Skip to content

chore(deps): update external fixes - #1247

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate-external-fixes
Aug 4, 2026
Merged

chore(deps): update external fixes#1247
renovate[bot] merged 1 commit into
mainfrom
renovate-external-fixes

Conversation

@renovate

@renovate renovate Bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
lint-staged 17.0.8 → 17.1.0 age confidence
nx (source) 23.0.2 → 23.1.0 age confidence
semantic-release 25.0.7 → 25.0.8 age confidence
sinon (source) 22.0.0 → 22.1.0 age confidence

Release Notes

lint-staged/lint-staged (lint-staged)

v17.1.0

Compare Source

Minor Changes

  • #​1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

    Before:

    Size of node_modules/ after installing: 1561.7 kB with 29 packages.

    Fancy interactive spinners, but output dynamically changes:

    ✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...

    After:

    Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

    Simpler but more explicit output:

    ⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write

✔ oxfmt --write
✔ oxlint --fix

✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!
Patch Changes

  • #​1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

  • #​1818 efb23a2 - Console output colors are enabled/disabled more consistently.

  • #​1818 26112a1 - Failed JS function tasks now properly kill other tasks, unless --continue-on-error is used. Previously their failure didn't affect other tasks.

nrwl/nx (nx)

v23.1.0

Compare Source

23.1.0 (2026-07-13)
🚀 Features
🩹 Fixes
  • angular: resolve esbuild option paths relative to the workspace root (#​36017, #​35936)
  • angular: bump prescribed angular version to 22.0.4 (#​36130)
  • angular: make nx migrate to Angular 22 leave a buildable workspace (#​36183)
  • angular-rspack: surface compilation failures as build errors and release resources on teardown (#​36018)
  • bundling: restore preprocessor extensions in postcss normalizeOp… (#​36057, #​35854)
  • bundling: prevent TS6059 when an app imports a workspace lib from source (#​36217, #​35017)
  • core: avoid tsconfig path false positives for sibling project roots (#​35796, #​35795, #​35786)
  • core: do not write minimumReleaseAgeExclude during nx migrate (#​36045)
  • core: do not crash nx migrate on non-semver dependency specifiers (#​36051)
  • core: format AI-edited files after agentic migrations (#​36064)
  • core: prefer module.registerHooks to avoid DEP0205 deprecation warning (#​36081)
  • core: prevent nx migrate crash when include=optional filters out the target package (#​36087)
  • core: make nx migrate honor preapproved packages and emit a valid temp workspace (#​36086)
  • core: skip daemon project-graph recompute on no-op file rewrites (#​36082)
  • core: prevent the TUI from auto-selecting a completed task when a batch finishes (#​35833)
  • core: deregister pseudo-terminal exit handlers when tasks finish (#​36115)
  • core: prevent path traversal / zip-slip in self-hosted remote cache (#​36116)
  • core: respect explicit --nxCloud=skip for AI agents in create-nx-workspace (#​36131)
  • core: warn when the self-hosted remote cache disables TLS verification (NXC-4593) (#​36132, #​36116)
  • core: throw actionable error when pnpm .modules.yaml is missing (#​35666, #​35635)
  • core: support ${configDir} in tsconfig path alias resolution (#​36037, #​35804)
  • core: prevent non-npm devEngines pin from breaking npm registry lookups (#​36020, #​35815)
  • core: clarify nx sync remediation messaging and surface spinner output in non-tty (#​35747)
  • core: exclude direct-dependency overrides from generated package.json (#​36040, #​35675)
  • core: apply target defaults when project.json overrides an inferred run-commands target with different commands (#​36142, #​36067)
  • core: run the nx.bat wrapper for dot-nx setup on windows (#​36048)
  • core: refine the end-of-run performance report recommendations (#​36127, #​36077)
  • core: speed up bun lockfile parsing (#​36198)
  • core: set NX_CLI_SET in batch worker processes (#​36214, #​36210)
  • core: use standard utm params on performance-report links (#​36226)
  • core: preserve comments in catalog YAML updates (#​35733)
  • core: box JsonFileSet payload to keep HashInstruction small (#​36247, #​35248, #​36244, #​36152)
  • core: share workspace fileset hash results instead of deep-cloning per task (#​36244, #​34971, #​34942)
  • core: replace per-input visited clones with undo-log scoping in hash planner (#​36248, #​35071, #​36152, #​34971, #​36244, #​35248, #​36247)
  • core: intern hash instructions in a pool and plan with id lists (#​36249, #​35071, #​36152, #​36248)
  • core: add trailing space after performance report popup title (#​36259)
  • core: prevent TUI hint popup from permanently stealing focus (#​36256)
  • core: detect Codex sandbox on Linux to disable daemon and plugin isolation (#​36273)
  • core: skip projects-filtered targetDefaults when resolved without a project (#​36281, #​36049)
  • core: size TUI bottom bar reservations to the actual help text (#​36261)
  • core: defer unresolved spread tokens when merging intermediate target configurations (#​36283, #​36235)
  • core: omit peer dependencies when installing packages to a temp dir (#​36295)
  • core: include root package.json dependencies for '.'-rooted projects (#​36291, #​33791, #​36290)
  • core: reduce task hashing memory usage on large workspaces (#​36267, #​36152)
  • devkit: restore prettier v2 support in formatFiles (#​36193)
  • gradle: track copy/sync and AGP merge task outputs in dependent task inputs (#​36099)
  • gradle: correct change-plugin-version-0-1-23 migration to nx 23.1.0-beta.4 (#​36103, #​36100)
  • gradle: make project graph reports machine-portable (#​36210, #​35388)
  • gradle: derive dependent-task input extensions from the task model instead of scanning disk (#​36211)
  • graph: prevent project details web view top from being clipped (#​36154)
  • js: prevent doubled output paths in buildable library path mappings (#​36138, #​36079)
  • js: scope incremental type-check .tsbuildinfo per project (#​36137, #​36113)
  • js: preserve npm allowScripts allowlist in pruned package.json (#​36016, #​35931)
  • js: resolve catalog references in pruned package.json output (#​35805, #​35419)
  • js: restore the pre-TypeScript 6 default of loading all @​types (#​36163)
  • js: avoid import locator unicode position panic (#​36133, #​36128)
  • js: prevent Windows TS6059 rootDir errors in tsc builds (#​36184, #​35696)
  • js: preserve esModuleInterop default when migrating to TypeScript 6 (#​36225)
  • js: keep tsconfigs compiling and config files loading under TypeScript 6 (#​36245)
  • js: wait for process tree exit when stopping node executor tasks (#​36230)
  • js: pin tsconfig root dir even when it matches the config directory (#​36272, #​3175)
  • js: pin rootDir on composite tsconfigs for ts6 (ts-jest strips composite) (#​36285, #​36272)
  • js: bump @​swc/cli to 0.8.1 to patch critical decompress advisory (#​36294)
  • linter: install angular-eslint when converting Angular configs to flat config (#​36160)
  • linter: run typescript-eslint v8 rule migrations for scoped-only workspaces (#​36180)
  • linter: harden the ESLint v9 flat-config migration (#​36204)
  • linter: reconcile angular-eslint v22 breaking changes in flat config (#​36200)
  • linter: update terminal cli regex for local-dist build (#​36201, #​36199)
  • maven: de-flake maven e2e by dropping -X debug forks and widening timeout (#​36091)
  • misc: bump happy-dom, tmp, and form-data to patched versions (#​36013)
  • misc: bump axios to 1.16.1 (#​36120)
  • misc: use default import for chalk in @​nx/workspace output.ts (#​35523, #​35521, #​34111, #​21201, #​26667)
  • misc: remove duplicate nx init cloud-prompt telemetry event (#​36145)
  • misc: export @​nx/esbuild/executors entry point (#​36282)
  • nx-cloud: use standard utm params on cloud prompt links (#​36227, #​36226)
  • nx-dev: keep mobile sidebar toggle clear of the conference banner (#​36047)
  • nx-dev: run next-sitemap directly instead of via pnpm (#​36054)
  • nx-dev: remove empty SaaS and Mobile template filters (#​36085)
  • react: skip react 19 update for workspaces using remix v2 (#​36065, #​418)
  • react: reserve ports in rspack e2e test to avoid default port collisions (#​36090)
  • react: bump eslint-plugin-react below 7.35 for ESLint 9 compatibility (#​36161)
  • react: stop pinning eslint-plugin-react in generated projects (#​36168, #​36161)
  • react: validate typecheck in the React 19 migration (#​36186)
  • ⚠️ release: stop breaking change changelog entry from swallowing trailing PR body (#​36052, #​35910, #​33070)
  • release: widen release e2e timeouts to absorb pre-version dlx install (#​36092)
  • repo: trust wix/brew tap so macOS detox CI can install applesimutils (#​36146)
  • rsbuild: bump @​rsbuild/plugin-sass with @​rsbuild/core for the v2 migration (#​36162)
  • rspack: use contenthash for chunkFilename to prevent stale chunks (#​36136, #​2292, #​36014)
  • testing: keep ts-jest resolving exports-only libs on typescript < 6 (#​36089)
  • testing: disable justInTimeCompile for webpack Cypress component testing (#​36185)
  • testing: update eslint-plugin-cypress for ESLint 9 compatibility (#​36202)
  • testing: template the e2e config for fresh projects instead of ast-parsing it (#​36304)
  • vite: widen vite ts-solution e2e build timeouts for cold multi-lib build (#​36093)
  • vite: detect @​vitejs/plugin-vue2 (vite:vue2) for vue-tsc typecheck (#​36125, #​36094)
  • vite: update deprecation docs link (#​36070, #​36053)
  • vitest: apply mode-based config consistently in the test executor (#​36041, #​35196)
  • vitest: support passing mode through to vitest (#​35069)
  • web: run executor/plugin/generator commands with the workspace package manager (#​36021, #​35950)
  • webpack: prevent TS6059 when a tsc build bundles a workspace lib (#​36188, #​35017)
⚠️ Breaking Changes
  • angular: support angular v22 (#​35851, #​35910)
    Angular v19 is no longer supported.
  • linter: drop eslint v8 support (#​36006)
    ESLint v8 is no longer supported. Nx requires ESLint v9
    or later.
❤️ Thank You
semantic-release/semantic-release (semantic-release)

v25.0.8

Compare Source

Bug Fixes
  • handle potential null values in commit message and gitTags trimming (0a60004)
  • hide-sensitive: mask key/auth/webhook env vars (973d763)
  • mask sensitive environment variables and improve commit handling (#​4252) (1bfdc52)
  • prevent template evaluation syntax in branch expansion and tag formatting (f121540)
sinonjs/sinon (sinon)

v22.1.0

Compare Source

  • d36e921b
    fix: let returns override returnsArg (王胜)

    Signed-off-by: 王胜 <2318857637@​qq.com>

  • 40c4caa0
    fix: align restoreObject docs test with idempotent behavior (#​2745) (Julia Miller)

    restoreObject was made idempotent in #​2737 — it no longer throws
    for objects with no restorable methods. Updates the docs page
    and its corresponding test to reflect this.

  • a68dac19
    fix: throw a clear error when throwArg index equals the argument count (#​2743) (spokodev)
    • fix: throw a clear error when throwArg index equals the argument count

    spyCall.throwArg(pos) guarded with pos > this.args.length, so calling it
    with pos equal to the number of recorded arguments slipped past the guard
    and reached throw this.args[pos], throwing undefined instead of the
    intended TypeError. A thrown undefined cannot be inspected as an Error and
    is reported by test frameworks as no exception thrown.

    Use >= to match ensureArgs in behavior.js and the sibling callArg helpers,
    which already reject an out-of-range index with a clear error.

  • 9ea504e3
    feat: make sinon.restoreObject idempotent (#​2737) (Ilia Choly)

    Passing an object with no live fakes to restoreObject now restores
    nothing instead of throwing, giving it symmetry with sinon.restore()
    and sandbox.restore(). The strict "found no methods" check is retained
    for spy(object) and stub(object), which now use a dedicated
    walkObjectStrict export, while restoreObject uses the loose walkObject.
    Passing a falsy value still throws.

    Fixes #​2736

  • 4db4feff
    fix: preserve fake undefined argument validation (Vishal Kumar Singh)
  • 755a40d7
    fix: isolate callId counter per sandbox for parallel test support (Vishal Kumar Singh)

    The global callId counter in proxy-invoke.js caused calledImmediatelyBefore
    and calledImmediatelyAfter to fail when tests run in parallel with separate
    sandboxes. Each sandbox now maintains its own callId counter, passed through
    the spy/stub/fake creation chain via a context object.

    Fixes #​2472

Released by Morgan Roderick on 2026-07-20.

Configuration

📅 Schedule: (in timezone Europe/Zurich)

  • Branch creation
    • "after 2pm on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

This PR will trigger no release when merged.

@renovate
renovate Bot force-pushed the renovate-external-fixes branch from 0d2e300 to 0161c96 Compare August 4, 2026 00:05
@renovate
renovate Bot merged commit a12a162 into main Aug 4, 2026
7 checks passed
@renovate
renovate Bot deleted the renovate-external-fixes branch August 4, 2026 04:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@renovate-approve renovate-approve[bot] renovate-approve[bot] approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants