chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #227 · unjs/nypm

renovate · 2026-01-21T02:37:34Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	`^25.0.9` → `^25.2.0`
@typescript/native-preview (source)	`7.0.0-dev.20260120.1` → `7.0.0-dev.20260203.1`
@vitest/coverage-v8 (source)	`^4.0.17` → `^4.0.18`
automd	`^0.4.2` → `^0.4.3`
deno (source)	`v2.x` → `2.6.8`
obuild	`^0.4.18` → `^0.4.22`
pnpm (source)	`10.28.1` → `10.28.2`
prettier (source)	`^3.8.0` → `^3.8.1`
vitest (source)	`^4.0.17` → `^4.0.18`

Release Notes

microsoft/typescript-go (@typescript/native-preview)

vitest-dev/vitest (@vitest/coverage-v8)

`v4.0.18`

Compare Source

🚀 Experimental Features

experimental: Add onModuleRunner hook to worker.init - by @sheremet-va in #9286 (ea837)

🐞 Bug Fixes

Use meta.url in createRequire - by @sheremet-va in #9441 (e0572)
browser: Hide injected data-testid attributes - by @sheremet-va in #9503 (f8989)
ui: Process artifact attachments when generating HTML reporter - by @macarie in #9472 (22543)

View changes on GitHub

unjs/automd (automd)

`v0.4.3`

Compare Source

compare changes

🚀 Enhancements

dir-tree generator (#132)

📦 Build

Switch to obuild (bdf7c15)

🏡 Chore

Update undocs (af08d15)
Update docs (21f1c63)
Migrate to oxlint and oxfmt (5d236fc)
Update (562c1e9)
Improve types (b8b4af3)
Use native typescript support (da3cea6)
Fix lint issues (180add9)
Lint (3816fad)
Update ci (982c3bb)
Update test script (529c4b1)

❤️ Contributors

Pooya Parsa (@pi0)
Rihan Arfan (@RihanArfan)

denoland/deno (deno)

`v2.6.8`

Compare Source

feat(npm): support jsr: scheme in package.json (#31938)
feat: Windows on ARM builds (#31917)
fix(ext/node): enable defensive option on DatabaseSync (#32004)
fix(ext/node): error formatting compatibility (#31970)
fix(ext/node): implement sqlite' SQLTagStore (#31945)
fix(ext/node): use primordials in _fs_fchown.ts (#32007)
fix(flags): correct zsh completions for script arg (#31994)
fix(install): clean up associated config and lock files during uninstall
(#31984)
fix(types): correct types for Worker events (#31981)
fix: Reload the CronHandlerImpl if necessary when the control socket
receives new envs (#31996)
fix: upgrade deno_core to 0.383.0 (#32014)

`v2.6.7`

Compare Source

feat(ext/node): implement mock API for node:test module (#31954)
feat(node): implement FileHandle.readv() method (#31943)
feat(npm): use JSR for @jsr scope (#31925)
feat: External Socket-Based Cron Implementation (#31952)
feat: V8 14.5 (#31873)
feat: add --inspect-publish-uid flag for VSCode debugging (#31927)
fix(ext/http): use serve address override only once (#31935)
fix(ext/net): remove socket file when dropping unix listener (#31947)
fix(ext/node): sqlite's StatementSync compatibility (#31941)
fix(ext/node): align assert throws/rejects signatures (#31934)
fix(ext/node): fix usage of new V8 string APIs (#31963)
fix(ext/node): implement sqlite's missing options (#31919)
fix(ext/node): pass test-child-process-bad-stdio node compat test (#31851)
fix(ext/node): read NODE_OPTIONS for --require and --inspect-publish-uid
(#31949)
fix(ext/node): retry stale keepAlive connections in http client (#31932)
fix(ext/node): support setImmediate promisify.custom (#31920)
fix(ext/node): use primordials in _fs_ftruncate.ts (#31944)
fix(ext/node): use primordials in ext/node/polyfills/tls.ts (#31816)
fix(ext/web): support object in DOMException second argument for Node.js
compat (#31939)
fix(node): throw ERR_INVALID_ARG_TYPE for invalid fs.readFile path (#31918)
fix(unstable): lint ast comments from first file showing in others (#31956)
fix(x): use local npm package even if npm specifier is used, forward unstable
flags (#31942)
fix: allow reading /dev/tty without requiring --allow-all (#31105)
fix: enable edns for Deno.resolveDns (#31951)
fix: graceful server shutdown with open, un-upgraded connections (#31959)
fix: use locked-tripwire to prevent unlocked cargo installs (#31973)

`v2.6.6`

Compare Source

feat(cli/tsc): show progress bar for TSGO downloads (#31893)
feat(inspector): accept bare host and bare port for --inspect flag (#31881)
feat(inspector/unstable): add /ws/events endpoint in inspector server, notify
watcher restart event in it (#31901)
feat(task): globstar, failglob, nullglob, and pipefail support
(#31913)
feat: instrument cron with OTEL (#31916)
fix(check): improve @types/ package resolution for the global resolver
(#31868)
fix(doc): non-determinism in deno doc --lint (#31911)
fix(dx): always spawn subprocess for dx (#31897)
fix(ext/crypto): add support for SHA3 (#31668)
fix(ext/node): assert compatibility (#31821)
fix(ext/node): fix deadline resolution for queued timers (#31860)
fix(ext/node): implement PerformanceObserver (#31875)
fix(ext/node): implement getValidStdio for child_process (#31850)
fix(ext/node): improve child_process CLI argument parsing (#31825)
fix(ext/node): inspector.open() and inspector.close() (#31898)
fix(ext/node): prevent derefencing symlinks on fs.rm (#31886)
fix(ext/node): properly implement process.features (#31864)
fix(ext/node): validate fd in tty.isatty and enable pseudo-tty tests (#31892)
fix(ext/sqlite): double free of Session after database closed (#31830)
fix(ext/web): export PerformanceObserver and PerformanceObserverEntryList
(#31887)
fix(publish): do not include tsconfig imports in publish graph (#31907)
fix(publish): include npm:@types/ package resolution in published packages
(#31855)
fix: don't ever set 1005 outbound close code (#31845)

`v2.6.5`

Compare Source

feat(ext/canvas): support gif, webp for createImageBitmap (#31402)
feat(ext/web): add performance.clearResourceTimings() and
setResourceTimingBufferSize() (#31603)
feat(node/fs): implement FileHandle.readableWebStream() (#31745)
fix(audit): respect --level flag for exit code (#31721)
fix(ci): rename trusted-signing-action to artifact-signing-action (#31849)
fix(cli/test): close Node HTTP connections before sanitizer check (#31782)
fix(ext/fetch): read file urls via vfs (#31814)
fix(ext/fetch): support ipv6 destination host with http and socks proxy
(#31683)
fix(ext/node): DatabaseSync garbage collection invalidating associated
resources (#31737)
fix(ext/node): add tls.setDefaultCACertificates support (#31522)
fix(ext/node): emit deprecation warning for SlowBuffer (#31772)
fix(ext/node): fix use-after-free in StatementSync JS iterator (#31770)
fix(ext/node): use correct block sizes for HMAC algorithms (#31775)
fix(ext/web): handle empty TextDecoder input when stream is true (#31691)
fix(io): ignore BrokenPipe error in op_print (#31844)
fix(node/child_process): ChildProcess constructor without args (#31838)
fix(node/child_process): improve arg type validation for execFile and fork
(#31829)
fix(node/child_process): reject null bytes in arguments (#31828)
fix(node/child_process): use correct syscall name in spawn error (#31836)
fix(npm): deduplication pass for initially partially resolved graphs (#31787)
fix(runtime): handle options parameter in Deno.errors.* constructors
(#31510)
fix(task): preserve signal-based exit codes for child processes (#31789)
fix(tsgo): nil deref for exported symbols (#31786)
fix(webgpu): correctly expose GPUCompilationInfo & GPUCompilationMessage
(#31780)
fix: add more details when panicking getting dir path from deno.json (#31805)
fix: allow multiple --allow-all args (#31833)
fix: queue dynamic imports for modules with pending TLA (#31670)
fix: update config schema for read permission to include ignore property
(#31785)

`v2.6.4`

Compare Source

fix(compile): make compile work with --unstable-npm-lazy-caching (#31704)
fix(ext/node): enable keepAlive connection reuse for HTTP Agent (#31709)
fix(ext/node): handle errors in sqlite session filter callback (#31756)
fix(ext/node): support TypedArray and DataView targets in Buffer.copy()
(#31734)
fix(ext/node): support for inspector.url() (#31705)
fix(ext/node): support numbered positional parameters in node:sqlite (#31722)
fix(ext/websocket): prevent sending multiple close frames (#31747)
fix(install): wait for package installations before applying patches (#31711)
fix(node/crypto): integrate async_hooks for domain error handling (#31751)
fix(serve): net permissions in config file (#31718)
fix(task): prioritize member package.json when deno.json only in root
(#31736)
fix(webgpu): update wgpu to 28.0.0 (#31163)
fix: deno cross compile for intel mac target (#31714)
fix: update urlpattern to 0.4.2 (#31193)

`v2.6.3`

Compare Source

fix(check): improve node types handling
Revert "fix(ext/node): stub out Module.register and Module.registerHooks"
(#31684)

`v2.6.2`

Compare Source

feat(unstable): add sandbox subcommand (#31568)
fix(audit): fix deserde for transitive npm audit actions (#31671)
fix(check): handle workspace members having different jsx import sources and
importing each other (#31654)
fix(check): regression with tsgo and node globals (#31621)
fix(cli): deno tunnel when token storage isn't working or without deno.json
(#31584)
fix(compile): ensure temp dir exists during x64 codesign (#31672)
fix(ext/node): sqlite:backup compatibility (#31610)
fix(ext/node): add error handling functions and tests for UV bindings (#31639)
fix(ext/node): avoid env permission for TERM in console and readline (#31638)
fix(ext/node): fix hot loop in setImmediate with a pending timer (#31643)
fix(ext/node): stub out Module.register and Module.registerHooks (#31666)
fix(ext/node): support named pipe listen, connect and open (#31624)
fix(ext/telemetry): otel baggage propagation (#31620)
fix(fetch): fix SOCKS5 proxy URL validation logic (#31604)
fix(flags): implement a better sandbox subcommand (#31657)
fix(inspector): worker debugging support via CDP (#31527)
fix(x): cache on demand when running, resolve packages with only one binary,
don't fail on node-gyp if not present (#31619)
fix(x): fix shim script when use custom alias name, re-enable alias tests
(#31653)
fix: panic on dropped inspector session (#31658)
fix: update glob implementation to match with latest node (#31627)

`v2.6.1`

Compare Source

feat(unstable): deploy config allow app to be optional (#31567)
fix(add): include type-only imports when building graph (#31552)
fix(cli): add streams as transferable types (#31586)
fix(compile): intel mac compile fix (#31575)
fix(compile): sentinal conflict with strtab on intel mac (#31587)
fix(ext/node): DatabaseSync compatibility (#31515)
fix(x): correct alias deno command location for Windows (#31573)
fix(x): fix executing native binary on windows + some cleanup (#31551)
fix: --preload and --require flags only available in runtime subcommands
(#31614)
fix: adjust deno_cache version (#31553)
fix: source map file names to non-existent paths (#31564)

`v2.6.0`

Compare Source

`v2.5.7`

Compare Source

fix: deno cross compile for intel mac target (#31714)
fix: fetch fd leak (#31375)
fix(bundle): avoid name clash in hack (#31409)
fix(bundle): do not error on failing to clean up esbuild dir (#31408)
fix(bundle): fix import.meta.main transform with jsr entrypoint (#31415)
fix(bundle): treat bun specifiers as external by default (#31411)
fix(check): fix nil deref with --unstable-tsgo (#31416)
fix(compile): ensure temp dir exists during x64 codesign (#31672)
fix(compile): intel mac compile fix (#31575)
fix(compile): sentinal conflict with strtab on intel mac (#31587)
fix(ext/node): autopadding behavior on crypto.Cipheriv (#31389)
fix(ext/node): prevent cipher operations after finalize (#31533)
fix(ext/node): truncate first non-hex value on Buffer.from (#31227)
fix(node): ensure process.argv is an array of strings (#31322)
fix(node): stub missing process.sourceMapsEnabled (#31358)
fix(node/crypto): respect authTagLength in createCipheriv for GCM cip…
(#31253)
fix(node/process): make process.stdin.isTTY writable (#31464)

`v2.5.6`

Compare Source

Revert "chore: update urlpattern (#31054)" (#31117)
fix(ext/node): implement StatementSync#columns() method (#31119)
fix(windows): re-allow spawning bat and cmd files (#31118)
fix(windows): strip periods and trailing slashes when normalizing paths
(#31131)

`v2.5.5`

Compare Source

feat(unstable): ability to exclude packages from minimum dependency age
constraint (#31031)
feat(unstable): ability to only install dependencies older than a certain date
(#30752)
feat(unstable): ability to specify minimum dependency age in deno.json file
(#31007)
feat(unstable): add deno audit subcommand (#30966)
feat(unstable): add process id to permission broker messages (#31050)
feat(unstable): dynamic command-line completions for deno task (#30670)
feat(unstable): typescript-go integration for deno check (#30920)
fix(audit): handle 'review' actions (#31100)
fix(check): error when type checking after deduping packages (#31049)
fix(check): fall back to copying tsgo binary if rename fails (#31074)
fix(check): respect "compilerOptions.skipLibCheck" for graph errors (#30989)
fix(check): support isolatedDeclarations (#31061)
fix(check): support text and bytes imports with --unstable-tsgo (#31084)
fix(cli/args): empty permissions in config should not require -P (#31063)
fix(coverage): don't process coverage for blob: urls (#31035)
fix(docs): Deno.args example doesn't work (#30969)
fix(docs): documented allowed subdomain should be gist and not user for
githubusercontent.com (#30913)
fix(ext/http): display localhost url once on windows (#31088)
fix(ext/http): make websocket response headers mutable (#31000)
fix(ext/node): dns.resolve6 compatibility (#30974)
fix(ext/node): fs.read/fs.readSync and fs.write/fs.writeSync compatibility
(#31013)
fix(ext/node): path.matchesGlob compatibility (#30976)
fix(ext/node): checking Symbol in env should not ask for permission
(#30965)
fix(ext/node): cpus() should not error when there's no cpu info (#31097)
fix(ext/node): false deprecation warning on crypto.createHmac (#31025)
fix(ext/node): handle empty writes in chunked HTTP requests (#31066)
fix(ext/node): handle multiple calls in inspector.Session.post() (#31067)
fix(ext/node): impl sqlite 'backup' capability (#29842)
fix(ext/node): implement FileHandle.readLines() (#31107)
fix(ext/node): inconsistent error message thrown by AssertionError (#31089)
fix(ext/node): make kReinitializeHandle work for TLS wrap (#31079)
fix(ext/node): process.moduleLoadList as undefined (#31022)
fix(ext/node): support option object parameter on fs.write and
fs.writeSync (#30999)
fix(ext/web): fix promise chain leak of ReadableStream (#30871)
fix(fmt/json): support hexadecimal numbers, plus sign on numbers, and words
with underscores (#31057)
fix(kv): do not error when creating kv db with relative path and -A (#31021)
fix(lockfile): purged package reqs should be removed from the jsr deps when
changing workspace config (#30998)
fix(lsp): add support for source.organizeImports (#31016)
fix(lsp): refresh configuration when tsconfig.json is changed (#30993)
fix(napi): Fix misused napi_callback_info in CallbackInfo (#30983)
fix(npm): add a deduplication pass and reduce lockfile diffs (#30973)
fix(npm): handle deno run/install of npm package with only directories.bin
(#30919)
fix(npm): occasional panic when upgrading npm package constraints (#31006)
fix(npm): regression resolving npm bin for default when only one entry
(#31055)
fix(process): case insenstive check for disallowing .bat and .cmd ([#30967](https://redirect.github.com/denoland/deno/is

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-02-03T15:43:30Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate bot force-pushed the renovate/all-minor-patch branch from 00565d9 to 9046aa3 Compare January 21, 2026 18:51

renovate bot changed the title ~~chore(deps): update dependency deno to v2.6.5~~ chore(deps): update all non-major dependencies Jan 21, 2026

renovate bot force-pushed the renovate/all-minor-patch branch 15 times, most recently from 81415e6 to 2f3d27d Compare January 28, 2026 19:36

renovate bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 0dc0952 to 3dc8757 Compare February 2, 2026 22:07

chore(deps): update all non-major dependencies

b4c5c60

renovate bot force-pushed the renovate/all-minor-patch branch from 3dc8757 to b4c5c60 Compare February 3, 2026 11:15

autofix-ci bot added 2 commits February 3, 2026 11:17

chore: apply automated updates

ec9fb4e

chore: apply automated updates (attempt 2/3)

0622f85

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all non-major dependencies#227

chore(deps): update all non-major dependencies#227
renovate[bot] wants to merge 3 commits intomainfrom
renovate/all-minor-patch

renovate bot commented Jan 21, 2026 •

edited

Loading

Uh oh!

renovate bot commented Feb 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Jan 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🚀 Experimental Features

🐞 Bug Fixes

🚀 Enhancements

📦 Build

🏡 Chore

❤️ Contributors

Configuration

Uh oh!

renovate bot commented Feb 3, 2026

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Jan 21, 2026 •

edited

Loading