Skip to content

chore(deps): update sdk template dependencies - #1915

Open
renovate-appwrite[bot] wants to merge 1 commit into
mainfrom
renovate/sdk-template-dependencies
Open

chore(deps): update sdk template dependencies#1915
renovate-appwrite[bot] wants to merge 1 commit into
mainfrom
renovate/sdk-template-dependencies

Conversation

@renovate-appwrite

@renovate-appwrite renovate-appwrite Bot commented Sep 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@types/node (source) 24.9.2 → 24.19.2 age confidence
@types/node (source) 26.5.1 → 26.6.5 age confidence
@types/readable-stream (source) 4.0.24 → 4.0.25 age confidence
eslint (source) 10.10.0 → 10.12.0 age confidence
mqtt 5.15.2 → 5.16.0 age confidence
prettier (source) 3.9.6 → 3.9.10 age confidence
readable-stream 4.7.0 → 4.8.0 age confidence
rollup (source) 4.63.2 → 4.64.5 age confidence
typescript-eslint (source) 8.70.0 → 8.71.2 age confidence

Release Notes

eslint/eslint (eslint)

v10.12.0

Compare Source

Features
  • 4618052 feat: handle astral letters in new-cap (#​21357) (sary)
  • 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#​21340) (electrohyun)
Bug Fixes
  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#​21373) (Daniel Pinto)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#​21332) (xbinaryx)
  • efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#​21360) (lumir)
  • 93de066 fix: prefer-exponentiation-operator autofix for async function base (#​21322) (Vladimir Babin)
  • 02e34ff fix: add missing space after else in curly autofix (#​21355) (Pixel)
  • b14b8bc fix: correct id-length message for long private names (#​21348) (Pixel)
  • 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#​21335) (xbinaryx)
  • 686630e fix: no-loss-of-precision false positive with 0.e5 (#​21337) (sethamus)
Documentation
  • 67eb586 docs: Update README (GitHub Actions Bot)
  • 5370d7e docs: clarify one-var separateRequires matches any require() call (#​21192) (sethamus)
  • 8816c1d docs: Update README (GitHub Actions Bot)
  • 3d2e7ce docs: fix typo in no-unused-expressions documentation (#​21346) (bytedoe)
Chores
  • 152067f chore: update ecosystem plugins (#​21362) (ESLint Bot)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#​21376) (renovate[bot])
  • bfaea12 perf: cache normalized config globals per languageOptions (#​21364) (James Ross)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#​21369) (Francesco Trotta)
  • d166567 chore: update dependency prettier to v3.9.9 (#​21371) (renovate[bot])
  • 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#​21359) (renovate[bot])
  • 39d79ba chore: update github/codeql-action action to v4.38.1 (#​21354) (renovate[bot])
  • 182a6e9 chore: update dependency prettier to v3.9.8 (#​21352) (renovate[bot])
  • f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#​21339) (Jarren)
  • b95fb6c chore: update dependency prettier to v3.9.7 (#​21347) (renovate[bot])
  • 3782dd4 chore: update ecosystem plugins (#​21342) (ESLint Bot)

v10.11.0

Compare Source

Features
  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#​21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#​21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#​21290) (sethamus)
Bug Fixes
  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#​21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#​21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#​21310) (xbinaryx)
Documentation
  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#​21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#​21294) (Akinyemi Toluwalase)
Chores
  • 520dd77 perf: Implement fast paths in critical areas (#​21210) (Nicholas C. Zakas)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#​21330) (Francesco Trotta)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#​21331) (renovate[bot])
  • 24310e3 chore: update ecosystem plugins (#​21324) (ESLint Bot)
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#​21318) (dependabot[bot])
  • ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#​21221) (Nicholas C. Zakas)
  • c832660 chore: Upgrade Stylelint to the latest version in docs (#​21245) (Jung Hyeon Jun)
  • f9f88fc chore: update ecosystem plugins (#​21308) (ESLint Bot)
  • fc81076 ci: add more types integration tests (#​20395) (Nitin Kumar)
mqttjs/MQTT.js (mqtt)

v5.16.0

Compare Source

⚠ Behaviour change
  • a refused CONNACK now always closes the connection, and the client only retries when reconnectOnConnackError is true. Before, with the default false, the socket was left open and the client usually retried anyway once the broker closed it. Set reconnectOnConnackError: true to keep retrying after a refusal (GHSA-8phv-jwjm-93rr, #​2064, #​2072)
Bug Fixes

5.15.2 (2026-07-06)

Bug Fixes

5.15.1 (2026-03-24)

prettier/prettier (prettier)

v3.9.10

Compare Source

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#​20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

v3.9.9

Compare Source

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#​20140 by @​fisker)
<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.

<!-- Prettier 3.9.8 -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR`from`c.sh`, before anything else runs here.

<!-- Prettier 3.9.9 -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.

v3.9.8

Compare Source

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#​20087 by @​seiyab)
<!-- Input -->
If `module` is not a [`WebAssembly.Module`](/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.

<!-- Prettier 3.9.7 -->
If `module` is not a [`WebAssembly.Module`](/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a

{{jsxref("TypeError")}} is thrown.

<!-- Prettier 3.9.8 -->
If `module` is not a [`WebAssembly.Module`](/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.

v3.9.7

Compare Source

diff

Markdown: Prevent indentation drift in list-item code blocks (#​19647, #​19990 by @​Austin1serb, @​giaBaoJS)
<!-- Input -->
- [x] short first line.

      second paragraph at six spaces that wraps
      onto another line here.

<!-- Prettier 3.9.6 -->
- [x] short first line.

      second paragraph at six spaces that wraps
          onto another line here.

<!-- Prettier 3.9.7 -->
- [x] short first line.

      second paragraph at six spaces that wraps
      onto another line here.
JavaScript: Fix embedded template literal idempotency (#​19725 by @​fisker)
// Input
const foo = html`
            <div>${getText({
            value,
            })}</div>
`;

// Prettier 3.9.6 (first format)
const foo = html`
  <div>
    ${getText({
              value,
            })}
  </div>
`;

// Prettier 3.9.6 (second format)
const foo = html`
  <div>
    ${getText({
      value,
    })}
  </div>
`;

// Prettier 3.9.7
const foo = html`
  <div>
    ${getText({
      value,
    })}
  </div>
`;
Markdown: Preserve Liquid blocks after Markdown tables (#​19730 by @​wanxiankai, @​seiyab)
<!-- Input -->
| Argument | Type |
| -------- | ---- |
{% set default_params = {
    "model": ["str"],
} %}

<!-- Prettier 3.9.6 -->
| Argument                  | Type |
| ------------------------- | ---- |
| {% set default_params = { |

    "model": ["str"],

} %}

<!-- Prettier 3.9.7 -->
| Argument | Type |
| -------- | ---- |
{% set default_params = {
    "model": ["str"],
} %}
Markdown: Preserve single tildes in Markdown (#​19739 by @​lazerg)

Since 3.9.0, single-tilde spans like H~2~O were rewritten to double tildes, turning subscript syntax into strike-through. Only double tildes are treated that way now, matching GitHub.

<!-- Input -->
H~2~O

<!-- Prettier 3.9.6 -->
H~~2~~O

<!-- Prettier 3.9.7 -->
H~2~O
Markdown: Fix Markdown blockquote containing > characters (#​19802 by @​seiyab)
<!-- Input -->
> **test**\>

<!-- Prettier 3.9.6 -->
> **test**>\>

<!-- Prettier 3.9.7 -->
> **test**\>
Markdown: Strip blockquote markers from a setext heading's continuation lines (#​19878 by @​Kjubikstronk)

A setext heading spanning multiple lines inside a blockquote kept the > marker of its continuation lines as literal text.

<!-- Input -->
> Multi
> Line
> ===

<!-- Prettier 3.9.6 -->
> Multi > Line
> ===

<!-- Prettier 3.9.7 -->
> Multi
> Line
> ===
Markdown: Fix HTML block indentation drift in markdown list items (#​19987 by @​lazerg)
<!-- Input -->
1. Enable images:

    <p align="center">
      <img alt="example">
    </p>

<!-- Prettier 3.9.6 (--tab-width=4) -->
1. Enable images:

     <p align="center">
       <img alt="example">
     </p>

<!-- Prettier 3.9.7 (--tab-width=4) -->
1. Enable images:

    <p align="center">
      <img alt="example">
    </p>
Angular: Support @boundary error boundaries (#​20014 by @​Yahiro025)
<!-- Input -->
@&#8203;boundary {
<complex-chart [data]="data"/>
}
@&#8203;error (let err) {
<p>{{err.message}}</p>
}

<!-- Prettier 3.9.6 -->
SyntaxError: Unexpected character "EOF" (Do you have an unescaped "{" in your template? Use "{{ '{' }}") to escape it.) (6:1)

<!-- Prettier 3.9.7 -->
@&#8203;boundary {
  <complex-chart [data]="data" />
} @&#8203;error (let err) {
  <p>{{ err.message }}</p>
}
nodejs/readable-stream (readable-stream)

v4.8.0

Compare Source

What's Changed

New Contributors

Full Changelog: nodejs/readable-stream@v4.7.0...v4.8.0

rollup/rollup (rollup)

v4.64.5

Compare Source

2026-10-10

Bug Fixes
  • Prevent cycles when using indirect top-level await for dynamic imports (#​6516)
Pull Requests

v4.64.4

Compare Source

2026-10-10

Bug Fixes
  • Support the Rollup WASM build on big-endian hosts (#​6559)
Pull Requests

v4.64.3

Compare Source

2026-10-08

Bug Fixes
  • Fix a performance regression when bundling code with deeply nested property calls (#​6565)
Pull Requests

v4.64.2

Compare Source

2026-10-07

Bug Fixes
  • Fix a regression where certain CoreJS helpers were wrongly tree-shaken (#​6562)
  • Do not show errors from closeBundle if there were also build errors (#​6554)
Pull Requests

v4.64.1

Compare Source

2026-10-07

Bug Fixes
  • Slightly improve performance when rendering ES output (#​6534)
Pull Requests

v4.64.0

Compare Source

2026-10-02

Features
  • Improve try-catch deoptimization to cover calling methods on objects (#​6541)
Bug Fixes
  • Fix a situation where some feature-detections of core-js were not triggering properly (#​6541)
Pull Requests

v4.63.6

Compare Source

2026-10-01

Bug Fixes
  • Ensure external reexports are always imported when used in a reified dynamic namespace (#​6540)
Pull Requests

v4.63.5

Compare Source

2026-09-24

Bug Fixes
  • Fix an issue where watch mode would hang instead of terminating when closing via Ctrl+C (#​6521)
  • Avoid starting overlapping watch mode runs when plugins invalidate files at the wrong time (#​6526)
  • Fix many edge cases where watch mode events were not properly emitted to listeners, especially when errors occur (#​6526)
Pull Requests

v4.63.4

Compare Source

2026-09-19

Bug Fixes
  • Ensure meta information of the cached module is exposed in shouldTransformCachedModule (#​6442)
  • Do not create invalid code if import attribute values contain special characters (#​6502)
Pull Requests

v4.63.3

Compare Source

2026-09-14

Bug Fixes
  • Make sure that the internal shims for basename and extname in the browser build fully match NodeJS (#​6473)
  • Always report and recover from failures on invalidation in watch mode (#​6506)
  • Respect windows line terminators when tree-shaking in situations where line-breaks need to be removed to prevent automatic semicolon insertion (#​6514)
Pull Requests
typescript-eslint/typescript-eslint (typescript-eslint)

v8.71.2

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@renovate-appwrite renovate-appwrite Bot added the dependencies Pull requests that update a dependency file label Sep 18, 2026
@greptile-apps

greptile-apps Bot commented Sep 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

RetriggerConfidence Score: 5/5

[High risk] Updates dependencies across SDK template projects.

The PR appears safe to merge; no actionable issue was established in its seven-file changeset.

Summary

This PR updates generated SDK dependency templates for Node, Web, React Native, and PHP.

  • Aligns the three npm lockfile templates with their package manifests.
  • Updates the PHP client dependency range to 0.5.

Reviews (13) · Last reviewed commit: "chore(deps): update sdk template depende..."

@renovate-appwrite
renovate-appwrite Bot force-pushed the renovate/sdk-template-dependencies branch 7 times, most recently from b39abeb to ee9ab88 Compare September 25, 2026 06:29
@renovate-appwrite
renovate-appwrite Bot force-pushed the renovate/sdk-template-dependencies branch from ee9ab88 to d95721a Compare September 26, 2026 06:26
@renovate-appwrite

renovate-appwrite Bot commented Sep 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined
Command failed: ./scripts/update-lockfiles.sh renovate

@renovate-appwrite
renovate-appwrite Bot force-pushed the renovate/sdk-template-dependencies branch 4 times, most recently from 30c4091 to 5e9b776 Compare September 30, 2026 06:29
@hansi-codes

hansi-codes Bot commented Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown

🟡 Tier B · Needs changes before merging

The updated React Native manifest is inconsistent with its committed lockfile, causing clean dependency installs for that SDK to fail.

Updates dependency versions in the Node, Web, and React Native SDK package templates. The Web and Node npm lockfile templates are refreshed alongside the manifests.

Verdict New comments Fixed Still open
🛑 Changes requested 1 0 0
Finding Where
🟠 Refresh the React Native lockfile with these dependency pins templates/react-native/package.json.twig:49
Fix with agent prompt 
### Issue 1
templates/react-native/package.json.twig:49-50
**Refresh the React Native lockfile with these dependency pins**

`templates/react-native/package-lock.json.twig` still records the previous versions for these packages, so generated React Native SDKs fail `npm ci --omit=peer` with `EUSAGE` before installation; I reproduced this with `npm ci --dry-run`. Please regenerate the React Native lockfile template along with this manifest.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.
📂 Walkthrough · 5
File Change
templates/node/package-lock.json.twig Refreshes the Node SDK lockfile template for the updated toolchain dependencies.
templates/node/package.json.twig Updates the Node SDK development dependency pins.
templates/react-native/package.json.twig Updates React Native runtime and development dependency pins.
templates/web/package-lock.json.twig Refreshes the Web SDK lockfile template for the updated dependencies.
templates/web/package.json.twig Updates the Web SDK runtime and development dependency pins.

Reviewed a299528 · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.

hansi-codes[bot]
hansi-codes Bot reviewed Sep 30, 2026
View reviewed changes

@hansi-codes hansi-codes Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Tier S · Looks good to merge. Summary

@renovate-appwrite
renovate-appwrite Bot force-pushed the renovate/sdk-template-dependencies branch from 5e9b776 to ef46466 Compare October 1, 2026 06:30
greptile-apps[bot]
greptile-apps Bot reviewed Oct 1, 2026
View reviewed changes

@greptile-apps greptile-apps Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Your trial has ended. Reactivate Greptile to resume code reviews.

@renovate-appwrite
renovate-appwrite Bot force-pushed the renovate/sdk-template-dependencies branch 4 times, most recently from 978c6d0 to 144cfdd Compare October 6, 2026 06:30
@renovate-appwrite
renovate-appwrite Bot force-pushed the renovate/sdk-template-dependencies branch 6 times, most recently from 3785959 to 1b7d711 Compare October 14, 2026 06:27
@renovate-appwrite
renovate-appwrite Bot force-pushed the renovate/sdk-template-dependencies branch from 1b7d711 to a299528 Compare October 16, 2026 06:27
hansi-codes[bot]
hansi-codes Bot requested changes Oct 16, 2026
View reviewed changes

@hansi-codes hansi-codes Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Tier B · 1 blocking finding to address. Summary

Comment thread templates/react-native/package.json.twig
Comment on lines +49 to +50
"@types/node": "24.19.2",
"@types/readable-stream": "4.0.25",

@hansi-codes hansi-codes Bot Oct 16, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Refresh the React Native lockfile with these dependency pins

templates/react-native/package-lock.json.twig still records the previous versions for these packages, so generated React Native SDKs fail npm ci --omit=peer with EUSAGE before installation; I reproduced this with npm ci --dry-run. Please regenerate the React Native lockfile template along with this manifest.

Prompt To Fix With AI 
This is a comment left during a code review.
Path: templates/react-native/package.json.twig
Line: 49-50

Comment:
**Refresh the React Native lockfile with these dependency pins**

`templates/react-native/package-lock.json.twig` still records the previous versions for these packages, so generated React Native SDKs fail `npm ci --omit=peer` with `EUSAGE` before installation; I reproduced this with `npm ci --dry-run`. Please regenerate the React Native lockfile template along with this manifest.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

🟠 Major · bug · Reply if this doesn't apply.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@greptile-apps greptile-apps[bot] greptile-apps[bot] left review comments
@hansi-codes hansi-codes[bot] hansi-codes[bot] requested changes
@ChiragAgg5k ChiragAgg5k Awaiting requested review from ChiragAgg5k

Requested changes must be addressed to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants