chore(deps): update dependencies (non-major) by renovate[bot] · Pull Request #63 · bingtsingw/xstools-dev

renovate · 2026-03-01T00:34:33Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@changesets/changelog-github (source)	`^0.5.2` → `^0.6.0`
@changesets/cli (source)	`~2.29.8` → `~2.30.0`
@commitlint/cli (source)	`~20.4.1` → `~20.5.0`
@commitlint/config-conventional (source)	`~20.4.1` → `~20.5.0`
@dotenvx/dotenvx	`1.32.1` → `1.61.0`
@malagu/cli	`2.58.0` → `2.60.3`
@release-it/conventional-changelog	`~10.0.4` → `~10.0.6`
@typescript-eslint/eslint-plugin (source)	`~8.54.0` → `~8.58.2`
@typescript-eslint/parser (source)	`~8.54.0` → `~8.58.2`
eslint-config-taro	`~3.6.38` → `~3.6.40`
eslint-plugin-react-refresh	`0.4.26` → `0.5.2`
eslint-plugin-tailwindcss	`~3.18.2` → `~3.18.3`
lint-staged	`~16.2.7` → `~16.4.0`
miniprogram-ci	`~2.1.26` → `~2.1.31`
prettier (source)	`~3.8.1` → `~3.8.2`
prettier-plugin-multiline-arrays	`4.1.3` → `4.1.5`
prettier-plugin-packagejson	`3.0.0` → `3.0.2`
prettier-plugin-tailwindcss	`0.6.12` → `0.7.2`
sherif	`~1.10.0` → `~1.11.1`
turbo (source)	`~2.8.3` → `~2.9.6`

Release Notes

changesets/changesets (@changesets/changelog-github)

`v0.6.0`

Compare Source

Minor Changes

#1850 fd0bc2e Thanks @mixelburg! - Linkify issue references in changelog entries.

Patch Changes

#1810 27fd8f4 Thanks @hirasso! - Replace deprecated String.prototype.trimRight with String.prototype.trimEnd
Updated dependencies [d4b8ad8, e462d89]:
- @changesets/get-github-info@0.8.0

conventional-changelog/commitlint (@commitlint/cli)

`v20.5.0`

Compare Source

Bug Fixes

cli: validate that --cwd directory exists before execution (#4658) (cf80f75), closes #4595

20.4.4 (2026-03-12)

Note: Version bump only for package @commitlint/cli

20.4.3 (2026-03-03)

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @commitlint/cli

20.4.1 (2026-02-02)

Note: Version bump only for package @commitlint/cli

`v20.4.4`

Compare Source

Note: Version bump only for package @commitlint/cli

`v20.4.3`

Compare Source

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

`v20.4.2`

Compare Source

Note: Version bump only for package @commitlint/cli

conventional-changelog/commitlint (@commitlint/config-conventional)

`v20.5.0`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

20.4.4 (2026-03-12)

Note: Version bump only for package @commitlint/config-conventional

20.4.3 (2026-03-03)

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @commitlint/config-conventional

20.4.1 (2026-02-02)

Note: Version bump only for package @commitlint/config-conventional

`v20.4.4`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

`v20.4.3`

Compare Source

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

`v20.4.2`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

dotenvx/dotenvx (@dotenvx/dotenvx)

`v1.61.0`

Compare Source

Added

Add login and logout method that proxy to dotenvx-ops login/logout (#780)
Note: dotenvx continues to make zero outgoing HTTP requests and includes no telemetry. Outgoing requests occur only if you explicitly install the dotenvx-ops SDK or CLI.

`v1.60.2`

Compare Source

Changed

Communicate local key and armored key (for Ops stored keys) (#778)

`v1.60.1`

Compare Source

Added

Added missing + key ⛨ for Ops stored keys (#777)

`v1.60.0`

Compare Source

Added

Add spinner with loading messages
- injecting (run)
- encrypting (encrypt, set)
- decrypting (decrypt, get)
- rotating (rotate)
- retrieving (keypair)

`v1.59.1`

Compare Source

Added

add HELLO key to the kit sample to match most of our examples in the README

`v1.59.0`

Compare Source

Changed

encrypt and set now create a .env file if one does not exist (#771)
pass --no-create to prevent file creation

`v1.58.0`

Compare Source

Changed

Changed runtime injection message to format ⟐ injecting env (N) from FILE · dotenvx@VERSION (#770)

`v1.57.5`

Compare Source

Changes

Improve already installed message (#768)

`v1.57.4`

Compare Source

Changes

Use curl example for install dotenvx.com/ops (#767)

`v1.57.3`

Compare Source

Changes

Simplify installed success message (#766)

`v1.57.2`

Compare Source

Changes

Ran npm audit to update package-lock.json (#763)

`v1.57.1`

Compare Source

Changes

improved error logs and compacted most to a single line (#755)
introduced leading log glyphs as a visual status language:
- ◈ success action (encrypted)
- ◇ success action (set plain value, decrypted)
- ⟳ success action (rotated)
- ○ informational no-op (no changes)
- ▣ success action for generated/updated support files
- ⚠ warning
- ☠ error

`v1.57.0`

Compare Source

Changed

color and formatting changes to outputs (#754)

`v1.56.0`

Compare Source

Changed

ops off flag — now respected by get, keypair, rotate, and encrypt (#750)
--pp alias — added as shorthand for --pretty-print; toward sunsetting -pp (#750)

Removed

Remove support for .env.vault files (#750)

`v1.55.1`

Compare Source

Added

Respect dotenvx-ops status (on|off) (#749)

`v1.55.0`

Compare Source

Added

Add 'KEYS OFF COMPUTER' security feature when dotenvx-ops installed (#746)

Removed

Remove ProKeypair logic

`v1.54.1`

Compare Source

Changed

Fix npm publish

`v1.53.0`

Compare Source

Removed

Remove radar. It has been a year since replaced by ops. (#743)

`v1.52.0`

Compare Source

Added

Pass log level options to main.set (#731)

`v1.51.4`

Compare Source

Changed

Change description of dotenvx-ops to better reflect its tooling as operational primitives on top of dotenvx for production use cases. (#721)

`v1.51.3`

Compare Source

Added

Add hint on .env.keys for dotenvx ops backup. Dotenvx Ops Backup lets you back up your private keys securely with just a single command. It's a convenient alterantive to manually copy/pasting them in and out of 1Password. (#718)

`v1.51.2`

Compare Source

Changed

Switch npm publish to use Dotenvx Ops' new Rotation Tokens (ROTs) (#715)

This will allow us to start dogfooding our own solution for third-party API key rotation. Third-party API key rotation would drastically improve security industry wide. Please get in touch if this is interesting to you.

`v1.51.1`

Compare Source

Added

Add opsOff type information

`v1.51.0`

Compare Source

Added

Add config({opsOff: true}) options and --ops-off flag for turning off Dotenvx Ops features. (#680)

`v1.50.1`

Compare Source

Removed

Remove listed command to radar (now ops) (#678)

`v1.50.0`

Compare Source

Added

Add optional dotenvx ops command (#677)
Ops is a coming rename of Radar. Radar will become a feature inside ops.
With dotenvx ops use dotenvx across your team, infrastructure, agents, and more.

 _______________________________________________________________________
|                                                                       |
|  Dotenvx Ops: Commercial Tooling for Dotenvx                          |
|                                                                       |
|  ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓███████▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░ ░▒▓██████▓▒░                               |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
|  ░▒▓██████▓▒░░▒▓█▓▒░      ░▒▓███████▓▒░                               |
|                                                                       |
|  Use dotenvx across your team, infrastructure, agents, and more.      |
|                                                                       |
|  Learn more at https://dotenvx.com/ops                                |
|_______________________________________________________________________|

`v1.49.1`

Compare Source

Changed

🐞 patch bug with variable expansion of single quoted values (#675)

`v1.49.0`

Compare Source

Added

For precommit and prebuild, ignore .env.x file like we do with .env.vault file. (#666)

`v1.48.4`

Compare Source

Removed

Remove unnecessary use of eval in proKeypair helper (#654)

`v1.48.3`

Compare Source

Changed

Include privateKeyName and privateKey on internal processedEnv object (#649)

`v1.48.2`

Compare Source

Changed

Check radar status before sending (#646)

`v1.48.1`

Compare Source

Changed

Send beforEnv and afterEnv to Radar if user has installed (#645)

`v1.48.0`

Compare Source

Added

Include beforeEnv and afterEnv for user debugging (#644)

`v1.47.7`

Compare Source

Changed

src should be in internal processEnv object (#643)

`v1.47.6`

Compare Source

Changed

Make Radar call non-blocking (#642)

`v1.47.5`

Compare Source

Changed

Add resilient handling of any Radar failures (#639)

`v1.47.4`

Compare Source

Changed

Smarter require of non-installed libs like dotenvx-radar (#638)

`v1.47.3`

Compare Source

Added

Send to radar#observe if Radar installed by user (#631)

Removed

Remove cli in package.json (#632)

`v1.47.2`

Compare Source

Added

Export cli in package.json (#629)

`v1.47.1`

Compare Source

Added

Add convenience log that radar active 📡 when dotenvx-radar is installed (#625)

`v1.47.0`

Compare Source

Added

Add optional dotenvx radar command (#624)
Radar is an early access commercial extension for dotenvx that will auto backup your .env files.

 _______________________________________________________________________
|                                                                       |
|  Dotenvx Radar: Env Observability                                     |
|                                                                       |
|  ░▒▓███████▓▒░ ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓██████▓▒░░▒▓███████▓▒░    |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓███████▓▒░░▒▓████████▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓████████▓▒░▒▓███████▓▒░    |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|                                                                       |
|  Observe, version, and back up your environment variables at runtime. |
|                                                                       |
|  Purchase lifetime access at https://dotenvx.com/radar                |
|                                                                       |
| --------------------------------------------------------------------- |
| - thank you for using dotenvx! - @&#8203;motdotla                            |
|_______________________________________________________________________|

`v1.46.0`

Compare Source

Added

Add error when hoisting issue experienced around commander.js (#623)

Removed

Remove git-dotenvx and git dotenvx shorthand (#621)

`v1.45.2`

Compare Source

Changed

Minor README updates

`v1.45.1`

Compare Source

Changed

Include setLogName and setLogVersion in config (#613)

`v1.45.0`

Compare Source

Added

Add logger.setName and logger.setVersion for customization of logger (#612)

`v1.44.2`

Compare Source

Changed

Clarify license is BSD-3.

`v1.44.1`

Compare Source

Changed

Patch SetOutput type (#597)

`v1.44.0`

Compare Source

Added

Add armv7 support (#593)

`v1.43.0`

Compare Source

Removed

Remove errorv, errornocolor, blank from logger options (#584)

Changed

Replace instances of console.error with logger.error (#584)

`v1.42.2`

Compare Source

Changed

Fix --force flag work with ?force=true (2776715)

`v1.42.1`

Compare Source

Added

Add --force flag to install.sh (0b8d21c)

`v1.42.0`

Compare Source

Added

Add ability to override the os and arch via install.sh and dotenvx.sh (3ded752)

`v1.41.0`

Compare Source

Added

Add [directory] argument to precommit and prebuild (#572)

`v1.40.1`

Compare Source

Changed

Patch ext scan command (#570)

`v1.40.0`

Compare Source

Added

Smarter ext precommit and ext prebuild – catch duplicate KEYs in the same .env file where one is mistakenly left unencrypted (#567)

`v1.39.1`

Compare Source

Added

Add version to homebrew formula (#564)

`v1.39.0`

Compare Source

Added

Add --convention flow option to dotenvx run (#551)

Changed

Fix typos (#550)

`v1.38.5`

Compare Source

Added

🐞 Add config.d.ts file to fix type error when loading dotenvx/dotenvx/config with dynamic import (#547)

`v1.38.4`

Compare Source

Changed

🐞 Fix blank line disappearing after encrypting empty value (#542)

`v1.38.3`

Compare Source

Changed

🐞 Fix self-referencing expansion when key exists already in process.env (#536)

`v1.38.2`

Compare Source

Added

Add typescript types for main.get.

`v1.38.1`

Compare Source

Changed

Support encrypt when mutliline contains windows CRLF (\r\n) (#534)

Note: dotenvx will convert these \r\n newlines to \n. Our recommendation is to stop using CRLF - its origin is from typewriter days. Instead, set your editor or gitattributes to use LF.

`v1.38.0`

Compare Source

Changed

Command substitution failures no longer halt further processing of keys in a .env file (#533)
A more helpful error is raised if a command substitution failure occurs (#533)

`v1.37.0`

Compare Source

Added

add dotenvx rotate command 🎉 (#530)

also: our whitepaper is released as a draft.

`v1.36.0`

Compare Source

Changed

--strict flag respects (doesn't throw) anything in --ignore flag (#527)

`v1.35.0`

Compare Source

Added

npx dotenvx precommit support as a convenience (#523)
main.get method (#524)

The addition of main.get facilitates what we term Decryption at Access, a concept explored in greater detail in our whitepaper.

`v1.34.0`

Compare Source

Added

main.set method now writes to files (#517)

`v1.33.0`

Compare Source

Added

support ESM import convenience import '@dotenvx/dotenvx/config' (#508)

cellbang/malagu (@malagu/cli)

`v2.60.3`

Compare Source

fix(cli-common): 修复组件判别逻辑错误

`v2.60.2`

Compare Source

fix(ui-packages): 修复目录名称拼写错误导致前端相关包没有正常发布

`v2.60.1`

Compare Source

feat(retry): 添加新组件 @celljs/retry，支持重试机制
feat(core): 优化 @celljs/core 模块对单元测试的支持

`v2.60.0`

Compare Source

release-it/conventional-changelog (@release-it/conventional-changelog)

`v10.0.6`

Compare Source

fix: bump conventional-changelog to ^7.2.0 (#141) (0e2bb53) - thanks @aarondpn!
Update dependencies (1f25729)

`v10.0.5`

Compare Source

test: add should generate changelog with remote origin urls (#132) (7e53f8c) - thanks @Maxel01!
fix: pass parserOpts to both Bumper and ConventionalChangelog (#135) (4dce48a) - thanks @aarond-sp!

typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)

`v8.58.2`

Compare Source

🩹 Fixes

eslint-plugin: [no-unnecessary-condition] use assignability checks in checkTypePredicates (#12147)
remove tsbuildinfo cache file from published packages (#12187)

❤️ Thank You

Abhijeet Singh @cseas
송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.58.1`

Compare Source

🩹 Fixes

eslint-plugin: [no-unused-vars] fix false negative for type predicate parameter (#12004)

❤️ Thank You

MinJae @Ju-MINJAE

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.58.0`

Compare Source

🚀 Features

support TypeScript 6 (#12124)

🩹 Fixes

eslint-plugin: [prefer-regexp-exec] avoid fixing unknown RegExp flags (#12161)
eslint-plugin: [no-extraneous-class] handle index signatures (#12142)
eslint-plugin: crash in no-unnecessary-type-arguments (#12163)

❤️ Thank You

ej shafran @ej-shafran
Evyatar Daud @StyleShit
GG ZIBLAKING
milkboy2564 @SeolJaeHyeok
teee32 @teee32

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.57.2`

Compare Source

🩹 Fixes

eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#11954)
eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#12127)
eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)
eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#12120)
eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#11971)
eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#11865)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger
Konv Suu
mdm317
Newton Yuan @NewtonYuan
SungHyun627 @SungHyun627
Tamashoo @Tamashoo

See GitHub Releases for more information.

You can read about our [versioning strategy](https://typescrip

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2026-03-01T00:34:37Z

⚠️ No Changeset found

Latest commit: 301e3d8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

renovate bot added the dependencies label Mar 1, 2026

renovate bot force-pushed the renovate/dependencies-(non-major) branch 11 times, most recently from a7614fa to c90eb69 Compare March 6, 2026 22:05

renovate bot force-pushed the renovate/dependencies-(non-major) branch 7 times, most recently from a196d65 to 627dbfe Compare March 15, 2026 13:30

renovate bot force-pushed the renovate/dependencies-(non-major) branch 8 times, most recently from c813af5 to d86507f Compare March 23, 2026 01:45

renovate bot force-pushed the renovate/dependencies-(non-major) branch 2 times, most recently from ecbb35e to 6773a57 Compare March 26, 2026 21:41

renovate bot force-pushed the renovate/dependencies-(non-major) branch 9 times, most recently from c9074d8 to 78c5d94 Compare April 1, 2026 01:40

renovate bot force-pushed the renovate/dependencies-(non-major) branch 10 times, most recently from 9c32a8d to cc23204 Compare April 10, 2026 16:35

renovate bot force-pushed the renovate/dependencies-(non-major) branch 2 times, most recently from c29eab7 to 5aa68a5 Compare April 13, 2026 15:15

chore(deps): update dependencies (non-major)

301e3d8

renovate bot force-pushed the renovate/dependencies-(non-major) branch from 5aa68a5 to 301e3d8 Compare April 13, 2026 22:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependencies (non-major)#63

chore(deps): update dependencies (non-major)#63
renovate[bot] wants to merge 1 commit intomainfrom
renovate/dependencies-(non-major)

renovate bot commented Mar 1, 2026 •

edited

Loading

Uh oh!

changeset-bot bot commented Mar 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Minor Changes

Patch Changes

Bug Fixes

20.4.4 (2026-03-12)

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

20.4.1 (2026-02-02)

Bug Fixes

20.4.4 (2026-03-12)

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

20.4.1 (2026-02-02)

Bug Fixes

Added

Changed

Added

Added

Added

Changed

Changed

Changes

Changes

Changes

Changes

Changes

Changed

Changed

Removed

Added

Added

Removed

Changed

Removed

Added

Changed

Added

Changed

Added

Added

Removed

Added

Changed

Added

Removed

Changed

Changed

Changed

Added

Changed

Changed

Changed

Changed

Added

Removed

Added

Added

Added

Added

Removed

Changed

Changed

Added

Changed

Changed

Added

Removed

Changed

Changed

Added

Added

Added

Changed

Added

renovate bot commented Mar 1, 2026 •

edited

Loading