Skip to content

fix(deps): update all non-major dependencies - #165

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#165
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Nov 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/setup-node action minor v7.0.0 → v7.1.0 age confidence
lint-staged devDependencies minor ^17.4.1 → ^17.6.0 age confidence
oxfmt (source) devDependencies minor ^0.65.0 → ^0.78.0 age confidence
oxlint (source) devDependencies minor ^1.80.0 → ^1.93.0 age confidence
pnpm (source) packageManager patch 10.34.5 → 10.34.9 age confidence
pnpm/action-setup action minor v6.0.10 → v6.1.1 age confidence
shell-quote dependencies minor ^1.10.0 → ^1.12.0 age confidence
zizmorcore/zizmor-action action minor v0.6.3 → v0.8.1 age confidence

Release Notes

actions/setup-node

v7.1.0

Compare Source

What's Changed
Enhancements:
Bug fixes:
Documentation updates:
Dependency updates:
New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

lint-staged/lint-staged (lint-staged)

v17.6.0

Compare Source

Minor Changes

  • #​1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

    import { defineConfig } from 'lint-staged/config'

export default defineConfig({
  '*': {
    title: 'Fail if PDF files are committed',
    task: async (filepaths, { log }) => {
      const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
      if (pdfFiles.length > 0) {
        log('PDF files should not be committed: %s', pdfFiles)
        throw new Error('Failed')
      }
    },
  },
})

  • #​1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

    If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

  • #​1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

  • #​1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

    import { defineConfig } from 'lint-staged/config'

export default defineConfig({
  '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
})

  • #​1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

  • #​1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

v17.5.1

Compare Source

Patch Changes

  • #​1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

    A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

v17.5.0

Compare Source

Minor Changes
  • #​1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.
Patch Changes

  • #​1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

  • #​1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

  • #​1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

oxc-project/oxc (oxfmt)

v0.78.0: oxfmt v0.78.0

Compare Source

🐛 Bug Fixes
  • ab78621 formatter_css/less: Print ~ escape consistently (#​29089) (Yuji Sugiura)
  • 91721d2 formatter_css/less: Print Less % selectors (#​29088) (Yuji Sugiura)
  • 449e91f oxfmt: Format ts-in-astro as TSX (#​29080) (leaysgur)
  • 8d8845e formatter/jsdoc: Strip * prefixes from multiline default value (#​28910) (leaysgur)
  • cdb1501 formatter/jsdoc: Handle every line terminator in multi-line JSDoc types (#​28909) (leaysgur)
  • fd51bff jsdoc: Handle every line terminators as newline (#​28902) (leaysgur)
  • 2f80765 formatter_toml: Format whitespace-only document to empty (#​28899) (leaysgur)
  • 5e1e02c formatter_graphql: Allow empty document (#​28898) (leaysgur)
  • 06e72c0 formatter/tailwind: Normalize CR in Tailwind template with preserveWhitespace (#​28896) (leaysgur)
⚡ Performance
  • 934ca98 formatter: Use Arc for tailwind options across embedding (#​29079) (leaysgur)
  • dde9c5c formatter_htmlish: Skip </script escape if possible (#​29078) (leaysgur)
  • dc4d918 formatter: Format embedded expr of one name without parsing (#​29077) (leaysgur)
📚 Documentation
  • eb2eb2d formatter_htmlish: Cover block elements in DIVERGENCES.md#interpolation-element-as-text (#​28901) (leaysgur)
  • 0f4ec80 formatter/tailwind: Note Tailwind sorting tears escaped whitespace apart (#​28900) (leaysgur)

v0.77.0: oxfmt v0.77.0

Compare Source

💥 BREAKING CHANGES
  • 00d1a67 oxfmt: [BREAKING] Format parser:vue files by oxc_formatter_htmlish (#​28848) (leaysgur)
🚀 Features
  • 9a81e58 formatter_htmlish: Format Vue templates (#​28847) (leaysgur)
  • 119d82f formatter: Format a template's expressions and handlers as JsRoot (#​28846) (leaysgur)
🐛 Bug Fixes
  • fa66fde oxlint,oxfmt: Resolve Vite+ config root from the config file directory (#​28801) (MK (fengmk2))
  • 4d4104d formatter_htmlish: Preserve doctype case in embedded (#​28797) (leaysgur)
  • ebfd40a formatter: Sort Tailwind calls printed as member chains (#​28800) (Yuji Sugiura)
  • e62e5cb formatter: Decide quotes of a Tailwind key printed as one class (#​28798) (Yuji Sugiura)
  • 959edc1 formatter: Don't sort templates in nested non-Tailwind calls (#​28794) (Yuji Sugiura)
  • 6ffbe32 formatter/jsdoc: Prevent @tag from being moved to the line start (#​28835) (leaysgur)
  • 94fbef5 formatter_css: Treat comments in style attr as fill items (#​28832) (leaysgur)
  • e4a80f7 formatter_css: Normalize selectors inside :deep, :slotted and :local (#​28805) (leaysgur)
  • 255c5cc formatter: Measure Tailwind class argument after collapsing whitespace (#​28745) (Lee Jaeha / Adam)
  • e6c4fef formatter: Decide template and object key layouts from collapsed Tailwind classes (#​28791) (Yuji Sugiura)
  • 0b44164 formatter: Decide JSX opening element layout from collapsed Tailwind class string (#​28744) (Lee Jaeha / Adam)
  • b8ba9ae formatter: Print decorators on rest parameters (#​28731) (YT)
⚡ Performance

v0.76.0: oxfmt v0.76.0

Compare Source

💥 BREAKING CHANGES
  • 296623d oxfmt: [BREAKING] Format parser:html files by oxc_formatter_htmlish (#​28273) (Yuji Sugiura)
🚀 Features
  • 336b2c1 oxfmt: Support html-in-js templates closing a dynamic tag name (#​28389) (Yuji Sugiura)
  • 0a42af6 formatter_htmlish: Format end tags of omitted html, head and body (#​28388) (Yuji Sugiura)
  • 44d8c2b formatter_htmlish: Implement HTML-ish formatter Html variant (#​28272) (Yuji Sugiura)
  • 36e5ddb oxfmt: Add debug span for reading files (#​28204) (leaysgur)
🐛 Bug Fixes
  • dbcc358 formatter: Keep arrow conditional body parens before a leading function/class (#​28710) (Yuji Sugiura)
  • fef809a formatter_htmlish: Handle XHTML (#​28703) (leaysgur)
  • f3dd201 formatter_htmlish: Keep SVG text under xml:space="preserve" as written (#​28382) (Yuji Sugiura)
  • fb3aefa formatter: Keep source parens around html-in-js placeholders past comments (#​28381) (Yuji Sugiura)
  • e738dae formatter: Quote keys added in an HTML event handler with single quotes (#​28380) (Yuji Sugiura)
  • 2e7a629 oxfmt: Format HTML in a <script> body as an embedded part (#​28379) (Yuji Sugiura)
  • f00862b formatter: Keep parens around a generic function type in a type assertion (#​28173) (vidigoat)
  • 9ead5c4 formatter: Handle this.b and super.b like foo.b (#​28200) (leaysgur)
  • 72a54cf formatter: Break parens of (a + b)[c] like (a + b).c (#​28199) (leaysgur)
  • b8f4f34 formatter: Print x.b and x.#b samely (#​28193) (leaysgur)
  • 9ddccb7 formatter: Keep parens for private field (#​28188) (leaysgur)
⚡ Performance
  • b6f1ac9 formatter_markdown: Bump parser to 0.0.4 and skip unread work (#​28713) (leaysgur)
  • 633ee96 formatter_css: Use u32 spans (#​28708) (leaysgur)
  • f680ee1 formatter_yaml: Use multiline flag for flow scalars (#​28707) (leaysgur)
  • ff7c203 formatter_css: Avoid repeated scans and allocations in values (#​28706) (leaysgur)
  • 7cd46cb formatter_htmlish: Search script end tags by < in embedded (#​28704) (leaysgur)
  • 46f8efd formatter_graphql: Print block string lines borrowed from the source (#​28701) (leaysgur)
  • dce1485 formatter_htmlish: Skip escaping attr values without the chosen quote (#​28700) (leaysgur)
  • e9392c8 formatter_core: Search line terminators with memchr (#​28699) (leaysgur)
  • ceb26be formatter_htmlish: Use char to escape attr quotes (#​28697) (leaysgur)
  • 8239dac parser: Replace dragonbox_ecma with zmij_ecma (#​28282) (Boshen)
📚 Documentation
  • 303d9e8 formatter: Strengthen start-token-no-double-parens rationale (#​28711) (Yuji Sugiura)
  • a82ce83 oxfmt: Update unclassified divergence (#​28685) (Yuji Sugiura)
  • 7f18c20 formatter_htmlish: Note class and srcset are formatted with embeddedLanguageFormatting: off (#​28465) (Yuji Sugiura)
  • 01ed68a oxfmt,formatter_htmlish,formatter: Clean up behavior comments (#​28384) (Yuji Sugiura)
  • a363c27 formatter_css,formatter_yaml: Point parser citations at AGENTS.md (#​28466) (Yuji Sugiura)
  • 6586050 formatter_core: Document tab width in text width policy (#​28393) (leaysgur)
  • 49fbffb formatter_core: Tighten FORMATTER_POLICY (#​28206) (leaysgur)

v0.75.0: oxfmt v0.75.0

Compare Source

🐛 Bug Fixes
  • 5042019 formatter: Keep fill layout for array with comment after [ (#​28170) (leaysgur)
  • 9d37ff6 formatter: Use position-based comment checks for concise arrays (#​28169) (leaysgur)
  • 016c4a2 formatter: Keep a comment before } inside a JSX spread child (#​28103) (vidigoat)
  • 190bb1e formatter: Keep parens around an instantiation expression ending an operand through any tight parent (#​28168) (leaysgur)
  • a5314a1 formatter: Keep ; before in and instanceof class members (#​28166) (leaysgur)
  • 3a56e7c formatter: Keep closing HTML comments at the start of a line (#​28064) (Cameron)
  • 23d23d6 formatter_markdown: Honor range ignore inside directives (#​28164) (leaysgur)
  • 5f1fd3d formatter: Measure width heuristics by display width (#​28098) (leaysgur)
  • a5a52cf formatter: Keep parens around private in expressions (#​28096) (leaysgur)
  • 999496e formatter: Measure a short key by its display width (#​28026) (vidigoat)
  • 7e9aa44 formatter: Keep parens around a looser operand of an instantiation expression (#​28025) (vidigoat)
  • 6912d1f formatter: Keep an arrow signature that exactly fills the line for any body (#​27989) (leaysgur)
  • eb1d9f9 formatter_core: Count a flat line space in fits only when text follows (#​27987) (leaysgur)
⚡ Performance
  • 1ed93af data_structures: Copy short strings without a memcpy call (#​27953) (leaysgur)
  • 7948f0b formatter_core: Shrink FormatElement to 16B (#​28012) (leaysgur)
  • 788af22 formatter: Keep AstNodes on the stack, and only chain links in the arena (#​27963) (leaysgur)
📚 Documentation

v0.74.0: oxfmt v0.74.0

Compare Source

🐛 Bug Fixes
  • e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#​27957) (leaysgur)
  • 782ab6e linter: Search string values without UTF-8 conversion (#​26716) (Dunqing)
  • a5d8184 jsdoc: Parse code spans after quotes in descriptions (#​27955) (leaysgur)
  • 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#​27948) (leaysgur)
  • 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#​27947) (leaysgur)
  • 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#​27946) (leaysgur)
  • c22a9b2 formatter: Treat static block with only empty statements as empty (#​27945) (leaysgur)
  • d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#​27823) (leaysgur)
  • c4c1727 formatter/sort_imports: Keep comments after the last import (#​27822) (leaysgur)
  • a64677e formatter: Print JSDoc embedded snippets with LF (#​27821) (leaysgur)
  • 2c1cc20 formatter: Keep comment only Vue bindings as-is (#​27820) (leaysgur)
  • 1bf236d formatter/sort_imports: Do not use comments as import source (#​27819) (leaysgur)
  • 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#​27818) (leaysgur)
  • 81c75e7 formatter/css: Keep glued css-in-js statement placeholders glued (#​27814) (leaysgur)
  • a1ef7f4 formatter: Keep typecast parens in same-operator binary and arrow chain (#​27812) (leaysgur)
  • de110ce formatter: Keep more parens around TSInstantiationExpression (#​27811) (leaysgur)
  • 8b02e90 formatter_json: Reject invalid JSON instead of dropping them (#​27785) (leaysgur)
  • 6fe4c1b formatter: Treat lone CR in JSX text and argument blank lines (#​27780) (leaysgur)
  • 5605362 oxfmt: Validate editorconfig as like oxfmtrc (#​27778) (leaysgur)
  • 5b2acb0 formatter_core: Report error position releative to CRLF source (#​27777) (leaysgur)
  • c78e80e formatter_core: Report parse error positions relative to the BOM-headed source (#​27776) (leaysgur)
  • 3a980c9 formatter_toml: Handle BOM like other languages (#​27775) (leaysgur)
  • 97c9fc4 oxfmt: Handle BOM in config JSON (#​27774) (leaysgur)
  • 28eb4a7 oxfmt: Print trailing newline for --list-different (#​27773) (leaysgur)
  • d2bea21 formatter: Glue comments to an opener in empty for-head slots and array holes (#​27737) (leaysgur)
  • 6a95ec1 formatter: Keep comment position on holey array (#​27730) (leaysgur)
  • 54769da formatter: Break after dangling line comment in holey array (#​27729) (leaysgur)
  • 99077ef formatter_json: Reject unary expressions other than signed numbers (#​27728) (leaysgur)
  • 22cd4cd formatter_json: Handle holey array and comments (#​27727) (leaysgur)
  • 644ca1c formatter: Do not indent logical chains whose right sides all inline (#​27667) (leaysgur)
  • a07a0fb formatter: Wrap comment-only JSX expression container in a group (#​27666) (leaysgur)
⚡ Performance
  • e220293 formatter: Check only the operator suppression mark in is_quiet (#​27952) (leaysgur)
  • e5fdc9c formatter_core: Write into one element stack through a concrete Formatter (#​27559) (leaysgur)
  • a342f7e formatter: Skip comment handling for nodes with no comment near them (#​27557) (leaysgur)
  • d8ce750 formatter: Write string literals with swapped quotes into the arena (#​27558) (Yuji Sugiura)
  • 1c393c0 formatter_core: Skip scanning texts with nothing to rewrite (#​27561) (leaysgur)
  • 1d3ef10 formatter_core: Keep the embedded IR when nothing in it is rewritten (#​27673) (leaysgur)
📚 Documentation
  • 1325225 oxfmt: Update useless comment prefix (#​27956) (leaysgur)
  • d0dd140 formatter: Note lossy cooked round-trip in template embeds (#​27944) (leaysgur)
  • 8a3a6c8 oxfmt: Update stale notes on the JSDoc string-out channel and fixture origins (#​27824) (leaysgur)

v0.73.0

Compare Source

🚀 Features
  • a495e82 oxfmt: Support associations config to specify language over filepath (#​27437) (leaysgur)
  • 5db28fa oxfmt: Support Astro via prettier-plugin-astro@1.x (#​27386) (leaysgur)
📚 Documentation

v0.72.0: oxfmt v0.72.0

Compare Source

💥 BREAKING CHANGES
  • e2c68b1 oxfmt: [BREAKING] Format parser:markdown files by oxc_formatter_markdown (#​27256) (leaysgur)
🚀 Features
  • b538e3c formatter_css: Parse embedded CSS as a block's contents (#​27284) (leaysgur)
🐛 Bug Fixes
  • 71e400b formatter_markdown: Fixed remaining issues found by fuzz (#​27334) (leaysgur)
  • 7d0e54d formatter_markdown: Preserve line breaks around Chinese/Japanese characters in all proseWrap (#​27331) (leaysgur)
  • e9ae2d8 formatter_css: Fix layouts found in mdn-content repo (css-in-md) (#​27326) (leaysgur)
  • df85b4c oxfmt: Keep blank lines after a line break in Prettier Doc to IR (#​27325) (leaysgur)
  • 7f65b75 formatter: Format assignment target property as assignment-like (#​27289) (leaysgur)
  • 6c08f2a formatter_css: Apply the url() import exception to a lone comma group (#​27288) (leaysgur)
  • 1967302 formatter_css: Hug a spaced ident ( only at the at-rule prelude head (#​27283) (leaysgur)
  • 2445064 formatter_markdown: Keep a preserved line break before a delimiter row that opens no table (#​27278) (leaysgur)
  • dd72fbf formatter_markdown: Keep container columns as spaces under useTabs (#​27277) (leaysgur)
  • 1686018 oxfmt: Make one state conditionalGroup fit up to first hardline (#​27275) (leaysgur)
  • fd4ddce formatter_json: Flatten block comment only array|object (#​27274) (leaysgur)
  • 267557c formatter,oxfmt: Embed only original JSDoc plugin supported languages (#​27241) (leaysgur)
  • 2606c60 oxfmt: Do not re-include a file below an excluded directory with a negated pattern ([#​27237](https://redirect.github.com/oxc-proje

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Nov 1, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 245a712 to a1d12a4 Compare November 13, 2026 11:05

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants