chore(monorepo): update auto-merge non-major dependencies by renovate[bot] · Pull Request #6 · storm-software/media-kit

renovate · 2026-01-03T12:01:56Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@microsoft/api-extractor (source)	`^7.49.2` → `^7.58.9`	pnpm.catalog.default	minor
@nx/devkit (source)	`23.0.0` → `23.0.2`	pnpm.catalog.default	patch
@nx/eslint-plugin (source)	`23.0.0` → `23.0.2`	pnpm.catalog.default	patch
@nx/jest (source)	`23.0.0` → `23.0.2`	pnpm.catalog.default	patch
@nx/js (source)	`23.0.0` → `23.0.2`	pnpm.catalog.default	patch
@nx/plugin (source)	`23.0.0` → `23.0.2`	pnpm.catalog.default	patch
@nx/workspace (source)	`23.0.0` → `23.0.2`	pnpm.catalog.default	patch
@swc/core (source)	`1.15.8` → `1.15.43`	pnpm.catalog.default	patch
@swc/helpers (source)	`0.5.19` → `0.5.23`	pnpm.catalog.default	patch
@swc/wasm	`^1.11.24` → `^1.15.43`	pnpm.catalog.default	minor
@types/web	`^0.0.302` → `^0.0.352`	pnpm.catalog.default	patch
cookie	`>=0.7.0` → `>=0.7.2`	pnpm-workspace.overrides	patch
debug	`>=4.4.0` → `>=4.4.3`	pnpm-workspace.overrides	patch
defu	`^6.1.4` → `^6.1.7`	pnpm.catalog.default	patch
follow-redirects	`>=1.15.9` → `>=1.16.0`	pnpm-workspace.overrides	minor
got	`>=14.4.5` → `>=14.6.6`	pnpm-workspace.overrides	minor
jiti	`^2.4.2` → `^2.7.0`	pnpm.catalog.default	minor
markdown-it	`>=14.1.0` → `>=14.3.0`	pnpm-workspace.overrides	minor
node (source)	`24.11.1` → `24.18.0`		minor
node (source)	`>=24.11.1` → `>=24.18.0`	engines	minor
node-addon-api	`^8.8.0` → `^8.9.0`	pnpm.catalog.default	minor
node-gyp	`^13.0.0` → `^13.0.1`	pnpm.catalog.default	patch
parse-path	`>=7.0.0` → `>=7.1.0`	pnpm-workspace.overrides	minor
path-to-regexp	`>=0.1.12` → `>=0.2.5`	pnpm-workspace.overrides	minor
pnpm (source)	`10.26.0` → `10.34.5`	packageManager	minor
pnpm (source)	`>=10.24.0` → `>=10.34.5`	engines	minor
sharp (source, changelog)	`^0.34.5` → `^0.35.3`	pnpm.catalog.default	minor
shell-quote	`>=1.8.2` → `>=1.10.0`	pnpm-workspace.overrides	minor
simple-git (source)	`>=3.27.0` → `>=3.36.0`	pnpm-workspace.overrides	minor
ts-jest (source)	`29.4.6` → `29.4.11`	pnpm.catalog.default	patch
tsup (source)	`^8.3.5` → `^8.5.1`	pnpm.catalog.default	minor
unbuild	`^3.3.1` → `^3.6.1`	pnpm.catalog.default	minor
verdaccio (source)	`6.6.2` → `6.7.4`	pnpm.catalog.default	minor

Release Notes

microsoft/rushstack (@microsoft/api-extractor)

`v7.58.9`

Compare Source

Sat, 13 Jun 2026 00:16:18 GMT

Version update only

`v7.58.8`

Compare Source

Mon, 08 Jun 2026 15:15:49 GMT

Patches

Add support for new d.ts extension format when using TS moduleResolution 'bundler' or 'nodenext'.

`v7.58.7`

Compare Source

Mon, 20 Apr 2026 23:31:13 GMT

Version update only

`v7.58.6`

Compare Source

Mon, 20 Apr 2026 15:15:24 GMT

Patches

Fix an issue where empty lines were included in DTS rollups in place of API items that were trimmed.

`v7.58.5`

Compare Source

Sat, 18 Apr 2026 03:47:10 GMT

Version update only

`v7.58.4`

Compare Source

Sat, 18 Apr 2026 00:15:16 GMT

Patches

Bump semver.

`v7.58.3`

Compare Source

Fri, 17 Apr 2026 15:14:57 GMT

Patches

Remove dependecy on lodash.

`v7.58.2`

Compare Source

Thu, 09 Apr 2026 00:15:07 GMT

Version update only

`v7.58.1`

Compare Source

Sat, 04 Apr 2026 00:14:00 GMT

Patches

Bump lodash 4.18.1 to address CVEs GHSA-r5fr-rjxr-66jc, GHSA-f23m-r3pf-42rh

`v7.58.0`

Compare Source

Wed, 01 Apr 2026 15:13:38 GMT

Minor changes

Upgrade the bundled compiler engine to TypeScript 5.9.3

`v7.57.8`

Compare Source

Tue, 31 Mar 2026 15:14:14 GMT

Version update only

`v7.57.7`

Compare Source

Mon, 09 Mar 2026 15:14:07 GMT

Patches

Bump minimatch version from 10.2.1 to 10.2.3 to address CVE-2026-27903.

`v7.57.6`

Compare Source

Wed, 25 Feb 2026 21:39:42 GMT

Patches

Bump @microsoft/tsdoc-config to ~0.18.1 to mitigate CVE-2025-69873.

`v7.57.5`

Compare Source

Wed, 25 Feb 2026 00:34:29 GMT

Version update only

`v7.57.4`

Compare Source

Tue, 24 Feb 2026 01:13:27 GMT

Version update only

`v7.57.3`

Compare Source

Mon, 23 Feb 2026 00:42:21 GMT

Patches

Add missing "./extends/*.json" to the package.json "exports" field so that "@microsoft/api-extractor/extends/tsdoc-base.json" is importable.

`v7.57.2`

Compare Source

Fri, 20 Feb 2026 16:14:49 GMT

Patches

Bump minimatch from 10.1.2 to 10.2.1

`v7.57.1`

Compare Source

Fri, 20 Feb 2026 00:15:03 GMT

Patches

Add "node" condition before "import" in the "exports" map so that Node.js uses the CJS output (which handles extensionless imports), while bundlers still use ESM via "import". Fixes #5644.

`v7.57.0`

Compare Source

Thu, 19 Feb 2026 00:04:52 GMT

Minor changes

Normalize package layout. CommonJS is now under lib-commonjs, DTS is now under lib-dts, and ESM is now under lib-esm. Imports to lib still work as before, handled by the "exports" field in package.json.

`v7.56.3`

Compare Source

Sat, 07 Feb 2026 01:13:26 GMT

Patches

Upgrade lodash dependency from ~4.17.15 to ~4.17.23.

`v7.56.2`

Compare Source

Wed, 04 Feb 2026 20:42:47 GMT

Patches

Update minimatch dependency from 10.0.3 to 10.1.2

`v7.56.1`

Compare Source

Wed, 04 Feb 2026 16:13:27 GMT

Version update only

`v7.56.0`

Compare Source

Fri, 30 Jan 2026 01:16:12 GMT

Minor changes

Fix an issue where destructured parameters produced an incorrect parameter name

`v7.55.5`

Compare Source

Thu, 08 Jan 2026 01:12:30 GMT

Patches

Fix missing 'export' keyword for namespace re-exports that produced invalid TypeScript output

`v7.55.2`

Compare Source

Sat, 06 Dec 2025 01:12:28 GMT

Version update only

`v7.55.1`

Compare Source

Fri, 21 Nov 2025 16:13:56 GMT

Version update only

`v7.55.0`

Compare Source

Wed, 12 Nov 2025 01:12:56 GMT

Minor changes

Bump the @microsoft/tsdoc dependency to ~0.16.0.
Bump the @microsoft/tsdoc-config dependency to ~0.18.0.

`v7.54.0`

Compare Source

Tue, 04 Nov 2025 08:15:14 GMT

Minor changes

Add a new setting IExtractorInvokeOptions.printApiReportDiff that makes build logs easier to diagnose by printing a diff of any changes to API report files (*.api.md).
Add a --print-api-report-diff CLI flag that causes a diff of any changes to API report files (*.api.md) to be printed.

`v7.53.3`

Compare Source

Fri, 24 Oct 2025 00:13:38 GMT

Version update only

`v7.53.2`

Compare Source

Wed, 22 Oct 2025 00:57:54 GMT

Version update only

`v7.53.1`

Compare Source

Wed, 08 Oct 2025 00:13:28 GMT

Version update only

`v7.53.0`

Compare Source

Fri, 03 Oct 2025 20:09:59 GMT

Minor changes

Normalize import of builtin modules to use the node: protocol.

`v7.52.15`

Compare Source

Tue, 30 Sep 2025 23:57:45 GMT

Version update only

`v7.52.14`

Compare Source

Tue, 30 Sep 2025 20:33:51 GMT

Version update only

`v7.52.13`

Compare Source

Fri, 12 Sep 2025 15:13:07 GMT

Patches

Fixes a bug in ExtractorAnalyzer._isExternalModulePath where type import declarations were not resolved.

`v7.52.12`

Compare Source

Thu, 11 Sep 2025 00:22:31 GMT

Version update only

`v7.52.11`

Compare Source

Tue, 19 Aug 2025 20:45:02 GMT

Patches

Fix self-package import resolution by removing outDir/declarationDir from compiler options

`v7.52.10`

Compare Source

Fri, 01 Aug 2025 00:12:48 GMT

Patches

Upgrades the minimatch dependency from ~3.0.3 to 10.0.3 across the entire Rush monorepo to address a Regular Expression Denial of Service (ReDoS) vulnerability in the underlying brace-expansion dependency.

`v7.52.9`

Compare Source

Wed, 23 Jul 2025 20:55:57 GMT

Version update only

`v7.52.8`

Compare Source

Tue, 13 May 2025 02:09:20 GMT

Patches

Fixes API extractor error handling when changed APIs are encountered and the "--local" flag is not specified

`v7.52.7`

Compare Source

Thu, 01 May 2025 15:11:33 GMT

Patches

Fix an issue where default exports were sometimes trimmed incorrectly in .api.md files when using reportVariants (GitHub #4775)

`v7.52.6`

Compare Source

Thu, 01 May 2025 00:11:12 GMT

Version update only

`v7.52.5`

Compare Source

Mon, 21 Apr 2025 22:24:25 GMT

Version update only

`v7.52.4`

Compare Source

Thu, 17 Apr 2025 00:11:21 GMT

Patches

Update documentation for extends

`v7.52.3`

Compare Source

Fri, 04 Apr 2025 18:34:35 GMT

Patches

Add support for customizing which TSDoc tags appear in API reports

`v7.52.2`

Compare Source

Tue, 25 Mar 2025 15:11:15 GMT

Version update only

`v7.52.1`

Compare Source

Tue, 30 Sep 2025 23:57:45 GMT

Version update only

`v7.52.0`

Compare Source

Tue, 11 Mar 2025 00:11:25 GMT

Minor changes

Upgrade the bundled compiler engine to TypeScript 5.8.2

`v7.51.1`

Compare Source

Sat, 01 Mar 2025 05:00:09 GMT

Patches

Include triple-slash references marked with preserve="true" from files that only contain re-exports. There was a behavior change in TypeScript 5.5, where only triple-slash references that are explicitly marked with preserve="true" are emitted into declaration files. This change adds support for placing these references in files that only contain re-exports, like the API entrypoint file.

`v7.51.0`

Compare Source

Thu, 27 Feb 2025 01:10:39 GMT

Minor changes

Add a docModel.releaseTagsToTrim property to api-extractor.json to specify which release tags should be trimmed when the doc model is produced.

`v7.50.1`

Compare Source

Sat, 22 Feb 2025 01:11:11 GMT

Patches

Upgrade the bundled compiler engine to TypeScript 5.7.3

`v7.50.0`

Compare Source

Wed, 12 Feb 2025 01:10:52 GMT

Minor changes

Update merge behavior for derived configurations to allow overriding array properties

nrwl/nx (@nx/devkit)

`v23.0.2`

Compare Source

23.0.2 (2026-07-10)

🚀 Features

core: re-add isCacheableTask helper (#36177)

🩹 Fixes

bundling: prevent TS6059 when an app imports a workspace lib from source (#36217, #35017)
core: prefer module.registerHooks to avoid DEP0205 deprecation warning (#36081)
core: prevent nx migrate crash when include=optional filters out the target package (#36087)
core: make nx migrate honor preapproved packages and emit a valid temp workspace (#36086)
core: skip daemon project-graph recompute on no-op file rewrites (#36082)
core: prevent the TUI from auto-selecting a completed task when a batch finishes (#35833)
core: deregister pseudo-terminal exit handlers when tasks finish (#36115)
core: prevent path traversal / zip-slip in self-hosted remote cache (#36116)
core: respect explicit --nxCloud=skip for AI agents in create-nx-workspace (#36131)
core: warn when the self-hosted remote cache disables TLS verification (NXC-4593) (#36132, #36116)
core: throw actionable error when pnpm .modules.yaml is missing (#35666, #35635)
core: support ${configDir} in tsconfig path alias resolution (#36037, #35804)
core: prevent non-npm devEngines pin from breaking npm registry lookups (#36020, #35815)
core: clarify nx sync remediation messaging and surface spinner output in non-tty (#35747)
core: exclude direct-dependency overrides from generated package.json (#36040, #35675)
core: apply target defaults when project.json overrides an inferred run-commands target with different commands (#36142, #36067)
core: run the nx.bat wrapper for dot-nx setup on windows (#36048)
core: speed up bun lockfile parsing (#36198)
core: set NX_CLI_SET in batch worker processes (#36214, #36210)
core: preserve comments in catalog YAML updates (#35733)
core: box JsonFileSet payload to keep HashInstruction small (#36247, #35248, #36244, #36152)
core: share workspace fileset hash results instead of deep-cloning per task (#36244, #34971, #34942)
core: replace per-input visited clones with undo-log scoping in hash planner (#36248, #35071, #36152, #34971, #36244, #35248, #36247)
core: intern hash instructions in a pool and plan with id lists (#36249, #35071, #36152, #36248)
core: detect Codex sandbox on Linux to disable daemon and plugin isolation (#36273)
devkit: restore prettier v2 support in formatFiles (#36193)
graph: prevent project details web view top from being clipped (#36154)
js: prevent doubled output paths in buildable library path mappings (#36138, #36079)
js: scope incremental type-check .tsbuildinfo per project (#36137, #36113)
js: preserve npm allowScripts allowlist in pruned package.json (#36016, #35931)
js: resolve catalog references in pruned package.json output (#35805, #35419)
js: avoid import locator unicode position panic (#36133, #36128)
js: prevent Windows TS6059 rootDir errors in tsc builds (#36184, #35696)
js: wait for process tree exit when stopping node executor tasks (#36230)
linter: update terminal cli regex for local-dist build (#36201, #36199)
maven: de-flake maven e2e by dropping -X debug forks and widening timeout (#36091)
misc: bump axios to 1.16.1 (#36120)
misc: use default import for chalk in @nx/workspace output.ts (#35523, #35521, #34111, #21201, #26667)
misc: remove duplicate nx init cloud-prompt telemetry event (#36145)
nx-cloud: use standard utm params on cloud prompt links (#36227, #36226)
nx-dev: remove empty SaaS and Mobile template filters (#36085)
react: reserve ports in rspack e2e test to avoid default port collisions (#36090)
react: stop pinning eslint-plugin-react in generated projects (#36168, #36161)
release: widen release e2e timeouts to absorb pre-version dlx install (#36092)
repo: trust wix/brew tap so macOS detox CI can install applesimutils (#36146)
rspack: use contenthash for chunkFilename to prevent stale chunks (#36136, #2292, #36014)
rspack: stop mocking non-existent is-serve-mode util in apply-base-config test (fea2cabbcc)
vite: widen vite ts-solution e2e build timeouts for cold multi-lib build (#36093)
vite: detect @vitejs/plugin-vue2 (vite:vue2) for vue-tsc typecheck (#36125, #36094)
vite: update deprecation docs link (#36070, #36053)
vitest: support passing mode through to vitest (#35069)
web: run executor/plugin/generator commands with the workspace package manager (#36021, #35950)
webpack: prevent TS6059 when a tsc build bundles a workspace lib (#36188, #35017)

❤️ Thank You

AgentEnder @AgentEnder
Aidan Temple @aidant
Craigory Coppola @AgentEnder
cyphercodes @cyphercodes
FrozenPandaz @FrozenPandaz
Jack Hsu @jaysoo
Jason Jean @FrozenPandaz
Jonathan Garvey @jdgarvey
Leosvel Pérez Espinosa @leosvelperez
Miroslav Jonaš @meeroslav
Rayan Salhab
Richard Roozenboom @Roozenboom
Sai Asish Y @SAY-5
Steven Nance
titanniya542-spec @titanniya542-spec
Wilson Pinto

`v23.0.1`

Compare Source

23.0.1 (2026-06-23)

🚀 Features

nx-cloud: add utm tracking to clickable cloud prompt links (#36028)

🩹 Fixes

angular: resolve esbuild option paths relative to the workspace root (#36017, #35936)
angular-rspack: surface compilation failures as build errors and release resources on teardown (#36018)
bundling: restore preprocessor extensions in postcss normalizeOp… (#36057, #35854)
core: avoid tsconfig path false positives for sibling project roots (#35796, #35795, #35786)
core: do not write minimumReleaseAgeExclude during nx migrate (#36045)
core: do not crash nx migrate on non-semver dependency specifiers (#36051)
core: format AI-edited files after agentic migrations (#36064)
misc: bump happy-dom, tmp, and form-data to patched versions (#36013)
nx-dev: keep mobile sidebar toggle clear of the conference banner (#36047)
nx-dev: run next-sitemap directly instead of via pnpm (#36054)
⚠️ release: stop breaking change changelog entry from swallowing trailing PR body (#36052, #35910, #33070)
vitest: apply mode-based config consistently in the test executor (#36041, #35196)

❤️ Thank You

Alex Croteau @cw-alexcroteau
Jack Hsu @jaysoo
Jason Jean @FrozenPandaz
Leosvel Pérez Espinosa @leosvelperez
Marwan Johnstone

swc-project/swc (@swc/core)

`v1.15.43`

Compare Source

Bug Fixes

(es/es2022) Correct scope for private property brand checks (#11953) (fb5afa2)
(es/minifier) Preserve cooked when concatenating template literals (#11939) (a7244a6)
(es/minifier) Gate Number(x) -> +x on unsafe flag (#11944) (#11949) (6176019)
(es/parser) Parse Flow bare renders types (#11929) (a71c8eb)
(es/parser) Allow no-default builds (#11956) (baab240)
(es/react-compiler) Skip TypeScript this pseudo-params in scope collector (#11940) (9066c43)
(es/react-compiler) Scope ClassStaticBlock and TsModuleBlock as var boundaries (#11943) (1ee74a0)
(react-compiler) Avoid reporting non-fatal success errors as diagnostics (#11951) (cb4cb23)
(react-compiler) React compiler AST conversion for wrapped assignment targets (#11952) (fc9b453)
(react-compiler) Disable parser default features (#11957) (75ddb28)

Documentation

Document untrusted input security scope (#11937) (677305b)

Features

(es/react-compiler) Add React Compiler (#11917) (b182fbd)
(swc) Gate react compiler re-export (#11941) (dcc0f2d)

Miscellaneous Tasks

(es/react-compiler) Update forked react compiler to 0.2.0 (#11946) (6fbe188)

Refactor

(es/react-compiler) Preserve TS metadata during AST roundtrip (#11950) (9c4dec3)
Remove production tracing hooks (#11945) (0dffdc4)

`v1.15.41`

Compare Source

Bug Fixes

(bindings/node) Preserve source context for AST transforms (#11920) (b6dfa74)
(es/codegen) Emit export as namespace correctly (#11923) (4e1f832)
(es/codegen) Emit export as namespace minified correctly (#11924) (7157499)
(es/compat) Rewrite this in destructuring defaults (#11909) (68af779)
(es/decorators) Delay 2022 decorator initializers after private fields (#11847) (3f1a4f5)
(es/decorators) Handle import types in decorator metadata (#11916) (f411429)
(es/fixer) Preserve new tagged template callee parens (#11922) (242a03a)
(es/minifier) Handle unknown member props (#11927) (e59ba68)
(es/parser) Handle Flow async generic arrows (#11926) (b9b8993)
(es/renamer) Avoid duplicate mangled names across eval scope boundaries (#11913) (4a1af84)
(plugin) Avoid importing __free from env (#11908) (4584296)
(swc) Preserve plugin error context (#11904) (4e2e9fc)
(swc_common) Fix sourcemap panic for multibyte mapping positions (#11918) (40c1601)

Documentation

Fix architecture fixer link (#11911) (51cbc8c)

Performance

Lazily compute source file hashes (#11879) (a3cfbd7)
Optimize Atom equality (#11902) (c6f8cb0)

Revert

(es/decorators) Revert decorator initializer ordering (#11901) (a3f23b1)
(swc_common) Revert sourcemap multibyte mapping clamp (#11919) (08b4200)

`v1.15.40`

Compare Source

Bug Fixes

(es/minifier) Preserve args for destructured callbacks (#11830) (21873b0)
(es/minifier) Avoid generating mangled property names that collide with existing properties (#11839) ([9b4fab5](https://redirect.github.com/swc-project/swc/com

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- "after 2am and before 3am"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-01-08T07:00:37Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@nx/workspace` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → `npm/@nx/workspace@23.0.2` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@nx/workspace@23.0.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@verdaccio/ui-theme` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/verdaccio@6.7.4` → `npm/@verdaccio/ui-theme@9.0.0-next-9.20` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@verdaccio/ui-theme@9.0.0-next-9.20`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `nx` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/@nx/workspace@23.0.2` → `npm/nx@23.0.2` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/nx@23.0.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

socket-security · 2026-06-15T13:20:55Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@swc/helpers@0.5.23
	@nx/jest@23.0.2
	@nx/js@23.0.2
	@nx/eslint-plugin@23.0.2
	@nx/plugin@23.0.2
	@nx/workspace@23.0.2
	@types/web@0.0.352
	ts-jest@29.4.11
	@swc/core@1.15.43
	@nx/devkit@23.0.2
	sharp@0.35.3
	verdaccio@6.7.4

View full report

renovate Bot requested a review from a team January 3, 2026 12:01

renovate Bot added the dependencies Upgrade or downgrade of project dependencies. label Jan 3, 2026

renovate Bot requested review from a team and sullivanpj as code owners January 3, 2026 12:01

renovate Bot enabled auto-merge (squash) January 3, 2026 12:01

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from c0d78db to d5f63c6 Compare January 8, 2026 06:59

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 17fbdc4 to bce6bcd Compare January 13, 2026 19:16

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 8 times, most recently from 68da564 to a3c403f Compare January 22, 2026 07:45

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 6 times, most recently from bb7d6a8 to ac7ea5a Compare January 28, 2026 18:52

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 6 times, most recently from 338335f to 08b596c Compare February 14, 2026 11:50

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 93b21ce to 41eefb4 Compare February 22, 2026 03:46

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 3 times, most recently from 9e263a0 to 58ad5bf Compare March 2, 2026 06:22

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 195ab9e to 75c782c Compare March 14, 2026 09:34

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 3 times, most recently from 5c1aa86 to f084a77 Compare March 31, 2026 18:31

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 0f691e9 to 3e339e6 Compare April 19, 2026 03:10

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 305748c to cf208d0 Compare May 6, 2026 11:28

renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 6ffff96 to 42ff586 Compare May 8, 2026 16:01

chore(monorepo): update auto-merge non-major dependencies

137808d

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(monorepo): update auto-merge non-major dependencies#6

chore(monorepo): update auto-merge non-major dependencies#6
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/auto-merge-non-major-dependencies

renovate Bot commented Jan 3, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jan 8, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 15, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

renovate Bot commented Jan 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patches

Patches

Patches

Patches

Patches

Minor changes

Patches

Patches

Patches

Patches

Patches

Minor changes

Patches

Patches

Minor changes

Patches

Minor changes

Minor changes

Minor changes

Patches

Patches

Patches

Patches

Patches

Patches

Patches

Minor changes

Patches

Minor changes

Patches

Minor changes

23.0.2 (2026-07-10)

🚀 Features

🩹 Fixes

❤️ Thank You

23.0.1 (2026-06-23)

🚀 Features

🩹 Fixes

❤️ Thank You

Bug Fixes

Documentation

Features

Miscellaneous Tasks

Refactor

Bug Fixes

Documentation

Performance

Revert

Bug Fixes

Configuration

Uh oh!

socket-security Bot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jan 3, 2026 •

edited

Loading

socket-security Bot commented Jan 8, 2026 •

edited

Loading

socket-security Bot commented Jun 15, 2026 •

edited

Loading