Permalink
Comparing changes
Choose two branches to see what’s changed or to start a new pull request.
If you need to, you can also or
learn more about diff comparisons.
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
Learn more about diff comparisons here.
...
- 10 commits
- 7 files changed
- 3 contributors
Commits on Apr 4, 2025
-
chore(deps): update dependency vite to v6.2.5 [security] (#378)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`6.2.4` -> `6.2.5`](https://renovatebot.com/diffs/npm/vite/6.2.4/6.2.5) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2025-31486](https://redirect.github.com/vitejs/vite/security/advisories/GHSA-xcj6-pq6g-qj4x) ### Summary The contents of arbitrary files can be returned to the browser. ### Impact Only apps explicitly exposing the Vite dev server to the network (using --host or [server.host config option](https://vitejs.dev/config/server-options.html#server-host)) are affected.. ### Details #### `.svg` Requests ending with `.svg` are loaded at this line. https://github.com/vitejs/vite/blob/037f801075ec35bb6e52145d659f71a23813c48f/packages/vite/src/node/plugins/asset.ts#L285-L290 By adding `?.svg` with `?.wasm?init` or with `sec-fetch-dest: script` header, the restriction was able to bypass. This bypass is only possible if the file is smaller than [`build.assetsInlineLimit`](https://vite.dev/config/build-options.html#build-assetsinlinelimit) (default: 4kB) and when using Vite 6.0+. #### relative paths The check was applied before the id normalization. This allowed requests to bypass with relative paths (e.g. `../../`). ### PoC ```bash npm create vite@latest cd vite-project/ npm install npm run dev ``` send request to read `etc/passwd` ```bash curl 'http://127.0.0.1:5173/etc/passwd?.svg?.wasm?init' ``` ```bash curl 'http://127.0.0.1:5173/@​fs/x/x/x/vite-project/?/../../../../../etc/passwd?import&?raw' ``` --- ### Release Notes <details> <summary>vitejs/vite (vite)</summary> ### [`v6.2.5`](https://redirect.github.com/vitejs/vite/releases/tag/v6.2.5) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v6.2.4...v6.2.5) Please refer to [CHANGELOG.md](https://redirect.github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md) for details. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/eslint-plugin-oxlint). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjcuMyIsInVwZGF0ZWRJblZlciI6IjM5LjIyNy4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Commits on Apr 6, 2025
-
chore(deps): update dependency pnpm to v10.7.1 (#379)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pnpm](https://pnpm.io) ([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm)) | `10.7.0` -> `10.7.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>pnpm/pnpm (pnpm)</summary> ### [`v10.7.1`](https://redirect.github.com/pnpm/pnpm/releases/tag/v10.7.1): pnpm 10.7.1 [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.7.0...v10.7.1) #### Patch Changes - `pnpm config set` should convert the settings to their correct type before adding them to `pnpm-workspace.yaml` [#​9355](https://redirect.github.com/pnpm/pnpm/issues/9355). - `pnpm config get` should read auth related settings via npm CLI [#​9345](https://redirect.github.com/pnpm/pnpm/issues/9345). - Replace leading `~/` in a path in `.npmrc` with the home directory [#​9217](https://redirect.github.com/pnpm/pnpm/issues/9217). #### Platinum Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://bit.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a> </td> <td align="center" valign="middle"> <a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/sanity.svg" width="180" alt="Bit"></a> </td> <td align="center" valign="middle"> <a href="https://syntax.fm/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/syntaxfm.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/syntaxfm_light.svg" /> <img src="https://pnpm.io/img/users/syntaxfm.svg" width="90" alt="Syntax" /> </picture> </a> </td> </tr> </tbody> </table> #### Gold Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" /> <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://uscreen.de/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/uscreen.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/uscreen_light.svg" /> <img src="https://pnpm.io/img/users/uscreen.svg" width="180" alt="u|screen" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://www.jetbrains.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/jetbrains.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/jetbrains.svg" /> <img src="https://pnpm.io/img/users/jetbrains.svg" width="180" alt="JetBrains" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/nx.svg?0" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/nx_light.svg?0" /> <img src="https://pnpm.io/img/users/nx.svg" width="70" alt="Nx" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" /> <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://route4me.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <img src="https://pnpm.io/img/users/route4me.svg" width="220" alt="Route4Me" /> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" /> <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" /> <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" /> </picture> </a> </td> </tr> </tbody> </table> </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 8am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/eslint-plugin-oxlint). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjcuMyIsInVwZGF0ZWRJblZlciI6IjM5LjIyNy4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
-
chore(deps): update taiki-e/install-action action to v2.49.44 (#380)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | patch | `v2.49.39` -> `v2.49.44` | --- ### Release Notes <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.49.44`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.44): 2.49.44 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.43...v2.49.44) - Update `grcov@latest` to 0.8.24. - Update `osv-scanner@latest` to 2.0.1. - Update `release-plz@latest` to 0.3.130. - Update `cargo-lambda@latest` to 1.8.1. - Downgrade `cargo-spellcheck@latest` to 0.15.1. ([#​932](https://redirect.github.com/taiki-e/install-action/pull/932)) ### [`v2.49.43`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.43): 2.49.43 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.42...v2.49.43) - Update `syft@latest` to 1.22.0. ### [`v2.49.42`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.42): 2.49.42 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.41...v2.49.42) - Update `grcov@latest` to 0.8.23. ### [`v2.49.41`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.41): 2.49.41 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.40...v2.49.41) - Update `mdbook@latest` to 0.4.48. ### [`v2.49.40`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.40): 2.49.40 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.39...v2.49.40) - Update `typos@latest` to 1.31.1. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 8am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/eslint-plugin-oxlint). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjcuMyIsInVwZGF0ZWRJblZlciI6IjM5LjIyNy4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
-
chore(deps): lock file maintenance npm packages (#381)
This PR contains the following updates: | Package | Type | Update | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---|---|---| | | | lockFileMaintenance | All locks refreshed | | | | | | [@eslint/js](https://eslint.org) ([source](https://redirect.github.com/eslint/eslint/tree/HEAD/packages/js)) | devDependencies | minor | [`9.23.0` -> `9.24.0`](https://renovatebot.com/diffs/npm/@eslint%2fjs/9.23.0/9.24.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@oxc-node/core](https://redirect.github.com/oxc-project/oxc-node) | devDependencies | patch | [`^0.0.21` -> `^0.0.22`](https://renovatebot.com/diffs/npm/@oxc-node%2fcore/0.0.21/0.0.22) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)) | devDependencies | minor | [`22.13.14` -> `22.14.0`](https://renovatebot.com/diffs/npm/@types%2fnode/22.13.14/22.14.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@vitest/coverage-v8](https://redirect.github.com/vitest-dev/vitest/tree/main/packages/coverage-v8#readme) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8)) | devDependencies | minor | [`3.0.9` -> `3.1.1`](https://renovatebot.com/diffs/npm/@vitest%2fcoverage-v8/3.0.9/3.1.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [eslint](https://eslint.org) ([source](https://redirect.github.com/eslint/eslint)) | devDependencies | minor | [`9.23.0` -> `9.24.0`](https://renovatebot.com/diffs/npm/eslint/9.23.0/9.24.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [pnpm](https://pnpm.io) ([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm)) | packageManager | patch | [`10.7.0` -> `10.7.1`](https://renovatebot.com/diffs/npm/pnpm/10.7.0/10.7.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [typescript](https://www.typescriptlang.org/) ([source](https://redirect.github.com/microsoft/TypeScript)) | devDependencies | patch | [`5.8.2` -> `5.8.3`](https://renovatebot.com/diffs/npm/typescript/5.8.2/5.8.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint) ([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)) | devDependencies | minor | [`8.28.0` -> `8.29.0`](https://renovatebot.com/diffs/npm/typescript-eslint/8.28.0/8.29.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [vitest](https://redirect.github.com/vitest-dev/vitest) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/vitest)) | devDependencies | minor | [`3.0.9` -> `3.1.1`](https://renovatebot.com/diffs/npm/vitest/3.0.9/3.1.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | 🔧 This Pull Request updates lock files to use the latest dependency versions. --- ### Release Notes <details> <summary>eslint/eslint (@​eslint/js)</summary> ### [`v9.24.0`](https://redirect.github.com/eslint/eslint/compare/v9.23.0...4946847bb675ee26c3a52bfe3bca63a0dc5e5c61) [Compare Source](https://redirect.github.com/eslint/eslint/compare/v9.23.0...v9.24.0) </details> <details> <summary>oxc-project/oxc-node (@​oxc-node/core)</summary> ### [`v0.0.22`](https://redirect.github.com/oxc-project/oxc-node/blob/HEAD/CHANGELOG.md#0022-2025-04-02) [Compare Source](https://redirect.github.com/oxc-project/oxc-node/compare/v0.0.21...v0.0.22) ##### Bug Fixes - **core:** pass tsconfig: None to Resolver if tsconfig not exists ([#​84](https://redirect.github.com/oxc-project/oxc-node/issues/84)) ([9b46f48](https://redirect.github.com/oxc-project/oxc-node/commit/9b46f487e2d5775cb7b124ca1308733f720536f3)) ##### Features - **core:** pass tsconfig options to oxc ([#​92](https://redirect.github.com/oxc-project/oxc-node/issues/92)) ([2771453](https://redirect.github.com/oxc-project/oxc-node/commit/2771453654414ad1960f28ab89b5a90cbaf6b988)) - resolve cjs files ([#​93](https://redirect.github.com/oxc-project/oxc-node/issues/93)) ([9ef439e](https://redirect.github.com/oxc-project/oxc-node/commit/9ef439e78ed11069f93629d756316ae377618e20)) </details> <details> <summary>vitest-dev/vitest (@​vitest/coverage-v8)</summary> ### [`v3.1.1`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.1.1) [Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.1.0...v3.1.1) ##### 🐞 Bug Fixes - **reporter**: - Report tests in correct order - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7752](https://redirect.github.com/vitest-dev/vitest/issues/7752) [<samp>(b166e)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/b166efa2) - Print test only once in the verbose mode - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7738](https://redirect.github.com/vitest-dev/vitest/issues/7738) [<samp>(69ca4)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/69ca425c) ##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.1.0...v3.1.1) ### [`v3.1.0`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.1.0) [Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.9...v3.1.0) ##### 🚀 Features - Introduce `%$` option to add number of the test to its title - by [@​kemuridama](https://redirect.github.com/kemuridama) in [https://github.com/vitest-dev/vitest/issues/7412](https://redirect.github.com/vitest-dev/vitest/issues/7412) [<samp>(df347)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/df3477076) - Add `diff.maxDepth` option and set non-`Infinity` value as a default to reduce crash - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7481](https://redirect.github.com/vitest-dev/vitest/issues/7481) [<samp>(eacab)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/eacab25e7) - Allow array element for `test.each/for` title formatting - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7522](https://redirect.github.com/vitest-dev/vitest/issues/7522) [<samp>(ea3d6)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ea3d67b03) - Add "configureVitest" plugin hook - by [@​sheremet-va](https://redirect.github.com/sheremet-va) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7349](https://redirect.github.com/vitest-dev/vitest/issues/7349) [<samp>(20a5d)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/20a5d4bfc) - Support `--configLoader` CLI option - by [@​Carnageous](https://redirect.github.com/Carnageous) and [@​hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7574](https://redirect.github.com/vitest-dev/vitest/issues/7574) [<samp>(2a852)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/2a8520a83) - Added `vitest-browser-lit` to `vitest init browser` and docs - by [@​EskiMojo14](https://redirect.github.com/EskiMojo14) and [@​hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7705](https://redirect.github.com/vitest-dev/vitest/issues/7705) [<samp>(5659a)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/5659a0e0c) - Use providers request interception for module mocking - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7576](https://redirect.github.com/vitest-dev/vitest/issues/7576) [<samp>(7883a)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/7883acd63) - **browser**: - Introduce `and`, `or` and `filter` locators - by [@​sheremet-va](https://redirect.github.com/sheremet-va) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7463](https://redirect.github.com/vitest-dev/vitest/issues/7463) [<samp>(63949)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/63949b1d7) - **reporter**: - Always render test time - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio) and [@​spamshaker](https://redirect.github.com/spamshaker) in [https://github.com/vitest-dev/vitest/issues/7529](https://redirect.github.com/vitest-dev/vitest/issues/7529) [<samp>(5eba6)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/5eba60ae1) - `--silent=passed-only` to log failed tasks only - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7530](https://redirect.github.com/vitest-dev/vitest/issues/7530) [<samp>(f9e1c)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/f9e1cb494) - **runner**: - Add `test.scoped` to override `test.extend` fixtures per-suite - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7233](https://redirect.github.com/vitest-dev/vitest/issues/7233) [<samp>(e5851)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/e5851e4b8) - **vitest**: - Allow conditional `context.skip(boolean)` - by [@​sheremet-va](https://redirect.github.com/sheremet-va) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7659](https://redirect.github.com/vitest-dev/vitest/issues/7659) [<samp>(6adec)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/6adecb903) - Support rolldown-vite in NormalizeUrlPlugin - by [@​sapphi-red](https://redirect.github.com/sapphi-red) and [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7739](https://redirect.github.com/vitest-dev/vitest/issues/7739) [<samp>(1ef31)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/1ef31a7bb) ##### 🐞 Bug Fixes - Update test stats regularly - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7700](https://redirect.github.com/vitest-dev/vitest/issues/7700) [<samp>(b7953)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/b7953487b) - Fix vm tests flakiness - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7741](https://redirect.github.com/vitest-dev/vitest/issues/7741) [<samp>(2702c)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/2702cf424) - Set `diff.expand: false` as default - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7697](https://redirect.github.com/vitest-dev/vitest/issues/7697) [<samp>(f3420)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/f34206536) - **browser**: - Correctly calculate timeout in hooks when actions are performed - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7747](https://redirect.github.com/vitest-dev/vitest/issues/7747) [<samp>(a5505)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/a55055180) - **deps**: - Update all non-major dependencies - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7600](https://redirect.github.com/vitest-dev/vitest/issues/7600) [<samp>(7fc5a)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/7fc5a2908) - **reporter**: - `--hideSkippedTests` should hide suites too - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7695](https://redirect.github.com/vitest-dev/vitest/issues/7695) [<samp>(ba9b5)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ba9b51ccc) - Report tests in correct order - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7752](https://redirect.github.com/vitest-dev/vitest/issues/7752) [<samp>(b166e)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/b166efa28) - Print test only once in the verbose mode - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7738](https://redirect.github.com/vitest-dev/vitest/issues/7738) [<samp>(69ca4)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/69ca425c6) - **snapshot**: - Fix indent normalization - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7400](https://redirect.github.com/vitest-dev/vitest/issues/7400) [<samp>(82997)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/8299709d2) - This change can cause small amount of very old snapshots to be updated, but there will be no functional change to how they work. ##### 🏎 Performance - **browser**: Fork jest-dom instead of bundling it - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7605](https://redirect.github.com/vitest-dev/vitest/issues/7605) [<samp>(12762)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/12762ea6c) ##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.9...v3.1.1) </details> <details> <summary>eslint/eslint (eslint)</summary> ### [`v9.24.0`](https://redirect.github.com/eslint/eslint/compare/v9.23.0...d49f5b7333e9a46aabdb0cff267a1d36cdbde598) [Compare Source](https://redirect.github.com/eslint/eslint/compare/v9.23.0...v9.24.0) </details> <details> <summary>pnpm/pnpm (pnpm)</summary> ### [`v10.7.1`](https://redirect.github.com/pnpm/pnpm/releases/tag/v10.7.1): pnpm 10.7.1 [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.7.0...v10.7.1) #### Patch Changes - `pnpm config set` should convert the settings to their correct type before adding them to `pnpm-workspace.yaml` [#​9355](https://redirect.github.com/pnpm/pnpm/issues/9355). - `pnpm config get` should read auth related settings via npm CLI [#​9345](https://redirect.github.com/pnpm/pnpm/issues/9345). - Replace leading `~/` in a path in `.npmrc` with the home directory [#​9217](https://redirect.github.com/pnpm/pnpm/issues/9217). #### Platinum Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://bit.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a> </td> <td align="center" valign="middle"> <a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/sanity.svg" width="180" alt="Bit"></a> </td> <td align="center" valign="middle"> <a href="https://syntax.fm/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/syntaxfm.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/syntaxfm_light.svg" /> <img src="https://pnpm.io/img/users/syntaxfm.svg" width="90" alt="Syntax" /> </picture> </a> </td> </tr> </tbody> </table> #### Gold Sponsors <table> <tbody> <tr> <td align="center" valign="middle"> <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" /> <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://uscreen.de/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/uscreen.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/uscreen_light.svg" /> <img src="https://pnpm.io/img/users/uscreen.svg" width="180" alt="u|screen" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://www.jetbrains.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/jetbrains.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/jetbrains.svg" /> <img src="https://pnpm.io/img/users/jetbrains.svg" width="180" alt="JetBrains" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/nx.svg?0" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/nx_light.svg?0" /> <img src="https://pnpm.io/img/users/nx.svg" width="70" alt="Nx" /> </picture> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" /> <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://route4me.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <img src="https://pnpm.io/img/users/route4me.svg" width="220" alt="Route4Me" /> </a> </td> </tr> <tr> <td align="center" valign="middle"> <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" /> <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" /> </picture> </a> </td> <td align="center" valign="middle"> <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank"> <picture> <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" /> <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" /> <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" /> </picture> </a> </td> </tr> </tbody> </table> </details> <details> <summary>microsoft/TypeScript (typescript)</summary> ### [`v5.8.3`](https://redirect.github.com/microsoft/TypeScript/compare/v5.8.2...68cead182cc24afdc3f1ce7c8ff5853aba14b65a) [Compare Source](https://redirect.github.com/microsoft/TypeScript/compare/v5.8.2...68cead182cc24afdc3f1ce7c8ff5853aba14b65a) </details> <details> <summary>typescript-eslint/typescript-eslint (typescript-eslint)</summary> ### [`v8.29.0`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8290-2025-03-31) [Compare Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.28.0...v8.29.0) This was a version bump only for typescript-eslint to align it with other projects, there were no code changes. You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 8am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/eslint-plugin-oxlint). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjcuMyIsInVwZGF0ZWRJblZlciI6IjM5LjIyNy4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Commits on Apr 7, 2025
-
Automated changes by [create-pull-request](https://github.com/peter-evans/create-pull-request) GitHub action Co-authored-by: Boshen <[email protected]>
-
chore(deps): lock file maintenance (#383)
This PR contains the following updates: | Update | Change | |---|---| | lockFileMaintenance | All locks refreshed | 🔧 This Pull Request updates lock files to use the latest dependency versions. --- ### Configuration 📅 **Schedule**: Branch creation - "before 3am on tuesday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/eslint-plugin-oxlint). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjcuMyIsInVwZGF0ZWRJblZlciI6IjM5LjIyNy4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Commits on Apr 11, 2025
-
chore(deps): update dependency vite to v6.2.6 [security] (#384)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`6.2.5` -> `6.2.6`](https://renovatebot.com/diffs/npm/vite/6.2.5/6.2.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2025-32395](https://redirect.github.com/vitejs/vite/security/advisories/GHSA-356w-63v5-8wf4) ### Summary The contents of arbitrary files can be returned to the browser if the dev server is running on Node or Bun. ### Impact Only apps with the following conditions are affected. - explicitly exposing the Vite dev server to the network (using --host or [server.host config option](https://vitejs.dev/config/server-options.html#server-host)) - running the Vite dev server on runtimes that are not Deno (e.g. Node, Bun) ### Details [HTTP 1.1 spec (RFC 9112) does not allow `#` in `request-target`](https://datatracker.ietf.org/doc/html/rfc9112#section-3.2). Although an attacker can send such a request. For those requests with an invalid `request-line` (it includes `request-target`), the spec [recommends to reject them with 400 or 301](https://datatracker.ietf.org/doc/html/rfc9112#section-3.2-4). The same can be said for HTTP 2 ([ref1](https://datatracker.ietf.org/doc/html/rfc9113#section-8.3.1-2.4.1), [ref2](https://datatracker.ietf.org/doc/html/rfc9113#section-8.3.1-3), [ref3](https://datatracker.ietf.org/doc/html/rfc9113#section-8.1.1-3)). On Node and Bun, those requests are not rejected internally and is passed to the user land. For those requests, the value of [`http.IncomingMessage.url`](https://nodejs.org/docs/latest-v22.x/api/http.html#messageurl) contains `#`. Vite assumed `req.url` won't contain `#` when checking `server.fs.deny`, allowing those kinds of requests to bypass the check. On Deno, those requests are not rejected internally and is passed to the user land as well. But for those requests, the value of `http.IncomingMessage.url` did not contain `#`. ### PoC ``` npm create vite@latest cd vite-project/ npm install npm run dev ``` send request to read `/etc/passwd` ``` curl --request-target /@​fs/Users/doggy/Desktop/vite-project/#/../../../../../etc/passwd http://127.0.0.1:5173 ``` --- ### Release Notes <details> <summary>vitejs/vite (vite)</summary> ### [`v6.2.6`](https://redirect.github.com/vitejs/vite/releases/tag/v6.2.6) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v6.2.5...v6.2.6) Please refer to [CHANGELOG.md](https://redirect.github.com/vitejs/vite/blob/v6.2.6/packages/vite/CHANGELOG.md) for details. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/eslint-plugin-oxlint). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMzguMCIsInVwZGF0ZWRJblZlciI6IjM5LjIzOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Commits on Apr 13, 2025
-
chore(deps): update dependency pnpm to v10.8.0 (#388)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pnpm](https://pnpm.io) ([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm)) | `10.7.1` -> `10.8.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>pnpm/pnpm (pnpm)</summary> ### [`v10.8.0`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#1080) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.7.1...v10.8.0) ##### Minor Changes - **Experimental.** A new hook is supported for updating configuration settings. The hook can be provided via `.pnpmfile.cjs`. For example: ```js module.exports = { hooks: { updateConfig: (config) => ({ ...config, nodeLinker: "hoisted", }), }, }; ``` - Now you can use the `pnpm add` command with the `--config` flag to install new configurational dependencies [#​9377](https://redirect.github.com/pnpm/pnpm/pull/9377). ##### Patch Changes - Do not hang indefinitely, when there is a glob that starts with `!/` in `pnpm-workspace.yaml`. This fixes a regression introduced by [#​9169](https://redirect.github.com/pnpm/pnpm/pull/9169). - `pnpm audit --fix` should update the overrides in `pnpm-workspace.yaml`. - `pnpm link` should update overrides in `pnpm-workspace.yaml`, not in `package.json` [#​9365](https://redirect.github.com/pnpm/pnpm/pull/9365). </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 8am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/eslint-plugin-oxlint). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMzguMCIsInVwZGF0ZWRJblZlciI6IjM5LjIzOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
-
chore(deps): update github-actions (#387)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v3.28.13` -> `v3.28.15` | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | patch | `v2.49.44` -> `v2.49.49` | --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v3.28.15`](https://redirect.github.com/github/codeql-action/releases/tag/v3.28.15) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.28.14...v3.28.15) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.28.15 - 07 Apr 2025 - Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. [#​2842](https://redirect.github.com/github/codeql-action/pull/2842) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.28.15/CHANGELOG.md) for more information. ### [`v3.28.14`](https://redirect.github.com/github/codeql-action/releases/tag/v3.28.14) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.28.13...v3.28.14) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.28.14 - 07 Apr 2025 - Update default CodeQL bundle version to 2.21.0. [#​2838](https://redirect.github.com/github/codeql-action/pull/2838) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.28.14/CHANGELOG.md) for more information. </details> <details> <summary>taiki-e/install-action (taiki-e/install-action)</summary> ### [`v2.49.49`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.49): 2.49.49 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.48...v2.49.49) - Update `release-plz@latest` to 0.3.132. ### [`v2.49.48`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.48): 2.49.48 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.47...v2.49.48) - Update `release-plz@latest` to 0.3.131. - Update `cargo-nextest@latest` to 0.9.94. - Update `cargo-lambda@latest` to 1.8.3. ### [`v2.49.47`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.47): 2.49.47 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.46...v2.49.47) - Update `grcov@latest` to 0.9.0. ### [`v2.49.46`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.46): 2.49.46 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.45...v2.49.46) - Update `espup@latest` to 0.15.0. - Update `trunk@latest` to 0.21.13. ### [`v2.49.45`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.49.45): 2.49.45 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.49.44...v2.49.45) - Update `knope@latest` to 0.19.2. - Update `cargo-binstall@latest` to 1.12.3. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 8am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/eslint-plugin-oxlint). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMzguMCIsInVwZGF0ZWRJblZlciI6IjM5LjIzOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Commits on Apr 14, 2025
Loading
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v0.16.4...v0.16.6