Update Patch updates (patch) #107

renovate · 2025-01-29T13:38:50Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@clack/prompts (source)	`0.10.0` -> `0.10.1`
chrono-node@<2.2.4	`>=2.2.4` -> `>=2.2.7`
esbuild	`^0.25.0` -> `^0.25.2`
lightningcss	`1.29.1` -> `1.29.3`
mime	`4.0.6` -> `4.0.7`
pkg-pr-new (source)	`^0.0.40` -> `^0.0.42`
publint (source)	`^0.3.8` -> `^0.3.11`
typedoc-plugin-markdown (source)	`>=4.2.0` -> `>=4.2.10`
typedoc-plugin-rename-defaults	`>=0.7.0` -> `>=0.7.3`
typedoc-plugin-rename-defaults	`0.7.2` -> `0.7.3`

Release Notes

bombshell-dev/clack (@clack/prompts)

`v0.10.1`

Compare Source

Patch Changes

11a5dc1: Fixes multiselect only shows hints on the first item in the options list. Now correctly shows hints for all selected options with hint property.
30aa7ed: Adds a new selectableGroups boolean to the group multi-select prompt. Using selectableGroups: false will disable the ability to select a top-level group, but still allow every child to be selected individually.
Updated dependencies [30aa7ed]
Updated dependencies [5dfce8a]
Updated dependencies [f574297]
- @clack/core @0.4.2

wanasit/chrono (chrono-node@<2.2.4)

`v2.2.7`

Compare Source

Improvement: Apply case-sensitive timezone extraction on date expressions f036345
Fix: Time parsing ending with "a" or "p" 77fbd83
New: BCE/CE year label support dde6103
New: "tmrw" as abbr for "tomorrow" b9c02f5

`v2.2.6`

Compare Source

Fix: Improve performance by avoid unnecessary parsing in time exp cdfb6bc
Fix: negative time range parsing 053cc8f
Fix: handling quote sign around time parsing 6a52cf3

`v2.2.5`

Compare Source

Fix: Performance improvement by reduce the usage of dayjs in results 38cbefb
Fix: Small performance improvement through caching fab8f51
New: Adding basic benchmark ac08a8c

evanw/esbuild (esbuild)

`v0.25.2`

Compare Source

Support flags in regular expressions for the API (#4121)

The JavaScript plugin API for esbuild takes JavaScript regular expression objects for the filter option. Internally these are translated into Go regular expressions. However, this translation previously ignored the flags property of the regular expression. With this release, esbuild will now translate JavaScript regular expression flags into Go regular expression flags. Specifically the JavaScript regular expression /\.[jt]sx?$/i is turned into the Go regular expression `(?i)\.[jt]sx?$` internally inside of esbuild's API. This should make it possible to use JavaScript regular expressions with the i flag. Note that JavaScript and Go don't support all of the same regular expression features, so this mapping is only approximate.
Fix node-specific annotations for string literal export names (#4100)

When node instantiates a CommonJS module, it scans the AST to look for names to expose via ESM named exports. This is a heuristic that looks for certain patterns such as exports.NAME = ... or module.exports = { ... }. This behavior is used by esbuild to "annotate" CommonJS code that was converted from ESM with the original ESM export names. For example, when converting the file export let foo, bar from ESM to CommonJS, esbuild appends this to the end of the file:
```
// Annotate the CommonJS export names for ESM import in node:
0 && (module.exports = {
  bar,
  foo
});
```
However, this feature previously didn't work correctly for export names that are not valid identifiers, which can be constructed using string literal export names. The generated code contained a syntax error. That problem is fixed in this release:
```
// Original code
let foo
export { foo as "foo!" }

// Old output (with --format=cjs --platform=node)
...
0 && (module.exports = {
  "foo!"
});

// New output (with --format=cjs --platform=node)
...
0 && (module.exports = {
  "foo!": null
});
```
Basic support for index source maps (#3439, #4109)

The source map specification has an optional mode called index source maps that makes it easier for tools to create an aggregate JavaScript file by concatenating many smaller JavaScript files with source maps, and then generate an aggregate source map by simply providing the original source maps along with some offset information. My understanding is that this is rarely used in practice. I'm only aware of two uses of it in the wild: ClojureScript and Turbopack.

This release provides basic support for indexed source maps. However, the implementation has not been tested on a real app (just on very simple test input). If you are using index source maps in a real app, please try this out and report back if anything isn't working for you.

Note that this is also not a complete implementation. For example, index source maps technically allows nesting source maps to an arbitrary depth, while esbuild's implementation in this release only supports a single level of nesting. It's unclear whether supporting more than one level of nesting is important or not given the lack of available test cases.

This feature was contributed by @clyfish.

`v0.25.1`

Compare Source

Fix incorrect paths in inline source maps (#4070, #4075, #4105)

This fixes a regression from version 0.25.0 where esbuild didn't correctly resolve relative paths contained within source maps in inline sourceMappingURL data URLs. The paths were incorrectly being passed through as-is instead of being resolved relative to the source file containing the sourceMappingURL comment, which was due to the data URL not being a file URL. This regression has been fixed, and this case now has test coverage.
Fix invalid generated source maps (#4080, #4082, #4104, #4107)

This release fixes a regression from version 0.24.1 that could cause esbuild to generate invalid source maps. Specifically under certain conditions, esbuild could generate a mapping with an out-of-bounds source index. It was introduced by code that attempted to improve esbuild's handling of "null" entries in source maps (i.e. mappings with a generated position but no original position). This regression has been fixed.

This fix was contributed by @jridgewell.
Fix a regression with non-file source map paths (#4078)

The format of paths in source maps that aren't in the file namespace was unintentionally changed in version 0.25.0. Path namespaces is an esbuild-specific concept that is optionally available for plugins to use to distinguish paths from file paths and from paths meant for other plugins. Previously the namespace was prepended to the path joined with a : character, but version 0.25.0 unintentionally failed to prepend the namespace. The previous behavior has been restored.
Fix a crash with switch optimization (#4088)

The new code in the previous release to optimize dead code in switch statements accidentally introduced a crash in the edge case where one or more switch case values include a function expression. This is because esbuild now visits the case values first to determine whether any cases are dead code, and then visits the case bodies once the dead code status is known. That triggered some internal asserts that guard against traversing the AST in an unexpected order. This crash has been fixed by changing esbuild to expect the new traversal ordering. Here's an example of affected code:
```
switch (x) {
  case '':
    return y.map(z => z.value)
  case y.map(z => z.key).join(','):
    return []
}
```
Update Go from 1.23.5 to 1.23.7 (#4076, #4077)

This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain reports from vulnerability scanners that detect which version of the Go compiler esbuild uses.

This PR was contributed by @MikeWillCook.

parcel-bundler/lightningcss (lightningcss)

`v1.29.3`

Compare Source

Support for ::details-content and ::target-text selectors – @philipp-spiess in https://github.com/parcel-bundler/lightningcss/pull/930
Update :placeholder-shown selector name across browsers – @Marukome0743 in https://github.com/parcel-bundler/lightningcss/pull/929
Support /* cssmodules-pure-no-check */ comments – @jantimon in https://github.com/parcel-bundler/lightningcss/pull/898
Update browser compatibility data – c03a7e7

`v1.29.2`

Compare Source

Update detect-libc for better compatibility by @nicksrandall in https://github.com/parcel-bundler/lightningcss/pull/923
Fix broken minification for non-opaque oklab colors by @lfesp in https://github.com/parcel-bundler/lightningcss/pull/901
Bump browserslist-rs 0.17.0 by @chenjiahan in https://github.com/parcel-bundler/lightningcss/pull/912
Add wasm compilation cfg for Browsers::load_browserslist by @CPunisher in https://github.com/parcel-bundler/lightningcss/pull/895
Fix parsing style container queries without a value – 2284653

broofa/mime (mime)

`v4.0.7`

Compare Source

Bug Fixes

update mime types (#332) (953ae3e)
use dotall modifier for getType() regexes (#334) (d7871f3)

stackblitz-labs/pkg.pr.new (pkg-pr-new)

`v0.0.42`

Compare Source

`v0.0.41`

Compare Source

publint/publint (publint)

`v0.3.11`

Compare Source

Patch Changes

Update EXPORTS_GLOB_NO_DEPRECATED_SUBPATH_MAPPING message and severity to error (#179)
Add a new warning when the "exports" or "imports" field contain a fallback array as most tooling will only the pick the first value that can be parsed, and other tooling may work differently leading to inconsistent behaviors (#180)

`v0.3.10`

Compare Source

Patch Changes

Support custom conditions in "exports" that points to raw TS or TSX files. This configuration is common in monorepo setups where packages refer to the raw files among themselves using a custom condition so custom aliasing isn't needed. (b34ea94)

With this support, the "types" condition is allowed to come after any exports of the raw TS or TSX files. File existence checks are also disabled for raw TS and TSX files reference as after publish these files may intentionally be not published.

`v0.3.9`

Compare Source

Patch Changes

Support the formatMessage utility in the browser. It has a new color: 'html' option to highlight important parts with <strong> tags instead of ANSI colors. It also has a new reference: boolean option so the messages are worded in reference of the message location. (e1cfef0)
If formatMessage is passed a package.json object with missing keys, the message part that references the value will now fallback to "undefined" instead of completely erroring out. (45962d1)

typedoc2md/typedoc-plugin-markdown (typedoc-plugin-markdown)

`v4.2.10`

Compare Source

Patch Changes

Enhanced the formatting and structure of accessor output (#711)

`v4.2.9`

Compare Source

Patch Changes

Expose @return block tags on declarations (#694)
Add parentheses on function names in type declaration table views (#696)

`v4.2.8`

Compare Source

Patch Changes

Fix missing slash when public path is prefixed with http (#688)

`v4.2.7`

Compare Source

Patch Changes

Correctly handle top level custom groups in navigation (#685)
Fix missing index descriptions for some signatures (#670)
Add '?' for optional type declarations in tables

`v4.2.6`

Compare Source

Patch Changes

Expose missing entrypoints to navigation (#663)
Fix missing function descriptions in indexes

`v4.2.5`

Compare Source

Patch Changes

Expose comment for arrow functions in type declarations (#670)
Tables generated with the "htmlTable" key will include <thead> and <tbody> elements to fix MDX compatibility issues (#671)
Expose missing descriptions with accessor keyword (#664)

`v4.2.4`

Compare Source

Patch Changes

Expose comments to reflections with the accessor keyword (#664)
Omit constructors from category groups (#661)
Update categories structure in navigation to match interface model

`v4.2.3`

Compare Source

Patch Changes

Fix missing return comments for const functions (#656)

`v4.2.2`

Compare Source

Patch Changes

Correctly resolve comment summary for const functions (#656)
Fix anchor links containing generics (#655)

`v4.2.1`

Compare Source

Patch Changes

Enhanced the formatting and structure of accessor output (#711)

felipecrs/typedoc-plugin-rename-defaults (typedoc-plugin-rename-defaults)

Configuration

📅 Schedule: Branch creation - "after 10:00 before 19:00 every weekday except after 13:00 before 14:00" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coderabbitai · 2025-01-29T13:38:57Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Generate unit testing code for this file.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai generate unit testing code for this file.
- @coderabbitai modularize this function.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read src/utils.ts and generate unit testing code.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
- @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai generate docstrings to generate docstrings for this PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai plan to trigger planning for file edits and PR creation.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

github-actions · 2025-01-29T13:39:13Z

Hey there and thank you for opening this pull request! 👋🏼

We require pull request titles to follow the Conventional Commits specification and it looks like your proposed title needs to be adjusted.

Details:

No release type found in pull request title "Update Patch updates (patch)". Add a prefix to indicate what kind of release this pull request corresponds to. For reference, see https://www.conventionalcommits.org/

Available types:
 - build
 - chore
 - ci
 - docs
 - feat
 - fix
 - perf
 - infra
 - refactor
 - revert
 - test

pkg-pr-new · 2025-01-29T13:42:20Z

Open in StackBlitz

npm i https://pkg.pr.new/visulima/packem/@visulima/packem@107

commit: 1af2e58

socket-security · 2025-03-13T10:24:02Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub ↗.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	esbuild@0.25.2
	@clack/prompts@0.10.0 ⏵ 0.10.1	⁺¹		⁺¹	^-9

View full report ↗

Signed-off-by: Renovate Bot <[email protected]>

renovate bot requested a review from prisis as a code owner January 29, 2025 13:38

renovate bot added the c: dependencies label Jan 29, 2025

renovate bot force-pushed the renovate/patch-patch-updates branch 3 times, most recently from 6413c76 to 37cc98a Compare February 5, 2025 13:37

renovate bot force-pushed the renovate/patch-patch-updates branch 3 times, most recently from 3b16a4c to 38ff525 Compare February 10, 2025 09:25

renovate bot force-pushed the renovate/patch-patch-updates branch 3 times, most recently from e64fb2e to 0c431df Compare February 18, 2025 10:37

renovate bot force-pushed the renovate/patch-patch-updates branch 4 times, most recently from 89f4a39 to 0d57661 Compare February 27, 2025 10:58

renovate bot force-pushed the renovate/patch-patch-updates branch 4 times, most recently from eaa1348 to d862418 Compare March 6, 2025 10:35

renovate bot force-pushed the renovate/patch-patch-updates branch 2 times, most recently from 32f5829 to 0435d11 Compare March 13, 2025 10:22

renovate bot force-pushed the renovate/patch-patch-updates branch 3 times, most recently from 8eccc6f to 326aa3a Compare March 19, 2025 11:36

renovate bot force-pushed the renovate/patch-patch-updates branch 2 times, most recently from 9917dd2 to 7c1aebb Compare April 4, 2025 10:15

renovate bot force-pushed the renovate/patch-patch-updates branch 2 times, most recently from 71a3059 to bfcba94 Compare April 11, 2025 15:02

Update Patch updates

1af2e58

Signed-off-by: Renovate Bot <[email protected]>

renovate bot force-pushed the renovate/patch-patch-updates branch from bfcba94 to 1af2e58 Compare April 14, 2025 15:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update Patch updates (patch) #107

Update Patch updates (patch) #107

renovate bot commented Jan 29, 2025 •

edited

Loading

coderabbitai bot commented Jan 29, 2025 •

edited

Loading

Review skipped

Chat

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (`.coderabbit.yaml`)

Documentation and Community

github-actions bot commented Jan 29, 2025 •

edited

Loading

pkg-pr-new bot commented Jan 29, 2025 •

edited

Loading

socket-security bot commented Mar 13, 2025 •

edited

Loading

Update Patch updates (patch) #107

Are you sure you want to change the base?

Update Patch updates (patch) #107

Conversation

renovate bot commented Jan 29, 2025 • edited Loading

Release Notes

Patch Changes

Bug Fixes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Configuration

coderabbitai bot commented Jan 29, 2025 • edited Loading

Review skipped

Chat

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (.coderabbit.yaml)

Documentation and Community

github-actions bot commented Jan 29, 2025 • edited Loading

pkg-pr-new bot commented Jan 29, 2025 • edited Loading

socket-security bot commented Mar 13, 2025 • edited Loading

renovate bot commented Jan 29, 2025 •

edited

Loading

coderabbitai bot commented Jan 29, 2025 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)

github-actions bot commented Jan 29, 2025 •

edited

Loading

pkg-pr-new bot commented Jan 29, 2025 •

edited

Loading

socket-security bot commented Mar 13, 2025 •

edited

Loading