Skip to content

fix(deps): update all non-major dependencies#39

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#39
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented May 31, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
evlog (source) ^2.17.0^2.19.2 age confidence
oxfmt (source) ^0.51.0^0.56.0 age confidence
oxlint (source) ^1.66.0^1.71.0 age confidence
pnpm (source) 10.33.410.34.4 age confidence
vite (source) ^8.0.14^8.1.0 age confidence
wrangler (source) ^4.94.0^4.105.0 age confidence

Release Notes

HugoRCD/evlog (evlog)

v2.19.2

Compare Source

What's Changed

Bug Fixes 🐞
Dependency Updates 📦

New Contributors

Full Changelog: https://github.com/HugoRCD/evlog/compare/evlog@2.19.0...evlog@2.19.2

v2.19.1

Compare Source

What's Changed

Bug Fixes 🐞
Dependency Updates 📦

New Contributors

Full Changelog: https://github.com/HugoRCD/evlog/compare/evlog@2.19.0...evlog@2.19.1

v2.19.0

Compare Source

What's Changed

Features 🚀
Bug Fixes 🐞
Continuous Integration 🔄

New Contributors

Full Changelog: https://github.com/HugoRCD/evlog/compare/evlog@2.18.1...evlog@2.19.0

v2.18.1

Compare Source

What's Changed

Features 🚀
Bug Fixes 🐞
Dependency Updates 📦

Full Changelog: https://github.com/HugoRCD/evlog/compare/evlog@2.17.0...evlog@2.18.1

oxc-project/oxc (oxfmt)

v0.56.0

Compare Source

v0.55.0

Compare Source

🚀 Features
  • 9a2788b linter/unicorn: Implement prefer-export-from rule (#​22935) (AliceLanniste)

v0.54.0

Compare Source

📚 Documentation
  • dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (#​22965) (Boshen)
  • f88961a oxfmt: Annotate each config option with supported languages (#​22953) (leaysgur)

v0.53.0

Compare Source

v0.52.0

Compare Source

🚀 Features
  • 16b8058 oxfmt: Support vite-plus/resolveConfig for vite.config.ts (#​22454) (leaysgur)
oxc-project/oxc (oxlint)

v1.71.0

Compare Source

🚀 Features
  • 0dc2405 linter: Add schema for eslint/no-restricted-properties (#​23619) (Sysix)
  • b638d0e linter: Add schema for node/callback-return (#​23615) (Sysix)
  • eb8bedc linter: Add schema for import/extensions (#​23557) (WaterWhisperer)
  • 46f3625 linter: Implement node/no-sync rule (#​23589) (fujitani sora)
  • b01739a linter: Add schema for unicorn/numeric-separators-style (#​23554) (Mikhail Baev)
  • 68afd2a linter/node: Implement no-mixed-requires rule (#​23539) (fujitani sora)
  • a421215 linter: Add schema for eslint/prefer-destructuring (#​23410) (WaterWhisperer)
  • 84438be linter/jsdoc: Added missing options to require-param-description (#​23416) (kapobajza)
  • 51910df linter/jsdoc: Add missing options to require-param-type rule (#​23418) (kapobajza)
  • e90925f linter/unicorn: Implement prefer-number-coercion rule (#​23497) (Shekhu☺️)
  • dd1c866 linter/vue: Implement no-async-in-computed-properties rule (#​23493) (bab)
  • b02444e linter: Add schema for react/jsx-no-script-url (#​23475) (WaterWhisperer)
  • a8dce46 linter/unicorn: Implement max-nested-calls rule (#​23461) (arieleli01212)
🐛 Bug Fixes
  • a303c23 linter/jsx-a11y: Align anchor-is-valid config with upstream (#​23446) (camc314)
📚 Documentation
  • b50bf4d linter: Remove manually written options doc for eslint/arrow-body-style (#​23490) (Mikhail Baev)

v1.70.0

Compare Source

🚀 Features
  • 2e8bda4 linter/vue: Implement no-dupe-keys rule (#​23350) (bab)
  • 1490a0a linter/react: Implement react-compiler rule (#​23202) (Boshen)
  • dd560ae linter/unicorn: Implement no-array-fill-with-reference-type rule (#​23397) (Mikhail Baev)
  • af36c2f linter: Add schema for react/jsx-curly-brace-presence (#​23400) (WaterWhisperer)
  • 47d34a3 linter: Add schema for react/jsx-handler-names (#​23393) (WaterWhisperer)
  • f4250d0 linter: Add schema for unicorn/import-style (#​23386) (WaterWhisperer)
  • 30c74ce linter: Add schema for jsx_a11y/no-noninteractive-element-to-interactive-role (#​23384) (Sysix)
  • cfbe8dc linter: Add schema for jsx_a11y/no-interactive-element-to-noninteractive-role (#​23382) (WaterWhisperer)
  • d15b7ff linter: Add schema for typescript/no-restricted-types (#​23381) (WaterWhisperer)
  • 028a811 linter: Add schema for jsx-a11y/media-has-caption (#​23377) (Sysix)
  • b3b1038 linter: Add schema for jsx-a11y/label-has-associated-control (#​23376) (Sysix)
  • 7ada6b2 linter: Add schema for jsx_a11y/no-distracting-elements (#​23379) (WaterWhisperer)
  • ee3dd49 linter: Add schema for jsx-a11y/img-redundant-alt (#​23374) (Sysix)
  • df5f8dd linter: Add short descriptions to most lint rules. (#​23365) (Connor Shea)
  • e3fd735 linter: Add schema for jsx_a11y/alt-text (#​23369) (Sysix)
  • 0f2fff4 linter: Add schema for react/exhaustive-deps (#​23372) (Mikhail Baev)
  • e3e4e10 linter: Add schema for react_perf/jsx-no-new-object-as-prop (#​23368) (Mikhail Baev)
  • 9366d44 linter: Add schema for unicorn/prefer-at (#​23366) (WaterWhisperer)
  • f57b55d linter: Add schema for typescript/array-type (#​23355) (Sysix)
  • 0dcf912 linter: Add schema for typescript/ban-ts-comment (#​23354) (Sysix)
  • 51fa83e linter: Add schema for react/no-did-update-set-state (#​23357) (Mikhail Baev)
  • 59db0bd linter: Add schema for consistent-generic-constructors (#​23353) (Sysix)
  • c4775c0 linter: Add schema for typescript/consistent-type-assertions (#​23349) (Sysix)
  • 6e516f7 linter: Add schema for typescript/consistent-type-imports (#​23348) (Sysix)
  • 012134d linter: Add schema for react/jsx-no-target-blank (#​23345) (WaterWhisperer)
  • 0806aae linter: Add schema for jsx_a11y/no-noninteractive-tabindex (#​23337) (Mikhail Baev)
  • 0708b5a linter: Add schema for react/jsx-filename-extension (#​23315) (Mikhail Baev)
  • 150bce1 linter: Add schema for typescript/no-empty-object-type (#​23309) (Sysix)
  • f9e36f1 linter: Add schema for typescript/no-duplicate-type-constituents (#​23308) (Sysix)
  • 937accf linter: Add schema for typescript/no-invalid-void-type (#​23307) (Sysix)
  • 3e042b9 linter: Add schema for typescript/no-misused-promises (#​23306) (Sysix)
  • da212d1 linter: Add schema for typescript/no-unnecessary-condition (#​23305) (Sysix)
  • f8f0d38 linter: Add schema for typescript/parameter-properties (#​23304) (Sysix)
  • 2275fc7 linter: Add schema for typescript/prefer-nullish-coalescing (#​23302) (Sysix)
  • d353858 linter: Add schema for typescript/prefer-string-starts-ends-with (#​23301) (Sysix)
  • 03060f5 linter: Add schema for typescript/triple-slash-reference (#​23300) (Sysix)
  • 6619cee linter: Add schema for promise/param-names (#​23298) (Sysix)
  • 8bf108e linter: Add schema for promise/catch-or-return (#​23297) (Sysix)
  • 48158d0 linter: Add schema for vitest/consistent-each-for (#​23294) (Sysix)
  • 7e74c98 linter: Add schema for vitest/consistent-test-filename (#​23293) (Sysix)
  • ff94d4a linter: Add schema for vitest/consistent-vitest-vi (#​23292) (Sysix)
