Production Release 2025-03-04 #1448

tackley · 2025-03-04T09:25:09Z

Fixes

Chores

….0 to v8 (#1438) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [path-to-regexp@>=0.2.0 <1.9.0](https://redirect.github.com/pillarjs/path-to-regexp) | [`1.9.0` -> `8.2.0`](https://renovatebot.com/diffs/npm/path-to-regexp@>=0.2.0 <1.9.0/1.9.0/8.2.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/path-to-regexp/8.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/path-to-regexp/8.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/path-to-regexp/1.9.0/8.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/path-to-regexp/1.9.0/8.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>pillarjs/path-to-regexp (path-to-regexp@>=0.2.0 <1.9.0)</summary> ### [`v8.2.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v8.2.0): 8.2.0 [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v8.1.0...v8.2.0) **Fixed** - Allowing `path-to-regexp` to run on older browsers by targeting ES2015 - Target ES2015 [`5969033`](https://redirect.github.com/pillarjs/path-to-regexp/commit/5969033) - Also saved *0.22kb* (10%!) by removing the private class field down level - Remove `s` flag from regexp [`51dbd45`](https://redirect.github.com/pillarjs/path-to-regexp/commit/51dbd45) ### [`v8.1.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v8.1.0) [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v8.0.0...v8.1.0) **Added** - Adds `pathToRegexp` method back for generating a regex - Adds `stringify` method for converting `TokenData` into a path string ### [`v8.0.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v8.0.0): Simpler API [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v7.2.0...v8.0.0) Heads up! This is a fairly large change (again) and I need to apologize in advance. If I foresaw what this version would have ended up being I would not have released version 7. A longer blog post and explanation will be incoming this week, but the pivot has been due to work on Express.js v5 and this will the finalized syntax used in Express moving forward. **Added** - Adds key names to wildcards using `*name` syntax, aligns with `:` behavior but using an asterisk instead **Changed** - Removes group suffixes of `?`, `+`, and `*` - only optional exists moving forward (use wildcards for `+`, `{*foo}` for `*`) - Parameter names follow JS identifier rules and allow unicode characters **Added** - Parameter names can now be quoted, e.g. `:"foo-bar"` **Removed** - Removes `loose` mode - Removes regular expression overrides of parameters ### [`v7.2.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v7.2.0): Support array inputs (again) [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v7.1.0...v7.2.0) **Added** - Support array inputs for `match` and `pathToRegexp` [`3fdd88f`](https://redirect.github.com/pillarjs/path-to-regexp/commit/3fdd88f) ### [`v7.1.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v7.1.0): Strict mode [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v7.0.0...v7.1.0) **Added** - Adds a `strict` option to detect potential ReDOS issues **Fixed** - Fixes separator to default to `suffix + prefix` when not specified - Allows separator to be undefined in `TokenData` - This is only relevant if you are building `TokenData` manually, previously `parse` filled it in automatically **Comments** - I highly recommend enabling `strict: true` and I'm *probably* releasing a V8 with it enabled by default ASAP as a necessary security mitigation ### [`v7.0.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v7.0.0): Wildcard, unicode, and modifier changes [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v6.3.0...v7.0.0) Hi all! There's a few major breaking changes in this release so read carefully. **Breaking changes:** - The function returned by `compile` only accepts strings as values (i.e. no numbers, use `String(value)` before compiling a path) - For repeated values, when `encode !== false`, it must be an array of strings - Parameter names can contain all unicode identifier characters (defined as regex `\p{XID_Continue}`). - Modifiers (`?`, `*`, `+`) must be used after a param explicitly wrapped in `{}` - No more implied prefix of `/` or `.` - No support for arrays or regexes as inputs - The wildcard (standalone `*`) has been added back and matches Express.js expected behavior - Removed `endsWith` option - Renamed `strict: true` to `trailing: false` - Reserved `;`, `,`, `!`, and `@` for future use-cases - Removed `tokensToRegexp`, `tokensToFunction` and `regexpToFunction` in favor of simplifying exports - Enable a "loose" mode by default, so `/` can be repeated multiple times in a matched path (i.e. `/foo` works like `//foo`, etc) - `encode` and `decode` no longer receive the token as the second parameter - Removed the ESM + CommonJS dual package in favor of only one CommonJS supported export - Minimum JS support for ES2020 (previous ES2015) - Encode defaults to `encodeURIComponent` and decode defaults to `decodeURIComponent` **Added:** - Adds `encodePath` to fix an issue around `encode` being used for both path and parameters (the path and parameter should be encoded slightly differently) - Adds `loose` as an option to support arbitrarily matching the delimiter in paths, e.g. `foo/bar` and `foo///bar` should work the same - Allow `encode` and `decode` to be set to `false` which skips all processing of the parameters input/output - All remaining methods support `TokenData` (exported, returned by `parse`) as input - This should be useful if you are programmatically building paths to match or want to avoid parsing multiple times **Requests for feedback:** - Requiring `{}` is an obvious drawback but I'm seeking feedback on whether it helps make path behavior clearer - Related: Removing `/` and `.` as implicit prefixes - Removing array and regex support is to reduce the overall package size for things many users don't need - Unicode IDs are added to align more closely with browser URLPattern behavior, which uses JS identifiers ### [`v6.3.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v6.3.0): Fix backtracking in 6.x [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v6.2.2...v6.3.0) **Fixed** - Add backtrack protection to 6.x ([#324](https://redirect.github.com/pillarjs/path-to-regexp/issues/324)) [`f1253b4`](https://redirect.github.com/pillarjs/path-to-regexp/commit/f1253b4) ### [`v6.2.2`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v6.2.2): Updated README [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v6.2.1...v6.2.2) No API changes. Documentation only release. **Changed** - Fix readme example [`c7ec332`](https://redirect.github.com/pillarjs/path-to-regexp/commit/c7ec332) - Update shield URL [`e828000`](https://redirect.github.com/pillarjs/path-to-regexp/commit/e828000) ### [`v6.2.1`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v6.2.1): Fix matching `:name*` parameter [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v6.2.0...v6.2.1) **Fixed** - Fix invalid matching of `:name*` parameter ([#261](https://redirect.github.com/pillarjs/path-to-regexp/issues/261)) [`762bc6b`](https://redirect.github.com/pillarjs/path-to-regexp/commit/762bc6b) - Compare delimiter string over regexp [`86baef8`](https://redirect.github.com/pillarjs/path-to-regexp/commit/86baef8) **Added** - New example in documentation ([#256](https://redirect.github.com/pillarjs/path-to-regexp/issues/256)) [`ae9e576`](https://redirect.github.com/pillarjs/path-to-regexp/commit/ae9e576) - Update demo link ([#250](https://redirect.github.com/pillarjs/path-to-regexp/issues/250)) [`77df638`](https://redirect.github.com/pillarjs/path-to-regexp/commit/77df638) - Update README encode example [`b39edd4`](https://redirect.github.com/pillarjs/path-to-regexp/commit/b39edd4) ### [`v6.2.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v6.2.0): Named Capturing Groups [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v6.1.0...v6.2.0) **Added** - Support named capturing groups for RegExps ([#225](https://redirect.github.com/pillarjs/path-to-regexp/issues/225)) **Fixed** - Update `strict` flag documentation ([#227](https://redirect.github.com/pillarjs/path-to-regexp/issues/227)) - Ignore test files when bundling ([#220](https://redirect.github.com/pillarjs/path-to-regexp/issues/220)) ### [`v6.1.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v6.1.0): Use `/#?` as Default Delimiter [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v6.0.0...v6.1.0) **Fixed** - Use `/#?` as default delimiter to avoid matching on query or fragment parameters - If you are matching non-paths (e.g. hostnames), you can adjust `delimiter: '.'` ### [`v6.0.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v6.0.0): Custom Prefix and Suffix Groups [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v5.0.0...v6.0.0) **Note:** The path syntax has been stabilized with this release, no breaking changes in paths is expected. This release reverts the prefix behavior added in v3 back to the behavior seen in v2. For the most part, path matching is backward compatible with v2 with these enhancements: 1. Support for nested non-capturing groups in regexp, e.g. `/(abc(?=d))` 2. Support for custom prefix and suffix groups using `/{abc(.*)def}` 3. Tokens in an unexpected position will throw an error - Paths like `/test(foo` previously worked treating `(` as a literal character, now it expects `(` to be closed and is treated as a group - You can escape the character for the previous behavior, e.g. `/test\(foo` **Changed** - Revert using any character as prefix, support `prefixes` option to configure this (starts as `/.` which acts like every version since 0.x again) - Add support for `{}` to capture prefix/suffix explicitly, enables custom use-cases like `/:attr1{-:attr2}?` ### [`v5.0.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v5.0.0): Remove Default Encode URI Component [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v4.0.5...v5.0.0) No changes to path rules since 3.x, except support for nested RegEx parts in 4.x. **Changed** - Rename `RegexpOptions` interface to `TokensToRegexpOptions` - Remove `normalizePathname` from library, document solution in README - Encode using identity function as default, not `encodeURIComponent` ### [`v4.0.5`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v4.0.5): Decode URI [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v4.0.4...v4.0.5) **Removed** - Remove `whitelist` in favor of `decodeURI` (advanced behavior can happen outside `path-to-regexp`) ### [`v4.0.4`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v4.0.4): Remove `String#normalize` [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v4.0.3...v4.0.4) **Fixed** - Remove usage of `String.prototype.normalize` to continue supporting IE ### [`v4.0.3`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v4.0.3): Normalize Path Whitelist [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v4.0.2...v4.0.3) **Added** - Add normalize whitelist of characters (defaults to `/%.-`) ### [`v4.0.2`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v4.0.2): Allow `RegexpOptions` in `match` [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v4.0.1...v4.0.2) **Fixed** - Allow `RegexpOptions` in `match(...)` function ### [`v4.0.1`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v4.0.1): Fix Spelling of Regexp [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v4.0.0...v4.0.1) **Fixed** - Normalize `regexp` spelling across 4.x ### [`v4.0.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v4.0.0): ES2015 Package for Bundlers [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v3.3.0...v4.0.0) All path rules are backward compatible with 3.x, except for nested `()` and other RegEx special characters that were previously ignored. **Changed** - Export names have changed to support ES2015 modules in bundlers - `match` does not default to `decodeURIComponent` **Added** - New `normalizePathname` utility for supporting unicode paths in libraries - Support nested non-capturing groups within parameters - Add tree-shaking (via ES2015 modules) for webpack and other bundlers ### [`v3.3.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v3.3.0): Add backtracking protection [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v3.2.0...v3.3.0) **Fixed** - Add backtrack protection to 3.x release ([#321](https://redirect.github.com/pillarjs/path-to-regexp/issues/321)) [`d31670a`](https://redirect.github.com/pillarjs/path-to-regexp/commit/d31670a) ### [`v3.2.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v3.2.0): Match Function [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v3.1.0...v3.2.0) **Added** - Add native `match` function to library ### [`v3.1.0`](https://redirect.github.com/pillarjs/path-to-regexp/releases/tag/v3.1.0): Validate and sensitive options [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v3.0.0...v3.1.0) - Add `sensitive` option for `tokensToFunction` ([#191](https://redirect.github.com/pillarjs/path-to-regexp/issues/191)) - Add `validate` option to path functions ([#178](https://redirect.github.com/pillarjs/path-to-regexp/issues/178)) ### [`v3.0.0`](https://redirect.github.com/pillarjs/path-to-regexp/blob/HEAD/History.md#300--2019-01-13) [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v2.4.0...v3.0.0) - Always use prefix character as delimiter token, allowing any character to be a delimiter (e.g. `/:att1-:att2-:att3-:att4-:att5`) - Remove `partial` support, prefer escaping the prefix delimiter explicitly (e.g. `\\/(apple-)?icon-:res(\\d+).png`) ### [`v2.4.0`](https://redirect.github.com/pillarjs/path-to-regexp/blob/HEAD/History.md#240--2018-08-26) [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v2.3.0...v2.4.0) - Support `start` option to disable anchoring from beginning of the string ### [`v2.3.0`](https://redirect.github.com/pillarjs/path-to-regexp/blob/HEAD/History.md#230--2018-08-20) [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v2.2.1...v2.3.0) - Use `delimiter` when processing repeated matching groups (e.g. `foo/bar` has no prefix, but has a delimiter) ### [`v2.2.1`](https://redirect.github.com/pillarjs/path-to-regexp/blob/HEAD/History.md#221--2018-04-24) [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v2.2.0...v2.2.1) - Allow empty string with `end: false` to match both relative and absolute paths ### [`v2.2.0`](https://redirect.github.com/pillarjs/path-to-regexp/blob/HEAD/History.md#220--2018-03-06) [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v2.1.0...v2.2.0) - Pass `token` as second argument to `encode` option (e.g. `encode(value, token)`) ### [`v2.1.0`](https://redirect.github.com/pillarjs/path-to-regexp/blob/HEAD/History.md#210--2017-10-20) [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v2.0.0...v2.1.0) - Handle non-ending paths where the final character is a delimiter - E.g. `/foo/` before required either `/foo/` or `/foo//` to match in non-ending mode ### [`v2.0.0`](https://redirect.github.com/pillarjs/path-to-regexp/blob/HEAD/History.md#200--2017-08-23) [Compare Source](https://redirect.github.com/pillarjs/path-to-regexp/compare/v1.9.0...v2.0.0) - New option! Ability to set `endsWith` to match paths like `/test?query=string` up to the query string - New option! Set `delimiters` for specific characters to be treated as parameter prefixes (e.g. `/:test`) - Remove `isarray` dependency - Explicitly handle trailing delimiters instead of trimming them (e.g. `/test/` is now treated as `/test/` instead of `/test` when matching) - Remove overloaded `keys` argument that accepted `options` - Remove `keys` list attached to the `RegExp` output - Remove asterisk functionality (it's a real pain to properly encode) - Change `tokensToFunction` (e.g. `compile`) to accept an `encode` function for pretty encoding (e.g. pass your own implementation) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "* 0-12 * * 3" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/brave/ads-ui).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pnpm](https://pnpm.io) ([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm)) | [`9.15.4+sha512.b2dc20e2fc72b3e18848459b37359a32064663e5627a51e4c74b2c29dd8e8e0491483c3abb40789cfd578bf362fb6ba8261b05f0387d76792ed6e23ea3b1b6a0` -> `10.2.1`](https://renovatebot.com/diffs/npm/pnpm/9.15.4/10.2.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/pnpm/10.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/pnpm/10.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/pnpm/9.15.4/10.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/pnpm/9.15.4/10.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>pnpm/pnpm (pnpm)</summary> ### [`v10.2.1`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#1021) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.2.0...v10.2.1) ##### Patch Changes - Don't read a package from side-effects cache if it isn't allowed to be built [#9042](https://redirect.github.com/pnpm/pnpm/issues/9042). - `pnpm approve-builds` should work, when executed from a subdirectory of a workspace [#9042](https://redirect.github.com/pnpm/pnpm/issues/9042). - `pnpm deploy --legacy` should work without injected dependencies. - Add information about how to deploy without "injected dependencies" to the "pnpm deploy" error message. ### [`v10.2.0`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#1020) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.1.0...v10.2.0) ##### Minor Changes - Packages executed via `pnpm dlx` and `pnpm create` are allowed to be built (run postinstall scripts) by default. If the packages executed by `dlx` or `create` have dependencies that have to be built, they should be listed via the `--allow-build` flag. For instance, if you want to run a package called `bundle` that has `esbuild` in dependencies and want to allow `esbuild` to run postinstall scripts, run: pnpm --allow-build=esbuild dlx bundle Related PR: [#9026](https://redirect.github.com/pnpm/pnpm/pull/9026). ##### Patch Changes - Quote args for scripts with shell-quote to support new lines (on POSIX only) [#8980](https://redirect.github.com/pnpm/pnpm/issues/8980). - Fix a bug in which `pnpm deploy` fails to read the correct `projectId` when the deploy source is the same as the workspace directory [#9001](https://redirect.github.com/pnpm/pnpm/issues/9001). - Proxy settings should be respected, when resolving Git-hosted dependencies [#6530](https://redirect.github.com/pnpm/pnpm/issues/6530). - Prevent `overrides` from adding invalid version ranges to `peerDependencies` by keeping the `peerDependencies` and overriding them with prod `dependencies` [#8978](https://redirect.github.com/pnpm/pnpm/issues/8978). - Sort the package names in the "pnpm.onlyBuiltDependencies" list saved by `pnpm approve-builds`. ### [`v10.1.0`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#1010) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.0.0...v10.1.0) ##### Minor Changes - Added a new command for printing the list of dependencies with ignored build scripts: `pnpm ignored-builds` [#8963](https://redirect.github.com/pnpm/pnpm/pull/8963). - Added a new command for approving dependencies for running scripts during installation: `pnpm approve-builds` [#8963](https://redirect.github.com/pnpm/pnpm/pull/8963). - Added a new setting called `optimistic-repeat-install`. When enabled, a fast check will be performed before proceeding to installation. This way a repeat install or an install on a project with everything up-to-date becomes a lot faster. But some edge cases might arise, so we keep it disabled by default for now [#8977](https://redirect.github.com/pnpm/pnpm/pull/8977). - Added a new field "pnpm.ignoredBuiltDependencies" for explicitly listing packages that should not be built. When a package is in the list, pnpm will not print an info message about that package not being built [#8935](https://redirect.github.com/pnpm/pnpm/issues/8935). ##### Patch Changes - Verify that the package name is valid when executing the publish command. - When running `pnpm install`, the `preprepare` and `postprepare` scripts of the project should be executed [#8989](https://redirect.github.com/pnpm/pnpm/pull/8989). - Allow `workspace:` and `catalog:` to be part of wider version range in `peerDependencies`. - `pnpm deploy` should inherit the `pnpm` object from the root `package.json` [#8991](https://redirect.github.com/pnpm/pnpm/pull/8991). - Make sure that the deletion of a `node_modules` in a sub-project of a monorepo is detected as out-of-date [#8959](https://redirect.github.com/pnpm/pnpm/issues/8959). - Fix infinite loop caused by lifecycle scripts using `pnpm` to execute other scripts during `pnpm install` with `verify-deps-before-run=install` [#8954](https://redirect.github.com/pnpm/pnpm/issues/8954). - Replace `strip-ansi` with the built-in `util.stripVTControlCharacters` [#9009](https://redirect.github.com/pnpm/pnpm/pull/9009). - Do not print patched dependencies as ignored dependencies that require a build [#8952](https://redirect.github.com/pnpm/pnpm/issues/8952). ### [`v10.0.0`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#1000) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v9.15.5...v10.0.0) ##### Major Changes - Lifecycle scripts of dependencies are not executed during installation by default! This is a breaking change aimed at increasing security. In order to allow lifecycle scripts of specific dependencies, they should be listed in the `pnpm.onlyBuiltDependencies` field of `package.json` [#8897](https://redirect.github.com/pnpm/pnpm/pull/8897). For example: ```json { "pnpm": { "onlyBuiltDependencies": ["fsevents"] } } ``` - `pnpm link` behavior updated: The `pnpm link` command now adds overrides to the root `package.json`. - In a workspace: The override is added to the root of the workspace, linking the dependency to all projects in the workspace. - Global linking: To link a package globally, run `pnpm link` from the package’s directory. Previously, you needed to use `pnpm link -g`. Related PR: [#8653](https://redirect.github.com/pnpm/pnpm/pull/8653) - Secure hashing with SHA256: Various hashing algorithms have been updated to SHA256 for enhanced security and consistency: - Long paths inside `node_modules/.pnpm` are now hashed with SHA256. - Long peer dependency hashes in the lockfile now use SHA256 instead of MD5. (This affects very few users since these are only used for long keys.) - The hash stored in the `packageExtensionsChecksum` field of `pnpm-lock.yaml` is now SHA256. - The side effects cache keys now use SHA256. - The pnpmfile checksum in the lockfile now uses SHA256 ([#8530](https://redirect.github.com/pnpm/pnpm/pull/8530)). - Configuration updates: - `manage-package-manager-versions`: enabled by default. pnpm now manages its own version based on the `packageManager` field in `package.json` by default. - `public-hoist-pattern`: nothing is hoisted by default. Packages containing `eslint` or `prettier` in their name are no longer hoisted to the root of `node_modules`. Related Issue: [#8378](https://redirect.github.com/pnpm/pnpm/issues/8378) - Upgraded `@yarnpkg/extensions` to v2.0.3. This may alter your lockfile. - `virtual-store-dir-max-length`: the default value on Windows has been reduced to 60 characters. - Reduced environment variables for scripts: During script execution, fewer `npm_package_*` environment variables are set. Only `name`, `version`, `bin`, `engines`, and `config` remain. Related Issue: [#8552](https://redirect.github.com/pnpm/pnpm/issues/8552) - All dependencies are now installed even if `NODE_ENV=production`. Related Issue: [#8827](https://redirect.github.com/pnpm/pnpm/issues/8827) - Changes to the global store: - Store version bumped to v10. - Some registries allow identical content to be published under different package names or versions. To accommodate this, index files in the store are now stored using both the content hash and package identifier. This approach ensures that we can: 1. Validate that the integrity in the lockfile corresponds to the correct package, which might not be the case after a poorly resolved Git conflict. 2. Allow the same content to be referenced by different packages or different versions of the same package. Related PR: [#8510](https://redirect.github.com/pnpm/pnpm/pull/8510) Related Issue: [#8204](https://redirect.github.com/pnpm/pnpm/issues/8204) - More efficient side effects indexing. The structure of index files in the store has changed. Side effects are now tracked more efficiently by listing only file differences rather than all files. Related PR: [#8636](https://redirect.github.com/pnpm/pnpm/pull/8636) - A new `index` directory stores package content mappings. Previously, these files were in `files`. - Other breaking changes: - The `#` character is now escaped in directory names within `node_modules/.pnpm`. Related PR: [#8557](https://redirect.github.com/pnpm/pnpm/pull/8557) - Running `pnpm add --global pnpm` or `pnpm add --global @pnpm/exe` now fails with an error message, directing you to use `pnpm self-update` instead. Related PR: [#8728](https://redirect.github.com/pnpm/pnpm/pull/8728) - Dependencies added via a URL now record the final resolved URL in the lockfile, ensuring that any redirects are fully captured. Related Issue: [#8833](https://redirect.github.com/pnpm/pnpm/issues/8833) - The `pnpm deploy` command now only works in workspaces that have `inject-workspace-packages=true`. This limitation is introduced to allow us to create a proper lockfile for the deployed project using the workspace lockfile. - Removed conversion from lockfile v6 to v9. If you need v6-to-v9 conversion, use pnpm CLI v9. - `pnpm test` now passes all parameters after the `test` keyword directly to the underlying script. This matches the behavior of `pnpm run test`. Previously you needed to use the `--` prefix. Related PR: [#8619](https://redirect.github.com/pnpm/pnpm/pull/8619) - `node-gyp` updated to version 11. - `pnpm deploy` now tries creating a dedicated lockfile from a shared lockfile for deployment. It will fallback to deployment without a lockfile if there is no shared lockfile or `force-legacy-deploy` is set to `true`. ##### Minor Changes - Added support for a new type of dependencies called "configurational dependencies". These dependencies are installed before all the other types of dependencies (before "dependencies", "devDependencies", "optionalDependencies"). Configurational dependencies cannot have dependencies of their own or lifecycle scripts. They should be added using exact version and the integrity checksum. Example: ```json { "pnpm": { "configDependencies": { "my-configs": "1.0.0+sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw==" } } } ``` Related RFC: [#8](https://redirect.github.com/pnpm/rfcs/pull/8). Related PR: [#8915](https://redirect.github.com/pnpm/pnpm/pull/8915). - New settings: - New `verify-deps-before-run` setting. This setting controls how `pnpm` checks `node_modules` before running scripts: - `install`: Automatically run `pnpm install` if `node_modules` is outdated. - `warn`: Print a warning if `node_modules` is outdated. - `prompt`: Prompt the user to confirm running `pnpm install` if `node_modules` is outdated. - `error`: Throw an error if `node_modules` is outdated. - `false`: Disable dependency checks. Related Issue: [#8585](https://redirect.github.com/pnpm/pnpm/issues/8585) - New `inject-workspace-packages` setting enables hard-linking all local workspace dependencies instead of symlinking them. Previously, this could be achieved using [`dependenciesMeta[].injected`](https://pnpm.io/package_json#dependenciesmetainjected), which remains supported. Related PR: [#8836](https://redirect.github.com/pnpm/pnpm/pull/8836) - Faster repeat installs: On repeated installs, `pnpm` performs a quick check to ensure `node_modules` is up to date. Related PR: [#8838](https://redirect.github.com/pnpm/pnpm/pull/8838) - `pnpm add` integrates with default workspace catalog: When adding a dependency, `pnpm add` checks the default workspace catalog. If the dependency and version requirement match the catalog, `pnpm add` uses the `catalog:` protocol. Without a specified version, it matches the catalog’s version. If it doesn’t match, it falls back to standard behavior. Related Issue: [#8640](https://redirect.github.com/pnpm/pnpm/issues/8640) - `pnpm dlx` now resolves packages to their exact versions and uses these exact versions for cache keys. This ensures `pnpm dlx` always installs the latest requested packages. Related PR: [#8811](https://redirect.github.com/pnpm/pnpm/pull/8811) - No `node_modules` validation on certain commands. Commands that should not modify `node_modules` (e.g., `pnpm install --lockfile-only`) no longer validate or purge `node_modules`. Related PR: [#8657](https://redirect.github.com/pnpm/pnpm/pull/8657) ### [`v9.15.5`](https://redirect.github.com/pnpm/pnpm/releases/tag/v9.15.5): pnpm 9.15.5 [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v9.15.4...v9.15.5) #### Patch Changes - Verify that the package name is valid when executing the publish command. - When running `pnpm install`, the `preprepare` and `postprepare` scripts of the project should be executed [#8989](https://redirect.github.com/pnpm/pnpm/pull/8989). - Quote args for scripts with shell-quote to support new lines (on POSIX only) [#8980](https://redirect.github.com/pnpm/pnpm/issues/8980). - Proxy settings should be respected, when resolving Git-hosted dependencies [#6530](https://redirect.github.com/pnpm/pnpm/issues/6530). - Replace `strip-ansi` with the built-in `util.stripVTControlCharacters` [#9009](https://redirect.github.com/pnpm/pnpm/pull/9009). #### Platinum Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://bit.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a> </td> <td align="center" valign="middle"> <a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/sanity.svg" width="180" alt="Bit"></a> </td> <td align="center" valign="middle"> <a href="https://figma.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/figma.svg" width="80" alt="Figma"></a> </td> </tr> </tbody> </table> #### Gold Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" /> <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://prisma.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/prisma.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/prisma_light.svg" /> <img src="https://pnpm.io/img/users/prisma.svg" width="180" alt="Prisma" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://uscreen.de/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/uscreen.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/uscreen_light.svg" /> <img src="https://pnpm.io/img/users/uscreen.svg" width="180" alt="u|screen" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://www.jetbrains.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/jetbrains.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/jetbrains.svg" /> <img src="https://pnpm.io/img/users/jetbrains.svg" width="180" alt="JetBrains" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/nx.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/nx_light.svg" /> <img src="https://pnpm.io/img/users/nx.svg" width="120" alt="Nx" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" /> <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://route4me.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <img src="https://pnpm.io/img/users/route4me.svg" width="220" alt="Route4Me" /> </a> </td> <td align="center" valign="middle"> <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" /> <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://canva.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <img src="https://pnpm.io/img/users/canva.svg" width="120" alt="Canva" /> </a> </td> </tr> </tbody> </table> </details> --- ### Configuration 📅 **Schedule**: Branch creation - "* 0-12 * * 3" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/brave/ads-ui).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Addresses GHSA-67mh-4wv8-2f99

