chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	^24.12.2 → ^24.12.4
pnpm (source)	10.33.3 → 10.33.4
semver	^7.7.4 → ^7.8.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

pnpm/pnpm (pnpm)

v10.33.4: pnpm 10.33.4

Compare Source

Patch Changes

• Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.

  A new gitHosted: true field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.

• Fix a regression where pnpm --recursive --filter '!<pkg>' run/exec/test/add would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative --filter arguments are provided, matching the documented behavior. To include the root, pass --include-workspace-root #​11341.

Platinum Sponsors

Gold Sponsors

npm/node-semver (semver)

v7.8.0

Compare Source

Features

• 0d0a0a2 #​855 Add truncate function (#​855) (@​pjohnmeyer, @​owlstronaut)

Bug Fixes

• 3905343 #​859 Warn when defaulting to --inc=patch in CLI (@​pjohnmeyer)

Documentation

• c368af6 #​853 fix typos in documentation (#​853) (@​ankitkumar572005)
• 37776c3 #​846 fix BNF grammar to distinguish prerelease from build identifiers (#​846) (@​abhu85, @​claude)

Chores

• 9542e09 #​860 template-oss-apply (@​owlstronaut)
• 937bc2c #​860 template-oss-apply@5.0.0 (@​owlstronaut)
• 6946fef #​852 bump @​npmcli/template-oss from 4.29.0 to 4.30.0 (#​852) (@​dependabot[bot], @​npm-cli-bot)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Size Report

Bundles

File	Size	Gzip	Brotli
runtime-dom.global.prod.js	106 kB	40 kB	36 kB
vue.global.prod.js	164 kB	60 kB	53.4 kB

Usages

Name	Size	Gzip	Brotli
createApp (CAPI only)	48.7 kB	18.9 kB	17.3 kB
createApp	56.8 kB	22 kB	20.1 kB
createSSRApp	61.1 kB	23.7 kB	21.6 kB
defineCustomElement	63 kB	23.9 kB	21.8 kB
overall	71.6 kB	27.4 kB	25 kB

[pkg-pr-new]

Open in StackBlitz

@vue/compiler-core

pnpm add https://pkg.pr.new/@vue/compiler-core@14796

npm i https://pkg.pr.new/@vue/compiler-core@14796

yarn add https://pkg.pr.new/@vue/compiler-core@14796.tgz

@vue/compiler-dom

pnpm add https://pkg.pr.new/@vue/compiler-dom@14796

npm i https://pkg.pr.new/@vue/compiler-dom@14796

yarn add https://pkg.pr.new/@vue/compiler-dom@14796.tgz

@vue/compiler-sfc

pnpm add https://pkg.pr.new/@vue/compiler-sfc@14796

npm i https://pkg.pr.new/@vue/compiler-sfc@14796

yarn add https://pkg.pr.new/@vue/compiler-sfc@14796.tgz

@vue/compiler-ssr

pnpm add https://pkg.pr.new/@vue/compiler-ssr@14796

npm i https://pkg.pr.new/@vue/compiler-ssr@14796

yarn add https://pkg.pr.new/@vue/compiler-ssr@14796.tgz

@vue/reactivity

pnpm add https://pkg.pr.new/@vue/reactivity@14796

npm i https://pkg.pr.new/@vue/reactivity@14796

yarn add https://pkg.pr.new/@vue/reactivity@14796.tgz

@vue/runtime-core

pnpm add https://pkg.pr.new/@vue/runtime-core@14796

npm i https://pkg.pr.new/@vue/runtime-core@14796

yarn add https://pkg.pr.new/@vue/runtime-core@14796.tgz

@vue/runtime-dom

pnpm add https://pkg.pr.new/@vue/runtime-dom@14796

npm i https://pkg.pr.new/@vue/runtime-dom@14796

yarn add https://pkg.pr.new/@vue/runtime-dom@14796.tgz

@vue/server-renderer

pnpm add https://pkg.pr.new/@vue/server-renderer@14796

npm i https://pkg.pr.new/@vue/server-renderer@14796

yarn add https://pkg.pr.new/@vue/server-renderer@14796.tgz

@vue/shared

pnpm add https://pkg.pr.new/@vue/shared@14796

npm i https://pkg.pr.new/@vue/shared@14796

yarn add https://pkg.pr.new/@vue/shared@14796.tgz

vue

pnpm add https://pkg.pr.new/vue@14796

npm i https://pkg.pr.new/vue@14796

yarn add https://pkg.pr.new/vue@14796.tgz

@vue/compat

pnpm add https://pkg.pr.new/@vue/compat@14796

npm i https://pkg.pr.new/@vue/compat@14796

yarn add https://pkg.pr.new/@vue/compat@14796.tgz

commit: 3439c01

[github-actions]

Size Report

Bundles

File	Size	Gzip	Brotli
runtime-dom.global.prod.js	106 kB	40 kB	36 kB
vue.global.prod.js	164 kB	60 kB	53.4 kB

Usages

Name	Size	Gzip	Brotli
createApp (CAPI only)	48.7 kB	18.9 kB	17.3 kB
createApp	56.8 kB	22 kB	20.1 kB
createSSRApp	61.1 kB	23.7 kB	21.6 kB
defineCustomElement	63 kB	23.9 kB	21.8 kB
overall	71.6 kB	27.4 kB	25 kB