chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #84 · vitejs/vite-plugin-basic-ssl

renovate · 2025-10-27T01:14:59Z

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	`^22.18.12` -> `^22.19.1`
execa	`^9.6.0` -> `^9.6.1`
pnpm (source)	`10.18.3` -> `10.25.0`
prettier (source)	`^3.6.2` -> `^3.7.4`
tsx (source)	`^4.20.6` -> `^4.21.0`
vite (source)	`^7.1.11` -> `^7.2.7`
vitest (source)	`^4.0.3` -> `^4.0.15`

Release Notes

sindresorhus/execa (execa)

`v9.6.1`

Compare Source

Fix VerboseOption type not being properly exported (#1215) 7891c39

pnpm/pnpm (pnpm)

Minor Changes

Added --lockfile-only option to pnpm list #10020.

Patch Changes

pnpm self-update should download pnpm from the configured npm registry #10205.
pnpm self-update should always install the non-executable pnpm package (pnpm in the registry) and never the @pnpm/exe package, when installing v11 or newer. We currently cannot ship @pnpm/exe as pkg doesn't work with ESM #10190.
Node.js runtime is not added to "dependencies" on pnpm add, if there's a engines.runtime setting declared in package.json #10209.
The installation should fail if an optional dependency cannot be installed due to a trust policy check failure #10208.
pnpm list and pnpm why now display npm: protocol for aliased packages (e.g., foo npm:is-odd@3.0.1) #8660.
Don't add an extra slash to the Node.js mirror URL #10204.
pnpm store prune should not fail if the store contains Node.js packages #10131.

Platinum Sponsors

Gold Sponsors

`v10.22.0`: pnpm 10.22

Compare Source

Minor Changes

Added support for trustPolicyExclude #10164.

You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:
```
trustPolicy: no-downgrade
trustPolicyExclude:
  - chokidar@4.0.3
  - webpack@4.47.0 || 5.102.1
```
Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #10179.

Platinum Sponsors

Gold Sponsors

`v10.21.0`

Compare Source

`v10.20.0`

Compare Source

Minor Changes

Support --all option in pnpm --help to list all commands #8628.

Patch Changes

When the latest version doesn't satisfy the maturity requirement configured by minimumReleaseAge, pick the highest version that is mature enough, even if it has a different major version #10100.
create command should not verify patch info.
Set managePackageManagerVersions to false, when switching to a different version of pnpm CLI, in order to avoid subsequent switches #10063.

`v10.19.0`

Compare Source

Minor Changes

You can now allow specific versions of dependencies to run postinstall scripts. onlyBuiltDependencies now accepts package names with lists of trusted versions. For example:
```
onlyBuiltDependencies:
  - nx@21.6.4 || 21.6.5
  - esbuild@0.25.1
```
Related PR: #10104.
Added support for exact versions in minimumReleaseAgeExclude #9985.

You can now list one or more specific versions that pnpm should allow to install, even if those versions don’t satisfy the maturity requirement set by minimumReleaseAge. For example:
```
minimumReleaseAge: 1440
minimumReleaseAgeExclude:
  - nx@21.6.5
  - webpack@4.47.0 || 5.102.1
```

prettier/prettier (prettier)

`v3.7.4`

Compare Source

diff

LWC: Avoid quote around interpolations (#18383 by @kovsu)

<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @fisker)

// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by @fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

`v3.7.3`

Compare Source

diff

API: Fix `prettier.getFileInfo()` change that breaks VSCode extension (#18375 by @fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

`v3.7.2`

Compare Source

diff

JavaScript: Fix string print when switching quotes (#18351 by @fisker)

// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")

// Prettier 3.7.1
console.log('A descriptor\\'s .kind must be "method" or "field".');

// Prettier 3.7.2
console.log('A descriptor\\\'s .kind must be "method" or "field".');

JavaScript: Preserve quote for embedded HTML attribute values (#18352 by @kovsu)

// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

// Prettier 3.7.1
const html = /* HTML */ ` <div class=${styles.banner}></div> `;

// Prettier 3.7.2
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

TypeScript: Fix comment in empty type literal (#18364 by @fisker)

// Input
export type XXX = {
  // tbd
};

// Prettier 3.7.1
export type XXX = { // tbd };

// Prettier 3.7.2
export type XXX = {
  // tbd
};

`v3.7.1`

Compare Source

diff

API: Fix performance regression in doc printer (#18342 by @fisker)

Prettier 3.7.1 can be very slow when formatting big files, the regression has been fixed.

`v3.7.0`

Compare Source

diff

🔗 Release Notes

privatenumber/tsx (tsx)

`v4.21.0`

Compare Source

vitejs/vite (vite)

`v7.2.7`

Compare Source

`v7.2.6`

Compare Source

7.2.6 (2025-12-01)

`v7.2.4`

Compare Source

Bug Fixes

revert "perf(deps): replace debug with obug (#21107)" (2d66b7b)

`v7.2.3`

Compare Source

Bug Fixes

allow multiple bindCLIShortcuts calls with shortcut merging (#21103) (5909efd)
deps: update all non-major dependencies (#21096) (6a34ac3)
deps: update all non-major dependencies (#21128) (4f8171e)

Performance Improvements

deps: replace debug with obug (#21107) (acfe939)

Miscellaneous Chores

deps: update dependency @rollup/plugin-commonjs to v29 (#21099) (02ceaec)
deps: update rolldown-related dependencies (#21095) (39a0a15)
deps: update rolldown-related dependencies (#21127) (5029720)

`v7.2.2`

Compare Source

Bug Fixes

revert "refactor: use fs.cpSync (#21019)" (#21081) (728c8ee)

`v7.2.1`

Compare Source

Bug Fixes

worker: some worker asset was missing (#21074) (82d2d6c)

Code Refactoring

build: rename indexOfMatchInSlice to findPreloadMarker (#21054) (f83264f)

`v7.2.0`

Compare Source

Bug Fixes

css: fallback to sass when sass-embedded platform binary is missing (#21002) (b1fd616)
module-runner: make getBuiltins response JSON serializable (#21029) (ad5b3bf)
types: add undefined to optional properties for exactOptionalProperties type compatibility (#21040) (2833c55)

Miscellaneous Chores

deps: update rolldown-related dependencies (#21047) (e3a6a83)

`v7.1.12`

Compare Source

Please refer to CHANGELOG.md for details.

vitest-dev/vitest (vitest)

`v4.0.15`

Compare Source

🚀 Experimental Features

cache: Add opt-out on a plugin level, fix internal root cache - by @sheremet-va in #9154 (a68f7)
reporters: Print import duration breakdown - by @sheremet-va in #9105 (122ff)

🐞 Bug Fixes

Keep built-in id as is in bun and deno - by @sheremet-va in #9117 (075ab)
Use optimizeDeps.rolldownOptions to fix depreated warning + fix ssr.external: true - by @hi-ogawa in #9121 (fd8bd)
Fix external behavior with deps.optimizer - by @hi-ogawa in #9125 (4c754)
Very minor typo in "Chrome DevTools Protocol" - by @HowToTestFrontend in #9146 (20997)
browser: Run toMatchScreenshot only once when used with expect.element - by @macarie in #9132 (0d2e7)
coverage: Istanbul provider to not break source maps - by @AriPerkkio in #9040 (e4ca9)
deps: Update dependency tinyexec to v1 - in #9122 (fd786)
docs: Remove --browser.provider from docs - by @sheremet-va in #9115 (120b3)
expect: Preserve currentTestName in extended matchers - by @macarie in #9106 (e4345)
pool: Terminate workers on CTRL+c forceful exits - by @AriPerkkio in #9140 (d57d8)
reporters: Show project in github reporter - by @sheremet-va in #9138 (bb65e)
spy: Do not mock overriden method, if parent was automocked - by @sheremet-va in #9116 (1a246)
web-worker: MessagePort objects passed to Worker.postMessage work when clone === "native" - by @whitphx in #9118 (deee8)

View changes on GitHub

`v4.0.14`

Compare Source

🚀 Experimental Features

browser: Expose utils.configurePrettyDOM - by @sheremet-va in #9103 (2cc34)
runner: Add full names to tasks - by @macarie in #9087 (821aa)
ui: Add tabbed failure view for toMatchScreenshot with comparison slider - by @macarie in #8813 (c37c2)

🐞 Bug Fixes

Externalize before caching - by @sheremet-va in #9077 (e1b2e)
Collect the duration of external imports - by @sheremet-va in #9097 (3326c)
Rename collect to import, remove prepare - by @sheremet-va in #9091 (1256b)
browser:
- Unsubscribe onCancel on rpc destroy - by @AriPerkkio in #9088 (f5b72)
- Revert the viewport scaling in non-ui mode #9018 - by @sheremet-va in #9072 and #9018 (64502)
coverage:
- Invalidate circular modules correctly on rerun with coverage - by @aicest in #9096 (6f22c)
expect:
- Allow function as standard schema - by @hi-ogawa in #9099 (ed8a2)
jsdom:
- Reuse abort signals if possible - by @sheremet-va in #9090 (2c468)
pool:
- Init VITEST_POOL_ID + VITEST_WORKER_ID before environment setup - by @AriPerkkio in #9085 (37918)
web-worker:
- postMessage to send ports to workers - by @whitphx and @AriPerkkio in #9078 (9d176)

🏎 Performance

Replace debug with obug - by @sxzz and @AriPerkkio in #9057 (acc51)

View changes on GitHub

`v4.0.13`

Compare Source

🐞 Bug Fixes

types:
- Don't use type from Vite 7.1 - by @sheremet-va in #9071 (6356b)
- Don't import node.js dependent types in vitest/browser - by @sheremet-va in #9068 (332af)

🏎 Performance

Avoid fetchModule roundtrip if the module is cached - by @sheremet-va in #9075 (b27e0)
experimental: If fsCacheModule is enabled, read from the memory when possible - by @sheremet-va in #9076 (6b9a1)

View changes on GitHub

`v4.0.12`

Compare Source

🐞 Bug Fixes

Inherit fsModuleCachePath by default - by @sheremet-va in #9063 (9a8bc)
Don't import from @opentelemetry/api in public types - by @sheremet-va in #9066 (e944a)

View changes on GitHub

`v4.0.11`

Compare Source

🚀 Experimental Features

api: Add extensible test artifact API - by @macarie in #8987 (77292)
- See more at https://vitest.dev/api/advanced/artifacts
expect: Provide task in MatchState - by @macarie in #9022 (afd1f)
experimental: Support OpenTelemetry traces - by @sheremet-va in #8994 (d6d33)
- See more at https://vitest.dev/guide/open-telemetry

🏎 Performance

experimental: Add file system cache - by @sheremet-va in #9026 (1b147)
- See more at https://vitest.dev/config/experimental#experimental-fsmodulecache

View changes on GitHub

`v4.0.10`

Compare Source

🐞 Bug Fixes

Remove onCancel when worker is terminated - by @sheremet-va in #9033 (6d7f0)
browser:
- Don't scale the iframe if UI is disabled - by @sheremet-va in #9018 (5406e)
- Handle dependency stack traces with external source maps. Resolves: #9003 - by @iclectic in #9016 and #9003 (57ae5)
bun:
- Parsing of stack trace for bun runtime - by @nazarhussain in #9032 (f3ec6)
core:
- Prevent starting new run when cancelling - by @AriPerkkio in #8991 (eb98d)
pool:
- Prevent writing to closed worker - by @AriPerkkio and @sheremet-va in #9023 (042c6)
reporters:
- Report correct test run duration at the end - by @sheremet-va in #8969 (bc3a6)
ui:
- Use execution time from ws reporter (onFinished) - by @userquin in #8975 (f56dc)

View changes on GitHub

`v4.0.9`

Compare Source

🚀 Experimental Features

expect: Add Set support to toBeOneOf - by @tim-we and @sheremet-va in #8906 (a415d)

🐞 Bug Fixes

browser: Add favicon icons to the browser mode ui - by @userquin in #8972 (353ee)
forks: Increase worker start timeout - by @AriPerkkio in #9027 (5e750)
jsdom: Cloned request is an instance of Request - by @sheremet-va in #8985 (506a9)
ui: Collect file/suite/test duration correctly - by @userquin in #8976 (8016d)

View changes on GitHub

`v4.0.8`

Compare Source

🐞 Bug Fixes

Workaround noExternal merging bug on Vite 6 - by @hi-ogawa in #8950 (bcb13)
Missed context.d.ts file - by @termorey in #8965 (9044d)
Incorrect error message for non-awaited expect.element() - by @StyleShit in #8954 (9638d)
browser: Cleanup frame-ancestors from CSP header at coverage middleware - by @userquin in #8941 (1f730)
deps: Update all non-major dependencies - by @sheremet-va in #8636 (da8b9)
forks: Do not fail with Windows Defender enabled - by @sheremet-va in #8967 (c79f4)
runner: Properly encode Uint8Array body in annotations - by @Livan-pro in #8951 (997ca)
spy: Copy static properties if spy is initialised with vi.fn(), fix types for vi.spyOn(obj, class) - by @sheremet-va in #8956 (75e7f)
webdriverio: When no argument is passed to the .click interaction command, the webdriver command should also have no argument - by @julienw in #8937 (069e6)

View changes on GitHub

`v4.0.7`

Compare Source

🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in #8916 (6240d)
Create environment once per worker with isolate: false - by @sheremet-va in #8915 (c9078)
Add Locator as a possible element type in toContainElement() matcher - by @vitalybaev in #8910 and #8927 (35a27)
browser: Inherit isolate option, deprecate browser.isolate/browser.fileParallelism - by @sheremet-va in #8890 (9d2b4)
cli: Parse --execArgv as array - by @AriPerkkio in #8924 (751c3)
jsdom: Support URL.createObjectURL, FormData.set(prop, blob) - by @sheremet-va in #8935 (a1b73)
pool: Avoid --require argument when running in deno - by @pi0 in #8897 (d41fa)
typecheck: Handle re-runs outside tsc - by @AriPerkkio in #8920 (fdb2e)

🏎 Performance

pool:
- Sort test files by project by default - by @AriPerkkio in #8914 (680a6)
reporters:
- Optimize getting the tests stats - by @Connormiha in #8908 (06d62)
- Remove unnecessary Array.from call - by @Connormiha in #8907 (b6014)

View changes on GitHub

`v4.0.6`

Compare Source

🐞 Bug Fixes

Don't merge errors with different diffs for reporting - by @hi-ogawa in #8871 (3e19f)
Do not throw when importing a type from an external package - by @sheremet-va in #8875 (7e6c3)
Improve spying types - by @sheremet-va in #8878 (ca041)
Reuse the same environment when isolate and fileParallelism are false - by @sheremet-va in #8889 (31706)
browser:
- Support module tracking - by @sheremet-va in #8877 (9e24a)
- Ensure setup files are re-evaluated on each test run - by @yjaaidi in #8883 and #8884 (f50ea)
coverage:
- Prevent filtering out virtual files before remapping to sources - by @AriPerkkio in #8860 (e3b77)
happy-dom:
- Properly teardown additional keys - by @sheremet-va in #8888 (10a06)
jsdom:
- Pass down Node.js FormData to Request - by @sheremet-va in #8880 (197ca)

View changes on GitHub

`v4.0.5`

Compare Source

🐞 Bug Fixes

Respect ssr.noExternal when externalizing dependencies - by @sheremet-va in #8862 (a4f86)
Allow module in --config - by @sheremet-va in #8864 (b9521)
browser: Allow Locator type in selectOptions element parameter - by @rzzf and @sheremet-va in #8848 (7ee28)
module-runner: Don't return node builtins for getBuiltins unconditionally - by @sapphi-red in #8863 (0e858)
pool: Rename groupId to groupOrder in error message - by @Yohannfra in #8856 (b9aab)

🏎 Performance

Pass testfiles at once when --no-isolate --maxWorkers=1 - by @AriPerkkio in #8835 (584aa)
expect: Optimize checking the input type - by @Connormiha in #8840 (06968)

View changes on GitHub

`v4.0.4`

Compare Source

🐞 Bug Fixes

browser:
- Correct typo - by @benmccann in #8796 (ede1f)
- Publish a missing context file for webdriverio - by @sheremet-va in #8824 (7c7b6)
mocker:
- Support mocking builtins without node: prefix - by @sheremet-va in #8829 (06208)
pool:
- Runner's error listener causing MaxListenersExceededWarning - by @AriPerkkio in #8820 (d1bff)
- Capture workers stdio to logger - by @AriPerkkio in #8809 (fb95f)
spy:
- Allow classes in vi.mocked utility - by @sheremet-va in #8839 (f8756)
worker:
- Rpc listener leak when isolate: false - by @AriPerkkio in #8821 (573dc)

🏎 Performance

utils: Optimized reducer to avoid creating new objects - by @Connormiha in #8818 (d19ce)

View changes on GitHub

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the dependencies label Oct 27, 2025

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 711cfe4 to 4cfe161 Compare October 31, 2025 14:52

renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 50c5738 to d732095 Compare November 10, 2025 00:47

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 5277207 to 3cf73ca Compare November 14, 2025 10:05

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from aede737 to 9ec493b Compare November 21, 2025 17:53

renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 1dc8a1b to 9a6525b Compare November 30, 2025 16:40

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from fc700a1 to 8f89dc1 Compare December 8, 2025 02:05

chore(deps): update all non-major dependencies

de43d5a

renovate bot force-pushed the renovate/all-minor-patch branch from 8f89dc1 to de43d5a Compare December 8, 2025 17:13

bluwy merged commit 5c1d069 into main Dec 8, 2025
5 checks passed

bluwy deleted the renovate/all-minor-patch branch December 8, 2025 17:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies#84

chore(deps): update all non-major dependencies#84
bluwy merged 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Oct 27, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate bot commented Oct 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v10.23.0: pnpm 10.23

Minor Changes

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.22.0: pnpm 10.22

Minor Changes

Patch Changes

Platinum Sponsors

Gold Sponsors

Minor Changes

Patch Changes

Minor Changes

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)

TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)

TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#​18375 by @​fisker)

JavaScript: Fix string print when switching quotes (#​18351 by @​fisker)

JavaScript: Preserve quote for embedded HTML attribute values (#​18352 by @​kovsu)

TypeScript: Fix comment in empty type literal (#​18364 by @​fisker)

API: Fix performance regression in doc printer (#​18342 by @​fisker)

7.2.6 (2025-12-01)

Bug Fixes

Bug Fixes

Performance Improvements

Miscellaneous Chores

Bug Fixes

Bug Fixes

Code Refactoring

Bug Fixes

Miscellaneous Chores

🚀 Experimental Features

🐞 Bug Fixes

🚀 Experimental Features

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🚀 Experimental Features

🏎 Performance

🐞 Bug Fixes

🚀 Experimental Features

🐞 Bug Fixes

🐞 Bug Fixes

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🏎 Performance

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Oct 27, 2025 •

edited

Loading

`v10.23.0`: pnpm 10.23

`v10.22.0`: pnpm 10.22

LWC: Avoid quote around interpolations (#18383 by @kovsu)

TypeScript: Fix comment inside union type gets duplicated (#18393 by @fisker)

TypeScript: Fix unstable comment print in union type comments (#18395 by @fisker)

API: Fix `prettier.getFileInfo()` change that breaks VSCode extension (#18375 by @fisker)

JavaScript: Fix string print when switching quotes (#18351 by @fisker)

JavaScript: Preserve quote for embedded HTML attribute values (#18352 by @kovsu)

TypeScript: Fix comment in empty type literal (#18364 by @fisker)

API: Fix performance regression in doc printer (#18342 by @fisker)