Skip to content

fix(deps): update all non-major dependencies - #873

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@biomejs/biome (source) 2.5.14 → 2.6.7 age confidence devDependencies minor
@deepseek-ai/cordis (source) 4.0.2 → 4.1.0 age confidence dependencies minor
@earendil-works/chord (source) 1.5.0 → 1.5.2 age confidence dependencies patch
@earendil-works/pi-ai (source) 1.5.0 → 1.5.2 age confidence dependencies patch
@earendil-works/pi-durable (source) 1.5.0 → 1.5.2 age confidence dependencies patch
@earendil-works/pi-schema (source) 1.5.0 → 1.5.2 age confidence dependencies patch
@hypothesi/tauri-mcp-server (source) 0.13.1 → 0.13.2 age confidence devDependencies patch
@modelcontextprotocol/server (source) 2.3.1 → 2.4.0 age confidence dependencies minor
@noble/curves (source) 2.0.1 → 2.4.0 age confidence dependencies minor
@pydantic/genai-prices 0.1.13 → 0.2.3 age confidence dependencies minor
@tabler/icons (source) 3.46.0 → 3.51.0 age confidence dependencies minor 3.52.0
@tabler/icons-react (source) 3.46.0 → 3.51.0 age confidence dependencies minor 3.52.0
@types/node (source) 24.13.6 → 24.19.2 age confidence devDependencies minor
@vitejs/plugin-react (source) 6.1.1 → 6.3.0 age confidence devDependencies minor
Swatinem/rust-cache v2.9.2 → v2.9.3 age confidence action patch
actions/create-github-app-token v3.2.0 → v3.3.0 age confidence action minor
actions/download-artifact v8.0.1 → v8.0.2 age confidence action patch
actions/upload-artifact v7.0.1 → v7.0.2 age confidence action patch
arboard 3.6.1 → 3.7.0 age confidence dependencies minor
base64 0.22 → 0.23 age confidence dependencies minor
bech32 0.11 → 0.12 age confidence dependencies minor
cargo-deny 0.19.9 → 0.20.2 age confidence minor
cmake 4.3.1 → 4.5.0 age confidence minor
crc32fast 1.5.4 → 1.5.5 age confidence dev-dependencies patch
d3-scale (source) 4.0.2 → 4.0.3 age confidence dependencies patch
dockview-react (source) 8.3.1 → 8.9.0 age confidence dependencies minor
flate2 1.1.10 → 1.1.11 age confidence dev-dependencies patch
flexlayout-react 0.11.0 → 0.11.1 age confidence dependencies patch
getrandom 0.3 → 0.4 age confidence dependencies minor
highlight.js (source) 11.11.2 → 11.12.0 age confidence dependencies minor
hkdf 0.12 → 0.13 age confidence dependencies minor
hmac 0.12 → 0.13 age confidence dependencies minor
hyper (source) 1.11.1 → 1.12.0 age confidence dependencies minor
hyper-util (source) 0.1.20 → 0.1.21 age confidence dependencies patch
jsdom 30.1.0 → 30.1.3 age confidence devDependencies patch
just 1.58.0 → 1.59.0 age confidence minor
libc 0.2.189 → 0.2.191 age confidence dependencies patch
mdast-util-from-markdown 2.0.3 → 2.1.0 age confidence dependencies minor
mdast-util-gfm-strikethrough 2.0.0 → 2.0.1 age confidence dependencies patch
mdast-util-gfm-table 2.0.0 → 2.0.1 age confidence dependencies patch
mdast-util-to-markdown 2.1.2 → 2.2.3 age confidence dependencies minor
micromark-extension-gfm-table 2.1.1 → 2.1.2 age confidence dependencies patch
motion 12.40.0 → 12.43.0 age confidence dependencies minor
node 24.18.0 → 24.22.3 age confidence minor
nostr (source) =0.45.5 → =0.45.7 age confidence dependencies patch
nostr-tools 2.25.2 → 2.26.0 age confidence dependencies minor
objc2 =0.6.4 → =0.6.5 age confidence dependencies patch
pdfjs-dist (source) 6.4.299 → 6.5.438 age confidence dependencies minor
pele (source) 1.6.0 → 1.13.0 age confidence dependencies minor
pnpm 11.8.0 → 11.28.8 age confidence minor
pnpm/action-setup v4.3.0 → v4.4.0 age confidence action minor
postcss (source) 8.5.28 → 8.5.32 age confidence devDependencies patch 8.5.33
proptest (source) 1.11.0 → 1.12.0 age confidence dev-dependencies minor
prosemirror-commands 1.7.1 → 1.7.2 age confidence dependencies patch
prosemirror-history 1.5.0 → 1.5.1 age confidence dependencies patch
prosemirror-model 1.25.8 → 1.25.13 age confidence dependencies patch
prosemirror-schema-list 1.5.1 → 1.6.0 age confidence dependencies minor
prosemirror-view 1.42.3 → 1.42.9 age confidence dependencies patch
rand (source) 0.10.2 → 0.10.3 age confidence dependencies patch
react-day-picker (source) 10.0.1 → 10.0.2 age confidence dependencies patch
react-diff-view 3.3.2 → 3.3.3 age confidence dependencies patch
reqwest 0.13.4 → 0.13.5 age confidence dependencies patch
rfd 0.16 → 0.18 age confidence dependencies minor
rolldown (source) 1.2.7 → 1.3.2 age confidence devDependencies minor
rust (source, changelog) 1.98.1 → 1.100.0 age confidence toolchain minor
rust-ini =0.21.1 → =0.21.3 age confidence dependencies patch
rustls-native-certs 0.8.4 → 0.8.5 age confidence dependencies patch
rustup 1.29.2 → 1.29.3 age confidence patch
secp256k1 0.31 → 0.33 age confidence dev-dependencies minor
secp256k1 0.31 → 0.33 age confidence dependencies minor
secp256k1 0.30 → 0.33 age confidence dependencies minor
serde_json 1.0.151 → 1.0.154 age confidence dependencies patch
serde_json 1.0.151 → 1.0.154 age confidence build-dependencies patch
tauri-plugin-deep-link 2.6.2 → 2.6.3 age confidence dependencies patch
tauri-plugin-dialog 2.8.3 → 2.8.4 age confidence dependencies patch
tauri-plugin-opener 2.7.2 → 2.7.3 age confidence dependencies patch
tauri-plugin-single-instance 2.5.4 → 2.5.5 age confidence dependencies patch
thiserror 2.0.20 → 2.0.21 age confidence dependencies patch
tokio (source) 1.53.3 → 1.54.1 age confidence dev-dependencies minor
tokio (source) 1.53.3 → 1.54.1 age confidence dependencies minor
tokio-rustls 0.26.5 → 0.26.6 age confidence dev-dependencies patch
tokio-tungstenite 0.29 → 0.30 age confidence dependencies minor
tokio-util (source) 0.7.19 → 0.7.20 age confidence dependencies patch
undici (source) 7.29.1 → 7.30.2 age confidence devDependencies minor
uuid 1.26.0 → 1.29.2 age confidence dependencies minor
vite (source) 8.3.0 → 8.3.8 age confidence devDependencies patch
webpki-roots 1.0.10 → 1.0.12 age confidence dependencies patch
windows-core =0.62.2 → =0.100.0 age confidence dependencies minor
wry =0.57.0 → =0.57.2 age confidence dependencies patch
ws 8.18.3 → 8.23.0 age confidence devDependencies minor
zeroize 1.9.0 → 1.9.1 age confidence dependencies patch

Release Notes

biomejs/biome (@​biomejs/biome)

v2.6.7

Compare Source

Patch Changes
  • #​12906 b3375d2 Thanks @​dyc3! - Added the nursery rule noAsyncPromiseFinally, which reports async functions passed to a promise's .finally() method. If such a function fails, its error replaces the original result or error of the promise.

    promise.finally(async () => {
        await cleanup();
    });
  • #​12894 e24da6f Thanks @​dyc3! - Added the nursery rule noDuplicateTypeConstituents, which reports types listed more than once in a union or intersection type, and undefined in the type of an optional parameter.

    type T = string | number | string;
    function f(a?: string | undefined) {}
  • #​12899 6c15027 Thanks @​dyc3! - Added the nursery rule noExcessiveSelectorComplexity, which limits how many IDs, type selectors, attribute selectors, pseudo-classes, universal selectors, compound selectors, and combinators a CSS selector can contain. It can also disallow chosen combinators, pseudo-classes, pseudo-elements, attributes, and attribute operators. The rule does nothing until an option is set.

    For example, with "maxIds": 1, the following selector is reported:

    #main #sidebar {}
  • #​12897 0b8f429 Thanks @​dyc3! - Added the new nursery rule noInvalidFetchOptions, which reports a body in the options of fetch() and new Request() when the method is GET or HEAD. These calls throw a TypeError at runtime. When no method is given, the request uses GET.

    await fetch("/", { method: "GET", body: "foo=bar" });
  • #​12926 9b6b9f4 Thanks @​dyc3! - Added the nursery rule noNewArray, which reports new Array() calls with a single argument. Such a call creates an empty array of the given length when the argument is a number, and an array that holds the argument otherwise.

    const array = new Array(length);
  • #​12895 739440f Thanks @​dyc3! - Added the new nursery rule noRedundantTypeConstituents, which reports members of union and intersection types that have no effect, such as a literal type next to its primitive type, or never in a union.

    type Status = "active" | string;
  • #​12810 71ab61b Thanks @​dyc3! - Added the nursery rule noSvelteAsyncStore, which disallows passing async functions to the writable(), readable(), and derived() stores from svelte/store.

    import { writable } from "svelte/store";
    const user = writable(null, async (set) => {
        set(await fetchUser());
    });
  • #​12917 37d9f41 Thanks @​dyc3! - Added the new nursery rule noUnresolvedDefaultImport, which reports default imports from modules that have no default export. The rule is part of the project domain.

    // foo.js only contains `export function foo() {}`
    import foo from "./foo.js";
  • #​12892 f16842e Thanks @​dyc3! - Added the nursery rule noUselessFallbackInSpread, which reports empty object fallbacks when spreading a value into an object. Spreading null, undefined, or another falsy value into an object adds no properties, so the fallback has no effect.

    const object = { ...(options || {}) };
  • #​12785 c198be2 Thanks @​dyc3! - Added the new nursery rule noUselessParameterPropertyAssignment, which reports constructor assignments such as this.name = name when name is a parameter property. TypeScript already sets the property to the parameter's value, so the assignment does nothing.

    class User {
      constructor(public name: string) {
        this.name = name;
      }
    }
  • #​12900 a4d1b0f Thanks @​dyc3! - Added the nursery rule noUselessSpread, which reports spread syntax that has no effect. For example, [first, ...[second]] can be written as [first, second], and new Set([...items]) can be written as new Set(items).

  • #​12902 d7d755b Thanks @​dyc3! - Added the nursery rule noVueExposeAfterAwait, which reports expose() and defineExpose() calls that come after an await in a Vue component's setup code. These calls run too late, so a parent component might not receive the exposed properties.

    <script setup>
    await fetchUser();
    defineExpose({ reload });
    </script>
  • #​12596 d33e56e Thanks @​dyc3! - Added the nursery rule useAtomicUpdates, which reports assignments in async functions and generators that can be based on an outdated value because the function paused at an await or yield after reading it.

    let total = 0;
    async function addToTotal(getAmount) {
        total += await getAmount(); // reported
    }
  • #​12901 48e3572 Thanks @​dyc3! - Added the new nursery rule useConsistentBooleanName. It requires variables, parameters, and functions that hold or return a boolean to start with a prefix such as is or has, and reports names with those prefixes that don't hold or return a boolean.

    const completed = progress === 100;
    const hasName = "Sindre";
  • #​12905 5b00387 Thanks @​dyc3! - Added the nursery rule useConsistentFontWeightNotation, which enforces writing font weights either as numbers or as the keywords normal and bold where possible. It checks the font-weight and font properties, and its safe fix converts between normal/bold and 400/700.

    a { font-weight: bold; }
  • #​12922 8d33c85 Thanks @​dyc3! - Added the nursery rule useConsistentTupleLabels, which reports tuple type elements without a label when other elements of the same tuple have one.

    type Point = [x: number, number];
  • #​12925 7252cbd Thanks @​dyc3! - Added the new nursery rule useGlobalRegexInMatchAll, which reports calls to matchAll() with a regular expression that doesn't have the g flag. These calls throw a TypeError at runtime.

    text.matchAll(/pattern/);
  • #​12891 e781bc3 Thanks @​dyc3! - Added the nursery rule useGlobalRegexInReplaceAll, which reports regular expressions without the g flag passed to replaceAll(). These calls throw a TypeError instead of replacing text.

    withSpaces.replaceAll(/\s+/, ",");
  • #​12896 a968e1a Thanks @​dyc3! - Added the new nursery rule useValidCharacterComparison, which reports comparisons between a single character and a string that has more than one character. Such comparisons are always false, or always true with !== and !=.

    text.charAt(0) === "ab";
  • #​13085 7a795d0 Thanks @​ematipico! - Fixed withastro/compiler-rs#221 so Astro template expressions containing comment-only JSX expression children, such as <span>{<!-- x -->}</span>, parse without diagnostics.

  • #​12621 79ce388 Thanks @​latin-1! - Fixed #​12413 and #​12414: useSortedProperties now sorts consecutive groups of properties independently, preserving the positions of nested rules, at-rules, and SCSS variable declarations.

  • #​13065 bd9faae Thanks @​ematipico! - Fixed #​5848: running useSortedKeys or useSortedSelectionSet as an editor source action no longer corrupts nested objects or selection sets.

  • #​13056 98f4d53 Thanks @​ematipico! - Fixed #​10607: noUndeclaredDependencies no longer reports imports resolved through TypeScript's compilerOptions.paths mappings.

  • #​13033 7638393 Thanks @​GBra-4-669! - Fixed #​12980: the CSS parser no longer panics on a composes declaration whose value contains a non-identifier token, such as composes: 1px;. It reports a diagnostic instead.

  • #​12917 37d9f41 Thanks @​dyc3! - Fixed noUnresolvedImports: it now reports default imports from modules that only forward exports with export * from "...". export * never re-exports a default export, so import foo from "./barrel.js" fails when ./barrel.js contains only export * from "./foo.js".

  • #​12596 d33e56e Thanks @​dyc3! - Fixed noUnreachableSuper ignoring the default values of constructor parameters. Using this in a default value is now reported, because it runs before super(), and calling super() in a default value is now recognized.

    c

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner October 12, 2026 01:00
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 28 times, most recently from 8263abd to d0b8a73 Compare October 13, 2026 00:49
@renovate renovate Bot changed the title fix(deps): update all non-major dependencies Update all non-major dependencies Oct 13, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 9921d05 to d9b2aaf Compare October 13, 2026 17:25
@renovate renovate Bot changed the title Update all non-major dependencies fix(deps): update all non-major dependencies Oct 13, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 20 times, most recently from 15357d5 to 7fa0baa Compare October 13, 2026 20:56
@renovate

renovate Bot commented Nov 2, 2026 •

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: from: cargo-deny-0.19.9 cmake-4.3.1 just-1.58.0 node-24.18.0 pnpm-11.8.0 rustup-1.29.2, to: cargo-deny-0.20.2 cmake-4.5.0 just-1.59.0 node-24.22.3 pnpm-11.28.8 rustup-1.29.3
Bootstrapping /home/ubuntu/.cache/hermit/pkg/hermit@stable/hermit from https://github.com/cashapp/hermit/releases/download/stable
Creating /home/ubuntu/.cache/hermit/pkg/hermit@stable
Downloading https://github.com/cashapp/hermit/releases/download/stable/hermit-linux-amd64.gz to /home/ubuntu/.cache/hermit/pkg/hermit@stable/hermit
Hermit installed as /home/ubuntu/.cache/hermit/pkg/hermit@stable/hermit
Hermit is installed as /home/ubuntu/bin/hermit

See https://cashapp.github.io/hermit/usage/get-started/ for more information.

fatal:hermit: node-24.22.3: env:///bin/packages/node.hcl: no version node-24.22.3 found in versions (node-24.18.0) or channels (node@24, [email protected], node@latest), try "hermit update": unknown package

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants