chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	^24.4.0 -> ^24.7.0
automd	^0.4.0 -> ^0.4.2
dotenv	^17.2.2 -> ^17.2.3
eslint (source)	^9.35.0 -> ^9.37.0
jiti	^2.5.1 -> ^2.6.1
pnpm (source)	10.16.1 -> 10.18.1
typescript (source)	^5.9.2 -> ^5.9.3

---

Release Notes

unjs/automd (automd)

v0.4.2

Compare Source

compare changes

v0.4.1

Compare Source

compare changes

🩹 Fixes

• pm-install: Use pnpm add instead of pnpm install (#​122)
• pm, pm-install: Add npm: prefix for deno (#​115)
• jsimport: Bun doesn't support url imports (#​112)
• Create missing output dir (#​106)

📖 Documentation

• Update config section (#​107)

🏡 Chore

• Update deps (a63bb3e)

❤️ Contributors

• Daniel Rentz (@​danielrentz)
• Yvbopeng (@​yvbopeng)
• Huseeiin (@​huseeiin)
• Keito (@​mst-mkt)
• Selemon Brahanu (@​selemondev)
• Pooya Parsa (@​pi0)

motdotla/dotenv (dotenv)

v17.2.3

Compare Source

Changed

• Fixed typescript error definition (#​912)

eslint/eslint (eslint)

v9.37.0

Compare Source

v9.36.0

Compare Source

unjs/jiti (jiti)

v2.6.1

Compare Source

compare changes

🩹 Fixes

• interop: Only passthrough default if it is not a promise (#​408)

📦 Build

• Revert to terser-webpack-plugin (#​407)

🏡 Chore

• Update bench (037c646)
• Update deps (974ca40)
• Remove unused code (8b41497)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Kricsleo (@​kricsleo)

v2.6.0

Compare Source

compare changes

🔥 Performance

• Lazy load babel transform (#​405)

🩹 Fixes

• cjs-interop: Handle function default exports (#​396)
• Always use native for node: specifiers (#​392)

📦 Build

• Migrate to rspack (#​404)

🏡 Chore

• Update deps (5123334)

✅ Tests

• Update deno and bun native test ignores (df844f8)
• New bench script (6404427)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Volodymyr Kolesnykov (@​sjinks)
• Jungwoo LEE <jungwoo3490@​naver.com>

pnpm/pnpm (pnpm)

v10.18.1

Compare Source

Patch Changes

• Don't print a warning, when --lockfile-only is used #​8320.
• pnpm setup creates a command shim to the pnpm executable. This is needed to be able to run pnpm self-update on Windows #​5700.
• When using pnpm catalogs and running a normal pnpm install, pnpm produced false positive warnings for "skip adding to the default catalog because it already exists". This warning now only prints when using pnpm add --save-catalog as originally intended.

v10.18.0

Compare Source

Minor Changes

• Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

  Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
  Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

  Related PR: #​10025.

Patch Changes

• Retry filesystem operations on EAGAIN errors #​9959.
• Outdated command respects minimumReleaseAge configuration #​10030.
• Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
• Don't fail with a meaningless error when scriptShell is set to false #​8748.
• pnpm dlx should not fail when minimumReleaseAge is set #​10037.

v10.17.1

Compare Source

Patch Changes

• When a version specifier cannot be resolved because the versions don't satisfy the minimumReleaseAge setting, print this information out in the error message #​9974.
• Fix state.json creation path when executing pnpm patch in a workspace project #​9733.
• When minimumReleaseAge is set and the latest tag is not mature enough, prefer a non-deprecated version as the new latest #​9987.

v10.17.0

Compare Source

Minor Changes

• The minimumReleaseAgeExclude setting now supports patterns. For instance:

  minimumReleaseAge: 1440
  minimumReleaseAgeExclude:
    - "@​eslint/*"

  Related PR: #​9984.

Patch Changes

• Don't ignore the minimumReleaseAge check, when the package is requested by exact version and the packument is loaded from cache #​9978.
• When minimumReleaseAge is set and the active version under a dist-tag is not mature enough, do not downgrade to a prerelease version in case the original version wasn't a prerelease one #​9979.

microsoft/TypeScript (typescript)

v5.9.3

Compare Source

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.