chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #161 · unjs/defu

renovate · 2026-04-10T02:47:47Z

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	`^25.5.0` → `^25.7.0`
@typescript/native-preview (source)	`7.0.0-dev.20260401.1` → `7.0.0-dev.20260512.1`
@vitest/coverage-v8 (source)	`^4.1.2` → `^4.1.6`
oxfmt (source)	`^0.43.0` → `^0.49.0`
oxlint (source)	`^1.58.0` → `^1.64.0`
pnpm (source)	`10.33.0` → `10.33.4`
typescript (source)	`^6.0.2` → `^6.0.3`
vitest (source)	`^4.1.2` → `^4.1.6`

Release Notes

microsoft/typescript-go (@typescript/native-preview)

vitest-dev/vitest (@vitest/coverage-v8)

`v4.1.6`

Compare Source

🐞 Bug Fixes

browser: Provide project reference in ToMatchScreenshotResolvePath - by @macarie and @sheremet-va in #10138 (31882)
Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options - by @hi-ogawa, Codex and @sheremet-va in #10196 (2847d)
browser: Simplify orchestrator otel carrier - by @hi-ogawa in #10285 (18af9)

🏎 Performance

Stringify diff objects only once - by @sheremet-va in #10276 (9f7b1)

View changes on GitHub

`v4.1.5`

Compare Source

🚀 Experimental Features

coverage: Istanbul to support instrumenter option - by @BartWaardenburg and @AriPerkkio in #10119 (0e0ff)

🐞 Bug Fixes

--project negation excludes browser instances - by @felamaslen in #10131 (9423d)
Project color label on html reporter - by @hi-ogawa in #10142 (596f7)
Fix vi.defineHelper called as object method - by @hi-ogawa in #10163 (122c2)
Alias agent reporter to minimal - by @sheremet-va in #10157 (663b9)
Respect diff config options in soft assertions - by @Copilot, sheremet-va and @sheremet-va in #8696 (9787d)
Respect diff config options in soft assertions " - by @sheremet-va in #8696 (7dc6d)
ast-collect: Recognize _vi_import prefix in static test discovery - by @Yejneshwar in #10129 (32546)
coverage: Descriptive error message when reports directory is removed during test run - by @DaveT1991 and @AriPerkkio in #10117 (14133)
snapshot: Increase default snapshot max output length - by @hi-ogawa and Codex in #10150 (21e66)
ui: Fix jsx/tsx syntax highlight - by @hi-ogawa in #10152 (f1b1f)
web-worker: Support MessagePort objects referenced inside postMessage data - by @whitphx and Claude Opus 4.6 (1M context) in #9927 and #10124 (7ad7d)
api: Make test-specification options writable - by @sheremet-va in #10154 (6abd5)

View changes on GitHub

`v4.1.4`

Compare Source

🚀 Features

coverage:
- Default to text reporter skipFull if agent detected - by @hi-ogawa in #10018 (53757)
experimental:
- Expose assertion as a public field - by @sheremet-va in #10095 (a120e)
- Support aria snapshot - by @hi-ogawa, Claude Opus 4.6 (1M context), @AriPerkkio, Codex and @sheremet-va in #9668 (d4fbb)
reporter:
- Add filterMeta option to json reporter - by @nami8824 and @sheremet-va in #10078 (b77de)

🐞 Bug Fixes

Use "black" foreground for labeled terminal message to ensure contrast - by @hi-ogawa in #10076 (203f0)
Make expect(..., message) consistent as error message prefix - by @hi-ogawa and Codex in #10068 (a1b5f)
Do not hoist imports whose names match class properties . - by @SunsetFi in #10093 and #10094 (0fc4b)
browser: Spread user server options into browser Vite server in project - by @GoldStrikeArch in #10049 (65c9d)

View changes on GitHub

`v4.1.3`

Compare Source

🚀 Experimental Features

Add experimental.preParse flag - by @sheremet-va in #10070 (78273)
Support browser.locators.exact option - by @sheremet-va in #10013 (48799)
Add TestAttachment.bodyEncoding - by @hi-ogawa in #9969 (89ca0)
Support custom snapshot matcher - by @hi-ogawa, Claude Sonnet 4.6 and Codex in #9973 (59b0e)

🐞 Bug Fixes

Advance fake timers with expect.poll interval - by @hi-ogawa and Claude Sonnet 4.6 in #10022 (3f5bf)
Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency - by @alan-agius4 in #10025 (146d4)
Fix defineHelper for webkit async stack trace + update playwright 1.59.0 - by @hi-ogawa in #10036 (5a5fa)
Fix suite hook throwing errors for unused auto test-scoped fixture - by @hi-ogawa and Claude Sonnet 4.6 in #10035 (39865)
expect:
- Remove JestExtendError.context from verbose error reporting - by @hi-ogawa in #9983 (66751)
- Don't leak "runner" types - by @sheremet-va in #10004 (ec204)
snapshot:
- Fix flagging obsolete snapshots for snapshot properties mismatch - by @hi-ogawa and Claude Sonnet 4.6 in #9986 (6b869)
- Export custom snapshot matcher helper from vitest - by @hi-ogawa and Codex in #10042 (691d3)
ui:
- Don't leak vite types - by @sheremet-va in #10005 (fdff1)
vm:
- Fix external module resolve error with deps optimizer query - by @hi-ogawa and Claude Sonnet 4.6 in #10024 (9dbf4)

View changes on GitHub

oxc-project/oxc (oxfmt)

`v0.49.0`

Compare Source

🚀 Features

6e8e818 oxfmt: Experimental .svelte support (#21700) (leaysgur)

`v0.48.0`

Compare Source

`v0.47.0`

Compare Source

`v0.46.0`

Compare Source

`v0.45.0`

Compare Source

🐛 Bug Fixes

50c389b oxfmt: Support .editorconfig quote_type (#20989) (leaysgur)

`v0.44.0`

Compare Source

🐛 Bug Fixes

dd2df87 npm: Export package.json for oxlint and oxfmt (#20784) (kazuya kawaguchi)
4216380 oxfmt: Support .editorconfig tab_width fallback (#20988) (leaysgur)

oxc-project/oxc (oxlint)

`v1.64.0`

Compare Source

🚀 Features

fbb8f22 linter: Support ignores in overrides (#22148) (camc314)

🐛 Bug Fixes

25b7017 linter: Undocument override ignores option (#22213) (camc314)

`v1.63.0`

Compare Source

📚 Documentation

cacbc4a linter: Fix jest settings docs. (#22127) (connorshea)

`v1.62.0`

Compare Source

🚀 Features

348f46c linter: Add respectEslintDisableDirectives option (#21384) (Christian Vuerings)

🐛 Bug Fixes

8c425db linter: Allow string for jest version in config schema (#21649) (camc314)

`v1.61.1`

Compare Source

`v1.61.0`

Compare Source

🚀 Features

38d8090 linter/jest: Implemented jest version settings in config file. (#21522) (Said Atrahouch)

`v1.60.0`

Compare Source

📚 Documentation

cfd8a4f linter: Don't rely on old eslint doc for available globals (#21334) (Nicolas Le Cam)

`v1.59.0`

Compare Source

pnpm/pnpm (pnpm)

`v10.33.4`: pnpm 10.33.4

Compare Source

Patch Changes

Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.

A new gitHosted: true field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.
Fix a regression where pnpm --recursive --filter '!<pkg>' run/exec/test/add would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative --filter arguments are provided, matching the documented behavior. To include the root, pass --include-workspace-root #11341.

Platinum Sponsors

Gold Sponsors

`v10.33.3`

Compare Source

`v10.33.2`

Compare Source

`v10.33.1`: pnpm 10.33.1

Compare Source

Patch Changes

When a project's packageManager field selects pnpm v11 or newer, commands that v10 would have passed through to npm (version, login, logout, publish, unpublish, deprecate, dist-tag, docs, ping, search, star, stars, unstar, whoami, etc.) are now handed over to the wanted pnpm, which implements them natively. Previously they silently shelled out to npm — making, for example, pnpm version --help print npm's help on a project with packageManager: pnpm@11.0.0-rc.3 #11328.

Platinum Sponsors

Gold Sponsors

microsoft/TypeScript (typescript)

`v6.0.3`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- "after 2am and before 3am"
Automerge
- "after 1am and before 2am"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 715bafd to 36b3b9e Compare April 17, 2026 00:46

renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from ea5c4f1 to 5f64639 Compare April 23, 2026 12:33

renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 0ee2e4c to 85aff2b Compare April 30, 2026 12:45

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 24b8913 to 02b396e Compare May 3, 2026 10:56

renovate Bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from e59ac40 to 9b972e8 Compare May 11, 2026 11:45

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 3df6d73 to 07209d0 Compare May 11, 2026 23:06

chore(deps): update all non-major dependencies

9f1362c

renovate Bot force-pushed the renovate/all-minor-patch branch from 07209d0 to 9f1362c Compare May 12, 2026 14:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all non-major dependencies#161

chore(deps): update all non-major dependencies#161
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Apr 10, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Apr 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🐞 Bug Fixes

🏎 Performance

🚀 Experimental Features

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🚀 Experimental Features

🐞 Bug Fixes

🚀 Features

🐛 Bug Fixes

🐛 Bug Fixes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🚀 Features

🐛 Bug Fixes

🚀 Features

📚 Documentation

v10.33.4: pnpm 10.33.4

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.33.1: pnpm 10.33.1

Patch Changes

Platinum Sponsors

Gold Sponsors

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Apr 10, 2026 •

edited

Loading

`v10.33.4`: pnpm 10.33.4

`v10.33.1`: pnpm 10.33.1