chore(deps): update all non-major dependencies#1277
Merged
Conversation
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
16 times, most recently
from
ebc6e1b to
344beb3
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
11 times, most recently
from
4a5dc2e to
b2440c4
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
2 times, most recently
from
f0f6df5 to
4bd4338
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
13 times, most recently
from
f4e5349 to
792882f
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
12 times, most recently
from
bf8be91 to
0f50a6d
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
0f50a6d to
e05acfe
Compare
benmccann
approved these changes
Feb 22, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.4.0→5.5.38.3.4→8.3.55.0.6→5.0.822.19.5→22.19.1122.19.5→22.19.11v6.0.1→v6.0.2v6.1.0→v6.2.010.4.23→10.4.24v1.5.3→v1.7.017.23.1→17.24.05.5.4→5.5.53.14.0→3.15.017.0.0→17.3.01.56.1→1.58.210.28.0→10.30.010.30.13.7.4→3.8.13.4.1→3.5.00.3.16→0.3.171.97.2→1.97.35.51.5→5.53.05.53.2(+1)5.51.5→5.53.05.53.2(+1)4.3.5→4.4.14.4.3(+1)8.52.0→8.56.08.0.0-beta.7→8.0.0-beta.154.0.16→4.0.18Release Notes
sveltejs/kit (@sveltejs/adapter-node)
v5.5.3Compare Source
Patch Changes
fix: validate
ORIGINenv var at startup (#15045)chore(deps): update dependency
@rollup/plugin-commonjsto v29 (#14856)Updated dependencies [
37293a5,5d05ca6,ed69b77,b1fc959,159aece,c690579,dc8cf2d,ace2116,0f38f49]:v5.5.2Compare Source
Patch Changes
fix: disable gzip and brotli when precompress=false (#15182)
Updated dependencies [
46c1ebd,2dd74c8,8871b54]:v5.5.1Compare Source
Patch Changes
fix: add validations for protocol, host, and port header values (
d9ae9b0)Updated dependencies [
81cd545,d9ae9b0,8ed8155]:v5.5.0Compare Source
Minor Changes
sveltejs/eslint-config (@sveltejs/eslint-config)
v8.3.5Compare Source
Patch Changes
9a6909c979d6b15714863cec4dcf7d199bd5e6a2)tsconfig/bases (@tsconfig/svelte)
v5.0.8Compare Source
v5.0.7Compare Source
actions/checkout (actions/checkout)
v6.0.2Compare Source
actions/setup-node (actions/setup-node)
v6.2.0Compare Source
postcss/autoprefixer (autoprefixer)
v10.4.24Compare Source
changesets/action (changesets/action)
v1.7.0Compare Source
Minor Changes
935fe87Thanks @Andarist! - Automatically use the GitHub-provided token to allow most users to avoid explicitGITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}configuration.Patch Changes
#545
54220ddThanks @ryanbas21! - The.npmrcgeneration now intelligently handles both traditional NPM token authentication and trusted publishing scenarios by only appending the auth token whenNPM_TOKENis defined. This prevents 'undefined' from being written to the registry configuration when using OIDC tokens from GitHub Actions trusted publishing.#563
6af4a7eThanks @Andarist! - Don't error on already committed symlinks and executables that stay untouchedv1.6.0Compare Source
Minor Changes
342005dThanks @harsha-venugopal-ledn! - Upgrade from Node.js 20 to Node.js 24 LTSeslint-community/eslint-plugin-n (eslint-plugin-n)
v17.24.0Compare Source
🌟 Features
prefer-global/cryptorule (#514) (2ea0f22)prefer-global/timersrule (#515) (10b24ae)🧹 Chores
v17.23.2Compare Source
🩹 Fixes
📚 Documentation
🧹 Chores
prettier/eslint-plugin-prettier (eslint-plugin-prettier)
v5.5.5Compare Source
Patch Changes
#772
7264ed0Thanks @BPScott! - Bump prettier-linter-helpers dependency to v1.0.1#776
77651a3Thanks @aswils! - fix: bump synckit for yarn PnP ESM issuesveltejs/eslint-plugin-svelte (eslint-plugin-svelte)
v3.15.0Compare Source
Minor Changes
#1472
a314e4fThanks @copilot-swe-agent! - feat: add support for ESLint v10#1461
d8e1dc1Thanks @marekdedic! - feat(no-navigation-without-resolve): for links, the rule now reports on the whole attributesindresorhus/globals (globals)
v17.3.0Compare Source
295fba9v17.2.0Compare Source
jasmine: AddthrowUnlessandthrowUnlessAsyncglobals (#335)97f23a7v17.1.0Compare Source
webpackandrspackglobals (#333)65cae73microsoft/playwright (playwright-core)
v1.58.2Compare Source
v1.58.1Compare Source
Highlights
#39036 fix(msedge): fix local network permissions
#39037 chore: update cft download location
#38995 chore(webkit): disable frame sessions on fronzen builds
Browser Versions
v1.58.0Compare Source
v1.57.0Compare Source
pnpm/pnpm (pnpm)
v10.30.0: pnpm 10.30Compare Source
Minor Changes
pnpm whynow shows a reverse dependency tree. The searched package appears at the root with its dependents as branches, walking back to workspace roots. This replaces the previous forward-tree output which was noisy and hard to read for deeply nested dependencies.Patch Changes
pnpm whydependency pruning to prefer correctness over memory consumption. Reverted PR: #7122.pnpm whyandpnpm listperformance in workspaces with many importers by sharing the dependency graph and materialization cache across all importers instead of rebuilding them independently for each one #10596.Platinum Sponsors
Gold Sponsors
v10.29.3Compare Source
v10.29.2Compare Source
v10.29.1: pnpm 10.29.1Compare Source
Minor Changes
pnpm dlx/pnpxcommand now supports thecatalog:protocol. Example:pnpm dlx shx@catalog:.auditLevelin thepnpm-workspace.yamlfile #10540.workspace:protocol without version specifier. It is now treated asworkspace:*and resolves to the concrete version during publish #10436.Patch Changes
Fixed
pnpm list --jsonreturning incorrect paths when using global virtual store #10187.Fix
pnpm store pathandpnpm store statususing workspace root for path resolution whenstoreDiris relative #10290.Fixed
pnpm run -rfailing with "No projects matched the filters" when an emptypnpm-workspace.yamlexists #10497.Fixed a bug where
catalogMode: strictwould write the literal string"catalog:"topnpm-workspace.yamlinstead of the resolved version specifier when re-adding an existing catalog dependency #10176.Fixed the documentation URL shown in
pnpm completion --helpto point to the correct page at https://pnpm.io/completion #10281.Skip local
file:protocol dependencies duringpnpm fetch. This fixes an issue wherepnpm fetchwould fail in Docker builds when local directory dependencies were not available #10460.Fixed
pnpm audit --jsonto respect the--audit-levelsetting for both exit code and output filtering #10540.update tar to version 7.5.7 to fix security issue
Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: CVE-2026-24842
Fix
pnpm audit --fixreplacing reference overrides (e.g.$foo) with concrete versions #10325.Fix
shamefullyHoistset viaupdateConfigin.pnpmfile.cjsnot being converted topublicHoistPattern#10271.pnpm helpshould correctly report if the currently running pnpm CLI is bundled with Node.js #10561.Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for
node_modules/.bin, causing binaries to not be found when running commands likepnpm exec#10457.Platinum Sponsors
Gold Sponsors
v10.28.2: pnpm 10.28.2Compare Source
Patch Changes
Security fix: prevent path traversal in
directories.binfield.When pnpm installs a
file:orgit:dependency, it now validates that symlinks point within the package directory. Symlinks to paths outside the package root are skipped to prevent local data from being leaked intonode_modules.This fixes a security issue where a malicious package could create symlinks to sensitive files (e.g.,
/etc/passwd,~/.ssh/id_rsa) and have their contents copied when the package is installed.Note: This only affects
file:andgit:dependencies. Registry packages (npm) have symlinks stripped during publish and are not affected.Fixed optional dependencies to request full metadata from the registry to get the
libcfield, which is required for proper platform compatibility checks #9950.Platinum Sponsors
Gold Sponsors
v10.28.1Compare Source
prettier/prettier (prettier)
v3.8.1Compare Source
v3.8.0Compare Source
diff
🔗 Release note
sveltejs/prettier-plugin-svelte (prettier-plugin-svelte)
v3.5.0Compare Source
publint/publint (publint)
v0.3.17Compare Source
Patch Changes
Fix packing packages with pnpm when
publishConfig.directoryis set (#216)Updated dependencies [
2dcb107]:sass/dart-sass (sass)
v1.97.3Compare Source
could cause outer style rules to be omitted.
sveltejs/svelte (svelte)
v5.53.0Compare Source
Minor Changes
feat: allow comments in tags (#17671)
feat: allow error boundaries to work on the server (#17672)
Patch Changes
fix: use TrustedHTML to test for customizable
<select>support, where necessary (#17743)fix: ensure head effects are kept in the effect tree (#17746)
chore: deactivate current_batch by default in unset_context (#17738)
v5.52.0Compare Source
Minor Changes
{@​html}expressions (#17701)Patch Changes
fix: repair dynamic component truthy/falsy hydration mismatches (#17737)
fix: re-run non-render-bound deriveds on the server (#17674)
sveltejs/language-tools (svelte-check)
v4.4.1Compare Source
Patch Changes
fix: handle relative imports reaching outside working directory when using
--incremental/--tsgoflags (#2942)fix: support SvelteKit zero types in svelte-check --incremental (#2939)
v4.4.0Compare Source
Minor Changes
--incrementaland--tsgoflags (#2932)Patch Changes
fix: ignore Unix domain sockets in file watcher to prevent crashes (#2931)
fix: properly use machine output by default for Claude Code (
e9f58d2)v4.3.6Compare Source
Patch Changes
typescript-eslint/typescript-eslint (typescript-eslint)
v8.56.0Compare Source
🚀 Features
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.55.0Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.54.0Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
v8.53.1Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
v8.53.0Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
vitejs/vite (vite)
v8.0.0-beta.15Compare Source
Features
Bug Fixes
Performance Improvements
Miscellaneous Chores
fdirand@rollup/plugin-commonjs(#21639) (5abffd5)v8.0.0-beta.14Compare Source
Features
.wasm?init(#21102) (216a3b5)Bug Fixes
sourcemapInterceptor: "prepareStackTrace"(#21562) (416c095)Miscellaneous Chores
customResolverdeprecation message to mentionenforce: 'pre'(#21576) (2ce34d5)Code Refactoring
rolldown/utils(#21577) (e56103f)Tests
v8.0.0-beta.13Compare Source
Features
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.