Skip to content

chore(deps): update all non-major dependencies#378

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#378
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 6, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@changesets/cli (source) ^2.30.0 → ^2.31.0 age confidence pnpm.catalog.default minor
@changesets/get-release-plan (source) ^4.0.15 → ^4.0.16 age confidence dependencies patch
@tanstack/query-core (source) ^5.95.2 → ^5.99.0 age confidence pnpm.catalog.default minor
@vitejs/plugin-vue (source) ^6.0.5 → ^6.0.6 age confidence pnpm.catalog.default patch
actions/cache v5.0.4 → v5.0.5 age confidence action patch
eslint (source) ^10.1.0 → ^10.2.1 age confidence pnpm.catalog.default minor
globals ^17.4.0 → ^17.5.0 age confidence pnpm.catalog.default minor
nx (source) 22.6.3 → 22.6.5 age confidence pnpm.catalog.default patch
prettier (source) ^3.8.1 → ^3.8.3 age confidence pnpm.catalog.default patch
react (source) ^19.2.4 → ^19.2.5 age confidence pnpm.catalog.default patch
react-dom (source) ^19.2.4 → ^19.2.5 age confidence pnpm.catalog.default patch
sherif ^1.11.0 → ^1.11.1 age confidence pnpm.catalog.default patch
simple-git (source) ^3.33.0 → ^3.36.0 age confidence pnpm.catalog.default minor
tinyglobby (source) ^0.2.15 → ^0.2.16 age confidence pnpm.catalog.default patch
tsdown (source) ^0.21.7 → ^0.21.9 age confidence pnpm.catalog.default patch
type-fest ^5.5.0 → ^5.6.0 age confidence pnpm.catalog.default minor
typescript-eslint (source) ^8.57.2 → ^8.58.2 age confidence pnpm.catalog.default patch
vite (source) ^8.0.3 → ^8.0.8 age confidence pnpm.catalog.default patch
vitest (source) ^4.1.2 → ^4.1.4 age confidence pnpm.catalog.default patch
vue (source) ^3.5.31 → ^3.5.32 age confidence pnpm.catalog.default patch

Release Notes

changesets/changesets (@​changesets/cli)

v2.31.0

Compare Source

Minor Changes

  • #​1889 96ca062 Thanks @​mixelburg! - Error on unsupported flags for individual CLI commands and print the matching command usage to make mistakes easier to spot.

  • #​1873 42943b7 Thanks @​mixelburg! - Respond to --help on all subcommands. Previously, --help was only handled when it was the sole argument; passing it alongside a subcommand (e.g. changeset version --help) would silently execute the command instead. Now --help always exits early and prints per-command usage when a known subcommand is provided, or the general help text otherwise.

Patch Changes
TanStack/query (@​tanstack/query-core)

v5.99.0

Compare Source

v5.98.0

Compare Source

v5.97.0

Compare Source

Patch Changes
  • fix(query-core): use explicit undefined check for timer IDs so that custom TimeoutProviders returning 0 as a valid timer ID are properly cleared (#​10401)

v5.96.2

Compare Source

v5.96.1

Compare Source

vitejs/vite-plugin-vue (@​vitejs/plugin-vue)

v6.0.6

Features
  • plugin-vue: propagate multiRoot for template-only vapor components (#​745) (9e07ae9)
Bug Fixes
Miscellaneous Chores
actions/cache (actions/cache)

v5.0.5

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

eslint/eslint (eslint)

v10.2.1

Compare Source

v10.2.0

Compare Source

Features

Bug Fixes

Documentation

  • a2af743 docs: add language to configuration objects (#​20712) (Francesco Trotta)
  • 845f23f docs: Update README (GitHub Actions Bot)
  • 5fbcf59 docs: remove sourceType from ts playground link (#​20477) (Tanuj Kanti)
  • 8702a47 docs: Update README (GitHub Actions Bot)
  • ddeaded docs: Update README (GitHub Actions Bot)
  • 2b44966 docs: add Major Releases section to Manage Releases (#​20269) (Milos Djermanovic)
  • eab65c7 docs: update eslint versions in examples (#​20664) (루밀LuMir)
  • 3e4a299 docs: update ESM Dependencies policies with note for own-usage packages (#​20660) (Milos Djermanovic)

Chores

  • 8120e30 refactor: extract no unmodified loop condition (#​20679) (kuldeep kumar)
  • 46e8469 chore: update dependency markdownlint-cli2 to ^0.22.0 (#​20697) (renovate[bot])
  • 01ed3aa test: add unit tests for unicode utilities (#​20622) (Manish chaudhary)
  • 811f493 ci: remove --legacy-peer-deps from types integration tests (#​20667) (Milos Djermanovic)
  • 6b86fcf chore: update dependency npm-run-all2 to v8 (#​20663) (renovate[bot])
  • 632c4f8 chore: add prettier update commit to .git-blame-ignore-revs (#​20662) (루밀LuMir)
  • b0b0f21 chore: update dependency eslint-plugin-regexp to ^3.1.0 (#​20659) (Milos Djermanovic)
  • 228a2dd chore: update dependency eslint-plugin-eslint-plugin to ^7.3.2 (#​20661) (Milos Djermanovic)
  • 3ab4d7e test: Add tests for eslintrc-style keys (#​20645) (kuldeep kumar)
sindresorhus/globals (globals)

v17.5.0

Compare Source

nrwl/nx (nx)

v22.6.5

Compare Source

22.6.5 (2026-04-10)

🚀 Features
  • core: allow generate command to skip project graph creation (#​35170)
  • core: use CNW variant 1 cloud prompt in nx init (#​35155)
  • core: prompt for setup mode when running nx init in empty git directory (#​35226)
  • misc: lock in CNW cloud prompt A/B winner and add new variants (#​35154)
🩹 Fixes
  • angular: add storybook and playwright as implicit dependencies (#​35224)
  • bundling: bump esbuild for new projects to a version compatible with vite 8 (#​35132)
  • core: clean up legacy .gemini/skills during configure-ai-agents (#​35117)
  • core: copy pnpm install configuration to generated package.json (#​35016, #​30240)
  • core: display actual error message when plugin loading fails (#​35138, #​35137)
  • core: bump axios to 1.13.5 to resolve CVE-2026-25639 (#​35148, #​35145)
  • core: update and pin ejs to 5.0.1 (#​35157)
  • core: misc tui perf fixes (#​35187)
  • core: replace LGPL-licensed @​ltd/j-toml with BSD-3-Clause smol-toml (#​35188)
  • core: kill discrete tasks and use tree-kill for batch cleanup on SIGINT (#​35175)
  • core: support cross-file variable references in .env files (#​34956, #​34955)
  • core: disable Yarn scripts for temp nx@​latest installs (#​35210)
  • core: use fresh package manager cache for e2e tests (#​35211)
  • core: prevent phantom connections and dead polling in plugin workers (#​34823, #​34388)
  • core: add prettier config inputs to astro-docs format target (#​35222)
  • core: add vale-changed.mjs script to vale target inputs (41a71dd97d)
  • core: add missing build inputs for angular-rspack example projects (d71dcc6a9a)
  • core: add run-native-target script input to dotnet build-analyzer (#​35221)
  • core: overwrite inferred script target when nx prop defines executor or command (#​35227)
  • core: update cleanup mock to match async signature in package-json spec (c9d51d31f9)
  • gradle: prevent Gradle and Maven daemon accumulation during project graph recalculation (#​35143)
  • gradle: use namespace import for tree-kill to match codebase convention (7c4f4af802)
  • js: resolve ENOWORKSPACES test error in setupVerdaccio for @​nx/js:library generator (#​34755)
  • js: include npm overrides in generated lockfile (#​35192, #​34529)
  • linter: infer extended tsconfig files as task inputs (#​35190)
  • maven: prevent batch executor hang from premature worker exit (#​35001, #​34757)
  • maven: use require for tree-kill to avoid esModuleInterop mismatch between lib and spec configs (8bd4c182ca)
  • misc: use workspace root for package manager detection and normalize paths in plugins (#​35116)
  • misc: stream Framer proxy responses and add edge function timing (#​35215)
  • misc: bump axios to 1.15.0 for all packages (#​35237)
  • repo: clean Angular CLI restore target before cache copy (#​35121)
  • repo: update issue-notifier.yml (#​35178)
❤️ Thank You

v22.6.4

Compare Source

22.6.4 (2026-04-01)

🚀 Features
  • misc: update nx init telemetry meta from CSV to JSON format (#​35076)
  • nx-dev: add conditional blog/changelog proxy in edge function (#​35043)
🩹 Fixes
  • core: validate bundler option for Angular presets in create-nx-workspace (#​35074)
  • core: handle "." and absolute paths as workspace name in CNW (#​35083, #​1)
  • core: pin version of axios (#​35093)
  • core: preserve sibling dependency inputs in native hashing (#​35071)
  • core: sandbox exclusions, multi-line typeof import detection, global ensurePackage mock (#​35056)
  • core: no-interactive should disable prompts during migrate (#​35106)
  • gradle: increase project graph timeout defaults (#​35058)
  • js: recognize tsgo in dependency-checks lint rule (#​35048)
  • js: narrow tsc build-base outputs to only tsc-produced file types (#​35041)
  • js: include tsbuildinfo in narrowed tsc build-base outputs (#​35086, #​35041)
  • js: use explicit nx/bin/nx path in start-local-registry (#​35127)
  • misc: handle non-interactive mode and add template shorthand names for CNW (#​35045)
  • react: force Vite 7 when using React Router in framework mode (#​35101)
  • react-native: use vite's transformWithEsbuild instead of direct esbuild import (5771eb3346)
  • repo: pass env vars into docker builds in publish workflow (#​35060)
  • repo: bump picomatch from 4.0.2 to 4.0.4 (#​35081, #​35068)
  • repo: fixup lock-threads failing with resource inaccessible message (#​35005)
  • repo: fix lockfile (b070e23445)
  • repo: re-enable Cypress HMR e2e tests after upstream tapable fix (#​35105, #​34969, #​20693)
  • repo: disable ts-jest diagnostics for workspace-plugin tests (b013f93dca)
  • vite: update vitest and plugin-react-swc versions for vite 8 compat (#​35062)
  • vite: bump sass version for vue/nuxt presets for Vite 8 compat (#​35073)
  • webpack: bump postcss-loader to ^8.2.1 to eliminate transitive yaml@1.x CVE (#​35028, #​35025)
❤️ Thank You
prettier/prettier (prettier)

v3.8.3

Compare Source

v3.8.2

Compare Source

facebook/react (react)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components
steveukx/git-js (simple-git)

v3.36.0

Compare Source

Minor Changes

  • 89a2294: Extend known exploitable configuration keys and per-task environment variables.

    Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

    Thanks to @​zebbern for identifying the need to block core.fsmonitor.
    Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

v3.35.2

Compare Source

Patch Changes

v3.35.1

Compare Source

Patch Changes

v3.35.0

Compare Source

Minor Changes
Patch Changes

v3.34.0

Compare Source

Minor Changes
  • 2b68331: Revised dependency tree to add helper modules as dependencies in main simple-git
Patch Changes

  • 2e1f51c: Enhances scanning of arguments before passing on to the spawned child_process.

    Caters for -c flags prefixing the git task (used when setting global inline config) and suffixing with either -c, --config or --config-env. Detects git config operations that write to the configuration.

  • Updated dependencies [2e1f51c]

SuperchupuDev/tinyglobby (tinyglobby)

v0.2.16

Compare Source

Fixed
Changed
  • Overhauled and optimized most internals by Torathion
  • Ignore patterns are no longer compiled twice by webpro
rolldown/tsdown (tsdown)

v0.21.9

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.21.8

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
sindresorhus/type-fest (type-fest)

v5.6.0

Compare Source

New types
Improvements
typescript-eslint/typescript-eslint (typescript-eslint)

v8.58.2

Compare Source

🩹 Fixes
  • remove tsbuildinfo cache file from published packages (#​12187)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v8.0.8

Compare Source

Features
Bug Fixes

v8.0.7

Compare Source

Bug Fixes
  • use sync dns.getDefaultResultOrder instead of dns.promises (#​22185) (5c05b04)

v8.0.6

Compare Source

Features
Bug Fixes
Performance Improvements
  • early return in getLocalhostAddressIfDiffersFromDNS when DNS order is verbatim (#​22151) (56ec256)
Miscellaneous Chores

v8.0.5

Compare Source

Bug Fixes

v8.0.4

Compare Source

Features
Bug Fixes
Documentation
Miscellaneous Chores
Code Refactoring
vitest-dev/vitest (vitest)

v4.1.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
    [View changes on GitHu

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 6, 2026 •
edited
Loading

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

Updated several dependency version ranges in pnpm-workspace.yaml's catalog for multiple packages; no other keys or structural changes were made.

Changes

Cohort / File(s) Summary
Dependency Version Bumps
pnpm-workspace.yaml		 Bumped catalog versions: @tanstack/query-core (^5.95.2 → ^5.96.2), eslint (^10.1.0 → ^10.2.0), nx (22.6.3 → 22.6.4), sherif (^1.11.0 → ^1.11.1), simple-git (^3.33.0 → ^3.35.2), typescript-eslint (^8.57.2 → ^8.58.0), vite (^8.0.3 → ^8.0.6), vitest (^4.1.2 → ^4.1.3), vue (^3.5.31 → ^3.5.32).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

Suggested labels

dependencies

Poem

🐰 I nibble through the version patch,
Nine tiny hops to fix the latch.
Catalog shifted, lines align,
A tidy tree, dependencies fine. 🥕

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The PR description is an auto-generated Renovate update report with dependency version table and release notes, but completely lacks the required template structure with '🎯 Changes', '✅ Checklist', and '🚀 Release Impact' sections. Add required sections from the template: describe the changes under '🎯 Changes', complete the '✅ Checklist' items, and specify release impact under '🚀 Release Impact' (either generate a changeset or confirm it's dev-only).
✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and concisely summarizes the main change: updating all non-major dependencies in the pnpm-workspace.yaml file.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/all-minor-patch

Comment @coderabbitai help to get the list of available commands and usage tips.

@nx-cloud
Copy link
Copy Markdown

nx-cloud bot commented Apr 6, 2026 •
edited
Loading

View your CI Pipeline Execution ↗ for commit f069779

Command Status Duration Result
nx affected --targets=test:sherif,test:docs,tes... ✅ Succeeded 23s View ↗
nx run-many --target=build ✅ Succeeded 8s View ↗

☁️ Nx Cloud last updated this comment at 2026-04-18 01:28:59 UTC

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new bot commented Apr 6, 2026 •
edited
Loading 

npm i https://pkg.pr.new/@tanstack/eslint-config@378

npm i https://pkg.pr.new/@tanstack/publish-config@378

npm i https://pkg.pr.new/@tanstack/typedoc-config@378

npm i https://pkg.pr.new/@tanstack/vite-config@378

commit: f069779

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 14 times, most recently from fd64ac8 to 6c878db Compare April 12, 2026 08:49
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 9c31748 to 7523f98 Compare April 17, 2026 21:24
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 7523f98 to f069779 Compare April 18, 2026 01:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants