fix(deps): update all non-major dependencies #663

renovate · 2024-04-15T00:12:11Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@astrojs/vue (source)	`^4.0.11` -> `^4.1.0`
@rspack/core (source)	`^0.6.0` -> `^0.6.1`
@sxzz/eslint-config	`^3.9.0` -> `^3.9.1`
@types/node (source)	`^20.12.6` -> `^20.12.7`
@unocss/nuxt (source)	`^0.59.0` -> `^0.59.2`
@unocss/reset	`^0.59.0` -> `^0.59.2`
@vitest/coverage-v8 (source)	`^1.4.0` -> `^1.5.0`
@vitest/ui (source)	`^1.4.0` -> `^1.5.0`
astro (source)	`^4.5.17` -> `^4.6.1`
pnpm (source)	`8.15.6` -> `8.15.7`
rollup (source)	`^4.14.1` -> `^4.14.2`
shiki (source)	`^1.2.4` -> `^1.3.0`
typescript (source)	`~5.4.4` -> `~5.4.5`
unocss	`^0.59.0` -> `^0.59.2`
vite-plugin-vue-devtools (source)	`^7.0.25` -> `^7.0.27`
vitest (source)	`^1.4.0` -> `^1.5.0`

Release Notes

withastro/astro (@astrojs/vue)

`v4.1.0`

Compare Source

Minor Changes

#10689 683d51a5eecafbbfbfed3910a3f1fbf0b3531b99 Thanks @ematipico! - Deprecate support for versions of Node.js older than v18.17.1 for Node.js 18, older than v20.0.3 for Node.js 20, and the complete Node.js v19 release line.

This change is in line with Astro's Node.js support policy.

web-infra-dev/rspack (@rspack/core)

`v0.6.1`

Compare Source

sxzz/eslint-config (@sxzz/eslint-config)

`v3.9.1`

Compare Source

🚀 Features

Disable no-return-await - by @sxzz (53669)

View changes on GitHub

unocss/unocss (@unocss/nuxt)

`v0.59.2`

Compare Source

🐞 Bug Fixes

Move @unocss/webpack to ESM First - by @userquin in https://github.com/unocss/unocss/issues/3708 (25e97)
Revert #3696 - by @antfu in https://github.com/unocss/unocss/issues/3696 (8e615)
preset-mini: Negative custom spacing - by @Simon-He95 in https://github.com/unocss/unocss/issues/3694 (0f4ad)

View changes on GitHub

`v0.59.1`

Compare Source

🐞 Bug Fixes

eslint-plugin:
- Support ESLint v9 - by @antfu (0cc40)
postcss:
- Too many open files error - by @sonofmagic in https://github.com/unocss/unocss/issues/3695 (11918)
- Support async rule in directives, fix #3699 - by @DarkHole1 in https://github.com/unocss/unocss/issues/3701 and https://github.com/unocss/unocss/issues/3699 (f4ca5)
preset-mini:
- marker pesudo element - by @Simon-He95 in https://github.com/unocss/unocss/issues/3702 (0b4a9)
shared-integration:
- DefaultIdeMatchInclude - by @Simon-He95 in https://github.com/unocss/unocss/issues/3696 (7f85b)

View changes on GitHub

vitest-dev/vitest (@vitest/coverage-v8)

`v1.5.0`

Compare Source

vitest-dev/vitest (@vitest/ui)

`v1.5.0`

Compare Source

🚀 Features

Add configuration for diff truncation - by @willieho in https://github.com/vitest-dev/vitest/issues/5073 and https://github.com/vitest-dev/vitest/issues/5333 (6797b)
Remove unrelated noise from diff for toMatchObject() - by @geersch in https://github.com/vitest-dev/vitest/issues/5364 (99276)
Allow custom host for --inspect and --inspect-brk - by @sheremet-va in https://github.com/vitest-dev/vitest/issues/5509 (61572)
coverage: V8 to ignore empty lines, comments, types - by @AriPerkkio in https://github.com/vitest-dev/vitest/issues/5457 (10b89)

🐞 Bug Fixes

describe calls not taking generic type parameters - by @aryaemami59 in https://github.com/vitest-dev/vitest/issues/5415 (16bac)
Prevent hang when process is mocked - by @AriPerkkio in https://github.com/vitest-dev/vitest/issues/5430 (0ec4d)
Don't check for "node:internal/console/" in console interceptor in case the environment is not Node.js - by @sheremet-va (87d36)
The value received by toMatch should be a string - by @btea in https://github.com/vitest-dev/vitest/issues/5428 (67485)
Increase stack trace limit for location, don't hardcode suite position - by @sheremet-va in https://github.com/vitest-dev/vitest/issues/5518 (04b23)
benchmark:
- Run benchmark suites sequentially - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/5444 (1f548)
- Fix benchmark summary of single bench suite - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/5489 (db981)
- Table reporter for non TTY output - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/5484 (bea23)
expect:
- Fix toHaveBeenNthCalledWith error message when not called - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/5420 (e5253)
types:
- Pass correct type for suite factory - by @sheremet-va in https://github.com/vitest-dev/vitest/issues/5437 (26718)
utils:
- Fix object diff with getter only property - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/5466 (366d9)
vite-node:
- Fix isValidNodeImport to check "type": "module" first - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/5416 (6fb15)
vitest:
- Correctly send console events when state changes - by @sheremet-va (3463f)
- Initiate FakeTimers on demand - by @sheremet-va in https://github.com/vitest-dev/vitest/issues/5450 (e4e93)
- Check unhighlighted code for code frame line limit - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/5465 (6ae7e)
- Correctly filter by parent folder - by @sheremet-va in https://github.com/vitest-dev/vitest/issues/5408 (91b06)
- Close inspector immediately if run is canceled - by @sheremet-va in https://github.com/vitest-dev/vitest/issues/5519 (b8006)
workspace:
- Set CWD to config directory, allow overriding local .env - by @sheremet-va in https://github.com/vitest-dev/vitest/issues/5476 (d4003)

View changes on GitHub

withastro/astro (astro)

`v4.6.1`

Compare Source

Patch Changes

#10708 742866c5669a2be4f8b5a4c861cadb933c381415 Thanks @horo-fox! - Limits parallel imports within getCollection() to prevent EMFILE errors when accessing files
#10755 c6d59b6fb7db20af957a8706c8159c50619235ef Thanks @ematipico! - Fixes a case where the i18n fallback failed to correctly redirect to the index page with SSR enabled

`v4.6.0`

Compare Source

Minor Changes

#10591 39988ef8e2c4c4888543c973e06d9b9939e4ac95 Thanks @mingjunlu! - Adds a new dev toolbar settings option to change the horizontal placement of the dev toolbar on your screen: bottom left, bottom center, or bottom right.
#10689 683d51a5eecafbbfbfed3910a3f1fbf0b3531b99 Thanks @ematipico! - Deprecate support for versions of Node.js older than v18.17.1 for Node.js 18, older than v20.0.3 for Node.js 20, and the complete Node.js v19 release line.

This change is in line with Astro's Node.js support policy.
#10678 2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1 Thanks @ematipico! - Adds a new experimental security option to prevent Cross-Site Request Forgery (CSRF) attacks. This feature is available only for pages rendered on demand:
```
import { defineConfig } from 'astro/config';
export default defineConfig({
  experimental: {
    security: {
      csrfProtection: {
        origin: true,
      },
    },
  },
});
```
Enabling this setting performs a check that the "origin" header, automatically passed by all modern browsers, matches the URL sent by each Request.

This experimental "origin" check is executed only for pages rendered on demand, and only for the requests POST, PATCH, DELETEandPUTwith one of the followingcontent-type` headers: 'application/x-www-form-urlencoded', 'multipart/form-data', 'text/plain'.

It the "origin" header doesn't match the pathname of the request, Astro will return a 403 status code and won't render the page.

#10193 440681e7b74511a17b152af0fd6e0e4dc4014025 Thanks @ematipico! - Adds a new i18n routing option manual to allow you to write your own i18n middleware:

import { defineConfig } from 'astro/config';
// astro.config.mjs
export default defineConfig({
  i18n: {
    locales: ['en', 'fr'],
    defaultLocale: 'fr',
    routing: 'manual',
  },
});

Adding routing: "manual" to your i18n config disables Astro's own i18n middleware and provides you with helper functions to write your own: redirectToDefaultLocale, notFound, and redirectToFallback:

// middleware.js
import { redirectToDefaultLocale } from 'astro:i18n';
export const onRequest = defineMiddleware(async (context, next) => {
  if (context.url.startsWith('/about')) {
    return next();
  } else {
    return redirectToDefaultLocale(context, 302);
  }
});

Also adds a middleware function that manually creates Astro's i18n middleware. This allows you to extend Astro's i18n routing instead of completely replacing it. Run middleware in combination with your own middleware, using the sequence utility to determine the order:

import { defineMiddleware, sequence } from 'astro:middleware';
import { middleware } from 'astro:i18n'; // Astro's own i18n routing config

export const userMiddleware = defineMiddleware();

export const onRequest = sequence(
  userMiddleware,
  middleware({
    redirectToDefaultLocale: false,
    prefixDefaultLocale: true,
  })
);

#10671 9e14a78cb05667af9821948c630786f74680090d Thanks @fshafiee! - Adds the httpOnly, sameSite, and secure options when deleting a cookie

Patch Changes

#10747 994337c99f84304df1147a14504659439a9a7326 Thanks @lilnasy! - Fixes an issue where functions could not be used as named slots.
#10750 7e825604ddf90c989537e07939a39dc249343897 Thanks @OliverSpeir! - Fixes a false positive for "Invalid tabindex on non-interactive element" rule for roleless elements ( div and span ).
#10745 d51951ce6278d4b59deed938d65e1cb72b5102df Thanks @lilnasy! - Fixes an issue where CLI commands could not report the reason for failure before exiting.
#10661 e2cd7f4291912dadd4a654bc7917856c58a72a97 Thanks @liruifengv! - Fixed errorOverlay theme toggle bug.
Updated dependencies [ccafa8d230f65c9302421a0ce0a0adc5824bfd55, 683d51a5eecafbbfbfed3910a3f1fbf0b3531b99]:
- @astrojs/markdown-remark @5.1.0
- @astrojs/telemetry @3.1.0

`v4.5.18`

Compare Source

Patch Changes

#10728 f508c4b7d54316e737f454a3777204b23636d4a0 Thanks @ematipico! - Fixes a regression where some very specific code rendered using expressive-code was not escaped properly.
#10737 8a30f257b1f3618b01212a591b82ad7a63c82fbb Thanks @lilnasy! - Fixes a regression where constructing and returning 404 responses from a middleware resulted in the dev server getting stuck in a loop.
#10719 b21b3ba307235510707ee9f5bd49f71473a07004 Thanks @ematipico! - Fixes a false positive for div and span elements when running the Dev Toolbar accessibility audits.

Those are special elements that don't have an interaction assigned by default. Instead, it is assigned through the role attribute. This means that cases like the following are now deemed correct:
```
<div role="tablist"></div>
<span role="button" onclick="" onkeydown=""></span>
```

pnpm/pnpm (pnpm)

`v8.15.7`

Compare Source

rollup/rollup (rollup)

`v4.14.2`

Compare Source

2024-04-12

Bug Fixes

Do not create invalid code when reexporting both a namespace and the default export from that namespace (#5466)
Ensure ppc64 platform is properly detected (#5460)

Pull Requests

#5456: Add high-level architecture documentation (@lukastaegert)
#5460: Fix ppc64le target (@lukastaegert)
#5463: chore: tweak the comment about files should not be edited (@TrickyPi)
#5466: Ensure reexported namespaces do not prevent creation of default export helpers (@lukastaegert)
#5468: chore(deps): update dependency eslint-plugin-unicorn to v52 (@renovate[bot], @lukastaegert)
#5469: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])
#5470: chore(deps): lock file maintenance (@renovate[bot])

shikijs/shiki (shiki)

`v1.3.0`

Compare Source

🚀 Features

core: New structure: inline option for codeToHast - by @antfu in https://github.com/shikijs/shiki/issues/653 (ae516)

View changes on GitHub

Microsoft/TypeScript (typescript)

`v5.4.5`: TypeScript 5.4.5

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

NuGet package

vuejs/devtools-next (vite-plugin-vue-devtools)

`v7.0.27`

Compare Source

🐞 Bug Fixes

vite: Cjs compatible - by @alexzhang1030 in https://github.com/vuejs/devtools-next/issues/332 (e7911)

View changes on GitHub

View changes on GitHub

vitest-dev/vitest (vitest)

`v1.5.0`

Compare Source

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

stackblitz · 2024-04-15T00:12:14Z

Run & review this pull request in StackBlitz Codeflow.

changeset-bot · 2024-04-15T00:12:14Z

⚠️ No Changeset found

Latest commit: 1da77d0

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

vercel · 2024-04-15T00:12:17Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Updated (UTC)
vue-macros	✅ Ready (Inspect)	Visit Preview	Apr 15, 2024 6:04am

socket-security · 2024-04-15T00:12:58Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@astrojs/[email protected]	None	`0`	16.4 kB	fredkschott
npm/@rspack/[email protected]	environment, eval, filesystem, shell Transitive: network	`+5`	1.95 MB	hardfist
npm/@sxzz/[email protected]	environment	`+11`	2.35 MB	sxzz
npm/@types/[email protected]	None	`0`	2.03 MB	types
npm/@unocss/[email protected]	None	`0`	43.9 kB	antfu
npm/@vitest/[email protected]	None	`+4`	709 kB	vitestbot
npm/@vitest/[email protected]	None	`+1`	988 kB	vitestbot

🚮 Removed packages: npm/@astrojs/[email protected], npm/@rspack/[email protected], npm/@sxzz/[email protected], npm/@types/[email protected], npm/@unocss/[email protected], npm/@vitest/[email protected], npm/@vitest/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

renovate bot added the dependencies label Apr 15, 2024

dosubot bot added the size:M This PR changes 30-99 lines, ignoring generated files. label Apr 15, 2024

dosubot bot added the enhancement New feature or request label Apr 15, 2024

vercel bot deployed to Preview April 15, 2024 00:12 View deployment

sxzz approved these changes Apr 15, 2024

View reviewed changes

dosubot bot added the lgtm This PR has been approved by a maintainer label Apr 15, 2024

renovate bot force-pushed the renovate/all-minor-patch branch from 278e5c4 to b6b28a4 Compare April 15, 2024 06:01

vercel bot deployed to Preview April 15, 2024 06:02 View deployment

fix(deps): update all non-major dependencies

1da77d0

renovate bot force-pushed the renovate/all-minor-patch branch from b6b28a4 to 1da77d0 Compare April 15, 2024 06:03

vercel bot deployed to Preview April 15, 2024 06:04 View deployment

sxzz merged commit 8b8ef7b into main Apr 15, 2024
8 checks passed

sxzz deleted the renovate/all-minor-patch branch April 15, 2024 06:08

github-actions bot mentioned this pull request May 2, 2024

chore: bump versions #665

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies #663

fix(deps): update all non-major dependencies #663

renovate bot commented Apr 15, 2024 •

edited

stackblitz bot commented Apr 15, 2024

changeset-bot bot commented Apr 15, 2024 •

edited

vercel bot commented Apr 15, 2024 •

edited

socket-security bot commented Apr 15, 2024 •

edited

fix(deps): update all non-major dependencies #663

fix(deps): update all non-major dependencies #663

Conversation

renovate bot commented Apr 15, 2024 • edited

Release Notes

Minor Changes

🚀 Features

🐞 Bug Fixes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Bug Fixes

Pull Requests

🚀 Features

v5.4.5: TypeScript 5.4.5

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

Configuration

stackblitz bot commented Apr 15, 2024

changeset-bot bot commented Apr 15, 2024 • edited

⚠️ No Changeset found

vercel bot commented Apr 15, 2024 • edited

socket-security bot commented Apr 15, 2024 • edited

renovate bot commented Apr 15, 2024 •

edited

`v5.4.5`: TypeScript 5.4.5

changeset-bot bot commented Apr 15, 2024 •

edited

vercel bot commented Apr 15, 2024 •

edited

socket-security bot commented Apr 15, 2024 •

edited