Skip to content

fix(deps): update minor/patch updates#6370

Merged
renovate[bot] merged 1 commit into
masterfrom
renovate/minorpatch-updates
May 8, 2026
Merged

fix(deps): update minor/patch updates#6370
renovate[bot] merged 1 commit into
masterfrom
renovate/minorpatch-updates

Conversation

@renovate

@renovate renovate Bot commented May 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@mermaid-js/mermaid-cli ^11.12.0 → ^11.14.0 age confidence devDependencies patch
@vue/language-server (source) ^3.2.7 → ^3.2.8 age confidence devDependencies patch
axios (source) ^1.15.2 → ^1.16.0 age confidence overrides minor
eslint (source) ^10.2.1 → ^10.3.0 age confidence devDependencies minor
globals ^17.5.0 → ^17.6.0 age confidence devDependencies minor
napi 3.8.5 → 3.8.6 age confidence dependencies patch
napi-derive 3.5.4 → 3.5.5 age confidence dependencies patch
rollup (source) ^4.60.2 → ^4.60.3 age confidence devDependencies patch
swc_ecma_parser 39.0.1 → 39.0.2 age confidence dependencies patch
taiki-e/install-action v2.75.23 → v2.77.0 age confidence action minor v2.77.1
typescript-eslint (source) ^8.59.1 → ^8.59.2 age confidence devDependencies patch
vue-tsc (source) ^3.2.7 → ^3.2.8 age confidence devDependencies patch

Release Notes

vuejs/language-tools (@​vue/language-server)

v3.2.8

Compare Source

language-core
  • fix: replace inline code blocks after sfc blocks processing (#​6024) - Thanks to @​KazariEX!
  • fix: support navigation for kebab-case declarations in GlobalComponents (#​6026) - Thanks to @​Gehbt!
language-service
  • feat: support TS module resolution for SCSS @import navigation (#​6033) - Thanks to @​KazariEX!
typescript-plugin
  • fix: replace language service per-method overrides with a proxy (#​6035) - Thanks to @​KazariEX!
vscode
axios/axios (axios)

v1.16.0

Compare Source

v1.16.0 — May 2, 2026

This release adds support for the QUERY HTTP method and a new ECONNREFUSED error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.

⚠️ Notable Changes

A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:

  • Fetch adapter now enforces maxBodyLength and maxContentLength. These limits were silently ignored on the fetch adapter prior to 1.16.0 — anyone relying on them as a safety net (DoS protection, accidental large uploads) had no protection. (#​10795)
  • Proxy requests now preserve user-supplied Host headers. Previously, the proxy path could overwrite a custom Host. Virtual-host-style routing through a proxy will now behave correctly. (#​10822)
  • Basic auth credentials embedded in URLs are now URL-decoded. If you have percent-encoded credentials in a URL (e.g. https://user:p%40ss@host), the decoded value is what now goes on the wire. (#​10825)
  • parseProtocol now strictly requires a colon in the protocol separator. Strings that loosely parsed as protocols before may no longer match. (#​10729)
  • Deprecated unescape() replaced with modern UTF-8 encoding. Non-ASCII URL handling is now spec-correct; consumers depending on legacy unescape() quirks may see different output bytes. (#​7378)
  • transformRequest input typing change was reverted. The typing change introduced in #​10745 was reverted in #​10810 after follow-up review — net behavior is unchanged from 1.15.2. (#​10745, #​10810)

🚀 New Features

  • QUERY HTTP Method: Added support for the QUERY HTTP method across adapters and type definitions. (#​10802)
  • ECONNREFUSED Error Constant: Exposed ECONNREFUSED as a constant on AxiosError so callers can match connection-refused failures without comparing string literals (closes #​6485). (#​10680)
  • Encode Helper Export: Exported the internal encode helper from buildURL so userland param serializers can reuse the same encoding logic that axios uses internally. (#​6897)

🐛 Bug Fixes

  • HTTP Adapter — Redirects & Headers: Cleared stale headers when a redirect targets a no-proxy host, fixed the redirect listener chain so listeners no longer stack across hops, restored the missing requestDetails argument on beforeRedirect, preserved user-supplied Host headers when forwarding through a proxy, and properly URL-decoded basic auth credentials. (#​10794, #​10800, #​6241, #​10822, #​10825)
  • HTTP Adapter — Streams & Timeouts: Preserved the partial response object on AxiosError when a stream is aborted after headers arrive, honoured the timeout option during the connect phase when redirects are disabled, and resolved an unsettled-promise hang when an aborted request was combined with compression and maxRedirects: 0. (#​10708, #​10819, #​7149)
  • Fetch Adapter: Enforced maxBodyLength / maxContentLength in the fetch adapter, set the User-Agent header to match the HTTP adapter, preserved the original abort reason instead of replacing it with a generic error, and deferred global access so importing the module no longer throws a TypeError in restricted environments. (#​10795, #​10772, #​10806, #​7260)
  • XHR Adapter: Unsubscribed the cancelToken and AbortSignal listeners on the error, timeout, and abort code paths to prevent leaked subscriptions. (#​10787)
  • Error Handling: Attached the parsed response to AxiosError when JSON.parse fails inside dispatchRequest, prevented settle from emitting undefined error codes, and tightened the parseProtocol regex to require a colon in the protocol separator. (#​10724, #​7276, #​10729)
  • Types & Exports: Aligned the CommonJS CancelToken typings with the ESM build, fixed a compiler error caused by RawAxiosHeaders, and re-exported create from the package index. (#​7414, #​6389, #​6460)
  • UTF-8 Encoding: Replaced the deprecated unescape() call with a modern UTF-8 encoding implementation. (#​7378)
  • Misc Cleanup: Resolved a batch of small inconsistencies and gadget-level issues across the codebase. (#​10833)

🔧 Maintenance & Chores

  • Refactor — ES6 Modernisation: Modernised the utils module and XHR adapter to use ES6 features, and tidied the multipart boundary error message. (#​10588, #​7419)
  • Tests: Hardened the HTTP test server lifecycle to fix flaky FormData EPIPE failures, fixed Win32 platform support for the pipe tests, and corrected an incorrect test assumption. (#​10820, #​10791, #​10796)
  • Docs: Documented paramsSerializer.encode for strict RFC 3986 query encoding, updated the parseReviver TypeScript definitions and configuration docs for ES2023, added timeout guidance to the README's first async example, and expanded notes around the recent type changes. (#​10821, #​10782, #​10759, #​10804)
  • Reverted: Reverted the transformRequest input typing change from #​10745 after follow-up review. (#​10745, #​10810)
  • Dependencies: Bumped actions/setup-node, the github-actions group, and postcss (in /docs) to their latest versions. (#​10785, #​10813, #​10814)
  • Release: Updated changelog and packages, and prepared the 1.16.0 release. (#​10790, #​10834)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

eslint/eslint (eslint)

v10.3.0

Compare Source

sindresorhus/globals (globals)

v17.6.0

Compare Source

rollup/rollup (rollup)

v4.60.3

Compare Source

2026-05-04

Bug Fixes
  • Ensure nested "exports" variables are not renamed (#​6360)
Pull Requests
taiki-e/install-action (taiki-e/install-action)

v2.77.0: 2.77.0

Compare Source

  • Support rust. (#​1779)

    This installs rust using rustup.

    If rustup is not yet installed, this action downloads rustup-init for the current platform using HTTPS with tlsv1.2+, verifies SHA256 checksum, and then installs rustup using it.

    This also supports installing additional components at the same time by +<additional> syntax:

    - uses: taiki-e/install-action@v2
  with:
    # Install rust stable with rustfmt component and wasm32-wasip1 target.
    tool: rust+rustfmt+wasm32-wasip1
    # When installing another rust version:
    # tool: rust@nightly + rustfmt + wasm32-wasip1

  • Fix issue where x86_64 binary will be installed on AArch64 Windows even when AArch64 Windows binary available.

  • Update mise@latest to 2026.5.0.

  • Diagnostic improvements.

v2.76.0: 2.76.0

Compare Source

  • Support mdbook-d2. (#​1737, thanks @​nhu)

  • Support cargo-apple-runner. (#​1731, thanks @​madsmtm)

  • Support cargo-binstall on riscv64 Linux.

  • Update cargo-deb@latest to 3.7.0.

  • Update tombi@latest to 0.10.2.

v2.75.30: 2.75.30

Compare Source

  • Support cargo-spellcheck on AArch64 Linux/Windows.

  • Update cargo-spellcheck@latest to 0.15.7.

  • Update biome@latest to 2.4.14.

v2.75.29: 2.75.29

Compare Source

  • Update syft@latest to 1.44.0.

  • Update rclone@latest to 1.74.0.

  • Update osv-scanner@latest to 2.3.6.

v2.75.28: 2.75.28

Compare Source

  • Update wasmtime@latest to 44.0.1.

  • Update typos@latest to 1.46.0.

  • Update tombi@latest to 0.10.1.

  • Update sccache@latest to 0.15.0.

  • Update mise@latest to 2026.4.28.

  • Update gungraun-runner@latest to 0.18.2.

  • Update cyclonedx@latest to 0.31.0.

v2.75.27: 2.75.27

Compare Source

  • Update cargo-udeps@latest to 0.1.61.

  • Update wasm-tools@latest to 1.248.0.

  • Update cargo-deb@latest to 3.6.4.

v2.75.26: 2.75.26

Compare Source

  • Update wasm-bindgen@latest to 0.2.120.

  • Update mise@latest to 2026.4.25.

  • Update martin@latest to 1.8.0.

  • Update vacuum@latest to 0.26.4.

v2.75.25: 2.75.25

Compare Source

  • Update uv@latest to 0.11.8.

  • Update typos@latest to 1.45.2.

  • Update tombi@latest to 0.9.25.

  • Update mise@latest to 2026.4.24.

v2.75.24: 2.75.24

Compare Source

  • Update prek@latest to 0.3.11.

  • Update mise@latest to 2026.4.23.

  • Update vacuum@latest to 0.26.3.

typescript-eslint/typescript-eslint (typescript-eslint)

v8.59.2

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 06:00 PM and 11:59 PM, only on Thursday (* 18-23 * * 4)
    • Between 12:00 AM and 05:59 AM, only on Friday (* 0-5 * * 5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot enabled auto-merge May 7, 2026 20:55
@vercel

vercel Bot commented May 7, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
rollup Ready Ready Preview, Comment May 8, 2026 5:10am

Request Review

@github-actions

github-actions Bot commented May 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Thank you for your contribution! ❤️

You can try out this pull request locally by installing Rollup via

npm install rollup/rollup#renovate/minorpatch-updates

Notice: Ensure you have installed the latest nightly Rust toolchain. If you haven't installed it yet, please see https://www.rust-lang.org/tools/install to learn how to download Rustup and install Rust.

or load it into the REPL:
https://rollup-cn944jl5r-rollup-js.vercel.app/repl/?pr=6370

@github-actions

github-actions Bot commented May 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Performance report

  • BUILD: 7216ms, 825 MB (-2%)
    • initialize: 0ms, 23.7 MB
    • generate module graph: 2592ms, 634 MB
      • generate ast: 1336ms, 624 MB
    • sort and bind modules: 462ms, 692 MB
    • mark included statements: 4121ms, 825 MB (-2%)
      • treeshaking pass 1: 2294ms, 817 MB
      • treeshaking pass 2: 505ms, 843 MB
      • treeshaking pass 3: 440ms, 823 MB (-2%)
      • treeshaking pass 4: 429ms, 851 MB (+3%)
      • treeshaking pass 5: 426ms, 825 MB (-2%)
  • GENERATE: 745ms, 925 MB
    • initialize render: 0ms, 825 MB (-2%)
    • generate chunks: 45ms, 842 MB (-3%)
      • optimize chunks: 0ms, 842 MB
    • render chunks: 687ms, 899 MB
    • transform chunks: 18ms, 925 MB
    • generate bundle: 0ms, 925 MB

@renovate renovate Bot force-pushed the renovate/minorpatch-updates branch from b1cf38e to d3fd744 Compare May 8, 2026 05:08
@codecov

codecov Bot commented May 8, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.78%. Comparing base (b47bdab) to head (d3fd744).

Additional details and impacted files 
@@           Coverage Diff           @@
##           master    #6370   +/-   ##
=======================================
  Coverage   98.78%   98.78%           
=======================================
  Files         274      274           
  Lines       10793    10793           
  Branches     2882     2882           
=======================================
  Hits        10662    10662           
  Misses         89       89           
  Partials       42       42

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate Bot added this pull request to the merge queue May 8, 2026
Merged via the queue into master with commit 642587f May 8, 2026
49 checks passed
@renovate renovate Bot deleted the renovate/minorpatch-updates branch May 8, 2026 05:49
@github-actions

github-actions Bot commented May 14, 2026

Copy link
Copy Markdown

This PR has been released as part of [email protected]. You can test it via npm install rollup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@renovate-approve renovate-approve[bot] renovate-approve[bot] approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants