fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/core (source)	^7.25.7 -> ^7.25.8
@babel/parser (source)	^7.25.7 -> ^7.25.8
@babel/preset-env (source)	^7.25.7 -> ^7.25.8
@shikijs/vitepress-twoslash (source)	^1.21.1 -> ^1.22.0
@types/node (source)	^20.16.10 -> ^20.16.11
@types/react-dom (source)	^18.3.0 -> ^18.3.1
@vue/shared (source)	^3.5.11 -> ^3.5.12
eslint-plugin-n	^17.10.3 -> ^17.11.1
express (source)	^4.21.0 -> ^4.21.1
globals	^15.10.0 -> ^15.11.0
lit (source)	^3.2.0 -> ^3.2.1
magic-string	^0.30.11 -> ^0.30.12
miniflare (source)	^3.20240925.0 -> ^3.20241004.0
parse5 (source)	^7.1.2 -> ^7.2.0
playwright-chromium (source)	^1.47.2 -> ^1.48.0
pnpm (source)	9.12.0 -> 9.12.1
preact (source)	^10.24.2 -> ^10.24.3
sass	^1.79.4 -> ^1.79.5
sass-embedded	^1.79.4 -> ^1.79.5
solid-js (source)	^1.9.1 -> ^1.9.2
svelte-check	^4.0.4 -> ^4.0.5
typescript-eslint (source)	^8.8.0 -> ^8.9.0
vite (source)	^5.4.8 -> ^5.4.9
vitepress (source)	1.3.4 -> 1.4.1
vitepress-plugin-group-icons	^1.2.4 -> ^1.3.0
vitest (source)	^2.1.2 -> ^2.1.3
vue (source)	^3.5.11 -> ^3.5.12

---

Release Notes

babel/babel (@​babel/core)

v7.25.8

Compare Source

🐛 Bug Fix

• babel-core
  • #​16888 Restore public API of resolvePlugin/resolvePreset (@​nicolo-ribaudo)

🏠 Internal

• babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env
  • #​16824 Inline one-line syntax plugins (@​nicolo-ribaudo)

babel/babel (@​babel/parser)

v7.25.8

Compare Source

v7.25.8 (2024-10-10)

🐛 Bug Fix

• babel-core
  • #​16888 Restore public API of resolvePlugin/resolvePreset (@​nicolo-ribaudo)

🏠 Internal

• babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env
  • #​16824 Inline one-line syntax plugins (@​nicolo-ribaudo)

Committers: 3

• Babel Bot (@​babel-bot)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu

shikijs/shiki (@​shikijs/vitepress-twoslash)

v1.22.0

Compare Source

   🚀 Features

• Store grammar state in weakmap  -  by @​antfu in https://github.com/shikijs/shiki/issues/804 (320d7)

    View changes on GitHub

vuejs/core (@​vue/shared)

v3.5.12

Compare Source

Bug Fixes

• compiler-dom: avoid stringify option with null value (#​12096) (f6d9926), closes #​12093
• compiler-sfc: do not skip TSInstantiationExpression when transforming props destructure (#​12064) (d3ecde8)
• compiler-sfc: use sass modern api if available and avoid deprecation warning (#​11992) (4474c11)
• compiler: clone loc to ifNode (#​12131) (cde2c06), closes vuejs/language-tools#4911
• custom-element: properly remove hyphenated attribute (#​12143) (e16e9a7), closes #​12139
• defineModel: handle kebab-case model correctly (#​12063) (c0418a3), closes #​12060
• deps: update dependency monaco-editor to ^0.52.0 (#​12119) (f7cbea2)
• hydration: provide compat fallback for idle callback hydration strategy (#​11935) (1ae545a)
• reactivity: trigger reactivity for Map key undefined (#​12055) (7ad289e), closes #​12054
• runtime-core: allow symbol values for slot prop key (#​12069) (d9d4d4e), closes #​12068
• runtime-core: fix required prop check false positive for kebab-case edge cases (#​12034) (9da1ac1), closes #​12011
• runtime-dom: prevent unnecessary updates in v-model checkbox when value is unchanged (#​12146) (ea943af), closes #​12144
• teleport: handle disabled teleport with updateCssVars (#​12113) (76a8223), closes #​12112
• transition/ssr: make transition appear work with Suspense in SSR (#​12047) (f1a4f67), closes #​12046
• types: ensure this.$props type does not include string (#​12123) (704173e), closes #​12122
• types: retain union type narrowing with defaults applied (#​12108) (05685a9), closes #​12106
• useId: ensure useId consistency when using serverPrefetch (#​12128) (b4d3534), closes #​12102
• watch: watchEffect clean-up with SSR (#​12097) (b094c72), closes #​11956

Performance Improvements

• reactivity: avoid unnecessary recursion in removeSub (#​12135) (ec917cf)

eslint-community/eslint-plugin-n (eslint-plugin-n)

v17.11.1

Compare Source

🩹 Fixes

• no-deprecated-api: dedeprecate process.nextTick (#​350) (dd889ab)

v17.11.0

Compare Source

🌟 Features

• no-missing-import: Add ignoreTypeImport options (#​344) (e022aba)
• no-process-env: Allow users to exclude specific variables (#​345) (b16a475)
• Update no-unsupported to node v22.9.0 (#​342) (87fb484)

🩹 Fixes

• no-missing-import: Ignore node builtins in package.json imports (#​346) (148e47e)
• no-missing-import: Resolve tsconfig paths relative to the tsconfig (#​343) (6cd7954)

📚 Documentation

• Explain the transitive dependency case for no-extraneous-* (#​347) (8c0a2cc)

expressjs/express (express)

v4.21.1

Compare Source

What's Changed

• Backport a fix for CVE-2024-47764 to the 4.x branch by @​joshbuker in https://github.com/expressjs/express/pull/6029
• Release: 4.21.1 by @​UlisesGascon in https://github.com/expressjs/express/pull/6031

Full Changelog: expressjs/express@4.21.0...4.21.1

sindresorhus/globals (globals)

v15.11.0

Compare Source

lit/lit (lit)

v3.2.1

Compare Source

Patch Changes

• #​4782 99703a03 - Revert the Terser plugin for Rollup to rollup-plugin-terser from @rollup/plugin-terser
  due to a bug that prevented our minified name prefixing from working.

rich-harris/magic-string (magic-string)

v0.30.12

Compare Source

Performance Improvements

• skip line break mappings (#​284) (5b1ecf7)

cloudflare/workers-sdk (miniflare)

v3.20241004.0

Compare Source

Patch Changes

• #​6949 c863183 Thanks @​dependabot! - chore: update dependencies of "miniflare" package

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20240925.0	1.20241004.0
  @​cloudflare/workers-types	^4.20240925.0	^4.20241004.0

v3.20240925.1

Compare Source

Patch Changes

• #​6835 5c50949 Thanks @​emily-shen! - fix: rename asset plugin options slightly to match wrangler.toml better

  Renamed path -> directory, bindingName -> binding.

inikulin/parse5 (parse5)

v7.2.0

Compare Source

microsoft/playwright (playwright-chromium)

v1.48.0

Compare Source

pnpm/pnpm (pnpm)

v9.12.1: pnpm 9.12.1

Compare Source

Patch Changes

• pnpm update --latest should not update the automatically installed peer dependencies #​6657.
• pnpm publish should be able to publish from a local tarball #​7950.
• The pnpx command should work correctly on Windows, when pnpm is installed via the standalone installation script #​8608.
• Prevent EBUSY errors caused by creating symlinks in parallel dlx processes #​8604.
• Fix maximum call stack size exceeded error related to circular workspace dependencies #​8599.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

preactjs/preact (preact)

v10.24.3

Compare Source

Fixes

• We should not always set to hydration when suspending (#​4529, thanks @​JoviDeCroock)
• refactor: Warn on NaN in dep arrays instead of throwing (#​4527, thanks @​rschristian)

Performance

• Context consumer unmounting perf (#​4526, thanks @​JoviDeCroock)

Maintenance

• ci: Fix PR reporter (#​4531, thanks @​rschristian)
• ci: Remove saucelabs (#​4530, thanks @​rschristian)
• ci: Ensure paths-filter action works on push events (#​4528, thanks @​rschristian)
• ci: Unify workflows into singular pipeline (#​4520, thanks @​rschristian)

sass/dart-sass (sass)

v1.79.5

Compare Source

• Changes to how selector.unify() and @extend combine selectors:

  • The relative order of pseudo-classes (like :hover) and pseudo-elements
    (like ::before) within each original selector is now preserved when
    they're combined.

  • Pseudo selectors are now consistently placed at the end of the combined
    selector, regardless of which selector they came from. Previously, this
    reordering only applied to pseudo-selectors in the second selector.

• Tweak the color transformation matrices for OKLab and OKLCH to match the
  newer, more accurate values in the CSS spec.

• Fix a slight inaccuracy case when converting to srgb-linear and
  display-p3.

• Potentially breaking bug fix: math.unit() now wraps multiple denominator
  units in parentheses. For example, px/(em*em) instead of px/em*em.

Command-Line Interface

• Use @parcel/watcher to watch the filesystem when running from JavaScript and
  not using --poll. This should mitigate more frequent failures users have
  been seeing since version 4.0.0 of Chokidar, our previous watching tool, was
  released.

JS API

• Fix SassColor.interpolate() to allow an undefined options parameter, as
  the types indicate.

Embedded Sass

• Properly pass missing color channel values to and from custom functions.

sass/embedded-host-node (sass-embedded)

v1.79.5

Compare Source

• Changes to how selector.unify() and @extend combine selectors:

  • The relative order of pseudo-classes (like :hover) and pseudo-elements
    (like ::before) within each original selector is now preserved when
    they're combined.

  • Pseudo selectors are now consistently placed at the end of the combined
    selector, regardless of which selector they came from. Previously, this
    reordering only applied to pseudo-selectors in the second selector.

• Tweak the color transformation matrices for OKLab and OKLCH to match the
  newer, more accurate values in the CSS spec.

• Fix a slight inaccuracy case when converting to srgb-linear and
  display-p3.

• Potentially breaking bug fix: math.unit() now wraps multiple denominator
  units in parentheses. For example, px/(em*em) instead of px/em*em.

Command-Line Interface

• Use @parcel/watcher to watch the filesystem when running from JavaScript and
  not using --poll. This should mitigate more frequent failures users have
  been seeing since version 4.0.0 of Chokidar, our previous watching tool, was
  released.

JS API

• Fix SassColor.interpolate() to allow an undefined options parameter, as
  the types indicate.

Embedded Sass

• Properly pass missing color channel values to and from custom functions.

solidjs/solid (solid-js)

v1.9.2

sveltejs/language-tools (svelte-check)

v4.0.5

Compare Source

• fix: include named exports in svelte 5 type (#​2528)

typescript-eslint/typescript-eslint (typescript-eslint)

v8.9.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.8.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v5.4.9

Compare Source

Please refer to CHANGELOG.md for details.

vuejs/vitepress (vitepress)

v1.4.1

Compare Source

Bug Fixes

• broken rewrites on windows (#​4268) (b46d6d3)
• client: use usePreferredDark with appearance: "force-auto" (#​4263) (3e8fc40)
• client: wrong script async check (461a5b0)
• theme: bind missing no icon prop in the menu link component #​4260 (b96712c)
• theme: improve local search input a11y (#​4066) (92b92ae)

Features

• experimental: support passing function for rewrites (#​4274) (8436472)

v1.4.0

Compare Source

Bug Fixes

• vueRE conflicting with lineNoRE (#​4247) (2ac64b8)
• hmr not updating page data in rewritten paths and file path is wrong in mdit for dynamic routes (c46e4b7), closes #​4172
• remove font synthesis in webfont mode, google fonts now support italic axis in inter (1628918)
• theme: change the order of CSS rules of VPFlyout (#​4225) (68150a6), closes #​4224
• theme: respect custom tag prop in VPButton component (#​4185) (9c5d348)

Features

• add data-title attribute for code group label tag (#​4152) (bc7271d)
• allow ignoring certain headers and their subtrees completely in outline (3e11b6a), closes #​4171
• client: add onAfterPageLoad hook in router (#​4126) (315c220)
• support adding extra attributes to snippet imports (useful for twoslash) (#​4100) (e8f7dd1)
• theme: expose theme default VPLink & VPSocialLink(s) component (#​4178) (615e33b)
• trig

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[sapphi-red]

/ecosystem-ci run

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[vite-ecosystem-ci]

📝 Ran ecosystem CI on 183302a: Open

suite	result	latest scheduled
analogjs	✅ success	❌ failure
remix	❌ failure	❌ failure
vike	❌ failure	❌ failure
vitest	❌ failure	❌ failure

✅ astro, histoire, ladle, laravel, marko, nuxt, previewjs, quasar, qwik, rakkas, redwoodjs, storybook, sveltekit, unocss, vite-environment-examples, vite-plugin-pwa, vite-plugin-react, vite-plugin-react-swc, vite-plugin-svelte, vite-plugin-vue, vite-setup-catalogue, vitepress, vuepress

[sapphi-red]

The sourcemap change is caused by Rich-Harris/magic-string#284.
I confirmed the snapshot change is fine.
@AriPerkkio The same PR seems to affect the coverage tests in vitest. Would you mind taking a look?

---

I downgraded the playwright version due to microsoft/playwright#33107.

[AriPerkkio]

The same PR seems to affect the coverage tests in vitest. Would you mind taking a look?

The change in magic-string seems to affect some of our edge case tests of coverage. These snapshot changes look fine to me and I don't think end-users will see such changes.

I've opened vitest-dev/vitest#6711 to update magic-string on Vitest's side and update the snapshots.

[sapphi-red]

Thanks for taking a look!