chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@clack/prompts (source)	^1.7.0 → ^1.8.0			dependencies	minor
node	24.18.0 → 24.20.0			uses-with	minor
simple-git-hooks	^2.13.1 → ^2.14.0			devDependencies	minor
tsdown (source)	^0.22.7 → ^0.23.0			devDependencies	minor
tsx (source)	^4.23.1 → ^4.23.13			devDependencies	patch
vitest (source)	^4.1.10 → ^4.1.11			devDependencies	patch

---

Release Notes

bombshell-dev/clack (@​clack/prompts)

v1.8.0

Compare Source

Minor Changes

• #​592caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

• #​59437fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

• #​583ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

• #​5886506135 Thanks @​danielroe! - Style the guide bar rendered by box({ withGuide: true }) in grey so it matches the gutter drawn by log, note and the spinner

• #​5990547d6f Thanks @​43081j! - Fixes a withGuide rendering issue leaving extra spaces in text prompts.

• Updated dependencies [227583e, caa32e8, 37fca4e, ae636dd, b20fa2b]:

  • @​clack/core@1.5.0

actions/node-versions (node)

v24.20.0: 24.20.0

Compare Source

Node.js 24.20.0

v24.19.0: 24.19.0

Compare Source

Node.js 24.19.0

v24.18.1: 24.18.1

Compare Source

Node.js 24.18.1

toplenboren/simple-git-hooks (simple-git-hooks)

v2.14.0

Compare Source

Minor Changes

• #​1382f3ec3f Thanks @​younggglcy! - feat: silent success if nothing has changed

Patch Changes

• #​146e9e9367 Thanks @​colinhacks! - fix: resolve the project root from INIT_CWD during postinstall so hooks install correctly on isolated node_modules layouts (pnpm, yarn, bun, and other package managers) regardless of the store directory name

• #​149f071064 Thanks @​wmaurer! - fix: install and remove hooks correctly inside a git worktree, including worktrees created with git worktree add --relative-paths

• #​151eb795de Thanks @​DanMat! - fix: don't crash postinstall when the resolved project directory has no package.json — skip instead of throwing an uncaught ENOENT

rolldown/tsdown (tsdown)

v0.23.0

Compare Source

🧭 Migration Guide

Most users can upgrade directly. Before upgrading, run one final build with tsdown@0.22.14 and resolve all deprecation warnings.

• config:
  • bundle: false → unbundle: true; bundle: true can be removed
  • outExtension → outExtensions
  • publicDir / --public-dir → copy / --copy
  • removeNodeProtocol: true → nodeProtocol: 'strip'
  • injectStyle → css.inject
• deps:
  • inlineOnly / deps.onlyAllowBundle → deps.onlyBundle
  • skipNodeModulesBundle: true → deps.neverBundle: true
  • resolveDepSubpath now defaults to false; set it to true to preserve the previous behavior
• dts:
  • Select a generator with dts.generator, for example { generator: 'oxc' }
  • dts.cjsReexport was removed; dual-format builds now generate CJS declarations in a separate pass
• attw:
  • The default profile changed from strict to esm-only; set profile: 'strict' to preserve the previous checks
• programmatic API:
  • build() now returns { bundles, watch }; replace const bundles = await build() with const { bundles } = await build()
• requirements:
  • Node.js 25 is no longer supported; use ^22.18.0, ^24.11.0, or >=26.0.0
  • The packages no longer publish legacy types and typesVersions fallbacks; use TypeScript’s bundler, node16, or nodenext module resolution

🚨 Breaking Changes

• Drop support for Node.js 25 - by @​sxzz(26950)
• Remove deprecated tsup compatibility options - by @​sxzz(50766)
• Drop types and typesVersionsfields - by @​sxzz(be3ea)
• attw:
  • Change default profile to esm-only - by @​sxzz(9b3cf)
• deps:
  • Remove deprecated deps.onlyAllowBundle - by @​sxzz(30c55)
  • Disable resolveDepSubpath by default - by @​sxzz(d300f)
  • Remove deprecated skipNodeModulesBundle - by @​sxzz(f2a3d)
• dts:
  • Remove dts.cjsReexport option - by @​sxzz(9c70f)
  • Make dts.generator the only way to select generator - by @​sxzz(eb75f)

🚀 Features

• Expose programmatic watch controls - by @​sxzz in #​1062(96a40)
• css: Support function form for css.modules.localsConvention - by @​sxzz and @​lazerg(b566f)
• report: Add summary option to skip per-file size logs - by @​lazerg in #​1036(020e9)

🐞 Bug Fixes

• Allow unplugin-unused v0.5+ - by @​sxzz(53c78)
• Ignore optional dependencies in type definitions - by @​sxzz(94622)
• cli:
  • Camel-case nested flag keys - by @​sxzz(bf53f)
• css:
  • Watch files imported via @import - by @​lazerg in #​1038(ebee5)
• deps:
  • Apply resolveDepSubpath when neverBundle is true - by @​lazerg in #​1053(4943c)
• exports:
  • Scope inlined dependencies to configs with exports - by @​lazerg in #​1040(d5b80)
• migrate:
  • Pin migrated projects to tsdown 0.22.14 - by @​sxzz(113fb)
  • Support non-interactive environments - by @​sxzz(51e41)

🏎 Performance

• Remove asyncDispose polyfill - by @​sxzz(82675)
• Replace ansis with util.styleText - by @​sxzz(be6bf)

View changes on GitHub

v0.22.14

Compare Source

🚀 Features

• Add CLI build concurrency option - by @​sxzz and Jeroen Zwartepoorte(8a14c)

View changes on GitHub

v0.22.13

Compare Source

🚀 Features

• deps: Support neverBundle: true to externalize all dependencies - by @​sxzz(d30a7)

🐞 Bug Fixes

• Prevent tinyexec from modifying PATH - by @​sxzz(d84c5)

View changes on GitHub

v0.22.12

Compare Source

🚨 Breaking Changes

• exe: Standardize minimum Node.js version - by @​sxzz(85f23)

View changes on GitHub

v0.22.11

Compare Source

🚀 Features

• deps: Add resolveDepSubpath option - by @​sxzz in #​1026(346cb)

View changes on GitHub

v0.22.10

Compare Source

🚀 Features

• exe: Support custom node index and download url - by @​anytinz in #​1023(0d24a)

🐞 Bug Fixes

• deps: External peerDependenciesMeta deps - by @​sxzz(bad1b)
• exe: Handle Windows node archives on Linux - by @​sxzz(074e4)

View changes on GitHub

v0.22.9

Compare Source

🚀 Features

• Upgrade rolldown to v1.2 - by @​sxzz(91bb5)

🐞 Bug Fixes

• deps: Check dynamic imports in onlyImport - by @​sxzz in #​1019(a625a)

View changes on GitHub

v0.22.8

Compare Source

🚀 Features

• deps: Add onlyImport option - by @​sxzz and Claude Fable 5(c5798)

🐞 Bug Fixes

• config: Concat plugins arrays when merging config - by @​sxzz(b1c80)

View changes on GitHub

privatenumber/tsx (tsx)

v4.23.13

Compare Source

v4.23.12

Compare Source

Bug Fixes

• shim import.meta when tokens are split by comments or newlines (#​829) (ed9d330), closes #​828

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.11

Compare Source

v4.23.10

Compare Source

Bug Fixes

• support nyc coverage discovery (#​710) (ec1bcd5)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.9

Compare Source

Bug Fixes

• map Node test locations (2f55884)
• support data URLs in tsImport (b94f46f)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.8

Compare Source

Bug Fixes

• preserve package subpath resolution (be1315e)
• preserve typeless ESM dependency exports (70dfc5e)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.7

Compare Source

Bug Fixes

• prevent tsImport cache collisions (4e5a138)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.6

Compare Source

v4.23.5

Compare Source

v4.23.4

Compare Source

Bug Fixes

• cli: allow async process.once() signal handlers to finish (#​827) (2afc7bb)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.3

Compare Source

Bug Fixes

• preserve listenerCount overload semantics (#​823) (b6574d4)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.2

Compare Source

vitest-dev/vitest (vitest)

v4.1.11

Compare Source

🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4] - by @​sheremet-va and @​hi-ogawa in #​10992(5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4] - by @​sheremet-va, Pduhard and Claude Opus 4.8 in #​10955(10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4] - by @​hi-ogawa, Hiroshi Ogawa and OpenCode in #​10951(9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4] - by @​sheremet-va in #​10974(fe5a1)

View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 2am and before 3am"
• Automerge
  • "after 1am and before 2am"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.