chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #378 · TanStack/config

renovate · 2026-04-06T02:10:25Z

This PR contains the following updates:

Package	Change	Age	Confidence
@tanstack/query-core (source)	`^5.95.2` → `^5.96.2`
eslint (source)	`^10.1.0` → `^10.2.0`
nx (source)	`22.6.3` → `22.6.4`
react (source)	`^19.2.4` → `^19.2.5`
react-dom (source)	`^19.2.4` → `^19.2.5`
sherif	`^1.11.0` → `^1.11.1`
simple-git (source)	`^3.33.0` → `^3.35.2`
tinyglobby (source)	`^0.2.15` → `^0.2.16`
typescript-eslint (source)	`^8.57.2` → `^8.58.1`
vite (source)	`^8.0.3` → `^8.0.7`
vitest (source)	`^4.1.2` → `^4.1.3`
vue (source)	`^3.5.31` → `^3.5.32`

Release Notes

TanStack/query (@tanstack/query-core)

`v5.96.2`

Compare Source

`v5.96.1`

Compare Source

eslint/eslint (eslint)

`v10.2.0`

Compare Source

Features

586ec2f feat: Add meta.languages support to rules (#20571) (Copilot)
14207de feat: add Temporal to no-obj-calls (#20675) (Pixel998)
bbb2c93 feat: add Temporal to ES2026 globals (#20672) (Pixel998)

Bug Fixes

542cb3e fix: update first-party dependencies (#20714) (Francesco Trotta)

Documentation

a2af743 docs: add language to configuration objects (#20712) (Francesco Trotta)
845f23f docs: Update README (GitHub Actions Bot)
5fbcf59 docs: remove sourceType from ts playground link (#20477) (Tanuj Kanti)
8702a47 docs: Update README (GitHub Actions Bot)
ddeaded docs: Update README (GitHub Actions Bot)
2b44966 docs: add Major Releases section to Manage Releases (#20269) (Milos Djermanovic)
eab65c7 docs: update eslint versions in examples (#20664) (루밀LuMir)
3e4a299 docs: update ESM Dependencies policies with note for own-usage packages (#20660) (Milos Djermanovic)

Chores

8120e30 refactor: extract no unmodified loop condition (#20679) (kuldeep kumar)
46e8469 chore: update dependency markdownlint-cli2 to ^0.22.0 (#20697) (renovate[bot])
01ed3aa test: add unit tests for unicode utilities (#20622) (Manish chaudhary)
811f493 ci: remove --legacy-peer-deps from types integration tests (#20667) (Milos Djermanovic)
6b86fcf chore: update dependency npm-run-all2 to v8 (#20663) (renovate[bot])
632c4f8 chore: add prettier update commit to .git-blame-ignore-revs (#20662) (루밀LuMir)
b0b0f21 chore: update dependency eslint-plugin-regexp to ^3.1.0 (#20659) (Milos Djermanovic)
228a2dd chore: update dependency eslint-plugin-eslint-plugin to ^7.3.2 (#20661) (Milos Djermanovic)
3ab4d7e test: Add tests for eslintrc-style keys (#20645) (kuldeep kumar)

nrwl/nx (nx)

`v22.6.4`

Compare Source

22.6.4 (2026-04-01)

🚀 Features

misc: update nx init telemetry meta from CSV to JSON format (#35076)
nx-dev: add conditional blog/changelog proxy in edge function (#35043)

🩹 Fixes

core: validate bundler option for Angular presets in create-nx-workspace (#35074)
core: handle "." and absolute paths as workspace name in CNW (#35083, #1)
core: pin version of axios (#35093)
core: preserve sibling dependency inputs in native hashing (#35071)
core: sandbox exclusions, multi-line typeof import detection, global ensurePackage mock (#35056)
core: no-interactive should disable prompts during migrate (#35106)
gradle: increase project graph timeout defaults (#35058)
js: recognize tsgo in dependency-checks lint rule (#35048)
js: narrow tsc build-base outputs to only tsc-produced file types (#35041)
js: include tsbuildinfo in narrowed tsc build-base outputs (#35086, #35041)
js: use explicit nx/bin/nx path in start-local-registry (#35127)
misc: handle non-interactive mode and add template shorthand names for CNW (#35045)
react: force Vite 7 when using React Router in framework mode (#35101)
react-native: use vite's transformWithEsbuild instead of direct esbuild import (5771eb3346)
repo: pass env vars into docker builds in publish workflow (#35060)
repo: bump picomatch from 4.0.2 to 4.0.4 (#35081, #35068)
repo: fixup lock-threads failing with resource inaccessible message (#35005)
repo: fix lockfile (b070e23445)
repo: re-enable Cypress HMR e2e tests after upstream tapable fix (#35105, #34969, #20693)
repo: disable ts-jest diagnostics for workspace-plugin tests (b013f93dca)
vite: update vitest and plugin-react-swc versions for vite 8 compat (#35062)
vite: bump sass version for vue/nuxt presets for Vite 8 compat (#35073)
webpack: bump postcss-loader to ^8.2.1 to eliminate transitive yaml@1.x CVE (#35028, #35025)

❤️ Thank You

Colum Ferry @Coly010
Craigory Coppola @AgentEnder
FrozenPandaz @FrozenPandaz
Jack Hsu @jaysoo
Jason Jean @FrozenPandaz
Leosvel Pérez Espinosa @leosvelperez
Miroslav Jonaš @meeroslav
Robert Sidzinka

facebook/react (react)

`v19.2.5`: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

steveukx/git-js (simple-git)

`v3.35.2`

Compare Source

Patch Changes

0cf9d8c: Improvements for mono-repo publishing pipeline
Updated dependencies [0cf9d8c]
- @simple-git/args-pathspec@1.0.2
- @simple-git/argv-parser@1.0.3

`v3.35.1`

Compare Source

Patch Changes

0de400e: Update monorepo version handling during publish
Updated dependencies [0de400e]
- @simple-git/argv-parser@1.0.2

`v3.35.0`

Compare Source

Minor Changes

3d8708b: Updating publish config

Patch Changes

Updated dependencies [3d8708b]
- @simple-git/args-pathspec@1.0.1
- @simple-git/argv-parser@1.0.1

`v3.34.0`

Compare Source

Minor Changes

2b68331: Revised dependency tree to add helper modules as dependencies in main simple-git

Patch Changes

2e1f51c: Enhances scanning of arguments before passing on to the spawned child_process.

Caters for -c flags prefixing the git task (used when setting global inline config) and suffixing with either -c, --config or --config-env. Detects git config operations that write to the configuration.
Updated dependencies [2e1f51c]
- @simple-git/args-pathspec@1.0.0
- @simple-git/argv-parser@1.0.0

SuperchupuDev/tinyglobby (tinyglobby)

`v0.2.16`

Compare Source

Fixed

Upgraded picomatch to 4.0.4, mitigating any potential exposure to
CVE-2026-33671
and CVE-2026-33672

Changed

Overhauled and optimized most internals by Torathion
Ignore patterns are no longer compiled twice by webpro

typescript-eslint/typescript-eslint (typescript-eslint)

`v8.58.1`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

`v8.0.7`

Compare Source

Bug Fixes

use sync dns.getDefaultResultOrder instead of dns.promises (#22185) (5c05b04)

`v8.0.6`

Compare Source

Features

update rolldown to 1.0.0-rc.13 (#22097) (51d3e48)

Bug Fixes

css: avoid mutating sass error multiple times (#22115) (d5081c2)
optimize-deps: hoist CJS interop assignment (#22156) (17a8f9e)

Performance Improvements

early return in getLocalhostAddressIfDiffersFromDNS when DNS order is verbatim (#22151) (56ec256)

Miscellaneous Chores

create-vite: remove unnecessary DOM.Iterable (#22168) (bdc53ab)
replace remaining prettier script (#22179) (af71fb2)

`v8.0.5`

Compare Source

Bug Fixes

apply server.fs check to env transport (#22159) (f02d9fd)
avoid path traversal with optimize deps sourcemap handler (#22161) (79f002f)
check server.fs after stripping query as well (#22160) (a9a3df2)
disallow referencing files outside the package from sourcemap (#22158) (f05f501)

`v8.0.4`

Compare Source

Features

allow esbuild 0.28 as peer deps (#22155) (b0da973)
hmr: truncate list of files on hmr update (#21535) (d00e806)
optimizer: log when dependency scanning or bundling takes over 1s (#21797) (f61a1ab)

Bug Fixes

hasBothRollupOptionsAndRolldownOptions should return false for proxy case (#22043) (99897d2)
add types for vite/modulepreload-polyfill (#22126) (17330d2)
deps: update all non-major dependencies (#22073) (6daa10f)
deps: update all non-major dependencies (#22143) (22b0166)
resolve: resolve tsconfig paths starting with # (#22038) (3460fc5)
ssr: use browser platform for webworker SSR builds (fix #21969) (#21963) (364c227)

Documentation

add environment.fetchModule documentation (#22035) (54229e7)

Miscellaneous Chores

deps: update rolldown-related dependencies (#21989) (0ded627)

Code Refactoring

upgrade to typescript 6 (#22110) (cc41398)

vitest-dev/vitest (vitest)

`v4.1.3`

Compare Source

🚀 Experimental Features

Add experimental.preParse flag - by @sheremet-va in #10070 (78273)
Support browser.locators.exact option - by @sheremet-va in #10013 (48799)
Add TestAttachment.bodyEncoding - by @hi-ogawa in #9969 (89ca0)
Support custom snapshot matcher - by @hi-ogawa, Claude Sonnet 4.6 and Codex in #9973 (59b0e)

🐞 Bug Fixes

Advance fake timers with expect.poll interval - by @hi-ogawa and Claude Sonnet 4.6 in #10022 (3f5bf)
Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency - by @alan-agius4 in #10025 (146d4)
Fix defineHelper for webkit async stack trace + update playwright 1.59.0 - by @hi-ogawa in #10036 (5a5fa)
Fix suite hook throwing errors for unused auto test-scoped fixture - by @hi-ogawa and Claude Sonnet 4.6 in #10035 (39865)
expect:
- Remove JestExtendError.context from verbose error reporting - by @hi-ogawa in #9983 (66751)
- Don't leak "runner" types - by @sheremet-va in #10004 (ec204)
snapshot:
- Fix flagging obsolete snapshots for snapshot properties mismatch - by @hi-ogawa and Claude Sonnet 4.6 in #9986 (6b869)
- Export custom snapshot matcher helper from vitest - by @hi-ogawa and Codex in #10042 (691d3)
ui:
- Don't leak vite types - by @sheremet-va in #10005 (fdff1)
vm:
- Fix external module resolve error with deps optimizer query - by @hi-ogawa and Claude Sonnet 4.6 in #10024 (9dbf4)

View changes on GitHub

vuejs/core (vue)

`v3.5.32`

Compare Source

Bug Fixes

runtime-core: prevent currentInstance leak into sibling render during async setup re-entry (#14668) (f166353), closes #14667
teleport: handle updates before deferred mount (#14642) (32b44f1), closes #14640
types: allow customRef to have different getter/setter types (#14639) (e20ddb0)
types: use private branding for shallowReactive (#14641) (302c47a), closes #14638 #14493

Reverts

Revert "fix(server-renderer): cleanup component effect scopes after SSR render" (#14674) (219d83b), closes #14674 #14669

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coderabbitai · 2026-04-06T02:10:39Z

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

@coderabbitai resume to resume automatic reviews.
@coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

▶️ Resume reviews
🔍 Trigger review

📝 Walkthrough

Walkthrough

Updated several dependency version ranges in pnpm-workspace.yaml's catalog for multiple packages; no other keys or structural changes were made.

Changes

Cohort / File(s)	Summary
Dependency Version Bumps `pnpm-workspace.yaml`	Bumped catalog versions: `@tanstack/query-core` (^5.95.2 → ^5.96.2), `eslint` (^10.1.0 → ^10.2.0), `nx` (22.6.3 → 22.6.4), `sherif` (^1.11.0 → ^1.11.1), `simple-git` (^3.33.0 → ^3.35.2), `typescript-eslint` (^8.57.2 → ^8.58.0), `vite` (^8.0.3 → ^8.0.6), `vitest` (^4.1.2 → ^4.1.3), `vue` (^3.5.31 → ^3.5.32).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

chore(deps): update all non-major dependencies #376: Overlapping edits to the same pnpm-workspace.yaml catalog entries and identical version bumps.
chore(deps): update all non-major dependencies #367: Modifies pnpm-workspace.yaml dependency catalog with overlapping package version updates.

Suggested labels

dependencies

Poem

🐰 I nibble through the version patch,
Nine tiny hops to fix the latch.
Catalog shifted, lines align,
A tidy tree, dependencies fine. 🥕

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The PR description is missing the required '🎯 Changes' and '✅ Checklist' sections from the template, and the '🚀 Release Impact' section is not properly filled.	Add the '🎯 Changes' section explaining the motivation for these dependency updates, complete the '✅ Checklist' by checking off applicable items, and properly fill the '🚀 Release Impact' section to indicate if a changeset is needed.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely summarizes the main change: updating all non-major dependencies in the pnpm-workspace.yaml file.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch renovate/all-minor-patch

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

nx-cloud · 2026-04-06T02:10:59Z

View your CI Pipeline Execution ↗ for commit 9d586f6

Command	Status	Duration	Result
`nx affected --targets=test:sherif,test:docs,tes...`	✅ Succeeded	16s	View ↗
`nx run-many --target=build`	✅ Succeeded	8s	View ↗

☁️ Nx Cloud last updated this comment at 2026-04-08 20:09:42 UTC

pkg-pr-new · 2026-04-06T02:11:05Z

npm i https://pkg.pr.new/@tanstack/eslint-config@378

npm i https://pkg.pr.new/@tanstack/publish-config@378

npm i https://pkg.pr.new/@tanstack/typedoc-config@378

npm i https://pkg.pr.new/@tanstack/vite-config@378

commit: 9d586f6

renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 43160e5 to 8dcb131 Compare April 8, 2026 01:52

chore(deps): update all non-major dependencies

9d586f6

renovate bot force-pushed the renovate/all-minor-patch branch from 8dcb131 to 9d586f6 Compare April 8, 2026 20:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies#378

chore(deps): update all non-major dependencies#378
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Apr 6, 2026 •

edited

Loading

Uh oh!

coderabbitai bot commented Apr 6, 2026 •

edited

Loading

Reviews paused

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested labels

Poem

❌ Failed checks (1 warning)

Uh oh!

nx-cloud bot commented Apr 6, 2026 •

edited

Loading

Uh oh!

pkg-pr-new bot commented Apr 6, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate bot commented Apr 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Bug Fixes

Documentation

Chores

22.6.4 (2026-04-01)

🚀 Features

🩹 Fixes

❤️ Thank You

v19.2.5: 19.2.5 (April 8th, 2026)

React Server Components

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Fixed

Changed

Bug Fixes

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Bug Fixes

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

🚀 Experimental Features

🐞 Bug Fixes

Bug Fixes

Reverts

Configuration

Uh oh!

coderabbitai bot commented Apr 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Reviews paused

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested labels

Poem

❌ Failed checks (1 warning)

Uh oh!

nx-cloud bot commented Apr 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new bot commented Apr 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Apr 6, 2026 •

edited

Loading

`v19.2.5`: 19.2.5 (April 8th, 2026)

coderabbitai bot commented Apr 6, 2026 •

edited

Loading

nx-cloud bot commented Apr 6, 2026 •

edited

Loading

pkg-pr-new bot commented Apr 6, 2026 •

edited

Loading