Skip to content

fix(deps): update all non-major dependencies#453

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#453
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 23, 2026

This PR contains the following updates:

Package Change Age Confidence Type Update
@actions/core (source) ^3.0.0^3.0.1 age confidence dependencies patch
@antfu/ni ^30.0.0^30.1.0 age confidence devDependencies minor
@types/node (source) ^25.5.0^25.9.1 age confidence devDependencies minor
eslint (source) ^10.1.0^10.4.0 age confidence devDependencies minor
node ^24.14.1^24.16.0 age confidence uses-with minor
pnpm (source) 10.32.110.33.4 age confidence packageManager minor
prettier (source) ^3.8.1^3.8.3 age confidence devDependencies patch
semver ^7.7.4^7.8.1 age confidence devDependencies minor
typescript-eslint (source) ^8.57.2^8.59.4 age confidence devDependencies minor
zizmorcore/zizmor-action v0.5.3v0.5.6 age confidence action patch

Release Notes

actions/toolkit (@​actions/core)

v3.0.1

  • Bump undici from 6.23.0 to 6.24.1 #​2348
antfu-collective/ni (@​antfu/ni)

v30.1.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
eslint/eslint (eslint)

v10.4.0

Compare Source

v10.3.0

Compare Source

v10.2.1

Compare Source

v10.2.0

Compare Source

Features

Bug Fixes

Documentation

  • a2af743 docs: add language to configuration objects (#​20712) (Francesco Trotta)
  • 845f23f docs: Update README (GitHub Actions Bot)
  • 5fbcf59 docs: remove sourceType from ts playground link (#​20477) (Tanuj Kanti)
  • 8702a47 docs: Update README (GitHub Actions Bot)
  • ddeaded docs: Update README (GitHub Actions Bot)
  • 2b44966 docs: add Major Releases section to Manage Releases (#​20269) (Milos Djermanovic)
  • eab65c7 docs: update eslint versions in examples (#​20664) (루밀LuMir)
  • 3e4a299 docs: update ESM Dependencies policies with note for own-usage packages (#​20660) (Milos Djermanovic)

Chores

  • 8120e30 refactor: extract no unmodified loop condition (#​20679) (kuldeep kumar)
  • 46e8469 chore: update dependency markdownlint-cli2 to ^0.22.0 (#​20697) (renovate[bot])
  • 01ed3aa test: add unit tests for unicode utilities (#​20622) (Manish chaudhary)
  • 811f493 ci: remove --legacy-peer-deps from types integration tests (#​20667) (Milos Djermanovic)
  • 6b86fcf chore: update dependency npm-run-all2 to v8 (#​20663) (renovate[bot])
  • 632c4f8 chore: add prettier update commit to .git-blame-ignore-revs (#​20662) (루밀LuMir)
  • b0b0f21 chore: update dependency eslint-plugin-regexp to ^3.1.0 (#​20659) (Milos Djermanovic)
  • 228a2dd chore: update dependency eslint-plugin-eslint-plugin to ^7.3.2 (#​20661) (Milos Djermanovic)
  • 3ab4d7e test: Add tests for eslintrc-style keys (#​20645) (kuldeep kumar)
actions/node-versions (node)

v24.16.0: 24.16.0

Compare Source

Node.js 24.16.0

v24.15.0: 24.15.0

Compare Source

Node.js 24.15.0

pnpm/pnpm (pnpm)

v10.33.4: pnpm 10.33.4

Compare Source

Patch Changes

  • Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.

    A new gitHosted: true field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.

  • Fix a regression where pnpm --recursive --filter '!<pkg>' run/exec/test/add would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative --filter arguments are provided, matching the documented behavior. To include the root, pass --include-workspace-root #​11341.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx

v10.33.3

Compare Source

v10.33.2

Compare Source

v10.33.1: pnpm 10.33.1

Compare Source

Patch Changes
  • When a project's packageManager field selects pnpm v11 or newer, commands that v10 would have passed through to npm (version, login, logout, publish, unpublish, deprecate, dist-tag, docs, ping, search, star, stars, unstar, whoami, etc.) are now handed over to the wanted pnpm, which implements them natively. Previously they silently shelled out to npm — making, for example, pnpm version --help print npm's help on a project with packageManager: pnpm@11.0.0-rc.3 #​11328.
Platinum Sponsors
Bit
Gold Sponsors
Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx

v10.33.0

Compare Source

prettier/prettier (prettier)

v3.8.3

Compare Source

v3.8.2

Compare Source

npm/node-semver (semver)

v7.8.1

Compare Source

Bug Fixes

v7.8.0

Compare Source

Features
Bug Fixes
Documentation
Chores
typescript-eslint/typescript-eslint (typescript-eslint)

v8.59.4

Compare Source

🩹 Fixes
  • typescript-eslint: export Compatible* types from typescript-eslint to resolve pnpm TS error (#​12340)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.3

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.2

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.2

Compare Source

🩹 Fixes
  • remove tsbuildinfo cache file from published packages (#​12187)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.0

Compare Source

🚀 Features
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.5.6

Compare Source

  • 1.25.2 is now available via the action
  • 1.25.2 is now the default version of zizmor used by the action

v0.5.5

Compare Source

This is a no-op release.

v0.5.4

Compare Source

  • 1.25.0 is now available via the action
  • 1.25.0 is now the default version of zizmor used by the action

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title chore(deps): update dependency typescript-eslint to ^8.57.1 chore(deps): update dependency typescript-eslint to ^8.57.2 Mar 23, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 784abc6 to 6079279 Compare March 24, 2026 17:29
@renovate renovate Bot changed the title chore(deps): update dependency typescript-eslint to ^8.57.2 chore(deps): update all non-major dependencies Mar 24, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 6079279 to 69075ac Compare March 25, 2026 07:02
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies chore(deps): update pnpm to v10.33.0 Mar 26, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 5586f40 to 4d94d6b Compare March 30, 2026 17:35
@renovate renovate Bot changed the title chore(deps): update pnpm to v10.33.0 chore(deps): update all non-major dependencies Mar 30, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from ad06e34 to 3e6d352 Compare April 10, 2026 05:25
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 37004d9 to 77fc71b Compare April 17, 2026 22:01
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 13b6b0e to 209a09c Compare April 21, 2026 20:57
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Apr 21, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 24c95d2 to be730ba Compare April 27, 2026 22:42
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from efa6919 to 63807e2 Compare May 6, 2026 16:25
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from fd59a5d to 7d8f112 Compare May 14, 2026 17:30
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from c9d881e to 840f903 Compare May 21, 2026 22:36
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 840f903 to 350282c Compare May 22, 2026 04:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants