Skip to content

chore(deps): update all non-major dependencies - #9614

Merged
sheremet-va merged 1 commit into
mainfrom
renovate/all-minor-patch
Feb 20, 2026
Merged

chore(deps): update all non-major dependencies#9614
sheremet-va merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Feb 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@bomb.sh/tab ^0.0.12 → ^0.0.14 age confidence devDependencies patch
@faker-js/faker (source) ^10.2.0 → ^10.3.0 age confidence devDependencies minor
@opentelemetry/context-zone (source) ^2.5.0 → ^2.5.1 age confidence devDependencies patch
@opentelemetry/exporter-trace-otlp-proto (source) ^0.211.0 → ^0.212.0 age confidence devDependencies minor
@opentelemetry/resources (source) ^2.5.0 → ^2.5.1 age confidence devDependencies patch
@opentelemetry/sdk-node (source) ^0.211.0 → ^0.212.0 age confidence devDependencies minor
@opentelemetry/sdk-trace-web (source) ^2.5.0 → ^2.5.1 age confidence devDependencies patch
@playwright/test (source) ^1.58.1 → ^1.58.2 age confidence devDependencies patch
@types/node (source) ^24.10.9 → ^24.10.13 age confidence devDependencies patch
@types/node (source) 24.10.9 → 24.10.13 age confidence devDependencies patch
@types/react (source) ^19.2.10 → ^19.2.14 age confidence devDependencies patch
@vitejs/plugin-react (source) ^5.1.3 → ^5.1.4 age confidence devDependencies patch
@​voidzero-dev/vitepress-theme ^4.4.2 → ^4.5.0 age confidence devDependencies minor
@vueuse/core (source) ^14.2.0 → ^14.2.1 age confidence pnpm.catalog.default patch
@vueuse/integrations (source) ^14.2.0 → ^14.2.1 age confidence devDependencies patch
@wdio/types (source) ^9.23.3 → ^9.24.0 age confidence devDependencies minor
acorn-walk ^8.3.4 → ^8.3.5 age confidence pnpm.catalog.default patch
actions-cool/issues-helper v3.7.5 → v3.7.6 age confidence action patch
bumpp ^10.4.0 → ^10.4.1 age confidence devDependencies patch
cr.jaegertracing.io/jaegertracing/jaeger 2.14.1 → 2.15.1 age confidence minor
esbuild ^0.27.2 → ^0.27.3 age confidence devDependencies patch
happy-dom ^20.4.0 → ^20.6.3 age confidence devDependencies minor
magicast ^0.5.1 → ^0.5.2 age confidence devDependencies patch
magicast ^0.5.1 → ^0.5.2 age confidence pnpm.catalog.default patch
mcr.microsoft.com/playwright v1.58.1-noble → v1.58.2-noble age confidence patch
msw (source) ^2.12.7 → ^2.12.10 age confidence pnpm.catalog.default patch
playwright (source) ^1.58.1 → ^1.58.2 age confidence devDependencies patch
playwright (source) ^1.58.1 → ^1.58.2 age confidence pnpm.catalog.default patch
pnpm (source) 10.28.2 → 10.30.1 age confidence packageManager minor
rollup-plugin-license ^3.6.0 → ^3.7.0 age confidence devDependencies minor
tj-actions/changed-files v47.0.1 → v47.0.4 age confidence action patch
vite-plugin-pages ^0.33.2 → ^0.33.3 age confidence devDependencies patch
vitepress-plugin-llms ^1.10.0 → ^1.11.0 age confidence devDependencies minor
vitest-package-exports ^1.1.2 → ^1.2.0 age confidence devDependencies minor
vue (source) ^3.5.27 → ^3.5.28 age confidence pnpm.catalog.default patch
vue-router (source) ^5.0.2 → ^5.0.3 age confidence devDependencies patch

Release Notes

bombshell-dev/tab (@​bomb.sh/tab)

v0.0.14

Compare Source

Patch Changes
  • 0d98c43: Fix package export types

v0.0.13

Compare Source

Patch Changes
  • f619ad7: Widen peerDependencies to accept citty v0.2.
faker-js/faker (@​faker-js/faker)

v10.3.0

Compare Source

New Locales
Features
Changed Locales
Bug Fixes
open-telemetry/opentelemetry-js (@​opentelemetry/context-zone)

v2.5.1

Compare Source

🐛 Bug Fixes
  • fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #​6345 @​maryliag
🏠 Internal
microsoft/playwright (@​playwright/test)

v1.58.2

Compare Source

vitejs/vite-plugin-react (@​vitejs/plugin-react)

v5.1.4

Compare Source

Fix canSkipBabel not accounting for babel.overrides (#​1098)

When configuring babel.overrides without top-level plugins or presets, Babel was incorrectly skipped. The canSkipBabel function now checks for overrides.length to ensure override configurations are processed.

vueuse/vueuse (@​vueuse/core)

v14.2.1

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
webdriverio/webdriverio (@​wdio/types)

v9.24.0

Compare Source

🚀 New Feature
💅 Polish
📝 Documentation
Committers: 3
acornjs/acorn (acorn-walk)

v8.3.5

Compare Source

actions-cool/issues-helper (actions-cool/issues-helper)

v3.7.6

Compare Source

2026.02.10

antfu-collective/bumpp (bumpp)

v10.4.1

Compare Source

   🚀 Features
    View changes on GitHub
evanw/esbuild (esbuild)

v0.27.3

Compare Source

  • Preserve URL fragments in data URLs (#​4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
<html>
  <head><link rel="stylesheet" href="icons.css"></head>
  <body><div class="triangle"></div></body>
</html>

    • icons.css:

      .triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url(./triangle.svg#x);
}

    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
  <defs>
    <clipPath id="x">
      <path d="M0 0H10V10Z"/>
    </clipPath>
  </defs>
</svg>

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
.triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
}

  • Parse and print CSS @scope rules (#​4322)

    This release includes dedicated support for parsing @scope rules in CSS. These rules include optional "start" and "end" selector lists. One important consequence of this is that the local/global status of names in selector lists is now respected, which improves the correctness of esbuild's support for CSS modules. Minification of selectors inside @scope rules has also improved slightly.

    Here's an example:

    /* Original code */
@&#8203;scope (:global(.foo)) to (:local(.bar)) {
  .bar {
    color: red;
  }
}

/* Old output (with --loader=local-css --minify) */
@&#8203;scope (:global(.foo)) to (:local(.bar)){.o{color:red}}

/* New output (with --loader=local-css --minify) */
@&#8203;scope(.foo)to (.o){.o{color:red}}

  • Fix a minification bug with lowering of for await (#​4378, #​4385)

    This release fixes a bug where the minifier would incorrectly strip the variable in the automatically-generated catch clause of lowered for await loops. The code that generated the loop previously failed to mark the internal variable references as used.

  • Update the Go compiler from v1.25.5 to v1.25.7 (#​4383, #​4388)

    This PR was contributed by @​MikeWillCook.

capricorn86/happy-dom (happy-dom)

v20.6.3

Compare Source

v20.6.2

Compare Source

👷‍♂️ Patch fixes
  • Update entities package version to resolve missing export for vue and vue-compat v3.5 - By @​acollins1991 in task #​2066

v20.6.1

Compare Source

v20.6.0

Compare Source

v20.5.5

Compare Source

v20.5.4

Compare Source

👷‍♂️ Patch fixes

v20.5.3

Compare Source

v20.5.2

Compare Source

v20.5.1

Compare Source

v20.5.0

Compare Source

unjs/magicast (magicast)

v0.5.2

Compare Source

   🚀 Features
    View changes on GitHub
mswjs/msw (msw)

v2.12.10

Compare Source

v2.12.10 (2026-02-10)

Bug Fixes

v2.12.9

Compare Source

v2.12.9 (2026-02-06)

Bug Fixes

v2.12.8

Compare Source

v2.12.8 (2026-02-03)

Bug Fixes
pnpm/pnpm (pnpm)

v10.30.1: pnpm 10.30.1

Compare Source

Patch Changes

  • Use the /-/npm/v1/security/audits/quick endpoint as the primary audit endpoint, falling back to /-/npm/v1/security/audits when it fails #​10649.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Workleap
Stackblitz Nx

v10.30.0

Compare Source

v10.29.3

Compare Source

v10.29.2

Compare Source

v10.29.1: pnpm 10.29.1

Compare Source

Minor Changes

  • The pnpm dlx / pnpx command now supports the catalog: protocol. Example: pnpm dlx shx@catalog:.
  • Support configuring auditLevel in the pnpm-workspace.yaml file #​10540.
  • Support bare workspace: protocol without version specifier. It is now treated as workspace:* and resolves to the concrete version during publish #​10436.

Patch Changes

  • Fixed pnpm list --json returning incorrect paths when using global virtual store #​10187.

  • Fix pnpm store path and pnpm store status using workspace root for path resolution when storeDir is relative #​10290.

  • Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists #​10497.

  • Fixed a bug where catalogMode: strict would write the literal string "catalog:" to pnpm-workspace.yaml instead of the resolved version specifier when re-adding an existing catalog dependency #​10176.

  • Fixed the documentation URL shown in pnpm completion --help to point to the correct page at https://pnpm.io/completion #​10281.

  • Skip local file: protocol dependencies during pnpm fetch. This fixes an issue where pnpm fetch would fail in Docker builds when local directory dependencies were not available #​10460.

  • Fixed pnpm audit --json to respect the --audit-level setting for both exit code and output filtering #​10540.

  • update tar to version 7.5.7 to fix security issue

    Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: CVE-2026-24842

  • Fix pnpm audit --fix replacing reference overrides (e.g. $foo) with concrete versions #​10325.

  • Fix shamefullyHoist set via updateConfig in .pnpmfile.cjs not being converted to publicHoistPattern #​10271.

  • pnpm help should correctly report if the currently running pnpm CLI is bundled with Node.js #​10561.

  • Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for node_modules/.bin, causing binaries to not be found when running commands like pnpm exec #​10457.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite
mjeanroy/rollup-plugin-license (rollup-plugin-license)

v3.7.0

Compare Source

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Feb 9, 2026
@netlify

netlify Bot commented Feb 9, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for vitest-dev ready!

Name Link
🔨 Latest commit c8f70ee
🔍 Latest deploy log https://app.netlify.com/projects/vitest-dev/deploys/6997bb0c1ad8d60008069756
😎 Deploy Preview https://deploy-preview-9614--vitest-dev.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 15 times, most recently from 5851b69 to 29ec3e7 Compare February 15, 2026 20:58
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 3d2fecf to d50ce59 Compare February 18, 2026 00:45
@hi-ogawa

hi-ogawa commented Feb 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

Typecheck failure is due to @bomb.sh/tab. It's already fixed in upstream but waiting for new release.

EDIT: fixed in 0.0.14

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from d50ce59 to 7300cb9 Compare February 18, 2026 02:14
hi-ogawa
hi-ogawa previously approved these changes Feb 18, 2026
View reviewed changes
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 7300cb9 to ac4fe2a Compare February 18, 2026 22:38
hi-ogawa
hi-ogawa previously approved these changes Feb 18, 2026
View reviewed changes
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 3c1d5c7 to 9b93c00 Compare February 19, 2026 17:16
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 9b93c00 to 1fd36a4 Compare February 19, 2026 22:14
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 1fd36a4 to c8f70ee Compare February 20, 2026 01:38
@sheremet-va
sheremet-va merged commit 50727a0 into main Feb 20, 2026
16 checks passed
@sheremet-va
sheremet-va deleted the renovate/all-minor-patch branch February 20, 2026 11:27
@github-actions github-actions Bot locked and limited conversation to collaborators Aug 11, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@hi-ogawa hi-ogawa hi-ogawa left review comments

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@hi-ogawa @sheremet-va