chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #1357 · nuxt/cli

renovate · 2026-06-29T05:39:04Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
@antfu/eslint-config	`^9.0.0` → `^9.1.0`	devDependencies	minor
@bomb.sh/tab	`^0.0.17` → `^0.0.19`	dependencies	patch
@bomb.sh/tab	`^0.0.17` → `^0.0.19`	devDependencies	patch
@clack/prompts (source)	`^1.6.0` → `^1.7.0`	dependencies	minor
@clack/prompts (source)	`^1.6.0` → `^1.7.0`	devDependencies	minor
@codspeed/vitest-plugin (source)	`^5.6.0` → `^5.7.1`	devDependencies	minor
@types/node (source)	`^24.13.2` → `^24.13.3`	devDependencies	patch
@vitest/coverage-v8 (source)	`^4.1.9` → `^4.1.10`	devDependencies	patch
CodSpeedHQ/action	`v4.17.6` → `v4.18.4`	action	minor	`v4.18.5`
eslint (source)	`^10.5.0` → `^10.6.0`	devDependencies	minor
eslint-plugin-jsdoc	`63.0.7` → `63.0.12`	pnpm-workspace.overrides	patch	`63.0.13`
exsolve	`^1.0.8` → `^1.1.0`	dependencies	minor
exsolve	`^1.0.8` → `^1.1.0`	devDependencies	minor
h3-next (source)	`^2.0.1-rc.22` → `^2.0.1-rc.23`	devDependencies	patch
httpxy	`0.5.3` → `0.5.5`	pnpm-workspace.overrides	patch
knip (source)	`^6.17.1` → `^6.25.0`	devDependencies	minor	`6.26.0`
nypm	`^0.6.7` → `^0.6.8`	dependencies	patch
nypm	`^0.6.7` → `^0.6.8`	devDependencies	patch
pnpm (source)	`11.8.0` → `11.10.0`	packageManager	minor	`11.11.0`
srvx (source)	`^0.11.17` → `^0.11.21`	dependencies	patch
srvx (source)	`^0.11.17` → `^0.11.21`	devDependencies	patch
std-env	`^4.1.0` → `^4.2.0`	dependencies	minor
std-env	`^4.1.0` → `^4.2.0`	devDependencies	minor
tinyclip	`^0.1.14` → `^0.1.15`	dependencies	patch
tinyclip	`^0.1.14` → `^0.1.15`	devDependencies	patch
tsdown (source)	`^0.22.3` → `^0.22.4`	devDependencies	patch
undici (source)	`^8.5.0` → `^8.7.0`	devDependencies	minor
vitest (source)	`^4.1.9` → `^4.1.10`	devDependencies	patch
vue (source)	`^3.5.38` → `^3.5.39`	devDependencies	patch
vue-tsc (source)	`^3.3.5` → `^3.3.7`	devDependencies	patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

antfu/eslint-config (@antfu/eslint-config)

`v9.1.0`

Compare Source

🚀 Features

Update deps - by @antfu (ff246)

🐞 Bug Fixes

Update deps and scope unicorn rules - by @antfu (82078)

View changes on GitHub

bombshell-dev/tab (@bomb.sh/tab)

`v0.0.19`

Compare Source

Patch Changes

0f2d0f3: Widen Commander peer dependency support to include Commander 14 and 15.

`v0.0.18`

Compare Source

Patch Changes

998ab6f: prevent duplicate empty args in generated completions

bombshell-dev/clack (@clack/prompts)

`v1.7.0`

Compare Source

Minor Changes

#574 8f1c380 Thanks @dreyfus92! - Add showInstructions option to select, multiselect, and groupMultiselect. Keyboard hints remain shown by default; pass showInstructions: false to hide them.

Patch Changes

#582 4b24953 Thanks @43081j! - Handle empty arrays in various prompts and utilities.
Updated dependencies [4b24953]:
- @clack/core@1.4.3

CodSpeedHQ/codspeed-node (@codspeed/vitest-plugin)

`v5.7.1`

Compare Source

What's Changed

fix: emit perf maps when not parsing the full inlining logs from V8 by @GuillaumeLagrange in #85

Full Changelog: CodSpeedHQ/codspeed-node@v5.7.0...v5.7.1

`v5.7.0`

Compare Source

Highlights

Dump full inlining information for higher optimization tiers in walltime so we can show more functions on the profiler. To test it out, set CODSPEED_WALLTIME_PROFILER=samply env variable in the codspeed action.
Added support for tinybench v5 and v6 in @codspeed/tinybench-plugin

What's Changed

Add necessary flags to dump optimized inlining info and fix walltime marker placement by @GuillaumeLagrange in #83

Full Changelog: CodSpeedHQ/codspeed-node@v5.6.0...v5.7.0

vitest-dev/vitest (@vitest/coverage-v8)

`v4.1.10`

Compare Source

🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in #10680 (5c18d)
vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in #10661 (bae52)

View changes on GitHub

CodSpeedHQ/action (CodSpeedHQ/action)

`v4.18.4`

Compare Source

What's Changed

fix 4.18.3 runner hash – bf19f56 by @adriencaccia

Full Changelog: CodSpeedHQ/action@v4.18.3...v4.18.4

`v4.18.2`

Compare Source

Release Notes

🐛 Bug Fixes

Source forwarded env below memtrack's capability boundary by @not-matthias in #439

⚙️ Internals

chore: bump runner version to 4.18.2 by @github-actions[bot] in #219

Install codspeed-runner 4.18.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.2/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.18.2

File	Platform	Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.18.1...v4.18.2

`v4.18.1`

Compare Source

Release Notes

🚀 Features

Bump go-runner to 1.2.1 by @adriencaccia in #421

Install codspeed-runner 4.18.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.1/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.18.1

File	Platform	Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

`v4.18.0`

Compare Source

Release Notes

🚀 Features

Bump valgrind-codspeed to 3.26.0-0codspeed4
Bump samply by @GuillaumeLagrange in #415
Set env var to have node dump inlining information by @GuillaumeLagrange
Change isolation logic to include samply and non root fallback by @GuillaumeLagrange
Add experimental --cycle-estimation flag by @not-matthias in #412
Make samply-codspeed a submodule rather than git rev with cargo by @GuillaumeLagrange in #416

🐛 Bug Fixes

Honor locally-installed valgrind on non-apt systems by @not-matthias in #414

Install codspeed-runner 4.18.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.0/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.18.0

File	Platform	Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

eslint/eslint (eslint)

`v10.6.0`

Compare Source

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)
f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)
bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)
8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)
5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)
9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)
d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)
2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)
63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)
7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)
399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

a83683d docs: Update README (GitHub Actions Bot)
f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)
bea49f7 docs: Update README (GitHub Actions Bot)
e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)
8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)
3eb3d9b docs: Update README (GitHub Actions Bot)
c5bb59c docs: Update README (GitHub Actions Bot)
eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)
3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])
c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)
a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)
27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)
865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])
27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)
970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)
b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])
6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)

`v63.0.12`

Compare Source

`v63.0.11`

Compare Source

Bug Fixes

require-jsdoc: skip overloads to find method comment blocks; fixes #1688 (7676b50)

`v63.0.10`

Compare Source

Bug Fixes

escape-inline-tags: allow scoped packages in declaration references (#1705) (70e0a11)

`v63.0.9`

Compare Source

Bug Fixes

check-template-names, require-template, valid-types: keep commas inside @template default values (0980b71)

`v63.0.8`

Compare Source

Bug Fixes

check-template-names: detect template usage in @augments/@extends/@implements types (208079f)

unjs/exsolve (exsolve)

`v1.1.0`

Compare Source

compare changes

🚀 Enhancements

Sync internal with latest Node.js upstream (#49)

🔥 Performance

Optimize resolver cache lookups (#48)

🏡 Chore

Update deps (43c20e3)
Apply automated updates (15806be)
Fix ts issues (3177a7e)

❤️ Contributors

Pi0x x@pi0.io
Alexander Lichter (@TheAlexLichter)
Pooya Parsa (@pi0)

h3js/h3 (h3-next)

`v2.0.1-rc.23`

Compare Source

compare changes

🚀 Enhancements

proxy: Support client aborts (#1417)
ws: Allow optional HTTP handling in defineWebSocketHandler (#1425)
Export resolveDotSegments as a public path utility (#1428)
readBody: Support formdata type (#1164)

🩹 Fixes

sanitizeStatusCode: Return default for non-numeric input instead of NaN (#1420)
auth: Reject Basic credentials with no colon separator (#1393)
sse: Ignore pushes after stream close (#1411)
proxy: Ignore incoming accept-encoding header (#1423)
cache: HandleCacheHeaders ignores multi-value If-None-Match header (#1395)
serve-static: Compare if-modified-since at whole-second precision (#1394)
request: Parse first entry of comma-list x-forwarded-proto header (#1413)
serve-static: Check the response (not request) for an existing content-length (#1391)
cors: Merge Vary headers when both origin and allow-headers emit vary (#1396)
writeEarlyHints: Normalize Link key to prevent hanging with Node.js (#1385)
event: Return 400 for malformed percent-encoded request URLs (#1424)
mount: Restore pathname on error with try/finally (#1319)
serve-static: Decode the resolved id before lookup (#1431)
request: Shadow parsed _url in requestWithURL proxy (d21d93c)
event: Clone URL for pathname normalization instead of mutating shared _url (a1cf066)
adapters: Sync raw node req.url with event.url in fromNodeHandler (#1433)

💅 Refactors

validate: Drop always-true if (validate.body) guard in body proxy (#1392)
Leftover changes from #1428 (#1430, #1428)

📖 Documentation

proxy: Add note about reading body (7eb018e)
Fix decode function name in router param helpers (#1419)
session: Note secure cookie limitation over local HTTP (#1409)
Document the session name option for multiple sessions (#1405)
Add arkstack framework to community section (#1382)
ws: Use zero-config crossws server plugin (#1427)

🌊 Types

Expose .crossws on defineWebSocketHandler return type (#1435)

🏡 Chore

Update deps (8f2d46d)
Apply automated updates (edb53fe)
Update deps (d4dceb7)
Remove extra /* @__PURE__ */ comment (c98f2d0)
Fix lint issue (6962251)
Update deps (ece0ea2)
Bump bundle size (b458796)
Update deps (78e7152)

✅ Tests

Cover zod schema query validation types (#1404)
Cover cloned pipeable node responses (#1414)
iron-crypto: Accept getRandomValues length error for invalid salt bits (dae12fe)
event: Cover shared _url normalization semantics (4a218a8)
event: Assert req.url reflects normalization per runtime (8410ec9)

❤️ Contributors

Pooya Parsa (@pi0)
Huseeiin (@huseeiin)
M.M (@momomuchu)
Pi0x x@pi0.io
Wind (@productdevbook)
Iain Sproat (@iainsproat)
Frank Johnston francisjohnjohnston@gmail.com
Mixelburg (@mixelburg)
Legacy (@3m1n3nc3)
Shaurya Singh (@LeSingh1)
Pupuking723 <2318857637@qq.com>
Harsh Agarwal <harshagarwal48756@gmail.com>
Aimee (@Aimee1608)
Alan747271363-art <alan747271363@gmail.com>
Greymoth <m.hirakawa07@icloud.com>
Patrick Wehbe (@patrickwehbe)
Shawn <ccai40359@gmail.com>
Alexander Kireyev (@chatman-media)

unjs/httpxy (httpxy)

`v0.5.5`

Compare Source

compare changes

🩹 Fixes

Retain relative protocol in redirect location header (#156)
Force connection: close on chunked upstream requests (#158)

🏡 Chore

Apply automated updates (0b03efd)
Update deps (6821255)

✅ Tests

Add regression test to ensure url embed preservation (#155)

❤️ Contributors

Pooya Parsa (@pi0)
Pi0x x@pi0.io
Sukka isukkaw@gmail.com

`v0.5.4`

Compare Source

compare changes

🩹 Fixes

types: Declare pathname on ProxyTargetDetailed (#152)
Preserve transfer-encoding on chunked DELETE/OPTIONS (#153)

🏡 Chore

release: V0.5.3 (77dcc78)
Update deps (00ee40a)

🤖 CI

Add ecosystem test for http-proxy-middleware (#142)

❤️ Contributors

Pooya Parsa (@pi0)
Armin Kramer (@Rand0mF)

webpro-nl/knip (knip)

`v6.25.0`: Release 6.25.0

Compare Source

fix: derive package name from package.json under Yarn nodeLinker: pnpm store (#1852) (3764605) - thanks @blowery!
Pick up types used in module augmentations via path aliases (resolve #1850) (9cc5a41)
feat: add support for packageExtensions in yarn and pnpm (#1847) (61d3164) - thanks @trueberryless!
fix(ci): do not run integration on forks (#1855) (d23c10d) - thanks @trueberryless!
chore(ci): improve security through specific permissions (#1856) (1eb42e6) - thanks @trueberryless!
chore(ci): add concurrency blocks (#1857) (3bf3d11) - thanks @trueberryless!
fix(next): resolve src/ entry patterns like Next.js does (#1859) (6e6a509) - thanks @dayongkr!
Fix Bun test defaults (#1860) (2ac4c04) - thanks @jakeleventhal!
Extend agentic guidelines re. plugins (da606eb)
Support rspack and path aliases in require.context (d231d67)
Support path aliases in import.meta.glob (resolve #1821) (fc7bb1e)
Register MDX compiler in Storybook plugin (6f18138)
Resolve TypeDoc customCss and customJs files (105687d)
Resolve inline Babel presets/plugins in Jest transform (38e4a4a)
Mark graphql-codegen generated outputs as entries (1255369)
Add Fumadocs plugin (77c2142)
Support next.config.mts in Next.js plugin (0f27e77)
Add script command parser built on unbash (195510c)
Gate Bun test entries on an actual bun test invocation (92903ec)
Detect Node.js test runner via script command parser (a0bfe7b)
Extract shared command walker for bash-parser and plugins (1301475)
Normalize aliased glob patterns to posix for Win (23b4a74)
Resolve inherited tsconfig paths from the extended config's directory (resolve #1866) (e3f0e5c)
Handle var interpolations in shell cmd scripts (resolve #1867) (9422d06)
Update query snapshot (5e192e9)
Add support for Prettier overrides (#1869) (5dc7f12) - thanks @remcohaszing!
Handle Serverless esbuild inject entries (#1865) (46111ef) - thanks @jakeleventhal!
docs: add links to Discord and Contributing in issue templates (#1868) (5ab3483) - thanks @trueberryless!
Add eve (Vercel framework) plugin (#1864) (20cd970) - thanks @jakeleventhal!
Add circular dependencies as opt-in cycles issue type (resolve #1734) (#1812) (1b0ed6b)
chore(ci): remove redundant tag triggers (#1863) (c61d008) - thanks @trueberryless!
Fix up docs a bit (89a2d8d)

`v6.24.0`: Release 6.24.0

Compare Source

chore: update year in license (#1833) (32bc844) - thanks @trueberryless!
ci: pin github actions (#1835) (82a8d09) - thanks @trueberryless!
Assume Node 24+/Bun and remove compilation step (d9ef038)
Don't report working-directory scripts as unlisted binaries (resolve #1834) (aea7923)
Add pnpm run lint to CI workflow (ec9aa1c)
feat: add settings for Zed editor to use oxlint and oxfmt (#1836) (111f2e0) - thanks @trueberryless!
fix: remove format_on_save: true settings from Zed settings to respect user settings (#1838) (dc2a640) - thanks @trueberryless!
feat: add Renovate for GitHub actions only (#1839) (ffce88c) - thanks @trueberryless!
Ignore import() in JSDoc examples (#1844) (6f090f9) - thanks @cyphercodes!
Don't report types used only in module augmentations as unused (resolve #1843) (7901abd)
Restore CI intent (0d739be)
feat: add less, stylus compilers and astro, svelte, vue import resolution (#1845) (5525759) - thanks @trueberryless!
Don't report built-in compiler dependencies as unused (3c9d4ad)
feat: add scss handling to stencil plugin ([#1846](h

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-06-29T05:39:54Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
tinyclip@0.1.15
vitest@4.1.10
@vitest/coverage-v8@4.1.10
h3@2.0.1-rc.22 ⏵ 2.0.1-rc.23	⁺¹	⁺¹
@types/node@24.13.3
exsolve@1.1.0
std-env@4.2.0
tsdown@0.22.4
nypm@0.6.8
@antfu/eslint-config@9.1.0
vue@3.5.39
vue-tsc@3.3.7
eslint@10.6.0
knip@6.25.0
srvx@0.11.21
@codspeed/vitest-plugin@5.7.1
undici@8.7.0
@clack/prompts@1.7.0
@bomb.sh/tab@0.0.17 ⏵ 0.0.19		⁺¹	⁺¹

View full report

pkg-pr-new · 2026-06-29T05:39:55Z

nuxt-cli-playground

npm i https://pkg.pr.new/create-nuxt@1357

npm i https://pkg.pr.new/nuxi@1357

npm i https://pkg.pr.new/@nuxt/cli@1357

commit: 473d8f7

socket-security · 2026-06-29T05:39:56Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@emnapi/runtime` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/nitro@3.0.1-alpha.2` → `npm/nitropack@2.13.4` → `npm/@nuxt/eslint-config@1.16.0` → `npm/knip@6.25.0` → `npm/@emnapi/runtime@1.11.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@emnapi/runtime@1.11.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `eslint-plugin-jsdoc` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/@nuxt/eslint-config@1.16.0` → `npm/@antfu/eslint-config@9.1.0` → `npm/eslint-plugin-jsdoc@63.0.12` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/eslint-plugin-jsdoc@63.0.12`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

codspeed-hq · 2026-06-29T05:41:58Z

Merging this PR will degrade performance by 49.01%

⚠️

Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

❌ 1 regressed benchmark
✅ 1 untouched benchmark

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Benchmark	`BASE`	`HEAD`	Efficiency
❌	`makes requests to dev server`	56 ms	109.8 ms	-49.01%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

_{Comparing renovate/all-minor-patch (473d8f7) with main (49dd7f7)}

renovate Bot requested a review from danielroe as a code owner June 29, 2026 05:39

renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 5805d71 to d0ee4cc Compare July 5, 2026 23:31

renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from b396ca8 to ef230e1 Compare July 10, 2026 00:44

chore(deps): update all non-major dependencies

473d8f7

renovate Bot force-pushed the renovate/all-minor-patch branch from ef230e1 to 473d8f7 Compare July 10, 2026 12:43

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies#1357

chore(deps): update all non-major dependencies#1357
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

codspeed-hq Bot commented Jun 29, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🚀 Features

🐞 Bug Fixes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

What's Changed

Highlights

What's Changed

🐞 Bug Fixes

What's Changed

Release Notes

🐛 Bug Fixes

⚙️ Internals

Install codspeed-runner 4.18.2

Install prebuilt binaries via shell script

Download codspeed-runner 4.18.2

Release Notes

🚀 Features

Install codspeed-runner 4.18.1

Install prebuilt binaries via shell script

Download codspeed-runner 4.18.1

Release Notes

🚀 Features

🐛 Bug Fixes

Install codspeed-runner 4.18.0

Install prebuilt binaries via shell script

Download codspeed-runner 4.18.0

Features

Bug Fixes

Documentation

Chores

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

🚀 Enhancements

🔥 Performance

🏡 Chore

❤️ Contributors

🚀 Enhancements

🩹 Fixes

💅 Refactors

📖 Documentation

🌊 Types

🏡 Chore

✅ Tests

❤️ Contributors

🩹 Fixes

🏡 Chore

✅ Tests

❤️ Contributors

🩹 Fixes

🏡 Chore

🤖 CI

❤️ Contributors

v6.25.0: Release 6.25.0

v6.24.0: Release 6.24.0

Configuration

Uh oh!

socket-security Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codspeed-hq Bot commented Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merging this PR will degrade performance by 49.01%

Performance Changes

Uh oh!

Reviewers

renovate Bot commented Jun 29, 2026 •

edited

Loading

`v6.25.0`: Release 6.25.0

`v6.24.0`: Release 6.24.0

socket-security Bot commented Jun 29, 2026 •

edited

Loading

pkg-pr-new Bot commented Jun 29, 2026 •

edited

Loading

socket-security Bot commented Jun 29, 2026 •

edited

Loading

codspeed-hq Bot commented Jun 29, 2026 •

edited

Loading