Skip to content

fix(deps): update all non-major dependencies - #129

Merged
tzuyi0817 merged 1 commit into
mainfrom
renovate/all-minor-patch
Aug 17, 2026
Merged

fix(deps): update all non-major dependencies#129
tzuyi0817 merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@commitlint/cli (source) ^21.2.1 → ^21.2.2 age confidence
@commitlint/config-conventional (source) ^21.2.0 → ^21.2.2 age confidence
@component-hook/eslint-plugin (source) ^1.5.0 → ^1.5.1 age confidence
@shikijs/monaco (source) 4.3.1 → 4.4.3 age confidence
@testing-library/user-event ^14.6.1 → ^14.6.4 age confidence
@tsconfig/node24 (source) ^24.0.4 → ^24.0.5 age confidence
@vue/language-core (source) 3.3.8 → 3.3.10 age confidence
@vue/language-service (source) 3.3.8 → 3.3.10 age confidence
@vue/typescript-plugin (source) 3.3.8 → 3.3.10 age confidence
cssnano ^8.0.2 → ^8.0.6 age confidence
lint-staged ^17.2.0 → ^17.3.0 age confidence
pnpm (source) 11.18.0 → 11.22.0 age confidence
postcss (source) ^8.5.25 → ^8.5.26 age confidence
postcss-preset-env (source) ^11.3.2 → ^11.4.0 age confidence
rollup-plugin-visualizer ^7.0.1 → ^7.1.1 age confidence
shiki (source) 4.3.1 → 4.4.3 age confidence
vite (source) ^8.2.0 → ^8.2.1 age confidence
vitest-canvas-mock ^1.1.4 → ^1.1.5 age confidence
vue (source) ^3.5.40 → ^3.5.41 age confidence
vue-tsc (source) ^3.3.8 → ^3.3.10 age confidence

Release Notes

conventional-changelog/commitlint (@​commitlint/cli)

v21.2.2

Compare Source

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v21.2.2

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

tzuyi0817/component-hook (@​component-hook/eslint-plugin)

v1.5.1

Compare Source

Features
  • eslint-plugin: upgrade eslint-plugin-unicorn to v73 (f8e7c56)
  • eslint-plugin: upgrade eslint-plugin-jsdoc to v64 (ca53cf5)
Bug Fixes
  • picker, pdf-canvas: packaging results in unnecessary types (6e362bb)
  • picker, pdf-canvas: externalize react subpath imports in the react build (4e73885)
  • eslint-plugin: disable unicorn/no-top-level-side-effects in markdown (5a851bc)
  • eslint-plugin: disable unnecessary unicorn rules (524e6b6)
shikijs/shiki (@​shikijs/monaco)

v4.4.3

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v4.4.2

Compare Source

   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub

v4.4.1

Compare Source

   🚀 Features
    View changes on GitHub

v4.4.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
testing-library/user-event (@​testing-library/user-event)

v14.6.4

Compare Source

v14.6.3

Compare Source

tsconfig/bases (@​tsconfig/node24)

v24.0.5

Compare Source

vuejs/language-tools (@​vue/language-core)

v3.3.10

Compare Source

language-core
  • fix: ignore trailing whitespace after generic parameter commas - Thanks to @​KazariEX!
  • fix: resolve v-for item type over generic sources (#​6141) - Thanks to @​serkodev!
  • fix: do not extract SFC blocks across inline Markdown code (#​6145) - Thanks to @​lazerg!
language-service
  • fix: serialize template data provider access across concurrent requests (#​6154) - Thanks to @​serkodev!
tsc
  • fix: support different extension sets across project references (#​6146) - Thanks to @​lazerg!
typescript-plugin
vscode
  • feat: patch typescript.js via --require to support read-only file systems (#​6149) - Thanks to @​serkodev!
  • fix: isolate custom TypeScript plugin paths between profiles (#​6148) - Thanks to @​serkodev!

v3.3.9

Compare Source

component-meta
language-core
language-service
  • fix: preserve trailing modifiers when completing in the middle of a directive (#​6133) - Thanks to @​lazerg!
  • fix: only replace current directive modifier on completion - Thanks to @​KazariEX!
  • fix: preserve current modifier when filtering completion duplicates - Thanks to @​KazariEX!
workspace
  • feat: migrate build and tests to typescript-native-bridge (#​6129)
cssnano/cssnano (cssnano)

v8.0.6: v8.0.6

Compare Source

What's Changed

Bug Fixes

  • fix(postcss-merge-rules): fix invalid merging in #​1893

  • fix(postcss-merge-rules): use webref data to perform a merge #​1897

  • fix(postcss-reduce-idents): do not break grid-template-areas in #​1898

  • fix: ensure correct repository URL in published packages in #​1900

  • fix(postcss-merge-longhand): improve longhand merging correctness in #​1907

  • fix(postcss-merge-longhand): add a fuzzer and fix the cases it found in #​1914

  • fix: improve selector minification in #​1915

Other Changes

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.5...cssnano@8.0.6

v8.0.5: v8.0.5

Compare Source

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.4...cssnano@8.0.5

v8.0.4: v8.0.4

Compare Source

What's Changed

Bug Fixes

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.3...cssnano@8.0.4

v8.0.3: v8.0.3

Compare Source

What's Changed

Bug Fixes
  • postcss-reduce-initial: update initial properties
  • potcss-minify-gradients: handle more than two stops
  • postcss-normalize-whitespace: preserve whitespace in custom prop
  • postcss-normalize-url: ensure trailing slash is preserved
Other Changes

  • packages now define an exports field in package.json. This prevents any file added to the package to automatically be exposed as a possible import. The has been done in a backward compatible way, so you should be able to import every file you did in the previous release.

  • types have also been regenerated with TypeScript 7.

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.2...cssnano@8.0.3

lint-staged/lint-staged (lint-staged)

v17.3.0

Compare Source

Minor Changes

  • #​1825 16b3f74 - It is now possible to run multiple tasks in parallel for a single glob by configuring it with an array of tasks (which run sequentially), and then placing another array inside it (where the tasks will run in parallel). The following demonstrates the order tasks will start in:

    {
  "*.ts": ["first", "second", ["third", "third"], "fourth"]
}

    As a concrete example, lint-staged's own configuration is:

    /** @type {import('./lib/index.js').Configuration} */
export default {
  "*": [
    [
      "oxfmt --check --no-error-on-unmatched-pattern",
      "oxlint --no-error-on-unmatched-pattern",
    ],
  ],
  "*.ts": () => "tsc",
};

    which means:

    1. for all staged files, run the two commands in parallel with staged filenames appended, for example:
      • oxfmt --check --no-error-on-unmatched-pattern lib/index.js
      • oxlint --no-error-on-unmatched-pattern lib/index.js
    2. additionally, if any *.ts files are staged, run tsc without appending any arguments
    3. The two sets of commands also run in parallel
Patch Changes
  • #​1829 15f7e53 - During an in-progress merge, files that are unchanged from the branch being merged are now skipped. Technically, files are only included if there are staged changes against both HEAD and MERGE_HEAD.
pnpm/pnpm (pnpm)

v11.22.0

Compare Source

v11.21.0: pnpm 11.21

Compare Source

Minor Changes

  • Added interactive group selection to pnpm update --global --interactive.

  • Running pnpm setup, pnpm self-update, or a command that modifies the global installation (such as pnpm add --global) through sudo now prints a warning. pnpm keeps global packages and configuration in the invoking user's home directory, so running these commands as root silently operates on the root user's home directory instead of yours. They will fail with ERR_PNPM_SUDO_NOT_SUPPORTED in pnpm v12. Read-only global commands (such as pnpm bin --global) are unaffected.

Patch Changes

  • Fixed pnpm failing to start under asynchronous Node.js module loaders when no .pnpmfile.mjs exists pnpm/pnpm#11701.

  • Fixed minimumReleaseAge fallback for custom dist-tags so the selected version does not exceed the registry’s original tag target.

  • Removing a dependency from package.json and reinstalling no longer re-resolves the dependency graph. The importer's entry is dropped from pnpm-lock.yaml, anything it made unreachable is pruned, and a catalog entry that loses its last referent is removed — all without registry access. Installs still fall back to a full resolution when a package that stays resolves a peer dependency through the removed one, since that would change the surviving package's entry rather than only prune.

  • Changing a catalog entry to a different exact version no longer re-resolves the dependency graph. The package is replaced in pnpm-lock.yaml directly, reusing the same check the pnpm.overrides fast path applies: every locked dependency of the package must still satisfy the new version's manifest. Installs fall back to a full resolution when anything other than the catalog reaches the package — an importer that depends on it directly, or another package that depends on it — since the graph would then need both versions.

  • Fixed a CI regression where github:owner/repo dependencies (and other shorthand Git specifiers) would fail to install with Permission denied (publickey) on CI runners that lack SSH keys. The Git resolver no longer records an SSH URL unless the user explicitly wrote one (e.g. git+ssh:// or git@host:...):

    • The repository visibility probe (an HTTP HEAD request) now retries transient failures such as 429 Too Many Requests, so host throttling of CI runners is no longer mistaken for a private repository.
    • For non-SSH specifiers, anonymous HTTPS git ls-remote access is now tried before SSH, so a public repository whose visibility probe fails still resolves to a portable HTTPS URL instead of an SSH URL that only works where SSH keys are configured.
    • When every probe fails, the resolver falls back to HTTPS for shorthand and HTTPS-style specifiers, and only guesses SSH when the user explicitly provided an SSH URL.
    • A repository that could not be confirmed public is no longer resolved to the host's anonymous archive URL (e.g. codeload.github.com, which would fail to download for a private repository); it stays a regular git resolution so installs can use ambient Git credentials such as credential helpers and tokens.

    Note that a private repository that is reachable both over authenticated HTTPS and over SSH now resolves to its HTTPS URL, where previous versions recorded the SSH URL.

    Fixes pnpm/pnpm#13276.

  • ng build and nuxt build now work under the global virtual store: pnpm's built-in compatibility extensions add the tslib dependency that @angular/build uses without declaring and the unplugin dependency that @nuxt/vite-builder v4 uses without declaring.

  • Fixed link: dependencies under enableGlobalVirtualStore so linked children are materialized and slots remain isolated by their resolved link targets.

  • An install that skips resolution because pnpm-lock.yaml is already up to date now reacts fully to packages the lockfile removed — for example after pulling a lockfile in which a dependency was deleted. The hoist layer is recomputed, so a package that became hoistable when a direct dependency was removed is hoisted, and pendingBuilds entries for removed packages are dropped instead of staying pending forever.

  • The held-back-update warning printed by pnpm update no longer fires when minimumReleaseAge is the actual reason a newer version was not picked. The warning's baseline now applies the same maturity cutoff as the pick itself, so it no longer wrongly attributes the hold-back to "your manifests and already installed dependencies" or recommends an override that would defeat the age gate. See #​13071.

  • Checking whether ignoredOptionalDependencies is up to date no longer reorders the configured patterns. The check sorted them in place, which could move an ! exclusion ahead of the pattern it excludes from and flip which optional dependencies were ignored.

  • Changing autoInstallPeers, dedupePeers, peersSuffixMaxLength, excludeLinksFromLockfile, or injectWorkspacePackages no longer re-resolves the dependency graph when the lockfile proves the setting cannot affect it: no package or project declares a peer dependency for the peer settings, and no project depends on a directory or on another workspace project for the link and injection settings. The new setting is recorded in pnpm-lock.yaml and the install proceeds from the existing resolution. Every other case still falls back to a full resolution.

  • Adding, editing, or removing an entry in patchedDependencies no longer re-resolves the dependency graph. Resolution never reads a patch — it only records the patch file's hash against the package it matches — so the install now rewrites the affected entries in pnpm-lock.yaml and materializes the patched package from the store instead. Installs still fall back to a full resolution when the patched package is reachable as a peer dependency, and when the new configuration would leave a patch unused while allowUnusedPatches is off, so ERR_PNPM_UNUSED_PATCH is still reported.

  • Resolving a private git repository no longer blocks on an interactive credential prompt: git ls-remote now fails fast with an authentication error when git has no credentials for the repository #​13522.

  • Lockfile verification now honors offline mode by using cached registry metadata instead of reaching the registry. When the required metadata is not available locally, verification reports the same ERR_PNPM_NO_OFFLINE_META condition used by offline resolution.

  • POSIX shell shims now follow symbolic links before computing basedir, preventing execution failures when a shim is invoked via an external symlink on PATH #​13405.

  • The automatic packageManager version switch works again on registries whose tarball URLs point at a different host than the registry itself (load-balanced feed proxies, Artifactory-style mirrors). Package-manager entries are now always recorded with integrity-only resolutions — the download URL is derived from the trusted bootstrap registry instead — and entries persisted in an invalid shape by an earlier pnpm are discarded and re-resolved instead of failing every command #​13619.

  • Registries that serve no npm signature metadata (private mirrors and feed proxies commonly strip dist.signatures) no longer break the automatic packageManager version switch and pnpm self-update #​13147. When the configured registry cannot provide a verifiable signature, pnpm now fetches the signature from registry.npmjs.org and verifies it against the same embedded npm keys over the installed integrity — which proves exactly the same thing. If no signature can be obtained from either source (for example, both are unreachable, or the registry publishes only a shasum), pnpm proceeds with a warning instead of failing, but only when the packages resolve through a registry configured in the user's own (non-project) configuration; the download stays pinned by the lockfile integrity, and a signature that exists but does not validate still fails the switch.

  • pnpm fetch, and any install run with virtualStoreOnly, no longer writes a .pnp.cjs loader under nodeLinker: pnp. These installs populate the virtual store without linking the project, so the loader would have claimed the project resolves out of a store it was never linked into. The importer links and node_modules/.package-map.json were already skipped; the PnP loader now follows the same rule.

  • Prevent pnpm from removing project files when modulesDir resolves to the project root.

  • Speed up installs after adding ignoredOptionalDependencies patterns by removing newly ignored optional dependencies and pruning packages that are no longer reachable without resolving the dependency graph again.

  • When a failed install re-copies a bin script from the store, rerunning pnpm install now reapplies the executable bit to the bin instead of leaving it non-executable #​12742.

  • pnpm root -g and pnpm bin -g now print warnings to stderr instead of stdout, so their stdout stays a clean, machine-readable path. Previously, running either command with --global in a project that pins a package manager (e.g. via the packageManager field) printed a warning like [WARN] Using --global skips the package manager check for this project ahead of the path, breaking programs that capture the output as a path #​13672.

    In pnpm 12, pnpm root -g and pnpm prefix -g are now supported (they previously failed with ERR_PNPM_CLI_ROOT_GLOBAL_UNSUPPORTED / ERR_PNPM_CLI_PREFIX_GLOBAL_UNSUPPORTED), and the reporter output of dlx, create, config, sbom, with, store, prefix, root, and bin goes to stderr, matching pnpm 11.

  • pnpm setup no longer makes Node.js print a MODULE_TYPELESS_PACKAGE_JSON warning about dist/worker.js on every command. The package.json it writes next to a standalone executable now declares "type": "module".

  • pnpm update without saving no longer records a version that the manifest's range excludes. The kept range stays authoritative: a requested version outside it is skipped with a warning, and a requested range, a dist tag, or --latest resolves within it instead of past it. Previously each of these could write a lockfile entry that contradicted its own specifier, which the next pnpm install --frozen-lockfile rejected with ERR_PNPM_OUTDATED_LOCKFILE #​12764.

  • pnpm version -r --json now outputs [] instead of human-readable text when no pending changes exist pnpm/pnpm#13217.

Platinum Sponsors

Bit
OpenAI

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx

v11.20.0: pnpm 11.20

Compare Source

Minor Changes

  • Security fix. Affects projects using namedRegistries on pnpm 11.1.0–11.19.x. It is semi-breaking for those projects — see "If you use named registries" below.

    The lockfile recorded no marker for which registry a package came from. Packages were keyed by name@version alone, and entry lookup went through refToRelative(ref, name), so a dependency you declared against one registry could be satisfied by an entry that was actually resolved from another. When two registries served the same name and version, both collapsed onto a single packages: entry and whichever resolved first decided the tarball every consumer got.

    That is a package-substitution risk: a package you expect from your private registry could be installed from a different registry that publishes the same name and version, and the lockfile recorded nothing that would let you tell.

    Packages resolved from a named registry are now recorded under registry-qualified keys (<name>@<registryName>:<version>, e.g. foo@work:1.0.0), so each registry gets its own entry and the lockfile pins which one a dependency came from.

    The lockfile format version is unchanged. Registry-qualified keys appear only for packages resolved from a named registry, so a project that does not use namedRegistries sees no difference, and older pnpm versions keep reading the file.

If you use named registries

Your next non-frozen install re-keys those entries, which shows up as a lockfile diff. Commit it — that diff is the fix being applied. Review it: an entry that moves to a registry you did not expect is worth investigating.

Everyone working on the project should be on this version or newer before you do. An older pnpm reads the re-keyed lockfile fine — frozen installs are unaffected — but it does not produce registry-qualified keys itself, so any install that updates the lockfile writes those entries back to the old shape, and the next install on a current pnpm re-qualifies them. The result is a lockfile that flips back and forth, and while it is in the old shape the project is exposed again. Because the lockfile format version is deliberately unchanged, pnpm cannot detect this and warn you about it.

There is no setting to keep the old behavior: the old shape is the vulnerability.

Tarball URLs that follow the standard registry layout are no longer written to the lockfile for named-registry packages; they are recomputed from the namedRegistries setting on demand.

To use named registries, map your aliases in pnpm-workspace.yaml:

namedRegistries:
  work: https://npm.enterprise.example.com/
New built-in npmjs: alias

npmjs: now resolves to https://registry.npmjs.org/ with no configuration, alongside the existing gh: alias for GitHub Packages. It pins a dependency to the public registry even when registry points elsewhere, such as an internal proxy:

{ "dependencies": { "left-pad": "npmjs:^1.3.0" } }

npm: cannot do this — it is the alias protocol (npm:<name>@<range>) and resolves through whatever registry points at.

If you mirror or proxy npmjs, point the alias at your mirror:

namedRegistries:
  npmjs: https://npm.internal.example.com/

Built-in registry URLs are also the prefixes a lockfile's recorded tarball URL is matched against when pnpm verifies a package. Without the override, an entry whose tarball URL is on registry.npmjs.org is verified against the public registry rather than your mirror. This only affects lockfiles that record such URLs — a canonical URL for your configured registry is omitted from the lockfile and unaffected — and only when a tarball-URL, minimumReleaseAge, or trustPolicy check runs. Overriding the alias is the same escape hatch GHES users already have for gh.

Every alias the lockfile references must stay in namedRegistries: reading an entry whose alias is gone fails with ERR_PNPM_MISSING_NAMED_REGISTRY rather than silently falling back to the default registry, since that would fetch a different package. Renaming an alias re-resolves the packages that used it.

Named registry aliases that shadow a reserved dependency specifier prefix (file, link, workspace, runtime, npm, jsr, ...) are now rejected with ERR_PNPM_RESERVED_NAMED_REGISTRY_NAME instead of being silently shadowed by the corresponding resolver.

pnpm licenses and pnpm sbom now keep the two artifacts apart as well: license records carry the registry alias, and SBOM components carry the purl repository_url qualifier.

Patch Changes

  • An empty http-proxy, https-proxy, proxy, or no-proxy value — from the .npmrc, pnpm-workspace.yaml, the CLI, or the HTTP_PROXY / HTTPS_PROXY / PROXY / NO_PROXY environment variables — no longer fails the install with ERR_PNPM_INVALID_PROXY. Empty settings read as unset, so a shell exporting HTTP_PROXY= disables the proxy, and an empty proxy= in the .npmrc no longer suppresses HTTPS_PROXY #​13533.

    proxy=false in the .npmrc or proxy: false in pnpm-workspace.yaml now turns proxying off instead of being read as a proxy host named false. false and null on https-proxy / http-proxy / no-proxy read as unset, and on the command line they are ordinary host names, since a flag carries its value verbatim.

  • The env lockfile no longer pins @pnpm/exe alongside pnpm when the wanted pnpm version is 12 or newer. From v12 the unscoped pnpm package is itself the native executable, so @pnpm/exe is not published for it and resolving it would fail. The engine identity check now verifies the native binary through whichever package ships it.

  • lexCompare and nerfDart are now published as @pnpm/text.ordinal-comparator and @pnpm/config.registry-auth-key. Use these instead of @pnpm/util.lex-comparator and @pnpm/config.nerf-dart.

  • Fixed the order in which pnpm matches a lockfile's recorded tarball URL against known registry URLs. Two registry URLs of equal length were previously ordered arbitrarily, so which one a tarball URL matched could differ between runs.

  • Dependency resolution is faster: package metadata is now filtered once per packument instead of once per dependency edge when minimumReleaseAge is active, and parsed semver versions and ranges are reused instead of re-parsed on every comparison.

  • Security: pnpm rebuild now refuses a lockfile whose packages key carries a path traversal in the package name (e.g. ../../../escaped@1.0.0), instead of running that package's lifecycle scripts and linking its bins in a directory outside the virtual store. Such a name is rejected with ERR_PNPM_INVALID_DEPENDENCY_NAME.

Platinum Sponsors

Bit
OpenAI

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx

v11.19.0: pnpm 11.19

Compare Source

Minor Changes

  • pnpm login no longer requires an interactive terminal when the registry supports web-based login: without a TTY it prints the authentication URL (skipping the QR code and the "Press ENTER to open the URL in your browser" prompt) and polls the registry until the browser approval completes. Only the classic username/password login still fails with ERR_PNPM_LOGIN_NON_INTERACTIVE in a non-interactive terminal.

  • The save-prefix setting now accepts =: newly added dependencies are saved with an explicit = operator (=1.2.3) instead of the setting being silently treated as the default ^.

Patch Changes

  • allowBuilds entries can now approve git-hosted packages that pnpm downloads as a tarball, such as github: dependencies (which are fetched from codeload.github.com rather than cloned), by their repository URL without the resolved commit hash. This matches the hashless git+ matching already supported for cloned git dependencies. For example:

    allowBuilds:
  "foo@git+https://github.com/org/foo.git": true

    This approves the package whether pnpm clones it or downloads a tarball, so the entry no longer has to be updated every time the pinned commit changes. GitLab and Bitbucket tarball downloads are matched the same way. Approving or denying a specific resolved commit by its full tarball dep path continues to work.

  • pnpm outdated --include-github-actions no longer blocks on an interactive git credential prompt when a workflow uses a private action repo.

  • Prevented minimumReleaseAge from replacing latest with a SemVer-greater version than the registry tag target #​13034.

  • Fixed empty bundledDependencies and bundleDependencies arrays causing nondeterministic lockfile changes. See #​13123.

  • The install summary no longer prints (X is available) when the registry's dist-tags.latest is still held back by the active minimumReleaseAge policy. The hint only ever names the actual latest tag, so an immature latest suppresses the hint instead of advertising the version pnpm just refused to install #​11698.

  • pnpm update keeps the explicit = operator of an exact version pin: a dependency saved as =3.5.1 now updates to =3.5.2 instead of the bare 3.5.2. See #​13168.

  • Preserve a workspace dependency's link: entry when a run does not target it — e.g. pnpm update <other-pkg> (with or without --recursive), or a plain install after a root/catalog dependency change — with injectWorkspacePackages, instead of spuriously rewriting it to a peer-suffixed file: protocol. See #​10433.

  • Workspace dependencies declared with a relative path (e.g. "foo": "workspace:../foo") are no longer silently dropped from the workspace projects graph, so --filter selection and the topological order of recursive commands take them into account.

Platinum Sponsors

Bit
config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Aug 3, 2026
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-boz2h30ls-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 36f03dd to 2d00456 Compare August 3, 2026 17:08
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-vujdrp0ec-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 2d00456 to 0a67737 Compare August 4, 2026 02:09
@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-im3pi3joy-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 0a67737 to a2a03a4 Compare August 5, 2026 00:43
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-pey9b5wu4-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from a2a03a4 to 07127d5 Compare August 5, 2026 05:43
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-76y5ai0xz-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 07127d5 to c0c816d Compare August 5, 2026 10:27
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Aug 5, 2026
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-faajz8b8m-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from c0c816d to 010db07 Compare August 5, 2026 17:55
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-3pqk12r08-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 010db07 to 70cff09 Compare August 6, 2026 10:52
@github-actions

github-actions Bot commented Aug 6, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-nw96hg5h7-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 70cff09 to 1fb0184 Compare August 6, 2026 16:53
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 1fb0184 to 3b4ef61 Compare August 9, 2026 17:09
@github-actions

github-actions Bot commented Aug 9, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-q3viwcscy-tzuyi0817s-projects.vercel.app

@github-actions

github-actions Bot commented Aug 10, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-65rflgt8w-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from d9a7f33 to 07b085c Compare August 10, 2026 10:30
@renovate
renovate Bot deployed to Preview August 10, 2026 10:31 Active
@github-actions

github-actions Bot commented Aug 10, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-3zfgtrtmj-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 07b085c to d7eef4e Compare August 11, 2026 23:04
@renovate
renovate Bot deployed to Preview August 11, 2026 23:06 Active
@github-actions

github-actions Bot commented Aug 11, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-jk2lthjn0-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from d7eef4e to fdb0f8a Compare August 12, 2026 05:10
@renovate
renovate Bot deployed to Preview August 12, 2026 05:11 Active
@github-actions

github-actions Bot commented Aug 12, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-pf6w95vrz-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from fdb0f8a to 5e35db9 Compare August 16, 2026 11:10
@renovate
renovate Bot deployed to Preview August 16, 2026 11:11 Active
@github-actions

github-actions Bot commented Aug 16, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-aoncaifot-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 5e35db9 to 4e736f7 Compare August 17, 2026 03:09
@renovate
renovate Bot deployed to Preview August 17, 2026 03:10 Active
@github-actions

github-actions Bot commented Aug 17, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-qbnlrl1r8-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from a202f3d to de23e76 Compare August 17, 2026 05:20
@renovate
renovate Bot deployed to Preview August 17, 2026 05:21 Active
@github-actions

github-actions Bot commented Aug 17, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-pmt80twty-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from de23e76 to 9bcf84d Compare August 17, 2026 05:24
@renovate
renovate Bot deployed to Preview August 17, 2026 05:25 Active
@github-actions

github-actions Bot commented Aug 17, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-r7fydqxld-tzuyi0817s-projects.vercel.app

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 9bcf84d to 2edead0 Compare August 17, 2026 05:27
@renovate
renovate Bot deployed to Preview August 17, 2026 05:28 Active
@github-actions

github-actions Bot commented Aug 17, 2026

Copy link
Copy Markdown

Deployed at https://code-immediate-gidmynn73-tzuyi0817s-projects.vercel.app

@tzuyi0817
tzuyi0817 merged commit 0d9abbc into main Aug 17, 2026
3 checks passed
@tzuyi0817
tzuyi0817 deleted the renovate/all-minor-patch branch August 17, 2026 05:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tzuyi0817 tzuyi0817 tzuyi0817 approved these changes

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@tzuyi0817