chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
lint-staged	13.2.2 → 13.3.0
pump	3.0.0 → 3.0.4
simple-git (source)	3.18.0 → 3.36.0
vitest (source)	0.30.1 → 0.34.6

---

Release Notes

lint-staged/lint-staged (lint-staged)

v13.3.0

Compare Source

Bug Fixes

• dependencies: update most dependencies (7443870)
• detect duplicate redundant braces in pattern (d895aa8)

Features

• dependencies: update listr2@​6.6.0 (09844ca)

v13.2.3

Compare Source

Bug Fixes

• the --diff option implies --no-stash (66a716d)

mafintosh/pump (pump)

v3.0.4

Compare Source

v3.0.3

Compare Source

v3.0.2

Compare Source

v3.0.1

Compare Source

steveukx/git-js (simple-git)

v3.36.0

Compare Source

Minor Changes

• 89a2294: Extend known exploitable configuration keys and per-task environment variables.

  Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

  Thanks to @​zebbern for identifying the need to block core.fsmonitor.
  Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

• 1ad57e8: Remove conflicting node:buffer import
• Updated dependencies [89a2294]
• Updated dependencies [675570a]
  • @​simple-git/argv-parser@​1.1.0
  • @​simple-git/args-pathspec@​1.0.3

v3.35.2

Compare Source

Patch Changes

• 0cf9d8c: Improvements for mono-repo publishing pipeline
• Updated dependencies [0cf9d8c]
  • @​simple-git/args-pathspec@​1.0.2
  • @​simple-git/argv-parser@​1.0.3

v3.35.1

Compare Source

Patch Changes

• 0de400e: Update monorepo version handling during publish
• Updated dependencies [0de400e]
  • @​simple-git/argv-parser@​1.0.2

v3.35.0

Compare Source

Minor Changes

• 3d8708b: Updating publish config

Patch Changes

• Updated dependencies [3d8708b]
  • @​simple-git/args-pathspec@​1.0.1
  • @​simple-git/argv-parser@​1.0.1

v3.34.0

Compare Source

Minor Changes

• 2b68331: Revised dependency tree to add helper modules as dependencies in main simple-git

Patch Changes

• 2e1f51c: Enhances scanning of arguments before passing on to the spawned child_process.

  Caters for -c flags prefixing the git task (used when setting global inline config) and suffixing with either -c, --config or --config-env. Detects git config operations that write to the configuration.

• Updated dependencies [2e1f51c]

  • @​simple-git/args-pathspec@​1.0.0
  • @​simple-git/argv-parser@​1.0.0

v3.33.0

Compare Source

Minor Changes

• a263635: Use pathspec wrappers for remote and local paths when running either git.clone or git.mirror to
  avoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.

Patch Changes

• e253a0d: Enhanced git -c checks in unsafe plugin.

  Thanks to @​JohannesLks for identifying the issue

v3.32.3

Compare Source

Patch Changes

• f704208: Enhanced protocol.allow checks in allowUnsafeExtProtocol handling.

  Thanks to @​CodeAnt-AI-Security for identifying the issue

v3.32.2

Compare Source

Patch Changes

• 8d02097: Enhanced clone unsafe switch detection.

v3.32.1

Compare Source

Patch Changes

• 23b070f: Fix regex for detecting unsafe clone options

  Thanks to @​stevenwdv for reporting this issue.

v3.32.0

Compare Source

Minor Changes

• 1effd8e: Enhances the unsafe plugin to block additional cases where the -u switch may be disguised
  along with other single character options.

  Thanks to @​JuHwiSang for identifying this as vulnerability.

Patch Changes

• d5fd4fe: Use task runner for logging use of deprecated (already no-op) functions.

v3.31.1

Compare Source

Patch Changes

• a44184f: Resolve NPM publish steps

v3.30.0

Compare Source

Minor Changes

• bc77774: Correctly identify current branch name when using git.status in a cloned empty repo.

  Previously git.status would report the current branch name as No. Thank you to @​MaddyGuthridge for identifying this issue.

v3.29.0

Compare Source

Minor Changes

• 240ec64: Support for absolute paths on Windows when using git.checkIngore, previously Windows would report
  paths with duplicate separators \\\\ between directories.

  Following this change all paths returned from git.checkIgnore will be normalized through node:path,
  this should have no impact on non-windows users where the git binary doesn't wrap absolute paths with
  quotes.

  Thanks to @​Maxim-Mazurok for reporting this issue.

• 9872f84: Support the use of git.branch(['--show-current']) to limit the branch list to only the current branch.

  Thanks to @​peterbe for pointing out the use-case.

• 5736bd8: Change to biome for lint and format

v3.28.0

Compare Source

Minor Changes

• 2adf47d: Allow repeating git options like {'--opt': ['value1', 'value2']}

v3.27.0

Compare Source

Minor Changes

• 52f767b: Add similarity to the DiffResultNameStatusFile interface used when fetching log/diff with the --name-status option.
• 739b0d9: Diff summary includes original name of renamed files when run wiht the --name-status option.
• bc90e7e: Fixes an issue with reporting name changes in the files array returned by git.status.
  Thank you @​mark-codesphere for the contribution.

Patch Changes

• 03e1c64: Resolve error in log parsing when fields have empty values.

v3.26.0

Compare Source

Minor Changes

• 28d545b: Upgrade build tools and typescript

v3.25.0

Compare Source

Minor Changes

• 0a5378d: Add support for parsing count-objects

Patch Changes

• 4aceb15: Upgrade dependencies and build tools

v3.24.0

Compare Source

Minor Changes

• c355317: Enable the use of a two part custom binary

v3.23.0

Compare Source

Minor Changes

• 9bfdf08: Bump package manager from yarn v1 to v4

Patch Changes

• 8a3118d: Fixed a performance issue when parsing stat diff summaries
• 9f1a174: Update build tools and workflows for Yarn 4 compatibility

v3.22.0

Compare Source

Minor Changes

• df14065: add status to DiffResult when using --name-status

v3.21.0

Compare Source

Minor Changes

• 709d80e: Add firstCommit utility interface

Patch Changes

• b4ab430: Add trailing callback support to git.firstCommit
• d3f9320: chore(deps): bump @​babel/traverse from 7.9.5 to 7.23.2
• b76857f: chore(deps): bump axios from 1.1.3 to 1.6.1

v3.20.0

Compare Source

Minor Changes

• 2eda817: Use pathspec in git.log to allow use of previously deleted files in file argument

v3.19.1

Compare Source

Patch Changes

• 2ab1936: keep path splitter without path specs

v3.19.0

Compare Source

Minor Changes

• f702b61: Create a utility to append pathspec / file lists to tasks through the TaskOptions array/object

vitest-dev/vitest (vitest)

v0.34.6

Compare Source

   🐞 Bug Fixes

• Overwrite global URL with environment's  -  by @​sheremet-va in #​4164 (cbe13)
• Correctly resolve external dependencies loaded by custom environments  -  by @​sheremet-va in #​4196 (e3408)
• runner: The fixture of test.extend should be init once time in all test  -  by @​Dunqing in #​4168 (730b2)

    View changes on GitHub

v0.34.5

Compare Source

   🚀 Features

• config:
  • Add diff option  -  by @​fenghan34 and @​sheremet-va in #​4063 (b50cf)
• coverage:
  • Add coverage['100'] to istanbul provider  -  by @​marcelobotega in #​4109 (a7e09)
• vitest:
  • Support vi.waitFor method  -  by @​Dunqing and @​sheremet-va in #​4113 (d79cb)
  • Allow using unprocessed environment files  -  by @​sheremet-va in #​4098 (1aee1)
  • Support vi.waitUntil method  -  by @​Dunqing and @​sheremet-va in #​4129 (e0ac9)

   🐞 Bug Fixes

• Update HappyDOMOptions to be compatible with v12  -  by @​anthonyblond in #​4135 (e8797)
• Print value shape when .resolves and .rejects fails  -  by @​sheremet-va in #​4137 (e649d)
• docs:
  • Fix lint errors on onConsoleLog example  -  by @​marcelobotega in #​4116 (ba1e7)
• expect:
  • Improve the error message when nothing is thrown when testing toThrow  -  by @​Dunqing in #​3979 (725a0)
• happy-dom:
  • Catch errors in happy-dom  -  by @​capricorn86 in #​4140 (c21c0)
• runner:
  • Restore leading space in testNamePattern  -  by @​segrey in #​4103 and #​4104 (3c305)
  • test.extend doesn't work in hooks without test  -  by @​Dunqing in #​4065 (175c7)
• snapshot:
  • Support mix of normal/with placeholders snapshots  -  by @​RobertPechaCZ in #​4118 (01e01)
• ui:
  • Correctly render ansi diff  -  by @​so1ve and @​sheremet-va in #​3810 (8c315)
• vite-node:
  • Export SourceMapInput to fix CYCLIC_CROSS_CHUNK_REEXPORT  -  by @​Dunqing in #​4128 (ca70a)
  • Align vite dependency version with vitest  -  by @​sheremet-va (90ff8)
• vitest:
  • Rerun tests if a file loaded with query changes  -  by @​sheremet-va in #​4130 (a084c)
  • Inject "define" in workspaces  -  by @​sheremet-va in #​4096 (b4d5a)

   🏎 Performance

• Use lazy require in vm pool  -  by @​sheremet-va in #​4136 (21ba4)

    View changes on GitHub

v0.34.4

Compare Source

   🐞 Bug Fixes

• Resolving dep optimizer issues with workspace  -  by @​thebanjomatic in #​4036 (0c13c)
• Don't process config file twice  -  by @​sheremet-va in #​4077 (a84a8)
• coverage:
  • Log info only when terminal reporter is used  -  by @​AriPerkkio in #​4027 (9f043)
• happy-dom:
  • Use the nodejs console in happy-dom v11  -  by @​capricorn86 in #​4090 (59434)
• runner:
  • Incorrect test name pattern matching  -  by @​Dunqing in #​4071 (b5bf3)
• vite-node:
  • Check more precisely for root/base paths  -  by @​danielroe in #​4049 (80741)
• vitest:
  • "vi" doesn't rely on context  -  by @​sheremet-va in #​4031 (0d0f3)
  • Only override ssr.optimizer instead of the whole ssr object  -  by @​sheremet-va in #​4080 (410bc)
  • Don't start the server when optimizer is enabled  -  by @​sheremet-va in #​4095 (00e81)
  • Set SSR env only when transformMode is ssr  -  by @​sheremet-va in #​4083 (f8ea7)
  • Show error when calling API on files that user has no access to  -  by @​sheremet-va in #​4085 (8b39c)
• web-worker:
  • Don't rely on browser API when it's not provided  -  by @​sheremet-va in #​4014 (e78a4)

    View changes on GitHub

v0.34.3

Compare Source

   🚀 Features

• coverage: Add allowExternal option  -  by @​vojvodics and @​AriPerkkio in #​3894 (c03fa)
• vitest: Export all reporters in vitest/reporters  -  by @​Dunqing and @​sheremet-va in #​3980 (5704b)

   🐞 Bug Fixes

• Should remove mockPath from callstack whether success or failed  -  by @​miserylee and lijifei in #​3971 (5eb85)
• Add workspace config files to default coverage excludes  -  by @​FelixGraf and @​AriPerkkio in #​3973 (20263)
• Report file error as a on JUnit  -  by @​3c1u in #​3997 (00c43)
• jsdom: Correctly resolve buffer on typed arrays  -  by @​sheremet-va in #​3998 (b42cf)
• ui: Use web hash history in ui  -  by @​segevfiner and @​sheremet-va in #​3481 and #​3487 (8caab)
• vite-node: Inline HMR types  -  by @​sheremet-va in #​3993 (dff60)
• vitest: Correctly resolve optimizer status  -  by @​sheremet-va in #​3992 (74dc5)

    View changes on GitHub

v0.34.2

Compare Source

   🚀 Features

• Allow importing CSS and assets inside external dependencies when using --experimental-vm-threads  -  by @​sheremet-va in #​3880 (f4e6e)
• vitest: Allow calling ctx.skip() inside the running test  -  by @​sheremet-va in #​3966 (5c88d)

   🐞 Bug Fixes

• Don't bundle utils' source-map entry  -  by @​sheremet-va in #​3865 (a08e5)
• Reduce the memory consumption when running --experimental-vm-threads  -  by @​sheremet-va in #​3872 (d1a08)
• Indicator position of error message  -  by @​fenghan34 in #​3855 (3e1e7)
• Don't crash when using --experimental-vm-threads, interop CJS default inside node_modules  -  by @​sheremet-va in #​3876 (0c53e)
• Don't crash if total memory is not supported  -  by @​sheremet-va in #​3879 (7d1f8)
• Check memory and limit value  -  by @​sheremet-va (f8dfb)
• Update module warning as it is moved into server config  -  by @​jellyfishgh in #​3931 (3a3eb)
• Define process variable and using import.meta.env together did not work  -  by @​Dunqing in #​3944 (e73ca)
• Correctly resolve config in a workspace  -  by @​sheremet-va in #​3947 (1c08d)
• Don't crash when calling useFakeTimers in VM pool  -  by @​sheremet-va in #​3958 (91fe4)
• Restrict access to file system via API  -  by @​sheremet-va in #​3956 (bcb41)
• Typo of mocks plugin name  -  by @​antfu (3073b)
• Build not generated execute.d.ts  -  by @​btea in #​3970 (0f8e6)
• css:
  • Don't mock css-module if ?inline query is specified  -  by @​thebanjomatic and Adam Hines in #​3952 (3891d)
• expect:
  • Correctly show async matcher diff  -  by @​sheremet-va in #​3960 (9423b)
• snapshots:
  • Update inline snapshot correctly  -  by @​fenghan34 in #​3887 (7b740)
• ui:
  • Incorrect duration time in vitest ui  -  by @​Dunqing in #​3945 (35139)
  • Add support for ui coverage with subdir option  -  by @​userquin in #​3917 (6ecfc)
• vitest:
  • Use esm module resolution to resolve env  -  by @​danielroe in #​3951 (edb32)
  • Allow rewriting process.env.NODE_MODE when using web transform mode  -  by @​sheremet-va in #​3957 (eca4b)
  • Only consider cwd when using glob  -  by @​g-plane in #​3802 and #​3949 (15b4f)
  • Pass environmentOptions to happy-dom integration  -  by @​sheremet-va and Raul de Melo in #​3972 (6a0cb)
• web:
  • Correctly resolve assets in new URL  -  by @​sheremet-va in #​3950 (a428f)

   🏎 Performance

• dot-renderer: Speed up getTests  -  by @​gtm-nayan in #​3923 (e9404)

    View changes on GitHub

v0.34.1

Compare Source

   🐞 Bug Fixes

• Pass --experimental-vm-worker-memory-limit to tinypool  -  by @​AriPerkkio in #​3856 (3c67a)

    View changes on GitHub

v0.34.0

Compare Source

   🚨 Breaking Changes

• Transform mode affects only test files, not regular files  -  by @​sheremet-va in #​3491 (9608b)
  • transformMode is now moved to server.transformMode. This option is highly discouraged to use. If you need to change the transform mode, use the new option testTransformMode instead to control the mode based on the running test, not the current file path. By default, tests with jsdom or happy-dom use web transform mode, and tests using node or edge environment use ssr mode. If you have a custom environment, it should provide transformMode property.
• Custom environment now should be processed before Vitest can consume it. It means that you cannot specify a path to a TS file or use import paths that should be processed by Vite.
• Disable coverage.reportOnFailure by default  -  by @​AriPerkkio in #​3615 (0c6f6)
• Remove @vitest/coverage-c8 package  -  by @​AriPerkkio in #​3614 (a90d6)
  • @vitest/coverage-c8 is no longer supported. Please, use @vitest/coverage-v8 instead.
• Support running tests using VM context  -  by @​sheremet-va and @​dammy001 in #​3203 (b0929)
  • To address speed issues in some applications, Vitest now provides experimentalVmThreads pool to run your tests using VM Sandboxes environment. Make sure you understand all pitfalls of this pool before opening an issue.
• Introduce server option  -  by @​fenghan34 and @​sheremet-va in #​3725 (dc4fa)
  • Most of deps. options are now moved to server.deps with a deprecation warning. Please, consider using deps.optimizer instead of deps.inline/deps.external. Ideally, we would like to move away from using server.deps.inline altogether.
• vite-node: Make CLI arguments parsing behavior consistent with node/tsx/ts-node  -  by @​rxliuli in #​3574 (1cd4e)
  • You now have to provide CLI arguments before the entry point. For example, instead of vite-node index.ts --watch, you now have to do vite-node --watch index.ts.
• Add preact example, remove optimizer experimental status, enable by default  -  by @​sheremet-va and @​eryue0220 in #​3854 (4b946)
  • deps.optimizer is now enabled by default. This means that Vitest will bundle specified dependencies before running your tests. This field inherits options from optimizeDeps and ssr.optimizeDeps which are populated by other plugins (like, Svelte).

   🚀 Features

• Support describe.sequential  -  by @​fenghan34 and @​dammy001 in #​3771 (86934)
• Support config junit reporter className with env  -  by @​InfiniteXyy in #​3808 (e8bc4)
• Running vitest with --related --watch reruns non-affected tests if they were changed during a run  -  by @​sheremet-va in #​3844 (c9aea)

   🐞 Bug Fixes

• Isolate workers between envs and workspaces  -  by @​AriPerkkio (ed4e0)
• Modify condition  -  by @​btea (a78e6)
• Module Graph view is blocking the Console view  -  by @​g4rry420 (3b5f9)
• Port the latest defineConfig type from vite  -  by @​sodatea in #​3804 (9c8e3)
• Don't overwrite Node.js URL global  -  by @​sheremet-va in #​3828 (cdab4)
• ForceRerunTriggers correctly triggers a rerun  -  by @​sheremet-va in #​3829 (17988)
• browser:
  • Don't inline magic-string and estree-walker  -  by @​sheremet-va in #​3726 (ee937)
  • Multi-suite coverage  -  by @​elby22 in #​3806 (5de9a)
• core:
  • DataView comparison does not work in toStrictEqual  -  by @​Dunqing (52aef)
• coverage:
  • V8 provider to pick source maps without url query params  -  by @​AriPerkkio in #​3784 (280e6)
  • Update istanbul-lib-instrument to v6 to fix vulnerable dependency  -  by @​AriPerkkio in #​3814 (f3bd9)
  • Exclude vite virtual modules by default  -  by @​AriPerkkio in #​3794 (3c851)
• node:
  • Guard error info  -  by @​btea (88b39)
• vite-node:
  • Always treat node_modules as modulesDirectory  -  by @​sheremet-va in #​3830 (51ab8)
  • Normalize drive letter to keep the same reference to a module  -  by @​sheremet-va in #​3836 (45521)
  • Correctly resolve hmr filepath  -  by @​sheremet-va in #​3834 (711a6)
• watch:
  • Clear screen on all terminals  -  by @​AriPerkkio in #​3661 (8bd26)

   🏎 Performance

• Deprecate deps.registerNodeLoader  -  by @​sheremet-va (7f45b)
  • This option was introduced to support aliasing inside external packages. Please, use deps.optimizer.web instead. If you test Node.js applications, consider adding external packages to server.deps.inline.

    View changes on GitHub

v0.33.0

Compare Source

   🚨 Breaking Changes

• Revert default include patterns  -  by @​so1ve #​3729
  • 0.32.0 changed the default include globs to be compatible with Jest. After a discussion with the community, we are reverting this change because it turned out to be non-intuitive.

   🐞 Bug Fixes

• Add missing JSDom living keys  -  by @​DerZade in #​3702 (83a86)
• vite-node:
  • Don't fail when importing Promise module  -  by @​sheremet-va (08192)
  • Allow importing node:test  -  by @​sheremet-va (db22c)

    View changes on GitHub

v0.32.4

Compare Source

   🐞 Bug Fixes

• browser: Correctly optimize CJS dependencies  -  by @​sheremet-va (3d090)

    View changes on GitHub

v0.32.3

Compare Source

   🚀 Features

• Add concurrent option to sequence config  -  by @​fenghan34 and @​sheremet-va in #​3604 (f427f)
• Introduce global configuration for retry setting  -  by @​imentu and @​sheremet-va in #​3598 and #​3603 (9a117)
• Don't rely on util package in @​vitest/utils  -  by @​sheremet-va in #​3685 (f91da)
• Support accessing other fixtures in fixture function  -  by @​fenghan34 in #​3651 (1621c)
• Support use function/class as bench name  -  by @​fenghan34 in #​3711 (a749a)
• reporters: Show full test suite when testing 1 spec file at a time  -  by @​Dunqing in #​3543 (7531c)
• runner: Support test.extend  -  by @​fenghan34 in #​3554 (2db1a)

   🐞 Bug Fixes

• Remove "concordance" from dependencies list  -  by @​sheremet-va in #​3597 (969dc)
• Show diff correctly  -  by @​sheremet-va in #​3620 (73dd4)
• Util import  -  by @​fubhy in #​3621 (2fb4c)
• Compat with frozen Math  -  by @​turadg in #​3527 (0db67)
• CTRL+C to terminate run  -  by @​AriPerkkio in #​3642 (fa663)
• Run mode stuck in TTY terminals  -  by @​AriPerkkio in #​3690 (141a8)
• Use first stack f

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone America/Manaus)

• Branch creation
  • "every month"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.