Bump the pnpm group across 1 directory with 13 updates

[dependabot]

Bumps the pnpm group with 13 updates in the / directory:

Package	From	To
@dotenvx/dotenvx	1.46.0	1.69.1
@scalar/hono-api-reference	0.9.9	0.10.19
@scalar/openapi-to-markdown	0.2.19	0.5.20
@t3-oss/env-core	0.13.8	0.13.11
argon2	0.43.0	0.44.0
hono	4.8.4	4.12.23
jose	6.0.11	6.2.3
radashi	12.6.0	12.9.1
ts-pattern	5.7.1	5.9.0
@biomejs/biome	2.1.1	2.4.15
chalk	5.4.1	5.6.2
rimraf	6.0.1	6.1.3
tsx	4.20.3	4.22.3

Updates @dotenvx/dotenvx from 1.46.0 to 1.69.1

Release notes

Sourced from @​dotenvx/dotenvx's releases.

v1.69.1

see CHANGELOG

v1.69.0

see CHANGELOG

v1.68.1

see CHANGELOG

v1.68.0

see CHANGELOG

v1.67.0

see CHANGELOG

v1.66.0

see CHANGELOG

v1.65.3

see CHANGELOG

v1.65.2

see CHANGELOG

v1.65.1

see CHANGELOG

v1.65.0

see CHANGELOG

v1.64.0

see CHANGELOG

v1.63.0

see CHANGELOG

v1.62.0

see CHANGELOG

v1.61.6

see CHANGELOG

v1.61.5

see CHANGELOG

v1.61.4

see CHANGELOG

v1.61.3

see CHANGELOG

... (truncated)

Changelog

Sourced from @​dotenvx/dotenvx's changelog.

1.69.1 (2026-05-25)

Changed

• Internally rename ops to vlt (#823)

1.69.0 (2026-05-25)

Changed

• Remove fully-deprecated opsOff option in favor of noOps (#822)

1.68.1 (2026-05-24)

Changed

• Pass -f to ops (#821)

1.68.0 (2026-05-24)

Changed

• Support ignore option on parse (#820)

1.67.0 (2026-05-21)

Added

• Add prompt for local storage vs armored storage (#819)

1.66.0 (2026-05-13)

Added

• Add dotenvx doctor (#815)

1.65.3 (2026-05-13)

Changed

• Improve spinner message blinking with simpler --no-spinner flag passed to ops (#814)

1.65.2 (2026-05-13)

Changed

• Improve spinner message coordination between dotenvx and dotenvx-ops (#813)

1.65.1 (2026-05-13)

... (truncated)

Commits

• b37d792 1.69.1
• 878cc18 changelog
• c07fa9b Merge pull request #823 from dotenvx/toward-vlt
• 2e42d01 noVlt
• b3479c3 next step command in .env.keys file
• c176939 say armor up
• 5b658eb big rename
• ded6fd0 1.69.0
• 8a9ce81 changelog
• 6169d51 Merge pull request #822 from dotenvx/vlt-ops
• Additional commits viewable in compare view

Updates @scalar/hono-api-reference from 0.9.9 to 0.10.19

Changelog

Sourced from @​scalar/hono-api-reference's changelog.

0.10.19

0.10.18

0.10.17

0.10.16

0.10.15

0.10.14

0.10.13

0.10.12

0.10.11

0.10.10

0.10.9

Patch Changes

• #8873: refactor: migrate integrations to client-side rendering package

0.10.8

0.10.7

0.10.6

0.10.5

0.10.4

Patch Changes

• #8466: chore: new build pipeline

0.10.3

Patch Changes

Updated Dependencies

• @​scalar/core@​0.4.3

0.10.2

... (truncated)

Commits

• See full diff in compare view

Updates @scalar/openapi-to-markdown from 0.2.19 to 0.5.20

Changelog

Sourced from @​scalar/openapi-to-markdown's changelog.

0.5.20

0.5.19

0.5.18

Patch Changes

• #9291: chore: import from @scalar/components subpaths instead of the package barrel for better tree-shaking

0.5.17

0.5.16

0.5.15

0.5.14

0.5.13

0.5.12

Patch Changes

• #9040: fix(openapi-to-markdown): render operation parameters in Markdown output

0.5.11

0.5.10

0.5.9

0.5.8

0.5.7

0.5.6

0.5.5

0.5.4

Patch Changes

• #8825: chore: moving files around in preparation for the big deletion of client v1

0.5.3

0.5.2

... (truncated)

Commits

• See full diff in compare view

Updates @t3-oss/env-core from 0.13.8 to 0.13.11

Changelog

Sourced from @​t3-oss/env-core's changelog.

0.13.11

Patch Changes

• #395 6937086 Thanks @​GRA0007! - Update zod imports to support treeshaking in Webpack (Next.js) and esbuild

0.13.10

Patch Changes

• #388 a778bf3 Thanks @​juliusmarminge! - add VERCEL_TARGET_ENV to vercel preset

0.13.9

Patch Changes

• #326 5987d5a Thanks @​Abdalrhman-Almarakeby! - update skipValidation flag to skip validation for extended presets

Commits

• 23ddb79 chore(release): 📦 version packages (#404)
• 6937086 Update zod imports to support tree-shaking for Webpack (Next.js) and esbuild ...
• aefbe74 chore(release): 📦 version packages (#389)
• a778bf3 feat(preset): add VERCEL_TARGET_ENV (#388)
• 1551e40 update the docs to zod 4 (#382)
• 14b4d0a feat(docs): add standard schema docs (#383)
• 090edb2 chore(release): 📦 version packages (#387)
• 19c5d6f bump valibot
• 5987d5a fix: apply skipValidation to all presets when set on parent (#326)
• 5f68dca feat: improve oxc lint/fmt, add husky hooks to pre-commit and CI/CD (#386)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​t3-oss/env-core since your current version.

Updates argon2 from 0.43.0 to 0.44.0

Release notes

Sourced from argon2's releases.

v0.44.0

What's Changed

• Build system tweaks for reproducible builds by @​threema-danilo in ranisalt/node-argon2#447

Full Changelog: ranisalt/node-argon2@v0.43.1...v0.44.0

v0.43.1

Fixes #456 caused by Typescript 5.7 changing how Buffer types work (see microsoft/TypeScript#59417). FreeBSD ARM64 prebuilds are now available.

What's Changed

• Avoid overriding _FORTIFY_SOURCE if already set by @​threema-danilo in ranisalt/node-argon2#455
• Support FreeBSD ARM64 builds by @​ranisalt in ranisalt/node-argon2#459

New Contributors

• @​threema-danilo made their first contribution in ranisalt/node-argon2#455

Full Changelog: ranisalt/node-argon2@v0.43.0...v0.43.1

Commits

• cd4eae5 v0.44.0
• 0d88d0d Build system tweaks for reproducible builds
• a6ca2fd Bump @​biomejs/biome from 1.9.4 to 2.1.4
• c33250d Bump node-gyp from 11.2.0 to 11.3.0 (#467)
• e4ff08c Bump node-addon-api from 8.4.0 to 8.5.0 (#466)
• b3de3a2 Potential fix for code scanning alert no. 35: Workflow does not contain permi...
• bcf7232 v0.43.1
• 93fa469 Fix linter formatting
• 6727b44 Upgrade dependencies, revert Typescript to v5.6.3
• e96cf5a Bump tar-fs from 2.1.2 to 2.1.3 (#458)
• Additional commits viewable in compare view

Install script changes

This version modifies install script that runs during installation. Review the package contents before updating.

Updates hono from 4.8.4 to 4.12.23

Release notes

Sourced from hono's releases.

v4.12.23

What's Changed

• fix(serve-static): normalize all backslashes in file paths, not just the first in honojs/hono#4962
• feat(context): export the Context class publicly by @​BlankParticle in honojs/hono#4543
• docs(contribution): add AI Usage Policy by @​yusukebe in honojs/hono#4970
• feat(compress): add contentTypeFilter option and COMPRESSIBLE_CONTENT_TYPE_REGEX re-export by @​na-trium-144 in honojs/hono#4961
• fix(utils/ipaddr): do not compress a single 0 group to :: by @​yusukebe in honojs/hono#4971

Full Changelog: honojs/hono@v4.12.22...v4.12.23

v4.12.22

What's Changed

• chore: update vitest to v4 and cleanups by @​BlankParticle in honojs/hono#4952
• fix(mime): specify charset parameter per MIME type instead of mechanical detection by @​renatograsso10 in honojs/hono#4912
• fix(compress): respect Accept-Encoding when encoding option is set by @​LeSingh1 in honojs/hono#4951
• fix(deno): echo negotiated WebSocket subprotocol in upgrade response by @​ATOM00blue in honojs/hono#4955
• feat: add msgpack as a compressible content type by @​na-trium-144 in honojs/hono#4957

New Contributors

• @​renatograsso10 made their first contribution in honojs/hono#4912
• @​LeSingh1 made their first contribution in honojs/hono#4951
• @​ATOM00blue made their first contribution in honojs/hono#4955
• @​na-trium-144 made their first contribution in honojs/hono#4957

Full Changelog: honojs/hono@v4.12.21...v4.12.22

v4.12.21

Security fixes

This release includes fixes for the following security issues:

app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths

Affects: app.mount(). Fixes prefix stripping using the raw URL pathname instead of the decoded path, where percent-encoded characters in the mount prefix or path could cause the prefix to be removed at the wrong position, resulting in the sub-application receiving an incorrect path. GHSA-2gcr-mfcq-wcc3

IP Restriction bypasses static deny rules for non-canonical IPv6

Affects: hono/ip-restriction. Fixes IP address comparison using string equality, where non-canonical IPv6 representations of a denied address — such as compressed forms or hex-notation IPv4-mapped addresses — could bypass static deny rules. GHSA-xrhx-7g5j-rcj5

Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection

Affects: hono/cookie. Fixes missing validation of sameSite and priority options against injection characters (;, \r, \n), where user-controlled input passed to either option could inject additional attributes into the Set-Cookie response header. GHSA-3hrh-pfw6-9m5x

JWT middleware accepts any Authorization scheme, not only Bearer

Affects: hono/jwt, hono/jwk. Fixes missing scheme validation in the Authorization header, where any two-part header value was accepted regardless of the scheme name, allowing non-Bearer schemes to pass JWT authentication. GHSA-f577-qrjj-4474

---

Users who use app.mount(), hono/ip-restriction, hono/cookie, or hono/jwt/hono/jwk are encouraged to upgrade to this version.

... (truncated)

Commits

• 83bfb3b 4.12.23
• bcd290a fix(utils/ipaddr): do not compress a single 0 group to :: (#4971)
• c968177 feat(compress): add contentTypeFilter option and `COMPRESSIBLE_CONTENT_TYPE_R...
• 0265a54 docs(contribution): add AI Usage Policy (#4970)
• c84c5d2 feat(context): export the Context class publicly (#4543)
• 82dad62 fix(serve-static): normalize all backslashes in file paths, not just the firs...
• 2f01b77 4.12.22
• 6bc0dff feat: add msgpack as a compressible content type (#4957)
• 7e0555d fix(deno): echo negotiated WebSocket subprotocol in upgrade response (#4955)
• f0ed246 fix(compress): respect Accept-Encoding when encoding option is set (#4951)
• Additional commits viewable in compare view

Updates jose from 6.0.11 to 6.2.3

Release notes

Sourced from jose's releases.

v6.2.3

Refactor

• cleanly reject invalid PBES2 p2c (0cdb851)

v6.2.2

Fixes

• reject failed decompression with JWEInvalid error (043b181)

v6.2.1

Refactor

• reorganize internals, less files, smaller footprint (d4231f9)

v6.2.0

Features

• re-introduce JWE "zip" (Compression Algorithm) Header Parameter support (b13b446)

Documentation

• clarify return of general jws and jwe (56682b4)

v6.1.3

Refactor

• avoid export * as for google closure's compiler sake (6303d98), closes #832

v6.1.2

Refactor

• fallback to checking instanceof for CryptoKey (901cd90), closes #765 #803 #821 #827 #828

v6.1.1

Documentation

• add link to RFC9864 (767edde)
• link to ML-DSA for JOSE (ed4252c)
• remove mention of Edge Runtime from the readme (94fdde7)
• update README.md (25098ef)

Refactor

• eliminate named exports in the source code (f6ae30d)
• expose setKeyManagementParameters also on a GeneralEncrypt Recipient (16e6b23)
• faster path for symmetric key checks (a44c2ec)
• improve en/decoding overheads (daee426)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.3 (2026-04-27)

Refactor

• cleanly reject invalid PBES2 p2c (0cdb851)

6.2.2 (2026-03-18)

Fixes

• reject failed decompression with JWEInvalid error (043b181)

6.2.1 (2026-03-09)

Refactor

• reorganize internals, less files, smaller footprint (d4231f9)

6.2.0 (2026-03-05)

Features

• re-introduce JWE "zip" (Compression Algorithm) Header Parameter support (b13b446)

Documentation

• clarify return of general jws and jwe (56682b4)

6.1.3 (2025-12-02)

Refactor

• avoid export * as for google closure's compiler sake (6303d98), closes #832

6.1.2 (2025-11-15)

Refactor

• fallback to checking instanceof for CryptoKey (901cd90), closes #765 #803 #821 #827 #828

6.1.1 (2025-11-09)

... (truncated)

Commits

• 41ad7e9 chore(release): 6.2.3
• 988e90f chore: account for commit-and-tag-version instead of standard-version
• 4b24656 chore: update CHANGELOG.md header
• 0cdb851 refactor: cleanly reject invalid PBES2 p2c
• a0b261e test: update Bun expectations
• b39dc1a chore: use fs.globSync
• 0675be1 build: replace rollup umd build with a custom esbuild iife wrap
• 9b03323 chore: bump packages
• 914b73d chore(deps-dev): bump lodash
• 9dce817 chore: bump packages
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jose since your current version.

Updates radashi from 12.6.0 to 12.9.1

Release notes

Sourced from radashi's releases.

v12.9.0

New Functions

Add mergeOptions function [→ PR #442](radashi-org/radashi#442)

Merge two optional option objects with runtime behavior and TypeScript inference that both understand undefined. mergeOptions shallow-merges two defined objects, lets the second object override overlapping keys, and returns the defined argument when either side is undefined.

• Models T | undefined inputs without Object.assign workarounds
• Preserves optional properties and required override keys in the result type
• Returns undefined when both inputs are undefined

import * as _ from 'radashi'
const defaults = { port: 3000, host: 'localhost' }
const userConfig = { port: 8080, ssl: true }
_.mergeOptions(defaults, userConfig)
// => { port: 8080, host: 'localhost', ssl: true }
_.mergeOptions(undefined, userConfig)
// => { port: 8080, ssl: true }
_.mergeOptions(undefined, undefined)
// => undefined

Docs / Source / Tests / Type Tests

New Features

Improve sort return type when sorting a tuple [→ PR #421](radashi-org/radashi#421)

Sorting a tuple now preserves its tuple length in the return type instead of widening the result to a plain array. This keeps tuple-aware inference intact for as const inputs while preserving the same runtime behavior: sort still copies the input and returns a mutable sorted array.

• Regular arrays still return mutable arrays
• Readonly arrays still return mutable arrays
• Const tuples now return a mutable tuple with the same length

import * as _ from 'radashi'
const list = [{ index: 2 }, { index: 0 }, { index: 1 }] as const
const result = _.sort(list, item => item.index)
// type: [(typeof list)[number], (typeof list)[number], (typeof list)[number]]
// => [{ index: 0 }, { index: 1 }, { index: 2 }]

Docs / Source / Type Tests

... (truncated)

Changelog

Sourced from radashi's changelog.

[radashi@12.9.1] - 2026-05-12

Details

Fixed

• (ci) Disable cache in privileged workflows in cc910be
• (ci) Scope publish oidc permission in 0b7c94b
• (ci) Drop unused npm token from publish in 6a86290
• (ci) Run pr benchmarks without secrets in d4020ff
• (ci) Ensure git-cliff uses GITHUB_TOKEN if token is undefined in 6d0bda0
• (ci) Restore benchmark bot comments safely in 74a9931

[radashi@12.9.0] - 2026-05-05

Details

Added

• Add mergeOptions function in d6c3548

Changed

• Improve sort return type when sorting a tuple in a29fe96

[radashi@12.8.1] - 2026-05-05

Details

Fixed

• Mark dedent as side-effect free in 7ada48f

[radashi@12.8.0] - 2026-05-05

Details

Added

• Add deburr function in c689529
• Add getErrorMessage function in 9fce57d

[radashi@12.7.2] - 2026-02-24

Details

Fixed

• Chain type signatures after 3 arguments in 17aef87

[radashi@12.7.1] - 2025-11-19

Details

Fixed

• Ensure DurationParser static properties can be tree-shaked in b9d7529

[radashi@12.7.0] - 2025-10-17

Details

Added

... (truncated)

Commits

• ce1f125 chore(release): 12.9.1
• dcc386f docs: clarify dash digit boundaries (#469)
• 081179c refactor(ci): split benchmark pr script modes
• 74a9931 fix(ci): restore benchmark bot comments safely
• 6d0bda0 fix(ci): ensure git-cliff uses GITHUB_TOKEN if token is undefined
• d4020ff fix(ci): run pr benchmarks without secrets
• 6a86290 fix(ci): drop unused npm token from publish
• 0b7c94b fix(ci): scope publish oidc permission
• cc910be fix(ci): disable cache in privileged workflows
• 1255ccc docs: clarify isObject type guard usage (#467)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for radashi since your current version.

Updates ts-pattern from 5.7.1 to 5.9.0

Release notes

Sourced from ts-pattern's releases.

v5.9.0

New features

P.record patterns

To match a Record<Key, Value> (an object with consistent key and value types), you can use P.record(keyPattern, valuePattern). It takes a sub-pattern to match against the key, a sub-pattern to match against the value, and will match if all entries in the object match these two sub-patterns.

import { match, P } from 'ts-pattern';
type Input = Record<string, number>;
const input: Input = {
alice: 100,
bob: 85,
charlie: 92,
};
const output = match(input)
.with(P.record(P.string, P.number), (scores) => All user scores)
.with(P.record(P.string, P.string), (names) => All user names)
.otherwise(() => '');
console.log(output);
// => "All user scores"

You can also use P.record with a single argument P.record(valuePattern), which assumes string keys:

const userProfiles = {
  alice: { name: 'Alice', age: 25 },
  bob: { name: 'Bob', age: 30 },
};
const output = match(userProfiles)
.with(
P.record({ name: P.string, age: P.number }),
(profiles) => User profiles with name and age
)
.otherwise(() => 'Different format');
console.log(output);
// => "User profiles with name and age"

When using P.select in record patterns, you can extract all keys or all values as arrays:

... (truncated)

Commits

• 0e15315 fix: remove unused import
• 07fb919 Merge pull request #332 from gvergnaud/gvergnaud/feat-p-record-implementation
• 2b18391 add chainable tests
• b16276a ç5.9.0
• e073980 feat(P.record): Add docs
• 07508ba feat(P.record): add exhaustive checking tests
• fbefc6b deps: update TS and jest
• 4070733 feat(P.record): implementation
• 29fbd3a Merge pull request #317 from timvandam/patch-1
• 2721652 Update README.md
• Additional commits viewable in compare view

Updates @biomejs/biome from 2.1.1 to 2.4.15

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.15

2.4.15

Patch Changes

• #9394 ba3480e Thanks @​dyc3! - Added the nursery rule useTestHooksInOrder in the test domain. The rule enforces that Jest/Vitest lifecycle hooks (beforeAll, beforeEach, afterEach, afterAll) are declared in the order they execute, making test setup and teardown easier to reason about.

• #10254 e0a54cc Thanks @​dyc3! - Added a new nursery rule useVueNextTickPromise, which enforces Promise syntax when using Vue nextTick.

  For example, the following snippet triggers the rule:

  import { nextTick } from "vue";
  nextTick(() => {
  updateDom();
  });

• #10219 64aee45 Thanks @​dyc3! - Added a new nursery rule noVueVOnNumberValues, that disallows deprecated number modifiers on Vue v-on directives.

  For example, the following snippet triggers the rule:

  <input @keyup.13="submit" />

• #10195 7b8d4e1 Thanks @​dyc3! - Added the new nursery rule useVueValidVFor, which validates Vue v-for directives and reports invalid aliases, missing component keys, and keys that do not use iteration variables.

• #10238 1110256 Thanks @​dyc3! - Added the recommended nursery rule noVueImportCompilerMacros, which disallows importing Vue compiler macros such as defineProps from vue because they are automatically available.

• #10201 1a08f89 Thanks @​realknove! - Fixed #10193: style/useReadonlyClassProperties no longer reports class properties as readonly-able when they are assigned inside arrow callbacks nested in class property initializers.

• #9574 3bd2b6a Thanks @​Conaclos! - Fixed #9530. The diagnostics of organizeImports are now more detailed and more precise. They are also better at localizing where the issue is.

• #10205 a704a6c Thanks @​Conaclos! - Fixed #10185. `organizeImports now errors when it encounters an unknown predefined group.

  The following configuration is now reported as invalid because :INEXISTENT: is an unknown predefined group.

  {
    "assist": {
      "actions": {
        "source": {
          "organizeImports": { "options": { "groups": [":INEXISTENT:"] } }
        }
      }
    }
  }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.15

Patch Changes

• #9394 ba3480e Thanks @​dyc3! - Added the nursery rule useTestHooksInOrder in the test domain. The rule enforces that Jest/Vitest lifecycle hooks (beforeAll, beforeEach, afterEach, afterAll) are declared in the order they execute, making test setup and teardown easier to reason about.

• #10254 e0a54cc Thanks @​dyc3! - Added a new nursery rule useVueNextTickPromise, which enforces Promise syntax when using Vue nextTick.

  For example, the following snippet triggers the rule:

  import { nextTick } from "vue";
  nextTick(() => {
  updateDom();
  });

• #10219 64aee45 Thanks @​dyc3! - Added a new nursery rule noVueVOnNumberValues, that disallows deprecated number modifiers on Vue v-on directives.

  For example, the following snippet triggers the rule:

  <input @keyup.13="submit" />

• #10195 7b8d4e1 Thanks @​dyc3! - Added the new nursery rule useVueValidVFor, which validates Vue v-for directives and reports invalid aliases, missing component keys, and keys that do not use iteration variables.

• #10238 1110256 Thanks @​dyc3! - Added the recommended nursery rule noVueImportCompilerMacros, which disallows importing Vue compiler macros such as defineProps from vue because they are automatically available.

• #10201 1a08f89 Thanks @​realknove! - Fixed #10193: style/useReadonlyClassProperties no longer reports class properties as readonly-able when they are assigned inside arrow callbacks nested in class property initializers.

• #9574 3bd2b6a Thanks @​Conaclos! - Fixed #9530. The diagnostics of organizeImports are now more detailed and more precise. They are also better at localizing where the issue is.

• #10205 a704a6c Thanks @​Conaclos! - Fixed #10185. `organizeImports now errors when it encounters an unknown predefined group.

  The following configuration is now reported as invalid because :INEXISTENT: is an unknown predefined group.

  {
    "assist": {
      "actions": {
        "source": {
          "organizeImports": { "options": { "groups": [":INEXISTENT:"] } }
        }
      }
    }
  }

... (truncated)

Commits

• 9dd3271 ci: release (#10210)
• 7b8d4e1 feat(lint/html/vue): add useVueValidVFor (#10195)
• ba3480e feat(lint/js): add useTestHooksInOrder (#9394)
• e0a54cc feat(lint/js/vue): add useVueNextTickPromise (#10254)
• 1110256 feat(lint/vue): add noVueImportCompilerMacros (#10238)
• 7f7419c fix: grammar in extends docstring (#10263)
• 0ae5840 feat(lint/js): add useThisForClassMethods (#9807)
• 83f7385 feat(lint/js): add noBaseToString (#9838)
• 64aee45 feat(lint/html/vue): add noVueVOnNumberValues (#10219)
• 46393e0 ci: release (#10100)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​biomejs/biome since your current version.

Updates chalk from 5.4.1 to 5.6.2

Release notes

Sourced from chalk's releases.

v5.6.2

• Fix vulnerability in 5.6.1, see: chalk/chalk#656

v5.6.0

• Make WezTerm terminal use true color a8f5bf7

---

chalk/chalk@v5.5.0...v5.6.0

v5.5.0

• Make Ghostty terminal use true color (#653) 79ee2d3

---

chalk/chalk@v5.4.1...v5.5.0

Commits

• 5155778 5.6.2
• 5c91505 5.6.0
• a8f5bf7 Make WezTerm terminal use true color
• 67db246 5.5.0
• 79ee2d3 Make Ghostty terminal use true color (#653)
• See full diff in compare view

Updates rimraf from 6.0.1 to 6.1.3

Changelog

Sourced from rimraf's changelog.

6.1

• Move to native fs/promises usage instead of promisifying manually.

6.0

• Drop support for nodes before v20
• Add --version to CLI

5.0

• No default export, only named exports

4.4

• Provide Dirent or Stats object as second argument to filter

4.3

• Return boolean indicating whether the path was fully removed
• Add filter option
• bin: add --verbose, -v to print files as they are deleted
• bin: add --no-verbose, -V to not print files as they are deleted
• bin: add -i --interactive to be prompted on each deletion
• bin: add -I --no-interactive to not be prompted on each deletion
• 4.3.1 Fixed inappropriately following symbolic links to directories

v4.2

• Brought back glob support, using the new and improved glob v9

v4.1

• Improved hybrid module with no need to look at the .default dangly bit. .default preserved as a reference to rimraf for compatibility with anyone who came to rely on it in v4.0.
• Accept and ignore -rf a...

  Description has been truncated