chore(deps): update all dependencies by renovate[bot] · Pull Request #261 · un-ts/synckit

renovate · 2026-07-01T01:18:28Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v6.0.2` → `v7.0.0`
actions/setup-node	action	major	`v6.4.0` → `v7.0.0`
clean-pkg-json	devDependencies	major	`^1.4.2` → `^2.0.0`
codecov/codecov-action	action	major	`v6.0.1` → `v7.0.0`
node-gyp	devDependencies	major	`^12.3.0` → `^13.0.0`
typescript (source)	devDependencies	major	`^6.0.3` → `^7.0.0`
yarn (source)	packageManager	minor	`4.15.0` → `4.17.1`

Release Notes

actions/checkout (actions/checkout)

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v7`

Compare Source

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

privatenumber/clean-pkg-json (clean-pkg-json)

`v2.0.0`

Compare Source

Features

require Node.js >=22 (#23) (0fbe294)
warn when removing exports/imports entries for missing files (#22) (1570264)

BREAKING CHANGES

clean-pkg-json now requires Node.js >=22; support for end-of-life Node.js versions has been dropped.

codecov/codecov-action (codecov/codecov-action)

`v7.0.0`

Compare Source

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

ci: remove Enforce License Compliance workflow by @thomasrockhu-codecov in #1950
chore(release): 7.0.0 by @thomasrockhu-codecov in #1957

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

`v7`

Compare Source

`v6.0.2`

Compare Source

This is a copy of the v7.0.0 release to make updates easier

What's Changed

ci: remove Enforce License Compliance workflow by @thomasrockhu-codecov in #1950
chore(release): 7.0.0 by @thomasrockhu-codecov in #1957

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

nodejs/node-gyp (node-gyp)

`v13.0.1`

Compare Source

Core

deps: bump undici from 6.26.0 to 8.4.1 (#3330) (2c95a19)

Miscellaneous

fix windows vs2026 version (#3338) (5a835ea)

`v13.0.0`

Compare Source

⚠ BREAKING CHANGES

node-gyp now supports node ^22.22.2 || ^24.15.0 || >=26.0.0

Features

bump to new node engine range (b792b8e)

Bug Fixes

ci: update ruff-action version to v4.0.0 (#3324) (f089669)
disable LTO for addon builds on Windows (#3331) (d30bb6e)

Core

deps: bump actions/github-script from 8 to 9 (#3297) (f6a5e45)
deps: bump googleapis/release-please-action from 4 to 5 (#3307) (b2cde80)
nopt@10.0.0 (327424a)
proc-log@7.0.0 (f6c296b)
which@7.0.0 (11a8b10)

Miscellaneous

add commit-lint (#3325) (6fb6c11)

`v12.4.0`

Compare Source

Features

update gyp-next to v0.22.2 (#3316) (8ea71e5)

Bug Fixes

retry downloads on retryable errors (#3308) (0793489)
stop testing end-of-life Node.js v20 (#3315) (5c0ec47)
test on Node.js v26 (#3314) (0e65639)

Miscellaneous

add workflow_dispatch trigger to tests workflow (#3299) (b2fcdcd)

microsoft/TypeScript (typescript)

`v7.0.2`

Compare Source

yarnpkg/berry (yarn)

`v4.17.1`: v4.17.1

Compare Source

What's Changed

Handle optional compat patch failures for TypeScript 7 by @hamidrezahanafi in #7190

New Contributors

@hamidrezahanafi made their first contribution in #7190

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.17.0...@yarnpkg/cli/4.17.1

`v4.17.0`: v4.17.0

Compare Source

What's Changed

Adds support for package map generation by @arcanis in #7184
fix: add catalog settings to yarnrc schema by @cyphercodes in #7179
docs: clarify background job exit codes by @StantonMatt in #7167
fix: explain peer-default dependencies in why by @StantonMatt in #7168
Docs: fix npmMinimalAgeGate default by @clemyan in #7181
feat(plugin-npm): allow npmMinimalAgeGate per npmScope by @erlandasz in #7156

New Contributors

@cyphercodes made their first contribution in #7179
@StantonMatt made their first contribution in #7167
@erlandasz made their first contribution in #7156

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.16.0...@yarnpkg/cli/4.17.0

`v4.16.0`: v4.16.0

Compare Source

What's Changed

PnP: Include Node 22.22.3 in fstat workaround by @junjuny0227 in #7141
Implements yarn npm stage by @arcanis in #7147
fix: Stop using EBADF workaround for Node 24.16.0+ by @MJDSys in #7152
Bumps eslint-plugin-arca by @arcanis in #7163
Enables staged publishing by @arcanis in #7164
feat: Add editor SDK support for oxc (oxfmt & oxlint) by @slainless in #7078
docs: fix npmMinimalAgeGate default value. by @ryanfox1985 in #7125

New Contributors

@junjuny0227 made their first contribution in #7141
@MJDSys made their first contribution in #7152
@slainless made their first contribution in #7078
@ryanfox1985 made their first contribution in #7125

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.15.0...@yarnpkg/cli/4.16.0

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2026-07-01T01:18:32Z

⚠️ No Changeset found

Latest commit: 81b7a4a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions · 2026-07-01T01:19:38Z

size-limit report 📦

Path	Size
src/index.ts	1.43 KB (0%)

pkg-pr-new · 2026-07-01T01:20:08Z

Open in StackBlitz

npm i https://pkg.pr.new/synckit@261

commit: cfbf555

github-actions · 2026-07-01T01:20:12Z

📊 Package size report `No changes`

File	Before	After
Total _{(Includes all files)}	`100.3 kB`	`100.3 kB`
Tarball size	`26.3 kB`	^-0.02%↓`26.3 kB`

Unchanged files

File	Size
`lib/common.d.ts`	`329 B`
`lib/common.js`	`872 B`
`lib/common.js.map`	`1.2 kB`
`lib/constants.d.ts`	`1.8 kB`
`lib/constants.js`	`2.4 kB`
`lib/constants.js.map`	`2.3 kB`
`lib/helpers.d.ts`	`1.5 kB`
`lib/helpers.js`	`16.9 kB`
`lib/helpers.js.map`	`15.2 kB`
`lib/index.cjs`	`24.1 kB`
`lib/index.d.cts`	`5.8 kB`
`lib/index.d.ts`	`424 B`
`lib/index.js`	`2.3 kB`
`lib/index.js.map`	`2.3 kB`
`lib/types.d.ts`	`1.3 kB`
`lib/types.js`	`44 B`
`lib/types.js.map`	`102 B`
`LICENSE`	`1.1 kB`
`package.json`	`4.2 kB`
`README.md`	`16.1 kB`

_{🤖 This report was automatically generated by pkg-size-action}

codacy-production · 2026-07-01T01:20:48Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

codecov · 2026-07-01T01:20:52Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.82%. Comparing base (4a784a3) to head (cfbf555).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #261   +/-   ##
=======================================
  Coverage   95.82%   95.82%           
=======================================
  Files           4        4           
  Lines         335      335           
  Branches      153      154    +1     
=======================================
  Hits          321      321           
+ Misses         14       11    -3     
- Partials        0        3    +3

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

socket-security · 2026-07-12T17:31:02Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
clean-pkg-json@1.4.2 ⏵ 2.0.0	⁺¹	⁺¹	⁺⁶
typescript@7.0.2
node-gyp@13.0.1

View full report

sonarqubecloud · 2026-07-14T05:55:18Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

renovate Bot force-pushed the renovate/all branch 2 times, most recently from c638005 to 9719e00 Compare July 12, 2026 17:30

chore(deps): update all dependencies

81b7a4a

renovate Bot force-pushed the renovate/all branch from 9719e00 to 81b7a4a Compare July 14, 2026 05:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update all dependencies#261

chore(deps): update all dependencies#261
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

renovate Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

pkg-pr-new Bot commented Jul 1, 2026

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

codacy-production Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 12, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Jul 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

renovate Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

What's Changed

Features

BREAKING CHANGES

What's Changed

What's Changed

Core

Miscellaneous

⚠ BREAKING CHANGES

Features

Bug Fixes

Core

Miscellaneous

Features

Bug Fixes

Miscellaneous

v4.17.1: v4.17.1

What's Changed

New Contributors

v4.17.0: v4.17.0

What's Changed

New Contributors

v4.16.0: v4.16.0

What's Changed

New Contributors

Configuration

Uh oh!

changeset-bot Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

github-actions Bot commented Jul 1, 2026

size-limit report 📦

Uh oh!

pkg-pr-new Bot commented Jul 1, 2026

Uh oh!

github-actions Bot commented Jul 1, 2026

📊 Package size report No changes

Uh oh!

codacy-production Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Up to standards ✅

Uh oh!

codecov Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

socket-security Bot commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

sonarqubecloud Bot commented Jul 14, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 1, 2026 •

edited

Loading

`v4.17.1`: v4.17.1

`v4.17.0`: v4.17.0

`v4.16.0`: v4.16.0

changeset-bot Bot commented Jul 1, 2026 •

edited

Loading

📊 Package size report `No changes`

codacy-production Bot commented Jul 1, 2026 •

edited

Loading

codecov Bot commented Jul 1, 2026 •

edited

Loading

socket-security Bot commented Jul 12, 2026 •

edited

Loading