chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	OpenSSF	Age	Confidence
@babel/parser (source)	pnpm-workspace.overrides	patch	7.29.8 → 7.29.9
@oxlint/plugins (source)	pnpm.catalog.default	minor	1.83.0 → 1.86.0
@types/node (source)	pnpm.catalog.default	minor	24.13.3 → 24.19.0	24.19.1
hyparquet (source)	pnpm.catalog.default	patch	1.31.1 → 1.31.2
knip (source)	pnpm.catalog.default	minor	6.36.0 → 6.38.0	6.39.0
oxlint (source)	pnpm.catalog.default	minor	1.83.0 → 1.86.0
oxlint-tsgolint	pnpm.catalog.default	patch	7.0.2001 → 7.0.2003
vega-embed	pnpm.catalog.default	minor	7.2.0 → 7.3.0
vitepress>vite (source)	pnpm-workspace.overrides	patch	8.3.0 → 8.3.1	8.3.2

---

Release Notes

babel/babel (@​babel/parser)

v7.29.9

Compare Source

v7.29.9 (2026-09-18)

🐛 Bug Fix

• babel-plugin-transform-typescript
  • #​18247 [ts] Allow merging enum into a namespace (@​nicolo-ribaudo)
• babel-parser
  • #​18241 Fix parsing of arrow function params inside ternaries with Flow (@​robhogan)

🏠 Internal

• babel-parser
  • #​18245 test: test with ts-eslint 8.70.0 (@​JLHwung)

Committers: 4

• Huáng Jùnliàng (@​JLHwung)
• Joelle Mahfoud (@​joelle-a-dev)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Rob Hogan (@​robhogan)

hyparam/hyparquet (hyparquet)

v1.31.2

Compare Source

• Coalesce column chunk reads within a row group when gaps are at most 8 KB (#​182)
• Faster INT32 and INT64 delta binary packed decoding (#​180, #​181)

webpro-nl/knip (knip)

v6.38.0: Release 6.38.0

Compare Source

• Include co-authors in docs contributor list (0c33410)
• Filter bots and agents from docs contributors (617f70d)
• Update Eve plugin conventions (#​2049) (260dbb9) - thanks @​matchai!
• Add args example to that doc page (50b271b)
• Add Turborepo plugin (#​2055) (e49d3db) - thanks @​changbaebang!
• Support import-x/* settings in ESLint plugin (#​2050) (1a34cf8) - thanks @​bytedoe!
• Resolve file option in Mocha configuration files (#​2051) (9b5c5f6) - thanks @​giaBaoJS!
• Support oxlint extends (#​2054) (a149a98) - thanks @​matthewnitschke-wk!
• Fix import.meta handling in built-in compilers (#​2059) (8b0c850) - thanks @​vdavid!
• Fix tag hints for enum and namespace members (#​2061) (8a8805e) - thanks @​devYRPauli!
• Flag unused member tags in tagged enums and namespaces (584e53f)
• feat: resolve MDX content mapper remarkPlugins (#​2060) (34dbccf) - thanks @​gioboa!
• Refactor and separate concerns w/ new typescript-content-mapper plugin (11e9450)
• Resolve mdx content mapper providerImportSource (7b58251)
• Fix config → entry in plop plugin (25a380c)

v6.37.0: Release 6.37.0

Compare Source

• fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#​2048) (06a68fc) - thanks @​RobHannay!
• fix: enable JSX in the config loader (#​1959) (5b21dc9) - thanks @​addielaruee!
• Match binaries only to their actual dependency providers (c5bdb69)
• Preserve executable references across package manager commands (54af171)
• Correct binary provider metadata in Relay fixtures (e67dfcb)
• Separate shell binary expectations from reporting exemptions (resolve #​2022) (c1d7d75)
• Respect npx no-install flags before the executable (4237010)
• Update dependencies (038ea17)
• Remove npm auth check now that's in release-it (4aaf77c)
• Fix --format name resolution in the ESLint plugin (#​2046) (1269e98) - thanks @​bytedoe!

oxc-project/oxc (oxlint)

v1.86.0

Compare Source

🚀 Features

• 9d80eed linter/react/only-export-components: Support allowCompoundComponents (#​27117) (Kuroda Kayn)
• e05b155 linter: Add typescript/no-generated-empty-object-type (#​26958) (camc314)

v1.85.0

Compare Source

v1.84.0

Compare Source

vega/vega-embed (vega-embed)

v7.3.0

Compare Source

Bug Fixes

• let mode option take precedence over spec guessing (#​1561) (44d7e80)

vitejs/vite (vitepress>vite)

v8.3.1

Compare Source

Bug Fixes

• deps: update all non-major dependencies (#​23482) (3c752c8)
• deps: update all non-major dependencies (#​23537) (e8990c4)
• deps: update rolldown-related dependencies (#​23483) (9aecbbf)
• handle server.ws: false in mergeConfig (#​23511) (f68c0d5)
• merge build.rolldownOptions.output.comments correctly (#​23514) (4aba8d8)
• optimizer: don't skip imports whose binding starts with type (#​23540) (39330f4)
• optimizer: resolve pending discovered dep processing on close before init (#​23567) (5f89433)
• server: avoid reinitializing watcher when adding file after server close (#​23572) (6f831f9)
• sourcemap: skip URL source roots when injecting sources content (#​23519) (04fc30a)

Miscellaneous Chores

• merge prereleases in changelog (#​23466) (99bd9d1)
• optimizer: add debug log when waiting for dep before init (#​23566) (63567c7)
• update optimizeDeps.include comment (#​23489) (6a84c72)

Code Refactoring

• assets regexp use non-capture (#​23491) (f4b4431)
• remove duplicate configurations (#​23532) (9abd99b)
• replace find with some (#​23554) (af7cdf6)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Error: ERR_PNPM_NO_MATURE_MATCHING_VERSION

  × installing dependencies
  ╰─▶ 2 versions do not meet the minimumReleaseAge constraint:
        knip@6.38.0 was published at 2026-09-23T10:41:04.033Z, within the
      minimumReleaseAge cutoff (2026-09-18T14:37:42.669Z)
        vite@8.3.1 was published at 2026-09-24T12:26:19.940Z, within the
      minimumReleaseAge cutoff (2026-09-18T14:37:42.669Z)
  help: Run the install interactively to approve these picks, add them to
        minimumReleaseAgeExclude in pnpm-workspace.yaml, or wait for the
        packages to mature.

[peter-gy]

Superseded by merged #71, which folds this change into the complete marimo 0.25.1 and Vite+ 1.0 update.