Skip to content

Pin dependencies#10

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/routine-updates
Open

Pin dependencies#10
renovate[bot] wants to merge 1 commit intomainfrom
renovate/routine-updates

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 6, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
@convex-dev/eslint-plugin (source) devDependencies pin ^1.1.1 → 1.1.1 age confidence
@edge-runtime/vm (source) devDependencies pin ^5.0.0 → 5.0.0 age confidence
@eslint/eslintrc devDependencies pin ^3.3.1 → 3.3.3 age confidence
@eslint/js (source) devDependencies patch 9.39.1 → 9.39.4 age confidence
@types/node (source) devDependencies pin ^24.10.4 → 24.10.8 age confidence
@types/react (source) devDependencies pin ^19.2.7 → 19.2.8 age confidence
@types/react-dom (source) devDependencies pin ^19.2.3 → 19.2.3 age confidence
@vitejs/plugin-react (source) devDependencies pin ^5.1.1 → 5.1.2 age confidence
actions/checkout (changelog) action digest 1af3b93 → de0fac2
actions/setup-node (changelog) action digest 2028fbc → 48b55a0
convex (source) devDependencies minor 1.31.0 → 1.35.1 age confidence
convex-test (source) devDependencies patch 0.0.40 → 0.0.49 age confidence
cpy-cli devDependencies pin ^7.0.0 → 7.0.0 age confidence
eslint (source) devDependencies patch 9.39.1 → 9.39.4 age confidence
eslint-plugin-react devDependencies pin ^7.37.5 → 7.37.5 age confidence
eslint-plugin-react-hooks (source) devDependencies pin ^7.0.1 → 7.0.1 age confidence
eslint-plugin-react-refresh devDependencies pin ^0.4.24 → 0.4.26 age confidence
globals devDependencies pin ^17.0.0 → 17.0.0 age confidence
pkg-pr-new (source) devDependencies pin ^0.0.60 → 0.0.60 age confidence
prettier (source) devDependencies minor 3.6.2 → 3.8.3 age confidence
react (source) devDependencies pin ^19.2.1 → 19.2.3 age confidence
react-dom (source) devDependencies pin ^19.2.1 → 19.2.3 age confidence
typescript-eslint (source) devDependencies minor 8.47.0 → 8.58.2 age confidence
vite (source) devDependencies minor 7.2.6 → 7.3.2 age confidence
vitest (source) devDependencies minor 4.0.17 → 4.1.4 age confidence

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

Release Notes

eslint/eslint (@​eslint/js)

v9.39.4

Compare Source

v9.39.3

Compare Source

Bug Fixes

  • 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

v9.39.2

Compare Source

get-convex/convex-backend (convex)

v1.35.1

  • Adds support for automatic preview deployments on Cloudflare Pages
  • Removes a new API in useQuery that was accidentally included as part
    of the 1.35.0 release.

v1.35.0

  • You can now create and select local deployments explicitly with the CLI:
    • npx convex deployment create local --select: initialize local development.
    • npx convex deployment select dev: switch to your cloud dev deployment.
    • npx convex deployment select local: switch back to your local deployment.
    • To run a single command on your local deployment, use --deployment local.
  • npx convex deployment create now has a --expiration flag allowing you to
    create temporary dpeloyments.
  • Components can now define HTTP routes in their own http.ts file. The routes
    exposed by a component are accessible through a URL prefix that isolates them
    from the other HTTP routes (e.g.
    app.use(component, { httpPrefix: "/foo" })).
  • npx convex dev now supports a new --start flag that runs a command in
    parallel with the Convex dev server (e.g. npx convex dev --start 'vite').
    This new option can be used to simplify the dev command of most projects.
    This flag was previously called --run-sh, and used to not allow long-running
    commands; now, --run-sh is an alias of --start.
  • Defaults non-interactive commands to target an anonymous deployment if one is
    not configured or specified by the deploy key. This enables coding agents to
    more easily develop without needing the CONVEX_AGENT_MODE env variable. By
    default, the CLI will avoid prompting in non-interactive terminals when
    possible.
  • You can now develop against your anonymous local deployments even when logged
    in. You will be prompted to link the deployment to a project if the terminal
    is interactive.
  • Enables npx convex deployment create when you don't yet have a project.
  • Improved formatting of sizes in error messages.
  • Changes the default codegen to use the component's ComponentApi type instead
    of static code generation for components in _generated/api.d.ts. To get the
    old behavior, set { "codegen": { "legacyComponentApi": true } } in
    convex.json.
  • Fixed a bug where npx convex dev would not use the correct deployment after
    running npx convex deployment select.
  • Improved the definition of the AnyDataModel type to support using default
    indexes (by_id, by_creation_time) in a typesafe way.

v1.34.1

  • Hides the --yes flag on npx convex deploy to discourage YOLO agents being
    run in privileged environments from pushing to production.
  • Improves client backoff strategy to reconnect more quickly. The changes in
    1.34.0 did not correctly reset backoff sufficiently after reconnect.
  • AI files will not be installed by default in non-interactive environments.
  • Disabling AI files is now tracked with an "enabled" flag in convex.json that
    hides nags for initial setup and updates when set to false.
  • Fix ai-files re-prompting to install files on setup when they already exist.
  • Fix local deployments returning stale credentials when ports change.

v1.34.0

  • The CLI can now automatically provide Convex AI context files
    (AGENTS.md, CLAUDE.md, guidelines/state files) to your project when using npx convex dev.
    You can manage Convex AI files using the new npx convex ai-files command:
    • npx convex ai-files install - Install or refresh AI files
    • npx convex ai-files update - Update to latest available AI files
    • npx convex ai-files status - Show what is installed and what is stale
    • npx convex ai-files disable - Suppress install and staleness messages in npx convex dev
    • npx convex ai-files enable - Re-enable install and staleness messages
    • npx convex ai-files remove - Remove Convex-managed AI files
  • Adds new npx convex deployment commands:
    • npx convex deployment create allows you to create new cloud deployments for a project
    • npx convex deployment select allows you to select the deployment to use in your project
      directory when running commands
  • CLI commands now support the --deployment flag to select a deployment to target.
    It accepts a deployment name (e.g. joyful-capybara-123), ref (e.g. dev/james), dev (for
    your personal dev deployment), or prod (for your project’s default production deployment). You
    can also select deployments in other projects with project-slug:ref or team-slug:project-slug:ref.
  • Improves websocket client backoff behavior.
  • No longer recreates convex/README.md when convex/ already exists.

v1.33.1

  • Fixes the ConvexProviderWithClerk to fetch the JWT template
    if the (new) Convex integration is not enabled. It is safe to
    both set the JWT template and enable the integration.
    In 1.33.0 it broke if you only had the JWT template specified.

v1.33.0

  • npx convex env set can now:
    • Accept a value interactively
    • Accept a value via --from-file
    • Set multiple variables at once via --from-file or stdin, e.g.
      npx convex env set < .env.defaults. This will refuse if any existing
      values don't match, unless --force is provided. It will not set convex-
      managed variables, such as CONVEX_DEPLOYMENT or VITE_CONVEX_URL.
    • Auto-start a local backend while setting environment variables if it isn't
      running already.
  • npx convex env list now emits a more robust format for multi-line and other
    complex environment variables, so you can do:
    npx convex env list > .env.convex from one deployment, then
    npx convex env set < .env.convex on another.
    This format is also now available on the Dashboard.
  • npx convex run will auto-start a local backend if necessary, for the
    duration of the call.
  • getConvexSize will now return 0 for undefined, even though it isn't
    stictly a Value (it is not serialized for documents, arguments, or results).
  • Passing --env-file to the CLI works more reliably for specifying the target
    deployment.
  • Improves the types of _generated/api to avoid infinite recursion when you have
    a file and folder with the same name in your convex/ folder.
  • Adds npx convex init as a command that will go through the interactive
    deployment selection process, if a deployment isn't already configured, but
    not push code. This is useful for predev package.json scripts that want to
    do interactive selection steps before running the frontend and backend in
    parallel. It also enables agents to initialize and set environment variables: 
    export CONVEX_AGENT_MODE=anonymous
npx convex init
convex env set < .env.defaults
  • No longer overwrites the tsconfig.json and README.md files in the
    convex/ folder when configuring a new deployment, only when first creating
    the convex/ folder.

v1.32.0

  • Improved the API documentation with more examples to help AI agents.

  • Added a new npx convex insights CLI command to show the insights
    for a deployment.

  • Added insights MCP tool for diagnosing OCC conflicts and resource limit issues
    on cloud deployments.

  • The insights MCP tool works on production deployments without requiring
    --dangerously-enable-production-deployments.

  • When using a local Convex backend (local dev deployment, agent mode or
    anonymous mode), the deployment’s data is now stored in a .convex
    directory in the project root (instead of ~/.convex). This change
    is helpful when using multiple worktrees, since each worktree can get
    its own isolated storage. Existing local deployments are not affected.

  • Added new options maximumRowsRead and maximumBytesRead
    to PaginationOptions to get more fine-grained control over
    the number of rows read when using pagination.

  • When creating a new dev deployment, the Convex CLI now asks you which
    deployment region you want to use if you haven’t set a team default.

  • Increased the default value for authRefreshTokenLeewaySeconds
    to 10 seconds.

  • The CLI now uses VITE_CONVEX_* environment variables when using Remix
    alongside Vite, instead of CONVEX_*.

  • Fixed an issue where the CLI would sometimes be affected by GitHub API
    rate limits when downloading the local deployment binary.

  • Fixed an issue where websockets would disconnect when using Bun.

  • Fixed an issue with the WorkOS integration that caused crashes
    when running npx convex deploy with a deployment that has
    its own WorkOS credentials.

  • Fixed an issue with the WorkOS integration where the
    WORKOS_API_KEY environment variable from the shell
    would incorrectly be used.

  • Fixed an issue where some modifications to auth.config.ts
    would cause the push process to fail.

  • Fixed an issue on Windows that caused arrow key presses to be ignored when the “cloud or local deployment” prompt is shown.

v1.31.7

  • Add getConvexSize and getDocumentSize functions to convex/values for
    calculating the size of Convex values in bytes. This is the same size
    calculation used for bandwidth tracking and document size limits.
  • Optimize code push to only upload changed modules.
  • Include CONVEX_SITE_URL in environment variables.

v1.31.6

  • Added a new
    authKit
    field in convex.json that allows you to customize the automatic provisioning
    and configuration of WorkOS environments.
  • The CLI now warns you when using a Node.js version older than Node.js 20.
  • Improved error messages when requests fail in the MCP server.
  • Improved the error message when creating a component with an invalid name.

v1.31.5

  • Exclude source code content from bundled sourcemaps by default. This reduces
    the size of the bundled pushed by npx convex dev and npx convex deploy to
    make them run faster.
  • This version drops support for Node.js 18. Please update to Node.js 20 or
    newer.

v1.31.4

v1.31.3

  • CONVEX_AGENT_MODE=anonymous can now be used while logged in.

  • The client will try to reconnect immediately after being offline instead of
    waiting for the scheduled backoff delay.

  • Optimize bundling during code push, and add includeSourcesContent option in
    convex.json to configure whether to include source code content in bundled
    sourcemaps.

v1.31.2

  • Bug fix: the TypeScript types of the new ctx.db APIs introduced in 1.31.0
    incorrectly allowed passing IDs with types broader than the table name
    argument (e.g. db.get("table1", id) where id is
    Id<"table1"> | Id<"table2">). This issue is fixed in 1.31.2.

v1.31.1

get-convex/convex-test (convex-test)

v0.0.49

Compare Source

  • Changes the test ID formatting to not include a ; and be the
    standard length of regular IDs for folks who have validators.

v0.0.48

Compare Source

  • Add implementations for internal syscalls for upcoming ctx.meta
    features (ctx.meta.{getFunctionMetadata,getTransactionMetrics})

v0.0.47

Compare Source

  • Fix: Isolate function stack tracking between parallel function calls
    to prevent corruption when calling different components in parallel.
    This may have presented previously as not being able to find modules
    that existed but were being resolved for the wrong component.

v0.0.46

Compare Source

  • Changes finishAllScheduledFunctions to pump the macrotask queue instead
    of microtask queue to enable dynamic imports to resolve, which regressed
    in 0.0.45.

v0.0.45

Compare Source

  • Replaces global usage with AsyncLocalStorage-scoped test state for isolation.
    Now tests shouldn't fail due to dirty state left behind by other tests.
  • Better support for setTimeout usage within tested functions
  • Improves typing for inline calls to t.mutation(() => {}) to be a union
    instead of overload so TestConvex<SpecificSchema> is assignable to
    TestConvex<GenericSchema>.

v0.0.44

Compare Source

  • More correctly implements nested transactions and parallel calls.
  • Starts validating return validators.
  • Propagates auth more correctly between callsites-not scheduler or components.

v0.0.43

Compare Source

  • Support pagination when documents may be deleted by using the values as the cursor
    instead of the ID.

v0.0.41

Compare Source

  • Removes ActionCtx support for now. Calling component actions was not working correctly.
eslint/eslint (eslint)

v9.39.4

Compare Source

Bug Fixes

Documentation

Chores

v9.39.3

Compare Source

Bug Fixes

  • 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

v9.39.2

Compare Source

prettier/prettier (prettier)

v3.8.3

Compare Source

v3.8.2

Compare Source

v3.8.1

Compare Source

v3.8.0

Compare Source

diff

🔗 Release note

v3.7.4

Compare Source

diff

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)
<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>
TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)
// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;
TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)
// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

v3.7.3

Compare Source

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#​18375 by @​fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

v3.7.2

Compare Source

diff

JavaScript: Fix string print when switching quotes (#​18351 by @​fisker)
// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")

// Prettier 3.7.1
console.log('A descriptor\\'s .kind must be "method" or "field".');

// Prettier 3.7.2
console.log('A descriptor\\\'s .kind must be "method" or "field".');
JavaScript: Preserve quote for embedded HTML attribute values (#​18352 by @​kovsu)
// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

// Prettier 3.7.1
const html = /* HTML */ ` <div class=${styles.banner}></div> `;

// Prettier 3.7.2
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;
TypeScript: Fix comment in empty type literal (#​18364 by @​fisker)
// Input
export type XXX = {
  // tbd
};

// Prettier 3.7.1
export type XXX = { // tbd };

// Prettier 3.7.2
export type XXX = {
  // tbd
};

v3.7.1

Compare Source

diff

API: Fix performance regression in doc printer (#​18342 by @​fisker)

Prettier 3.7.1 can be very slow when formatting big files, the regression has been fixed.

v3.7.0

Compare Source

diff

🔗 Release Notes

typescript-eslint/typescript-eslint (typescript-eslint)

v8.58.2

Compare Source

🩹 Fixes
  • remove tsbuildinfo cache file from published packages (#​12187)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.0

Compare Source

🚀 Features
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.2

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.0

Compare Source

🚀 Features
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.54.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.52.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.51.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.50.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.50.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.49.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.48.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.48.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v7.3.2

Compare Source

Please refer to CHANGELOG.md for details.

v7.3.1

Compare Source

Please refer to CHANGELOG.md for details.

v7.3.0

Compare Source

Please refer to CHANGELOG.md for details.

v7.2.7

Compare Source

vitest-dev/vitest (vitest)

v4.1.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v4.1.3

Compare Source

   🚀 Experimental Features
   🐞 Bug Fixes

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • Monday through Friday (* * * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new bot commented Apr 6, 2026 •
edited
Loading

Open in StackBlitz

npm i https://pkg.pr.new/get-convex/static-hosting/@convex-dev/static-hosting@10

commit: 390c33d

@renovate renovate bot force-pushed the renovate/routine-updates branch 3 times, most recently from 5718340 to 496f7e7 Compare April 19, 2026 03:01
@renovate renovate bot force-pushed the renovate/routine-updates branch from 496f7e7 to 390c33d Compare April 20, 2026 04:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants