chore(deps): bump the pnpm-dependencies group with 7 updates by dependabot[bot] · Pull Request #113 · LazyAlienServer/aliencommons

dependabot · 2026-06-29T09:22:04Z

Bumps the pnpm-dependencies group with 7 updates:

Package	From	To
@types/node	`26.0.0`	`26.0.1`
knip	`6.17.1`	`6.23.0`
turbo	`2.9.18`	`2.10.0`
fastify	`5.8.5`	`5.9.0`
axios	`1.18.0`	`1.18.1`
vue	`3.5.38`	`3.5.39`
vite	`8.0.16`	`8.1.0`

Updates @types/node from 26.0.0 to 26.0.1

Commits

See full diff in compare view

Updates knip from 6.17.1 to 6.23.0

Release notes

Sourced from knip's releases.

Release 6.23.0

feat: add customCss to Starlight plugin (#1828) (f85d96f84a47f10c34df95a5246ee1ddefd95db5) - thanks @trueberryless!

fix: enable vite and vitest plugins when vite-plus is found (#1830) (62e97538fca8dff3d152326b114ffc4b7241a0d2) - thanks @ghostdevv!

feat: add support for @astrojs/markdoc (#1829) (94e2863308947f19f5e759cc12666952c8f683d7) - thanks @trueberryless!

Support nub (resolve #1831) (8a6050e6a92da81d4875f730f852fb7d9252a018)

Don't report optimizeDeps and dedupe deps as unlisted (resolve #1832) (849b5ac230e7a8c103b6e1b1e2ddb333d2da3ca0)

Release 6.22.0

Support XO v1+ (#1819) (1dffe368b5c336d190e358ab4c2e2240e3d50e26) - thanks @patrik-csak!

feat: detect execaNode scripts in execa visitor (#1824) (5095ae1ccd0ceb083d4434e827443f03ba19a1ff) - thanks @gwagjiug!

Skip optional peerDeps referenced only via a host (resolve #1823) (7759a9894f2ac1d9425cf682e1e3c400f0976080)

docs: update npmjs.com links to npmx.dev (#1826) (11fe8bd248c839c6eeb95b06c8204c25294e0adb) - thanks @serhalp!

docs: fix semi-broken link to DEVELOPMENT.md in CONTRIBUTING.md (#1827) (a5302b2466be1294633b1f40e86ca81a00605293) - thanks @serhalp!

feat: add support for Lunaria (#1825) (3e1b8212086dfae26fa7f368f245285ec82af14d) - thanks @trueberryless!

Fix lint issues (76c92e2328a94257afead6ae497a747a9e2944ea)

Release 6.21.0

Detect Vite config dependencies (resolve #1721) (8754c43368112922c6f80d1f8d1d8ddb6cb29f25)

fix: Update timerifyMethods to include resolveFromAST (#1814) (3c8deac3b856def31c16372f85525bf867105132) - thanks @gwagjiug!

Fix crash on null root export in package.json (resolve #1815) (9b8af2b343e1aacae46fedcb155252f56f9bae61)

Fix unresolved subpath imports with a colon prefix (resolve #1816) (f89db4192ff7ff6c873828ed19fe40d379566b49)

Detect Next.js entry files in subdirectory (resolve #1817) (f32c6ea215dde54a59af7b91fd8bdd2177cc2881)

Release 6.20.0

Add raw transfer opt-out (resolve #1813) (6f08c680ac4acd6edf0806ba3c1c5c8f7bca24cd)

Fix cached plugin config cycles (resolve #1811) (2bc2f2420ca71db1ae70846626c6152896d270ee)

Release 6.19.0

feat: support new optional sveltekit config pattern via vite config (#1810) (3fee8bf608e0862d7bcdd1377cfb859a9185f17d) - thanks @fubits1!

Optimize hot path string scanning (e30cfe796423e3ecd9adff42291f3c4de6604d2b)

Update astro snapshot (71e71a71b888a1b8034d4438635e94831d62b330)

Release 6.18.0

Update dependencies (pin oxc-resolver) (7dda4eccc65c6d61ef2546442eb752b2a73edab9)

Resolve tsconfig paths for non-TS importers independent of oxc ownership (3b71565e72107d43cbd6d2ddec7ab2fbbf65c001)

Format (64865f8247b8956def52f1a387234562fbddd667)

Fix false positive for Vitest mocks (#1802) (ec93e2013deb53902b406463b30fa6386445f9c9) - thanks @remcohaszing!

