chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #140 · unjs/hookable

renovate · 2026-04-15T02:05:28Z

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	`^25.6.0` → `^25.8.0`
@typescript/native-preview (source)	`^7.0.0-dev.20260414.1` → `^7.0.0-dev.20260517.1`
@vitest/coverage-v8 (source)	`^4.1.4` → `^4.1.6`
hookable-prev	`^6.1.0` → `^6.1.1`
obuild	`^0.4.33` → `^0.4.35`
oxfmt (source)	`^0.45.0` → `^0.50.0`
oxlint (source)	`^1.60.0` → `^1.65.0`
pnpm (source)	`10.33.0` → `10.33.4`
typescript (source)	`^6.0.2` → `^6.0.3`
vite (source)	`^8.0.8` → `^8.0.13`
vitest (source)	`^4.1.4` → `^4.1.6`

Release Notes

microsoft/typescript-go (@typescript/native-preview)

vitest-dev/vitest (@vitest/coverage-v8)

`v4.1.6`

Compare Source

🐞 Bug Fixes

browser: Provide project reference in ToMatchScreenshotResolvePath - by @macarie and @sheremet-va in #10138 (31882)
Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options - by @hi-ogawa, Codex and @sheremet-va in #10196 (2847d)
browser: Simplify orchestrator otel carrier - by @hi-ogawa in #10285 (18af9)

🏎 Performance

Stringify diff objects only once - by @sheremet-va in #10276 (9f7b1)

View changes on GitHub

`v4.1.5`

Compare Source

🚀 Experimental Features

coverage: Istanbul to support instrumenter option - by @BartWaardenburg and @AriPerkkio in #10119 (0e0ff)

🐞 Bug Fixes

--project negation excludes browser instances - by @felamaslen in #10131 (9423d)
Project color label on html reporter - by @hi-ogawa in #10142 (596f7)
Fix vi.defineHelper called as object method - by @hi-ogawa in #10163 (122c2)
Alias agent reporter to minimal - by @sheremet-va in #10157 (663b9)
Respect diff config options in soft assertions - by @Copilot, sheremet-va and @sheremet-va in #8696 (9787d)
Respect diff config options in soft assertions " - by @sheremet-va in #8696 (7dc6d)
ast-collect: Recognize _vi_import prefix in static test discovery - by @Yejneshwar in #10129 (32546)
coverage: Descriptive error message when reports directory is removed during test run - by @DaveT1991 and @AriPerkkio in #10117 (14133)
snapshot: Increase default snapshot max output length - by @hi-ogawa and Codex in #10150 (21e66)
ui: Fix jsx/tsx syntax highlight - by @hi-ogawa in #10152 (f1b1f)
web-worker: Support MessagePort objects referenced inside postMessage data - by @whitphx and Claude Opus 4.6 (1M context) in #9927 and #10124 (7ad7d)
api: Make test-specification options writable - by @sheremet-va in #10154 (6abd5)

View changes on GitHub

unjs/hookable (hookable-prev)

`v6.1.1`

Compare Source

compare changes

🩹 Fixes

Await thenables to support cross-realm promises (#139)

🏡 Chore

Update deps (e179ddc)

❤️ Contributors

Pooya Parsa (@pi0)

unjs/obuild (obuild)

`v0.4.35`

Compare Source

compare changes

🏡 Chore

Update deps (5047837)

❤️ Contributors

Pooya Parsa (@pi0)

`v0.4.34`

Compare Source

compare changes

🚀 Enhancements

Support license: { gzip: true } (488f9e3)

🩹 Fixes

transform: Fall back to declaration-less emit on isolatedDeclarations errors (#83)
license: Dedup by name@version and only scan modules in emitted chunks (98f1fda)

💅 Refactors

Replace rollup-plugin-license with native Rolldown plugin (#81)
Inline pretty-bytes impl (dc1606c)

🏡 Chore

Update deps (90f0a3f)

❤️ Contributors

Pooya Parsa (@pi0)
ナイトウコウスケ (@naitokosuke)
Wind (@productdevbook)

oxc-project/oxc (oxfmt)

`v0.50.0`

Compare Source

🐛 Bug Fixes

43b9978 formatter/sort_imports: Treat subpath imports as internal (#22440) (leaysgur)

`v0.49.0`

Compare Source

🚀 Features

6e8e818 oxfmt: Experimental .svelte support (#21700) (leaysgur)

`v0.48.0`

Compare Source

`v0.47.0`

Compare Source

`v0.46.0`

Compare Source

oxc-project/oxc (oxlint)

`v1.65.0`

Compare Source

🚀 Features

5478fb5 linter/jsdoc: Implement require-throws-description rule (#22386) (Mikhail Baev)
c73225e linter/eslint: Implement prefer-arrow-callback rule (#22312) (박천(Cheon Park))
de82b59 linter: Add support for eslint-plugin-jsx-a11y-x (#22356) (mehm8128)
f44b6c8 linter: Fill schemas DummyRuleMap with built-in rules (#22288) (Sysix)

`v1.64.0`

Compare Source

🚀 Features

fbb8f22 linter: Support ignores in overrides (#22148) (camc314)

🐛 Bug Fixes

25b7017 linter: Undocument override ignores option (#22213) (camc314)

`v1.63.0`

Compare Source

📚 Documentation

cacbc4a linter: Fix jest settings docs. (#22127) (connorshea)

`v1.62.0`

Compare Source

🚀 Features

348f46c linter: Add respectEslintDisableDirectives option (#21384) (Christian Vuerings)

🐛 Bug Fixes

8c425db linter: Allow string for jest version in config schema (#21649) (camc314)

`v1.61.1`

Compare Source

`v1.61.0`

Compare Source

🚀 Features

38d8090 linter/jest: Implemented jest version settings in config file. (#21522) (Said Atrahouch)

pnpm/pnpm (pnpm)

`v10.33.4`: pnpm 10.33.4

Compare Source

Patch Changes

Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.

A new gitHosted: true field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.
Fix a regression where pnpm --recursive --filter '!<pkg>' run/exec/test/add would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative --filter arguments are provided, matching the documented behavior. To include the root, pass --include-workspace-root #11341.

Platinum Sponsors

Gold Sponsors

`v10.33.3`

Compare Source

`v10.33.2`

Compare Source

`v10.33.1`: pnpm 10.33.1

Compare Source

Patch Changes

When a project's packageManager field selects pnpm v11 or newer, commands that v10 would have passed through to npm (version, login, logout, publish, unpublish, deprecate, dist-tag, docs, ping, search, star, stars, unstar, whoami, etc.) are now handed over to the wanted pnpm, which implements them natively. Previously they silently shelled out to npm — making, for example, pnpm version --help print npm's help on a project with packageManager: pnpm@11.0.0-rc.3 #11328.

Platinum Sponsors

Gold Sponsors

microsoft/TypeScript (typescript)

`v6.0.3`

Compare Source

vitejs/vite (vite)

`v8.0.13`

Compare Source

Features

bundled-dev: add lazy bundling support (#21406) (4f0949f)
optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#22357) (47071ce)
update rolldown to 1.0.1 (#22444) (8c766a6)

Bug Fixes

build: copy public directory after building same environment with write=false (#22328) (158e8ae)
css: await sass/less/styl worker disposal on teardown (fix #22274) (#22275) (b7edcb7)
css: keep deprecated name/originalFileName in synthetic assetFileNames call (#22439) (8e59c97)
make isBundled per environment (#22257) (a576326)
ssr: avoid rewriting labels that collide with imports (#22451) (d9b18e0)

Miscellaneous Chores

remove irrelevant commits from changelog (#22430) (6ea3838)
update changelog (#22413) (fcdc87c)

`v8.0.12`

Compare Source

Features

update rolldown to 1.0.0 (#22401) (cf0ff41)

Bug Fixes

create-vite: pass react framework to TanStack CLI (#22397) (18f0f90)
deps: update all non-major dependencies (#22420) (2be6000)
module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#22369) (f5a22e6)
refer to rolldownOptions instead of deprecated rollupOptions in messages (#22400) (b675c7b)
worker: apply build.target to worker bundle (#22404) (3c93fde)
worker: forward define to worker bundle transform (#22408) (d4838a0)

Miscellaneous Chores

deps: update dependency eslint-plugin-n to v18 (#22423) (2fe7bd2)
deps: update rolldown-related dependencies (#22421) (66b9eb3)

`v8.0.11`

Compare Source

Features

update rolldown to 1.0.0-rc.18 (#22360) (3f80524)

Bug Fixes

deps: update all non-major dependencies (#22334) (672c962)
deps: update all non-major dependencies (#22382) (5c0cfcb)
glob: align hmr matcher options with glob enumeration (#22306) (30028f9)
make separate object instance for each environment (#22276) (7c2aa3b)

Documentation

create-vite: list react-compiler templates in README (#22347) (7c3a61f)
explain mergeConfig skips null/undefined (#22325) (2151f70)
mention native config loader in CLI options (#22348) (0420c5d)
update evan's x handle (640202a)

Miscellaneous Chores

deps: update dependency tsdown to ^0.21.10 (#22333) (3b51e05)
deps: update rolldown-related dependencies (#22383) (555ff36)
deps: update transitive packages to fix npm audit alerts (#22316) (86aee62)

Code Refactoring

devtools integration (#22312) (3c8bf06)
remove unnecessary async (#22296) (b31fd35)
show direct path type in bad character warning (#22339) (0c162e9)

Tests

create-vite: use short help alias (#22389) (994ab66)

`v8.0.10`

Compare Source

Features

update rolldown to 1.0.0-rc.17 (#22299) (a4d06d9)

Bug Fixes

hmrClient.logger.debug and hmrClient.logger.error looked different from other HMR logs (#22147) (a4d828f)
css: show filename in CSS minification warnings for .css?inline (#22292) (83f0a78)
optimizer: allow user transform.target to override default in optimizeDeps (#22273) (5c7cec6)
remove format sniffing module resolution from JS resolver (#22297) (b8a21cc)

Code Refactoring

enable some typecheck rules (#22278) (9437518)
typecheck client directory (#22284) (40a0847)

`v8.0.9`

Compare Source

Features

update rolldown to 1.0.0-rc.16 (#22248) (2947edd)

Bug Fixes

allow binding when strictPort is set but wildcard port is in use (#22150) (dfc8aa5)
build: emptyOutDir should happen for watch rebuilds (#22207) (ee52267)
bundled-dev: reject requests to HMR patch files in non potentially trustworthy origins (#22269) (868f141)
css: use unique key for cssEntriesMap to prevent same-basename collision (#22039) (374bb5d)
deps: update all non-major dependencies (#22219) (4cd0d67)
deps: update all non-major dependencies (#22268) (c28e9c1)
detect Deno workspace root (fix #22237) (#22238) (1b793c0)
dev: handle errors in watchChange hook (#22188) (fc08bda)
optimizer: handle more chars that will be sanitized (#22208) (3f24533)
skip fallback sourcemap generation for ?raw imports (#22148) (3ec9cda)

Documentation

align the descriptions in READMEs (#22231) (44c42b9)
fix reuses wording in dev environment comment (#22173) (9163412)
fix wording in sass error comment (#22214) (bc5c6a7)
update build CLI defaults (#22261) (605bb97)

Miscellaneous Chores

deps: update dependency dotenv-expand to v13 (#22271) (0a3887d)

Configuration

📅 Schedule: (UTC)

Branch creation
- "after 2am and before 3am"
Automerge
- "after 1am and before 2am"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/all-minor-patch branch from 325f298 to bc6d641 Compare April 15, 2026 10:54

renovate Bot changed the title ~~chore(deps): update devdependency hookable-prev to ^6.1.1~~ chore(deps): update all non-major dependencies Apr 15, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from 85f2a51 to 6113a69 Compare April 23, 2026 12:39

renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 5e61242 to 41321f1 Compare April 30, 2026 13:05

renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 6f4580f to a863710 Compare May 5, 2026 12:03

renovate Bot force-pushed the renovate/all-minor-patch branch 14 times, most recently from 2e92123 to f5b59ee Compare May 12, 2026 13:58

renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 8f5410b to 831af59 Compare May 16, 2026 10:14

chore(deps): update all non-major dependencies

f739c31

renovate Bot force-pushed the renovate/all-minor-patch branch from 831af59 to f739c31 Compare May 17, 2026 10:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all non-major dependencies#140

chore(deps): update all non-major dependencies#140
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Apr 15, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🐞 Bug Fixes

🏎 Performance

🚀 Experimental Features

🐞 Bug Fixes

🩹 Fixes

🏡 Chore

❤️ Contributors

🏡 Chore

❤️ Contributors

🚀 Enhancements

🩹 Fixes

💅 Refactors

🏡 Chore

❤️ Contributors

🐛 Bug Fixes

🚀 Features

🚀 Features

🚀 Features

🐛 Bug Fixes

📚 Documentation

🚀 Features

🐛 Bug Fixes

🚀 Features

v10.33.4: pnpm 10.33.4

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.33.1: pnpm 10.33.1

Patch Changes

Platinum Sponsors

Gold Sponsors

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Code Refactoring

Features

Bug Fixes

Documentation

Miscellaneous Chores

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Apr 15, 2026 •

edited

Loading

`v10.33.4`: pnpm 10.33.4

`v10.33.1`: pnpm 10.33.1