Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 8, 2025

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.


This PR contains the following updates:

Package Change Age Confidence
@cloudflare/workers-types ^4.20250910.0 -> ^4.20251004.0 age confidence
@nuxt/devtools (source) ^2.6.3 -> ^2.6.5 age confidence
@nuxt/ui (source) ^4.0.0 -> ^4.0.1 age confidence
@shikijs/langs (source) ^3.12.2 -> ^3.13.0 age confidence
@types/bun (source) ^1.2.21 -> ^1.2.23 age confidence
@types/node (source) ^24.3.1 -> ^24.6.2 age confidence
@valibot/to-json-schema (source) ^1.0.0 -> ^1.3.0 age confidence
better-sqlite3 ^12.2.0 -> ^12.4.1 age confidence
c12 ^3.2.0 -> ^3.3.0 age confidence
db0 ^0.3.2 -> ^0.3.4 age confidence
eslint (source) ^9.35.0 -> ^9.37.0 age confidence
jiti ^2.5.1 -> ^2.6.1 age confidence
nypm ^0.6.1 -> ^0.6.2 age confidence
pnpm (source) 10.15.1 -> 10.18.0 age confidence
release-it ^19.0.4 -> ^19.0.5 age confidence
shiki (source) ^3.12.2 -> ^3.13.0 age confidence
tar ^7.4.3 -> ^7.5.1 age confidence
typescript (source) 5.9.2 -> 5.9.3 age confidence
valibot (source) ^1.0.0 -> ^1.1.0 age confidence
vue-tsc (source) ^3.0.6 -> ^3.1.0 age confidence
wrangler (source) ^4.35.0 -> ^4.42.0 age confidence

Release Notes

cloudflare/workerd (@​cloudflare/workers-types)

v4.20251004.0

Compare Source

v4.20251003.0

Compare Source

v4.20251001.0

Compare Source

nuxt/ui (@​nuxt/ui)

v4.0.1

Compare Source

Bug Fixes
  • App: allow global portal disabling (#​5111) (7659fa1)
  • AuthForm: export type with proper inference for field-specific props (#​5106) (344f269)
  • Avatar: remove redundant img role (066b8a1), closes #​5044
  • Carousel: ensure plugins init after client-side navigation (#​5117) (21fbe63)
  • Carousel: invert arrow keys in RTL direction (#​5072) (fde53ee)
  • ChatMessages: ensure content is render before scrolling (0db622a)
  • ChatMessages: watch deep to handle streaming with parts (ff67fa3)
  • components: add missing data-orientation for consistency (a9fe7c6)
  • ContentNavigation: improve path matching and recursion with default-open (22ee075), closes #​5112
  • ContentSearch/DashboardSearch: proxy modal props to support fullscreen (095a0c1)
  • DashboardPanel/DashboardSidebar: handle RTL mode (#​5109) (fface35)
  • Drawer: prevent unwanted close when dismissible is false (#​5085) (2abdc21)
  • Drawer: use full height/width for snapPoints (#​5041) (b145768)
  • locale: improve ckb translations (#​5079) (3ee3a5e)
  • locale: improve typography with ellipsis (#​5052) (391f9f5)
  • Pagination: make ellipsis non-interactive (#​5081) (62f64cc)
  • Table: empty cell value causing hydration errors (#​5069) (44a38ea)
  • unplugin: handle components resolution with subpath (31db8d9)
  • useKbd: update escape key from to Esc (#​5076) (64d1589)
  • vue: align useCookie stub with nuxt's default value handling (#​5089) (f531807)
fabian-hiller/valibot (@​valibot/to-json-schema)

v1.1.0

Compare Source

Many thanks to @​EltonLobo07, @​sacrosanctic, @​muningis, @​EskiMojo14, @​MOZGIII, @​vktrl and @​jasperteo for contributing to this release.

Read the release notes on our website for a quick overview of the most exciting new features in this release.

  • Add message method to overwrite local error message configuration of a schema (pull request #​1103)
  • Add summarize method to summarize issues into a pretty-printable multi-line string (pull request #​1158)
  • Add getTitle, getDescription and getMetadata methods to extract metadata of a schema (pull request #​1154)
  • Add minEntries and maxEntries validation action to validate number of object entries (pull request #​1100)
  • Add entries and notEntries validation action to validate number of object entries (pull request #​1156)
  • Add parseJson and stringifyJson transformation action to parse and stringify JSON (pull request #​1137)
  • Add flavor transformation action to flavor the output type of a schema (pull request #​950)
  • Add support for bigints to multipleOf validation action (pull request #​1164)
  • Change implementation of variant and variantAsync schema to improve performance by aborting validation of discriminators early (pull request #​1110)
  • Change name of NanoIDAction and NanoIDIssue interface to NanoIdAction and NanoIdIssue (pull request #​1171)
  • Fix internal MarkOptional type to fix input and output type of objects in edge cases (issue #​1176)
WiseLibs/better-sqlite3 (better-sqlite3)

v12.4.1

Compare Source

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v12.4.0...v12.4.1

v12.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: WiseLibs/better-sqlite3@v12.2.0...v12.3.0

unjs/db0 (db0)

v0.3.4

Compare Source

compare changes

📦 Build
❤️ Contributors

v0.3.3

Compare Source

compare changes

🚀 Enhancements
  • Support dispose and using createDatabase() (#​178)
  • Cloudflare hyperdrive (#​164)
💅 Refactors
📖 Documentation
  • Improve drizzle integration example with drizzle-kit usage (#​170)
🏡 Chore
❤️ Contributors
eslint/eslint (eslint)

v9.37.0

Compare Source

unjs/jiti (jiti)

v2.6.1

Compare Source

compare changes

🩹 Fixes
  • interop: Only passthrough default if it is not a promise (#​408)
📦 Build
  • Revert to terser-webpack-plugin (#​407)
🏡 Chore
❤️ Contributors
pnpm/pnpm (pnpm)

v10.18.0

Compare Source

Minor Changes
  • Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

    Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
    Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

    Related PR: #​10025.

Patch Changes
  • Retry filesystem operations on EAGAIN errors #​9959.
  • Outdated command respects minimumReleaseAge configuration #​10030.
  • Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
  • Don't fail with a meaningless error when scriptShell is set to false #​8748.
  • pnpm dlx should not fail when minimumReleaseAge is set #​10037.

v10.17.1

Compare Source

Patch Changes
  • When a version specifier cannot be resolved because the versions don't satisfy the minimumReleaseAge setting, print this information out in the error message #​9974.
  • Fix state.json creation path when executing pnpm patch in a workspace project #​9733.
  • When minimumReleaseAge is set and the latest tag is not mature enough, prefer a non-deprecated version as the new latest #​9987.

v10.17.0

Compare Source

Minor Changes
  • The minimumReleaseAgeExclude setting now supports patterns. For instance:

    minimumReleaseAge: 1440
    minimumReleaseAgeExclude:
      - "@​eslint/*"

    Related PR: #​9984.

Patch Changes
  • Don't ignore the minimumReleaseAge check, when the package is requested by exact version and the packument is loaded from cache #​9978.
  • When minimumReleaseAge is set and the active version under a dist-tag is not mature enough, do not downgrade to a prerelease version in case the original version wasn't a prerelease one #​9979.

v10.16.1

Compare Source

Patch Changes
  • The full metadata cache should be stored not at the same location as the abbreviated metadata. This fixes a bug where pnpm was loading the abbreviated metadata from cache and couldn't find the "time" field as a result #​9963.
  • Forcibly disable ANSI color codes when generating patch diff #​9914.

v10.16.0

Compare Source

Minor Changes
  • There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.

    The new setting is called minimumReleaseAge. It specifies the number of minutes that must pass after a version is published before pnpm will install it. For example, setting minimumReleaseAge: 1440 ensures that only packages released at least one day ago can be installed.

    If you set minimumReleaseAge but need to disable this restriction for certain dependencies, you can list them under the minimumReleaseAgeExclude setting. For instance, with the following configuration pnpm will always install the latest version of webpack, regardless of its release time:

    minimumReleaseAgeExclude:
      - webpack

    Related issue: #​9921.

  • Added support for finders #​9946.

    In the past, pnpm list and pnpm why could only search for dependencies by name (and optionally version). For example:

    pnpm why minimist
    

    prints the chain of dependencies to any installed instance of minimist:

    verdaccio 5.20.1
    ├─┬ handlebars 4.7.7
    │ └── minimist 1.2.8
    └─┬ mv 2.1.1
      └─┬ mkdirp 0.5.6
        └── minimist 1.2.8
    

    What if we want to search by other properties of a dependency, not just its name? For instance, find all packages that have react@17 in their peer dependencies?

    This is now possible with "finder functions". Finder functions can be declared in .pnpmfile.cjs and invoked with the --find-by=<function name> flag when running pnpm list or pnpm why.

    Let's say we want to find any dependencies that have React 17 in peer dependencies. We can add this finder to our .pnpmfile.cjs:

    module.exports = {
      finders: {
        react17: (ctx) => {
          return ctx.readManifest().peerDependencies?.react === "^17.0.0";
        },
      },
    };

    Now we can use this finder function by running:

    pnpm why --find-by=react17
    

    pnpm will find all dependencies that have this React in peer dependencies and print their exact locations in the dependency graph.

    @&#8203;apollo/client 4.0.4
    ├── @&#8203;graphql-typed-document-node/core 3.2.0
    └── graphql-tag 2.12.6
    

    It is also possible to print out some additional information in the output by returning a string from the finder. For example, with the following finder:

    module.exports = {
      finders: {
        react17: (ctx) => {
          const manifest = ctx.readManifest();
          if (manifest.peerDependencies?.react === "^17.0.0") {
            return `license: ${manifest.license}`;
          }
          return false;
        },
      },
    };

    Every matched package will also print out the license from its package.json:

    @&#8203;apollo/client 4.0.4
    ├── @&#8203;graphql-typed-document-node/core 3.2.0
    │   license: MIT
    └── graphql-tag 2.12.6
        license: MIT
    
Patch Changes
  • Fix deprecation warning printed when executing pnpm with Node.js 24 #​9529.
  • Throw an error if nodeVersion is not set to an exact semver version #​9934.
  • pnpm publish should be able to publish a .tar.gz file #​9927.
  • Canceling a running process with Ctrl-C should make pnpm run return a non-zero exit code #​9626.
microsoft/TypeScript (typescript)

v5.9.3

Compare Source

cloudflare/workers-sdk (wrangler)

v4.42.0

Compare Source

Minor Changes
Patch Changes

v4.41.0

Compare Source

Minor Changes
  • #​10507 21a0bef Thanks @​dario-piotrowicz! - Add strict mode for the wrangler deploy command

    Add a new flag: --strict that makes the wrangler deploy command be more strict and not deploy workers when the deployment could be potentially problematic. This "strict mode" currently only affects non-interactive sessions where conflicts with the remote settings for the worker (for example when the worker has been re-deployed via the dashboard) will cause the deployment to fail instead of automatically overriding the remote settings.

  • #​10710 7f2386e Thanks @​penalosa! - Add prompt to resource creation flow allowing for newly created resources to be remote.

Patch Changes

v4.40.3

Compare Source

Patch Changes

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

vercel bot commented Sep 8, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Updated (UTC)
content-docs Ready Ready Preview Oct 4, 2025 2:33am

Copy link

pkg-pr-new bot commented Sep 8, 2025

npm i https://pkg.pr.new/@nuxt/content@3526

commit: ce84159

Copy link

cloudflare-workers-and-pages bot commented Sep 8, 2025

Deploying content with  Cloudflare Pages  Cloudflare Pages

Latest commit: ce84159
Status: ✅  Deploy successful!
Preview URL: https://a08fa60b.content-f0q.pages.dev
Branch Preview URL: https://renovate-all-minor-patch.content-f0q.pages.dev

View logs

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 82d5eba to c7d2980 Compare September 8, 2025 18:47
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c7d2980 to 3606879 Compare September 9, 2025 03:25
@renovate renovate bot changed the title chore(deps): update all non-major dependencies chore(deps): update all non-major dependencies - autoclosed Sep 9, 2025
@renovate renovate bot closed this Sep 9, 2025
@renovate renovate bot deleted the renovate/all-minor-patch branch September 9, 2025 15:41
@renovate renovate bot changed the title chore(deps): update all non-major dependencies - autoclosed chore(deps): update all non-major dependencies Sep 15, 2025
@renovate renovate bot reopened this Sep 15, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 3606879 to b886e8f Compare September 15, 2025 07:01
Copy link

gitguardian bot commented Sep 15, 2025

️✅ There are no secrets present in this pull request anymore.

If these secrets were true positive and are still valid, we highly recommend you to revoke them.
While these secrets were previously flagged, we no longer have a reference to the
specific commits where they were detected. Once a secret has been leaked into a git
repository, you should consider it compromised, even if it was deleted immediately.
Find here more information about risks.


🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 30948f8 to c229ed9 Compare September 28, 2025 14:36
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c229ed9 to a918207 Compare September 28, 2025 18:15
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from a918207 to 197f235 Compare September 29, 2025 18:56
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 197f235 to 57f8f5b Compare September 30, 2025 11:39
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 57f8f5b to 45351ea Compare September 30, 2025 15:54
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 45351ea to 0055f6b Compare October 1, 2025 03:44
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 0055f6b to 0a2a6d9 Compare October 1, 2025 22:51
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 0a2a6d9 to 2882a30 Compare October 2, 2025 02:26
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 2882a30 to a3bd353 Compare October 2, 2025 15:45
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from a3bd353 to d74d320 Compare October 2, 2025 18:47
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from d74d320 to 7d20ac5 Compare October 3, 2025 02:36
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 7d20ac5 to 932b76d Compare October 3, 2025 14:35
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 932b76d to 0e68146 Compare October 3, 2025 22:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants