Skip to content

fix(deps): update all non-major - #507

Open
cmlplatform-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-major
Open

fix(deps): update all non-major#507
cmlplatform-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-major

Conversation

@cmlplatform-renovate

@cmlplatform-renovate cmlplatform-renovate Bot commented Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@astrojs/starlight (source) 0.42.7 → 0.42.9 age confidence dependencies patch 0.42.10
@babel/core (source) 7.29.7 → 7.29.13 age confidence devDependencies patch
@babel/runtime (source) 7.29.10 → 7.29.13 age confidence devDependencies patch
@biomejs/biome (source) 2.6.2 → 2.6.5 age confidence pnpm.catalog.default patch 2.6.6
@hookform/resolvers (source) 6.0.0 → 6.0.2 age confidence dependencies patch
@mermaid-js/layout-elk 1.0.1 → 1.0.2 age confidence dependencies patch
@scalar/api-reference (source) 1.76.0 → 1.77.0 age confidence dependencies minor
@tailwindcss/postcss (source) 4.3.3 → 4.3.4 age confidence devDependencies patch 4.3.5
@tanstack/query-async-storage-persister (source) 5.104.5 → 5.106.1 age confidence dependencies minor 5.107.1 (+1)
@tanstack/react-query (source) 5.104.5 → 5.106.1 age confidence dependencies minor 5.107.1 (+1)
@tanstack/react-query-persist-client (source) 5.104.5 → 5.106.1 age confidence dependencies minor 5.107.1 (+1)
@types/node (source) 26.6.5 → 26.6.6 age confidence pnpm.catalog.default patch
@typescript-eslint/parser (source) 8.72.0 → 8.72.1 age confidence devDependencies patch
@vitest/coverage-v8 (source) 5.0.5 → 5.1.0 age confidence devDependencies minor
CodSpeedHQ/action v5.6.0 → v5.6.3 age confidence action patch
aquasec/trivy (source) 0.76.1 → 0.76.2 age confidence docker patch
astral-sh/setup-uv v10.3.2 → v10.3.3 age confidence action patch
astral-sh/uv-pre-commit 0.13.5 → 0.13.7 age confidence repository patch
astro (source) 7.4.2 → 7.4.5 age confidence pnpm.catalog.default patch 7.4.7 (+1)
baseline-browser-mapping 2.11.32 → 2.11.35 age confidence devDependencies patch
clamav/clamav (source) 974ff8d → 1474f1d digest
commitizen-tools/commitizen v4.19.2 → v4.19.3 age confidence repository patch
docker/login-action v4.7.0 → v4.8.0 age confidence action minor
eslint (source) 10.13.0 → 10.14.0 age confidence devDependencies minor
github/codeql-action v4.39.1 → v4.39.3 age confidence action patch
grafana/alloy v1.21.2 → v1.21.3 age confidence patch
hls.js 1.7.3 → 1.7.4 age confidence dependencies patch
lucide-react-native (source) 1.61.0 → 1.69.0 age confidence dependencies minor 1.70.0
mermaid 12.2.0 → 12.3.0 age confidence dependencies minor
node (source) 26.12.1 → 26.13.0 age confidence minor
pnpm (source) 12.15.0+sha512.b3951d6d6ff4a9f13dc7cf56cd28d2b8eb37dbcc9c68e52e1e1191873ea9f82a017287ab50baadc5ccc494f036c67c0e47eb13608c2fa36f47711b61ea128e61 → 12.18.0 age confidence packageManager minor
pnpm/setup v3.1.1 → v3.1.2 age confidence action patch
postcss (source) 8.5.31 → 8.5.32 age confidence devDependencies patch
python 3.15.1 → 3.15.2 age confidence patch
react-native-qrcode-svg 6.3.27 → 6.3.54 age confidence dependencies patch
renovatebot/github-action v46.3.9 → v46.3.12 age confidence action patch
simonvanlierde/citesync v0.1.0 → v0.4.0 age confidence repository minor
simonvanlierde/jsonvet v3.2.0 → v3.3.1 age confidence repository minor
tailwindcss (source) 4.3.3 → 4.3.4 age confidence pnpm.catalog.default patch 4.3.5
uniwind (source) 1.13.0 → 1.13.2 age confidence dependencies patch
utkuozdemir/nvidia_gpu_exporter 1.15.1-nvml → 1.17.0-nvml age confidence minor 1.18.0-nvml
uv 0.13.5 → 0.13.7 age confidence patch
vitest (source) 5.0.5 → 5.1.0 age confidence devDependencies minor
wrangler (source) 4.152.0 → 4.158.0 age confidence pnpm.catalog.default minor
zizmorcore/zizmor-pre-commit v1.31.1 → v1.32.0 age confidence repository minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

withastro/starlight (@​astrojs/starlight)

v0.42.9

Compare Source

Patch Changes

  • #​4218 effea21 Thanks @​delucis! - Reduces install size by ~400 KB by switching the YAML parser used internally for projects using Astro 7.3.6 or later

  • #​4316 8679b1c Thanks @​clean99! - Fixes localized routes and language switcher links for pages in directories named like Object.prototype properties, such as constructor.

  • #​4341 e1ac1b4 Thanks @​delucis! - Prevents tables overflowing and clipping when printing a page

v0.42.8

Compare Source

Patch Changes

  • #​4309 3490c80 Thanks @​athulsreekumar! - Fixes autogenerated sidebar groups omitting directories whose names match Object.prototype properties, such as constructor or toString

  • #​4290 bf93823 Thanks @​RaphaelFakhri! - Fixes missing last-updated dates in production builds for pages whose file path contains special characters

  • #​4295 af9557e Thanks @​delucis! - Fixes a formatting issue in some error messages impacting projects with Zod ≥4.5 installed

  • #​4299 a103f38 Thanks @​clean99! - Fixes empty sidebars when autogenerating entries from the docs root directory using directory: ''

babel/babel (@​babel/core)

v7.29.13

Compare Source

v7.29.13 (2026-11-04)
🐛 Bug Fix
Committers: 1
biomejs/biome (@​biomejs/biome)

v2.6.5

Compare Source

Patch Changes

  • #​12755 bbc4887 Thanks @​dyc3! - Added the new nursery rule noArrayForEach, which reports forEach() calls that can be written as for...of loops. Values known not to be arrays, such as a Map or a Set, are ignored.

    array.forEach((element) => {
	bar(element);
});

  • #​12777 ba692e4 Thanks @​dyc3! - Added the new nursery rule noAwaitInPromiseMethods, which reports await inside the array passed to Promise.all(), Promise.allSettled(), Promise.any(), or Promise.race(). The await pauses the code before the method is called, so the promises no longer run at the same time.

    Promise.all([await promise, anotherPromise]);

  • #​12765 af84fb4 Thanks @​dyc3! - Added the new nursery rule noChainedComparison, which reports comparisons chained like a < b < c or a === b === c. JavaScript compares a with b first, and then compares the resulting true or false with c, so 3 > 2 > 1 is false.

    if (a < b < c) {}

  • #​12547 0a2073d Thanks @​dyc3! - Added the nursery rule noDynamicDelete, which disallows using delete with a property name that is computed at runtime. Fixed property names written as string or number literals are allowed.

    delete container[name];

  • #​12481 ed7adc2 Thanks @​dyc3! - Added the nursery rule noLateEventControl, which reports calls to preventDefault(), stopPropagation(), and stopImmediatePropagation() that run after the browser has finished handling the event, where they have no effect.

    element.addEventListener("click", async (event) => {
  await save();
  event.preventDefault();
});

  • #​12795 179666d Thanks @​dyc3! - Added the nursery rule noMapSpread, which disallows spreading objects or arrays in the values returned by map() and flatMap() callbacks. Each spread copies a whole object or array for every item, which is slow for large arrays. Its unsafe fix replaces an object that starts with a spread with Object.assign().

    const users = getUsers();
const rows = users.map((user) => ({ ...user, role: getRole(user) }));

  • #​12793 d9a99fd Thanks @​dyc3! - Added the nursery rule noMismatchedMapKey, which reports get() and set() calls that use a different key than the has() check before them. Checking one key and then using another is usually a copy-paste mistake.

    if (map.has(key)) {
  map.get(otherKey); // reported
}

  • #​12342 1db7c0d Thanks @​vibbix! - Added the nursery rule noMissingScssInterpolation, which disallows Sass variables and function calls in custom property values without #{} interpolation. Sass copies these values into the CSS unchanged, so the browser receives $gap or math.div(8px, 2) instead of their results. Its unsafe fix wraps variables in #{}.

    :root {
  --gap: $gap;
  --half: math.div(8px, 2);
}

  • #​12792 de86b37 Thanks @​dyc3! - Added the nursery rule noMissingThrow, which reports errors that are created with new but never thrown. Its unsafe fix adds the missing throw keyword.

    function check(value) {
  if (!value) {
    new Error("Missing value");
  }
}

  • #​12790 c23e4c3 Thanks @​dyc3! - Added the new nursery rule noObjectLiteralComparison, which reports comparisons with an empty object {} or an empty array []. These comparisons never check whether a value is empty, because objects and arrays are compared by reference.

    if (value === {}) {}

  • #​12450 793f07d Thanks @​dyc3! - Added the new nursery rule noPlaywrightUnsafeReferences, which reports functions passed to page.evaluate() or page.addInitScript() that use variables declared outside of them. Playwright runs these functions in the browser page, where those variables don't exist.

    const x = 7;
await page.evaluate(() => x * 2); // reported: `x` must be passed as an argument

  • #​12388 a0160a4 Thanks @​vibbix! - Added the nursery rule noPseudoElementInFunctionalPseudoClass, which disallows pseudo-elements inside :is(), :where(), :not() and :has(). Browsers drop these selectors, so the styles never apply to the pseudo-element.

    .card:is(::before, ::after) {
  content: "";
}

  • #​12779 bc1befb Thanks @​dyc3! - Added the new nursery rule noSinglePromiseInPromiseMethods, which reports an array with a single element passed to Promise.all(), Promise.any(), or Promise.race(). The rule offers a fix that awaits the value directly or uses Promise.resolve().

    const result = await Promise.all([promise]);

  • #​12241 d96de1d Thanks @​dyc3! - Added the nursery rule noSvelteBindValueOnCheckableInputs, which reports bind:value on checkbox and radio inputs in Svelte files. Users change whether these inputs are checked, not their value, so bind:value does not track their choice.

    <input type="checkbox" bind:value={accepted} />

  • #​12764 e166d08 Thanks @​dyc3! - Added the new nursery rule noSyncMethods, which reports calls to functions whose names end with Sync, such as fs.readFileSync(). These calls block the program until they finish. The allowAtRootLevel option allows them outside of functions, and the ignore option allows specific function names.

    const contents = fs.readFileSync("data.txt");

  • #​12515 c0a4174 Thanks @​dyc3! - Added the nursery rule noTanstackQueryVoidQueryFn, which disallows TanStack Query functions that don't return any data. TanStack Query doesn't accept undefined as the data of a query, so the query fails with an error.

    import { useQuery } from "@tanstack/react-query";

useQuery({
    queryKey: ["todos"],
    queryFn: async () => {
        await fetch("/api/todos");
    },
});

    The rule belongs to the tanstackQuery and types domains.

  • #​12482 1e6e407 Thanks @​dyc3! - Added the nursery rule noUnnecessaryStringTrim, which reports trim() calls before startsWith() or endsWith() when only one side of the string matters. Use trimStart() or trimEnd() instead.

    value.trim().startsWith("-");

  • #​12772 a108773 Thanks @​dyc3! - Added the nursery rule noUselessAwait, which reports await on values that are never promises, such as literals, arrays, and the results of comparisons.

    await [fetchUser(), fetchPosts()];

  • #​12783 d0931b0 Thanks @​dyc3! - Added the new nursery rule noUselessLengthCheck, which reports array length checks that don't change the result: a check that the array is empty next to every(), a check that it isn't empty next to some(), or a check that it isn't empty around a for...of loop over the same array.

    if (array.length > 0 && array.some(Boolean)) {}

  • #​12488 93e0e73 Thanks @​dyc3! - Added the new nursery rule noUselessTypeAssertion, which reports type assertions that don't change the type of an expression, such as a non-null assertion on a value that can't be null or undefined.

    function double(value: number): number {
  return value! * 2;
}

  • #​12632 0e197b4 Thanks @​dyc3! - Added the nursery rule noVueChildContent, which disallows content inside elements that use v-html or v-text. These directives replace the content of their element, so Vue discards anything written there.

    <template>
  <div v-html="html">Loading...</div>
</template>

  • #​12616 cb7b888 Thanks @​dyc3! - Added the new nursery rule noVueDeprecatedConfigKeyCodes, which reports uses of Vue.config.keyCodes. Vue 3 removed this option, so custom key names defined with it no longer work.

    Vue.config.keyCodes = { f1: 112 };

  • #​12568 59f3a42 Thanks @​dyc3! - Added the nursery rule noVueDeprecatedDestroyedLifecycle, which reports the beforeDestroy and destroyed lifecycle hooks in Vue components. Vue 3 renamed them to beforeUnmount and unmounted, and no longer calls hooks with the old names.

    <script>
export default {
  destroyed() {},
};
</script>

  • #​12654 bcb1e0f Thanks @​dyc3! - Added the nursery rule noVueDeprecatedEventsApi, which reports calls to the $on, $off, and $once instance methods in Vue components. Vue 3 removed these methods, so calling them throws an error.

    <script>
export default {
  mounted() {
    this.$on("start", handler); // reported
  },
};
</script>

  • #​12590 b9872ef Thanks @​dyc3! - Added the nursery rule noVueDeprecatedFunctionalTemplate, which reports the functional attribute on the <template> of a Vue component. Vue 3 no longer supports this attribute.

    <template functional>
  <div>{{ props.message }}</div>
</template>

  • #​12552 b71b705 Thanks @​dyc3! - Added the nursery rule noVueDeprecatedHtmlElementIs, which disallows the is attribute on HTML elements in Vue templates. Vue 3 no longer renders a component in place of these elements, unless the value starts with vue:.

    <template>
  <tr is="my-row"></tr>
</template>

  • #​12553 4a613e1 Thanks @​dyc3! - Added the nursery rule noVueDeprecatedInlineTemplate, which disallows the inline-template attribute on Vue components. Vue 3 removed this feature, so the content between the component's tags is no longer used as its template.

    <template>
  <my-component inline-template>
    <div>{{ message }}</div>
  </my-component>
</template>

  • #​12617 0e9ca5b Thanks @​dyc3! - Added the nursery rule noVueDeprecatedModelDefinition, which reports the model option in Vue components. Vue 3 ignores this option, so v-model on the component always uses the modelValue prop and the update:modelValue event.

    <script>
export default {
  model: {
    prop: "checked",
    event: "change",
  },
};
</script>

  • #​12604 e998921 Thanks @​dyc3! - Added the nursery rule noVueDeprecatedPropsDefaultThis, which reports this inside the function that computes the default value of a Vue prop. Vue doesn't give this function access to the component, so this doesn't point to it. Read other props from the function's first argument instead.

    <script>
export default {
  props: {
    size: Number,
    sizes: {
      type: Array,
      default() {
        return [this.size];
      },
    },
  },
};
</script>

  • #​12633 f65fe1e Thanks @​dyc3! - Added the nursery rule noVueDeprecatedSlotAttribute, which reports the slot attribute in Vue templates. V

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

  • Branch creation
    • Only on Monday (* * * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@codspeed

codspeed Bot commented Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 7 untouched benchmarks

Comparing renovate/all-non-major (da0a194) with main (de8c09a)

Open in CodSpeed

@cmlplatform-renovate cmlplatform-renovate Bot changed the title chore(deps): update all non-major fix(deps): update all non-major Nov 2, 2026
@cmlplatform-renovate
cmlplatform-renovate Bot force-pushed the renovate/all-non-major branch 3 times, most recently from 064152f to dc1e755 Compare November 5, 2026 06:57
@codecov

codecov Bot commented Nov 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

@cmlplatform-renovate
cmlplatform-renovate Bot force-pushed the renovate/all-non-major branch 6 times, most recently from 9516b05 to 10a4b27 Compare November 8, 2026 06:12
@cmlplatform-renovate
fix(deps): update all non-major
da0a194 
Signed-off-by: cmlplatform-renovate[bot] <334049226+cmlplatform-renovate[bot]@users.noreply.github.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants