Skip to content

fix(deps): update all non-major dependencies - #913

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#913
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@sveltejs/vite-plugin-svelte (source) 7.1.27.3.0 age confidence devDependencies minor
@tailwindcss/typography 0.5.190.5.20 age confidence devDependencies patch
@tauri-apps/plugin-dialog 2.7.12.7.2 age confidence dependencies patch
@tauri-apps/plugin-store 2.4.32.4.4 age confidence dependencies patch
@types/hast (source) 3.0.43.0.5 age confidence devDependencies patch
@types/node (source) 24.11.024.13.3 age confidence devDependencies minor
@types/sanitize-html (source) 2.16.02.16.1 age confidence devDependencies patch
@vitejs/plugin-react (source) 5.1.45.2.0 age confidence devDependencies minor
actions/checkout v6.0.3v6.1.0 age confidence action minor
ajv (source) 8.18.08.20.0 age confidence overrides minor
anyhow 1.0.1021.0.104 age confidence dependencies patch
async-trait 0.1.890.1.92 age confidence dependencies patch
base64 0.220.23 age confidence dependencies minor
bits-ui 2.18.12.19.0 age confidence devDependencies minor
chrono 0.4.440.4.45 age confidence dependencies patch
clap 4.6.04.6.6 age confidence dependencies patch
dialoguer 0.110.12 age confidence dependencies minor
git2 0.200.21 age confidence dependencies minor
github.com/fsnotify/fsnotify v1.9.0v1.10.1 age confidence require minor
github.com/yuin/goldmark v1.8.2v1.8.5 age confidence require patch
idb-keyval 6.2.66.3.0 age confidence dependencies minor
ignore (source) 0.4.250.4.33 age confidence dependencies patch
jsdom 29.0.229.1.1 age confidence devDependencies minor
libc 0.2.1850.2.189 age confidence dependencies patch
log 0.4.290.4.34 age confidence dependencies patch
log 0.4.330.4.34 age confidence dependencies patch
marked (source) 18.0.518.0.11 age confidence dependencies patch
marked (source) 17.0.317.0.6 age confidence dependencies patch
mermaid 11.12.311.17.2 age confidence dependencies minor
nanoid 0.40.5 age confidence dependencies minor
nix 0.31.20.31.3 age confidence dependencies patch
opener 0.8.40.8.5 age confidence dependencies patch
pnpm (source) 10.33.010.34.5 age confidence packageManager minor
postcss (source) 8.5.168.5.26 age confidence devDependencies patch
prettier (source) 3.9.43.9.6 age confidence devDependencies patch
prettier-plugin-svelte 3.5.03.5.2 age confidence devDependencies patch
rand (source) 0.90.10 age confidence dependencies minor
reqwest 0.13.20.13.4 age confidence dependencies patch
resvg 0.470.48 age confidence dependencies minor
rusqlite 0.390.40 age confidence dependencies minor
rusqlite_migration (source) 2.5.02.6.0 age confidence dependencies minor
rust (source, changelog) 1.96.11.98.0 age confidence toolchain minor
sanitize-html (source) 2.17.52.17.7 age confidence dependencies patch
serde_json 1.0.1491.0.151 age confidence dependencies patch
shadcn-svelte (source) 1.3.01.5.0 age confidence devDependencies minor 1.5.1
svelte (source) 5.56.45.56.10 age confidence devDependencies patch
svelte-check 4.7.14.7.6 age confidence devDependencies patch
svelte-sonner 1.1.11.2.1 age confidence devDependencies minor
tailwind-variants 3.2.23.3.1 age confidence devDependencies minor
tauri-plugin-store 2.4.22.4.4 age confidence dependencies patch
thiserror 2.0.182.0.20 age confidence dependencies patch
tokio (source) 1.51.11.53.1 age confidence dependencies minor
tokio-util (source) 0.7.180.7.19 age confidence dependencies patch
tower-http 0.60.7 age confidence dependencies minor
usvg 0.470.48 age confidence dependencies minor
uuid 1.23.01.25.0 age confidence dependencies minor 1.26.0
uuid 1.24.01.25.0 age confidence dependencies minor 1.26.0
vite (source) 8.1.08.2.2 age confidence devDependencies minor
vite (source) 7.3.17.3.6 age confidence devDependencies patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

sveltejs/vite-plugin-svelte (@​sveltejs/vite-plugin-svelte)

v7.3.0

Compare Source

Minor Changes
  • feat: pass environment to dynamicCompileOptions (#​1386)
Patch Changes
  • fix: don't log inline config when encountering unexpected options (#​1376)

v7.2.0

Compare Source

Minor Changes
  • feat(inspector): add a context menu with current component stack (#​1370)

v7.1.4

Compare Source

Patch Changes
  • fix: enforce ltr styles for inspector (#​1324)

v7.1.3

Compare Source

Patch Changes
  • fix: ensure the inspector is injected into the client correctly for Vite+ projects (#​1355)
tailwindlabs/tailwindcss-typography (@​tailwindcss/typography)

v0.5.20

Compare Source

Fixed
  • Support installing with stable versions of Tailwind CSS v4 (#​424)
tauri-apps/plugins-workspace (@​tauri-apps/plugin-dialog)

v2.7.2

Compare Source

vitejs/vite-plugin-react (@​vitejs/plugin-react)

v5.2.0

Compare Source

actions/checkout (actions/checkout)

v6.1.0

Compare Source

ajv-validator/ajv (ajv)

v8.20.0

Compare Source

What's Changed

Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0

dtolnay/anyhow (anyhow)

v1.0.104

Compare Source

  • Update syn dev-dependency to version 3

v1.0.103

Compare Source

  • Fix Stacked Borrows violation (UB) in Error::downcast_mut (#​451, #​452)
dtolnay/async-trait (async-trait)

v0.1.92

Compare Source

  • Resolve double_must_use clippy lint in generated code (#​303)

v0.1.91

Compare Source

v0.1.90

Compare Source

  • Update to syn 3
marshallpierce/rust-base64 (base64)

v0.23.1

Compare Source

  • Make the tests build again on non-SIMD architectures

v0.23.0

Compare Source

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
    instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
    GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
    detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
huntabyte/bits-ui (bits-ui)

v2.19.0

Compare Source

Minor Changes
  • feat(Checkbox): pass form to the hidden input (#​2089)
Patch Changes
  • fix(DateField): keep focus on the year while correcting its first digit (#​2100)

  • fix(Tooltip): close Tooltip.Trigger on pointerdown for any pointer button so right/middle click dismiss the tooltip and cancel a pending delayed open (#​2101)

  • fix(RadioGroup): don't select item on pointer-driven focus- #​2098 (#​2098)

v2.18.2

Compare Source

Patch Changes
  • fix(DismissibleLayer): cancel pending afterSleep timer on destroy to prevent derived_inert and stale document listeners (#​2080) (#​2087)

  • fix(TextSelectionLayer): don't read the ref box in #pointerdown before the enabled check, which emitted derived_inert on every document pointerdown when a leaked listener outlived its component (#​2107)

  • fix(AlertDialog): pass disabled through to button in AlertDialog.Cancel (#​2068)

chronotope/chrono (chrono)

v0.4.45: 0.4.45

Compare Source

What's Changed

clap-rs/clap (clap)

v4.6.6

Compare Source

Features
  • Add Command::get_overridden_usage

v4.6.5

Compare Source

v4.6.4

Compare Source

Internal
  • Update to syn v3

v4.6.3

Compare Source

Fixes
  • (derive) Allow "literal".function() as attribute values

v4.6.2

Compare Source

Fixes
  • (help) Say alias when there is only one

v4.6.1

Compare Source

Fixes
  • (derive) Ensure rebuilds happen when an read env variable is changed
console-rs/dialoguer (dialoguer)

v0.12.0: 0.12.0

Compare Source

What's Changed

rust-lang/git2-rs (git2)

v0.21.0

Compare Source

0.20.4...main

Added
  • Added experimental SHA256 repository support behind the new unstable-sha256 Cargo feature,
    along with *_ext API variants that accept an ObjectFormat.
    #​1206
  • Added opts::set_cache_max_size() and opts::get_cached_memory().
    #​1188
  • Added Repository::object_format() and a new ObjectFormat enum.
    #​1204
  • Added Repository::set_config().
    #​1208
  • Added merge_file() along with MergeFileInput.
    #​1210
  • Added Repository::refdb_compress() for packing loose refs.
    #​1221
  • Added public Refdb type, along with Repository::refdb() and Repository::set_refdb(). Repository::refdb_compress() now delegates to Refdb::compress().
    #​1228
  • Added Revspec::into_objects().
    #​1230
  • Added BlameHunk::final_committer(), BlameHunk::orig_committer(), BlameHunk::summary(), and BlameHunk::summary_bytes().
    #​1231
  • Implemented Clone for Reference.
    #​1233
  • Added Repository::author_from_env() and Repository::committer_from_env().
    #​1237
  • Added impl From<Utf8Error> for Error.
    #​1239
Changed
  • ❗ The ssh, https, and cred Cargo features are no longer enabled by default.
    Previously default = ["ssh", "https"]; now default = [].
    Enable them explicitly if you rely on credential helpers or transport support.
    #​1168
  • CredentialHelper and the url dependency are now gated behind the new cred Cargo feature.
    Enabling ssh or https transitively enables cred.
    #​1168
  • ❗ Updated to the 2021 edition.
    #​1173
  • ❗ Many string accessors that previously returned Option<&str>
    now return Result<&str, Error> or Result<Option<&str>, Error>,
    so callers can distinguish a missing value from a non-UTF-8 one.
    #​1241
  • BlameHunk::final_signature, BlameHunk::final_committer, BlameHunk::orig_signature, and BlameHunk::orig_committer
    now return Option to avoid segfaults when signature information is missing.
    #​1254
  • Bumped requirement to libgit2-sys 0.18.4, which updates libgit2 to 1.9.3.
    #​1242
Fixed
  • Fixed MergeOptions::skip_reuc() to use the correct GIT_MERGE_SKIP_REUC flag.
    #​1194
  • Repository::submodules() now returns an Error when the underlying git_submodule_lookup() call to libgit2 fails, rather than panicking with a failed assertion.
    #​1220
  • Reference::is_valid_name() now propagates errors from CString conversion instead of panicking.
    #​1229
  • Fixed Remote::list() to return an empty list instead of erroring
    when the remote advertises no refs.
    #​1250
  • ReferenceNames now returns an Err for non-UTF-8 branch names instead of panicking.
    #​1239
Documentation
  • Added note regarding potentially confusing behavior of git_checkout_head.
    #​1149
  • Added comments describing the IndexAddOption flags.
    #​1163
  • Updated README note about the ssh feature.
    #​1187
  • Improved function docs for Repository::tag_foreach().
    #​1190
  • Fixed doc comment typo in StatusOptions.
    #​1199
  • Fixed missing period in module documentation.
    #​1219
  • Small wording fix in Signature::from_raw_const() docs.
    #​1222
  • Replaced discussion of missing gist in README.
    #​1223
  • Documented the bitflag methods for checking flags.
    #​1224
  • Clarified CheckoutBuilder::update_index() documentation.
    #​1232
  • Added more missing documentation.
    #​1235
  • Fixed typo in Repository::stash_save_ext() docs.
    #​1245
  • Added example showing retrieval of the latest commit for a file.
    #​1243
  • Replaced comma with period in CheckoutBuilder::refresh() docs.
    #​1252
Internals
  • Dropped civet/conduit from dev-dependencies.
    #​1170
  • Updated dependencies.
    #​1171
  • Fixed lockfile verification in CI.
    #​1177
  • Updated CI and documentation to cover feature combinations.
    #​1182
  • Listed all examples that may need HTTP and SSH.
    #​1196
  • Allowed publishing from any ref in the publish workflow.
    #​1198
  • Bumped time from 0.3.41 to 0.3.47.
    #​1215
  • Added end-to-end test for branch name on initialization.
    #​1244
  • Added end-to-end test for stash count.
    #​1246
  • Added end-to-end tests demonstrating use of Repository::statuses().
    #​1251
  • Internal refactors preparing for experimental SHA256 OID support.
    #​1201
    #​1205
fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes
  • inotify: don't remove sibling watches sharing a path prefix (#​754)

  • inotify, windows: don't rename sibling watches sharing a path prefix
    (#​755)

v1.10.0

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes
  • inotify: improve initialization error message (#​731)

  • inotify: send Rename event if recursive watch is renamed (#​696)

  • inotify: avoid copying event buffers when reading names (#​741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#​748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#​740)

  • windows: fix nil pointer dereference in remWatch (#​736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#​709, #​749)

yuin/goldmark (github.com/yuin/goldmark)

v1.8.5

Compare Source

v1.8.4

Compare Source

fix: disable svg in data:image urls

v1.8.3

Compare Source

Full Changelog: yuin/goldmark@v1.8.2...v1.8.3

jakearchibald/idb-keyval (idb-keyval)

v6.3.0

Compare Source

BurntSushi/ripgrep (ignore)

v0.4.33

Compare Source

v0.4.32

Compare Source

v0.4.31

Compare Source

v0.4.30

Compare Source

v0.4.29

Compare Source

v0.4.28

Compare Source

v0.4.27

Compare Source

v0.4.26

Compare Source

jsdom/jsdom (jsdom)

v29.1.1

Compare Source

  • Fixed 'border-radius' computed style serialization. (@​asamuzaK)
  • Fixed computed style computation when using 'background-origin' and 'background-clip' CSS properties. (@​asamuzaK)
  • Significantly optimized initial calls to getComputedStyle(), before the cache warms up. (@​asamuzaK)

v29.1.0

Compare Source

  • Added basic support for the ratio CSS type. (@​asamuzaK)
  • Fixed getComputedStyle() sometimes returning outdated results after CSS was modified. (@​asamuzaK)
rust-lang/libc (libc)

v0.2.189

Compare Source

Added
  • Emscripten: Add pthread_sigmask, sigwait, sigwaitinfo, sigtimedwait, faccessat, and pthread_kill (#​5270)
  • Linux SPARC: Enable the clone3 syscall (#​4980)
  • Solarish: Add CLOCK_PROCESS_CPUTIME_ID and CLOCK_THREAD_CPUTIME_ID (#​5274)
Deprecated
  • Deprecate CLONE_INTO_CGROUP and CLONE_CLEAR_SIGHAND. These overflow their types and will be changed to a larger size in the future. (8c6e6710458d)
Fixed
  • Musl riscv32: Rename padding fields to avoid a conflict and fix the build (2499ff0ad993)
  • NuttX: Fix wchar_t definition under Arm (#​5245)
  • Windows: Add back link names for time-related symbols (#​5300)

v0.2.188

Compare Source

Changed

These were removed in 0.2.187 because libc does not actually make Send and Sync
guarantees about DIR (or other extern types), but this caused some crates to break.
The traits are added back for now to allow time to migrate, but will be removed again
in the future; please make sure your crates are not relying on libc::DIR: Send or
libc::DIR: Sync.

v0.2.187

Compare Source

This release contains a number of improvements related to 64-bit time_t configuration.
Of note the existing RUST_LIBC_UNSTABLE_* environment variables have been replaced
with configuration options. The new way to use these is:

RUSTFLAGS='--cfg=libc_unstable_musl_v1_2_3' cargo ...
RUSTFLAGS='--cfg=libc_unstable_gnu_time_bits="64"' cargo ...

Being able to set this via RUSTFLAGS makes it easier to only apply configuration to
specific targets (and notably, not the host if build scripts are used).

There are two other notable changes:

  • The 32-bit windows-gnu targets now respect libc_unstable_gnu_time_bits

  • uClibc now supports a similar configuration option:

    RUSTFLAGS='--cfg=libc_unstable_uclibc_time64'

As a reminder, these options are under active development and may change in the future
(hence the "unstable" in the name). It likely that we will harmonize everything under a
single configuration option before considering them stable.

Support
  • Add support for aarch64-unknown-linux-pauthtest (#​5065)
  • Add support for new QNX targets (#​5241)
  • Better document breaking change policy and recommended usage (#​5179)
Added
  • Android: Add POSIX_SPAWN_* constants (#​5104)
  • Android: Add getpwent, setpwent, and endpwent (#​5160)
  • Android: Add preadv2 and pwritev2 (#​5157)
  • Android: Add seccomp_notif* structures (#​5224)
  • Android: Add timer_[create, delete, getoverrun, gettime, settime] (#​5108)
  • Apple: Add PROC_PIDT_SHORTBSDINFO and proc_bsdshortinfo (#​5110)
  • Apple: Add SIOC* constants from sockio.h (#​5263)
  • Apple: Add _IOR, _IOW, _IOWR (#​5264)
  • Apple: Add bpf_program and bpf_insn (#​5235)
  • Apple: Add additional kqueue constants (#​5077)
  • Apple: Update vm_statistics64 with recently added fields (#​5253)
  • Apple: add IN6_IFF_* and SIOCGIFAFLAG_IN6 (#​5239)
  • Dragonfly: Add O_*, POSIX_FADV_*, NI*, and a few other missing constants (#​5116)
  • Dragonfly: add fdatasync, dlvsym, reallocarray, qsort_r, pthread_*affinity_np, ftok, extattr_*, and dup3 (#​5116)
  • Emscripten: Add in6_pktinfo (#​5256)
  • FreeBSD: Add SOL_LOCAL (#​5185)
  • FreeBSD: Add DLT_* constants (#​5235)
  • FreeBSD: Add PROC_LOGSIGEXIT_* and PPROT_* (#​4657)
  • FreeBSD: Add SO_RERROR (#​5260)
  • FreeBSD: add IN6_IFF_*, in6_ifreq, and SIOCGIFAFLAG_IN6 (#​5239)
  • FreeBSD: add _IO* helpers from sys/ioccom.h (#​5239)
  • Glibc: Add PTHREAD_*_MUTEX_INITIALIZER_NP for riscv64 (#​5094)
  • Glibc: Add new fields to struct tcp_info (#​5215)
  • Linux: Add OPEN_TREE_NAMESPACE (#​5145)
  • Linux: Add SECCOMP_IOCTL_* constants (#​5224)
  • Linux: Add SO_DETACH_REUSEPORT_BPF (#​5081)
  • Linux: Add futex_waitv (#​5125)
  • Linux: Add constants for fsopen, fsconfig, fsmount, and fspick (#​5145)
  • Linux: Add fields to statx present since 6.16 (#​4621)
  • Linux: Add network entry API (#​5049)
  • Linux: add ifaddrmsg and rtattr (#​5234)
  • Linux: add sockaddr_iucv (#​5041)
  • MacOS: Add ENOTCAPABLE (#​4925)
  • Musl: Add renameat2 (#​5113)
  • NuttX: Add F_SETFD (#​5258)
  • NuttX: Add POLLRD* and POLLWR* constants (#​5258)
  • NuttX: Add SO_KEEPALIVE and TCP keepalive constants (#​5111)
  • NuttX: Add TCP_MAXSEG (#​5258)
  • NuttX: Add eventfd and EFD_* constants (#​5258)
  • NuttX: Add pipe2 (#​5258)
  • NuttX: Add strerror_r (#​5258)
  • NuttX: Add netinet structs and constants (#​5258)
  • NuttX: Add socket structs, functions and constants (#​5258)
  • QuRT: Add POSIX timer functions (#​5091)
  • QuRT: Add missing pthread functions from QuRT

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested review from baxen, matt2e and wesbillman as code owners August 10, 2026 01:50

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8c4d39ca7e

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread pnpm-lock.yaml Outdated
Comment on lines +26 to +27
specifier: ^17.0.1
version: 17.0.3
version: 18.0.9

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Regenerate the pnpm lockfile

This importer now records marked as 18.0.9 even though apps/differ/package.json still declares ^17.0.1, so the lockfile is not consistent with the workspace manifests; there are similar mismatches later, such as apps/staged resolving prettier-plugin-svelte 3.5.2 for ^4.1.1. The workflows run pnpm install --frozen-lockfile (for example .github/workflows/differ-ci.yml:73), and the pnpm install docs state that in CI, installation fails when a present lockfile needs an update and that workspace installs cover all projects (https://pnpm.io/cli/install), so these CI jobs will stop before tests/builds run.

Useful? React with 👍 / 👎.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 16 times, most recently from 7213ece to b94370a Compare August 17, 2026 05:14
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 0825d9f to 16098e6 Compare August 22, 2026 22:55
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from b045786 to 7b088fa Compare August 28, 2026 13:14
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 7b088fa to d3b329b Compare August 28, 2026 21:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants