chore(deps): update all non-major dependencies#1280
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
0b97a0c to
e1a5d0a
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
e1a5d0a to
7c254df
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.4.15→2.4.160.20.1→0.20.22.11.3→2.11.4v2.24.1→v2.26.1v2.1.1→v2.1.2v0.1.14→v0.1.151.26.3→1.26.40.11.16→0.11.19Release Notes
biomejs/biome (biome)
v2.4.16alecthomas/bit (bit)
v0.20.2What's Changed
just bumpcommand by @alecthomas in6518324d4a232f29234eacaddyserver/caddy (caddy)
v2.11.4This release patches more security, security-adjacent, and normal bugs. The FrankenPHP project has collaborated on PHP-adjacent patches, which we are grateful for.
The recent surge of patches is mostly attributed to token predictors. We have had to reject more than 75% of "security" reports because they were AI slop spam (or just lazy/incorrect). Please use LLMs and agents wisely to avoid wasting precious maintainer resources. We have started blocking offending accounts that spam slop reports. Thank you to all who submit responsible reports following our security policy to make the project better. We appreciate that the community deems the Caddy project worthy of contribution to improve the broader ecosystem!
Security-related patches:
stripHTMLaction to more reliably remove malformed HTML (thanks to @jmrcsnchz)There are also several other various fixes and enhancements by many other contributors. Thank you everyone who participated!
What's Changed
New Contributors
Full Changelog: caddyserver/caddy@v2.11.3...v2.11.4
alecthomas/chroma (github.com/alecthomas/chroma/v2)
v2.26.1Compare Source
Changelog
56c7702fix: downgrade go.mod version to 1.25v2.26.0Compare Source
Changelog
a4d3f60feat(chromad): use style counterparts for theme switchingce159e6chore: migrate to new bit format180ea9fperf(colour): replace Sprintf/ParseUint round-trip in NewColour with direct bit arithmetic (#1274)68a08b0docs: how to support dynamic theme switching6fb9d92feat(html): tag output with style modea71fea3feat(styles): add light/dark mode supportv2.25.0Compare Source
Changelog
c3826f0chore: go mod tidyfb5bc39fix: emit HTTP body tokens without Coalescea3c2946Improve Nu file detection (#1260)e841b1achore(deps): update all non-major dependencies (#1272)3ed2db8Add Gemfile.lock lexer (& ruby improvements) (#1269)41fb546Add YAML+Jinja lexer (#1268)e99b881chore(deps): update all non-major dependencies (#1263)e67dd2f(Markless) Fix parse issue for embed directives without options (#1266)dffa370fix(go): tokenize trailing // as comment instead of consuming next line (#1265)1cf1560chore: upgrade to github.com/dlclark/regexp2/v22cbcf7bchore: upgrade golangci-lint786675bchore(deps): update all non-major dependencies (#1257)235590cfeat: add JSONL support to JSON lexer (#1262)f9b5c97fix(dart): match single-line comments without trailing newline (#1225) (#1261)097f8e9Mention Arturo in README (#1256)d46ce60feat(markdown): highlight frontmatter and comments (#1245)f786b2afeat(lexers): add support for LilyPond (#1255)0a02b98chore(deps): update actions/checkout digest tode0fac2(#1212)c55009eFix AGENTS.md referencing a non-existent scripts directory (#1231)c5e763eImprove protobuf lexer (#1253)113cd0eAdd Arturo lexer (#1232)4498d71chore(deps): update dependency binaryen to v129 (#1238)885f912Added f4 to "Projects using Chroma" list (#1242)c42c9efUpdate java lexer (#1254)dlclark/regexp2 (github.com/dlclark/regexp2/v2)
v2.1.2Compare Source
mattn/go-colorable (github.com/mattn/go-colorable)
v0.1.15Compare Source
golang/go (go)
v1.26.4astral-sh/uv (uv)
v0.11.19Compare Source
Released on 2026-06-03.
Python
Enhancements
Preview features
--isolatedinuv check(#19666)Bug fixes
v0.11.18Compare Source
Released on 2026-06-01.
Performance
Preview
uv checkto runtyfrom uv (#19605)Bug fixes
Other changes
v0.11.17Compare Source
Released on 2026-05-28.
Enhancements
uv addwith standard library modules (#19572)uv workspaceand itslistsubcommand in help output (#19533)ignore-error-codeswhen applicable (#19521)import-namesandimport-namespacessupport touv-build(PEP 794) (#19380)--no-editable-packageflag to various commands (#19584)uv toolinvocations (#19577)Preview features
uv workspace metadata(#19122)uv venv --clearto remove non-virtual environments (#19595)Bug fixes
tool.uv.conflicts(#19538)--env-fileinuv run(#19567)--check-url(#19594)--find-linksparsing (#19537)Documentation
Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.