build(deps): update non-major dependencies#58
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
77df121 to
e450aee
Compare
455e6cc to
d102417
Compare
bce482b to
1bc1b78
Compare
bebf000 to
4c629ae
Compare
c625870 to
3121928
Compare
51255c7 to
b0c659f
Compare
b0c659f to
387023c
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.3.0→4.3.15.100.14→5.101.025.9.1→25.9.34.1.8→4.1.92.4.10→2.4.11de0fac2→df4cb1c2.10.33→2.10.371.0.30001793→1.0.3000179975cd116→0fb7174v11.4.0→v11.4.1v5.2.5→v5.3.0v1.34.0→v1.35.1v3.7.0→v3.10.01e7e51e→82606bf16a9c90→5c625bf1.68.0→1.70.03.8.3→3.8.4^0.7.2→^0.8.04.3.0→4.3.14.1.8→4.1.93.5.35→3.5.383.3.3→3.3.5Release Notes
tailwindlabs/tailwindcss (@tailwindcss/postcss)
v4.3.1Compare Source
Added
--silentoption to suppress output in@tailwindcss/cli(#20100)Fixed
Module#registerHooksinstead ofModule#registeron Node 26+ (#20028)@applyto be used with CSS mixins (#19427)not-*correctly negates@containerqueries, includingstyle(…)queries (#20059)drop-shadow-*color utilities work with custom shadow values containingcalc(…)(#20080)@tailwindcss/vite(#20103)@tailwindcss/webpackcan be installed in Rspack projects without requiringwebpackas a peer dependency (#20027)calc(…)expressions (e.g.px-[calc(1rem+0px)]→px-[calc(1rem+0)]) (#20127)left-[99999px]→left-[99999px], notleft-24999.75) (#20130)@tailwindcss/cliin--watchmode recovers when a tracked dependency is deleted and restored (#20137)@tailwindcss/clibinaries are ignored when scanning for class candidates (#20139)addClass(…)andremoveClass(…)calls (#20198)@variantto be used insideaddBase(#19480)@sourceglobs with symlinks are preserved (#20203)@sourcerules can re-include files excluded by earlier@source notrules (#20203)@utilityrules (#20205)inset-shadow-noneand other inset shadows work correctly (#20208)@sourcedirectories are scanned even when ignored by git (#20214)@sourceglobs ending in**/*preserve dynamic path segments to avoid scanning too many files (#20217)calc(…)divisions when the result would require high precision (e.g.w-[calc(100%/3.5)]→w-[calc(100%/3.5)], notw-[28.571428571428573%]) (#20221)@tailwindcss/postcss(#20228)Changed
0instead ofcalc(var(--spacing) * 0)for spacing utilities likem-0andleft-0(#20196)var(--spacing)instead ofcalc(var(--spacing) * 1)for spacing utilities likem-1andleft-1(#20196)TanStack/query (@tanstack/vue-query)
v5.101.0Compare Source
Patch Changes
#10826
1348095- Replace deprecated isServer with environmentManager.isServer()Updated dependencies []:
vitest-dev/vitest (@vitest/coverage-v8)
v4.1.9Compare Source
🐞 Bug Fixes
importOriginalwith optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in #10546 (a5180)View changes on GitHub
vuejs/test-utils (@vue/test-utils)
v2.4.11Compare Source
compare changes
🩹 Fixes
setData()correctly for components using bothsetup()anddata()(#2846)GlobalMountOptionstype (#2851)event.codeonkeydown/keyup(#2850)❤️ Contributors
web-platform-dx/baseline-browser-mapping (baseline-browser-mapping)
v2.10.37Compare Source
v2.10.36Compare Source
v2.10.35Compare Source
v2.10.34Compare Source
browserslist/caniuse-lite (caniuse-lite)
v1.0.30001799Compare Source
v1.0.30001797Compare Source
caarlos0/env (github.com/caarlos0/env/v11)
v11.4.1Compare Source
Changelog
Bug fixes
6daeb06: fix: use Key instead of OwnKey in rawEnvVars to properly reference existing defaults in complex structs (#412) (@AndrewChubatiuk)Documentation updates
1ff55e6: docs: adaptive starchart (#416) (@alexandear)Other work
cf4a968: ci(deps): bump the actions group with 3 updates (#411) (@dependabot[bot])33faf6f: ci(deps): bump the actions group with 3 updates (#417) (@dependabot[bot])0cb635b: ci(deps): bump the actions group with 6 updates (#415) (@dependabot[bot])a72d89a: ci: update release config (@caarlos0)Released with GoReleaser Pro!
go-chi/chi (github.com/go-chi/chi/v5)
v5.3.0Compare Source
What's Changed
New Contributors
SECURITY: middleware.ClientIP, a replacement for middleware.RealIP
PR #967 introduced
middleware.ClientIP, a replacement formiddleware.RealIPthat closes the three open spoofing advisories:RemoteAddrresolution (convto)middleware.RealIP(Saku0512, Critical / 9.3)It also addresses issues outlined at:
middleware.RealIPis deprecated in this PR with pointers to the new API.The deprecation only adds a
// Deprecated:doc comment; the function keeps working for backward compatibility.Why a new middleware (not "fix RealIP in place")
RealIPhas two unfixable design choices: it mutatesr.RemoteAddr, and it tries to be a one-size-fits-all default by walking a hard-coded list of headers any client can supply. Per adam-p's "The perils of the 'real' client IP" (which calls chi out by name on this), there is no safe default — the user must pick their trust source explicitly.The new API
Four middlewares, two accessors. Pick exactly one middleware based on your
infrastructure, read the result with one of the two accessors:
Example usage:
And in your handler or downstream middleware:
Thanks to @adam-p, @c2h5oh, @rezmoss, @Saku0512, @convto, @Dirbaio, @jawnsy, @lrstanley, @mfridman, @n33pm, @pkieltyka for the prior discussions, detailed reviews, advisory reports, and test contributions that shaped this PR.
Full Changelog: go-chi/chi@v5.2.5...v5.3.0
rs/zerolog (github.com/rs/zerolog)
v1.35.1Compare Source
v1.35.0Compare Source
urfave/cli (github.com/urfave/cli/v3)
v3.10.0Compare Source
What's Changed
Full Changelog: urfave/cli@v3.9.1...v3.10.0
v3.9.1Compare Source
What's Changed
Full Changelog: urfave/cli@v3.9.0...v3.9.1
v3.9.0Compare Source
What's Changed
New Contributors
Full Changelog: urfave/cli@v3.8.0...v3.9.0
v3.8.0Compare Source
What's Changed
New Contributors
Full Changelog: urfave/cli@v3.7.0...v3.8.0
oxc-project/oxc (oxlint)
v1.70.0Compare Source
🚀 Features
2e8bda4linter/vue: Implement no-dupe-keys rule (#23350) (bab)1490a0alinter/react: Implement react-compiler rule (#23202) (Boshen)dd560aelinter/unicorn: Implementno-array-fill-with-reference-typerule (#23397) (Mikhail Baev)af36c2flinter: Add schema forreact/jsx-curly-brace-presence(#23400) (WaterWhisperer)47d34a3linter: Add schema forreact/jsx-handler-names(#23393) (WaterWhisperer)f4250d0linter: Add schema forunicorn/import-style(#23386) (WaterWhisperer)30c74celinter: Add schema forjsx_a11y/no-noninteractive-element-to-interactive-role(#23384) (Sysix)cfbe8dclinter: Add schema forjsx_a11y/no-interactive-element-to-noninteractive-role(#23382) (WaterWhisperer)d15b7fflinter: Add schema fortypescript/no-restricted-types(#23381) (WaterWhisperer)028a811linter: Add schema forjsx-a11y/media-has-caption(#23377) (Sysix)b3b1038linter: Add schema forjsx-a11y/label-has-associated-control(#23376) (Sysix)7ada6b2linter: Add schema forjsx_a11y/no-distracting-elements(#23379) (WaterWhisperer)ee3dd49linter: Add schema forjsx-a11y/img-redundant-alt(#23374) (Sysix)df5f8ddlinter: Add short descriptions to most lint rules. (#23365) (Connor Shea)e3fd735linter: Add schema forjsx_a11y/alt-text(#23369) (Sysix)0f2fff4linter: Add schema forreact/exhaustive-deps(#23372) (Mikhail Baev)e3e4e10linter: Add schema forreact_perf/jsx-no-new-object-as-prop(#23368) (Mikhail Baev)9366d44linter: Add schema forunicorn/prefer-at(#23366) (WaterWhisperer)f57b55dlinter: Add schema fortypescript/array-type(#23355) (Sysix)0dcf912linter: Add schema fortypescript/ban-ts-comment(#23354) (Sysix)51fa83elinter: Add schema forreact/no-did-update-set-state(#23357) (Mikhail Baev)59db0bdlinter: Add schema forconsistent-generic-constructors(#23353) (Sysix)c4775c0linter: Add schema fortypescript/consistent-type-assertions(#23349) (Sysix)6e516f7linter: Add schema fortypescript/consistent-type-imports(#23348) (Sysix)012134dlinter: Add schema forreact/jsx-no-target-blank(#23345) (WaterWhisperer)0806aaelinter: Add schema forjsx_a11y/no-noninteractive-tabindex(#23337) (Mikhail Baev)0708b5alinter: Add schema forreact/jsx-filename-extension(#23315) (Mikhail Baev)150bce1linter: Add schema fortypescript/no-empty-object-type(#23309) (Sysix)f9e36f1linter: Add schema fortypescript/no-duplicate-type-constituents(#23308) (Sysix)937accflinter: Add schema fortypescript/no-invalid-void-type(#23307) (Sysix)3e042b9linter: Add schema fortypescript/no-misused-promises(#23306) (Sysix)da212d1linter: Add schema fortypescript/no-unnecessary-condition(#23305) (Sysix)f8f0d38linter: Add schema fortypescript/parameter-properties(#23304) (Sysix)2275fc7linter: Add schema fortypescript/prefer-nullish-coalescing(#23302) (Sysix)d353858linter: Add schema fortypescript/prefer-string-starts-ends-with(#23301) (Sysix)03060f5linter: Add schema fortypescript/triple-slash-reference(#23300) (Sysix)6619ceelinter: Add schema forpromise/param-names(#23298) (Sysix)8bf108elinter: Add schema forpromise/catch-or-return(#23297) (Sysix)48158d0linter: Add schema forvitest/consistent-each-for(#23294) (Sysix)7e74c98linter: Add schema forvitest/consistent-test-filename(#23293) (Sysix)ff94d4alinter: Add schema forvitest/consistent-vitest-vi(#23292) (Sysix)2409a10linter: Add schema forvitest/prefer-import-in-mock(#23291) (Sysix)3d782b7linter: Add schema forreact/no-unstable-nested-components(#23287) (Mikhail Baev)0a0bc2flinter/jsx-a11y: AddallowedRedundantRolesoption tono-redundant-roles(#22820) (bab)80758a5linter/vue: Implement no-side-effects-in-computed-properties rule (#23282) (bab)e3869aclinter: Add schema forreact/no-object-type-as-default-prop(#23279) (Mikhail Baev)4480609linter: Add schema forreact/jsx-props-no-spreading(#23276) (Mikhail Baev)08d68a5linter/react: Implementjsx-no-literalsrule (#23145) (kapobajza)9a2788blinter/unicorn: Implementprefer-export-fromrule (#22935) (AliceLanniste)bdb723clinter/unicorn: Implement prefer-single-call rule (#23235) (Yuzhe Shi)31543edlinter: Add schema forvue/define-props-destructuring(#23252) (Sysix)21b6c3dlinter: Add schema foroxc/no-async-endpoint-handlers(#23251) (Sysix)e77ff81linter: Add schema forunicorn/prefer-object-from-entries(#23249) (Mikhail Baev)bcac2d6linter: Add schema forjest/vitest/no-restricted-matchers(#23247) (Sysix)539f036linter: Add schema forjest/vitest/no-restricted-*-methods(#23246) (Sysix)dd1b927linter/vue: Implement require-default-prop rule (#22951) (bab)3f018e7linter: Add schema forunicorn/no-instanceof-builtins(#23225) (Mikhail Baev)e0d0f78linter: Verify promise/no-callback-in-promise schema (#23141) (beanscg)123d4f4linter: Add schema forjest/vitest/valid-expect(#23185) (Sysix)46c8a21linter: Add schema forjest/vitest/require-top-level-describe(#23184) (Sysix)41465cflinter: Add schema forjest/vitest/prefer-snapshot-hint(#23183) (Sysix)d068b9blinter: Add schema forjest/vitest/prefer-expect-assertions(#23181) (Sysix)064a1eelinter: Add schema forjest/prefer-ending-with-an-expect(#23180) (Sysix)d046797linter: Add schema forjest/vitest/no-standalone-expect(#23179) (Sysix)137b9a6linter: Add schema forjest/vitest/no-large-snapshots(#23178) (Sysix)0f3e4a5linter: Add schema forjest/vitest/no-hooks(#23177) (Sysix)cd0b384linter: Add schema forunicorn/explicit-length-check(#23155) (Mikhail Baev)01b74c4linter: Add schema forjest/no-deprecated-functions(#23136) (Sysix)9d6a387linter: Add schema forunicorn/catch-error-name(#23137) (Mikhail Baev)0da8efalinter: Add schema forjest/vitest/max-nested-describe(#23131) (Sysix)d71c9fdlinter: Add schema foreslint/no-use-before-define(#23129) (Sysix)🐛 Bug Fixes
26ddac6linter: Avoid config schema generation forjsx_a11y/no-noninteractive-element-interactions(#23385) (Sysix)40556adlinter: Parsejsx-a11y/control-has-associated-labelconfig withDefaultRuleConfig(#23373) (Sysix)71e9648linter: Expose no-noninteractive-element-interactions schema (#23283) (camc314)6c86d1clinter/react-perf: Correct nativeAllowList all schema (#23229) (camc314)4dd52delinteConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.