chore(deps): update all dependencies #9
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=80&v=4){kind=small}
|
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Comment |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
Coverage summary from CodacySee diff coverage on Codacy
Coverage variation details
Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: Diff coverage details
Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: See your quality gate settings Change summary preferences |
|
Deploy preview for oxc-jest ready! ✅ Preview Built with commit fe53e88. |
![ellipsis-dev[bot]](https://avatars.githubusercontent.com/in/64358?s=60&v=4){kind=small}
There was a problem hiding this comment.
Important
Looks good to me! 👍
Reviewed everything up to fe53e88 in 1 minute and 42 seconds. Click for details.
- Reviewed
185lines of code in9files - Skipped
2files when reviewing. - Skipped posting
14draft comments. View those below. - Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. .github/workflows/autofix.yml:19
- Draft comment:
Updated the checkout action to v5.0.0 using a commit hash. Consider using the official release tag (e.g. 'v5') if strict pinning isn’t required for easier maintainability. - Reason this comment was not posted:
Decided after close inspection that this draft comment was likely wrong and/or not actionable: usefulness confidence = 10% vs. threshold = 50% Using commit hashes is actually a more secure practice than using version tags, as tags can be moved. The current approach using commit hashes with version comments is a good security practice. The suggestion to use less strict version pinning would actually reduce security. Additionally, this is more of a team preference/policy matter than a clear code issue. The comment does raise a valid point about maintainability trade-offs between strict and loose version pinning. Different teams might have different preferences here. While maintainability is a consideration, security should be prioritized for CI/CD workflows, and the current approach using commit hashes is actually the more secure practice. Delete the comment because it suggests a less secure practice and represents a team policy preference rather than a clear code issue.
2. .github/workflows/ci.yml:29
- Draft comment:
The checkout action is updated to v5.0.0. Ensure that this change is compatible with all OS matrices defined in the workflow. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is asking the PR author to ensure compatibility with all OS matrices, which is a form of asking them to double-check their work. This violates the rule against asking the author to ensure behavior is intended or tested.
3. .github/workflows/ci.yml:32
- Draft comment:
The setup-node action is now at v5.0.0. Verify if any configuration adjustments are needed with this new version. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is asking the PR author to verify if configuration adjustments are needed due to a version change in a dependency. This falls under the rule of not asking the author to ensure or verify things related to dependencies.
4. .github/workflows/pkg-pr-new.yml:16
- Draft comment:
Checkout and setup-node actions have been updated to v5.0.0. The changes are consistent with other workflows – just verify that branch handling behaves as expected. - Reason this comment was not posted:
Confidence changes required:33%<= threshold50%None
5. .github/workflows/pkg-size.yml:17
- Draft comment:
The checkout action in the package size report workflow is updated to v5.0.0. Confirm that downstream steps (like the size report action) work correctly with this version. - Reason this comment was not posted:
Confidence changes required:33%<= threshold50%None
6. .github/workflows/release.yml:23
- Draft comment:
The checkout (and setup-node) actions have been updated to v5.0.0 in the release workflow. Ensure that fetching full Git history (fetch-depth: 0) is still necessary and that changesets integration remains unaffected. - Reason this comment was not posted:
Confidence changes required:33%<= threshold50%None
7. .github/workflows/size-limit.yml:16
- Draft comment:
The checkout action is now at v5.0.0. Also note that the size-limit action is updated to v1.8.0 – double-check that these updates work collectively for the size check. - Reason this comment was not posted:
Confidence changes required:33%<= threshold50%None
8. .github/workflows/vercel.yml:27
- Draft comment:
The Vercel deploy action has been updated to v41.1.4. Please verify that the deployment configuration and any Vercel-specific parameters remain valid with this new version. - Reason this comment was not posted:
Confidence changes required:33%<= threshold50%None
9. .yarnrc.yml:10
- Draft comment:
The yarnPath has been updated to use yarn-4.10.3. Ensure that any scripts or plugins relying on Yarn behave correctly with this new version. - Reason this comment was not posted:
Confidence changes required:33%<= threshold50%None
10. package.json:10
- Draft comment:
The packageManager field is updated to 'yarn@4.10.3'. Confirm that the lockfile and dependency resolution are aligned with this version update. - Reason this comment was not posted:
Confidence changes required:33%<= threshold50%None
11. package.json:63
- Draft comment:
Updated @commitlint/cli from ^19.8.1 to ^20.0.0. Check that your commit message linting configuration has been reviewed for any changes introduced in the new version. - Reason this comment was not posted:
Confidence changes required:50%<= threshold50%None
12. package.json:72
- Draft comment:
The @types/web package has been updated from ^0.0.245 to ^0.0.271. Verify that any changes in the DOM type definitions do not lead to unexpected TypeScript errors. - Reason this comment was not posted:
Confidence changes required:50%<= threshold50%None
13. package.json:74
- Draft comment:
Upgraded @vitejs/plugin-react-swc from ^3.10.2 to ^4.0.0. Review the plugin's release notes for potential configuration changes (e.g. SWC cache root or refresh wrapper adjustments) that may affect your Vite setup. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is about a dependency change, specifically an upgrade of a plugin. It suggests reviewing release notes for potential configuration changes. According to the rules, comments on dependency changes should be ignored unless they are about specific issues or suggestions. This comment does not provide a specific suggestion or issue related to the code, so it should be removed.
14. package.json:92
- Draft comment:
The tsdown package is updated from ^0.12.9 to ^0.15.0. As this is a pre-1.0.0 release, make sure to test your build process thoroughly for any breaking changes in API or behavior. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is about a dependency update and advises the author to test for breaking changes. It doesn't provide a specific suggestion or point out a specific issue with the code. It violates the rule against asking the author to ensure behavior is intended or tested.
Workflow ID: wflow_UgledDRZVGqctnup
You can customize 
commit: |
📊 Package size report -0.27%↓
Unchanged files
🤖 This report was automatically generated by pkg-size-action |
size-limit report 📦
|
renovate
bot
force-pushed
the
renovate/all
branch
from
fe53e88 to
e0a8753
Compare
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Note
Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot].This notice will be removed on 2025-10-07.
This PR contains the following updates:
^19.8.1->^20.0.0^0.0.245->^0.0.272^3.10.2->^4.0.0v4.2.2->v5.0.0v4.4.0->v5.0.0v25.2.0->v41.1.4v5.4.3->v5.5.1^0.12.9->^0.15.04.9.2->4.10.3Release Notes
conventional-changelog/commitlint (@commitlint/cli)
v20.1.0Compare Source
Note: Version bump only for package @commitlint/cli
v20.0.0Compare Source
Note: Version bump only for package @commitlint/cli
19.8.1 (2025-05-08)
Bug Fixes
microsoft/TypeScript-DOM-Lib-Generator (@types/web)
v0.0.272Compare Source
asynciterable.d.tsNo changes
index.d.tsModified
cssText,length,parentRule,getPropertyPriority,getPropertyValue,item,removeProperty,setPropertyiterable.d.tsNo changes
v0.0.271Compare Source
asynciterable.d.tsNo changes
index.d.tsNew interfaces
CommandEventModified
command,commandForElementinteractionIdlockNon-value types
moveBeforeiterable.d.tsNo changes
v0.0.270Compare Source
asynciterable.d.tsNo changes
index.d.tsNon-value types
scrollMarginiterable.d.tsNo changes
v0.0.269Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.268Compare Source
asynciterable.d.tsNo changes
index.d.tsModified
toJSONiterable.d.tsNo changes
v0.0.267Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.266Compare Source
asynciterable.d.tsNo changes
index.d.tsNew interfaces
DigitalCredentialiterable.d.tsNo changes
v0.0.265Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.264Compare Source
asynciterable.d.tsNo changes
index.d.tsModified
textAutospacevariationSettingsiterable.d.tsNo changes
v0.0.263Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.262Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.261Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.260Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.259Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.258Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.257Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.256Compare Source
asynciterable.d.tsNo changes
index.d.tsNew interfaces
SchedulerTaskControllerTaskPriorityChangeEventTaskSignalModified
overallProgressNon-value types
scheduleriterable.d.tsNo changes
v0.0.255Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.254Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.253Compare Source
asynciterable.d.tsNo changes
index.d.tsNew interfaces
GPUErrorGPUPipelineErroriterable.d.tsNo changes
v0.0.252Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.251Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.250Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.249Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.248Compare Source
asynciterable.d.tsNo changes
index.d.tsNo changes
iterable.d.tsNo changes
v0.0.247Compare Source
asynciterable.d.tsNo changes
index.d.tsNew interfaces
ScrollTimelineSpeechRecognitionErrorEventSpeechRecognitionEventViewTimelineRemoved interfaces
CSPViolationReportBodyReportReportBodyModified
fontVariantEmojiclosedBypersistentDeviceIditerable.d.tsNo changes
v0.0.246Compare Source
asynciterable.d.tsNo changes
index.d.tsNew interfaces
URLPatterniterable.d.tsNo changes
vitejs/vite-plugin-react (@vitejs/plugin-react-swc)
v4.1.0Compare Source
Set SWC cacheRoot options
This is set to
{viteCacheDir}/swcand override the default of.swc.Perf: simplify refresh wrapper generation (#835)
v4.0.1Compare Source
Set
optimizeDeps.rollupOptions.transform.jsxinstead ofoptimizeDeps.rollupOptions.jsxfor rolldown-vite (#735)optimizeDeps.rollupOptions.jsxis going to be deprecated in favor ofoptimizeDeps.rollupOptions.transform.jsx.v4.0.0Compare Source
v3.11.0Compare Source
Add HMR support for compound components (#518)
HMR now works for compound components like this:
Return
Plugin[]instead ofPluginOption[](#537)The return type has changed from
react(): PluginOption[]to more specialized typereact(): Plugin[]. This allows for type-safe manipulation of plugins, for example:actions/checkout (actions/checkout)
v5.0.0Compare Source
What's Changed
v2.327.1
Release Notes
Make sure your runner is updated to this version or newer to use this release.
Full Changelog: actions/checkout@v4...v5.0.0
v4.3.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/checkout@v4...v4.3.0
actions/setup-node (actions/setup-node)
v5.0.0Compare Source
What's Changed
Breaking Changes
This update, introduces automatic caching when a valid
packageManagerfield is present in yourpackage.json. This aims to improve workflow performance and make dependency management more seamless.To disable this automatic caching, set
package-manager-cache: falseMake sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Dependency Upgrades
New Contributors
Full Changelog: actions/setup-node@v4...v5.0.0
amondnet/vercel-action (amondnet/vercel-action)
v41.1.4Compare Source
What's Changed
New Contributors
Full Changelog: amondnet/vercel-action@v25...v41.1.4
codecov/codecov-action (codecov/codecov-action)
v5.5.1Compare Source
What's Changed
codecov-cliversion reference example by @webknjaz in #1774Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1
v5.5.0Compare Source
What's Changed
Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0
rolldown/tsdown (tsdown)
v0.15.6Compare Source
🐞 Bug Fixes
View changes on GitHub
v0.15.5Compare Source
🚀 Features
inlineOnlyoption - by @sxzz (e3bce)🐞 Bug Fixes
🏎 Performance
requirepure cjs deps - by @sxzz (091b8)View changes on GitHub
v0.15.4Compare Source
🐞 Bug Fixes
View changes on GitHub
v0.15.3Compare Source
🐞 Bug Fixes
View changes on GitHub
v0.15.2Compare Source
🚀 Features
globImportoption - by @sxzz (cc30d)new URL(url, import.meta.url)pattern by default - by @sxzz (f26e0)🐞 Bug Fixes
View changes on GitHub
v0.15.1Compare Source
🚀 Features
config-loadercli option - by @sxzz (f0ef7)🐞 Bug Fixes
View changes on GitHub
v0.15.0Compare Source
🚨 Breaking Changes
🚀 Features
import.meta.glob- by @sxzz (4223b)🐞 Bug Fixes
View changes on GitHub
v0.14.2Compare Source
🚀 Features
exports.typesexists - by @ronantakizawa and @sxzz in #440 (98eb1)View changes on GitHub
v0.14.1Compare Source
🐞 Bug Fixes
expandDirectories- by @Debbl in #427 (fb2d1)View changes on GitHub
v0.14.0Compare Source
🚨 Breaking Changes
expandDirectoriesfor matchingfast-glob's behavior - by @sxzz (8171b)View changes on GitHub
v0.13.5Compare Source
🐞 Bug Fixes
View changes on GitHub
v0.13.4Compare Source
🚀 Features
cjsDefaultoption - by @sxzz (f503f)🐞 Bug Fixes
cjsDefaultis enabled - by @sxzz (3ffa9)View changes on GitHub
v0.13.3Compare Source
🚨 Minor Breaking Changes
dts.buildoption should be enable manually fortsc -b- by @sxzz (13146)🚀 Features
logLevel&customLoggeroption - by @sxzz (724d1)warnOnceto logger - by @sxzz (eb4fb)ignoreWatch- by @sxzz (91f9f)🐞 Bug Fixes
ignoreWatch- by @sxzz (d0e31)View changes on GitHub
v0.13.2Compare Source
🚨 Upstream Breaking Changes
dts.isolatedDeclarationstodts.oxc- by @sxzz (5bdb9)🚀 Features
🐞 Bug Fixes
View changes on GitHub
v0.13.1Compare Source
🚀 Features
🐞 Bug Fixes
defineConfig- by @sxzz (7c32a)View changes on GitHub
v0.13.0Compare Source
🚨 Breaking Changes
🚀 Features
banner&footeroptions - by @gwansikk and @sxzz in #338 (54e21)cjsDtsto input/output options context - by @sxzz (3c4b3)🐞 Bug Fixes
View changes on GitHub
yarnpkg/berry (yarn)
v4.10.3Compare Source
v4.10.2Compare Source
v4.10.1Compare Source
v4.10.0Compare Source
v4.9.4Compare Source
v4.9.3Compare Source
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.