● PHANTOM
🇮🇳 IN
✕
Skip to content

chore(deps): lock file maintenance minor/patch updates#6253

Merged
renovate[bot] merged 2 commits intomasterfrom
renovate/minorpatch-updates
Jan 30, 2026
Merged

chore(deps): lock file maintenance minor/patch updates#6253
renovate[bot] merged 2 commits intomasterfrom
renovate/minorpatch-updates

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 29, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
lockFileMaintenance All locks refreshed
@vue/language-server (source) devDependencies patch ^3.2.2 → ^3.2.4 age confidence
axios (source) overrides patch ^1.13.2 → ^1.13.3 1.13.4 age confidence
globals devDependencies patch ^17.0.0 → ^17.1.0 17.2.0 age confidence
memfs devDependencies patch ^4.56.2 → ^4.56.10 age confidence
prettier (source) devDependencies patch ^3.8.0 → ^3.8.1 age confidence
rollup (source) devDependencies patch ^4.55.2 → ^4.56.0 4.57.0 age confidence
typescript-eslint (source) devDependencies minor ^8.53.1 → ^8.54.0 age confidence
vue-tsc (source) devDependencies patch ^3.2.2 → ^3.2.4 age confidence
wasm-pack devDependencies minor ^0.13.1 → ^0.14.0 age confidence
patrickedqvist/wait-for-vercel-preview action patch v1.3.2 → v1.3.3 age confidence
taiki-e/install-action action minor v2.66.7 → v2.67.13 v2.67.16 (+2) age confidence

🔧 This Pull Request updates lock files to use the latest dependency versions.

Release Notes

vuejs/language-tools (@​vue/language-server)

v3.2.4

Compare Source

language-core
  • feat: place plugin configs under ctx.config and support type annotation via generics (#​5944) - Thanks to @​KazariEX!
workspace
axios/axios (axios)

v1.13.3

Compare Source

Bug Fixes
  • http2: Use port 443 for HTTPS connections by default. (#​7256) (d7e6065)
  • interceptor: handle the error in the same interceptor (#​6269) (5945e40)
  • main field in package.json should correspond to cjs artifacts (#​5756) (7373fbf)
  • package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#​5754) (b89217e)
  • silentJSONParsing=false should throw on invalid JSON (#​7253) (#​7257) (7d19335)
  • turn AxiosError into a native error (#​5394) (#​5558) (1c6a86d)
  • types: add handlers to AxiosInterceptorManager interface (#​5551) (8d1271b)
  • types: restore AxiosError.cause type from unknown to Error (#​7327) (d8233d9)
  • unclear error message is thrown when specifying an empty proxy authorization (#​6314) (6ef867e)
Features
Reverts
Contributors to this release
streamich/memfs (memfs)

v4.56.10

Compare Source

Full Changelog: streamich/memfs@v4.56.9...v4.56.10

typescript-eslint/typescript-eslint (typescript-eslint)

v8.54.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

drager/wasm-pack (wasm-pack)

v0.14.0

Compare Source

  • ✨ Features

    • Support arbitrary wasm targets (WASI support) - RReverser, pull/1524

      Allows building for targets other than wasm32-unknown-unknown, enabling WASI and other custom wasm targets.

    • macOS ARM (aarch64-apple-darwin) build support - kaleidawave, pull/1529

      Adds native Apple Silicon support in release builds and NPM package.

    • Allow --split-linked-modules flag for wasm-bindgen - codeart1st, pull/1443

    • Custom build profile support - rafaelbeckel, pull/1428

      Allows using custom cargo profiles via --profile.

  • 🤕 Fixes

  • 🛠️ Maintenance

    • Update dependencies to latest versions - [drager], pull/1536

    • Security workflow permissions fixes - [drager]

    • Bump ring from 0.17.8 to 0.17.14 - dependabot, pull/1516

    • Bump brace-expansion from 1.1.11 to 1.1.12 in /npm - dependabot, pull/1515

    • Bump rustls from 0.23.16 to 0.23.18 - dependabot, pull/1451

    • Fix tar vulnerability (CVE-2026-23745) in npm package

      Override tar dependency to ^7.5.3 to fix arbitrary file overwrite and symlink poisoning vulnerability (GHSA-8qq5-rm4j-mr97).

    • Fix axios vulnerabilities in npm package

      Override axios dependency to ^0.30.0 to fix SSRF/credential leakage via absolute URL and XSRF-TOKEN leakage (CSRF) vulnerabilities.

  • 📖 Documentation

patrickedqvist/wait-for-vercel-preview (patrickedqvist/wait-for-vercel-preview)

v1.3.3

Compare Source

Summary

This release adds the vercel_protection_bypass_header input for bypassing Vercel deployment protection in automation workflows. It also includes several bug fixes and internal improvements.

Highlights
  • New: vercel_protection_bypass_header input for Vercel protection bypass (#​68)
  • Fix: allow_inactive input now correctly handles the string "false" (#​80)
  • Fix: Action exits early when GitHub token is missing (#​86)

What's Changed

New Contributors

Full Changelog: patrickedqvist/wait-for-vercel-preview@v1.3.2...v1.3.3

taiki-e/install-action (taiki-e/install-action)

v2.67.13

Compare Source

Initial release

Configuration

📅 Schedule: Branch creation - Between 06:00 PM and 11:59 PM, only on Thursday ( * 18-23 * * 4 ), Between 12:00 AM and 05:59 AM, only on Friday ( * 0-5 * * 5 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge January 29, 2026 20:50
@vercel
Copy link

vercel bot commented Jan 29, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
rollup Ready Ready Preview, Comment Jan 30, 2026 5:18am

Request Review

@github-actions
Copy link

github-actions bot commented Jan 29, 2026 •
edited
Loading

Thank you for your contribution! ❤️

You can try out this pull request locally by installing Rollup via

npm install rollup/rollup#renovate/minorpatch-updates

Notice: Ensure you have installed the latest nightly Rust toolchain. If you haven't installed it yet, please see https://www.rust-lang.org/tools/install to learn how to download Rustup and install Rust.

or load it into the REPL:
https://rollup-hd4h4dvr6-rollup-js.vercel.app/repl/?pr=6253

@github-actions
Copy link

github-actions bot commented Jan 29, 2026 •
edited
Loading

Performance report

  • BUILD: 6944ms (-257ms, -3.6%), 826 MB
    • initialize: 0ms, 24.7 MB
    • generate module graph: 2650ms, 634 MB
      • generate ast: 1378ms, 625 MB
    • sort and bind modules: 409ms, 691 MB
    • mark included statements: 3886ms (-193ms, -4.7%), 826 MB
      • treeshaking pass 1: 2255ms (-103ms, -4.4%), 820 MB
      • treeshaking pass 2: 458ms, 851 MB
      • treeshaking pass 3: 399ms, 824 MB
      • treeshaking pass 4: 383ms, 859 MB (+5%)
      • treeshaking pass 5: 380ms, 826 MB
  • GENERATE: 689ms, 936 MB (+2%)
    • initialize render: 0ms, 827 MB
    • generate chunks: 39ms, 850 MB
      • optimize chunks: 0ms, 843 MB
    • render chunks: 634ms, 910 MB (+2%)
    • transform chunks: 16ms, 936 MB (+2%)
    • generate bundle: 0ms, 936 MB (+2%)

@codecov
Copy link

codecov bot commented Jan 29, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.83%. Comparing base (c79e6c2) to head (69fb873).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files 
@@           Coverage Diff           @@
##           master    #6253   +/-   ##
=======================================
  Coverage   98.83%   98.83%           
=======================================
  Files         273      273           
  Lines       10700    10700           
  Branches     2854     2854           
=======================================
  Hits        10575    10575           
  Misses         82       82           
  Partials       43       43

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate
Copy link
Contributor Author

renovate bot commented Jan 30, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@renovate renovate bot added this pull request to the merge queue Jan 30, 2026
Merged via the queue into master with commit c931d23 Jan 30, 2026
48 checks passed
@renovate renovate bot deleted the renovate/minorpatch-updates branch January 30, 2026 05:54
@github-actions
Copy link

github-actions bot commented Jan 30, 2026

This PR has been released as part of rollup@4.57.1. You can test it via npm install rollup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@renovate-approve renovate-approve[bot] renovate-approve[bot] approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lukastaegert