fix(deps): pin dependencies by renovate[bot] · Pull Request #2040 · yamcodes/arkenv

renovate · 2026-10-08T20:02:22Z

This PR contains the following updates:

Package	Type	Update	Change
@babel/core (source)	devDependencies	pin	`^7.29.7` → `7.29.7`
@eslint/js (source)	devDependencies	pin	`^10.0.1` → `10.0.1`
@getdashfy/ext-github	dependencies	pin	`^0.2.1` → `0.2.1`
@getdashfy/ext-json	dependencies	pin	`^0.2.2` → `0.2.2`
@getdashfy/server (source)	dependencies	pin	`^0.2.0` → `0.2.0`
@getdashfy/ui (source)	dependencies	pin	`^0.3.1` → `0.3.1`
@nuxt/kit (source)	devDependencies	pin	`^4.4.8` → `4.6.1`
@nuxt/schema (source)	devDependencies	pin	`^4.4.8` → `4.6.1`
@rolldown/plugin-babel (source)	devDependencies	pin	`^0.2.3` → `0.2.4`
@solidjs/start (source)	dependencies	pin	`^2.0.4` → `2.0.6`
@tanstack/create (source)	devDependencies	pin	`^0.70.0` → `0.70.1`
@types/babel__core (source)	devDependencies	pin	`^7.20.5` → `7.20.5`
@types/ejs (source)	devDependencies	pin	`^3.1.5` → `3.1.5`
@types/rss (source)	devDependencies	pin	`^0.0.32` → `0.0.32`
@vitejs/plugin-react (source)	devDependencies	pin	`^6.0.1` → `6.1.2`
babel-plugin-react-compiler (source)	devDependencies	pin	`^1.0.0` → `1.0.0`
concurrently	devDependencies	pin	`^10.0.0` → `10.0.6`
ejs	devDependencies	pin	`^6.0.0` → `6.0.1`
eslint (source)	devDependencies	pin	`^10.2.1` → `10.12.0`
eslint-plugin-react-hooks (source)	devDependencies	pin	`^7.1.1` → `7.1.1`
eslint-plugin-react-refresh	devDependencies	pin	`^0.5.2` → `0.5.7`
fumadocs-typescript	dependencies	pin	`^5.2.6` → `5.5.1`
geist (source)	dependencies	pin	`^1.7.2` → `1.7.2`
globals	devDependencies	pin	`^17.5.0` → `17.13.0`
nitropack	devDependencies	pin	`^2.13.1` → `2.13.4`
nuxt (source)	devDependencies	pin	`^4.5.1` → `4.6.1`
nuxt (source)	dependencies	pin	`^4.5.1` → `4.6.1`
octokit	dependencies	pin	`^5.0.5` → `5.0.5`
rss	dependencies	pin	`^1.2.2` → `1.2.2`
typescript-eslint (source)	devDependencies	pin	`^8.58.2` → `8.71.1`

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

Configuration

📅 Schedule: (in timezone Asia/Almaty)

Branch creation
- "on friday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2026-10-08T20:02:34Z

🦋 Changeset detected

Latest commit: c9e1ca5

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@arkenv/nuxt	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Hosted Renovate updates `package.json` and leaves `nub.lock` unchanged. CI's frozen `nub install` then exits 16 with `ERR_NUB_OUTDATED_LOCKFILE`, so every job on those PRs fails before the tests run. Autofix now runs `nub install --lockfile-only` first. That command is allowed to rewrite `nub.lock` in CI, and autofix.ci commits it when it changes. The following CI run installs from that file. `TODO(2057)` on that step tracks removing it once [renovatebot/renovate#44422](renovatebot/renovate#44422) is on the hosted Mend app. Tracking issue: #2057. After this merges, re-run the autofix workflow on the open Renovate PRs so each one picks up its lockfile: - #2050 ejs - #2049 concurrently - #2047 `@testing-library/jest-dom` - #2044 `@ark/util` - #2040 pin dependencies - #2039 pin `@types/react` - #2033 vite - #2032 nuxt - #2031 postcss #1862 is already green.  <div><a href="https://cursor.com/agents/bc-e611d05f-b29d-45ff-bb31-b4388577036b?cursor_ref=pr_footer&cursor_cta=open_in_web"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-web-light.png"><img alt="Open in Web" width="114" height="28" src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a href="https://cursor.com/background-agent?bcId=bc-e611d05f-b29d-45ff-bb31-b4388577036b&cursor_ref=pr_footer&cursor_cta=open_in_cursor"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img alt="Open in Cursor" width="131" height="28" src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div> --------- Co-authored-by: Cursor Agent <[email protected]>

Autofix rewrites `nub.lock` with `nub install --lockfile-only`, then the other jobs can install. That rewrite aborts when the resolve wants a version younger than 24 hours (`ERR_NUB_NO_MATURE_MATCHING_VERSION`). On #2040 that version is `[email protected]`. Autofix never commits the lockfile, so `pkg-pr-new`, `check-sync`, and the test jobs stay on `ERR_NUB_OUTDATED_LOCKFILE`. This passes `--minimum-release-age=0` on that refresh only, which is the off switch Nub documents for the age gate. The following `nub install` in the same job, and every other workflow, still use the normal gate. `TODO(2057)` covers removing the step, including this flag, once [renovatebot/renovate#44422](renovatebot/renovate#44422) is on the hosted Mend app. After this merges, re-run autofix on #2040. The follow-up run is the one that can install.  <div><a href="https://cursor.com/agents/bc-e611d05f-b29d-45ff-bb31-b4388577036b?cursor_ref=pr_footer&cursor_cta=open_in_web"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-web-light.png"><img alt="Open in Web" width="114" height="28" src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a href="https://cursor.com/background-agent?bcId=bc-e611d05f-b29d-45ff-bb31-b4388577036b&cursor_ref=pr_footer&cursor_cta=open_in_cursor"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img alt="Open in Cursor" width="131" height="28" src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div> Co-authored-by: Cursor Agent <[email protected]>

pkg-pr-new · 2026-10-09T18:18:30Z

Open in StackBlitz

@arkenv/agent-plugin

npm i https://pkg.pr.new/@arkenv/agent-plugin@2040

arkenv

npm i https://pkg.pr.new/arkenv@2040

@arkenv/build

npm i https://pkg.pr.new/@arkenv/build@2040

@arkenv/bun-plugin

npm i https://pkg.pr.new/@arkenv/bun-plugin@2040

@arkenv/core

npm i https://pkg.pr.new/@arkenv/core@2040

@arkenv/fumadocs-ui

npm i https://pkg.pr.new/@arkenv/fumadocs-ui@2040

@arkenv/nextjs

npm i https://pkg.pr.new/@arkenv/nextjs@2040

@arkenv/nuxt

npm i https://pkg.pr.new/@arkenv/nuxt@2040

@arkenv/rsbuild-plugin

npm i https://pkg.pr.new/@arkenv/rsbuild-plugin@2040

@arkenv/standard

npm i https://pkg.pr.new/@arkenv/standard@2040

@arkenv/tanstack-addon

npm i https://pkg.pr.new/@arkenv/tanstack-addon@2040

@arkenv/vite-plugin

npm i https://pkg.pr.new/@arkenv/vite-plugin@2040

commit: c9e1ca5

arkenv-bot · 2026-10-09T18:18:57Z

📦 Bundle Size Report

No results found

✅ All size limits passed!

renovate · 2026-10-10T03:28:48Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Nuxt 4.6 types nitro:config as NitroConfig, which falls back to NitroConfigFallback and no longer allows a second hook declaration. Keep registering the server boot alias without redeclaring the hook. Co-authored-by: Yam Borodetsky <[email protected]>

Pin fumadocs-typescript to 5.4.1 so it stays compatible with fumadocs-core 16.15.14, and sync the Nuxt and SolidStart example manifests with the pinned playgrounds. Co-authored-by: Yam Borodetsky <[email protected]>

Keep the Nuxt 4.6 hook fix and the fumadocs-typescript 5.4.1 pin on top of the chokidar and fumadocs-mdx updates. Co-authored-by: Yam Borodetsky <[email protected]>

@yamcodes

This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to v1, this PR will be updated. ⚠️

⚠️

⚠️ `v1` is currently in **pre mode** so this branch has prereleases rather than normal releases. If you want to exit prereleases, run `changeset pre exit` on `v1`. ⚠️

⚠️

⚠️ # Releases ## @arkenv/[email protected] ### Patch Changes - #### Include 1.0.0 prereleases in framework plugin core peers _[`#2069`](#2069) [`222d8e9`](222d8e9) [@yamcodes](https://github.com/yamcodes)_ Optional `@arkenv/core` and `@arkenv/standard` peers on the Next.js, Nuxt, Vite, Bun, and Rsbuild plugins now use `^1.0.0-0`. Installing a plugin together with `@arkenv/[email protected]` and `@arkenv/[email protected]` resolves on npm 11. The peers stay optional. The range matches `1.0.0` prereleases and stable 1.x below `2.0.0`. ```bash npm install @arkenv/nuxt @arkenv/[email protected] @arkenv/[email protected] ``` ```json { "peerDependencies": { "@arkenv/core": "^1.0.0-0", "@arkenv/standard": "^1.0.0-0" }, "peerDependenciesMeta": { "@arkenv/core": { "optional": true }, "@arkenv/standard": { "optional": true } } } ``` ## @arkenv/[email protected] ### Patch Changes - #### Include 1.0.0 prereleases in framework plugin core peers _[`#2069`](#2069) [`222d8e9`](222d8e9) [@yamcodes](https://github.com/yamcodes)_ Optional `@arkenv/core` and `@arkenv/standard` peers on the Next.js, Nuxt, Vite, Bun, and Rsbuild plugins now use `^1.0.0-0`. Installing a plugin together with `@arkenv/[email protected]` and `@arkenv/[email protected]` resolves on npm 11. The peers stay optional. The range matches `1.0.0` prereleases and stable 1.x below `2.0.0`. ```bash npm install @arkenv/nuxt @arkenv/[email protected] @arkenv/[email protected] ``` ```json { "peerDependencies": { "@arkenv/core": "^1.0.0-0", "@arkenv/standard": "^1.0.0-0" }, "peerDependenciesMeta": { "@arkenv/core": { "optional": true }, "@arkenv/standard": { "optional": true } } } ``` ## @arkenv/[email protected] ### Patch Changes - #### Include 1.0.0 prereleases in framework plugin core peers _[`#2069`](#2069) [`222d8e9`](222d8e9) [@yamcodes](https://github.com/yamcodes)_ Optional `@arkenv/core` and `@arkenv/standard` peers on the Next.js, Nuxt, Vite, Bun, and Rsbuild plugins now use `^1.0.0-0`. Installing a plugin together with `@arkenv/[email protected]` and `@arkenv/[email protected]` resolves on npm 11. The peers stay optional. The range matches `1.0.0` prereleases and stable 1.x below `2.0.0`. ```bash npm install @arkenv/nuxt @arkenv/[email protected] @arkenv/[email protected] ``` ```json { "peerDependencies": { "@arkenv/core": "^1.0.0-0", "@arkenv/standard": "^1.0.0-0" }, "peerDependenciesMeta": { "@arkenv/core": { "optional": true }, "@arkenv/standard": { "optional": true } } } ``` - #### Compile the Nuxt schema into the Nitro server bundle _[`#2073`](#2073) [`f882c42`](f882c42) [@yamcodes](https://github.com/yamcodes)_ Production startup and prerender now validate the schema compiled into the server bundle. A copied `.output` directory no longer reads the build-machine `env.ts` and no longer needs `jiti`. Live `NUXT_*` and `NUXT_PUBLIC_*` overrides, including empty strings, still win over values baked at build time. - #### Fix Nuxt 4.6 `nitro:config` hook types _[`#2040`](#2040) [`17ff351`](17ff351) [@renovate](https://github.com/apps/renovate)_ `@arkenv/nuxt` typechecks again with Nuxt 4.6. The module no longer redeclares the `nitro:config` hook, which now uses Nuxt's `NitroConfig` type, and still registers the server boot alias on that hook. ## @arkenv/[email protected] ### Patch Changes - #### Include 1.0.0 prereleases in framework plugin core peers _[`#2069`](#2069) [`222d8e9`](222d8e9) [@yamcodes](https://github.com/yamcodes)_ Optional `@arkenv/core` and `@arkenv/standard` peers on the Next.js, Nuxt, Vite, Bun, and Rsbuild plugins now use `^1.0.0-0`. Installing a plugin together with `@arkenv/[email protected]` and `@arkenv/[email protected]` resolves on npm 11. The peers stay optional. The range matches `1.0.0` prereleases and stable 1.x below `2.0.0`. ```bash npm install @arkenv/nuxt @arkenv/[email protected] @arkenv/[email protected] ``` ```json { "peerDependencies": { "@arkenv/core": "^1.0.0-0", "@arkenv/standard": "^1.0.0-0" }, "peerDependenciesMeta": { "@arkenv/core": { "optional": true }, "@arkenv/standard": { "optional": true } } } ``` ## @arkenv/[email protected] ### Patch Changes - #### Include 1.0.0 prereleases in framework plugin core peers _[`#2069`](#2069) [`222d8e9`](222d8e9) [@yamcodes](https://github.com/yamcodes)_ Optional `@arkenv/core` and `@arkenv/standard` peers on the Next.js, Nuxt, Vite, Bun, and Rsbuild plugins now use `^1.0.0-0`. Installing a plugin together with `@arkenv/[email protected]` and `@arkenv/[email protected]` resolves on npm 11. The peers stay optional. The range matches `1.0.0` prereleases and stable 1.x below `2.0.0`. ```bash npm install @arkenv/nuxt @arkenv/[email protected] @arkenv/[email protected] ``` ```json { "peerDependencies": { "@arkenv/core": "^1.0.0-0", "@arkenv/standard": "^1.0.0-0" }, "peerDependenciesMeta": { "@arkenv/core": { "optional": true }, "@arkenv/standard": { "optional": true } } } ``` Co-authored-by: arkenv-bot[bot] <237618717+arkenv-bot[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/pin-dependencies branch 3 times, most recently from 12ace8b to 17565be Compare October 9, 2026 14:46

yamcodes mentioned this pull request Oct 9, 2026

ci: refresh nub.lock with nub install --lockfile-only #2053

Merged

yamcodes mentioned this pull request Oct 9, 2026

ci: let the lockfile refresh pass Nub's age gate #2059

Merged

renovate Bot force-pushed the renovate/pin-dependencies branch from b7e697a to ce877b6 Compare October 9, 2026 18:16

renovate Bot force-pushed the renovate/pin-dependencies branch from 0b39e4e to b69c1dc Compare October 9, 2026 19:12

fix(deps): pin dependencies

46da678

renovate Bot force-pushed the renovate/pin-dependencies branch from 36d90f8 to 46da678 Compare October 10, 2026 03:19

[autofix.ci] apply automated fixes

70b734c

cursoragent and others added 3 commits October 10, 2026 03:44

fix(ci): keep the dependency pin installable

5986a2a

Pin fumadocs-typescript to 5.4.1 so it stays compatible with fumadocs-core 16.15.14, and sync the Nuxt and SolidStart example manifests with the pinned playgrounds. Co-authored-by: Yam Borodetsky <[email protected]>

merge v1 into the dependency pin

c9e1ca5

Keep the Nuxt 4.6 hook fix and the fumadocs-typescript 5.4.1 pin on top of the chokidar and fumadocs-mdx updates. Co-authored-by: Yam Borodetsky <[email protected]>

github-actions Bot added docs Adds or changes documentation, or acts as documentation in and of itself github actions Pull requests that update GitHub Actions code example Issues or Pull Requests concerning at least one ArkEnv example. (Found in the `examples/` directory) labels Oct 10, 2026

yamcodes merged commit 17ff351 into v1 Oct 10, 2026
22 checks passed

yamcodes deleted the renovate/pin-dependencies branch October 10, 2026 03:54

arkenv-bot Bot mentioned this pull request Oct 10, 2026

Version Packages (rc) #2072

Merged

arkenv-bot Bot mentioned this pull request Oct 10, 2026

Version Packages (rc) #2077

Closed

Navigation Menu

Repository navigation

fix(deps): pin dependencies - #2040

fix(deps): pin dependencies#2040
yamcodes merged 5 commits into
v1from
renovate/pin-dependencies

renovate Bot commented Oct 8, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Oct 8, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Oct 9, 2026 •

edited

Loading

Uh oh!

arkenv-bot Bot commented Oct 9, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Oct 10, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

renovate Bot commented Oct 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Configuration

Uh oh!

changeset-bot Bot commented Oct 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

pkg-pr-new Bot commented Oct 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

arkenv-bot Bot commented Oct 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📦 Bundle Size Report

Uh oh!

renovate Bot commented Oct 10, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Oct 8, 2026 •

edited

Loading

changeset-bot Bot commented Oct 8, 2026 •

edited

Loading

pkg-pr-new Bot commented Oct 9, 2026 •

edited

Loading

arkenv-bot Bot commented Oct 9, 2026 •

edited

Loading