chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@vitejs/plugin-legacy (source)	^8.0.2 → ^8.2.0			dependencies	minor
@vue/reactivity (source)	^3.5.38 → ^3.5.39			devDependencies	patch
actions/stale	v10.3.0 → v10.4.0			action	minor
enhanced-resolve	^5.24.0 → ^5.24.2			dependencies	patch
eslint (source)	9.39.4 → 9.39.5			devDependencies	patch
eslint-plugin-import-x	^4.16.2 → ^4.17.1			devDependencies	minor
eslint-plugin-jsdoc	63.0.7 → 63.0.13			devDependencies	patch
exsolve	^1.0.8 → ^1.1.0			dependencies	minor
globals	^17.6.0 → ^17.7.0			devDependencies	minor
globby	16.2.0 → 16.2.1			devDependencies	patch
knip (source)	6.17.1 → 6.26.0			devDependencies	minor
nypm	^0.6.7 → ^0.6.8			dependencies	patch
playwright-core (source)	1.61.0 → 1.61.1			devDependencies	patch
pnpm (source)	10.34.4 → 10.34.5			packageManager	patch
std-env	^4.1.0 → ^4.2.0			dependencies	minor
std-env	4.1.0 → 4.2.0			devDependencies	minor
terser (source)	^5.48.0 → ^5.49.0			dependencies	minor
typescript-eslint (source)	^8.61.1 → ^8.64.0			devDependencies	minor
vite (source)	~7.3.5 → ~7.3.6			dependencies	patch
vite (source)	~7.3.5 → ~7.3.6			devDependencies	patch
vitest (source)	4.1.9 → 4.1.10			devDependencies	patch
vue-bundle-renderer	^2.2.0 → ^2.3.1			dependencies	minor

---

Release Notes

vitejs/vite (@​vitejs/plugin-legacy)

v8.2.0

Features

• legacy: prefer oxc as minifier (fix #​21973) (#​22468) (ab5dafa)

Bug Fixes

• deps: update all non-major dependencies (#​22734) (e635f49)
• deps: update rolldown-related dependencies (#​22591) (2ce6677)

Code Refactoring

• legacy: use babel-plugin-polyfill-* consistently (#​22874) (9dddae6)

v8.1.0

Compare Source

vuejs/core (@​vue/reactivity)

v3.5.39

Compare Source

Bug Fixes

• compiler-core: correct filter rewrite recursion (#​14959) (be7ce31)
• hydration: force patch dynamic props when hydrating (#​9083) (024cf06), closes #​9033
• hydration: respect data-allow-mismatch on conditional branches (#​12801) (164af63), closes #​12782
• reactivity: avoid triggering effects when set fails (#​14964) (e450973)
• runtime-core: handle non-isomorphic block element update (#​15002) (932ddd0), closes #​6385
• runtime-core: normalize function children for elements and Teleport (#​9108) (2f374cd), closes #​9107
• runtime-core: pause tracking when invoking function refs (#​14985) (3ac052b)
• runtime-core: preserve once event listener name (#​8341) (87b73b6), closes #​8342
• runtime-dom: preserve option modifier event names (#​8338) (4b659e6), closes #​8334
• ssr: dedupe inherited scope ids during vnode rendering (#​15005) (027da6b), closes #​12159 #​12175
• ssr: resolve nested async teleport content (#​9431) (31d0f23), closes #​6207
• teleport: handle teleport unmount edge case (#​12705) (671997a), closes #​12702
• types: support named tuple emits (#​12676) (232f402), closes #​12673
• types: validate defineModel defaults (#​14968) (747f57e), closes #​14966

actions/stale (actions/stale)

v10.4.0

Compare Source

What's Changed

Bug Fix

• Fixed only-issue-types validation by @​trueberryless in #​1338

Dependency Updates

• Bump undici to 6.27.0 via override, clean up stale license files, and version to 10.4.0. by @​dependabot in #​1342

New Contributors

• @​trueberryless made their first contribution in #​1338

Full Changelog: actions/stale@v10.3.0...v10.4.0

webpack/enhanced-resolve (enhanced-resolve)

v5.24.2

Compare Source

Patch Changes

• Batch cached filesystem callbacks from one synchronous burst into a single tick. (by @​alexander-akait in #​623)

v5.24.1

Compare Source

Patch Changes

• Reduce hot-path allocations in the resolve pipeline. (by @​xiaoxiaojx in #​615)

eslint/eslint (eslint)

v9.39.5

Compare Source

un-ts/eslint-plugin-import-x (eslint-plugin-import-x)

v4.17.1

Compare Source

Patch Changes

• #​498 cf25a01 Thanks @​marcalexiei! - fix(extensions): don't require an extension for package subpaths that resolve to a .d.ts (e.g. vitest/config)

v4.17.0

Compare Source

Minor Changes

• #​474 4b2c0c5 Thanks @​regseb! - Support RegExp in the import-x/ignore setting and the ignore option of the no-unresolved rule.

Patch Changes

• #​494 1c84235 Thanks @​morgan-coded! - Fixed no-unresolved crashing when case-sensitive path checks encounter EACCES or EPERM on an ancestor directory.

• #​481 3e13121 Thanks @​B4nan! - fix: memoize legacyNodeResolve resolver to avoid native memory leak

• #​484 9a07009 Thanks @​sairus2k! - Make the extensions rule check Node.js subpath imports (specifiers starting with #, e.g. #utils/helper). Previously parsePath treated a leading # as a URL hash fragment, so the rule skipped extension validation for these imports.

  Note: single-segment subpath imports without a slash (e.g. #dep) are still skipped by the existing external-root-module classification; fixing that is deferred to avoid expanding scope.

• #​468 240ed58 Thanks @​silverwind! - Make extensions handle .d.ts correctly

• #​479 e3cc7e4 Thanks @​mrginglymus! - fix: strip querystrings and hash fragments when checking for file existence

• #​476 fce29b1 Thanks @​nbouvrette! - fix(deps): replace @​package-json/types with an inline minimal type

gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)

v63.0.13

Compare Source

Bug Fixes

• failing pages build and deployment (3728347)

v63.0.12

Compare Source

v63.0.11

Compare Source

Bug Fixes

• require-jsdoc: skip overloads to find method comment blocks; fixes #​1688 (7676b50)

v63.0.10

Compare Source

Bug Fixes

• escape-inline-tags: allow scoped packages in declaration references (#​1705) (70e0a11)

v63.0.9

Compare Source

Bug Fixes

• check-template-names, require-template, valid-types: keep commas inside @template default values (0980b71)

v63.0.8

Compare Source

Bug Fixes

• check-template-names: detect template usage in @augments/@extends/@implements types (208079f)

unjs/exsolve (exsolve)

v1.1.0

Compare Source

compare changes

🚀 Enhancements

• Sync internal with latest Node.js upstream (#​49)

🔥 Performance

• Optimize resolver cache lookups (#​48)

🏡 Chore

• Update deps (43c20e3)
• Apply automated updates (15806be)
• Fix ts issues (3177a7e)

❤️ Contributors

• Pi0x x@pi0.io
• Alexander Lichter (@​TheAlexLichter)
• Pooya Parsa (@​pi0)

sindresorhus/globals (globals)

v17.7.0

Compare Source

sindresorhus/globby (globby)

v16.2.1

Compare Source

• Fix gitignore ignoring an entire checkout under an anchored ancestor path (#​277) e7bd988

---

webpro-nl/knip (knip)

v6.26.0: Release 6.26.0

Compare Source

• ci: add path filters (#​1871) (4249935) - thanks @​trueberryless!
• Add CodeRabbit as gold sponsor (1da09fd)
• Fix up docs a bit more (39125a7)
• Don't report ambient declaration files as unused (aed361c)
• Register oclif command files as entries (3b4d58c)
• Add electron-vite plugin (d92107e)
• Add esbuild plugin (ef3b601)
• Ignore more globally available binaries (8292981)
• Resolve #-imports to source when node condition is unbuilt (resolve #​1873) (f2713ed)
• Ignore gh as a globally available binary (a6f0772)
• Resolve Vitest benchmark files as entries (5742913)
• Extract shared Vue auto-import machinery into plugins/_vue (7301075)
• Scope compiler extensions per workspace (5e6f82b)
• Resolve auto-imported components in the Vue SFC compiler (009aad8)
• Add plugins for the Vue auto-import ecosystem (f638c83)
• Enable Vue SFC compiler on unplugin-vue and @​vitejs/plugin-vue (9396ab1)
• Recognize vite-plugin-vue-meta-layouts (same layouts convention) (3ceee89)
• Add vite-plugin-pages and unplugin-icons plugins (9bc1754)
• Add vite-plugin-pwa and @​intlify/unplugin-vue-i18n plugins (45dea0a)
• Dog, food. (e1249ad)
• Update query snapshot (a45941d)
• Don't misread Nitro route types as Vue component auto-imports (43aecd5)
• Read oxlint jsPlugins from vite-plus vite.config and .oxlintrc.json (589ffda)
• Add vite-plus plugin for run.tasks and staged scripts (f041c19)
• Support @​vite-pwa/nuxt PWA config in nuxt.config (8fa7b11)
• Add @​vite-pwa/assets-generator plugin (4254f7d)
• Add @​nuxtjs/i18n plugin (dfb9acb)
• Read plugin entries from vite.config options and index.html (d533da8)
• Fix false positives in VitePress, next-mdx and unplugin-vue-i18n plugins (b99702a)
• Respect optional peers in pnpm and Yarn packageExtensions (aab080b)
• Detect babel plugins in the Storybook config (5dea975)
• Add shared AST helpers for imported calls and first property values (c84bb7a)
• Inline trivial resolveFromAST wrappers and normalize orval and sst (620079d)
• Extract inline resolveFromAST implementations to dedicated files (b5231c1)
• Normalize resolveFromAST files to a uniform contract (fc1ba0f)
• chore: migrate to Astro 7 and Sätteri (#​1875) (f256a5b) - thanks @​trueberryless!
• Show contributor count on docs homepage (6b8454a)
• Exclude gitignored package entry points (606e5d0)
• Add Tauri plugin (199180d)
• Add Laravel plugin (1974533)
• Add Quasar plugin (a220729)

v6.25.0: Release 6.25.0

Compare Source

• fix: derive package name from package.json under Yarn nodeLinker: pnpm store (#​1852) (3764605) - thanks @​blowery!
• Pick up types used in module augmentations via path aliases (resolve #​1850) (9cc5a41)
• feat: add support for packageExtensions in yarn and pnpm (#​1847) (61d3164) - thanks @​trueberryless!
• fix(ci): do not run integration on forks (#​1855) (d23c10d) - thanks @​trueberryless!
• chore(ci): improve security through specific permissions (#​1856) (1eb42e6) - thanks @​trueberryless!
• chore(ci): add concurrency blocks (#​1857) (3bf3d11) - thanks @​trueberryless!
• fix(next): resolve src/ entry patterns like Next.js does (#​1859) (6e6a509) - thanks @​dayongkr!
• Fix Bun test defaults (#​1860) (2ac4c04) - thanks @​jakeleventhal!
• Extend agentic guidelines re. plugins (da606eb)
• Support rspack and path aliases in require.context (d231d67)
• Support path aliases in import.meta.glob (resolve #​1821) (fc7bb1e)
• Register MDX compiler in Storybook plugin (6f18138)
• Resolve TypeDoc customCss and customJs files (105687d)
• Resolve inline Babel presets/plugins in Jest transform (38e4a4a)
• Mark graphql-codegen generated outputs as entries (1255369)
• Add Fumadocs plugin (77c2142)
• Support next.config.mts in Next.js plugin (0f27e77)
• Add script command parser built on unbash (195510c)
• Gate Bun test entries on an actual bun test invocation (92903ec)
• Detect Node.js test runner via script command parser (a0bfe7b)
• Extract shared command walker for bash-parser and plugins (1301475)
• Normalize aliased glob patterns to posix for Win (23b4a74)
• Resolve inherited tsconfig paths from the extended config's directory (resolve #​1866) (e3f0e5c)
• Handle var interpolations in shell cmd scripts (resolve #​1867) (9422d06)
• Update query snapshot (5e192e9)
• Add support for Prettier overrides (#​1869) (5dc7f12) - thanks @​remcohaszing!
• Handle Serverless esbuild inject entries (#​1865) (46111ef) - thanks @​jakeleventhal!
• docs: add links to Discord and Contributing in issue templates (#​1868) (5ab3483) - thanks @​trueberryless!
• Add eve (Vercel framework) plugin (#​1864) (20cd970) - thanks @​jakeleventhal!
• Add circular dependencies as opt-in cycles issue type (resolve #​1734) (#​1812) (1b0ed6b)
• chore(ci): remove redundant tag triggers (#​1863) (c61d008) - thanks @​trueberryless!
• Fix up docs a bit (89a2d8d)

v6.24.0: Release 6.24.0

Compare Source

• chore: update year in license (#​1833) (32bc844) - thanks @​trueberryless!
• ci: pin github actions (#​1835) (82a8d09) - thanks @​trueberryless!
• Assume Node 24+/Bun and remove compilation step (d9ef038)
• Don't report working-directory scripts as unlisted binaries (resolve #​1834) (aea7923)
• Add pnpm run lint to CI workflow (ec9aa1c)
• feat: add settings for Zed editor to use oxlint and oxfmt (#​1836) (111f2e0) - thanks @​trueberryless!
• fix: remove format_on_save: true settings from Zed settings to respect user settings (#​1838) (dc2a640) - thanks @​trueberryless!
• feat: add Renovate for GitHub actions only (#​1839) (ffce88c) - thanks @​trueberryless!
• Ignore import() in JSDoc examples (#​1844) (6f090f9) - thanks @​cyphercodes!
• Don't report types used only in module augmentations as unused (resolve #​1843) (7901abd)
• Restore CI intent (0d739be)
• feat: add less, stylus compilers and astro, svelte, vue import resolution (#​1845) (5525759) - thanks @​trueberryless!
• Don't report built-in compiler dependencies as unused (3c9d4ad)
• feat: add scss handling to stencil plugin (#​1846) (acba6b8) - thanks @​johnjenkins!
• fix(reporters): always print the issue-type title for a single group (#​1848) (cf997b2) - thanks @​morgan-coded!
• Export Issue, IssueRecords and IssueType types (resolve #​1840) (260f192)
• Squeeze every bit of perf out around compilers (bb0eeb6)

v6.23.0: Release 6.23.0

Compare Source

• feat: add customCss to Starlight plugin (#​1828) (f85d96f) - thanks @​trueberryless!
• fix: enable vite and vitest plugins when vite-plus is found (#​1830) (62e9753) - thanks @​ghostdevv!
• feat: add support for @​astrojs/markdoc (#​1829) (94e2863) - thanks @​trueberryless!
• Support nub (resolve #​1831) (8a6050e)
• Don't report optimizeDeps and dedupe deps as unlisted (resolve #​1832) (849b5ac)

v6.22.0: Release 6.22.0

Compare Source

• Support XO v1+ (#​1819) (1dffe36) - thanks @​patrik-csak!
• feat: detect execaNode scripts in execa visitor (#​1824) (5095ae1) - thanks @​gwagjiug!
• Skip optional peerDeps referenced only via a host (resolve #​1823) (7759a98)
• docs: update npmjs.com links to npmx.dev (#​1826) (11fe8bd) - thanks @​serhalp!
• docs: fix semi-broken link to DEVELOPMENT.md in CONTRIBUTING.md (#​1827) (a5302b2) - thanks @​serhalp!
• feat: add support for Lunaria (#​1825) (3e1b821) - thanks @​trueberryless!
• Fix lint issues (76c92e2)

v6.21.0: Release 6.21.0

Compare Source

• Detect Vite config dependencies (resolve #​1721) (8754c43)
• fix: Update timerifyMethods to include resolveFromAST (#​1814) (3c8deac) - thanks @​gwagjiug!
• Fix crash on null root export in package.json (resolve #​1815) (9b8af2b)
• Fix unresolved subpath imports with a colon prefix (resolve #​1816) (f89db41)
• Detect Next.js entry files in subdirectory (resolve #​1817) (f32c6ea)

v6.20.0: Release 6.20.0

Compare Source

• Add raw transfer opt-out (resolve #​1813) (6f08c68)
• Fix cached plugin config cycles (resolve #​1811) (2bc2f24)

v6.19.0: Release 6.19.0

Compare Source

• feat: support new optional sveltekit config pattern via vite config (#​1810) (3fee8bf) - thanks @​fubits1!
• Optimize hot path string scanning (e30cfe7)
• Update astro snapshot (71e71a7)

v6.18.0: Release 6.18.0

Compare Source

• Update dependencies (pin oxc-resolver) (7dda4ec)
• Resolve tsconfig paths for non-TS importers independent of oxc ownership (3b71565)
• Format (64865f8)
• Fix false positive for Vitest mocks (#​1802) (ec93e20) - thanks @​remcohaszing!
• Mark npx-run binaries optional unless --no-install (resolve #​1803) (203c31e)
• Ignore pnpm [WARN] lines in ecosystem snapshots (392835a)
• Update slonik snapshot (62d802b)
• Update Jest entry patterns for Jest 30 (#​1808) (d2caedd) - thanks @​gwagjiug!
• Report stale workspaces configuration keys as configuration hints (#​1807) (9083c16) - thanks @​WooWan!

v6.17.2: Release 6.17.2

Compare Source

• Fix up jest plugin (63dbd65)
• Detect coverage provider from bare vitest --coverage flag (#​1800) (dc11d9f) - thanks @​WooWan!
• Don't disable configuration hints in workspace-scoped runs (#​1791) (8ce1ec8) - thanks @​WooWan!
• Detect react-email v6 packages from non-numeric version ranges (resolve #​1798) (27a1cae)
• Discover workspaces included after a negated pattern (resolve #​1797) (630e152)

microsoft/playwright (playwright-core)

v1.61.1

Compare Source

pnpm/pnpm (pnpm)

v10.34.5

Compare Source

unjs/std-env (std-env)

v4.2.0

Compare Source

compare changes

🚀 Enhancements

• Add Junie agent support (#​195)

🩹 Fixes

• agents: Don't detect kiro IDE integrated terminal as an agent (#​196)

🏡 Chore

• Update deps (aaeddcd)
• Update tsconfig (9e44e17)
• Update tsconfig (1b2503d)

❤️ Contributors

• Pi0x x@pi0.io
• Pooya Parsa (@​pi0)
• Gauthier POGAM--LE MONTAGNER (@​GauthierPLM)

terser/terser (terser)

v5.49.0

Compare Source

• Add ResizeObserver box option to domprops
• Do not evaluate exponentiation of BigInt
• Parse identifiers from newer unicode versions, and escape them for older runtimes

typescript-eslint/typescript-eslint (typescript-eslint)

v8.64.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

[Compare

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	typescript-eslint@​8.64.0
	vitest@​4.1.10
	playwright-core@​1.61.1
	@​vue/​reactivity@​3.5.39
	vite@​7.3.6
	exsolve@​1.1.0
	globals@​17.7.0
	std-env@​4.2.0
	eslint-plugin-import-x@​4.17.1
	vue-bundle-renderer@​2.3.1
	eslint-plugin-jsdoc@​63.0.13
	globby@​16.2.1
	nypm@​0.6.8
	terser@​5.49.0
	knip@​6.26.0
	@​vitejs/​plugin-legacy@​8.2.0
	eslint@​9.39.5
	enhanced-resolve@​5.24.2

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm eslint-plugin-jsdoc is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → npm/eslint-plugin-jsdoc@63.0.13 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/eslint-plugin-jsdoc@63.0.13. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@nuxt/bridge@1865

npm i https://pkg.pr.new/@nuxt/bridge-schema@1865

commit: e0604d4