Skip to content

chore(deps): update all non-major dependencies - #167

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#167
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Sep 18, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@antfu/eslint-config ^6.1.0 → ^6.7.3 age confidence pnpm.catalog.dev minor
@commitlint/cli (source) ^20.1.0 → ^20.5.3 age confidence pnpm.catalog.dev minor
@commitlint/config-conventional (source) ^20.0.0 → ^20.5.3 age confidence pnpm.catalog.dev minor
@date-fns/tz ^1.4.1 → ^1.5.0 age confidence pnpm.catalog.integrations minor
@iconify-json/fluent ^1.2.34 → ^1.2.54 age confidence pnpm.catalog.dev patch
@iconify-json/lucide ^1.2.71 → ^1.2.120 age confidence pnpm.catalog.dev patch
@iconify-json/simple-icons ^1.2.56 → ^1.2.92 age confidence pnpm.catalog.dev patch
@internationalized/date (source) ^3.10.0 → ^3.12.2 age confidence pnpm.catalog.integrations minor
@nuxt/devtools (source) ^3.1.1 → ^3.4.0 age confidence pnpm.catalog.dev minor
@nuxt/image (source) ^2.0.0 → ^2.1.0 age confidence pnpm.catalog.dev minor
@nuxt/ui (source) ^4.2.1 → ^4.10.0 age confidence pnpm.catalog.integrations minor
@nuxtjs/i18n (source) ^10.2.1 → ^10.5.0 age confidence pnpm.catalog.dev minor
@openai/agents (source) ^0.2.1 → ^0.14.1 age confidence pnpm.catalog.integrations minor
@paralleldrive/cuid2 2.2.2 → 2.3.1 age confidence pnpm.catalog.integrations minor
@pinia/nuxt (source) ^0.11.2 → ^0.11.3 age confidence pnpm.catalog.integrations patch
@tailwindcss/typography ^0.5.19 → ^0.5.20 age confidence pnpm.catalog.dev patch
@tma.js/sdk-vue (source) ^1.0.8 → ^1.0.23 age confidence pnpm.catalog.integrations patch
@types/node (source) ^24.9.2 → ^24.13.3 age confidence pnpm.catalog.types minor
@types/pg (source) 8.15.5 → 8.20.0 age confidence devDependencies minor
@unovis/ts (source) ^1.6.1 → ^1.6.7 age confidence pnpm.catalog.integrations patch
@unovis/vue (source) ^1.6.1 → ^1.6.7 age confidence pnpm.catalog.integrations patch
@vitest/browser-playwright (source) ^4.0.5 → ^4.1.10 age confidence pnpm.catalog.test minor
@vitest/coverage-v8 (source) ^4.0.5 → ^4.1.10 age confidence pnpm.catalog.test minor
arktype (source) ^2.1.22 → ^2.2.3 age confidence pnpm.catalog.integrations minor
bumpp ^10.3.1 → ^10.4.1 age confidence pnpm.catalog.dev minor
date-fns ^4.1.0 → ^4.4.0 age confidence pnpm.catalog.integrations minor
dotenv ^17.2.3 → ^17.4.2 age confidence pnpm.catalog.dev minor
drizzle-cuid2 2.1.0 → 2.2.0 age confidence dependencies minor
drizzle-kit (source) 0.31.5 → 0.31.10 age confidence devDependencies patch
eslint (source) ^9.39.2 → ^9.39.5 age confidence pnpm.catalog.dev patch
grammy (source) ^1.38.3 → ^1.45.1 age confidence pnpm.catalog.integrations minor
ioredis ^5.8.2 → ^5.11.1 age confidence pnpm.catalog.integrations minor
libphonenumber-js ^1.12.25 → ^1.13.9 age confidence pnpm.catalog.integrations minor
lint-staged ^16.2.7 → ^16.4.0 age confidence pnpm.catalog.dev minor
node (source) >=24.11.0 → >=24.18.1 age confidence engines minor
node (source) 24.11.0-alpine → 24.18.0-alpine age confidence final minor
node (source) 24.11.0-slim → 24.18.0-slim age confidence final minor
nuxt-auth-utils ^0.5.26 → ^0.5.29 age confidence pnpm.catalog.dev patch
openai ^6.7.0 → ^6.49.0 age confidence pnpm.catalog.integrations minor
pg (source) 8.16.3 → 8.22.0 age confidence dependencies minor
pinia (source) ^3.0.3 → ^3.0.4 age confidence pnpm.catalog.integrations patch
playwright (source) ^1.56.1 → ^1.62.0 age confidence pnpm.catalog.test minor
pnpm (source) 10.20.0 → 10.34.5 age confidence packageManager minor
pnpm (source) >=10.20.0 → >=10.34.5 age confidence engines minor
ru-nalog-fias-gar 1.0.4 → 1.0.5 age confidence dependencies patch
sharp (source, changelog) ^0.34.4 → ^0.35.3 age confidence pnpm.catalog.integrations minor
sortablejs ^1.15.6 → ^1.15.7 age confidence pnpm.catalog.integrations patch
uqr 0.1.2 → 0.1.3 age confidence dependencies patch
vitest (source) ^4.0.5 → ^4.1.10 age confidence pnpm.catalog.test minor
vitest-browser-vue ^2.0.1 → ^2.1.0 age confidence pnpm.catalog.test minor
vue-tsc (source) ^3.1.8 → ^3.3.8 age confidence pnpm.catalog.dev minor

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v6.7.3

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v6.7.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v6.7.1

Compare Source

   🐞 Bug Fixes
  • pnpm: Do not set catalogMode when catalogs is not enabled  -  by @​antfu (0471e)
    View changes on GitHub

v6.7.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v6.6.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v6.6.0

Compare Source

   🐞 Bug Fixes
  • pnpm: Enforce catalog usage based on smart detection  -  by @​antfu (654c0)
    View changes on GitHub

v6.5.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v6.5.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v6.4.2

Compare Source

   🐞 Bug Fixes
  • pnpm: Move pnpm-workspace.yaml sorting config from yaml to pnpm  -  by @​antfu (fc2b1)
    View changes on GitHub

v6.4.1

Compare Source

No significant changes

    View changes on GitHub

v6.3.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v6.2.0

Compare Source

   🚀 Features
    View changes on GitHub
conventional-changelog/commitlint (@​commitlint/cli)

v20.5.3

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.5.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.5.0

Compare Source

Bug Fixes

20.4.4 (2026-03-12)

Note: Version bump only for package @​commitlint/cli

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/cli

20.4.1 (2026-02-02)

Note: Version bump only for package @​commitlint/cli

v20.4.4

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.3

Compare Source

Bug Fixes

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.0

Compare Source

Features

20.3.1 (2026-01-08)

Note: Version bump only for package @​commitlint/cli

v20.3.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.3.0

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.2.0

Compare Source

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.5.3

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.5.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

20.4.4 (2026-03-12)

Note: Version bump only for package @​commitlint/config-conventional

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/config-conventional

20.4.1 (2026-02-02)

Note: Version bump only for package @​commitlint/config-conventional

v20.4.4

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.4.3

Compare Source

Bug Fixes

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.4.1

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.4.0

Compare Source

Features

20.3.1 (2026-01-08)

Note: Version bump only for package @​commitlint/config-conventional

v20.3.1

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.3.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.2.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

adobe/react-spectrum (@​internationalized/date)

v3.12.2

Compare Source

v3.12.1

Compare Source

v3.12.0

Compare Source

v3.11.0

Compare Source

v3.10.1

Compare Source

nuxt/devtools (@​nuxt/devtools)

v3.4.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.3.1

Compare Source

No significant changes

    View changes on GitHub

v3.2.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.2.3

Compare Source

Bug Fixes

v3.2.2

Compare Source

Bug Fixes
Features

v3.2.1

Compare Source

Bug Fixes

v3.2.0

Compare Source

Bug Fixes
  • devtools: call devtools:initialized hook after all modules run (#​919) (3662836)
Features
  • enhance inspect panel, add copy visual info for agents (#​928) (6bb2565)
  • upgrade vite-devtools (5c4a0b0)

3.1.1 (2025-11-25)

Bug Fixes
Features
  • support passing additional permissions to the iframe (#​911) (bc1d11c)
nuxt/image (@​nuxt/image)

v2.1.0

Compare Source

v2.1.0 is the next minor release.

👀 Highlights

Nuxt Image 2.1 ships eight new image providers, a major upgrade to our image processing engine, and a bunch of fixes across existing providers.

🖼️ IPX v4

Under the hood, we've upgraded to IPX v4 which brings significant improvements:

  • Smaller bundles: IPX is now ESM-only with reduced dependency size
  • Stronger SVG security: SVG sanitization now always runs, regardless of optimization settings. This fixes a potential XSS vector where svgo: false would return untouched SVGs. The sanitizer now removes SMIL attribute injection, foreign content (<foreignObject>, <iframe>, etc.), and unsafe URIs across all elements
  • New image modifiers: opacity, brightness, saturation, hue, lightness, autoorient, dilate, erode, clahe, and linear
  • Better error messages: Invalid modifier arguments now return 400 errors with clear messages instead of cryptic 500s
  • Custom URL parsing: IPX now supports custom URL formats via the parseURL option
🌐 New Providers

This release adds support for eight new image optimization services:

🔧 Provider Improvements
  • Directus: Added support for sharp transforms and a key modifier for named presets (#​2207)
  • Sanity: Support for absolute URLs with automatic project/dataset extraction (#​2274), and a configurable baseURL for custom CDN setups (#​2273)
  • AWS Amplify & Vercel: minimumCacheTTL is now configurable (#​2278)
📦 Type Exports

NuxtImgProps and NuxtPictureProps are now exported from the runtime, making it easier to type your own components that wrap <NuxtImg> or <NuxtPicture> (#​2115).

import type { NuxtImgProps, NuxtPictureProps } from '#image'

👉 Changelog

compare changes

🚀 Enhancements
  • deps: migrate to ipx v4 (#​2094)
  • provider: add EdgeOne Pages provider (#​2173)
  • imgproxy: add provider (#​2117)
  • directus: add sharp transforms & key modifier (#​2207)
  • sanity: support absolute URLs with project and dataset extraction (#​2274)
  • awsAmplify,vercel: make minimumCacheTTL configurable (#​2278)
  • sanity: add configurable baseURL option to Sanity provider (#​2273)
  • runtime: export Picture and Image props types (#​2115)
  • umbraco: add image provider (#​2165)
  • flyimg: add Flyimg built-in provider (#​2125)
  • cloudflareimages: add new provider (#​2100)
  • builderio: add Builder.io Image API provider (#​2050)
  • picsum: add Lorem Picsum placeholder image provider (#​2106)
  • supabase: add image provider (#​2027)
🩹 Fixes
  • flyimg: encode all # characters in color values (137ee63)
  • remove duplicated provider key in generated image options (#​2279)
  • nuxt-picture: align preload link type with unhead v3 (#​2254)
  • github: set max size of 460 (7e561f6)
  • umbraco: shallow clone modifiers before modifying (237e480)
  • cloudflare: add baseURL for urls with no operations (#​2162)
  • nuxt-img: set imagesrcset preload when densities are set w/o sizes (#​2176)
  • fastly: handle absolute URLs and merge preexisting query params (#​2140)
  • ipx: merge user-defined runtimeConfig.ipx with defaults (#​2134)
  • directus: add withoutEnlargement modifier type (#​2133)
  • shopify: merge preexisting query params with modifiers (#​2135)
  • reduce max-width breakpoint values by 1px (#​2132)
  • netlifyImageCdn,netlifyLargeMedia: set netlify remote_images config (#​2086)
  • deduplicate formats (#​2038)
  • sanitise custom provider import names (#​2092)
  • guard access from layer.config.image (23b8cef)
  • bunny: merge query params with existing image src (#​2054)
  • do not shadow custom provider types with builtins (#​2016)
  • nuxt-picture: allow data-* in imgAttrs (#​2017)
  • resolve public/ dir in relation to rootDir (3e07761)
📖 Documentation
  • sanity: document baseURL option (6f59ab1)
  • shopify: update NuxtImg syntax to use v-bind for modifiers (#​2277)
  • update list

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "after 2am and before 3am"
  • Automerge
    • "after 1am and before 2am"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from hmbanan666 as a code owner September 18, 2025 02:04
@coderabbitai

coderabbitai Bot commented Sep 18, 2025 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 95b54b6 to de118cd Compare September 19, 2025 17:22
@socket-security

socket-security Bot commented Sep 19, 2025 •
edited
Loading

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @internationalized/date is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: packages/ui/package.json → npm/@internationalized/date@3.12.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@internationalized/date@3.12.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm eslint-plugin-jsdoc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/@antfu/eslint-config@6.7.3 → npm/eslint-plugin-jsdoc@61.7.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/eslint-plugin-jsdoc@61.7.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 16 times, most recently from 104c8c3 to dadc4fd Compare September 24, 2025 18:32
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 21 times, most recently from 2b543f0 to 332a04e Compare October 4, 2025 13:37
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 77fdd25 to e3af819 Compare October 6, 2025 18:46
@sonarqubecloud

sonarqubecloud Bot commented Jan 14, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@socket-security

socket-security Bot commented May 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Added@​tma.js/​sdk-vue@​1.0.23691006794100
Addedru-nalog-fias-gar@​1.0.57210010086100
Added@​commitlint/​cli@​20.5.31001007296100
Added@​types/​pg@​8.20.01001007383100
Added@​iconify-json/​simple-icons@​1.2.921001007696100
Added@​iconify-json/​fluent@​1.2.54961007695100
Addedopenai@​6.49.078100100100100
Added@​vitest/​coverage-v8@​4.1.10991007999100
Addedvitest@​4.1.10981007999100
Added@​iconify-json/​lucide@​1.2.1201001007996100
Addedplaywright@​1.62.01001001009980
Addeddrizzle-cuid2@​2.2.08110010087100
Added@​types/​node@​24.13.31001008195100
Addedpinia@​3.0.4951008191100
Addedbumpp@​10.4.1991008287100
Addeduqr@​0.1.310010010082100
Addedsortablejs@​1.15.710010010082100
Added@​unovis/​vue@​1.6.71001008394100
Added@​pinia/​nuxt@​0.11.31001008683100
Added@​date-fns/​tz@​1.5.010010010085100
Added@​vitest/​browser-playwright@​4.1.101001008599100
Addednuxt-auth-utils@​0.5.299810010086100
Addeddate-fns@​4.4.01001009286100
Addedpg@​8.22.09910010086100
Added@​internationalized/​date@​3.12.2891008697100
Addeddotenv@​17.4.29910010087100
Addedvitest-browser-vue@​2.1.01001009288100
Added@​nuxt/​image@​2.1.0991009289100
Addedioredis@​5.11.19410010090100
Addedvue-tsc@​3.3.81001009197100
Addedarktype@​2.2.310010010092100
Added@​tailwindcss/​typography@​0.5.2010010010092100
Added@​nuxtjs/​i18n@​10.5.0981009397100
See 10 more rows in the dashboard

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hmbanan666 hmbanan666 Awaiting requested review from hmbanan666 hmbanan666 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants