Skip to content

chore(deps): update all non-major dependencies#761

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#761
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Mar 21, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
@azure/cosmos (source) ^4.9.1 → ^4.9.2 age confidence
@azure/identity (source) ^4.13.0 → ^4.13.1 age confidence
@electric-sql/pglite (source) ^0.4.0 → ^0.4.2 age confidence
@libsql/client (source) ^0.17.0 → ^0.17.2 age confidence
@planetscale/database ^1.19.0 → ^1.20.1 age confidence
@types/jsdom (source) ^28.0.0 → ^28.0.1 age confidence
@typescript/native-preview (source) ^7.0.0-dev.20260319.1 → ^7.0.0-dev.20260325.1 age confidence
@upstash/redis (source) ^1.36.2 → ^1.37.0 age confidence
@vitest/coverage-v8 (source) ^4.1.0 → ^4.1.1 age confidence
ioredis ^5.9.3 → ^5.10.1 age confidence
ioredis ^5.10.0 → ^5.10.1 age confidence
jsdom ^29.0.0 → ^29.0.1 age confidence
lru-cache ^11.2.6 → ^11.2.7 age confidence
mlly ^1.8.1 → ^1.8.2 age confidence
mongodb ^7.1.0 → ^7.1.1 age confidence
oxfmt (source) ^0.41.0 → ^0.42.0 age confidence
oxlint (source) ^1.56.0 → ^1.57.0 age confidence
pnpm (source) 10.32.1 → 10.33.0 age confidence
pnpm (source) 10.30.2 → 10.33.0 age confidence
srvx (source) ^0.11.12 → ^0.11.13 age confidence
vite (source) ^8.0.1 → ^8.0.3 age confidence
vitest (source) ^4.1.0 → ^4.1.1 age confidence
wrangler (source) ^4.75.0 → ^4.77.0 age confidence

Release Notes

Azure/azure-sdk-for-js (@​azure/cosmos)

v4.9.2

Compare Source

electric-sql/pglite (@​electric-sql/pglite)

v0.4.2

Compare Source

Patch Changes
  • 41632c4: Allow passing initdb.wasm asset for bundlers that need it.

v0.4.1

Patch Changes
  • 37fb39e: clear timers on exit; remove pglite-socket dependency on pglite-postgis
tursodatabase/libsql-client-ts (@​libsql/client)

v0.17.2

Compare Source

v0.17.1

Compare Source

planetscale/database-js (@​planetscale/database)

v1.20.1

Compare Source

What's Changed

Full Changelog: planetscale/database-js@v1.20.0...v1.20.1

v1.20.0

Compare Source

What's Changed

New Contributors

Full Changelog: planetscale/database-js@v1.19.0...v1.20.0

microsoft/typescript-go (@​typescript/native-preview)

v7.0.0-dev.20260325.1

Compare Source

v7.0.0-dev.20260324.1

Compare Source

v7.0.0-dev.20260323.1

Compare Source

v7.0.0-dev.20260322.1

Compare Source

v7.0.0-dev.20260321.1

Compare Source

v7.0.0-dev.20260320.1

Compare Source

upstash/redis-js (@​upstash/redis)

v1.37.0

Compare Source

Minor Changes
Patch Changes

v1.36.4

Compare Source

What's Changed

New Contributors

Full Changelog: upstash/redis-js@v1.36.3...v1.36.4

v1.36.3

Compare Source

What's Changed

Full Changelog: upstash/redis-js@v1.36.2...v1.36.3

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.1

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
luin/ioredis (ioredis)

v5.10.1

Compare Source

Bug Fixes

v5.10.0

Compare Source

Features

5.9.3 (2026-02-12)

Bug Fixes
  • autopipelining to route writes to masters with scaleReads (#​2072) (8adb1ae)
  • fix issue with moved command for replicas (#​2064) (de4eed4)
  • types: optional properties on RedisOptions allow explicit undefined (#​2066) (0a1a898)

5.9.3 (2026-02-12)

Bug Fixes
  • autopipelining to route writes to masters with scaleReads (#​2072) (8adb1ae)
  • fix issue with moved command for replicas (#​2064) (de4eed4)
  • types: optional properties on RedisOptions allow explicit undefined (#​2066) (0a1a898)

5.9.2 (2026-01-15)

Bug Fixes
Reverts

5.9.1 (2026-01-08)

Bug Fixes
jsdom/jsdom (jsdom)

v29.0.1

Compare Source

isaacs/node-lru-cache (lru-cache)

v11.2.7

Compare Source

unjs/mlly (mlly)

v1.8.2

Compare Source

compare changes

🩹 Fixes
  • Extract variable names ignoring function calls (#​336)
  • Generic angle bracket parsing (#​341)
📖 Documentation
🏡 Chore
❤️ Contributors
mongodb/node-mongodb-native (mongodb)

v7.1.1

Compare Source

The MongoDB Node.js team is pleased to announce version 7.1.1 of the mongodb package!

Release Notes

Tighten OIDC ALLOWED_HOSTS wildcard matching

The OIDC ALLOWED_HOSTS wildcard handling has been fixed to require full subdomain/path matches for *. and */ entries, preventing partial suffix matches from being incorrectly accepted.

Fixed TCP keep-alive and no-delay settings not being applied on TLS connections

Due to a Node.js bug, tls.connect() silently ignores keepAlive, keepAliveInitialDelay, and noDelay options passed through its constructor. This could cause idle connections - particularly through cloud load balancers like Azure (240s idle timeout) or AWS PrivateLink/NLB - to be dropped unexpectedly due to missing TCP keep-alive probes.

The driver now explicitly calls setKeepAlive() and setNoDelay() on the socket after creation, ensuring these settings are always applied regardless of whether TLS is used.

Bug Fixes

Documentation

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

oxc-project/oxc (oxfmt)

v0.42.0

Compare Source

🚀 Features
  • 416865a formatter,oxfmt: Add doc comments for JsdocConfig (#​20644) (leaysgur)
  • 4fec907 formatter: Add JSDoc comment formatting support (#​19828) (Dunqing)
oxc-project/oxc (oxlint)

v1.57.0

Compare Source

pnpm/pnpm (pnpm)

v10.33.0

Compare Source

h3js/srvx (srvx)

v0.11.13

Compare Source

compare changes

🩹 Fixes
  • url: Deopt absolute URIs in FastURL (de0d699)
🏡 Chore
❤️ Contributors
vitejs/vite (vite)

v8.0.3

Features
Bug Fixes
  • html: cache unfiltered CSS list to prevent missing styles across entries (#​22017) (5464190)
  • module-runner: handle non-ascii characters in base64 sourcemaps (#​21985) (77c95bf)
  • module-runner: skip re-import if the runner is closed (#​22020) (ee2c2cd)
  • optimizer: scan is not resolving sub path import if used in a glob import (#​22018) (ddfe20d)
  • ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#​22019) (cff5f0c)
Miscellaneous Chores
Tests

v8.0.2

Compare Source

Features
Bug Fixes
Miscellaneous Chores
cloudflare/workers-sdk (wrangler)

v4.77.0

Compare Source

Minor Changes

  • #​13023 593c4db Thanks @​jamesopstad! - Add wrangler versions upload support for the experimental secrets configuration property

    When the new secrets property is defined, wrangler versions upload now validates that all secrets declared in secrets.required are configured on the Worker before the upload succeeds. If any required secrets are missing, the upload fails with a clear error listing which secrets need to be set.

    When secrets is not defined, the existing behavior is unchanged.

    // wrangler.jsonc
{
  "secrets": {
    "required": ["API_KEY", "DB_PASSWORD"]
  }
}

  • #​12732 c2e9163 Thanks @​jamesopstad! - Add deploy support for the experimental secrets configuration property

    When the new secrets property is defined, wrangler deploy now validates that all secrets declared in secrets.required are configured on the Worker before the deploy succeeds. If any required secrets are missing, the deploy fails with a clear error listing which secrets need to be set.

    When secrets is not defined, the existing behavior is unchanged.

    // wrangler.jsonc
{
  "secrets": {
    "required": ["API_KEY", "DB_PASSWORD"]
  }
}
Patch Changes

  • #​12896 451dae3 Thanks @​petebacondarwin! - fix: Add retry and timeout protection to remote preview API calls

    Remote preview sessions (wrangler dev --remote) now automatically retry transient 5xx API errors (up to 3 attempts with linear backoff) and enforce a 30-second per-request timeout. Previously, a single hung or failed API response during session creation or worker upload could block the dev session reload indefinitely.

  • #​12569 379f2a2 Thanks @​MattieTK! - Use qwik add cloudflare-workers instead of qwik add cloudflare-pages for Workers targets

    Both the wrangler autoconfig and C3 Workers template for Qwik were running qwik add cloudflare-pages even when targeting Cloudflare Workers. This caused the wrong adapter directory structure to be scaffolded (adapters/cloudflare-pages/ instead of adapters/cloudflare-workers/), and required post-hoc cleanup of Pages-specific files like _routes.json.

    Qwik now provides a dedicated cloudflare-workers adapter that generates the correct Workers configuration, including wrangler.jsonc with main and assets fields, a public/.assetsignore file, and the correct adapters/cloudflare-workers/vite.config.ts.

    Also adds --skipConfirmation=true to all qwik add invocations so the interactive prompt is skipped in automated contexts.

  • #​11899 9a1cf29 Thanks @​hoodmane! - Remove cf-requirements support for Python workers. It hasn't worked with the runtime for a while now.

  • #​11800 875da60 Thanks @​southpolesteve! - Add upgrade hint to unexpected configuration field warnings when an update is available

    When Wrangler encounters unexpected fields in the configuration file and a newer version of Wrangler is available, it now displays a message suggesting to update. This helps users who may be using configuration options that were added in a newer version of Wrangler.

  • Updated dependencies [b8f3309, 5aaaab2, 5aaaab2, f8516dd, 9c9fe30, 6a6449e]:

    • miniflare@​4.20260317.2

v4.76.0

Compare Source

Minor Changes

  • #​12893 782df44 Thanks @​gpanders! - Rewrite wrangler containers list to use the paginated Dash API endpoint

    wrangler containers list now fetches from the /dash/applications endpoint instead of /applications, displaying results in a paginated table with columns for ID, Name, State, Live Instances, and Last Modified. Container state is derived from health instance counters (active, degraded, provisioning, ready).

    The command supports --per-page (default 25) for interactive pagination with Enter to load more and q/Esc to quit, and --json for machine-readable output. Non-interactive environments load all results in a single request.

  • #​12957 62545c9 Thanks @​natewong1313! - Add Stream binding support to Wrangler and workers-utils

    Wrangler and workers-utils now recognize the stream binding in configuration, deployment metadata, and generated worker types. This enables projects to declare Stream bindings in wrangler.json and have the binding represented consistently across validation, metadata mapping, and type generation.

  • #​12848 ce48b77 Thanks @​emily-shen! - Enable local explorer by default

    This ungates the local explorer, a UI that lets you inspect the state of D1, DO and KV resources locally by visiting /cdn-cgi/explorer during local development.

    Note: this feature is still experimental, and can be disabled by setting the env var X_LOCAL_EXPLORER=false.

Patch Changes

  • #​12938 71ab981 Thanks @​dario-piotrowicz! - Add backward-compatible autoconfig support for Astro v5 and v4 projects

    The astro add cloudflare command in older Astro versions installs the latest adapter version, which causes compatibility issues. This change adds manual configuration logic for projects using Astro versions before 6.0.0:

    • Astro 6.0.0+: Uses the native astro add cloudflare command (unchanged behavior)
    • Astro 5.x: Installs @astrojs/cloudflare@12 and manually configures the adapter
    • Astro 4.x: Installs @astrojs/cloudflare@11 and manually configures the adapter
    • Astro < 4.0.0: Returns an error prompting the user to upgrade

  • #​11892 7c3c6c6 Thanks @​staticpayload! - Handle registry ports when matching container image digests

    Wrangler now strips tags without breaking registry ports when comparing local images to remote digests. This prevents unnecessary pushes for tags like localhost:5000/app:tag.

  • Updated dependencies [3c988e2, d028ffb, cb71403, 3a1c149, ce48b77, 8729f3d]:

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from pi0 as a code owner March 21, 2026 02:43
@codecov
Copy link

codecov bot commented Mar 21, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.87%. Comparing base (b5b0449) to head (cb2cad1).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main     #761      +/-   ##
==========================================
+ Coverage   64.81%   64.87%   +0.06%     
==========================================
  Files          43       43              
  Lines        2234     2238       +4     
  Branches      522      524       +2     
==========================================
+ Hits         1448     1452       +4     
  Misses        678      678              
  Partials      108      108

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 0f49129 to 66d37a5 Compare March 25, 2026 22:56
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 66d37a5 to cb2cad1 Compare March 26, 2026 06:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@pi0 pi0 Awaiting requested review from pi0 pi0 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants