chore(deps): update devdependencies (major)

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Age	Confidence
@antfu/ni	^24.4.0 -> ^26.0.1
lint-staged	^15.5.2 -> ^16.1.6

---

Release Notes

antfu-collective/ni (@​antfu/ni)

v26.0.1

Compare Source

No significant changes

    View changes on GitHub

v26.0.0

Compare Source

   🚨 Breaking Changes

• Requires Node 20+, use OIDC  -  by @​antfu (212c2)

   🚀 Features

• Support zsh completion  -  by @​luoling8192 in #​285 (82611)
• Add comprehensive Deno test support  -  by @​pyyupsk in #​283 (d2b3f)
• nr: Support -p flag to filter monorepo package in completion  -  by @​jinghaihan and @​antfu in #​290 (3d097)

   🐞 Bug Fixes

• De-duplicate last run command  -  by @​Wxh16144 in #​281 (ef210)

    View changes on GitHub

v25.0.0

Compare Source

   🚨 Breaking Changes

• Rename nu command to nup  -  by @​KaBankz in #​278 (61043)

    View changes on GitHub

lint-staged/lint-staged (lint-staged)

v16.1.6

Compare Source

Patch Changes

• #​1610 e93578e Thanks @​iiroj! - Try to improve terminating of subprocess of tasks by using SIGKILL, and only calling pidtree when the the main task process has a known pid.

v16.1.5

Compare Source

Patch Changes

• #​1608 4e3ce22 Thanks @​srsatt! - Detect the git repo's top-level directory correctly when in a worktree.

v16.1.4

Compare Source

Patch Changes

• #​1604 90b37b0 Thanks @​iiroj! - Add another types field to package.json to make even more sure NPM detects that lint-staged includes built-in TypeScript type definitions.

v16.1.3

Compare Source

Patch Changes

• #​1602 7ea700b Thanks @​dword-design! - Add the types field to package.json to make sure NPM detects lint-staged includes built-in TypeScript type definitions.

v16.1.2

Compare Source

Patch Changes

• #​1570 a7c0c88 Thanks @​ItsNickBarry! - When using --diff-filter with the D option to include deleted staged files, lint-staged no longer tries to stage the deleted files, unless they're no longer deleted. Previously this caused an error from git add like fatal: pathspec 'deleted-file' did not match any files.

• 38f942e Thanks @​iiroj! - Removed an extraneous log entry that printed shouldHidePArtiallyStagedFiles to console output.

v16.1.1

Compare Source

Patch Changes

• #​1565 3686977 Thanks @​iiroj! - Lint-staged now explicitly warns about potential data loss when using --no-stash.

• #​1571 02299a9 Thanks @​iiroj! - Function tasks (introduced in v16.0.0) only received the staged files matching the conpmnfigured glob, instead of all staged files.

• #​1563 bc61c74 Thanks @​iiroj! - This version fixes incorrect behavior where unstaged changes were committed when using the --no-stash option. This happened because --no-stash implied --no-hide-partially-staged, meaning unstaged changes to files which also had other staged changes were added to the commit by lint-staged; this is no longer the case.

  The previous (incorrect) behavior can still be achieved by using both options --no-stash --no-hide-partially-staged at the same time.

v16.1.0

Compare Source

Minor Changes

• #​1536 e729daa Thanks @​iiroj! - A new flag --no-revert has been introduced for when task modifications should be applied to the index before aborting the commit in case of errors. By default, lint-staged will clear all task modifications and revert to the original state.

• #​1550 b27fa3f Thanks @​iiroj! - Lint-staged now ignores symlinks and leaves them out from the list of staged files.

Patch Changes

• #​1558 c37dc38 Thanks @​iiroj! - The minimum required Node.js version is lowered to 20.17 following [email protected].

v16.0.0

Compare Source

Major Changes

• #​1546 158d15c Thanks @​iiroj! - Processes are spawned using nano-spawn instead of execa. If you are using Node.js scripts as tasks, you might need to explicitly run them with node, especially when using Windows:

  {
    "*.js": "node my-js-linter.js"
  }

• #​1546 158d15c Thanks @​iiroj! - The --shell flag has been removed and lint-staged no longer supports evaluating commands directly via a shell. To migrate existing commands, you can create a shell script and invoke it instead. Lint-staged will pass matched staged files as a list of arguments, accessible via "$@​":

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for elk-docs canceled.

Name	Link
🔨 Latest commit	9da3e5c
🔍 Latest deploy log	https://app.netlify.com/projects/elk-docs/deploys/68cc4b1bac89270008223a6c

[netlify]

✅ Deploy Preview for elk-zone ready!

Name	Link
🔨 Latest commit	9da3e5c
🔍 Latest deploy log	https://app.netlify.com/projects/elk-zone/deploys/68cc4b1c37bf1f0008b93935
😎 Deploy Preview	https://deploy-preview-3365--elk-zone.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

[shuuji3]

[email protected] should be safe and it seems to be a false positive caused by strings in the test code. It's dependency of [email protected] packages and not updated since 7 years ago. iconv-lite removed it (pillarjs/iconv-lite#265) so it will be eliminated eventually.

|> pnpm why [email protected]
Legend: production dependency, optional only, dev only

@elk-zone/[email protected] /home/shuuji3/dev/elk

dependencies:
@vue-macros/nuxt 1.11.12
└─┬ nuxt 3.18.1 peer
  └─┬ nitropack 2.12.4
    ├─┬ @netlify/functions 3.1.10
    │ └─┬ @netlify/zip-it-and-ship-it 12.2.0
    │   └─┬ @vercel/nft 0.29.4
    │     └─┬ @mapbox/node-pre-gyp 2.0.0
    │       └─┬ node-fetch 2.7.0
    │         └─┬ encoding 0.1.13 peer
    │           └─┬ iconv-lite 0.6.3
    │             └── safer-buffer 2.1.2
    └─┬ @vercel/nft 0.29.4
      └─┬ @mapbox/node-pre-gyp 2.0.0
        └─┬ node-fetch 2.7.0
          └─┬ encoding 0.1.13 peer
            └─┬ iconv-lite 0.6.3
              └── safer-buffer 2.1.2
@vueuse/nuxt 13.2.0
└─┬ nuxt 3.18.1 peer
  └─┬ nitropack 2.12.4
    ├─┬ @netlify/functions 3.1.10
    │ └─┬ @netlify/zip-it-and-ship-it 12.2.0
    │   └─┬ @vercel/nft 0.29.4
    │     └─┬ @mapbox/node-pre-gyp 2.0.0
    │       └─┬ node-fetch 2.7.0
    │         └─┬ encoding 0.1.13 peer
    │           └─┬ iconv-lite 0.6.3
    │             └── safer-buffer 2.1.2
    └─┬ @vercel/nft 0.29.4
      └─┬ @mapbox/node-pre-gyp 2.0.0
        └─┬ node-fetch 2.7.0
          └─┬ encoding 0.1.13 peer
            └─┬ iconv-lite 0.6.3
              └── safer-buffer 2.1.2
cheerio 1.0.0
└─┬ encoding-sniffer 0.2.0
  ├─┬ iconv-lite 0.6.3
  │ └── safer-buffer 2.1.2
  └─┬ whatwg-encoding 3.1.1
    └─┬ iconv-lite 0.6.3
      └── safer-buffer 2.1.2

devDependencies:
nuxt 3.18.1
└─┬ nitropack 2.12.4
  ├─┬ @netlify/functions 3.1.10
  │ └─┬ @netlify/zip-it-and-ship-it 12.2.0
  │   └─┬ @vercel/nft 0.29.4
  │     └─┬ @mapbox/node-pre-gyp 2.0.0
  │       └─┬ node-fetch 2.7.0
  │         └─┬ encoding 0.1.13 peer
  │           └─┬ iconv-lite 0.6.3
  │             └── safer-buffer 2.1.2
  └─┬ @vercel/nft 0.29.4
    └─┬ @mapbox/node-pre-gyp 2.0.0
      └─┬ node-fetch 2.7.0
        └─┬ encoding 0.1.13 peer
          └─┬ iconv-lite 0.6.3
            └── safer-buffer 2.1.2