fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/parser (source)	^7.26.5 -> ^7.26.7
@babel/types (source)	^7.26.5 -> ^7.26.7
@iconify-json/carbon	^1.2.5 -> ^1.2.6
@sxzz/prettier-config	^2.0.2 -> ^2.1.1
@types/node (source)	^22.10.5 -> ^22.13.0
@types/react (source)	^19.0.6 -> ^19.0.8
@unocss/reset (source)	^65.4.0 -> ^65.4.3
@vue-macros/reactivity-transform (source)	^1.1.4 -> ^1.1.6
@vueuse/core (source)	^12.4.0 -> ^12.5.0
bumpp	^9.10.0 -> ^9.11.1
eslint (source)	^9.18.0 -> ^9.19.0
pnpm (source)	10.0.0 -> 10.2.0
tsup (source)	^8.3.5 -> ^8.3.6
unocss (source)	^65.4.0 -> ^65.4.3
vite (source)	^6.0.7 -> ^6.0.11
vitest (source)	^2.1.8 -> ^2.1.9

---

Release Notes

babel/babel (@​babel/parser)

v7.26.7

Compare Source

v7.26.7 (2025-01-24)

Thanks @​branchseer and @​tquetano-netflix for your first PRs!

🐛 Bug Fix

• babel-helpers, babel-preset-env, babel-runtime-corejs3
  • #​17086 Make "object without properties" helpers ES6-compatible (@​tquetano-netflix)
• babel-plugin-transform-typeof-symbol
  • #​17085 fix: Correctly handle typeof in arrow functions (@​liuxingbaoyu)
• babel-parser
  • #​17079 Respect ranges option in estree method value (@​JLHwung)
• babel-core
  • #​17052 Do not try to parse .ts configs as JSON if natively supported (@​nicolo-ribaudo)
• babel-plugin-transform-typescript
  • #​17050 fix: correctly resolve references to non-constant enum members (@​branchseer)
• babel-plugin-transform-typescript, babel-traverse, babel-types
  • #​17025 fix: Remove type-only import x = y.z (@​liuxingbaoyu)

Committers: 6

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Tony Quetano (@​tquetano-netflix)
• @​branchseer
• @​liuxingbaoyu

babel/babel (@​babel/types)

v7.26.7

Compare Source

🐛 Bug Fix

• babel-helpers, babel-preset-env, babel-runtime-corejs3
  • #​17086 Make "object without properties" helpers ES6-compatible (@​tquetano-netflix)
• babel-plugin-transform-typeof-symbol
  • #​17085 fix: Correctly handle typeof in arrow functions (@​liuxingbaoyu)
• babel-parser
  • #​17079 Respect ranges option in estree method value (@​JLHwung)
• babel-core
  • #​17052 Do not try to parse .ts configs as JSON if natively supported (@​nicolo-ribaudo)
• babel-plugin-transform-typescript
  • #​17050 fix: correctly resolve references to non-constant enum members (@​branchseer)
• babel-plugin-transform-typescript, babel-traverse, babel-types
  • #​17025 fix: Remove type-only import x = y.z (@​liuxingbaoyu)

sxzz/prettier-config (@​sxzz/prettier-config)

v2.1.1

Compare Source

v2.1.0

Compare Source

unocss/unocss (@​unocss/reset)

v65.4.3

Compare Source

   🐞 Bug Fixes

• Default cjs package exports  -  by @​userquin in https://github.com/unocss/unocss/issues/4401 (76fcb)

    View changes on GitHub

v65.4.2

Compare Source

No significant changes

    View changes on GitHub

vue-macros/vue-macros (@​vue-macros/reactivity-transform)

v1.1.6

Compare Source

Patch Changes

• Updated dependencies [d608125]:
  • @​vue-macros/common@​1.16.1

v1.1.5

Compare Source

Patch Changes

• Updated dependencies [3c91fd1, 6a67a64]:
  • @​vue-macros/common@​1.16.0

vueuse/vueuse (@​vueuse/core)

v12.5.0

Compare Source

   🚀 Features

• More passive event handlers  -  by @​ferferga in https://github.com/vueuse/vueuse/issues/4484 (eddbf)
• Use useEventListener where it was not being used  -  by @​ferferga in https://github.com/vueuse/vueuse/issues/4479 (c6c6e)
• useClipboard: Should fall back to legacy clipboard when read/write fails  -  by @​OrbisK in https://github.com/vueuse/vueuse/issues/4512 (01acd)
• useCountdown: New function  -  by @​rtugeek, @​huang-julien, Anthony Fu and @​antfu in https://github.com/vueuse/vueuse/issues/4125 (69ced)
• useEventListener: Make all parameters arrayable and reactive  -  by @​ferferga in https://github.com/vueuse/vueuse/issues/4486 (caf08)
• useFetch: Add parameters to the afterFetch and onFetchError  -  by @​tolking and Anthony Fu in https://github.com/vueuse/vueuse/issues/4499 (98a83)
• useFileDialog: Add initialFiles option  -  by @​EvgenyWas in https://github.com/vueuse/vueuse/issues/4509 (8a8d6)

   🐞 Bug Fixes

• debounceFilter: Invoke on maxWait with the latest invoker  -  by @​43081j and @​OrbisK in https://github.com/vueuse/vueuse/issues/4497 (48e0a)
• useMagicKeys: Fix key order issue on first use  -  by @​babu-ch in https://github.com/vueuse/vueuse/issues/4505 (b6947)
• useVirtualList: Allow readonly arrays as input  -  by @​RebeccaStevens in https://github.com/vueuse/vueuse/issues/4504 (f3cc7)

    View changes on GitHub

antfu-collective/bumpp (bumpp)

v9.11.1

Compare Source

   🚀 Features

• Cjs path  -  by @​antfu (5b238)

    View changes on GitHub

v9.11.0

Compare Source

   🚀 Features

• Inferring the semver version according to Conventional Commit  -  by @​northword in https://github.com/antfu-collective/bumpp/issues/71 (7d044)

    View changes on GitHub

v9.10.2

Compare Source

   🐞 Bug Fixes

• Version update issue  -  by @​Blithe-Chiang and jiangzs in https://github.com/antfu-collective/bumpp/issues/70 (8f082)

    View changes on GitHub

v9.10.1

Compare Source

   🚀 Features

• More colors for semantic commit tags  -  by @​antfu (40b4e)

    View changes on GitHub

eslint/eslint (eslint)

v9.19.0

Compare Source

pnpm/pnpm (pnpm)

v10.2.0

Compare Source

Minor Changes

• Packages executed via pnpm dlx and pnpm create are allowed to be built (run postinstall scripts) by default.

  If the packages executed by dlx or create have dependencies that have to be built, they should be listed via the --allow-build flag. For instance, if you want to run a package called bundle that has esbuild in dependencies and want to allow esbuild to run postinstall scripts, run:

  pnpm --allow-build=esbuild dlx bundle
  

  Related PR: #​9026.

Patch Changes

• Quote args for scripts with shell-quote to support new lines (on POSIX only) #​8980.
• Fix a bug in which pnpm deploy fails to read the correct projectId when the deploy source is the same as the workspace directory #​9001.
• Proxy settings should be respected, when resolving Git-hosted dependencies #​6530.
• Prevent overrides from adding invalid version ranges to peerDependencies by keeping the peerDependencies and overriding them with prod dependencies #​8978.
• Sort the package names in the "pnpm.onlyBuiltDependencies" list saved by pnpm approve-builds.

v10.1.0

Compare Source

Minor Changes

• Added a new command for printing the list of dependencies with ignored build scripts: pnpm ignored-builds #​8963.
• Added a new command for approving dependencies for running scripts during installation: pnpm approve-builds #​8963.
• Added a new setting called optimistic-repeat-install. When enabled, a fast check will be performed before proceeding to installation. This way a repeat install or an install on a project with everything up-to-date becomes a lot faster. But some edge cases might arise, so we keep it disabled by default for now #​8977.
• Added a new field "pnpm.ignoredBuiltDependencies" for explicitly listing packages that should not be built. When a package is in the list, pnpm will not print an info message about that package not being built #​8935.

Patch Changes

• Verify that the package name is valid when executing the publish command.
• When running pnpm install, the preprepare and postprepare scripts of the project should be executed #​8989.
• Allow workspace: and catalog: to be part of wider version range in peerDependencies.
• pnpm deploy should inherit the pnpm object from the root package.json #​8991.
• Make sure that the deletion of a node_modules in a sub-project of a monorepo is detected as out-of-date #​8959.
• Fix infinite loop caused by lifecycle scripts using pnpm to execute other scripts during pnpm install with verify-deps-before-run=install #​8954.
• Replace strip-ansi with the built-in util.stripVTControlCharacters #​9009.
• Do not print patched dependencies as ignored dependencies that require a build #​8952.

egoist/tsup (tsup)

v8.3.6

Compare Source

   🐞 Bug Fixes

• Don't await sub-process of onSuccess  -  by @​laat in https://github.com/egoist/tsup/issues/1256 (314a6)

    View changes on GitHub

vitejs/vite (vite)

v6.0.11

Compare Source

• fix: preview.allowedHosts with specific values was not respected (#​19246) (aeb3ec8), closes #​19246
• fix: allow CORS from loopback addresses by default (#​19249) (3d03899), closes #​19249

v6.0.10

Compare Source

• fix: try parse server.origin URL (#​19241) (2495022), closes #​19241

v6.0.9

Compare Source

• fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (bd896fb)
• fix!: default server.cors: false to disallow fetching from untrusted origins (b09572a)
• fix: verify token for HMR WebSocket connection (029dcd6)

v6.0.8

Compare Source

• fix: avoid SSR HMR for HTML files (#​19193) (3bd55bc), closes #​19193
• fix: build time display 7m 60s (#​19108) (cf0d2c8), closes #​19108
• fix: don't resolve URL starting with double slash (#​19059) (35942cd), closes #​19059
• fix: ensure server.close() only called once (#​19204) (db81c2d), closes #​19204
• fix: resolve.conditions in ResolvedConfig was defaultServerConditions (#​19174) (ad75c56), closes #​19174
• fix: tree shake stringified JSON imports (#​19189) (f2aed62), closes #​19189
• fix: use shared sigterm callback (#​19203) (47039f4), closes #​19203
• fix(deps): update all non-major dependencies (#​19098) (8639538), closes #​19098
• fix(optimizer): use correct default install state path for yarn PnP (#​19119) (e690d8b), closes #​19119
• fix(types): improve ESBuildOptions.include / exclude type to allow readonly (string | RegExp)[] (ea53e70), closes #​19146
• chore(deps): update dependency pathe to v2 (#​19139) (71506f0), closes #​19139

vitest-dev/vitest (vitest)

v2.1.9

Compare Source

   🚨 Breaking Changes

• Remove the empty suite from the runner  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5435 (dbbbe)
• Remove --segfault-retry  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5514 (ed60e)
• Run suite hooks in a stack  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5609 (1277d)
• Enable coverage.ignoreEmptyLines by default  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5543 (31994)
• Add correct location and snapshot fields in json reporter  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5434 (bcccc)
• Update dependency chai to v5  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5135 (73646)
• Remove watchExclude  -  by @​patak-dev in https://github.com/vitest-dev/vitest/issues/5177 (d7371)
• Change default pool to 'forks'  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5047 (7f8f9)
• Don't exit process if config failed  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5715 (f232f)
• --merge-reports to support coverage  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5736 (b7438)
• Add promise-based return assertions, do not auto-resolve returned promises  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5749 (5f710)
• Do not exit process if global setup has failed  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5726 (ddb09)
• Add meta to json output  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5802 (dd754)
• Rename indexScripts to orchestratorScripts  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5842 (49f34)
• vitest: Add "vitest list" API to print collected tests without running them  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6013 (583dd)

   🚀 Features

• Pretty print diffs coming from cause  -  by @​dubzzz in https://github.com/vitest-dev/vitest/issues/5660 (6faf8)
• Allow import statement as vi.mock path for better IDE support  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5690 (a99a1)
• Remove deprecated options  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5696 (5c308)
• Add blob reporter  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5663 (e2053)
• Add expect.poll utility  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5708 (e2e0f)
• Add browser.ui option  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5771 (a5033)
• Add median to --output-json  -  by @​Joristdh in https://github.com/vitest-dev/vitest/issues/5745 (0766b)
• Allow augmenting config.test.env  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5784 (b2469)
• Implement module mocking in browser mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5765 (7b2f6)
• Allow configuring expect options in the config  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5729 (fc53f)
• Add an option to print console stack trace  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5720 (e4fe6)
• Add browser frame to UI  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5808 (3796d)
• Image type add bmp  -  by @​btea in https://github.com/vitest-dev/vitest/issues/5921 (98f9b)
• Add an option to return base64 from page.screenshot  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5993 (be323)
• Expose parseAst, parseAstAsync from vite  -  by @​sheremet-va (f645e)
• Introduce experimental reported tasks  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6149 (13d85)
• api:
  • Make spec into a class instead of a tuple  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6355 (874a1)
• browser:
  • Add commands to communicate betweens server and the browser  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5097 (aa431)
  • Do not reload the page during watch mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5810 (e5b9a)
  • Support changing the viewport  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5811 (71851)
  • Add browser iframe mouse interaction  -  by @​userquin in https://github.com/vitest-dev/vitest/issues/5815 (f29b9)
  • Support click event  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5777 (839c3)
  • Rename none provider to preview, make it default  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5826 (18310)
  • Run tests in parallel in headless mode, add page.screenshot method  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5853 (81c42)
  • Implement several userEvent methods, add fill and dragAndDrop events  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5882 (4dbea)
  • Introduce expect.dom method and bundle jest-dom matchers with @vitest/browser  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5910 (3a96a)
  • Expose CDP in the browser  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5938 (bec43)
  • Add "init" command for browser tests  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5960 (49e97)
  • Add an option to take screenshots if the browser test fails  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5975 (154cb)
  • Add tripleClick to interactive api  -  by @​userquin in https://github.com/vitest-dev/vitest/issues/5987 (200a4)
  • Playwright provider doesn't allow resizing the browser viewport  -  by @​userquin and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5984 (ff978)
  • Allow preview and open in the editor screenshot error from ui  -  by @​userquin in https://github.com/vitest-dev/vitest/issues/6113 (2d620)
  • Move page.config to server.config, add more docs  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6252 (af2b8)
  • Make iframe scalable, improve documentation  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6257 (74ca1)
  • Introduce built-in locators  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6084 (3347f)
  • Support v8 coverage  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6273 (34199)
  • Support userEvent.upload in playwright provider  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6442 (cf148)
  • Support --inspect  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6433 (0499a)
  • Support --inspect-brk  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6434 (7ab0f)
  • Allow custom HTML path, respect plugins transformIndexHtml  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6725 (16902)
• cli:
  • Extend existing list command to output only a list of file names  -  by @​Ma-hawaj and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6392 (008f0)
• config:
  • Allow percentage value for workers option  -  by @​syi0808 in https://github.com/vitest-dev/vitest/issues/5982 (b1a27)
• coverage:
  • Add thresholds.<glob>.100 option  -  by @​thor-juhasz and @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6174 (f6845)
  • Add --exclude-after-remap  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6309 (5932a)
• experimental:
  • Expose vite on the test project as a separate field  -  by @​sheremet-va (bcc59)
• mocker:
  • Introduce @​vitest/mocker package, allow { spy: true } instead of a factory  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6289 (95f02)
• runner:
  • Implement test.for  -  by @​hi-ogawa and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5861 (c2380)
• spy:
  • Collect mock.contexts  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5955 (3b31a)
• ui:
  • Render tests in a tree  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5807 (7900f)
  • Load module graph on tab selection  -  by @​userquin in https://github.com/vitest-dev/vitest/issues/5844 (b117e)
  • Replace navigation tree with test explorer  -  by @​userquin in https://github.com/vitest-dev/vitest/issues/5907 (45dfc)
  • Add initializing explorer logic  -  by @​userquin in https://github.com/vitest-dev/vitest/issues/5941 (c31c4)
  • Add action to explorer item to show the test/suite line in the source code tab  -  by @​userquin and Anjorin Damilare in https://github.com/vitest-dev/vitest/issues/5948 (7ec29)
  • Show all suites/tests when parent matches  -  by @​userquin in https://github.com/vitest-dev/vitest/issues/6106 (840e0)
• vitest:
  • Add "provide" option  -  by @​sheremet-va in [https://g

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

New and updated dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@babel/parser@7.26.7 🔁 npm/@babel/parser@7.26.5	None	0	1.91 MB	nicolo-ribaudo
npm/@babel/types@7.26.7 🔁 npm/@babel/types@7.26.5	None	+2	2.64 MB	nicolo-ribaudo
npm/@iconify-json/carbon@1.2.6 🔁 npm/@iconify-json/carbon@1.2.5	None	+1	1.1 MB	cyberalien
npm/@sxzz/prettier-config@2.1.1 🔁 npm/@sxzz/prettier-config@2.0.2	None	0	3.44 kB	sxzz
npm/@types/node@22.13.0 🔁 npm/@types/node@22.10.5	None	+1	2.39 MB	types
npm/@types/react@19.0.8 🔁 npm/@types/react@19.0.6	None	+1	2.05 MB	types
npm/@unocss/reset@65.4.3 🔁 npm/@unocss/reset@65.4.0	None	0	49.7 kB	antfu
npm/@vue-macros/reactivity-transform@1.1.6 🔁 npm/@vue-macros/reactivity-transform@1.1.4	Transitive: environment, eval, filesystem, unsafe	+25	6.73 MB	sxzz
npm/@vueuse/core@12.5.0 🔁 npm/@vueuse/core@12.4.0	None	+3	2.09 MB	vueuse-bot
npm/bumpp@9.11.1 🔁 npm/bumpp@9.10.0	Transitive: environment, network, shell	+62	5.19 MB	antfu
npm/eslint@9.19.0 🔁 npm/eslint@9.18.0	Transitive: eval, filesystem, shell, unsafe	+84	10.7 MB	eslintbot, openjsfoundation
npm/tsup@8.3.6 🔁 npm/tsup@8.3.5	Transitive: environment, network, shell, unsafe	+76	10.1 MB	egoist
npm/unocss@65.4.3 🔁 npm/unocss@65.4.0	Transitive: environment, filesystem, network, shell, unsafe	+90	10.1 MB	antfu, unocss-bot
npm/vite@6.0.11 🔁 npm/vite@6.0.7	None	+7	6 MB	antfu, patak, soda, ...2 more
npm/vitest@2.1.9 🔁 npm/vitest@2.1.8	Transitive: filesystem, network, shell, unsafe	+37	10.2 MB	antfu, oreanno, patak, ...1 more

View full report↗︎