1. update renovate config to not change `overrides`, as this forms useful documentation of which vulns we are specifically avoiding (this should autoclose #1442) 2. add auto-install directive to .npmrc to avoid wasting dev time forgetting to call `pnpm install` after `git pull`

Overzealous upgrading of overrides by renovate means that path-to-regexp got upgraded from 1.9 to 8.2, which breaks react-router@5. On staging, ads-ui simply doesn't load as a result. Switch the overrides section back to how it used to be, explicitly describing the vulnerable versions to avoid, rather than randomly picking the latest version. Then renovate can actually pick the correct version to use.

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | Type | Update | Pending | |---|---|---|---|---|---|---|---|---| | [@apollo/client](https://www.apollographql.com/docs/react/) ([source](https://redirect.github.com/apollographql/apollo-client)) | [`3.12.11` -> `3.13.1`](https://renovatebot.com/diffs/npm/@apollo%2fclient/3.12.11/3.13.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@apollo%2fclient/3.13.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@apollo%2fclient/3.13.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@apollo%2fclient/3.12.11/3.13.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@apollo%2fclient/3.12.11/3.13.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | | | [@graphql-codegen/cli](https://redirect.github.com/dotansimha/graphql-code-generator) ([source](https://redirect.github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/graphql-codegen-cli)) | [`5.0.4` -> `5.0.5`](https://renovatebot.com/diffs/npm/@graphql-codegen%2fcli/5.0.4/5.0.5) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@graphql-codegen%2fcli/5.0.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@graphql-codegen%2fcli/5.0.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@graphql-codegen%2fcli/5.0.4/5.0.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@graphql-codegen%2fcli/5.0.4/5.0.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch | | | [@graphql-codegen/client-preset](https://redirect.github.com/dotansimha/graphql-code-generator) ([source](https://redirect.github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/presets/client)) | [`4.6.2` -> `4.6.4`](https://renovatebot.com/diffs/npm/@graphql-codegen%2fclient-preset/4.6.2/4.6.4) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@graphql-codegen%2fclient-preset/4.6.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@graphql-codegen%2fclient-preset/4.6.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@graphql-codegen%2fclient-preset/4.6.2/4.6.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@graphql-codegen%2fclient-preset/4.6.2/4.6.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch | | | [@mui/icons-material](https://mui.com/material-ui/material-icons/) ([source](https://redirect.github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material)) | [`6.4.4` -> `6.4.5`](https://renovatebot.com/diffs/npm/@mui%2ficons-material/6.4.4/6.4.5) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@mui%2ficons-material/6.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@mui%2ficons-material/6.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@mui%2ficons-material/6.4.4/6.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@mui%2ficons-material/6.4.4/6.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | `6.4.6` | | [@mui/lab](https://mui.com/material-ui/about-the-lab/) ([source](https://redirect.github.com/mui/material-ui/tree/HEAD/packages/mui-lab)) | [`6.0.0-beta.27` -> `6.0.0-beta.28`](https://renovatebot.com/diffs/npm/@mui%2flab/6.0.0-beta.27/6.0.0-beta.28) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@mui%2flab/6.0.0-beta.28?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@mui%2flab/6.0.0-beta.28?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@mui%2flab/6.0.0-beta.27/6.0.0-beta.28?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@mui%2flab/6.0.0-beta.27/6.0.0-beta.28?slim=true)](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | `6.0.0-beta.29` | | [@mui/material](https://mui.com/material-ui/) ([source](https://redirect.github.com/mui/material-ui/tree/HEAD/packages/mui-material)) | [`6.4.4` -> `6.4.5`](https://renovatebot.com/diffs/npm/@mui%2fmaterial/6.4.4/6.4.5) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@mui%2fmaterial/6.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@mui%2fmaterial/6.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@mui%2fmaterial/6.4.4/6.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@mui%2fmaterial/6.4.4/6.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | `6.4.6` | | [@mui/x-data-grid](https://mui.com/x/react-data-grid/) ([source](https://redirect.github.com/mui/mui-x/tree/HEAD/packages/x-data-grid)) | [`7.26.0` -> `7.27.0`](https://renovatebot.com/diffs/npm/@mui%2fx-data-grid/7.26.0/7.27.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@mui%2fx-data-grid/7.27.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@mui%2fx-data-grid/7.27.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@mui%2fx-data-grid/7.26.0/7.27.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@mui%2fx-data-grid/7.26.0/7.27.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | `7.27.2` (+1) | | [@mui/x-date-pickers](https://mui.com/x/react-date-pickers/) ([source](https://redirect.github.com/mui/mui-x/tree/HEAD/packages/x-date-pickers)) | [`7.26.0` -> `7.27.0`](https://renovatebot.com/diffs/npm/@mui%2fx-date-pickers/7.26.0/7.27.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@mui%2fx-date-pickers/7.27.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@mui%2fx-date-pickers/7.27.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@mui%2fx-date-pickers/7.26.0/7.27.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@mui%2fx-date-pickers/7.26.0/7.27.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | `7.27.1` | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | `v3.28.9` -> `v3.28.10` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/github%2fcodeql-action/v3.28.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/github%2fcodeql-action/v3.28.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/github%2fcodeql-action/v3.28.9/v3.28.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/github%2fcodeql-action/v3.28.9/v3.28.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | action | patch | | | [knip](https://knip.dev) ([source](https://redirect.github.com/webpro-nl/knip/tree/HEAD/packages/knip)) | [`5.44.1` -> `5.45.0`](https://renovatebot.com/diffs/npm/knip/5.44.1/5.45.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/knip/5.45.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/knip/5.45.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/knip/5.44.1/5.45.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/knip/5.44.1/5.45.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | | | [pnpm](https://pnpm.io) ([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm)) | [`10.3.0+sha512.ee592eda8815a8a293c206bb0917c4bb0ff274c50def7cbc17be05ec641fc2d1b02490ce660061356bd0d126a4d7eb2ec8830e6959fb8a447571c631d5a2442d` -> `10.4.1`](https://renovatebot.com/diffs/npm/pnpm/10.3.0/10.4.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/pnpm/10.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/pnpm/10.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/pnpm/10.3.0/10.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/pnpm/10.3.0/10.4.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | packageManager | minor | `10.5.2` (+2) | | [prettier](https://prettier.io) ([source](https://redirect.github.com/prettier/prettier)) | [`3.5.0` -> `3.5.2`](https://renovatebot.com/diffs/npm/prettier/3.5.0/3.5.2) | [![age](https://developer.mend.io/api/mc/badges/age/npm/prettier/3.5.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/prettier/3.5.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/prettier/3.5.0/3.5.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/prettier/3.5.0/3.5.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch | `3.5.3` | | [typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint) ([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)) | [`8.24.0` -> `8.25.0`](https://renovatebot.com/diffs/npm/typescript-eslint/8.24.0/8.25.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/typescript-eslint/8.25.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/typescript-eslint/8.25.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/typescript-eslint/8.24.0/8.25.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript-eslint/8.24.0/8.25.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | `8.26.0` | | [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`6.1.0` -> `6.2.0`](https://renovatebot.com/diffs/npm/vite/6.1.0/6.2.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/vite/6.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/vite/6.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/vite/6.1.0/6.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vite/6.1.0/6.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | | | [vite-plugin-checker](https://redirect.github.com/fi3ework/vite-plugin-checker) | [`0.8.0` -> `0.9.0`](https://renovatebot.com/diffs/npm/vite-plugin-checker/0.8.0/0.9.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/vite-plugin-checker/0.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/vite-plugin-checker/0.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/vite-plugin-checker/0.8.0/0.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vite-plugin-checker/0.8.0/0.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | | | [vitest](https://redirect.github.com/vitest-dev/vitest) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/vitest)) | [`3.0.5` -> `3.0.7`](https://renovatebot.com/diffs/npm/vitest/3.0.5/3.0.7) | [![age](https://developer.mend.io/api/mc/badges/age/npm/vitest/3.0.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/vitest/3.0.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/vitest/3.0.5/3.0.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vitest/3.0.5/3.0.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch | | --- ### Release Notes <details> <summary>apollographql/apollo-client (@apollo/client)</summary> ### [`v3.13.1`](https://redirect.github.com/apollographql/apollo-client/blob/HEAD/CHANGELOG.md#3131) [Compare Source](https://redirect.github.com/apollographql/apollo-client/compare/v3.13.0...v3.13.1) ##### Patch Changes - [#12369](https://redirect.github.com/apollographql/apollo-client/pull/12369) [`bdfc5b2`](https://redirect.github.com/apollographql/apollo-client/commit/bdfc5b2e386ed5f835716a542de0cf17da37f7fc) Thanks [@phryneas](https://redirect.github.com/phryneas)! - `ObervableQuery.refetch`: don't refetch with `cache-and-network`, swich to `network-only` instead - [#12375](https://redirect.github.com/apollographql/apollo-client/pull/12375) [`d3f8f13`](https://redirect.github.com/apollographql/apollo-client/commit/d3f8f130718ef50531ca0079192c2672a513814a) Thanks [@jerelmiller](https://redirect.github.com/jerelmiller)! - Export the `UseSuspenseFragmentOptions` type. ### [`v3.13.0`](https://redirect.github.com/apollographql/apollo-client/blob/HEAD/CHANGELOG.md#3130) [Compare Source](https://redirect.github.com/apollographql/apollo-client/compare/v3.12.11...v3.13.0) ##### Minor Changes - [#12066](https://redirect.github.com/apollographql/apollo-client/pull/12066) [`c01da5d`](https://redirect.github.com/apollographql/apollo-client/commit/c01da5da639d4d9e882d380573b7876df4a1d65b) Thanks [@jerelmiller](https://redirect.github.com/jerelmiller)! - Adds a new `useSuspenseFragment` hook. `useSuspenseFragment` suspends until `data` is complete. It is a drop-in replacement for `useFragment` when you prefer to use Suspense to control the loading state of a fragment. See the [documentation](https://www.apollographql.com/docs/react/data/fragments#usesuspensefragment) for more details. - [#12174](https://redirect.github.com/apollographql/apollo-client/pull/12174) [`ba5cc33`](https://redirect.github.com/apollographql/apollo-client/commit/ba5cc330f8734a989eef71e883861f848388ac0c) Thanks [@jerelmiller](https://redirect.github.com/jerelmiller)! - Ensure errors thrown in the `onCompleted` callback from `useMutation` don't call `onError`. - [#12340](https://redirect.github.com/apollographql/apollo-client/pull/12340) [`716d02e`](https://redirect.github.com/apollographql/apollo-client/commit/716d02ec9c5b1448f50cb50a0306a345310a2342) Thanks [@phryneas](https://redirect.github.com/phryneas)! - Deprecate the `onCompleted` and `onError` callbacks of `useQuery` and `useLazyQuery`. For more context, please see the [related issue](https://redirect.github.com/apollographql/apollo-client/issues/12352) on GitHub. - [#12276](https://redirect.github.com/apollographql/apollo-client/pull/12276) [`670f112`](https://redirect.github.com/apollographql/apollo-client/commit/670f112a7d9d85cb357eb279a488ac2c6d0137a9) Thanks [@Cellule](https://redirect.github.com/Cellule)! - Provide a more type-safe option for the previous data value passed to `observableQuery.updateQuery`. Using it could result in crashes at runtime as this callback could be called with partial data even though its type reported the value as a complete result. The `updateQuery` callback function is now called with a new type-safe `previousData` property and a new `complete` property in the 2nd argument that determines whether `previousData` is a complete or partial result. As a result of this change, it is recommended to use the `previousData` property passed to the 2nd argument of the callback rather than using the previous data value from the first argument since that value is not type-safe. The first argument is now deprecated and will be removed in a future version of Apollo Client. ```ts observableQuery.updateQuery( (unsafePreviousData, { previousData, complete }) => { previousData; // ^? TData | DeepPartial<TData> | undefined if (complete) { previousData; // ^? TData } else { previousData; // ^? DeepPartial<TData> | undefined } } ); ``` - [#12174](https://redirect.github.com/apollographql/apollo-client/pull/12174) [`ba5cc33`](https://redirect.github.com/apollographql/apollo-client/commit/ba5cc330f8734a989eef71e883861f848388ac0c) Thanks [@jerelmiller](https://redirect.github.com/jerelmiller)! - Reject the mutation promise if errors are thrown in the `onCompleted` callback of `useMutation`. ##### Patch Changes - [#12276](https://redirect.github.com/apollographql/apollo-client/pull/12276) [`670f112`](https://redirect.github.com/apollographql/apollo-client/commit/670f112a7d9d85cb357eb279a488ac2c6d0137a9) Thanks [@Cellule](https://redirect.github.com/Cellule)! - Fix the return type of the `updateQuery` function to allow for `undefined`. `updateQuery` had the ability to bail out of the update by returning a falsey value, but the return type enforced a query value. ```ts observableQuery.updateQuery( (unsafePreviousData, { previousData, complete }) => { if (!complete) { // Bail out of the update by returning early return; } // ... } ); ``` - [#12296](https://redirect.github.com/apollographql/apollo-client/pull/12296) [`2422df2`](https://redirect.github.com/apollographql/apollo-client/commit/2422df202a7ec71365d5a8ab5b3b554fcf60e4af) Thanks [@Cellule](https://redirect.github.com/Cellule)! - Deprecate option `ignoreResults` in `useMutation`. Once this option is removed, existing code still using it might see increase in re-renders. If you don't want to synchronize your component state with the mutation, please use `useApolloClient` to get your ApolloClient instance and call `client.mutate` directly. - [#12338](https://redirect.github.com/apollographql/apollo-client/pull/12338) [`67c16c9`](https://redirect.github.com/apollographql/apollo-client/commit/67c16c93897e36be980ba2139ee8bd3f24ab8558) Thanks [@phryneas](https://redirect.github.com/phryneas)! - In case of a multipart response (e.g. with `@defer`), query deduplication will now keep going until the final chunk has been received. - [#12276](https://redirect.github.com/apollographql/apollo-client/pull/12276) [`670f112`](https://redirect.github.com/apollographql/apollo-client/commit/670f112a7d9d85cb357eb279a488ac2c6d0137a9) Thanks [@Cellule](https://redirect.github.com/Cellule)! - Fix the type of the `variables` property passed as the 2nd argument to the `subscribeToMore` callback. This was previously reported as the `variables` type for the subscription itself, but is now properly typed as the query `variables`. </details> <details> <summary>dotansimha/graphql-code-generator (@graphql-codegen/cli)</summary> ### [`v5.0.5`](https://redirect.github.com/dotansimha/graphql-code-generator/blob/HEAD/packages/graphql-codegen-cli/CHANGELOG.md#505) [Compare Source](https://redirect.github.com/dotansimha/graphql-code-generator/compare/@graphql-codegen/cli@5.0.4...@graphql-codegen/cli@5.0.5) ##### Patch Changes - [#10282](https://redirect.github.com/dotansimha/graphql-code-generator/pull/10282) [`7d7760d`](https://redirect.github.com/dotansimha/graphql-code-generator/commit/7d7760d55c21a99417c38ce5e77a6de22b5effcc) Thanks [@oprypkhantc](https://redirect.github.com/oprypkhantc)! - Fix watcher watching project root when schema URL is used </details> <details> <summary>dotansimha/graphql-code-generator (@graphql-codegen/client-preset)</summary> ### [`v4.6.4`](https://redirect.github.com/dotansimha/graphql-code-generator/blob/HEAD/packages/presets/client/CHANGELOG.md#464) [Compare Source](https://redirect.github.com/dotansimha/graphql-code-generator/compare/@graphql-codegen/client-preset@4.6.3...@graphql-codegen/client-preset@4.6.4) ##### Patch Changes - [#10302](https://redirect.github.com/dotansimha/graphql-code-generator/pull/10302) [`d8566c0`](https://redirect.github.com/dotansimha/graphql-code-generator/commit/d8566c015943ea4dbcaeaf57d3d8406553ae230a) Thanks [@eddeee888](https://redirect.github.com/eddeee888)! - Fix Apollo unmask directive incorrectly generating fragmentRefs - Updated dependencies \[[`d8566c0`](https://redirect.github.com/dotansimha/graphql-code-generator/commit/d8566c015943ea4dbcaeaf57d3d8406553ae230a)]: - [@graphql-codegen/visitor-plugin-common](https://redirect.github.com/graphql-codegen/visitor-plugin-common)[@5](https://redirect.github.com/5).7.1 - [@graphql-codegen/typescript-operations](https://redirect.github.com/graphql-codegen/typescript-operations)[@4](https://redirect.github.com/4).5.1 - [@graphql-codegen/gql-tag-operations](https://redirect.github.com/graphql-codegen/gql-tag-operations)[@4](https://redirect.github.com/4).0.16 - [@graphql-codegen/typed-document-node](https://redirect.github.com/graphql-codegen/typed-document-node)[@5](https://redirect.github.com/5).0.15 - [@graphql-codegen/typescript](https://redirect.github.com/graphql-codegen/typescript)[@4](https://redirect.github.com/4).1.5 ### [`v4.6.3`](https://redirect.github.com/dotansimha/graphql-code-generator/blob/HEAD/packages/presets/client/CHANGELOG.md#463) [Compare Source](https://redirect.github.com/dotansimha/graphql-code-generator/compare/@graphql-codegen/client-preset@4.6.2...@graphql-codegen/client-preset@4.6.3) ##### Patch Changes - [#10298](https://redirect.github.com/dotansimha/graphql-code-generator/pull/10298) [`3efc472`](https://redirect.github.com/dotansimha/graphql-code-generator/commit/3efc472b970754b05b1e1f9fe7d33cfa5ec65455) Thanks [@dotansimha](https://redirect.github.com/dotansimha)! - Fix a bug where fragment spreads with `@client` directives is not being removed from the generated persisted documents - Updated dependencies \[[`6d7c1d7`](https://redirect.github.com/dotansimha/graphql-code-generator/commit/6d7c1d7c0a4662acdc0efafd4234229ad0a8dd3c)]: - [@graphql-codegen/visitor-plugin-common](https://redirect.github.com/graphql-codegen/visitor-plugin-common)[@5](https://redirect.github.com/5).7.0 - [@graphql-codegen/typescript-operations](https://redirect.github.com/graphql-codegen/typescript-operations)[@4](https://redirect.github.com/4).5.0 - [@graphql-codegen/gql-tag-operations](https://redirect.github.com/graphql-codegen/gql-tag-operations)[@4](https://redirect.github.com/4).0.15 - [@graphql-codegen/typed-document-node](https://redirect.github.com/graphql-codegen/typed-document-node)[@5](https://redirect.github.com/5).0.14 - [@graphql-codegen/typescript](https://redirect.github.com/graphql-codegen/typescript)[@4](https://redirect.github.com/4).1.4 </details> <details> <summary>mui/material-ui (@mui/icons-material)</summary> ### [`v6.4.5`](https://redirect.github.com/mui/material-ui/releases/tag/v6.4.5) [Compare Source](https://redirect.github.com/mui/material-ui/compare/v6.4.4...v6.4.5) A big thanks to the 5 contributors who made this release possible. ##### `@mui/material@6.4.5` - \[Autocomplete] Remove legacy `aria-owns` attribute for combobox ([#45303](https://redirect.github.com/mui/material-ui/issues/45303)) [@ZeeshanTamboli](https://redirect.github.com/ZeeshanTamboli) - \[Button] Apply id only if loading indicator is present ([#45339](https://redirect.github.com/mui/material-ui/issues/45339)) [@aarongarciah](https://redirect.github.com/aarongarciah) ##### Docs - \[icons] Fix typo in material-icons.md ([#45336](https://redirect.github.com/mui/material-ui/issues/45336)) [@a-s-russo](https://redirect.github.com/a-s-russo) - \[Menu] Add Grouped Menu demo ([#45292](https://redirect.github.com/mui/material-ui/issues/45292)) [@noobDev31](https://redirect.github.com/noobDev31) ##### Core - \[blog] Consistent Base UI terminology ([#45342](https://redirect.github.com/mui/material-ui/issues/45342)) [@aarongarciah](https://redirect.github.com/aarongarciah) - Fix double redirection to Base UI ([#45146](https://redirect.github.com/mui/material-ui/issues/45146)) [@oliviertassinari](https://redirect.github.com/oliviertassinari) All contributors of this release in alphabetical order: [@a-s-russo](https://redirect.github.com/a-s-russo), [@aarongarciah](https://redirect.github.com/aarongarciah), [@noobDev31](https://redirect.github.com/noobDev31), [@oliviertassinari](https://redirect.github.com/oliviertassinari), [@ZeeshanTamboli](https://redirect.github.com/ZeeshanTamboli) </details> <details> <summary>mui/mui-x (@mui/x-data-grid)</summary> ### [`v7.27.0`](https://redirect.github.com/mui/mui-x/releases/tag/v7.27.0) [Compare Source](https://redirect.github.com/mui/mui-x/compare/v7.26.0...v7.27.0) We'd like to offer a big thanks to the 7 contributors who made this release possible. Here are some highlights ✨: - ⚡ Improve Data Grid Excel export serialization performance - 🐞 Bugfixes - 🌍 Improve Polish (pl-PL) and Ukrainian (uk-UA) locale on the Data Grid Special thanks go out to the community contributors who have helped make this release possible: [@pawelkula](https://redirect.github.com/pawelkula), [@Neonin](https://redirect.github.com/Neonin). Following are all team members who have contributed to this release: [@cherniavskii](https://redirect.github.com/cherniavskii), [@JCQuintas](https://redirect.github.com/JCQuintas), [@oliviertassinari](https://redirect.github.com/oliviertassinari), [@arminmeh](https://redirect.github.com/arminmeh) and [@LukasTy](https://redirect.github.com/LukasTy) ##### Data Grid ##### `@mui/x-data-grid@7.27.0` - \[DataGrid] Add `resetPageOnSortFilter` prop that resets the page after sorting and filtering ([#16580](https://redirect.github.com/mui/mui-x/issues/16580)) [@arminmeh](https://redirect.github.com/arminmeh) - \[DataGrid] Avoid `undefined` value for pagination `rowCount` ([#16558](https://redirect.github.com/mui/mui-x/issues/16558)) [@cherniavskii](https://redirect.github.com/cherniavskii) - \[l10n] Improve Polish (pl-PL) locale ([#16594](https://redirect.github.com/mui/mui-x/issues/16594)) [@pawelkula](https://redirect.github.com/pawelkula) - \[l10n] Improve Ukrainian (uk-UA) locale ([#16593](https://redirect.github.com/mui/mui-x/issues/16593)) [@Neonin](https://redirect.github.com/Neonin) ##### `@mui/x-data-grid-pro@7.27.0` [![pro](https://mui.com/r/x-pro-svg)](https://mui.com/r/x-pro-svg-link "Pro plan") Same changes as in `@mui/x-data-grid@7.27.0`. ##### `@mui/x-data-grid-premium@7.27.0` [![premium](https://mui.com/r/x-premium-svg)](https://mui.com/r/x-premium-svg-link "Premium plan") Same changes as in `@mui/x-data-grid-pro@7.27.0`, plus: - \[DataGridPremium] Fix Excel export Web Worker demo not working in dev mode ([#16532](https://redirect.github.com/mui/mui-x/issues/16532)) [@cherniavskii](https://redirect.github.com/cherniavskii) - \[DataGridPremium] Improve Excel export serialization performance ([#16545](https://redirect.github.com/mui/mui-x/issues/16545)) [@cherniavskii](https://redirect.github.com/cherniavskii) - \[DataGridPremium] Namespace Excel export worker ([#16539](https://redirect.github.com/mui/mui-x/issues/16539)) [@oliviertassinari](https://redirect.github.com/oliviertassinari) ##### Date and Time Pickers ##### `@mui/x-date-pickers@7.27.0` Internal changes. ##### `@mui/x-date-pickers-pro@7.27.0` [![pro](https://mui.com/r/x-pro-svg)](https://mui.com/r/x-pro-svg-link "Pro plan") Same changes as in `@mui/x-date-pickers@7.27.0`, plus: - \[DateRangePicker] Avoid unnecessary field section focusing ([#16569](https://redirect.github.com/mui/mui-x/issues/16569)) [@LukasTy](https://redirect.github.com/LukasTy) ##### Charts ##### `@mui/x-charts@7.27.0` Internal changes. ##### `@mui/x-charts-pro@7.27.0` [![pro](https://mui.com/r/x-pro-svg)](https://mui.com/r/x-pro-svg-link "Pro plan") - \[charts-pro] Fix automatic type overloads ([#16579](https://redirect.github.com/mui/mui-x/issues/16579)) [@JCQuintas](https://redirect.github.com/JCQuintas) ##### Core - \[test] Fix Data Grid data source error test on React 18 ([#16565](https://redirect.github.com/mui/mui-x/issues/16565)) [@arminmeh](https://redirect.github.com/arminmeh) </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v3.28.10`](https://redirect.github.com/github/codeql-action/releases/tag/v3.28.10) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.28.9...v3.28.10) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.28.10 - 21 Feb 2025 - Update default CodeQL bundle version to 2.20.5. [#2772](https://redirect.github.com/github/codeql-action/pull/2772) - Address an issue where the CodeQL Bundle would occasionally fail to decompress on macOS. [#2768](https://redirect.github.com/github/codeql-action/pull/2768) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.28.10/CHANGELOG.md) for more information. </details> <details> <summary>webpro-nl/knip (knip)</summary> ### [`v5.45.0`](https://redirect.github.com/webpro-nl/knip/releases/tag/5.45.0) [Compare Source](https://redirect.github.com/webpro-nl/knip/compare/5.44.5...5.45.0) - What are we without badges? ([`8175043`](https://redirect.github.com/webpro-nl/knip/commit/8175043e9d2ef8b955f37533ed61da2fb2bef0fb)) - feat(plugin-eslint): support eslint.config.ts files ([#956](https://redirect.github.com/webpro-nl/knip/issues/956)) ([`474dca3`](https://redirect.github.com/webpro-nl/knip/commit/474dca3c141c7d527ef30b404b01bab09066af35)) - thanks [@cylewaitforit](https://redirect.github.com/cylewaitforit)! - Improve cross-workspace config file handling ([`4717edf`](https://redirect.github.com/webpro-nl/knip/commit/4717edf933d512bf13b3a5ae5fb3a0baae22f552)) - Fix up playwright(-ct) args/bin ([`b49b753`](https://redirect.github.com/webpro-nl/knip/commit/b49b753de03caacd7d9b0a39c35a7e13c6ad4e95)) - Improve cross-workspace config & binary handling ([`7ea7c34`](https://redirect.github.com/webpro-nl/knip/commit/7ea7c344d187b53e09f1c2bda4fd4759abb0bdfd)) - Add tests for cross-workspace inputs coverage ([`100129a`](https://redirect.github.com/webpro-nl/knip/commit/100129acd5eb0371a603797f6bda28932f2440ed)) - Add note re. config cascade eslint v8 (resolves [#957](https://redirect.github.com/webpro-nl/knip/issues/957)) ([`ee2c94d`](https://redirect.github.com/webpro-nl/knip/commit/ee2c94d1e680d0004f4a40f0de8b93d25832e3c0)) - Add support for eslint v9 config files + settings ([`f55dc1b`](https://redirect.github.com/webpro-nl/knip/commit/f55dc1b55ea84bfb4752ffdff5fbf1da6575f131)) ### [`v5.44.5`](https://redirect.github.com/webpro-nl/knip/releases/tag/5.44.5) [Compare Source](https://redirect.github.com/webpro-nl/knip/compare/5.44.4...5.44.5) - Release [@knip/create-config](https://redirect.github.com/knip/create-config) 1.0.4 ([`06dcbaf`](https://redirect.github.com/webpro-nl/knip/commit/06dcbaf45d291e8b9bc5f86cc060b5dd27736a3c)) - Refine input methods ([`512c3e4`](https://redirect.github.com/webpro-nl/knip/commit/512c3e480fe0271ab9a773679ba111d697b1ac3d)) - Fix up some variable names for consistency ([`f22341f`](https://redirect.github.com/webpro-nl/knip/commit/f22341f6ef00284bc615692fe0d80c5b129d1c3f)) - Add `//` prefix to better reflect debug value is text/comment ([`0ec0933`](https://redirect.github.com/webpro-nl/knip/commit/0ec09337193eb30570fc36f9539b047fbcca6932)) - Fix webpack bins in fixture ([`1505557`](https://redirect.github.com/webpro-nl/knip/commit/15055579f804e6404588cfd71c045cc099d8b2c2)) - Defer resolve entry points in webpack plugin (resolves [#949](https://redirect.github.com/webpro-nl/knip/issues/949)) ([`e42b09d`](https://redirect.github.com/webpro-nl/knip/commit/e42b09d9cf13ecde2fc7449cb7ec76fc1968cddb)) - Update docs ([`a530ff4`](https://redirect.github.com/webpro-nl/knip/commit/a530ff44d78f36ad8e3460a02534cafd5ad104e4)) ### [`v5.44.4`](https://redirect.github.com/webpro-nl/knip/releases/tag/5.44.4) [Compare