fix(deps): update all non-major dependencies #14707

renovate · 2025-11-03T00:42:54Z

This PR contains the following updates:

Package	Change	Type	Update	Pending
@astrojs/compiler (source)	`^2.10.3` -> `^2.13.0`	dependencies	patch
@jridgewell/sourcemap-codec (source)	`^1.4.15` -> `^1.5.5`	dependencies	patch
@preact/signals (source)	`^2.3.2` -> `^2.4.0`	dependencies	minor
@tailwindcss/vite (source)	`^4.1.16` -> `^4.1.17`	dependencies	patch
@types/mocha (source)	`^10.0.1` -> `^10.0.10`	devDependencies	patch
@types/semver (source)	`^7.3.13` -> `^7.7.1`	devDependencies	patch
@types/vscode (source)	`^1.82.0` -> `^1.105.0`	devDependencies	patch
@types/yargs (source)	`^17.0.33` -> `^17.0.34`	devDependencies	patch
@vscode/vsce (source)	`2.30.0` -> `2.32.0`	devDependencies	minor
alpinejs (source)	`^3.15.0` -> `^3.15.1`	dependencies	patch
canvas-confetti	`^1.9.3` -> `^1.9.4`	dependencies	patch
chokidar	`^4.0.1` -> `^4.0.3`	dependencies	patch
eslint (source)	`^9.38.0` -> `^9.39.1`	devDependencies	minor
fast-glob	`^3.2.12` -> `^3.3.3`	dependencies	patch
fast-xml-parser	`^5.3.0` -> `^5.3.1`	dependencies	patch
marked (source)	`^16.4.1` -> `^16.4.2`	dependencies	patch
mocha (source)	`^10.2.0` -> `^10.8.2`	devDependencies	patch
sass	`^1.93.2` -> `^1.93.3`	dependencies	patch
semver	`^7.3.8` -> `^7.7.3`	dependencies	patch
shiki (source)	`^3.13.0` -> `^3.15.0`	dependencies	minor
sitemap	`^8.0.0` -> `^8.0.2`	dependencies	patch
solid-js (source)	`^1.9.9` -> `^1.9.10`	dependencies	patch
svelte (source)	`^4.2.10` -> `^4.2.20`	dependencies	patch
svelte (source)	`^5.41.3` -> `^5.43.4`	dependencies	patch	`5.43.5`
tailwindcss (source)	`^4.1.16` -> `^4.1.17`	dependencies	patch
tinyexec	`^1.0.1` -> `^1.0.2`	dependencies	patch
turbo (source)	`^2.5.8` -> `^2.6.0`	devDependencies	minor
typescript-eslint (source)	`^8.46.2` -> `^8.46.3`	devDependencies	patch
vite (source)	`^6.4.0` -> `^6.4.1`	devDependencies	patch
volar-service-css (source)	`0.0.66` -> `0.0.67`	dependencies	patch
volar-service-emmet (source)	`0.0.66` -> `0.0.67`	dependencies	patch
volar-service-html (source)	`0.0.66` -> `0.0.67`	dependencies	patch
volar-service-prettier (source)	`0.0.66` -> `0.0.67`	dependencies	patch
volar-service-typescript (source)	`0.0.66` -> `0.0.67`	dependencies	patch
volar-service-typescript-twoslash-queries (source)	`0.0.66` -> `0.0.67`	dependencies	patch
volar-service-yaml (source)	`0.0.66` -> `0.0.67`	dependencies	patch
vscode	`^1.90.0` -> `^1.999.0`	engines	minor
vscode-html-languageservice	`^5.5.2` -> `^5.6.0`	dependencies	patch
vscode-languageserver-textdocument (source)	`^1.0.11` -> `^1.0.12`	dependencies	patch
vscode-languageserver-textdocument (source)	`^1.0.11` -> `^1.0.12`	devDependencies	patch
vscode-tmgrammar-test	`^0.1.2` -> `^0.1.3`	devDependencies	patch
vscode-uri	`^3.0.8` -> `^3.1.0`	devDependencies	patch
vue (source)	`^3.5.22` -> `^3.5.24`	dependencies	patch
yaml (source)	`^2.5.0` -> `^2.8.1`	dependencies	patch

Release Notes

preactjs/signals (@preact/signals)

`v2.4.0`

Compare Source

Minor Changes

#777 d31738f Thanks @JoviDeCroock! - Revert the changes to useComputed, sincere apologies for the inconvenience we've discussed this at length and are going to side on the perf side.

Patch Changes

#782 fbf69a9 Thanks @JoviDeCroock! - Ensure aria/data attributes stick around when going back to an empty string
#783 86575b4 Thanks @JoviDeCroock! - Ensure For and Show account for nested reactivity

tailwindlabs/tailwindcss (@tailwindcss/vite)

`v4.1.17`

Compare Source

Fixed

Substitute @variant inside legacy JS APIs (#19263)
Prevent occasional crash on Windows when loaded into a worker thread (#19242)

Microsoft/vsce (@vscode/vsce)

`v2.32.0`

Compare Source

Changes:

#1034: Revert "Update deprecated dependencies"
#1032: fix: probabilistic trigger v8 crash
#1028: Remove need-more-info-closer workflow

This list of changes was auto generated.

`v2.31.1`

Compare Source

Changes:

#1027: Update deprecated dependencies
#1025: Don't package default readme if a path is provided and default is ignored
#1024: add executes code property

This list of changes was auto generated.

`v2.31.0`

Compare Source

Changes:

#1022: Throw error if provided readmePath or provided changelogPath could not be found
#1020: Throw when unused files pattern in package.json
#1015: Support "ls --tree"

This list of changes was auto generated.

alpinejs/alpine (alpinejs)

`v3.15.1`

Compare Source

Changed

x-sort improvements
CSP build allowGlobals now defaults to false instead of true

eslint/eslint (eslint)

`v9.39.1`

Compare Source

`v9.39.0`

Compare Source

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

`v5.3.1`

Compare Source

markedjs/marked (marked)

`v16.4.2`

Compare Source

sass/dart-sass (sass)

`v1.93.3`

Compare Source

Fix a performance regression that was introduced in 1.92.0.

shikijs/shiki (shiki)

`v3.15.0`

Compare Source

🚀 Features

lang-ansi: Fallback for missing theme ANSI colors - by @Chanakyasinde and @antfu in #1095 (f36ea)
transformers: Support meta.indent for indent guides - by @L33Z22L11 in #1087 (d8f89)

🐞 Bug Fixes

Allow singleton highlighter recovery after invalid language error - by @Maxiemad in #1091 (218c9)
vitepress-twoslash: Prevent popper show/hide on dragging - by @bluwy in #1090 (29522)

View changes on GitHub

`v3.14.0`

Compare Source

🚀 Features

Update grammars and themes - by @antfu (26372)

🐞 Bug Fixes

colorized-brackets: Fix default color does not work with colorized-brackets - by @oatmealproblem in #1082 (f4d3f)

View changes on GitHub

ekalinin/sitemap.js (sitemap)

`v8.0.2`

Compare Source

Bug Fixes

fix #464: Support xsi:schemaLocation in custom namespaces - thanks @dzakki
- Extended custom namespace validation to accept namespace-qualified attributes (like xsi:schemaLocation) in addition to xmlns declarations
- The validation regex now matches both xmlns:prefix="uri" and prefix:attribute="value" patterns
- Enables proper W3C schema validation while maintaining security validation for malicious content
- Added comprehensive tests including security regression tests

Example Usage

The following now works correctly (as documented in README):

const sms = new SitemapStream({
  xmlns: {
    custom: [
      'xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"',
      'xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd"'
    ]
  }
});

Testing

✅ All existing tests passing
✅ 8 new tests added covering positive and security scenarios
✅ 100% backward compatible with 8.0.1

Files Changed

2 files changed: 144 insertions, 5 deletions

sveltejs/svelte (svelte)

`v5.43.4`

Compare Source

Patch Changes

chore: simplify connection/disconnection logic (#17105)
fix: reconnect deriveds to effect tree when time-travelling (#17105)

`v5.43.3`

Compare Source

Patch Changes

fix: ensure fork always accesses correct values (#17098)
fix: change title only after any pending work has completed (#17061)
fix: preserve symbols when creating derived rest properties (#17096)

tinylibs/tinyexec (tinyexec)

`v1.0.2`

Compare Source

What's Changed

refactor: migrate to tsdown by @sxzz in #50
feat: OIDC publish by @outslept in #52
docs: clarify documentation by @outslept in #54
chore: set engine constraint by @43081j in #56
test: migrate to vitest by @43081j in #58
fix: read stdout/stderr in parallel by @43081j in #59

New Contributors

@sxzz made their first contribution in #50
@outslept made their first contribution in #52

Full Changelog: tinylibs/tinyexec@1.0.1...1.0.2

vercel/turborepo (turbo)

`v2.6.0`: Turborepo v2.6.0

Compare Source

What's Changed

Docs

docs: clarification on Transit Nodes docs by @maschwenk in #9181
docs: add GitHub Actions reusable workflow documentation for remote caching by @anthonyshew in #10923
docs: generate blog release OG images by @anthonyshew in #10936
docs: fix correct package name from eslint-config-turbo to eslint-plugin-turbo by @tetzng in #10954
docs: align tailwindcss 4 guide to the with-tailwind example by @esauri in #10963
docs: fix typos and formatting issues in Playwright guide by @yamcodes in #10980
docs: adjust compute hours saved component initial value by @anthonyshew in #10958
docs: clarify passthrough args comparison by @emilbjorklund in #10990
docs: fix profile images on home page by @anthonyshew in #10993
feat: microfrontends by @anthonyshew in #10982
docs: Clarify passtrhough args cache miss by @eug-vs in #11026
fix: path validation in microfrontends.json by @anthonyshew in #11006
feat(microfrontends): schema.json for microfrontends.json by @anthonyshew in #11008

create-turbo

feat: update create-turbo Bun prompt text by @anthonyshew in #10918

eslint

fix(eslint-config-turbo): use module.exports for ESLint v8 compatibility by @anthonyshew in #10902
perf: ~8.6x faster ESLint rule by @anthonyshew in #10943

Examples

Update package.json by @Satheeshsk369 in #10892
docs: fix JSDoc type for ESLint config in basic example by @victor-code19 in #10727
refactor(examples): enhance with-nestjs (#8131) by @Neosoulink in #10964
examples: Upgrade core-team-maintained examples to Next.js 16 by @anthonyshew in #11014

Changelog

chore: remove missing turbow.js references by @pauloZion1 in #10893
fix(turborepo-lockfiles): handle missing optional dependencies in Bun lockfiles by @anthonyshew in #10909
fix: update ui suggested value in error message for turbo.json by @hugomassing in #10896
chore: remove unused origin field from auth structs by @anthonyshew in #10910
feat: new OAuth flow for Turborepo CLI with Vercel by @anthonyshew in #10911
fix(lockfiles): include bundled dependencies in Bun lockfile subgraphs by @anthonyshew in #10915
test: increase coverage for lockfiles by @anthonyshew in #10633
fix: update remote cache OAuth refresh flow by @anthonyshew in #10916
feat(tui): task list search with / by @anthonyshew in #10908
fix: --graph=foo.dot should not require graphviz installed by @blast-hardcheese in #10942
chore: update devcontainer configuration by @anthonyshew in #10955
fix: injectWorkspacePackages for turbo prune with pnpm by @anthonyshew in #10945
fix: adjust binary call for microfrontends proxy on Windows by @mknichel in #10962
Add worktrees.json configuration to .cursor directory by @Copilot in #10986
fix: windows symlinking bug by @anthonyshew in #10992
fix: added Linux env vars to global passthroughs by @aviramha in #10984
fix: recursive transitive closure analysis in npm lockfile parser by @anthonyshew in #10988
ci(fix): dynamically set ports in proxy integration tests by @anthonyshew in #11009
feat: Add support for custom microfrontends.json naming by @kitfoster in #11022

New Contributors

@Satheeshsk369 made their first contribution in #10892
@robobun made their first contribution in #10729
@hugomassing made their first contribution in #10896
@victor-code19 made their first contribution in #10727
@blast-hardcheese made their first contribution in #10942
@tetzng made their first contribution in #10954
@esauri made their first contribution in #10963
@Copilot made their first contribution in #10986
@emilbjorklund made their first contribution in #10990
@aviramha made their first contribution in #10984
@eug-vs made their first contribution in #11026
@kitfoster made their first contribution in #11022

Full Changelog: vercel/turborepo@v2.5.8...v2.6.0

typescript-eslint/typescript-eslint (typescript-eslint)

`v8.46.3`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

volarjs/services (volar-service-css)

`v0.0.67`

Compare Source

volarjs/services (volar-service-emmet)

`v0.0.67`

Compare Source

volarjs/services (volar-service-html)

`v0.0.67`

Compare Source

volarjs/services (volar-service-prettier)

`v0.0.67`

Compare Source

volarjs/services (volar-service-typescript)

`v0.0.67`

Compare Source

volarjs/services (volar-service-typescript-twoslash-queries)

`v0.0.67`

Compare Source

volarjs/services (volar-service-yaml)

`v0.0.67`

Compare Source

microsoft/vscode (vscode)

`v1.999.0`

Compare Source

`v1.105.1`: September 2025 Recovery 1

Compare Source

The update addresses these issues.

For the complete release notes go to Updates on code.visualstudio.com.

`v1.105.0`: September 2025

Compare Source

Welcome to the September 2025 release of Visual Studio Code. There are many updates in this version that we hope you'll like, some of the key highlights include:

OS integration	Developer productivity	Agent tools
Get notified about task completion and chat responses Show more	Resolve merge conflicts with AI assistance Show more	Install MCP servers from the MCP marketplace Show more
Native authentication experience on macOS Show more	Pick up where you left off with the recent chats Show more	Use fully-qualified tool names to avoid conflicts Show more

`v1.104.3`: August 2025 Recovery 3

Compare Source

The update addresses these issues.

`v1.104.2`: August 2025 Recovery 2

Compare Source

The update addresses these issues.

`v1.104.1`: August 2025 Recovery 1

Compare Source

The update addresses these issues.

`v1.104.0`: August 2025

Compare Source

Welcome to the August 2025 release of Visual Studio Code. There are many updates in this version that we hope you'll like, some of the key highlights include:

Model flexibility	Security	Productivity
Let VS Code select the best model Show more	Confirm edits for sensitive files Show more	Remove distractions from chat file edits Show more
Contribute models through VS Code extensions Show more	Let agents run terminal commands safely Show more	Use AGENTS.md to add chat context Show more

`v1.103.2`: July 2025 Recovery 2

Compare Source

The update addresses these issues.

`v1.103.1`: July 2025 Recovery 1

Compare Source

The update adds GPT-5 prompt improvements, support for GPT-5 mini, and addresses these issues.

`v1.103.0`: July 2025

Compare Source

Welcome to the July 2025 release of Visual Studio Code. There are many updates in this version that we hope you'll like, some of the key highlights include:

MCP	Chat	Productivity
Revamped tool picker experience Show more	Use GPT-5 in VS Code Show more	Check out multiple branches simultaneously with Git worktrees Show more
Enable more than 128 tools per agent request Show more	Restore to a previous good state with chat checkpoints Show more	Manage coding agent sessions in a dedicated view Show more

`v1.102.3`: June 2025 Recovery 3

Compare Source

The update addresses these issues.

For the complete release notes go to Updates on code.visualstudio.com.

`v1.102.2`: June 2025 Recovery 2

[Compare S

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2025-11-03T00:43:00Z

⚠️ No Changeset found

Latest commit: eadf9fb

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

codspeed-hq · 2025-11-07T22:05:29Z

CodSpeed Performance Report

Merging #14707 will not alter performance

_{Comparing renovate/all-minor-patch (eadf9fb) with main (91780cf)}

Summary

✅ 6 untouched

renovate bot added the dependencies Pull requests that update a dependency file label Nov 3, 2025

github-actions bot added feat: markdown Related to Markdown (scope) pkg: example Related to an example package (scope) pkg: integration Related to any renderer integration (scope) labels Nov 3, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 66f7619 to 58cf846 Compare November 7, 2025 21:52

renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 6eee7a4 to 5b26853 Compare November 10, 2025 01:03

fix(deps): update all non-major dependencies

eadf9fb

renovate bot force-pushed the renovate/all-minor-patch branch from 5b26853 to eadf9fb Compare November 10, 2025 11:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

fix(deps): update all non-major dependencies #14707

fix(deps): update all non-major dependencies #14707

renovate bot commented Nov 3, 2025 •

edited

Loading

Uh oh!

changeset-bot bot commented Nov 3, 2025 •

edited

Loading

Uh oh!

codspeed-hq bot commented Nov 7, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

fix(deps): update all non-major dependencies #14707

Are you sure you want to change the base?

fix(deps): update all non-major dependencies #14707

Conversation

renovate bot commented Nov 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Minor Changes

Patch Changes

Fixed

Changes:

Changes:

Changes:

Changed

🚀 Features

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

Bug Fixes

Example Usage

Testing

Files Changed

Patch Changes

Patch Changes

What's Changed

New Contributors

v2.6.0: Turborepo v2.6.0

What's Changed

Docs

create-turbo

eslint

Examples

Changelog

New Contributors

v1.105.1: September 2025 Recovery 1

v1.105.0: September 2025

v1.104.3: August 2025 Recovery 3

v1.104.2: August 2025 Recovery 2

v1.104.1: August 2025 Recovery 1

v1.104.0: August 2025

v1.103.2: July 2025 Recovery 2

v1.103.1: July 2025 Recovery 1

v1.103.0: July 2025

v1.102.3: June 2025 Recovery 3

v1.102.2: June 2025 Recovery 2

Configuration

Uh oh!

changeset-bot bot commented Nov 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

codspeed-hq bot commented Nov 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merging #14707 will not alter performance

Summary

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Nov 3, 2025 •

edited

Loading

`v2.6.0`: Turborepo v2.6.0

`v1.105.1`: September 2025 Recovery 1

`v1.105.0`: September 2025

`v1.104.3`: August 2025 Recovery 3

`v1.104.2`: August 2025 Recovery 2

`v1.104.1`: August 2025 Recovery 1

`v1.104.0`: August 2025

`v1.103.2`: July 2025 Recovery 2

`v1.103.1`: July 2025 Recovery 1

`v1.103.0`: July 2025

`v1.102.3`: June 2025 Recovery 3

`v1.102.2`: June 2025 Recovery 2

changeset-bot bot commented Nov 3, 2025 •

edited

Loading

codspeed-hq bot commented Nov 7, 2025 •

edited

Loading