fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	^22.19.0 -> ^22.19.1
csstype	^3.1.3 -> ^3.2.3
pnpm (source)	10.20.0 -> 10.23.0
rimraf	^6.1.0 -> ^6.1.2
sass	^1.93.3 -> ^1.94.2

---

Release Notes

frenic/csstype (csstype)

v3.2.3

Compare Source

v3.2.2

Compare Source

v3.2.1

Compare Source

v3.2.0

Compare Source

pnpm/pnpm (pnpm)

v10.23.0: pnpm 10.23

Compare Source

Minor Changes

• Added --lockfile-only option to pnpm list #​10020.

Patch Changes

• pnpm self-update should download pnpm from the configured npm registry #​10205.
• pnpm self-update should always install the non-executable pnpm package (pnpm in the registry) and never the @pnpm/exe package, when installing v11 or newer. We currently cannot ship @pnpm/exe as pkg doesn't work with ESM #​10190.
• Node.js runtime is not added to "dependencies" on pnpm add, if there's a engines.runtime setting declared in package.json #​10209.
• The installation should fail if an optional dependency cannot be installed due to a trust policy check failure #​10208.
• pnpm list and pnpm why now display npm: protocol for aliased packages (e.g., foo npm:[email protected]) #​8660.
• Don't add an extra slash to the Node.js mirror URL #​10204.
• pnpm store prune should not fail if the store contains Node.js packages #​10131.

Platinum Sponsors

Gold Sponsors

v10.22.0: pnpm 10.22

Compare Source

Minor Changes

• Added support for trustPolicyExclude #​10164.

  You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:

  trustPolicy: no-downgrade
  trustPolicyExclude:
    - [email protected]
    - [email protected] || 5.102.1

• Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

• Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #​10179.

Platinum Sponsors

Gold Sponsors

v10.21.0

Compare Source

isaacs/rimraf (rimraf)

v6.1.2

Compare Source

v6.1.1

Compare Source

sass/dart-sass (sass)

v1.94.2

Compare Source

Command-Line Interface

• Using --fatal-deprecation <version> no longer emits warnings about
  deprecations that are obsolete.

Dart API

• Deprecation.forVersion now excludes obsolete deprecations from the set it
  returns.

JS API

• Excludes obsolete deprecations from fatalDeprecations when a Version is
  passed.

Node.js Embedded Host

• Fix a bug where a variable could be used before it was initialized during
  async compilation.

v1.94.1

Compare Source

• No user-visible changes.

v1.94.0

Compare Source

• Potentially breaking compatibility fix: @function rules whose names
  begin with -- are now parsed as unknown at-rules to support the plain CSS
  @function rule. Within this rule, the result property is parsed as raw
  CSS just like custom properties.

• Potentially breaking compatibility fix: @mixin rules whose names begin
  with -- are now errors. These are not yet parsed as unknown at-rules because
  no browser currently supports CSS mixins.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[pkg-pr-new]

Open in StackBlitz

@vue/compiler-core

npm i https://pkg.pr.new/@vue/compiler-core@14070

@vue/compiler-dom

npm i https://pkg.pr.new/@vue/compiler-dom@14070

@vue/compiler-sfc

npm i https://pkg.pr.new/@vue/compiler-sfc@14070

@vue/compiler-ssr

npm i https://pkg.pr.new/@vue/compiler-ssr@14070

@vue/reactivity

npm i https://pkg.pr.new/@vue/reactivity@14070

@vue/runtime-core

npm i https://pkg.pr.new/@vue/runtime-core@14070

@vue/runtime-dom

npm i https://pkg.pr.new/@vue/runtime-dom@14070

@vue/server-renderer

npm i https://pkg.pr.new/@vue/server-renderer@14070

@vue/shared

npm i https://pkg.pr.new/@vue/shared@14070

vue

npm i https://pkg.pr.new/vue@14070

@vue/compat

npm i https://pkg.pr.new/@vue/compat@14070

commit: 26cf56f

[github-actions]

Size Report

Bundles

File	Size	Gzip	Brotli
runtime-dom.global.prod.js	103 kB	38.9 kB	35.1 kB
vue.global.prod.js	161 kB	58.8 kB	52.4 kB

Usages

Name	Size	Gzip	Brotli
createApp (CAPI only)	46.9 kB	18.3 kB	16.8 kB
createApp	55 kB	21.4 kB	19.6 kB
createSSRApp	59.3 kB	23.1 kB	21.1 kB
defineCustomElement	60.6 kB	23.1 kB	21.1 kB
overall	69.3 kB	26.6 kB	24.3 kB