chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sxzz/eslint-config	^6.1.1 -> ^6.1.2
eslint (source)	^9.24.0 -> ^9.25.0
pnpm (source)	10.8.1 -> 10.9.0
tsdown	^0.8.0-beta.4 -> ^0.9.1
vitest (source)	^3.1.1 -> ^3.1.2

---

Release Notes

sxzz/eslint-config (@​sxzz/eslint-config)

v6.1.2

Compare Source

   🐞 Bug Fixes

• Ignore filename case for ISSUE_TEMPLATE  -  by @​sxzz (d3664)

    View changes on GitHub

eslint/eslint (eslint)

v9.25.0

Compare Source

pnpm/pnpm (pnpm)

v10.9.0

Compare Source

Minor Changes

• Added support for installing JSR packages. You can now install JSR packages using the following syntax:

  pnpm add jsr:<pkg_name>
  

  or with a version range:

  pnpm add jsr:<pkg_name>@&#8203;<range>
  

  For example, running:

  pnpm add jsr:@​foo/bar
  

  will add the following entry to your package.json:

  {
    "dependencies": {
      "@​foo/bar": "jsr:^0.1.2"
    }
  }

  When publishing, this entry will be transformed into a format compatible with npm, older versions of Yarn, and previous pnpm versions:

  {
    "dependencies": {
      "@​foo/bar": "npm:@​jsr/foo__bar@^0.1.2"
    }
  }

  Related issue: #​8941.

  Note: The @jsr scope defaults to https://npm.jsr.io/ if the @jsr:registry setting is not defined.

• Added a new setting, dangerouslyAllowAllBuilds, for automatically running any scripts of dependencies without the need to approve any builds. It was already possible to allow all builds by adding this to pnpm-workspace.yaml:

  neverBuiltDependencies: []

  dangerouslyAllowAllBuilds has the same effect but also allows to be set globally via:

  pnpm config set dangerouslyAllowAllBuilds true
  

  It can also be set when running a command:

  pnpm install --dangerously-allow-all-builds
  

Patch Changes

• Fix a false negative in verifyDepsBeforeRun when nodeLinker is hoisted and there is a workspace package without dependencies and node_modules directory #​9424.
• Explicitly drop verifyDepsBeforeRun support for nodeLinker: pnp. Combining verifyDepsBeforeRun and nodeLinker: pnp will now print a warning.

rolldown/tsdown (tsdown)

v0.9.1

Compare Source

   🚀 Features

• Add execute permission for shebang chunk  -  by @​sxzz (3e3c4)

   🐞 Bug Fixes

• Optional PackageType  -  by @​sxzz (abbbd)

    View changes on GitHub

v0.9.0

Compare Source

   🚨 Breaking Changes

• Rename dts.isolatedDeclaration to dts.isolatedDeclarations  -  by @​sxzz (afc8e)

   🚀 Features

• Add outExtensions option  -  by @​sxzz (97154)

   🐞 Bug Fixes

• Add global modifier to scripts migration regexp  -  by @​KazariEX in https://github.com/rolldown/tsdown/issues/113 (4dc30)

    View changes on GitHub

v0.8.1

Compare Source

   🚀 Features

• Upgrade rolldown-plugin-dts for input alias support  -  by @​sxzz (20c9a)
• Add tsconfig option  -  by @​sxzz (64eef)
• Find up for tsconfig  -  by @​sxzz (7f610)

   🐞 Bug Fixes

• Replace tsup-node during migration  -  by @​KazariEX in https://github.com/rolldown/tsdown/issues/99 (9060e)

    View changes on GitHub

v0.8.0

Compare Source

   🚀 Features

• Generate & bundle dts in one build process  -  by @​sxzz (64885)
• Support string command of onSuccess  -  by @​sxzz (52a7e)
• Add more cli flags  -  by @​sxzz (e5747)
• dts:
  • Switch to rolldown-plugin-dts for bunding dts  -  by @​sxzz (70a76)
  • Support TypeScript compiler emit  -  by @​sxzz (07fb6)
  • Support namespace  -  by @​sxzz (dafec)

    View changes on GitHub

vitest-dev/vitest (vitest)

v3.1.2

Compare Source

   🚀 Features

• Draft implementation  -  by @​sheremet-va (86010)
• Draft implementation"  -  by @​sheremet-va (ce2a0)

   🐞 Bug Fixes

• Add global chai variable in vitest/globals (fix: #​7474)  -  by @​Jay-Karia in https://github.com/vitest-dev/vitest/issues/7771 and https://github.com/vitest-dev/vitest/issues/7474 (d9297)
• Prevent modifying test.exclude when same object passed in coverage.exclude  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7774 (c3751)
• Fix already hoisted mock  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7815 (773b1)
• Fix test.scoped inheritance  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7814 (db6c3)
• Remove pointer-events-none after resizing the left panel  -  by @​alexprudhomme in https://github.com/vitest-dev/vitest/issues/7811 (a7e77)
• Default to run mode when stdin is not a TTY  -  by @​kentonv, @​hi-ogawa and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7673 (6358f)
• Use happy-dom/jsdom types for envionmentOptions  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7795 (67430)
• browser:
  • Fix transform error before browser server initialization  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7783 (5f762)
  • Fix mocking from outside of root  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7789 (03f55)
  • Scale iframe for non ui case  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6512 (c3374)
• coverage:
  • await profiler calls  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7763 (795a6)
  • Expose profiling timers  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7820 (5652b)
• deps:
  • Update all non-major dependencies  -  in https://github.com/vitest-dev/vitest/issues/7765 (7c3df)
  • Update all non-major dependencies  -  in https://github.com/vitest-dev/vitest/issues/7831 (15701)
• runner:
  • Correctly call test hooks and teardown functions  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7775 (3c00c)
  • Show stacktrace on test timeout error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7799 (df33b)
• ui:
  • Load panel sizes from storage on initial load  -  by @​userquin in https://github.com/vitest-dev/vitest/issues/7265 (6555d)
• vite-node:
  • Named export should overwrite export all  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7846 (5ba0d)
  • Add ERR_MODULE_NOT_FOUND code error if module cannot be loaded  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7776 (f9eac)

   🏎 Performance

• browser: Improve browser parallelisation  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7665 (816a5)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	tsdown@​0.8.0-beta.4 ⏵ 0.9.1	+1		+1	+1
	@​sxzz/​eslint-config@​6.1.1 ⏵ 6.1.2	+1		+1	+3
	eslint@​9.24.0 ⏵ 9.25.0	+1
	vitest@​3.1.1 ⏵ 3.1.2	+3		+24	+4

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report