chore(deps): update dependency npm-check-updates to v21 by renovate[bot] · Pull Request #1000 · technology-studio/startup-react

renovate · 2026-05-14T20:34:12Z

This PR contains the following updates:

Package	Change	Age	Confidence
npm-check-updates	`^18.3.1` → `^21.0.2`

Release Notes

raineorshine/npm-check-updates (npm-check-updates)

`v21.0.2`

Compare Source

What's Changed

fix: skip intersects() for non-semver specs like catalog: in peer dep checks by @terminalchai in #1675

Full Changelog: raineorshine/npm-check-updates@v21.0.1...v21.0.2

`v21.0.1`

Compare Source

What's Changed

fix: seeing catalog when inside workspaces by @Zamiell in #1656
Bump @types/bun from 1.3.11 to 1.3.12 by @dependabot[bot] in #1663
Bump globals from 17.4.0 to 17.5.0 by @dependabot[bot] in #1664
Bump @typescript-eslint/parser from 8.58.1 to 8.58.2 by @dependabot[bot] in #1665
Bump prettier from 3.8.1 to 3.8.2 by @dependabot[bot] in #1667
Bump verdaccio from 6.4.0 to 6.5.0 by @dependabot[bot] in #1669
Bump sinon from 21.0.3 to 21.1.2 by @dependabot[bot] in #1668
Skip CI on PRs with no file changes by @Copilot in #1672
Bump @typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 by @dependabot[bot] in #1666
Fix wrong message when all packages are within cooldown window by @Copilot in #1671

Full Changelog: raineorshine/npm-check-updates@v21.0.0...v21.0.1

`v21.0.0`

Compare Source

⚠️ Breaking Changes

This is a major breaking change with significant architectural updates.

ESM Migration & Module System

Pure ESM: Converted to pure ESM with dual-build support (ESM/CJS) via Vite 8.
Import Syntax: Programmatic usage now requires named imports or namespace imports.
- Old: import ncu from 'npm-check-updates'
- New: import * as ncu from 'npm-check-updates' or import { run } from 'npm-check-updates'
Node.js Requirements: Now requires ^20.19.0 || ^22.12.0 || >=24.0.0. This is required for native require(esm) support and the Rolldown engine.
npm Requirements: Minimum version increased to >=10.0.0.

Configuration Files (`.ncurc.js`)

Files named .ncurc.js that use module.exports will now fail in projects that are not "type": "module".
Fix: Rename these files to .ncurc.cjs or convert them to use export default.

Dependency Updates (Pure ESM versions)

Package	Old Version	New Version
`camelcase`	`^6.3.0`	`^9.0.0`
`chai`	`^4.3.10`	`^6.2.2`
`chai-as-promised`	`^7.1.2`	`^8.0.2`
`find-up`	`5.0.0`	`8.0.0`
`p-map`	`^4.0.0`	`^7.0.4`
`untildify`	`^4.0.0`	`^6.0.0`

Tooling & Build Changes

Vite 8 Upgrade: Migrated to Vite 8 with the new Rust-based Rolldown bundler (10-30x faster builds).
TypeScript 6.0: Adopted latest type-system features and performance improvements.
Strip ANSI: Replaced strip-ansi with Node.js built-in util.stripVTControlCharacters.
Test Runner: Replaced vite-node with tsx for TypeScript support in ESM context.

Migration Guide

If you are upgrading to v21 from earlier versions:

1. Environment Check

Ensure you meet the new Node.js requirement: ^20.19.0 || ^22.12.0 || >=24.0.0.
Update npm to at least 10.0.0.

2. Update Configuration Files

If you have a .ncurc.js file:

Option A: Rename it to .ncurc.cjs.

Option B: Convert it to ESM:

import { defineConfig } from 'npm-check-updates'

export default defineConfig({
  upgrade: true,
  filter: name => name.startsWith('@&#8203;myorg/'),
})

3. Update Programmatic Usage

If you import npm-check-updates in your scripts:

ESM: Change import ncu from ... to import * as ncu from 'npm-check-updates'.
CommonJS: Ensure you are destructuring the named exports or using the full object:

const ncu = require('npm-check-updates')
// Use ncu.run(...)

Testing

Tests now use tsx for module loading. When running tests manually:

mocha --node-option import=tsx 'test/**/*.test.ts'

Or use the npm script:

npm test

Related Issues & PRs

PR 1649

`v20.0.2`

Compare Source

What's Changed

Show auto-detected cooldown source at normal log level; fix test isolation by @bayraak in #1662

New Contributors

@bayraak made their first contribution in #1662

Full Changelog: raineorshine/npm-check-updates@v20.0.1...v20.0.2

`v20.0.1`

Compare Source

What's Changed

Add CI workflow to verify build output is committed by @Copilot in #1645
Bump lodash-es from 4.17.23 to 4.18.1 by @dependabot[bot] in #1647
Add Node v24 to test workflow by @Copilot in #1608
feat: remove pre-push git hook by @Zamiell in #1658
feat: add verbose output when packages are skipped due to cooldown by @Copilot in #1659

Full Changelog: raineorshine/npm-check-updates@v20.0.0...v20.0.1

`v20.0.0`

Compare Source

Auto Cooldown

The cooldown option is now automatically applied from the respective package manager's config:

npm - min-release-age (#1632)
yarn - npmMinimalAgeGate (excluding npmPreapprovedPackages) (#1643)
pnpm - minimumReleaseAge (excluding minimumReleaseAgeExclude) (#1639)

Why is this a breaking change?

If you use any of the above configs, npm-check-updates will automatically exclude releases that do not exceed the specified minimum age as described in https://github.com/raineorshine/npm-check-updates#cooldown.
Otherwise, you don't need to do anything.

Other changes

Bump strip-ansi from 7.1.2 to 7.2.0 by @dependabot[bot] in #1620
Bump lodash and @types/lodash by @dependabot[bot] in #1615
Bump @typescript-eslint/eslint-plugin from 8.44.1 to 8.57.2 by @dependabot[bot] in #1619
Bump hosted-git-info from 9.0.0 to 9.0.2 by @dependabot[bot] in #1622
Bump glob and markdownlint-cli by @dependabot[bot] in #1625
update dependencies; fix vulnerabilities by @onemen in #1630
Potential fix for code scanning alert no. 13: Incomplete string escaping or encoding by @raineorshine in #1640

New Contributors

@onemen made their first contribution in #1630
@Copilot made their first contribution in #1632

Full Changelog: raineorshine/npm-check-updates@v19.6.6...v20.0.0

`v19.6.6`

Compare Source

Full Changelog: raineorshine/npm-check-updates@v19.6.5...v19.6.6

`v19.6.5`

Compare Source

What's Changed

fix(pnpm): fallback from pnpm.cmd to pnpm on Windows for non-standard installs by @terminalchai in #1606

New Contributors

@terminalchai made their first contribution in #1606

Full Changelog: raineorshine/npm-check-updates@v19.6.3...v19.6.5

`v19.6.3`

Compare Source

Full Changelog: raineorshine/npm-check-updates@v19.6.2...v19.6.3

`v19.6.2`

Compare Source

What's Changed

fix: fix overwrites pnpm-workspace.yaml and .yarnrc.yml into json by @MKruschke in #1589

Full Changelog: raineorshine/npm-check-updates@v19.6.1...v19.6.2

`v19.6.1`

Compare Source

What's Changed

Swap diff service. by @diegocr in #1603

Full Changelog: raineorshine/npm-check-updates@v19.6.0...v19.6.1

`v19.6.0`

Compare Source

What's Changed

Display link to compare the changes between package versions (--format diff) by @diegocr in #1602

New Contributors

@diegocr made their first contribution in #1602

Full Changelog: raineorshine/npm-check-updates@v19.5.0...v19.6.0

`v19.5.0`

Compare Source

What's Changed

feat(homepage): Add --format homepage option to print homepage.

e.g.

$ ncu --format homepage
...
 mocha                      ^11.7.2  →   ^11.7.5    https://mochajs.org/
 npm-registry-fetch         ^19.0.0  →   ^19.1.1
 prettier                   ^3.6.2  →    ^3.8.1     https://prettier.io
...

Full Changelog: raineorshine/npm-check-updates@v19.4.1...v19.5.0

`v19.4.1`

Compare Source

What's Changed

Fixed a small cooldown regression with number types in the ncurc

Full Changelog: raineorshine/npm-check-updates@v19.4.0...v19.4.1

`v19.4.0`

Compare Source

What's Changed

feat(cooldown): support cooldown strings like "7d", "12h", "30m" by @aversini in #1598

New Contributors

@aversini made their first contribution in #1598

Full Changelog: raineorshine/npm-check-updates@v19.3.2...v19.4.0

`v19.3.2`

Compare Source

What's Changed

docs: close code tag instead of reopening another one by @sod in #1588
fix(tests): resolve EBUSY errors on Windows by retrying directory removal by @Zamiell in #1590

New Contributors

@sod made their first contribution in #1588

Full Changelog: raineorshine/npm-check-updates@v19.3.1...v19.3.2

`v19.3.1`

Compare Source

What's Changed

fix(catalog): use the right yarn config name by @MKruschke in #1586

Full Changelog: raineorshine/npm-check-updates@v19.3.0...v19.3.1

`v19.3.0`

Compare Source

What's Changed

feat: support yarn catalogs by @MKruschke in #1582
Fixed default catalog behavior.
- See discussion here: #1582 (comment)
- If you think this is wrong, please open an issue.

Full Changelog: raineorshine/npm-check-updates@v19.2.1...v19.3.0

`v19.2.1`

Compare Source

Full Changelog: raineorshine/npm-check-updates@v19.2.0...v19.2.1

`v19.2.0`

Compare Source

What's Changed

Add --format dep
Add interactive mode keyboard controls to docs by @jsoref in #1577
Spelling by @jsoref in #1578

New Contributors

@jsoref made their first contribution in #1577

Full Changelog: raineorshine/npm-check-updates@v19.1.2...v19.2.0

`v19.1.2`

Compare Source

What's Changed

fix: support singular 'catalog' field in pnpm-workspace.yaml by @afonsojramos in #1572

New Contributors

@afonsojramos made their first contribution in #1572

Full Changelog: raineorshine/npm-check-updates@v19.1.1...v19.1.2

`v19.1.1`

Compare Source

What's Changed

fix(cooldown): handle CooldownFunction in config file by @SebastianSedzik in #1565

Full Changelog: raineorshine/npm-check-updates@v19.1.0...v19.1.1

`v19.1.0`

Compare Source

What's Changed

feat(cooldown): support for cooldown predicate function by @SebastianSedzik in #1563

Full Changelog: raineorshine/npm-check-updates@v19.0.0...v19.1.0

`v19.0.0`

Compare Source

Breaking

node >= 20 required
--workspaces (plural) short option -ws changed to -w
- Better compatibility with commander v13
- Short option should always be a single character for consistency
- Replaces the short option for --workspace (singular)
- --workspace (singular) no longer has a short option.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot requested review from erik-slovak and rostislav-simonik May 14, 2026 20:34

renovate Bot force-pushed the renovate/npm-check-updates-21.x branch from ba247fc to 000060d Compare May 16, 2026 01:15

chore(deps): update dependency npm-check-updates to v21

c4ab607

renovate Bot force-pushed the renovate/npm-check-updates-21.x branch from 000060d to c4ab607 Compare May 16, 2026 17:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency npm-check-updates to v21#1000

chore(deps): update dependency npm-check-updates to v21#1000
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/npm-check-updates-21.x

renovate Bot commented May 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented May 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

⚠️ Breaking Changes

ESM Migration & Module System

Configuration Files (.ncurc.js)

Dependency Updates (Pure ESM versions)

Tooling & Build Changes

Migration Guide

1. Environment Check

2. Update Configuration Files

3. Update Programmatic Usage

Testing

Related Issues & PRs

What's Changed

New Contributors

What's Changed

Auto Cooldown

Other changes

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

Breaking

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented May 14, 2026 •

edited

Loading

Configuration Files (`.ncurc.js`)