Skip to content

Update all non-major dependencies#2749

Open
renovate[bot] wants to merge 1 commit intodevfrom
renovate/all-minor-patch
Open

Update all non-major dependencies#2749
renovate[bot] wants to merge 1 commit intodevfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 12, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
@mixedbread/sdk ^0.46.0 → ^0.50.0 age confidence
@scalar/openapi-parser (source) 0.24.5 → 0.24.6 age confidence
@tanstack/react-router (source) 1.157.16 → 1.157.18 age confidence
@tanstack/react-router-devtools (source) 1.157.16 → 1.157.18 age confidence
@tanstack/react-start (source) 1.157.16 → 1.157.18 age confidence
@tanstack/start-static-server-functions (source) 1.157.16 → 1.157.18 age confidence
bun (source) 1.3.6 → 1.3.8 age confidence
nitro (source) 3.0.1-20260128-211656-ae83c97e → 3.0.1-20260131-190432-654aa755 age confidence
pnpm (source) 10.18.3 → 10.28.2 age confidence
shadcn (source) 3.7.0 → 3.8.1 age confidence
tsdown (source) ^0.19.0 → ^0.20.0 age confidence
turbo (source) 2.8.0 → 2.8.1 age confidence

Release Notes

mixedbread-ai/mixedbread-ts (@​mixedbread/sdk)

v0.50.1

Compare Source

Full Changelog: v0.50.0...v0.50.1

Bug Fixes
  • publish: remove extraneous npm copy from package (915f68c)

v0.50.0

Compare Source

Full Changelog: v0.49.3...v0.50.0

Features
scalar/scalar (@​scalar/openapi-parser)

v0.24.6

Patch Changes
  • #​7963: feat: unify is-object helpers
Updated Dependencies
TanStack/router (@​tanstack/react-router)

v1.157.18

Compare Source

Version 1.157.18 - 1/31/26, 3:41 PM

Changes
Refactor
Packages

v1.157.17

Compare Source

Version 1.157.17 - 1/30/26, 10:26 PM

Changes
Fix
Docs
  • Updated typo in internationalization-i18n.md (#​6523) (5ae6217) by Alexander Schmid
Packages
oven-sh/bun (bun)

v1.3.8: Bun v1.3.8

Compare Source

To install Bun v1.3.8

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.8:

bun upgrade
Read Bun v1.3.8's release notes on Bun's blog
Thanks to 4 contributors!

v1.3.7: Bun v1.3.7

Compare Source

To install Bun v1.3.7

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.7:

bun upgrade
Read Bun v1.3.7's release notes on Bun's blog
Thanks to 11 contributors!
nitrojs/nitro (nitro)

v3.0.1-20260131-190432-654aa755

Compare Source

v3.0.1-20260131-182848-a1e4ca77

Compare Source

v3.0.1-20260131-134752-eea737f2

Compare Source

v3.0.1-20260131-115446-8aa7b23e

Compare Source

pnpm/pnpm (pnpm)

v10.28.2

Compare Source

v10.28.1

Compare Source

v10.28.0

Compare Source

v10.27.0

Compare Source

v10.26.2: pnpm 10.26.2

Compare Source

Patch Changes

  • Improve error message when a package version exists but does not meet the minimumReleaseAge constraint. The error now clearly states that the version exists and shows a human-readable time since release (e.g., "released 6 hours ago") #​10307.

  • Fix installation of Git dependencies using annotated tags #​10335.

    Previously, pnpm would store the annotated tag object's SHA in the lockfile instead of the actual commit SHA. This caused ERR_PNPM_GIT_CHECKOUT_FAILED errors because the checked-out commit hash didn't match the stored tag object hash.

  • Binaries of runtime engines (Node.js, Deno, Bun) are written to node_modules/.bin before lifecycle scripts (install, postinstall, prepare) are executed #​10244.

  • Try to avoid making network calls with preferOffline #​10334.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.26.1: pnpm 10.26.1

Compare Source

Patch Changes

  • Don't fail on pnpm add, when blockExoticSubdeps is set to true #​10324.
  • Always resolve git references to full commits and ensure HEAD points to the commit after checkout #​10310.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.26.0

Compare Source

v10.25.0

Compare Source

v10.24.0

Compare Source

v10.23.0: pnpm 10.23

Compare Source

Minor Changes

  • Added --lockfile-only option to pnpm list #​10020.

Patch Changes

  • pnpm self-update should download pnpm from the configured npm registry #​10205.
  • pnpm self-update should always install the non-executable pnpm package (pnpm in the registry) and never the @pnpm/exe package, when installing v11 or newer. We currently cannot ship @pnpm/exe as pkg doesn't work with ESM #​10190.
  • Node.js runtime is not added to "dependencies" on pnpm add, if there's a engines.runtime setting declared in package.json #​10209.
  • The installation should fail if an optional dependency cannot be installed due to a trust policy check failure #​10208.
  • pnpm list and pnpm why now display npm: protocol for aliased packages (e.g., foo npm:is-odd@3.0.1) #​8660.
  • Don't add an extra slash to the Node.js mirror URL #​10204.
  • pnpm store prune should not fail if the store contains Node.js packages #​10131.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.22.0: pnpm 10.22

Compare Source

Minor Changes

  • Added support for trustPolicyExclude #​10164.

    You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:

    trustPolicy: no-downgrade
trustPolicyExclude:
  - chokidar@4.0.3
  - webpack@4.47.0 || 5.102.1

  • Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

  • Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #​10179.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.21.0

Compare Source

v10.20.0

Compare Source

Minor Changes
  • Support --all option in pnpm --help to list all commands #​8628.
Patch Changes
  • When the latest version doesn't satisfy the maturity requirement configured by minimumReleaseAge, pick the highest version that is mature enough, even if it has a different major version #​10100.
  • create command should not verify patch info.
  • Set managePackageManagerVersions to false, when switching to a different version of pnpm CLI, in order to avoid subsequent switches #​10063.

v10.19.0

Compare Source

Minor Changes

  • You can now allow specific versions of dependencies to run postinstall scripts. onlyBuiltDependencies now accepts package names with lists of trusted versions. For example:

    onlyBuiltDependencies:
  - nx@21.6.4 || 21.6.5
  - esbuild@0.25.1

    Related PR: #​10104.

  • Added support for exact versions in minimumReleaseAgeExclude #​9985.

    You can now list one or more specific versions that pnpm should allow to install, even if those versions don’t satisfy the maturity requirement set by minimumReleaseAge. For example:

    minimumReleaseAge: 1440
minimumReleaseAgeExclude:
  - nx@21.6.5
  - webpack@4.47.0 || 5.102.1
shadcn-ui/ui (shadcn)

v3.8.1

Compare Source

Patch Changes

v3.8.0

Compare Source

Minor Changes
Patch Changes
rolldown/tsdown (tsdown)

v0.20.1

Compare Source

   🚀 Features
    View changes on GitHub

v0.20.0

Compare Source

   🚨 Breaking Changes
   🚀 Features
   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub
vercel/turborepo (turbo)

v2.8.1

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@changeset-bot
Copy link

changeset-bot bot commented Dec 12, 2025 •
edited
Loading

⚠️ No Changeset found

Latest commit: c1ae52d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@vercel
Copy link

vercel bot commented Dec 12, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
fumadocs Error Error Jan 31, 2026 9:56pm
fumadocs-marble-cms Error Error Jan 31, 2026 9:56pm
fumadocs-tanstack-start Error Error Jan 31, 2026 9:56pm
1 Skipped Deployment
Project Deployment Actions Updated (UTC)
fumadocs-react-router Ignored Ignored Jan 31, 2026 9:56pm

Request Review

@coderabbitai
Copy link

coderabbitai bot commented Dec 12, 2025 •
edited
Loading

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 44bc5ae to c25b0e9 Compare December 12, 2025 06:13
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c25b0e9 to 1f204b5 Compare December 12, 2025 07:48
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1f204b5 to b2f4aa2 Compare December 12, 2025 14:04
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from b2f4aa2 to f71077d Compare December 12, 2025 21:57
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from f71077d to 2d37b95 Compare December 13, 2025 01:55
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 2d37b95 to bdf6e10 Compare December 13, 2025 06:12
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from bb82315 to 2501fc8 Compare December 15, 2025 14:49
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 2501fc8 to faf7f97 Compare December 15, 2025 17:10
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from faf7f97 to 8ed2ea0 Compare December 16, 2025 03:08
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 8ed2ea0 to 9803d68 Compare December 16, 2025 23:54
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9803d68 to 206dbfb Compare December 17, 2025 01:35
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 206dbfb to 44c610a Compare December 17, 2025 05:15
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 44c610a to 3e6b814 Compare December 17, 2025 21:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants