Skip to content

fix(deps): update all non-major dependencies#1168

Merged
hi-ogawa merged 1 commit intomainfrom
renovate/all-minor-patch
Apr 1, 2026
Merged

fix(deps): update all non-major dependencies#1168
hi-ogawa merged 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 30, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@cloudflare/vite-plugin (source) ^1.30.0 → ^1.30.3 age confidence
@playwright/test (source) ^1.58.2 → ^1.59.0 age confidence
@rolldown/pluginutils (source) 1.0.0-rc.10 → 1.0.0-rc.12 age confidence
oxfmt (source) ^0.41.0 → ^0.43.0 age confidence
playwright-chromium (source) ^1.58.2 → ^1.59.0 age confidence
pnpm (source) 10.32.1 → 10.33.0 age confidence
react-router (source) 7.13.1 → 7.13.2 age confidence
rolldown (source) 1.0.0-rc.10 → 1.0.0-rc.12 age confidence
srvx (source) ^0.11.12 → ^0.11.13 age confidence
tsdown (source) ^0.21.4 → ^0.21.7 age confidence
typescript-eslint (source) ^8.57.1 → ^8.58.0 age confidence
vite (source) ^8.0.1 → ^8.0.3 age confidence
vitest (source) ^4.1.0 → ^4.1.2 age confidence
wrangler (source) ^4.76.0 → ^4.79.0 age confidence

Release Notes

cloudflare/workers-sdk (@​cloudflare/vite-plugin)

v1.30.3

Compare Source

Patch Changes

  • #​13111 f214760 Thanks @​dependabot! - Add missing connect key to WorkerEntrypoint and DurableObject key lists in the runner worker

    The connect method was added to the WorkerEntrypoint and DurableObject types in workerd 1.20260329.1 but was missing from the WORKER_ENTRYPOINT_KEYS and DURABLE_OBJECT_KEYS arrays used for RPC property access in the Vite plugin runner worker. This caused the compile-time exhaustiveness check to fail with the updated workers-types.

  • Updated dependencies [ffbc268, 9eff028, ed20a9b, f214760, 746858a, 9aad27f, 1fc5518, b539dc7, 9282493, a532eea, cd0e971, d4c6158, 2565b1d]:

    • wrangler@​4.79.0
    • miniflare@​4.20260329.0

v1.30.2

Compare Source

Patch Changes

v1.30.1

Compare Source

Patch Changes

  • #​12851 86a40f0 Thanks @​jamesopstad! - Fix a bug that prevented using subpath imports for additional module types

    You can now use subpath imports for additional module types (.html, .txt, .sql, .bin, .wasm) by defining them in your package.json imports field:

    // package.json
{
  "imports": {
    "#templates/page": "./src/templates/page.html"
  }
}
    import page from "#templates/page";

export default {
  fetch() {
    return new Response(page, {
      headers: { "Content-Type": "text/html" },
    });
  },
} satisfies ExportedHandler;

  • Updated dependencies [593c4db, b8f3309, 451dae3, 5aaaab2, 5aaaab2, f8516dd, 9c9fe30, 379f2a2, c2e9163, 6a6449e, 9a1cf29, 875da60]:

    • wrangler@​4.77.0
    • miniflare@​4.20260317.2
microsoft/playwright (@​playwright/test)

v1.59.0

Compare Source

rolldown/rolldown (@​rolldown/pluginutils)

v1.0.0-rc.12

Compare Source

🚀 Features
  • chunk-optimizer: skip circular dependency check when strict execution order is enabled (#​8886) by @​hyf0
🐛 Bug Fixes
🚜 Refactor
  • treeshake: migrate SideEffectDetector to Oxc's MayHaveSideEffects trait (#​8624) by @​Dunqing
🧪 Testing
  • make dev server tests deterministic by replacing fixed sleeps with event-driven polling (#​8561) by @​Boshen
⚙️ Miscellaneous Tasks

v1.0.0-rc.11

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
⚡ Performance
🧪 Testing
⚙️ Miscellaneous Tasks
❤️ New Contributors
oxc-project/oxc (oxfmt)

v0.43.0

Compare Source

🚀 Features

v0.42.0

Compare Source

🚀 Features
  • 416865a formatter,oxfmt: Add doc comments for JsdocConfig (#​20644) (leaysgur)
  • 4fec907 formatter: Add JSDoc comment formatting support (#​19828) (Dunqing)
pnpm/pnpm (pnpm)

v10.33.0

Compare Source

remix-run/react-router (react-router)

v7.13.2

Compare Source

Patch Changes

  • Fix clientLoader.hydrate when an ancestor route is also hydrating a clientLoader (#​14835)

  • Fix type error when passing Framework Mode route components using Route.ComponentProps to createRoutesStub (#​14892)

  • Fix percent encoding in relative path navigation (#​14786)

  • Add future.unstable_passThroughRequests flag (#​14775)

    By default, React Router normalizes the request.url passed to your loader, action, and middleware functions by removing React Router's internal implementation details (.data suffixes, index + _routes query params).

    Enabling this flag removes that normalization and passes the raw HTTP request instance to your handlers. This provides a few benefits:

    • Reduces server-side overhead by eliminating multiple new Request() calls on the critical path
    • Allows you to distinguish document from data requests in your handlers base don the presence of a .data suffix (useful for observability purposes)

    If you were previously relying on the normalization of request.url, you can switch to use the new sibling unstable_url parameter which contains a URL instance representing the normalized location:

    // ❌ Before: you could assume there was no `.data` suffix in `request.url`
export async function loader({ request }: Route.LoaderArgs) {
  let url = new URL(request.url);
  if (url.pathname === "/path") {
    // This check will fail with the flag enabled because the `.data` suffix will
    // exist on data requests
  }
}

// ✅ After: use `unstable_url` for normalized routing logic and `request.url`
// for raw routing logic
export async function loader({ request, unstable_url }: Route.LoaderArgs) {
  if (unstable_url.pathname === "/path") {
    // This will always have the `.data` suffix stripped
  }

  // And now you can distinguish between document versus data requests
  let isDataRequest = new URL(request.url).pathname.endsWith(".data");
}

  • Internal refactor to consolidate framework-agnostic/React-specific route type layers - no public API changes (#​14765)

  • Sync protocol validation to rsc flows (#​14882)

  • Add a new unstable_url: URL parameter to route handler methods (loader, action, middleware, etc.) representing the normalized URL the application is navigating to or fetching, with React Router implementation details removed (.datasuffix, index/_routes query params) (#​14775)

    This is being added alongside the new future.unstable_passthroughRequests future flag so that users still have a way to access the normalized URL when that flag is enabled and non-normalized request's are being passed to your handlers. When adopting this flag, you will only need to start leveraging this new parameter if you are relying on the normalization of request.url in your application code.

    If you don't have the flag enabled, then unstable_url will match request.url.

rolldown/tsdown (tsdown)

v0.21.7

Compare Source

   🚀 Features
  • Add module option for attw and publint to allow passing imported modules directly  -  by @​sxzz (31e90)
   🐞 Bug Fixes
  • deps: Add skipNodeModulesBundle dep subpath e2e tests and fix docs  -  by @​sxzz (deff7)
    View changes on GitHub

v0.21.6

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.21.5

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
typescript-eslint/typescript-eslint (typescript-eslint)

v8.58.0

Compare Source

🚀 Features
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.2

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v8.0.3

Compare Source

Features
Bug Fixes
  • html: cache unfiltered CSS list to prevent missing styles across entries (#​22017) (5464190)
  • module-runner: handle non-ascii characters in base64 sourcemaps (#​21985) (77c95bf)
  • module-runner: skip re-import if the runner is closed (#​22020) (ee2c2cd)
  • optimizer: scan is not resolving sub path import if used in a glob import (#​22018) (ddfe20d)
  • ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#​22019) (cff5f0c)
Miscellaneous Chores
Tests

v8.0.2

Compare Source

Features
Bug Fixes
Miscellaneous Chores
vitest-dev/vitest (vitest)

v4.1.2

Compare Source

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (#​9975).

   🐞 Bug Fixes
    View changes on GitHub

v4.1.1

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
cloudflare/workers-sdk (wrangler)

v4.79.0

Compare Source

Minor Changes

  • #​12868 ffbc268 Thanks @​danielgek! - Add wrangler ai-search command namespace for managing Cloudflare AI Search instances

    Introduces a CLI surface for the Cloudflare AI Search API (open beta), including:

    • Instance management: ai-search list, create, get, update, delete
    • Semantic search: ai-search search with repeatable --filter key=value flags
    • Instance stats: ai-search stats

    The create command uses an interactive wizard to guide configuration. All commands require authentication via wrangler login.

  • #​13097 cd0e971 Thanks @​pombosilva! - Add --local flag to Workflows commands for interacting with local dev

    All Workflows CLI commands now support a --local flag that targets a running wrangler dev session instead of the Cloudflare production API. This uses the /cdn-cgi/explorer/api/workflows endpoints served by the local dev server.

    wrangler workflows list --local
wrangler workflows trigger my-workflow '{"key":"value"}' --local
wrangler workflows instances describe my-workflow latest --local
wrangler workflows instances pause my-workflow <id> --local --port 9000

    By default, commands continue to hit remote (production). Pass --local to opt in, and optionally --port to specify a custom dev server port (defaults to 8787).

Patch Changes

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 7e14521 to d127828 Compare March 31, 2026 14:58
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from d127828 to 39ebcca Compare April 1, 2026 01:07
@hi-ogawa hi-ogawa merged commit c8fc4c6 into main Apr 1, 2026
21 checks passed
@hi-ogawa hi-ogawa deleted the renovate/all-minor-patch branch April 1, 2026 02:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hi-ogawa