fix(deps): update all non-major dependencies#22734
Merged
Merged
Conversation
f605b86 to
57643af
Compare
376ff46 to
1fd6a2d
Compare
1fd6a2d to
9fab34f
Compare
sapphi-red
approved these changes
Jun 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^1.5.1→^1.6.0^6.0.2→^6.0.34.1.8→4.1.9^10.5.0→^10.5.110.5.2^2.10.37→^2.10.38^4.28.2→^4.28.4^4.16.2→^4.17.017.6.0→17.7.0^17.6.0→^17.7.0^4.6.6→^4.6.7^17.0.7→^17.0.8^4.20260611.0→^4.20260623.0^5.1.11→^5.1.155.1.16^0.54.0→^0.56.0^1.69.0→^1.71.0^1.60.0→^1.61.110.34.3→10.34.4v6.0.8→v6.0.9^5.56.3→^5.56.4^4.6.0→^4.7.04.7.18.61.0→8.62.0^8.61.0→^8.62.0^1.13.1→^1.13.2^4.1.8→^4.1.9v0.5.6→v0.5.7Release Notes
bombshell-dev/clack (@clack/prompts)
v1.6.0Compare Source
Minor Changes
#568
f87933fThanks @florian-lefebvre! - Updates default formatter ofnote()to note dim lines anymoreIf you want the old behavior, provide a
format()function:import { note } from '@​clack/prompts'; +import { styleText } from 'node:util'; note( 'You can edit the file src/index.jsx', 'Next steps.' + { format: (text) => styleText('dim', text) } );#567
cc6aab5Thanks @dreyfus92! - Add keyboard instruction footers toselect,multiselect, andgroupMultiselectin the active state, matching autocomplete. No option — always shown.Patch Changes
2f2b52f,e1b6ee7]:vitejs/vite-plugin-react (@vitejs/plugin-react)
v6.0.3Compare Source
vitest-dev/vitest (@vitest/utils)
v4.1.9Compare Source
🐞 Bug Fixes
importOriginalwith optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in #10546 (a5180)View changes on GitHub
postcss/autoprefixer (autoprefixer)
v10.5.1Compare Source
grid-areaspan reset for overriding areas (by @puneetdixit200).web-platform-dx/baseline-browser-mapping (baseline-browser-mapping)
v2.10.38Compare Source
browserslist/browserslist (browserslist)
v4.28.4Compare Source
SyntaxErrorregression of 4.28.3.v4.28.3Compare Source
un-ts/eslint-plugin-import-x (eslint-plugin-import-x)
v4.17.0Compare Source
Minor Changes
4b2c0c5Thanks @regseb! - SupportRegExpin theimport-x/ignoresetting and theignoreoption of theno-unresolvedrule.Patch Changes
#494
1c84235Thanks @morgan-coded! - Fixedno-unresolvedcrashing when case-sensitive path checks encounterEACCESorEPERMon an ancestor directory.#481
3e13121Thanks @B4nan! - fix: memoize legacyNodeResolve resolver to avoid native memory leak#484
9a07009Thanks @sairus2k! - Make theextensionsrule check Node.js subpath imports (specifiers starting with#, e.g.#utils/helper). PreviouslyparsePathtreated a leading#as a URL hash fragment, so the rule skipped extension validation for these imports.Note: single-segment subpath imports without a slash (e.g.
#dep) are still skipped by the existing external-root-module classification; fixing that is deferred to avoid expanding scope.#468
240ed58Thanks @silverwind! - Makeextensionshandle.d.tscorrectly#479
e3cc7e4Thanks @mrginglymus! - fix: strip querystrings and hash fragments when checking for file existence#476
fce29b1Thanks @nbouvrette! - fix(deps): replace @package-json/types with an inline minimal typesindresorhus/globals (globals)
v17.7.0Compare Source
less/less.js (less)
v4.6.7Compare Source
Changes
lint-staged/lint-staged (lint-staged)
v17.0.8Compare Source
Patch Changes
#1809
179b437- Fix lint-staged discarding the ongoing merge conflict status (.git/MERGE_HEAD) when using the--hide-unstagedor--hide-alloptions.#1811
3d0b2c0- Fix issues with Git commands that are successful but also emit warnings tostderr, by ignoring thestderroutput completely when the process exits with code 0. This was the behavior when usingnano-spawnandexeca, but when switching totinyexecin 16.3.0 bothstdoutandstderrwere used as interleaved output.cloudflare/workers-sdk (miniflare)
v4.20260623.0Compare Source
Patch Changes
#14364
a085decThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#14383
9a0de8fThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#14397
fab565fThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
v4.20260617.1Compare Source
Patch Changes
#14118
b38823fThanks @aicayzer! - FixUint8Arraystep outputs in local Workflows being persisted with the full backingArrayBufferA
Uint8Arrayreturned from a Workflows step underwrangler devwas serialised together with its full underlyingArrayBuffer, causing a rawSQLITE_TOOBIGerror at view sizes well below the documented 1MiB step-output limit. For example, a 200KB view sliced from an 800KB buffer (a common pattern fromcrypto.getRandomValuesorarr.slice(...)on a larger pool) would fail. The view's bytes are now copied to a tight buffer before persistence, bringing local behaviour in line with production. Fixes #14101.v4.20260617.0Compare Source
Patch Changes
#14347
673b09eThanks @jamesopstad! - Update undici from 7.24.8 to 7.28.0#14346
e930bd4Thanks @haidargit! - Bumpwsfrom 8.20.1 to 8.21.0 to address GHSA-96hv-2xvq-fx4pGHSA-96hv-2xvq-fx4p / CVE-2026-48779 (high severity) reports a remote memory-exhaustion DoS in
ws@<8.21.0: a peer sending a high volume of tiny fragments and data chunks over modest network traffic can crash awsserver or client via OOM. The fix shipped in ws@8.21.0 (commit2b2abd45, released 2026-05-22), which also introduces themaxBufferedChunksandmaxFragmentsoptions. This change bumps the workspace catalog entry so thatminiflare,wrangler, and@cloudflare/vite-pluginall pick up the patched release.#14314
5c3bb11Thanks @harryzcy! - Bump esbuild to 0.28.1This update includes several bug fixes from esbuild versions 0.27.3 through 0.28.1. See the esbuild changelog for details.
#14331
296ad65Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
v4.20260616.0Compare Source
Minor Changes
#14221
0e055d3Thanks @mglewis! - Supportcf.image(transform via Workers) image transformations in local devfetch(url, { cf: { image: { ... } } })now transforms images locally via Sharp, instead of returning the original bytes unchanged. This mirrors the production "transform via Workers" feature, so Workers already usingcf.imagebehave much more closely to production inwrangler dev.As with the Images binding,
cf.imagetransforms require Sharp to be installed — transforms are silently skipped if Sharp is unavailable.Patch Changes
#14271
27db82cThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#14298
2a6a26bThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#14317
9a424edThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#14287
41f391fThanks @edmundhung! - Improve errors for missing resource bindingsWhen methods like
getKVNamespace()orgetR2Bucket()are called with a binding name that is not configured for that resource type, Miniflare now reports the expected binding type in the error message.ai/nanoid (nanoid)
v5.1.15Compare Source
v5.1.14Compare Source
v5.1.13Compare Source
v5.1.12Compare Source
oxc-project/oxc (oxfmt)
v0.56.0Compare Source
v0.55.0Compare Source
🚀 Features
9a2788blinter/unicorn: Implementprefer-export-fromrule (#22935) (AliceLanniste)oxc-project/oxc (oxlint)
v1.71.0Compare Source
🚀 Features
0dc2405linter: Add schema foreslint/no-restricted-properties(#23619) (Sysix)b638d0elinter: Add schema fornode/callback-return(#23615) (Sysix)eb8bedclinter: Add schema forimport/extensions(#23557) (WaterWhisperer)46f3625linter: Implement node/no-sync rule (#23589) (fujitani sora)b01739alinter: Add schema forunicorn/numeric-separators-style(#23554) (Mikhail Baev)68afd2alinter/node: Implementno-mixed-requiresrule (#23539) (fujitani sora)a421215linter: Add schema foreslint/prefer-destructuring(#23410) (WaterWhisperer)84438belinter/jsdoc: Added missing options torequire-param-description(#23416) (kapobajza)51910dflinter/jsdoc: Add missing options torequire-param-typerule (#23418) (kapobajza)e90925flinter/unicorn: Implement prefer-number-coercion rule (#23497) (Shekhudd1c866linter/vue: Implement no-async-in-computed-properties rule (#23493) (bab)b02444elinter: Add schema forreact/jsx-no-script-url(#23475) (WaterWhisperer)a8dce46linter/unicorn: Implementmax-nested-callsrule (#23461) (arieleli01212)🐛 Bug Fixes
a303c23linter/jsx-a11y: Alignanchor-is-validconfig with upstream (#23446) (camc314)📚 Documentation
b50bf4dlinter: Remove manually written options doc foreslint/arrow-body-style(#23490) (Mikhail Baev)v1.70.0Compare Source
🚀 Features
2e8bda4linter/vue: Implement no-dupe-keys rule (#23350) (bab)1490a0alinter/react: Implement react-compiler rule (#23202) (Boshen)dd560aelinter/unicorn: Implementno-array-fill-with-reference-typerule (#23397) (Mikhail Baev)af36c2flinter: Add schema forreact/jsx-curly-brace-presence(#23400) (WaterWhisperer)47d34a3linter: Add schema forreact/jsx-handler-names(#23393) (WaterWhisperer)f4250d0linter: Add schema forunicorn/import-style(#23386) (WaterWhisperer)30c74celinter: Add schema forjsx_a11y/no-noninteractive-element-to-interactive-role(#23384) (Sysix)cfbe8dclinter: Add schema forjsx_a11y/no-interactive-element-to-noninteractive-role(#23382) (WaterWhisperer)d15b7fflinter: Add schema fortypescript/no-restricted-types(#23381) (WaterWhisperer)028a811linter: Add schema forjsx-a11y/media-has-caption(#23377) (Sysix)b3b1038linter: Add schema forjsx-a11y/label-has-associated-control(#23376) (Sysix)7ada6b2linter: Add schema forjsx_a11y/no-distracting-elements(#23379) (WaterWhisperer)ee3dd49linter: Add schema forjsx-a11y/img-redundant-alt(#23374) (Sysix)df5f8ddlinter: Add short descriptions to most lint rules. (#23365) (Connor Shea)e3fd735linter: Add schema forjsx_a11y/alt-text(#23369) (Sysix)0f2fff4linter: Add schema forreact/exhaustive-deps(#23372) (Mikhail Baev)e3e4e10linter: Add schema forreact_perf/jsx-no-new-object-as-prop(#23368) (Mikhail Baev)9366d44linter: Add schema forunicorn/prefer-at(#23366) (WaterWhisperer)f57b55dlinter: Add schema fortypescript/array-type(#23355) (Sysix)0dcf912linter: Add schema fortypescript/ban-ts-comment(#23354) (Sysix)51fa83elinter: Add schema forreact/no-did-update-set-state(#23357) (Mikhail Baev)59db0bdlinter: Add schema forconsistent-generic-constructors(#23353) (Sysix)c4775c0linter: Add schema fortypescript/consistent-type-assertions(#23349) (Sysix)6e516f7linter: Add schema fortypescript/consistent-type-imports(#23348) (Sysix)012134dlinter: Add schema forreact/jsx-no-target-blank(#23345) (WaterWhisperer)0806aaelinter: Add schema forjsx_a11y/no-noninteractive-tabindex(#23337) (Mikhail Baev)0708b5alinter: Add schema forreact/jsx-filename-extension(#23315) (Mikhail Baev)150bce1linter: Add schema fortypescript/no-empty-object-type(#23309) (Sysix)f9e36f1linter: Add schema fortypescript/no-duplicate-type-constituents(#23308) (Sysix)937accflinter: Add schema fortypescript/no-invalid-void-type(#23307) (Sysix)3e042b9linter: Add schema fortypescript/no-misused-promises(#23306) (Sysix)da212d1linter: Add schema fortypescript/no-unnecessary-condition(#23305) (Sysix)f8f0d38linter: Add schema fortypescript/parameter-properties(#23304) (Sysix)2275fc7linter: Add schema fortypescript/prefer-nullish-coalescing(#23302) (Sysix)d353858linter: Add schema fortypescript/prefer-string-starts-ends-with(#23301) (Sysix)03060f5linter: Add schema fortypescript/triple-slash-reference(#23300) (Sysix)6619ceelinter: Add schema forpromise/param-names(#23298) (Sysix)8bf108elinter: Add schema forpromise/catch-or-return(#23297) (Sysix)48158d0linter: Add schema forvitest/consistent-each-for(#23294) (Sysix)7e74c98linter: Add schema forvitest/consistent-test-filename(#23293) (Sysix)ff94d4alinter: Add schema forvitest/consistent-vitest-vi(#23292) (Sysix)2409a10linter: Add schema forvitest/prefer-import-in-mock(#23291) (Sysix)3d782b7linter: Add schema forreact/no-unstable-nested-components(#23287) (Mikhail Baev)0a0bc2flinter/jsx-a11y: AddallowedRedundantRolesoption tono-redundant-roles(#22820) (bab)80758a5linter/vue: Implement no-side-effects-in-computed-properties rule (#23282) (bab)e3869aclinter: Add schema forreact/no-object-type-as-default-prop(#23279) (Mikhail Baev)4480609linter: Add schema forreact/jsx-props-no-spreading(#23276) (Mikhail Baev)08d68a5linter/react: Implementjsx-no-literalsrule (#23145) (kapobajza)9a2788blinter/unicorn: Implementprefer-export-fromrule (#22935) (AliceLanniste)bdb723clinter/unicorn: Implement prefer-single-call rule (#23235) (Yuzhe Shi)31543edlinter: Add schema forvue/define-props-destructuring(#23252) (Sysix)21b6c3dlinter: Add schema foroxc/no-async-endpoint-handlers(#23251) (Sysix)e77ff81linter: Add schema forunicorn/prefer-object-from-entries(#23249) (Mikhail Baev)bcac2d6linter: Add schema forjest/vitest/no-restricted-matchers(#23247) (Sysix)539f036linter: Add schema forjest/vitest/no-restricted-*-methods(#23246) (Sysix)dd1b927linter/vue: Implement require-default-prop rule (#22951) (bab)3f018e7linter: Add schema forunicorn/no-instanceof-builtins(#23225) (Mikhail Baev)e0d0f78linter: Verify promise/no-callback-in-promise schema (#23141) (beanscg)123d4f4linter: Add schema forjest/vitest/valid-expect(#23185) (Sysix)46c8a21linter: Add schema forjest/vitest/require-top-level-describe(#23184) (Sysix)41465cflinter: Add schema forjest/vitest/prefer-snapshot-hint(#23183) (Sysix)d068b9blinter: Add schema forjest/vitest/prefer-expect-assertions(#23181) (Sysix)064a1eelinter: Add schema forjest/prefer-ending-with-an-expect(#23180) (Sysix)d046797linter: Add schema forjest/vitest/no-standalone-expect(#23179) (Sysix)137b9a6linter: Add schema forjest/vitest/no-large-snapshots(#23178) (Sysix)0f3e4a5linter: Add schema forjest/vitest/no-hooks(#23177) (Sysix)cd0b384linter: Add schema forunicorn/explicit-length-check(#23155) (Mikhail Baev)01b74c4linter: Add schema forjest/no-deprecated-functions(#23136) (Sysix)9d6a387linter: Add schema forunicorn/catch-error-name(#23137) (Mikhail Baev)0da8efalinter: Add schema forjest/vitest/max-nested-describe(#23131) (Sysix)d71c9fdlinter: Add schema foreslint/no-use-before-define(#23129) (Sysix)🐛 Bug Fixes
26ddac6linter: Avoid config schema generation forjsx_a11y/no-noninteractive-element-interactions(#23385) (Sysix)40556adlinter: Parsejsx-a11y/control-has-associated-labelconfig withDefaultRuleConfig(#23373) (Sysix)71e9648linter: Expose no-noninteractive-element-interactions schema (#23283) (camc314)6c86d1clinter/react-perf: Correct nativeAllowList all schema (#23229) (camc314)4dd52delinter/react-perf: Re-generate stale snapshots (#23228) (camc314)8f3db61linter: Allow options foreslint/capitalized-comments(#23139) (Sysix)⚡ Performance
f09707elinter:jest/no-deprecated-functionsstore config version asusize(#23138) (Sysix)📚 Documentation
f682e25linter: Remove manually written options doc foreslint/prefer-arrow-callback(#23438) (Mikhail Baev)64c942clinter: Remove manually written options doc foreslint/no-sequences(#23420) (Mikhail Baev)14abf32linter/react-perf: Use autogenerated docs (#23227) (camc314)microsoft/playwright (playwright-chromium)
v1.61.1Compare Source
v1.61.0Compare Source
🔑 WebAuthn passkeys
New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer
navigator.credentials.create()/navigator.credentials.get()ceremonies in the page — no real hardware key required, works in all browsers:You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.
🗃️ Web Storage
New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:
New APIs
Network
Browser and Screencast
artifactsDirin browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.cursorin screencast.showActions() controls the cursor decoration rendered for pointer actions.onFramecallback in screencast.start() now receives atimestampof when the frame was presented by the browser.Test runner
Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.