fix(deps): update npm dependencies by GiteaBot · Pull Request #38342 · go-gitea/gitea

GiteaBot · 2026-07-06T02:11:41Z

This PR contains the following updates:

Package	Change	Age	Confidence
@codemirror/language	`6.12.3` → `6.12.4`
@codemirror/view	`6.43.2` → `6.43.4`
@mermaid-js/layout-elk	`0.2.1` → `0.2.2`
@primer/octicons (source)	`19.28.1` → `19.29.1`
@typescript-eslint/parser (source)	`8.62.0` → `8.62.1`
asciinema-player	`3.16.0` → `3.17.0`
clippie	`4.2.0` → `4.2.1`
js-yaml	`5.1.0` → `5.2.0`
mermaid	`11.15.0` → `11.16.0`
postcss (source)	`8.5.15` → `8.5.16`
spectral-cli-bundle	`1.0.8` → `1.0.9`
stylelint (source)	`17.13.0` → `17.14.0`
typescript-eslint (source)	`8.62.0` → `8.62.1`
updates	`17.18.0` → `17.18.1`
vite (source)	`8.1.0` → `8.1.2`
vite-string-plugin	`2.0.4` → `2.0.5`
vue (source)	`3.5.38` → `3.5.39`
vue-tsc (source)	`3.3.5` → `3.3.6`

Release Notes

mermaid-js/mermaid (@mermaid-js/layout-elk)

`v0.2.2`

Compare Source

Patch Changes

#7712 e2e518a Thanks @knsv-bot! - fix(elk): propagate elk.mergeEdges config to subgraphs in ELK layout — previously edges defined inside a subgraph were not merged even when elk.mergeEdges: true was set
Updated dependencies [ea1c48f, f45cc2c, f1f4d45, 633c261, c8ba156, 4e4e6c4, cfd2391, c1f116d, b4d0442, 72fbab1, a6f097d, 37f2e36, 4e63e9d, 4887e97, a4c1e50, cc75089, be2e282, d945968, 2f5e9e8, 8dcdce4, 1bbc189, 05223be, 365c1b1, 06a32b7, afaf306, 216e4e9, 79e97cd, e5c75e6, 974fa7b, c2305df, a4a250b]:
- mermaid@11.16.0

primer/octicons (@primer/octicons)

`v19.29.1`

Compare Source

Patch Changes

#1238 91db6df3 Thanks @liuliu-dev! - Fix repo-forked-locked-16 rendering mangled

`v19.29.0`

Compare Source

Minor Changes

#1228 2f1449f1 Thanks @dylanatsmith! - Add project-check, graph-stacked-area, and view-files icons (16px and 24px)

typescript-eslint/typescript-eslint (@typescript-eslint/parser)

`v8.62.1`

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

asciinema/asciinema-player (asciinema-player)

`v3.17.0`: 3.17.0

Compare Source

This is a mostly bug fix release:

fixed marker timeline positions vs idleTimeLimit option (fixes #326)
fixed terminal size override via cols/rows options (regressed in 3.16.0)
fixed a visual glitch with step-back in certain situations

This release also brings an experimental segmented recording loading (similar to HLS segmenting). It's not documented yet, I'll test the behavior and API on asciinema.org first before I commit to it fully.

nodeca/js-yaml (js-yaml)

`v5.2.0`

Compare Source

Added

Added maxTotalMergeKeys (10000) loader option to limit the total number of
keys processed by YAML merge (<<) across one load() / loadAll() call.
Added maxAliases (-1) loader option to limit the number of YAML aliases per
document.

Removed

maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge
processing.

Fixed

Round-trip of integers with exponential form (>= 1e21)

postcss/postcss (postcss)

`v8.5.16`

Compare Source

Fixed Input#origin() position (by @mizdra).
Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).
Fixed putting parent-less node in nodes of new node (by @MahinAnowar).
Fixed computing offset in positionBy() (by @greymoth-jp).
Fixed rangeBy() on index: 0 (by @sarathfrancis90).

stylelint/stylelint (stylelint)

`v17.14.0`

Compare Source

It fixes 3 bugs, including a false negative one.

Fixed: performance of getting module paths (#9354) (@jeddy3).
Fixed: performance by dynamically importing TIMING only on use (#9356) (@jeddy3).
Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@sarathfrancis90).

typescript-eslint/typescript-eslint (typescript-eslint)

`v8.62.1`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

`v8.1.2`

Compare Source

Bug Fixes

deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)
restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)
revert, "fix: escape ids with multiple null bytes (#22687)" (cccef55)
revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (cf97711)

`v8.1.1`

Compare Source

Features

update dynamic import warning to link to Vite docs (#22823) (62bd7af)

Bug Fixes

bundled-dev: avoid stack overflow on import.meta.hot.invalidate() (#22797) (709eb8e)
bundled-dev: serve assets emitted during HMR/lazy compile (#22745) (5876b2c)
bundledDev: skip plugin transform hooks for rolldown-lazy stub modules (#22778) (8f925e2)
css: preserve dollar signs in external @import urls with lightningcss (#22718) (9fa7ab4)
css: resolve tsconfig paths in CSS and Sass @import (#22775) (ef0b891)
deps: update all non-major dependencies (#22734) (e635f49)
deps: update all non-major dependencies (#22804) (8837400)
deps: update rolldown-related dependencies (#22591) (2ce6677)
escape ids with multiple null bytes (#22687) (833fc30)
hide console window when running 'net use' on Windows (#22698) (92b63f2)
ignore bundled config temp dir (#22800) (043a810)
invert esbuild.jsxSideEffects when converting to oxc.jsx.pure (#22809) (33895ba)
optimize-deps: ignore ERR_CLOSED_SERVER in scanner (#22784) (085a0ab)
optimizer: scanner should resolve input from root (#22769) (9722b07)
resolve pnpm .modules.yaml from workspace root instead of cwd (#22757) (2531ac7)
return sourcemap field from some plugins that were lacking (#22782) (7e18bf8)
server: handle malformed URI in indexHtmlMiddleware (#22781) (84f5ccc)

Miscellaneous Chores

improve dependency optimizer messages (#22549) (092cb3b)

Code Refactoring

css: remove lightningcss null byte bug workaround (#22822) (2dafd3b)
use pre-defined environments variable to avoid duplicate Object.values calls (#22790) (1113acf)

Tests

enable "manual chunk path" test and remove "worker.format error" test (#22824) (c088511)

vuejs/core (vue)

`v3.5.39`

Compare Source

Bug Fixes

compiler-core: correct filter rewrite recursion (#14959) (be7ce31)
hydration: force patch dynamic props when hydrating (#9083) (024cf06), closes #9033
hydration: respect data-allow-mismatch on conditional branches (#12801) (164af63), closes #12782
reactivity: avoid triggering effects when set fails (#14964) (e450973)
runtime-core: handle non-isomorphic block element update (#15002) (932ddd0), closes #6385
runtime-core: normalize function children for elements and Teleport (#9108) (2f374cd), closes #9107
runtime-core: pause tracking when invoking function refs (#14985) (3ac052b)
runtime-core: preserve once event listener name (#8341) (87b73b6), closes #8342
runtime-dom: preserve option modifier event names (#8338) (4b659e6), closes #8334
ssr: dedupe inherited scope ids during vnode rendering (#15005) (027da6b), closes #12159 #12175
ssr: resolve nested async teleport content (#9431) (31d0f23), closes #6207
teleport: handle teleport unmount edge case (#12705) (671997a), closes #12702
types: support named tuple emits (#12676) (232f402), closes #12673
types: validate defineModel defaults (#14968) (747f57e), closes #14966

vuejs/language-tools (vue-tsc)

`v3.3.6`

Compare Source

language-core

fix: make generic component internal context inference type-safe across .d.ts boundary (#6104) - Thanks to @Holiden!
fix: do not treat non-trivial property accesses as compound - Thanks to @KazariEX!
fix: treat semicolon-terminated expressions as compound - Thanks to @KazariEX!
fix: preserve return types for compound event handlers - Thanks to @KazariEX!
fix: use WeakMap to cache inline TS ASTs - Thanks to @KazariEX!
fix: match upstream CSS v-bind parsing behavior - Thanks to @KazariEX!
fix: include setup bindings as potential component names (#6111) - Thanks to @KazariEX!
perf: reduce boundary code feature allocations - Thanks to @KazariEX!
refactor: centralize code features and deprecate allCodeFeatures - Thanks to @KazariEX!

Configuration

📅 Schedule: (UTC)

Branch creation
- Only on Monday (* * * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

GiteaBot · 2026-07-06T02:11:44Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Post-upgrade command 'make generate-codemirror-languages' has not been added to the allowed list in allowedCommands

The npm postUpgradeTasks run `make generate-codemirror-languages`, but the allowlist only permitted `make (tidy|svg)`, so renovate reported an artifact update failure. Add the command to RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS. Assisted-by: Claude Code:Opus 4.8

silverwind · 2026-07-06T10:00:18Z

⚠️ Artifact update problem

Fixed in 43e1889, all other bumps are fine.

GiteaBot · 2026-07-06T11:51:52Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

GiteaBot added dependencies lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. labels Jul 6, 2026

github-actions Bot added the type/bug label Jul 6, 2026

GiteaBot force-pushed the renovate/npm-dependencies branch from b6afb3e to 997c42c Compare July 6, 2026 05:55

fix(deps): update npm dependencies

dd6da4c

GiteaBot force-pushed the renovate/npm-dependencies branch from 997c42c to dd6da4c Compare July 6, 2026 09:45

silverwind approved these changes Jul 6, 2026

View reviewed changes

GiteaBot added lgtm/need 1 This PR needs approval from one additional maintainer to be merged. and removed lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. labels Jul 6, 2026

delvh approved these changes Jul 6, 2026

View reviewed changes

GiteaBot added lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. and removed lgtm/need 1 This PR needs approval from one additional maintainer to be merged. labels Jul 6, 2026

Merge branch 'main' into renovate/npm-dependencies

5aac95b

silverwind enabled auto-merge (squash) July 6, 2026 13:57

silverwind added the reviewed/wait-merge This pull request is part of the merge queue. It will be merged soon. label Jul 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

fix(deps): update npm dependencies#38342

fix(deps): update npm dependencies#38342
GiteaBot wants to merge 3 commits into
mainfrom
renovate/npm-dependencies

GiteaBot commented Jul 6, 2026 •

edited

Loading

Uh oh!

GiteaBot commented Jul 6, 2026

Uh oh!

silverwind commented Jul 6, 2026

⚠️ Artifact update problem

Uh oh!

GiteaBot commented Jul 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Uh oh!

Conversation

GiteaBot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Patch Changes

Minor Changes

v3.17.0: 3.17.0

Added

Removed

Fixed

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

Bug Fixes

language-core

Configuration

Uh oh!

GiteaBot commented Jul 6, 2026

⚠️ Artifact update problem

File name: undefined

Uh oh!

silverwind commented Jul 6, 2026

⚠️ Artifact update problem

Uh oh!

GiteaBot commented Jul 6, 2026

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

GiteaBot commented Jul 6, 2026 •

edited

Loading

`v3.17.0`: 3.17.0