Repository navigation
fix(deps): update all non-major dependencies - #256
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.17.1→0.18.0v7.0.0→v7.1.02.1.16→2.2.10.71.0→0.72.01.86.0→1.87.011.28.4→11.28.511.28.4→11.28.511.28.4→11.28.58.3.2→8.3.4Release Notes
google-ai-edge/LiteRT-LM (@litert-lm/core)
v0.18.0Compare Source
🔥 What's New: v0.18.0
litert-lm import) and an OpenAI-compatible/v1/embeddingsendpoint (litert-lm serve) for multimodal embedding models.ModelInfoandlitert-lm describefor full model introspection—covering metadata, capabilities, and runtime requirements before loading.actions/setup-node (actions/setup-node)
v7.1.0Compare Source
What's Changed
Enhancements:
Bug fixes:
Documentation updates:
Dependency updates:
New Contributors
Full Changelog: actions/setup-node@v7.0.0...v7.1.0
evilmartians/lefthook (lefthook)
v2.2.1Compare Source
v2.2.0Compare Source
v2.1.17Compare Source
Changelog
8d8073dfix: diff push files against the merge base with the default branch (#1565)c12bccdfix: don't hash submodules when checking fail_on_changes (#1566)03225efrefactor: naming of helpers (#1568)66746acrefactor: working with git (#1564)oxc-project/oxc (oxfmt)
v0.72.0: oxfmt v0.72.0Compare Source
💥 BREAKING CHANGES
e2c68b1oxfmt: [BREAKING] Formatparser:markdownfiles byoxc_formatter_markdown(#27256) (leaysgur)🚀 Features
b538e3cformatter_css: Parse embedded CSS as a block's contents (#27284) (leaysgur)🐛 Bug Fixes
71e400bformatter_markdown: Fixed remaining issues found by fuzz (#27334) (leaysgur)7d0e54dformatter_markdown: Preserve line breaks around Chinese/Japanese characters in allproseWrap(#27331) (leaysgur)e9ae2d8formatter_css: Fix layouts found in mdn-content repo (css-in-md) (#27326) (leaysgur)df85b4coxfmt: Keep blank lines after a line break in Prettier Doc to IR (#27325) (leaysgur)7f65b75formatter: Format assignment target property as assignment-like (#27289) (leaysgur)6c08f2aformatter_css: Apply theurl()import exception to a lone comma group (#27288) (leaysgur)1967302formatter_css: Hug a spacedident (only at the at-rule prelude head (#27283) (leaysgur)2445064formatter_markdown: Keep a preserved line break before a delimiter row that opens no table (#27278) (leaysgur)dd72fbfformatter_markdown: Keep container columns as spaces underuseTabs(#27277) (leaysgur)1686018oxfmt: Make one stateconditionalGroupfit up to firsthardline(#27275) (leaysgur)fd4ddceformatter_json: Flatten block comment only array|object (#27274) (leaysgur)267557cformatter,oxfmt: Embed only original JSDoc plugin supported languages (#27241) (leaysgur)2606c60oxfmt: Do not re-include a file below an excluded directory with a negated pattern (#27237) (Nicolas Le Cam)c2de02bformatter: Decide embedded template layout from AST, not source shape (#27218) (leaysgur)c9e1224formatter: HandlequoteProps: consistentfor patterns and computed keys (#27216) (leaysgur)36e14dfformatter: Keep comments between callee and its opener on the callee side (#27172) (leaysgur)6da7657oxfmt: Render diagnostics with source in Stdin mode (#27130) (leaysgur)e9b2ec5oxfmt/lsp: Reload.prettierignoreon watched file change (#27129) (leaysgur)30eb463oxfmt: Check global ignores before resolving nested config in Stdin mode (#27128) (leaysgur)⚡ Performance
72f42a3formatter_markdown: Pre-allocate the IR buffer (#27333) (leaysgur)cea47e3formatter_core: Avoid exponentialwill_breakcheck on nested interned (#27211) (leaysgur)0aba566oxfmt: Do not resolve root js config from nested context (#27147) (leaysgur)📚 Documentation
51506c6formatter_css: Record divergences found in mdn-content (css-in-md) (#27327) (leaysgur)656b81cformatter_markdown: Record unclosed fences closing at a directive's closer (#27279) (leaysgur)66545bfformatter_markdown: Record setext heading wrap divergence (#27221) (leaysgur)af4b269oxfmt: Document whyformat()API does not take cwd (#27131) (leaysgur)pnpm/pnpm (pnpm)
v11.28.5: pnpm 11.28.5Compare Source
This release reads cached registry metadata faster and makes
pnpm config get --globalignore project settings. It also carries several security fixes for package archives, git dependencies, and config dependencies.Patch Changes
Security
pnpm now verifies locked config dependencies against their registry before installing them. Config dependencies must come from an npm registry. The lockfile can no longer replace the integrity of a config dependency pinned with
version+integrity.Lockfile verification now checks the tarballs inside a
variationsresolution against the registry. Aname@versionlockfile entry with an emptyvariationsresolution is now rejected.pnpm audit signaturesnow verifies signatures against the integrity recorded in the lockfile. Packages without a recorded integrity cannot pass signature verification.pnpm now rejects a git dependency whose lockfile repository is empty, begins with
-, or contains a null byte. Git can no longer read such a value as a command-line option pnpm/tasks#84.A git dependency with a
#path:subpath can no longer reach files outside the repository through a symlink in the subpath.pnpm pack,pnpm publish, and installs of git and local directory dependencies now leave out files that a directory symlink or abundleDependenciesentry points to outside the package directory pnpm/tasks#83 pnpm/tasks#93.pnpm deploywithdeployAllFilesnow rejects symlinks that point outside the package directory. Local package installs with this setting apply the same check.pnpm no longer hangs on a package archive with a negative PAX record length or an entry of 4 GiB or more pnpm/tasks#78 pnpm/tasks#79.
Large package downloads and large files inside gzip and bzip2 package archives now use bounded memory during installation. Package manifests and archive metadata larger than 64 MiB are rejected.
pnpm publishalso rejects manifests and README files larger than 64 MiB in pre-built tarballs before reading them into memory.Two URL or local path dependencies no longer share a virtual store directory when one URL has
+,#,:, or?where the other has/. Such dependencies, including git dependencies pinned with#, now get a hash suffix on their directory name.pnpm licensesnow removes terminal control characters from package metadata in table output.The warnings about ignored project
.npmrcregistry and auth settings no longer print the username and password of a URL-scoped key such as//user:password@registry.example.com/:_authToken.Installing and resolving dependencies
Dependency resolution reads cached registry metadata faster. The metadata cache moved to
<cache-dir>/v12/, so the first install after upgrading downloads registry metadata again. A damaged cache entry is downloaded again, or reported as an error when--offlineis set #13512.pnpm installnow fails withERR_PNPM_UNSUPPORTED_PROTOCOLwhen a dependency uses a specifier with a protocol pnpm does not support, such as Yarn'spatch:. pnpm linked such a dependency to a directory that does not exist #16590.When a dependency moves an exact dependency of its own to an older version, a peer dependency that pnpm installed automatically now moves with it. Before,
pnpm installandpnpm dedupekept the newer locked version of the peer, so the lockfile held two copies of it, for example two copies ofvuepnpm/tasks#61.pnpm addandpnpm installnow keep the peer dependencies thatpnpm-lock.yamlrecords for a package they did not update. A registry whose metadata disagrees with the package'spackage.json, for example by omittingpeerDependenciesMeta, madepnpm addandpnpm dedupewrite different lockfiles, sopnpm dedupe --checkfailed afterpnpm add#16615.Configuration
pnpm config getandpnpm config listwith--globalor--location=globalnow show only the global configuration. Both flags included the project's.npmrcbefore.--location=globalalso included the project'spnpm-workspace.yaml.pnpm config get --globalfailed when the global bin directory was not in PATH #16598.pnpm now prints config warnings, such as an unset environment variable in
.npmrc, when loading the config fails.pnpm now fails when
httpProxyorhttpsProxyinpnpm-workspace.yamlor the global configuration is not a string.pnpm dlxnow uses thereleaseentry ofnodeDownloadMirrorsfrom the workspace configuration when downloading Node.js runtimes #11281. Mirrors for other channels, such asrcandnightly, still apply only from the global configuration.Commands
pnpm runandpnpm execnow forward--config.*command-line flags to the install started byverifyDepsBeforeRunpnpm/tasks#60.pnpm dlxwith--packagebut no command now fails with'pnpm dlx' requires a command to run. Before, it installed the package and then crashed trying to run an empty command.pnpm unpublish <pkg>@<version>now deletes the tarball under the registry's path when the registry is served under one, such as Gitea's npm registry. It used to send the delete to the host root and report success without removing the version #16568. It also no longer mistakes a sibling path such as/npm-mirror/for the registry path/npm/pnpm/tasks#94.The interactive
pnpm audit --fixpicker now shows each patched version with thesaveExactandsavePrefixstyle that the override is written with #13209.pnpm listnow reports the correct package paths whennodeLinkerishoisted#9593.pnpm setupnow puts$PNPM_HOME/binfirst onPATHin login shells that inherited it further down, such as the VS Code terminal on macOS. Before, anothernodetook precedence over the one installed bypnpm runtime set node -g. Runpnpm setupagain to update the block in your shell config #16635.pnpm setupnow names the shell config file even if it is already up to date #16608.Output and messages
A warning about a project's
devEnginesorpackageManagerpin is now printed to stderr. A command such aspnpm cache pathorpnpm list --jsonkeeps only its own output on stdout #16584.The warning for a non-root
resolutionsfield now points at theoverridesfield inpnpm-workspace.yaml#11757.Platinum Sponsors
Gold Sponsors
vitejs/vite (vite)
v8.3.4Compare Source
Features
import.meta.hot.acceptExports(#23463) (bc0f21c)Bug Fixes
/@vite/clientand stub@vite/env(#23664) (5afc5a8)ensureWatchedFile(#23673) (12bb28c)Performance Improvements
Code Refactoring
/@vite/client(#23674) (182f5b2)v8.3.3Compare Source
Bug Fixes
fs.servefor?vite-wasm-instance(#23655) (ba8b7ab)safeModulePathsrather than URLs (#23656) (c3e06f9)Configuration
📅 Schedule: (in timezone Asia/Tokyo)
* 0-5 * * 1)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.