fix(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@clack/prompts (source)	^1.3.0 → ^1.4.0			devDependencies	minor
@shikijs/vitepress-twoslash (source)	^4.0.2 → ^4.1.0			devDependencies	minor
@types/node (source)	^24.12.3 → ^24.12.4			devDependencies	patch
@types/react (source)	^19.2.14 → ^19.2.15			devDependencies	patch
@vitejs/devtools (source)	^0.1.21 → ^0.1.24			devDependencies	patch
@vitejs/plugin-react (source)	^6.0.1 → ^6.0.2			devDependencies	patch
@vitejs/plugin-vue (source)	^6.0.6 → ^6.0.7			devDependencies	patch
@vitest/utils (source)	4.1.5 → 4.1.7			devDependencies	patch
baseline-browser-mapping	^2.10.29 → ^2.10.31			devDependencies	patch
eslint (source)	^10.3.0 → ^10.4.0			devDependencies	minor
lit (source)	^3.3.2 → ^3.3.3			dependencies	patch
miniflare (source)	^4.20260507.1 → ^4.20260518.0			devDependencies	minor
oxfmt (source)	^0.48.0 → ^0.51.0			devDependencies	minor
playwright-chromium (source)	^1.59.1 → ^1.60.0			devDependencies	minor
pnpm/action-setup	v6.0.6 → v6.0.8			action	patch
postcss (source)	^8.5.14 → ^8.5.15			dependencies	patch
preact (source)	^10.29.1 → ^10.29.2			dependencies	patch
solid-js (source)	^1.9.12 → ^1.9.13			dependencies	patch
svelte (source)	^5.55.5 → ^5.55.9			devDependencies	patch
tsx (source)	^4.21.0 → ^4.22.3			devDependencies	minor
typescript-eslint (source)	^8.59.2 → ^8.59.4			devDependencies	patch
vite (source)	^8.0.12 → ^8.0.13			devDependencies	patch
vitest (source)	^4.1.5 → ^4.1.7			devDependencies	patch
vue-tsc (source)	^3.2.8 → ^3.3.1			devDependencies	minor
ws	^8.20.0 → ^8.20.1			devDependencies	patch
zizmorcore/zizmor-action	v0.5.3 → v0.5.6			action	patch

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

bombshell-dev/clack (@​clack/prompts)

v1.4.0

Compare Source

Minor Changes

• 284677e: Support scrolling and maxItems option for groupMultiselect, and removes indent when withGuide is set to false

Patch Changes

• aab46a2: docs: add jsdoc for text, password, and multiline prompts
• 54be8d7: Fix line wrapping and overflow computation in group multi-select and other list-like prompts.
• Updated dependencies [54be8d7]
  • @​clack/core@​1.3.1

shikijs/shiki (@​shikijs/vitepress-twoslash)

v4.1.0

Compare Source

   🐞 Bug Fixes

• twoslash: Forward tsModule to createTwoslasher  -  by @​arthurfiorette in #​1271 (be89a)

    View changes on GitHub

vitejs/devtools (@​vitejs/devtools)

v0.1.24

Compare Source

   🐞 Bug Fixes

• ci: Switch tsdown config-loader from tsx to unrun  -  by @​antfu in #​349 (d1ddd)
• core: Split client/server tsdown builds to keep ws/node out of browser  -  by @​antfu in #​347 (30859)

    View changes on GitHub

v0.1.23

Compare Source

   🚀 Features

• core:
  • Auto collapse dock overflow panel on entry click  -  by @​JianJroh in #​333 (d15b0)
  • Apply glass effect to sticky DataTable header  -  by @​JianJroh in #​340 (7c0f5)
  • Migrate h3 v1 to v2 to align with devframe  -  by @​antfu in #​346 (3b8a1)

   🐞 Bug Fixes

• Devframe import  -  by @​antfu (6d24d)
• core:
  • Auto-close dock overflow panel when dock minimizes  -  by @​JianJroh in #​338 (897ce)
  • Set open state false when switching to no entry  -  by @​JianJroh in #​337 (0259b)
• docs:
  • Build workspace packages before docs  -  by @​antfu in #​344 (3f460)
• scripts:
  • Recover from stale devframe/ when initializing submodule  -  by @​antfu (c83ce)
• ui:
  • Isolate dark mode localStorage key to prevent theme leaking from iframe panels  -  by @​SaKaNa-Y in #​334 (e6781)

    View changes on GitHub

v0.1.22

Compare Source

   🚨 Breaking Changes

• devframe:
  • Relocate json-render from devframe to devtools-kit  -  by @​antfu and Claude Opus 4.7 (1M context) in #​327 (fdb31)
  • Split auth and rename internal under devframe/node  -  by @​antfu in #​332 (f2068)

   🚀 Features

• devframe:
  • Dev-time RPC bridge via createVitePlugin({ devMiddleware }) and Nuxt module  -  by @​antfu and Claude Opus 4.7 (1M context) in #​329 (f2558)
  • Bundle deps into utils/* with stable minimal API  -  by @​antfu in #​331 (3e991)

   🐞 Bug Fixes

• core: Pass null to avoid serialization error  -  by @​JianJroh in #​325 (e4917)

    View changes on GitHub

vitejs/vite-plugin-react (@​vitejs/plugin-react)

v6.0.2

Compare Source

Allow all options in reactCompilerPreset (#​1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

vitejs/vite-plugin-vue (@​vitejs/plugin-vue)

v6.0.7

Features

• use carets for @rolldown/pluginutils version (#​776) (941b651)

Bug Fixes

• deps: update all non-major dependencies (#​762) (9e825b8)
• deps: update all non-major dependencies (#​774) (77dc8bc)

vitest-dev/vitest (@​vitest/utils)

v4.1.7

Compare Source

   🐞 Bug Fixes

• runner: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by @​hi-ogawa in #​10384 (4f0f2)

    View changes on GitHub

v4.1.6

Compare Source

   🐞 Bug Fixes

• browser: Provide project reference in ToMatchScreenshotResolvePath  -  by @​macarie and @​sheremet-va in #​10138 (31882)
• Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options  -  by @​hi-ogawa, Codex and @​sheremet-va in #​10196 (2847d)
• browser: Simplify orchestrator otel carrier  -  by @​hi-ogawa in #​10285 (18af9)

   🏎 Performance

• Stringify diff objects only once  -  by @​sheremet-va in #​10276 (9f7b1)

    View changes on GitHub

web-platform-dx/baseline-browser-mapping (baseline-browser-mapping)

v2.10.31

Compare Source

v2.10.30

Compare Source

eslint/eslint (eslint)

v10.4.0

Compare Source

lit/lit (lit)

v3.3.3

Compare Source

Patch Changes

• #​5218 be6b275035079db3239be4019c4f93c2b1f32428 Thanks @​louis-bompart! - Ensure the ref directive disconnect gracefuly when its internal ref is undefined.

cloudflare/workers-sdk (miniflare)

v4.20260518.0

Compare Source

Minor Changes

• #​13864 b27eb18 Thanks @​benjamincburns! - Bumped miniflare deps acorn to 8.16.0 and acorn-walk to 8.3.5 to add support for the using and await using keywords when miniflare parses scripts.

Patch Changes

• #​13948 b25dc0d Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20260515.1	1.20260518.1

• #​13932 ebf4b24 Thanks @​zebp! - Fix local Workflow startup when compatibility flags include experimental

  Miniflare now deduplicates compatibility flags for the internal Workflow engine service. This prevents wrangler dev from failing with Compatibility flag specified multiple times: experimental when the user's Worker already enables that flag.

v4.20260515.0

Compare Source

Patch Changes

• #​13926 19ed49a Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20260511.1	1.20260515.1

v4.20260511.0

Compare Source

Patch Changes

• #​13894 58b4403 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20260508.1	1.20260511.1

• #​13646 f781a2b Thanks @​emily-shen! - Propagate cf-trace-id header on remote binding proxy requests

  When the CF_TRACE_ID environment variable is set, its value is now forwarded as a cf-trace-id header on outgoing remote binding proxy requests. This makes it easier to correlate traces when debugging remote bindings in local development.

v4.20260508.0

Compare Source

Minor Changes

• #​8431 5d936c5 Thanks @​penalosa! - Support workerd autogates via the MINIFLARE_WORKERD_AUTOGATES environment variable.

Patch Changes

• #​13866 4e44ce6 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20260507.1	1.20260508.1

oxc-project/oxc (oxfmt)

v0.51.0

Compare Source

v0.50.0

Compare Source

🐛 Bug Fixes

• 43b9978 formatter/sort_imports: Treat subpath imports as internal (#​22440) (leaysgur)

v0.49.0

Compare Source

🚀 Features

• 6e8e818 oxfmt: Experimental .svelte support (#​21700) (leaysgur)

microsoft/playwright (playwright-chromium)

v1.60.0

Compare Source

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});

await page.locator('#dropzone').drop({
  data: {
    'text/plain': 'hello world',
    'text/uri-list': 'https://example.com',
  },
});

🎯 Aria snapshots

• expect(page).toMatchAriaSnapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator('body').
• New boxes option on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page

• Event browser.on('context') — fired when a new context is created on the browser.
• BrowserContext now mirrors lifecycle events from its pages: browserContext.on('download'), browserContext.on('frameattached'), browserContext.on('framedetached'), browserContext.on('framenavigated'), browserContext.on('pageclose'), browserContext.on('pageload').

Locators and Assertions

• New option description in page.getByRole() / locator.getByRole() / frame.getByRole() / frameLocator.getByRole() for matching the accessible description.
• New option pseudo in expect(locator).toHaveCSS() reads computed styles from ::before or ::after.
• New option style in locator.highlight() applies extra inline CSS to the highlight overlay, plus new page.hideHighlight() to clear all highlights.

Network

• webSocketRoute.protocols() returns the WebSocket subprotocols requested by the page.
• New option noDefaults in browserType.connectOverCDP() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.

Errors and Reporting

• New webError.location() mirrors consoleMessage.location().
• consoleMessage.location() now exposes line / column properties (lineNumber / columnNumber are deprecated).
• New testInfoError.errorContext surfaces additional diagnostic context, such as the aria snapshot of the receiver at the time of an expect(...) matcher failure.
• reporter.onError() now receives a workerInfo argument with details about the worker for fixture teardown errors.

Test runner

• New {testFileBaseName} token in testProject.snapshotPathTemplate — file name without extension.
• Test runner now errors when a config tries to override a non-option fixture, and rejects workers: 0 or negative values.

🛠️ Other improvements

• HTML reporter:
  • npx playwright show-report accepts .zip files directly — no need to unzip first.
  • Steps that contain attachments inside nested children show an indicator on the parent step.
  • The repeatEachIndex is shown in the test header when non-zero.
• Trace Viewer adds a pretty-print toggle for JSON / form request and response bodies in the network details panel.

Breaking Changes ⚠️

• Removed long-deprecated APIs:
  • Locator.ariaRef() — use the standard locator.ariaSnapshot() pipeline.
  • handle option on BrowserContext.exposeBinding and Page.exposeBinding.
  • logger option on BrowserType.connect and BrowserType.connectOverCDP — use tracing instead.
  • Context options videosPath / videoSize — use recordVideo instead.

Browser Versions

• Chromium 148.0.7778.96
• Mozilla Firefox 150.0.2
• WebKit 26.4

This version was also tested against the following stable channels:

• Google Chrome 147
• Microsoft Edge 147

pnpm/action-setup (pnpm/action-setup)

v6.0.8

Compare Source

v6.0.7

Compare Source

postcss/postcss (postcss)

v8.5.15

Compare Source

• Fixed declaration parsing performance (by @​homanp).

preactjs/preact (preact)

v10.29.2

Compare Source

Fixes

• Fix hydration when we have defaultValue or value on a textarea (#​5081, thanks @​JoviDeCroock)

Maintenance

• Add CODEOWNERS for GitHub configuration (v10.x) (#​5088, thanks @​JoviDeCroock)
• Fix trusted publishing workflow (#​5084, thanks @​JoviDeCroock)
• Trusted publishing (#​5072, thanks @​JoviDeCroock)

sveltejs/svelte (svelte)

v5.55.9

Compare Source

Patch Changes

• fix: don't unset batch when calling {#await ...} promise (#​18243)

• fix: promise-ify {#await await ...} expressions on the server and correctly hydrate them on the client (#​18243)

• fix: deduplicate dependencies that are added outside the init/update cycle (#​18243)

• fix: avoid false-positive batch invariant error (#​18246)

• fix: inline primitive constants in attribute values during SSR (#​18232)

v5.55.8

Compare Source

Patch Changes

• fix(print): handle svelte:body and fix keyframe percentage double-printing (#​18234)

• fix: execute uninitialized derived even if it's destroyed (#​18228)

• fix: use named symbols everywhere (#​18238)

• fix: don't run teardown effects when deriveds are unfreezed (#​18227)

• fix: unset context synchronously in run (#​18236)

v5.55.7

Compare Source

Patch Changes

• fix: prevent XSS on hydratable from user contents (a16ebc67bbcf8f708360195687e1b2719463e1a4)

• chore: bump devalue (#​18219)

• fix: disallow empty attribute names during SSR (547853e2406a2147ad7fb5ffeba95b01bd9642da)

• fix: harden regex (d2375e2ebcab5c88feb5652f1a9d621b8f06b259)

• fix: move Svelte runtime properties to symbols (e1cbbd96441e82c9eb8a23a2903c0d06d3cda991)

v5.55.6

Compare Source

Patch Changes

• fix: leave stale promises to wait for a later resolution, instead of rejecting (#​18180)

• fix: keep dependencies of $state.eager/pending (#​18218)

• fix: reapply context after transforming error during SSR (#​18099)

• fix: don't rebase just-created batches (#​18117)

• chore: allow null for pending in typings (#​18201)

• fix: flush eager effects in production (#​18107)

• fix: rethrow error of failed iterable after calling return() (#​18169)

• fix: account for proxified instance when updating bind:this (#​18147)

• fix: ensure scheduled batch is flushed if not obsolete (#​18131)

• fix: resolve stale deriveds with latest value (#​18167)

• chore: remove unnecessary increment_pending calls (#​18183)

• fix: correctly compile component member expressions for SSR (#​18192)

• fix: reset source.updated stack traces after flush (#​18196)

• fix: replacing async 'blocking' strategy with 'merging' (#​18205)

• fix: allow @debug tags to reference awaited variables (#​18138)

• fix: re-run fallback props if dependencies update (#​18146)

• fix: abort running obsolete async branches (#​18118)

• fix: ignore comments when reading CSS values (#​18153)

• fix: wrap Promise.all in save during SSR (#​18178)

• fix: ignore false-positive errors of $inspect dependencies (#​18106)

privatenumber/tsx (tsx)

v4.22.3

Compare Source

v4.22.2

Compare Source

v4.22.1

Compare Source

v4.22.0

Compare Source

v4.21.1

Compare Source

Bug Fixes

• support Node 20.11/21.2 import.meta paths (acf3d8f)
• support Node.js 24.15.0 (c1d2d45)
• support Node.js 26.1.0 and 25.9.0 (1d7e528)

---

This release is also available on:

• npm package (@​latest dist-tag)

typescript-eslint/typescript-eslint (typescript-eslint)

v8.59.4

Compare Source

🩹 Fixes

• typescript-eslint: export Compatible* types from typescript-eslint to resolve pnpm TS error (#​12340)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.3

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v8.0.13

Compare Source

Features

• bundled-dev: add lazy bundling support (#​21406) (4f0949f)
• optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#​22357) (47071ce)
• update rolldown to 1.0.1 (#​22444) (8c766a6)

Bug Fixes

• build: copy public directory after building same environment with write=false (#​22328) (158e8ae)
• css: await sass/less/styl worker disposal on teardown (fix #​22274) (#​22275) (b7edcb7)
• css: keep deprecated name/originalFileName in synthetic assetFileNames call (#​22439) (8e59c97)
• make isBundled per environment (#​22257) (a576326)
• ssr: avoid rewriting labels that collide with imports (#​22451) (d9b18e0)

Miscellaneous Chores

• remove irrelevant commits from changelog (#​22430) (6ea3838)
• update changelog (#​22413) (fcdc87c)

vuejs/language-tools (vue-tsc)

v3.3.1

Compare Source

language-core

• fix: avoid extraneous children error for conditional slots (#​6056) - Thanks to @​KazariEX!

language-service

• refactor: replace scanner-based missing props hints detection with AST traversal - Thanks to @​KazariEX!

typescript-plugin

• fix: get component prop details from symbols - Thanks to @​KazariEX!
• fix: skip unchecked JS identifiers in component props (#​6055) - Thanks to @​KazariEX!

vscode

• fix: resolve typescript plugin path from resolved server path (#​6058) - Thanks to @​KazariEX!

v3.3.0

Compare Source

language-core

• feat: check required fallthrough attributes (#​6049) - Thanks to @​KazariEX!
• fix: penetrate v-if branch fragments when collecting single root nodes - Thanks to @​KazariEX!
• refactor: rename Sfc APIs to IR - Thanks to @​KazariEX!

language-service

• fix: reuse ASTs for define assignment suggestions - Thanks to @​KazariEX!
• fix: re-support html.customData (#​5910) - Thanks to @​Bomberus!
• fix: strip ="" only for plain boolean props completion edits - Thanks to @​KazariEX!
• fix: reset to default data provider after running with vue data provider - Thanks to @​KazariEX!

typescript-plugin

• feat: refine props completion logic to follow TS behavior (#​5709) - Thanks to @​KazariEX!

vscode

• fix: include extraFileExtensions in tsserver configure request payload (#​6048) - Thanks to @​KazariEX!
• fix: write typescript plugins at build time (#​6050) - Thanks to @​KazariEX!
• fix: avoid infinite diagnostics on Vue files when project diagnostics is enabled (#​6051) - Thanks to @​KazariEX!

v3.2.9

Compare Source

language-core

• fix: do not process inline markdown syntax in semantic-aware segments (#​6038) - Thanks to @​KazariEX!
• perf: rewrite a subset of template node transforms (#​5769) - Thanks to @​KazariEX!

vscode

• fix: trigger file rename edits when moving folders with Vue files (#​6046) - Thanks to @​KazariEX!

workspace

• chore: bump volar services to 0.0.71 (#​6043) - Thanks to @​TRIS-H!

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.5.6

[Compare Source](https://r

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.