fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #261 · element-plus/unplugin-element-plus

renovate · 2026-01-26T01:58:12Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@typescript/native-preview (source)	`7.0.0-dev.20260118.1` → `7.0.0-dev.20260507.1`
esbuild	`~0.27.2` → `~0.28.0`
pnpm (source)	`10.28.0` → `10.33.4`
rolldown-string	`^0.2.1` → `^0.3.0`
tsdown (source)	`^0.19.0` → `^0.21.0`

Release Notes

microsoft/typescript-go (@typescript/native-preview)

evanw/esbuild (esbuild)

`v0.28.0`

Compare Source

`v0.27.7`

Compare Source

`v0.27.5`

Compare Source

`v0.27.4`

Compare Source

`v0.27.3`

Compare Source

pnpm/pnpm (pnpm)

`v10.33.4`: pnpm 10.33.4

Compare Source

Patch Changes

Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.

A new gitHosted: true field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.
Fix a regression where pnpm --recursive --filter '!<pkg>' run/exec/test/add would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative --filter arguments are provided, matching the documented behavior. To include the root, pass --include-workspace-root #11341.

Platinum Sponsors

Gold Sponsors

`v10.33.3`

Compare Source

`v10.33.2`

Compare Source

`v10.33.1`: pnpm 10.33.1

Compare Source

Patch Changes

When a project's packageManager field selects pnpm v11 or newer, commands that v10 would have passed through to npm (version, login, logout, publish, unpublish, deprecate, dist-tag, docs, ping, search, star, stars, unstar, whoami, etc.) are now handed over to the wanted pnpm, which implements them natively. Previously they silently shelled out to npm — making, for example, pnpm version --help print npm's help on a project with packageManager: pnpm@11.0.0-rc.3 #11328.

Platinum Sponsors

Gold Sponsors

`v10.33.0`

Compare Source

`v10.32.1`: pnpm 10.32.1

Compare Source

Patch Changes

Fix a regression where pnpm-workspace.yaml without a packages field caused all directories to be treated as workspace projects. This broke projects that use pnpm-workspace.yaml only for settings (e.g. minimumReleaseAge) without defining workspace packages #10909.

Platinum Sponsors

Gold Sponsors

`v10.32.0`: pnpm 10.32

Compare Source

Minor Changes

Added --all flag to pnpm approve-builds that approves all pending builds without interactive p

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the dependencies label Jan 26, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 46acf07 to 083c2bb Compare February 1, 2026 21:24

renovate Bot force-pushed the renovate/all-minor-patch branch 15 times, most recently from 32dccfa to 2412811 Compare February 9, 2026 05:07

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from ba60bb1 to 6cd7365 Compare February 9, 2026 13:49

renovate Bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 7aad4cb to 0099812 Compare February 24, 2026 09:27

renovate Bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from eedd9b6 to 0fe86e3 Compare March 4, 2026 06:11

renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 68bf44c to 9daa861 Compare March 6, 2026 05:23

fix(deps): update all non-major dependencies

b08e63b

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all non-major dependencies#261

fix(deps): update all non-major dependencies#261
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

renovate Bot commented Jan 26, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jan 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v10.33.4: pnpm 10.33.4

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.33.1: pnpm 10.33.1

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.32.1: pnpm 10.32.1

Patch Changes

Platinum Sponsors

Gold Sponsors

v10.32.0: pnpm 10.32

Minor Changes

Configuration

Uh oh!

Reviewers

Assignees

Labels

renovate Bot commented Jan 26, 2026 •

edited

Loading

`v10.33.4`: pnpm 10.33.4

`v10.33.1`: pnpm 10.33.1

`v10.32.1`: pnpm 10.32.1

`v10.32.0`: pnpm 10.32