fix(deps): update external fixes

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@semantic-release/git	11.0.0 → 11.0.1
fs-extra	11.3.0 → 11.4.0
lint-staged	17.0.4 → 17.3.0
mocha (source)	11.7.1 → 11.8.0
moo	0.5.2 → 0.5.3
semantic-release	25.0.3 → 25.0.9
source-map	0.7.4 → 0.8.0

---

Release Notes

semantic-release/git (@​semantic-release/git)

v11.0.1

Compare Source

Bug Fixes

• deps: update dependency execa to v10 (#​564) (b39d5c6)

jprichardson/node-fs-extra (fs-extra)

v11.4.0

Compare Source

• Proper EEXIST error when trying to create a symlink and the dest already exists as a broken symlink (#​925, #​1076)

v11.3.6

Compare Source

• Fix handling of symlinked destination ancestors in copy/move methods (#​1071, #​1073)
• Docs typo fixed (#​1074)

v11.3.5

Compare Source

• Fix ensureLink*/ensureSymlink* identical file detection on Windows (#​1068)
• Fix error handling in timestamp preservation code (#​1065, #​1069)
• Fix potential file descriptor leak on error in synchronous timestamp preservation code (#​1066)

v11.3.4

Compare Source

• Fix bug where calling ensureSymlink/ensureSymlinkSync with a relative srcPath would fail if the symlink already existed (#​1038, #​1064)

v11.3.3

Compare Source

• Fix copying symlink when destination is a symlink to the same target (#​1019, #​1060)

v11.3.2

Compare Source

• Fix spurrious UnhandledPromiseRejectionWarning that could occur when calling .copy() in some cases (#​1056, #​1058)

v11.3.1

Compare Source

• Fix case where move/moveSync could incorrectly think files are identical on Windows (#​1050)

lint-staged/lint-staged (lint-staged)

v17.3.0

Compare Source

Minor Changes

• #​1825 16b3f74 - It is now possible to run multiple tasks in parallel for a single glob by configuring it with an array of tasks (which run sequentially), and then placing another array inside it (where the tasks will run in parallel). The following demonstrates the order tasks will start in:

  {
    "*.ts": ["first", "second", ["third", "third"], "fourth"]
  }

  As a concrete example, lint-staged's own configuration is:

  /** @type {import('./lib/index.js').Configuration} */
  export default {
    "*": [
      [
        "oxfmt --check --no-error-on-unmatched-pattern",
        "oxlint --no-error-on-unmatched-pattern",
      ],
    ],
    "*.ts": () => "tsc",
  };

  which means:

  1. for all staged files, run the two commands in parallel with staged filenames appended, for example:
     • oxfmt --check --no-error-on-unmatched-pattern lib/index.js
     • oxlint --no-error-on-unmatched-pattern lib/index.js
  2. additionally, if any *.ts files are staged, run tsc without appending any arguments
  3. The two sets of commands also run in parallel

Patch Changes

• #​1829 15f7e53 - During an in-progress merge, files that are unchanged from the branch being merged are now skipped. Technically, files are only included if there are staged changes against both HEAD and MERGE_HEAD.

v17.2.0

Compare Source

Minor Changes

• #​1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
  };

  Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

  Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.js": {
      title: "Log staged JS files to console",
      task: async (files) => {
        console.log("Staged JS files:", files);
      },
    },
  };

v17.1.1

Compare Source

Patch Changes

• #​1820 a626a9f - It's now possible to set --max-arg-length=Infinity to effectively disable chunking of tasks based on the number of staged files. The parsing and validation of the numeric CLI options --max-arg-length and --concurrency has been improved.

v17.1.0

Compare Source

Minor Changes

• #​1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

  Before:

  Size of node_modules/ after installing: 1561.7 kB with 29 packages.

  Fancy interactive spinners, but output dynamically changes:

  ✔ Backed up original state in git stash (0b191303)
  ✔ Running tasks for staged files...
  ✔ Staging changes from tasks...
  ✔ Cleaning up temporary files...

  After:

  Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

  Simpler but more explicit output:

  ⋯ Backing up original state…
  ✔ Done backing up original state (35b38ed1)!
  ⋯ Running tasks for staged files…
      *.js — 1 file
        ⋯ oxlint --fix
      *.{json,md} — 1 file
        ⋯ oxfmt --write
  
  ✔ oxfmt --write
  ✔ oxlint --fix
  
  ✔ Done running tasks for staged files!
  ⋯ Staging changes from tasks…
  ✔ Done staging changes from tasks!
  ⋯ Cleaning up temporary files…
  ✔ Done cleaning up temporary files!

Patch Changes

• #​1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

• #​1818 efb23a2 - Console output colors are enabled/disabled more consistently.

• #​1818 26112a1 - Failed JS function tasks now properly kill other tasks, unless --continue-on-error is used. Previously their failure didn't affect other tasks.

v17.0.8

Compare Source

Patch Changes

• #​1809 179b437 - Fix lint-staged discarding the ongoing merge conflict status (.git/MERGE_HEAD) when using the --hide-unstaged or --hide-all options.

• #​1811 3d0b2c0 - Fix issues with Git commands that are successful but also emit warnings to stderr, by ignoring the stderr output completely when the process exits with code 0. This was the behavior when using nano-spawn and execa, but when switching to tinyexec in 16.3.0 both stdout and stderr were used as interleaved output.

v17.0.7

Compare Source

Patch Changes

• #​1806 e692e58 - Update dependency tinyexec@^1.2.4.

v17.0.6

Compare Source

Patch Changes

• #​1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

• #​1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

• #​1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

• #​1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

v17.0.5

Compare Source

Patch Changes

• #​1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.

mochajs/mocha (mocha)

v11.8.0

Compare Source

v11.7.6

Compare Source

🩹 Fixes

• make describe().timeout() work (aafe6fd)
• test: replace wmic usage with native Windows API (#​5694) (73ebdfa)

🧹 Chores

• format all code (#​5629) (0696784)
• remove Netlify (#​5630) (8d01d33)

v11.7.5

Compare Source

🩹 Fixes

• swallow more require errors from *ts files (#​5498) (d89dbaf)

🧹 Chores

• run tests on PRs for and pushes to v11.x (#​5525) (8b21b38)
• setup release-please for v11 (#​5522) (663fff4)

v11.7.4

Compare Source

🩹 Fixes

• watch mode using chokidar v4 (#​5379) (c2667c3)

📚 Documentation

• migrate remaining legacy wiki pages to main documentation (#​5465) (bff9166)

🧹 Chores

• remove trailing spaces (#​5475) (7f68e5c)

v11.7.3

Compare Source

🩹 Fixes

• use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#​5408) (ebdbc48)

📚 Documentation

• add security escalation policy (#​5466) (4122c7d)
• fix duplicate global leak documentation (#​5461) (1164b9d)
• migrate third party UIs wiki page to docs (#​5434) (6654704)
• update maintainer release notes for release-please (#​5453) (185ae1e)

🤖 Automation

• deps: bump actions/setup-node in the github-actions group (#​5459) (48c6f40)

v11.7.2

Compare Source

🩹 Fixes

• fail with an informative error message on a file with a broken default import (#​5413) (b0e6135)
• load mjs files correctly (#​5429) (a947b9b)

📚 Documentation

• add banner from old site to new site, link from new to old (#​5414) (dedef11)
• add info on spies to legacy docs (#​5421) (21f5544)
• explain node import swallowing error (#​5401) (09f5b2c)
• fix links in new site (#​5416) (b2bc769)
• migrate assertion libraries wiki link to main docs (#​5442) (95f3ca8)
• migrate count assertions wiki page to docs (#​5438) (02a306c)
• migrate shared behaviours to docs-next (#​5432) (1dc4aa9)
• migrate Spies wiki page to explainers (#​5420) (cbcf007)
• Migrate tagging wiki page to docs (#​5435) (876247a)
• migrate third party reporters wiki page to docs (#​5433) (f70764c)
• migrate to global leak wiki page to docs (#​5437) (8a6fdca)
• update /next bug report link to be docs issue template (#​5424) (668cb66)

🧹 Chores

• add issue form for ⚡️ Performance (#​5406) (a908b3b)
• add test for -R import-only-loader (#​5391) (6ee5b48)
• also test Node.js 24 in CI (#​5405) (15f5980)
• bump CI to use 20.19.4, 22.18.0, 24.6.0 (#​5430) (ace5eb4)
• bump Knip to 5.61.2 (#​5394) (f3d7430)
• cleanup references of --opts (#​5402) (1096b37)
• enabled ESLint's no-unused-vars (#​5399) (d4168ae)
• move callback and object typedefs to a new types.d.ts (#​5351) (3300d21)
• rewrite base path instead of copy-pasting (#​5431) (c6c6740)
• unify caught errors as err (#​5439) (d4912e7)
• Update experimental module detection test and pin exact Node versions (#​5417) (2489090)

🤖 Automation

• deps: bump actions/checkout in the github-actions group (#​5419) (03ac2d0)

tjvr/moo (moo)

v0.5.3

Compare Source

semantic-release/semantic-release (semantic-release)

v25.0.9

Compare Source

Bug Fixes

• do not expose the authenticated repository URL in EGITNOPERMISSION errors (#​4283) (8d905a5)

v25.0.8

Compare Source

Bug Fixes

• handle potential null values in commit message and gitTags trimming (0a60004)
• hide-sensitive: mask key/auth/webhook env vars (973d763)
• mask sensitive environment variables and improve commit handling (#​4252) (1bfdc52)
• prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

Compare Source

Bug Fixes

• argument Injection via repositoryUrl in package.json (#​4245) (c46dbda)

v25.0.6

Compare Source

Bug Fixes

• ensure encoded secrets get masked (8e28dd3)

v25.0.5

Compare Source

Bug Fixes

• revert: next (#​4200) (db8ffaa)

v25.0.4

Compare Source

Bug Fixes

• code-quality: add missing comma in context object for consistency (493d6cd)

mozilla/source-map (source-map)

v0.8.0

Compare Source

• [#​528] #​528
  Adding security policy
• [#​525] #​525
  Use Object.create for sourceContents
• [#​520] #​520
  Fixes types for SourceMapConsumer.initialize

v0.7.6

Compare Source

• Bump package to 0.7.6 and remove publishConfig property in package.json (801be934007c3ed0ef66c620641b1668e92c891d)

v0.7.5

Compare Source

• #​364 -
  Pass through the implementation of more index map operations.
• #​362 -
  Remove the bundled dist/ directory?
• #​363 -
  Split up wasm loading based on compilation target.
• #​371 -
  Use WHATWG's URL to implement all of source-map's URL operations.
• #​378 -
  Fix typo
• #​384 -
  Add Mozilla Code of Conduct in
• #​402 -
  Remove unused fromVLQSigned function
• #​374 -
  Add lastGeneratedColumn to typing for MappingItem
• #​395 -
  addMapping(): ensure that originalLine and originalColumn are null when original argument was undefined/null
• #​394 -
  fix crash in url util function due to undefined root value
• #​393 -
  minor binary-search code/comment fixes
• #​407 -
  use Travis CI svg badge
• #​397 -
  add prettier task for standardized code formatting => easier cross-branch/fork code comparison and merging
• #​415 -
  Syntax highlight README HTML sample
• #​439 -
  Add function to SourceMapConsumer TS interface
• #​448 -
  Include types file extension in package.json
• #​464 -
  Require Node.js 12 or later & switch CI to GitHub Actions
• #​466 -
  Skip updating coveralls.io coverage
• #​465 -
  Update WASM binary and Land WASM rust sources in this repository
• #​463 -
  Update ESLint & Prettier to latest
• #​467 -
  Adopt & enforce the mozilla-central Prettier config
• #​468 -
  Simplify coverage tooling
• #​469 -
  Update to doctoc v2 & simplify call pattern
• #​470 -
  Filter out unnecessary rust tasks
• #​471 -
  Improve coverage
• #​472 -
  Include package-lock.json in repo
• #​473 -
  fix: convert result of allocate_mappings from signed to unsigned
• #​481 -
  Add support for the sourcemaps ignorelist
• #​485 -
  Remove .DS_Store
• #​488 -
  Fix reference to LICENSE file
• #​507 -
  Fix an off-by-1 error in section lookup
• #​505 -
  Add source map spec tests
• #​517 -
  Remove whatwg-url module

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • "after 2pm on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

This PR will trigger a patch release when merged.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!