chore(deps): update tooling dependencies (major) #410

renovate · 2025-07-20T23:01:18Z

This PR contains the following updates:

Package	Change	Age	Confidence
@commitlint/cli (source)	`19.5.0` -> `20.1.0`
@commitlint/config-conventional (source)	`19.5.0` -> `20.0.0`
cspell (source)	`8.14.4` -> `9.2.1`
lint-staged	`15.2.10` -> `16.2.4`
vue-tsc (source)	`2.1.6` -> `3.1.1`

Release Notes

conventional-changelog/commitlint (@commitlint/cli)

`v20.1.0`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.0.0`

Compare Source

Note: Version bump only for package @commitlint/cli

19.8.1 (2025-05-08)

Bug Fixes

update dependency tinyexec to v1 (#4332) (e49449f)

`v19.8.1`

Compare Source

Bug Fixes

update dependency tinyexec to v1 (#4332) (e49449f)

`v19.8.0`

Compare Source

Performance Improvements

use node: prefix to bypass require.cache call for builtins (#4302) (0cd8f41)

19.7.1 (2025-02-02)

Note: Version bump only for package @commitlint/cli

19.6.1 (2024-12-15)

Note: Version bump only for package @commitlint/cli

`v19.7.1`

Compare Source

Note: Version bump only for package @commitlint/cli

`v19.6.1`

Compare Source

Note: Version bump only for package @commitlint/cli

`v19.6.0`

Compare Source

Note: Version bump only for package @commitlint/cli

conventional-changelog/commitlint (@commitlint/config-conventional)

`v20.0.0`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

19.8.1 (2025-05-08)

Note: Version bump only for package @commitlint/config-conventional

`v19.8.1`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

`v19.8.0`

Compare Source

Performance Improvements

use node: prefix to bypass require.cache call for builtins (#4302) (0cd8f41)

19.7.1 (2025-02-02)

Note: Version bump only for package @commitlint/config-conventional

`v19.7.1`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

`v19.6.0`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

streetsidesoftware/cspell (cspell)

`v9.2.1`

Compare Source

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#7795)

`v9.2.0`

Compare Source

refactor: Support url based cache entries (#7639)

Features

fix: Support remote dependencies in cache (#7642)

Fixes

fix: Remove `flat-cache` dependency (#7636)

flat-cache v6 is not compatible with the cspell cache. Since flat-cache was mostly a pass through to flatted, it was better to just replace it.

refactor: move towards caching URLs (#7634)

fix: Support async cache (#7631)

fix: Replace file-entry-cache (#6579)

Deprecating the use of file-entry-cache.

v10 of file-entry-cache breaks the spell checker and bloats the cache size.

This PR is the first step in reducing the dependency upon file-entry-cache and its dependencies.

fix: Clean cspell-lib type exports (#7615)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#7618)

`v9.1.5`

Compare Source

Fixes

fix: Compile before publish (#7610)

`v9.1.3`

Compare Source

Fixes

fix: Add toml config reader/writer (#7565)

fixes #7563

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#7569)

`v9.1.2`

Compare Source

Fixes

fix: Do not double encode stdin urls (#7536)

fixes #7517

fix: cspell trace output (#7528)

It was incorrectly trimming ansi strings.

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#7526)

`v9.1.1`

Compare Source

Changes

Fixes

fix: Use the native JSON parser if possible (#7502)

Some of the cspell settings have grow large. The fix is to use the native JSON parser instead of one that accepts comments.

`v9.1.0`

Compare Source

Changes

Features

feat: Add command `dictionaries` (#7445)

Add new dictionaries command to the cli

Usage: cspell dictionaries [options]

List dictionaries

Options:
  -c, --config <cspell.json>  Configuration file to use.  By default cspell
                              looks for cspell.json in the current directory.
  --path-format <format>      Configure how to display the dictionary path.
                              (choices: "hide", "short", "long", "full",
                              default: Display most of the path.)
  --color                     Force color.
  --no-color                  Turn off color.
  --no-default-configuration  Do not load the default configuration and
                              dictionaries.
  -h, --help                  display help for command

feat: Add lint option `--dictionary` (#7441)

Add lint options:

--dictionary - enable a dictionary by name
--disable-dictionary - disable a dictionary by name

feat: Add init command to command-line. (#7414)

New command:

Usage: cspell init [options]

Initialize a CSpell configuration file.

Options:
  -o, --output <path>        Define where to write file.
  --format <format>          Define the format of the file. (choices: "yaml",
                             "yml", "json", "jsonc", default: "yaml")
  --import <path|package>    Import a configuration file or dictionary package.
  --locale <locale>          Define the locale to use when spell checking (e.g.,
                             en, en-US, de).
  --dictionary <dictionary>  Enable a dictionary.
  --no-comments              Do not add comments to the config file.
  --no-schema                Do not add the schema reference to the config file.
  -h, --help                 display help for command

feat: Add command line option to set reporting level (#7380)

`v9.0.2`

Compare Source

Changes

Fixes

fix: Add eslint plugin helpers (#7352)

Add helper methods:

defineCSpellPluginOptions
defineCSpellConfig

Add some examples for supportNonStrictSearches

fix: Make it possible to define a strict dictionary. (#7351)

fix: Correct the Hunspell Reader usage. (#7325)

Add an example.

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#7346)

`v9.0.1`

Compare Source

Changes

Fixes

fix: Add support to add words to config and keep comments. (#7295)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#7306)

`v9.0.0`

Compare Source

Note: Version bump only for package cspell

5.18.5 (2022-02-15)

Bug Fixes

Add dart language support (#2444) (bbcf793)
Make it easier to work with RTL languages. (#2410) (91b035f)

5.18.4 (2022-02-07)

Bug Fixes

Add simple repl feature to suggestions. (#2403) (f9835b7)
Improve speed of suggestions for long words. (#2406) (6c76907)

5.18.3 (2022-02-04)

Bug Fixes

Add support for R (#2394) (6888d48)
Improve cli summary and progress (#2396) (d52d68a)
Upgrade to commend-json 4.2.2 (#2399) (e5f643e)

5.18.2 (2022-02-03)

Bug Fixes

fix suggestion output (#2390) (bda442d)

Reverts

Revert "ci: Workflow Bot -- Update ALL Dependencies (#2388)" (#2391) (7f093f9), closes #2388 #2391

5.18.1 (2022-02-03)

Bug Fixes

Improve suggestions when using weights. (#2387) (c9d070d)
Upgrade to commander 9.0.0 (#2367) (f255b70)

`v8.19.4`

Compare Source

Note: Version bump only for package cspell

`v8.19.3`

Compare Source

Note: Version bump only for package cspell

`v8.19.2`

Compare Source

Note: Version bump only for package cspell

`v8.19.1`

Compare Source

Note: Version bump only for package cspell

`v8.19.0`

Compare Source

Note: Version bump only for package cspell

`v8.18.1`

Compare Source

ci: Workflow Bot -- Update ALL Dependencies (main) (#7087) (b570457), closes #7087

`v8.18.0`

Compare Source

ci: Workflow Bot -- Update ALL Dependencies (main) (#7080) (b9d57a1), closes #7080

`v8.17.5`

Compare Source

fix: Workflow Bot -- Update Dictionaries (main) (#6937) (2bfee05), closes #6937

`v8.17.4`

Compare Source

ci: Workflow Bot -- Update ALL Dependencies (main) (#6920) (e92597c), closes #6920

`v8.17.3`

Compare Source

chore: fix labeler (ea51ed4)

`v8.17.2`

Compare Source

fix: Dump stack on error when verbose (#6782) (df0026c), closes #6782

`v8.17.1`

Compare Source

chore: Update Integration Test Performance Data (#6681) (4b19439), closes #6681

`v8.17.0`

Compare Source

chore: Update Integration Test Performance Data (#6676) (f9cb45f), closes #6676

`v8.16.1`

Compare Source

chore: Update Integration Test Performance Data (#6602) (5d667a7), closes #6602

`v8.16.0`

Compare Source

chore: Update Integration Test Performance Data (#6505) (fb78a40), closes #6505

`v8.15.7`

Compare Source

ci: Workflow Bot -- Update ALL Dependencies (main) (#6456) (d4bd0dd), closes #6456

`v8.15.6`

Compare Source

chore: Update Integration Test Performance Data (#6455) (be8b15a), closes #6455

`v8.15.5`

Compare Source

ci: Workflow Bot -- Update ALL Dependencies (main) (#6442) (70f43cc), closes #6442

`v8.15.4`

Compare Source

chore: Update Integration Test Performance Data (#6389) (7ece6a7), closes #6389

`v8.15.3`

Compare Source

chore: Update Integration Test Performance Data (#6377) (7ff6781), closes #6377

`v8.15.2`

Compare Source

chore: Update Integration Test Performance Data (#6361) (d639368), closes #6361

`v8.15.1`

Compare Source

fix: Sign Published Packages (#6350) (633b060), closes #6350

`v8.15.0`

Compare Source

chore: bump eslint-plugin-unicorn from 55.0.0 to 56.0.0 (#6332) (67d1e92), closes #6332

lint-staged/lint-staged (lint-staged)

`v16.2.4`

Compare Source

Patch Changes

#1682 0176038 Thanks @iiroj! - Update dependencies, including [email protected] with bug fixes.
#1671 581a54e Thanks @iiroj! - Speed up execution by only importing the yaml depedency if using YAML configuration files.

`v16.2.3`

Compare Source

Patch Changes

#1669 27cd541 Thanks @iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

`v16.2.2`

Compare Source

Patch Changes

#1667 699f95d Thanks @iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

% npx lint-staged --fail-on-changes
✔ Backed up original state in git stash (c18d55a3)
✔ Running tasks for staged files...
✖ Tasks modified files and --fail-on-changes was used!
↓ Cleaning up temporary files...

✖ lint-staged failed because `--fail-on-changes` was used.

Any lost modifications can be restored from a git stash:

  > git stash list --format="%h %s"
  c18d55a3 On main: lint-staged automatic backup
  > git apply --index c18d55a3

`v16.2.1`

Compare Source

Patch Changes

#1664 8277b3b Thanks @iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions is readonly string[] and can't be mutated. Thanks @outslept!
```
export default {
---  "*": (files: string[]) => void console.log('staged files', files)
+++  "*": (files: readonly string[]) => void console.log('staged files', files)
}
```
#1654 70b9af3 Thanks @iiroj! - This version has been published from GitHub Actions using Trusted Publishing for npm packages.
#1659 4996817 Thanks @iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there are package.json files in the working directory. This situation might happen when running lint-staged for a single package in a monorepo.
#1654 7021f0a Thanks @iiroj! - Return the caret semver range (^) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates to lint-staged. This was changed in 16.2.0 after the vulnerability issues with chalk and debug, which were also removed in the same version.

Given the recent vulnerabilities in the npm ecosystem, it's best to be very careful when updating dependencies.

`v16.2.0`

Compare Source

Minor Changes

#1615 99eb742 Thanks @iiroj! - Added a new option --fail-on-changes to make lint-staged exit with code 1 when tasks modify any files, making the precommit hook fail. This is similar to the git diff --exit-code option. Using this flag also implies the --no-revert flag which means any changes made my tasks will be left in the working tree after failing, so that they can be manually staged and the commit tried again.
#1611 cd05fd3 Thanks @rlorenzo! - Added a new option --continue-on-error so that lint-staged will run all tasks to completion even if some of them fail. By default, lint-staded will exit early on the first failure.
#1637 82fcc07 Thanks @iiroj! - Internal lint-staged errors are now thrown and visible in the console output. Previously they were caught with the process exit code set to 1, but not logged. This happens when, for example, there's a syntax error in the lint-staged configuration file.
#1647 a5ecc06 Thanks @iiroj! - Remove debug as a dependency due to recent malware issue; read more at debug-js/debug#1005. Because of this, the DEBUG environment variable is no longer supported — use the --debug to enable debugging
#1636 8db2717 Thanks @iiroj! - Added a new option --hide-unstaged so that lint-staged will hide all unstaged changes to tracked files before running tasks. The changes will be applied back after running the tasks. Note that the combination of flags --hide-unstaged --no-hide-partially-staged isn't meaningful and behaves the same as just --hide-unstaged.

Thanks to @ItsNickBarry for the idea and initial implementation in #1552.
#1648 7900b3b Thanks @iiroj! - Remove lilconfig to reduce reliance on third-party dependencies. It was used to find possible config files outside of those tracked in Git, including from the parent directories. This behavior has been moved directly into lint-staged and should work about the same.

Patch Changes

#1633 7f9e485 Thanks @dependabot! - Bumps listr2 from 9.0.3 to 9.0.4.
#1626 99d5a9b Thanks @iiroj! - Due to recent phishing attacks, for example [email protected] was released with malware. To avoid lint-staged's users being at risk the direct dependencies are pinned to exact versions, instead of allowing future patch versions with the caret (^) range.
#1588 035bbf2 Thanks @outslept! - Increase performance by listing staged files and searching for configuration concurrently.
#1645 deba3ad Thanks @iiroj! - Remove chalk as a dependency due to recent malware issue; read more at chalk/chalk#656.

If you are having trouble with ANSI color codes when using lint-staged, you can try setting either FORCE_COLOR=true or NO_COLOR=true env variables.

`v16.1.6`

Compare Source

Patch Changes

#1610 e93578e Thanks @iiroj! - Try to improve terminating of subprocess of tasks by using SIGKILL, and only calling pidtree when the the main task process has a known pid.

`v16.1.5`

Compare Source

Patch Changes

#1608 4e3ce22 Thanks @srsatt! - Detect the git repo's top-level directory correctly when in a worktree.

`v16.1.4`

Compare Source

Patch Changes

#1604 90b37b0 Thanks @iiroj! - Add another types field to package.json to make even more sure NPM detects that lint-staged includes built-in TypeScript type definitions.

`v16.1.3`

Compare Source

Patch Changes

#1602 7ea700b Thanks @dword-design! - Add the types field to package.json to make sure NPM detects lint-staged includes built-in TypeScript type definitions.

`v16.1.2`

Compare Source

Patch Changes

#1570 a7c0c88 Thanks @ItsNickBarry! - When using --diff-filter with the D option to include deleted staged files, lint-staged no longer tries to stage the deleted files, unless they're no longer deleted. Previously this caused an error from git add like fatal: pathspec 'deleted-file' did not match any files.
38f942e Thanks @iiroj! - Removed an extraneous log entry that printed shouldHidePArtiallyStagedFiles to console output.

`v16.1.1`

Compare Source

Patch Changes

#1565 3686977 Thanks @iiroj! - Lint-staged now explicitly warns about potential data loss when using --no-stash.
#1571 02299a9 Thanks @iiroj! - Function tasks (introduced in v16.0.0) only received the staged files matching the conpmnfigured glob, instead of all staged files.
#1563 bc61c74 Thanks @iiroj! - This version fixes incorrect behavior where unstaged changes were committed when using the --no-stash option. This happened because --no-stash implied --no-hide-partially-staged, meaning unstaged changes to files which also had other staged changes were added to the commit by lint-staged; this is no longer the case.

The previous (incorrect) behavior can still be achieved by using both options --no-stash --no-hide-partially-staged at the same time.

`v16.1.0`

Compare Source

Minor Changes

#1536 e729daa Thanks @iiroj! - A new flag --no-revert has been introduced for when task modifications should be applied to the index before aborting the commit in case of errors. By default, lint-staged will clear all task modifications and revert to the original state.
#1550 b27fa3f Thanks @iiroj! - Lint-staged now ignores symlinks and leaves them out from the list of staged files.

Patch Changes

#1558 c37dc38 Thanks @iiroj! - The minimum required Node.js version is lowered to 20.17 following [email protected].

`v16.0.0`

Compare Source

Major Changes

#1546 158d15c Thanks @iiroj! - Processes are spawned using nano-spawn instead of execa. If you are using Node.js scripts as tasks, you might need to explicitly run them with node, especially when using Windows:
```
{
  "*.js": "node my-js-linter.js"
}
```
#1546 158d15c Thanks @iiroj! - The --shell flag has been removed and lint-staged no longer supports evaluating commands directly via a shell. To migrate existing commands, you can create a shell script and invoke it instead. Lint-staged will pass matched staged files as a list of arguments, accessible via "$@":

`v15.5.2`

Compare Source

Patch Changes

#1544 5561321 Thanks @YimingIsCOLD! - Correctly handle colon (:) characters in staged filenames.

`v15.5.1`

Compare Source

Patch Changes

[#

Configuration

📅 Schedule: Branch creation - "before 5am on monday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-07-20T23:08:27Z

Visit the preview URL for this PR (updated for commit 0f09728):

https://zksync-docs-staging-5eb09--pr410-renovate-major-tooli-p66k4b83.web.app

_{(expires Thu, 23 Oct 2025 17:40:16 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: bfaafba5fa82d4f63473aaa76a21fabf1fbb3a11}

renovate bot requested a review from a team as a code owner July 20, 2025 23:01

renovate bot force-pushed the renovate/major-tooling-deps branch 7 times, most recently from 59780f8 to ef79e32 Compare July 28, 2025 11:34

renovate bot force-pushed the renovate/major-tooling-deps branch 3 times, most recently from ed8c930 to 8123dce Compare August 3, 2025 19:34

renovate bot force-pushed the renovate/major-tooling-deps branch 5 times, most recently from 7d7f75f to 792980c Compare August 13, 2025 15:34

renovate bot force-pushed the renovate/major-tooling-deps branch 5 times, most recently from c18ac0d to b6c4b75 Compare August 21, 2025 20:27

renovate bot force-pushed the renovate/major-tooling-deps branch 6 times, most recently from eac04cd to 397b5a6 Compare September 3, 2025 15:19

renovate bot force-pushed the renovate/major-tooling-deps branch 2 times, most recently from b01ddcd to 9533f20 Compare September 13, 2025 22:53

renovate bot force-pushed the renovate/major-tooling-deps branch 3 times, most recently from 358ed1c to dc0037c Compare September 22, 2025 06:41

renovate bot force-pushed the renovate/major-tooling-deps branch 4 times, most recently from 3dabe97 to 68aea23 Compare September 28, 2025 14:27

renovate bot force-pushed the renovate/major-tooling-deps branch 5 times, most recently from 50df6d6 to d36f10d Compare October 6, 2025 19:39

renovate bot force-pushed the renovate/major-tooling-deps branch 4 times, most recently from ef2760e to 147346f Compare October 16, 2025 15:34

chore(deps): update tooling dependencies

0f09728

renovate bot force-pushed the renovate/major-tooling-deps branch from 147346f to 0f09728 Compare October 16, 2025 17:33

chore(deps): update tooling dependencies (major) #410

Are you sure you want to change the base?

chore(deps): update tooling dependencies (major) #410

Conversation

renovate bot commented Jul 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

19.8.1 (2025-05-08)

Bug Fixes

Bug Fixes

Performance Improvements

19.7.1 (2025-02-02)

19.6.1 (2024-12-15)

19.8.1 (2025-05-08)

Performance Improvements

19.7.1 (2025-02-02)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#​7795)

refactor: Support url based cache entries (#​7639)

Features

fix: Support remote dependencies in cache (#​7642)

Fixes

fix: Remove flat-cache dependency (#​7636)

refactor: move towards caching URLs (#​7634)

fix: Support async cache (#​7631)

fix: Replace file-entry-cache (#​6579)

fix: Clean cspell-lib type exports (#​7615)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#​7618)

Fixes

fix: Compile before publish (#​7610)

Fixes

fix: Add toml config reader/writer (#​7565)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#​7569)

Fixes

fix: Do not double encode stdin urls (#​7536)

fix: cspell trace output (#​7528)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#​7526)

Changes

Fixes

fix: Use the native JSON parser if possible (#​7502)

Changes

Features

feat: Add command dictionaries (#​7445)

feat: Add lint option --dictionary (#​7441)

feat: Add init command to command-line. (#​7414)

feat: Add command line option to set reporting level (#​7380)

Changes

Fixes

fix: Add eslint plugin helpers (#​7352)

fix: Make it possible to define a strict dictionary. (#​7351)

fix: Correct the Hunspell Reader usage. (#​7325)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#​7346)

Changes

Fixes

fix: Add support to add words to config and keep comments. (#​7295)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#​7306)

5.18.5 (2022-02-15)

Bug Fixes

5.18.4 (2022-02-07)

Bug Fixes

5.18.3 (2022-02-04)

Bug Fixes

5.18.2 (2022-02-03)

Bug Fixes

Reverts

5.18.1 (2022-02-03)

Bug Fixes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

renovate bot commented Jul 20, 2025 •

edited

Loading

fix: Workflow Bot -- Update Dictionaries (main) (#7795)

refactor: Support url based cache entries (#7639)

fix: Support remote dependencies in cache (#7642)

fix: Remove `flat-cache` dependency (#7636)

refactor: move towards caching URLs (#7634)

fix: Support async cache (#7631)

fix: Replace file-entry-cache (#6579)

fix: Clean cspell-lib type exports (#7615)

fix: Workflow Bot -- Update Dictionaries (main) (#7618)

fix: Compile before publish (#7610)

fix: Add toml config reader/writer (#7565)

fix: Workflow Bot -- Update Dictionaries (main) (#7569)

fix: Do not double encode stdin urls (#7536)

fix: cspell trace output (#7528)

fix: Workflow Bot -- Update Dictionaries (main) (#7526)

fix: Use the native JSON parser if possible (#7502)

feat: Add command `dictionaries` (#7445)

feat: Add lint option `--dictionary` (#7441)

feat: Add init command to command-line. (#7414)

feat: Add command line option to set reporting level (#7380)

fix: Add eslint plugin helpers (#7352)

fix: Make it possible to define a strict dictionary. (#7351)

fix: Correct the Hunspell Reader usage. (#7325)

fix: Workflow Bot -- Update Dictionaries (main) (#7346)

fix: Add support to add words to config and keep comments. (#7295)

fix: Workflow Bot -- Update Dictionaries (main) (#7306)