Skip to content

chore(deps): update all non-major dependencies - #272

Merged
renovate[bot] merged 1 commit into
masterfrom
renovate/all-minor-patch
Sep 12, 2026
Merged

chore(deps): update all non-major dependencies#272
renovate[bot] merged 1 commit into
masterfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Sep 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@iconify-json/octicon 1.2.32 → 1.2.33 age confidence devDependencies patch 1.2.34
@mdit/plugin-img-size (source) 1.1.0 → 1.1.1 age confidence dependencies patch
@mdit/plugin-mark (source) 2.1.0 → 2.1.1 age confidence dependencies patch
@mdit/plugin-ruby (source) 1.1.0 → 1.1.1 age confidence dependencies patch
@mdit/plugin-spoiler (source) 2.1.0 → 2.1.1 age confidence dependencies patch
@mdit/plugin-sub (source) 1.1.0 → 1.1.1 age confidence dependencies patch
@mdit/plugin-sup (source) 1.1.0 → 1.1.1 age confidence dependencies patch
@types/node (source) 26.4.1 → 26.5.0 age confidence devDependencies minor 26.5.1
@unocss/preset-icons (source) 66.9.2 → 66.10.1 age confidence devDependencies minor 66.10.2
@unocss/preset-wind3 (source) 66.9.2 → 66.10.1 age confidence devDependencies minor 66.10.2
autoprefixer 10.5.4 → 10.5.5 age confidence devDependencies patch 10.6.0 (+1)
entities 8.0.0 → 8.1.0 age confidence dependencies minor
lint-staged 17.4.1 → 17.5.0 age confidence dependencies minor 17.5.1
oxfmt (source) ^0.66.0 → ^0.67.0 age confidence devDependencies minor
oxlint (source) 1.81.0 → 1.82.0 age confidence devDependencies minor
pnpm/action-setup v6.0.10 → v6.1.0 age confidence action minor
radashi (source) 12.9.1 → 12.9.2 age confidence dependencies patch
unocss (source) 66.9.2 → 66.10.1 age confidence devDependencies minor 66.10.2
vitepress (source) 2.0.0-alpha.19 → 2.0.0-alpha.20 age confidence devDependencies patch
vitepress-sidebar (source) 1.39.0 → 1.40.0 age confidence devDependencies minor

Release Notes

mdit-plugins/mdit-plugins (@​mdit/plugin-img-size)

v1.1.1

Compare Source

Build System
mdit-plugins/mdit-plugins (@​mdit/plugin-mark)

v2.1.1

Compare Source

Build System
mdit-plugins/mdit-plugins (@​mdit/plugin-ruby)

v1.1.1

Compare Source

Build System
mdit-plugins/mdit-plugins (@​mdit/plugin-spoiler)

v2.1.1

Compare Source

Build System
mdit-plugins/mdit-plugins (@​mdit/plugin-sub)

v1.1.1

Compare Source

Build System
mdit-plugins/mdit-plugins (@​mdit/plugin-sup)

v1.1.1

Compare Source

Build System
unocss/unocss (@​unocss/preset-icons)

v66.10.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v66.10.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
postcss/autoprefixer (autoprefixer)

v10.5.5

Compare Source

fb55/entities (entities)

v8.1.0

Compare Source

Faster decoding & escaping, with smaller bundles. Encoding output stays compatible with v8.

Improvements

  • Decoding: decodeHTML 1.19×, decodeHTMLStrict 1.14×, decodeHTMLAttribute 1.18×, decodeXML 1.46×, default decode 1.44× as fast. #​2248, #​2348
  • Escaping: escapeUTF8 1.49×, escapeAttribute 1.23×, escapeText 1.33× as fast. #​2247, #​2348
  • Encoding mostly ASCII 4 KiB prose: encodeHTML 1.70×, encodeNonAsciiHTML 2.24×, encodeXML / escape 2.46× as fast. On the short, dense benchmark input, HTML encoding is unchanged; XML encoding and default encode take about 6% longer. #​2246, #​2348
  • 19% smaller full bundle (18% gzipped), targeting ES2022.

Compared with v8.0.0; speedups are medians of nine runs on Node 26.8.1, Linux/x64. Short inputs use the repository benchmark fixtures; results vary with input.

Fixes

  • decodeHTMLAttribute preserves interrupted references such as &notin<, previously incorrectly decoded to ¬in<. #​2213
  • decodeHTML preserves unterminated names such as &Xi$, previously incorrectly decoded to Â. #​2331
  • decodeXML and default decode preserve XML numeric code points: &#x80; now yields U+0080 instead of €. HTML decoding still yields €. By @​adarshx01 in #​2347.

Deprecations

  • Use String.prototype.codePointAt instead of getCodePoint from entities/escape. #​2268

Full Changelog: fb55/entities@v8.0.0...v8.1.0

lint-staged/lint-staged (lint-staged)

v17.5.0

Compare Source

Minor Changes
  • #​1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.
Patch Changes

  • #​1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.

  • #​1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.

  • #​1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

oxc-project/oxc (oxfmt)

v0.67.0

Compare Source

🛡️ Security
oxc-project/oxc (oxlint)

v1.82.0

Compare Source

🚀 Features
  • 6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#​26249) (camc314)
pnpm/action-setup (pnpm/action-setup)

v6.1.0

Compare Source

What's Changed

Full Changelog: pnpm/action-setup@v6.0.10...v6.1.0

radashi-org/radashi (radashi)

v12.9.2

Compare Source

Details
Fixed
  • (snake) Split every letter-number boundary, not just the first in 7cbe750
vuejs/vitepress (vitepress)

v2.0.0-alpha.20

Compare Source

Bug Fixes
  • harden eager frontmatter interpolation (#​5413) (09f9672)
  • key head entries by id and ignore meta content when deduping (b18f306), closes #​5362 #​5363 #​5379
  • search: respect per-locale markdown options (#​5351) (27c4a1a)
  • serialize config functions as code, not strings revived via new Function (close #​3685) (d3b2957)
  • theme/regression: fix misaligned external link icon (2be52f0)
  • theme: adjust z-index for VPNavBar and simplify VPNavScreen styles (#​5374) (35cf647)
  • theme: cover the external link icon's paint box with its mask (39b8f9f)
  • theme: drop the -webkit-backdrop-filter fallbacks (a2a0a92)
  • theme: fix menu dropdown group dividers (#​5365) (49c84f5)
  • theme: fix nav screen and divider appearance (#​5369) (a0401ee)
  • theme: fix social links spacing in dropdown (#​5370) (cb636b2)
  • theme: handle outline bottom overscroll (#​5375) (3fe901d)
  • theme: keep search beside the title without a nav menu (14f4f09)
  • theme: keep the search keycap glyphs out of the DOM text (60f656b), closes #​5401
  • theme: mark current navigation links (#​5395) (0f0fe13)
  • theme: paint the navbar divider on its own layer (9bebd09), closes #​5399
  • theme: prevent layout shifts when locking page scroll (310679a), closes #​5386
  • theme: prevent scroll chaining in local nav outline dropdown (#​5367) (0a96bae)
  • theme: remove extra margins from first and last paragraph inside a list element (8dbd782), closes #​5353
  • theme: render sidebar active state during ssr (005aa5c)
  • theme: render sidebar group toggles as native buttons (ed2bfb2), closes #​5366 #​5371
  • theme: rendering of sponsor and team components inside vp-doc containers (#​4493) (b7602df)
  • theme: treat negative scrollY as top (#​5368) (9d521db)
  • theme: use a getter as VPSidebar's open watch source (9aeeb4f)
  • theme: use relative length units to auto-close nav screen menu (#​5387) (c197979)
Features
jooy2/vitepress-sidebar (vitepress-sidebar)

v1.40.0

Compare Source

  • A frontmatter field is now only read from the frontmatter block of a page. The reader fell back to scanning the whole file line by line whenever gray-matter returned nothing for a field, and never stopped at the closing delimiter, so a key: value line written anywhere in the content was read as if it were frontmatter. A page that documents a frontmatter — an order: 1 inside a fenced code block, or an exclude: true in an example — was mis-sorted, given the wrong title, or dropped from the sidebar entirely. The block is now the only thing scanned, and the fallback still applies when the frontmatter is not valid YAML. A field that is present is also used when its value is falsy, so order: 0 and exclude: false mean what they say instead of being treated as absent.
  • sortMenusByFileDatePrefix now sorts. It read the date prefix with split instead of match, which returns the part before the date and is therefore always the empty string, so every comparison was NaN and the items were left in the order the directory happened to be read in. That order is the one the file system returns, so it only looked like a date order on a file system that returns its entries sorted, and was arbitrary elsewhere. A menu item that does not begin with a date carries nothing to sort by, and is now kept together with the other such items before the dated ones, instead of leaving the whole level unordered.
  • documentRootPath and scanStartPath are now stripped from a link as the text they are, instead of as a regular expression. A ., a ( or a + in the name of a folder was read as a regular expression character, so a document root such as docs (v2) was left in every link and every menu item pointed at a page that does not exist. A scanStartPath is also read the same way whether or not it is written with a surrounding slash.
  • A folder is now skipped for being called node_modules or .vitepress only when that is its name. The check matched those names anywhere in the absolute path of an entry, so a project that merely sits somewhere below a directory whose name holds one of them, such as ~/my-node_modules-docs, produced an empty sidebar with nothing to explain it.
  • A prefixSeparator written as a regular expression no longer prints itself inside a menu title. A title holding more than one match was split and then re-joined with the regular expression, so a name such as 1.1.1-four-file became 11/\./1-four-file. The first match is now removed and nothing is re-joined, which is what the documentation describes. A match that does not open the title is also no longer moved to the front of it.
  • removePrefixAfterOrdering can be used on its own again. It reported 'prefixSeparator' should not use empty string unless a prefixSeparator was written down as well, because the check ran before the documented default of '.' was applied. Only a separator that is written down and empty is an error now.
  • sortMenusByFileCreateDate now reads the time a file was created instead of ctime, which is the last time the metadata of a file changed. A chmod, a rename or anything else that touched a file moved it to the end of the menu without its content having changed. A file system that records no creation time still falls back to ctime, which is the closest thing it has. Both this option and sortMenusByFileModifyDate also keep the time in milliseconds now, so two files written in the same second are ordered by which of them came first instead of being left in the order the directory was read in.
  • useTitleFromFileHeading no longer reads a # written inside a fenced code block as the heading of a page. A shell snippet whose first line is a comment, such as # Install the package, became the title of any page that showed one before its own heading. A block is only closed by a fence of the same character and at least the same length, so a block that holds another one is read as the one block it is.
  • withSidebar no longer writes to the VitePress configuration or to the sidebar options it is given. It replaced themeConfig.sidebar with an empty object, set debugPrint to false, and appended its dev-server plugin to the very vite.plugins array of the caller. VitePress evaluates its configuration again on every restart of the dev server, so that last one added the plugin once more each time. A configuration or an options object that is frozen, such as one written with as const, also no longer fails with Cannot assign to read only property.
  • A folder is now scanned in the order of its names, instead of the order the file system happens to hand its entries back in. That order is sorted on some file systems and a hash order on others, so a project with no sorting option built a different sidebar depending on the machine it was built on, and sortMenusByFileDatePrefix and sortMenusByFileCreateDate fell back to it whenever two items compared equal. The comparison is by code unit rather than by locale, so the same project always builds the same sidebar. The documentation already described this order; only now is it the one that is actually used.
  • A root group made by rootGroupLink or rootGroupCollapsed alone is now named Table of Contents, the default the documentation describes, instead of being left with no name at all. The default is only used where a root group is actually made, so a sidebar still gets one only when one of the rootGroup options asks for it.
  • sortFolderTo now reads a folder as a folder even when it holds no items. It told the two apart by the items of a menu item, which a folder kept by includeEmptyFolder, linked through useFolderLinkFromIndexFile, or emptied by excludeByFolderDepth does not have, so such a folder was moved to the end with the files.
  • Two sidebars that resolve to the same path are now reported. The second one replaced the first without a word, so a resolvePath written twice by mistake silently dropped a whole sidebar.
  • followSymlinks no longer fails the build on a symbolic link that leads back into the scan. A link pointing at a directory above itself was followed until the operating system stopped it with ELOOP, which ended the build. Every directory on the way to the current one is now remembered by the path it really is, so a link that closes the circle is left out instead. A link pointing at nothing is skipped as well, rather than stopping the build with ENOENT.
  • A documentRootPath or scanStartPath that does not exist is now reported by name, together with the working directory it was resolved from. The build used to stop at a bare ENOENT: scandir, which named neither the option that was wrong nor what it was resolved against.
  • The declaration files of the package no longer import ./types.ts. Three source files imported their types with a .ts extension, which survives into the declaration file, and lib is not published, so those files named something the package does not ship. Nothing reachable from the entry point pointed at one of them, so it broke no one yet; a test now keeps it that way.
  • Sorting no longer walks the items of a folder once for every level above it. The keys the sorting needs were removed from the whole subtree each time a level was sorted, which is work proportional to the depth of the tree for every item in it. Each level cleans up after itself instead. Alongside it, the type of a directory entry is now read together with the entry itself rather than looked up one statSync at a time, manualSortFileNameByPriority is read from a lookup instead of being searched per entry, the two collators are built once instead of once per folder, and looking for a dynamic route template stops at the first one found. Each of these is a small saving on its own; together they take a little off every build, and rather more off a deep tree, where the repeated walk cost the most.
  • A paths loader is now given two minutes to resolve its routes. It is project code run in a child process, and one that never returned held the whole build open. The sidebar is then built without the generated pages, as it already is for a loader that fails.
  • npm run build no longer reformats the sources it is about to build. It ran prettier --write first, which meant that prepare rewrote the working tree on every install, and that continuous integration silently repaired a formatting problem instead of reporting it. Formatting is checked by the new format:check script, which runs in continuous integration together with lint, neither of which was run there before.
  • Each Markdown file is now read and parsed once per build instead of once per option that reads something from it. useTitleFromFileHeading, useTitleFromFrontmatter, frontmatterTitleFieldName, excludeFilesByFrontmatterFieldName, sortMenusByFrontmatterOrder and sortMenusByFrontmatterDate used to read and parse the same file again each, up to four times over. On a 2,000 page project the combination of those options went from about 300 ms to about 100 ms, and frontmatterTitleFieldName no longer reads every file twice when the field it names is absent.

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • "after 8pm every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@netlify

netlify Bot commented Sep 12, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for mark9804 ready!

Name Link
🔨 Latest commit d81d130
🔍 Latest deploy log https://app.netlify.com/projects/mark9804/deploys/6aa547cd7e5c2400089ab0b5
😎 Deploy Preview https://deploy-preview-272--mark9804.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse		 1 paths audited
Performance: 87
Accessibility: 89
Best Practices: 92
SEO: 100
PWA: 56
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

@vercel

vercel Bot commented Sep 12, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
blog Ready Ready Preview Sep 12, 2026 12:39pm UTC

@renovate
renovate Bot merged commit 5942ff2 into master Sep 12, 2026
8 checks passed
@renovate
renovate Bot deleted the renovate/all-minor-patch branch September 12, 2026 16:47

This branch was successfully deployed

1 active deployment
Preview — d81d1305 Deployed Sep 12, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants