Skip to content

fix(deps): update all non-major dependencies - #2731

Merged
ghiscoding merged 2 commits into
ghiscoding:masterfrom
renovate-bot:renovate/all-minor-patch
Aug 17, 2026
Merged

fix(deps): update all non-major dependencies#2731
ghiscoding merged 2 commits into
ghiscoding:masterfrom
renovate-bot:renovate/all-minor-patch

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Aug 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@faker-js/faker (source) ^10.5.0 → ^10.6.0 age confidence
@fluentui/react-components ^9.74.5 → ^9.74.6 age confidence
@fluentui/react-icons ^2.0.334 → ^2.0.337 age confidence
@hono/node-server ^2.1.0 → ^2.1.1 age confidence
@lerna-lite/cli (source) ^5.4.2 → ^5.6.0 age confidence
@lerna-lite/publish (source) ^5.4.2 → ^5.6.0 age confidence
@lerna-lite/watch (source) ^5.4.2 → ^5.6.0 age confidence
@vue/language-core (source) ^3.3.9 → ^3.3.10 age confidence
conventional-changelog-conventionalcommits (source) ^10.2.1 → ^10.3.0 age confidence
cssnano ^8.0.4 → ^8.0.5 age confidence
cypress (source) ^15.20.0 → ^15.20.1 age confidence
cypress-io/github-action v7.4.1 → v7.4.2 age confidence
esbuild ^0.28.1 → ^0.28.2 age confidence
globals ^17.9.0 → ^17.11.0 age confidence
hono (source) ^4.13.0 → ^4.13.2 age confidence
ip-address ^10.4.0 → ^10.5.0 age confidence
oxlint (source) ^1.77.0 → ^1.78.0 age confidence
postcss (source) ^8.5.25 → ^8.5.26 age confidence
vanilla-calendar-pro (source) ^3.1.0 → ^3.2.0 age confidence
vite (source) ^8.2.0 → ^8.2.1 age confidence
vue-tsc (source) ^3.3.9 → ^3.3.10 age confidence

Release Notes

faker-js/faker (@​faker-js/faker)

v10.6.0

Compare Source

New Locales
Features
Changed Locales
Bug Fixes
microsoft/fluentui (@​fluentui/react-components)

v9.74.6

Compare Source

microsoft/fluentui-system-icons (@​fluentui/react-icons)

v2.0.337

Compare Source

v2.0.336

Compare Source

v2.0.335

Compare Source

honojs/node-server (@​hono/node-server)

v2.1.1

Compare Source

What's Changed

Full Changelog: honojs/node-server@v2.1.0...v2.1.1

lerna-lite/lerna-lite (@​lerna-lite/cli)

v5.6.0

Compare Source

Features

v5.5.0

Compare Source

Note: Version bump only for package @​lerna-lite/cli

lerna-lite/lerna-lite (@​lerna-lite/publish)

v5.6.0

Compare Source

Features

v5.5.0

Compare Source

Features
Bug Fixes
lerna-lite/lerna-lite (@​lerna-lite/watch)

v5.6.0

Compare Source

Note: Version bump only for package @​lerna-lite/watch

v5.5.0

Compare Source

Note: Version bump only for package @​lerna-lite/watch

vuejs/language-tools (@​vue/language-core)

v3.3.10

Compare Source

language-core
  • fix: ignore trailing whitespace after generic parameter commas - Thanks to @​KazariEX!
  • fix: resolve v-for item type over generic sources (#​6141) - Thanks to @​serkodev!
  • fix: do not extract SFC blocks across inline Markdown code (#​6145) - Thanks to @​lazerg!
language-service
  • fix: serialize template data provider access across concurrent requests (#​6154) - Thanks to @​serkodev!
tsc
  • fix: support different extension sets across project references (#​6146) - Thanks to @​lazerg!
typescript-plugin
vscode
  • feat: patch typescript.js via --require to support read-only file systems (#​6149) - Thanks to @​serkodev!
  • fix: isolate custom TypeScript plugin paths between profiles (#​6148) - Thanks to @​serkodev!
conventional-changelog/conventional-changelog (conventional-changelog-conventionalcommits)

v10.3.0

Compare Source

Features
Bug Fixes
cssnano/cssnano (cssnano)

v8.0.5: v8.0.5

Compare Source

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.4...cssnano@8.0.5

cypress-io/cypress (cypress)

v15.20.1

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-20-1

cypress-io/github-action (cypress-io/github-action)

v7.4.2

Compare Source

Bug Fixes
evanw/esbuild (esbuild)

v0.28.2

Compare Source

  • Fix tree shaking bug due to TypeScript import alias (#​4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#​4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}

/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}

/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#​4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#​4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#​4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x
  bar(x ||= {})
}

// Old output (with --minify-syntax --target=es6)
function foo() {
  bar(void 0 || (x = {}));
}

// New output (with --minify-syntax --target=es6)
function foo() {
  let x;
  bar(x || (x = {}));
}

  • Fix a potential deadlock when the JavaScript API is used incorrectly (#​4503, #​4506)

    The JavaScript API runs the native esbuild executable as a long-lived child process and communicates with it over stdin/stdout/stderr. Each API request is asynchronous and the executable stays open as long as it has work to do, which is as long as either stdin is still open (meaning there may be more API requests) or there are currently requests being processed.

    Previously esbuild's tracking of outstanding API requests missed decrementing a reference count in an edge case where esbuild's JavaScript API was used incorrectly and the API request returned an error. This could in some cases cause esbuild's native executable to exit with an error message about a deadlock. This release fixes the reference counting bug.

    This fix was submitted by @​ZuBB.

  • Handle target collisions (#​4509)

    It's possible to specify the same target engine multiple times, such as with --target=chrome1,chrome99. This edge case wasn't anticipated and previously took the last version for the duplicated target engine instead of the minimum version (so chrome99 in this case instead of chrome1). With this release, esbuild will now pick the minimum version between all duplicated target engines.

  • Force .mp3 files to use the audio/mpeg MIME type (#​4485)

    MIME type detection for esbuild's data URLs uses Go's built-in MIME type detection, which is based on the MIME sniffing standard. This works correctly for MP3 files that start with the byte sequence ID3, which is commonly the case. However, it's possible to construct valid MP3 files that do not start with ID3, and that perhaps Go's built-in MIME type detection doesn't implement the "Signature for MP3 without ID3" part of the algorithm. This results in some .mp3 files incorrectly using the application/octet-stream MIME type instead of audio/mpeg. With this release, esbuild will now always use the audio/mpeg MIME type for files ending in .mp3.

  • Add a new TypeScript syntax warning

    TypeScript 7 turned some previously-valid TypeScript syntax into a syntax error because it was confusing. TypeScript 6 accepts 1 + 2 as number * 3 as valid syntax but confusingly converts it to (1 + 2) * 3 instead of the more intuitive conversion to 1 + (2 * 3). This syntax is now an error in TypeScript 7+. With this release, esbuild will now warn about the use of this syntax:

    ▲ [WARNING] Operator "*" should not directly follow a TypeScript type cast after the "+" operator [confusing-typescript-cast]

    example.ts:1:28:
      1 │ console.log(1 + 2 as number * 3)
        ╵                             ^

  This is a syntax error in newer versions of TypeScript because the type cast has unintuitive
  precedence in this case. Surround the inner expression in parentheses to silence this warning:

    example.ts:1:12:
      1 │ console.log(1 + 2 as number * 3)
        │             ~~~~~~~~~~~~~~~
        ╵             (             )

    See microsoft/TypeScript#63527 for more information.

  • Add support for formatting errors for Visual Studio (#​4460)

    Visual Studio has a specific style that it expects log messages to be in for them to show up in the UI when esbuild is run as a custom build step. The current log style that esbuild uses doesn't conform to this specific style.

    With this release, esbuild has a new log style for Visual Studio (and other tools in the MSBuild ecosystem) that can be enabled with --log-style=visualstudio. Here is an example log message in this style:

    $ esbuild example.ts --log-style=visualstudio
/Users/evan/dev/esbuild/example.ts(1,29): warning ES0010: Operator "*" should not directly follow a TypeScript type cast after the "+" operator

    This log style is also available via the JS and Go APIs, and can now be used with the existing formatMessages API.

  • Fix a bug with CSS gamut mapping (#​4488)

    Due to a typo, the fallback colors generated for CSS colors outside of the sRGB gamut weren't correct. This release fixes the generated colors to use the intended algorithm.

    This fix was submitted by @​chatman-media.

sindresorhus/globals (globals)

v17.11.0

Compare Source

v17.10.0

Compare Source

honojs/hono (hono)

v4.13.2

Compare Source

What's Changed

  • fix(secure-headers): output standard empty parentheses () instead of none for disabled Permissions-Policy directives in #​5197
  • fix(jsx): render async children of document metadata tags instead of [object Promise] in #​5204
  • fix(etag): resolve incorrect incremental hashing for chunked responses in #​5199
  • fix(client): serialize multiple cookies correctly in #​5202
  • fix(etag): stabilize digest across stream chunks in #​5205
  • fix(url): strip trailing question mark correctly for optional params with regex quantifiers in #​5209
  • perf(cors): pre-join static array header options during initialization in #​5210
  • fix(client): send falsy JSON bodies in #​5215
  • feat(secure-headers): add missing W3C Permissions-Policy directives in #​5214

Full Changelog: honojs/hono@v4.13.1...v4.13.2

v4.13.1

Compare Source

beaugunderson/ip-address (ip-address)

v10.5.0

Compare Source

What's Changed

Full Changelog: beaugunderson/ip-address@v10.4.0...v10.5.0

oxc-project/oxc (oxlint)

v1.78.0

Compare Source

🚀 Features
  • ccb8fe8 linter/jsdoc: Implement no-blank-blocks rule (#​25207) (Mikhail Baev)
  • d4a897c linter/eslint: Implement one-var rule (#​24470) (Cole Ellison)
  • 5ab9340 linter/jsx-a11y/anchor-has-content: Add options to match eslint (#​24571) (Cole Ellison)
🐛 Bug Fixes
  • 9573937 linter/typescript: Validate ban-ts-comment description_format (#​25320) (Mikhail Baev)
postcss/postcss (postcss)

v8.5.26

Compare Source

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).
uvarov-frontend/vanilla-calendar-pro (vanilla-calendar-pro)

v3.2.0

Compare Source

Highlights

  • Added support for initializing calendars inside a Shadow DOM.
  • Exposed built-in theme colors as CSS custom properties.
  • Added date-range keys for popups, so one popup can apply to an entire range.
  • Improved accessibility for date, month, and year views.
  • Fixed ISO week numbers, date handling across time zones, input cleanup, and initial disabled-date behavior.

PRs

  • #​399 Add Dependabot configuration for GitHub Actions
  • #​400 demo: Change language attribute from en to ru
  • #​401 build(deps): bump the github-actions group with 2 updates
  • #​404 build(deps): bump the github-actions group with 2 updates
  • #​410 fix: improve ARIA grid structure for Month and Year views
  • #​416 build(deps): bump actions/checkout from 6 to 7 in the github-actions group
  • #​419 fix: reset displayDateMin/displayDateMax via null in .set()
  • #​420 fix: use local date components instead of UTC ISO string for Date input
  • #​421 fix: don't remove original input when destroying calendar before it was ever opened
  • #​422 fix: correct off-by-one in ISO week number calculation
  • #​423 docs: document monthsToSwitch's effect on month-picker selectable months
  • #​424 fix: apply disableDatesGaps to pre-selected selectedDates on init
  • #​425 fix: resolve axe-core ARIA violations
  • #​426 feat: support date-range keys in popups
  • #​427 feat: expose theme colors as CSS custom properties
  • #​428 feat: support initializing calendars inside a Shadow DOM

Credits

Thank you to @​coliff and @​fro9-dev for your contributions.

vitejs/vite (vite)

v8.2.1

Compare Source

Bug Fixes
Performance Improvements
Documentation
Miscellaneous Chores
Code Refactoring
Tests

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every 4 weeks on friday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate Bot added 📦 dependencies Pull requests that update a dependency file 🤖 bot labels Aug 14, 2026
@renovate-bot renovate-bot added 📦 dependencies Pull requests that update a dependency file 🤖 bot labels Aug 14, 2026
@codecov

codecov Bot commented Aug 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.0%. Comparing base (eaf7515) to head (4277e35).

Additional details and impacted files 
@@           Coverage Diff           @@
##           master    #2731   +/-   ##
=======================================
  Coverage   100.0%   100.0%           
=======================================
  Files         200      200           
  Lines       25559    25559           
  Branches     9037     9037           
=======================================
  Hits        25559    25559
Flag Coverage Δ
angular 100.0% <ø> (ø)
universal 100.0% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@pkg-pr-new

pkg-pr-new Bot commented Aug 14, 2026 •
edited
Loading

Copy link
Copy Markdown
angular-slickgrid

npm i https://pkg.pr.new/angular-slickgrid@2731

aurelia-slickgrid

npm i https://pkg.pr.new/aurelia-slickgrid@2731

slickgrid-react

npm i https://pkg.pr.new/slickgrid-react@2731

slickgrid-vue

npm i https://pkg.pr.new/slickgrid-vue@2731

@slickgrid-universal/angular-row-detail-plugin

npm i https://pkg.pr.new/@slickgrid-universal/angular-row-detail-plugin@2731

@slickgrid-universal/aurelia-row-detail-plugin

npm i https://pkg.pr.new/@slickgrid-universal/aurelia-row-detail-plugin@2731

@slickgrid-universal/react-row-detail-plugin

npm i https://pkg.pr.new/@slickgrid-universal/react-row-detail-plugin@2731

@slickgrid-universal/vue-row-detail-plugin

npm i https://pkg.pr.new/@slickgrid-universal/vue-row-detail-plugin@2731

@slickgrid-universal/binding

npm i https://pkg.pr.new/@slickgrid-universal/binding@2731

@slickgrid-universal/common

npm i https://pkg.pr.new/@slickgrid-universal/common@2731

@slickgrid-universal/composite-editor-component

npm i https://pkg.pr.new/@slickgrid-universal/composite-editor-component@2731

@slickgrid-universal/custom-footer-component

npm i https://pkg.pr.new/@slickgrid-universal/custom-footer-component@2731

@slickgrid-universal/custom-tooltip-plugin

npm i https://pkg.pr.new/@slickgrid-universal/custom-tooltip-plugin@2731

@slickgrid-universal/empty-warning-component

npm i https://pkg.pr.new/@slickgrid-universal/empty-warning-component@2731

@slickgrid-universal/event-pub-sub

npm i https://pkg.pr.new/@slickgrid-universal/event-pub-sub@2731

@slickgrid-universal/excel-export

npm i https://pkg.pr.new/@slickgrid-universal/excel-export@2731

@slickgrid-universal/graphql

npm i https://pkg.pr.new/@slickgrid-universal/graphql@2731

@slickgrid-universal/odata

npm i https://pkg.pr.new/@slickgrid-universal/odata@2731

@slickgrid-universal/pagination-component

npm i https://pkg.pr.new/@slickgrid-universal/pagination-component@2731

@slickgrid-universal/pdf-export

npm i https://pkg.pr.new/@slickgrid-universal/pdf-export@2731

@slickgrid-universal/row-detail-view-plugin

npm i https://pkg.pr.new/@slickgrid-universal/row-detail-view-plugin@2731

@slickgrid-universal/rxjs-observable

npm i https://pkg.pr.new/@slickgrid-universal/rxjs-observable@2731

@slickgrid-universal/sql

npm i https://pkg.pr.new/@slickgrid-universal/sql@2731

@slickgrid-universal/text-export

npm i https://pkg.pr.new/@slickgrid-universal/text-export@2731

@slickgrid-universal/utils

npm i https://pkg.pr.new/@slickgrid-universal/utils@2731

@slickgrid-universal/vanilla-bundle

npm i https://pkg.pr.new/@slickgrid-universal/vanilla-bundle@2731

@slickgrid-universal/vanilla-force-bundle

npm i https://pkg.pr.new/@slickgrid-universal/vanilla-force-bundle@2731

@slickgrid-universal/web-mcp

npm i https://pkg.pr.new/@slickgrid-universal/web-mcp@2731

commit: 4277e35

@renovate-bot
renovate-bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 18b54f4 to d0f3513 Compare August 17, 2026 20:06
@renovate-bot
renovate-bot force-pushed the renovate/all-minor-patch branch from d0f3513 to 4277e35 Compare August 17, 2026 20:10
@ghiscoding
ghiscoding merged commit ff1a3c0 into ghiscoding:master Aug 17, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

🤖 bot 📦 dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@renovate-bot @ghiscoding