Pin dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
@convex-dev/eslint-plugin (source)	devDependencies	pin	^2.0.0 → 2.0.0
@edge-runtime/vm (source)	devDependencies	pin	^5.0.0 → 5.0.0
@eslint/eslintrc	devDependencies	pin	^3.3.1 → 3.3.3
@eslint/js (source)	devDependencies	patch	9.39.1 → 9.39.4
@types/node (source)	devDependencies	pin	^24.10.4 → 24.10.8
@types/react (source)	devDependencies	pin	^19.2.7 → 19.2.8
@types/react-dom (source)	devDependencies	pin	^19.2.3 → 19.2.3
@vitejs/plugin-react (source)	devDependencies	pin	^5.1.1 → 5.1.2
actions/checkout (changelog)	action	digest	de0fac2 → df4cb1c
actions/setup-node (changelog)	action	digest	2028fbc → 48b55a0
convex (source)	devDependencies	minor	1.38.0 → 1.42.0
convex-test (source)	devDependencies	patch	0.0.40 → 0.0.53	0.0.54
cpy-cli	devDependencies	pin	^7.0.0 → 7.0.0
eslint (source)	devDependencies	patch	9.39.1 → 9.39.4
eslint-plugin-react	devDependencies	pin	^7.37.5 → 7.37.5
eslint-plugin-react-hooks (source)	devDependencies	pin	^7.0.1 → 7.0.1
eslint-plugin-react-refresh	devDependencies	pin	^0.4.24 → 0.4.26
globals	devDependencies	pin	^17.0.0 → 17.0.0
npm-run-all2	devDependencies	patch	9.0.0 → 9.0.2
pkg-pr-new (source)	devDependencies	pin	^0.0.60 → 0.0.60
prettier (source)	devDependencies	minor	3.6.2 → 3.8.4	3.9.0 (+1)
react (source)	devDependencies	pin	^19.2.1 → 19.2.3
react-dom (source)	devDependencies	pin	^19.2.1 → 19.2.3
typescript-eslint (source)	devDependencies	minor	8.47.0 → 8.62.0
vite (source)	devDependencies	minor	7.2.6 → 7.3.5	7.3.6
vitest (source)	devDependencies	minor	4.0.17 → 4.1.9

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Release Notes

eslint/eslint (@​eslint/js)

v9.39.4

Compare Source

Bug Fixes

• f18f6c8 fix: update dependency minimatch to ^3.1.5 (#​20564) (Milos Djermanovic)
• a3c868f fix: update dependency @​eslint/eslintrc to ^3.3.4 (#​20554) (Milos Djermanovic)
• 234d005 fix: minimatch security vulnerability patch for v9.x (#​20549) (Andrej Beles)
• b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#​20538) (루밀LuMir)

Documentation

• 4675152 docs: add deprecation notice partial (#​20520) (Milos Djermanovic)

Chores

• b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#​20596) (Francesco Trotta)
• 71b2f6b chore: package.json update for @​eslint/js release (Jenkins)
• 1d16c2f ci: pin Node.js 25.6.1 (#​20563) (Milos Djermanovic)

v9.39.3

Compare Source

Bug Fixes

• 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

• 8594a43 chore: upgrade @​eslint/js@​9.39.3 (#​20529) (Milos Djermanovic)
• 9ceef92 chore: package.json update for @​eslint/js release (Jenkins)
• af498c6 chore: ignore /docs/v9.x in link checker (#​20453) (Milos Djermanovic)

v9.39.2

Compare Source

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#​20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#​20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#​20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#​20382) (Milos Djermanovic)

get-convex/convex-backend (convex)

v1.42.0

• Added a new npx convex project create command that can be used
  to create new projects programmatically.
• Added a new --names-only flag to npx convex env list
  (and npx convex env default list). This flag shows the names of
  the env vars that are set, without the values. It can be useful
  to let AI coding agents know the variables that are set on a deployment,
  without giving them the actual values.
• Added a new useStaleSnapshot option to the arguments for runQuery.
  This is an advanced feature that can be used to allow mutations
  to avoid optimistic concurrency control (OCC) conflicts in some cases
  where they can commit even though they depend on conflicting reads.
  This change allows us to improve the performance of some of the
  official Convex components, including Workpool.
• Improved the documentation of db.* methods to more clearly explain
  the difference between the old APIs without table names
  (e.g. db.get(userId)) and the new APIs with table names
  (e.g. db.get("users", userId)).
• Fixed an issue where the CLI would not surface permission errors
  correctly when the user or token doesn’t have permission to do something.
• Exposes the current scheduled function's ID as scheduledFunctionId in
  ctx.meta.getRequestMetadata().
• npx convex insights has a new --json flag that makes the command
  output easier to parse programmatically.
• File storage: marked a few TypeScript types in convex/server as @deprecated
  (FileMetadata, FileStorageId, StorageId). These types are used
  only by file storage APIs that were deprecated in convex@1.6.0,
  so we also marked them as @deprecated for clarity.
• Bumps the ws peer dependency to avoid a vulnerable range.

v1.41.0

• It is now possible to set limits on nested queries and mutations
  with the new transactionLimits option in runQuery/runMutation.
• npx convex ai-files now installs skills with separate copies of
  each skill for each coding agent instead of using symlinks.
  We made this change to avoid known issues with symlinks on Windows.
• When using Convex in anonymous mode (without a Convex account),
  npx convex dev now starts a different dashboard server for each
  deployment. This ensures the dashboard always connects to the
  right deployment when multiple deployments are running at the same time.

v1.40.0

• You can now create a local deployment in a specific Convex cloud project with
  npx convex deployment create team-slug:project-slug:local.
• You can now move a local deployment to another cloud project
  using npx convex deployment select team-slug:project-slug:local. This command warns
  when it moves the deployment to another project.
• The CLI now shows more clearly which deployment is targeted when running commands
  such as npx convex dev and npx convex deploy.
• Added a new <AuthRefreshing /> helper component, used to show indicators when
  function calls are paused because the authentication token is refreshing.
• Removed --local and --cloud flags from npx convex dev. The behavior of these flags
  was misleading when a deployment was already selected. Instead, use
  npx convex deployment select local to use a local deployment, and
  npx convex deployment select dev to use your personal cloud dev deployment.
• The CLI now provides guidance when TypeScript type checking is taking too long.
• Improved the CLI command documentation to include more details and examples.
• npx convex logs: --tail is now accepted as an alias for the --history flag.
• When creating a local deployment, the CLI now skips importing the default environment variables
  from the Convex cloud project if you don’t have permission to view the default environment
  variables instead of crashing.

v1.39.1

• Fixes package.json bin entrypoint bug in 1.39.0.

v1.39.0

• Apps and components may now declare typesafe env vars that they require. Both defineApp
  and defineComponent now accept an env object with string keys and validator values.
  Declared environment variables must be present and match the validators before deployment.
• Allow --local-cloud-port, --local-site-port, --local-backend-version and
  --local-force-upgrade options to npx convex dev to be used whenever using a local deployment.
• The AsyncLocalStorage and AsyncResource APIs from node:async_hooks are now available
  in the standard Convex runtime. Note that stored values will not be threaded through calls to
  ctx.runQuery/ctx.runMutation/ctx.runAction.

get-convex/convex-test (convex-test)

v0.0.53

Compare Source

• Support scheduled functions correctly with or without fake timers,
  by always serializing scheduled mutations with the global transaction
  manager.

v0.0.52

Compare Source

• Add implementation for ctx.meta.getDeploymentMetadata().
• Add support for internal audit log syscall.

v0.0.51

Compare Source

• Add implementation for internal snapshot query syscall.

v0.0.50

Compare Source

• Correctly deserializes ConvexError thrown within nested functions.
• Fixes a bug where orphaned scheduled functions would eventually fire
  and hit "Cannot read properties of null (reading 'state')".

v0.0.49

Compare Source

• Changes the test ID formatting to not include a ; and be the
  standard length of regular IDs for folks who have validators.

v0.0.48

Compare Source

• Add implementations for internal syscalls for upcoming ctx.meta
  features (ctx.meta.{getFunctionMetadata,getTransactionMetrics})

v0.0.47

Compare Source

• Fix: Isolate function stack tracking between parallel function calls
  to prevent corruption when calling different components in parallel.
  This may have presented previously as not being able to find modules
  that existed but were being resolved for the wrong component.

v0.0.46

Compare Source

• Changes finishAllScheduledFunctions to pump the macrotask queue instead
  of microtask queue to enable dynamic imports to resolve, which regressed
  in 0.0.45.

v0.0.45

Compare Source

• Replaces global usage with AsyncLocalStorage-scoped test state for isolation.
  Now tests shouldn't fail due to dirty state left behind by other tests.
• Better support for setTimeout usage within tested functions
• Improves typing for inline calls to t.mutation(() => {}) to be a union
  instead of overload so TestConvex<SpecificSchema> is assignable to
  TestConvex<GenericSchema>.

v0.0.44

Compare Source

• More correctly implements nested transactions and parallel calls.
• Starts validating return validators.
• Propagates auth more correctly between callsites-not scheduler or components.

v0.0.43

Compare Source

• Support pagination when documents may be deleted by using the values as the cursor
  instead of the ID.

v0.0.41

Compare Source

• Removes ActionCtx support for now. Calling component actions was not working correctly.

bcomnes/npm-run-all2 (npm-run-all2)

v9.0.2

Compare Source

Merged

• fix: update Node.js version requirements #232
• Upgrade: Bump codecov/codecov-action from 6 to 7 #233
• fix: bump shell-quote to ^1.8.4 #236
• Upgrade: Bump pidtree from 0.6.1 to 1.0.0 #234

v9.0.1

Compare Source

Merged

• fix: update help.js to include --node-run option details #230

prettier/prettier (prettier)

v3.8.4

Compare Source

diff

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (#​17746 by @​byplayer)

Prettier was removing blank lines between list items and their nested sub-lists, converting loose lists into tight lists and changing their semantic meaning.

<!-- Input -->
- a

  - b

- c

  - d

<!-- Prettier 3.8.3 -->
- a
  - b
- c
  - d

<!-- Prettier 3.8.4 -->
- a

  - b

- c

  - d

v3.8.3

Compare Source

diff

SCSS: Prevent trailing comma in if() function (#​18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);

// Prettier 3.8.2
$value: if(
  sass(false): 1; else: -1,
);

// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

v3.8.2

Compare Source

diff

Angular: Support Angular v21.2 (#​18722, #​19034 by @​fisker)

Exhaustive typechecking with @default never;

<!-- Input -->
@&#8203;switch (foo) {
  @&#8203;case (1) {}
  @&#8203;default never;
}

<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @&#8203; character, you should use the "&#&#8203;64;" HTML entity instead. (3:3)

<!-- Prettier 3.8.2 -->
@&#8203;switch (foo) {
  @&#8203;case (1) {}
  @&#8203;default never;
}

arrow function and instanceof expressions.

<!-- Input -->
@&#8203;let fn = (a) =>        a?    1:2;

{{ fn ( a         instanceof b)}}

<!-- Prettier 3.8.1 -->
@&#8203;let fn = (a) =>        a?    1:2;

{{ fn ( a         instanceof b)}}

<!-- Prettier 3.8.2 -->
@&#8203;let fn = (a) => (a ? 1 : 2);

{{ fn(a instanceof b) }}

v3.8.1

Compare Source

diff

Include available printers in plugin type declarations (#​18706 by @​porada)

// Input
import * as prettierPluginEstree from "prettier/plugins/estree";

// Prettier 3.8.0
// Property 'printers' does not exist on type 'typeof import("prettier/plugins/estree")'. ts(2339)
prettierPluginEstree.printers.estree; //=> any

// Prettier 3.8.1
prettierPluginEstree.printers.estree; //=> Printer
prettierPluginEstree.printers["estree-json"]; //=> Printer

v3.8.0

Compare Source

diff

🔗 Release Notes

v3.7.4

Compare Source

diff

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

v3.7.3

Compare Source

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#​18375 by @​fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

v3.7.2

Compare Source

diff

JavaScript: Fix string print when switching quotes (#​18351 by @​fisker)

// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")

// Prettier 3.7.1
console.log('A descriptor\\'s .kind must be "method" or "field".');

// Prettier 3.7.2
console.log('A descriptor\\\'s .kind must be "method" or "field".');

JavaScript: Preserve quote for embedded HTML attribute values (#​18352 by @​kovsu)

// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

// Prettier 3.7.1
const html = /* HTML */ ` <div class=${styles.banner}></div> `;

// Prettier 3.7.2
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

TypeScript: Fix comment in empty type literal (#​18364 by @​fisker)

// Input
export type XXX = {
  // tbd
};

// Prettier 3.7.1
export type XXX = { // tbd };

// Prettier 3.7.2
export type XXX = {
  // tbd
};

v3.7.1

Compare Source

diff

API: Fix performance regression in doc printer (#​18342 by @​fisker)

Prettier 3.7.0 can be very slow when formatting big files, the regression has been fixed.

v3.7.0

Compare Source

diff

🔗 Release Notes

typescript-eslint/typescript-eslint (typescript-eslint)

v8.62.0

Compare Source

🚀 Features

• remove redundant package.json "files" (#​12444)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.4

Compare Source

🩹 Fixes

• typescript-eslint: export Compatible* types from typescript-eslint to resolve pnpm TS error (#​12340)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.3

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.2

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.2

Compare Source

🩹 Fixes

• remove tsbuildinfo cache file from published packages (#​12187)

❤️ Thank You

• Abhijeet Singh @​cseas

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.0

Compare Source

🚀 Features

• support TypeScript 6 (#​12124)

❤️ Thank You

• Evyatar Daud @​StyleShit

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.2

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.0

Compare Source

🚀 Features

• support ESLint v10 (#​12057)

❤️ Thank You

• Brad Zacher @​bradzacher
• Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.54.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.52.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.51.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.50.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.50.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.49.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.48.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.48.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v7.3.5

Compare Source

Please refer to CHANGELOG.md for details.

v7.3.3

Compare Source

Please refer to CHANGELOG.md for details.

v7.3.2

Compare Source

Please refer to CHANGELOG.md for details.

v7.3.1

Compare Source

Please refer to CHANGELOG.md for details.

v7.3.0

Compare Source

Please refer to CHANGELOG.md for details.

v7.2.7

Compare Source

vitest-dev/vitest (vitest)

v4.1.9

Compare Source

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in [#​10546](https://redirect.gi

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • Monday through Friday (* * * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/get-convex/static-hosting/@convex-dev/static-hosting@10

commit: 7486c72