chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node (source)	^22.10.7 -> ^22.10.10
@vitest/ui (source)	^3.0.2 -> ^3.0.4
bumpp	^9.10.1 -> ^9.11.1
eslint (source)	^9.18.0 -> ^9.19.0
rollup (source)	^4.31.0 -> ^4.32.0
tsup (source)	^8.3.5 -> ^8.3.6
vite (source)	^6.0.7 -> ^6.0.11
vitest (source)	^3.0.2 -> ^3.0.4

---

Release Notes

vitest-dev/vitest (@​vitest/ui)

v3.0.4

Compare Source

   🐞 Bug Fixes

• Filter projects eagerly during config resolution  -  by @​sheremet-va and @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7313 (dff44)
• Apply development|production condition on Vites 6 by @​hi-ogawa and @​sheremet-va (#​7301) (ef146)
• browser: Restrict served files from /__screenshot-error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7340 (ed9ae)
• deps: Update all non-major dependencies  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7297 (38ea8)
• runner: Timeout long sync hook  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7289 (c60ee)
• typechecking: Support typechecking parsing with Vite 6  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7335 (bff70)
• types: Fix public types  -  by @​mrginglymus and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7328 (ce6af)

    View changes on GitHub

v3.0.3

Compare Source

   🐞 Bug Fixes

• browser:
  • Don't throw a validation error if v8 coverage is used with filtered instances  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7306 (fa463)
  • Don't fail when running --browser.headless if the browser projest is part of the workspace  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7311 (e43a8)

   🏎 Performance

• reporters: Update summary only when needed  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7291 (7f36b)

    View changes on GitHub

antfu-collective/bumpp (bumpp)

v9.11.1

Compare Source

   🚀 Features

• Cjs path  -  by @​antfu (5b238)

    View changes on GitHub

v9.11.0

Compare Source

   🚀 Features

• Inferring the semver version according to Conventional Commit  -  by @​northword in https://github.com/antfu-collective/bumpp/issues/71 (7d044)

    View changes on GitHub

v9.10.2

Compare Source

   🐞 Bug Fixes

• Version update issue  -  by @​Blithe-Chiang and jiangzs in https://github.com/antfu-collective/bumpp/issues/70 (8f082)

    View changes on GitHub

eslint/eslint (eslint)

v9.19.0

Compare Source

rollup/rollup (rollup)

v4.32.0

Compare Source

2025-01-24

Features

• Add watch.onInvalidate option to trigger actions immediately when a file is changed (#​5799)

Bug Fixes

• Fix incorrect urls in CLI warnings (#​5809)

Pull Requests

• #​5799: Feature/watch on invalidate (@​drebrez, @​lukastaegert)
• #​5808: chore(deps): update dependency vite to v6.0.9 [security] (@​renovate[bot])
• #​5809: fix: avoid duplicate rollupjs.org prefix (@​GauBen, @​lukastaegert)
• #​5810: chore(deps): update dependency @​shikijs/vitepress-twoslash to v2 (@​renovate[bot])
• #​5811: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])

egoist/tsup (tsup)

v8.3.6

Compare Source

   🐞 Bug Fixes

• Don't await sub-process of onSuccess  -  by @​laat in https://github.com/egoist/tsup/issues/1256 (314a6)

    View changes on GitHub

vitejs/vite (vite)

v6.0.11

Compare Source

• fix: preview.allowedHosts with specific values was not respected (#​19246) (aeb3ec8), closes #​19246
• fix: allow CORS from loopback addresses by default (#​19249) (3d03899), closes #​19249

v6.0.10

Compare Source

• fix: try parse server.origin URL (#​19241) (2495022), closes #​19241

v6.0.9

Compare Source

• fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (bd896fb)
• fix!: default server.cors: false to disallow fetching from untrusted origins (b09572a)
• fix: verify token for HMR WebSocket connection (029dcd6)

v6.0.8

Compare Source

• fix: avoid SSR HMR for HTML files (#​19193) (3bd55bc), closes #​19193
• fix: build time display 7m 60s (#​19108) (cf0d2c8), closes #​19108
• fix: don't resolve URL starting with double slash (#​19059) (35942cd), closes #​19059
• fix: ensure server.close() only called once (#​19204) (db81c2d), closes #​19204
• fix: resolve.conditions in ResolvedConfig was defaultServerConditions (#​19174) (ad75c56), closes #​19174
• fix: tree shake stringified JSON imports (#​19189) (f2aed62), closes #​19189
• fix: use shared sigterm callback (#​19203) (47039f4), closes #​19203
• fix(deps): update all non-major dependencies (#​19098) (8639538), closes #​19098
• fix(optimizer): use correct default install state path for yarn PnP (#​19119) (e690d8b), closes #​19119
• fix(types): improve ESBuildOptions.include / exclude type to allow readonly (string | RegExp)[] (ea53e70), closes #​19146
• chore(deps): update dependency pathe to v2 (#​19139) (71506f0), closes #​19139

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.