chore(deps): update all non-major dependencies#44

Open

renovate[bot] wants to merge 1 commit intomasterfrom

renovate/all-minor-patch

Contributor

renovate bot commented Nov 12, 2023 •

edited

Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@commitlint/cli (source)	`18.4.0` → `18.6.1`			devDependencies	minor
@commitlint/config-conventional (source)	`18.4.0` → `18.6.3`			devDependencies	minor
eslint-config-prettier	`9.0.0` → `9.1.2`			devDependencies	minor
eslint-plugin-prettier	`5.0.1` → `5.5.5`			devDependencies	minor
lint-staged	`^15.0.2` → `^15.5.2`			devDependencies	minor
node (source)	`>=20.9.0` → `>=20.20.2`			engines	minor
nodemon (source)	`3.0.1` → `3.1.14`			devDependencies	minor
prettier (source)	`3.0.3` → `3.8.1`			devDependencies	minor
pretty-quick	`^3.1.3` → `^3.3.1`			devDependencies	minor
yarn (source)	`3.6.4` → `3.8.7`			packageManager	minor

Release Notes

conventional-changelog/commitlint (@commitlint/cli)

`v18.6.1`

Note: Version bump only for package @commitlint/cli

`v18.6.0`

Note: Version bump only for package @commitlint/cli

`v18.5.0`

Features

cli: print-config now can be configured to print a json in stdout (#3863) (6381a2d), closes #3819

18.4.4 (2024-01-04)

Note: Version bump only for package @commitlint/cli

18.4.3 (2023-11-21)

Note: Version bump only for package @commitlint/cli

18.4.2 (2023-11-16)

Note: Version bump only for package @commitlint/cli

18.4.1 (2023-11-12)

Note: Version bump only for package @commitlint/cli

`v18.4.4`

Note: Version bump only for package @commitlint/cli

`v18.4.3`

Note: Version bump only for package @commitlint/cli

`v18.4.2`

Note: Version bump only for package @commitlint/cli

`v18.4.1`

Note: Version bump only for package @commitlint/cli

conventional-changelog/commitlint (@commitlint/config-conventional)

`v18.6.3`

Bug Fixes

add missing entry wrapper.mjs (#3966) (c2c3c7c), closes #3958

`v18.6.2`

Bug Fixes

config-conventional: use default export (#3911) (bc48408)

`v18.6.1`

Note: Version bump only for package @commitlint/config-conventional

`v18.6.0`

Features

rules: add header-trim rule (#3199) (#3871) (331579a)

`v18.5.0`

Note: Version bump only for package @commitlint/config-conventional

18.4.4 (2024-01-04)

Note: Version bump only for package @commitlint/config-conventional

18.4.3 (2023-11-21)

Note: Version bump only for package @commitlint/config-conventional

18.4.2 (2023-11-16)

Note: Version bump only for package @commitlint/config-conventional

`v18.4.4`

Note: Version bump only for package @commitlint/config-conventional

`v18.4.3`

Note: Version bump only for package @commitlint/config-conventional

`v18.4.2`

Note: Version bump only for package @commitlint/config-conventional

prettier/eslint-config-prettier (eslint-config-prettier)

`v9.1.2`

`v9.1.0`

Added: [unicorn/template-indent], (as a [special rule][unicorn/template-indent-special]). Thanks to Gürgün Dayıoğlu (@gurgunday)!
Changed: All the [formatting rules that were deprecated in ESLint 8.53.0][deprecated-8.53.0] are now excluded if you set the ESLINT_CONFIG_PRETTIER_NO_DEPRECATED environment variable.

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

`v5.5.5`

Patch Changes

#772 7264ed0 Thanks @BPScott! - Bump prettier-linter-helpers dependency to v1.0.1
#776 77651a3 Thanks @aswils! - fix: bump synckit for yarn PnP ESM issue

`v5.5.4`

Patch Changes

#755 723f7a8 Thanks @kbrilla! - fix: add 'oxc', 'oxc-ts' and 'hermes' parsers to parserBlocklist
#751 cf52b30 Thanks @andreww2012! - fix: disallow extra properties in rule options

`v5.5.3`

republish the latest version

Full Changelog: prettier/eslint-plugin-prettier@v5.5.2...v5.5.3

`v5.5.2`

republish the latest version

Full Changelog: prettier/eslint-plugin-prettier@v5.5.1...v5.5.2

`v5.5.1`

Patch Changes

#748 bfd1e95 Thanks @JounQin! - fix: use prettierRcOptions directly for prettier 3.6+

`v5.5.0`

Minor Changes

#743 92f2c9c Thanks @dotcarmen! - feat: support non-js languages like css for @eslint/css and json for @eslint/json

`v5.4.1`

Patch Changes

#740 c21521f Thanks @JounQin! - fix(deps): bump synckit to v0.11.7 to fix potential TypeError: Cannot read properties of undefined (reading 'message') error

`v5.4.0`

Minor Changes

#736 59a0cae Thanks @yashtech00! - refactor: migrate worker.js to worker.mjs

`v5.3.1`

Patch Changes

#734 dcf2c80 Thanks @JounQin! - ci: enable NPM_CONFIG_PROVENANCE env

`v5.3.0`

Minor Changes

#674 6fe0c90 Thanks @irsooti! - feat(types): prefer Config over FlatConfig when they're equal

`v5.2.6`

Patch Changes

#723 1451176 Thanks @renovate! - fix(deps): bump synckit to v0.11.0

`v5.2.5`

Patch Changes

#721 4f5513d Thanks @JounQin! - fix: clarify correct eslint-config-prettier peer range

`v5.2.4`

Patch Changes

#715 b8cfe56 Thanks @JounQin! - chore: hourcekeeping, bump all (dev) deps

`v5.2.3`

Patch Changes

#703 9c6141f Thanks @BPScott! - Add name field to recommended flat config

`v5.2.2`

Patch Changes

#700 aa5b59f Thanks @ntnyq! - fix: report node when loc not found

`v5.2.1`

Patch Changes

#668 ac036cc Thanks @OrlovAlexei! - build(deps): Bump synckit from 0.8.6 to 0.9.1

`v5.1.3`

Patch Changes

#629 985b33c Thanks @JounQin! - chore: add package.json into exports map

`v5.1.2`

Patch Changes

#623 8210e44 Thanks @BPScott! - Add exports mapping to package.json, to allow import eslintPluginRecommended from 'eslint-plugin-prettier/recommended' to work as expected.

Strictly speaking this is a breaking change as it removes the ability for people to import from "eslint-plugin-prettier/eslint-plugin-prettier.js" and "eslint-plugin-prettier/recommended.js" but the former was never recommended in the first place and the latter has only been available for a few days.

#621 2b09e7f Thanks @JounQin! - feat: support parsing markdown via eslint-mdx natively

What means the following is unnecessary anymore when using with eslint-mdx/eslint-plugin-mdx!

[
  {
    files: ["**/*.md"],
    rules: { "prettier/prettier": ["error", { parser: "markdown" }] },
  },
  {
    files: ["**/*.mdx"],
    rules: { "prettier/prettier": ["error", { parser: "mdx" }] },
  },
]

`v5.1.1`

Patch Changes

#619 b5c0dc5 Thanks @JounQin! - chore: skip formatting inline scripts in pug files

`v5.1.0`

Minor Changes

#616 3856413 Thanks @BPScott! - Add recommended config for the flat config format.

If you are using flat config, import the recommended config from eslint-plugin-prettier/recommended. Like the legacy format recommended config, this automatically includes the contents of eslint-config-prettier.
```
// eslint.config.js
const eslintPluginPrettierRecommended = require("eslint-plugin-prettier/recommended");

module.exports = [
  // Any other config imports go at the top
  eslintPluginPrettierRecommended,
];
```

Patch Changes

#614 5270877 Thanks @BPScott! - Add meta block to plugin. This improves debugging and cachebusting when using the new flat config
#603 a63a570 Thanks @filiptammergard! - fix: specify eslint-config-prettier as peer dependency

It's already added to peerDependenciesMeta as optional, which means it should also be specified in peerDependencies.

lint-staged/lint-staged (lint-staged)

`v15.5.2`

Patch Changes

#1544 5561321 Thanks @YimingIsCOLD! - Correctly handle colon (:) characters in staged filenames.

`v15.5.1`

Patch Changes

#1533 5d53534 Thanks @iiroj! - Improve listing of staged files so that lint-staged doesn't crash when encountering an uninitialized submodule. This should result in less errors like:
```
✖ Failed to get staged files!
```

`v15.5.0`

Minor Changes

#1526 630af5f Thanks @iiroj! - Lint-staged no longer resets to the original state when preventing an empty git commit. This happens when your configured tasks reset all the staged changes, typically when trying to commit formatting changes which conflict with your linter setup like ESLint or Prettier.

Example with Prettier

By default Prettier prefers double quotes.

Previously

Stage file.js with only double quotes " changed to '
Run git commit -am "I don't like double quotes"
Lint-staged runs prettier --write file.js, converting all the ' back to "
Because there are now no changes, lint-staged fails, cancels the commit, and resets back to the original state
Commit was not done, original state is restored and single quotes ' are staged

Now

Stage file.js with only double-quotes " changed to '
Run git commit -am "I don't like double quotes"
Lint-staged runs prettier --write file.js, converting all the ' back to "
Because there are now no changes, lint-staged fails and cancels the commit
Commit was not done, and there are no staged changes

`v15.4.3`

Patch Changes

#1512 cbfed1d Thanks @tarik02! - Adjust TypeScript types for the default export so that it can be used as a value without error TS2693.

`v15.4.2`

Patch Changes

#1509 8827ebf Thanks @iiroj! - Change lint-staged's dependencies to use caret (^) ranges instead of tilde (~). This makes it easier for package managers to perform dependency management when minor-level updates are also permitted instead of just patch-level.

`v15.4.1`

Patch Changes

#1504 1c7a45e Thanks @iiroj! - Default TypeScript config filenames match JS equivalents.
#1504 9cc18c9 Thanks @iiroj! - Add missing conditional exports syntax for TypeScript types.

`v15.4.0`

Minor Changes

#1500 a8ec1dd Thanks @iiroj! - Lint-staged now provides TypeScript types for the configuration and main Node.js API. You can use the JSDoc syntax in your JS configuration files:
```
/**
 * @&#8203;filename: lint-staged.config.js
 * @&#8203;type {import('lint-staged').Configuration}
 */
export default {
  '*': 'prettier --write',
}
```
It's also possible to use the .ts file extension for the configuration if your Node.js version supports it. The --experimental-strip-types flag was introduced in Node.js v22.6.0 and unflagged in v23.6.0, enabling Node.js to execute TypeScript files without additional configuration.
```
export NODE_OPTIONS="--experimental-strip-types"

npx lint-staged --config lint-staged.config.ts
```

Patch Changes

#1501 9b79364 Thanks @iiroj! - Handle possible failures when logging user shell for debug info.

`v15.3.0`

Minor Changes

#1495 e69da9e Thanks @iiroj! - Added more info to the debug logs so that "environment" info doesn't need to be added separately to GitHub issues.
#1493 fa0fe98 Thanks @iiroj! - Added more help messages around the automatic git stash that lint-staged creates as a backup (by default). The console output also displays the short git hash of the stash so that it's easier to recover lost files in case some fatal errors are encountered, or the process is killed before completing.

For example:
```
% npx lint-staged
✔ Backed up original state in git stash (20addf8)
✔ Running tasks for staged files...
✔ Applying modifications from tasks...
✔ Cleaning up temporary files...
```
where the backup can be seen with git show 20addf8, or git stash list:
```
% git stash list
stash@{0}: lint-staged automatic backup (20addf8)
```

`v15.2.11`

Patch Changes

#1484 bcfe309 Thanks @wormsik! - Escape paths containing spaces when using the "shell" option.
#1487 7dd8caa Thanks @iiroj! - Do not treat submodule root paths as "staged files". This caused lint-staged to fail to a Git error when only updating the revision of a submodule.

`v15.2.10`

Patch Changes

#1471 e3f283b Thanks @iiroj! - Update minor dependencies, including micromatch@~4.0.8.

`v15.2.9`

Patch Changes

#1463 b69ce2d Thanks @iiroj! - Set the maximum number of event listeners to the number of tasks. This should silence the console warning MaxListenersExceededWarning: Possible EventEmitter memory leak detected.

`v15.2.8`

Patch Changes

f0480f0 Thanks @iiroj! - In the previous version the native git rev-parse --show-toplevel command was taken into use for resolving the current git repo root. This version switched the --show-toplevel flag with --show-cdup, because on Git installed via MSYS2 the former was returning absolute paths that do not work with Node.js child_process. The new flag returns a path relative to the working directory, avoiding the issue.

The GitHub Actions workflow has been updated to install Git via MSYS2, to ensure better future compatibility; using the default Git binary in the GitHub Actions runner was working correctly even with MSYS2.

`v15.2.7`

Patch Changes

#1440 a51be80 Thanks @iiroj! - In the previous version the native git rev-parse --show-toplevel command was taken into use for resolving the current git repo root. This version drops the --path-format=absolute option to support earlier git versions since it's also the default behavior. If you are still having trouble, please try upgrading git to the latest version.

`v15.2.6`

Patch Changes

#1433 119adb2 Thanks @iiroj! - Use native "git rev-parse" commands to determine git repo root directory and the .git config directory, instead of using custom logic. This hopefully makes path resolution more robust on non-POSIX systems.

`v15.2.5`

Patch Changes

#1424 31a1f95 Thanks @iiroj! - Allow approximately equivalent versions of direct dependencies by using the "~" character in the version ranges. This means a more recent patch version of a dependency is allowed if available.
#1423 91abea0 Thanks @iiroj! - Improve error logging when failing to read or parse a configuration file
#1424 ee43f15 Thanks @iiroj! - Upgrade micromatch@4.0.7

`v15.2.4`

Patch Changes

4f4537a Thanks @iiroj! - Fix release issue with previous version; update dependencies

`v15.2.2`

Patch Changes

#1391 fdcdad4 Thanks @iiroj! - Lint-staged no longer tries to load configuration from files that are not checked out. This might happen when using sparse-checkout.

`v15.2.1`

Patch Changes

#1484 bcfe309 Thanks @wormsik! - Escape paths containing spaces when using the "shell" option.
#1487 7dd8caa Thanks @iiroj! - Do not treat submodule root paths as "staged files". This caused lint-staged to fail to a Git error when only updating the revision of a submodule.

`v15.2.0`

Minor Changes

#1371 f3378be Thanks @iiroj! - Using the --no-stash flag no longer discards all unstaged changes to partially staged files, which resulted in inadvertent data loss. This fix is available with a new flag --no-hide-partially-staged that is automatically enabled when --no-stash is used.

Patch Changes

#1362 17bc480 Thanks @antonk52! - update lilconfig@3.0.0
#1368 7c55ca9 Thanks @iiroj! - Update most dependencies
#1368 777d4e9 Thanks @iiroj! - To improve performance, only use lilconfig when searching for config files outside the git repo. In the regular case, lint-staged finds the config files from the Git index and loads them directly.
#1373 85eb0dd Thanks @iiroj! - When determining git directory, use fs.realpath() only for symlinks. It looks like fs.realpath() changes some Windows mapped network filepaths unexpectedly, causing issues.

`v15.1.0`

Minor Changes

#1344 0423311 Thanks @danielbayley! - Add support for loading configuration from package.yaml and package.yml files, supported by pnpm.

Patch Changes

#1355 105d901 Thanks @iiroj! - Suppress some warnings when using the "--quiet" flag

nodejs/node (node)

`v20.20.2`: 2026-03-24, Version 20.20.2 'Iron' (LTS), @marco-ippolito

This is a security release.

Notable Changes

(CVE-2026-21717) fix array index hash collision (Joyee Cheung) nodejs-private/node-private#834
(CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan) nodejs-private/node-private#822
(CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina) nodejs-private/node-private#821
(CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS) nodejs-private/node-private#795
(CVE-2026-21715) add permission check to realpath.native (RafaelGSS) nodejs-private/node-private#794
(CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) nodejs-private/node-private#832
(CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina) nodejs-private/node-private#819

Commits

[cfb51fa9ce] - (CVE-2026-21713) crypto: use timing-safe comparison in Web Cryptography HMAC (Filip Skokan) nodejs-private/node-private#831
[f333d0be5f] - deps: V8: override depot_tools version (Richard Lau) #62344
[2acd5d1226] - deps: update undici to v6.24.1 (Matteo Collina) #62285
[af5c144ebc] - (CVE-2026-21717) deps,build,test: fix array index hash collision (Joyee Cheung) nodejs-private/node-private#834
[00ad47a28e] - (CVE-2026-21710) http: use null prototype for headersDistinct/trailersDistinct (Matteo Collina) nodejs-private/node-private#821
[0123309566] - (CVE-2026-21716) permission: include permission check on lib/fs/promises (RafaelGSS) nodejs-private/node-private#840
[00830712bc] - (CVE-2026-21715) permission: add permission check to realpath.native (RafaelGSS) nodejs-private/node-private#838
[a0c73425da] - (CVE-2026-21714) src: handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) nodejs-private/node-private#832
[cc3f294507] - (CVE-2026-21637) tls: wrap SNICallback invocation in try/catch (Matteo Collina) nodejs-private/node-private#839

`v20.20.1`: 2026-03-05, Version 20.20.1 'Iron' (LTS), @marco-ippolito

Notable Changes

[91a66e671c] - build: test on Python 3.14 (Christian Clauss) #59983
[f66056054b] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #61419
[80feacaddb] - crypto: update root certificates to NSS 3.117 (Node.js GitHub Bot) #60741

Commits

[6f580d5399] - assert: fix deepEqual always return true on URL (Xuguang Mei) #50853
[91a66e671c] - build: test on Python 3.14 (Christian Clauss) #59983
[cc4f7af6f3] - build: skip sscache action on non-main branches (Joyee Cheung) #61790
[f66056054b] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #61419
[80feacaddb] - crypto: update root certificates to NSS 3.117 (Node.js GitHub Bot) #60741
[fa88cc07e2] - crypto: ensure documented RSA-PSS saltLength default is used (Filip Skokan) #60662
[88b2eec88a] - deps: update minimatch to 10.2.2 (Node.js GitHub Bot) #61830
[5c053264f1] - deps: V8: backport 6a0a25a (Vivian Wang) #61687
[4a398699d0] - deps: update googletest to 5a9c3f9 (Node.js GitHub Bot) #61731
[4fa43adf15] - deps: update googletest to 56efe39 (Node.js GitHub Bot) #61605
[1a855d490c] - deps: update googletest to 8508785 (Node.js GitHub Bot) #61417
[d8a9359826] - deps: update icu to 78.2 (Node.js GitHub Bot) #60523
[e79cd3a0bb] - deps: update acorn-walk to 8.3.5 (Node.js GitHub Bot) #61928
[0707ade464] - deps: update acorn to 8.16.0 (Node.js GitHub Bot) #61925
[dc5a3cddef] - deps: update llhttp to 9.3.1 (Node.js GitHub Bot) #61827
[46043b94c7] - deps: update zlib to 1.3.1-e00f703 (Node.js GitHub Bot) #61135
[6be15a596e] - deps: update cjs-module-lexer to 2.2.0 (Node.js GitHub Bot) #61271
[10881404cd] - deps: update timezone to 2025c (Node.js GitHub Bot) #61138
[1594a78c85] - deps: update googletest to 065127f (Node.js GitHub Bot) #61055
[7fa2ee1933] - deps: update zlib to 1.3.1-63d7e16 (Node.js GitHub Bot) #60898
[09259532ef] - deps: update googletest to 1b96fa1 (Node.js GitHub Bot) #60739
[[aa8bdb6886]

Configuration

📅 Schedule: Branch creation - "before 12pm on Sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the Meta: Dependencies label

renovate bot requested a review from NotKaskus as a code owner

November 12, 2023 00:29

renovate bot changed the title ~~chore(deps): update dependency lint-staged to ^15.1.0~~ chore(deps): update all non-major dependencies

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 79662b9 to e119b78 Compare

November 16, 2023 04:58

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 64642b9 to 2d9cfee Compare

November 22, 2023 15:34

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 769da9a to 9796f63 Compare

December 3, 2023 20:32

renovate bot force-pushed the renovate/all-minor-patch branch from 9796f63 to f1bd8ad Compare

December 10, 2023 09:33

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 86ef857 to add01fb Compare

December 24, 2023 06:33

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from c701503 to 93ea454 Compare

January 10, 2024 03:49

renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 24976b7 to d0f8c38 Compare

January 17, 2024 11:34

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 36f0c91 to cd0d1f9 Compare

January 25, 2024 11:04

renovate bot force-pushed the renovate/all-minor-patch branch from cd0d1f9 to 8110895 Compare

January 31, 2024 11:32

renovate bot force-pushed the renovate/all-minor-patch branch from 7269ec8 to 1521724 Compare

April 10, 2024 20:13

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 39ef814 to e9a41e3 Compare

May 9, 2024 15:11

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 4d5be00 to 56809e8 Compare

May 28, 2024 19:27

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from b3ecafd to a6f292d Compare

June 5, 2024 09:55

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 793fc0a to e9bb1ec Compare

June 12, 2024 18:43

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 8c3181b to 7739bb1 Compare

June 21, 2024 16:12

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from d195358 to 137f4fe Compare

July 13, 2024 16:34

renovate bot force-pushed the renovate/all-minor-patch branch from 137f4fe to bf3cca8 Compare

July 17, 2024 12:46

renovate bot force-pushed the renovate/all-minor-patch branch from bf3cca8 to 8e72d25 Compare

July 24, 2024 14:06

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 89891e6 to a14bbf3 Compare

August 5, 2024 17:38

renovate bot force-pushed the renovate/all-minor-patch branch from a14bbf3 to 424a6f5 Compare

August 13, 2024 07:24

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from ab257f9 to 98f33ba Compare

August 24, 2024 16:38

renovate bot force-pushed the renovate/all-minor-patch branch from 98f33ba to ef0e69b Compare

September 1, 2024 15:33

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 2c09f75 to 8a379f6 Compare

September 19, 2024 11:45


          chore(deps): update all non-major dependencies

f65ec0a

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Meta: Dependencies