chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node (source)	^20.12.8 -> ^20.17.19
@vitest/coverage-v8 (source)	^1.5.3 -> ^1.6.1
changelogen	^0.5.5 -> ^0.5.7
eslint (source)	^8.57.0 -> ^8.57.1
eslint-config-unjs	^0.2.1 -> ^0.4.2
pnpm (source)	9.0.6 -> 9.15.5
prettier (source)	^3.2.5 -> ^3.5.1
typescript (source)	^5.4.5 -> ^5.7.3
vitest (source)	^1.5.3 -> ^1.6.1

---

Release Notes

vitest-dev/vitest (@​vitest/coverage-v8)

v1.6.1

Compare Source

This release includes security patches for:

• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport https://github.com/vitest-dev/vitest/issues/7317 to v1 - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7319

    View changes on GitHub

v1.6.0

Compare Source

   🚀 Features

• Support standalone mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5565 (bdce0)
• Custom "snapshotEnvironment" option  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5449 (30f72)
• benchmark: Support comparing benchmark result  -  by @​hi-ogawa and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5398 (f8d3d)
• browser: Allow injecting scripts  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5656 (21e58)
• reporter: Support includeConsoleOutput and addFileAttribute in junit  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5659 (2f913)
• ui: Sort items by file name  -  by @​btea in https://github.com/vitest-dev/vitest/issues/5652 (1f726)

   🐞 Bug Fixes

• Keep order of arguments for .each in custom task collectors  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5640 (7d57c)
• Call resolveId('vitest') after buildStart  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5646 (f5faf)
• Hash the name of the file when caching  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5654 (c9e68)
• Don't panic on empty files in node_modules  -  by @​sheremet-va (40c29)
• Use toJSON for error serialization  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/5526 (19a21)
• coverage:
  • Exclude *.test-d.* by default  -  by @​MindfulPol in https://github.com/vitest-dev/vitest/issues/5634 (bfe8a)
  • Apply vite-node's wrapper only to executed files  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5642 (c9883)
• vm:
  • Support network imports  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5610 (103a6)

   🏎 Performance

• Improve performance of forks pool  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/5592 (d8304)
• Unnecessary rpc call when coverage is disabled  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/5658 (c5712)

    View changes on GitHub

unjs/changelogen (changelogen)

v0.5.7

Compare Source

compare changes

🩹 Fixes

• bump: Avoid using + for canary suffix (#​224)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.5.6

Compare Source

compare changes

🚀 Enhancements

• Add option to sign git tags (#​117)
• git: Support parse git messages that have prefix emoji (#​146)

🩹 Fixes

• github: Use bearer token (#​180)
• Handle repo name with multiple segments (#​219)
• Lowercase scope when filtering (#​199)

💅 Refactors

• Replace execa with execSync (#​222)
• Use human readable date for canary versions (#​223)
• Update execCommand (68127be)

🏡 Chore

• Apply automated lint fixes (72c407f)
• Update ci (bcb16cb)
• Update non major deps (7f714c9)
• Update to eslint v9 (fd40be9)
• Apply automated lint fixes (673255b)
• Update deps (3cfbe27)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Klein Petr (@​kleinpetr)
• Wan Chiu (@​wan54)
• Jianqi Pan (@​Jannchie)
• Vasily Kuzin [email protected]
• Daniel Roe (@​danielroe)

eslint/eslint (eslint)

v8.57.1

Compare Source

unjs/eslint-config (eslint-config-unjs)

v0.4.2

Compare Source

compare changes

💅 Refactors

• Use Linter.Config as return type (2cce21a)
• Reflax markdown rules (587c6a7)

🏡 Chore

• Update deps (c179c22)
• release: V0.4.1 (a8fb144)
• Update deps (0431414)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.4.1

Compare Source

compare changes

💅 Refactors

• Use Linter.Config as return type (2cce21a)
• Reflax markdown rules (587c6a7)

🏡 Chore

• Update deps (c179c22)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.4.0

Compare Source

compare changes

🏡 Chore

• ⚠️ Update dependencies (ec5727e)
• Use eslint ts support with jiti (0d531f8)

⚠️ Breaking Changes

• ⚠️ Update dependencies (ec5727e)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.3.2

Compare Source

compare changes

🏡 Chore

• Update unicorn plugin to 53 (0a944e4)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.3.1

Compare Source

compare changes

🩹 Fixes

• markdown: Override default rules (4765dd5)

🏡 Chore

• Remove prerelease script (pnpm why ?!) (a98c465)

❤️ Contributors

• Pooya Parsa (@​pi0)

v0.3.0

Compare Source

compare changes

pnpm/pnpm (pnpm)

v9.15.5: pnpm 9.15.5

Compare Source

Patch Changes

• Verify that the package name is valid when executing the publish command.
• When running pnpm install, the preprepare and postprepare scripts of the project should be executed #​8989.
• Quote args for scripts with shell-quote to support new lines (on POSIX only) #​8980.
• Proxy settings should be respected, when resolving Git-hosted dependencies #​6530.
• Replace strip-ansi with the built-in util.stripVTControlCharacters #​9009.

Platinum Sponsors

Gold Sponsors

v9.15.4: pnpm 9.15.4

Compare Source

Patch Changes

• Ensure that recursive pnpm update --latest <pkg> updates only the specified package, with dedupe-peer-dependents=true.

Platinum Sponsors

Gold Sponsors

v9.15.3

Compare Source

v9.15.2: pnpm 9.15.2

Compare Source

Patch Changes

• Fixed publish/pack error with workspace dependencies with relative paths #​8904. It was broken in v9.4.0 (398472c).
• Use double quotes in the command suggestion by pnpm patch on Windows #​7546.
• Do not fall back to SSH, when resolving a git-hosted package if git ls-remote works via HTTPS #​8906.
• Improve how packages with blocked lifecycle scripts are reported during installation. Always print the list of ignored scripts at the end of the output. Include a hint about how to allow the execution of those packages.

Platinum Sponsors

Gold Sponsors

v9.15.1

Compare Source

v9.15.0

Compare Source

v9.14.4

Compare Source

v9.14.3

Compare Source

v9.14.2

Compare Source

Patch Changes

• pnpm publish --json should work #​8788.

Platinum Sponsors

Gold Sponsors

v9.14.1

Compare Source

Minor Changes

• Added support for pnpm pack --json to print packed tarball and contents in JSON format #​8765.

Patch Changes

• pnpm exec should print a meaningful error message when no command is provided #​8752.
• pnpm setup should remove the CLI from the target location before moving the new binary #​8173.
• Fix ERR_PNPM_TARBALL_EXTRACT error while installing a dependency from GitHub having a slash in branch name #​7697.
• Don't crash if the use-node-version setting is used and the system has no Node.js installed #​8769.
• Convert settings in local .npmrc files to their correct types. For instance, child-concurrency should be a number, not a string #​5075.
• pnpm should fail if a project requires a different package manager even if manage-package-manager-versions is set to true.
• pnpm init should respect the --dir option #​8768.

Platinum Sponsors

Gold Sponsors

v9.14.0

Compare Source

v9.13.2: pnpm 9.13.2

Compare Source

Patch Changes

• Detection of circular peer dependencies should not crash with aliased dependencies #​8759. Fixes a regression introduced in the previous version.
• Fix race condition of symlink creations caused by multiple parallel dlx processes.

Platinum Sponsors

Gold Sponsors

Silver Sponsors

v9.13.1: pnpm 9.13.1

Compare Source

Patch Changes

• Fixed some edge cases where resolving circular peer dependencies caused a dead lock #​8720.

Platinum Sponsors

Gold Sponsors

config help if that's undesired. If you want to rebase/retry this PR, check this box This PR was generated by Mend Renovate. View the repository job log.