build(deps): update all non-major dependencies - #33
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
7 times, most recently
from
February 9, 2026 17:57
bcf0861 to
d05b786
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
7 times, most recently
from
February 19, 2026 13:35
8d05175 to
5e909de
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
6 times, most recently
from
February 23, 2026 13:08
dc52fcc to
b9fba5d
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
March 2, 2026 20:57
c0e0576 to
d1af473
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
12 times, most recently
from
March 13, 2026 01:31
e6fc1ba to
ba49a5d
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
9 times, most recently
from
March 19, 2026 21:30
e05c192 to
643d51e
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
8 times, most recently
from
March 27, 2026 00:38
2af9317 to
00b5890
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
9.39.3→9.39.5^0.5.0→^0.6.01.2.2→1.5.10.17.0→0.17.4^0.9.40→^0.11.04.2.1→4.3.320.19.33→20.19.438.56.0→8.66.02.4.6→2.4.1117.3.1→17.4.20.31.9→0.31.105.5.5→5.5.62.8.10→2.10.817.3.0→17.9.030.2.0→30.4.216.2.7→16.4.0^0.575.0→^0.577.03.8.1→3.9.6^0.7.0→^0.8.04.2.1→4.3.329.4.6→29.4.128.56.0→8.66.03.5.28→3.5.414.12.0→4.18.04.3.6→4.4.3Release Notes
eslint/eslint (@eslint/js)
v9.39.5Compare Source
Bug Fixes
253be16fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)Documentation
74930eddocs: switch build to Node.js 24 (#20894) (Milos Djermanovic)eaec8bbdocs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)Chores
458205fchore: update@eslint/eslintrcand@eslint/jsfor v9.39.5 (#21077) (Francesco Trotta)202117bchore: package.json update for @eslint/js release (Jenkins)d9eb6edtest: disable warning forvm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER(#21074) (Francesco Trotta)7b431a7chore: overridere2dependency for@metascraper/helpers(#21068) (Milos Djermanovic)daf7791chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)daee8baci: use pnpm ineslint-flat-config-utilstype integration test (#20829) (Milos Djermanovic)116d4beci: unpin Node.js 25.x in CI (#20619) (Copilot)v9.39.4Compare Source
Bug Fixes
f18f6c8fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)a3c868ffix: update dependency @eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)234d005fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)b1b37eefix: updateajvto6.14.0to address security vulnerabilities (#20538) (루밀LuMir)Documentation
4675152docs: add deprecation notice partial (#20520) (Milos Djermanovic)Chores
b8b4eb1chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)71b2f6bchore: package.json update for @eslint/js release (Jenkins)1d16c2fci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)honojs/middleware (@hono/swagger-ui)
v0.6.1Compare Source
Patch Changes
3ca0fab1f52dcbef755363ca43b94bb654de4babThanks @matzehecht! - do not delete version and baseUrl from the passed swagger ui options refv0.6.0Compare Source
Minor Changes
1844c8bc785b7cacc647d835d1374eb88d314823Thanks @travzhang! - add support for custom CDN base URL in remoteAssetshonojs/middleware (@hono/zod-openapi)
v1.5.1Compare Source
Patch Changes
7bc11dffa7dd5b639c614b12c34bd76722d76354]:v1.5.0Compare Source
Minor Changes
#1878
443a8dc5cd8a6a65daa2bec1f251adfc605b05ceThanks @SAY-5! - feat: inheritdefaultHookfrom parent app on nested routes mounted viaapp.route()Behavior change: if a parent app has a
defaultHookand a mounted sub-app does not declare its own, the sub-app's routes now use the parent'sdefaultHookinstead of the built-in validation response.Patch Changes
#2033
740123c01aadb6c2ed742d1c67c2763a4cdc4f1fThanks @yusukebe! - fix: resolve defaultHook through the ancestor chain on nested routes#2031
bf52ec2f18e32479ec85c00922c8aede68dc8286Thanks @tokiya-takai! - fix(zod-openapi): preserveonError()/notFound()set afterbasePath()OpenAPIHono.basePath()used to rebuild the instance by spreading the plainHonoclone returned bysuper.basePath().That spread copied the clone's arrow-function instance fields (
onError,notFound,request,fetch),which stay bound to the discarded clone — so calling
.onError()(or.notFound()) after.basePath()mutated the throwaway clone instead of the returned app and silently had no effect (the parent's handler ran instead).basePath()now transplants only the routing state onto a properly constructedOpenAPIHono, keeping its own correctly-bound methods. Fixes #2021.v1.4.0Compare Source
Minor Changes
#1881
e90e4fb30877f3e3f4b0588bdb2bbfc337efbf67Thanks @T4ko0522! - fix(zod-openapi): bumppeerDependencies.honoto>=4.10.0to match the runtime requirement coming through@hono/zod-validator.@hono/zod-openapilists@hono/zod-validatoras a direct (non-peer) dependency, so its peer range must be at least as strict as@hono/zod-validator's. After the typed-400 fix bumps@hono/zod-validator'speerDependencies.honoto>=4.10.0, leaving@hono/zod-openapi's peer at>=4.3.6would let consumers install@hono/zod-openapiagainst e.g.hono@4.9.9, where the bundled@hono/zod-validatortypes reference the 4-argumentMiddlewareHandler<E, P, I, R>(introduced in Hono v4.10.0) and fail to compile (TS2707).Patch Changes
e90e4fb30877f3e3f4b0588bdb2bbfc337efbf67]:v1.3.0Compare Source
Minor Changes
#1752
fe0f8e4b44ca8e78d2ed60ed8591f415cd85eaa9Thanks @destroSunRay! - This PR adds two new utilities to improve route definition and registration in@hono/zod-openapi:defineOpenAPIRoute: Provides explicit type safety for route definitionsopenapiRoutes: Enables batch registration of multiple routes with full type safetydefineOpenAPIRoute: Wraps route definitions with explicit types for better IDE support and type checkingopenapiRoutes: Accepts an array of route definitions and registers them all at onceaddRouteflag for conditional registrationSee the updated README for usage examples.
v1.2.4Compare Source
Patch Changes
40ede9c55abe672798deca6970ef60b945382d34Thanks @yusukebe! - fix: publish to JSRv1.2.3Compare Source
Patch Changes
db8fd160d0685cda0d874a5908326c004f72522aThanks @dirkluijk! - fix: bump @asteasolutions/zod-to-openapi to allow nested discriminated unionstursodatabase/libsql-client-ts (@libsql/client)
v0.17.4Compare Source
v0.17.3Compare Source
v0.17.2Compare Source
v0.17.1Compare Source
scalar/scalar (@scalar/hono-api-reference)
v0.11.12v0.11.11Patch Changes
v0.11.10Patch Changes
readmetoscalarReadme: npm treats areadmefield as the readme text itself, so affected packages were published with a literal[object Object]readme on the registry instead of README.md.v0.11.9v0.11.8v0.11.7v0.11.6v0.11.5v0.11.4v0.11.3v0.11.2v0.11.1v0.11.0Minor Changes
#9422: Add a
nonceoption for Content Security Policy support.When you pass a
nonce, the rendered HTML stamps it onto the inline<script>and the CDN<script>tag (and Scalar's own<style>tags, plus a matching<meta property="csp-nonce">). This lets the API Reference run under a strictscript-srcwith nounsafe-inlineand nounsafe-eval.Note:
style-srcstill needs'unsafe-inline'. The reference renders inlinestyle="…"attributes, which a CSP nonce can never authorize (nonces only apply to<script>,<style>and<link>elements), so a nonce-onlystyle-srcis not possible. The win is a fully strictscript-src.v0.10.20v0.10.19v0.10.18v0.10.17v0.10.16v0.10.14v0.10.13v0.10.12v0.10.11v0.10.10v0.10.9Patch Changes
v0.10.8v0.10.7v0.10.6v0.10.5v0.10.4Patch Changes
v0.10.3Patch Changes
Updated Dependencies
v0.10.2Patch Changes
Updated Dependencies
v0.10.1Patch Changes
Updated Dependencies
v0.10.0Minor Changes
Patch Changes
Updated Dependencies
v0.9.48Patch Changes
Updated Dependencies
v0.9.47Patch Changes
Updated Dependencies
v0.9.46Patch Changes
Updated Dependencies
v0.9.45Patch Changes
Updated Dependencies
tailwindlabs/tailwindcss (@tailwindcss/vite)
v4.3.3Compare Source
Fixed
--watch --poll[=ms]in@tailwindcss/cliwhen filesystem events are unreliable or unavailable (#20297)bg-[#fff]andbg-[#FFF]→bg-white) (#20298)iframe:focus-visibleoutline styles (#20292)theme('colors.foo')in JS plugins resolves correctly when both--color-fooand--color-foo-barexist (#20299)shadow-sm/12.5,text-shadow-sm/12.5,drop-shadow-sm/12.5, andinset-shadow-sm/12.5(#20302)[data-foo]divas two selectors instead of one (#20303)@tailwindcss/postcssrebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)@tailwindcss/browserand Tailwind Play (#20124)oklch(#20314)--spacing(0)is optimized to0pxinstead of0so it remains a<length>when used incalc(…)(#20319)@parcel/watcheronly when needed in@tailwindcss/cli --watchmode, so one-off builds and--watch --pollwork when@parcel/watchercan't be loaded (#20325)system-uiandui-sans-serifso CJK text respects the page'slangattribute on Windows (#20318)@tailwindcss/upgradefrom rewriting ignored files when run from a subdirectory (#20329)@sourcerules pointing to nested files are scanned when later@sourcerules point to files in parent folders (#20335)@tailwindcss/vitefrom triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)v4.3.2Compare Source
Fixed
auto-rows-*andauto-cols-*utilities (e.g.auto-rows-12andauto-cols-16) (#20229)@tailwindcss/cliin--watchmode from crashing on Windows when@sourcepoints to a directory that doesn't exist (#20242)@tailwindcss/vitefrom crashing in Deno v2.8.x whencontext.parentURLis not a valid URL (#20245)@tailwindcss/cliin--watchmode rebuilds when the input CSS file changes in an ignored directory (#20246)@variantrules used inaddBase(…)to use custom variants defined later (#20247)@tailwindcss/vitefrom crashing during HMR when scanned files or directories are deleted (#20259)font-sizeinstead ofcolordeclarations fortext-[--spacing(…)](#20260)@sourcepatterns from scanning unrelated sibling files and folders (#20263)%]…[%in.tt,.tt2, and.txfiles (#20269)p.text-black[condition](#20269)@position-tryrules from triggering unknown at-rule warnings when optimizing CSS (#20277)--opacitytheme values (#20287)@tailwindcss/postcsswhen used with newer PostCSS patch releases (#20289)v4.3.1Compare Source
Added
--silentoption to suppress output in@tailwindcss/cli(#20100)Fixed
Module#registerHooksinstead ofModule#registeron Node 26+ (#20028)@applyto be used with CSS mixins (#19427)not-*correctly negates@containerqueries, includingstyle(…)queries (#20059)drop-shadow-*color utilities work with custom shadow values containingcalc(…)(#20080)@tailwindcss/vite(#20103)@tailwindcss/webpackcan be installed in Rspack projects without requiringwebpackas a peer dependency (#20027)calc(…)expressions (e.g.px-[calc(1rem+0px)]→px-[calc(1rem+0)]) (#20127)left-[99999px]→left-[99999px], notleft-24999.75) (#20130)@tailwindcss/cliin--watchmode recovers when a tracked dependency is deleted and restored (#20137)@tailwindcss/clibinaries are ignored when scanning for class candidates (#20139)addClass(…)andremoveClass(…)calls (#20198)@variantto be used insideaddBase(#19480)@sourceglobs with symlinks are preserved (#20203)@sourcerules can re-include files excluded by earlier@source notrules (#20203)@utilityrules (#20205)inset-shadow-noneand other inset shadows work correctly (#20208)@sourcedirectories are scanned even when ignored by git (#20214)@sourceglobs ending in**/*preserve dynamic path segments to avoid scanning too many files (#20217)calc(…)divisions when the result would require high precision (e.g.w-[calc(100%/3.5)]→w-[calc(100%/3.5)], notw-[28.571428571428573%]) (#20221)@tailwindcss/postcss(#20228)Changed
0instead ofcalc(var(--spacing) * 0)for spacing utilities likem-0andleft-0(#20196)var(--spacing)instead ofcalc(var(--spacing) * 1)for spacing utilities likem-1andleft-1(#20196)v4.3.0Compare Source
Added
@container-sizeutility (#18901)scrollbar-{auto,thin,none}utilities forscrollbar-width, andscrollbar-thumb-*/scrollbar-track-*color utilities forscrollbar-color(#19981, #20019)scrollbar-gutter-*utilities (#20018)zoom-*utilities (#20020)tab-*utilities (#20022)@variantwith stacked variants (e.g.@variant hover:focus { … }) (#19996)@variantwith compound variants (e.g.@variant hover, focus { … }) (#19996)--default(…)in--value(…)and--modifier(…)for functional@utilitydefinitions (#19989)Fixed
@pluginresolves package JavaScript entries instead of browser CSS entries when using@tailwindcss/vite(#19949)@importand@pluginpaths resolving from the wrong directory when using@tailwindcss/vite(#19965)@variantare processed by@tailwindcss/vite(#19966)basewhenresult.opts.fromis not provided when using@tailwindcss/postcss(#19980)_whitespace in arbitrary values (#19986)w-[calc(100%---spacing(60))]→w-[calc(100%-(--spacing(60)))]) (#19986)-mt-[20in]→mt-[-20in], notmt-[-1920px]) (#19988):has()variants from[&:has(…)]tohas-[…](#19991)styleattributes (e.g.style="flex-grow: 1"→style="flex-grow: 1", notstyle="grow: 1") (#19918)@utilitydefinitions with the same name but different value types (#19777)PluginWithConfigtype fromtailwindcss/pluginto fix errors when inferring plugin config types (#19707)startandendlegacy utilities without values do not generate CSS (#20003)--value(…)is required in functional@utilitydefinitions (#20005)-left-[(var(--a)+var(--b))]) (#20011)v4.2.4Compare Source
Fixed
@importand@pluginstill resolve correctly when using Vite aliases in@tailwindcss/vite(#19947)v4.2.3Compare Source
Fixed
tracking-*utilities by preferring non-negative utilities (e.g.-tracking-tighter→tracking-wider) (#19827)@tailwindcss/webpack(#19723)px-[1.2rem] py-[1.2rem]→p-[1.2rem]) (#19837)border-{t,b}-*intoborder-y-*,border-{l,r}-*intoborder-x-*, andborder-{t,r,b,l}-*intoborder-*(#19842)scroll-m{t,b}-*intoscroll-my-*,scroll-m{l,r}-*intoscroll-mx-*, andscroll-m{t,r,b,l}-*intoscroll-m-*(#19842)scroll-p{t,b}-*intoscroll-py-*,scroll-p{l,r}-*intoscroll-px-*, andscroll-p{t,r,b,l}-*intoscroll-p-*(#19842)overflow-{x,y}-*intooverflow-*(#19842)overscroll-{x,y}-*intooverscroll-*(#19842)--placeholder-colorinstead of--background-colorforplaceholder-*utilities (#19843)config.contentwhen migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846).envand.env.*to default ignored content files (#19846)overflow-ellipsisintotext-ellipsis(#19849)start-full→inset-s-full,start-auto→inset-s-auto,start-px→inset-s-px, andstart-<number>→inset-s-<number>as well as negative versions (#19849)end-full→inset-e-full,end-auto→inset-e-auto,end-px→inset-e-px, andend-<number>→inset-e-<number>as well as negative versions (#19849)-sign inside the arbitrary value-left-[9rem]→left-[-9rem](#19858)-sign outside the arbitrary valueml-[calc(-1*var(--width))]→-ml-(--width)(#19858)NODE_PATHenvironment variable in standalone CLI (#19617)v4.2.2Compare Source
Fixed
row-constructor(#19725)calc(var(--spacing)*…)expressions into--spacing(…)(#19769)@propertyat-rules (e.g.shadow-sm border) (#19727)@tailwindcss/vite(#19745)@tailwindcss/vite(#19790)w-1234 h-1234→size-1234) (#19809)w-5 h-5 size-5→''instead ofsize-5) (#19812)typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v8.66.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.65.0Compare Source
🚀 Features
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.64.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.63.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.62.1Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.