Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 1, 2025

This PR contains the following updates:

Package Change Age Confidence
@eslint/js (source) ^9.39.1^9.39.2 age confidence
@types/node (source) ^22.19.0^22.19.3 age confidence
cookie@<0.7.0 >=1.0.2>=1.1.1 age confidence
eslint (source) ^9.39.1^9.39.2 age confidence
execa ^9.6.0^9.6.1 age confidence
lint-staged ^16.2.6^16.2.7 age confidence
pnpm (source) 10.20.010.27.0 age confidence
pnpm (source) ^10.20.0^10.27.0 age confidence
rimraf ^6.1.0^6.1.2 age confidence
tsx (source) ^4.20.6^4.21.0 age confidence
typescript-eslint (source) ^8.46.3^8.52.0 age confidence
verdaccio (source) ^6.2.1^6.2.4 age confidence
yaml (source) ^2.8.1^2.8.2 age confidence

Release Notes

eslint/eslint (@​eslint/js)

v9.39.2

Compare Source

jshttp/cookie (cookie@<0.7.0)

v1.1.1

Compare Source

Fixed

  • Overwrite value in passed in options (#​253) c66147c
    • When value was provided in serialize(key, value, { value }) the value in options was used instead of the value passed as an argument

v1.1.0

Compare Source

eslint/eslint (eslint)

v9.39.2

Compare Source

sindresorhus/execa (execa)

v9.6.1

Compare Source


lint-staged/lint-staged (lint-staged)

v16.2.7

Compare Source

Patch Changes
  • #​1711 ef74c8d Thanks @​iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.
pnpm/pnpm (pnpm)

v10.27.0

Compare Source

v10.26.2: pnpm 10.26.2

Compare Source

Patch Changes

  • Improve error message when a package version exists but does not meet the minimumReleaseAge constraint. The error now clearly states that the version exists and shows a human-readable time since release (e.g., "released 6 hours ago") #​10307.

  • Fix installation of Git dependencies using annotated tags #​10335.

    Previously, pnpm would store the annotated tag object's SHA in the lockfile instead of the actual commit SHA. This caused ERR_PNPM_GIT_CHECKOUT_FAILED errors because the checked-out commit hash didn't match the stored tag object hash.

  • Binaries of runtime engines (Node.js, Deno, Bun) are written to node_modules/.bin before lifecycle scripts (install, postinstall, prepare) are executed #​10244.

  • Try to avoid making network calls with preferOffline #​10334.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.26.1: pnpm 10.26.1

Compare Source

Patch Changes

  • Don't fail on pnpm add, when blockExoticSubdeps is set to true #​10324.
  • Always resolve git references to full commits and ensure HEAD points to the commit after checkout #​10310.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.26.0

Compare Source

v10.25.0

Compare Source

v10.24.0

Compare Source

v10.23.0: pnpm 10.23

Compare Source

Minor Changes

  • Added --lockfile-only option to pnpm list #​10020.

Patch Changes

  • pnpm self-update should download pnpm from the configured npm registry #​10205.
  • pnpm self-update should always install the non-executable pnpm package (pnpm in the registry) and never the @pnpm/exe package, when installing v11 or newer. We currently cannot ship @pnpm/exe as pkg doesn't work with ESM #​10190.
  • Node.js runtime is not added to "dependencies" on pnpm add, if there's a engines.runtime setting declared in package.json #​10209.
  • The installation should fail if an optional dependency cannot be installed due to a trust policy check failure #​10208.
  • pnpm list and pnpm why now display npm: protocol for aliased packages (e.g., foo npm:[email protected]) #​8660.
  • Don't add an extra slash to the Node.js mirror URL #​10204.
  • pnpm store prune should not fail if the store contains Node.js packages #​10131.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.22.0: pnpm 10.22

Compare Source

Minor Changes

  • Added support for trustPolicyExclude #​10164.

    You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:

    trustPolicy: no-downgrade
    trustPolicyExclude:
      - [email protected]
      - [email protected] || 5.102.1
  • Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

  • Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #​10179.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.21.0

Compare Source

isaacs/rimraf (rimraf)

v6.1.2

Compare Source

v6.1.1

Compare Source

privatenumber/tsx (tsx)

v4.21.0

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.52.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.51.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.50.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.50.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.49.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.48.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.48.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.47.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.46.4

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

verdaccio/verdaccio (verdaccio)

v6.2.4

Compare Source

What's Changed

VERDACCIO_ADDRESS Environment Variable for Docker

You can now set the VERDACCIO_ADDRESS environment variable to control Verdaccio’s network bind address.

  • Choose IPv4 (0.0.0.0), IPv6 ([::]), or a specific interface.
  • Improves compatibility for dual-stack and custom environments.

Example:

docker run -e VERDACCIO_ADDRESS=0.0.0.0 ...
docker run -e VERDACCIO_ADDRESS='[::]' ...

More info at : https://verdaccio.org/docs/env/

Full Changelog: verdaccio/verdaccio@v6.2.3...v6.2.4

v6.2.3

Compare Source

What's Changed

Full Changelog: verdaccio/verdaccio@v6.2.2...v6.2.3

v6.2.2

Compare Source

What's Changed

Full Changelog: verdaccio/verdaccio@v6.2.1...v6.2.2

eemeli/yaml (yaml)

v2.8.2

Compare Source


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Dec 1, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from b313163 to c5ebfb7 Compare December 9, 2025 02:55
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from c6dbc0a to 67dbd6e Compare December 19, 2025 01:33
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from fec7e18 to 41d779e Compare December 23, 2025 16:47
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 641372d to 8b17223 Compare December 30, 2025 22:13
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 8b17223 to 74b05fe Compare January 5, 2026 21:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant