Skip to content

Update all non-major dependencies#305

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

Update all non-major dependencies#305
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Jan 26, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@next/mdx (source) 16.2.216.2.3 age confidence dependencies patch
@turbo/gen (source) 2.9.32.9.5 age confidence devDependencies patch 2.9.6
@vitest/coverage-v8 (source) 4.1.24.1.4 age confidence pnpm.catalog.default patch
changesets/action v1.5.3v1.7.0 age confidence action minor
eslint-config-next (source) 16.1.216.2.3 age confidence pnpm.catalog.eslint minor
eslint-config-next (source) 16.2.216.2.3 age confidence devDependencies patch
eslint-config-turbo (source) 2.9.32.9.5 age confidence pnpm.catalog.eslint patch 2.9.6
lucide-react (source) 1.7.01.8.0 age confidence dependencies minor
next (source) 16.2.216.2.3 age confidence dependencies patch
pnpm (source) 10.28.010.33.0 age confidence packageManager minor
react (source) 19.2.419.2.5 age confidence dependencies patch
react-dom (source) 19.2.419.2.5 age confidence dependencies patch
styfle/cancel-workflow-action 0.13.00.13.1 age confidence action patch
turbo (source) 2.9.32.9.5 age confidence devDependencies patch 2.9.6
typescript-eslint (source) 8.58.08.58.1 age confidence pnpm.catalog.eslint patch
vitest (source) 4.1.24.1.4 age confidence pnpm.catalog.default patch
zod (source) 4.3.54.3.6 age confidence pnpm.catalog.default patch

Release Notes

vercel/next.js (@​next/mdx)

v16.2.3

Compare Source

[!NOTE]
This release is backporting security and bug fixes. For more information about the fixed security vulnerability, please see https://vercel.com/changelog/summary-of-cve-2026-23869. The release does not include all pending features/changes on canary.

Core Changes
  • Ensure app-page reports stale ISR revalidation errors via onRequestError (#​92282)
  • Fix [Bug]: manifest.ts breaks HMR in Next.js 16.2 (#​91981 through #​92273)
  • Deduplicate output assets and detect content conflicts on emit (#​92292)
  • Fix styled-jsx race condition: styles lost due to concurrent rendering (#​92459)
  • turbo-tasks-backend: stability fixes for task cancellation and error handling (#​92254)
Credits

Huge thanks to @​icyJoseph, @​sokra, @​wbinnssmith, @​eps1lon and @​ztanner for helping!

vercel/turborepo (@​turbo/gen)

v2.9.5: Turborepo v2.9.5

Compare Source

What's Changed
create-turbo
@​turbo/telemetry
Changelog
New Contributors

Full Changelog: vercel/turborepo@v2.9.4...v2.9.5

v2.9.4: Turborepo v2.9.4

Compare Source

What's Changed
@​turbo/codemod
Examples
Changelog
New Contributors

Full Changelog: vercel/turborepo@v2.9.3...v2.9.4

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v4.1.3

Compare Source

   🚀 Experimental Features
   🐞 Bug Fixes
    View changes on GitHub
changesets/action (changesets/action)

v1.7.0

Compare Source

Minor Changes
  • #​564 935fe87 Thanks @​Andarist! - Automatically use the GitHub-provided token to allow most users to avoid explicit GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} configuration.
Patch Changes
  • #​545 54220dd Thanks @​ryanbas21! - The .npmrc generation now intelligently handles both traditional NPM token authentication and trusted publishing scenarios by only appending the auth token when NPM_TOKEN is defined. This prevents 'undefined' from being written to the registry configuration when using OIDC tokens from GitHub Actions trusted publishing.

  • #​563 6af4a7e Thanks @​Andarist! - Don't error on already committed symlinks and executables that stay untouched

v1.6.0

Compare Source

Minor Changes
vercel/next.js (eslint-config-next)

v16.2.3

Compare Source

v16.2.2

Compare Source

v16.2.1

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • docs: post release amends (#​91715)
  • docs: fix broken Activity Patterns demo link in preserving UI state guide (#​91698)
  • Fix adapter outputs for dynamic metadata routes (#​91680)
  • Turbopack: fix webpack loader runner layer (#​91727)
  • Fix server actions in standalone mode with cacheComponents (#​91711)
  • turbo-persistence: remove Unmergeable mmap advice (#​91713)
  • Fix layout segment optimization: move app-page imports to server-utility transition (#​91701)
  • Turbopack: lazy require metadata and handle TLA (#​91705)
  • [turbopack] Respect {eval:true} in worker_threads constructors (#​91666)
Credits

Huge thanks to @​icyJoseph, @​abhishekmardiya, @​ijjk, @​mischnic, @​unstubbable, @​sokra, and @​lukesandberg for helping!

v16.2.0

Compare Source

v16.1.7

Compare Source

v16.1.6

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • Upgrade to swc 54 (#​88207)
  • implement LRU cache with invocation ID scoping for minimal mode response cache (#​88509)
  • tweak LRU sentinel key (#​89123)
Credits

Huge thanks to @​mischnic, @​wyattjoh, and @​ztanner for helping!

v16.1.5

Compare Source

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472
https://vercel.com/changelog/summary-of-cve-2026-23864

v16.1.4

Compare Source

v16.1.3

Compare Source

lucide-icons/lucide (lucide-react)

v1.8.0: Version 1.8.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.7.0...1.8.0

vercel/next.js (next)

v16.2.3

Compare Source

pnpm/pnpm (pnpm)

v10.33.0

Compare Source

v10.32.1: pnpm 10.32.1

Compare Source

Patch Changes

  • Fix a regression where pnpm-workspace.yaml without a packages field caused all directories to be treated as workspace projects. This broke projects that use pnpm-workspace.yaml only for settings (e.g. minimumReleaseAge) without defining workspace packages #​10909.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx

v10.32.0: pnpm 10.32

Compare Source

Minor Changes

  • Added --all flag to pnpm approve-builds that approves all pending builds without interactive prompts #​10136.

Patch Changes

  • Reverted change related to setting explicitly the npm config file path, which caused regressions.
  • Reverted fix related to lockfile-include-tarball-url. Fixes #​10915.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Stackblitz
Workleap Nx

v10.31.0

Compare Source

v10.30.3

Compare Source

v10.30.2

Compare Source

v10.30.1: pnpm 10.30.1

Compare Source

Patch Changes

  • Use the /-/npm/v1/security/audits/quick endpoint as the primary audit endpoint, falling back to /-/npm/v1/security/audits when it fails #​10649.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Workleap
Stackblitz Nx

v10.30.0: pnpm 10.30

Compare Source

Minor Changes

  • pnpm why now shows a reverse dependency tree. The searched package appears at the root with its dependents as branches, walking back to workspace roots. This replaces the previous forward-tree output which was noisy and hard to read for deeply nested dependencies.

Patch Changes

  • Revert pnpm why dependency pruning to prefer correctness over memory consumption. Reverted PR: #​7122.
  • Optimize pnpm why and pnpm list performance in workspaces with many importers by sharing the dependency graph and materialization cache across all importers instead of rebuilding them independently for each one #​10596.

Platinum Sponsors

Bit

Gold Sponsors

Sanity Discord Vite
SerpApi CodeRabbit Workleap
Stackblitz Nx

v10.29.3

Compare Source

v10.29.2

Compare Source

v10.29.1: pnpm 10.29.1

Compare Source

Minor Changes

  • The pnpm dlx / pnpx command now supports the catalog: protocol. Example: pnpm dlx shx@catalog:.
  • Support configuring auditLevel in the pnpm-workspace.yaml file #​10540.
  • Support bare workspace: protocol without version specifier. It is now treated as workspace:* and resolves to the concrete version during publish #​10436.

Patch Changes

  • Fixed pnpm list --json returning incorrect paths when using global virtual store #​10187.

  • Fix pnpm store path and pnpm store status using workspace root for path resolution when storeDir is relative #​10290.

  • Fixed pnpm run -r failing with "No projects matched the filters" when an empty pnpm-workspace.yaml exists #​10497.

  • Fixed a bug where catalogMode: strict would write the literal string "catalog:" to pnpm-workspace.yaml instead of the resolved version specifier when re-adding an existing catalog dependency #​10176.

  • Fixed the documentation URL shown in pnpm completion --help to point to the correct page at https://pnpm.io/completion #​10281.

  • Skip local file: protocol dependencies during pnpm fetch. This fixes an issue where pnpm fetch would fail in Docker builds when local directory dependencies were not available #​10460.

  • Fixed pnpm audit --json to respect the --audit-level setting for both exit code and output filtering #​10540.

  • update tar to version 7.5.7 to fix s


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Jan 26, 2026

⚠️ No Changeset found

Latest commit: da21142

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@vercel
Copy link
Copy Markdown

vercel bot commented Jan 26, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
ts-ghost-docs Ready Ready Preview, Comment Apr 12, 2026 10:05am

@greptile-apps
Copy link
Copy Markdown

greptile-apps bot commented Jan 26, 2026

Required label not found on this PR.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from f5ea641 to acd75ae Compare January 26, 2026 14:54
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from acd75ae to 6cecebc Compare January 27, 2026 00:47
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 6cecebc to 798387f Compare January 27, 2026 22:10
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 798387f to 69ebb97 Compare January 29, 2026 18:49
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 69ebb97 to 0903095 Compare January 30, 2026 12:46
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 0903095 to 04ae517 Compare January 31, 2026 00:25
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 04ae517 to 2895ff3 Compare January 31, 2026 20:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 2895ff3 to 29591f7 Compare February 2, 2026 17:12
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 29591f7 to 9298ada Compare February 2, 2026 23:43
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9298ada to b538dc4 Compare February 6, 2026 08:42
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from b538dc4 to 3a2b4f9 Compare February 7, 2026 02:04
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 3a2b4f9 to 96810e2 Compare February 7, 2026 12:48
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 96810e2 to 36c9582 Compare February 8, 2026 13:10
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c581b3c to c63560a Compare February 16, 2026 13:06
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c63560a to e0164da Compare February 17, 2026 02:31
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from e0164da to 147ef1a Compare February 17, 2026 17:32
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 147ef1a to 3a34dbb Compare February 17, 2026 22:47
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 3a34dbb to 82bf27f Compare February 19, 2026 01:52
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 82bf27f to 5186dbf Compare February 19, 2026 21:39
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 5186dbf to 9bd9347 Compare February 20, 2026 10:02
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9bd9347 to 3a68f83 Compare February 20, 2026 13:59
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 3a68f83 to 000ea1d Compare February 20, 2026 18:12
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 000ea1d to d98af0b Compare February 21, 2026 13:37
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from d98af0b to f75b6a0 Compare February 22, 2026 17:42
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from f75b6a0 to 32a6df0 Compare February 23, 2026 01:32
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 32a6df0 to d8e70cb Compare February 26, 2026 21:58
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from d8e70cb to 0eae644 Compare February 27, 2026 01:36
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 0eae644 to 0449b74 Compare February 28, 2026 17:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants