fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@changesets/cli (source)	^2.27.9 -> ^2.27.11
@vercel/build-utils (source)	^8.4.12 -> ^8.8.0
@vercel/edge (source)	^1.1.2 -> ^1.1.4
@vercel/nft	^0.27.6 -> ^0.27.10
@vercel/node (source)	^3.2.24 -> ^3.2.29
esbuild	^0.24.0 -> ^0.24.2
typescript (source)	^5.6.3 -> ^5.7.2
vike	^0.4.203 -> ^0.4.211
zod (source)	^3.23.8 -> ^3.24.1

---

Release Notes

changesets/changesets (@​changesets/cli)

v2.27.11

Compare Source

Patch Changes

• Updated dependencies [f0270f6]:
  • @​changesets/config@​3.0.5
  • @​changesets/apply-release-plan@​7.0.7
  • @​changesets/get-release-plan@​4.0.6

v2.27.10

Compare Source

vercel/vercel (@​vercel/build-utils)

v8.8.0

Compare Source

Minor Changes

• Add bun detection using bun.lock (#​12740)

v8.7.0

Compare Source

Minor Changes

• Support splitting archive deployments in parts. (#​12671)

v8.6.0

Compare Source

Minor Changes

• Add support for NOW_EPHEMERAL_FILES_S3_URL, NOW_FILES_CLOUDFRONT_URL and NOW_FILES_S3_URL environment variables (#​12643)

v8.5.0

Compare Source

Minor Changes

• Remove VERCEL_ALLOW_NODEJS22 env var check (#​12614)

vercel/vercel (@​vercel/edge)

v1.1.4

Compare Source

Patch Changes

• [vercel/edge] add geolocation.postalCode (#​12755)

v1.1.3

Compare Source

Patch Changes

• update "rollup" to resolve vulnerability report (#​12686)

vercel/nft (@​vercel/nft)

v0.27.10

Compare Source

Bug Fixes

• avoid URL illegal constructor error (#​458) (5777c8b)

v0.27.9

Compare Source

Bug Fixes

• reduce number of dependencies (#​455) (7fbb559)

v0.27.8

Compare Source

Bug Fixes

• trigger release (#​454) (5e1201d), closes /github.com/vercel/nft/pull/453#issuecomment-2529266471

v0.27.7

Compare Source

Bug Fixes

• bump @​rollup/plugin-utils to 5.1.3 (#​452) (a5134db)

vercel/vercel (@​vercel/node)

v3.2.29

Compare Source

Patch Changes

• update express even more (#​12703)

• Updated dependencies [a35f77e5dddc4faa6c4492b2b3c6971e7200749e]:

  • @​vercel/build-utils@​8.7.0

v3.2.28

Compare Source

Patch Changes

• [cli] bump express version (#​12689)

v3.2.27

Compare Source

Patch Changes

• Updated dependencies [d5474ec05886abfb2fc5dd69c54072a7c34498b5]:
  • @​vercel/build-utils@​8.6.0

v3.2.26

Compare Source

Patch Changes

• Updated dependencies [a97f3f13ea3f27fd143e7692544bbd4919771a7a]:
  • @​vercel/build-utils@​8.5.0

v3.2.25

Compare Source

Patch Changes

• Updated dependencies [79fbf1c95f4fa9bfe6af17aa3e13cf18424fc521]:
  • @​vercel/error-utils@​2.0.3

evanw/esbuild (esbuild)

v0.24.2

Compare Source

• Fix regression with --define and import.meta (#​4010, #​4012, #​4013)

  The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

  This fix was contributed by @​sapphi-red.

v0.24.1

Compare Source

• Allow es2024 as a target in tsconfig.json (#​4004)

  TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

  {
    "compilerOptions": {
      "target": "ES2024"
    }
  }

  As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

  This fix was contributed by @​billyjanitsch.

• Allow automatic semicolon insertion after get/set

  This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:

  class Foo {
    get
    *x() {}
    set
    *y() {}
  }

  The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.

• Allow quoted property names in --define and --pure (#​4008)

  The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

  // The following code now transforms to "return true;\n"
  console.log(esbuild.transformSync(
    `return process.env['SOME-TEST-VAR']`,
    { define: { 'process.env["SOME-TEST-VAR"]': 'true' } },
  ))

  Note that if you're passing values like this on the command line using esbuild's --define flag, then you'll need to know how to escape quote characters for your shell. You may find esbuild's JavaScript API more ergonomic and portable than writing shell code.

• Minify empty try/catch/finally blocks (#​4003)

  With this release, esbuild will now attempt to minify empty try blocks:

  // Original code
  try {} catch { foo() } finally { bar() }
  
  // Old output (with --minify)
  try{}catch{foo()}finally{bar()}
  
  // New output (with --minify)
  bar();

  This can sometimes expose additional minification opportunities.

• Include entryPoint metadata for the copy loader (#​3985)

  Almost all entry points already include a entryPoint field in the outputs map in esbuild's build metadata. However, this wasn't the case for the copy loader as that loader is a special-case that doesn't behave like other loaders. This release adds the entryPoint field in this case.

• Source mappings may now contain null entries (#​3310, #​3878)

  With this change, sources that result in an empty source map may now emit a null source mapping (i.e. one with a generated position but without a source index or original position). This change improves source map accuracy by fixing a problem where minified code from a source without any source mappings could potentially still be associated with a mapping from another source file earlier in the generated output on the same minified line. It manifests as nonsensical files in source mapped stack traces. Now the null mapping "resets" the source map so that any lookups into the minified code without any mappings resolves to null (which appears as the output file in stack traces) instead of the incorrect source file.

  This change shouldn't affect anything in most situations. I'm only mentioning it in the release notes in case it introduces a bug with source mapping. It's part of a work-in-progress future feature that will let you omit certain unimportant files from the generated source map to reduce source map size.

• Avoid using the parent directory name for determinism (#​3998)

  To make generated code more readable, esbuild includes the name of the source file when generating certain variable names within the file. Specifically bundling a CommonJS file generates a variable to store the lazily-evaluated module initializer. However, if a file is named index.js (or with a different extension), esbuild will use the name of the parent directory instead for a better name (since many packages have files all named index.js but have unique directory names).

  This is problematic when the bundle entry point is named index.js and the parent directory name is non-deterministic (e.g. a temporary directory created by a build script). To avoid non-determinism in esbuild's output, esbuild will now use index instead of the parent directory in this case. Specifically this will happen if the parent directory is equal to esbuild's outbase API option, which defaults to the lowest common ancestor of all user-specified entry point paths.

• Experimental support for esbuild on NetBSD (#​3974)

  With this release, esbuild now has a published binary executable for NetBSD in the @esbuild/netbsd-arm64 npm package, and esbuild's installer has been modified to attempt to use it when on NetBSD. Hopefully this makes installing esbuild via npm work on NetBSD. This change was contributed by @​bsiegert.

  ⚠️ Note: NetBSD is not one of Node's supported platforms, so installing esbuild may or may not work on NetBSD depending on how Node has been patched. This is not a problem with esbuild. ⚠️

microsoft/TypeScript (typescript)

v5.7.2

Compare Source

vikejs/vike (vike)

v0.4.211

Compare Source

Bug Fixes

• add hint for window is not defined (7e270e9)
• fix wrong alias assertion (07fd3f1)
• remove assets from dist/server/ (fix #​2034) (c1cd2d9)
• set host: true if inside docker container (cac186d)
• stabilize extends order (fix #​2037) (d93dfe1)
• support .{client,server.shared}.js for pointer imports (285fedb)

v0.4.210

Compare Source

Bug Fixes

• change Vite 6 default port from 5731 to 3000 (9d68312)

Features

• pageContext.pageContextNavigation (#​2002) (5e317ec)

v0.4.209

Compare Source

Bug Fixes

• error message typo (a4576ad)
• improve warning upon side exports (8d0a7ba)
• show proper error message upon wrong onRenderHtml usage (c3e6b54)
• tolerate side exports in + files (2e1d6de)
• update @​brillout/vite-plugin-server-entry (bcc7ba6)

v0.4.208

Compare Source

Bug Fixes

• update @​brillout/json-serializer (#​2016) (b4214a8)

v0.4.207

Compare Source

Bug Fixes

• improve warning (ba322c0)
• show warning upon cssCodeSplit: false (#​1993) (bc2d5a8)

Features

• [experimental] getMiddlewares() (0d8ef7e)
• [experimental] new config +middleware (d19051a)

v0.4.206

Compare Source

Bug Fixes

• fix error message handling (558b60d)
• improve error message upon unexpected module ID (#​1985) (796c72f)
• show warning upon CSS duplication (#​1815) (5ef458c)

v0.4.205

Compare Source

Bug Fixes

• accept esbuild 0.24 (ed633d8)
• add debug logs for firefox history null bug (#​1962) (29a621a)
• fix hash URL parsing (7c752c4)
• fix regression of resolving hash URLs (fix #​1987) (13b4e50)
• make getCacheControl return defaultValue on 5xx server errors (#​1981) (7f41ba2)
• support large $ git ls-files outputs (fix #​1982) (386d2d8)

Features

• add pageContext argument to navigate() (fix #​1976) (9a97c22)

v0.4.204

Compare Source

Bug Fixes

• fix export assertion (fix #​1964) (162a660)
• fix resolving of relative URL with hash (9f54397)
• improve client-side init execution order (fix #​1962) (#​1965) (1b14559)
• improve detection of hash navigation link (953f625)
• improve type of hashOriginal and searchOriginal (6c69cb5)
• minor hash scrolling fix (b4c0f11)
• workaround Firefox bug upon clicking hash link that doesn't change URL (fix #​1962) (cb7f3ff)

colinhacks/zod (zod)

v3.24.1

Compare Source

Commits:

• 0c6cbbd Undeprecate .nonempty()
• 4e219d6 Bump min TS version to 5.0
• 65adeea v3.24.1

v3.24.0

Compare Source

Implement @standard-schema/spec

This is the first version of Zod to implement the Standard Schema spec. This is a new community effort among several validation library authors to implement a common interface, with the goal of simplifying the process of integrating schema validators with the rest of the ecosystem. Read more about the project and goals here.

z.string().jwt()

Thanks to @​Mokshit06 and @​Cognition-Labs for this contribution!

To verify that a string is a valid 3-part JWT.

z.string().jwt();

⚠️ This does not verify your JWT cryptographically! It merely ensures its in the proper format. Use a library like jsonwebtoken to verify the JWT signature, parse the token, and read the claims.

To constrain the JWT to a specific algorithm:

z.string().jwt({ alg: "RS256" });

z.string().base64url()

Thank you to @​marvinruder!

To complement the JWT validation, Zod 3.24 implements a standalone .base64url() string validation API. (The three elements of JWTs are base64url-encoded JSON strings.)

z.string().base64url()

This functionality is available along the standard z.string().base64() validator added in Zod 3.23.

z.string().cidr()

Thanks to @​wataryooou for their work on this!

A validator for CIDR notation for specifying IP address ranges, e.g. 192.24.12.0/22.

z.string().cidr()

To specify an IP version:

z.string().cidr({ version: "v4" })
z.string().cidr({ version: "v6" })

---

View the full diff from 3.23.8: colinhacks/zod@v3.23.8...v3.24.0

• 294f54f Update README_ZH.md about Discriminated unions (#​3493)
• 1247caf Add Kubb as X-to-Zod community tool (#​3508)
• 62b7842 Update default branch
• c6bc80d Fix issue #​3582 : ULID should be case insensitive (#​3593)
• a5b9dc3 docs: add zod-schema-faker to ecosystem (#​3605)
• 9818d0e Add zod-sockets (#​3609)
• 7173d0b Add drizzle-zod library to X to Zod README.md section (#​3648)
• c5a4edc Add 'schemql' in Powered by Zod (#​3800)
• 85916b3 docs: add zod-form-renderer to form integration docs (#​3697)
• 51f1dc3 docs: add unplugin-environment in powered by zod (#​3778)
• 8e74db3 fix: ipv6 regex validation (#​3513)
• 1f4f0da refactor: rename ip version types (#​3755)
• f487d74 Remove faulty ip test case
• 48f1c47 docs: Remove invalid semicolon in ERROR_HANDLING.md (#​3857)
• 1d0a4b9 fix: bigint coerce crash (#​3822)
• 14dceaa Add API library (#​3814)
• f82f817 feat: z.string.cidr() - support CIDR notation (#​3820)
• 71a0c33 docs: add info on unqualified local datetime strings (#​3760)
• b85686a Add support for base64url strings (#​3712)
• 6407bed Allow creation of discriminated unions with a readonly array of options (#​3535)
• 3755146 Remove createParams cascade from .array() (#​3530)
• 963386d Fix lint
• 69a1798 Implement Standard Schema spec (#​3850)
• c1dd537 Adds frrm package to documentation (#​3818)
• b68c05f feat: Add JWT string validator (#​3893)

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Updated (UTC)
test-vite-vercel-plugin	✅ Ready (Inspect)	Visit Preview	Dec 28, 2024 0:53am