chore(deps): update all non-major dependencies

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	^20.19.23 → ^20.19.30
@unocss/eslint-plugin (source)	^66.5.4 → ^66.6.0
@unocss/preset-icons (source)	^66.5.4 → ^66.6.0
axios (source)	^1.12.2 → ^1.13.2
bumpp	^10.3.1 → ^10.4.0
eslint (source)	^9.38.0 → ^9.39.2
less (source)	^4.4.2 → ^4.5.1
lint-staged	^16.2.6 → ^16.2.7
pinia (source)	^3.0.3 → ^3.0.4
pnpm (source)	10.19.0 → 10.28.0
prettier (source)	^3.6.2 → ^3.8.0
rimraf	^6.0.1 → ^6.1.2
sass	^1.93.2 → ^1.97.2
taze	^19.8.1 → ^19.9.2
tslx	^0.1.1 → ^0.2.1
unocss (source)	^66.5.4 → ^66.6.0
vite-plugin-pwa	^1.1.0 → ^1.2.0
vue (source)	^3.5.22 → ^3.5.26
vue-router (source)	^4.6.3 → ^4.6.4
workbox-core (source)	^7.3.0 → ^7.4.0
workbox-expiration (source)	^7.3.0 → ^7.4.0
workbox-precaching (source)	^7.3.0 → ^7.4.0
workbox-routing (source)	^7.3.0 → ^7.4.0
workbox-strategies (source)	^7.3.0 → ^7.4.0
workbox-window (source)	^7.3.0 → ^7.4.0

---

Release Notes

unocss/unocss (@​unocss/eslint-plugin)

v66.6.0

Compare Source

   🚀 Features

• core:
  • Add allLayers option to output all layer names  -  by @​zyyv in #​5057 (b55b4)
• preset-mini, preset-wind4:
  • Add stretch keyword for width/height  -  by @​zyyv in #​5048 (126d1)
  • Optimize contain-intrinsic-size rule close #​5045  -  by @​zyyv in #​5045 (d5346)

   🐞 Bug Fixes

• build: Remove tsconfig paths mapping and adjust bundle config  -  by @​Jungzl and @​zyyv in #​5052 (55748)
• cli: Avoid clearing cache early to prevent race condition in watch mode  -  by @​zyyv in #​5054 (6bf89)
• svelte-scoped: Explicit export of types to prevent node error  -  by @​henrikvilhelmberglund in #​5067 (42670)
• vscode: Not use catalog version of @types/vscode  -  by @​Jungzl in #​5034 (54769)

    View changes on GitHub

v66.5.12

Compare Source

   🚀 Features

• Enhance style injection logic to support custom root elements  -  by @​octavio1243 in #​5027 (70f1b)

   🐞 Bug Fixes

• playground: Mock invalidate function in fakePluginContext  -  by @​zyyv (5e93d)
• preset-mini: Correct tsdown external configuration  -  by @​zyyv in #​5031 (0107e)
• preset-wind3, preset-wind4: Update column generate value from container  -  by @​zyyv in #​5030 (46860)
• transformer-attributify-jsx: Falls back to regular expression when babel parse error  -  by @​zyyv and Copilot in #​5032 (38cc8)

    View changes on GitHub

v66.5.11

Compare Source

   🚀 Features

• Support Vite 8  -  by @​sxzz in #​5011 (115ee)

   🐞 Bug Fixes

• inspector: Prevent blinking after toggling dark  -  by @​liangmiQwQ in #​5023 (c9651)
• preset-mini: Resolve nested theme colors with dashed keys  -  by @​nlemoine in #​5021 (8e7db)

    View changes on GitHub

v66.5.10

Compare Source

   🚀 Features

• core: Allow postprocessors to append or remove rules  -  by @​Menci and @​zyyv in #​5010 (298de)
• vite: Add virtualModulePrefix option to support for custom virtual module prefix  -  by @​zyyv and @​liujiayii in #​5008 (1819f)

   🐞 Bug Fixes

• config: Should merge inlineConfig when load config  -  by @​zyyv (37452)
• preset-wind4: Support special color key with alpha close #​4998  -  by @​zyyv in #​4998 (e43d0)
• rule-utils: Escape rule prefix close Group descendant selectors and prefixes Fixes #​5004  -  by @​zyyv in #​5004 (dba52)

    View changes on GitHub

v66.5.9

Compare Source

No significant changes

    View changes on GitHub

v66.5.7

Compare Source

   🚀 Features

• Add first-class support for Marko  -  by @​LuLaValva in #​4995 (ba06c)

   🐞 Bug Fixes

• preset-wind4: Cancel support for chained variables close #​4994  -  by @​zyyv in #​4994 (8a465)

   🏎 Performance

• preset-mini: Deprecate regex for search css variables  -  by @​zyyv (4f023)

    View changes on GitHub

v66.5.6

Compare Source

   🐞 Bug Fixes

• preset-wind4: Cancel colors shortcutsnomerge close #​4987  -  by @​zyyv in #​4987 (6b0f7)

    View changes on GitHub

v66.5.5

Compare Source

   🚨 Breaking Changes

• svelte-scoped: Simplify user facing setup  -  by @​fehnomenal and Henrik Berglund in #​4942 (7e52a)

   🚀 Features

• inspector:
  • Integrate Vite DevTools  -  by @​antfu (a95bd)
• preset-wind4:
  • Set the default spacing digits to 4  -  by @​zyyv in #​4983 (1d1ca)
  • Support theme function in bracket  -  by @​zyyv in #​4970 (caeb3)
• reset:
  • Tailwind v4 reset  -  by @​KTibow in #​4956 (8561a)

   🐞 Bug Fixes

• core: Don't use parentVariants for shortcutsNoMerge shortcut  -  by @​zyyv in #​4954 (71d4d)
• eslint-plugin: Enhance generator to support filename context for config loading  -  by @​Jungzl in #​4978 (942cd)
• postcss: Fix wind4 in @screen transformer close #​4973  -  by @​zyyv in #​4973 (49035)
• preset-wind4: Escape css variables close #​4957  -  by @​zyyv in #​4957 (d1e00)
• svelte-scoped: Correctly transform rules with only --at-apply  -  by @​fehnomenal and Henrik Berglund in #​4795 (9a7c3)

    View changes on GitHub

axios/axios (axios)

v1.13.2

Compare Source

Bug Fixes

• http: fix 'socket hang up' bug for keep-alive requests when using timeouts; (#​7206) (8d37233)
• http: use default export for http2 module to support stubs; (#​7196) (0588880)

Performance Improvements

• http: fix early loop exit; (#​7202) (12c314b)

Contributors to this release

• Dmitriy Mozgovoy
• Kasper Isager Dalsgarð

v1.13.1

Compare Source

Bug Fixes

• http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#​7193) (bcd5581)

Contributors to this release

• Anchal Singh
• Dmitriy Mozgovoy

v1.13.0

Compare Source

Bug Fixes

• fetch: prevent TypeError when config.env is undefined (#​7155) (015faec)
• resolve issue #​7131 (added spacing in mergeConfig.js) (#​7133) (9b9ec98)

Features

• http: add HTTP2 support; (#​7150) (d676df7)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi
• Aviraj2929
• prasoon patel
• Samyak Dandge
• Anchal Singh
• Rahul Kumar
• Amit Verma
• Abhishek3880
• Dhvani Maktuporia
• Usama Ayoub
• ikuy1203
• Nikhil Simon Toppo
• Jane Wangari
• Supakorn Ieamgomol
• Kian-Meng Ang
• UTSUMI Keiji

1.12.2 (2025-09-14)

Bug Fixes

• fetch: use current global fetch instead of cached one when env fetch is not specified to keep MSW support; (#​7030) (cf78825)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi

1.12.1 (2025-09-12)

Bug Fixes

• types: fixed env config types; (#​7020) (b5f26b7)

Contributors to this release

• Dmitriy Mozgovoy

antfu-collective/bumpp (bumpp)

v10.4.0

Compare Source

No significant changes

    View changes on GitHub

v10.3.2

Compare Source

   🐞 Bug Fixes

• Resolve the options in config file correctly  -  by @​liangmiQwQ in #​101 (f5887)

    View changes on GitHub

eslint/eslint (eslint)

v9.39.2

Compare Source

v9.39.1

Compare Source

v9.39.0

Compare Source

less/less.js (less)

v4.5.1

Compare Source

lint-staged/lint-staged (lint-staged)

v16.2.7

Compare Source

Patch Changes

• #​1711 ef74c8d Thanks @​iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.

vuejs/pinia (pinia)

v3.0.4

Compare Source

Please refer to CHANGELOG.md for details.

pnpm/pnpm (pnpm)

v10.28.0

Compare Source

v10.27.0

Compare Source

v10.26.2: pnpm 10.26.2

Compare Source

Patch Changes

• Improve error message when a package version exists but does not meet the minimumReleaseAge constraint. The error now clearly states that the version exists and shows a human-readable time since release (e.g., "released 6 hours ago") #​10307.

• Fix installation of Git dependencies using annotated tags #​10335.

  Previously, pnpm would store the annotated tag object's SHA in the lockfile instead of the actual commit SHA. This caused ERR_PNPM_GIT_CHECKOUT_FAILED errors because the checked-out commit hash didn't match the stored tag object hash.

• Binaries of runtime engines (Node.js, Deno, Bun) are written to node_modules/.bin before lifecycle scripts (install, postinstall, prepare) are executed #​10244.

• Try to avoid making network calls with preferOffline #​10334.

Platinum Sponsors

Gold Sponsors

v10.26.1: pnpm 10.26.1

Compare Source

Patch Changes

• Don't fail on pnpm add, when blockExoticSubdeps is set to true #​10324.
• Always resolve git references to full commits and ensure HEAD points to the commit after checkout #​10310.

Platinum Sponsors

Gold Sponsors

v10.26.0

Compare Source

v10.25.0

Compare Source

v10.24.0

Compare Source

v10.23.0: pnpm 10.23

Compare Source

Minor Changes

• Added --lockfile-only option to pnpm list #​10020.

Patch Changes

• pnpm self-update should download pnpm from the configured npm registry #​10205.
• pnpm self-update should always install the non-executable pnpm package (pnpm in the registry) and never the @pnpm/exe package, when installing v11 or newer. We currently cannot ship @pnpm/exe as pkg doesn't work with ESM #​10190.
• Node.js runtime is not added to "dependencies" on pnpm add, if there's a engines.runtime setting declared in package.json #​10209.
• The installation should fail if an optional dependency cannot be installed due to a trust policy check failure #​10208.
• pnpm list and pnpm why now display npm: protocol for aliased packages (e.g., foo npm:is-odd@3.0.1) #​8660.
• Don't add an extra slash to the Node.js mirror URL #​10204.
• pnpm store prune should not fail if the store contains Node.js packages #​10131.

Platinum Sponsors

Gold Sponsors

v10.22.0: pnpm 10.22

Compare Source

Minor Changes

• Added support for trustPolicyExclude #​10164.

  You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:

  trustPolicy: no-downgrade
  trustPolicyExclude:
    - chokidar@4.0.3
    - webpack@4.47.0 || 5.102.1

• Allow to override the engines field on publish by the publishConfig.engines field.

Patch Changes

• Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #​10179.

Platinum Sponsors

Gold Sponsors

v10.21.0

Compare Source

v10.20.0

Compare Source

Minor Changes

• Support --all option in pnpm --help to list all commands #​8628.

Patch Changes

• When the latest version doesn't satisfy the maturity requirement configured by minimumReleaseAge, pick the highest version that is mature enough, even if it has a different major version #​10100.
• create command should not verify patch info.
• Set managePackageManagerVersions to false, when switching to a different version of pnpm CLI, in order to avoid subsequent switches #​10063.

prettier/prettier (prettier)

v3.8.0

Compare Source

diff

🔗 Release note

v3.7.4

Compare Source

diff

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

v3.7.3

Compare Source

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#​18375 by @​fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

v3.7.2

Compare Source

diff

JavaScript: Fix string print when switching quotes (#​18351 by @​fisker)

// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")

// Prettier 3.7.1
console.log('A descriptor\\'s .kind must be "method" or "field".');

// Prettier 3.7.2
console.log('A descriptor\\\'s .kind must be "method" or "field".');

JavaScript: Preserve quote for embedded HTML attribute values (#​18352 by @​kovsu)

// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

// Prettier 3.7.1
const html = /* HTML */ ` <div class=${styles.banner}></div> `;

// Prettier 3.7.2
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

TypeScript: Fix comment in empty type literal (#​18364 by @​fisker)

// Input
export type XXX = {
  // tbd
};

// Prettier 3.7.1
export type XXX = { // tbd };

// Prettier 3.7.2
export type XXX = {
  // tbd
};

v3.7.1

Compare Source

diff

API: Fix performance regression in doc printer (#​18342 by @​fisker)

Prettier 3.7.1 can be very slow when formatting big files, the regression has been fixed.

v3.7.0

Compare Source

diff

🔗 Release Notes

isaacs/rimraf (rimraf)

v6.1.2

Compare Source

v6.1.1

Compare Source

v6.1.0

Compare Source

sass/dart-sass (sass)

v1.97.2

Compare Source

• Additional fixes for implicit configuration when nested imports are involved.

v1.97.1

Compare Source

v1.97.0

Compare Source

• Add support for the display-p3-linear color space.

v1.96.0

Compare Source

• Allow numbers with complex units (more

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.