chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #3010 · npmx-dev/npmx.dev

renovate · 2026-07-05T23:08:32Z

ℹ️ Note
This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@iconify-json/lucide	`1.2.101` → `1.2.116`	dependencies	patch
@iconify-json/simple-icons	`1.2.76` → `1.2.89`	dependencies	patch
@iconify-json/vscode-icons	`1.2.45` → `1.2.64`	dependencies	patch
@intlify/core-base (source)	`11.3.0` → `11.4.6`	devDependencies	minor
@intlify/shared (source)	`11.3.0` → `11.4.6`	dependencies	minor
@napi-rs/canvas	`1.0.0` → `1.0.2`	dependencies	patch
@nuxt/scripts (source)	`1.0.1` → `1.3.0`	dependencies	minor
@nuxt/ui (source)	`4.6.1` → `4.9.0`	dependencies	minor
@nuxtjs/color-mode	`4.0.0` → `4.0.1`	dependencies	patch
@nuxtjs/i18n (source)	`10.2.4` → `10.4.0`	dependencies	minor
@nuxtjs/mdc	`0.21.1` → `0.22.1`	dependencies	minor
@shikijs/langs (source)	`4.0.2` → `4.3.1`	dependencies	minor
@shikijs/markdown-exit (source)	`4.0.2` → `4.3.1`	dependencies	minor
@shikijs/themes (source)	`4.0.2` → `4.3.1`	dependencies	minor
@storybook/addon-a11y (source)	`10.3.5` → `10.4.6`	pnpm.catalog.storybook	minor
@storybook/addon-docs (source)	`10.3.5` → `10.4.6`	pnpm.catalog.storybook	minor
@storybook/addon-themes (source)	`10.3.5` → `10.4.6`	pnpm.catalog.storybook	minor
@takumi-rs/core (source)	`1.0.9` → `1.8.7`	dependencies	minor
@takumi-rs/wasm	`1.0.9` → `1.8.7`	dependencies	minor
@types/node (source)	`24.12.0` → `24.13.2`	pnpm-workspace.overrides	minor
@types/node (source)	`24.12.2` → `24.13.2`	devDependencies	minor
@unocss/nuxt (source)	`66.6.7` → `66.7.4`	dependencies	minor
@unocss/preset-wind4 (source)	`66.6.7` → `66.7.4`	dependencies	minor
@upstash/redis (source)	`1.37.0` → `1.38.0`	dependencies	minor
@vue/test-utils	`2.4.6` → `2.4.11`	devDependencies	patch
@vueuse/integrations (source)	`14.2.1` → `14.3.0`	dependencies	minor
@vueuse/nuxt (source)	`14.2.1` → `14.3.0`	dependencies	minor
@vueuse/router (source)	`14.2.1` → `14.3.0`	dependencies	minor
@vueuse/shared (source)	`14.2.1` → `14.3.0`	dependencies	minor
actions/stale	`v10.2.0` → `v10.3.0`	action	minor
algoliasearch (source)	`5.50.1` → `5.55.1`	dependencies	minor
autofix-ci/action	`v1.3.2` → `v1.3.4`	action	patch
axe-core (source)	`4.11.2` → `4.12.1`	devDependencies	minor
better-sqlite3	`12.8.0` → `12.11.1`	dependencies	minor
defu	`6.1.6` → `6.1.7`	dependencies	patch
devalue	`5.6.4` → `5.8.1`	devDependencies	minor
docus	`5.9.0` → `5.12.3`	dependencies	minor
e18e/action-dependency-diff	`v1.5.0` → `v1.6.1`	action	minor
fast-check (source)	`4.6.0` → `4.8.0`	devDependencies	minor
focus-trap	`8.0.0` → `8.2.2`	dependencies	minor
h3-next (source)	`2.0.1-rc.16` → `2.0.1-rc.22`	devDependencies	patch
ipaddr.js	`2.3.0` → `2.4.0`	dependencies	minor
knip (source)	`6.15.0` → `6.24.0`	devDependencies	minor
marked (source)	`18.0.0` → `18.0.5`	dependencies	patch
msw (source)	`2.13.3` → `2.14.6`	pnpm.catalog.msw	minor
nuxt-og-image (source)	`6.6.0` → `6.7.2`	dependencies	minor
pnpm (source)	`11.1.1` → `11.10.0`	packageManager	minor
sanitize-html (source)	`2.17.2` → `2.17.5`	dependencies	patch
semver	`7.7.4` → `7.8.5`	dependencies	minor
sharp (source, changelog)	`0.34.5` → `0.35.3`	pnpm-workspace.overrides	minor
shiki (source)	`4.0.2` → `4.3.1`	dependencies	minor
simple-git (source)	`3.33.0` → `3.36.0`	dependencies	minor
std-env	`4.0.0` → `4.1.0`	dependencies	minor
storybook (source)	`10.3.5` → `10.4.6`	pnpm.catalog.storybook	minor
tailwindcss (source)	`4.2.2` → `4.3.2`	dependencies	minor
typescript (source)	`6.0.2` → `6.0.3`	devDependencies	patch
ufo	`1.6.3` → `1.6.4`	dependencies	patch
unocss (source)	`66.6.7` → `66.7.4`	dependencies	minor
valibot (source)	`1.3.1` → `1.4.2`	dependencies	minor
virtua	`0.49.0` → `0.49.2`	dependencies	patch
voidzero-dev/setup-vp	`v1.12.0` → `v1.15.0`	action	minor
vue-router (source)	`5.0.4` → `5.1.0`	pnpm-workspace.overrides	minor
vue-router (source)	`5.0.4` → `5.1.0`	dependencies	minor
vue-tsc (source)	`3.2.6` → `3.3.6`	devDependencies	minor
zizmorcore/zizmor-action	`v0.5.3` → `v0.5.7`	action	patch

Release Notes

bluesky-social/atproto (@atproto/oauth-client-node)

`v0.4.5`

Compare Source

Patch Changes

#5099 b43ec31 Thanks @matthieusieben! - Update TypeScript build to rely on references to composite internal projects
#5099 b43ec31 Thanks @matthieusieben! - Bundle only necessary files in the NPM tarball, including the CHANGELOG.md and README.md files (if present).
#5099 b43ec31 Thanks @matthieusieben! - Build with noImplicitAny enabled
Updated dependencies [b43ec31, b43ec31, b43ec31]:
- @atproto-labs/handle-resolver-node@0.2.4
- @atproto-labs/did-resolver@0.3.4
- @atproto-labs/simple-store@0.4.3
- @atproto/jwk-webcrypto@0.3.3
- @atproto/oauth-client@0.7.7
- @atproto/oauth-types@0.7.4
- @atproto/jwk-jose@0.2.3
- @atproto/jwk@0.7.3
- @atproto/did@0.5.3

`v0.4.4`

Compare Source

Patch Changes

Updated dependencies [8bcba69]:
- @atproto/oauth-client@0.7.6

Minor Changes

#4929 f01c59f Thanks @devinivy! - BREAKING: Drop support for Node.js 18 and 20. Node.js 22 is now the minimum supported version. Docker images now use Node.js 24.
#4943 c459153 Thanks @devinivy! - BREAKING: Convert to pure ESM. All packages now ship "type": "module" with ES module output and Node16 module resolution.
Node.js 22's require() compatibility layer can still load these packages in CommonJS code.
#4930 908bece Thanks @devinivy! - Build with TypeScript 6.0.

Patch Changes

Updated dependencies [f01c59f, c459153, affb50c, 908bece]:
- @atproto/did@0.4.0
- @atproto/jwk@0.7.0
- @atproto/jwk-jose@0.2.0
- @atproto/jwk-webcrypto@0.3.0
- @atproto/oauth-client@0.7.0
- @atproto/oauth-types@0.7.0
- @atproto-labs/did-resolver@0.3.0
- @atproto-labs/handle-resolver-node@0.2.0
- @atproto-labs/simple-store@0.4.0

`v0.3.17`

Compare Source

Patch Changes

Updated dependencies [a23d132, a23d132, a23d132, a23d132]:
- @atproto/oauth-client@0.6.0

`v0.3.16`

Compare Source

Patch Changes

Updated dependencies [d54d707, d54d707]:
- @atproto/did@0.3.0
- @atproto-labs/did-resolver@0.2.6
- @atproto-labs/handle-resolver-node@0.1.25
- @atproto/oauth-client@0.5.14
- @atproto/oauth-types@0.6.2

intlify/vue-i18n (@intlify/core-base)

`v11.4.6`

Compare Source

Full Changelog: intlify/vue-i18n@v11.4.5...v11.4.6

`v11.4.5`

Compare Source

What's Changed

⚡ Improvement Features

fix(core-base): respect part option when format key is omitted in number/datetime by @kazupon in #2522

Full Changelog: intlify/vue-i18n@v11.4.4...v11.4.5

`v11.4.4`

Compare Source

What's Changed

⚡ Improvement Features

fix(security): harden javascript URL sanitization by @kazupon in #2503

Full Changelog: intlify/vue-i18n@v11.4.3...v11.4.4

`v11.4.3`

Compare Source

What's Changed

💥 Breaking Changes

chore!: drop Node.js 20 support by @kazupon in #2478

🔒 Security Fixes

security(ci): harden workflows and add zizmor audit by @kazupon in #2490

Full Changelog: intlify/vue-i18n@v11.4.2...v11.4.3

`v11.4.2`

Compare Source

What's Changed

⚡ Improvement Features

fix(formatter): pass component children as slots by @kazupon in #2474

Full Changelog: intlify/vue-i18n@v11.4.1...v11.4.2

`v11.4.1`

Compare Source

What's Changed

⚡ Improvement Features

fix(i18n-t): pass component children as slots by @kazupon in #2473

Full Changelog: intlify/vue-i18n@v11.4.0...v11.4.1

`v11.4.0`

Compare Source

What's Changed

🌟 Features

feat: support isolated scope by @kazupon in #2468

Full Changelog: intlify/vue-i18n@v11.3.2...v11.4.0

`v11.3.2`

Compare Source

What's Changed

🐛 Bug Fixes

fix(core): avoid register* functions tree-shaking for intlify/core by @kazupon in #2464

⚡ Improvement Features

perf(core-base): avoid translation timeline measurement without devtools by @kazupon in #2465

Full Changelog: intlify/vue-i18n@v11.3.1...v11.3.2

`v11.3.1`

Compare Source

What's Changed

🐛 Bug Fixes

fix: linked messages fail to resolve keys containing dots by @kazupon in #2460
fix: $n overloads use DefineNumberFormat instead of DefineDateTimeFormat by @kazupon in #2461

Full Changelog: intlify/vue-i18n@v11.3.0...v11.3.1

Brooooooklyn/canvas (@napi-rs/canvas)

`v1.0.2`

Compare Source

Features

chrome/m149 (#1281) (3fe9b54)

`v1.0.1`

Compare Source

Bug Fixes

link aarch64-pc-windows-msvc against static CRT (#1276) (8483662)
missing icudtl.dat in win32-arm64 package (#1278) (e1a75d1)

nuxt/scripts (@nuxt/scripts)

`v1.3.0`

Compare Source

🚀 Features

proxy: Support path aliases to hide third-party hostnames - by @harlan-zw in #821 (899b1)

🐞 Bug Fixes

runtime: Avoid server-side script use callbacks - by @harlan-zw in #820 (a2896)

View changes on GitHub

`v1.2.1`

Compare Source

🐞 Bug Fixes

Provide SpeedCurve snippet fallback - by @sjh9714 in #811 (c1322)

View changes on GitHub

`v1.2.0`

Compare Source

🚀 Features

SpeedCurve LUX - by @zizzfizzix and @harlan-zw in #782 (82696)
globals: Runtime disable + scripts:globals hook - by @harlan-zw in #808 (62b04)

🐞 Bug Fixes

deps: Add support for unhead v3 - by @danielroe and @harlan-zw in #795 (fefd9)
google-maps: Deprecate heatmap component - by @harlan-zw in #809 (c92ac)
google-maps,gravatar: A11y misc fixes - by @harlan-zw in #802 (bb42b)
instagram-embed: Use facebookexternalhit UA & don't cache empty shells - by @harlan-zw in #806 (87b13)
proxy: Strip hop-by-hop request headers (RFC 7230) - by @harlan-zw in #804 (da57b)
speedcurve: Vendor LUX snippet and group schema options - by @harlan-zw in #805 (ac0ad)
stripe: Allow selecting Stripe.js SDK version - by @harlan-zw in #799 (ae8d2)
vimeo: A11y keyboard and video placeholder alt text - by @harlan-zw in #803 (33a11)
youtube-player: A11y keyboard-accessible - by @harlan-zw in #798 (8b4e9)

View changes on GitHub

`v1.1.1`

Compare Source

🐞 Bug Fixes

security:
- Allow opting out of proxy page token in SSR payload - by @harlan-zw in #789 (4738a)
- Allow disabling proxy signing with security: false - by @harlan-zw in #790 (dc11a)
tiktok-pixel:
- Use TikTok's array snippet protocol - by @harlan-zw in #786 (f46cc)

View changes on GitHub

`v1.1.0`

Compare Source

🚀 Features

LinkedIn Insight Tag - by @zizzfizzix in #741 (fb922)
Ahrefs Web Analytics - by @harlan-zw in #751 (ceb4b)
Usercentrics CMP - by @harlan-zw in #749 (d2114)
Calendly - by @harlan-zw in #750 (e8524)
Build-time debug flag with script-lifecycle tracing - by @harlan-zw in #760 (f6c25)
Warn on misconfigured NUXT_PUBLIC_SCRIPTS_* env vars - by @harlan-zw in #778 (05d32)
Env-var overrides for scripts.globals (single-build, multi-deploy) - by @harlan-zw in #780 (88869)
gtm,ga: Consent.default() + strict GCMv2 validation - by @harlan-zw in #772 (6f74a)
tiktokPixel: Production hardening - region, CAPI dedup, advanced matching - by @harlan-zw in #776 (c5b69)

🐞 Bug Fixes

Add --pnpm flag to pkg-pr-new publish command in nightly workflow - by @DamianGlowala and Damian Głowala in #755 (53810)
Validate required registry fields after runtime merge - by @tsukiyama-3 and @harlan-zw in #762 (61293)
assets:
- Set js content-type on dev bundled asset handler - by @harlan-zw in #748 (6ddc9)
google-maps:
- Avoid recentering on inline options - by @harlan-zw in [#747](https://redirect.github.com/nuxt/scripts/i

✂ Note
PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-07-05T23:08:35Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 3 workspace projects
? Verifying lockfile against supply-chain policies (2309 entries)...
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 57, reused 0, downloaded 2, added 0
Progress: resolved 94, reused 0, downloaded 2, added 0
Progress: resolved 105, reused 0, downloaded 2, added 0
Progress: resolved 107, reused 0, downloaded 2, added 0
Progress: resolved 108, reused 0, downloaded 2, added 0
Progress: resolved 110, reused 0, downloaded 2, added 0
Progress: resolved 112, reused 0, downloaded 2, added 0
Progress: resolved 113, reused 0, downloaded 2, added 0
Progress: resolved 114, reused 0, downloaded 2, added 0
[WARN] Request took 10640ms: https://registry.npmjs.org/chromatic
[WARN] Request took 10363ms: https://registry.npmjs.org/hls.js
Progress: resolved 116, reused 0, downloaded 2, added 0
Progress: resolved 233, reused 0, downloaded 6, added 0
Progress: resolved 406, reused 0, downloaded 6, added 0
Progress: resolved 549, reused 0, downloaded 6, added 0
✗ Lockfile failed supply-chain policy check (2309 entries in 15s)
[ERR_PNPM_LOCKFILE_RESOLUTION_VERIFICATION] 3 lockfile entries failed verification:
@lunariajs/core@0.1.1 [MISSING_TARBALL_INTEGRITY] has no "integrity" field, so its downloaded tarball cannot be verified
@storybook-vue/nuxt@9.0.1 [MISSING_TARBALL_INTEGRITY] has no "integrity" field, so its downloaded tarball cannot be verified
vue-data-ui@3.22.6 [MINIMUM_RELEASE_AGE_VIOLATION] was published at 2026-07-05T07:52:07.000Z, within the minimumReleaseAge cutoff (2026-07-04T23:07:58.600Z)
The lockfile contains entries that the active policies reject. This can mean the lockfile is stale, or that someone committed a lockfile that bypassed the policy locally — inspect recent changes to pnpm-lock.yaml before trusting it. If the changes look expected, run "pnpm clean --lockfile" and then "pnpm install" to rebuild from a fresh resolution. Alternatively, relax the policy that flagged them.

vercel · 2026-07-05T23:08:36Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs.npmx.dev	Ready	Preview, Comment	Jul 5, 2026 11:48pm
npmx.dev	Ready	Preview, Comment	Jul 5, 2026 11:48pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
npmx-lunaria	Ignored		Jul 5, 2026 11:48pm

github-actions · 2026-07-05T23:09:10Z

e18e dependency analysis

No dependency warnings found.

codecov · 2026-07-05T23:09:18Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

downgrade the iconify packages by one as they're too new, don't update the @atproto/oauth-client-node because it breaks the build, and add vue-data-ui to the minimum age exclude as it's safe

renovate · 2026-07-05T23:22:24Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️Warning: custom changes will be lost.

ghostdevv

hopes and prayers*

*and a lot of tests

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Willow (GHOST) <git@willow.sh>

chore(deps): update all non-major dependencies
a8ac297

vercelBothad a problem deploying to Preview – docs.npmx.dev July 5, 2026 23:08 Failure

renovateBot added chore dependencies labels Jul 5, 2026

vercelBothad a problem deploying to Preview – npmx.dev July 5, 2026 23:08 Failure

chore: update
1ad4a94
downgrade the iconify packages by one as they're too new, don't update the @atproto/oauth-client-node because it breaks the build, and add vue-data-ui to the minimum age exclude as it's safe

This comment was marked as resolved.
Sign in to view

vercelBotdeployed to Preview – docs.npmx.dev July 5, 2026 23:23 View deployment

vercelBotdeployed to Preview – npmx.dev July 5, 2026 23:24 View deployment

fix: pin markdown-exit
337fd0e

vercelBotdeployed to Preview – docs.npmx.dev July 5, 2026 23:41 View deployment

vercelBotdeployed to Preview – npmx.dev July 5, 2026 23:42 View deployment

chore: remove unused
a5bf025

vercelBotdeployed to Preview – docs.npmx.dev July 5, 2026 23:48 View deployment

vercelBotdeployed to Preview – npmx.dev July 5, 2026 23:48 View deployment

ghostdevv approved these changes Jul 5, 2026
View reviewed changes

ghostdevv added this pull request to the merge queue Jul 5, 2026

Merged via the queue into main with commit 532e9c5Jul 6, 2026
27 checks passed

ghostdevv deleted the renovate/all-minor-patch branch July 6, 2026 00:01

github-actionsBot mentioned this pull request Jul 6, 2026
chore: release v0.17.0 #2992
Merged

ayo-run pushed a commit to ayo-run/npmx.dev that referenced this pull request Aug 5, 2026
chore(deps): update all non-major dependencies (npmx-dev#3010)
005f3a5
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Willow (GHOST) <git@willow.sh>

Navigation Menu

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies - #3010

chore(deps): update all non-major dependencies#3010
ghostdevv merged 4 commits into
mainfrom
renovate/all-minor-patch

renovateBot commented Jul 5, 2026•
edited by ghostdevv
Loading

Uh oh!

renovateBot commented Jul 5, 2026

Uh oh!

vercelBot commented Jul 5, 2026•
edited
Loading

Uh oh!

github-actionsBot commented Jul 5, 2026

Uh oh!

codecovBot commented Jul 5, 2026•
edited
Loading

Uh oh!

renovateBot commented Jul 5, 2026

Uh oh!

This comment was marked as resolved.

This comment was marked as resolved.

ghostdevv left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

renovateBot commented Jul 5, 2026• edited by ghostdevv Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

What's Changed

⚡ Improvement Features

What's Changed

⚡ Improvement Features

What's Changed

💥 Breaking Changes

🔒 Security Fixes

What's Changed

⚡ Improvement Features

What's Changed

⚡ Improvement Features

What's Changed

🌟 Features

What's Changed

🐛 Bug Fixes

⚡ Improvement Features

What's Changed

🐛 Bug Fixes

Features

Bug Fixes

🚀 Features

🐞 Bug Fixes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

Configuration

Uh oh!

renovateBot commented Jul 5, 2026

⚠️ Artifact update problem

File name: pnpm-lock.yaml

Uh oh!

vercelBot commented Jul 5, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented Jul 5, 2026

e18e dependency analysis

Uh oh!

codecovBot commented Jul 5, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

renovateBot commented Jul 5, 2026

Edited/Blocked Notification

Uh oh!

This comment was marked as resolved.

This comment was marked as resolved.

ghostdevv left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovateBot commented Jul 5, 2026•
edited by ghostdevv
Loading

vercelBot commented Jul 5, 2026•
edited
Loading

codecovBot commented Jul 5, 2026•
edited
Loading