Skip to content

fix(deps): update all dependencies #355

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all dependencies #355

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 24, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@types/node (source) 20.17.19 -> 20.17.32 age adoption passing confidence devDependencies patch
@types/semver (source) 7.5.8 -> 7.7.0 age adoption passing confidence devDependencies minor
actions/create-github-app-token v1.11.5 -> v1.12.0 age adoption passing confidence action minor
actions/setup-node 1d0ff46 -> 49933ea action digest
node (source) 20.18.3 -> 20.19.1 age adoption passing confidence minor
pnpm (source) 9.15.4 -> 9.15.9 age adoption passing confidence packageManager patch
prettier (source) 3.5.1 -> 3.5.3 age adoption passing confidence devDependencies patch
sharp (source, changelog) 0.33.5 -> 0.34.1 age adoption passing confidence dependencies minor
starlight-package-managers (source) 0.10.0 -> 0.11.0 age adoption passing confidence dependencies minor
stefanzweifel/git-auto-commit-action e348103 -> b863ae1 action digest
typescript (source) 5.7.3 -> 5.8.3 age adoption passing confidence dependencies minor
wrangler (source) 3.109.1 -> 3.114.7 age adoption passing confidence devDependencies minor

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v1.12.0

Compare Source

Features

v1.11.7

Compare Source

Bug Fixes

v1.11.6

Compare Source

Bug Fixes
  • deps: bump the production-dependencies group with 2 updates (#​210) (1ff1dea)
nodejs/node (node)

v20.19.1

Compare Source

v20.19.0: 2025-03-13, Version 20.19.0 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
require(esm) is now enabled by default

Support for loading native ES modules using require() had been available on v20.x under the command line flag --experimental-require-module, and available by default on v22.x and v23.x. In this release, it is now no longer behind a flag on v20.x.

This feature has been tested on v23.x and v22.x, and we are looking for user feedback from v20.x to make more final tweaks before fully stabilizing it. When the Node.js instance encounters a native ES module in require() somewhere outside node_modules for the first time, it will emit an experimental warning unless require() comes from a path that contains node_modules. If there happens to be any regressions caused by this feature, users can report it to the Node.js issue tracker. Meanwhile this feature can also be disabled using --no-experimental-require-module as a workaround.

With this feature enabled, Node.js will no longer throw ERR_REQUIRE_ESM if require() is used to load a ES module. It can, however, throw ERR_REQUIRE_ASYNC_MODULE if the ES module being loaded or its dependencies contain top-level await. When the ES module is loaded successfully by require(), the returned object will either be a ES module namespace object similar to what's returned by import(), or what gets exported as "module.exports" in the ES module.

Users can check process.features.require_module to see whether require(esm) is enabled in the current Node.js instance. For packages, the "module-sync" exports condition can be used as a way to detect require(esm) support in the current Node.js instance and allow both require() and import to load the same native ES module. See the documentation for more details about this feature.

Contributed by Joyee Cheung in #​55085

Module syntax detection is now enabled by default

Module syntax detection (the --experimental-detect-module flag) is now
enabled by default. Use --no-experimental-detect-module to disable it if
needed.

Syntax detection attempts to run ambiguous files as CommonJS, and if the module
fails to parse as CommonJS due to ES module syntax, Node.js tries again and runs
the file as an ES module.
Ambiguous files are those with a .js or no extension, where the nearest parent
package.json has no "type" field (either "type": "module" or
"type": "commonjs").
Syntax detection should have no performance impact on CommonJS modules, but it
incurs a slight performance penalty for ES modules; add "type": "module" to
the nearest parent package.json file to eliminate the performance cost.
A use case unlocked by this feature is the ability to use ES module syntax in
extensionless scripts with no nearby package.json.

Thanks to Geoffrey Booth for making this work on #​53619.

Other Notable Changes
  • [285bb4ee14] - crypto: update root certificates to NSS 3.107 (Node.js GitHub Bot) #​56566
  • [73b5c16684] - (SEMVER-MINOR) worker: add postMessageToThread (Paolo Insogna) #​53682
  • [de313b2336] - (SEMVER-MINOR) module: only emit require(esm) warning under --trace-require-module (Joyee Cheung) #​56194
  • [4fba01911d] - (SEMVER-MINOR) process: add process.features.require_module (Joyee Cheung) #​55241
  • [df8a045afe] - (SEMVER-MINOR) module: implement the "module-sync" exports condition (Joyee Cheung) #​54648
  • [f9dc1eaef5] - (SEMVER-MINOR) module: add __esModule to require()'d ESM (Joyee Cheung) #​52166
Commits
pnpm/pnpm (pnpm)

v9.15.9: pnpm 9.15.9

Compare Source

Patch Changes
  • Fix running pnpm CLI from pnpm CLI on Windows when the CLI is bundled to an executable #​8971.
Platinum Sponsors
Bit Bit Syntax
Gold Sponsors
Discord u|screen
JetBrains Nx
CodeRabbit Route4Me
Workleap Stackblitz

v9.15.8: pnpm 9.15.8

Compare Source

Patch Changes
  • pnpm self-update should always update the version in the packageManager field of package.json.
  • The pnpm CLI process should not stay hanging, when --silent reporting is used.
  • When --loglevel is set to error, don't show installation summary, execution time, and big tarball download progress.
  • Don't show info output when --loglevel=error is used.
Platinum Sponsors
Bit Bit Syntax
Gold Sponsors
Discord u|screen
JetBrains Nx
CodeRabbit Route4Me
Workleap Stackblitz

v9.15.7: pnpm 9.15.7

Compare Source

Patch Changes

  • pnpm self-update should not leave a directory with a broken pnpm installation if the installation fails.
  • Allow scope registry CLI option without --config. prefix such as --@​scope:registry=https://scope.example.com/npm #​9089.
  • pnpm self-update should not read the pnpm settings from the package.json file in the current working directory.
  • pnpm update -i should list only packages that have newer versions #​9206.
  • Fix a bug causing entries in the catalogs section of the pnpm-lock.yaml file to be removed when dedupe-peer-dependents=false on a filtered install. #​9112

Platinum Sponsors

config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

cloudflare-workers-and-pages bot commented Feb 24, 2025

Deploying astro-tips with  Cloudflare Pages  Cloudflare Pages

Latest commit: ab4b116
Status:🚫  Build failed.

View logs

@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from d30a416 to 6535d3d Compare February 28, 2025 18:34
@renovate renovate bot changed the title chore(deps): update all dependencies fix(deps): update all dependencies Feb 28, 2025
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 6d2be98 to 5c0d897 Compare March 3, 2025 01:22
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 1947060 to b168cc4 Compare April 12, 2025 18:12
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 90fb8ef to 4eb96fd Compare April 19, 2025 09:45
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 31fe7f8 to 241216b Compare April 28, 2025 12:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants