fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sxzz/eslint-config	^5.0.1 -> ^5.1.1
@sxzz/prettier-config	^2.1.2 -> ^2.2.0
@types/node (source)	^22.13.1 -> ^22.13.4
bumpp	^10.0.2 -> ^10.0.3
eslint (source)	^9.20.0 -> ^9.20.1
pnpm (source)	10.2.1 -> 10.4.1
prettier (source)	^3.5.0 -> ^3.5.1
rollup (source)	^4.34.6 -> ^4.34.7
unplugin-utils	^0.2.3 -> ^0.2.4

---

Release Notes

sxzz/eslint-config (@​sxzz/eslint-config)

v5.1.1

Compare Source

   🐞 Bug Fixes

• Ignore root output only  -  by @​sxzz (1f392)

    View changes on GitHub

v5.1.0

Compare Source

   🚀 Features

• Add de-morgan plugin  -  by @​sxzz (4c6d7)

    View changes on GitHub

v5.0.2

Compare Source

   🐞 Bug Fixes

• Allow default export for unloader file  -  by @​sxzz (771fb)

    View changes on GitHub

sxzz/prettier-config (@​sxzz/prettier-config)

v2.2.0

Compare Source

antfu-collective/bumpp (bumpp)

v10.0.3

Compare Source

   🐞 Bug Fixes

• Improve error handler  -  by @​northword in https://github.com/antfu-collective/bumpp/issues/73 (7d0dd)

    View changes on GitHub

eslint/eslint (eslint)

v9.20.1

Compare Source

pnpm/pnpm (pnpm)

v10.4.1

Compare Source

Patch Changes

• Throws an error when the value provided by the --allow-build option overlaps with the pnpm.ignoredBuildDependencies list #​9105.
• Print pnpm's version after the execution time at the end of the console output.
• Print warning about ignored builds of dependencies on repeat install #​9106.
• Setting init-package-manager should work.

v10.4.0

Compare Source

Minor Changes

• pnpm approve-builds --global works now for allowing dependencies of globally installed packages to run postinstall scripts.

• The pnpm add command now supports a new flag, --allow-build, which allows building the specified dependencies. For instance, if you want to install a package called bundle that has esbuild as a dependency and want to allow esbuild to run postinstall scripts, you can run:

  pnpm --allow-build=esbuild add bundle
  

  This will run esbuild's postinstall script and also add it to the pnpm.onlyBuiltDependencies field of package.json. So, esbuild will always be allowed to run its scripts in the future.

  Related PR: #​9086.

• The pnpm init command adds a packageManager field with the current version of pnpm CLI #​9069. To disable this behaviour, set the init-package-manager setting to false.

Patch Changes

• pnpm approve-builds should work after two consecutive pnpm install runs #​9083.
• Fix instruction for updating pnpm with corepack #​9101.
• The pnpm version specified by packageManager cannot start with v.

v10.3.0

Compare Source

Minor Changes

• Added a new setting called strict-dep-builds. When enabled, the installation will exit with a non-zero exit code if any dependencies have unreviewed build scripts (aka postinstall scripts) #​9071.

Patch Changes

• Fix a false negative of verify-deps-before-run after pnpm install --production|--no-optional #​9019.
• Print the warning about blocked installation scripts at the end of the installation output and make it more prominent.

prettier/prettier (prettier)

v3.5.1

Compare Source

diff

Fix CLI crash when cache for old version exists (#​17100 by @​sosukesuzuki)

Prettier 3.5 uses a different cache format than previous versions, Prettier 3.5.0 crashes when reading existing cache file, Prettier 3.5.1 fixed the problem.

Support dockercompose and github-actions-workflow in VSCode (#​17101 by @​remcohaszing)

Prettier now supports the dockercompose and github-actions-workflow languages in Visual Studio Code.

rollup/rollup (rollup)

v4.34.7

Compare Source

2025-02-14

Bug Fixes

• Ensure that calls to parameters are included correctly when using try-catch deoptimization (#​5842)

Pull Requests

• #​5840: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​5842: Fix prop inclusion with try-catch-deoptimization (@​lukastaegert)

sxzz/unplugin-utils (unplugin-utils)

v0.2.4

Compare Source

   🚨 Breaking Changes

• Escape \  -  by @​sxzz (44417)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

New and updated dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@sxzz/eslint-config@5.1.1 🔁 npm/@sxzz/eslint-config@5.0.1	Transitive: eval, filesystem, shell, unsafe	+243	33.7 MB	sxzz
npm/@sxzz/prettier-config@2.2.0 🔁 npm/@sxzz/prettier-config@2.1.2	None	0	3.61 kB	sxzz
npm/@types/node@22.13.4 🔁 npm/@types/node@22.13.1	None	+1	2.39 MB	types
npm/bumpp@10.0.3 🔁 npm/bumpp@10.0.2	Transitive: environment, filesystem, shell	+42	4.66 MB	antfu
npm/eslint@9.20.1 🔁 npm/eslint@9.20.0	Transitive: environment, eval, filesystem, shell, unsafe	+85	10.8 MB	eslintbot, openjsfoundation
npm/prettier@3.5.1 🔁 npm/prettier@3.5.0	None	0	7.88 MB	prettier-bot
npm/rollup@4.34.7 🔁 npm/rollup@4.34.6	None	+1	2.72 MB	eventualbuddha, lukastaegert, rich_harris, ...2 more
npm/unplugin-utils@0.2.4 🔁 npm/unplugin-utils@0.2.3	None	+2	149 kB	sxzz

View full report↗︎