Skip to content

Comments

fix(deps): update patch-updates (patch)#399

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/patch-patch
Open

fix(deps): update patch-updates (patch)#399
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/patch-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 25, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
@types/node (source) ^22.19.3 → ^22.19.11 age confidence devDependencies patch
esbuild ^0.27.1 → ^0.27.3 age confidence dependencies patch
fsevents@1 ^2.0.0 → ^2.0.7 age confidence pnpm.overrides patch
node (source) v24.11.0 → 24.11.1 age confidence patch
pnpm (source) 10.26.1 → 10.26.2 age confidence packageManager patch

Release Notes

evanw/esbuild (esbuild)

v0.27.3

Compare Source

  • Preserve URL fragments in data URLs (#​4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
<html>
  <head><link rel="stylesheet" href="icons.css"></head>
  <body><div class="triangle"></div></body>
</html>

    • icons.css:

      .triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url(./triangle.svg#x);
}

    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
  <defs>
    <clipPath id="x">
      <path d="M0 0H10V10Z"/>
    </clipPath>
  </defs>
</svg>

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
.triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
}

  • Parse and print CSS @scope rules (#​4322)

    This release includes dedicated support for parsing @scope rules in CSS. These rules include optional "start" and "end" selector lists. One important consequence of this is that the local/global status of names in selector lists is now respected, which improves the correctness of esbuild's support for CSS modules. Minification of selectors inside @scope rules has also improved slightly.

    Here's an example:

    /* Original code */
@&#8203;scope (:global(.foo)) to (:local(.bar)) {
  .bar {
    color: red;
  }
}

/* Old output (with --loader=local-css --minify) */
@&#8203;scope (:global(.foo)) to (:local(.bar)){.o{color:red}}

/* New output (with --loader=local-css --minify) */
@&#8203;scope(.foo)to (.o){.o{color:red}}

  • Fix a minification bug with lowering of for await (#​4378, #​4385)

    This release fixes a bug where the minifier would incorrectly strip the variable in the automatically-generated catch clause of lowered for await loops. The code that generated the loop previously failed to mark the internal variable references as used.

  • Update the Go compiler from v1.25.5 to v1.25.7 (#​4383, #​4388)

    This PR was contributed by @​MikeWillCook.

fsevents/fsevents (fsevents@1)

v2.0.7

Compare Source

v2.0.6: Release NAPI v2.0.6

Compare Source

Include essential files only.

v2.0.5: Release NAPI v2.0.5

Compare Source

v2.0.4: Release NAPI v2.0.4

Compare Source

v2.0.3: Release NAPI v2.0.3

Compare Source

Moved NAPI version out of experimental.

v2.0.1: deprecated

Compare Source

Fixing the API for chokidar since it was calling FSEvents as a constructor

nodejs/node (node)

v24.11.1

Compare Source

pnpm/pnpm (pnpm)

v10.26.2: pnpm 10.26.2

Compare Source

Patch Changes

  • Improve error message when a package version exists but does not meet the minimumReleaseAge constraint. The error now clearly states that the version exists and shows a human-readable time since release (e.g., "released 6 hours ago") #​10307.

  • Fix installation of Git dependencies using annotated tags #​10335.

    Previously, pnpm would store the annotated tag object's SHA in the lockfile instead of the actual commit SHA. This caused ERR_PNPM_GIT_CHECKOUT_FAILED errors because the checked-out commit hash didn't match the stored tag object hash.

  • Binaries of runtime engines (Node.js, Deno, Bun) are written to node_modules/.bin before lifecycle scripts (install, postinstall, prepare) are executed #​10244.

  • Try to avoid making network calls with preferOffline #​10334.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

Configuration

📅 Schedule: Branch creation - Between 09:00 PM and 09:59 PM, only on Thursday ( * 21 * * 4 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/patch-patch branch from e9c01b1 to c906620 Compare December 31, 2025 17:48
@renovate renovate bot force-pushed the renovate/patch-patch branch 4 times, most recently from 3c5f0b3 to 9d16657 Compare January 15, 2026 21:52
@renovate renovate bot force-pushed the renovate/patch-patch branch 4 times, most recently from 538103f to 8e15c35 Compare February 8, 2026 01:12
@renovate renovate bot force-pushed the renovate/patch-patch branch from 8e15c35 to 5639648 Compare February 10, 2026 17:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants