fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #109 · escapace/esroll

renovate · 2026-03-02T00:41:14Z

This PR contains the following updates:

Package	Change	Age	Confidence
@commitlint/cli (source)	`20.4.1` → `20.4.3`
@commitlint/config-conventional (source)	`20.4.1` → `20.4.3`
@microsoft/api-extractor (source)	`^7.56.3` → `^7.57.6`
@microsoft/api-extractor-model (source)	`^7.32.2` → `^7.33.4`
es-toolkit (source)	`^1.44.0` → `^1.45.1`
eslint (source)	`9.39.2` → `9.39.3`
knip (source)	`5.83.1` → `5.85.0`
lefthook	`2.1.1` → `2.1.2`
mdast-util-from-markdown	`^2.0.2` → `^2.0.3`
mlly	`^1.8.0` → `^1.8.1`
rollup (source)	`^4.57.1` → `^4.59.0`

Release Notes

conventional-changelog/commitlint (@commitlint/cli)

`v20.4.3`

Compare Source

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

`v20.4.2`

Compare Source

Note: Version bump only for package @commitlint/cli

conventional-changelog/commitlint (@commitlint/config-conventional)

`v20.4.3`

Compare Source

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

`v20.4.2`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

microsoft/rushstack (@microsoft/api-extractor)

`v7.57.6`

Compare Source

Wed, 25 Feb 2026 21:39:42 GMT

Patches

Bump @microsoft/tsdoc-config to ~0.18.1 to mitigate CVE-2025-69873.

`v7.57.5`

Compare Source

Wed, 25 Feb 2026 00:34:29 GMT

Version update only

`v7.57.4`

Compare Source

Tue, 24 Feb 2026 01:13:27 GMT

Version update only

`v7.57.3`

Compare Source

Mon, 23 Feb 2026 00:42:21 GMT

Patches

Add missing "./extends/*.json" to the package.json "exports" field so that "@microsoft/api-extractor/extends/tsdoc-base.json" is importable.

`v7.57.2`

Compare Source

Fri, 20 Feb 2026 16:14:49 GMT

Patches

Bump minimatch from 10.1.2 to 10.2.1

`v7.57.1`

Compare Source

Fri, 20 Feb 2026 00:15:03 GMT

Patches

Add "node" condition before "import" in the "exports" map so that Node.js uses the CJS output (which handles extensionless imports), while bundlers still use ESM via "import". Fixes #5644.

`v7.57.0`

Compare Source

Thu, 19 Feb 2026 00:04:52 GMT

Minor changes

Normalize package layout. CommonJS is now under lib-commonjs, DTS is now under lib-dts, and ESM is now under lib-esm. Imports to lib still work as before, handled by the "exports" field in package.json.

microsoft/rushstack (@microsoft/api-extractor-model)

`v7.33.4`

Compare Source

Wed, 25 Feb 2026 21:39:42 GMT

Patches

Bump @microsoft/tsdoc-config to ~0.18.1 to mitigate CVE-2025-69873.

`v7.33.3`

Compare Source

Wed, 25 Feb 2026 00:34:30 GMT

Version update only

`v7.33.2`

Compare Source

Tue, 24 Feb 2026 01:13:27 GMT

Version update only

`v7.33.1`

Compare Source

Fri, 20 Feb 2026 00:15:03 GMT

Patches

Add "node" condition before "import" in the "exports" map so that Node.js uses the CJS output (which handles extensionless imports), while bundlers still use ESM via "import". Fixes #5644.

`v7.33.0`

Compare Source

Thu, 19 Feb 2026 00:04:52 GMT

Minor changes

Normalize package layout. CommonJS is now under lib-commonjs, DTS is now under lib-dts, and ESM is now under lib-esm. Imports to lib still work as before, handled by the "exports" field in package.json.

toss/es-toolkit (es-toolkit)

`v1.45.1`

Compare Source

Released on March 4th, 2026.

Reverted the return type of sample to not include undefined.
Fixed Deno install command to include jsr: prefix. ([#1627])

We sincerely thank @mwln for their contributions. We appreciate your great efforts!

`v1.45.0`

Compare Source

Released on March 2nd, 2026.

Fixed findIndex to add missing default parameter for doesMatch. ([#1373])
Fixed sample to include undefined in return union type. ([#1302])
Fixed cloneDeep to support cloning Error objects.
Fixed retry to correctly match retry count with the retries option.
Fixed missing Map and Set in check-dist entrypoints.
Fixed missing packages in publishConfig. ([#1597])
Reverted the overload for runtime-determined key arrays in omit. ([#1595])
Added AI Integration page with llms.txt documentation to docs.

We sincerely thank @D-Sketon, @dayongkr, @matthiasfeist, @raon0211, and @screendriver for their contributions. We appreciate your great efforts!

eslint/eslint (eslint)

`v9.39.3`

Compare Source

Bug Fixes

791bf8d fix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)

Chores

8594a43 chore: upgrade @eslint/js@9.39.3 (#20529) (Milos Djermanovic)
9ceef92 chore: package.json update for @eslint/js release (Jenkins)
af498c6 chore: ignore /docs/v9.x in link checker (#20453) (Milos Djermanovic)

webpro-nl/knip (knip)

`v5.85.0`: Release 5.85.0

Compare Source

Fix require.context regex matching for path-aware patterns (#1547) (c33d93a) - thanks @jstaab!
Make knip compatible with erasableSyntaxOnly (#1541) (f63089b) - thanks @wojtekmaj!
feat: add Payload CMS plugin (#1546) (58d99de) - thanks @Robot-Inventor!
Look everywhere for manifest/robots file in next plugin (9da6205)
Merge some next glob patterns (8c5f35f)
Add SAP & Google Gemini to projects using Knip (c8ab895)
Bump remark-preset-webpro & dedupe (b9372cd)
Document CLI usage for LS (97fe1cf)
fix: tsdown entry compatibility issues #1550 (#1554) (95051eb) - thanks @huijiewei!
Fix incorrect coverage provider being reported (#1552) (2d0b5cd) - thanks @rexxars!
Temp disable npmx in ecosystem run (a5cd986)
Fix OOM in gitignore walk for large monorepos (f192a6b)
Release knip@5.85.0 (e28a3e7)

`v5.84.1`: Release 5.84.1

Compare Source

Fix false positives for arrow-wrapped dynamic imports assigned to variables (#1544) (75a42c3) - thanks @jantimon!
Improve pnpm arg handling (df8c353)
Ignore module.register if 2nd arg is not import.meta.url (#1535) (970fdb1)

`v5.84.0`: Release 5.84.0

Compare Source

Post-release shenanigans (e7965cb)
Move most compilers to plugins & register from there (61beafe)
Minor refactor (e20a682)
Fix lint issues (d2bbc13)
Add missing catalog property to rules in JSON schema (#1518) (5d49dea) - thanks @Mohmdev!
feat(plugins): add @typescript/native-preview (tsgo) support (#1513) (babfb10) - thanks @jgoux!
Fix up quoting for spaced args (resolve #1515) (2b735cb)
Switch to tsconfig-aware module resolver in input handler (634d0f6)
Use bun test positionals as entry points (resolve #1521) (da94725)
Edit docs (327726f)
Minor refactor while at it (dc87e8e)
Add config hints for unused ignore and ignoreFiles items (a4989ee)
Accept known bins only behind double-dash (resolve #1524) (b9214e3)
feat(plugins): add support for bun test preloaded files (#1525) (14ee32a) - thanks @jgoux!
Add date to IGNORED_GLOBAL_BINARIES (#1476) (f08f92b) - thanks @duci9y!
Fix edge case for binaries in scripts (82331ee)
Report ignore/files config hints only if sure & relevant (4c3bd08)
Add consistent repository fields (781a0fd)
Add language-server bin (13d7845)
Use --stdio if no transport provided (bedb21a)
Refactor from "enabled" to "deferSession" (resolve #1499) (15e3360)
Use initializationOptions.config or default fallback config obj (resolve #1503) (0abe568)
Also publish ls + mcp with pkg-pr-new (7806526)
Auto-format (51b7dc1)
Remove chdir shenanigans (close #1516) (0cbee8f)
Bind console.* to distinguish internal↔ external logs (3eac278)
Add early bail-outs for changed files we can ignore (36c2dd5)
Avoid unnecessary module graph updates for unmodified files (f94c41f)
Fix typo in pkg-pr-new-pkg-dir (7e7a8b0)
Add .DS_Store to .gitignore (#1530) (40fe5cc) - thanks @wojtekmaj!
Ignore RNC CLI and metro internals in react-native projects (#1528) (0f892ae) - thanks @wojtekmaj!
Support nested _generated dirs in Convex plugin (#1531) (bd75e9f) - thanks @kvnwolf!
Housekeep cli help output (c24e746)
Fix up gitignore test (6bc640c)
Introduce isFilterTransitiveDependencies flag (close #1507, close #1101) (8678df2)
Housekeep webpack plugin (2cc1306)
Move up plugin.setup & tear down plugin.teardown (4dbf23d)
Skip config file loading if only external re-exports (ab775b1)
Improve & optimize ignore pattern handling (c3d3912)
Housekeep compiler registration (2aaf9fc)
Edit docs re. config file location (79bfb35)
Register visitors from plugins (9b059f8)
importMetaGlobCall visitor for Vite plugin (1874b19)
Extend registerVisitors with script visitor support (728c814)
Move execa script visitor to execa plugin (71c739a)
Move zx script visitor to zx plugin (5ac24c7)
Add require.context visitor to webpack plugin (100f174)
Add module.register() visitor for Node.js loader API (resolve #1535) (742407c)
Add .DS_Store in fixtures to .gitignore (#1534) (90fa677) - thanks @wojtekmaj!
Mention that depcheck recommends knip (#1536) (75d00ff) - thanks @ArtskydJ!
Remove @source matcher from tailwind plugin (resolve #1537) (b7149b6)
Fix -w → -W flag for Yarn (f305250)
Update AGENTS.md (ec83887)
Extract and extend react-native plugin (#1538) (9fd04a8)
Add pm2 plugin (#1540) (3bb4203) - thanks @wojtekmaj!
Fix Yarn (Berry) plugins and binaries reported as unused (#1523) (4f0a307) - thanks @wojtekmaj!
Update docs (ed23dd2)
Minor refactor while at it (4115b97)
Add @knip/create-config to release script (1135b82)

evilmartians/lefthook (lefthook)

`v2.1.2`

Compare Source

feat: introduce setup hook option (#1326) by @mrexox
refactor: recovering logic for changesets (#1324) by @mrexox
fix: rollback auto-staged changes if unwanted changes detected (#1251) by @tuchfarber
docs: improve docs ui (#1323) by @mrexox
docs: additional skip example and note about reinstallation (#1319) by @iloveitaly
docs: fix incorrect --verbose usage (#1318) by @iloveitaly
pkg: fix python packages publishing by @mrexox

syntax-tree/mdast-util-from-markdown (mdast-util-from-markdown)

`v2.0.3`

Compare Source

Fix

971e026 Fix passing encoding: undefined w/ options

Full Changelog: syntax-tree/mdast-util-from-markdown@2.0.2...2.0.3

unjs/mlly (mlly)

`v1.8.1`

Compare Source

compare changes

🩹 Fixes

Extract variable names ignoring function calls (#336)

🏡 Chore

Update deps (12913db)
Lint (33495f9)

❤️ Contributors

Pooya Parsa (@pi0)
Daniel Roe (@danielroe)

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

socket-security · 2026-03-02T00:41:35Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@commitlint/cli@20.4.1 ⏵ 20.4.3			^-1
mlly@1.8.0 ⏵ 1.8.1		⁺¹	^-1
mdast-util-from-markdown@2.0.2 ⏵ 2.0.3
eslint@9.39.2 ⏵ 9.39.3	⁺¹
@microsoft/api-extractor@7.56.3 ⏵ 7.57.6	^-2	⁺¹	⁺¹
es-toolkit@1.44.0 ⏵ 1.45.1	⁺¹
@microsoft/api-extractor-model@7.32.2 ⏵ 7.33.4		⁺¹	⁺⁸
@commitlint/config-conventional@20.4.1 ⏵ 20.4.3			^-1
lefthook@2.1.1 ⏵ 2.1.2	⁺⁸		^-1
knip@5.83.1 ⏵ 5.85.0	⁺¹	⁺¹

View full report

renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 41f4012 to ea72229 Compare March 8, 2026 21:12

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 54eee7b to 10df26f Compare March 11, 2026 14:09

fix(deps): update all non-major dependencies

7a83cd6

renovate bot force-pushed the renovate/all-minor-patch branch from 10df26f to 7a83cd6 Compare March 11, 2026 22:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies#109

fix(deps): update all non-major dependencies#109
renovate[bot] wants to merge 1 commit intotrunkfrom
renovate/all-minor-patch

renovate bot commented Mar 2, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Mar 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Patches

Patches

Patches

Patches

Minor changes

Patches

Patches

Minor changes

Bug Fixes

Chores

v5.85.0: Release 5.85.0

v5.84.1: Release 5.84.1

v5.84.0: Release 5.84.0

Fix

🩹 Fixes

🏡 Chore

❤️ Contributors

Configuration

Uh oh!

socket-security bot commented Mar 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

renovate bot commented Mar 2, 2026 •

edited

Loading

`v5.85.0`: Release 5.85.0

`v5.84.1`: Release 5.84.1

`v5.84.0`: Release 5.84.0

socket-security bot commented Mar 2, 2026 •

edited

Loading