chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #2940 · stacksjs/ts-inputs

renovate · 2026-03-30T10:57:58Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@microsoft/api-extractor (source)	`^7.52.15` → `^7.58.9`	devDependencies	minor
@types/google.maps (source)	`^3.58.1` → `^3.65.2`	devDependencies	minor
@vitejs/plugin-vue (source)	`^5.2.1` → `^5.2.4`	devDependencies	patch
@vue/tsconfig	`^0.8.1` → `^0.9.1`	devDependencies	minor
actions/checkout	`v6.0.1` → `v6.0.3`	action	patch
bumpp	`^10.2.3` → `^10.4.1`	devDependencies	minor
bun-plugin-dtsx (source)	`^0.21.12` → `^0.21.17`	devDependencies	patch
bunfig	`^0.15.0` → `^0.15.14`	devDependencies	patch
date-fns	`^4.1.0` → `^4.4.0`	devDependencies	minor
lint-staged	`^16.2.3` → `^16.4.0`	devDependencies	minor
oven-sh/setup-bun	`v2.0.2` → `v2.2.0`	action	minor
vite (source)	`^6.0.7` → `^6.4.3`	devDependencies	minor
vue (source)	`^3.5.22` → `^3.5.38`	peerDependencies	patch
vue (source)	`^3.5.22` → `^3.5.38`	devDependencies	patch
vue-tsc (source)	`^2.2.0` → `^2.2.12`	devDependencies	patch

Release Notes

microsoft/rushstack (@microsoft/api-extractor)

`v7.58.9`

Compare Source

Sat, 13 Jun 2026 00:16:18 GMT

Version update only

`v7.58.8`

Compare Source

Mon, 08 Jun 2026 15:15:49 GMT

Patches

Add support for new d.ts extension format when using TS moduleResolution 'bundler' or 'nodenext'.

`v7.58.7`

Compare Source

Mon, 20 Apr 2026 23:31:13 GMT

Version update only

`v7.58.6`

Compare Source

Mon, 20 Apr 2026 15:15:24 GMT

Patches

Fix an issue where empty lines were included in DTS rollups in place of API items that were trimmed.

`v7.58.5`

Compare Source

Sat, 18 Apr 2026 03:47:10 GMT

Version update only

`v7.58.4`

Compare Source

Sat, 18 Apr 2026 00:15:16 GMT

Patches

Bump semver.

`v7.58.3`

Compare Source

Fri, 17 Apr 2026 15:14:57 GMT

Patches

Remove dependecy on lodash.

`v7.58.2`

Compare Source

Thu, 09 Apr 2026 00:15:07 GMT

Version update only

`v7.58.1`

Compare Source

Sat, 04 Apr 2026 00:14:00 GMT

Patches

Bump lodash 4.18.1 to address CVEs GHSA-r5fr-rjxr-66jc, GHSA-f23m-r3pf-42rh

`v7.58.0`

Compare Source

Wed, 01 Apr 2026 15:13:38 GMT

Minor changes

Upgrade the bundled compiler engine to TypeScript 5.9.3

`v7.57.8`

Compare Source

Tue, 31 Mar 2026 15:14:14 GMT

Version update only

`v7.57.7`

Compare Source

Mon, 09 Mar 2026 15:14:07 GMT

Patches

Bump minimatch version from 10.2.1 to 10.2.3 to address CVE-2026-27903.

`v7.57.6`

Compare Source

Wed, 25 Feb 2026 21:39:42 GMT

Patches

Bump @microsoft/tsdoc-config to ~0.18.1 to mitigate CVE-2025-69873.

`v7.57.5`

Compare Source

Wed, 25 Feb 2026 00:34:29 GMT

Version update only

`v7.57.4`

Compare Source

Tue, 24 Feb 2026 01:13:27 GMT

Version update only

`v7.57.3`

Compare Source

Mon, 23 Feb 2026 00:42:21 GMT

Patches

Add missing "./extends/*.json" to the package.json "exports" field so that "@microsoft/api-extractor/extends/tsdoc-base.json" is importable.

`v7.57.2`

Compare Source

Fri, 20 Feb 2026 16:14:49 GMT

Patches

Bump minimatch from 10.1.2 to 10.2.1

`v7.57.1`

Compare Source

Fri, 20 Feb 2026 00:15:03 GMT

Patches

Add "node" condition before "import" in the "exports" map so that Node.js uses the CJS output (which handles extensionless imports), while bundlers still use ESM via "import". Fixes #5644.

`v7.57.0`

Compare Source

Thu, 19 Feb 2026 00:04:52 GMT

Minor changes

Normalize package layout. CommonJS is now under lib-commonjs, DTS is now under lib-dts, and ESM is now under lib-esm. Imports to lib still work as before, handled by the "exports" field in package.json.

`v7.56.3`

Compare Source

Sat, 07 Feb 2026 01:13:26 GMT

Patches

Upgrade lodash dependency from ~4.17.15 to ~4.17.23.

`v7.56.2`

Compare Source

Wed, 04 Feb 2026 20:42:47 GMT

Patches

Update minimatch dependency from 10.0.3 to 10.1.2

`v7.56.1`

Compare Source

Wed, 04 Feb 2026 16:13:27 GMT

Version update only

`v7.56.0`

Compare Source

Fri, 30 Jan 2026 01:16:12 GMT

Minor changes

Fix an issue where destructured parameters produced an incorrect parameter name

`v7.55.5`

Compare Source

Thu, 08 Jan 2026 01:12:30 GMT

Patches

Fix missing 'export' keyword for namespace re-exports that produced invalid TypeScript output

`v7.55.2`

Compare Source

Sat, 06 Dec 2025 01:12:28 GMT

Version update only

`v7.55.1`

Compare Source

Fri, 21 Nov 2025 16:13:56 GMT

Version update only

`v7.55.0`

Compare Source

Wed, 12 Nov 2025 01:12:56 GMT

Minor changes

Bump the @microsoft/tsdoc dependency to ~0.16.0.
Bump the @microsoft/tsdoc-config dependency to ~0.18.0.

`v7.54.0`

Compare Source

Tue, 04 Nov 2025 08:15:14 GMT

Minor changes

Add a new setting IExtractorInvokeOptions.printApiReportDiff that makes build logs easier to diagnose by printing a diff of any changes to API report files (*.api.md).
Add a --print-api-report-diff CLI flag that causes a diff of any changes to API report files (*.api.md) to be printed.

`v7.53.3`

Compare Source

Fri, 24 Oct 2025 00:13:38 GMT

Version update only

`v7.53.2`

Compare Source

Wed, 22 Oct 2025 00:57:54 GMT

Version update only

`v7.53.1`

Compare Source

Wed, 08 Oct 2025 00:13:28 GMT

Version update only

`v7.53.0`

Compare Source

Fri, 03 Oct 2025 20:09:59 GMT

Minor changes

Normalize import of builtin modules to use the node: protocol.

vitejs/vite-plugin-vue (@vitejs/plugin-vue)

`v5.2.4`

Features

plugin-vue: use transformWithOxc if rolldown-vite is detected (#584) (6ac8e3a)

Bug Fixes

plugin-vue: handle sourcemap with empty script code (#585) (7f73970)
plugin-vue: when the resource path contains chinese characters, dev/build is inconsistent (#550) (5f6affe)

Miscellaneous Chores

deps: update upstream (#542) (ef446fc)
deps: update upstream (#569) (98381b2)
fix types with Vite 6.3 (#559) (8002511)
use rollup types exposed from Vite (#583) (2e1287f)

`v5.2.3`

5.2.3 (2025-03-17)

`v5.2.2`

Features

css: tree shake scoped styles (#533) (333094f)
pass descriptor vapor flag to compileTemplte (219e007)

Bug Fixes

deps: update all non-major dependencies (#482) (cdbae68)
deps: update all non-major dependencies (#488) (5d39582)
generate unique component id (#538) (2704e85)
index: move the if check earlier to avoid creating unnecessary ssr when entering return block (#523) (2135c84)
plugin-vue: default value for compile time flags (#495) (ae9d948)
plugin-vue: ensure HMR updates styles when SFC is treated as a type dependency (#541) (4abe3be)
plugin-vue: resolve sourcemap conflicts in build watch mode with cached modules (#505) (906cebb)
plugin-vue: support external import URLs for monorepos (#524) (cdd4922)
plugin-vue: support vapor template-only component (#529) (95be153)
plugin-vue: suppress warnings for non-recognized pseudo selectors form lightningcss (#521) (15c0eb0)
properly interpret boolean values in define (#545) (46d3d65)

Miscellaneous Chores

deps: update dependency rollup to ^4.27.4 (#479) (428320d)
deps: update dependency rollup to ^4.28.1 (#484) (388403f)
deps: update dependency rollup to ^4.29.1 (#493) (b092bc8)
deps: update upstream (#503) (8c12b9f)
deps: update upstream (#511) (d057351)
deps: update upstream (#526) (59946d3)
plugin-vue: simplify resolved declaration (7288a59)

vuejs/tsconfig (@vue/tsconfig)

`v0.9.1`

Compare Source

Notable Changes

Align the TypeScript peer dependency requirement with the documentation (>= 5.8, including TypeScript 6)

Full Changelog: vuejs/tsconfig@v0.9.0...v0.9.1

`v0.9.0`

Compare Source

Noticeable Changes

feat: update lib to ES2022 by @Slessi in #41
chore: move noUncheckedIndexedAccess from base config to the lib config [fa4423b]
- This is because noUncheckedIndexedAccess may have false positives, making it hard for existing codebases to upgrade.
- But for new codebases, it’s still recommended to enable this flag from the beginning.

New Contributors

@Slessi made their first contribution in #41

Full Changelog: vuejs/tsconfig@v0.8.1...v0.9.0

actions/checkout (actions/checkout)

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

antfu-collective/bumpp (bumpp)

`v10.4.1`

Compare Source

🚀 Features

Add custom path to config - by @OskarLebuda in #107 (0f2e4)

View changes on GitHub

`v10.4.0`

Compare Source

No significant changes

View changes on GitHub

`v10.3.2`

Compare Source

🐞 Bug Fixes

Resolve the options in config file correctly - by @liangmiQwQ in #101 (f5887)

View changes on GitHub

`v10.3.1`

Compare Source

No significant changes

View changes on GitHub

`v10.3.0`

Compare Source

🚀 Features

Support --release for release type - by @luoling8192 in #97 (5af7b)

View changes on GitHub

stacksjs/bunfig (bunfig)

No significant changes

View changes on GitHub

`v0.15.5`

Compare Source

No significant changes

View changes on GitHub

`v0.15.4`

Compare Source

No significant changes

View changes on GitHub

`v0.15.3`

Compare Source

No significant changes

View changes on GitHub

`v0.15.2`

Compare Source

No significant changes

View changes on GitHub

`v0.15.1`

Compare Source

No significant changes

View changes on GitHub

date-fns/date-fns (date-fns)

`v4.4.0`

Compare Source

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.
Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

`v4.3.0`

Compare Source

Kudos to @ImRodry and @puneetdixit200 for their contributions.

Fixed

Fixed missing modularized optimization fallback (for Next.js and others). See #4193.
Fixed pt locale first day of week to be Sunday. See #4195 by @ImRodry.
Fixed zh-CN, zh-HK, and zh-TW locale month parsing for October, November, and December. See #4194 by @puneetdixit200.

`v4.2.1`

Compare Source

Fixed

Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

`v4.2.0`

Compare Source

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.

lint-staged/lint-staged (lint-staged)

`v16.4.0`

Compare Source

Minor Changes

#1739 687fc90 Thanks @hyperz111! - Replace micromatch with picomatch to reduce dependencies.

`v16.3.4`

Compare Source

Patch Changes

#1742 9d6e827 Thanks @iiroj! - Update dependencies, including tinyexec@1.0.4 to make sure local node_modules/.bin are preferred to global locations (released in tinyexec@1.0.3).

`v16.3.3`

Compare Source

Patch Changes

#1740 0109e8d Thanks @iiroj! - Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash.

`v16.3.2`

Compare Source

Patch Changes

#1735 2adaf6c Thanks @iiroj! - Hide the extra cmd window on Windows by spawning tasks without the detached option.

`v16.3.1`

Compare Source

Patch Changes

#1729 cd5d762 Thanks @iiroj! - Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.

`v16.3.0`

Compare Source

Minor Changes

#1698 feda37a Thanks @iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.
#1699 1346d16 Thanks @iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes

#1726 87467aa Thanks @iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.

`v16.2.7`

Compare Source

Patch Changes

#1711 ef74c8d Thanks @iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.

`v16.2.6`

Compare Source

Patch Changes

#1693 33d4502 Thanks @Adrian-Baran-GY! - Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

`v16.2.5`

Compare Source

Patch Changes

#1687 9e02d9d Thanks @iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

`v16.2.4`

Compare Source

Patch Changes

#1682 0176038 Thanks @iiroj! - Update dependencies, including nano-spawn@2.0.0 with bug fixes.
#1671 581a54e Thanks @iiroj! - Speed up execution by only importing the yaml depedency if using YAML configuration files.

oven-sh/setup-bun (oven-sh/setup-bun)

`v2.2.0`

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

build: update action runtime to Node.js 24 by @adam0white in #176
ci: use actions/checkout@v6.0.2 in the test workflow by @tcely in #173
ci: update actions for the autofix.ci workflow by @tcely in #174
ci: update actions for the Release new action version workflow by @tcely in #175
release: v2.2.0 by @xhyrom in #177

New Contributors

@adam0white made their first contribution in #176
@tcely made their first contribution in #173

Full Changelog: oven-sh/setup-bun@v2...v2.2.0

`v2.1.3`

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

perf: avoid unnecessary api calls by @xhyrom in #161
feat: add bun- prefix to cache keys by @maschwenk in #160
fix: use native Windows ARM64 binary for Bun >= 1.3.10 by @oddrationale in #165
feat: add AVX2 support detection for x64 Linux systems by @GoForceX in #167
fix: validate cached binary version matches requested version (#146) by @wyMinLwin in #169
release: v2.1.3 by @xhyrom in #170

New Contributors

@oddrationale made their first contribution in #165
@GoForceX made their first contribution in #167
@wyMinLwin made their first contribution in #169

Full Changelog: oven-sh/setup-bun@v2...v2.1.3

`v2.1.2`

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

fix: default token only on public github instance by @xhyrom in #157

Full Changelog: oven-sh/setup-bun@v2...v2.1.2

`v2.1.1`

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

feat: implement wildcard resolution into the action by @xhyrom in #93
feat: fallback arm64 to x64 architecture for win32 platform by @xhyrom in #131
feat: use packageManager from package.json as default bun version by @xhyrom in #152
bump the form-data dependency to version v4.0.5 due to GHSA-fjxv-7rqg-78g4 by @Jarred-Sumner

Full Changelog: oven-sh/setup-bun@v2.1.0...v2.1.1

`v2.1.0`

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

chore: add settings for vscode by @okineadev in #120
feat: support for multiple registries by @xhyrom in #109
feat: read engines from package json by @xhyrom in #132
ci: disable tests with version selectors by @xhyrom in #133
chore(ci): Pin GitHub Actions to SHA-1s by @dgilmanuni in #140
feat: Check for existing bun before downloading by @erikaxel in #138
docs: restore missing no-cache input by @bashonly in #149
release: v2.1.0 by @xhyrom in #151

New Contributors

@dgilmanuni made their first contribution in #140
@erikaxel made their first contribution in #138
@bashonly made their first contribution in #149

Full Changelog: oven-sh/setup-bun@v2...v2.1.0

vitejs/vite (vite)