Skip to content

chore(deps): update all non-major dependencies#167

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#167
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Sep 18, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@antfu/eslint-config ^6.1.0 → ^6.7.3 age confidence pnpm.catalog.dev minor
@commitlint/cli (source) ^20.1.0 → ^20.5.3 age confidence pnpm.catalog.dev minor
@commitlint/config-conventional (source) ^20.0.0 → ^20.5.3 age confidence pnpm.catalog.dev minor
@date-fns/tz ^1.4.1 → ^1.5.0 age confidence pnpm.catalog.integrations minor
@iconify-json/fluent ^1.2.34 → ^1.2.49 age confidence pnpm.catalog.dev patch
@iconify-json/lucide ^1.2.71 → ^1.2.111 age confidence pnpm.catalog.dev patch
@iconify-json/simple-icons ^1.2.56 → ^1.2.86 age confidence pnpm.catalog.dev patch
@internationalized/date (source) ^3.10.0 → ^3.12.2 age confidence pnpm.catalog.integrations minor
@nuxt/devtools (source) ^3.1.1 → ^3.2.4 age confidence pnpm.catalog.dev minor
@nuxt/ui (source) ^4.2.1 → ^4.8.2 age confidence pnpm.catalog.integrations minor
@nuxtjs/i18n (source) ^10.2.1 → ^10.4.0 age confidence pnpm.catalog.dev minor
@openai/agents (source) ^0.2.1 → ^0.11.6 age confidence pnpm.catalog.integrations minor
@paralleldrive/cuid2 2.2.2 → 2.3.1 age confidence pnpm.catalog.integrations minor
@pinia/nuxt (source) ^0.11.2 → ^0.11.3 age confidence pnpm.catalog.integrations patch
@tailwindcss/typography ^0.5.19 → ^0.5.20 age confidence pnpm.catalog.dev patch
@tma.js/sdk-vue (source) ^1.0.8 → ^1.0.19 age confidence pnpm.catalog.integrations patch
@types/node (source) ^24.9.2 → ^24.13.2 age confidence pnpm.catalog.types minor
@types/pg (source) 8.15.5 → 8.20.0 age confidence devDependencies minor
@unovis/ts (source) ^1.6.1 → ^1.6.5 age confidence pnpm.catalog.integrations patch
@unovis/vue (source) ^1.6.1 → ^1.6.5 age confidence pnpm.catalog.integrations patch
@vitest/browser-playwright (source) ^4.0.5 → ^4.1.8 age confidence pnpm.catalog.test minor
@vitest/coverage-v8 (source) ^4.0.5 → ^4.1.8 age confidence pnpm.catalog.test minor
arktype (source) ^2.1.22 → ^2.2.0 age confidence pnpm.catalog.integrations minor
bumpp ^10.3.1 → ^10.4.1 age confidence pnpm.catalog.dev minor
date-fns ^4.1.0 → ^4.4.0 age confidence pnpm.catalog.integrations minor
dotenv ^17.2.3 → ^17.4.2 age confidence pnpm.catalog.dev minor
drizzle-cuid2 2.1.0 → 2.2.0 age confidence dependencies minor
drizzle-kit (source) 0.31.5 → 0.31.10 age confidence devDependencies patch
eslint (source) ^9.39.2 → ^9.39.4 age confidence pnpm.catalog.dev patch
grammy (source) ^1.38.3 → ^1.43.0 age confidence pnpm.catalog.integrations minor
ioredis ^5.8.2 → ^5.11.1 age confidence pnpm.catalog.integrations minor
libphonenumber-js ^1.12.25 → ^1.13.6 age confidence pnpm.catalog.integrations minor
lint-staged ^16.2.7 → ^16.4.0 age confidence pnpm.catalog.dev minor
node (source) >=24.11.0 → >=24.16.0 age confidence engines minor
node 24.11.0-alpine → 24.16.0-alpine age confidence final minor
node 24.11.0-slim → 24.16.0-slim age confidence final minor
nuxt-auth-utils ^0.5.26 → ^0.5.29 age confidence pnpm.catalog.dev patch
openai ^6.7.0 → ^6.42.0 age confidence pnpm.catalog.integrations minor
pg (source) 8.16.3 → 8.21.0 age confidence dependencies minor
pinia (source) ^3.0.3 → ^3.0.4 age confidence pnpm.catalog.integrations patch
playwright (source) ^1.56.1 → ^1.60.0 age confidence pnpm.catalog.test minor
pnpm (source) 10.20.0 → 10.34.2 age confidence packageManager minor
pnpm (source) >=10.20.0 → >=10.34.2 age confidence engines minor
ru-nalog-fias-gar 1.0.4 → 1.0.5 age confidence dependencies patch
sharp (source, changelog) ^0.34.4 → ^0.35.0 age confidence pnpm.catalog.integrations minor
sortablejs ^1.15.6 → ^1.15.7 age confidence pnpm.catalog.integrations patch
uqr 0.1.2 → 0.1.3 age confidence dependencies patch
vitest (source) ^4.0.5 → ^4.1.8 age confidence pnpm.catalog.test minor
vitest-browser-vue ^2.0.1 → ^2.1.0 age confidence pnpm.catalog.test minor
vue-tsc (source) ^3.1.8 → ^3.3.4 age confidence pnpm.catalog.dev minor

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v6.7.3

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v6.7.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v6.7.1

Compare Source

   🐞 Bug Fixes
  • pnpm: Do not set catalogMode when catalogs is not enabled  -  by @​antfu (0471e)
    View changes on GitHub

v6.7.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v6.6.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v6.6.0

Compare Source

   🐞 Bug Fixes
  • pnpm: Enforce catalog usage based on smart detection  -  by @​antfu (654c0)
    View changes on GitHub

v6.5.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v6.5.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v6.4.2

Compare Source

   🐞 Bug Fixes
  • pnpm: Move pnpm-workspace.yaml sorting config from yaml to pnpm  -  by @​antfu (fc2b1)
    View changes on GitHub

v6.4.1

Compare Source

No significant changes

    View changes on GitHub

v6.3.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v6.2.0

Compare Source

   🚀 Features
    View changes on GitHub
conventional-changelog/commitlint (@​commitlint/cli)

v20.5.3

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.5.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.5.0

Compare Source

Bug Fixes

20.4.4 (2026-03-12)

Note: Version bump only for package @​commitlint/cli

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/cli

20.4.1 (2026-02-02)

Note: Version bump only for package @​commitlint/cli

v20.4.4

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.3

Compare Source

Bug Fixes

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.0

Compare Source

Features

20.3.1 (2026-01-08)

Note: Version bump only for package @​commitlint/cli

v20.3.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.3.0

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.2.0

Compare Source

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.5.3

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.5.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

20.4.4 (2026-03-12)

Note: Version bump only for package @​commitlint/config-conventional

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/config-conventional

20.4.1 (2026-02-02)

Note: Version bump only for package @​commitlint/config-conventional

v20.4.4

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.4.3

Compare Source

Bug Fixes

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.4.1

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.4.0

Compare Source

Features

20.3.1 (2026-01-08)

Note: Version bump only for package @​commitlint/config-conventional

v20.3.1

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.3.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.2.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

adobe/react-spectrum (@​internationalized/date)

v3.12.2

Compare Source

v3.12.1

Compare Source

v3.12.0

Compare Source

v3.11.0

Compare Source

v3.10.1

Compare Source

nuxt/devtools (@​nuxt/devtools)

v3.2.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.2.3

Compare Source

Bug Fixes

v3.2.2

Compare Source

Bug Fixes
Features

v3.2.1

Compare Source

Bug Fixes

v3.2.0

Compare Source

Bug Fixes
  • devtools: call devtools:initialized hook after all modules run (#​919) (3662836)
Features
  • enhance inspect panel, add copy visual info for agents (#​928) (6bb2565)
  • upgrade vite-devtools (5c4a0b0)

3.1.1 (2025-11-25)

Bug Fixes
Features
  • support passing additional permissions to the iframe (#​911) (bc1d11c)
nuxt/ui (@​nuxt/ui)

v4.8.2

Compare Source

Bug Fixes
  • Form: support setting the name attribute (#​6539) (f8186e2)
  • InputMenu/SelectMenu: re-highlight first item when items change (#​6538) (0414dd0)
  • InputNumber/InputDate/InputTime/Calendar: restore locale prop (#​6546) (ed2f955)
  • module: merge custom variants into AppConfig type (#​6531) (f0571c3)

v4.8.1

Compare Source

Bug Fixes
  • ContentSearch/DashboardSearch: proxy missing CommandPalette props (#​6505) (631f5dc)
  • Form: add method="post" to prevent credential leaking via GET before hydration (#​6512) (7a0825a)
  • Icon: avoid recursive icon resolution (#​6495) (d50c121)
  • locale: improve Thai translation accuracy and consistency (#​6509) (5d82418)
  • module: expose component theme keys in AppConfig type (#​6520) (ffaf163)
  • module: revert tagPriority to -2 for inline style tag (2dac778)
  • Select/SelectMenu/InputMenu: add fallback for max-height (#​6503) (f4d7cbe)

v4.8.0

Compare Source

⚠ BREAKING CHANGES
  • InputMenu: rename autocomplete prop to mode to free up HTML attribute (#​6474)
Features
  • Avatar/AvatarGroup: add color prop (#​6405) (6f2396f)
  • Breadcrumb: add color prop (#​6406) (955dac1)
  • ChatMessage: add body slot and improve actions alignment (#​6460) (48685b6)
  • ChatMessage: add color prop and header slot (#​6407) (c6ce8ca)
  • ChatPrompt: add submitOnEnter prop to control Enter behavior (b597f90), closes #​6177
  • Checkbox/RadioGroup/Switch: add highlight prop for error ring styling (a0deee4)
  • CommandPalette: search and highlight description field (524c34d)
  • ContentSearch/DashboardSearch: enable Fuse.js token search by default (ba08220)
  • ContentSearch: add async search support via useSearchCollection (#​6432) (a1bef8b)
  • DashboardGroup: add storageOptions prop (8f0101b), closes #​6170
  • Error: add icon prop and leading slot (e6ea707), closes #​6119
  • Separator: add position prop (#​6415) (844660a)
  • Theme: override component prop defaults (#​6031) (71c008e)
Bug Fixes
  • ChatMessage: add wrap-break-word to content slot (#​6476) (eb468e6)
  • CommandPalette: only split tokens in highlight when useTokenSearch is enabled (898fbce)
  • CommandPalette: preserve relative order of ignoreFilter groups (e4c1787)
  • CommandPalette: re-highlight first item after debounced results render (efd7b8e)
  • CommandPalette: update default fuse keys in docs and search components (0d9cc0d)
  • components: apply theme.prefix to hardcoded utility classes (f51b1e8)
  • components: constrain popper content to available viewport height (007b136), closes #​6449
  • ContentSearch: preserve intermediate ancestors in breadcrumb prefix (#​6466) (f639b19)
  • ContentToc: apply ui.trigger prop to trigger elements (252b906), closes #​6428
  • defineShortcuts: use e.code for alt shortcuts to handle macOS key remapping (231f156), closes #​6444
  • FileUpload: pass disabled attribute to button variant (2890c83), closes #​6420
  • Form: improve errors type (#​6208) (c1090ab)
  • InputMenu/Select/SelectMenu: respect trailing: false over default trailingIcon (#​6457) (65b47ce)
  • InputMenu: rename autocomplete prop to mode to free up HTML attribute (#​6474) (2799fa6)
  • module: don't require @nuxtjs/mdc when using content option (89f7778)
  • module: pass computed ref directly to useHead innerHTML (00b7476)
  • module: ship stripped [#build](https://redirect.github.com/nuxt/ui/issues/build)/ui.css fallback for tooling (083c2a9), closes #​5504
  • ProseKbd: add default slot and make value optional (f317c7f)
  • Textarea: autoresize on mount with pre-filled value (e96a0b6), closes

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "after 2am and before 3am"
  • Automerge
    • "after 1am and before 2am"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from hmbanan666 as a code owner September 18, 2025 02:04
@coderabbitai

coderabbitai Bot commented Sep 18, 2025 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 95b54b6 to de118cd Compare September 19, 2025 17:22
@socket-security

socket-security Bot commented Sep 19, 2025 •
edited
Loading

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @internationalized/date is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: packages/ui/package.json → npm/@internationalized/date@3.12.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@internationalized/date@3.12.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @openai/agents-realtime is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/@openai/agents@0.11.6 → npm/@openai/agents-realtime@0.11.6

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@openai/agents-realtime@0.11.6. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @typescript-eslint/eslint-plugin is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/@antfu/eslint-config@6.7.3 → npm/@typescript-eslint/eslint-plugin@8.61.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript-eslint/eslint-plugin@8.61.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 16 times, most recently from 104c8c3 to dadc4fd Compare September 24, 2025 18:32
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 21 times, most recently from 2b543f0 to 332a04e Compare October 4, 2025 13:37
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 77fdd25 to e3af819 Compare October 6, 2025 18:46
@sonarqubecloud

sonarqubecloud Bot commented Jan 14, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@socket-security

socket-security Bot commented May 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Added@​tma.js/​sdk-vue@​1.0.19691006795100
Added@​commitlint/​cli@​20.5.31001007396100
Added@​types/​pg@​8.20.01001007383100
Added@​iconify-json/​simple-icons@​1.2.861001007796100
Added@​iconify-json/​fluent@​1.2.49961007795100
Added@​vitest/​coverage-v8@​4.1.8991007998100
Added@​iconify-json/​lucide@​1.2.1111001007995100
Addedbumpp@​10.4.1991008287100
Added@​unovis/​vue@​1.6.51001008395100
Added@​pinia/​nuxt@​0.11.31001008683100
Addedarktype@​2.2.010010010085100
Added@​vitest/​browser-playwright@​4.1.81001008698100
Added@​internationalized/​date@​3.12.2891008796100
Added@​date-fns/​tz@​1.5.010010010087100
Added@​nuxtjs/​i18n@​10.4.0981009296100
Added@​antfu/​eslint-config@​6.7.39610010094100
Added@​unovis/​ts@​1.6.5971009598100
Added@​commitlint/​config-conventional@​20.5.310010010095100
Added@​nuxt/​devtools@​3.2.49810010096100
Added@​tailwindcss/​typography@​0.5.2010010010096100
Added@​nuxt/​ui@​4.8.29710010099100
Added@​openai/​agents@​0.11.610010010099100
Added@​types/​node@​24.13.2100100100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hmbanan666 hmbanan666 Awaiting requested review from hmbanan666 hmbanan666 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants