chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #260 · escapace/accept-language-parser

renovate · 2026-03-16T01:03:26Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@commitlint/cli (source)	`20.4.3` → `20.5.0`
@commitlint/config-conventional (source)	`20.4.3` → `20.5.0`
@vitest/coverage-v8 (source)	`4.0.18` → `4.1.0`
es-toolkit (source)	`1.45.0` → `1.45.1`
eslint (source)	`9.39.3` → `9.39.4`
hono (source)	`4.12.7` → `4.12.8`
knip (source)	`5.85.0` → `5.86.0`
lefthook	`2.1.2` → `2.1.4`
syncpack	`14.0.0` → `14.2.0`
vitest (source)	`4.0.18` → `4.1.0`

Release Notes

conventional-changelog/commitlint (@commitlint/cli)

`v20.5.0`

Compare Source

Bug Fixes

cli: validate that --cwd directory exists before execution (#4658) (cf80f75), closes #4595

20.4.4 (2026-03-12)

Note: Version bump only for package @commitlint/cli

20.4.3 (2026-03-03)

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @commitlint/cli

20.4.1 (2026-02-02)

Note: Version bump only for package @commitlint/cli

`v20.4.4`

Compare Source

Note: Version bump only for package @commitlint/cli

conventional-changelog/commitlint (@commitlint/config-conventional)

`v20.5.0`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

20.4.4 (2026-03-12)

Note: Version bump only for package @commitlint/config-conventional

20.4.3 (2026-03-03)

Bug Fixes

footer parser does not escape special chars for regex #4560 (#4634) (8ff7c7f)

20.4.2 (2026-02-19)

Note: Version bump only for package @commitlint/config-conventional

20.4.1 (2026-02-02)

Note: Version bump only for package @commitlint/config-conventional

`v20.4.4`

Compare Source

Note: Version bump only for package @commitlint/config-conventional

vitest-dev/vitest (@vitest/coverage-v8)

`v4.1.0`

Compare Source

Vitest 4.1 is out!

This release page lists all changes made to the project during the 4.1 beta. To get a review of all the new features, read our blog post.

🚀 Features

Return a disposable from doMock() - by @kirkwaiblinger in #9332 (e3e65)
Added chai style assertions - by @ronnakamoto and @sheremet-va in #8842 (841df)
Update to sinon/fake-timers v15 and add setTickMode to timer controls - by @atscott and @sheremet-va in #8726 (4b480)
Expose matcher types - by @sheremet-va in #9448 (3e4b9)
Add toTestSpecification to reported tasks - by @sheremet-va in #9464 (1a470)
Show a warning if vi.mock or vi.hoisted are declared outside of top level of the module - by @sheremet-va in #9387 (5db54)
Track and display expectedly failed tests (.fails) in UI and CLI - by @Copilot, sheremet-va and @sheremet-va in #9476 (77d75)
Support tags - by @sheremet-va in #9478 (de7c8)
Implement aroundEach and aroundAll hooks - by @sheremet-va in #9450 (2a8cb)
Stabilize experimental features - by @sheremet-va in #9529 (b5fd2)
Accept new or all in --update flag - by @sheremet-va in #9543 (a5acf)
Support meta in test options - by @sheremet-va in #9535 (7d622)
Support type inference with a new test.extend syntax - by @sheremet-va in #9550 (e5385)
Support vite 8 beta, fix type issues in the config with different vite versions - by @sheremet-va in #9587 (99028)
Add assertion helper to hide internal stack traces - by @hi-ogawa and Claude Opus 4.6 in #9594 (eeb0a)
Store failure screenshots using artifacts API - by @macarie in #9588 (24603)
Allow vitest list to statically collect tests instead of running files to collect them - by @sheremet-va in #9630 (7a8e7)
Add --detect-async-leaks - by @AriPerkkio in #9528 (c594d)
Implement mockThrow and mockThrowOnce - by @thor-juhasz and @sheremet-va in #9512 (61917)
Support update: "none" and add docs about snapshots behavior on CI - by @hi-ogawa in #9700 (05f18)
Support playwright launchOptions with connectOptions - by @hi-ogawa in #9702 (f0ff1)
Add page/locator.mark API to enhance playwright trace - by @hi-ogawa in #9652 (d0ee5)
api:
- Support tests starting or ending with test in experimental_parseSpecification - by @jgillick and Jeremy Gillick in #9235 (2f367)
- Add filters to createSpecification - by @sheremet-va in #9336 (c8e6c)
- Expose runTestFiles as alternative to runTestSpecifications - by @sheremet-va in #9443 (43d76)
- Add allowWrite and allowExec options to api - by @sheremet-va in #9350 (20e00)
- Allow passing down test cases to toTestSpecification - by @sheremet-va in #9627 (6f17d)
browser:
- Add userEvent.wheel API - by @macarie in #9188 (66080)
- Add filterNode option to prettyDOM for filtering browser assertion error output - by @Copilot, sheremet-va and @sheremet-va in #9475 (d3220)
- Support playwright persistent context - by @hi-ogawa, Claude Opus 4.6 and @sheremet-va in #9229 (f865d)
- Added detailsPanelPosition option and button - by @shairez in #9525 (c8a31)
- Use BlazeDiff instead of pixelmatch - by @macarie in #9514 (30936)
- Add findElement and enable strict mode in webdriverio and preview - by @sheremet-va in #9677 (c3f37)
cli:
- Add @bomb.sh/tab completions - by @AmirSa12 and @sheremet-va in #8639 (200f3)
coverage:
- Support ignore start/stop ignore hints - by @AriPerkkio in #9204 (e59c9)
- Add coverage.changed option to report only changed files - by @kykim00 and @AriPerkkio in #9521 (1d939)
experimental:
- Add onModuleRunner hook to worker.init - by @sheremet-va in #9286 (e977f)
- Option to disable the module runner - by @sheremet-va and @AriPerkkio in #9210 (9be61)
- Add importDurations: { limit, print } options - by @hi-ogawa, Claude Opus 4.6 and @sheremet-va in #9401 (7e10f)
- Add print and fail thresholds for importDurations - by @hi-ogawa and Claude Opus 4.6 in #9533 (3f7a5)
fixtures:
- Pass down file context to beforeAll/afterAll - by @sheremet-va in #9572 (c8339)
reporters:
- Add agent reporter to reduce ai agent token usage - by @cpojer in #9779 (3e9e0)
runner:
- Enhance retry options - by @MazenSamehR, Matan Shavit, @AriPerkkio and @sheremet-va in #9370 (9e4cf)
ui:
- Allow run individual test/suites - by @userquin in #9465 (73b10)
- Add project filter/sort support - by @userquin in #8689 (0c7ea)
- Add duration sorting to explorer - by @julianhahn and @cursoragent in #9603 (209b1)
- Implement filter for slow tests - by @DerYeger and @userquin in #9705 (8880c)
vitest:
- Add run summary in GitHub Actions Reporter - by @macarie and jhnance in #9579 (96bfc)

🐞 Bug Fixes

Deprecate several vitest/* entry points - by @sheremet-va in #9347 (fd459)
Use meta.url in createRequire - by @sheremet-va in #9441 (e3422)
Preact browser mode init example of render function not async - by @WuMingDao in #9375 (2bea5)
Deprecate unused types in matcher context - by @sheremet-va in #9449 (20f87)
Handle external/noExternal during configEnvironment hook - by @hi-ogawa and Claude Opus 4.6 in #9508 (59ea2)
Replace default ssr environment runner with Vitest server module runner - by @hi-ogawa and Claude Opus 4.6 in #9506 (cd5db)
Propagate experimental CLI options to child projects - by @hi-ogawa and Claude Opus 4.6 in #9531 (b624f)
Show a warning when browser.isolate is used - by @sheremet-va in #9410 (3d48e)
Fix vi.mock({ spy: true }) node v8 coverage - by @hi-ogawa, hi-ogawa and Claude Opus 4.6 in #9541 (687b6)
Don't show internal ssr handler in errors - by @sheremet-va in #9547 (76c43)
Close vitest if it failed to start - by @sheremet-va in #9573 (728ba)
Fix ssr environment runner in project - by @hi-ogawa in #9584 (09006)
Trim trailing white spaces in code block - by @hi-ogawa in #9591 (f78be)
Support inline snapshot inside test.for/each - by @hi-ogawa in #9590 (615fd)
Apply source maps for external module stack trace - by @hi-ogawa in #9152 (79e20)
Remove the .name from statically collected test - by @sheremet-va in #9596 (b66ff)
Don't suppress warnings on pnp - by @sheremet-va in #9602 (89cbd)
Support snapshot with expect.soft - by @iumehara, @hi-ogawa and Claude Opus 4.6 in #9231 (3eb2c)
Log seed when only sequence.shuffle.tests is enabled - by @kaigritun, Kai Gritun and @sheremet-va in #9576 (8182b)
Externalize expect/src/utils from vitest - by @hi-ogawa in #9616 (48739)
Ignore test.override during static collection - by @sheremet-va in #9620 (09174)
Increase stacktrace limit for --detect-async-leaks - by @AriPerkkio in #9638 (9fd4c)
Hanging-reporter link in cli - by @flx-sta in #9649 (7c103)
Fix teardown timeout of aroundEach/All when inner aroundEach/All throws - by @hi-ogawa in #9657 (4ec6c)
Fix ui mode / html reporter and coverage integration - by @hi-ogawa and Claude Opus 4.6 in #9626 (86fad)
Don't continue when aroundEach/All setup timed out - by @hi-ogawa in #9670 (bb013)
Align VitestRunnerConfig optional fields with SerializedConfig - by @hi-ogawa in #9661 (79520)
Handle Symbol values in format utility - by @nami8824 in #9658 (0583f)
Deprecate toBe* spy assertions in favor of toHaveBeen* (and toThrowError) - by @sheremet-va in #9665 (4d390)
Don't propagate nested aroundEach/All errors but aggregate them on runner - by @hi-ogawa in #9673 (b6365)
Show a better error if there is a pending dynamic import - by @sheremet-va in #9676 (7ef5c)
Preserve stack trace of resolves/rejects chained assertion error - by @hi-ogawa in #9679 (c6151)
Handle module-sync condition in vmThreads/vmForks require - by @lesleh in #9650 and #9651 (bb203)
Hooks should respect maxConcurrency - by @hi-ogawa in #9653 (16d13)
Recursively autospy module object - by @hi-ogawa in #9687 (695a8)
Remove trailing spaces from diff error log - by @hi-ogawa and @sheremet-va in #9680 (395d1)
Respect project resolve.conditions for externals - by @hi-ogawa in #9717 (1d498)
Use object for WeakMap instead of a symbol to support webcontainers - by @sheremet-va in #9731 (c5225)
Fix re-mocking virtual module - by @hi-ogawa in #9748 (3cbbb)
Cancelling should stop current test immediately - by @AriPerkkio in #9729 (0cb2f)
Make mockObject change backwards compatible - by @sheremet-va in #9744 (84c69)
Fix URL.name on jsdom - by @hi-ogawa in #9767 (031f3)
Save and restore module graph in blob reporter - by @hi-ogawa in #9740 (84355)
Don't silence reporter errors from test runtime events handler in normal run and --merge-reports - by @hi-ogawa in #9727 (4072d)
Fix vi.importActual() for virtual modules - by @hi-ogawa and Claude Opus 4.6 in #9772 (1e89e)
Throw FixtureAccessError if suite hook accesses undefined fixture - by @sheremet-va in #9786 (fc2ce)
Allow hyphens in project config file name pattern - by @Koutaro-Hanabusa and @hi-ogawa in #9760 (33e96)
Manual and redirect mock shouldn't load or transform original module - by @hi-ogawa and Claude Opus 4.6 in #9774 (a8216)
hideSkippedTests should not hide test.todo - by @oilater in #9562 and #9781 (8181e)
Allow catch/finally for async assertion - by @hi-ogawa in #9827 (031f0)
Resolve fixture overrides from test's suite in beforeEach hooks - by @hi-ogawa and Claude Opus 4.6 in #9826 (99e52)
Use isAgent check, not just TTY, for watch mode - by @sheremet-va in #9841 (c3cac)
Use performance.now to measure test timeout duration - by @hi-ogawa and Claude Opus 4.6 in #9795 (f48a6)
Correctly identify concurrent test during static analysis - by @sheremet-va in #9846 (1de0a)
browser:
- Avoid updating screenshots when toMatchScreenshot passes - by @macarie in #9289 (46aab)
- Hide injected data-testid attributes - by @sheremet-va in #9503 (c8d2c)
- Throw an error if iframe was reloaded - by @sheremet-va in #9516 (73a81)
- Encode projectName in browser client URL - by @dkkim0122 in #9523 (5b164)
- Don't take failure screenshot if tests have artifacts created by toMatchScreenshot - by @macarie in #9552 (83ca0)
- Remove --remote-debugging-address from chrome args - by @hi-ogawa and @AriPerkkio in #9712 (f09bb)
- Make sure userEvent actions support ensureAwaited - by @sheremet-va in #9732 (97685)
- Types of getCDPSession and cdp() - by @AriPerkkio in #9716 (689a2)
- Skip esbuild.legalComments when using rolldown-vite - by @Copilot, hi-ogawa and @hi-ogawa in #9803 (3505f)
chai:
- Don't allow deepEqual in the config because it's not serializable - by @sheremet-va in #9666 (9ee99)
coverage:
- Infer transform mode for uncovered files - by @AriPerkkio in #9435 (f3967)
- thresholds.autoUpdate to preserve ending whitespace - by @AriPerkkio in #9436 (7e534)
deps:
- Update all non-major dependencies - by @hi-ogawa in #9192 (90c30)
- Update all non-major dependencies - in #9485 (c0118)
- Update all non-major dependencies - in #9567 (13c9e)
docs:
- Fix old /config/#option hash links causing hydration errors - by @hi-ogawa, Claude Opus 4.6 and @sheremet-va in #9610 (a603c)
expect:
- toMatchObject(Map/Set) should expect Map/Set on left hand side - by @hi-ogawa and Claude Opus 4.6 in #9532 (381da)
- Fix objectContaining with proxy - by @hi-ogawa and Claude Opus 4.6 in #9554 (7ce34)
- Support arbitrary value equality for toThrow and make Error detection robust - by @hi-ogawa and Claude Opus 4.6 in #9570 (de215)
mock:
- Inject helpers after hashbang if present - by @sheremet-va in #9545 (65432)
mocker:
- Update vite's peer dependency range - by @sheremet-va in #9808 (36f9a)
reporter:
- dot reporter leaves pending tests - by @AriPerkkio in #9684 (4d793)
runner:
- Mark repeated tests as finished on last run - by @AriPerkkio in #9707 (cc735)
spy:
- Support deep partial in vi.mocked - by @j2h30728 in #8152 and #9493 (71cb5)
- Fallback to object accessor if descriptor's value is undefined - by @sheremet-va in #9511 (6f181)
- Throw correct errors when shorthand methods are used on a class - by @sheremet-va in #9513 (5d0fd)
types:
- bench.reporters no longer gives type errors when passing file name string paths - by @Bertie690 in #9695 (093c8)
ui:
- Process artifact attachments when generating HTML reporter - by @macarie in #9472 (96eb9)
- Don't fail if --ui and --root are specified together - by @sheremet-va in #9536 (d9305)

🏎 Performance

pretty-format: Combine DOMElement plugins - by @sheremet-va in #9581 (da85a)

View changes on GitHub

toss/es-toolkit (es-toolkit)

`v1.45.1`

Compare Source

Released on March 4th, 2026.

Reverted the return type of sample to not include undefined.
Fixed Deno install command to include jsr: prefix. ([#1627])

We sincerely thank @mwln for their contributions. We appreciate your great efforts!

eslint/eslint (eslint)

`v9.39.4`

Compare Source

Bug Fixes

f18f6c8 fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)
a3c868f fix: update dependency @eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)
234d005 fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)
b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#20538) (루밀LuMir)

Documentation

4675152 docs: add deprecation notice partial (#20520) (Milos Djermanovic)

Chores

b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)
71b2f6b chore: package.json update for @eslint/js release (Jenkins)
1d16c2f ci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)

honojs/hono (hono)

`v4.12.8`

Compare Source

What's Changed

fix(utils/mime): Normalize input extension to lowercase before MIME check by @TheEssem in #4800
fix(bearer-auth): escape regex metacharacters in bearer auth prefix option by @otoneko1102 in #4750

New Contributors

@TheEssem made their first contribution in #4800

Full Changelog: honojs/hono@v4.12.7...v4.12.8

webpro-nl/knip (knip)

`v5.86.0`: Release 5.86.0

Compare Source

Rewrite import specifiers to use .ts extensions, remove tsx (#1548) (58674ad) - thanks @wojtekmaj!
Add .spec-d to vitest entry files (#1556) (3123ab7) - thanks @yamachi4416!
Update docs for tsx → node (0418eba)
Auto-format (7142fd7)
Add Qwik plugin (#1557) (fc668f4) - thanks @azat-io!
Fix Bun plugin to handle directory arguments in bun test (c112b6c)
Update FAQ (b105a42)
fix(plugin): swc with externalHelpers setting ignores @swc/helpers dependency (#1560) (4bcb1f5) - thanks @bobaaaaa!
chore: git ignore artifacts (#1563) (4878724) - thanks @unional!
Fix Vite plugin to respect root option for index.html entries (#1561) (67a5647) - thanks @azat-io!
Fix Astro sharpImageService() false positive for unused sharp (#1559) (c36247c) - thanks @azat-io!
Fix up gitignore test (b2c3d08)
fix: normalize Windows backslash paths in fs.watch listener to fix --watch on Windows (#1558) (b86b421) - thanks @Aiudadadadf!
Fix wrangler plugin not enabled by jsonc config (#1564) (00bb1be) - thanks @DaniFoldi!
Edit AGENTS.md (a2aaf2f)
Fix tsconfig presets marked as unlisted in strict mode (resolve #1568) (463d67d)
oxcellent (8a602c7)
Refactor format test and use prettier for consistent results (b6afc01)
Sort package.json ([d3a521b](https://redirect.github.com/webpro-nl/knip/com

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

socket-security · 2026-03-16T01:04:01Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@commitlint/cli@20.4.3 ⏵ 20.5.0	⁺¹	⁺¹
vitest@4.0.18 ⏵ 4.1.0		⁺¹
@vitest/coverage-v8@4.0.18 ⏵ 4.1.0		⁺¹¹	⁺¹
eslint@9.39.3 ⏵ 9.39.4
es-toolkit@1.45.0 ⏵ 1.45.1			^-1
lefthook@2.1.2 ⏵ 2.1.4			⁺²
knip@5.85.0 ⏵ 5.86.0
hono@4.12.7 ⏵ 4.12.8	⁺¹	⁺¹
syncpack@14.0.0 ⏵ 14.2.0	⁺¹		⁺¹
@commitlint/config-conventional@20.4.3 ⏵ 20.5.0

View full report

socket-security · 2026-03-16T01:04:03Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 0dcb37d to eb9229b Compare March 21, 2026 12:59

chore(deps): update all non-major dependencies

1770142

renovate bot force-pushed the renovate/all-minor-patch branch from eb9229b to 1770142 Compare March 22, 2026 13:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all non-major dependencies#260

chore(deps): update all non-major dependencies#260
renovate[bot] wants to merge 1 commit intotrunkfrom
renovate/all-minor-patch

renovate bot commented Mar 16, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Mar 16, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Mar 16, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

20.4.4 (2026-03-12)

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

20.4.1 (2026-02-02)

20.4.4 (2026-03-12)

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

20.4.1 (2026-02-02)

🚀 Features

🐞 Bug Fixes

🏎 Performance

Bug Fixes

Documentation

Chores

What's Changed

New Contributors

v5.86.0: Release 5.86.0

Configuration

Uh oh!

socket-security bot commented Mar 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Mar 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

renovate bot commented Mar 16, 2026 •

edited

Loading

`v5.86.0`: Release 5.86.0

socket-security bot commented Mar 16, 2026 •

edited

Loading

socket-security bot commented Mar 16, 2026 •

edited

Loading