Skip to content

chore(monorepo): update auto-merge non-major dependencies#6

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/auto-merge-non-major-dependencies
Open

chore(monorepo): update auto-merge non-major dependencies#6
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/auto-merge-non-major-dependencies

Conversation

@renovate

@renovate renovate Bot commented Jan 3, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@microsoft/api-extractor (source) ^7.49.2 → ^7.58.9 age confidence pnpm.catalog.default minor
@nx/devkit (source) 22.7.2 → 22.7.5 age confidence pnpm.catalog.default patch
@nx/eslint-plugin (source) 22.7.2 → 22.7.5 age confidence pnpm.catalog.default patch
@nx/jest (source) 22.7.2 → 22.7.5 age confidence pnpm.catalog.default patch
@nx/js (source) 22.7.2 → 22.7.5 age confidence pnpm.catalog.default patch
@nx/plugin (source) 22.7.2 → 22.7.5 age confidence pnpm.catalog.default patch
@nx/workspace (source) 22.7.2 → 22.7.5 age confidence pnpm.catalog.default patch
@swc/core (source) 1.15.8 → 1.15.41 age confidence pnpm.catalog.default patch
@swc/helpers (source) 0.5.19 → 0.5.23 age confidence pnpm.catalog.default patch
@swc/wasm ^1.11.24 → ^1.15.41 age confidence pnpm.catalog.default minor
@types/web ^0.0.302 → ^0.0.350 age confidence pnpm.catalog.default patch
cookie >=0.7.0 → >=0.7.2 age confidence pnpm-workspace.overrides patch
debug >=4.4.0 → >=4.4.3 age confidence pnpm-workspace.overrides patch
defu ^6.1.4 → ^6.1.7 age confidence pnpm.catalog.default patch
follow-redirects >=1.15.9 → >=1.16.0 age confidence pnpm-workspace.overrides minor
got >=14.4.5 → >=14.6.6 age confidence pnpm-workspace.overrides minor
jiti ^2.4.2 → ^2.7.0 age confidence pnpm.catalog.default minor
markdown-it >=14.1.0 → >=14.2.0 age confidence pnpm-workspace.overrides minor
node (source) 24.11.1 → 24.16.0 age confidence minor
node (source) >=24.11.1 → >=24.16.0 age confidence engines minor
parse-path >=7.0.0 → >=7.1.0 age confidence pnpm-workspace.overrides minor
path-to-regexp >=0.1.12 → >=0.2.5 age confidence pnpm-workspace.overrides minor
pnpm (source) 10.26.0 → 10.34.3 age confidence packageManager minor
pnpm (source) >=10.24.0 → >=10.34.3 age confidence engines minor
sharp (source, changelog) ^0.34.5 → ^0.35.1 age confidence pnpm.catalog.default minor
shell-quote >=1.8.2 → >=1.8.4 age confidence pnpm-workspace.overrides patch
simple-git (source) >=3.27.0 → >=3.36.0 age confidence pnpm-workspace.overrides minor
ts-jest (source) 29.4.6 → 29.4.11 age confidence pnpm.catalog.default patch
unbuild ^3.3.1 → ^3.6.1 age confidence pnpm.catalog.default minor
verdaccio (source) 6.6.2 → 6.7.2 age confidence pnpm.catalog.default minor

Release Notes

microsoft/rushstack (@​microsoft/api-extractor)

v7.58.9

Compare Source

Sat, 13 Jun 2026 00:16:18 GMT

Version update only

v7.58.8

Compare Source

Mon, 08 Jun 2026 15:15:49 GMT

Patches
  • Add support for new d.ts extension format when using TS moduleResolution 'bundler' or 'nodenext'.

v7.58.7

Compare Source

Mon, 20 Apr 2026 23:31:13 GMT

Version update only

v7.58.6

Compare Source

Mon, 20 Apr 2026 15:15:24 GMT

Patches
  • Fix an issue where empty lines were included in DTS rollups in place of API items that were trimmed.

v7.58.5

Compare Source

Sat, 18 Apr 2026 03:47:10 GMT

Version update only

v7.58.4

Compare Source

Sat, 18 Apr 2026 00:15:16 GMT

Patches
  • Bump semver.

v7.58.3

Compare Source

Fri, 17 Apr 2026 15:14:57 GMT

Patches
  • Remove dependecy on lodash.

v7.58.2

Compare Source

Thu, 09 Apr 2026 00:15:07 GMT

Version update only

v7.58.1

Compare Source

Sat, 04 Apr 2026 00:14:00 GMT

Patches

v7.58.0

Compare Source

Wed, 01 Apr 2026 15:13:38 GMT

Minor changes
  • Upgrade the bundled compiler engine to TypeScript 5.9.3

v7.57.8

Compare Source

Tue, 31 Mar 2026 15:14:14 GMT

Version update only

v7.57.7

Compare Source

Mon, 09 Mar 2026 15:14:07 GMT

Patches
  • Bump minimatch version from 10.2.1 to 10.2.3 to address CVE-2026-27903.

v7.57.6

Compare Source

Wed, 25 Feb 2026 21:39:42 GMT

Patches

v7.57.5

Compare Source

Wed, 25 Feb 2026 00:34:29 GMT

Version update only

v7.57.4

Compare Source

Tue, 24 Feb 2026 01:13:27 GMT

Version update only

v7.57.3

Compare Source

Mon, 23 Feb 2026 00:42:21 GMT

Patches
  • Add missing "./extends/*.json" to the package.json "exports" field so that "@​microsoft/api-extractor/extends/tsdoc-base.json" is importable.

v7.57.2

Compare Source

Fri, 20 Feb 2026 16:14:49 GMT

Patches
  • Bump minimatch from 10.1.2 to 10.2.1

v7.57.1

Compare Source

Fri, 20 Feb 2026 00:15:03 GMT

Patches
  • Add "node" condition before "import" in the "exports" map so that Node.js uses the CJS output (which handles extensionless imports), while bundlers still use ESM via "import". Fixes #​5644.

v7.57.0

Compare Source

Thu, 19 Feb 2026 00:04:52 GMT

Minor changes
  • Normalize package layout. CommonJS is now under lib-commonjs, DTS is now under lib-dts, and ESM is now under lib-esm. Imports to lib still work as before, handled by the "exports" field in package.json.

v7.56.3

Compare Source

Sat, 07 Feb 2026 01:13:26 GMT

Patches
  • Upgrade lodash dependency from ~4.17.15 to ~4.17.23.

v7.56.2

Compare Source

Wed, 04 Feb 2026 20:42:47 GMT

Patches
  • Update minimatch dependency from 10.0.3 to 10.1.2

v7.56.1

Compare Source

Wed, 04 Feb 2026 16:13:27 GMT

Version update only

v7.56.0

Compare Source

Fri, 30 Jan 2026 01:16:12 GMT

Minor changes
  • Fix an issue where destructured parameters produced an incorrect parameter name

v7.55.5

Compare Source

Thu, 08 Jan 2026 01:12:30 GMT

Patches
  • Fix missing 'export' keyword for namespace re-exports that produced invalid TypeScript output

v7.55.2

Compare Source

Sat, 06 Dec 2025 01:12:28 GMT

Version update only

v7.55.1

Compare Source

Fri, 21 Nov 2025 16:13:56 GMT

Version update only

v7.55.0

Compare Source

Wed, 12 Nov 2025 01:12:56 GMT

Minor changes
  • Bump the @microsoft/tsdoc dependency to ~0.16.0.
  • Bump the @microsoft/tsdoc-config dependency to ~0.18.0.

v7.54.0

Compare Source

Tue, 04 Nov 2025 08:15:14 GMT

Minor changes
  • Add a new setting IExtractorInvokeOptions.printApiReportDiff that makes build logs easier to diagnose by printing a diff of any changes to API report files (*.api.md).
  • Add a --print-api-report-diff CLI flag that causes a diff of any changes to API report files (*.api.md) to be printed.

v7.53.3

Compare Source

Fri, 24 Oct 2025 00:13:38 GMT

Version update only

v7.53.2

Compare Source

Wed, 22 Oct 2025 00:57:54 GMT

Version update only

v7.53.1

Compare Source

Wed, 08 Oct 2025 00:13:28 GMT

Version update only

v7.53.0

Compare Source

Fri, 03 Oct 2025 20:09:59 GMT

Minor changes
  • Normalize import of builtin modules to use the node: protocol.

v7.52.15

Compare Source

Tue, 30 Sep 2025 23:57:45 GMT

Version update only

v7.52.14

Compare Source

Tue, 30 Sep 2025 20:33:51 GMT

Version update only

v7.52.13

Compare Source

Fri, 12 Sep 2025 15:13:07 GMT

Patches
  • Fixes a bug in ExtractorAnalyzer._isExternalModulePath where type import declarations were not resolved.

v7.52.12

Compare Source

Thu, 11 Sep 2025 00:22:31 GMT

Version update only

v7.52.11

Compare Source

Tue, 19 Aug 2025 20:45:02 GMT

Patches
  • Fix self-package import resolution by removing outDir/declarationDir from compiler options

v7.52.10

Compare Source

Fri, 01 Aug 2025 00:12:48 GMT

Patches
  • Upgrades the minimatch dependency from ~3.0.3 to 10.0.3 across the entire Rush monorepo to address a Regular Expression Denial of Service (ReDoS) vulnerability in the underlying brace-expansion dependency.

v7.52.9

Compare Source

Wed, 23 Jul 2025 20:55:57 GMT

Version update only

v7.52.8

Compare Source

Tue, 13 May 2025 02:09:20 GMT

Patches
  • Fixes API extractor error handling when changed APIs are encountered and the "--local" flag is not specified

v7.52.7

Compare Source

Thu, 01 May 2025 15:11:33 GMT

Patches
  • Fix an issue where default exports were sometimes trimmed incorrectly in .api.md files when using reportVariants (GitHub #​4775)

v7.52.6

Compare Source

Thu, 01 May 2025 00:11:12 GMT

Version update only

v7.52.5

Compare Source

Mon, 21 Apr 2025 22:24:25 GMT

Version update only

v7.52.4

Compare Source

Thu, 17 Apr 2025 00:11:21 GMT

Patches
  • Update documentation for extends

v7.52.3

Compare Source

Fri, 04 Apr 2025 18:34:35 GMT

Patches
  • Add support for customizing which TSDoc tags appear in API reports

v7.52.2

Compare Source

Tue, 25 Mar 2025 15:11:15 GMT

Version update only

v7.52.1

Compare Source

Tue, 30 Sep 2025 23:57:45 GMT

Version update only

v7.52.0

Compare Source

Tue, 11 Mar 2025 00:11:25 GMT

Minor changes
  • Upgrade the bundled compiler engine to TypeScript 5.8.2

v7.51.1

Compare Source

Sat, 01 Mar 2025 05:00:09 GMT

Patches
  • Include triple-slash references marked with preserve="true" from files that only contain re-exports. There was a behavior change in TypeScript 5.5, where only triple-slash references that are explicitly marked with preserve="true" are emitted into declaration files. This change adds support for placing these references in files that only contain re-exports, like the API entrypoint file.

v7.51.0

Compare Source

Thu, 27 Feb 2025 01:10:39 GMT

Minor changes
  • Add a docModel.releaseTagsToTrim property to api-extractor.json to specify which release tags should be trimmed when the doc model is produced.

v7.50.1

Compare Source

Sat, 22 Feb 2025 01:11:11 GMT

Patches
  • Upgrade the bundled compiler engine to TypeScript 5.7.3

v7.50.0

Compare Source

Wed, 12 Feb 2025 01:10:52 GMT

Minor changes
  • Update merge behavior for derived configurations to allow overriding array properties
nrwl/nx (@​nx/devkit)

v22.7.5

Compare Source

22.7.5 (2026-05-27)
🩹 Fixes
❤️ Thank You

v22.7.4

Compare Source

22.7.4 (2026-05-25)
🩹 Fixes
  • core: update brace-expansion and yaml (#​35790)
❤️ Thank You

v22.7.3

Compare Source

22.7.3 (2026-05-22)

🚀 Features
🩹 Fixes
  • angular: only add @​oxc-project/runtime on the vitest-analog path (#​35734)
  • angular-rspack: exclude eslint config from tailwind v4 source scan (#​35663)
  • core: warn before installing unknown npm packages as preset (#​35644)
  • core: preserve input order in createNodes plugin results (#​35595)
  • core: resolve local plugin subpath imports from source (#​35631)
  • core: treat undefined task parallelism as parallel when scheduling (#​35736)
  • core: handle object form of bin field in getPrettierPath (#​35680)
  • core: detect vscode copilot ai agent (#​35757)
  • core: allow local plugin subpath imports without custom conditions (#​35751, #​35631)
  • dotnet: include Directory.. files in inputs (#​35738)
  • gradle: add transitive:true to all tasks (#​35677)
  • gradle: pin generated e2e project toolchain to installed JDK (#​35703)
  • js: fall back to npm publish when bun publish fails with auth error (#​35756)
  • linter: improve convert-to-flat-config output fidelity (#​35330)
  • linter: only rewrite workspace-package peer deps to workspace:* (#​35423, #​35318, #​33417)
  • misc: stop inferring projects: 'self' in dependsOn entries (#​35686)
  • misc: skip $ escaping in file paths on windows (#​35692)
  • repo: run dotnet restore before publish (#​35771)
  • repo: run dotnet restore before macos e2e job (#​35774)
  • rsbuild: infer build outputs from distPath.root directly (#​35707)
  • rsbuild: lazy-require @​rsbuild/core in plugin so spec mocks work after jest.resetModules (#​35707)
  • testing: correct yargs-parser import in getJestProjectsAsync (#​35672, #​35654)
❤️ Thank You
swc-project/swc (@​swc/core)

v1.15.41

Compare Source

Bug Fixes
Documentation
Performance
Revert

v1.15.40

Compare Source

Bug Fixes

  • (es/minifier) Preserve args for destructured callbacks (#​11830) (21873b0)

  • (es/minifier) Avoid generating mangled property names that collide with existing properties (#​11839) (9b4fab5)

  • (es/minifier) Respect ecma for iife temp vars (#​11873) (e481934)

  • (es/minifier) Preserve default parameter object props (#​11884) (71ff84f)

  • (es/parser) Reject object-rest assignment to array/object literal (#​11875) (7b57d1f)

  • (es/parser) Reject object rest assignment to literals (#​11881) (4ec2eaf)

  • (es/react) Exclude self-recursive hooks from refresh dependency array (#​11838) (9101c71)

  • (ts/fast-dts) Strip definite assertions in dts (#​11858) (2ab1b8a)

  • (ts/fast-strip) Reject unsafe assertion erasure in binary expressions (#​11828) (aa5b539)

  • (typescript) Strip parameter binding defaults in dts (#​11857) (800bc17)

Documentation
Features
Miscellaneous Tasks
Performance
Testing
  • (es/minifier) Move issue_11835 fixture out of terser folder (#​11840) (3dd3431)
Ci
Security

v1.15.33

Compare Source

Bug Fixes
Features

v1.15.32

Compare Source

Bug Fixes

  • (es/flow) Fix Flow type-only modules in script transforms (#​11817) (be38316)

  • (es/flow) Avoid restoring module context when flow syntax is enabled (#​11819) (3ed7243)

  • (es/minifier) Preserve frozen spread registry keys (#​11825) (347181c)

  • (es/parser) Align Flow generic arrow JSX disambiguation (#​11821) (28a7fad)

Features

v1.15.30

Compare Source

Bug Fixes
Documentation
Features

v1.15.26

Compare Source

v1.15.24

Compare Source

v1.15.21

Compare Source

v1.15.18

Compare Source

v1.15.17

Compare Source

v1.15.13

Compare Source

v1.15.11

Compare Source

v1.15.10

Compare Source

swc-project/swc (@​swc/helpers)

v0.5.21

Compare Source

v0.5.20

Compare Source

microsoft/TypeScript-DOM-Lib-Generator (@​types/web)

v0.0.350

[Compare Source](https://redirect.git

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "after 2am and before 3am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team January 3, 2026 12:01
@renovate renovate Bot added the dependencies Upgrade or downgrade of project dependencies. label Jan 3, 2026
@renovate renovate Bot requested review from a team and sullivanpj as code owners January 3, 2026 12:01
@renovate renovate Bot enabled auto-merge (squash) January 3, 2026 12:01
@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from c0d78db to d5f63c6 Compare January 8, 2026 06:59
@socket-security

socket-security Bot commented Jan 8, 2026 •
edited
Loading

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 17fbdc4 to bce6bcd Compare January 13, 2026 19:16
@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 8 times, most recently from 68da564 to a3c403f Compare January 22, 2026 07:45
@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 6 times, most recently from bb7d6a8 to ac7ea5a Compare January 28, 2026 18:52
@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 6 times, most recently from 338335f to 08b596c Compare February 14, 2026 11:50
@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 93b21ce to 41eefb4 Compare February 22, 2026 03:46
@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 3 times, most recently from 9e263a0 to 58ad5bf Compare March 2, 2026 06:22
@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 195ab9e to 75c782c Compare March 14, 2026 09:34
@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 3 times, most recently from 5c1aa86 to f084a77 Compare March 31, 2026 18:31
@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 0f691e9 to 3e339e6 Compare April 19, 2026 03:10
@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 305748c to cf208d0 Compare May 6, 2026 11:28
@renovate renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 6ffff96 to 42ff586 Compare May 8, 2026 16:01
@socket-security

socket-security Bot commented Jun 15, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Added@​swc/​helpers@​0.5.231001007389100
Added@​nx/​jest@​22.7.5761009299100
Added@​nx/​plugin@​22.7.5771009399100
Added@​types/​web@​0.0.3501001009095100
Added@​swc/​core@​1.15.419210010096100
Addedts-jest@​29.4.11971009493100
Addedsharp@​0.35.19710010095100
Addedverdaccio@​6.7.29710010097100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sullivanpj sullivanpj Awaiting requested review from sullivanpj sullivanpj is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Upgrade or downgrade of project dependencies.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants