chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node (source)	^20.12.7 -> ^20.17.19
@vitest/coverage-v8 (source)	^1.5.0 -> ^1.6.1
changelogen	^0.5.5 -> ^0.5.7
consola	^3.2.3 -> ^3.4.0
eslint (source)	^8.57.0 -> ^8.57.1
eslint-config-unjs	^0.2.1 -> ^0.4.2
jiti	^1.21.0 -> ^1.21.7
pnpm (source)	9.0.5 -> 9.15.5
prettier (source)	^3.2.5 -> ^3.5.2
typescript (source)	^5.4.5 -> ^5.7.3
vitest (source)	^1.5.0 -> ^1.6.1

---

Release Notes

vitest-dev/vitest (@​vitest/coverage-v8)

v1.6.1

Compare Source

This release includes security patches for:

• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport https://github.com/vitest-dev/vitest/issues/7317 to v1 - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7319

    View changes on GitHub

v1.6.0

Compare Source

   🚀 Features

• Support standalone mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5565 (bdce0)
• Custom "snapshotEnvironment" option  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5449 (30f72)
• benchmark: Support comparing benchmark result  -  by @​hi-ogawa and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5398 (f8d3d)
• browser: Allow injecting scripts  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5656 (21e58)
• reporter: Support includeConsoleOutput and addFileAttribute in junit  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5659 (2f913)
• ui: Sort items by file name  -  by @​btea in https://github.com/vitest-dev/vitest/issues/5652 (1f726)

   🐞 Bug Fixes

• Keep order of arguments for .each in custom task collectors  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5640 (7d57c)
• Call resolveId('vitest') after buildStart  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5646 (f5faf)
• Hash the name of the file when caching  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5654 (c9e68)
• Don't panic on empty files in node_modules  -  by @​sheremet-va (40c29)
• Use toJSON for error serialization  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5526 (19a21)
• coverage:
  • Exclude *.test-d.* by default  -  by @​MindfulPol in https://github.com/vitest-dev/vitest/issues/5634 (bfe8a)
  • Apply vite-node's wrapper only to executed files  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5642 (c9883)
• vm:
  • Support network imports  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5610 (103a6)

   🏎 Performance

• Improve performance of forks pool  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5592 (d8304)
• Unnecessary rpc call when coverage is disabled  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5658 (c5712)

    View changes on GitHub

v1.5.3

Compare Source

   🐞 Bug Fixes

• Use package.json name for a workspace project if not provided  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5608 (48fba)
• Backport jest iterable equality within object  -  by @​sukovanej in https://github.com/vitest-dev/vitest/issues/5621 (30e5d)
• browser: Support benchmark  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5622 (becab)
• reporter: Use default error formatter for JUnit  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5629 (20060)

    View changes on GitHub

v1.5.2

Compare Source

   🐞 Bug Fixes

• Check for null before storing in weakmap  -  by @​sheremet-va (ce368)

    View changes on GitHub

v1.5.1

Compare Source

   🚀 Features

• api: startVitest() to accept stdout and stdin  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5493 (780b1)
  • This is listed as a feature, but it doesn't increase the minor version because startVitest API is experimental and doesn't follow semver.

   🐞 Bug Fixes

• Close vite servers on all resolved projects  -  by @​surc54 in https://github.com/vitest-dev/vitest/issues/5544 (413ec)
• Fix default import.meta.env.PROD: false  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5561 (9c649)
• Resolve cwd correctly when initiating projects  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5582 (ec9d7)
• Always run onTestFinished in reverse order  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5598 (23f29)
• browser:
  • Disable fileParallelism by default on browser pool  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5528 (5c69f)
  • Dispose tester iframe on done  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5595 (b2135)
• coverage:
  • Fix bundling of v8-to-istanbul  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5549 (df6a4)
  • Prevent crash when cleanOnRerun is disabled  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5540 (ea3c1)
  • thresholds to compare files relative to root  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5574 (80265)
• expect:
  • Fix toEqual and toMatchObject with circular references  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5535 (9e641)
• vitest:
  • Fix false positive file filter match with leading slash  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5578 (316eb)
  • Watch the output directory correctly  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5584 (e40f9)
  • StubEnv casts boolean on PROD/SSR/DEV  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5590 (4da88)

    View changes on GitHub

unjs/changelogen (changelogen)

v0.5.7

Compare Source

compare changes

🩹 Fixes

• bump: Avoid using + for canary suffix (#​224)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.5.6

Compare Source

compare changes

🚀 Enhancements

• Add option to sign git tags (#​117)
• git: Support parse git messages that have prefix emoji (#​146)

🩹 Fixes

• github: Use bearer token (#​180)
• Handle repo name with multiple segments (#​219)
• Lowercase scope when filtering (#​199)

💅 Refactors

• Replace execa with execSync (#​222)
• Use human readable date for canary versions (#​223)
• Update execCommand (68127be)

🏡 Chore

• Apply automated lint fixes (72c407f)
• Update ci (bcb16cb)
• Update non major deps (7f714c9)
• Update to eslint v9 (fd40be9)
• Apply automated lint fixes (673255b)
• Update deps (3cfbe27)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Klein Petr (@​kleinpetr)
• Wan Chiu (@​wan54)
• Jianqi Pan (@​Jannchie)
• Vasily Kuzin exer7um@gmail.com
• Daniel Roe (@​danielroe)

unjs/consola (consola)

v3.4.0

Compare Source

compare changes

🚀 Enhancements

• Use upstream @clack/prompts (#​332)

🩹 Fixes

• Calculate box width without escape sequence chars (#​336)

💅 Refactors

• Keep prompt styles (cont. #​332) (#​332)

📦 Build

• Update exports for node16 typescript resolution (#​331)

🏡 Chore

• Update deps (9193d63)
• Apply automated updates (fc8b9b9)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Yongqi <yongqi14@​qq.com>

v3.3.3

Compare Source

compare changes

📦 Build

• Revert "build: update exports for node16 typescript resolution" (2065136)

❤️ Contributors

• Pooya Parsa (@​pi0)

v3.3.2

Compare Source

compare changes

📦 Build

• Patch string-width for node 14 support (421c663)
• Update exports for node16 typescript resolution (18bc852)

❤️ Contributors

• Pooya Parsa (@​pi0)

v3.3.1

Compare Source

compare changes

🩹 Fixes

• fancy: Fallback whenIntl is unavailable (#​326)

❤️ Contributors

• Red Huang redhuang@synology.com

v3.3.0

Compare Source

compare changes

🚀 Enhancements

• utils: formatTree utility (#​223)
• Export prompt option types (#​301)
• Support report error cause (#​308)
• prompt: Configurable cancel strategy (#​325)
• formatTree: Support max depth (#​267)

🩹 Fixes

• Use initial in select and multiselect prompts (#​232)
• Make box title color same as border (#​236)

📖 Documentation

• Update screenshot (205d9c8)
• Add vitest (#​182)
• Add note about raw method (#​271)
• Add jsdocs for utils functions (#​286)
• Add jsdocs for top-level functions (#​288)

📦 Build

• Fix subpath types (#​265)
• Add require condition for browser builds (#​243)

🌊 Types

• Fix prompt with select type return value type (#​238)

🏡 Chore

• Update dependencies (68b36c7)
• Update dependencies (dff1ef8)
• Update eslint to v9 (238d677)
• Lint (985a786)
• Update pnpm to v9 (61adfbe)
• Update ci scripts (9545b65)
• Apply automated updates (df0e555)
• Update dependencies (e851525)
• Fix lint issues (8238844)
• Update deps (093d966)
• Lint (64cd547)
• Update clack/core (e2aa5c9)

🎨 Styles

• Format repo (899173f)

🤖 CI

• Use conventional commit for autofix (#​217)

❤️ Contributors

• Guo (@​Plumbiu)
• Pooya Parsa (@​pi0)
• Kongmoumou (@​kongmoumou)
• Max (@​onmax)
• Michel EDIGHOFFER edimitchel@gmail.com
• Sébastien Chopin (@​atinux)
• Estéban <e.soubiran25@​gmail.com>
• Nozomu Ikuta (@​nozomuikuta)
• Maxim Molochkov (@​klaseca)
• Xjccc (@​xjccc)
• Gangan (@​shinGangan)
• Daniel Roe (@​danielroe)

eslint/eslint (eslint)

v8.57.1

Compare Source

unjs/eslint-config (eslint-config-unjs)

v0.4.2

Compare Source

compare changes

💅 Refactors

• Use Linter.Config as return type (2cce21a)
• Reflax markdown rules (587c6a7)

🏡 Chore

• Update deps (c179c22)
• release: V0.4.1 (a8fb144)
• Update deps (0431414)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.4.1

Compare Source

compare changes

💅 Refactors

• Use Linter.Config as return type (2cce21a)
• Reflax markdown rules (587c6a7)

🏡 Chore

• Update deps (c179c22)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.4.0

Compare Source

compare changes

🏡 Chore

• ⚠️ Update dependencies (ec5727e)
• Use eslint ts support with jiti (0d531f8)

⚠️ Breaking Changes

• ⚠️ Update dependencies (ec5727e)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.3.2

Compare Source

compare changes

🏡 Chore

• Update unicorn plugin to 53 (0a944e4)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.3.1

Compare Source

compare changes

🩹 Fixes

• markdown: Override default rules (4765dd5)

🏡 Chore

• Remove prerelease script (pnpm why ?!) (a98c465)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.3.0

Compare Source

compare changes

unjs/jiti (jiti)

v1.21.7

Compare Source

compare changes (📦 bundled dependencies updated)

🩹 Fixes

• Use native require cache of loaded entries only Node.js 22.12.+ compatibility (#​349)

v1.21.6

Compare Source

compare changes

🩹 Fixes

• Use internal cached modules only if loaded (#​247)

v1.21.5

Compare Source

compare changes

🩹 Fixes

• Revert #​245 (#​245)

From 1.21.4

• Avoid node: protocol for node 14 compatibility (5d877de)
• Update deps (5e11181)

v1.21.4

Compare Source

v1.21.3

Compare Source

compare changes

🩹 Fixes

• Update mlly to ^1.7.1 (9adbcb3)

❤️ Contributors

• Pooya Parsa (@​pi0)

v1.21.2

Compare Source

compare changes

🩹 Fixes

• Pin mlly to 1.4.2 (#​237)

❤️ Contributors

• Pooya Parsa (@​pi0)

v1.21.1

Compare Source

compare changes

🏡 Chore

• Update dependencies (0bd991b)
• Update dependencies (cfb106c)
• Update to eslint v9 (c11d953)
• Update deps and lockfile (95aa249)
• Run ci against 18 and 22 (65b4067)
• Lint (6f3bd76)

🤖 CI

• Skip extra checks (8fe6417)

❤️ Contributors

• Pooya Parsa (@​pi0)

pnpm/pnpm (pnpm)

v9.15.5: pnpm 9.15.5

Compare Source

Patch Changes

• Verify that the package name is valid when executing the publish command.
• When running pnpm install, the preprepare and postprepare scripts of the project should be executed #​8989.
• Quote args for scripts with shell-quote to support new lines (on POSIX only) #​8980.
• Proxy settings should be respected, when resolving Git-hosted dependencies #​6530.
• Replace strip-ansi with the built-in util.stripVTControlCharacters #​9009.

Platinum Sponsors

Gold Sponsors

v9.15.4: pnpm 9.15.4

Compare Source

Patch Changes

• Ensure that recursive pnpm update --latest <pkg> updates only the specified package, with dedupe-peer-dependents=true.

Platinum Sponsors

Gold Sponsors

v9.15.3

Compare Source

v9.15.2: pnpm 9.15.2

Compare Source

Patch Changes

• Fixed publish/pack error with workspace dependencies with relative paths #​8904. It was broken in v9.4.0 (398472c).
• Use double quotes in the command suggestion by pnpm patch on Windows #​7546.
• Do not fall back to SSH, when resolving a git-hosted package if git ls-remote works via HTTPS #​8906.
• Improve how packages with blocked lifecycle scripts are reported during installation. Always print the list of ignored scripts at the end of the output. Include a hint about how to allow the execution of those packages.

Platinum Sponsors

Gold Sponsors

v9.15.1

Compare Source

v9.15.0

Compare Source

v9.14.4

Compare Source

v9.14.3

Compare Source

v9.14.2

Compare Source

Patch Changes

• pnpm publish --json should work #​8788.

Platinum Sponsors

Gold Sponsors

Configuration 📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired. If you want to rebase/retry this PR, check this box This PR was generated by Mend Renovate. View the repository job log.