ℹ️ Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence | Type | Update |
|---|---|---|---|---|---|---|---|
| @microsoft/api-extractor (source) | ^7.52.15 → ^7.57.7 | devDependencies | minor | ||||
| @vue/tsconfig | ^0.8.1 → ^0.9.1 | devDependencies | minor | ||||
| actions/checkout | v6.0.1 → v6.0.2 | action | patch | ||||
| actions/checkout | v5.0.0 → v5.0.1 | action | patch | ||||
| bumpp | ^10.2.3 → ^10.4.1 | devDependencies | minor | ||||
| bun-plugin-dtsx (source) | ^0.21.12 → ^0.21.17 | devDependencies | patch | ||||
| bunfig | ^0.15.0 → ^0.15.6 | devDependencies | patch | ||||
| lint-staged | ^16.2.3 → ^16.4.0 | devDependencies | minor | ||||
| oven-sh/setup-bun | v2.0.2 → v2.2.0 | action | minor | ||||
| shivammathur/setup-php | 2.35.5 → 2.37.0 | action | minor | ||||
| vue (source) | ^3.5.22 → ^3.5.31 | peerDependencies | patch |
Release Notes
microsoft/rushstack (@​microsoft/api-extractor)
v7.57.7
Mon, 09 Mar 2026 15:14:07 GMT
Patches
- Bump
minimatchversion from10.2.1to10.2.3to address CVE-2026-27903.
v7.57.6
Wed, 25 Feb 2026 21:39:42 GMT
Patches
- Bump
@microsoft/tsdoc-configto~0.18.1to mitigate CVE-2025-69873.
v7.57.5
Wed, 25 Feb 2026 00:34:29 GMT
Version update only
v7.57.4
Tue, 24 Feb 2026 01:13:27 GMT
Version update only
v7.57.3
Mon, 23 Feb 2026 00:42:21 GMT
Patches
- Add missing "./extends/*.json" to the package.json "exports" field so that "@microsoft/api-extractor/extends/tsdoc-base.json" is importable.
v7.57.2
Fri, 20 Feb 2026 16:14:49 GMT
Patches
- Bump minimatch from 10.1.2 to 10.2.1
v7.57.1
Fri, 20 Feb 2026 00:15:03 GMT
Patches
- Add
"node"condition before"import"in the"exports"map so that Node.js uses the CJS output (which handles extensionless imports), while bundlers still use ESM via"import". Fixes #5644.
v7.57.0
Thu, 19 Feb 2026 00:04:52 GMT
Minor changes
- Normalize package layout. CommonJS is now under
lib-commonjs, DTS is now underlib-dts, and ESM is now underlib-esm. Imports tolibstill work as before, handled by the"exports"field inpackage.json.
v7.56.3
Sat, 07 Feb 2026 01:13:26 GMT
Patches
- Upgrade
lodashdependency from~4.17.15to~4.17.23.
v7.56.2
Wed, 04 Feb 2026 20:42:47 GMT
Patches
- Update minimatch dependency from 10.0.3 to 10.1.2
v7.56.1
Wed, 04 Feb 2026 16:13:27 GMT
Version update only
v7.56.0
Fri, 30 Jan 2026 01:16:12 GMT
Minor changes
- Fix an issue where destructured parameters produced an incorrect parameter name
v7.55.5
Thu, 08 Jan 2026 01:12:30 GMT
Patches
- Fix missing 'export' keyword for namespace re-exports that produced invalid TypeScript output
v7.55.2
Sat, 06 Dec 2025 01:12:28 GMT
Version update only
v7.55.1
Fri, 21 Nov 2025 16:13:56 GMT
Version update only
v7.55.0
Wed, 12 Nov 2025 01:12:56 GMT
Minor changes
- Bump the
@microsoft/tsdocdependency to~0.16.0. - Bump the
@microsoft/tsdoc-configdependency to~0.18.0.
v7.54.0
Tue, 04 Nov 2025 08:15:14 GMT
Minor changes
- Add a new setting
IExtractorInvokeOptions.printApiReportDiffthat makes build logs easier to diagnose by printing a diff of any changes to API report files (*.api.md). - Add a
--print-api-report-diffCLI flag that causes a diff of any changes to API report files (*.api.md) to be printed.
v7.53.3
Fri, 24 Oct 2025 00:13:38 GMT
Version update only
v7.53.2
Wed, 22 Oct 2025 00:57:54 GMT
Version update only
v7.53.1
Wed, 08 Oct 2025 00:13:28 GMT
Version update only
v7.53.0
Fri, 03 Oct 2025 20:09:59 GMT
Minor changes
- Normalize import of builtin modules to use the
node:protocol.
vuejs/tsconfig (@​vue/tsconfig)
v0.9.1
Notable Changes
- Align the TypeScript peer dependency requirement with the documentation (>= 5.8, including TypeScript 6)
Full Changelog: https://github.com/vuejs/tsconfig/compare/v0.9.0...v0.9.1
v0.9.0
Noticeable Changes
- feat: update lib to ES2022 by @Slessi in #41
- chore: move
noUncheckedIndexedAccessfrom base config to the lib config[fa4423b]- This is because
noUncheckedIndexedAccessmay have false positives, making it hard for existing codebases to upgrade. - But for new codebases, it’s still recommended to enable this flag from the beginning.
- This is because
New Contributors
Full Changelog: https://github.com/vuejs/tsconfig/compare/v0.8.1...v0.9.0
actions/checkout (actions/checkout)
v6.0.2
- Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356
antfu-collective/bumpp (bumpp)
v10.4.1
🚀 Features
- Add custom path to config - by @OskarLebuda in #107 <samp>(0f2e4)</samp>
View changes on GitHub
v10.4.0
No significant changes
View changes on GitHub
v10.3.2
🐞 Bug Fixes
- Resolve the options in config file correctly - by @liangmiQwQ in #101 <samp>(f5887)</samp>
View changes on GitHub
v10.3.1
No significant changes
View changes on GitHub
v10.3.0
🚀 Features
- Support
--releasefor release type - by @luoling8192 in #97 <samp>(5af7b)</samp>
View changes on GitHub
stacksjs/bunfig (bunfig)
v0.15.6
No significant changes
View changes on GitHub
v0.15.5
No significant changes
View changes on GitHub
v0.15.4
No significant changes
View changes on GitHub
v0.15.3
No significant changes
View changes on GitHub
v0.15.2
No significant changes
View changes on GitHub
v0.15.1
No significant changes
View changes on GitHub
lint-staged/lint-staged (lint-staged)
v16.4.0
Minor Changes
- #1739
687fc90Thanks @hyperz111! - Replacemicromatchwithpicomatchto reduce dependencies.
v16.3.4
Patch Changes
- #1742
9d6e827Thanks @iiroj! - Update dependencies, includingtinyexec@1.0.4to make sure localnode_modules/.binare preferred to global locations (released intinyexec@1.0.3).
v16.3.3
Patch Changes
- #1740
0109e8dThanks @iiroj! - Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash.
v16.3.2
Patch Changes
- #1735
2adaf6cThanks @iiroj! - Hide the extracmdwindow on Windows by spawning tasks without thedetachedoption.
v16.3.1
Patch Changes
- #1729
cd5d762Thanks @iiroj! - Removenano-spawnas a dependency frompackage.jsonas it was replaced withtinyexecand is no longer used.
v16.3.0
Minor Changes
#1698
feda37aThanks @iiroj! - Run external processes withtinyexecinstead ofnano-spawn.nano-spawnreplacedexecain lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hopetinyexecimproves the situation.#1699
1346d16Thanks @iiroj! - Removepidtreeas a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and thetaskkillcommand on Windows.
Patch Changes
- #1726
87467aaThanks @iiroj! - Incorrect brace expansions like*.{js}(nothing to expand) are detected exhaustively, instead of just a single pass.
v16.2.7
Patch Changes
- #1711
ef74c8dThanks @iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.
v16.2.6
Patch Changes
- #1693
33d4502Thanks @Adrian-Baran-GY! - Fix problems with--continue-on-erroroption, where tasks might have still been killed (SIGINT) when one of them failed.
v16.2.5
Patch Changes
- #1687
9e02d9dThanks @iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.
v16.2.4
Patch Changes
oven-sh/setup-bun (oven-sh/setup-bun)
v2.2.0
oven-sh/setup-bun is the github action for setting up Bun.
What's Changed
- build: update action runtime to Node.js 24 by @adam0white in #176
- ci: use
actions/checkout@v6.0.2in the test workflow by @tcely in #173 - ci: update actions for the
autofix.ciworkflow by @tcely in #174 - ci: update actions for the
Release new action versionworkflow by @tcely in #175 - release: v2.2.0 by @xhyrom in #177
New Contributors
- @adam0white made their first contribution in #176
- @tcely made their first contribution in #173
Full Changelog: https://github.com/oven-sh/setup-bun/compare/v2...v2.2.0
v2.1.3
oven-sh/setup-bun is the github action for setting up Bun.
What's Changed
- perf: avoid unnecessary api calls by @xhyrom in #161
- feat: add bun- prefix to cache keys by @maschwenk in #160
- fix: use native Windows ARM64 binary for Bun >= 1.3.10 by @oddrationale in #165
- feat: add AVX2 support detection for x64 Linux systems by @GoForceX in #167
- fix: validate cached binary version matches requested version (#146) by @wyMinLwin in #169
- release: v2.1.3 by @xhyrom in #170
New Contributors
- @oddrationale made their first contribution in #165
- @GoForceX made their first contribution in #167
- @wyMinLwin made their first contribution in #169
Full Changelog: https://github.com/oven-sh/setup-bun/compare/v2...v2.1.3
v2.1.2
oven-sh/setup-bun is the github action for setting up Bun.
What's Changed
Full Changelog: https://github.com/oven-sh/setup-bun/compare/v2...v2.1.2
v2.1.1
oven-sh/setup-bun is the github action for setting up Bun.
What's Changed
- feat: implement wildcard resolution into the action by @xhyrom in #93
- feat: fallback arm64 to x64 architecture for win32 platform by @xhyrom in #131
- feat: use packageManager from package.json as default bun version by @xhyrom in #152
- bump the
form-datadependency to version v4.0.5 due to https://github.com/advisories/GHSA-fjxv-7rqg-78g4 by @Jarred-Sumner
Full Changelog: https://github.com/oven-sh/setup-bun/compare/v2.1.0...v2.1.1
v2.1.0
oven-sh/setup-bun is the github action for setting up Bun.
What's Changed
- chore: add settings for vscode by @okineadev in #120
- feat: support for multiple registries by @xhyrom in #109
- feat: read engines from package json by @xhyrom in #132
- ci: disable tests with version selectors by @xhyrom in #133
- chore(ci): Pin GitHub Actions to SHA-1s by @dgilmanuni in #140
- feat: Check for existing bun before downloading by @erikaxel in #138
- docs: restore missing
no-cacheinput by @bashonly in #149 - release: v2.1.0 by @xhyrom in #151
New Contributors
- @dgilmanuni made their first contribution in #140
- @erikaxel made their first contribution in #138
- @bashonly made their first contribution in #149
Full Changelog: https://github.com/oven-sh/setup-bun/compare/v2...v2.1.0
shivammathur/setup-php (shivammathur/setup-php)
v2.37.0
Changelog
Updated the action to use Node.js 24. (#1049)
Added support for
masterin thephp-versioninput. It should now set up a nightly build from the master branch ofphp-src.Added support to install
ioncubeandzephir_parserextensions on PHP 8.5.Expanded support for installing extensions using Homebrew on macOS from the
shivammathur/homebrew-extensionstap. This includespdo_firebird,sqlsrv,pdo_sqlsrv,pecl_http,swow,xhprof, and several other supported extensions.Improved switching PHP versions on Linux. Missing alternatives should now be registered automatically before switching versions. #1067
Improved support for Homebrew on macOS. It should now retry stuck
brewcommands with an inactivity watchdog.Improved support for adding tools. It should now correctly use the latest release download URL when a version is not specified. (#1064)
Improved tool setup and caching on self-hosted runners.
Improved support for
sqlsrvandpdo_sqlsrvon PHP 8.1 and 8.2.Fixed installing
pecl_httpon Windows. Switched todownloads.php.netfor fixingICUversion post install.Fixed cached
couchbaseinstalls on macOS using theshivammathur/cache-extensionsaction.Replaced
@actions/corewith local functions to reduce bundle size.Refactored to use ES2024+ features for Node 24.
Updated actions used in examples to their latest versions.
Updated Node.js dependencies.
Thanks @theluckystrike for the contribution 🎉
Thanks @code-kudu, @ssddanbrown, @RoundingWell, and @ntzrbtr for the sponsorship ❤️
For the complete list of changes, please refer to the Full Changelog
v2.36.0
Changelog
- Added support for PHP 8.5 stable release.
- name: Setup PHP 8.5 (stable)
uses: shivammathur/setup-php@v2
with:
php-version: '8.5'- Added support for PHP 8.6.0-dev. Specifying
8.6in thephp-versioninput should now set up a nightly build from the master branch ofphp-src. (#1002)
- name: Setup PHP 8.6.0-dev
uses: shivammathur/setup-php@v2
with:
php-version: '8.6'- Added support for
pdo_ibmandibm_db2extensions.
- name: Setup PHP with pdo_ibm and ibm_db2 extensions
uses: shivammathur/setup-php@v2
with:
php-version: '8.5'
extensions: pdo_ibm, ibm_db2- Added support to install
blackfireextension on PHP 8.5.
- name: Setup PHP with blackfire extension
uses: shivammathur/setup-php@v2
with:
php-version: '8.5'
extensions: blackfire- Improved support to detect the required libraries when building from source for common extensions. For example installing
gnupgfrom source would install the requiredlibgpgmelibrary automatically. (#1021)
- name: Setup PHP with amqp extension
uses: shivammathur/setup-php@v2
with:
php-version: '8.5'
extensions: gnupg-1.5.4- Improved support for
symfony-cli. It should now correctly set up the requested version. (#1008)
- name: Setup PHP with symfony-cli
uses: shivammathur/setup-php@v2
with:
php-version: '8.5'
tools: symfony-cli:5.16.0Improved support for
relayextension. Also added support to install the nightly version of the extension. (#1011, #1012)Improved installing PHP on macOS. Also fixed installing PHP on
macos-15-intelGitHub runner. (#1029)Improved support for
deb822format sources files on Linux. It should now set up the sources files indeb822format on Ubuntu 24.04, Debian 13, and newer. It would automatically switch the format as well for the repositories added by the action to the new format when supported. (#1027)Improved support for installing
pdo_oci. (#1028)Fixed installing
gearmanextension for PHP 5.6 and 7.0 on Linux.Fixed an edge case in tools setup to fall back to the latest version. (#1024)
Fixed support to build extensions with uppercase names from PECL. (#1017)
Fixed warning on
redissetup on macOS after formula rename. (shivammathur/homebrew-extensions#5413)Fixed fallback link for
composersetup. (#1025)Updated the link for flex documentation in README. (#1020)
Updated Node.js dependencies.
Thanks @shyim, @tillkruss, and @nicolas-grekas for the contributions 🎉
Thanks @JetBrainsOfficial and @cachewerk for the sponsorship ❤️
For the complete list of changes, please refer to the Full Changelog
vuejs/core (vue)
v3.5.31
Bug Fixes
- compiler-sfc: allow Node.js subpath imports patterns in asset urls (#13045) (95c3356), closes #9919
- compiler-sfc: support template literal as defineModel name (#14622) (bd7eef0), closes #14621
- reactivity: normalize toRef property keys before dep lookup + improve types (#14625) (1bb28d0), closes #12427 #12431
- runtime-core: invalidate detached v-for memo vnodes after unmount (#14624) (560def4), closes #12708 #12710
- runtime-core: preserve nullish event handlers in mergeProps (#14550) (5725222)
- runtime-core: prevent merging model listener when value is null or undefined (#14629) (b39e032)
- runtime-dom: defer teleport mount/update until suspense resolves (#8619) (88ed045), closes #8603
- runtime-dom: handle activeElement check in Shadow DOM for v-model (#14196) (959ded2)
- server-renderer: cleanup component effect scopes after SSR render (#14548) (862f11e)
- suspense: avoid unmount activeBranch twice if wrapped in transition (#9392) (908c6ad), closes #7966
- suspense: update suspense vnode's el during branch self-update (#12922) (a2c1700), closes #12920
- transition: skip enter guard while hmr updating (#14611) (be0a2f1), closes #14608
- types: prevent shallowReactive marker from leaking into value unions (#14493) (3b561db), closes #14490
v3.5.30
Bug Fixes
- compat: add
entitiesto @vue/compat deps to fix CJS edge cases (#12514) (e725a67), closes #10609 - custom-element: ensure child component styles are injected in correct order before parent styles (#13374) (1398bf8), closes #13029
- custom-element: properly locate parent when slotted in shadow dom (#12480) (f06c81a), closes #12479
- custom-element: should properly patch as props for vue custom elements (#12409) (740983e), closes #12408
- reactivity: avoid duplicate raw/proxy entries in Set.add (#14545) (d943612)
- reactivity: fix reduce on reactive arrays to preserve reactivity (#12737) (16ef165), closes #12735
- reactivity: handle
Setwith initial reactive values edge case (#12393) (5dc27ca), closes #8647 - runtime-core: warn about negative number in v-for (#12308) (9438cc5)
- ssr: prevent watch from firing after async setup await (#14547) (6cda71d), closes #14546
- types: make generics with runtime props in defineComponent work (fix #11374) (#13119) (cea3cf7), closes #13763
- types: narrow useAttrs class/style typing for TSX (#14492) (bbb8977), closes #14489
v3.5.29
Bug Fixes
- runtime-core: prevent instance leak in withAsyncContext (#14445) (702284f), closes nuxt/nuxt#33644
- server-renderer: render className as escaped string (#14469) (da6690c)
- transition: prevent enter if leave is in progress (#14443) (df059f8), closes #12091 #12133
v3.5.28
Bug Fixes
- transition: avoid unexpected
cancelledparameter in transitiondonecallback (#14391) (6798853) - compiler-sfc: add resolution trying for
.mts/.ctsfiles (#14402) (c09d41f), closes vuejs/router#2611 - compiler-sfc: no params were generated when using withDefaults (#12823) (b0a1f05), closes #12822
- reactivity: add
__v_skipflag toEffectScopeto prevent reactive conversion (#14359) (48b7552), closes #14357 - runtime-core: avoid retaining el on cached text vnodes during static traversal (#14419) (4ace79a), closes #14134
- runtime-core: prevent child component updates when style remains unchanged (#12825) (57866b5), closes #12826
- runtime-core: properly handle async component update before resolve (#11619) (e71c26c), closes #11617
- runtime-dom: handle null/undefined handler in withModifiers (#14362) (261de54), closes #14361
- teleport: properly handling disabled teleport target anchor (#14417) (d7bcd85), closes #14412
- transition-group: correct move translation under scale via element rect (#14360) (0243a79), closes [#1435
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.