  • 2409a10 linter: Add schema for vitest/prefer-import-in-mock (#​23291) (Sysix)
  • 3d782b7 linter: Add schema for react/no-unstable-nested-components (#​23287) (Mikhail Baev)
  • 0a0bc2f linter/jsx-a11y: Add allowedRedundantRoles option to no-redundant-roles (#​22820) (bab)
  • 80758a5 linter/vue: Implement no-side-effects-in-computed-properties rule (#​23282) (bab)
  • e3869ac linter: Add schema for react/no-object-type-as-default-prop (#​23279) (Mikhail Baev)
  • 4480609 linter: Add schema for react/jsx-props-no-spreading (#​23276) (Mikhail Baev)
  • 08d68a5 linter/react: Implement jsx-no-literals rule (#​23145) (kapobajza)
  • 9a2788b linter/unicorn: Implement prefer-export-from rule (#​22935) (AliceLanniste)
  • bdb723c linter/unicorn: Implement prefer-single-call rule (#​23235) (Yuzhe Shi)
  • 31543ed linter: Add schema for vue/define-props-destructuring (#​23252) (Sysix)
  • 21b6c3d linter: Add schema for oxc/no-async-endpoint-handlers (#​23251) (Sysix)
  • e77ff81 linter: Add schema for unicorn/prefer-object-from-entries (#​23249) (Mikhail Baev)
  • bcac2d6 linter: Add schema for jest/vitest/no-restricted-matchers (#​23247) (Sysix)
  • 539f036 linter: Add schema for jest/vitest/no-restricted-*-methods (#​23246) (Sysix)
  • dd1b927 linter/vue: Implement require-default-prop rule (#​22951) (bab)
  • 3f018e7 linter: Add schema for unicorn/no-instanceof-builtins (#​23225) (Mikhail Baev)
  • e0d0f78 linter: Verify promise/no-callback-in-promise schema (#​23141) (beanscg)
  • 123d4f4 linter: Add schema for jest/vitest/valid-expect (#​23185) (Sysix)
  • 46c8a21 linter: Add schema for jest/vitest/require-top-level-describe (#​23184) (Sysix)
  • 41465cf linter: Add schema for jest/vitest/prefer-snapshot-hint (#​23183) (Sysix)
  • d068b9b linter: Add schema for jest/vitest/prefer-expect-assertions (#​23181) (Sysix)
  • 064a1ee linter: Add schema for jest/prefer-ending-with-an-expect (#​23180) (Sysix)
  • d046797 linter: Add schema for jest/vitest/no-standalone-expect (#​23179) (Sysix)
  • 137b9a6 linter: Add schema for jest/vitest/no-large-snapshots (#​23178) (Sysix)
  • 0f3e4a5 linter: Add schema for jest/vitest/no-hooks (#​23177) (Sysix)
  • cd0b384 linter: Add schema for unicorn/explicit-length-check (#​23155) (Mikhail Baev)
  • 01b74c4 linter: Add schema for jest/no-deprecated-functions (#​23136) (Sysix)
  • 9d6a387 linter: Add schema for unicorn/catch-error-name (#​23137) (Mikhail Baev)
  • 0da8efa linter: Add schema for jest/vitest/max-nested-describe (#​23131) (Sysix)
  • d71c9fd linter: Add schema for eslint/no-use-before-define (#​23129) (Sysix)
🐛 Bug Fixes
  • 26ddac6 linter: Avoid config schema generation for jsx_a11y/no-noninteractive-element-interactions (#​23385) (Sysix)
  • 40556ad linter: Parse jsx-a11y/control-has-associated-label config with DefaultRuleConfig (#​23373) (Sysix)
  • 71e9648 linter: Expose no-noninteractive-element-interactions schema (#​23283) (camc314)
  • 6c86d1c linter/react-perf: Correct nativeAllowList all schema (#​23229) (camc314)
  • 4dd52de linter/react-perf: Re-generate stale snapshots (#​23228) (camc314)
  • 8f3db61 linter: Allow options for eslint/capitalized-comments (#​23139) (Sysix)
⚡ Performance
  • f09707e linter: jest/no-deprecated-functions store config version as usize (#​23138) (Sysix)
📚 Documentation
  • f682e25 linter: Remove manually written options doc for eslint/prefer-arrow-callback (#​23438) (Mikhail Baev)
  • 64c942c linter: Remove manually written options doc for eslint/no-sequences (#​23420) (Mikhail Baev)
  • 14abf32 linter/react-perf: Use autogenerated docs (#​23227) (camc314)

v1.69.0

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
  • dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (#​22965) (Boshen)

v1.68.0

Compare Source

🚀 Features
  • e4b1f46 linter/typescript: Implement method-signature-style rule (#​22679) (Mikhail Baev)
  • bc462ca linter/vue: Implement no-reserved-component-names rule (#​22741) (bab)
  • ef9e751 linter/vue: Implement component-definition-name-casing rule (#​22818) (bab)
  • d67f51a linter/vue: Implement require-prop-type-constructor rule (#​22708) (bab)
  • 8422e8b linter/jsdoc: Implement require-yields-description rule (#​22805) (Mikhail Baev)
  • fe93f97 linter/eslint: Implement prefer-named-capture-group rule (#​22759) (Sebastian Poxhofer)

v1.67.0

Compare Source

🚀 Features
pnpm/pnpm (pnpm)

v10.34.4

Compare Source

v10.34.3

Compare Source

v10.34.2

Compare Source

v10.34.1: pnpm 10.34.1

Compare Source

Patch Changes

  • Reject pnpm-lock.yaml entries whose remote tarball resolution: block is missing the integrity field. Previously the worker that extracts a downloaded tarball skipped hash verification when no integrity was supplied and minted a fresh one from the unverified bytes, so an attacker who could both alter the lockfile (e.g. via a pull request that strips integrity:) and serve modified content at the referenced tarball URL could install a tampered package without any error — including under --frozen-lockfile. pnpm now fails closed at lockfile-read time with ERR_PNPM_MISSING_TARBALL_INTEGRITY. Git-hosted tarballs (gitHosted: true or a URL on codeload.github.com / bitbucket.org / gitlab.com) and file: tarballs are exempt — the commit SHA in a git-host URL and the user-controlled local path already anchor the bytes.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx

v10.34.0: pnpm 10.34

Compare Source

Minor Changes

  • Treat tarball-integrity mismatches against the lockfile as a hard failure by default. Previously, pnpm install (non-frozen) would log ERR_PNPM_TARBALL_INTEGRITY, silently re-resolve from the registry, and overwrite the locked integrity — which meant a compromised registry, proxy, or republished version could substitute attacker-controlled content on a clean machine even though the project shipped a committed lockfile.

    pnpm install now exits with ERR_PNPM_TARBALL_INTEGRITY and a hint pointing at the new opt-in flag.

    The only opt-in is pnpm install --update-checksums — narrowly scoped to refreshing the locked integrity values from what the registry currently serves. Mirrors yarn's flag of the same name. A warning still prints when the bypass takes effect so the operation is auditable.

    --force and pnpm update deliberately do not bypass the integrity check. They are routine refresh operations; silently overwriting a locked integrity in those flows would erase the protection a committed lockfile is supposed to provide. --frozen-lockfile behavior is unchanged. --fix-lockfile keeps its documented purpose (filling in missing lockfile entries) and is also not a bypass.

Patch Changes

  • Pin unscoped per-registry settings (_authToken, _auth, username/_password, tokenHelper, inline cert/key) to the registry declared in the same config source at load time, so a later layer overriding registry= (workspace .npmrc, pnpm-workspace.yaml, CLI --registry) cannot redirect a credential or client certificate authored for a different host. A deprecation warning is emitted whenever an unscoped per-registry setting is encountered, naming the source and the URL it was pinned to. Reported by JUNYI LIU.
  • Fixed minimumReleaseAge handling when cached metadata is abbreviated. The npm registry returns abbreviated package metadata (without the per-version time field) by default, which made the maturity check throw ERR_PNPM_MISSING_TIME whenever cached abbreviated metadata was reused. pnpm now upgrades cached abbreviated metadata to the full document via a follow-up fetch when minimumReleaseAge is active, persists the upgrade to the on-disk cache so subsequent installs skip the extra fetch, and lets ERR_PNPM_MISSING_TIME from the cache fast-path fall through to the network fetch even under strict mode.
  • Reject git resolutions whose commit field is not a 40-character hexadecimal SHA before invoking git. A malicious lockfile could otherwise smuggle a value such as --upload-pack=<command> through git fetch / git checkout, which on SSH or local-file transports executes the supplied command.
  • Reject patch files whose diff --git headers reference paths outside the patched package directory. Previously a malicious .patch file added via a pull request could write, delete, or rename arbitrary files reachable by the user running pnpm install.
  • Fixed --prefix=<dir> not being honored when locating the works

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 12pm on Sunday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented May 31, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs
worker-r2-cdn 2f3c0ca Jun 26 2026, 04:59 PM

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from f4969d4 to ba24cde Compare June 8, 2026 17:09
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 550e04a to 2455696 Compare June 15, 2026 21:10
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from aefca54 to 304d8d7 Compare June 18, 2026 19:36
@cursor cursor Bot requested a review from RedStar071 June 18, 2026 19:48

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not approving: the Workers Builds check failed for worker-r2-cdn on this dependency update. Human review is needed to confirm the build failure is addressed before merge.

Open in Web View Automation 

Sent by Cursor Approval Agent: Pull Request Approver

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from fe04ff5 to f4b32da Compare June 25, 2026 15:56
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from f4b32da to 2f3c0ca Compare June 26, 2026 16:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants