chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@ntnyq/eslint-config (source)	^5.7.0 -> ^5.8.0
@types/node (source)	^24.10.0 -> ^24.10.1
eslint (source)	^9.39.0 -> ^9.39.1
nano-staged	^0.8.0 -> ^0.9.0
pnpm (source)	10.20.0 -> 10.23.0
tsdown (source)	^0.15.12 -> ^0.16.6
vue (source)	^3.5.22 -> ^3.5.24

---

Release Notes

ntnyq/eslint-config (@​ntnyq/eslint-config)

v5.8.0

Compare Source

   🚀 Features

• Bump all peer and dev deps  -  by @​ntnyq (b3d14)
• ignores: Allow option ignores to be a function  -  by @​ntnyq (8caf1)
• unicorn: Adopt new rules in v62  -  by @​ntnyq (d661b)

   🐞 Bug Fixes

• Bump deps to latest  -  by @​ntnyq (5d17b)

    View changes on GitHub

pnpm/pnpm (pnpm)

v10.23.0: pnpm 10.23

Compare Source

Minor Changes

• Added --lockfile-only option to pnpm list #​10020.

Patch Changes

• pnpm self-update should download pnpm from the configured npm registry #​10205.
• pnpm self-update should always install the non-executable pnpm package (pnpm in the registry) and never the @pnpm/exe package, when installing v11 or newer. We currently cannot ship @pnpm/exe as pkg doesn't work with ESM #​10190.
• Node.js runtime is not added to "dependencies" on pnpm add, if there's a engines.runtime setting declared in package.json #​10209.
• The installation should fail if an optional dependency cannot be installed due to a trust policy check failure #​10208.
• pnpm list and pnpm why now display npm: protocol for aliased packages (e.g., foo npm:is-odd@3.0.1) #​8660.
• Don't add an extra slash to the Node.js mirror URL #​10204.
• pnpm store prune should not fail if the store contains Node.js packages #​10131.

Platinum Sponsors

Gold Sponsors

v10.22.0: pnpm 10.22

Compare Source

Minor Changes

• Added support for trustPolicyExclude #​10164.

  You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:

  trustPolicy: no-downgrade
  trustPolicyExclude:
    - chokidar@4.0.3
    - webpack@4.47.0 || 5.102.1

• Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

• Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #​10179.

Platinum Sponsors

Gold Sponsors

v10.21.0

Compare Source

rolldown/tsdown (tsdown)

v0.16.6

Compare Source

   🚀 Features

• Upgrade rolldown to beta 51  -  by @​sxzz (f502b)

    View changes on GitHub

v0.16.5

Compare Source

   🚀 Features

• create-tsdown: Add react-compiler template  -  by @​elecmonkey and @​sxzz in #​604 (45229)

   🐞 Bug Fixes

• exports: Use correct indentation for output  -  by @​msigwart and @​sxzz in #​599 (4de70)

    View changes on GitHub

v0.16.4

Compare Source

   🚀 Features

• Upgrade rolldown to 1.0.0-beta.50  -  by @​sxzz (597d9)

    View changes on GitHub

v0.16.3

Compare Source

   🏎 Performance

• Replace debug with obug  -  by @​sxzz (222e9)

    View changes on GitHub

v0.16.2

Compare Source

   🚀 Features

• Upgrade rolldown to v1.0.0-beta.49  -  by @​sxzz (48181)
• entry: Auto enable glob, support infer entry extension  -  by @​sxzz and jinghaihan (2c525)

    View changes on GitHub

v0.16.1

Compare Source

   🚀 Features

• Switch unconfig-core & mark unrun stable  -  by @​sxzz in #​585 (339f5)

   🐞 Bug Fixes

• attw: Improve attw execute, output package name  -  by @​sxzz (237f6)
• unused: Set root to cwd  -  by @​sxzz (844c9)

    View changes on GitHub

v0.16.0

Compare Source

   🚨 Breaking Changes

• Rename config exports  -  by @​sxzz in #​519 (7de20)
  • Split Options interface into UserConfig and InlineConfig. The original one now is InlineConfig.
  • Rename NormalizedUserConfig to UserConfig
  • Rename ResolvedOptions to ResolvedConfig
• Defaults fixedExtension to true when platform is node  -  by @​sxzz in #​517 (e1168)
• Rename --debug CLI flag to --debug-logs  -  by @​sxzz in #​576 (e4ef6)

   🚀 Features

• Add tsdown debug mode and Vite DevTools integration  -  by @​sxzz in #​576 (e4ef6)
• create-tsdown: Add svelte template  -  by @​elecmonkey in #​577 (10d30)
• Upgrade rolldown to 1.0.0-beta.46

    View changes on GitHub

vuejs/core (vue)

v3.5.24

Compare Source

Reverts

• Revert "fix(compiler-core): correctly handle ts type assertions in expression…" (#​14062) (11ec51a), closes #​14062 #​14060

v3.5.23

Compare Source

Bug Fixes

• compiler-core: correctly handle ts type assertions in expressions (#​13397) (e6544ac), closes #​13395
• compiler-core: fix v-bind shorthand handling for in-DOM templates (#​13933) (b3cca26), closes #​13930
• compiler-sfc: resolve numeric literals and template literals without expressions as static property key (#​13998) (75d44c7)
• compiler-ssr: textarea with v-text directive SSR (#​13975) (006a0c1)
• compiler: using guard instead of non-nullish assertion (#​13982) (dcc6f36)
• custom-element: batch custom element prop patching (#​13478) (c13e674), closes #​12619
• custom-element: optimize slot retrieval to avoid duplicates (#​13961) (84ca349), closes #​13955
• hydration: avoid mismatch during hydrate text with newlines in interpolation (#​9232) (6cbdf78), closes #​9229
• runtime-core: pass props and children to loadingComponent (#​13997) (40c4b2a)
• runtime-dom: ensure iframe sandbox is handled as an attribute to prevent unintended behavior (#​13950) (5689884), closes #​13946
• suspense: clear placeholder and fallback el after resolve to enable GC (#​13928) (f411c66)
• transition-group: use offsetLeft and offsetTop instead of getBoundingClientRect to avoid transform scale affect animation (#​6108) (dc4dd59), closes #​6105
• v-model: handle number modifier on change (#​13959) (8fbe48f), closes #​13958

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
vuepress-plugin-iconify	Error			Nov 27, 2025 4:14pm