Skip to content

chore(deps): update devdependencies (non-major) (minor) - #2145

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/devdependencies-(non-major)
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/devdependencies-(non-major)

Conversation

@renovate

@renovate renovate Bot commented Jun 1, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@quobix/vacuum (source) 0.26.8 → 0.35.7 age confidence
@types/node (source) 24.12.4 → 24.19.2 age confidence
@types/pg (source) 8.20.4 → 8.23.1 age confidence
@typescript-eslint/eslint-plugin (source) 8.59.4 → 8.72.1 age confidence
@typescript-eslint/parser (source) 8.59.4 → 8.72.1 age confidence
pino-pretty 13.1.3 → 13.2.0 age confidence
prettier (source) 3.8.5 → 3.9.10 age confidence
y-websocket 3.0.0 → 3.1.0 age confidence

Release Notes

daveshanley/vacuum (@​quobix/vacuum)

v0.35.7

Compare Source

Changelog

  • e21e2b4 perf(motor): retain paths only for lint result locations
  • be36dd8 perf(openapi): reuse component nodes in description checks

v0.35.6

Compare Source

Changelog

  • 66466e4 chore: update libopenapi to v0.41.8
  • a32788e fix: patch HTML report dependency vulnerabilities

v0.35.4

Compare Source

Changelog

  • 813f649 feat: support unreferenced reusable object rules in Go and JavaScript
  • 4e3d8fe fix: accept root and encoded reusable object pointers
  • 2ee225c fix: align alphabetical ordering and finding paths
  • f897725 fix: complete schema dialect options and validate null values
  • 12db797 fix: preserve Vacuum value and ordering checks
  • a46f736 fix: preserve full schema reporting and default keyword validation
  • bc0a15a fix: preserve scalar types and property checks in core rules
  • f9e1e58 fix: reject enum containers without copying their contents
  • 7542fb6 fix: retain ordering failures around missing sort values
  • 8a94cee fix: support OpenLint JavaScript imports and or rules
  • 35801f6 fix: validate selected schema values and local option references

v0.35.2

Compare Source

Changelog

  • fb5d050 chore: tidy checksums after jsonpath upgrade
  • b046281 chore: update libopenapi and jsonpath to latest releases
  • 69034bf fix: enable backtick member selectors in custom rules

v0.35.1

Compare Source

Changelog

  • aeebc41 ci: cache Chromium by Playwright version
  • dcc35a1 fix: complete report totals and remove unused accordion data
  • 802b266 fix: explain unsupported JSONPath escapes and test ref selection
  • 1bea0a9 fix: keep expanded report violations visible in crowded categories
  • c7279ac fix: merge repeated ignore files across lint commands
  • a2a376d fix: preserve path arrays and language-server ignore-file precedence
  • 577d129 fix: render report category statistics and quality scores
  • 90daec5 refactor: share ignore-file merging and simplify load errors

v0.35.0

Compare Source

Changelog

  • bd1ac36 Cover JavaScript rulesets in CLI and agent test evidence
  • b49a3ac Execute local JavaScript rulesets with isolated bounded runtimes
  • 9e8af01 Keep inherited and child format scopes independent
  • e5a7d4e Preserve enabled rule severity through JavaScript inheritance
  • ac993c1 Preserve inherited formats, serialize module reads, and verify Spectral paths
  • 633308b Replace Python compatibility verifier with a Go test
  • 42bc66a Share TLS client construction and cancel JavaScript fetch with its invocation

v0.33.2

Compare Source

Changelog

  • b190758 Keep resolved rule input unchanged after lookup failures
  • 424f9da Patch report UI dependencies and remove vulnerable braces
  • a621b99 Reject incomplete original-spec comparisons across commands
  • 6318bf5 Report rule timeouts and address comparison review findings

v0.33.1

Compare Source

Changelog

  • a17b577 Avoid copying document values during AsyncAPI marker detection
  • a016427 Correct AsyncAPI 3 reference and security validation
  • c8d37e6 Preserve AsyncAPI source paths and validate info tags
  • 92c29d0 Preserve bundle output arguments and reference base identity
  • 230406a Remove unused AsyncAPI rule helpers
  • 056099d Scope AsyncAPI security checks to their owners
  • 288d417 Use released libasyncapi v0.0.4
  • 315a71b Verify standalone AsyncAPI bundles through lint
  • 19b6633 chore: pin AsyncAPI bundler review fixes
  • 4be55bb chore: pin bundler Windows path fix
  • 2a88b4c chore: pin published AsyncAPI bundler dependency
  • c1eba08 chore: use libasyncapi v0.0.3 release
  • 61f3251 feat: support AsyncAPI documents in vacuum bundle
  • b98c954 fix: keep ignore-file lint paths stable across runs

v0.33.0

Compare Source

Changelog

  • 4384b03 Add Spectral-compatible or core function
  • 851e42b Add native Arazzo validation and configurable lint rules
  • ef60d39 Align core result paths with their Doctor models
  • a1c9142 Allow Arazzo built-in rules to be enabled individually
  • d4979d0 Announce v0.33 Arazzo and or support in README
  • df72e49 Correct Princess Beef copyright dates
  • ae89846 Enable Arazzo linting across commands reports and editor diagnostics
  • b5c42f9 Fix AsyncAPI schema rule validation options
  • 08de2f5 Keep external source labels and snippets in one report slot
  • 810908c Preserve Arazzo paths after shared lookup changes
  • b44dba2 Preserve Arazzo source context across lint and report boundaries
  • d60e3d4 Preserve rejection of unsupported core option maps
  • 852872f Record the direct HTML parser test dependency
  • d9df352 Reject empty comma-separated or property names
  • a0c7cf1 Share lazy node path indexes across rule execution
  • 9a77754 docs(owasp): clarify upgrade behavior and simplify lint guidance
  • e2c64f6 feat: reject unsafe OAuth flows and authentication URLs
  • a7b225d fix(owasp): isolate OAuth flow checks and preserve finding ownership
  • e415eb6 fix: check HTTPS across server overrides and variables
  • 3c15d67 fix: check webhook and callback server transport
  • cbdc1b9 fix: distinguish request object closure from map size limits
  • 16bc4c1 fix: honor ancestor ignores for nested OAuth findings
  • 4db724c fix: tighten write security and scope JWT documentation checks
  • 35c425b refactor(owasp): share schema checks and cache composition targets

v0.32.0

Compare Source

Changelog

  • c8575b6 Add execution cancellation and concurrency controls with isolated auto-fixes
  • f84d230 Add overlay tag filtering and safe unused component pruning
  • 4390113 Document auto-fix gate and publication protocol
  • bd3f0e1 Preserve YAML presentation and share publication transform preparation
  • bb8d345 Preserve publication references across examples aliases and filtered paths
  • 62289f1 Preserve reusable execution configs and simplify cancellation lifecycle
  • 09bc187 Preserve split-reference and recursive-schema regression coverage
  • 4cc3e1d Report custom function loading failures once with accurate guidance
  • 3d111cf Report invalid custom function files and flag-shaped paths
  • f6ee9a0 Use shared Viper environment configuration for command flags

v0.31.0

Compare Source

Changelog

  • 957c730 Attach component name findings to Doctor without rescanning keys
  • c4515a0 Bound direction traversal for programmatic schema cycles
  • c6c20ab Build the sample plugin with the host dependency graph
  • 051f196 Classify OWASP limits by schema identity and request usage
  • 0a1cce7 Cover execution timeouts across formats and JavaScript batch calls
  • 67f9e6f Expand rule message templates in the shared function result path
  • 1865bb7 Explain unsupported Spectral rulesets and native OWASP migration
  • 4becce0 Follow reference targets with sibling schema keywords
  • de3013f Index schema directions once for OWASP limit rules
  • 4cc49c7 Isolate built-in rulesets and preserve HTTP-prefixed local paths
  • 21c45bd Keep custom function targets when rendering message templates
  • c8613ff Keep parent ruleset paths during dashboard reloads
  • 59473ec Keep remote ruleset references separate from filesystem paths
  • ad534fa Match equivalent JSONPath forms in wildcard ignores
  • 7980dfd Preserve Doctor messages and quoted keys in rule templates
  • 1c3c78b Preserve invalid ruleset errors after workspace lookup failures
  • 0d05ca5 Preserve plain messages and index custom result value lookups
  • 1a639a6 Preserve ruleset errors across library action forms and reports
  • e8a4fdf Preserve severity behavior for Markdown summary callers
  • 6bbb0fb Publish rule completion after releasing worker ownership
  • 4e20d47 Publish ruleset configuration failures as editor diagnostics
  • 5f0c365 Recognize string values in propertyNames schema checks
  • cc87b20 Reject incomplete rulesets after extension loading fails
  • ddb622a Reject unknown functions before rule execution
  • 9823772 Report missing and invalid CLI flag values
  • 975c420 Report threshold failures in pipeline summaries including hints
  • fb17f6e Resolve extended rulesets relative to their containing document
  • c78036d Resolve remote ruleset children after redirects and preserve URL queries
  • cda9a7b Retain serialization for shared schema rendering
  • 49778fa Reuse template indexes and skip unused message context work
  • c279472 Scope schema validation caches to each rule action
  • 6f43f2a Share lazy schema directions and remove repeated result processing
  • 5d22d7f Simplify migration diagnostics and consolidate CLI process tests
  • 9633d73 Upgrade Doctor to v0.0.83 and remove upstream JSON Schema
  • f0fde4d Upgrade pb33f libraries and migrate schema and YAML forks
  • e3679a8 Use execution decoding for all rule action maps
  • 5891ba6 Use the lint outcome for the displayed summary status
  • 2fea9fd Use validated LSP fallback on the first configuration RPC failure
  • b1a36ad Validate component names and report their document locations
  • 95542af Validate ruleset editor buffers without hiding API or tool errors
  • 124d906 fix: carry per-rule timeout in the rule context instead of mutating JS functions

v0.30.6

Compare Source

Changelog

  • 29e96e9 refactor: migrate to github.com/go-viper/mapstructure/v2

v0.30.5

Compare Source

Changelog

  • ab820b5 upgrade the upgradeables.

v0.30.4

Compare Source

Changelog

  • 1403fd0 Merge pull request #​972 from daveshanley/sec-updates
  • 4dfa37d chore: bump Go and npm dependencies for security updates
  • b76fecf fix go.sum

v0.30.3

Compare Source

Changelog

  • cd50957 Merge branch 'main' into feat/githubAnnotations
  • 7362dab Merge pull request #​920 from andreyyudin/feat/githubAnnotations
  • 5a2f765 Merge remote-tracking branch 'origin/main' into feat/githubAnnotations
  • b475f89 Merge remote-tracking branch 'origin/main' into tmp-merge-test
  • 76cceb9 feat: add GitHub Actions annotations support to lint command
  • 07bb868 feat: enhance GitHub Actions annotations handling for error reporting in lint commands
  • 2d352d5 feat: enhance GitHub Actions annotations handling for workspace paths and debug output suppression
  • fc1e9d0 feat: enhance GitHub Actions annotations with range support and options
  • 587b1ee feat: improve GitHub Actions annotations handling for error reporting and multi-file support
  • 58d3874 fix lint github-annotations output for mixed failures and annotation-only mode
  • 8da3a8a fix(lint): honour github-annotations contract in single-file and chrome paths
  • f84f968 fix(lint): propagate ignore-file and custom-function loader errors
  • 57b4530 fix: enhance GitHub Actions annotations for error reporting and handling in lint command

v0.30.2

Compare Source

Changelog

  • ddeac11 Read version from the package's own package.json in postinstall

v0.30.1

Compare Source

Changelog

  • 488a197 chore: upgrade doctor to v0.0.80
  • d2165e5 feat: add family-aware docs diagnostics
  • bfe78c3 fix: fingerprint built-in docs rulesets
  • b91b97f fix: make lint resource release concurrency-safe

v0.30.0

Compare Source

Changelog

v0.29.10

Compare Source

Changelog

v0.29.9

Compare Source

Changelog

  • 75c9453 case-insensitive category matching and warn when --fix applies no fixes

v0.29.8

Compare Source

Changelog

  • b6b025f Fix #​919: isolate concurrent schema and example validation from shared model mutation
  • 4926612 remove scratch file

v0.29.7

Compare Source

Changelog

v0.29.6

Compare Source

Changelog

v0.29.5

Compare Source

Changelog

v0.29.4

Compare Source

Changelog

  • 8b036cb fix(oas_schema): use validator document errors instead of custom marshal check

v0.29.3

Compare Source

Changelog

  • b25fda8 bump deps
  • e8409ac bump those deps!
  • eae83a5 deps: bump libopenapi to v0.38.0 and adapt rules to lazy schema cache
  • b23932b fixed flags broken on tests
  • 813e04f migrate to forked testify
  • 2272767 refactor original-spec diffing and skip relint for identical specs
  • 34ff93d tests are flaking, hardening them
  • 92ef447 working through flaky tests

v0.29.2

Compare Source

Changelog

  • c14a4a9 fix(motor): avoid broad component alias reconciliation
  • 47c5aac fix(motor): honor GOMAXPROCS for rule execution concurrency

v0.29.1

Compare Source

Changelog

  • f4a45ca Bump github.com/alecthomas/chroma/v2 from 2.24.1 to 2.26.1
  • 93e9b2e Bump github.com/pb33f/libopenapi-validator from 0.13.7 to 0.13.8
  • 7360c06 add permissions.
  • 3f9cc52 fix(motor): include sibling component uses in nested reference alias paths
  • 925c673 removed dead file

v0.29.0

Compare Source

Changelog

  • 21d3564 add AsyncAPI 3.x linting support
  • cac3f39 updated docs and help to add in new AsyncAPI support.
  • 343544c updated readme
  • 93e337a upgraded libopenapi and upgrade code.

v0.28.4

Compare Source

Changelog

  • 6732bb0 bump deps
  • 4942ddd ensure bundling behavior between docs and bundle operates the same way.

v0.28.3

Compare Source

Changelog

  • 74af925 fix: ensure x-lint-ignore directives respect parent ignores
  • 2238fd5 reconcile reference-alias result paths inside allOf/anyOf/oneOf

v0.28.2

Compare Source

Changelog

  • 6acde73 distinguish Homebrew cask from formula installs in upgrade flow
  • 1b8db0d sort filtered rule stats and generalize source drift matching to external origins

v0.28.1

Compare Source

Changelog

  • f2f9f98 harden result path reconciliation and violation diffing against ref drift
  • 9b004a5 modified readme to add / correct links.
  • 649843d restored docker entrypoint

v0.28.0

Compare Source

Changelog

  • a3d2a5a added new schema command for JSON Schema linting!
  • ca6deec added new schema command to agents.md
  • 4586e71 clean up the repo root a little.
  • 4754bc1 cleanup sweep.
  • 0d95d7b update readme

v0.27.3

Compare Source

Changelog

v0.27.2

Compare Source

Changelog

v0.27.1

Compare Source

Changelog

v0.27.0

Compare Source

Changelog

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.72.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#​13039)
  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#​13062)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

Compare Source

🚀 Features
  • eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#​12992)
  • eslint-plugin: lazy load rules (#​13010)
🩹 Fixes
  • type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#​13054)
  • eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#​13055)
  • eslint-plugin: [require-array-sort-compare] check tuples (#​13058)
  • eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#​13053)
  • eslint-plugin: [no-deprecated] report deprecated properties in object literals (#​12704)
  • eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#​13016)
  • typescript-estree: include leading and trailing comments & whitespace in Program range (#​12991)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

Compare Source

🩹 Fixes
  • eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#​12805)
  • eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#​12995)
  • eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#​12977)
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#​12974)
  • eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#​12989)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.1

Compare Source

🩹 Fixes
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#​12941)
  • eslint-plugin: [prefer-optional-chain] check the constrained type (#​12953)
  • eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#​12930)
  • eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#​12957)
  • eslint-plugin: [require-array-sort-compare] use array argument type constraint (#​12919)
  • eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#​12892)
  • eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#​12923)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

[v8.71.0](https://redirect.github.com/typescript-e

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • On day 1 of the month (* * 1 * *)
  • Automerge
    • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
    • Only on Sunday and Saturday (* * * * 0,6)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Jun 1, 2026
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 9 times, most recently from 025b7e2 to aaf70e0 Compare June 8, 2026 20:46
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 2 times, most recently from ced0df4 to 311845c Compare June 16, 2026 03:13
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 4 times, most recently from 60d3a6f to 2bd4626 Compare June 25, 2026 16:54
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 12 times, most recently from 893ec72 to a544d36 Compare July 2, 2026 23:59
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 2 times, most recently from e75353d to 17743da Compare July 8, 2026 07:36
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch from 17743da to fdf3c11 Compare July 18, 2026 23:30
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 2 times, most recently from ac43bee to 93b48b8 Compare August 10, 2026 23:58
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 2 times, most recently from a4e62d2 to dce984b Compare August 17, 2026 23:31
@sonarqubecloud

Copy link
Copy Markdown

@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 9 times, most recently from 422bdbf to d2bfd69 Compare October 10, 2026 18:30
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 3 times, most recently from 456bf36 to 9c50bb8 Compare October 15, 2026 20:41
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch 6 times, most recently from 1ffdf26 to 68eab0f Compare October 26, 2026 20:28
@renovate
renovate Bot force-pushed the renovate/devdependencies-(non-major) branch from 68eab0f to f45d2be Compare October 28, 2026 03:49
@sonarqubecloud

Copy link
Copy Markdown

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants