fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #110 · unplugin/unplugin-ast

renovate · 2025-12-29T01:08:37Z

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/generator (source)	`^8.0.0-beta.4` → `^8.0.0-rc.2`
@babel/parser (source)	`^8.0.0-beta.4` → `^8.0.0-rc.2`
@babel/types (source)	`^8.0.0-beta.4` → `^8.0.0-rc.2`
@sxzz/eslint-config	`^7.5.0` → `^7.7.2`
@sxzz/prettier-config	`^2.2.6` → `^2.3.1`
@types/node (source)	`^25.0.10` → `^25.2.3`
bumpp	`^10.4.0` → `^10.4.1`
pnpm (source)	`10.28.1` → `10.29.3`
rollup (source)	`^4.56.0` → `^4.57.1`
tsdown (source)	`^0.20.0` → `^0.20.3`
tsdown-preset-sxzz	`^0.3.1` → `^0.3.3`
vitest (source)	`^4.0.17` → `^4.0.18`

Release Notes

babel/babel (@babel/generator)

`v8.0.0-rc.2`

Compare Source

💥 Breaking Change

Other
- #17766 Remove unused code for old ESLint versions (@liuxingbaoyu)
babel-code-frame
- #17772 Remove deprecated default export from @babel/code-frame (@fisker)

🐛 Bug Fix

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
- #17797 fix: Properly handle await in finally (@liuxingbaoyu)
babel-parser
- #17796 Support ESLint 10 (@JLHwung)
babel-preset-env
- #17787 Fix: preset-env include/exclude should accept bugfix plugins (@JLHwung)
babel-generator
- #17781 fix: preserve trailing comma in optional call args (@JLHwung)
- #17774 Fix undefined indentation when exactly 64 indents (@YoussefHenna)
babel-standalone
- #17770 fix: ensure targets.esmodules is validated (@JLHwung)

💅 Polish

babel-core
- #17778 Improve core typings (@JLHwung)

📝 Documentation

babel-parser
- #17786 docs: update spec.md (@JLHwung)

🏠 Internal

babel-build-external-helpers, babel-cli, babel-helper-builder-react-jsx, babel-helper-create-class-features-plugin, babel-helper-create-regexp-features-plugin, babel-helper-fixtures, babel-helper-import-to-platform-api, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-node, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-external-helpers, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-proposal-do-expressions, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-optional-chaining-assign, babel-plugin-proposal-partial-application, babel-plugin-proposal-pipeline-operator, babel-plugin-proposal-throw-expressions, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-arrow-functions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-classes, babel-plugin-transform-computed-properties, babel-plugin-transform-destructuring, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-keys, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-dynamic-import, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-export-namespace-from, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-for-of, babel-plugin-transform-function-name, babel-plugin-transform-instanceof, babel-plugin-transform-jscript, babel-plugin-transform-json-modules, babel-plugin-transform-json-strings, babel-plugin-transform-literals, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-member-expression-literals, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-new-target, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-object-set-prototype-of-to-assign, babel-plugin-transform-object-super, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-property-literals, babel-plugin-transform-property-mutators, babel-plugin-transform-proto-to-assign, babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-display-name, babel-plugin-transform-react-inline-elements, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-reserved-words, babel-plugin-transform-runtime, babel-plugin-transform-shorthand-properties, babel-plugin-transform-spread, babel-plugin-transform-sticky-regex, babel-plugin-transform-strict-mode, babel-plugin-transform-template-literals, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-plugin-transform-unicode-escapes, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow, babel-preset-react, babel-preset-typescript, babel-register
- #17800 Set peer dep on @babel/core to workspace:^ (@nicolo-ribaudo)
babel-parser, babel-plugin-transform-explicit-resource-management
- #17793 Remove Babel 7 plugins from parser types (@nicolo-ribaudo)
babel-plugin-proposal-discard-binding, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-transform-block-scoping, babel-plugin-transform-json-modules, babel-standalone
- #17792 Archive syntax plugins enabled by default (@nicolo-ribaudo)

`v8.0.0-rc.1`

Compare Source

💥 Breaking Change

Other
- #17763 Drop support for eslint v7-v8 (@liuxingbaoyu)
- #17755 Make eslint-parser/experimental-worker the default (@liuxingbaoyu)
babel-register
- #17762 Remove browser entrypoint for @babel/register (@nicolo-ribaudo)
babel-parser, babel-plugin-proposal-partial-application, babel-plugin-syntax-partial-application
- #17760 [Babel 8]: partial-application plugin requires "version" option (@JLHwung)
babel-core, babel-plugin-transform-runtime, babel-register
- #17756 Use package.json#imports for browser-specific code (@nicolo-ribaudo)
babel-build-external-helpers, babel-cli
- #17746 [Babel 8] Extract babel-build-external-helpers (@JLHwung)
babel-traverse
- #17722 Remove NodePath#visit (@liuxingbaoyu)
babel-cli, babel-node
- #17741 [Babel 8] Disallow excess arguments in babel-external-helpers (@JLHwung)
babel-generator, babel-plugin-proposal-pipeline-operator, babel-traverse, babel-types
- #17732 [Babel 8] Remove smart pipeline support and remove accessor property from Standardized alias (@JLHwung)
babel-plugin-transform-object-assign, babel-standalone
- #17619 [Babel 8] Remove @babel/plugin-transform-object-assign (@liuxingbaoyu)
babel-plugin-transform-runtime, babel-preset-env
- #17701 [Babel 8]: clean up unused preset-env data entries (@JLHwung)

🚀 New Feature

babel-code-frame, babel-core
- #17070 feat: Allow specifying startLine in code frame (@liuxingbaoyu)
babel-types
- #17423 Add attributes to import/export builder (@JLHwung)
babel-standalone
- #17653 feat(standalone): export async transform (@JLHwung)
- #17482 feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser
- #17761 fix(parser): correctly parse type assertions in extends clause (@wulu007)
- #17720 fix(parser): improve super type argument parsing (@JLHwung)
babel-register
- #17229 [Babel 8] Refactor register cache (@liuxingbaoyu)
babel-traverse
- #17702 fix(babel-traverse): check variable shadowing for global object callees (@wulu007)
babel-core
- #17733 fix: Correct the type of plugin parameter (@liuxingbaoyu)
babel-plugin-proposal-partial-application
- #17662 fix(partial-app): support super method call (@JLHwung)
babel-compat-data, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping, babel-preset-env
- #17691 Fix hoisting of function declarations in loops and switch (@liuxingbaoyu)
babel-generator
- #17717 fix: improve parentheses rule of conditional (@JLHwung)

💅 Polish

babel-parser
- #17531 Improve @babel/parser error types (@liuxingbaoyu)

🏠 Internal

babel-code-frame, babel-helpers, babel-node, babel-types
- #17678 Replace picocolors with node:util.styleText() in @babel/code-frame (@fisker)
Other
- #17751 Add CI check to make sure packages exist on npm (@nicolo-ribaudo)
babel-helper-transform-fixture-test-runner
- #17743 Use require(esm) for @babel/core (@nicolo-ribaudo)
babel-template
- #17748 chore: Improve template exception handling (@liuxingbaoyu)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3
- #17718 [Babel 8] Improve generator performance (@liuxingbaoyu)

babel/babel (@babel/parser)

`v8.0.0-rc.2`

Compare Source

v8.0.0-rc.2 (2026-02-15)

Thanks @YoussefHenna for your first PR!

💥 Breaking Change

Other
- #17766 Remove unused code for old ESLint versions (@liuxingbaoyu)
babel-code-frame
- #17772 Remove deprecated default export from @babel/code-frame (@fisker)

🐛 Bug Fix

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
- #17797 fix: Properly handle await in finally (@liuxingbaoyu)
babel-parser
- #17796 Support ESLint 10 (@JLHwung)
babel-preset-env
- #17787 Fix: preset-env include/exclude should accept bugfix plugins (@JLHwung)
babel-generator
- #17781 fix: preserve trailing comma in optional call args (@JLHwung)
- #17774 Fix undefined indentation when exactly 64 indents (@YoussefHenna)
babel-standalone
- #17770 fix: ensure targets.esmodules is validated (@JLHwung)

💅 Polish

babel-core
- #17778 Improve core typings (@JLHwung)

📝 Documentation

babel-parser
- #17786 docs: update spec.md (@JLHwung)

🏠 Internal

All packages
- #17800 Set peer dep on @babel/core to workspace:^ (@nicolo-ribaudo)
babel-parser, babel-plugin-transform-explicit-resource-management
- #17793 Remove Babel 7 plugins from parser types (@nicolo-ribaudo)
babel-plugin-proposal-discard-binding, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-transform-block-scoping, babel-plugin-transform-json-modules, babel-standalone
- #17792 Archive syntax plugins enabled by default (@nicolo-ribaudo)

Committers: 6

Babel Bot (@babel-bot)
Huáng Jùnliàng (@JLHwung)
Nicolò Ribaudo (@nicolo-ribaudo)
Youssef Henna (@YoussefHenna)
@liuxingbaoyu
fisker Cheung (@fisker)

`v8.0.0-rc.1`

Compare Source

v8.0.0-rc.1 (2026-01-31)

Thanks @ivonaest and @wulu007 for your first PRs!

💥 Breaking Change

babel-eslint-parser
- #17763 Drop support for eslint v7-v8 (@liuxingbaoyu)
- #17755 Make eslint-parser/experimental-worker the default (@liuxingbaoyu)
babel-register
- #17762 Remove browser entrypoint for @babel/register (@nicolo-ribaudo)
babel-parser, babel-plugin-proposal-partial-application, babel-plugin-syntax-partial-application
- #17760 [Babel 8]: partial-application plugin requires "version" option (@JLHwung)
babel-core, babel-plugin-transform-runtime, babel-register
- #17756 Use package.json#imports for browser-specific code (@nicolo-ribaudo)
babel-build-external-helpers, babel-cli
- #17746 [Babel 8] Extract babel-build-external-helpers (@JLHwung)
babel-traverse
- #17722 Remove NodePath#visit (@liuxingbaoyu)
babel-cli, babel-node
- #17741 [Babel 8] Disallow excess arguments in babel-external-helpers (@JLHwung)
babel-generator, babel-plugin-proposal-pipeline-operator, babel-traverse, babel-types
- #17732 [Babel 8] Remove smart pipeline support and remove accessor property from Standardized alias (@JLHwung)
babel-plugin-transform-object-assign, babel-standalone
- #17619 [Babel 8] Remove @babel/plugin-transform-object-assign (@liuxingbaoyu)
babel-plugin-transform-runtime, babel-preset-env
- #17701 [Babel 8]: clean up unused preset-env data entries (@JLHwung)

🚀 New Feature

babel-code-frame, babel-core
- #17070 feat: Allow specifying startLine in code frame (@liuxingbaoyu)
babel-types
- #17423 Add attributes to import/export builder (@JLHwung)
babel-standalone
- #17653 feat(standalone): export async transform (@JLHwung)
- #17482 feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser
- #17761 fix(parser): correctly parse type assertions in extends clause (@wulu007)
- #17720 fix(parser): improve super type argument parsing (@JLHwung)
babel-register
- #17229 [Babel 8] Refactor register cache (@liuxingbaoyu)
babel-traverse
- #17702 fix(babel-traverse): check variable shadowing for global object callees (@wulu007)
babel-core
- #17733 fix: Correct the type of plugin parameter (@liuxingbaoyu)
babel-plugin-proposal-partial-application
- #17662 fix(partial-app): support super method call (@JLHwung)
babel-compat-data, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping, babel-preset-env
- #17691 Fix hoisting of function declarations in loops and switch (@liuxingbaoyu)
babel-generator
- #17717 fix: improve parentheses rule of conditional (@JLHwung)

💅 Polish

babel-parser
- #17531 Improve @babel/parser error types (@liuxingbaoyu)

🏠 Internal

babel-code-frame, babel-helpers, babel-node, babel-types
- #17678 Replace picocolors with node:util.styleText() in @babel/code-frame (@fisker)
Other
- #17751 Add CI check to make sure packages exist on npm (@nicolo-ribaudo)
babel-helper-transform-fixture-test-runner
- #17743 Use require(esm) for @babel/core (@nicolo-ribaudo)
babel-template
- #17748 chore: Improve template exception handling (@liuxingbaoyu)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3
- #17718 [Babel 8] Improve generator performance (@liuxingbaoyu)

Committers: 8

Babel Bot (@babel-bot)
Huáng Jùnliàng (@JLHwung)
Nicolò Ribaudo (@nicolo-ribaudo)
@ivonaest
@liuxingbaoyu
@magic-akari
@wulu007
fisker Cheung (@fisker)

sxzz/eslint-config (@sxzz/eslint-config)

`v7.7.2`

Compare Source

🐞 Bug Fixes

Downgrade eslint and @eslint/js to v9 - by @sxzz (46002)

View changes on GitHub

`v7.7.1`

Compare Source

🐞 Bug Fixes

Disable no-useless-assignment for vue, remove reactivity transform support - by @sxzz (beb15)

View changes on GitHub

`v7.7.0`

Compare Source

🚀 Features

~~Support ESLint v10 - by @sxzz (e2a57)~~ Not fully supported.

View changes on GitHub

`v7.6.1`

Compare Source

No significant changes

View changes on GitHub

`v7.6.0`

Compare Source

🚀 Features

Add Astro support - by @sxzz in #154 (5aa3e)
Add importWithError utility for optional plugin imports - by @sxzz (4ce53)

View changes on GitHub

`v7.5.1`

Compare Source

🐞 Bug Fixes

Move import condition before require - by @sxzz (c3ca1)

View changes on GitHub

sxzz/prettier-config (@sxzz/prettier-config)

`v2.3.1`

Compare Source

🐞 Bug Fixes

Missing dist - by @sxzz (e1152)

View changes on GitHub

`v2.3.0`

Compare Source

No significant changes

View changes on GitHub

`v2.2.7`

Compare Source

🐞 Bug Fixes

deps:
- Update all non-major dependencies - in #83 (4484b)
- Update all non-major dependencies - in #84 (1a098)

View changes on GitHub

antfu-collective/bumpp (bumpp)

`v10.4.1`

Compare Source

🚀 Features

Add custom path to config - by @OskarLebuda in #107 (0f2e4)

View changes on GitHub

pnpm/pnpm (pnpm)

Minor Changes

The pnpm dlx / pnpx command now supports the catalog: protocol. Example: pnpm dlx shx@catalog:.
Support configuring auditLevel in the pnpm-workspace.yaml file #10540.
Support bare workspace: protocol without version specifier. It is now treated as workspace:* and resolves to the concrete version during publish #10436.

Patch Changes

Fixed pnpm list --json returning incorrect paths when using global virtual store #10187.
Fix pnpm store path and pnpm store status using workspace root for path resolution when storeDir is relative #10290.
Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists #10497.
Fixed a bug where catalogMode: strict would write the literal string "catalog:" to pnpm-workspace.yaml instead of the resolved version specifier when re-adding an existing catalog dependency #10176.
Fixed the documentation URL shown in pnpm completion --help to point to the correct page at https://pnpm.io/completion #10281.
Skip local file: protocol dependencies during pnpm fetch. This fixes an issue where pnpm fetch would fail in Docker builds when local directory dependencies were not available #10460.
Fixed pnpm audit --json to respect the --audit-level setting for both exit code and output filtering #10540.
update tar to version 7.5.7 to fix security issue

Updating the version of dependency tar to 7.5.7 because the previous one have a security vulnerability reported here: CVE-2026-24842
Fix pnpm audit --fix replacing reference overrides (e.g. $foo) with concrete versions #10325.
Fix shamefullyHoist set via updateConfig in .pnpmfile.cjs not being converted to publicHoistPattern #10271.
pnpm help should correctly report if the currently running pnpm CLI is bundled with Node.js #10561.
Add a warning when the current directory contains the PATH delimiter character. On macOS, folder names containing forward slashes (/) appear as colons (:) at the Unix layer. Since colons are PATH separators in POSIX systems, this breaks PATH injection for node_modules/.bin, causing binaries to not be found when running commands like pnpm exec #10457.

Platinum Sponsors

Gold Sponsors

`v10.28.2`: pnpm 10.28.2

Compare Source

Patch Changes

Security fix: prevent path traversal in directories.bin field.
When pnpm installs a file: or git: dependency, it now validates that symlinks point within the package directory. Symlinks to paths outside the package root are skipped to prevent local data from being leaked into node_modules.

This fixes a security issue where a malicious package could create symlinks to sensitive files (e.g., /etc/passwd, ~/.ssh/id_rsa) and have their contents copied when the package is installed.

Note: This only affects file: and git: dependencies. Registry packages (npm) have symlinks stripped during publish and are not affected.
Fixed optional dependencies to request full metadata from the registry to get the libc field, which is required for proper platform compatibility checks #9950.

Platinum Sponsors

Gold Sponsors

rollup/rollup (rollup)

`v4.57.1`

Compare Source

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)
Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)
#6252: chore(deps): update dependency lru-cache to v11 (@renovate[bot])
#6253: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
#6254: Fully include dynamic imports in a try-catch (@lukastaegert)
#6255: chore(deps): lock file maintenance (@renovate[bot])

`v4.57.0`

Compare Source

2026-01-27

Features

Add import attributes to all plugin hooks that did not provide them yet (#5700)
Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#5700)

Pull Requests

#5700: extend more hooks to include import attributes and add warnings (@TrickyPi, @lukastaegert)
#6243: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)
#6244: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
#6245: chore(deps): lock file maintenance (@renovate[bot])
#6246: Refactor to reduce Rollup 5 upgrade diff (@lukastaegert)

rolldown/tsdown (tsdown)

`v0.20.3`

Compare Source

🐞 Bug Fixes

package: Ignore scripts when packing - by @sxzz (0b10b)

View changes on GitHub

`v0.20.2`

Compare Source

🚀 Features

Upgrade rolldown to 1.0.0-rc.3 - by @sxzz (0beea)
dep: Keep inlineOnly clean with hint message on unused - by @jycouet and @sxzz in #725 (13f1c)
pkg: Optimize attw and publint packing - by @sxzz in #736 (375cf)

🐞 Bug Fixes

Throw error when skipNodeModulesBundle and noExternal are used together - by @sxzz in #746 (656d5)
External type only packages @types/* - by @kalvenschraut (0be7c)
exports: Move import before require - by @sxzz (3027a)

View changes on GitHub

`v0.20.1`

Compare Source

🚀 Features

inline-only: Show warnings if bundled deps - by @sxzz (1e0e7)

View changes on GitHub

sxzz/tsdown-preset-sxzz (tsdown-preset-sxzz)

`v0.3.3`

Compare Source

🐞 Bug Fixes

Remove tsgo detection - by @sxzz (ae5ef)

View changes on GitHub

`v0.3.2`

Compare Source

🚀 Features

Auto-enable dts.tsgo when @typescript/native-preview is installed - by @sxzz (a6fd3)

View changes on GitHub

vitest-dev/vitest (vitest)

`v4.0.18`

Compare Source

🚀 Experimental Features

experimental: Add onModuleRunner hook to worker.init - by @sheremet-va in #9286 (ea837)

🐞 Bug Fixes

Use meta.url in createRequire - by @sheremet-va in #9441 (e0572)
browser: Hide injected data-testid attributes - by @sheremet-va in #9503 (f8989)
ui: Process artifact attachments when generating HTML reporter - by @macarie in #9472 (22543)

View changes on GitHub

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bolt-new-by-stackblitz · 2025-12-29T01:08:39Z

Run & review this pull request in StackBlitz Codeflow.

pkg-pr-new · 2025-12-29T01:09:04Z

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-ast@110

commit: c26de31

socket-security · 2025-12-29T01:09:05Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
tsdown-preset-sxzz@0.3.1 ⏵ 0.3.3			⁺¹
@sxzz/prettier-config@2.2.6 ⏵ 2.3.1	^-1	⁺¹	⁺²
@babel/generator@8.0.0-beta.4 ⏵ 8.0.0-rc.2	⁺²		⁺³
vitest@4.0.17 ⏵ 4.0.18	⁺¹	⁺¹
@babel/parser@8.0.0-beta.4 ⏵ 8.0.0-rc.2	⁺¹	⁺¹	⁺¹
@babel/types@8.0.0-beta.4 ⏵ 8.0.0-rc.2			⁺¹
@types/node@25.0.10 ⏵ 25.2.3	⁺¹	⁺¹
bumpp@10.4.0 ⏵ 10.4.1		⁺¹
@sxzz/eslint-config@7.5.0 ⏵ 7.7.2		⁺¹	⁺¹
rollup@4.56.0 ⏵ 4.57.1
tsdown@0.20.0 ⏵ 0.20.3	⁺¹	^-4

View full report

socket-security · 2026-01-08T19:35:54Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

renovate bot added the dependencies label Dec 29, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from e86cfaf to 26a5749 Compare January 5, 2026 10:40

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from f9782cc to e30b0ea Compare January 8, 2026 19:35

renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 24851a5 to 750d3b7 Compare January 12, 2026 20:57

renovate bot changed the title ~~chore(deps): update all non-major dependencies~~ fix(deps): update all non-major dependencies Jan 12, 2026

renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from e0b2b98 to eeb46f1 Compare January 19, 2026 19:03

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from c898bd9 to 358103c Compare January 22, 2026 09:58

renovate bot changed the title ~~fix(deps): update all non-major dependencies~~ fix(deps): update all non-major dependencies - autoclosed Jan 22, 2026

renovate bot closed this Jan 22, 2026

renovate bot deleted the renovate/all-minor-patch branch January 22, 2026 17:32

renovate bot changed the title ~~fix(deps): update all non-major dependencies - autoclosed~~ chore(deps): update all non-major dependencies Jan 26, 2026

renovate bot reopened this Jan 26, 2026

renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from d157202 to a0c4743 Compare January 31, 2026 21:14

renovate bot changed the title ~~chore(deps): update all non-major dependencies~~ fix(deps): update all non-major dependencies Jan 31, 2026

renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 93346ac to a2448bd Compare February 8, 2026 01:31

renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 16a0ba4 to e8c18ea Compare February 11, 2026 22:30

fix(deps): update all non-major dependencies

c26de31

renovate bot force-pushed the renovate/all-minor-patch branch from e8c18ea to c26de31 Compare February 15, 2026 21:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all non-major dependencies#110

fix(deps): update all non-major dependencies#110
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Dec 29, 2025 •

edited

Loading

Uh oh!

bolt-new-by-stackblitz bot commented Dec 29, 2025

Uh oh!

pkg-pr-new bot commented Dec 29, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Dec 29, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Jan 8, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate bot commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

💥 Breaking Change

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

💥 Breaking Change

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

v8.0.0-rc.2 (2026-02-15)

💥 Breaking Change

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

Committers: 6

v8.0.0-rc.1 (2026-01-31)

💥 Breaking Change

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 8

🐞 Bug Fixes

🐞 Bug Fixes

🚀 Features

🚀 Features

🐞 Bug Fixes

🐞 Bug Fixes

🐞 Bug Fixes

🚀 Features

v10.29.1: pnpm 10.29.1

Minor Changes

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.28.2: pnpm 10.28.2

Patch Changes

Platinum Sponsors

Gold Sponsors

Bug Fixes

Pull Requests

Features

Pull Requests

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🚀 Features

🚀 Experimental Features

🐞 Bug Fixes

Configuration

Uh oh!

bolt-new-by-stackblitz bot commented Dec 29, 2025

Uh oh!

pkg-pr-new bot commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

renovate bot commented Dec 29, 2025 •

edited

Loading

`v10.29.1`: pnpm 10.29.1

`v10.28.2`: pnpm 10.28.2

pkg-pr-new bot commented Dec 29, 2025 •

edited

Loading

socket-security bot commented Dec 29, 2025 •

edited

Loading

socket-security bot commented Jan 8, 2026 •

edited

Loading