chore(deps): update all non-major dependencies #42

renovate · 2025-12-01T02:03:30Z

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	`^22.19.0` -> `^22.19.1`
cookie@<0.7.0	`>=1.0.2` -> `>=1.1.1`
execa	`^9.6.0` -> `^9.6.1`
lint-staged	`^16.2.6` -> `^16.2.7`
pnpm (source)	`10.20.0` -> `10.24.0`
pnpm (source)	`^10.20.0` -> `^10.24.0`
rimraf	`^6.1.0` -> `^6.1.2`
tsx (source)	`^4.20.6` -> `^4.21.0`
typescript-eslint (source)	`^8.46.3` -> `^8.48.1`
verdaccio (source)	`^6.2.1` -> `^6.2.4`
yaml (source)	`^2.8.1` -> `^2.8.2`

Release Notes

jshttp/cookie (cookie@<0.7.0)

`v1.1.1`

Compare Source

Fixed

Overwrite value in passed in options (#253) c66147c
- When value was provided in serialize(key, value, { value }) the value in options was used instead of the value passed as an argument

`v1.1.0`

Compare Source

sindresorhus/execa (execa)

`v9.6.1`

Compare Source

Fix VerboseOption type not being properly exported (#1215) 7891c39

lint-staged/lint-staged (lint-staged)

`v16.2.7`

Compare Source

Patch Changes

#1711 ef74c8d Thanks @iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.

pnpm/pnpm (pnpm)

`v10.24.0`

Compare Source

`v10.23.0`: pnpm 10.23

Compare Source

Minor Changes

Added --lockfile-only option to pnpm list #10020.

Patch Changes

pnpm self-update should download pnpm from the configured npm registry #10205.
pnpm self-update should always install the non-executable pnpm package (pnpm in the registry) and never the @pnpm/exe package, when installing v11 or newer. We currently cannot ship @pnpm/exe as pkg doesn't work with ESM #10190.
Node.js runtime is not added to "dependencies" on pnpm add, if there's a engines.runtime setting declared in package.json #10209.
The installation should fail if an optional dependency cannot be installed due to a trust policy check failure #10208.
pnpm list and pnpm why now display npm: protocol for aliased packages (e.g., foo npm:[email protected]) #8660.
Don't add an extra slash to the Node.js mirror URL #10204.
pnpm store prune should not fail if the store contains Node.js packages #10131.

Platinum Sponsors

Gold Sponsors

`v10.22.0`: pnpm 10.22

Compare Source

Minor Changes

Added support for trustPolicyExclude #10164.

You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:
```
trustPolicy: no-downgrade
trustPolicyExclude:
  - [email protected]
  - [email protected] || 5.102.1
```
Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #10179.

Platinum Sponsors

Gold Sponsors

`v10.21.0`

Compare Source

isaacs/rimraf (rimraf)

`v6.1.2`

Compare Source

`v6.1.1`

Compare Source

privatenumber/tsx (tsx)

`v4.21.0`

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

`v8.48.1`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.48.0`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.47.0`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.46.4`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

verdaccio/verdaccio (verdaccio)

`v6.2.4`

Compare Source

What's Changed

fix: allow docker listen address to be configured (6.x) by @markormesher in #5503

`VERDACCIO_ADDRESS` Environment Variable for Docker

You can now set the VERDACCIO_ADDRESS environment variable to control Verdaccio’s network bind address.

Choose IPv4 (0.0.0.0), IPv6 ([::]), or a specific interface.
Improves compatibility for dual-stack and custom environments.

Example:

docker run -e VERDACCIO_ADDRESS=0.0.0.0 ...
docker run -e VERDACCIO_ADDRESS='[::]' ...

More info at : https://verdaccio.org/docs/env/

Full Changelog: verdaccio/verdaccio@v6.2.3...v6.2.4

`v6.2.3`

Compare Source

What's Changed

fix(deps): update core verdaccio dependencies (6.x) by @renovate[bot] in #5497
- fix(middleware): dist-tags with scoped packages #5495 https://redirect.github.com/orgs/verdaccio/discussions/5483 @mbtools and @stgbmpi
fix: Docker image not listening on IPv6 (6.x) by @A1bi in #5499 (🐛 regression) will be fixed at v6.2.4

Full Changelog: verdaccio/verdaccio@v6.2.2...v6.2.3

`v6.2.2`

Compare Source

What's Changed

fix(deps): update core verdaccio dependencies (6.x) by @renovate[bot] in #5477
- fix: running without auth plugin (#5466) @mbtools
fix(deps): update core verdaccio dependencies (6.x) by @renovate[bot] in #5488
- fix: notification packages bug #5439 @juanpicado
- chore: replace mime package with constants (#5471) @mbtools
- fix(proxy): proxy protocol check (#5474) @mbtools
fix(deps): update dependency semver to v7.7.3 (6.x) by @renovate[bot] in #5489
chore(deps): update node.js to v22.21.1 (6.x) by @renovate[bot] in #5491
chore(deps): update babel monorepo to v7.28.5 (6.x) by @renovate[bot] in #5490
fix(deps): update core verdaccio dependencies (6.x) by @renovate[bot] in #5493

Full Changelog: verdaccio/verdaccio@v6.2.1...v6.2.2

eemeli/yaml (yaml)

`v2.8.2`

Compare Source

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the dependencies label Dec 1, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 00b1313 to 2da919b Compare December 2, 2025 20:44

chore(deps): update all non-major dependencies

8bd65ec

renovate bot force-pushed the renovate/all-minor-patch branch from 2da919b to 8bd65ec Compare December 4, 2025 06:00

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies #42

chore(deps): update all non-major dependencies #42

renovate bot commented Dec 1, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): update all non-major dependencies #42

Are you sure you want to change the base?

chore(deps): update all non-major dependencies #42

Conversation

renovate bot commented Dec 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

v10.23.0: pnpm 10.23

Minor Changes

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.22.0: pnpm 10.22

Minor Changes

Patch Changes

Platinum Sponsors

Gold Sponsors

What's Changed

VERDACCIO_ADDRESS Environment Variable for Docker

What's Changed

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Dec 1, 2025 •

edited

Loading

`v10.23.0`: pnpm 10.23

`v10.22.0`: pnpm 10.22

`VERDACCIO_ADDRESS` Environment Variable for Docker