Mark npx-run binaries optional unless --no-install (resolve #1803) (203c31e1b2bd77eb9c94f82121f353fbf0671c67)

Ignore pnpm [WARN] lines in ecosystem snapshots (392835a39b9429a3d85d712025da4c6531b8ece6)

Update slonik snapshot (62d802bf8d53d7790f6322f481a290e09812cbcc)

Update Jest entry patterns for Jest 30 (#1808) (d2caeddf32ba99ca12e5c26e891b7974392f981a) - thanks @gwagjiug!

Report stale workspaces configuration keys as configuration hints (#1807) (9083c16b3313fbebf5cb3cd11cadf45ac773bc3d) - thanks @WooWan!

Release 6.17.2

Fix up jest plugin (63dbd653b6e1be08a36401f5f728b351ab69e81b)

Detect coverage provider from bare vitest --coverage flag (#1800) (dc11d9fc5458e6e1f734013eb82403eab07af2c1) - thanks @WooWan!

Don't disable configuration hints in workspace-scoped runs (#1791) (8ce1ec8160a786dad90903e43c3ef646ffba9464) - thanks @WooWan!

Detect react-email v6 packages from non-numeric version ranges (resolve #1798) (27a1caeb1bff6abcccd7140c7e92e4a57197ad47)

Discover workspaces included after a negated pattern (resolve #1797) (630e152f6f687d9404cc25ffa01f0d49737d9229)

Commits

a802601 Release knip@6.23.0
849b5ac Don't report optimizeDeps and dedupe deps as unlisted (resolve #1832)
8a6050e Support nub (resolve #1831)
94e2863 feat: add support for @astrojs/markdoc (#1829)
62e9753 fix: enable vite and vitest plugins when vite-plus is found (#1830)
f85d96f feat: add customCss to Starlight plugin (#1828)
c053755 Release knip@6.22.0
76c92e2 Fix lint issues
3e1b821 feat: add support for Lunaria (#1825)
11fe8bd docs: update npmjs.com links to npmx.dev (#1826)
Additional commits viewable in compare view

Updates turbo from 2.9.18 to 2.10.0

Release notes

Sourced from turbo's releases.

Turborepo v2.10.0

What's Changed

create-turbo

feat: Replace package manager commands in scaffolded README files by @DependerKumarSoni in vercel/turborepo#6747

chore: Update dependencies found in audits by @anthonyshew in vercel/turborepo#12586

@turbo/codemod

feat: Handle package manager catalogs in migration codemod by @anthonyshew in vercel/turborepo#12496

fix: Always update $schema URL to versioned format during migration by @anthonyshew in vercel/turborepo#12529

fix: Support turbo.jsonc in codemod transforms by @anthonyshew in vercel/turborepo#12532

fix: Preserve prerelease info in schema URL during codemod migration by @anthonyshew in vercel/turborepo#12542

eslint

chore: Upgrade dependencies to resolve their known vulnerabilities by @anthonyshew in vercel/turborepo#12604

@turbo/repository

feat: Add cacheMaxAge and cacheMaxSize for local cache eviction by @anthonyshew in vercel/turborepo#12487

chore: Update to Rust 1.95.0 by @ognevny in vercel/turborepo#12636

@turbo/telemetry

fix: Suppress telemetry alert when running on Vercel by @anthonyshew in vercel/turborepo#12576

Examples

feat(examples): Add Next.js + Elysia full-stack starter template by @eastgold15 in vercel/turborepo#12414

build(deps): Bump @xmldom/xmldom from 0.8.11 to 0.8.12 in /examples/with-react-native-web by @dependabot[bot] in vercel/turborepo#12537

fix: Add missing @types/node to with-svelte example apps by @anthonyshew in vercel/turborepo#12585

feat(sandbox): Bump @vercel/sandbox from v1 to beta by @marc-vercel in vercel/turborepo#12595

chore: Update examples to Turbo 2.9.6 by @cursor[bot] in vercel/turborepo#12600

examples: Add Ultracite example by @haydenbleasel in vercel/turborepo#12615

Changelog

docs: Release post for 2.9 by @anthonyshew in vercel/turborepo#12441

docs: Add documentation for cacheMaxAge and cacheMaxSize options by @anthonyshew in vercel/turborepo#12500

fix: Resolve correct nested bun lockfile versions during prune by @anthonyshew in vercel/turborepo#12506

Revert "fix: Avoid setsid() in PTY spawn to prevent macOS Gatekeeper CPU spikes" by @anthonyshew in vercel/turborepo#12507

fix: Unblock watch loop so interruptible persistent tasks restart on file changes by @anthonyshew in vercel/turborepo#12509

fix(api-client): Treat * as wildcard in preflight Access-Control-Allow-Headers by @bitttttten in vercel/turborepo#12503

docs: Document turbo.* generator variables by @anthonyshew in vercel/turborepo#12511

fix: Backfill missing pnpm workspace importer entries during prune by @anthonyshew in vercel/turborepo#12514

fix: Include transitive dependencies in engine graph pruning for affected paths using Task Graph by @anthonyshew in vercel/turborepo#12516

fix: Update AI-generated response disclaimer to include human attribution by @anthonyshew with @Copilot in vercel/turborepo#12517

fix: Preserve shallow install strategy during npm lockfile pruning by @anthonyshew in vercel/turborepo#12520

fix: Preserve per-workspace lockfiles during pnpm pruning by @anthonyshew in vercel/turborepo#12519

feat: Add incremental task caching by @anthonyshew in vercel/turborepo#12531

docs: Send siteId as label on feedback GitHub issues by @molebox in vercel/turborepo#12527

Replace local ai-agent-detection with @vercel/agent-readability by @molebox in vercel/turborepo#12528

fix: Prevent filterUsingTasks --filter from pulling dependents into Task Graph by @anthonyshew in vercel/turborepo#12535

fix: Only enforce signature key length for keys that exist by @anthonyshew in vercel/turborepo#12538

fix: Validate engine concurrency after task-level filtering by @anthonyshew in vercel/turborepo#12540

feat: Allow --affected and --filter to be combined by @anthonyshew in vercel/turborepo#12543

fix(config): Deep-merge nested OTEL config across priority sources by @bitttttten in vercel/turborepo#12513

fix: Retain microfrontend proxy tasks when using filterUsingTasks by @anthonyshew in vercel/turborepo#12545

fix: Bun workspace lockfile pruning producing invalid output by @JRoy in vercel/turborepo#12548

fix: Respect dirty .gitignore patterns during task input hashing by @anthonyshew in vercel/turborepo#12557

... (truncated)

Commits

12fb0d9 publish 2.10.0 to registry
a12323b release(turborepo): 2.9.19-canary.10 (#13130)
65175fe fix: Hash selected dependency outputs instead of tasks (#13129)
5ba8917 fix: Improve watch graceful shutdown (#13128)
75ee2cc chore: Update to Rust 1.96.0 (#12974)
6dccf5a fix: Restart deferred hash consumers in watch (#13127)
4ebb50f feat: Add deferred hashing for task inputs (#13125)
517e1a5 docs: Fix stderr debugging guidance (#13122)
0220b35 fix: Respect task inputs when stopping interruptible persistent tasks in watc...
6988692 fix: Add ComSpec and PATHEXT to default Windows env passthrough (#13114)
Additional commits viewable in compare view

Updates fastify from 5.8.5 to 5.9.0

Release notes

Sourced from fastify's releases.

v5.9.0

What's Changed

feat: add request.mediaType by @climba03003 in fastify/fastify#6653

docs: remove deprecated leveldb plugin and update ecosystem by @Tony133 in fastify/fastify#6661

chore(sponsor): add bestforandroid by @Eomm in fastify/fastify#6659

ci: drop Node.js 20 from yarn matrix in package-manager-ci.yml by @Tony133 in fastify/fastify#6662

fix: prevent duplicate res.end in sendTrailer with sync callbacks by @climba03003 in fastify/fastify#6676

fix: avoid duplicate closeIdleConnections call on native servers by @trivikr in fastify/fastify#6669

fix: error.code not present on some routing errors by @mcollina in fastify/fastify#6678

fix: correct isCustomSerializerCompiler flag check by @eddieran in fastify/fastify#6657

fix: validate invalid route logLevel at registration by @maxpetrusenko in fastify/fastify#6523

docs: update contribution rules by @Tony133 in fastify/fastify#6670

fix: use ContentType parser for response schema lookup by @UlisesGascon in fastify/fastify#6685

ci(ci): use shared quality workflow by @Fdawgs in fastify/fastify#6688

fix(types): allow request.getValidationFunction() to return undefined by @trivikr in fastify/fastify#6665

fix: do not trust forwarded host/proto when socket is missing by @mcollina in fastify/fastify#6684

perf: defer ContentType parsing in getSchemaSerializer until needed by @aquie00t in fastify/fastify#6692

perf: cache parsed ContentType objects in ContentTypeParser by @aquie00t in fastify/fastify#6694

perf: add typeof guard before toString.call in send and onSendEnd by @aquie00t in fastify/fastify#6693

chore: Bump pnpm/action-setup from 5.0.0 to 6.0.4 by @dependabot[bot] in fastify/fastify#6704

chore: Bump actions/github-script from 8 to 9 by @dependabot[bot] in fastify/fastify#6705

chore: Bump JustinBeckwith/linkinator-action from 2.4.0 to 2.4.2 by @dependabot[bot] in fastify/fastify#6706

docs: correct return503OnClosing comment in route.js by @mcollina in fastify/fastify#6712

fix: enable diagnostics tracking for async error handlers by @irzix in fastify/fastify#6458

fix: ignore duplicate trailer completions by @mcollina in fastify/fastify#6714

feat: add support of onMaxParamLength by @climba03003 in fastify/fastify#6716

chore: introduce TSTyche for type testing by @mrazauskas in fastify/fastify#6532

docs(reference): grammar and readability fixes by @Fdawgs in fastify/fastify#6710

chore: update depedabot setting by @climba03003 in fastify/fastify#6715

fix: include hint and docs URL in FSTWRN004 warning message by @aquie00t in fastify/fastify#6723

ci(ci): do not pass secrets to reusable workflow by @Fdawgs in fastify/fastify#6744

docs: add fastify-intlayer to ecosystem documentation by @aymericzip in fastify/fastify#6594

chore: Bump concurrently from 9.2.1 to 10.0.0 by @dependabot[bot] in fastify/fastify#6752

docs(Errors): fix incorrect usage of root fastify inside plugin scope by @Rpaudel379 in fastify/fastify#6731

ci: add node 26 to test matrices by @Fdawgs in fastify/fastify#6728

docs(Warnings): remove retired FSTWRN002 warning code by @leestana01 in fastify/fastify#6754

fix: chunk large HTTP/2 buffer replies by @mcollina in fastify/fastify#6746

chore: migrate type tests to TSTyche assertions (part one) by @mrazauskas in fastify/fastify#6726

chore: migrate type tests to TSTyche assertions (part two) by @mrazauskas in fastify/fastify#6727

docs: fix doubled braces in serializerCompiler signature by @DucMinhNe in fastify/fastify#6747

docs: remove HackerOne reporting link by @jhcpeixoto in fastify/fastify#6735

refactor(decorate): replace find with some in hasKey for correct boolean semantics by @aquie00t in fastify/fastify#6759

fix: replace AssertionError with FST_ERR_PLUGIN_DEPENDENCY_NOT_REGISTERED in checkDependencies by @aquie00t in fastify/fastify#6774

docs(ecosystem): add @inferdi/fastify by @maxrendel in fastify/fastify#6742

docs(typo): Write-Plugin.md by @zakirimadullahprogrammer-tech in fastify/fastify#6776

docs: fix duplicate anchor IDs causing broken TOC links by @AliMahmoudDev in fastify/fastify#6770

docs: add fastify-ata as a JSON Schema validator option by @mertcanaltin in fastify/fastify#6733

chore: rename type test files by @mrazauskas in fastify/fastify#6762

docs: update ajv-errors guidance by @Herrtian in fastify/fastify#6741

chore(warnings): correct duplicate 'not' typos in inline comments by @mixelburg in fastify/fastify#6713

... (truncated)

Commits

2e45a44 Bumped v5.9.0
630715d docs(types): mark request metadata accessors as untrusted input (#6572)
ff993e8 docs: update Serverless guide Dockerfile to a supported Node.js version (#6789)
458f104 docs: fix incorrect code examples in Hooks and Server reference (#6622)
ea454d0 docs: add warning about empty string coercion with nullable types (#6452)
121895b docs: migrate Zod type provider to official @fastify package (#6686)
cc8d9a3 fix: make hasRequestDecorator/hasReplyDecorator recognize constructor-assigne...
6e6be15 chore: Bump actions/checkout from 6 to 7 (#6812)
88bf134 chore: add new sponsor (#6813)
fabd964 chore: replace http with https in urls (#6809)
Additional commits viewable in compare view

Updates axios from 1.18.0 to 1.18.1

Release notes

Sourced from axios's releases.

v1.18.1 — June 21, 2026

This release focuses on Node HTTP adapter fixes, safer AxiosError serialisation, runtime/type correctness fixes, documentation updates, and dependency maintenance.

🐛 Bug Fixes

AxiosError Serialisation: Made AxiosError#cause non-enumerable to prevent circular JSON serialisation failures when errors include nested causes. (#10913)

Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent streams, accepted path-only URLs when socketPath is configured, deferred environment proxy handling to Node, and explicitly passed maxBodyLength through to follow-redirects. (#10917, #10930, #10942, #10993)

Runtime and Type Correctness: Fixed several runtime crashes, type definition mismatches, and incorrect error handling paths. (#10959, #11021)

AxiosURLSearchParams: Switched the encoder callback to an arrow function so encoder.call(this) receives the AxiosURLSearchParams instance correctly. (#11019)

🔧 Maintenance & Chores

Documentation: Documented sensitive headers and status transition behaviour, prepared cleaned-up docs, added Deno install instructions, and clarified that request data is request-specific (#11007, #11010, #11023, #11025)

Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer across the root project, docs, smoke tests, and module test workspaces. (#11011, #11012, #11013, #11014, #11015, #11016, #11017, #11026)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

@webdevelopersrinu (#10913)

@sijie-Z (#10993)

@bartlomieju (#11023)

@JSap0914 (#11019)

Full Changelog

Changelog

Sourced from axios's changelog.

Changelog

Commits

a209bfb chore(release): prepare release 1.18.1 (#11027)
fa6a55e chore(deps-dev): bump multer from 2.1.1 to 2.2.0 (#11026)
40e7be8 docs: clarifies that request data is request-specific in axios (#11025)
a446b39 fix(AxiosURLSearchParams): use arrow function so encoder.call(this) receives ...
cf1306a docs: add Deno to install instructions (#11023)
b32880a fix: incorrect use of error (#11021)
1792eda fix: ensure maxBodyLength is explicitly passed to follow-redirects (#10993)
30499d6 fix: various runtime crashes and type definition mismatches (#10959)
20ce9c4 fix(http): defer env proxy handling to Node (#10942)
e64bcf9 chore(deps): merge branch 'v1.x' into tests/module/cjs (#11014)
Additional commits viewable in compare view

Updates vue from 3.5.38 to 3.5.39

Release notes

Sourced from vue's releases.

v3.5.39

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.39 (2026-06-25)

Bug Fixes

compiler-core: correct filter rewrite recursion (#14959) (be7ce31)

hydration: force patch dynamic props when hydrating (#9083) (024cf06), closes #9033

hydration: respect data-allow-mismatch on conditional branches (#12801) (164af63), closes #12782

reactivity: avoid triggering effects when set fails (#14964) (e450973)

runtime-core: handle non-isomorphic block element update (#15002) (932ddd0), closes #6385

runtime-core: normalize function children for elements and Teleport (#9108) (2f374cd), closes #9107

runtime-core: pause tracking when invoking function refs (#14985) (3ac052b)

runtime-core: preserve once event listener name (#8341) (87b73b6), closes #8342

runtime-dom: preserve option modifier event names (#8338) (4b659e6), closes #8334

ssr: dedupe inherited scope ids during vnode rendering (#15005) (027da6b), closes #12159 #12175

ssr: resolve nested async teleport content (#9431) (31d0f23), closes #6207

teleport: handle teleport unmount edge case (#12705) (671997a), closes #12702

types: support named tuple emits (#12676) (232f402), closes #12673

types: validate defineModel defaults (#14968) (747f57e), closes #14966

Commits

c0606e9 release: v3.5.39
4b659e6 fix(runtime-dom): preserve option modifier event names (#8338)
232f402 fix(types): support named tuple emits (#12676)
671997a fix(teleport): handle teleport unmount edge case (#12705)
164af63 fix(hydration): respect data-allow-mismatch on conditional branches (#12801)
2f374cd fix(runtime-core): normalize function children for elements and Teleport (#9108)
87b73b6 fix(runtime-core): preserve once event listener name (#8341)
027da6b fix(ssr): dedupe inherited scope ids during vnode rendering (#15005)
024cf06 fix(hydration): force patch dynamic props when hydrating (#9083)
be7ce31 fix(compiler-core): correct filter rewrite recursion (#14959)
Additional commits viewable in compare view

Updates vite from 8.0.16 to 8.1.0

Release notes

Sourced from vite's releases.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.0 (2026-06-23)

Features

extend server.fs.deny list with common files (#22707) (61ba8fd)

update rolldown to 1.1.2 (#22695) (4f008a6)

use ~ for Rolldown (#22693) (9928722)

Bug Fixes

bundled-dev: errors should be kept when incremental build fails (#22617) (9a0dd48)

cache falsy values in perEnvironmentState (#22715) (0e91e79)

glob: respect caseSensitive option in hmr matcher (#22711) (65f525e)

html: omit nonce on import map when cspNonce is unset (#22713) (8340bb5)

optimizer: skip null-valued exports in expandGlobIds glob resolution (#22611) (8b9f5cd)

resolved build options should be kept as a getter (#22691) (3527191)

server: handle malformed URI in memory files middleware (#22714) (df9e0a5)

use literal envPrefix queries for Vite Task (#22706) (da72733)

warn on deprecated envFile (#22555) (ed7b283)

Code Refactoring

client: inline dev-id value in CSS selector (#22736) (57f59bc)

remove unused removeRawQuery util (#22724) (403cc60)

use rolldownOptions property for chunkImportMap (#22692) (8e8816c)

8.1.0-beta.0 (2026-06-15)

Features

import.meta.glob support caseSensitive option (#21707) (2ad6737)

add warning to discourage Vite with yarn pnp (#21906) (3fbb55a)

build: chunk importmap (#21580) (e180312)

css: support lightningcss plugin dependency (#21748) (0b7aaed)

deps: bump @vitejs/devtools peer dependency version (#22542) (d2c2bc0)

html: add html.additionalAssetSources option (#21412) (a41404b)

integrate with Vite Task for zero-config build caching (#22453) (f8d75f7)

rename server.hmr options to server.ws options (#21357) (9ce3036)

server: support multiple hosts in __VITE_ADDITIONAL_SERVER_ALLOWED_HOSTS (#21501) (735f9a1)

track dependencies when loading config with native (#22602) (a7e2da8)

types: add more precise typing for known query types to match known as types (#21863) (cc39e55)

update rolldown to 1.1.1 (#22593) (8a13d63)

wasm: direct .wasm imports (WASM ESM Integration) (#21779) (c23d85b)

Bug Fixes

apply correct fs restrictions for pnpm gvs (#22415) (092320b)

css: support external CSS with lightningcss (#18389) (d64a1a5)

deps: update all non-major dependencies (#22637) (44bb9d9)

deps: update all non-major dependencies (#22681) (f4f0633)

html: insert import map before modulepreload that is not self-close tag (#21409) (e399c89)

optimizer: preserve sourcemaps for transformed optimized deps with follow-up transforms (#22428) (1298951)

... (truncated)

Commits

5909efd fix: allow multiple bindCLIShortcuts calls with shortcut merging (#21103)
39a0a15 chore(deps): update rolldown-related dependencies (#21095)
6a34ac3 fix(deps): update all non-major dependencies (#21096)
02ceaec chore(deps): update dependency @rollup/plugin-commonjs to v29 (#21099)
572aaca release: v7.2.2
728c8ee fix: revert "refactor: use fs.cpSync (#21019)" (#21081)
a532e68 release: v7.2.1
82d2d6c fix(worker): some worker asset was missing (#21074)
f83264f refactor(build): rename indexOfMatchInSlice to findPreloadMarker (#21054)
8293de0 release: v7.2.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<de...

Description has been truncated

Bumps the pnpm-dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.0.0` | `26.0.1` | | [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.17.1` | `6.23.0` | | [turbo](https://github.com/vercel/turborepo) | `2.9.18` | `2.10.0` | | [fastify](https://github.com/fastify/fastify) | `5.8.5` | `5.9.0` | | [axios](https://github.com/axios/axios) | `1.18.0` | `1.18.1` | | [vue](https://github.com/vuejs/core) | `3.5.38` | `3.5.39` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.1.0` | Updates `@types/node` from 26.0.0 to 26.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `knip` from 6.17.1 to 6.23.0 - [Release notes](https://github.com/webpro-nl/knip/releases) - [Commits](https://github.com/webpro-nl/knip/commits/knip@6.23.0/packages/knip) Updates `turbo` from 2.9.18 to 2.10.0 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.9.18...v2.10.0) Updates `fastify` from 5.8.5 to 5.9.0 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.8.5...v5.9.0) Updates `axios` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.18.0...v1.18.1) Updates `vue` from 3.5.38 to 3.5.39 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.38...v3.5.39) Updates `vite` from 8.0.16 to 8.1.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.1.0/packages/vite) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pnpm-dependencies - dependency-name: knip dependency-version: 6.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pnpm-dependencies - dependency-name: turbo dependency-version: 2.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pnpm-dependencies - dependency-name: fastify dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pnpm-dependencies - dependency-name: axios dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pnpm-dependencies - dependency-name: vue dependency-version: 3.5.39 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pnpm-dependencies - dependency-name: vite dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pnpm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

…-c7d27a98c6

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 29, 2026

dependabot Bot requested a review from Typogalaxy as a code owner June 29, 2026 09:22

github-actions Bot added the frontend This changes files in app/frontend/. label Jun 29, 2026

Merge branch 'dev' into dependabot/npm_and_yarn/dev/pnpm-dependencies…

0e34683

…-c7d27a98c6

Typogalaxy merged commit 72e7e9c into dev Jul 2, 2026
14 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/dev/pnpm-dependencies-c7d27a98c6 branch July 2, 2026 12:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the pnpm-dependencies group with 7 updates#113

chore(deps): bump the pnpm-dependencies group with 7 updates#113
Typogalaxy merged 2 commits into
devfrom
dependabot/npm_and_yarn/dev/pnpm-dependencies-c7d27a98c6

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026

Release 6.23.0

Release 6.22.0

Release 6.21.0

Release 6.20.0

Release 6.19.0

Release 6.18.0

Release 6.17.2

Turborepo v2.10.0

What's Changed

create-turbo

@​turbo/codemod

eslint

@​turbo/repository

@​turbo/telemetry

Examples

Changelog

v5.9.0

What's Changed

v1.18.1 — June 21, 2026

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

Changelog

v3.5.39

3.5.39 (2026-06-25)

Bug Fixes

create-vite@8.1.0

plugin-legacy@8.1.0

v8.1.0

plugin-legacy@8.1.0-beta.0

v8.1.0-beta.0

8.1.0 (2026-06-23)

Features

Bug Fixes

Code Refactoring

8.1.0-beta.0 (2026-06-15)

Features

Bug Fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@turbo/codemod`

`@turbo/repository`

`@turbo/telemetry`