Title: chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #78 · unplugin/unplugin-replace · GitHub
Open Graph Title: chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #78 · unplugin/unplugin-replace
X Title: chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #78 · unplugin/unplugin-replace
Description: This PR contains the following updates: Package Change Age Confidence @sxzz/eslint-config ^7.5.1 → ^7.6.0 @sxzz/prettier-config ^2.2.6 → ^2.3.1 @types/node (source) ^25.0.10 → ^25.2.0 pnpm (source) 10.28.1 → 10.28.2 rolldown (source) 1.0.0-rc.1 → 1.0.0-rc.2 rollup (source) ^4.56.0 → ^4.57.1 Release Notes sxzz/eslint-config (@sxzz/eslint-config) v7.6.0 Compare Source 🚀 Features Add Astro support - by @sxzz in #154 (5aa3e) Add importWithError utility for optional plugin imports - by @sxzz (4ce53) View changes on GitHub sxzz/prettier-config (@sxzz/prettier-config) v2.3.1 Compare Source 🐞 Bug Fixes Missing dist - by @sxzz (e1152) View changes on GitHub v2.3.0 Compare Source No significant changes View changes on GitHub v2.2.7 Compare Source 🐞 Bug Fixes deps: Update all non-major dependencies - in #83 (4484b) Update all non-major dependencies - in #84 (1a098) View changes on GitHub pnpm/pnpm (pnpm) v10.28.2: pnpm 10.28.2 Compare Source Patch Changes Security fix: prevent path traversal in directories.bin field. When pnpm installs a file: or git: dependency, it now validates that symlinks point within the package directory. Symlinks to paths outside the package root are skipped to prevent local data from being leaked into node_modules. This fixes a security issue where a malicious package could create symlinks to sensitive files (e.g., /etc/passwd, ~/.ssh/id_rsa) and have their contents copied when the package is installed. Note: This only affects file: and git: dependencies. Registry packages (npm) have symlinks stripped during publish and are not affected. Fixed optional dependencies to request full metadata from the registry to get the libc field, which is required for proper platform compatibility checks #9950. Platinum Sponsors Gold Sponsors rolldown/rolldown (rolldown) v1.0.0-rc.2 Compare Source 💥 BREAKING CHANGES expose \0rolldown/runtime in transform hook (#8068) by @hyf0 rename rolldown:runtime to \0rolldown/runtime.js (#8067) by @hyf0 🚀 Features remove inlined constants in smart mode (#8085) by @sapphi-red allow more options for this.emitFile with type: 'prebuilt-chunk' (#8062) by @sapphi-red warn when both code and postBanner contain shebang (#8039) by @Copilot 🐛 Bug Fixes update the links to Rolldown docs in the error messages (#8103) by @sapphi-red handle tsconfig.json load errors (#8105) by @sapphi-red include inlined constants in namespace object (#8099) by @sapphi-red vite test ci (#8084) by @IWANABETHATGUY renamer: nested binding shadowing external module namespace in UMD/IIFE formats (#8083) by @Dunqing deduplicate ESM chunk imports by canonical symbol (#8059) by @IWANABETHATGUY refine side-effect detection for BigInt and RegExp (#8060) by @IWANABETHATGUY rust: use string literal span for new URL error diagnostic (#8043) by @valadaptive rust: use ModuleType::Asset for new URL imports (#8035) by @valadaptive CJS-ESM interop - property assignment on CJS module exports (#8006) by @IWANABETHATGUY eliminate the facade chunk if the dynamic entry module has been merged into common chunk (#8046) by @IWANABETHATGUY Inlining dynamic imports broken with multiple entry points (#8037) by @IWANABETHATGUY devtools: revert Chunk#id to Chunk#chunk_id (#8040) by @hyf0 invert __exportAll parameter logic to reduce default output size (#8036) by @Copilot
Open Graph Description: This PR contains the following updates: Package Change Age Confidence @sxzz/eslint-config ^7.5.1 → ^7.6.0 @sxzz/prettier-config ^2.2.6 → ^2.3.1 @types/node (source) ^25.0.10 → ^25.2....
X Description: This PR contains the following updates: Package Change Age Confidence @sxzz/eslint-config ^7.5.1 → ^7.6.0 @sxzz/prettier-config ^2.2.6 → ^2.3.1 @types/node (source) ^25.0.10 → ^25.2....
Opengraph URL: https://github.com/unplugin/unplugin-replace/pull/78
X: @github
Domain: patch-diff.githubusercontent.com
| route-pattern | /:user_id/:repository/pull/:id/checks(.:format) |
| route-controller | pull_requests |
| route-action | checks |
| fetch-nonce | v2:1060a448-3ddb-a228-e2ee-c7a0f36b47c7 |
| current-catalog-service-hash | 87dc3bc62d9b466312751bfd5f889726f4f1337bdff4e8be7da7c93d6c00a25a |
| request-id | DE04:1DB97B:31885D:439E86:6980C888 |
| html-safe-nonce | f3f03b1548e9e6c1aeedc864340d7508bc151bb1c6b807eb519cb4bd68896bd0 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJERTA0OjFEQjk3QjozMTg4NUQ6NDM5RTg2OjY5ODBDODg4IiwidmlzaXRvcl9pZCI6IjExMjcwODk4MTY0MTcxMjY1MzYiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 06d8f90c331797c5392151cfc98b5ccde338a2d6e1ca038128bba8b2d7e8924e |
| hovercard-subject-tag | pull_request:3234506320 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,checks,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/unplugin/unplugin-replace/pull/78/checks |
| twitter:image | https://avatars.githubusercontent.com/in/2740?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/2740?s=400&v=4 |
| og:image:alt | This PR contains the following updates: Package Change Age Confidence @sxzz/eslint-config ^7.5.1 → ^7.6.0 @sxzz/prettier-config ^2.2.6 → ^2.3.1 @types/node (source) ^25.0.10 → ^25.2.... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | c940d5e308643c0003d2824389ea8281bcaae0a9a0d07438e3fb5e0bdc4fef12 |
| turbo-cache-control | no-preview |
| go-import | github.com/unplugin/unplugin-replace git https://github.com/unplugin/unplugin-replace.git |
| octolytics-dimension-user_id | 143585159 |
| octolytics-dimension-user_login | unplugin |
| octolytics-dimension-repository_id | 766209113 |
| octolytics-dimension-repository_nwo | unplugin/unplugin-replace |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 766209113 |
| octolytics-dimension-repository_network_root_nwo | unplugin/unplugin-replace |
| turbo-body-classes | logged-out env-production page-responsive full-width full-width-p-0 |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | bb3d0fe9b8e408797775c5db420b1ee5ff06e4d0 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width