fix(deps): update minor updates (minor) #28
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
16.2.23
->16.3.3
^16.2.23
->^16.3.3
1.5.0
->1.6.0
^1.5.0
->^1.6.1
^1.5.0
->^1.6.0
^1.63.0
->^1.73.0
^16.1.5
->^16.2.4
10.14.0
->10.18.3
^1.260.1
->^1.275.2
0.6.14
->0.7.0
^9.8.1
->^9.11.1
^7.62.0
->^7.65.0
^1.3.6
->^1.4.0
^4.3.0
->^4.5.0
^4.0.17
->^4.1.12
Release Notes
anolilab/javascript-style-guide (@anolilab/eslint-config)
v16.3.3
Compare Source
Bug Fixes
v16.3.2
Compare Source
Bug Fixes
v16.3.1
Compare Source
Bug Fixes
v16.3.0
Compare Source
Features
Bug Fixes
v16.2.26
Compare Source
Bug Fixes
v16.2.25
Compare Source
Bug Fixes
v16.2.24
Compare Source
Bug Fixes
c15t/c15t (@c15t/backend)
v1.6.0
Compare Source
Minor Changes
84ab0c7
: For a full detailed changelog see the v1.6.0 release notes.Patch Changes
84ab0c7
]c15t/c15t (@c15t/react)
v1.6.1
Compare Source
Patch Changes
6257a20
: fix(react): dialog scroll lock persisting after closurev1.6.0
Compare Source
Minor Changes
84ab0c7
: For a full detailed changelog see the v1.6.0 release notes.Patch Changes
84ab0c7
]c15t/c15t (@c15t/translations)
v1.6.0
Compare Source
Minor Changes
84ab0c7
: For a full detailed changelog see the v1.6.0 release notes.lobehub/lobe-icons (@lobehub/icons-static-svg)
v1.73.0
Compare Source
Released on 2025-02-15
✨ Features
💄 Styles
Improvements and Fixes
What's improved
Styles
v1.72.0
Compare Source
Released on 2025-02-15
✨ Features
Improvements and Fixes
What's improved
v1.71.0
Compare Source
Released on 2025-02-14
✨ Features
💄 Styles
Improvements and Fixes
What's improved
Styles
v1.70.0
Compare Source
Released on 2025-02-14
✨ Features
💄 Styles
Improvements and Fixes
What's improved
Styles
v1.69.1
Compare Source
Version 1.69.1
Released on 2025-10-07
💄 Styles
Improvements and Fixes
Styles
v1.69.0
Compare Source
Released on 2025-02-11
✨ Features
Improvements and Fixes
What's improved
v1.68.0
Compare Source
Released on 2025-02-04
✨ Features
💄 Styles
Improvements and Fixes
What's improved
Styles
v1.67.0
Compare Source
Released on 2025-02-04
✨ Features
Improvements and Fixes
What's improved
v1.66.0
Compare Source
Released on 2025-02-04
✨ Features
Improvements and Fixes
What's improved
Version 1.65.1
Released on 2025-02-04
💄 Styles
360zhinao2-o1
&MiniMax-Text-01
.Improvements and Fixes
Styles
360zhinao2-o1
&MiniMax-Text-01
, closes #67 (83a87be)v1.65.0
Compare Source
Released on 2025-02-03
✨ Features
Improvements and Fixes
What's improved
v1.64.0
Compare Source
Released on 2025-01-28
✨ Features
Improvements and Fixes
What's improved
lint-staged/lint-staged (lint-staged)
v16.2.4
Compare Source
Patch Changes
#1682
0176038
Thanks @iiroj! - Update dependencies, includingnano-spawn@2.0.0
with bug fixes.#1671
581a54e
Thanks @iiroj! - Speed up execution by only importing theyaml
depedency if using YAML configuration files.v16.2.3
Compare Source
Patch Changes
27cd541
Thanks @iiroj! - When using--fail-on-changes
, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.v16.2.2
Compare Source
Patch Changes
#1667
699f95d
Thanks @iiroj! - The backup stash will not be dropped when using--fail-on-changes
and there are errors. When reverting to original state is disabled (via--no-revert
or--fail-on-changes
), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:
v16.2.1
Compare Source
Patch Changes
#1664
8277b3b
Thanks @iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions isreadonly string[]
and can't be mutated. Thanks @outslept!#1654
70b9af3
Thanks @iiroj! - This version has been published from GitHub Actions using Trusted Publishing for npm packages.#1659
4996817
Thanks @iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there arepackage.json
files in the working directory. This situation might happen when running lint-staged for a single package in a monorepo.#1654
7021f0a
Thanks @iiroj! - Return the caret semver range (^
) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates to lint-staged. This was changed in 16.2.0 after the vulnerability issues withchalk
anddebug
, which were also removed in the same version.Given the recent vulnerabilities in the npm ecosystem, it's best to be very careful when updating dependencies.
v16.2.0
Compare Source
Minor Changes
#1615
99eb742
Thanks @iiroj! - Added a new option--fail-on-changes
to make lint-staged exit with code 1 when tasks modify any files, making theprecommit
hook fail. This is similar to thegit diff --exit-code
option. Using this flag also implies the--no-revert
flag which means any changes made my tasks will be left in the working tree after failing, so that they can be manually staged and the commit tried again.#1611
cd05fd3
Thanks @rlorenzo! - Added a new option--continue-on-error
so that lint-staged will run all tasks to completion even if some of them fail. By default, lint-staded will exit early on the first failure.#1637
82fcc07
Thanks @iiroj! - Internal lint-staged errors are now thrown and visible in the console output. Previously they were caught with the process exit code set to 1, but not logged. This happens when, for example, there's a syntax error in the lint-staged configuration file.#1647
a5ecc06
Thanks @iiroj! - Remove debug as a dependency due to recent malware issue; read more at debug-js/debug#1005. Because of this, theDEBUG
environment variable is no longer supported — use the--debug
to enable debugging#1636
8db2717
Thanks @iiroj! - Added a new option--hide-unstaged
so that lint-staged will hide all unstaged changes to tracked files before running tasks. The changes will be applied back after running the tasks. Note that the combination of flags--hide-unstaged --no-hide-partially-staged
isn't meaningful and behaves the same as just--hide-unstaged
.Thanks to @ItsNickBarry for the idea and initial implementation in #1552.
#1648
7900b3b
Thanks @iiroj! - Remove lilconfig to reduce reliance on third-party dependencies. It was used to find possible config files outside of those tracked in Git, including from the parent directories. This behavior has been moved directly into lint-staged and should work about the same.Patch Changes
#1633
7f9e485
Thanks @dependabot! - Bumps listr2 from 9.0.3 to 9.0.4.#1626
99d5a9b
Thanks @iiroj! - Due to recent phishing attacks, for example chalk@5.6.1 was released with malware. To avoid lint-staged's users being at risk the direct dependencies are pinned to exact versions, instead of allowing future patch versions with the caret (^
) range.#1588
035bbf2
Thanks @outslept! - Increase performance by listing staged files and searching for configuration concurrently.#1645
deba3ad
Thanks @iiroj! - Remove chalk as a dependency due to recent malware issue; read more at chalk/chalk#656.If you are having trouble with ANSI color codes when using lint-staged, you can try setting either
FORCE_COLOR=true
orNO_COLOR=true
env variables.v16.1.6
Compare Source
Patch Changes
e93578e
Thanks @iiroj! - Try to improve terminating of subprocess of tasks by usingSIGKILL
, and only callingpidtree
when the the main task process has a known pid.pnpm/pnpm (pnpm)
v10.18.3
Compare Source
Patch Changes
verifyDepsBeforeInstall: install
and pre/post install scripts that called other pnpm scripts #10060.@scope:registry
) being parsed as property paths inpnpm config get
when--location=project
is used #9362.pnpm config set --location=project
incorrectly handling keys with slashes (auth tokens, registry settings) #9884.pnpm-workspace.yaml
and.npmrc
exist,pnpm config set --location=project
now writes topnpm-workspace.yaml
(matching read priority) #10072.pnpm outdated --long
#10040.v10.18.2
Compare Source
Patch Changes
pnpm outdated --long
should work #10040.pnpm dlx
should request the full metadata of packages, whenminimumReleaseAge
is set #9963.EPIPE
errors when piping output to other commands #10027.v10.18.1
Compare Source
Patch Changes
--lockfile-only
is used #8320.pnpm setup
creates a command shim to the pnpm executable. This is needed to be able to runpnpm self-update
on Windows #5700.pnpm install
, pnpm produced false positive warnings for "skip adding to the default catalog because it already exists". This warning now only prints when usingpnpm add --save-catalog
as originally intended.v10.18.0
Compare Source
Minor Changes
Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.
Added configuration options for warning thresholds:
fetchWarnTimeoutMs
andfetchMinSpeedKiBps
.Warning messages are displayed when requests exceed time thresholds or fall below speed minimums
Related PR: #10025.
Patch Changes
minimumReleaseAge
configuration #10030.cleanupUnusedCatalogs
configuration when removing dependent packages.scriptShell
is set tofalse
#8748.pnpm dlx
should not fail whenminimumReleaseAge
is set #10037.v10.17.1
Compare Source
Patch Changes
minimumReleaseAge
setting, print this information out in the error message #9974.state.json
creation path when executingpnpm patch
in a workspace project #9733.minimumReleaseAge
is set and thelatest
tag is not mature enough, prefer a non-deprecated version as the newlatest
#9987.v10.17.0
Compare Source
Minor Changes
The
minimumReleaseAgeExclude
setting now supports patterns. For instance:Related PR: #9984.
Patch Changes
minimumReleaseAge
check, when the package is requested by exact version and the packument is loaded from cache #9978.minimumReleaseAge
is set and the active version under a dist-tag is not mature enough, do not downgrade to a prerelease version in case the original version wasn't a prerelease one #9979.v10.16.1
Compare Source
Patch Changes
v10.16.0
Compare Source
Minor Changes
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.
The new setting is called
minimumReleaseAge
. It specifies the number of minutes that must pass after a version is published before pnpm will install it. For example, settingminimumReleaseAge: 1440
ensures that only packages released at least one day ago can be installed.If you set
minimumReleaseAge
but need to disable this restriction for certain dependencies, you can list them under theminimumReleaseAgeExclude
setting. For instance, with the following configuration pnpm will always install the latest version of webpack, regardless of its release time:Related issue: #9921.
Added support for
finders
#9946.In the past,
pnpm list
andpnpm why
could only search for dependencies by name (and optionally version). For example:prints the chain of dependencies to any installed instance of
minimist
:What if we want to search by other properties of a dependency, not just its name? For instance, find all packages that have
react@17
in their peer dependencies?This is now possible with "finder functions". Finder functions can be declared in
.pnpmfile.cjs
and invoked with the--find-by=<function name>
flag when runningpnpm list
orpnpm why
.Let's say we want to find any dependencies that have React 17 in peer dependencies. We can add this finder to our
.pnpmfile.cjs
:Now we can use this finder function by running:
pnpm will find all dependencies that have this React in peer dependencies and print their exact locations in the dependency graph.
It is also possible to print out some additional information in the output by returning a string from the finder. For example, with the following finder:
Every matched package will also print out the license from its
package.json
:Patch Changes
nodeVersion
is not set to an exact semver version #9934.pnpm publish
should be able to publish a.tar.gz
file #9927.pnpm run
return a non-zero exit code #9626.v10.15.1
Compare Source
Patch Changes
.pnp.cjs
crash when importing subpath #9904.v10.15.0
Compare Source
Minor Changes
cleanupUnusedCatalogs
configuration. When set totrue
, pnpm will remove unused catalog entries during installation #9793.@*/pnpm-plugin-*
#9780.pnpm config get
now prints an INI string for an object value #9797.pnpm config get
now accepts property paths (e.g.pnpm config get catalog.react
,pnpm config get .catalog.react
,pnpm config get 'packageExtensions["@​babel/parser"].peerDependencies["@​babel/types"]'
), andpnpm config set
now accepts dot-leading or subscripted keys (e.g.pnpm config set .ignoreScripts true
).pnpm config get --json
now prints a JSON serialization of config value, andpnpm config set --json
now parses the input value as JSON.Patch Changes
pnpm create
command, must verify whether the node version is supported even if a cache already exists #9775.*/*
to theAccept
header to avoid getting a 406 error on AWS CodeArtifact #9862.pnpm dlx pkg --help
doesn't pass--help
topkg
#9823.PostHog/posthog-js (posthog-js)
v1.275.2
Compare Source
1.275.2
Patch Changes
#2431
7d45a7a
Thanks @marandaneto! - fix: remove deprecated attribute $exception_personURL from exception eventsUpdated dependencies [
daf919b
,7d45a7a
]:v1.275.1
Compare Source
1.275.1
Patch Changes
4e15fda
Thanks @pauldambra! - fix: possible memory leak in session id replacement in cookieless modev1.275.0
Compare Source
1.275.0
Minor Changes
ae941c2
Thanks @thmsobrmlr! - Apply $current_url masking in web vitals and heatmaps extensions.v1.274.3
Compare Source
1.274.3
Patch Changes
2d4eac4
Thanks @pauldambra! - fix: another small potential memory leak in the recorder wrapping code"v1.274.2
Compare Source
1.274.2
Patch Changes
43b8029
Thanks @pauldambra! - fix: potential source of memory leak in recorder mutation throttlerv1.274.1
Compare Source
1.274.1
Patch Changes
10da2ee
]:v1.274.0
Compare Source
1.274.0
Minor Changes
39ace01
Thanks @pauldambra! - feat: remove eager loaded replay and reduce bundle size by 14.8%Patch Changes
e19a384
]:v1.273.1
Compare Source
1.273.1
Patch Changes
25a8846
Thanks @pauldambra! - fix: rely on 'state' less when reporting replay statusv1.273.0
Compare Source
1.273.0
Minor Changes
66b12f8
Thanks @thmsobrmlr! - Fixes an issue where the event queue was not started until a page reload after callingopt_in_capturing()
v1.272.1
Compare Source
1.272.1
Patch Changes
4a39a10
Thanks @pauldambra! - fix: increase max depth for app state diffingv1.272.0
Compare Source
1.272.0
Minor Changes
cdfbd6d
Thanks @pauldambra! - fix: sConfiguration
📅 Schedule: Branch creation - "after 10:00 before 19:00 every weekday except after 13:00 before 14:00" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.