chore(deps): update all non-major dependencies - autoclosed

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Change	Age	Confidence
@sxzz/eslint-config	^7.2.6 -> ^7.2.7
@types/node (source)	^24.5.2 -> ^24.7.0
bumpp	^10.2.3 -> ^10.3.1
eslint (source)	^9.36.0 -> ^9.37.0
pnpm (source)	10.17.1 -> 10.18.1
tsdown	^0.15.5 -> ^0.15.6
typescript (source)	^5.9.2 -> ^5.9.3
vite (source)	^7.1.7 -> ^7.1.9

---

Release Notes

sxzz/eslint-config (@​sxzz/eslint-config)

v7.2.7

Compare Source

No significant changes

    View changes on GitHub

antfu-collective/bumpp (bumpp)

v10.3.1

Compare Source

No significant changes

    View changes on GitHub

v10.3.0

Compare Source

   🚀 Features

• Support --release for release type  -  by @​luoling8192 in #​97 (5af7b)

    View changes on GitHub

eslint/eslint (eslint)

v9.37.0

Compare Source

pnpm/pnpm (pnpm)

v10.18.1

Compare Source

Patch Changes

• Don't print a warning, when --lockfile-only is used #​8320.
• pnpm setup creates a command shim to the pnpm executable. This is needed to be able to run pnpm self-update on Windows #​5700.
• When using pnpm catalogs and running a normal pnpm install, pnpm produced false positive warnings for "skip adding to the default catalog because it already exists". This warning now only prints when using pnpm add --save-catalog as originally intended.

v10.18.0

Compare Source

Minor Changes

• Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

  Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
  Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

  Related PR: #​10025.

Patch Changes

• Retry filesystem operations on EAGAIN errors #​9959.
• Outdated command respects minimumReleaseAge configuration #​10030.
• Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
• Don't fail with a meaningless error when scriptShell is set to false #​8748.
• pnpm dlx should not fail when minimumReleaseAge is set #​10037.

rolldown/tsdown (tsdown)

v0.15.6

Compare Source

   🐞 Bug Fixes

• watch: Watch relative files  -  by @​sxzz (afeab)

    View changes on GitHub

microsoft/TypeScript (typescript)

v5.9.3

Compare Source

vitejs/vite (vite)

v7.1.9

Compare Source

Reverts

• server: drain stdin when not interactive (#​20885) (12d72b0)

v7.1.8

Compare Source

Bug Fixes

• css: improve url escape characters handling (#​20847) (24a61a3)
• deps: update all non-major dependencies (#​20855) (788a183)
• deps: update artichokie to 0.4.2 (#​20864) (e670799)
• dev: skip JS responses for document requests (#​20866) (6bc6c4d)
• glob: fix HMR for array patterns with exclusions (#​20872) (63e040f)
• keep ids for virtual modules as-is (#​20808) (d4eca98)
• server: drain stdin when not interactive (#​20837) (bb950e9)
• server: improve malformed URL handling in middlewares (#​20830) (d65a983)

Documentation

• create-vite: provide deno example (#​20747) (fdb758a)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​20810) (ea68a88)
• deps: update rolldown-related dependencies (#​20854) (4dd06fd)
• update url of create-react-app license (#​20865) (166a178)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​node@​24.5.2 ⏵ 24.7.0	+1		+1
	bumpp@​10.2.3 ⏵ 10.3.1			+1	+5
	vite@​7.1.7 ⏵ 7.1.9	+1		+1	+2
	typescript@​5.9.2 ⏵ 5.9.3			+1
	tsdown@​0.15.5 ⏵ 0.15.6	-2		-8	-4
	eslint@​9.36.0 ⏵ 9.37.0	+1			+2
	@​sxzz/​eslint-config@​7.2.6 ⏵ 7.2.7	+17		+1	+5

View full report

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/unplugin-vue-jsx@93

commit: 9aaa2cb