
-    "vite-tsconfig-paths": "^5.1.4",
     "yarn-berry-deduplicate": "^6.1.1"
   },
   "resolutions": {
-    "@types/acorn": "^6.0.4",
     "es5-ext": "npm:@unes/es5-ext@^0.10.64-1",
     "eslint-mdx": "link:packages/eslint-mdx",
     "eslint-plugin-mdx": "link:packages/eslint-plugin-mdx",
-    "prettier": "^3.5.3"
+    "prettier": "^3.5.3",
+    "synckit": "^0.11.2"
   },
   "commitlint": {
     "extends": [
diff --git a/packages/eslint-mdx/package.json b/packages/eslint-mdx/package.json
@@ -62,7 +62,7 @@
     "remark-mdx": "^3.1.0",
     "remark-parse": "^11.0.0",
     "remark-stringify": "^11.0.0",
-    "synckit": "^0.10.3",
+    "synckit": "^0.11.2",
     "tslib": "^2.8.1",
     "unified": "^11.0.5",
     "unified-engine": "^11.2.2",
diff --git a/packages/eslint-mdx/src/worker.ts b/packages/eslint-mdx/src/worker.ts
@@ -1,4 +1,5 @@
 /* eslint-disable unicorn/no-await-expression-member */
+
 import path from 'node:path'
 import { pathToFileURL } from 'node:url'
 
diff --git a/packages/eslint-plugin-mdx/package.json b/packages/eslint-plugin-mdx/package.json
@@ -54,7 +54,7 @@
     "remark-mdx": "^3.1.0",
     "remark-parse": "^11.0.0",
     "remark-stringify": "^11.0.0",
-    "synckit": "^0.10.3",
+    "synckit": "^0.11.2",
     "tslib": "^2.8.1",
     "unified": "^11.0.5",
     "vfile": "^6.0.3"
diff --git a/patches/@1stg+eslint-config+8.2.1.patch b/patches/@1stg+eslint-config+8.2.1.patch
diff --git a/patches/@1stg+eslint-config+8.3.2.patch b/patches/@1stg+eslint-config+8.3.2.patch
@@ -0,0 +1,13 @@
+diff --git a/node_modules/@1stg/eslint-config/base.js b/node_modules/@1stg/eslint-config/base.js
+index 5eef2be..b342f5d 100644
+--- a/node_modules/@1stg/eslint-config/base.js
++++ b/node_modules/@1stg/eslint-config/base.js
+@@ -32,7 +32,7 @@ export const base = tseslint.config([
+   promise.configs['flat/recommended'],
+   regexp.configs['flat/recommended'],
+   sonarjs.configs.recommended,
+-  unicorn.configs.recommended,
++  unicorn.configs['flat/recommended'],
+   prettierExtends,
+   {
+     name: '@1stg/node',
diff --git a/test/__snapshots__/fixtures.test.ts.snap b/test/__snapshots__/fixtures.test.ts.snap
@@ -1786,9 +1786,9 @@ the installation guides.
   p={3}
   bg="lightgray"
   style={{
-    textAlign: 'center',
-    fontWeight: 'bold',
-  }}
+  textAlign: 'center',
+  fontWeight: 'bold',
+}}
 >
   [Next.js](/getting-started/next) |
   [Gatsby](/getting-started/gatsby) |
@@ -1878,9 +1878,9 @@ the installation guides.
   bg="lightgray"
   p={3}
   style={{
-    textAlign: 'center',
-    fontWeight: 'bold',
-  }}
+textAlign: 'center',
+fontWeight: 'bold',
+}}
 >
   [Next.js](/getting-started/next) |
   [Gatsby](/getting-started/gatsby) |
@@ -1964,7 +1964,7 @@ exports[`fixtures should match all snapshots: details.mdx 1`] = `
     "column": 1,
     "fatal": true,
     "line": 1,
-    "message": "Parsing error: Expected a closing tag for \`</summary>\` (1:1-1:10) before the end of \`paragraph\`",
+    "message": "Parsing error: Expected a closing tag for \`<details>\` (1:1-1:10) before the end of \`paragraph\`",
     "nodeType": null,
     "ruleId": null,
     "severity": 2,
diff --git a/test/__snapshots__/parser.test.ts.snap b/test/__snapshots__/parser.test.ts.snap
diff --git a/test/fixtures.test.ts b/test/fixtures.test.ts
diff --git a/test/helpers.ts b/test/helpers.ts
diff --git a/tsconfig.json b/tsconfig.json
diff --git a/yarn.lock b/yarn.lock

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+SYNCKIT_TIMEOUT: 10000`
	`2`	`+SYNCKIT_TS_RUNNER=oxc`