chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@tanstack/query-core (source)	^5.95.2 → ^5.96.2
eslint (source)	^10.1.0 → ^10.2.0
nx (source)	22.6.3 → 22.6.4
sherif	^1.11.0 → ^1.11.1
simple-git (source)	^3.33.0 → ^3.35.2
typescript-eslint (source)	^8.57.2 → ^8.58.0
vite (source)	^8.0.3 → ^8.0.7
vitest (source)	^4.1.2 → ^4.1.3
vue (source)	^3.5.31 → ^3.5.32

---

Release Notes

TanStack/query (@​tanstack/query-core)

v5.96.2

Compare Source

v5.96.1

Compare Source

eslint/eslint (eslint)

v10.2.0

Compare Source

Features

• 586ec2f feat: Add meta.languages support to rules (#​20571) (Copilot)
• 14207de feat: add Temporal to no-obj-calls (#​20675) (Pixel998)
• bbb2c93 feat: add Temporal to ES2026 globals (#​20672) (Pixel998)

Bug Fixes

• 542cb3e fix: update first-party dependencies (#​20714) (Francesco Trotta)

Documentation

• a2af743 docs: add language to configuration objects (#​20712) (Francesco Trotta)
• 845f23f docs: Update README (GitHub Actions Bot)
• 5fbcf59 docs: remove sourceType from ts playground link (#​20477) (Tanuj Kanti)
• 8702a47 docs: Update README (GitHub Actions Bot)
• ddeaded docs: Update README (GitHub Actions Bot)
• 2b44966 docs: add Major Releases section to Manage Releases (#​20269) (Milos Djermanovic)
• eab65c7 docs: update eslint versions in examples (#​20664) (루밀LuMir)
• 3e4a299 docs: update ESM Dependencies policies with note for own-usage packages (#​20660) (Milos Djermanovic)

Chores

• 8120e30 refactor: extract no unmodified loop condition (#​20679) (kuldeep kumar)
• 46e8469 chore: update dependency markdownlint-cli2 to ^0.22.0 (#​20697) (renovate[bot])
• 01ed3aa test: add unit tests for unicode utilities (#​20622) (Manish chaudhary)
• 811f493 ci: remove --legacy-peer-deps from types integration tests (#​20667) (Milos Djermanovic)
• 6b86fcf chore: update dependency npm-run-all2 to v8 (#​20663) (renovate[bot])
• 632c4f8 chore: add prettier update commit to .git-blame-ignore-revs (#​20662) (루밀LuMir)
• b0b0f21 chore: update dependency eslint-plugin-regexp to ^3.1.0 (#​20659) (Milos Djermanovic)
• 228a2dd chore: update dependency eslint-plugin-eslint-plugin to ^7.3.2 (#​20661) (Milos Djermanovic)
• 3ab4d7e test: Add tests for eslintrc-style keys (#​20645) (kuldeep kumar)

nrwl/nx (nx)

v22.6.4

Compare Source

22.6.4 (2026-04-01)

🚀 Features

• misc: update nx init telemetry meta from CSV to JSON format (#​35076)
• nx-dev: add conditional blog/changelog proxy in edge function (#​35043)

🩹 Fixes

• core: validate bundler option for Angular presets in create-nx-workspace (#​35074)
• core: handle "." and absolute paths as workspace name in CNW (#​35083, #​1)
• core: pin version of axios (#​35093)
• core: preserve sibling dependency inputs in native hashing (#​35071)
• core: sandbox exclusions, multi-line typeof import detection, global ensurePackage mock (#​35056)
• core: no-interactive should disable prompts during migrate (#​35106)
• gradle: increase project graph timeout defaults (#​35058)
• js: recognize tsgo in dependency-checks lint rule (#​35048)
• js: narrow tsc build-base outputs to only tsc-produced file types (#​35041)
• js: include tsbuildinfo in narrowed tsc build-base outputs (#​35086, #​35041)
• js: use explicit nx/bin/nx path in start-local-registry (#​35127)
• misc: handle non-interactive mode and add template shorthand names for CNW (#​35045)
• react: force Vite 7 when using React Router in framework mode (#​35101)
• react-native: use vite's transformWithEsbuild instead of direct esbuild import (5771eb3346)
• repo: pass env vars into docker builds in publish workflow (#​35060)
• repo: bump picomatch from 4.0.2 to 4.0.4 (#​35081, #​35068)
• repo: fixup lock-threads failing with resource inaccessible message (#​35005)
• repo: fix lockfile (b070e23445)
• repo: re-enable Cypress HMR e2e tests after upstream tapable fix (#​35105, #​34969, #​20693)
• repo: disable ts-jest diagnostics for workspace-plugin tests (b013f93dca)
• vite: update vitest and plugin-react-swc versions for vite 8 compat (#​35062)
• vite: bump sass version for vue/nuxt presets for Vite 8 compat (#​35073)
• webpack: bump postcss-loader to ^8.2.1 to eliminate transitive yaml@1.x CVE (#​35028, #​35025)

❤️ Thank You

• Colum Ferry @​Coly010
• Craigory Coppola @​AgentEnder
• FrozenPandaz @​FrozenPandaz
• Jack Hsu @​jaysoo
• Jason Jean @​FrozenPandaz
• Leosvel Pérez Espinosa @​leosvelperez
• Miroslav Jonaš @​meeroslav
• Robert Sidzinka

steveukx/git-js (simple-git)

v3.35.2

Compare Source

Patch Changes

• 0cf9d8c: Improvements for mono-repo publishing pipeline
• Updated dependencies [0cf9d8c]
  • @​simple-git/args-pathspec@​1.0.2
  • @​simple-git/argv-parser@​1.0.3

v3.35.1

Compare Source

Patch Changes

• 0de400e: Update monorepo version handling during publish
• Updated dependencies [0de400e]
  • @​simple-git/argv-parser@​1.0.2

v3.35.0

Compare Source

Minor Changes

• 3d8708b: Updating publish config

Patch Changes

• Updated dependencies [3d8708b]
  • @​simple-git/args-pathspec@​1.0.1
  • @​simple-git/argv-parser@​1.0.1

v3.34.0

Compare Source

Minor Changes

• 2b68331: Revised dependency tree to add helper modules as dependencies in main simple-git

Patch Changes

• 2e1f51c: Enhances scanning of arguments before passing on to the spawned child_process.

  Caters for -c flags prefixing the git task (used when setting global inline config) and suffixing with either -c, --config or --config-env. Detects git config operations that write to the configuration.

• Updated dependencies [2e1f51c]

  • @​simple-git/args-pathspec@​1.0.0
  • @​simple-git/argv-parser@​1.0.0

vitejs/vite (vite)

v8.0.7

Compare Source

Bug Fixes

• use sync dns.getDefaultResultOrder instead of dns.promises (#​22185) (5c05b04)

v8.0.6

Compare Source

Features

• update rolldown to 1.0.0-rc.13 (#​22097) (51d3e48)

Bug Fixes

• css: avoid mutating sass error multiple times (#​22115) (d5081c2)
• optimize-deps: hoist CJS interop assignment (#​22156) (17a8f9e)

Performance Improvements

• early return in getLocalhostAddressIfDiffersFromDNS when DNS order is verbatim (#​22151) (56ec256)

Miscellaneous Chores

• create-vite: remove unnecessary DOM.Iterable (#​22168) (bdc53ab)
• replace remaining prettier script (#​22179) (af71fb2)

v8.0.5

Compare Source

Bug Fixes

• apply server.fs check to env transport (#​22159) (f02d9fd)
• avoid path traversal with optimize deps sourcemap handler (#​22161) (79f002f)
• check server.fs after stripping query as well (#​22160) (a9a3df2)
• disallow referencing files outside the package from sourcemap (#​22158) (f05f501)

v8.0.4

Compare Source

Features

• allow esbuild 0.28 as peer deps (#​22155) (b0da973)
• hmr: truncate list of files on hmr update (#​21535) (d00e806)
• optimizer: log when dependency scanning or bundling takes over 1s (#​21797) (f61a1ab)

Bug Fixes

• hasBothRollupOptionsAndRolldownOptions should return false for proxy case (#​22043) (99897d2)
• add types for vite/modulepreload-polyfill (#​22126) (17330d2)
• deps: update all non-major dependencies (#​22073) (6daa10f)
• deps: update all non-major dependencies (#​22143) (22b0166)
• resolve: resolve tsconfig paths starting with # (#​22038) (3460fc5)
• ssr: use browser platform for webworker SSR builds (fix #​21969) (#​21963) (364c227)

Documentation

• add environment.fetchModule documentation (#​22035) (54229e7)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​21989) (0ded627)

Code Refactoring

• upgrade to typescript 6 (#​22110) (cc41398)

vitest-dev/vitest (vitest)

v4.1.3

Compare Source

   🚀 Experimental Features

• Add experimental.preParse flag  -  by @​sheremet-va in #​10070 (78273)
• Support browser.locators.exact option  -  by @​sheremet-va in #​10013 (48799)
• Add TestAttachment.bodyEncoding  -  by @​hi-ogawa in #​9969 (89ca0)
• Support custom snapshot matcher  -  by @​hi-ogawa, Claude Sonnet 4.6 and Codex in #​9973 (59b0e)

   🐞 Bug Fixes

• Advance fake timers with expect.poll interval  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10022 (3f5bf)
• Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency  -  by @​alan-agius4 in #​10025 (146d4)
• Fix defineHelper for webkit async stack trace + update playwright 1.59.0  -  by @​hi-ogawa in #​10036 (5a5fa)
• Fix suite hook throwing errors for unused auto test-scoped fixture  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10035 (39865)
• expect:
  • Remove JestExtendError.context from verbose error reporting  -  by @​hi-ogawa in #​9983 (66751)
  • Don't leak "runner" types  -  by @​sheremet-va in #​10004 (ec204)
• snapshot:
  • Fix flagging obsolete snapshots for snapshot properties mismatch  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​9986 (6b869)
  • Export custom snapshot matcher helper from vitest  -  by @​hi-ogawa and Codex in #​10042 (691d3)
• ui:
  • Don't leak vite types  -  by @​sheremet-va in #​10005 (fdff1)
• vm:
  • Fix external module resolve error with deps optimizer query  -  by @​hi-ogawa and Claude Sonnet 4.6 in #​10024 (9dbf4)

    View changes on GitHub

vuejs/core (vue)

v3.5.32

Compare Source

Bug Fixes

• runtime-core: prevent currentInstance leak into sibling render during async setup re-entry (#​14668) (f166353), closes #​14667
• teleport: handle updates before deferred mount (#​14642) (32b44f1), closes #​14640
• types: allow customRef to have different getter/setter types (#​14639) (e20ddb0)
• types: use private branding for shallowReactive (#​14641) (302c47a), closes #​14638 #​14493

Reverts

• Revert "fix(server-renderer): cleanup component effect scopes after SSR render" (#​14674) (219d83b), closes #​14674 #​14669

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

Updated several dependency version ranges in pnpm-workspace.yaml's catalog for multiple packages; no other keys or structural changes were made.

Changes

Cohort / File(s)	Summary
Dependency Version Bumps pnpm-workspace.yaml	Bumped catalog versions: @tanstack/query-core (^5.95.2 → ^5.96.2), eslint (^10.1.0 → ^10.2.0), nx (22.6.3 → 22.6.4), sherif (^1.11.0 → ^1.11.1), simple-git (^3.33.0 → ^3.35.2), typescript-eslint (^8.57.2 → ^8.58.0), vite (^8.0.3 → ^8.0.6), vitest (^4.1.2 → ^4.1.3), vue (^3.5.31 → ^3.5.32).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• chore(deps): update all non-major dependencies #376: Overlapping edits to the same pnpm-workspace.yaml catalog entries and identical version bumps.
• chore(deps): update all non-major dependencies #367: Modifies pnpm-workspace.yaml dependency catalog with overlapping package version updates.

Suggested labels

dependencies

Poem

🐰 I nibble through the version patch,
Nine tiny hops to fix the latch.
Catalog shifted, lines align,
A tidy tree, dependencies fine. 🥕

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The PR description is auto-generated by Renovate and provides detailed dependency update information with release notes, but does not follow the required template structure.	Add the required sections from the template: fill in the '🎯 Changes' section with a summary of changes and motivation, complete the '✅ Checklist' items, and specify the '🚀 Release Impact' status (whether this is a release or dev-only change).

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely summarizes the main change: updating all non-major dependencies in the pnpm-workspace.yaml file.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/all-minor-patch

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[nx-cloud]

View your CI Pipeline Execution ↗ for commit 43160e5

Command	Status	Duration	Result
nx affected --targets=test:sherif,test:docs,tes...	✅ Succeeded	22s	View ↗
nx run-many --target=build	✅ Succeeded	8s	View ↗

---

☁️ Nx Cloud last updated this comment at 2026-04-07 17:39:18 UTC

[pkg-pr-new]

npm i https://pkg.pr.new/@tanstack/eslint-config@378

npm i https://pkg.pr.new/@tanstack/publish-config@378

npm i https://pkg.pr.new/@tanstack/typedoc-config@378

npm i https://pkg.pr.new/@tanstack/vite-config@378

commit: 43160e5