chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@fontsource/fira-mono (source)	^5.0.7 -> ^5.0.8
@types/node (source)	^18.17.3 -> ^18.17.4
@typescript-eslint/eslint-plugin	^6.2.1 -> ^6.3.0
@typescript-eslint/parser	^6.2.1 -> ^6.3.0
esbuild	^0.18.17 -> ^0.19.0
pnpm (source)	8.6.11 -> 8.6.12
sass	^1.64.2 -> ^1.65.1
vite (source)	^4.4.8 -> ^4.4.9

---

Release Notes

fontsource/font-files (@​fontsource/fira-mono)

v5.0.8

Compare Source

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v6.3.0

Compare Source

Bug Fixes

• eslint-plugin: [no-extra-parens] keep parens around call expression arguments when type arguments contain parens (#​7375) (38e5e4e)
• eslint-plugin: [no-restricted-imports] allow inline type qualifiers when allowTypeImports enabled (#​7379) (cc9a46d)

Features

• eslint-plugin: [prefer-nullish-coalescing] allow ignorePrimitives option to be true (#​7331) (dfcafae)

Reverts

• Revert "chore(deps): update dependency marked to v6" (#​7429) (7891a06), closes #​7429 #​7422

You can read about our versioning strategy and releases on our website.

6.2.1 (2023-07-31)

Bug Fixes

• eslint-plugin: [no-inferrable-types] apply also for parameter properties (#​7288) (67f93b1)
• scope-manager: correct decorators(.length) check in ClassVisitor for methods (#​7334) (abbb6c2)

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v6.3.0

Compare Source

Note: Version bump only for package @​typescript-eslint/parser

You can read about our versioning strategy and releases on our website.

6.2.1 (2023-07-31)

Note: Version bump only for package @​typescript-eslint/parser

You can read about our versioning strategy and releases on our website.

evanw/esbuild (esbuild)

v0.19.0

Compare Source

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.18.0 or ~0.18.0. See npm's documentation about semver for more information.

• Handle import paths containing wildcards (#​56, #​700, #​875, #​976, #​2221, #​2515)

  This release introduces wildcards in import paths in two places:

  • Entry points

    You can now pass a string containing glob-style wildcards such as ./src/*.ts as an entry point and esbuild will search the file system for files that match the pattern. This can be used to easily pass esbuild all files with a certain extension on the command line in a cross-platform way. Previously you had to rely on the shell to perform glob expansion, but that is obviously shell-dependent and didn't work at all on Windows. Note that to use this feature on the command line you will have to quote the pattern so it's passed verbatim to esbuild without any expansion by the shell. Here's an example:

    esbuild --minify "./src/*.ts" --outdir=out

    Specifically the * character will match any character except for the / character, and the /**/ character sequence will match a path separator followed by zero or more path elements. Other wildcard operators found in glob patterns such as ? and [...] are not supported.

  • Run-time import paths

    Import paths that are evaluated at run-time can now be bundled in certain limited situations. The import path expression must be a form of string concatenation and must start with either ./ or ../. Each non-string expression in the string concatenation chain becomes a wildcard. The * wildcard is chosen unless the previous character is a /, in which case the /**/* character sequence is used. Some examples:

    // These two forms are equivalent
    const json1 = await import('./data/' + kind + '.json')
    const json2 = await import(`./data/${kind}.json`)

    This feature works with require(...) and import(...) because these can all accept run-time expressions. It does not work with import and export statements because these cannot accept run-time expressions. If you want to prevent esbuild from trying to bundle these imports, you should move the string concatenation expression outside of the require(...) or import(...). For example:

    // This will be bundled
    const json1 = await import('./data/' + kind + '.json')
    
    // This will not be bundled
    const path = './data/' + kind + '.json'
    const json2 = await import(path)

    Note that using this feature means esbuild will potentially do a lot of file system I/O to find all possible files that might match the pattern. This is by design, and is not a bug. If this is a concern, I recommend either avoiding the /**/ pattern (e.g. by not putting a / before a wildcard) or using this feature only in directory subtrees which do not have many files that don't match the pattern (e.g. making a subdirectory for your JSON files and explicitly including that subdirectory in the pattern).

• Path aliases in tsconfig.json no longer count as packages (#​2792, #​3003, #​3160, #​3238)

  Setting --packages=external tells esbuild to make all import paths external when they look like a package path. For example, an import of ./foo/bar is not a package path and won't be external while an import of foo/bar is a package path and will be external. However, the paths field in tsconfig.json allows you to create import paths that look like package paths but that do not resolve to packages. People do not want these paths to count as package paths. So with this release, the behavior of --packages=external has been changed to happen after the tsconfig.json path remapping step.

• Use the local-css loader for .module.css files by default (#​20)

  With this release the css loader is still used for .css files except that .module.css files now use the local-css loader. This is a common convention in the web development community. If you need .module.css files to use the css loader instead, then you can override this behavior with --loader:.module.css=css.

v0.18.20

Compare Source

• Support advanced CSS @import rules (#​953, #​3137)

  CSS @import statements have been extended to allow additional trailing tokens after the import path. These tokens sort of make the imported file behave as if it were wrapped in a @layer, @supports, and/or @media rule. Here are some examples:

  @​import url(foo.css);
  @​import url(foo.css) layer;
  @​import url(foo.css) layer(bar);
  @​import url(foo.css) layer(bar) supports(display: flex);
  @​import url(foo.css) layer(bar) supports(display: flex) print;
  @​import url(foo.css) layer(bar) print;
  @​import url(foo.css) supports(display: flex);
  @​import url(foo.css) supports(display: flex) print;
  @​import url(foo.css) print;

  You can read more about this advanced syntax here. With this release, esbuild will now bundle @import rules with these trailing tokens and will wrap the imported files in the corresponding rules. Note that this now means a given imported file can potentially appear in multiple places in the bundle. However, esbuild will still only load it once (e.g. on-load plugins will only run once per file, not once per import).

v0.18.19

Compare Source

• Implement composes from CSS modules (#​20)

  This release implements the composes annotation from the CSS modules specification. It provides a way for class selectors to reference other class selectors (assuming you are using the local-css loader). And with the from syntax, this can even work with local names across CSS files. For example:

  // app.js
  import { submit } from './style.css'
  const div = document.createElement('div')
  div.className = submit
  document.body.appendChild(div)

  /* style.css */
  .button {
    composes: pulse from "anim.css";
    display: inline-block;
  }
  .submit {
    composes: button;
    font-weight: bold;
  }

  /* anim.css */
  @​keyframes pulse {
    from, to { opacity: 1 }
    50% { opacity: 0.5 }
  }
  .pulse {
    animation: 2s ease-in-out infinite pulse;
  }

  Bundling this with esbuild using --bundle --outdir=dist --loader:.css=local-css now gives the following:

  (() => {
    // style.css
    var submit = "anim_pulse style_button style_submit";
  
    // app.js
    var div = document.createElement("div");
    div.className = submit;
    document.body.appendChild(div);
  })();

  /* anim.css */
  @​keyframes anim_pulse {
    from, to {
      opacity: 1;
    }
    50% {
      opacity: 0.5;
    }
  }
  .anim_pulse {
    animation: 2s ease-in-out infinite anim_pulse;
  }
  
  /* style.css */
  .style_button {
    display: inline-block;
  }
  .style_submit {
    font-weight: bold;
  }

  Import paths in the composes: ... from syntax are resolved using the new composes-from import kind, which can be intercepted by plugins during import path resolution when bundling is enabled.

  Note that the order in which composed CSS classes from separate files appear in the bundled output file is deliberately undefined by design (see the specification for details). You are not supposed to declare the same CSS property in two separate class selectors and then compose them together. You are only supposed to compose CSS class selectors that declare non-overlapping CSS properties.

  Issue #​20 (the issue tracking CSS modules) is esbuild's most-upvoted issue! With this change, I now consider esbuild's implementation of CSS modules to be complete. There are still improvements to make and there may also be bugs with the current implementation, but these can be tracked in separate issues.

• Fix non-determinism with tsconfig.json and symlinks (#​3284)

  This release fixes an issue that could cause esbuild to sometimes emit incorrect build output in cases where a file under the effect of tsconfig.json is inconsistently referenced through a symlink. It can happen when using npm link to create a symlink within node_modules to an unpublished package. The build result was non-deterministic because esbuild runs module resolution in parallel and the result of the tsconfig.json lookup depended on whether the import through the symlink or not through the symlink was resolved first. This problem was fixed by moving the realpath operation before the tsconfig.json lookup.

• Add a hash property to output files (#​3084, #​3293)

  As a convenience, every output file in esbuild's API now includes a hash property that is a hash of the contents field. This is the hash that's used internally by esbuild to detect changes between builds for esbuild's live-reload feature. You may also use it to detect changes between your own builds if its properties are sufficient for your use case.

  This feature has been added directly to output file objects since it's just a hash of the contents field, so it makes conceptual sense to store it in the same location. Another benefit of putting it there instead of including it as a part of the watch mode API is that it can be used without watch mode enabled. You can use it to compare the output of two independent builds that were done at different times.

  The hash algorithm (currently XXH64) is implementation-dependent and may be changed at any time in between esbuild versions. If you don't like esbuild's choice of hash algorithm then you are welcome to hash the contents yourself instead. As with any hash algorithm, note that while two different hashes mean that the contents are different, two equal hashes do not necessarily mean that the contents are equal. You may still want to compare the contents in addition to the hashes to detect with certainty when output files have been changed.

• Avoid generating duplicate prefixed declarations in CSS (#​3292)

  There was a request for esbuild's CSS prefixer to avoid generating a prefixed declaration if a declaration by that name is already present in the same rule block. So with this release, esbuild will now avoid doing this:

  /* Original code */
  body {
    backdrop-filter: blur(30px);
    -webkit-backdrop-filter: blur(45px);
  }
  
  /* Old output (with --target=safari12) */
  body {
    -webkit-backdrop-filter: blur(30px);
    backdrop-filter: blur(30px);
    -webkit-backdrop-filter: blur(45px);
  }
  
  /* New output (with --target=safari12) */
  body {
    backdrop-filter: blur(30px);
    -webkit-backdrop-filter: blur(45px);
  }

  This can result in a visual difference in certain cases (for example if the browser understands blur(30px) but not blur(45px), it will be able to fall back to blur(30px)). But this change means esbuild now matches the behavior of Autoprefixer which is probably a good representation of how people expect this feature to work.

v0.18.18

Compare Source

• Fix asset references with the --line-limit flag (#​3286)

  The recently-released --line-limit flag tells esbuild to terminate long lines after they pass this length limit. This includes automatically wrapping long strings across multiple lines using escaped newline syntax. However, using this could cause esbuild to generate incorrect code for references from generated output files to assets in the bundle (i.e. files loaded with the file or copy loaders). This is because esbuild implements asset references internally using find-and-replace with a randomly-generated string, but the find operation fails if the string is split by an escaped newline due to line wrapping. This release fixes the problem by not wrapping these strings. This issue affected asset references in both JS and CSS files.

• Support local names in CSS for @keyframe, @counter-style, and @container (#​20)

  This release extends support for local names in CSS files loaded with the local-css loader to cover the @keyframe, @counter-style, and @container rules (and also animation, list-style, and container declarations). Here's an example:

  @​keyframes pulse {
    from, to { opacity: 1 }
    50% { opacity: 0.5 }
  }
  @​counter-style moon {
    system: cyclic;
    symbols: 🌕 🌖 🌗 🌘 🌑 🌒 🌓 🌔;
  }
  @​container squish {
    li { float: left }
  }
  ul {
    animation: 2s ease-in-out infinite pulse;
    list-style: inside moon;
    container: squish / size;
  }

  With the local-css loader enabled, that CSS will be turned into something like this (with the local name mapping exposed to JS):

  @​keyframes stdin_pulse {
    from, to {
      opacity: 1;
    }
    50% {
      opacity: 0.5;
    }
  }
  @​counter-style stdin_moon {
    system: cyclic;
    symbols: 🌕 🌖 🌗 🌘 🌑 🌒 🌓 🌔;
  }
  @​container stdin_squish {
    li {
      float: left;
    }
  }
  ul {
    animation: 2s ease-in-out infinite stdin_pulse;
    list-style: inside stdin_moon;
    container: stdin_squish / size;
  }

  If you want to use a global name within a file loaded with the local-css loader, you can use a :global selector to do that:

  div {
    /* All symbols are global inside this scope (i.e.
     * "pulse", "moon", and "squish" are global below) */
    :global {
      animation: 2s ease-in-out infinite pulse;
      list-style: inside moon;
      container: squish / size;
    }
  }

  If you want to use @keyframes, @counter-style, or @container with a global name, make sure it's in a file that uses the css or global-css loader instead of the local-css loader. For example, you can configure --loader:.module.css=local-css so that the local-css loader only applies to *.module.css files.

• Support strings as keyframe animation names in CSS (#​2555)

  With this release, esbuild will now parse animation names that are specified as strings and will convert them to identifiers. The CSS specification allows animation names to be specified using either identifiers or strings but Chrome only understands identifiers, so esbuild will now always convert string names to identifier names for Chrome compatibility:

  /* Original code */
  @​keyframes "hide menu" {
    from { opacity: 1 }
    to { opacity: 0 }
  }
  menu.hide {
    animation: 0.5s ease-in-out "hide menu";
  }
  
  /* Old output */
  @​keyframes "hide menu" { from { opacity: 1 } to { opacity: 0 } }
  menu.hide {
    animation: 0.5s ease-in-out "hide menu";
  }
  
  /* New output */
  @​keyframes hide\ menu {
    from {
      opacity: 1;
    }
    to {
      opacity: 0;
    }
  }
  menu.hide {
    animation: 0.5s ease-in-out hide\ menu;
  }

pnpm/pnpm (pnpm)

v8.6.12

Compare Source

Patch Changes

• Make the error message friendlier when a user attempts to run a command that does not exist #​6887.
• pnpm patch should work correctly when shared-workspace-file is set to false #​6885.
• pnpm env use should retry deleting the previous Node.js executable #​6587.
• pnpm dlx should not print an error stack when the underlying script execution fails #​6698.
• When showing the download progress of large tarball files, always display the same number of digits after the decimal point #​6901.
• Report download progress less frequently to improve performance #​6906.
• pnpm install --frozen-lockfile --lockfile-only should fail if the lockfile is not up to date with the package.json files #​6913.

Our Gold Sponsors

Our Silver Sponsors

sass/dart-sass (sass)

v1.65.1

Compare Source

• Update abs-percent deprecatedIn version to 1.65.0.

v1.65.0

Compare Source

• All functions defined in CSS Values and Units 4 are now parsed as calculation
  objects: round(), mod(), rem(), sin(), cos(), tan(), asin(),
  acos(), atan(), atan2(), pow(), sqrt(), hypot(), log(), exp(),
  abs(), and sign().

• Deprecate explicitly passing the % unit to the global abs() function. In
  future releases, this will emit a CSS abs() function to be resolved by the
  browser. This deprecation is named abs-percent.

vitejs/vite (vite)

v4.4.9

Compare Source

• chore: fix eslint warnings (#​14031) (4021a0e), closes #​14031
• chore(deps): update all non-major dependencies (#​13938) (a1b519e), closes #​13938
• fix: dynamic import vars ignored warning (#​14006) (4479431), closes #​14006
• fix(build): silence warn dynamic import module when inlineDynamicImports true (#​13970) (7a77aaf), closes #​13970
• perf: improve build times and memory utilization (#​14016) (9d7d45e), closes #​14016
• perf: replace startsWith with === (#​14005) (f5c1224), closes #​14005

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.