chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@antfu/eslint-config	~3.2.2 -> ~3.7.3
@types/lodash (source)	^4.17.9 -> ^4.17.10
awesome-phonenumber	^7.1.0 -> ^7.2.0
awilix	^11.0.0 -> ^11.0.4
bullmq (source)	^5.14.0 -> ^5.15.0
cookie	^0.6.0 -> ^0.7.1
eslint (source)	^9.11.1 -> ^9.12.0
express-rate-limit	^7.4.0 -> ^7.4.1
pinia-plugin-persistedstate (source)	^4.0.2 -> ^4.1.1
pnpm (source)	9.9.0 -> 9.12.0
puppeteer (source)	^23.4.1 -> ^23.5.0
sequelize (source)	^6.37.3 -> ^6.37.4
vitest (source)	^2.1.1 -> ^2.1.2
winston	^3.14.2 -> ^3.15.0

---

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v3.7.3

Compare Source

   🐞 Bug Fixes

• Properly disable top-level-await rule for tests  -  by @​antfu (e914a)

    View changes on GitHub

v3.7.2

Compare Source

   🚀 Features

• Merge prettier plugins with options  -  by @​suppayami in https://github.com/antfu/eslint-config/issues/614 (04e57)

   🐞 Bug Fixes

• Disable antfu/no-top-level-await for markdown snippets  -  by @​antfu (a984c)

    View changes on GitHub

v3.7.1

Compare Source

   🚀 Features

• Disable rules for config files  -  by @​antfu (a434e)

    View changes on GitHub

v3.7.0

Compare Source

   🚀 Features

• Enable antfu/no-top-level-await  -  by @​antfu (a08aa)

   🐞 Bug Fixes

• Disable explicit-function-return-type in markdown code  -  by @​antfu (60ffd)
• Disable ts/explicit-function-return-type in vue files  -  by @​antfu (1788d)

    View changes on GitHub

v3.6.2

Compare Source

   🐞 Bug Fixes

• Glob for disables  -  by @​antfu (8ba8e)

    View changes on GitHub

v3.6.1

Compare Source

   🐞 Bug Fixes

• Add Next.js router segment config  -  by @​zhangyu1818 in https://github.com/antfu/eslint-config/issues/608 (f025c)
• Sync js rule options to ts, close #​609  -  by @​lvjiaxuan in https://github.com/antfu/eslint-config/issues/610 and https://github.com/antfu/eslint-config/issues/609 (20763)

    View changes on GitHub

v3.6.0

Compare Source

   🐞 Bug Fixes

• perfectionist/sort-imports sort types always on top  -  by @​antfu (e2839)

    View changes on GitHub

v3.5.1

Compare Source

No significant changes

    View changes on GitHub

v3.5.0

Compare Source

   🚀 Features

• Update @​eslint/markdown to v6  -  by @​ocavue in https://github.com/antfu/eslint-config/issues/606 (b9052)

   🐞 Bug Fixes

• Disable unicorn/consistent-function-scoping  -  by @​antfu (5363d)

    View changes on GitHub

v3.4.1

Compare Source

No significant changes

    View changes on GitHub

v3.4.0

Compare Source

   🚀 Features

• Upgrade eslint, remove @types/eslint  -  by @​antfu (21e9c)

    View changes on GitHub

v3.3.2

Compare Source

   🐞 Bug Fixes

• Add side-effect in perfectionist/sort-imports  -  by @​antfu (298f3)

    View changes on GitHub

v3.3.1

Compare Source

   🐞 Bug Fixes

• Do not force newline in perfectionist/sort-imports  -  by @​antfu (09697)

    View changes on GitHub

v3.3.0

Compare Source

   🚀 Features

• Enable perfectionist/sort-imports et al, close #​456  -  by @​antfu in https://github.com/antfu/eslint-config/issues/456 (a6efa)

    View changes on GitHub

grantila/awesome-phonenumber (awesome-phonenumber)

v7.2.0

Compare Source

Features

• upstream: bumped libphonenumber to 8.13.47 (155e56d)

jeffijoe/awilix (awilix)

v11.0.4

Compare Source

• Undo all exports changes as it broke downstream consumers

v11.0.3

Compare Source

• Add lib to exports lists

v11.0.2

Compare Source

• Add default entry in every export

v11.0.1

Compare Source

• Add "exports" field to package.json

taskforcesh/bullmq (bullmq)

v5.15.0

Compare Source

Features

• worker-fork: allow passing fork options (#​2795) (f7a4292)

jshttp/cookie (cookie)

v0.7.1: 0.7.1

Compare Source

Fixed

• Allow leading dot for domain (#​174)
  • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
• Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#​172)

v0.7.0: 0.7.0

Compare Source

• perf: parse cookies ~10% faster (#​144 by @​kurtextrem and #​170)
  • fix: narrow the validation of cookies to match RFC6265 (#​167 by @​bewinsnw)
  • fix: add main to package.json for rspack (#​166 by @​proudparrot2)

eslint/eslint (eslint)

v9.12.0

Compare Source

Features

• 5a6a053 feat: update to jiti v2 (#​18954) (Arya Emami)
• 17a07fb feat: Hooks for test cases (RuleTester) (#​18771) (Anna Bocharova)
• 2ff0e51 feat: Implement alternate config lookup (#​18742) (Nicholas C. Zakas)
• 2d17453 feat: Implement modified cyclomatic complexity (#​18896) (Dmitry Pashkevich)

Bug Fixes

• ea380ca fix: Upgrade retry to avoid EMFILE errors (#​18986) (Nicholas C. Zakas)
• fdd6319 fix: Issues with type definitions (#​18940) (Arya Emami)

Documentation

• ecbd522 docs: Mention code explorer (#​18978) (Nicholas C. Zakas)
• 7ea4ecc docs: Clarifying the Use of Meta Objects (#​18697) (Amaresh S M)
• d3e4b2e docs: Clarify how to exclude .js files (#​18976) (Milos Djermanovic)
• 57232ff docs: Mention plugin-kit in language docs (#​18973) (Nicholas C. Zakas)
• b80ed00 docs: Update README (GitHub Actions Bot)
• cb69ab3 docs: Update README (GitHub Actions Bot)
• 7fb0d95 docs: Update README (GitHub Actions Bot)
• 493348a docs: Update README (GitHub Actions Bot)
• 87a582c docs: fix typo in id-match rule (#​18944) (Jay)

Chores

• 555aafd chore: upgrade to @eslint/[email protected] (#​18987) (Francesco Trotta)
• 873ae60 chore: package.json update for @​eslint/js release (Jenkins)
• d0a5414 refactor: replace strip-ansi with native module (#​18982) (Cristopher)
• b827029 chore: Enable JSON5 linting (#​18979) (Milos Djermanovic)
• 8f55ca2 chore: Upgrade espree, eslint-visitor-keys, eslint-scope (#​18962) (Nicholas C. Zakas)
• c1a2725 chore: update dependency mocha to ^10.7.3 (#​18945) (Milos Djermanovic)

express-rate-limit/express-rate-limit (express-rate-limit)

v7.4.1

Compare Source

You can view the changelog here.

prazdevs/pinia-plugin-persistedstate (pinia-plugin-persistedstate)

v4.1.1

Compare Source

compare changes

🩹 Fixes

• Bump deep-pick-omit to 1.2.1 (fixes falsy value persistence) (7be6b42)

❤️ Contributors

• Prazdevs [email protected]

v4.1.0

Compare Source

compare changes

🚀 Enhancements

• Auto mode (#​327)

📖 Documentation

• Update Nuxt links in README.md (#​340)

🏡 Chore

• Upgrade dependencies (e1c0036)

❤️ Contributors

• Prazdevs [email protected]
• PraZ [email protected]
• Charlie ✨ (@​MIGU-EDU)

pnpm/pnpm (pnpm)

v9.12.0: pnpm 9.12

Compare Source

Minor Changes

• Fix peer dependency resolution dead lock #​8570. This change might change some of the keys in the snapshots field inside pnpm-lock.yaml but it should happen very rarely.

• pnpm outdated command supports now a --sort-by=name option for sorting outdated dependencies by package name #​8523.

• Added the ability for overrides to remove dependencies by specifying "-" as the field value #​8572. For example, to remove lodash from the dependencies, use this configuration in package.json:

  {
    "pnpm": {
      "overrides": {
        "lodash": "-"
      }
    }
  }

Patch Changes

• Fixed an issue where pnpm list --json pkg showed "private": false for a private package #​8519.
• Packages with libc that differ from pnpm.supportedArchitectures.libc are not downloaded #​7362.
• Prevent ENOENT errors caused by running store prune in parallel #​8586.
• Add issues alias to pnpm bugs #​8596.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v9.11.0

Compare Source

v9.10.0: pnpm 9.10

Compare Source

Minor Changes

• Support for a new CLI flag, --exclude-peers, added to the list and why commands. When --exclude-peers is used, peer dependencies are not printed in the results, but dependencies of peer dependencies are still scanned #​8506.

• Added a new setting to package.json at pnpm.auditConfig.ignoreGhsas for ignoring vulnerabilities by their GHSA code #​6838.

  For instance:

  {
    "pnpm": {
      "auditConfig": {
        "ignoreGhsas": [
          "GHSA-42xw-2xvc-qx8m",
          "GHSA-4w2v-q235-vp99",
          "GHSA-cph5-m8f7-6c5x",
          "GHSA-vh95-rmgr-6w4m"
        ]
      }
    }
  }

Patch Changes

• Throw an exception if pnpm switches to the same version of itself.
• Reduce memory usage during peer dependencies resolution.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

puppeteer/puppeteer (puppeteer)

v23.5.0: puppeteer: v23.5.0

Compare Source

Miscellaneous Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 23.4.1 to 23.5.0

sequelize/sequelize (sequelize)

v6.37.4

Compare Source

Bug Fixes

• oracle: add support for Oracle Database 23ai (#​17345) (b9e71a7)
• oracle: validate input with TO_TIMESTAMP_TZ and TO_DATE (#​17516) (5deadd2)

vitest-dev/vitest (vitest)

v2.1.2

Compare Source

   🐞 Bug Fixes

• Move Vitest.setServer to post configureServer hook to enable import analysis for workspace config loading  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6584 (e7f35)
• benchmark:
  • Clear BenchmarkResult.samples array to reduce memory usage  -  by @​hi-ogawa and @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6541 (a6407)
• browser:
  • Fix dynamic import inside worker  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6569 (ea2d4)
  • Fix browser mock factory event race condition  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6530 (f131f)
  • Serve ui assets as static  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6564 (adcda)
  • Update solidjs testing library lib  -  by @​CamilleTeruel in https://github.com/vitest-dev/vitest/issues/6548 (91442)
  • Use data: protocol on preview provider file upload  -  by @​userquin in https://github.com/vitest-dev/vitest/issues/6501 (e9821)
  • Fix base for client script  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6510 (f9528)
  • Throw an error if "@​vitest/browser/context" is imported outside of the browser mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6570 (383f1)
• coverage:
  • Remove empty coverage folder on test failure too  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6547 (1371c)
  • Include *.astro by default  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6565 (f8ff7)
  • cleanOnRerun: false to invalidate previous results  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6592 (88bde)
• expect:
  • Fix toBeDefined with expect.poll  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6562 (f7da6)
• runner:
  • Mark tests as skipped when beforeAll failed  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6524 (fb797)
  • Support fixture parsing of lowered async syntax  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6531 (b553c)
  • Fix fixture parsing of lowered async syntax for non arrow functions  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6575 (3de00)
  • Guard test hook callback  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6604 (14971)
  • Run onTestFinished and onTestFailed during retry and repeats  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6609 (c5e29)
• ui:
  • List tests on ui when --standalone  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6577 (d0bf8)
• vite-node:
  • Fix esm false-detection inside comment  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6506 (91f85)
• vitest:
  • Install dependencies with the same version when prompted  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6611 (ed8b7)
  • Make env.SSR consistent between different pools  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6616 (8a8d3)
  • Don't start a websocket server if api is disabled  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6617 (82140)
• workspace:
  • Fix glob pattern detection  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6502 (7727c)
  • Ignore DS_Store by default  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6571 (d2a86)

    View changes on GitHub

winstonjs/winston (winston)

v3.15.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.