[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
eslint (source)	10.12.0 → 10.13.0
lucide-react (source)	1.57.0 → 1.61.0
sass	1.105.1 → 1.106.0
vite (source)	8.3.4 → 8.3.5
vitest (source)	5.0.4 → 5.0.5

---

Release Notes

eslint/eslint (eslint)

v10.13.0

Compare Source

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#​21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#​21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#​21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#​21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#​21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#​21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#​21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#​21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#​21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#​21398) (renovate[bot])
• e5aea41 chore: update ecosystem plugins (#​21390) (ESLint Bot)

lucide-icons/lucide (lucide-react)

v1.61.0: Version 1.61.0

Compare Source

What's Changed

• feat(icons): added circle-chevrons-down, circle-chevrons-left, circle-chevrons-right and 1 more icons by @​ypotti in #​5025

New Contributors

• @​ypotti made their first contribution in #​5025

Full Changelog: lucide-icons/lucide@1.60.0...1.61.0

v1.60.0: Version 1.60.0

Compare Source

What's Changed

• feat(icons): added tombstone icon by @​ryck in #​4929
• feat(icons): added smartphone-user-round icon by @​hitanshu-machhi in #​4586
• feat(icons): added bacon icon by @​devkamani9313-lab in #​4694
• fix(site): Fix build by @​ericfennis in #​5033
• chore(docs): Update icon count comparison with Feather Icons by @​noahweidig in #​5022
• feat(icons): added letter-spacing icon by @​madebyoz in #​3038
• chore(deps): bump the vue-deps group with 2 updates by @​dependabot[bot] in #​5027
• chore(deps-dev): bump react-native from 0.87.1 to 0.88.0 in the react-native-deps group by @​dependabot[bot] in #​5030
• feat(icons): added line-height icon by @​madebyoz in #​3039
• chore(deps-dev): bump the svelte-deps group across 1 directory with 2 updates by @​dependabot[bot] in #​5028
• chore(deps): bump the react-deps group across 1 directory with 2 updates by @​dependabot[bot] in #​5026
• feat(icons): added brain-off icon by @​ej52 in #​3535
• feat(icons): added graph-hub icon by @​Carlito-la-banane in #​4974
• feat(svelte): export __iconData and __iconNode across per-icon modules (#​4936) by @​ronitgupta138 in #​4957

New Contributors

• @​hitanshu-machhi made their first contribution in #​4586
• @​devkamani9313-lab made their first contribution in #​4694
• @​noahweidig made their first contribution in #​5022
• @​madebyoz made their first contribution in #​3038
• @​ej52 made their first contribution in #​3535
• @​Carlito-la-banane made their first contribution in #​4974
• @​ronitgupta138 made their first contribution in #​4957

Full Changelog: lucide-icons/lucide@1.59.0...1.60.0

v1.59.0: Version 1.59.0

Compare Source

What's Changed

• feat(docs): Adds search field to docs pages by @​ericfennis in #​5012
• fix(icons): changed chess-queen icon by @​karsa-mistmere in #​4613

Full Changelog: lucide-icons/lucide@1.58.0...1.59.0

v1.58.0: Version 1.58.0

Compare Source

What's Changed

• feat(docs): add third-party package lucide-jte by @​sgruendel in #​5000
• chore(integration-tests): Add Svelte integration tests for @ucide/svelte by @​ericfennis in #​5005
• chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @​dependabot[bot] in #​5004
• fix(site): Fix homepage animation by @​ericfennis in #​5015
• feat(ci): auto-generate PR titles from added file paths by @​ericfennis with @​Copilot in #​4790
• fix(icons): changed barrel icon by @​karsa-mistmere in #​4639
• ci(dev): fix "Generate PR Title" job by using REST API for changed files by @​ericfennis with @​Copilot in #​5017
• feat(icons): added certificate icon by @​rrod497 in #​4327
• fix(icons): update music icons by @​jamiemlaw in #​4072

New Contributors

• @​sgruendel made their first contribution in #​5000

Full Changelog: lucide-icons/lucide@1.57.0...1.58.0

sass/dart-sass (sass)

v1.106.0

Compare Source

• Don't normalize CSS escapes in statement contexts that can contain
  interpolation. For example, @f\6Fo is now emitted as written rather than
  normalized to @foo.

• Fix a bug where quotes would be removed from attribute selector values that
  contained backslashes.

• Fix invalid source spans that could cause crashes when encountering a syntax
  error in selectors or media queries that also contain escape sequences.

• Fix a bug where the indented syntax parser would crash when parsing a file
  where the first statement was indented and appeared after the first line.

• Fix a bug that could cause crashes when encountering errors or warnings in
  interpolations that contain patterns like // */.

• Potentially breaking compatibility fix: CSS escape codes whose values are
  0, for Unicode surrogates, or greater than the maximum allowed code point are
  now consistently normalized to U+FFFD REPLACEMENT CHARACTER in expression
  contexts. Previously, in some cases these were instead normalized to the
  normalized form of the original escape sequence, which violates the principle
  that all escape sequences for identical values should be normalized the same
  way. In other cases, these would simply throw errors.

  As a special case, \0 on its own will continue to be normalized to \0 to
  support historical CSS hacks.

• Potentially breaking bug fix: Throw an error for mixins and functions that
  have rest parameters which are the same as normal parameters. Previously, the
  positional parameters wouldn't be accessible and calling such a mixin or
  function with a named argument would crash the compiler.

• Potentially breaking bug fix: Fix various cases where using a CSS escape
  code at the beginning of an identifier would change parsing behavior versus
  using the character directly.

• Potentially breaking bug fix: When a number's unit is ambiguous with a
  numeric exponent, the unit is now serialized as an escape code rather than a
  literal e to avoid being interpreted as an exponent by CSS.

• Potentially breaking bug fix: Don't parse a CSS escape code for U+45 LATIN
  CAPITAL LETTER E or U+65 LATIN LOWERCASE LETTER E as an exponent in
  @keyframes percentage selectors.

• Potentially breaking bug fix: Properly normalize underscores written as
  CSS escape codes in variable, mixin, and function names.

v1.105.2

Compare Source

Node.js Embedded Host

• Fix a deadlock when the async compiler fails to start.

vitejs/vite (vite)

v8.3.5

Compare Source

Bug Fixes

• build: handle missing chunk import maps (#​23777) (8d7623d)
• build: include preload dependencies to chunk import map hashing (#​23793) (4d16e7c)
• bundled-dev: apply server.origin to asset URLs (#​23683) (52ba877)
• bundled-dev: declare utf-8 charset in fallback page (#​23846) (197daf6)
• bundled-dev: ignore build.chunkImportMap (#​23685) (cfe917d)
• bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#​23713) (6019aa7)
• bundled-dev: map forwarded error stacks through the bundle source maps (#​23741) (11fe1e4)
• bundled-dev: normalize served output files (#​23684) (df4e02c)
• bundled-dev: stop hmr propagation at modules that are no longer imported (#​23839) (7471e8c)
• css: don't fail on a literal % in url() (#​23676) (50b382d)
• deps: update all non-major dependencies (#​23731) (cf80aa5)
• deps: update all non-major dependencies (#​23826) (77d8373)
• deps: update rolldown-related dependencies (#​23733) (43f0d05)
• deps: update rolldown-related dependencies (#​23827) (c2e0418)
• optimizer: fall back to yarn.lock for lockfile hash (#​23667) (f206096)
• optimizer: scan oxc.jsxInject imports (#​23758) (38f3cb4)
• optimizer: skip patches dir check for yarn.lock fallback (#​23725) (8e890e1)
• optimizer: skip patches dir hash for nub lockfile (#​23761) (a7d5696)
• resolve: support subpath imports with multiple # (#​23631) (0d86b34)
• resolve: update resolve.exports to 2.0.4 (#​23739) (4ea708a)
• server: handle socket errors on upgrade requests not taken by the HMR server (#​23728) (c2c9ef4)
• server: only strip base when path matches a full segment (#​23641) (3dfde87)

Performance Improvements

• ssr: extract inline source maps without a regexp (#​23775) (6a02780)

Miscellaneous Chores

• migrate to Oxlint (#​23746) (5b73935)

Code Refactoring

• deps: replace @vercel/detect-agent with std-env (#​23744) (ce4293f)
• dev: consolidate moduleURL to file path utilities (#​23828) (df7b40e)
• dev: separate import resolution from URL conversion (#​23791) (6116689)
• dev: share ModuleURL and BrowserURL conversions (#​23790) (446954c)
• dev: use ModuleURLs throughout HTML transforms (#​23815) (a162990)

vitest-dev/vitest (vitest)

v5.0.5

Compare Source

   🐞 Bug Fixes

• Keep vite default fs.deny with api token file  -  by @​hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #​11578 (28dc1)
• Handle quoted file names in --changed  -  by @​sheremet-va in #​11583 (14921)
• Add data to the import.meta.hot stub  -  by @​sheremet-va in #​11590 (3a828)
• Set skip in skipIf, ignore undefined options  -  by @​sheremet-va in #​11591 (d523a)
• Skip builtin loading in async leak detector  -  by @​sheremet-va in #​11598 (fe86a)
• Keep the import frame in native loader errors  -  by @​sheremet-va in #​11599 (9697b)
• Run hook cleanups when a later hook fails  -  by @​sheremet-va in #​11605 (6c5a4)
• Release mocks of finished test files  -  by @​sheremet-va in #​11607 (e9c3d)
• Abort all running tests on cancel  -  by @​sheremet-va in #​11606 (6621a)
• browser:
  • Ignore synthetic pagehide events  -  by @​sheremet-va in #​11582 (ca081)
  • Run plugin buildStart on server creation  -  by @​sheremet-va in #​11593 (ea611)
  • Drop late connections of closed sessions  -  by @​sheremet-va in #​11600 (f161e)
  • Wait 30s for the browser to close  -  by @​sheremet-va in #​11601 (6498b)
  • Run global setup once with instances  -  by @​sheremet-va in #​11596 (8dd67)
• reporter:
  • End reason &#​39;failed&#​39; on worker crash  -  by @​AriPerkkio in #​11568 (6ae8e)

    View changes on GitHub

---

Configuration

📅 Schedule: (in timezone Australia/Brisbane)

• Branch creation
  • "on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.