chore(deps): update npm packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@rstest/core (source)	^0.9.0 → ^0.10.0
enhanced-resolve	5.21.1 → 5.21.6
lint-staged	17.0.4 → 17.0.5
pnpm (source)	10.33.2 → 10.33.4
semver	7.7.4 → 7.8.1

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

web-infra-dev/rstest (@​rstest/core)

v0.10.1

Compare Source

What's Changed

New Features 🎉

• feat(core): add lifecycle debug logs by @​9aoy in #​1280
• feat(core): add detectAsyncLeaks option by @​9aoy in #​1262

Performance 🚀

• perf(cli): remove process title startup overhead by @​chenjiahan in #​1268

Bug Fixes 🐞

• fix(core): only merge performance.buildCache when user opts in by @​pkasarda in #​1276
• fix(types): export missing public types by @​9aoy in #​1277
• fix(core): restore slot semantics for RSTEST_WORKER_ID by @​fi3ework in #​1279
• fix(core): prevent pool.close() hang on forks pool by @​fi3ework in #​1285

Refactor 🔨

• refactor(core): use "Set up Rstest browser mode" as init header by @​fi3ework in #​1281

Document 📖

• docs: clarify React browser testing setup by @​9aoy in #​1269
• docs: update agent migrate skill by @​9aoy in #​1270
• docs: scaffold release blog with create-release-blog skill by @​fi3ework in #​1259
• docs: fix init command documentation by @​travzhang in #​894
• docs(core): clarify buildCache comment by @​9aoy in #​1278
• docs(blog): add author list to blog pages by @​elecmonkey in #​1282

Other Changes

• chore(deps): update pnpm/action-setup action to v6 by @​renovate[bot] in #​1272
• test(e2e): loosen github-actions Duration regex to avoid Windows flakes by @​fi3ework in #​1266
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1271
• chore(deps): update dependency svelte to v5.55.7 [security] by @​renovate[bot] in #​1260
• chore(deps): bump rstackjs/rstack-ecosystem-ci action to ca8d345 by @​fi3ework in #​1283
• release: 0.10.1 by @​9aoy in #​1286

New Contributors

• @​pkasarda made their first contribution in #​1276
• @​elecmonkey made their first contribution in #​1282

Full Changelog: web-infra-dev/rstest@v0.10.0...v0.10.1

v0.10.0

Compare Source

What's Changed

New Features 🎉

• feat(pool): replace tinypool with self-owned worker pool by @​fi3ework in #​1171
• feat: support run related tests by @​9aoy in #​1172
• feat(core): support build cache by @​9aoy in #​1196
• feat: support silent logs by @​9aoy in #​1224
• feat(core): resolve dynamic imports against source module origin by @​fi3ework in #​1210
• feat(core): add --trace flag to dump Perfetto-compatible profile by @​fi3ework in #​1226
• feat(core): add threads pool implementation by @​fi3ework in #​1235
• feat(core): add memory-aware worker spawn gate by @​fi3ework in #​1246
• feat(core): support run changed tests by @​9aoy in #​1243
• feat(core): auto install missing runtime dependencies by @​9aoy in #​1252
• feat(core): add force rerun triggers by @​9aoy in #​1257
• feat(core): support changed coverage by @​9aoy in #​1263

Bug Fixes 🐞

• fix(pool): restore stderr truncation and settle wait lost in #​1171 by @​fi3ework in #​1216
• fix: handle toNotFake option in useFakeTimers properly by @​felixmosh in #​1219
• fix(core): guard interop has trap against primitive default export by @​fi3ework in #​1234
• fix(adapter-rslib): use mergeRslibConfig instead of mergeRsbuildConfig by @​9aoy in #​1238
• fix(browser-react): drop React 17 from peer deps by @​fi3ework in #​1240
• fix(core): split taskContext to remove node:async_hooks from browser bundle by @​fi3ework in #​1244
• fix(core): include coverage config in build cache digest by @​9aoy in #​1245
• fix(core): improve related changed hints by @​9aoy in #​1264

Document 📖

• docs: use Rspress Prompt component and upgrade to the latest version by @​SoonIter in #​1213
• docs(api): add environment variables reference page by @​fi3ework in #​1220
• docs: add silent version metadata by @​9aoy in #​1236
• docs(profiling): add profiler choice section by @​fi3ework in #​1237

Other Changes

• chore(deps): update rsbuild to v2 (major) by @​renovate[bot] in #​1223
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1222
• chore(core): silence pool unit test stderr noise on CI by @​fi3ework in #​1225
• chore: replace Biome with Prettier by @​9aoy in #​1227
• chore(deps): update actions/github-script action to v9 by @​renovate[bot] in #​1230
• chore(deps): pin rstackjs/rstack-ecosystem-ci action to 4949c44 by @​renovate[bot] in #​1228
• chore(deps): update dependency lefthook to v2 by @​renovate[bot] in #​1231
• chore(deps): update actions/setup-node digest to 48b55a0 by @​renovate[bot] in #​1229
• build: enable tsgo in CI by @​chenjiahan in #​1232
• chore(deps): update @​rspack/core to 2.0.1 by @​chenjiahan in #​1233
• chore(deps): update pnpm workspace settings by @​chenjiahan in #​1241
• test(e2e): assert no framework warnings in browser-mode CLI output by @​fi3ework in #​1242
• test(e2e): isolate build/ rstest spawns to per-fixture cwd by @​fi3ework in #​1247
• chore: add release notes skill by @​chenjiahan in #​1249
• chore(deps): update rspack and rsbuild by @​9aoy in #​1250
• ci: split PR baseline and cron supplemental e2e coverage by @​fi3ework in #​1248
• chore: enable Renovate security preset by @​chenjiahan in #​1253
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1251
• chore: align package versions by @​9aoy in #​1254
• chore: enforce publint and arethetypeswrong on every package build by @​fi3ework in #​1256
• chore: replace local pr skill with rstackjs/agent-skills pr-creator by @​fi3ework in #​1255
• release: 0.10.0 by @​fi3ework in #​1265

New Contributors

• @​SoonIter made their first contribution in #​1213
• @​felixmosh made their first contribution in #​1219

Full Changelog: web-infra-dev/rstest@v0.9.10...v0.10.0

webpack/enhanced-resolve (enhanced-resolve)

v5.21.6

Compare Source

Patch Changes

• Speed up alias resolution on the hot path. (by @​alexander-akait in #​589)

  • AliasPlugin / TsconfigPathsPlugin: bucket compiled alias options by the first char code of name, so resolves skip options whose name can't possibly match the request's first char. Gated to cases with 2+ distinct first chars so degenerate single-bucket lists (e.g. long alias chains) don't pay for the Map.get.
  • TsconfigPathsPlugin: memoize _selectPathsDataForContext(map, requestPath) per map so the per-source-file contextList scan only runs once per directory. Gated to maps with 2+ contexts so single-context tsconfigs aren't penalized by the cache lookup.

  Biggest wins on alias-heavy configs (300+ entries): huge-alias-miss +151%, huge-alias-list +126%, alias-first-char-miss +120%.

v5.21.5

Compare Source

Patch Changes

• Don't add configDir to modules when tsconfig has no baseUrl. (by @​alexander-akait in 61f36fd)

v5.21.4

Compare Source

Patch Changes

• When tsconfig: true is used, walk up parent directories to find tsconfig.json, matching TypeScript's own findConfigFile behavior. (by @​xiaoxiaojx in #​585)

v5.21.3

Compare Source

Patch Changes

• TsconfigPathsPlugin now falls through to normal module resolution when a paths pattern matches but the mapped path does not exist, matching TypeScript's native resolution behavior. Previously, patterns like "@​*" would block scoped npm packages (e.g. @sentry/react) from resolving via node_modules. (by @​xiaoxiaojx in #​579)

v5.21.2

Compare Source

Patch Changes

• Fix TsconfigPathsPlugin circular project references causing stack overflow, add support for extending from unscoped npm packages, and use stat instead of readFile for existence checks in extends resolution. (by @​xiaoxiaojx in #​575)

• perf: dedupe miss paths in DirectoryExistsPlugin/FileExistsPlugin and prune the per-resolve TsconfigPathsPlugin context scan. (by @​alexander-akait in #​574)

• perf: drop a dead Map lookup in findMatch and flatten AliasFieldPlugin's cache check. (by @​alexander-akait in #​574)

• perf: hot-path tweaks in ImportsFieldPlugin, AliasUtils, and util/entrypoints. (by @​alexander-akait in #​574)

• perf: cut per-resolve allocations in Resolver.parse, loadDescriptionFile, and TsconfigPathsPlugin._selectPathsDataForContext. (by @​alexander-akait in #​574)

lint-staged/lint-staged (lint-staged)

v17.0.5

Compare Source

Patch Changes

• #​1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.

pnpm/pnpm (pnpm)

v10.33.4: pnpm 10.33.4

Compare Source

Patch Changes

• Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.

  A new gitHosted: true field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.

• Fix a regression where pnpm --recursive --filter '!<pkg>' run/exec/test/add would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative --filter arguments are provided, matching the documented behavior. To include the root, pass --include-workspace-root #​11341.

Platinum Sponsors

Gold Sponsors

v10.33.3

Compare Source

npm/node-semver (semver)

v7.8.1

Compare Source

Bug Fixes

• 17aa702 #​869 strip build metadata before comparator trimming (#​869) (@​owlstronaut)
• 5f3ca13 #​867 handle prerelease bounds in subset (#​867) (@​puneetdixit200, Puneet Dixit)

v7.8.0

Compare Source

Features

• 0d0a0a2 #​855 Add truncate function (#​855) (@​pjohnmeyer, @​owlstronaut)

Bug Fixes

• 3905343 #​859 Warn when defaulting to --inc=patch in CLI (@​pjohnmeyer)

Documentation

• c368af6 #​853 fix typos in documentation (#​853) (@​ankitkumar572005)
• 37776c3 #​846 fix BNF grammar to distinguish prerelease from build identifiers (#​846) (@​abhu85, @​claude)

Chores

• 9542e09 #​860 template-oss-apply (@​owlstronaut)
• 937bc2c #​860 template-oss-apply@5.0.0 (@​owlstronaut)
• 6946fef #​852 bump @​npmcli/template-oss from 4.29.0 to 4.30.0 (#​852) (@​dependabot[bot], @​npm-cli-bot)

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.