deps: Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@typescript-eslint/eslint-plugin (source)	^8.55.0 → ^8.56.0
@typescript-eslint/parser (source)	^8.55.0 → ^8.56.0
pnpm (source)	10.29.3 → 10.30.1
turbo (source)	^2.8.7 → ^2.8.10

---

Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.56.0

Compare Source

🚀 Features

• support ESLint v10 (#​12057)

🩹 Fixes

• use parser options from context.languageOptions (#​12043)

❤️ Thank You

• Brad Zacher @​bradzacher
• fnx @​DMartens
• Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.56.0

Compare Source

🚀 Features

• support ESLint v10 (#​12057)

❤️ Thank You

• Brad Zacher @​bradzacher
• Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

pnpm/pnpm (pnpm)

v10.30.1: pnpm 10.30.1

Compare Source

Patch Changes

• Use the /-/npm/v1/security/audits/quick endpoint as the primary audit endpoint, falling back to /-/npm/v1/security/audits when it fails #​10649.

Platinum Sponsors

Gold Sponsors

v10.30.0

Compare Source

vercel/turborepo (turbo)

v2.8.10: Turborepo v2.8.10

Compare Source

What's Changed

create-turbo

• fix: Sanitize git command inputs in create-turbo by @​anthonyshew in #​11876

Changelog

• fix: Move node-plop to dependencies so PlopTypes resolves for consumers by @​anthonyshew in #​11862
• chore: Use 2024 edition in more packages, do not ignore some clippy l… by @​ognevny in #​11860
• perf: Optimize hot-path hash computation by avoiding clones and using unstable sorts by @​anthonyshew in #​11872
• perf: Replace twox-hash with xxhash-rust and optimize file hashing by @​anthonyshew in #​11874
• fix: Restrict credential file permissions to owner-only by @​anthonyshew in #​11870
• perf: Reduce allocations in globwalk by @​anthonyshew in #​11528
• perf: Replace O(V³) Floyd-Warshall with O(V+E) DFS in watch mode subgraph creation by @​anthonyshew in #​11878
• feat: Generate LLM-friendly markdown alongside --profile trace output by @​anthonyshew in #​11880
• feat: Make --profile and --anon-profile filename optional by @​anthonyshew in #​11883
• perf: Batch per-package git subprocess calls into repo-wide index by @​anthonyshew in #​11887
• perf: Parallelize and pre-build RepoGitIndex by @​anthonyshew in #​11889
• perf: Pre-compile glob exclusion filter and cache path prefix in file hashing by @​anthonyshew in #​11891

Full Changelog: vercel/turborepo@v2.8.9...v2.8.10

v2.8.9

Compare Source

v2.8.8: Turborepo v2.8.8

Compare Source

What's Changed

@​turbo/codemod

• fix: Enhance path validation in assertSafeGitArgument by @​odaysec in #​11788

Examples

• docs: Replace mysql refs with postgres by @​kyedavey in #​11827

Changelog

• fix: Use private blob store access in agents app by @​anthonyshew in #​11811
• fix: Pass non-empty body when initializing blob log files by @​anthonyshew in #​11812
• docs: Geistdocs update by @​haydenbleasel in #​11807
• fix: Allow overwriting existing blobs in run updates and log appends by @​anthonyshew in #​11813
• docs: Geistdocs update 2 by @​haydenbleasel in #​11814
• fix: Set 5-hour timeout on security audit sandbox by @​anthonyshew in #​11815
• fix: Resolve Windows TUI hang caused by portable-pty 0.9.0 ConPTY changes by @​anthonyshew in #​11816
• fix: Repair audit fixer log streaming and replace git push with patch upload by @​anthonyshew in #​11818
• chore: Small stuff for agent fixer by @​anthonyshew in #​11819
• chore: Bump tonic to 0.14 by @​anthonyshew in #​11820
• fix: Pin @​turbo/gen version to match the running turbo binary by @​anthonyshew in #​11822
• fix: Use secret_key_override in tests to eliminate env var race condition by @​anthonyshew in #​11824
• fix: Avoid panic in sandboxed environments by removing system-configuration dependency by @​anthonyshew in #​11828
• fix: Harden token protection with secrecy crate and close exposure gaps by @​anthonyshew in #​11831
• fix: Clean up orphaned Windows child processes on shutdown by @​anthonyshew in #​11829
• chore: Update lockfile for release by @​anthonyshew in #​11840
• fix: Sync lockfile with @​turbo/gen optionalDependencies by @​anthonyshew in #​11845

New Contributors

• @​haydenbleasel made their first contribution in #​11807
• @​kyedavey made their first contribution in #​11827

Full Changelog: vercel/turborepo@v2.8.7...v2.8.8

---

Configuration

📅 Schedule: Branch creation - "after 12pm on Friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview