[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@​codemirror/autocomplete	6.20.3 → 6.20.4
@lucide/vue (source)	1.58.0 → 1.61.0
@oxfmt/binding-darwin-arm64 (source)	0.73.0 → 0.74.0
@oxlint/binding-darwin-arm64 (source)	1.88.0 → 1.89.0
cbor-x	1.6.6 → 1.6.8
fake-indexeddb	6.2.5 → 6.2.6
oxfmt (source)	^0.73.0 → ^0.74.0
oxfmt (source)	0.73.0 → 0.74.0
oxlint (source)	1.88.0 → 1.89.0
pnpm (source)	10.34.7 → 10.34.8
vite (source)	6.4.4 → 6.4.5
vite (source)	8.3.4 → 8.3.5
vite-plugin-singlefile (source)	2.3.3 → 2.3.4
vue-i18n (source)	11.4.14 → 11.4.16

---

Release Notes

lucide-icons/lucide (@​lucide/vue)

v1.61.0: Version 1.61.0

Compare Source

What's Changed

• feat(icons): added circle-chevrons-down, circle-chevrons-left, circle-chevrons-right and 1 more icons by @​ypotti in #​5025

New Contributors

• @​ypotti made their first contribution in #​5025

Full Changelog: lucide-icons/lucide@1.60.0...1.61.0

v1.60.0: Version 1.60.0

Compare Source

What's Changed

• feat(icons): added tombstone icon by @​ryck in #​4929
• feat(icons): added smartphone-user-round icon by @​hitanshu-machhi in #​4586
• feat(icons): added bacon icon by @​devkamani9313-lab in #​4694
• fix(site): Fix build by @​ericfennis in #​5033
• chore(docs): Update icon count comparison with Feather Icons by @​noahweidig in #​5022
• feat(icons): added letter-spacing icon by @​madebyoz in #​3038
• chore(deps): bump the vue-deps group with 2 updates by @​dependabot[bot] in #​5027
• chore(deps-dev): bump react-native from 0.87.1 to 0.88.0 in the react-native-deps group by @​dependabot[bot] in #​5030
• feat(icons): added line-height icon by @​madebyoz in #​3039
• chore(deps-dev): bump the svelte-deps group across 1 directory with 2 updates by @​dependabot[bot] in #​5028
• chore(deps): bump the react-deps group across 1 directory with 2 updates by @​dependabot[bot] in #​5026
• feat(icons): added brain-off icon by @​ej52 in #​3535
• feat(icons): added graph-hub icon by @​Carlito-la-banane in #​4974
• feat(svelte): export __iconData and __iconNode across per-icon modules (#​4936) by @​ronitgupta138 in #​4957

New Contributors

• @​hitanshu-machhi made their first contribution in #​4586
• @​devkamani9313-lab made their first contribution in #​4694
• @​noahweidig made their first contribution in #​5022
• @​madebyoz made their first contribution in #​3038
• @​ej52 made their first contribution in #​3535
• @​Carlito-la-banane made their first contribution in #​4974
• @​ronitgupta138 made their first contribution in #​4957

Full Changelog: lucide-icons/lucide@1.59.0...1.60.0

v1.59.0: Version 1.59.0

Compare Source

What's Changed

• feat(docs): Adds search field to docs pages by @​ericfennis in #​5012
• fix(icons): changed chess-queen icon by @​karsa-mistmere in #​4613

Full Changelog: lucide-icons/lucide@1.58.0...1.59.0

oxc-project/oxc (@​oxfmt/binding-darwin-arm64)

v0.74.0: oxfmt v0.74.0

🐛 Bug Fixes

• e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#​27957) (leaysgur)
• 782ab6e linter: Search string values without UTF-8 conversion (#​26716) (Dunqing)
• a5d8184 jsdoc: Parse code spans after quotes in descriptions (#​27955) (leaysgur)
• 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#​27948) (leaysgur)
• 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#​27947) (leaysgur)
• 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#​27946) (leaysgur)
• c22a9b2 formatter: Treat static block with only empty statements as empty (#​27945) (leaysgur)
• d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#​27823) (leaysgur)
• c4c1727 formatter/sort_imports: Keep comments after the last import (#​27822) (leaysgur)
• a64677e formatter: Print JSDoc embedded snippets with LF (#​27821) (leaysgur)
• 2c1cc20 formatter: Keep comment only Vue bindings as-is (#​27820) (leaysgur)
• 1bf236d formatter/sort_imports: Do not use comments as import source (#​27819) (leaysgur)
• 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#​27818) (leaysgur)
• 81c75e7 formatter/css: Keep glued css-in-js statement placeholders glued (#​27814) (leaysgur)
• a1ef7f4 formatter: Keep typecast parens in same-operator binary and arrow chain (#​27812) (leaysgur)
• de110ce formatter: Keep more parens around TSInstantiationExpression (#​27811) (leaysgur)
• 8b02e90 formatter_json: Reject invalid JSON instead of dropping them (#​27785) (leaysgur)
• 6fe4c1b formatter: Treat lone CR in JSX text and argument blank lines (#​27780) (leaysgur)
• 5605362 oxfmt: Validate editorconfig as like oxfmtrc (#​27778) (leaysgur)
• 5b2acb0 formatter_core: Report error position releative to CRLF source (#​27777) (leaysgur)
• c78e80e formatter_core: Report parse error positions relative to the BOM-headed source (#​27776) (leaysgur)
• 3a980c9 formatter_toml: Handle BOM like other languages (#​27775) (leaysgur)
• 97c9fc4 oxfmt: Handle BOM in config JSON (#​27774) (leaysgur)
• 28eb4a7 oxfmt: Print trailing newline for --list-different (#​27773) (leaysgur)
• d2bea21 formatter: Glue comments to an opener in empty for-head slots and array holes (#​27737) (leaysgur)
• 6a95ec1 formatter: Keep comment position on holey array (#​27730) (leaysgur)
• 54769da formatter: Break after dangling line comment in holey array (#​27729) (leaysgur)
• 99077ef formatter_json: Reject unary expressions other than signed numbers (#​27728) (leaysgur)
• 22cd4cd formatter_json: Handle holey array and comments (#​27727) (leaysgur)
• 644ca1c formatter: Do not indent logical chains whose right sides all inline (#​27667) (leaysgur)
• a07a0fb formatter: Wrap comment-only JSX expression container in a group (#​27666) (leaysgur)

⚡ Performance

• e220293 formatter: Check only the operator suppression mark in is_quiet (#​27952) (leaysgur)
• e5fdc9c formatter_core: Write into one element stack through a concrete Formatter (#​27559) (leaysgur)
• a342f7e formatter: Skip comment handling for nodes with no comment near them (#​27557) (leaysgur)
• d8ce750 formatter: Write string literals with swapped quotes into the arena (#​27558) (Yuji Sugiura)
• 1c393c0 formatter_core: Skip scanning texts with nothing to rewrite (#​27561) (leaysgur)
• 1d3ef10 formatter_core: Keep the embedded IR when nothing in it is rewritten (#​27673) (leaysgur)

📚 Documentation

• 1325225 oxfmt: Update useless comment prefix (#​27956) (leaysgur)
• d0dd140 formatter: Note lossy cooked round-trip in template embeds (#​27944) (leaysgur)
• 8a3a6c8 oxfmt: Update stale notes on the JSDoc string-out channel and fixture origins (#​27824) (leaysgur)

oxc-project/oxc (@​oxlint/binding-darwin-arm64)

v1.89.0

🐛 Bug Fixes

• 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#​27699) (camc314)

kriszyp/cbor-x (cbor-x)

v1.6.8

Compare Source

v1.6.7

Compare Source

dumbmatter/fakeIndexedDB (fake-indexeddb)

v6.2.6

Compare Source

• Improve performance (#​169 by @​jlucaso1)

• Fixed memory leak of finished transasctions (#​171 by @​nolanlawson)

pnpm/pnpm (pnpm)

v10.34.8

Compare Source

vitejs/vite (vite)

v6.4.5

Compare Source

Please refer to CHANGELOG.md for details.

richardtallent/vite-plugin-singlefile (vite-plugin-singlefile)

v2.3.4

Compare Source

intlify/vue-i18n (vue-i18n)

v11.4.16

Compare Source

What's Changed

🐛 Bug Fixes

• fix: read VUE_PROD_DEVTOOLS only when it is defined in the bundler builds, so that Node.js can run them in production by @​kazupon in #​2735

Full Changelog: intlify/vue-i18n@v11.4.15...v11.4.16

v11.4.15

Compare Source

What's Changed

🐛 Bug Fixes

• fix: read only own properties in locale, key and plural rule lookups by @​kazupon in #​2687
• fix: return a message that cannot be compiled as is, in development and production by @​kazupon in #​2698
• fix: copy the i18n option of components instead of writing internal values into it by @​kazupon in #​2700
• fix: name datetime and number formats in the warning when a format is not found by @​kazupon in #​2703
• fix: make te() and tm() look up messages in the same way as t() by @​kazupon in #​2705
• fix: read only own properties in the key-value message resolver by @​kazupon in #​2707
• fix: do not read Object.prototype properties as named values, and ignore unknown linked modifiers by @​kazupon in #​2711
• fix: do not write count and n into the named values of a plural call by @​kazupon in #​2713
• fix: do not drop a flat key under a message AST with flatJson by @​kazupon in #​2719
• fix: keep a flat key that ends with cacheKey under a message AST by @​kazupon in #​2721
• fix: let Node.js ESM load the Node.js builds, so that SSR works in production by @​kazupon in #​2729
• fix: keep a flat key that goes through a prop key or cacheKey of a message AST by @​kazupon in #​2731

📝️ Documentations

• docs: explain that locales should be BCP 47 language tags by @​kazupon in #​2696
• docs: describe the fallback of te(), and list te and $te as not included in petite-vue-i18n by @​kazupon in #​2709

Full Changelog: intlify/vue-i18n@v11.4.14...v11.4.15

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[t8y2]

Requesting changes — this lockfile update re-introduces a known regression we have hit before.

1. In pnpm-lock.yaml, the packages/cli and packages/mcp importers' @dbx-app/cli-* / @dbx-app/mcp-* optionalDependencies switched from link:../cli-* / link:../mcp-* workspace resolution to registry-resolved 0.4.127 tarballs. These platform binary packages must stay workspace-linked: the specifiers exactly match the workspace package versions, and packages/cli/bin/dbx.js resolves the native binary through the linked package, so registry resolution would mask locally built binaries and break the release flow (same regression as commit 2c9789f, restored in cb05362, and fixed again in #13135 today). Please regenerate the lockfile so the link: resolution is preserved.

2. nix-packaging fails because flake.nix pins the dbx-desktop-pnpm-deps hash (line 206) and it was not updated for the lockfile change; per the flake comment the reported hash must be applied and the job rerun. This needs to be redone after (1) since the closure changes.

The bumps themselves look good: no pinned packages (@codemirror/view, dayjs, happy-dom, @tauri-apps/*, docs/**) were touched and packageManager is unchanged.