Source](https://redirect.github.com/webpro-nl/knip/compare/5.44.3...5.44.4) - Fix `workspace` checks in Windows ([`4f4d0bf`](https://redirect.github.com/webpro-nl/knip/commit/4f4d0bf02f56dc24d6d62ee10bc71966c60b8e16)) ### [`v5.44.3`](https://redirect.github.com/webpro-nl/knip/releases/tag/5.44.3) [Compare Source](https://redirect.github.com/webpro-nl/knip/compare/5.44.2...5.44.3) - Fix workspace graph finder (resolve [#948](https://redirect.github.com/webpro-nl/knip/issues/948)) ([`63929e2`](https://redirect.github.com/webpro-nl/knip/commit/63929e23919a841b3ccc838b33aa8bb197639178)) - Simplify function name ([`bfbcf5d`](https://redirect.github.com/webpro-nl/knip/commit/bfbcf5d99d7dd750698ea069b45eb72b5a3a6e6b)) ### [`v5.44.2`](https://redirect.github.com/webpro-nl/knip/releases/tag/5.44.2) [Compare Source](https://redirect.github.com/webpro-nl/knip/compare/5.44.1...5.44.2) - Improve chart, update copy ([`f63df95`](https://redirect.github.com/webpro-nl/knip/commit/f63df95f0436055ca49155d2234cd8f63aed34cd)) - Move config schema ([`6098cb9`](https://redirect.github.com/webpro-nl/knip/commit/6098cb9964b4a85de1dad40df8b0262df585f7b0)) - Move some utils ([`d3b7ab6`](https://redirect.github.com/webpro-nl/knip/commit/d3b7ab64e740ff7608f5900f85c07e957268ec4f)) - Split main sequence into build + analyze graph ([`c145c58`](https://redirect.github.com/webpro-nl/knip/commit/c145c5833765902fb5b9ccd1bcf7044a9ca8b12c)) - Update docs ([`dae0f78`](https://redirect.github.com/webpro-nl/knip/commit/dae0f784c8ce22858d8fdd79ade148ba51ccf2fa)) - Edit docs ([`0b7f05f`](https://redirect.github.com/webpro-nl/knip/commit/0b7f05fad65dae10696dbceca2ca2fafba279c9f)) - Fix dynamically added config files for disabled plugins (resolve [#947](https://redirect.github.com/webpro-nl/knip/issues/947)) ([`8209917`](https://redirect.github.com/webpro-nl/knip/commit/82099178e22022c32f2d628a75406f8a7c4d03e0)) </details> <details> <summary>pnpm/pnpm (pnpm)</summary> ### [`v10.4.1`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#1041) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.4.0...v10.4.1) ##### Patch Changes - Throws an error when the value provided by the `--allow-build` option overlaps with the `pnpm.ignoredBuildDependencies` list [#9105](https://redirect.github.com/pnpm/pnpm/pull/9105). - Print pnpm's version after the execution time at the end of the console output. - Print warning about ignored builds of dependencies on repeat install [#9106](https://redirect.github.com/pnpm/pnpm/issues/9106). - Setting `init-package-manager` should work. ### [`v10.4.0`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#1040) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.3.0...v10.4.0) ##### Minor Changes - `pnpm approve-builds --global` works now for allowing dependencies of globally installed packages to run postinstall scripts. - The `pnpm add` command now supports a new flag, `--allow-build`, which allows building the specified dependencies. For instance, if you want to install a package called `bundle` that has `esbuild` as a dependency and want to allow `esbuild` to run postinstall scripts, you can run: pnpm --allow-build=esbuild add bundle This will run `esbuild`'s postinstall script and also add it to the `pnpm.onlyBuiltDependencies` field of `package.json`. So, `esbuild` will always be allowed to run its scripts in the future. Related PR: [#9086](https://redirect.github.com/pnpm/pnpm/pull/9086). - The `pnpm init` command adds a `packageManager` field with the current version of pnpm CLI [#9069](https://redirect.github.com/pnpm/pnpm/pull/9069). To disable this behaviour, set the `init-package-manager` setting to `false`. ##### Patch Changes - `pnpm approve-builds` should work after two consecutive `pnpm install` runs [#9083](https://redirect.github.com/pnpm/pnpm/pull/9083). - Fix instruction for updating pnpm with corepack [#9101](https://redirect.github.com/pnpm/pnpm/pull/9101). - The pnpm version specified by `packageManager` cannot start with `v`. </details> <details> <summary>prettier/prettier (prettier)</summary> ### [`v3.5.2`](https://redirect.github.com/prettier/prettier/blob/HEAD/CHANGELOG.md#352) [Compare Source](https://redirect.github.com/prettier/prettier/compare/3.5.1...3.5.2) [diff](https://redirect.github.com/prettier/prettier/compare/3.5.1...3.5.2) ##### Remove `module-sync` condition ([#17156](https://redirect.github.com/prettier/prettier/pull/17156) by [@fisker](https://redirect.github.com/fisker)) In Prettier 3.5.0, [we added `module-sync` condition to `package.json`](https://prettier.io/blog/2025/02/09/3.5.0#use-esm-entrypoint-for-requireesm-16958-by-tats-u), so that `require("prettier")` can use ESM version, but turns out it doesn't work if CommonJS and ESM plugins both imports builtin plugins. To solve this problem, we decide simply remove the `module-sync` condition, so `require("prettier")` will still use the CommonJS version, we'll revisit until `require(ESM)` feature is more stable. ### [`v3.5.1`](https://redirect.github.com/prettier/prettier/blob/HEAD/CHANGELOG.md#351) [Compare Source](https://redirect.github.com/prettier/prettier/compare/3.5.0...3.5.1) [diff](https://redirect.github.com/prettier/prettier/compare/3.5.0...3.5.1) ##### Fix CLI crash when cache for old version exists ([#17100](https://redirect.github.com/prettier/prettier/pull/17100) by [@sosukesuzuki](https://redirect.github.com/sosukesuzuki)) Prettier 3.5 uses a different cache format than previous versions, Prettier 3.5.0 crashes when reading existing cache file, Prettier 3.5.1 fixed the problem. ##### Support dockercompose and github-actions-workflow in VSCode ([#17101](https://redirect.github.com/prettier/prettier/pull/17101) by [@remcohaszing](https://redirect.github.com/remcohaszing)) Prettier now supports the `dockercompose` and `github-actions-workflow` languages in Visual Studio Code. </details> <details> <summary>typescript-eslint/typescript-eslint (typescript-eslint)</summary> ### [`v8.25.0`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8250-2025-02-24) [Compare Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.24.1...v8.25.0) This was a version bump only for typescript-eslint to align it with other projects, there were no code changes. You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. ### [`v8.24.1`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8241-2025-02-17) [Compare Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.24.0...v8.24.1) This was a version bump only for typescript-eslint to align it with other projects, there were no code changes. You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. </details> <details> <summary>vitejs/vite (vite)</summary> ### [`v6.2.0`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#620-2025-02-25) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v6.1.1...v6.2.0) - fix(deps): update all non-major dependencies ([#19501](https://redirect.github.com/vitejs/vite/issues/19501)) ([c94c9e0](https://redirect.github.com/vitejs/vite/commit/c94c9e052127cf4796374de1d698ec60b2973dfa)), closes [#19501](https://redirect.github.com/vitejs/vite/issues/19501) - fix(worker): string interpolation in dynamic worker options ([#19476](https://redirect.github.com/vitejs/vite/issues/19476)) ([07091a1](https://redirect.github.com/vitejs/vite/commit/07091a1e804e5934208ef0b6324a04317dd0d815)), closes [#19476](https://redirect.github.com/vitejs/vite/issues/19476) - chore: use unicode cross icon instead of x ([#19497](https://redirect.github.com/vitejs/vite/issues/19497)) ([5c70296](https://redirect.github.com/vitejs/vite/commit/5c70296ffb22fe5a0f4039835aa14feb096b4a97)), closes [#19497](https://redirect.github.com/vitejs/vite/issues/19497) ### [`v6.1.1`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small611-2025-02-19-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v6.1.0...v6.1.1) - fix: ensure `.[cm]?[tj]sx?` static assets are JS mime ([#19453](https://redirect.github.com/vitejs/vite/issues/19453)) ([e7ba55e](https://redirect.github.com/vitejs/vite/commit/e7ba55e7d57ad97ab43682b152159e29fa4b3753)), closes [#19453](https://redirect.github.com/vitejs/vite/issues/19453) - fix: ignore `*.ipv4` address in cert ([#19416](https://redirect.github.com/vitejs/vite/issues/19416)) ([973283b](https://redirect.github.com/vitejs/vite/commit/973283bf84c3dca42e2e20a9f9b8761011878b8b)), closes [#19416](https://redirect.github.com/vitejs/vite/issues/19416) - fix(css): run rewrite plugin if postcss plugin exists ([#19371](https://redirect.github.com/vitejs/vite/issues/19371)) ([bcdb51a](https://redirect.github.com/vitejs/vite/commit/bcdb51a1ac082f4e8ed6f820787d6745dfaa972d)), closes [#19371](https://redirect.github.com/vitejs/vite/issues/19371) - fix(deps): bump tsconfck ([#19375](https://redirect.github.com/vitejs/vite/issues/19375)) ([746a583](https://redirect.github.com/vitejs/vite/commit/746a583d42592a31e1e8e80cc790a7c9e6acf58e)), closes [#19375](https://redirect.github.com/vitejs/vite/issues/19375) - fix(deps): update all non-major dependencies ([#19392](https://redirect.github.com/vitejs/vite/issues/19392)) ([60456a5](https://redirect.github.com/vitejs/vite/commit/60456a54fe90872dbd4bed332ecbd85bc88deb92)), closes [#19392](https://redirect.github.com/vitejs/vite/issues/19392) - fix(deps): update all non-major dependencies ([#19440](https://redirect.github.com/vitejs/vite/issues/19440)) ([ccac73d](https://redirect.github.com/vitejs/vite/commit/ccac73d9d0e92c7232f09207d1d6b893e823ed8e)), closes [#19440](https://redirect.github.com/vitejs/vite/issues/19440) - fix(html): ignore malformed src attrs ([#19397](https://redirect.github.com/vitejs/vite/issues/19397)) ([aff7812](https://redirect.github.com/vitejs/vite/commit/aff7812f0aed059c05ca36c86bf907d25964119a)), closes [#19397](https://redirect.github.com/vitejs/vite/issues/19397) - fix(worker): fix web worker type detection ([#19462](https://redirect.github.com/vitejs/vite/issues/19462)) ([edc65ea](https://redirect.github.com/vitejs/vite/commit/edc65eafa332b57ce44835deb7d7707e2d036c24)), closes [#19462](https://redirect.github.com/vitejs/vite/issues/19462) - refactor: remove custom .jxl mime ([#19457](https://redirect.github.com/vitejs/vite/issues/19457)) ([0c85464](https://redirect.github.com/vitejs/vite/commit/0c854645bd17960abbe8f01b602d1a1da1a2b9fd)), closes [#19457](https://redirect.github.com/vitejs/vite/issues/19457) - feat: add support for injecting debug IDs ([#18763](https://redirect.github.com/vitejs/vite/issues/18763)) ([0ff556a](https://redirect.github.com/vitejs/vite/commit/0ff556a6d9b55bff7cac17396ce7d4397becacaa)), closes [#18763](https://redirect.github.com/vitejs/vite/issues/18763) - chore: update 6.1.0 changelog ([#19363](https://redirect.github.com/vitejs/vite/issues/19363)) ([fa7c211](https://redirect.github.com/vitejs/vite/commit/fa7c211bf3e51269f8a8601e5994fb3ebb6859f9)), closes [#19363](https://redirect.github.com/vitejs/vite/issues/19363) </details> <details> <summary>fi3ework/vite-plugin-checker (vite-plugin-checker)</summary> ### [`v0.9.0`](https://redirect.github.com/fi3ework/vite-plugin-checker/releases/tag/vite-plugin-checker%400.9.0) [Compare Source](https://redirect.github.com/fi3ework/vite-plugin-checker/compare/vite-plugin-checker@0.8.0...vite-plugin-checker@0.9.0) ##### 🚨 Breaking Changes - Drop support for `cjs` usage - by [@danielroe](https://redirect.github.com/danielroe) in [https://github.com/fi3ework/vite-plugin-checker/issues/452](https://redirect.github.com/fi3ework/vite-plugin-checker/issues/452) [<samp>(155d7)</samp>](https://redirect.github.com/fi3ework/vite-plugin-checker/commit/155d771) - **deps**: Upgrade to chokidar v4 - by [@danielroe](https://redirect.github.com/danielroe) and [@stianjensen](https://redirect.github.com/stianjensen) in [https://github.com/fi3ework/vite-plugin-checker/issues/453](https://redirect.github.com/fi3ework/vite-plugin-checker/issues/453) [<samp>(dc05e)</samp>](https://redirect.github.com/fi3ework/vite-plugin-checker/commit/dc05e42) - **stylelint**: Require stylelint 16+ and update `meow` - by [@strawberry-choco](https://redirect.github.com/strawberry-choco) in [https://github.com/fi3ework/vite-plugin-checker/issues/294](https://redirect.github.com/fi3ework/vite-plugin-checker/issues/294) [<samp>(3ec83)</samp>](https://redirect.github.com/fi3ework/vite-plugin-checker/commit/3ec83ee) ##### 🚀 Features - Allow configuring custom `typescriptPath` - by [@fuks-ru](https://redirect.github.com/fuks-ru) in [https://github.com/fi3ework/vite-plugin-checker/issues/296](https://redirect.github.com/fi3ework/vite-plugin-checker/issues/296) [<samp>(945e9)</samp>](https://redirect.github.com/fi3ework/vite-plugin-checker/commit/945e9b0) ##### 🐞 Bug Fixes - Wait for checkers to finish before completing build - by [@philipgriffin](https://redirect.github.com/philipgriffin) and [@danielroe](https://redirect.github.com/danielroe) in [https://github.com/fi3ework/vite-plugin-checker/issues/288](https://redirect.github.com/fi3ework/vite-plugin-checker/issues/288) [<samp>(a0d32)</samp>](https://redirect.github.com/fi3ework/vite-plugin-checker/commit/a0d3281) - **biome**: Set `maxBuffer` size to infinity - by [@jonondarnad](https://redirect.github.com/jonondarnad) in [https://github.com/fi3ework/vite-plugin-checker/issues/417](https://redirect.github.com/fi3ework/vite-plugin-checker/issues/417) [<samp>(939ab)</samp>](https://redirect.github.com/fi3ework/vite-plugin-checker/commit/939abbb) ##### 🏎 Performance - Drop `fs-extra` in favour of native `node:fs` - by [@danielroe](https://redirect.github.com/danielroe) in [https://github.com/fi3ework/vite-plugin-checker/issues/444](https://redirect.github.com/fi3ework/vite-plugin-checker/issues/444) [<samp>(94830)</samp>](https://redirect.github.com/fi3ework/vite-plugin-checker/commit/9483051) - Remove unused dependencies - by [@danielroe](https://redirect.github.com/danielroe) [<samp>(fc0bc)</samp>](https://redirect.github.com/fi3ework/vite-plugin-checker/commit/fc0bcd6) - Switch to `colorette` - by [@danielroe](https://redirect.github.com/danielroe) [<samp>(2a745)</samp>](https://redirect.github.com/fi3ework/vite-plugin-checker/commit/2a745f8) ##### [View changes on GitHub](https://redirect.github.com/fi3ework/vite-plugin-checker/compare/vite-plugin-checker@0.8.0...vite-plugin-checker@0.9.0) </details> <details> <summary>vitest-dev/vitest (vitest)</summary> ### [`v3.0.7`](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.6...v3.0.7) [Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.6...v3.0.7) ### [`v3.0.6`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.6) [Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.5...v3.0.6) ##### 🐞 Bug Fixes - Fix `getMockedSystemTime` for `useFakeTimer` - by [@hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7405](https://redirect.github.com/vitest-dev/vitest/issues/7405) [<samp>(03912)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/03912b43) - Compat for jest-image-snapshot - by [@hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7390](https://redirect.github.com/vitest-dev/vitest/issues/7390) [<samp>(9542b)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/9542b699) - Ensure project names are readable in dark terminals - by [@rgrove](https://redirect.github.com/rgrove) in [https://github.com/vitest-dev/vitest/issues/7371](https://redirect.github.com/vitest-dev/vitest/issues/7371) [<samp>(bb94c)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/bb94c19f) - Exclude `queueMicrotask` from default fake timers to not break node fetch - by [@hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7505](https://redirect.github.com/vitest-dev/vitest/issues/7505) [<samp>(167a9)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/167a98d7) - **browser**: - Fix mocking modules out of root - by [@hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7415](https://redirect.github.com/vitest-dev/vitest/issues/7415) [<samp>(d3acb)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/d3acbd8b) - Fix `toHaveClass` typing - by [@hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7383](https://redirect.github.com/vitest-dev/vitest/issues/7383) [<samp>(7ef23)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/7ef238c0) - Relax locator selectors methods - by [@sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7422](https://redirect.github.com/vitest-dev/vitest/issues/7422) [<samp>(1b8c5)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/1b8c5c9e) - Resolve thread count from `maxWorkers` - by [@AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7483](https://redirect.github.com/vitest-dev/vitest/issues/7483) [<samp>(adbb2)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/adbb25ab) - Cleanup timeout on resolve and give more information in the error - by [@sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7487](https://redirect.github.com/vitest-dev/vitest/issues/7487) [<samp>(5a45a)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/5a45a7ca) - **coverage**: - `vite-node` to pass correct execution wrapper offset - by [@AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7417](https://redirect.github.com/vitest-dev/vitest/issues/7417) [<samp>(1f2e5)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/1f2e5552) - Preserve moduleExecutionInfo in non-isolated runs - by [@AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7486](https://redirect.github.com/vitest-dev/vitest/issues/7486) [<samp>(f31a0)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/f31a07bb) - **deps**: - Update all non-major dependencies - by [@hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7363](https://redirect.github.com/vitest-dev/vitest/issues/7363) [<samp>(e348b)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/e348bd4c) - Update all non-major dependencies - by [@hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7507](https://redirect.github.com/vitest-dev/vitest/issues/7507) [<samp>(6cc40)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/6cc408d6) - **init**: - Invalid browser config - by [@AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7475](https://redirect.github.com/vitest-dev/vitest/issues/7475) [<samp>(8fe64)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/8fe641b4) - **reporters**: - Render tasks in tree when in TTY - by [@AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7503](https://redirect.github.com/vitest-dev/vitest/issues/7503) [<samp>(027ce)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/027ce9bb) - **vite-node**: - Remove fake first line mapping on Vite 6 - by [@hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7124](https://redirect.github.com/vitest-dev/vitest/issues/7124) [<samp>(b9973)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/b997355b) - **watch**: - Properly remove cache after removing existing test files - by [@soc221b](https://redirect.github.com/soc221b) in [https://github.com/vitest-dev/vitest/issues/7399](https://redirect.github.com/vitest-dev/vitest/issues/7399) [<samp>(01a59)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/01a59721) - **workspace**: - Forward `inspect` related cli options - by [@AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7373](https://redirect.github.com/vitest-dev/vitest/issues/7373) [<samp>(ed15b)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ed15b5b3) ##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.5...v3.0.6) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "* 0-12 * * 3" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/brave/ads-ui).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

github-actions · 2025-03-04T09:25:57Z

[puLL-Merge] - brave/ads-ui@1448

Description

This PR includes several dependency updates and configuration changes:

Updates CodeQL analysis workflow to version 3.28.10
Updates Node.js version from 22.13.1 to 22.14.0
Adds dependency verification check in .npmrc
Updates multiple package dependencies including @apollo/client, MUI components, various dev dependencies
Updates pnpm version from 9.15.4 to 10.4.1
Modifies package overrides to use more flexible version ranges
Updates renovate configuration to handle overrides differently

Changes

Changes

.github/workflows/codeql-analysis.yml:
- Updates CodeQL action versions from 3.28.6 to 3.28.10
.node-version:
- Updates Node version to 22.14.0
.npmrc:
- Adds verify-deps-before-run setting to check dependencies before runs
package.json:
- Updates @apollo/client to 3.13.1
- Updates MUI packages to newer versions
- Updates several development dependencies
- Updates pnpm package manager version
- Modifies version overrides to use more flexible ranges
pnpm-lock.yaml:
- Comprehensive lock file update reflecting all dependency changes
renovate.json:
- Adds new rule for handling overrides with replace strategy

sequenceDiagram
    participant Dev as Developer
    participant NPM as Package Manager
    participant Build as Build System

    Dev->>NPM: Update dependencies
    NPM->>Build: Install new versions
    Build->>Build: Verify dependencies before run
    Build-->>Dev: Dependency verification status

renovate bot and others added 9 commits February 12, 2025 09:36

fix(audit): upgrade esbuild (#1441)

1db976f

Addresses GHSA-67mh-4wv8-2f99

tackley requested a review from a team as a code owner March 4, 2025 09:25

github-actions bot changed the title ~~next prod release~~ Production Release 2025-03-04 Mar 4, 2025

github-actions bot added the puLL-Merge label Mar 4, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Production Release 2025-03-04 #1448

Production Release 2025-03-04 #1448

tackley commented Mar 4, 2025 •

edited by github-actions bot

Loading

github-actions bot commented Mar 4, 2025

Changes

Production Release 2025-03-04 #1448

Are you sure you want to change the base?

Production Release 2025-03-04 #1448

Conversation

tackley commented Mar 4, 2025 • edited by github-actions bot Loading

Fixes

Chores

github-actions bot commented Mar 4, 2025

Description

Changes

tackley commented Mar 4, 2025 •

edited by github-actions bot

Loading