chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@antfu/eslint-config	^8.2.0 → ^8.3.0
@iconify-json/carbon	^1.2.20 → ^1.2.21
@types/node (source)	^24.12.2 → ^24.12.4
@vitejs/plugin-vue (source)	^6.0.6 → ^6.0.7
bumpp	^11.0.1 → ^11.1.0
eslint (source)	^10.3.0 → ^10.4.0
jiti	^2.6.1 → ^2.7.0
vite (source)	^8.0.10 → ^8.0.13
vue (source)	^3.5.33 → ^3.5.34
workbox-window (source)	^7.4.0 → ^7.4.1

---

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v8.3.0

Compare Source

   🚀 Features

• Make perfectionist configurable inside antfu()  -  by @​oliver139 in #​848 (ae1d6)
• stylistic: Allow easy setting brace style  -  by @​oliver139 in #​846 (bd784)
• svelte: Use recommended rules  -  by @​Jungzl in #​842 (6c839)

   🐞 Bug Fixes

• markdown: Scope user rule overrides away from md files  -  by @​antfu and Claude Opus 4.7 (1M context) in #​844 (8d25a)

    View changes on GitHub

vitejs/vite-plugin-vue (@​vitejs/plugin-vue)

v6.0.7

Features

• use carets for @rolldown/pluginutils version (#​776) (941b651)

Bug Fixes

• deps: update all non-major dependencies (#​762) (9e825b8)
• deps: update all non-major dependencies (#​774) (77dc8bc)

antfu-collective/bumpp (bumpp)

v11.1.0

Compare Source

   🐞 Bug Fixes

• Inherit stdio for git push to support windows SSH passphrase  -  by @​awdr74100 in #​122 (a30af)
• cli: Prevent empty CLI files from overriding config-file files  -  by @​benny123tw in #​120 (4e42e)

    View changes on GitHub

eslint/eslint (eslint)

v10.4.0

Compare Source

unjs/jiti (jiti)

v2.7.0

Compare Source

compare changes

🚀 Enhancements

• Add explicit resource management (using/await using) support (#​422)
• Support opt-in tsconfigPaths (#​427)
• Support virtual modules option (#​428)
• Add jiti/static export (#​430)

🔥 Performance

• interopDefault: Add caching to reduce proxy overhead by ~2x (#​421)

🩹 Fixes

• require: Passthrough resolve options (#​412)
• ci: Skip --coverage flag for node 18 (fe264b4)
• require: Fallback to transpilation when tryNative fails (#​413)
• Fallback for ENAMETOOLONG when evaluating esm (#​429)

📦 Build

• Upgrade rspack (55194fb)
• Experimental rolldown config (8c0243f)

🏡 Chore

• Fix lint issues (4045c7a)
• Update deps (e88ac44)
• Update deps (498e8d7)
• Add missing prettier dep (650bc48)
• Lint (058d91a)
• Init agents.md (c49c54e)
• Update agents.md (4deba16)
• Update deps (08fc868)
• Update tsconfig (8c7822e)
• Update release script (27fe3f2)

✅ Tests

• Ignore jsx test for bun/cjs (3a744ca)
• Update (9ee314f)

🤖 CI

• Update node test matrix (0abda72)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Kricsleo (@​kricsleo)
• Espen Hovlandsdal (@​rexxars)
• Rintaro Itokawa (@​re-taro)
• Matteo Collina (@​mcollina)

vitejs/vite (vite)

v8.0.13

Compare Source

Features

• bundled-dev: add lazy bundling support (#​21406) (4f0949f)
• optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#​22357) (47071ce)
• update rolldown to 1.0.1 (#​22444) (8c766a6)

Bug Fixes

• build: copy public directory after building same environment with write=false (#​22328) (158e8ae)
• css: await sass/less/styl worker disposal on teardown (fix #​22274) (#​22275) (b7edcb7)
• css: keep deprecated name/originalFileName in synthetic assetFileNames call (#​22439) (8e59c97)
• make isBundled per environment (#​22257) (a576326)
• ssr: avoid rewriting labels that collide with imports (#​22451) (d9b18e0)

Miscellaneous Chores

• remove irrelevant commits from changelog (#​22430) (6ea3838)
• update changelog (#​22413) (fcdc87c)

v8.0.12

Compare Source

Features

• update rolldown to 1.0.0 (#​22401) (cf0ff41)

Bug Fixes

• create-vite: pass react framework to TanStack CLI (#​22397) (18f0f90)
• deps: update all non-major dependencies (#​22420) (2be6000)
• module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#​22369) (f5a22e6)
• refer to rolldownOptions instead of deprecated rollupOptions in messages (#​22400) (b675c7b)
• worker: apply build.target to worker bundle (#​22404) (3c93fde)
• worker: forward define to worker bundle transform (#​22408) (d4838a0)

Miscellaneous Chores

• deps: update dependency eslint-plugin-n to v18 (#​22423) (2fe7bd2)
• deps: update rolldown-related dependencies (#​22421) (66b9eb3)

v8.0.11

Compare Source

Features

• update rolldown to 1.0.0-rc.18 (#​22360) (3f80524)

Bug Fixes

• deps: update all non-major dependencies (#​22334) (672c962)
• deps: update all non-major dependencies (#​22382) (5c0cfcb)
• glob: align hmr matcher options with glob enumeration (#​22306) (30028f9)
• make separate object instance for each environment (#​22276) (7c2aa3b)

Documentation

• create-vite: list react-compiler templates in README (#​22347) (7c3a61f)
• explain mergeConfig skips null/undefined (#​22325) (2151f70)
• mention native config loader in CLI options (#​22348) (0420c5d)
• update evan's x handle (640202a)

Miscellaneous Chores

• deps: update dependency tsdown to ^0.21.10 (#​22333) (3b51e05)
• deps: update rolldown-related dependencies (#​22383) (555ff36)
• deps: update transitive packages to fix npm audit alerts (#​22316) (86aee62)

Code Refactoring

• devtools integration (#​22312) (3c8bf06)
• remove unnecessary async (#​22296) (b31fd35)
• show direct path type in bad character warning (#​22339) (0c162e9)

Tests

• create-vite: use short help alias (#​22389) (994ab66)

vuejs/core (vue)

v3.5.34

Compare Source

Bug Fixes

• compiler-sfc: infer Vue ref wrapper types when source is unresolvable (#​14758) (7f46fd4), closes #​14729
• compiler-sfc: preserve hash hrefs on <image> elements (#​14756) (090b2e3)
• compiler-sfc: resolve type re-exports inside declare global (#​14766) (acfffe3)
• reactivity: prevent orphan effect when created in a stopped scope (#​14778) (c8e2d4a), closes #​14777
• runtime-core: avoid symbol coercion during props validation (#​8539) (23d4fb5), closes #​8487
• suspense: avoid DOM leak with out-in transition in v-if fragment (#​14762) (9667e0d), closes #​14761

googlechrome/workbox (workbox-window)

v7.4.1: Workbox v7.4.1

Compare Source

What's Changed

• migrate rollup v4 and plugins by @​AJIb63PT in GoogleChrome#3446
• Bump jws from 4.0.0 to 4.0.1 by @​dependabot[bot] in GoogleChrome#3447
• Bump node-forge from 1.3.1 to 1.3.3 by @​dependabot[bot] in GoogleChrome#3449
• Bump brace-expansion in /packages/workbox-webpack-plugin by @​dependabot[bot] in GoogleChrome#3448
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in GoogleChrome#3477
• Bump rollup from 4.53.3 to 4.59.0 by @​dependabot[bot] in GoogleChrome#3474
• Bump ajv from 8.6.0 to 8.18.0 in /packages/workbox-build by @​dependabot[bot] in GoogleChrome#3462
• Bump ajv from 8.12.0 to 8.18.0 in /packages/workbox-cli by @​dependabot[bot] in GoogleChrome#3460
• Bump picomatch by @​dependabot[bot] in GoogleChrome#3478
• Bump picomatch from 2.3.1 to 2.3.2 in /packages/workbox-cli by @​dependabot[bot] in GoogleChrome#3479
• Bump lodash from 4.17.21 to 4.17.23 in /packages/workbox-webpack-plugin by @​dependabot[bot] in GoogleChrome#3453
• Bump lodash from 4.17.21 to 4.17.23 by @​dependabot[bot] in GoogleChrome#3452
• Bump ajv from 6.12.6 to 6.14.0 in /packages/workbox-webpack-plugin by @​dependabot[bot] in GoogleChrome#3461
• Bump lodash from 4.17.21 to 4.17.23 in /packages/workbox-cli by @​dependabot[bot] in GoogleChrome#3454
• CI: Fix Chrome version discrepancy by @​swissspidy in GoogleChrome#3493
• Add Dependabot config by @​swissspidy in GoogleChrome#3492
• Update actions/cache to v5 by @​swissspidy in GoogleChrome#3491
• Bump serialize-javascript and @​rollup/plugin-terser in /packages/workbox-build by @​dependabot[bot] in GoogleChrome#3485
• Bump rollup from 2.79.2 to 2.80.0 in /packages/workbox-cli by @​dependabot[bot] in GoogleChrome#3465
• Bump actions/upload-artifact from 5 to 7 by @​dependabot[bot] in GoogleChrome#3494
• Bump lodash from 4.17.21 to 4.18.1 by @​dependabot[bot] in GoogleChrome#3500
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in GoogleChrome#3501
• Bump rollup from 4.59.0 to 4.60.1 by @​dependabot[bot] in GoogleChrome#3498
• Bump axios from 1.13.2 to 1.15.0 by @​dependabot[bot] in GoogleChrome#3503
• Bump postcss from 8.4.38 to 8.5.10 by @​dependabot[bot] in GoogleChrome#3505
• Bump follow-redirects from 1.15.11 to 1.16.0 by @​dependabot[bot] in GoogleChrome#3504
• Replace lodash with eta by @​rtritto in GoogleChrome#3489
• Bump @​apideck/better-ajv-errors from 0.3.1 to 0.3.7 by @​dependabot[bot] in GoogleChrome#3507
• Bump github/codeql-action from 4 to 4.35.2 by @​dependabot[bot] in GoogleChrome#3508
• Update lock file (npm audit fix) by @​swissspidy in GoogleChrome#3510

New Contributors

• @​rtritto made their first contribution in GoogleChrome#3489

Full Changelog: GoogleChrome/workbox@v7.4.0...v7.4.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.