chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #153 · TanStack/hotkeys

renovate · 2026-09-21T03:00:53Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@angular-devkit/build-angular	`^21.2.8` → `^21.2.24`	devDependencies	patch
@angular/cli	`^21.2.8` → `^21.2.24`	devDependencies	patch
@angular/common (source)	`^21.2.10` → `^21.2.23`	devDependencies	patch
@angular/common (source)	`^21.2.10` → `^21.2.23`	dependencies	patch
@angular/compiler (source)	`^21.2.10` → `^21.2.23`	dependencies	patch
@angular/compiler-cli (source)	`^21.2.10` → `^21.2.23`	devDependencies	patch
@angular/core (source)	`^21.2.10` → `^21.2.23`	devDependencies	patch
@angular/core (source)	`^21.2.10` → `^21.2.23`	dependencies	patch
@angular/forms (source)	`^21.2.10` → `^21.2.23`	dependencies	patch
@angular/platform-browser (source)	`^21.2.10` → `^21.2.23`	dependencies	patch
@angular/platform-browser-dynamic (source)	`^21.2.10` → `^21.2.23`	devDependencies	patch
@angular/platform-browser-dynamic (source)	`^21.2.10` → `^21.2.23`	dependencies	patch
@angular/router (source)	`^21.2.10` → `^21.2.23`	dependencies	patch
@changesets/cli (source)	`^2.31.0` → `^2.31.1`	devDependencies	patch
@faker-js/faker (source)	`^10.4.0` → `^10.6.0`	devDependencies	minor
@preact/preset-vite	`^2.10.5` → `^2.10.6`	devDependencies	patch
@sveltejs/package (source)	`^2.5.7` → `^2.5.8`	devDependencies	patch
@sveltejs/vite-plugin-svelte (source)	`^7.0.0` → `^7.3.0`	devDependencies	minor
@tanstack/angular-store (source)	`^0.11.0` → `^0.11.1`	dependencies	patch
@tanstack/devtools-ui (source)	`^0.5.1` → `^0.7.1`	dependencies	minor
@tanstack/devtools-utils (source)	`^0.4.0` → `^0.7.0`	dependencies	minor
@tanstack/preact-devtools (source)	`0.10.2` → `0.10.12`	devDependencies	patch
@tanstack/preact-store (source)	`^0.13.0` → `^0.13.2`	dependencies	patch
@tanstack/react-devtools (source)	`0.10.2` → `0.10.12`	devDependencies	patch
@tanstack/react-store (source)	`^0.11.0` → `^0.11.1`	dependencies	patch
@tanstack/solid-devtools (source)	`0.8.2` → `0.8.12`	dependencies	patch
@tanstack/solid-store (source)	`^0.11.0` → `^0.11.1`	dependencies	patch
@tanstack/store (source)	`^0.11.0` → `^0.11.1`	dependencies	patch
@tanstack/typedoc-config (source)	`0.3.3` → `0.3.4`	devDependencies	patch
@tanstack/vue-devtools (source)	`^0.2.16` → `^0.2.26`	devDependencies	patch
@tanstack/vue-store (source)	`^0.11.0` → `^0.11.1`	dependencies	patch
@testing-library/react	`^16.3.2` → `^16.3.3`	devDependencies	patch
@types/react (source)	`^19.2.14` → `^19.3.0`	devDependencies	minor
@types/react-dom (source)	`^19.2.3` → `^19.3.0`	devDependencies	minor
@typescript-eslint/parser (source)	`^8.59.0` → `^8.70.0`	devDependencies	minor
@vitejs/plugin-react (source)	`^6.0.1` → `^6.1.1`	devDependencies	minor
@vitejs/plugin-vue (source)	`^6.0.6` → `^6.0.9`	devDependencies	patch
@vue/test-utils	`^2.4.8` → `^2.5.1`	devDependencies	minor
actions/checkout	`v6.0.2` → `v6.1.0`	action	minor
changesets/action	`v1.7.0` → `v1.9.0`	action	minor
eslint (source)	`^10.2.1` → `^10.11.0`	devDependencies	minor
eslint-plugin-svelte (source)	`^3.17.1` → `^3.23.0`	devDependencies	minor
goober	`^2.1.18` → `^2.1.19`	dependencies	patch
happy-dom	`^20.9.0` → `^20.14.5`	devDependencies	minor
jasmine-core (source)	`~6.2.0` → `~6.3.0`	devDependencies	minor
karma-jasmine-html-reporter	`~2.2.0` → `~2.3.0`	devDependencies	minor
knip (source)	`^6.6.3` → `^6.37.0`	devDependencies	minor
lit (source)	`^3.3.2` → `^3.3.3`	devDependencies	patch
lit (source)	`^3.3.2` → `^3.3.3`	dependencies	patch
markdown-link-extractor	`^4.0.3` → `^4.0.4`	devDependencies	patch
nx (source)	`^22.7.0` → `^22.7.12`	devDependencies	patch
pnpm (source)	`11.9.0` → `11.27.1`	packageManager	minor
pnpm (source)	`>=11.9.0` → `>=11.27.1`	engines	minor
preact (source)	`^10.29.1` → `^10.29.8`	devDependencies	patch
preact (source)	`^10.29.1` → `^10.29.8`	dependencies	patch
prettier (source)	`^3.8.3` → `^3.9.8`	devDependencies	minor
prettier-plugin-svelte	`^3.5.1` → `^3.5.2`	devDependencies	patch
publint (source)	`^0.3.18` → `^0.3.24`	devDependencies	patch
react (source)	`^19.2.5` → `^19.3.0`	devDependencies	minor
react (source)	`^19.2.5` → `^19.3.0`	dependencies	minor
react-dom (source)	`^19.2.5` → `^19.3.0`	devDependencies	minor
react-dom (source)	`^19.2.5` → `^19.3.0`	dependencies	minor
rolldown (source)	`1.0.0-rc.12` → `1.2.9`	pnpm-workspace.overrides	minor
sherif	`^1.11.1` → `^1.13.0`	devDependencies	minor
solid-js (source)	`^1.9.12` → `^1.9.15`	devDependencies	patch
solid-js (source)	`^1.9.12` → `^1.9.15`	dependencies	patch
svelte (source)	`^5.55.5` → `^5.57.1`	devDependencies	minor
svelte (source)	`^5.55.5` → `^5.57.1`	dependencies	minor
tinyglobby (source)	`^0.2.16` → `^0.2.17`	devDependencies	patch
tsdown (source)	`^0.21.10` → `^0.23.0`	devDependencies	minor
vite (source)	`^8.0.10` → `^8.3.0`	devDependencies	minor
vite-plugin-solid	`^2.11.12` → `^2.11.14`	devDependencies	patch
vitest (source)	`^4.1.5` → `^4.1.11`	devDependencies	patch
vue (source)	`^3.5.33` → `^3.5.43`	devDependencies	patch
vue (source)	`^3.5.33` → `^3.5.43`	dependencies	patch
vue-eslint-parser	`10.4.0` → `10.4.1`	devDependencies	patch
zizmorcore/zizmor-action	`v0.5.3` → `v0.6.4`	action	minor
zone.js (source, changelog)	`~0.16.1` → `~0.16.3`	dependencies	patch

Release Notes

angular/angular-cli (@angular-devkit/build-angular)

`v21.2.24`

Compare Source

@angular/build

Commit	Type	Description
dbaadc2f6e	fix	update undici to 7.29.1

`v21.2.23`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
d3aaa48ef	fix	update less to 4.9.0

@angular/ssr

Commit	Type	Description
645e41a47	fix	ensure public directory containment in CommonEngine

`v21.2.22`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
b0047b04f5	fix	update webpack-dev-server to 5.2.6

`v21.2.21`

Compare Source

@angular/cli

Commit	Type	Description
ba5d16cac	fix	update dependency @modelcontextprotocol/sdk to v1.30.0

@angular/build

Commit	Type	Description
f7f60e69e	fix	bump undici to 7.29.0

`v21.2.20`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
972f6db7e9	fix	upgrade postcss to 8.5.23

@angular/build

Commit	Type	Description
8de75ada50	fix	upgrade postcss to 8.5.23

`v21.2.19`

Compare Source

`v21.2.18`

Compare Source

@angular/cli

Commit	Type	Description
61a810ab6	fix	respect release age policy in update bootstrapping logic

@angular/build

Commit	Type	Description
a2b6116ed	fix	bump undici to 7.28.0
2510ee3c9	fix	bump vite to 7.3.6

`v21.2.17`

Compare Source

@angular/build

Commit	Type	Description
9c366e8be	fix	bump @babel/core to 7.29.7
6a06ce9e9	fix	bump esbuild to 0.28.1
637b84877	fix	bump piscina to 5.2.0
e86d58a12	fix	bump vite to 7.3.5

`v21.2.16`

Compare Source

@angular/cli

Commit	Type	Description
77c9047ac	fix	update pacote to 21.5.1

@angular/ssr

Commit	Type	Description
d052e97da	fix	prioritize options over environment variables in AngularNodeAppEngine

`v21.2.15`

Compare Source

@angular/cli

Commit	Type	Description
42ac0ed0f	fix	remove forceAuth and unscoped credential parsing
c7a7f1955	fix	support registry metadata fetching under bun package manager

`v21.2.14`

Compare Source

@angular/cli

Commit	Type	Description
aed448748	fix	expand package groups for newly added peer dependencies in update schematic

@angular/build

Commit	Type	Description
d46c082fb	fix	prevent esbuild service child process leakage

`v21.2.13`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
3c6d26a31	fix	remove unconditional CORS wildcard from webpack dev-server

@angular/build

Commit	Type	Description
2b3e95517	fix	assert that asset input paths are within workspace root

`v21.2.12`

Compare Source

@angular/build

Commit	Type	Description
cbad57579	fix	ignore virtual esbuild paths with (disabled):

`v21.2.11`

Compare Source

@angular/cli

Commit	Type	Description
bbd63b7a5	fix	robustly parse npm manifest from array

@angular/ssr

Commit	Type	Description
eafe1a719	fix	allow all hosts in common engine rendering options to prevent validation errors
7a116a80d	fix	remove stateful flag from URL_PARAMETER_REGEXP

`v21.2.10`

Compare Source

@angular/cli

Commit	Type	Description
bb8611913	fix	restrict MCP workspace access to allowed client roots during resolution

`v21.2.9`

Compare Source

@angular/cli

Commit	Type	Description
233deef01	fix	fix broken img ref in ai-tutor
7cea9885c	fix	introduce initial package manager workspace awareness
5b1a5b743	fix	remove standalone true ref in ai tutor

@schematics/angular

Commit	Type	Description
e7abeb5c7	fix	add missing imports for focus and skip APIs in refactor-jasmine-vitest

@angular/ssr

Commit	Type	Description
94023f62c	fix	introduce trustProxyHeaders option to safely validate and sanitize proxy headers
5ffe5c309	fix	add support for configuring trusted proxy headers via environment variable
930ada9b7	fix	decode route segments when building and matching route tree
0dc8a440c	fix	use router to normalize URLs for comparison

angular/angular (@angular/common)

`v21.2.23`

Compare Source

platform-server

Commit	Type	Description
fc2e8fbc0b	fix	update domino to latest version

`v21.2.22`

Compare Source

platform-server

Commit	Type	Description
5aa6d97deb	fix	avoid stripping unicode whitespace during url resolution
73d8bbd27c	fix	update domino to latest version

[`v21.2.2

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coderabbitai · 2026-09-21T03:00:59Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: TanStack/hotkeys/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 3cb32efb-20b2-4db8-83dd-8ff26cfc2130

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-09-21T03:01:37Z

🚀 Changeset Version Preview

No changeset entries found. Merging this PR will not cause a version bump for any packages.

socket-security · 2026-09-21T03:01:51Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance
	@tanstack/typedoc-config@0.3.3 ⏵ 0.3.4	⁺⁸			⁺⁷
	happy-dom@20.9.0 ⏵ 20.14.5			⁺¹	^-1
	@tanstack/vue-store@0.11.0 ⏵ 0.11.1	⁺¹			⁺⁸
	@tanstack/angular-store@0.11.0 ⏵ 0.11.1	⁺¹			⁺⁶
	@tanstack/react-store@0.11.0 ⏵ 0.11.1	⁺¹			⁺²
	@angular/platform-browser-dynamic@21.2.10 ⏵ 21.2.23				⁺⁴⁸
	@tanstack/solid-store@0.11.0 ⏵ 0.11.1	⁺¹			⁺⁶
	@tanstack/preact-store@0.13.0 ⏵ 0.13.2	⁺¹			^-1
	@tanstack/store@0.11.0 ⏵ 0.11.1				⁺²
	nx@22.7.0 ⏵ 22.7.12	⁺¹²	⁺¹⁸
	@typescript-eslint/parser@8.59.0 ⏵ 8.70.0			⁺¹	⁺¹
	@tanstack/devtools-utils@0.4.0 ⏵ 0.7.0	⁺¹		⁺¹
	@angular/platform-browser@21.2.10 ⏵ 21.2.23	⁺²³
	@types/react-dom@19.2.3 ⏵ 19.3.0	⁺¹		⁺¹
	@tanstack/devtools-ui@0.5.1 ⏵ 0.7.1	⁺¹		⁺¹	⁺⁵
	@tanstack/preact-devtools@0.10.2 ⏵ 0.10.12	⁺²		⁺⁵	⁺²
	@angular/compiler-cli@21.2.10 ⏵ 21.2.23	⁺²⁰
	@sveltejs/package@2.5.7 ⏵ 2.5.8
	@angular/router@21.2.10 ⏵ 21.2.23	⁺²¹
	@angular/forms@21.2.10 ⏵ 21.2.23	⁺²¹
	@angular/cli@21.2.8 ⏵ 21.2.24	⁺¹³			⁺¹
	tinyglobby@0.2.16 ⏵ 0.2.17	⁺¹		⁺¹
	@angular/compiler@21.2.10 ⏵ 21.2.23	⁺²⁰	⁺²⁰		⁺¹
	@types/react@19.2.14 ⏵ 19.3.0
	@angular/core@21.2.10 ⏵ 21.2.23	⁺¹⁹	⁺²⁶
	@tanstack/vue-devtools@0.2.16 ⏵ 0.2.26	⁺⁷		⁺⁶	⁺²
	@angular/common@21.2.10 ⏵ 21.2.23		⁺⁵⁰	⁺¹
	@faker-js/faker@10.4.0 ⏵ 10.6.0		⁺¹⁶
	@sveltejs/vite-plugin-svelte@7.0.0 ⏵ 7.3.0	⁺¹			⁺⁴
	publint@0.3.18 ⏵ 0.3.24			⁺¹	⁺⁵
	@angular-devkit/build-angular@21.2.8 ⏵ 21.2.24			⁺¹	⁺¹
	goober@2.1.18 ⏵ 2.1.19
See 28 more rows in the dashboard

View full report

socket-security · 2026-09-21T03:01:52Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Low adoption: npm `@tanstack/preact-devtools` Location: Package overview From: examples/preact/useHeldKeys/package.json → `npm/@tanstack/preact-devtools@0.10.12` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@tanstack/preact-devtools@0.10.12`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

pkg-pr-new · 2026-09-21T03:02:18Z

Open in StackBlitz

@tanstack/angular-hotkeys

npm i https://pkg.pr.new/@tanstack/angular-hotkeys@153

@tanstack/hotkeys

npm i https://pkg.pr.new/@tanstack/hotkeys@153

@tanstack/hotkeys-devtools

npm i https://pkg.pr.new/@tanstack/hotkeys-devtools@153

@tanstack/lit-hotkeys

npm i https://pkg.pr.new/@tanstack/lit-hotkeys@153

@tanstack/preact-hotkeys

npm i https://pkg.pr.new/@tanstack/preact-hotkeys@153

@tanstack/preact-hotkeys-devtools

npm i https://pkg.pr.new/@tanstack/preact-hotkeys-devtools@153

@tanstack/react-hotkeys

npm i https://pkg.pr.new/@tanstack/react-hotkeys@153

@tanstack/react-hotkeys-devtools

npm i https://pkg.pr.new/@tanstack/react-hotkeys-devtools@153

@tanstack/solid-hotkeys

npm i https://pkg.pr.new/@tanstack/solid-hotkeys@153

@tanstack/solid-hotkeys-devtools

npm i https://pkg.pr.new/@tanstack/solid-hotkeys-devtools@153

@tanstack/svelte-hotkeys

npm i https://pkg.pr.new/@tanstack/svelte-hotkeys@153

@tanstack/vue-hotkeys

npm i https://pkg.pr.new/@tanstack/vue-hotkeys@153

@tanstack/vue-hotkeys-devtools

npm i https://pkg.pr.new/@tanstack/vue-hotkeys-devtools@153

commit: 2d2964a

renovate · 2026-09-21T03:04:08Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

chore(deps): update all non-major dependencies

38bed8b

renovate Bot requested a review from a team as a code owner September 21, 2026 03:00

renovate Bot added the dependencies label Sep 21, 2026

ci: apply automated fixes

2d2964a

Navigation Menu

Uh oh!

chore(deps): update all non-major dependencies - #153

chore(deps): update all non-major dependencies#153
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/all-minor-patch

renovate Bot commented Sep 21, 2026

Uh oh!

coderabbitai Bot commented Sep 21, 2026 •

edited

Loading

Review skipped

Uh oh!

github-actions Bot commented Sep 21, 2026

Uh oh!

socket-security Bot commented Sep 21, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 21, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Sep 21, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Sep 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Sep 21, 2026

Release Notes

platform-server

platform-server

[`v21.2.2

Configuration

Uh oh!

coderabbitai Bot commented Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

github-actions Bot commented Sep 21, 2026

🚀 Changeset Version Preview

Uh oh!

socket-security Bot commented Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new Bot commented Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate Bot commented Sep 21, 2026

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

coderabbitai Bot commented Sep 21, 2026 •

edited

Loading

socket-security Bot commented Sep 21, 2026 •

edited

Loading

socket-security Bot commented Sep 21, 2026 •

edited

Loading

pkg-pr-new Bot commented Sep 21, 2026 •

edited

Loading