chore(deps): update dependency knip to v6.34.0 by renovate[bot] · Pull Request #9 · astilbahq/create

renovate · 2026-07-24T22:47:01Z

This PR contains the following updates:

Package	Change	Age	Confidence
knip (source)	`6.26.0` → `6.34.0`
knip (source)	`6.26.0` → `6.34.0`

Release Notes

webpro-nl/knip (knip)

`v6.34.0`: Release 6.34.0

Compare Source

fix: report types used only in private parameters (resolve #1950) (3c785f5)
💡 Add support for node:fs/promises glob (#1977) (44faf08) - thanks @DreamLongYT!
Respect JSDoc tags on URL dependencies (resolve #1943) (f93ad09)
Make prop access consistent while at it (1c90b49)
Set an explicit Bun test timeout (964085d)
Add note re. one scoped PRs (8f9490a)
fix(cli): validate numeric options instead of passing NaN through (#1975) (ab90e24) - thanks @devYRPauli!
fix: compile files with workspace-scoped compilers (#1997) (462ae45) - thanks @gioboa!
Resolve Nuxt #shared imports from the shared directory (#1991) (cc47061) - thanks @DreamLongYT!
Update dependencies (c4e0f08)
Declare webpack directly instead of through @types/webpack (96ff2df)
Assert counters in targeted regression tests (f0cf11d)

`v6.33.0`: Release 6.33.0

Compare Source

Support package manifest resolution under Yarn PnP (#1946) (a82efb6) - thanks @WooWan!
Resolve oxlint jsPlugins from .oxlintrc.jsonc (#1973) (d055023) - thanks @DreierF!
Update dependency bun to v1.4.0 (#1964) (937ab38) - thanks @renovate[bot]!
Expose defineConfig on a ./config entrypoint (#1960) (17f7a60) - thanks @theRizwan!
Preserve all environment variables in exec.ts (#1979) (c0a9ecf) - thanks @DreamLongYT!
Add support for TypeScript content mappers (#1978) (db67f9b) - thanks @remcohaszing!
fix(vitest): resolve array entries and root-relative setup dependencies (#1982) (0ecf485) - thanks @DreamLongYT!
Fix type annotation in dynamic configuration function example (ada88c7)
Format docs with remark (7764c2a)
Throw on configuration that is not an object (d7ac0cf)
Clarify dependency inputs, isTypeOnly and toConfig in plugin docs (2bd3679)
Resolve content mapper process from package.json#typescript.contentMapper.exec (74640c0)
Encode argv arrays before parsing them as shell commands (b79234c)
Update dependencies (2851014)
Replace non-breaking space in module graph comment (4e22bfc)
Update fix format test for oxfmt package.json key sorting (65011bf)
fix(webpack): resolve entry descriptors using import field (#1981) (cad8910) - thanks @DreamLongYT!
fix: count enum element access as a whole-object read (#1958) (5a47d60) - thanks @addielaruee!
Resolve oxlint/vite-plus import resolvers from settings (#1983) (c1165b7) - thanks @DreierF!
fix(nuxt): resolve string extends configs (#1984) (4a5d706) - thanks @DreamLongYT!
Wrap up webpack entry resolution (505decd)
Keep element access precise for number-like enum member names (bcbac3a)
Resolve Object.* enum enumeration through import aliases (347967d)
Resolve named string-key access on namespace-qualified enums (2ac1fbc)
Normalize line endings in nuxt-config-string fixture (9fe2b2b)
Resolve nuxt layer sources from all extends entry shapes (db13615)
Report unused exports behind Vitest module promise mocks (resolve #1966) (74954c2)
Check line endings against .gitattributes in pnpm run ci (ddc9fd0)

`v6.32.3`: Release 6.32.3

Compare Source

Update sentry production snapshot (9f18cba)
Pin TypeScript ecosystem test (de51629)
Update query snapshot (f6964dd)
fix(tsup): match config files with .cts and .mts extensions (#1938) (68d6f52) - thanks @codeAnqiang-ma!
fix(lefthook): match all config file names and extensions (#1940) (4015ae0) - thanks @codeAnqiang-ma!
fix(binaries): resolve missing pnpm subcommands (#1945) (deedbf6) - thanks @marcalexiei!
Fix nested gitignore negation inside ignored dot-directories (#1913) (#1942) (0201641) - thanks @DSeaStar!
fix(webdriver-io): match all supported config file extensions (#1948) (dc7aca5) - thanks @solomonaustin!
Resolve vitest include patterns relative to test.dir (#1929) (ee555d2) - thanks @kirthi-b!
Change GitHub stars badge style to flat (#1967) (ff0d791) - thanks @DreamLongYT!
Ignore printf as global binary (#1972) (a0c0b08) - thanks @taracutie!
fix: add bun 1.4 dedupe subcommand (#1969) (d1d5d42) - thanks @NimmLor!
Resolve Vitest mocks from test root (e655b0b)
Resolve local Vitest reporters from test root (resolve #1953) (f4ff31a)

`v6.32.2`: Release 6.32.2

Compare Source

Support oxfmt.config.mts (#1933) (7959001) - thanks @joealden!
Support oxlint.config.mts (#1934) (531e2dc) - thanks @joealden!
Fix Supported lint-staged Configs (#1935) (f9c755e) - thanks @joealden!
Update dependencies (95f7c52)
Update sentry snapshot (ea7929f)

`v6.32.1`: Release 6.32.1

Compare Source

Handle referenced config files in their own plugin (resolve #1931, close #1932) (982c1d8)
Fix type-check against typescript@5.0.4 (2febefe)
Update sentry snapshot (0397bdd)

`v6.32.0`: Release 6.32.0

Compare Source

fix: attribute wildcard subpath-import aliases as dependency usage (#1918) (4890a2a) - thanks @jsmecham!
Add Borp plugin (5eb9ad4)
Add tsd plugin (bd4ae70)
Resolve Rollup --config argument as plugin configuration (8111f97)
Resolve babel-jest configFile from Jest transform options (24794cc)
Add pre-commit plugin (ac726b0)
Thread script words through resolvers to preserve quoting (89f9ada)
Resolve entries from Mocha script arguments (353f860)
Detect Node test runner through c8 (fa44be7)
Update dependencies (non-major) (#1922) (6b1e6f3) - thanks @renovate[bot]!
fix(playwright): match config files with .cjs, .cts and .mts extensions (#1919) (1c1073a) - thanks @davidpavlovschi!
Restart VS Code language server process (resolve #1923) (d48eac5)
Classify built-ins from module specifiers (resolve #1925) (3528c5d)
Don't turn absolute-path script tokens into entries (resolve #1928) (e5608e7)
Update sponsors data (025884b)
Update dependencies (d2c0a07)

`v6.31.0`: Release 6.31.0

Compare Source

feat: Add basic support for Marko 6 and 5 (#1914) (c6b1516) - thanks @caseycarroll!
Use Array.from in Marko compiler (5aadf47)
Update release-it and fix release script flags (6fa9c26)
Downgrade @types/vscode to match extension engines range (6d8e9bf)

`v6.30.0`: Release 6.30.0

Compare Source

`v6.29.0`: Release 6.29.0

Compare Source

fix(glob): do not follow symbolic links in async glob (#1900) (b7d5ce2) - thanks @mogelbrod!
Add built-in compiler for tsrx (db05e01)
Fix -u shortcut for --duration (932b926)

`v6.28.0`: Release 6.28.0

Compare Source

Update oxc-resolver (resolve #1889) (1444f6a)
Keep entry-exported members public (resolve #1890) (94967c1)
Don't un-ignore sibling paths on unrelated gitignore negations (resolve #1891) (5c026ba)
Memoize the gitignore shadowed-pattern check (a5fa3b0)
Ignore nested files under a gitignore dir/* pattern (404a53e)
Track types referenced by JSDoc imports (resolve #1888) (6ae48aa)
Update oxc-parser (02ca17a)
feat: markdownlint-cli2 (#1887) (323b96f) - thanks @Zamiell!
Update rolldown snapshot (009e509)
Resolve $GITHUB_ACTION_PATH in GHA composite actions (ead489f)
Don't report node: specifiers as unlisted dependencies (1a7114f)
Discover tsdown CLI entries (0d47a45)
Discover Convex function modules (e01f21c)
Ignore common system binaries (cd00306)
Add OpenClaw plugin (73a2d7d)
Discover Tailwind CLI input stylesheet (resolve #1551) (9ae5fee)
Discover Angular global stylesheets from angular.json (fb9e048)
Hint when project patterns exclude a compiled extension (74de516)
Ignore common global binaries (a99a206)
Run multiple preprocessors in sequence (8443583)
fix(nuxt): resolve nuxt module paths (#1896) (3c8594f) - thanks @danielroe!
Report unused re-exports when ignoreExportsUsedInFile is set (#1895) (a113a5f) - thanks @mlm20!
Pass -w to pnpm add in sentry ecosystem test (ea8c8ac)
Update sentry snapshot (b75768d)
Record all traversed dirs in glob cache (resolve #1897) (81be1d4)
Invalidate glob cache when .gitignore changes (baff301)
Improve Nuxt and Nitro plugin resolution (86ffab7)
fix: don't treat [-]-c[heck] as config flag for prettier (#1902) (b7266ee) - thanks @davidkna-sap!
Use Entra ID to publish VS Code extension (4236253)
Remove obsolete trust policy exclusions (630d5f9)
Update dependencies (810147b)
Migrate from typescript/native-preview to typescript (140a25a)

`v6.27.0`: Release 6.27.0

Compare Source

Add Temporal plugin (98191a0)
Handle -d alias for react-email dir argument (53d1fec)
Expand pnpm script references with forwarded arguments (33e9799)
Treat path-shaped script tokens as file references, extend known global binaries (d9508c2)
Mark tsdown neverBundle dependencies as referenced (5fd863b)
Support TanStack Start in tanstack-router plugin (bd63cd8)
Mark vite ssr.external dependencies as referenced (91de938)
Expand bun, npm, and yarn script references with forwarded arguments (b5a3176)
Add Latitude as sponsor (4267675)
Regenerate plugin list in docs (1d2cdff)
Support Vue 2 template auto-imports (close #1881) (2157f39)
Ignore block-commented stylesheet imports (resolve #1880, close #1882) (a627f53)
Support TypeScript 5.0 narrowing for ssr.external (989292f)
Resolve local binaries from bun run (5e9a7f0)
Support Vitest inline project config extensions (f682327)
Resolve package names from aliased node_modules paths (c273d5f)
Support Tailwind CSS URL imports (57a4770)
Resolve unbuilt workspace package exports (close #1877) (1b0a2c0)
Skip unresolved imports of gitignored generated files (605c904)
Attribute imports of aliased packages to the declared dependency (d05e775)
Flag unresolvable imports of transitive peer deps as unlisted (resolve #1883) (18f0bff)
Don't count ambient module declarations in script files as imports (e52aecf)
Update rolldown snapshot (a63e927)
Remove obsolete workarounds from ecosystem tests (a521cf7)
Handle snapshotSerializers in Vitest plugin (resolve #1884) (b597de9)
Set the stage (c059c2b)

Configuration

📅 Schedule: (in timezone Europe/London)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-07-24T22:47:14Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@emnapi/core

1.11.2

🟢 3.6

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 6/30 approved changesets -- score normalized to 2
Packaging	⚠️ -1	packaging workflow not detected
Maintained	🟢 10	24 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@emnapi/runtime

1.11.2

🟢 3.6

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 6/30 approved changesets -- score normalized to 2
Packaging	⚠️ -1	packaging workflow not detected
Maintained	🟢 10	24 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@oxc-parser/binding-android-arm-eabi

0.147.0

Unknown

npm/@oxc-parser/binding-android-arm64

0.147.0

Unknown

npm/@oxc-parser/binding-darwin-arm64

0.147.0

Unknown

npm/@oxc-parser/binding-darwin-x64

0.147.0

Unknown

npm/@oxc-parser/binding-freebsd-x64

0.147.0

Unknown

npm/@oxc-parser/binding-linux-arm-gnueabihf

0.147.0

Unknown

npm/@oxc-parser/binding-linux-arm-musleabihf

0.147.0

Unknown

npm/@oxc-parser/binding-linux-arm64-gnu

0.147.0

Unknown

npm/@oxc-parser/binding-linux-arm64-musl

0.147.0

Unknown

npm/@oxc-parser/binding-linux-ppc64-gnu

0.147.0

Unknown

npm/@oxc-parser/binding-linux-riscv64-gnu

0.147.0

Unknown

npm/@oxc-parser/binding-linux-riscv64-musl

0.147.0

Unknown

npm/@oxc-parser/binding-linux-s390x-gnu

0.147.0

Unknown

npm/@oxc-parser/binding-linux-x64-gnu

0.147.0

Unknown

npm/@oxc-parser/binding-linux-x64-musl

0.147.0

Unknown

npm/@oxc-parser/binding-openharmony-arm64

0.147.0

Unknown

npm/@oxc-parser/binding-win32-arm64-msvc

0.147.0

Unknown

npm/@oxc-parser/binding-win32-ia32-msvc

0.147.0

Unknown

npm/@oxc-parser/binding-win32-x64-msvc

0.147.0

Unknown

npm/@oxc-project/types

0.147.0

Unknown

npm/@oxc-resolver/binding-android-arm-eabi

11.24.2

Unknown

npm/@oxc-resolver/binding-android-arm64

11.24.2

Unknown

npm/@oxc-resolver/binding-darwin-arm64

11.24.2

Unknown

npm/@oxc-resolver/binding-darwin-x64

11.24.2

Unknown

npm/@oxc-resolver/binding-freebsd-x64

11.24.2

Unknown

npm/@oxc-resolver/binding-linux-arm-gnueabihf

11.24.2

Unknown

npm/@oxc-resolver/binding-linux-arm-musleabihf

11.24.2

Unknown

npm/@oxc-resolver/binding-linux-arm64-gnu

11.24.2

Unknown

npm/@oxc-resolver/binding-linux-arm64-musl

11.24.2

Unknown

npm/@oxc-resolver/binding-linux-ppc64-gnu

11.24.2

Unknown

npm/@oxc-resolver/binding-linux-riscv64-gnu

11.24.2

Unknown

npm/@oxc-resolver/binding-linux-riscv64-musl

11.24.2

Unknown

npm/@oxc-resolver/binding-linux-s390x-gnu

11.24.2

Unknown

npm/@oxc-resolver/binding-linux-x64-gnu

11.24.2

Unknown

npm/@oxc-resolver/binding-linux-x64-musl

11.24.2

Unknown

npm/@oxc-resolver/binding-openharmony-arm64

11.24.2

Unknown

npm/@oxc-resolver/binding-wasm32-wasi

11.24.2

Unknown

npm/@oxc-resolver/binding-win32-arm64-msvc

11.24.2

Unknown

npm/@oxc-resolver/binding-win32-x64-msvc

11.24.2

Unknown

npm/formatly

0.7.0

Unknown

npm/get-tsconfig

4.14.3

Unknown

npm/knip

6.34.0

Unknown

npm/oxc-parser

0.147.0

Unknown

npm/oxc-resolver

11.24.2

Unknown

npm/package-manager-detector

1.8.0

Unknown

npm/picomatch

4.0.7

🟢 6.7

Details

Check	Score	Reason
Maintained	🟢 10	29 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	🟢 3	Found 6/16 approved changesets -- score normalized to 3
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Security-Policy	🟢 10	security policy file detected
SAST	🟢 6	SAST tool is not run on all commits -- score normalized to 6

npm/smol-toml

1.8.0

Unknown

npm/unbash

4.0.11

Unknown

Scanned Files

pnpm-lock.yaml

socket-security · 2026-09-05T03:39:09Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	knip@6.34.0

View full report

renovate Bot force-pushed the renovate/knip-6.x branch 3 times, most recently from 075e582 to 0ed9c23 Compare July 25, 2026 12:37

renovate Bot changed the title ~~chore(deps): update dependency knip to v6.27.0~~ chore(deps): update dependency knip to v6.29.0 Jul 25, 2026

renovate Bot force-pushed the renovate/knip-6.x branch 6 times, most recently from 00cf8fa to 00eee1e Compare July 25, 2026 19:55

renovate Bot force-pushed the renovate/knip-6.x branch from 00eee1e to edeb3cf Compare August 6, 2026 23:29

renovate Bot changed the title ~~chore(deps): update dependency knip to v6.29.0~~ chore(deps): update dependency knip to v6.31.0 Aug 6, 2026

renovate Bot force-pushed the renovate/knip-6.x branch from edeb3cf to 591158a Compare August 9, 2026 08:15

renovate Bot changed the title ~~chore(deps): update dependency knip to v6.31.0~~ chore(deps): update dependency knip to v6.32.0 Aug 9, 2026

renovate Bot force-pushed the renovate/knip-6.x branch from 591158a to 435f4aa Compare August 15, 2026 07:31

renovate Bot changed the title ~~chore(deps): update dependency knip to v6.32.0~~ chore(deps): update dependency knip to v6.32.2 Aug 15, 2026

chore(deps): update dependency knip to v6.34.0

6bde25a

renovate Bot force-pushed the renovate/knip-6.x branch from 435f4aa to 6bde25a Compare September 5, 2026 03:38

renovate Bot changed the title ~~chore(deps): update dependency knip to v6.32.2~~ chore(deps): update dependency knip to v6.34.0 Sep 5, 2026

Navigation Menu

Uh oh!

chore(deps): update dependency knip to v6.34.0 - #9

chore(deps): update dependency knip to v6.34.0#9
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/knip-6.x

renovate Bot commented Jul 24, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 24, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jul 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v6.34.0: Release 6.34.0

v6.33.0: Release 6.33.0

v6.32.3: Release 6.32.3

v6.32.2: Release 6.32.2

v6.32.1: Release 6.32.1

v6.32.0: Release 6.32.0

v6.31.0: Release 6.31.0

v6.30.0: Release 6.30.0

v6.29.0: Release 6.29.0

v6.28.0: Release 6.28.0

v6.27.0: Release 6.27.0

Configuration

Uh oh!

github-actions Bot commented Jul 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

socket-security Bot commented Sep 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 24, 2026 •

edited

Loading

`v6.34.0`: Release 6.34.0

`v6.33.0`: Release 6.33.0

`v6.32.3`: Release 6.32.3

`v6.32.2`: Release 6.32.2

`v6.32.1`: Release 6.32.1

`v6.32.0`: Release 6.32.0

`v6.31.0`: Release 6.31.0

`v6.30.0`: Release 6.30.0

`v6.29.0`: Release 6.29.0

`v6.28.0`: Release 6.28.0

`v6.27.0`: Release 6.27.0

github-actions Bot commented Jul 24, 2026 •

edited

Loading