fix(deps): update all minor dependency bump

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@shikijs/markdown-exit (source)	4.4.3 → 4.5.0			devDependencies	minor
@types/markdown-it (source)	14.1.2 → 14.2.0			devDependencies	minor
@types/node (source)	24.13.6 → 24.19.1			devDependencies	minor
@vue/test-utils	2.4.11 → 2.5.1			devDependencies	minor
beasties (source)	^0.4.0 → ^0.5.0			devDependencies	minor
eslint (source)	10.8.1 → 10.12.0			devDependencies	minor
globals	17.9.0 → 17.13.0			devDependencies	minor
markdown-exit	1.1.0-beta.2 → 1.3.0			pnpm-workspace.overrides	minor
node (source)	24.19.0 → 24.21.0				minor
pnpm (source)	11.20.0+sha512.9a6f330a95b66446ea088faf1521405a8a01f07fde7124cc9958dfed52d4bb436737e65b08f85f37b46fcba375092558ac51262b816844b22f63406ed166bfee → 11.28.4			packageManager	minor	11.28.5
pnpm (source)	11.20.0 → 11.28.4			devDependencies	minor	11.28.5
sass	1.102.0 → 1.105.1			devDependencies	minor
shiki (source)	4.4.3 → 4.5.0			devDependencies	minor
type-fest	5.8.0 → 5.10.0			devDependencies	minor
unplugin-vue-markdown	32.0.0 → 32.1.1			devDependencies	minor
vite (source)	8.2.2 → 8.3.2			devDependencies	minor	8.3.3
vue-router (source)	5.2.0 → 5.3.1			dependencies	minor

---

Release Notes

shikijs/shiki (@​shikijs/markdown-exit)

v4.5.0

Compare Source

   🚀 Features

• Emit an explicit color level from codeToANSI  -  by @​EvanProgramming in #​1320 (b968e)
• transformers:
  • Add classActiveCode option to transformerNotationWordHighlight  -  by @​curiouscoder-cmd in #​1201 (1e968)
  • Add transformerRenderLineNumber  -  by @​Divyapahuja31 and DIVYA PAHUJA in #​1238 (02f05)

   🐞 Bug Fixes

• cli:
  • Fall back to 'text' when file/URL has no extension and no -…  -  by @​VeerShah41 in #​1248 (c00e5)
  • Fall back to plaintext for unknown languages  -  by @​Jinjiang and @​antfubot in #​1319 (4eb7c)
• primitive:
  • Dispose wasm memory for lazily embedded langs  -  by @​rgodha24 in #​1322 (b5423)
  • Dedupe grammar injections on repeated language loads  -  by @​antlio and @​antfubot in #​1318 (33678)
• stream:
  • Compile Solid renderer with babel-preset-solid  -  by @​BetterAndBetterII and @​antfu in #​1309 (8724e)
• transformers:
  • Keep notations on content comment lines  -  by @​tianrking in #​1308 (d25ab)
  • Handle split # and -- comments in rose-pine theme  -  by @​anandghegde in #​1317 (63e6d)
• twoslash:
  • Avoid crash when @​errors nodes land past EOF  -  by @​Yahiro025, @​cursoragent and @​antfubot in #​1316 (5c919)

   🏎 Performance

• engine-js: Reuse each regex's last search while tokenizing a line  -  by @​issacgerges and @​antfu in #​1314 (2ef5e)
• stream: Group tokens by line in the React renderer  -  by @​CNSeniorious000 in #​1311 (81200)
• vitepress-twoslash: Replace lz-string with lz-string-es  -  by @​antfubot in #​1324 (2e170)

    View changes on GitHub

vuejs/test-utils (@​vue/test-utils)

v2.5.1

Compare Source

What's Changed

• fix: generic SFC findComponent types by @​simonyang08 in #​2934
• fix: share config across builds by @​cexbrayat in #​2937

New Contributors

• @​simonyang08 made their first contribution in #​2934

Full Changelog: vuejs/test-utils@v2.5.0...v2.5.1

v2.5.0

Compare Source

⚠️ Breaking change: Vue Test Utils no longer supports class components. See #​2904.

What's Changed

• fix: keep re-rendering root component after another wrapper is mounted by @​lazerg in #​2890
• fix: correct summary element behavior by @​nn-morishita in #​2806
• fix: clear emitted event history for child components on unmount by @​ebiryu in #​2898
• chore!: drop class component support by @​cexbrayat in #​2904
• fix: expose defineExpose bindings on findComponent vm by @​adamberecz in #​2927

New Contributors

• @​MetRonnie made their first contribution in #​2885
• @​lazerg made their first contribution in #​2890
• @​bartlomieju made their first contribution in #​2892
• @​nn-morishita made their first contribution in #​2806
• @​ebiryu made their first contribution in #​2898
• @​chiaraani made their first contribution in #​2916
• @​souserge made their first contribution in #​2695
• @​adamberecz made their first contribution in #​2927

Full Changelog: vuejs/test-utils@v2.4.11...v2.5.0

danielroe/beasties (beasties)

v0.5.4

Compare Source

v0.5.4 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes

• beasties: improve font inlining behaviour (#​422)

🤖 CI

• add pkg.pr.new workflow (64bf9c8)

❤️ Contributors

• Daniel Roe (@​danielroe)

v0.5.3

Compare Source

v0.5.3 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes

• beasties: bias plan pool refs so index 0 isn't read as absent (#​420)

❤️ Contributors

• Daniel Roe (@​danielroe)

v0.5.2

Compare Source

v0.5.2 is the next minor release.

👉 Changelog

compare changes

🚀 Enhancements

• beasties: add per-request nonce option for beasties/runtime (#​418)

❤️ Contributors

• Daniel Roe (@​danielroe)

v0.5.1

Compare Source

v0.5.1 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes

• beasties: update nonce type definition to allow a function (#​416)

❤️ Contributors

• Alan Agius (@​alan-agius4)

v0.5.0

Compare Source

v0.5.0 is the next major release.

👉 Changelog

compare changes

🚀 Enhancements

• beasties: allow nonce option to be a function (#​415)
• beasties: deduplicate repeated warnings (#​411)
• beasties: add nonce option and csp-safe media-script preload strategy (#​410)
• beasties: accept critters: directives + warn on unknown ones (#​407)
• beasties: add compiler + zero-dependency critical css runtime (#​403)
• webpack-plugin: support rspack 🦀 (#​399)
• ⚠️ beasties: upgrade to ESM-only dom/css dependencies + require node >=20.19 (#​364)

🩹 Fixes

• beasties: dedupe font preload links across sheets and existing tags (#​414)
• beasties: only warn about selector errors that drop rules (#​413)
• beasties: include resolved path and path options in stylesheet warning (#​412)
• beasties: reject unsafe media values before emitting onload handlers (#​409)
• beasties: support data-beasties-skip + stylesheet warnings in fast path (#​406)
• beasties: tolerate duplicate domhandler and beasties copies (#​405)
• beasties: relativise inlined urls against document (#​401)

📦 Build

• adopt isolated declarations (829a963)
• migrate to tsdown (c793165)

🏡 Chore

• fix typos (1d40d8c)
• add myself to author/contributors respectively (bb4777d)

🤖 CI

• set permissions (62731e5)

❤️ Contributors

• Alan Agius (@​alan-agius4)
• Daniel Roe (@​danielroe)

eslint/eslint (eslint)

v10.12.0

Compare Source

Features

• 4618052 feat: handle astral letters in new-cap (#​21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#​21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#​21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#​21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#​21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#​21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#​21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#​21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#​21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#​21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#​21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#​21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#​21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#​21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#​21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#​21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#​21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#​21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#​21354) (renovate[bot])
• 182a6e9 chore: update dependency prettier to v3.9.8 (#​21352) (renovate[bot])
• f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#​21339) (Jarren)
• b95fb6c chore: update dependency prettier to v3.9.7 (#​21347) (renovate[bot])
• 3782dd4 chore: update ecosystem plugins (#​21342) (ESLint Bot)

v10.11.0

Compare Source

Features

• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#​21271) (Pavel)
• 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#​21316) (electrohyun)
• d3dd47f feat: only exempt new-cap built-ins that reference the global (#​21290) (sethamus)

Bug Fixes

• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#​21311) (xbinaryx)
• b684bb1 fix: make TimePass.parse optional in types and docs (#​21313) (ntnyq)
• 26d11bc fix: don't report __proto__ properties in object-shorthand (#​21310) (xbinaryx)

Documentation

• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#​21312) (bytedoe)
• 6c789ff docs: Update README (GitHub Actions Bot)
• 5997825 docs: clarify preserve-caught-error known limitation (#​21294) (Akinyemi Toluwalase)

Chores

• 520dd77 perf: Implement fast paths in critical areas (#​21210) (Nicholas C. Zakas)
• 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#​21330) (Francesco Trotta)
• 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#​21331) (renovate[bot])
• 24310e3 chore: update ecosystem plugins (#​21324) (ESLint Bot)
• 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#​21318) (dependabot[bot])
• ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#​21221) (Nicholas C. Zakas)
• c832660 chore: Upgrade Stylelint to the latest version in docs (#​21245) (Jung Hyeon Jun)
• f9f88fc chore: update ecosystem plugins (#​21308) (ESLint Bot)
• fc81076 ci: add more types integration tests (#​20395) (Nitin Kumar)

v10.10.0

Compare Source

Features

• 264b434 feat: add d and v flags to no-unexpected-multiline (#​21305) (Gihyeon Jeong / 정기현)
• c6cc6c5 feat: check Object.prototype property names in new-cap (#​21269) (crimsonjay0)
• 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#​21260) (synthex-byte)

Bug Fixes

• bb47dc6 fix: update dependency file-entry-cache to v11 (#​20801) (Milos Djermanovic)
• 427ac0a fix: use format strings in debug calls (#​21247) (Francesco Trotta)
• 9d81532 fix: support __proto__ in /* exported */ comments (#​21261) (sethamus)
• 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#​21282) (김채영)
• 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#​21275) (Pixel)
• 9f4a364 fix: Ignore static imports in no-unreachable (#​21276) (Taha Kotil)

Documentation

• 2417cad docs: Update README (GitHub Actions Bot)
• 9cecb8a docs: document \c control letter escapes in no-control-regex (#​21286) (한국)
• 8724829 docs: update compat table links (#​21263) (fnx)
• 5634542 docs: Clarify eqeqeq suggestion behavior (#​21256) (Müslüm Yılmaz)

Chores

• b3d876b chore: disable npm audit in ecosystem tests (#​21306) (Francesco Trotta)
• 1696682 ci: restore EMFILE test on Node.js 26 (#​21297) (Marry (Subin Yang))
• 2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#​21296) (renovate[bot])
• 3c753f1 chore: update eslint (#​21289) (renovate[bot])
• 1c73469 chore: update ecosystem plugins (#​21280) (ESLint Bot)
• 08a02be test: add error locations to no-extra-boolean-cast (#​21266) (lumir)
• 77bb1db chore: update github/codeql-action action to v4.37.8 (#​21270) (renovate[bot])
• 007e81a ci: skip EMFILE test on Node.js 26 (#​21265) (lumir)
• 0430280 chore: improve ecosystem tests compatibility on Windows (#​21178) (crimsonjay0)

v10.9.1

Compare Source

Bug Fixes

• 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#​21251) (Aleksandr Shoronov)

Documentation

• ad74a8d docs: add deprecation steps for EOL package versions (#​21248) (Francesco Trotta)

Chores

• 3c3ae53 chore: update ecosystem plugins (#​21249) (ESLint Bot)

v10.9.0

Compare Source

Features

• 08de88e feat: handle underflow in no-loss-of-precision (#​21218) (Rithish S)
• 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#​21175) (sethamus)

Bug Fixes

• 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#​21213) (sethamus)
• 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#​21204) (Yang Hyeonjong)
• 684b579 fix: prefer-template invalid autofix creates a tagged template call (#​21207) (김채영)

Documentation

• 9ef407a docs: use eslint.config.* wherever config file names are listed (#​21216) (Marry (Subin Yang))
• 87f66f4 docs: Update README (GitHub Actions Bot)
• 585ef37 docs: update architecture documentation (#​21112) (Francesco Trotta)
• f3993b0 docs: Update README (GitHub Actions Bot)
• ffc87d6 docs: fix broken links in Further Reading sections (#​21203) (Minsu)
• 1a761e1 docs: update moved JSX specification links (#​21198) (Imran Mustafa)
• 4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#​21202) (lumir)
• 510d1a2 docs: Update README (GitHub Actions Bot)

Chores

• 899dbf1 chore: update github/codeql-action action to v4.37.7 (#​21243) (renovate[bot])
• 9aa3873 chore: update ecosystem plugins (#​21235) (ESLint Bot)
• dc1e7a8 chore: update ecosystem plugins (#​21208) (ESLint Bot)
• f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#​21200) (dependabot[bot])
• 4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#​21199) (dependabot[bot])

sindresorhus/globals (globals)

v17.13.0

Compare Source

• Update globals (2026-10-01) (#​354) b007369

---

v17.12.0

Compare Source

• Update globals (2026-09-01) (#​353) 50a2119
• Add __webpack_layer__ global (#​351) 779a11a

---

v17.11.0

Compare Source

• Add react-native globals (#​337) 61eafbf

---

v17.10.0

Compare Source

• Add GM_cookie to Greasemonkey globals (#​349) f468407

---

serkodev/markdown-exit (markdown-exit)

v1.3.0

Compare Source

v1.2.1

Compare Source

Full Changelog: serkodev/markdown-exit@v1.2.0...v1.2.1

v1.2.0

Compare Source

nodejs/node (node)

v24.21.0: 2026-09-08, Version 24.21.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes

• [71106e1f17] - crypto: update root certificates to NSS 3.126 (Node.js GitHub Bot) #​65495
• [afca0a912d] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #​63949
• [6274fccbd9] - deps: update OpenSSL to 3.5.8 (Node.js GitHub Bot) #​65542
• [53cba013c7] - deps: update Undici to 7.29.1 (Node.js GitHub Bot) #​65789
• [0529772798] - (SEMVER-MINOR) lib,src: improve histogram implementation (James M Snell) #​65024
• [41c7062b81] - (SEMVER-MINOR) net: improve performance of net.BlockList (James M Snell) #​64974
• [5197b5a3c5] - (SEMVER-MINOR) perf_hooks: add statistical hypothesis testing to histogram (James M Snell) #​65416
• [35c635b032] - (SEMVER-MINOR) util: add non-throwing MIMEType.parse (James M Snell) #​64965

Commits

• [84d706cb9b] - assert: improve documentation wording (Kamal Rawal) #​64953
• [90d127db33] - (SEMVER-MINOR) benchmark: add --analyze mode to compare.js (James M Snell) #​65416
• [ad1d7884c3] - benchmark: add test-only and mock timers cases (Luan Muniz) #​64097
• [1d8f045914] - benchmark: apply highWaterMark in webstreams pipe-to (Matteo Collina) #​65138
• [ed7ba3c993] - benchmark: complete the sqlite is-transaction fix (Edy Silva) #​65218
• [c8837e1aa3] - benchmark: add test runner hooks and options (Luan Muniz) #​63754
• [2ba8661e23] - buffer: prevent string write offset overflow (Matteo Collina) #​65043
• [cc9ee6c2ae] - buffer: treat detached ArrayBuffers as empty (Archkon) #​64504
• [5a5d73e4c5] - build: pass target architecture to small-icu genccode (ulofiai) #​65095
• [273e72d1a5] - build: deprecate always enabled --enable-static (Chengzhong Wu) #​65103
• [89a67246e3] - build: check FIPS option value in node.gyp (Filip Skokan) #​64982
• [2d21f41cd5] - build: handle malformed OpenSSL macros (Filip Skokan) #​64982
• [f62bc0f862] - build,win: add PGO workload scripts (Stefan Stojanovic) #​63696
• [33d0c7dc12] - child_process: keep SIGWINCH from killing on Win (Kirill Saied) #​64510
• [71106e1f17] - crypto: update root certificates to NSS 3.126 (Node.js GitHub Bot) #​65495
• [419af8b86d] - crypto: fix missing error checks on ASN1_STRING_to_UTF8() (Nora Dossche) #​65200
• [8029383f3f] - crypto: use available BoringSSL APIs (Filip Skokan) #​65423
• [a9bd780e19] - crypto: remove obsolete BoringSSL shims (Filip Skokan) #​65423
• [7defefad3f] - crypto: read WebCrypto inputs through primordials (Filip Skokan) #​65115
• [6ed1e38627] - crypto: fix disabling FIPS mode (Filip Skokan) #​64982
• [afca0a912d] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #​63949
• [9b9dd6e9cf] - debugger: wait for target startup (Filip Skokan) #​65194
• [07faaeeffd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #​65653
• [53cba013c7] - deps: update undici to 7.29.1 (Node.js GitHub Bot) #​65789
• [0268ca547c] - deps: update archs files for openssl-3.5.8 (Node.js GitHub Bot) #​65542
• [6274fccbd9] - deps: upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #​65542
• [6bdcd121fa] - deps: update zlib to 1.3.2.1-motley-8002e91 (Node.js GitHub Bot) #​65316
• [c2aa446b6d] - deps: update simdjson to 4.6.7 (Node.js GitHub Bot) #​65318
• [3e58e48ea8] - deps: update googletest to 49495ea (Node.js GitHub Bot) #​65317
• [670b3665c0] - deps: cherry-pick libuv/libuv@e640dc9 (ulofiai) #​65118
• [ca1c67b021] - deps: float ICU-23262 patch for icu78 (René) #​64678
• [4ad043b0aa] - deps: enable AVX-512 OpenSSL asm with clang (Daniel Lemire) #​65136
• [96b4af109b] - deps: update googletest to d89aac5 (Node.js GitHub Bot) #​65153
• [774f663c56] - dgram: don't swallow bind errors when callback is provided (armanmikoyan) #​62602
• [94b118d62e] - diagnostics_channel: validate before channel activation (Trivikram Kamat) #​65313
• [09788665bd] - dns: validate address type in lookupService (Lazizbek Ergashev) #​64878
• [15f95fc0e2] - dns: validate port range in setServers() (René) #​65021
• [37b9e9a154] - dns: fix crash on setServers with port 0 (Lazizbek Ergashev) #​65009
• [cd6205fa0d] - doc: update AHAFS reference link (Taeuk Ha) #​65481
• [0e6f9ae42e] - doc: fix property names in os.networkInterfaces() example (Jihwan) #​65469
• [034a827b41] - doc: fix broken links in cli.md (Donghoon Kang) #​65412
• [eb364621d4] - doc: remove outdated WASI

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Europe/Warsaw)

• Branch creation
  • "before 5am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.