chore(deps): update npm dependencies updates

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
electron-builder (source)	26.0.* → 26.15.*
jscpd (source)	4.0.* → 4.2.*
release-it	19.0.* → 19.2.*

---

Release Notes

electron-userland/electron-builder (electron-builder)

v26.15.3

Compare Source

Patch Changes

Updated 3 dependencies

35bfdeb 9097daf

• builder-util@26.15.3
• app-builder-lib@26.15.3
• dmg-builder@26.15.3

v26.15.2

Compare Source

Patch Changes

Updated 2 dependencies

e25f967 f5ae163 3951024

• app-builder-lib@26.15.2
• dmg-builder@26.15.2

v26.15.1

Compare Source

Patch Changes

Updated 2 dependencies

588ff48 db5d2f4

• app-builder-lib@26.15.1
• dmg-builder@26.15.1

v26.15.0

Compare Source

Minor Changes

• Chore: replace app-builder-bin node-dep-tree and rebuild-node-modules with pure-TS equivalents; nativeRebuilder: "legacy" now routes to @electron/rebuild sequential mode #9828 198c10c @​mmaietta

Patch Changes

Updated 4 dependencies

8f0621b 8096732 3e3ea31 2fb4078 198c10c 01b8ba9 01b8ba9 22a7532

• app-builder-lib@26.15.0
• builder-util-runtime@9.7.0
• builder-util@26.15.0
• dmg-builder@26.15.0

v26.14.0

Compare Source

Patch Changes

Updated 3 dependencies

2be34d2 370bd75 f0e33f0 7a71b01 0e67339

• app-builder-lib@26.14.0
• dmg-builder@26.14.0
• builder-util@26.14.0

v26.13.1

Compare Source

Patch Changes

Updated 2 dependencies

b5a1ac1 fd9fcb1 478ade4 e4cd2ac cf2ec41 c142e0f 964ff9a bb8cb67

• app-builder-lib@26.13.1
• dmg-builder@26.13.1

v26.13.0

Compare Source

Patch Changes

Updated 4 dependencies

98174e1 73bb547 dd6d704 1bc92ff fa2285c 6982866 3a6c0b1 571d22b 59efef1 f3c4d88 4e97804

• app-builder-lib@26.13.0
• builder-util@26.13.0
• dmg-builder@26.13.0
• builder-util-runtime@9.6.3

v26.12.1

Compare Source

Patch Changes

• Fix: harden generated-file output, argument construction, and download validation #9778 d6a5aee @​mmaietta

Updated 4 dependencies

d6a5aee 3f4f773 2c4cfa4 4866737 f9ecb3c

• builder-util-runtime@9.6.2
• app-builder-lib@26.12.1
• builder-util@26.12.1
• dmg-builder@26.12.1

v26.12.0

Compare Source

Patch Changes

• Fix: avoid system path on windows for cache when user is system OR path is system32 #9776 ab6ada8 @​mmaietta

Updated 3 dependencies

9a31b4e 059fffd ab6ada8 7955d66 a4ece30 bfd1c1b 2181fd0 0fd0f4f a356198 5b83914 5dbba8c 65ff591

• app-builder-lib@26.12.0
• builder-util@26.12.0
• dmg-builder@26.12.0

v26.11.1

Compare Source

Patch Changes

Updated 3 dependencies

139ac27 b8c6a15 35c2c7a e22295f

• app-builder-lib@26.11.1
• builder-util@26.11.1
• dmg-builder@26.11.1

v26.11.0

Compare Source

Minor Changes

• Feat: add CLI action to clear the electron-builder default cache directory (env var override intentionally ignored for security) #9739 0361243 @​mmaietta

Patch Changes

• Chore(docs): documentation updates and docusaurus migration #9744 d846315 @​mmaietta

Updated 4 dependencies

02ca7cf d846315 3d2f660 d7a341d 403706b 65e5318 0a46eb1 0361243 2583fd1 56d8331 8a98647 3199d18 6d3798e 26ce28c a2fc793

• app-builder-lib@26.11.0
• builder-util-runtime@9.6.1
• builder-util@26.11.0
• dmg-builder@26.11.0

v26.10.0

Compare Source

Patch Changes

Updated 3 dependencies

5be28a6 b5cef28 bd35730 b13aa95 c82bec1 7751ace

• builder-util@26.10.0
• app-builder-lib@26.10.0
• dmg-builder@26.10.0

v26.9.1

Compare Source

Patch Changes

Updated 2 dependencies

a821ae8 9bc2626 9967672 fb92196 a4f2d98 5c945b2

• app-builder-lib@26.9.1
• dmg-builder@26.9.1

v26.9.0

Compare Source

Patch Changes

Updated 4 dependencies

a69928f ed422f3 b072e92 3958d8b 13d8535 f71b101 b7df0bc 0c8fc41

• app-builder-lib@26.9.0
• builder-util-runtime@9.6.0
• dmg-builder@26.9.0
• builder-util@26.9.0

v26.8.2

Compare Source

Patch Changes

Updated 2 dependencies

b348df0 f2c0547 52dc667 4e83aeb 02a9105

• app-builder-lib@26.8.2
• dmg-builder@26.8.2

v26.8.1

Compare Source

Patch Changes

Updated 3 dependencies

4edd695 8940ec6 4edd695 dde4309

• app-builder-lib@26.8.1
• builder-util@26.8.1
• dmg-builder@26.8.1

v26.8.0

Compare Source

Minor Changes

• Feat(win): adding support for latest artifacts for win-codesign tooling to be pulled from electron-builder-binaries #9430 1b39a8e @​mmaietta

Patch Changes

Updated 3 dependencies

cd7c0d9 c18f0eb 769b608 9ba36f9 1b113b7 1b39a8e

• app-builder-lib@26.8.0
• builder-util@26.8.0
• dmg-builder@26.8.0

v26.7.0

Compare Source

Patch Changes

Updated 2 dependencies

bfee115 3fa2d89 ec9e2db aec9157 64b40fe

• app-builder-lib@26.7.0
• dmg-builder@26.7.0

v26.6.0

Compare Source

Patch Changes

Updated 2 dependencies

cf10da8 9b1dbb2 e46b407 88070e9 d56550f

• app-builder-lib@26.6.0
• dmg-builder@26.6.0

v26.5.0

Compare Source

Patch Changes

Updated 2 dependencies

666d85a b1d6e24 6c20eeb 3022f0f 2c11709

• dmg-builder@26.5.0
• app-builder-lib@26.5.0

v26.4.1

Compare Source

Patch Changes

Updated 3 dependencies

cb5b9c6 d38ae8e 1c94529 ef43f42 25b5dd2 c3af390 97e5503

• app-builder-lib@26.4.1
• dmg-builder@26.4.1
• builder-util@26.4.1

v26.4.0

Compare Source

Patch Changes

Updated 2 dependencies

e70da99 b66832d 9110cb4 39ae6a7 78910a9 5f962f9

• app-builder-lib@26.4.0
• dmg-builder@26.4.0

v26.3.6

Compare Source

Patch Changes

Updated 2 dependencies

bdfc76b 693629c

• app-builder-lib@26.3.6
• dmg-builder@26.3.6

v26.3.5

Compare Source

Patch Changes

Updated 2 dependencies

e3f3592 05e0bc7 e043df5

• app-builder-lib@26.3.5
• dmg-builder@26.3.5

v26.3.4

Compare Source

Patch Changes

Updated 3 dependencies

e34be3b 2faee4d ada111e da1d768 4d24ebd b81c253

• app-builder-lib@26.3.4
• builder-util@26.3.4
• dmg-builder@26.3.4

v26.3.3

Compare Source

Patch Changes

Updated 2 dependencies

241c53a

• app-builder-lib@26.3.3
• dmg-builder@26.3.3

v26.3.2

Compare Source

Patch Changes

Updated 2 dependencies

0cd0831 7f7113d 65eecac

• app-builder-lib@26.3.2
• dmg-builder@26.3.2

v26.3.1

Compare Source

Patch Changes

• Fix: install-app-deps missing workspaceRoot for passing projectRootPath into electron/rebuild #9376 45a1683 @​mmaietta

Updated 3 dependencies

ec0a851 2f3e7e1 82c07af 6171472 ef364d3 45a1683 1607820 ed8ea12

• app-builder-lib@26.3.1
• builder-util@26.3.1
• dmg-builder@26.3.1

v26.3.0

Compare Source

Minor Changes

• Feat: support corepack and packageManager field and add related unit tests #9309 b741b72 @​mmaietta

Patch Changes

• Chore: bumping version packages of all packages to trigger Trusted Signing provedance release #9362 030269b @​mmaietta

Updated 4 dependencies

030269b b741b72 d8ad468 811d13d 16c8fa1 2e0837b

• app-builder-lib@26.3.0
• builder-util@26.3.0
• builder-util-runtime@9.5.1
• dmg-builder@26.3.0

v26.2.0

Compare Source

Patch Changes

• Updated dependencies [836a15c6c70abf8582aaa63603e14f77d5fa3f89, 21623e1b037e4509af04e767ca1c1458682b0eba, 6a49f85c69a22844729033f023249975f47a28f1, 0835fbcac0a0cfb0f34355699812cc85db035ad4, d19387174365c85968034149be43d80a39e7335f, b6a34c00c35e42dc279a55d672558ea7badc7fcd, f4d7924a082fbb9113d52782430f82b1f0ffcb52]:
  • app-builder-lib@​26.2.0
  • dmg-builder@​26.2.0

v26.1.0

Compare Source

Patch Changes

• Updated dependencies [9f06a859f9c82b305d0a43c5b6e8c47d1c7451f1, 08773afadfe10911ed1dff084fefe1024c5a74d8, 85cb4d031a060976b2519665b98294bb3c735aa0, e5f5799fbb193a7a8700fcaaf1ab9e79c9c694ce, 38c2085e9a344812d32611d197d1df66d6644b45, c51f96272517c08a09504445fb31e61326e0c381, 193abcf78691b145dd1f406ac5521e88beec0a5c, 6fd391d9e8390c00c8b0674d8ac3a5b7b6f0f19f]:
  • app-builder-lib@​26.1.0
  • builder-util-runtime@​9.5.0
  • dmg-builder@​26.1.0
  • builder-util@​26.1.0

v26.0.20

Compare Source

Patch Changes

• #​9228 d031eeaa Thanks @​choegyumin! - fix: support option to override PublishPolicy in publish command

• #​9227 8f0ad06e Thanks @​choegyumin! - fix: fix argument names mismatch in publish command to make it work

• Updated dependencies [f262a735, 44b28997, 7c7fd6ca, 3735881f, 49c782cb, cf0ac45d, e9251f47, c54a0609, b778686f]:

  • app-builder-lib@​26.0.20
  • builder-util-runtime@​9.4.0
  • builder-util@​26.0.20
  • dmg-builder@​26.0.20

v26.0.19

Compare Source

Patch Changes

• Updated dependencies [6cc5d2ee, 21e4ea23, c9480bc0, 1a6ea016, 35f5f6e5]:
  • app-builder-lib@​26.0.19
  • builder-util-runtime@​9.3.3
  • builder-util@​26.0.19
  • dmg-builder@​26.0.19

v26.0.18

Compare Source

Patch Changes

• Updated dependencies [fc7c5a0d, a2fbc8b6, e02b939b, 61aa8557, 309f1dca]:
  • app-builder-lib@​26.0.18
  • dmg-builder@​26.0.18

v26.0.17

Compare Source

Patch Changes

• Updated dependencies [0b17b351, a6be444c, e56977b5, b960d2fa, 3128991a, 2d014a86, 092d398a, 2c361819, 73696c6d]:
  • app-builder-lib@​26.0.17
  • builder-util@​26.0.17
  • dmg-builder@​26.0.17

v26.0.16

Compare Source

Patch Changes

• #​9117 b62737d8 Thanks @​talentlessguy! - chore(deps): replace is-ci with ci-info

• Updated dependencies [65de8564, b62737d8, 9272cf33, bacc6b44, 59fdaa9f, 9358b00b]:

  • app-builder-lib@​26.0.16
  • builder-util@​26.0.16
  • dmg-builder@​26.0.16

v26.0.15

Compare Source

Patch Changes

• Updated dependencies [312938d8, 6f3aec81, d97e7eb2, 0ce7b90e]:
  • app-builder-lib@​26.0.15
  • dmg-builder@​26.0.15

v26.0.14

Compare Source

Patch Changes

• Updated dependencies [3d65267a, 5545e132, 80fbf5a6, 524fb6e0]:
  • app-builder-lib@​26.0.14
  • dmg-builder@​26.0.14

v26.0.13

Compare Source

Patch Changes

• #​9013 c223866e Thanks @​beyondkmp! - fix: dependency path is undefined

• Updated dependencies [33bd6706, 1397775c, 8bd1a10a, 106640dd, 9fb2895c, c223866e, bff46ec4, a2f7f735]:

  • app-builder-lib@​26.0.13
  • builder-util@​26.0.13
  • dmg-builder@​26.0.13
  • builder-util-runtime@​9.3.2

kucherenko/jscpd (jscpd)

v4.2.5

Compare Source

Bug Fixes

• JSON reporter duplicate token counts — tokens was always reported as 0 in JSON output; now computed from token positions (end.position - start.position) (#​801).
• Gitignore parent-directory walk — .gitignore files in parent directories up to the repo root are now read and combined with scan-directory .gitignore files. Also reads .git/info/exclude and the global core.excludesFile for full parity with Git's ignore resolution (#​741).
• Commander v15 migration — CLI option parsing migrated from direct property access (cli.minTokens, etc.) to the cli.opts() API required by Commander v8+. The --no-gitignore / --gitignore flag handling was rewritten to use Commander's native negation support instead of rawArgs inspection.
• Vitest 4.1.0 — bumped from 3.2.4 to address CVE-2026-47429.
• Commander v15 — bumped from v5 to v15, enabling modern Node.js compatibility.
• Pug 3.0.4, node-sarif-builder 4.1.0, nodemon 3.1.14 — dependency bumps for security and compatibility.

---

v4.2.4

Compare Source

v4.2.3

Compare Source

v4.2.2

Compare Source

v4.2.1

Compare Source

v4.2.0

Compare Source

Breaking Changes

• Vue SFC tokenization — .vue files are no longer tokenized as markup. Each block is now dispatched to its own sub-format: <script> → javascript, <script lang="ts"> → typescript, <template> → markup, <style> → css, <style lang="scss"> → scss, <style lang="less"> → less. Clone reports for .vue files now appear under these resolved sub-format names. Any tooling or configuration that relied on .vue clones being reported under markup must be updated.
• --formatsExts users — custom mappings that pointed .vue to markup (e.g. "formatsExts": { "markup": ["vue"] }) will no longer take effect because .vue is handled by the dedicated vue format processor. Remove or update such mappings.

New Features

• Custom tokenizer backend — replaced the prismjs npm package with a self-contained reprism-based grammar engine. ~11.5% faster tokenization on real projects (avg 1126 ms → 997 ms on a 548-file, 223-format scan).
• Cross-format detection — Vue SFC (.vue), Svelte (.svelte), Astro (.astro), and Markdown files are now tokenized per-block/per-section. A

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • "before 8am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.