chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
eslint (source)	9.24.0 -> 9.25.1
pnpm (source)	10.8.0 -> 10.9.0
vite (source)	6.2.6 -> 6.3.3
vue-tsc (source)	2.2.8 -> 2.2.10
zod (source)	3.24.2 -> 3.24.3

---

Release Notes

eslint/eslint (eslint)

v9.25.1

Compare Source

v9.25.0

Compare Source

pnpm/pnpm (pnpm)

v10.9.0

Compare Source

Minor Changes

• Added support for installing JSR packages. You can now install JSR packages using the following syntax:

  pnpm add jsr:<pkg_name>
  

  or with a version range:

  pnpm add jsr:<pkg_name>@&#8203;<range>
  

  For example, running:

  pnpm add jsr:@​foo/bar
  

  will add the following entry to your package.json:

  {
    "dependencies": {
      "@​foo/bar": "jsr:^0.1.2"
    }
  }

  When publishing, this entry will be transformed into a format compatible with npm, older versions of Yarn, and previous pnpm versions:

  {
    "dependencies": {
      "@​foo/bar": "npm:@​jsr/foo__bar@^0.1.2"
    }
  }

  Related issue: #​8941.

  Note: The @jsr scope defaults to https://npm.jsr.io/ if the @jsr:registry setting is not defined.

• Added a new setting, dangerouslyAllowAllBuilds, for automatically running any scripts of dependencies without the need to approve any builds. It was already possible to allow all builds by adding this to pnpm-workspace.yaml:

  neverBuiltDependencies: []

  dangerouslyAllowAllBuilds has the same effect but also allows to be set globally via:

  pnpm config set dangerouslyAllowAllBuilds true
  

  It can also be set when running a command:

  pnpm install --dangerously-allow-all-builds
  

Patch Changes

• Fix a false negative in verifyDepsBeforeRun when nodeLinker is hoisted and there is a workspace package without dependencies and node_modules directory #​9424.
• Explicitly drop verifyDepsBeforeRun support for nodeLinker: pnp. Combining verifyDepsBeforeRun and nodeLinker: pnp will now print a warning.

v10.8.1

Compare Source

Patch Changes

• Removed bright white highlighting, which didn't look good on some light themes #​9389.
• If there is no pnpm related configuration in package.json, onlyBuiltDependencies will be written to pnpm-workspace.yaml file #​9404.

vitejs/vite (vite)

v6.3.3

Compare Source

• fix: ignore malformed uris in tranform middleware (#​19853) (e4d5201), closes #​19853
• fix(assets): ensure ?no-inline is not included in the asset url in the production environment (#​1949 (16a73c0), closes #​19496
• fix(css): resolve relative imports in sass properly on Windows (#​19920) (ffab442), closes #​19920
• fix(deps): update all non-major dependencies (#​19899) (a4b500e), closes #​19899
• fix(ssr): fix execution order of re-export (#​19841) (ed29dee), closes #​19841
• fix(ssr): fix live binding of default export declaration and hoist exports getter (#​19842) (80a91ff), closes #​19842
• perf: skip sourcemap generation for renderChunk hook of import-analysis-build plugin (#​19921) (55cfd04), closes #​19921
• test(ssr): test ssrTransform re-export deps and test stacktrace with first line (#​19629) (9399cda), closes #​19629

v6.3.2

Compare Source

• fix: match default asserts case insensitive (#​19852) (cbdab1d), closes #​19852
• fix: open first url if host does not match any urls (#​19886) (6abbdce), closes #​19886
• fix(css): respect css.lightningcss option in css minification process (#​19879) (b5055e0), closes #​19879
• fix(deps): update all non-major dependencies (#​19698) (bab4cb9), closes #​19698
• feat(css): improve lightningcss messages (#​19880) (c713f79), closes #​19880

v6.3.1

Compare Source

• fix: avoid using Promise.allSettled in preload function (#​19805) (35c7f35), closes #​19805
• fix: backward compat for internal plugin transform calls (#​19878) (a152b7c), closes #​19878

v6.3.0

Compare Source

• fix(hmr): avoid infinite loop happening with hot.invalidate in circular deps (#​19870) (d4ee5e8), closes #​19870
• fix(preview): use host url to open browser (#​19836) (5003434), closes #​19836

vuejs/language-tools (vue-tsc)

v2.2.10

Compare Source

colinhacks/zod (zod)

v3.24.3

Compare Source

Commits:

• de1f090 Switch to featured sponsors (#​4001)
• eea05ae Fix headers (#​4003)
• 446644f Tweak feature layout (#​4008)
• 1d6e1cb docs(README): add GQLoom to tools and integrations section (#​3995)
• e2b9a5f Update feature (#​4009)
• 0b5d29e Feature Mintlify (#​4014)
• 47dbb2d Update mintlify feature (#​4015)
• 69d8436 Add Clerk fellowship mention (#​4020)
• 850871d Fix table format
• f204123 WIP (#​4028)
• 5041dfa WIP (#​4045)
• cb2b857 docs: add TanStack Form to Ecosystem/Form integrations (#​4055)
• 099fe85 docs: add oRPC to Ecosystem (#​4042)
• b999b4b docs: Remove outdated doc 'avoid coercions that throw uncaught errors' (#​4005)
• 19c6d2e docs: update README_KO (#​4025)
• 1061293 WIP (#​4060)
• 07ff0da Update link
• 4c7d8e5 Update Fern art/link (#​4062)
• 91dcd30 removed unnecessary console logs (#​4059)
• 859ad24 Update alt tag for Retool and Stainless URL (#​4071)
• 220aeda Fix images
• b865062 update readme.md with zod-csv library (#​4021)
• 0615af8 Fix formatting
• 12e5866 Add zod 4 beta anno (#​4081)
• faac697 Fix CI
• 8cca93b Fix CI
• d114394 Added FullProduct.dev to 'Powered by Zod' in Ecosystem section (#​4131)
• a801ddd Fix broken logo link (#​3974)
• 8fc309a Add packages/docs
• bfd0913 Remove packages/docs
• 3e602d4 Optimize extendShape (#​4150)
• 06db7f8 3.24.3
• a18d25b add back packages/docs

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.