Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jul 12, 2025

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.


This PR contains the following updates:

Package Change Age Confidence
@actions/cache (source) 4.0.3 -> 4.1.0 age confidence
@babel/core (source) 7.28.0 -> 7.28.4 age confidence
@octokit/core 7.0.2 -> 7.0.5 age confidence
@octokit/plugin-paginate-rest 13.1.1 -> 13.2.0 age confidence
@octokit/plugin-rest-endpoint-methods 16.0.0 -> 16.1.0 age confidence
@swc/cli 0.7.7 -> 0.7.8 age confidence
@swc/jest (source) 0.2.38 -> 0.2.39 age confidence
@types/node (source) 22.17.2 -> 22.18.8 age confidence
@types/semver (source) 7.7.0 -> 7.7.1 age confidence
cspell (source) 9.1.3 -> 9.2.1 age confidence
dprint 0.50.1 -> 0.50.2 age confidence
fs-extra 11.3.0 -> 11.3.2 age confidence
lefthook 1.11.16 -> 1.13.6 age confidence
npm-check-updates 18.0.1 -> 18.3.1 age confidence
rollup (source) 4.44.2 -> 4.52.3 age confidence
tsx (source) 4.20.3 -> 4.20.6 age confidence
turbo (source) 2.5.4 -> 2.5.8 age confidence
typescript (source) 5.8.3 -> 5.9.3 age confidence
vite (source) 6.3.5 -> 6.3.6 age confidence
web-streams-polyfill 4.1.0 -> 4.2.0 age confidence

Release Notes

actions/toolkit (@​actions/cache)

v4.1.0

  • Remove client side 10GiB cache size limit check & update twirp client #​2118

v4.0.5

v4.0.4

⚠️ Faulty patch release. Upgrade to 4.0.5 instead.

  • Optimized cache dependencies by moving @protobuf-ts/plugin to dev dependencies #​2106
  • Improved cache service availability determination for different cache service versions (v1 and v2) #​2100
  • Enhanced server error handling: 5xx HTTP errors are now logged as errors instead of warnings #​2099
  • Fixed cache hit logging to properly distinguish between exact key matches and restore key matches #​2101
babel/babel (@​babel/core)

v7.28.4

Compare Source

🏠 Internal

v7.28.3

Compare Source

👓 Spec Compliance
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
🐛 Bug Fix
💅 Polish
  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime
📝 Documentation
🏠 Internal
🔬 Output optimization
  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
octokit/core.js (@​octokit/core)

v7.0.5

Compare Source

Bug Fixes

v7.0.4

Compare Source

Bug Fixes

v7.0.3

Compare Source

Bug Fixes
  • add createLogger to ensure that pino does not break (#​744) (0896c50)
octokit/plugin-paginate-rest.js (@​octokit/plugin-paginate-rest)

v13.2.0

Compare Source

Features
  • new Projects v2 endpoints, new code scanning dismissal endpoints, many other endpoints (#​690) (0e236cb)
octokit/plugin-rest-endpoint-methods.js (@​octokit/plugin-rest-endpoint-methods)

v16.1.0

Compare Source

Features
  • new Projects v2 endpoints, new code scanning dismissal endpoints, many other endpoints (#​814) (0a8fdd9)
streetsidesoftware/cspell (cspell)

v9.2.1

Compare Source

Dictionary Updates
fix: Workflow Bot -- Update Dictionaries (main) (#​7795)
fix: Workflow Bot -- Update Dictionaries (main) (#​7795)

v9.2.0

Compare Source

refactor: Support url based cache entries (#​7639)
refactor: Support url based cache entries (#​7639)

Features
fix: Support remote dependencies in cache (#​7642)
fix: Support remote dependencies in cache (#​7642)

Fixes
fix: Remove `flat-cache` dependency (#​7636)
fix: Remove flat-cache dependency (#​7636)

flat-cache v6 is not compatible with the cspell cache. Since flat-cache was mostly a pass through to flatted, it was better to just replace it.


refactor: move towards caching URLs (#​7634)
refactor: move towards caching URLs (#​7634)

fix: Support async cache (#​7631)
fix: Support async cache (#​7631)

fix: Replace file-entry-cache (#​6579)
fix: Replace file-entry-cache (#​6579)

Deprecating the use of file-entry-cache.

v10 of file-entry-cache breaks the spell checker and bloats the cache size.

This PR is the first step in reducing the dependency upon file-entry-cache and its dependencies.


fix: Clean cspell-lib type exports (#​7615)
fix: Clean cspell-lib type exports (#​7615)

Dictionary Updates
fix: Workflow Bot -- Update Dictionaries (main) (#​7618)
fix: Workflow Bot -- Update Dictionaries (main) (#​7618)

v9.1.5

Compare Source

Fixes
fix: Compile before publish (#​7610)
fix: Compile before publish (#​7610)

dprint/dprint (dprint)

v0.50.2

Compare Source

Changes

  • fix: upgrade wasmer to 6.1.0-rc.3 to fix build failure with Rust ≥ 1.89.0 (#​1021)
  • fix: ignore empty proxy env (#​1014)

Install

Run dprint upgrade or see https://dprint.dev/install/

Checksums

Artifact SHA-256 Checksum
dprint-x86_64-apple-darwin.zip 61becbf8d1b16540e364a4f00be704266ae322ee0ff3ba66a4a21033f66a8d55
dprint-aarch64-apple-darwin.zip f534bcc054947ab2a42c069b5f6027914d252729bd15c1109812313b35a662a5
dprint-x86_64-pc-windows-msvc.zip 2dbdb57106818acd930a00bc0c2c33370bd4c7265f78a6cda000e3621f2d3c1c
dprint-x86_64-pc-windows-msvc-installer.exe 0b2dab815dd68501b7418831157a907a4db89b84b623a71c1deb486a08244b83
dprint-x86_64-unknown-linux-gnu.zip 95c7e633a67531ffc4990c152d59ed0802e1c0caf7e27e424e9cea9ef3d499d4
dprint-x86_64-unknown-linux-musl.zip 4b0e7911262049ccb8e1ac5968bf7a66dc490968fe1552a123bb2d6dadf2ad95
dprint-aarch64-unknown-linux-gnu.zip 039d4dca4360cb6622a2b56c3fc29ea71c356cd954e0b9566bff1a70e75beda8
dprint-aarch64-unknown-linux-musl.zip a4982964a68aefc2720b4c79c51a57e49b32f8944c1641fd9e714503fcf01847
dprint-riscv64gc-unknown-linux-gnu.zip 6918c45b0070da1da137fa328c7ca82133c6ab0b49a651fa53513305611fe3a8
jprichardson/node-fs-extra (fs-extra)

v11.3.2

Compare Source

  • Fix spurrious UnhandledPromiseRejectionWarning that could occur when calling .copy() in some cases (#​1056, #​1058)

v11.3.1

Compare Source

  • Fix case where move/moveSync could incorrectly think files are identical on Windows (#​1050)
evilmartians/lefthook (lefthook)

v1.13.6

Compare Source

v1.13.5

Compare Source

v1.13.4

Compare Source

v1.13.3

Compare Source

v1.13.2

Compare Source

v1.13.1

Compare Source

v1.13.0

Compare Source

v1.12.4

Compare Source

v1.12.3

Compare Source

v1.12.2

Compare Source

v1.12.1

Compare Source

v1.12.0

Compare Source

  • feat: allow installing only specific hooks (#​1069)
  • refactor: [breaking] restructure files and folders, remove deprecated options (#​1067)
raineorshine/npm-check-updates (npm-check-updates)

v18.3.1

Compare Source

v18.3.0

Compare Source

v18.2.1

Compare Source

v18.2.0

Compare Source

Thanks to community members for raising awareness and to @​SebastianSedzik for the implementation.

See: #​1547

Feature: --cooldown

Usage:

ncu --cooldown [n]
ncu -c [n]

The cooldown option helps protect against supply chain attacks by requiring package versions to be published at least the given number of days before considering them for upgrade.

Note that previous stable versions will not be suggested. The package will be completely ignored if its latest published version is within the cooldown period. This is due to a limitation of the npm registry, which does not provide a way to query previous stable versions.

Example:

Let's examine how cooldown works with a package that has these versions available:

1.0.0          Released 7 days ago    (initial version)
1.1.0          Released 6 days ago    (minor update)
1.1.1          Released 5 days ago    (patch update)
1.2.0          Released 5 days ago    (minor update)
2.0.0-beta.1   Released 5 days ago    (beta release)
1.2.1          Released 4 days ago    (patch update)
1.3.0          Released 4 days ago    (minor update) [latest]
2.0.0-beta.2   Released 3 days ago    (beta release)
2.0.0-beta.3   Released 2 days ago    (beta release) [beta]

With default target (latest):

$ ncu --cooldown 5

No update will be suggested because:

  • Latest version (1.3.0) is only 4 days old.
  • Cooldown requires versions to be at least 5 days old
  • Use --cooldown 4 or lower to allow this update

With @beta/@tag target:

$ ncu --cooldown 3 --target @​beta

No update will be suggested because:

  • Current beta (2.0.0-beta.3) is only 2 days old
  • Cooldown requires versions to be at least 3 days old
  • Use --cooldown 2 or lower to allow this update

With other targets:

$ ncu --cooldown 5 --target greatest|newest|minor|patch|semver

Each target will select the best version that is at least 5 days old:

greatest → 1.2.0        (highest version number outside cooldown)
newest   → 2.0.0-beta.1 (most recently published version outside cooldown)
minor    → 1.2.0        (highest minor version outside cooldown)
patch    → 1.1.1        (highest patch version outside cooldown)

Note for latest/tag targets:

⚠️ For packages that update frequently (e.g. daily releases), using a long cooldown period (7+ days) with the default --target latest or --target @​tag may prevent all updates since new versions will be published before older ones meet the cooldown requirement. Please consider this when setting your cooldown period.

v18.1.1

Compare Source

v18.1.0

Compare Source

v18.0.3

Compare Source

v18.0.2

Compare Source

rollup/rollup (rollup)

v4.52.3

Compare Source

2025-09-27

Bug Fixes
  • Fix check in native loader for environments that do not support reports (#​6123)
Pull Requests

v4.52.2

Compare Source

2025-09-23

Bug Fixes
  • Fix Android build crashing due to failed dlopen (#​6109)
Pull Requests

v4.52.1

Compare Source

2025-09-23

Bug Fixes
  • Opt-out of dynamic import optimization when using top-level await to effectively prevent deadlocks (#​6121)
Pull Requests

v4.52.0

Compare Source

2025-09-19

Features
  • Add option output.onlyExplicitManualChunks to turn off merging additional dependencies into manual chunks (#​6087)
  • Add support for x86_64-pc-windows-gnu platform (#​6110)
Pull Requests

v4.51.0

Compare Source

2025-09-19

Features
  • Support ROLLUP_FILE_URL_OBJ placeholder to inject file URLs into the generated code (#​6108)
Bug Fixes
  • Improve OpenHarmony build to work in more situations (#​6115)
Pull Requests

v4.50.2

Compare Source

2025-09-15

Bug Fixes
  • Resolve an issue where unused destructured array pattern declarations would conflict with included variables (#​6100)
Pull Requests

v4.50.1

Compare Source

2025-09-07

Bug Fixes
  • Resolve a situation where a destructuring default value was removed (#​6090)
Pull Requests

v4.50.0

Compare Source

2025-08-31

Features
  • Support openharmony-arm64 platform (#​6081)
Bug Fixes
  • Fix loading of extensionless imports in config files (#​6084)
Pull Requests

v4.49.0

Compare Source

2025-08-27

Features
  • Allow config plugins to resolve imports first before deciding whether to treat them as external (#​6038)
Pull Requests

v4.48.1

Compare Source

2025-08-25

Bug Fixes
  • Correctly ignore white-space in JSX strings around line-breaks (#​6051)
Pull Requests

v4.48.0

Compare Source

2025-08-23

Features
  • If configured, also keep unparseable import attributes of external dynamic imports in the output(#​6071)
Bug Fixes
  • Ensure variables referenced in non-removed import attributes are included (#​6071)
Pull Requests

v4.47.1

Compare Source

2025-08-21

Bug Fixes
  • Revert build process changes to investigate issues (#​6077)
Pull Requests

v4.47.0

Compare Source

2025-08-21

Features
  • Aggressively reduce WASM build size (#​6053)
Bug Fixes
  • Fix illegal instruction error on Android ARM platforms (#​6072)
  • Allow to pass explicit undefined for optional fields in Rollup types (#​6061)
Pull Requests

v4.46.4

Compare Source

2025-08-20

Bug Fixes
  • Do not omit synthetic namespaces when only accessed via in operator (#​6052)
Pull Requests

v4.46.3

Compare Source

2025-08-18

Bug Fixes
  • Resolve illegal instruction error on arm64 architectures (#​6055)
  • Resolve sourcemap generation performance regression (#​6057)
Pull Requests

v4.46.2

Compare Source

2025-07-29

Bug Fixes
  • Fix in-operator handling for external namespace and when the left side cannot be analyzed (#​6041)
Pull Requests

v4.46.1

Compare Source

2025-07-28

Bug Fixes
  • Do not fail when using the in operator on external namespaces (#​6036)
Pull Requests

v4.46.0

[Compare Source](https://redirect.github.com/ro


Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (squash) July 12, 2025 02:03
@renovate renovate bot force-pushed the renovate/devdependencies branch 6 times, most recently from b5c3ecf to e0804f1 Compare July 19, 2025 02:04
@renovate renovate bot force-pushed the renovate/devdependencies branch 2 times, most recently from 2469cd4 to 57dc71a Compare July 23, 2025 03:32
@renovate renovate bot force-pushed the renovate/devdependencies branch 6 times, most recently from 3e1b342 to 78ede6b Compare August 2, 2025 11:32
@renovate renovate bot force-pushed the renovate/devdependencies branch 7 times, most recently from 1a1bb7c to 1e02704 Compare August 12, 2025 13:05
@renovate renovate bot force-pushed the renovate/devdependencies branch 7 times, most recently from 8e55e18 to 482494f Compare August 19, 2025 15:51
@renovate renovate bot force-pushed the renovate/devdependencies branch 5 times, most recently from 4832db0 to c1d841c Compare September 14, 2025 02:25
@renovate renovate bot force-pushed the renovate/devdependencies branch 9 times, most recently from 5253f5f to 380b58e Compare September 20, 2025 01:41
@renovate renovate bot force-pushed the renovate/devdependencies branch 11 times, most recently from 6e41f64 to e9745e4 Compare September 29, 2025 01:32
@renovate renovate bot force-pushed the renovate/devdependencies branch 3 times, most recently from 4a7eca5 to 835dbb1 Compare September 30, 2025 14:42
@renovate renovate bot force-pushed the renovate/devdependencies branch from 835dbb1 to 708762f Compare September 30, 2025 23:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants