Pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
@convex-dev/eslint-plugin (source)	devDependencies	pin	^2.0.0 → 2.0.0
@eslint/js (source)	devDependencies	pin	^9.9.1 → 9.38.0
@fast-check/vitest (source)	devDependencies	pin	^0.1.3 → 0.1.6
@launchdarkly/js-server-sdk-common (source)	dependencies	minor	2.8.0 → 2.19.1
@types/crypto-js (source)	devDependencies	pin	^4.2.2 → 4.2.2
@types/lodash-es (source)	devDependencies	pin	^4.5.8 → 4.17.12
@types/node (source)	devDependencies	patch	20.19.24 → 20.19.42
@types/react (source)	devDependencies	pin	^19.2.2 → 19.2.2
@types/react-dom (source)	devDependencies	pin	^19.2.2 → 19.2.2
@typescript-eslint/eslint-plugin (source)	devDependencies	pin	^8.46.2 → 8.46.2
@typescript-eslint/parser (source)	devDependencies	pin	^8.46.2 → 8.46.2
@vitejs/plugin-react (source)	devDependencies	pin	^5.1.0 → 5.1.0
@vitest/coverage-v8 (source)	devDependencies	pin	^2.1.1 → 2.1.9
actions/checkout (changelog)	action	digest	de0fac2 → df4cb1c
convex (source)	devDependencies	minor	1.35.1 → 1.40.0	1.41.0
convex-test (source)	devDependencies	pin	^0.0.35 → 0.0.35
eslint (source)	devDependencies	pin	^9.38.0 → 9.38.0
eslint-plugin-react-hooks (source)	devDependencies	pin	^7.0.1 → 7.0.1
eslint-plugin-react-refresh	devDependencies	pin	^0.4.24 → 0.4.24
globals	devDependencies	pin	^17.0.0 → 17.4.0
npm-run-all	devDependencies	pin	^4.1.5 → 4.1.5
prettier (source)	devDependencies	minor	3.2.5 → 3.8.3	3.8.4
react (source)	devDependencies	pin	^19.2.0 → 19.2.0
react-dom (source)	devDependencies	pin	^19.2.0 → 19.2.0
typescript (source)	devDependencies	minor	5.8.3 → 5.9.3
typescript-eslint (source)	devDependencies	pin	^8.4.0 → 8.5.0
vite (source)	devDependencies	pin	^7.1.12 → 7.3.2

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Release Notes

get-convex/convex-backend (convex)

v1.40.0

• You can now create a local deployment in a specific Convex cloud project with
  npx convex deployment create team-slug:project-slug:local.
• You can now move a local deployment to another cloud project
  using npx convex deployment select team-slug:project-slug:local. This command warns
  when it moves the deployment to another project.
• The CLI now shows more clearly which deployment is targeted when running commands
  such as npx convex dev and npx convex deploy.
• Added a new <AuthRefreshing /> helper component, used to show indicators when
  function calls are paused because the authentication token is refreshing.
• Removed --local and --cloud flags from npx convex dev. The behavior of these flags
  was misleading when a deployment was already selected. Instead, use
  npx convex deployment select local to use a local deployment, and
  npx convex deployment select dev to use your personal cloud dev deployment.
• The CLI now provides guidance when TypeScript type checking is taking too long.
• Improved the CLI command documentation to include more details and examples.
• npx convex logs: --tail is now accepted as an alias for the --history flag.
• When creating a local deployment, the CLI now skips importing the default environment variables
  from the Convex cloud project if you don’t have permission to view the default environment
  variables instead of crashing.

v1.39.1

• Fixes package.json bin entrypoint bug in 1.39.0.

v1.39.0

• Apps and components may now declare typesafe env vars that they require. Both defineApp
  and defineComponent now accept an env object with string keys and validator values.
  Declared environment variables must be present and match the validators before deployment.
• Allow --local-cloud-port, --local-site-port, --local-backend-version and
  --local-force-upgrade options to npx convex dev to be used whenever using a local deployment.
• The AsyncLocalStorage and AsyncResource APIs from node:async_hooks are now available
  in the standard Convex runtime. Note that stored values will not be threaded through calls to
  ctx.runQuery/ctx.runMutation/ctx.runAction.

v1.38.0

• Adds ctx.meta.getRequestMetadata() to access request metadata in mutations and actions:
  request ID, client IP, and client User-Agent.
• Default env vars are now imported when creating a new local deployment.
• Allows creating new local deployments using npx convex deployment select local.
• Adds support for --expiry and --expires aliases for --expiration in npx convex deployment create.
• Supports using import "server-only" to mark files as server-only.
• Removes the npx convex disable-local-deployments command.
• Fixes an issue where stdout/stderr would be truncated after exit in the CLI.
• Updated usePaginatedQuery_experimental overload that has an object-based API similar
  to useQuery_experimental.

v1.37.0

• Adds useQuery_experimental, which accepts object-based args and returns an
  object with status, data, and error that doesn't throw errors by default.
• Adds npx convex deployment token create my-token --save-env, enabling
  scripts to configure agent environments with access only to develop and deploy
  against their own cloud deployment. e.g.

  npx convex deployment create dev/foo --select --expiration "in 7 days" --type dev
  # npx convex env set ... (optional - typically default env vars suffice)
  npx convex deployment token create foo --save-env
  # npx convex dev --once (optional)

• Re-exports ValidatorTypeToReturnType from convex/server
• AI Files will no longer prompt when connecting to an existing project.
• Updates the VisibilityProperties type to allow types like RegisteredQuery
  to be more easily extended without losing covariance.
• New ctx.meta.getDeploymentMetadata() function.
  • Includes the name, region and class of the deployment.

v1.36.1

• Updated npx convex login --vercel to ask before joining a Convex team through the Vercel Marketplace.

v1.36.0

• npx convex run now supports --inline-query for evaluating readonly queries
  without creating a named function first, for example:
  npx convex run --inline-query 'await ctx.db.query("messages").take(5)'.
• Added ctx.meta to access extra metadata at runtime:
  • ctx.meta.getFunctionMetadata(): the current function's name, component,
    visibility, and whether it's a query, mutation, or action.
  • ctx.meta.getTransactionMetrics(): how much capacity remains in the current
    transaction. Only available in queries and mutations.
• Added a npx convex env default command for getting and setting default
  environment variables for a project.
• npx convex deploy now supports a --message option that allows you to
  write details in the deployment’s audit log. When running
  npx convex deploy on CI runners on popular platforms (including GitHub Actions,
  Vercel, and Netlify), a default message will be provided if you don’t provide one
  (e.g. “Deployed from GitHub Actions • e83c516”).
• When deploying to a preview deployment, you can now reuse the existing deployment
  instead of creating a new one by using --preview-name instead of --preview-create.
  This behavior is also used when deploying to preview deployments from the CI
  without specifying --preview-create explictly, but you can
  specify --preview-create explicitly to restore the old behavior. When using the
  --preview-run flag, the function only runs when a new deployment is created.
• npx convex codegen can now automatically start a local backend when necessary.
• You can now increase the timeout used by the CLI when starting a local backend
  with CONVEX_LOCAL_BACKEND_STARTUP_TIMEOUT_SECS; this can be useful when using
  large local databases.
• Fixed a bug where npx convex ai-files remove would also remove skill files that
  were not installed by npx convex ai-files
• Fixed a bug where the automatically-generated files would sometimes sort imports
  in inconsistent order across platforms.
• Fixed a bug in npx convex dev --start where, in some cases, the --start command
  would continue to run after closing the Convex dev server with Ctrl+C.
• Generating APIs via function-spec now supports validators with int64 literals.

prettier/prettier (prettier)

v3.8.3

Compare Source

v3.8.2

Compare Source

v3.8.1

Compare Source

v3.8.0

Compare Source

diff

🔗 Release note

v3.7.4

Compare Source

diff

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

v3.7.3

Compare Source

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#​18375 by @​fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

v3.7.2

Compare Source

diff

JavaScript: Fix string print when switching quotes (#​18351 by @​fisker)

// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")

// Prettier 3.7.1
console.log('A descriptor\\'s .kind must be "method" or "field".');

// Prettier 3.7.2
console.log('A descriptor\\\'s .kind must be "method" or "field".');

JavaScript: Preserve quote for embedded HTML attribute values (#​18352 by @​kovsu)

// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

// Prettier 3.7.1
const html = /* HTML */ ` <div class=${styles.banner}></div> `;

// Prettier 3.7.2
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

TypeScript: Fix comment in empty type literal (#​18364 by @​fisker)

// Input
export type XXX = {
  // tbd
};

// Prettier 3.7.1
export type XXX = { // tbd };

// Prettier 3.7.2
export type XXX = {
  // tbd
};

v3.7.1

Compare Source

diff

API: Fix performance regression in doc printer (#​18342 by @​fisker)

Prettier 3.7.1 can be very slow when formatting big files, the regression has been fixed.

v3.7.0

Compare Source

diff

🔗 Release Notes

v3.6.2

Compare Source

diff

Markdown: Add missing blank line around code block (#​17675 by @​fisker)

<!-- Input -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

<!-- Prettier 3.6.1 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```
   1. Another
   2. List

<!-- Prettier 3.6.2 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

v3.6.1

Compare Source

diff

TypeScript: Allow const without initializer (#​17650, #​17654 by @​fisker)

// Input
export const version: string;

// Prettier 3.6.0 (--parser=babel-ts)
SyntaxError: Unexpected token (1:21)
> 1 | export const version: string;
    |                     ^

// Prettier 3.6.0 (--parser=oxc-ts)
SyntaxError: Missing initializer in const declaration (1:14)
> 1 | export const version: string;
    |              ^^^^^^^^^^^^^^^

// Prettier 3.6.1
export const version: string;

Miscellaneous: Avoid closing files multiple times (#​17665 by @​43081j)

When reading a file to infer the interpreter from a shebang, we use the
n-readlines library to read the first line in order to get the shebang.

This library closes files when it reaches EOF, and we later try close the same
files again. We now close files only if n-readlines did not already close
them.

v3.6.0

Compare Source

diff

🔗 Release Notes

v3.5.3

Compare Source

diff

Flow: Fix missing parentheses in ConditionalTypeAnnotation (#​17196 by @​fisker)

// Input
type T<U> = 'a' | ('b' extends U ? 'c' : empty);
type T<U> = 'a' & ('b' extends U ? 'c' : empty);

// Prettier 3.5.2
type T<U> = "a" | "b" extends U ? "c" : empty;
type T<U> = "a" & "b" extends U ? "c" : empty;

// Prettier 3.5.3
type T<U> = "a" | ("b" extends U ? "c" : empty);
type T<U> = "a" & ("b" extends U ? "c" : empty);

v3.5.2

Compare Source

diff

Remove module-sync condition (#​17156 by @​fisker)

In Prettier 3.5.0, we added module-sync condition to package.json, so that require("prettier") can use ESM version, but turns out it doesn't work if CommonJS and ESM plugins both imports builtin plugins. To solve this problem, we decide simply remove the module-sync condition, so require("prettier") will still use the CommonJS version, we'll revisit until require(ESM) feature is more stable.

v3.5.1

Compare Source

diff

Fix CLI crash when cache for old version exists (#​17100 by @​sosukesuzuki)

Prettier 3.5 uses a different cache format than previous versions, Prettier 3.5.0 crashes when reading existing cache file, Prettier 3.5.1 fixed the problem.

Support dockercompose and github-actions-workflow in VSCode (#​17101 by @​remcohaszing)

Prettier now supports the dockercompose and github-actions-workflow languages in Visual Studio Code.

v3.5.0

Compare Source

diff

🔗 Release Notes

v3.4.2

Compare Source

diff

Treat U+30A0 & U+30FB in Katakana Block as CJK (#​16796 by @​tats-u)

Prettier doesn't treat U+30A0 & U+30FB as Japanese. U+30FB is commonly used in Japanese to represent the delimitation of first and last names of non-Japanese people or “and”. The following “C言語・C++・Go・Rust” means “C language & C++ & Go & Rust” in Japanese.

<!-- Input (--prose-wrap=never) -->

C言
語
・
C++
・
Go
・
Rust

<!-- Prettier 3.4.1 -->
C言語・ C++ ・ Go ・ Rust

<!-- Prettier 3.4.2 -->
C言語・C++・Go・Rust

U+30A0 can be used as the replacement of the - in non-Japanese names (e.g. “Saint-Saëns” (Charles Camille Saint-Saëns) can be represented as “サン゠サーンス” in Japanese), but substituted by ASCII hyphen (U+002D) or U+FF1D (full width hyphen) in many cases (e.g. “サン=サーンス” or “サン＝サーンス”).

Fix comments print on class methods with decorators (#​16891 by @​fisker)

// Input
class A {
  @​decorator
  /** 
   * The method description
   *
  */
  async method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}

// Prettier 3.4.1
class A {
  @​decorator
  async /**
   * The method description
   *
   */
  method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}

// Prettier 3.4.2
class A {
  @​decorator
  /**
   * The method description
   *
   */
  async method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}

Fix non-idempotent formatting (#​16899 by @​seiyab)

This bug fix is not language-specific. You may see similar change in any languages. This fixes regression in 3.4.0 so change caused by it should yield same formatting as 3.3.3.

// Input
<div>
  foo
  <span>longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo</span>
  , abc
</div>;

// Prettier 3.4.1 (first)
<div>
  foo
  <span>
    longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo
  </span>, abc
</div>;

// Prettier 3.4.1 (second)
<div>
  foo
  <span>longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo</span>
  , abc
</div>;

// Prettier 3.4.2
<div>
  foo
  <span>longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo</span>
  , abc
</div>;

v3.4.1

Compare Source

diff

Remove unnecessary parentheses around assignment in v-on (#​16887 by @​fisker)

<!-- Input -->
<template>
  <button @&#8203;click="foo += 2">Click</button>
</template>

<!-- Prettier 3.4.0 -->
<template>
  <button @&#8203;click="(foo += 2)">Click</button>
</template>

<!-- Prettier 3.4.1 -->
<template>
  <button @&#8203;click="foo += 2">Click</button>
</template>

v3.4.0

Compare Source

diff

🔗 Release Notes

v3.3.3

Compare Source

diff

Add parentheses for nullish coalescing in ternary (#​16391 by @​cdignam-segment)

This change adds clarity to operator precedence.

// Input
foo ? bar ?? foo : baz;
foo ?? bar ? a : b;
a ? b : foo ?? bar;

// Prettier 3.3.2
foo ? bar ?? foo : baz;
foo ?? bar ? a : b;
a ? b : foo ?? bar;

// Prettier 3.3.3
foo ? (bar ?? foo) : baz;
(foo ?? bar) ? a : b;
a ? b : (foo ?? bar);

Add parentheses for decorator expressions (#​16458 by @​y-schneider)

Prevent parentheses around member expressions or tagged template literals from being removed to follow the stricter parsing rules of TypeScript 5.5.

// Input
@​(foo`tagged template`)
class X {}

// Prettier 3.3.2
@​foo`tagged template`
class X {}

// Prettier 3.3.3
@​(foo`tagged template`)
class X {}

Support @let declaration syntax (#​16474 by @​sosukesuzuki)

Adds support for Angular v18 @let declaration syntax.

Please see the following code example. The @let declaration allows you to define local variables within the template:

@​let name = 'Frodo';

<h1>Dashboard for {{name}}</h1>
Hello, {{name}}

For more details, please refer to the excellent blog post by the Angular Team: Introducing @​let in Angular.

We also appreciate the Angular Team for kindly answering our questions to implement this feature.

v3.3.2

Compare Source

diff

Fix handlebars path expressions starts with @ (#​16358 by @​Princeyadav05)

{{! Input }}
<div>{{@&#8203;x.y.z}}</div>

{{! Prettier 3.3.1 }}
<div>{{@&#8203;x}}</div>

{{! Prettier 3.3.2 }}
<div>{{@&#8203;x.y.z}}</div>

v3.3.1

Compare Source

diff

Preserve empty lines in front matter (#​16347 by @​fisker)

<!-- Input -->
---
foo:
  - bar1

  - bar2

  - bar3
---
Markdown

<!-- Prettier 3.3.0 -->

---
foo:
  - bar1
  - bar2
  - bar3
---

Markdown

<!-- Prettier 3.3.1 -->
---
foo:
  - bar1

  - bar2

  - bar3
---

Markdown

Preserve explicit language in front matter (#​16348 by @​fisker)

<!-- Input -->
---yaml
title: Hello
slug: home
---

<!-- Prettier 3.3.0 -->
---
title: Hello
slug: home
---

<!-- Prettier 3.3.1 -->
---yaml
title: Hello
slug: home
---

Avoid line breaks in import attributes (#​16349 by @​fisker)

// Input
import something from "./some-very-very-very-very-very-very-very-very-long-path.json" with { type: "json" };

// Prettier 3.3.0
import something from "./some-very-very-very-very-very-very-very-very-long-path.json" with { type:
  "json" };

// Prettier 3.3.1
import something from "./some-very-very-very-very-very-very-very-very-long-path.json" with { type: "json" };

v3.3.0

Compare Source

diff

🔗 Release Notes

microsoft/TypeScript (typescript)

v5.9.3: TypeScript 5.9.3

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)
• fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

• npm

v5.9.2: TypeScript 5.9

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)

Downloads are available on:

• npm

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • Monday through Friday (* * * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@convex-dev/launchdarkly@17

commit: d75857c