chore(deps): update npm packages by renovate[bot] · Pull Request #1831 · voidzero-dev/vite-plus

renovate · 2026-06-14T17:38:21Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@ast-grep/napi (source)	`^0.43.0` → `^0.44.0`
@napi-rs/wasm-runtime (source)	`1.1.5` → `1.1.6`
@nkzw/safe-word-list	`3.1.0` → `3.1.2`
@oxlint/plugins (source)	`=1.68.0` → `=1.71.0`
@rollup/plugin-commonjs (source)	`29.0.0` → `29.0.3`
@typescript/native-preview (source)	`7.0.0-dev.20260605.1` → `7.0.0-dev.20260624.1`
@yarnpkg/fslib (source)	`3.1.4` → `3.1.5`
fast-wrap-ansi	`0.2.0` → `0.2.2`
fs-extra	`11.3.2` → `11.3.5`
glob	`13.0.0` → `13.0.6`
mermaid	`11.15.0` → `11.16.0`
minimatch	`10.2.4` → `10.2.5`
mocha (source)	`11.7.5` → `11.7.6`
pkg-types	`2.3.0` → `2.3.1`
playwright (source)	`1.57.0` → `1.61.1`
react (source)	`19.2.0` → `19.2.7`
react-dom (source)	`19.2.0` → `19.2.7`
reka-ui	`2.9.9` → `2.10.0`
remeda (source)	`2.34.1` → `2.39.0`
rolldown-plugin-dts	`^0.25.2` → `^0.26.0`
rollup (source)	`4.60.4` → `4.62.2`
semver	`7.8.4` → `7.8.5`
serve-static	`2.2.0` → `2.2.1`
tailwindcss (source)	`4.3.0` → `4.3.1`
tinybench	`6.0.0` → `6.0.2`
typescript (source)	`6.0.2` → `6.0.3`
vitepress-plugin-llms	`1.13.1` → `1.13.2`
vue (source)	`3.5.35` → `3.5.39`

Release Notes

ast-grep/ast-grep (@ast-grep/napi)

`v0.44.0`

Compare Source

chore: move outline docs and benchmarks out of repo #2763
chore(deps): update dependency smol-toml to v1.7.0 #2762
Add JavaScript outline rules and stream JSON files #2761
fix: reject root multi-metavariable patterns #2727
fix: don't leak metavar bindings across siblings in nthChild ofRule #2677
fix: extract python from-import modules in outline #2758
fix: match go outline types by declaration #2759
fix: skip empty files in outline #2757
feat: mark duplicate outline names #2756
refactor: inline outline member kind lookup #2755
refactor: make outline extract return iterator #2754
refactor: stream outline extraction items #2753
perf: use single traversal for outline extraction #2751
perf: cache transform replace regexes #2750
fix: don't leak metavar bindings from a negated not rule #2676
refactor: fold outline extract options into extractors #2749
refactor: split outline extract options and style #2748
refactor: map outline cli to core options #2747
feat: apply outline extractor options #2746
feat: add outline extractor options #2745
fix: simplify some code #2744
fix: trailing ast-grep-ignore on a multi-line statement suppresses it #2678
chore(deps): update actions/checkout action to v7 #2731
fix: cover async rust outline rules #2743
feat: add bundled outline rules for more languages #2739
feat: add outline CLI command #2738
perf: use cursor-backed outline traversal #2737
feat: run outline extractors #2729
chore(deps): update oxlint monorepo to v1.70.0 #2726
refactor: split fixer variable validation #2724
refactor: validate rule core directly #2723
test: move matcher tests to rule core #2722
refactor: wrap rewriter config errors #2721
test: validate global rule fix vars via rule config #2719
fix: check undefined meta var in fix #2718
Breaking change: fix: remove fix from SerializableCore #2717
fix: preserve unused suppression fixer #2716
Breaking change: refactor: move optional fixer to RuleConfig #2715
fix: add fixer var check #2714
Refactor rule config #2713
Breaking change: refactor: mvoe rewriters into SerializableRuleCore #2711
refactor: move rewriter out #2712
feat: add outline rule schema #2710
docs: remove outline target alias fields #2709
chore(deps): update rust crate smallvec to v1.15.2 #2701
fix(deps): update rust-wasm-bindgen monorepo #2704
fix: remove unused trait/methods #2708
feat: add outline entry model #2703
refactor: remove legacy outline placeholders #2702
feat: add outline CLI shell #2700
fix(deps): update rust-wasm-bindgen monorepo #2693
chore(deps): update oxlint monorepo to v1.69.0 #2692
chore(deps): update rust crate regex to v1.12.4 #2694
chore(deps): update dependency @types/node to v24.13.2 #2698
doc: design outline command #2699
Outline first builtin rule #2695
chore(deps): update rust crate tree-sitter-swift to v0.7.3 #2672
chore(deps): update astral-sh/setup-uv action to v8.2.0 #2680
feat: add outline rule definition #2691
feat: add outline item model #2690
chore(deps): update codecov/codecov-action action to v7 #2686
feat: add outline command stub #2689
chore(deps): update dependency @types/node to v24.13.1 #2682
chore(deps): update rust crate ignore to v0.4.26 #2683
fix: remove all impl, start from scratch #2688
fix: remove all impl, start from scratch #2687
fix: report unfixable scan hits with update-all #2684
Fix typos in comments and grammar in --help text #2674
chore(deps): update dependency oxlint to v1.68.0 #2673
fix: don't leak metavar bindings from ellipsis-end lookahead #2670
refactor: collapse nested ifs with let chains #2671
chore(deps): update rust crate toml_edit to v0.25.12 #2666
chore(deps): update dependency oxlint to v1.67.0 #2665
chore(deps): update dependency @ast-grep/napi to v0.43.0 #2664
add benchmark b488bd3
vibe 6f89a3d
fix: update outline rule loading 202d8b8

napi-rs/napi-rs (@napi-rs/wasm-runtime)

`v1.1.6`

Compare Source

Note: Version bump only for package @napi-rs/wasm-runtime

rollup/plugins (@rollup/plugin-commonjs)

`v29.0.3`

2026-05-29

Bugfixes

commonjs: make #1868 es5-compatible (#1981)

`v29.0.2`

2026-03-06

Bugfixes

commonjs: conditional exports (#1952)

`v29.0.1`

2026-03-05

Bugfixes

commonjs: correctly replaces shorthand "global" property in object (#1957)

microsoft/typescript-go (@typescript/native-preview)

yarnpkg/berry (@yarnpkg/fslib)

`v3.1.5`

Compare Source

43081j/fast-wrap-ansi (fast-wrap-ansi)

`v0.2.2`

Compare Source

What's Changed

chore: fix typescript build by @43081j in #95

Full Changelog: 43081j/fast-wrap-ansi@0.2.1...0.2.2

jprichardson/node-fs-extra (fs-extra)

`v11.3.5`

Compare Source

Fix ensureLink*/ensureSymlink* identical file detection on Windows (#1068)
Fix error handling in timestamp preservation code (#1065, #1069)
Fix potential file descriptor leak on error in synchronous timestamp preservation code (#1066)

`v11.3.4`

Compare Source

Fix bug where calling ensureSymlink/ensureSymlinkSync with a relative srcPath would fail if the symlink already existed (#1038, #1064)

`v11.3.3`

Compare Source

Fix copying symlink when destination is a symlink to the same target (#1019, #1060)

isaacs/node-glob (glob)

`v13.0.6`

Compare Source

`v13.0.5`

Compare Source

`v13.0.4`

Compare Source

`v13.0.3`

Compare Source

`v13.0.2`

Compare Source

`v13.0.1`

Compare Source

mermaid-js/mermaid (mermaid)

`v11.16.0`

Compare Source

Minor Changes

#7535 ea1c48f Thanks @ragelink! - feat(cynefin): Adds the Cynefin framework as a new diagram type (beta) to Mermaid (available as cynefin-beta). The Cynefin framework, created by Dave Snowden, is a decision-making framework that categorizes problems into five complexity domains, widely used in agile, incident management, strategy, and organizational design.
#7721 f45cc2c Thanks @notionparallax! - feat(treeView): add box-drawing character input support for treeView diagrams
#7550 f1f4d45 Thanks @DominicBurkart! - feat(xychart): add per-point text labels for xychart line plots
#7527 b4d0442 Thanks @notionparallax! - feat(treeView): Extends the existing treeView-beta diagram with features useful for representing file/directory structures.
#7793 a6f097d Thanks @SSDWGG! - feat(er): support optional ER attribute types with a ? suffix
#7772 37f2e36 Thanks @devareddy05! - feat(gantt): support multiple excludes / includes lines so long exclusion lists can be split into commented groups (#6270)
#7708 4e63e9d Thanks @txmxthy! - feat(architecture): add align row|column {ids…} directive to architecture-beta diagrams so authors can declare horizontal or vertical alignment of services explicitly.
#7760 05223be Thanks @ngdaniels! - feat(pie): Enhance Pie Chart - Enable donut chart, Set legend position, and highlight slice
#7251 216e4e9 Thanks @ydah! - feat(railroad): Add support for Railroad Diagrams (Syntax Diagrams) with four input syntaxes: IR (railroad-beta), EBNF (railroad-ebnf-beta), ABNF (railroad-abnf-beta), and PEG (railroad-peg-beta).
#7774 e5c75e6 Thanks @ngdaniels! - feat(xychart): enable rotate label on X-axis
#7791 974fa7b Thanks @knsv-bot! - feat(swimlane): add swimlane as a standalone diagram type with a dedicated layered orthogonal layout algorithm

Patch Changes

#7744 633c261 Thanks @ashishjain0512! - fix(architecture): add architecture.seed config option to make architecture diagrams render deterministically. Resolves #7729.
#7732 c8ba156 Thanks @rkdfx! - fix: tolerate leading horizontal whitespace before YAML frontmatter delimiters. Closes #7613
#7314 4e4e6c4 Thanks @darshanr0107! - fix(flowchart): Prevent crash when flowchart node shape is undefined
#7762 cfd2391 Thanks @Dharya-dev! - fix(class): support styling and callbacks for generic classes
#7284 c1f116d Thanks @darshanr0107! - fix(gantt): Render gantt vertical markers without affecting row layout or chart height
#7786 72fbab1 Thanks @knsv-bot! - fix(er): allow special characters (e.g. dots) in ER diagram attribute names and types by escaping them with backticks
#7672 4887e97 Thanks @sjackson0109! - fix(flowchart): respect per-subgraph direction keyword in Dagre layout. Fixes #4648
#7734 a4c1e50 Thanks @OfirHaf! - fix(block): read block padding and sanitize config dynamically instead of at module load time
#7674 cc75089 Thanks @cyphercodes! - fix(block): respect current DOMPurify config when sanitizing labels
#7711 be2e282 Thanks @Jinacker! - fix(flowchart): render flowchart and state self-loop edges as a single SVG path.
#7781 d945968 Thanks @Dharya-dev! - fix(radar): align axis labels based on angular position to prevent clipping
#7661 2f5e9e8 Thanks @nabila401! - fix(venn): fix 3-circle venn diagram union rendering
#7780 8dcdce4 Thanks @Dharya-dev! - fix(xychart): truncate plot data to match x-axis category count
#7235 1bbc189 Thanks @darshanr0107! - fix: Support consecutive LaTeX in node text
#7247 365c1b1 Thanks @darshanr0107! - fix(treeView): Ensure treemap labels render correctly in large nested diagrams
#7754 06a32b7 Thanks @palgunatm66! - fix(sequence): sequenceDiagram rect backgrounds using theme-aware fallback colors
#7693 afaf306 Thanks @dull-bird! - fix(quadrant-chart): allow CJK, emoji, Latin-1 accented characters, and other non-ASCII text in unquoted axis/quadrant/point labels. Fixes #7120.
#7751 79e97cd Thanks @puneetdixit200! - fix(state): render state diagram click tooltips with mermaidTooltip
#7570 c2305df Thanks @PinguinsRule! - fix(state): Fix invalid syntax between state and '{'
#7758 a4a250b Thanks @mk24x7! - fix(venn): render labeled higher-arity unions when the underlying pairwise unions are not declared. Resolves #7656.
Updated dependencies [ea1c48f, b4d0442, 4e63e9d, 216e4e9]:
- @mermaid-js/parser@1.2.0

isaacs/minimatch (minimatch)

`v10.2.5`

Compare Source

mochajs/mocha (mocha)

`v11.7.6`

Compare Source

🩹 Fixes

make describe().timeout() work (aafe6fd)
test: replace wmic usage with native Windows API (#5694) (73ebdfa)

🧹 Chores

format all code (#5629) (0696784)
remove Netlify (#5630) (8d01d33)

unjs/pkg-types (pkg-types)

`v2.3.1`

Compare Source

compare changes

🩹 Fixes

Use untransformed typescript type exports (#261)

📖 Documentation

Improve documentation and fix typos across the project (#246)
Fix incorrect imports and add missing function docs (#248)

📦 Build

Migrate to obuild (29e54be)

🏡 Chore

Migrate to oxlint and oxfmt (67fedc4)
Update deps (78e9de1)
Update ci (e21a456)
Update test scripts (d8d7e68)
Add missing tsgo dep (d05a063)

❤️ Contributors

Daniel Roe (@danielroe)
Pooya Parsa (@pi0)
Eugene (@outslept)

microsoft/playwright (playwright)

`v1.61.1`

Compare Source

`v1.61.0`

Compare Source

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();

// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
  id: credentialId,
  userHandle,
  privateKey,
  publicKey,
});
await context.credentials.install();

const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.

Test runner

The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
Supported expect.soft.poll(...).
New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
[testInfo.errors](https://playwright.dev/docs/api/class-testinfo#test-info-error

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-06-14T17:38:27Z

✅ Deploy Preview for viteplus-preview canceled.

Name	Link
🔨 Latest commit	`fc08c27`
🔍 Latest deploy log	https://app.netlify.com/projects/viteplus-preview/deploys/6a415025334a990008a640e4

socket-security · 2026-06-28T16:48:04Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/@oxlint/plugins@1.71.0
	npm/@typescript/native-preview@7.0.0-dev.20260624.1
	npm/@ast-grep/napi@0.44.0

View full report

renovate Bot force-pushed the renovate/npm-packages branch 2 times, most recently from 4c74c63 to 8112549 Compare June 28, 2026 16:16

chore(deps): update npm packages

cbb8536

renovate Bot force-pushed the renovate/npm-packages branch from fdeddce to cbb8536 Compare June 28, 2026 16:46

chore: update lockfiles

fc08c27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update npm packages#1831

chore(deps): update npm packages#1831
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/npm-packages

renovate Bot commented Jun 14, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Jun 14, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bugfixes

Bugfixes

Bugfixes

What's Changed

Minor Changes

Patch Changes

🩹 Fixes

🧹 Chores

🩹 Fixes

📖 Documentation

📦 Build

🏡 Chore

❤️ Contributors

🔑 WebAuthn passkeys

🗃️ Web Storage

New APIs

Network

Browser and Screencast

Test runner

Configuration

Uh oh!

netlify Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for viteplus-preview canceled.

Uh oh!

socket-security Bot commented Jun 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jun 14, 2026 •

edited

Loading

netlify Bot commented Jun 14, 2026 •

edited

Loading